last executing test programs: 11.663088951s ago: executing program 2 (id=3138): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r2}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x3, &(0x7f0000000000)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) 11.590478273s ago: executing program 2 (id=3140): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="00ffff000500"/18, @ANYRES32=0x0, @ANYRES32], 0x48) r3 = openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$selinux_user(r3, &(0x7f0000000040)=ANY=[@ANYBLOB="73797374656d5f753a6f626a6563745f723a617574685f63616368655f742095a167c867d8f91b"], 0x27) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0xc044) r4 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) statx(r4, &(0x7f00000001c0)='./cgroup/../file0\x00', 0x0, 0x8, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES64=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r5}, 0x10) r6 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$USBDEVFS_CONTROL(r6, 0xc0105500, &(0x7f0000000140)={0x80, 0x6, 0x303, 0xfffd, 0x13, 0x0, 0x0}) bind$netlink(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x8042, 0x0) fcntl$setlease(r7, 0x400, 0x1) fcntl$getflags(r7, 0x401) 11.383924267s ago: executing program 1 (id=3142): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000060000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x10000000, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe, 0xd}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x0) 10.996385524s ago: executing program 1 (id=3145): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x88, &(0x7f0000000140)={[{@nogrpid}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@errors_remount}, {@nodiscard}, {@quota}]}, 0x3, 0x438, &(0x7f0000000580)="$eJzs289rHFUcAPDv7GZT01+Jpf5oWjVaxeCPpElr7cGLouBBQdBDPcYkLbHbRpoItgSNIvUoBe/iUfAv8KQXUU8Fr3oXoUgurZ5WZncm2d1sfnaTrd3PByb5vpm3vPfNzNt9My8bQNcaSn8kEfsj4veI6K8VGysM1X7dXlqY/GdpYTKJSuXtv5NqvVtLC5N51fx1+/JCT0Th8ySOtmh37srVCxPl8vTlrDw6f/GD0bkrV5+fuThxfvr89KXxM2dOnRx78fT4C23JM83r1uDHs8eOvP7u9Tcnz15/75fvkjz/pjzaZGi9g09VKm1urrMO1MVJTwc7wpYUa8M0StXx3x/FWDl5/fHaZx3tHLCjKpVK5cG1Dy9WgHtYEp3uAdAZ+Qd9ev+bb7s09bgr3Hy5dgOU5n0722pHeqKQ1Sk13d+201BEnF389+t0i515DgEA0OCHdP7zXKv5XyHqnwsdzNZQBiLi/og4FBGnI+JwRDwQUa37UEQ8vMX2mxdJVs9/Dm4rr81K538vZWtbjfO/fPYXA8WsdKCafyk5N1OePpH1bDhKe9Ly2Dpt/Pjqb1+2PJA1kc//0i1tP58LZpX+6tnT+LKpifmJO8m53s1PIwZ7WuWfLK8EJBFxJCIGt9nGzDPfHlvr2NCG+a+jDetMlW8inq6d/8Voyj+XrL8+OXpflKdPjOZXxWq/3rj21lrt31H+bZCe/70tr//l/AeS+vXaua23ce2PL9a8p9k4/9bXf2/yTsO+jybm5y+PRfQmb9Q6Xb9/vKne+Er9NP/h463H/6FY+UscjYj0In4kIh6NiMeyvj8eEU9ExPHVqd3ozYKfX3ny/WpQ2k7+OyvNf2pL538l6I3mPa2D4oWfvm9odGAr+afn/1Q1Gs72bOb9bzP92t7VDAAAAP8/hYjYH0lhZDkuFEZGav/Dfzj2Fsqzc/PPnpv98NJU7TsCA1Eq5E+6+uueh45lt/V5ebypfDJ7bvxVsa9aHpmcLU91OnnocvvWGP+pP4ud7h2w43xfC7qX8Q/dy/iH7mX8Q/dqMf77OtEPYPe1+vz/pAP9AHZf0/i37AddxP0/dC/jH7qX8Q9daa4vNv6SvECwKojCXdENwQ4FnX5nAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAaI//AgAA//9Lr+a0") r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000fa540000850000008200000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0xa, 0x300) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x6, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f271a76d2608064c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x300}, 0x48) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xe, 0xb}}}, 0x24}}, 0x800) ioctl$FIBMAP(r1, 0x1, &(0x7f0000000400)=0x491b) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') lseek(r6, 0x10001, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000030000000"], 0x0}, 0x94) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r8 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) ioctl$USBDEVFS_ALLOW_SUSPEND(r8, 0x5522) ioctl$USBDEVFS_SETCONFIGURATION(r8, 0x80045505, &(0x7f0000000000)=0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, &(0x7f0000000300)={0x0, 0x0, 0x0, 'queue1\x00'}) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000027"], 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8ab8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r10}, 0x10) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r7, 0x408c5333, &(0x7f0000000580)={0x0, 0x0, 0x0, 'queue0\x00'}) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000100)='kmem_cache_free\x00', r11}, 0x18) getsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000003c0), 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYRES64=r1], 0x50) 10.68724774s ago: executing program 1 (id=3150): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x88, &(0x7f0000000140)={[{@nogrpid}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@errors_remount}, {@nodiscard}, {@quota}]}, 0x3, 0x438, &(0x7f0000000580)="$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") r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00"/11], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000fa540000850000008200000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0xa, 0x300) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x6, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f271a76d2608064c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x300}, 0x48) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xe, 0xb}}}, 0x24}}, 0x800) ioctl$FIBMAP(r1, 0x1, &(0x7f0000000400)=0x491b) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') lseek(r6, 0x10001, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000030000000"], 0x0}, 0x94) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r8 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) ioctl$USBDEVFS_ALLOW_SUSPEND(r8, 0x5522) ioctl$USBDEVFS_SETCONFIGURATION(r8, 0x80045505, &(0x7f0000000000)=0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, &(0x7f0000000300)={0x0, 0x0, 0x0, 'queue1\x00'}) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000027"], 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8ab8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r10}, 0x10) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r7, 0x408c5333, &(0x7f0000000580)={0x0, 0x0, 0x0, 'queue0\x00'}) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000100)='kmem_cache_free\x00', r11}, 0x18) getsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000003c0), 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYRES64=r1], 0x50) 10.464621125s ago: executing program 1 (id=3155): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="00ffff000500"/18, @ANYRES32=0x0, @ANYRES32], 0x48) r3 = openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$selinux_user(r3, &(0x7f0000000040)=ANY=[@ANYBLOB="73797374656d5f753a6f626a6563745f723a617574685f63616368655f742095a167c867d8f91b"], 0x27) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0xc044) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES64=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$USBDEVFS_CONTROL(r4, 0xc0105500, &(0x7f0000000140)={0x80, 0x6, 0x303, 0xfffd, 0x13, 0x0, 0x0}) 6.406815525s ago: executing program 2 (id=3183): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000480)={{r3, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000180)='%pK \x00'}, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r5 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioctl$BTRFS_IOC_INO_LOOKUP(r4, 0xd0009412, &(0x7f0000001040)={0x0, 0x6}) sched_setscheduler(r5, 0x2, &(0x7f00000005c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) ioctl$BINDER_FREEZE(0xffffffffffffffff, 0x400c620e, &(0x7f0000000280)={0x0, 0x1, 0x10000}) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000d8d60b007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4b, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r8}, 0x10) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, 0x0, 0xfe44, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="280000001400090a0000000000000000021f4800", @ANYRES32=r2, @ANYBLOB="08000200e4d4c21e080008004c06"], 0x28}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x1000000, 0x0, {0x0, 0x0, 0x74, r2}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x3000000, &(0x7f0000000080), 0x1, 0x533, &(0x7f0000000b00)="$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") 5.495609462s ago: executing program 2 (id=3194): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="00ffff000500"/18, @ANYRES32=0x0, @ANYRES32], 0x48) r3 = openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$selinux_user(r3, &(0x7f0000000040)=ANY=[@ANYBLOB="73797374656d5f753a6f626a6563745f723a617574685f63616368655f742095a167c867d8f91b"], 0x27) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0xc044) r4 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) statx(r4, &(0x7f00000001c0)='./cgroup/../file0\x00', 0x0, 0x8, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES64=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r5}, 0x10) r6 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$USBDEVFS_CONTROL(r6, 0xc0105500, &(0x7f0000000140)={0x80, 0x6, 0x303, 0xfffd, 0x13, 0x0, 0x0}) bind$netlink(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x8042, 0x0) fcntl$setlease(r7, 0x400, 0x1) fcntl$getflags(r7, 0x401) 4.811135236s ago: executing program 4 (id=3207): pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = gettid() tkill(r3, 0x7) r4 = msgget$private(0x0, 0xfffffffffffffffd) msgrcv(r4, 0x0, 0x0, 0x1, 0x3000) msgrcv(r4, 0x0, 0x0, 0x1, 0x0) msgsnd(r4, &(0x7f0000000000)=ANY=[@ANYBLOB="01005dd9"], 0x8, 0x0) msgrcv(r4, &(0x7f0000000140)={0x0, ""/140}, 0x94, 0x2, 0x1000) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000080)=0xc) getresuid(&(0x7f0000000180)=0x0, &(0x7f0000000200), 0x0) msgctl$IPC_SET(r4, 0x1, &(0x7f0000000680)={{0x3, r5, 0x0, r6, 0x0, 0x80, 0x8}, 0x0, 0x0, 0x0, 0x19, 0x5, 0x2bde, 0xffffffffffffff27, 0xc7, 0x2, 0x9}) newfstatat(0xffffffffffffff9c, &(0x7f0000000680)='./file0\x00', &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400) r8 = socket$unix(0x1, 0x5, 0x0) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000002680)=0xc) setresuid(0x0, r9, r9) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f00000005c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000000640)=[{&(0x7f0000000400)="9fef33c2ab526de3fb2e03b25da3aedf326b014903307c33173e7d49105ff74421", 0x21}], 0x1, &(0x7f00000007c0)=[@rights={{0x14, 0x1, 0x1, [r2]}}, @cred={{0x1c, 0x1, 0x2, {r3, r6, r7}}}, @cred={{0x1c, 0x1, 0x2, {0x0, r9}}}], 0x58, 0x20000040}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',access=', @ANYRESDEC=0x0, @ANYBLOB="2c657569f906", @ANYRESDEC=r6, @ANYBLOB=',appraise,\x00']) 3.953395133s ago: executing program 4 (id=3215): socketpair(0x1, 0x2, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x7, 0x4, 0x8, 0xd9}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0x11, 0x8, &(0x7f0000001480)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r2, 0x0, 0xfffffffffffffffc}, 0x18) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x18, 0x7, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000e50003000000000085100000fcffffff250000001000000006000000faff"], &(0x7f0000000140)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000}, 0x94) 3.765996617s ago: executing program 4 (id=3218): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161281, 0x0) write$binfmt_aout(r3, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c812e5d6000"}) r4 = syz_open_pts(r3, 0x0) r5 = dup3(r4, r3, 0x0) ppoll(&(0x7f0000000140)=[{r3}], 0x1, 0x0, 0x0, 0x0) ioctl$TCSETSF(r4, 0x5404, &(0x7f0000000180)={0xd, 0x8, 0xfffffffc, 0xb6b, 0x4, "aa00003986b9ee6bd231334c1a280d7ea400"}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x18) recvmsg$unix(r0, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x40000102) ioctl$USBDEVFS_FREE_STREAMS(r5, 0x8008551d, &(0x7f00000001c0)={0xdec0, 0x16, [{0x5, 0x1}, {0x8}, {0xe}, {0x1, 0x1}, {0x3, 0x1}, {0xe, 0x1}, {0x9, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0xf, 0x1}, {0xd, 0x1}, {0x5}, {0x2}, {0xb, 0x1}, {0x9, 0x1}, {0xa}, {0xd, 0x1}, {0x7, 0x1}, {0x8, 0x1}, {0x6, 0x1}, {0x5}]}) sendmsg$inet(r1, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) socket$netlink(0x10, 0x3, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) clock_getres(0x2, 0x0) epoll_create(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x50) ioperm(0x7ffb, 0x8, 0x4) gettid() 2.317256025s ago: executing program 4 (id=3229): listen(0xffffffffffffffff, 0x6c6) r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000200)="580000001400192340834b80040d8c560a0637bc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd000000100001000c081000418e224e0004fcff", 0x58}], 0x1) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180200000000000000000000000000001801000020646c4300000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000850000000700000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r4}, 0x10) read(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0xe, 0x4, 0x4, 0x20002, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x48) r5 = gettid() tkill(r5, 0x7) r6 = msgget$private(0x0, 0xfffffffffffffffd) msgrcv(r6, 0x0, 0x0, 0x1, 0x3000) msgrcv(r6, 0x0, 0x0, 0x1, 0x0) msgsnd(r6, &(0x7f0000000000)=ANY=[@ANYBLOB="01005dd9"], 0x8, 0x0) msgrcv(r6, &(0x7f0000000140)={0x0, ""/140}, 0x94, 0x2, 0x1000) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000080)=0xc) getresuid(&(0x7f0000000180)=0x0, &(0x7f0000000200), 0x0) msgctl$IPC_SET(r6, 0x1, &(0x7f0000000680)={{0x3, r7, 0x0, r8, 0x0, 0x80, 0x8}, 0x0, 0x0, 0x0, 0x19, 0x5, 0x2bde, 0xffffffffffffff27, 0xc7, 0x2, 0x9}) newfstatat(0xffffffffffffff9c, &(0x7f0000000680)='./file0\x00', &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400) r10 = socket$unix(0x1, 0x5, 0x0) getsockopt$sock_cred(r10, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000002680)=0xc) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f00000005c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000000640)=[{&(0x7f0000000400)="9fef33c2ab526de3fb2e03b25da3aedf326b014903307c33173e7d49105ff74421", 0x21}], 0x1, &(0x7f00000007c0)=[@rights={{0x14, 0x1, 0x1, [r3]}}, @cred={{0x1c, 0x1, 0x2, {r5, r8, r9}}}, @cred={{0x1c, 0x1, 0x2, {0x0, r11}}}], 0x58, 0x20000040}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',access=', @ANYRESDEC=0x0, @ANYBLOB="2c657569f906", @ANYRESDEC=r8, @ANYBLOB=',appraise,\x00']) 2.178334338s ago: executing program 3 (id=3230): r0 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000), 0x80c02, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x48) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x2c, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r3}, 0x18) write$cgroup_int(r0, 0x0, 0x2) 2.130030128s ago: executing program 3 (id=3231): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="18010000008000000000000000000004850000006d00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000380)='kfree\x00', r0}, 0x18) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/power/wakeup_count', 0x141000, 0x20) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x0, 0x0, @loopback, 0x7ff}], 0x2c) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback, 0x5}, 0x1c) socket(0x1, 0x1, 0x0) 2.019996291s ago: executing program 3 (id=3232): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="070000000400000008020000d900000000000000", @ANYRES32, @ANYBLOB="00000000000000000000df000000000000000000c8ddbddb42907ded76ad9520ed97db537dbfdf518cbbf1d4dea92d17082f60a35ab5ea2a7ea52dfa8528da07ba9444e4969acbcfa62e147bf5b21a624e333e11de505daab2ddd727db3b95fc2c8702e6f5901cdc39b0030898", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000400018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b7000000000000009500000000000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r1}, 0x18) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x34, 0x3, 0xffffffffffffffff, 0x0, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000000240)=[{0x0}], 0x1}, 0x0, 0x40000000, 0x1}) r2 = syz_io_uring_setup(0x74d, &(0x7f0000000100)={0x0, 0x59c4, 0x8, 0x1000, 0x5cc}, &(0x7f0000000300)=0x0, &(0x7f0000000080)=0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='kfree\x00', r6}, 0x9) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f0000000740)=[{&(0x7f00000003c0)=""/201, 0xc9}], 0x1) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000200)=[{0x30, 0x4, 0x0, 0x2}]}, 0xffffffffffffff0e) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_ACCEPT={0xd, 0xc, 0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x81800, 0x1}) io_uring_enter(r2, 0x749f, 0x4, 0x0, 0x0, 0xfffffffffffffef5) 1.636990908s ago: executing program 3 (id=3233): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r0}, 0x10) socket(0x10, 0x2, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) r2 = getpid() syz_pidfd_open(r2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) socket$inet6_sctp(0xa, 0x1, 0x84) syz_open_dev$sg(0x0, 0x0, 0x48802) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r5, &(0x7f0000000340)={0xa, 0x3, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffffffe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x304}, "a6341a1a379332f5", "313c09de00fd6d007400", "62266bd8", "1e00040000000100"}, 0x28) 1.233951346s ago: executing program 4 (id=3236): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r0}, 0x10) socket(0x10, 0x2, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) r2 = getpid() syz_pidfd_open(r2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) socket$inet6_sctp(0xa, 0x1, 0x84) syz_open_dev$sg(0x0, 0x0, 0x48802) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) syz_clone(0x40000080, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) move_mount(0xffffffffffffffff, &(0x7f0000003900)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffffff, 0x0, 0x44) connect$inet6(r6, &(0x7f0000000340)={0xa, 0x3, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffffffe}, 0x1c) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x304}, "a6341a1a379332f5", "313c09de00fd6d007400", "62266bd8", "1e00040000000100"}, 0x28) 595.347589ms ago: executing program 3 (id=3241): openat$selinux_attr(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) openat$rfkill(0xffffffffffffff9c, 0x0, 0x40900, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x1}, 0x50) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x5400, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x50, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @sit={{0x8}, {0x24, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x11}}, @IFLA_IPTUN_6RD_RELAY_PREFIX={0x8, 0xc, 0x8}, @IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x2}, @IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x3}]}}}]}, 0x50}}, 0x0) socket$igmp6(0xa, 0x3, 0x3a) bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00'}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) close(0xffffffffffffffff) socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000001c0)='F', 0x1}], 0x1, &(0x7f00000000c0)=[@sndinfo={0x20, 0x84, 0x2, {0xa, 0x4, 0x28, 0x200000b}}], 0x20, 0x2400e044}, 0x80) socket$nl_netfilter(0x10, 0x3, 0xc) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) 398.826653ms ago: executing program 0 (id=3242): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1000000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a80)={{r4}, &(0x7f00000000c0), &(0x7f0000000400)=r3}, 0x20) ioctl$BLKRAGET(r3, 0x1263, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_FILES(r3, 0x2, &(0x7f0000000340)=[r2, r1, r1], 0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1e, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_lookup, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4f, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r5}, 0x18) syz_emit_ethernet(0x316, &(0x7f0000000740)={@local, @broadcast, @void, {@llc_tr={0x11, {@snap={0xaa, 0xaa, 't', "76e6ad", 0x1, "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"}}}}}, 0x0) syz_open_procfs(0x0, &(0x7f0000000180)='net/tcp6\x00') bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x8, 0x0, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r6}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r7}, 0x10) r8 = socket(0x10, 0x3, 0x0) connect$netlink(r8, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="0200000004"], 0x50) socket$key(0xf, 0x3, 0x2) 368.961653ms ago: executing program 0 (id=3243): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='mm_lru_insertion\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r2, &(0x7f0000000180), 0x40010) 318.307124ms ago: executing program 3 (id=3244): io_setup(0x5, &(0x7f0000000240)) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f0000000100), 0xff, 0x4a1, &(0x7f00000004c0)="$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") r0 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='xdp_exception\x00', r2}, 0x10) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x6, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000fdffffee0000000000000000850000002c00000095"], &(0x7f0000000040)='GPL\x00', 0x5, 0xbf, &(0x7f00000020c0)=""/191}, 0x80) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r4, r5}, 0x40) syz_emit_ethernet(0xd4c, &(0x7f0000003000)={@broadcast, @random, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xd3e, 0x64, 0x0, 0x0, 0x29, 0x0, @loopback, @multicast1}, {0x0, 0x0, 0xd2a, 0x0, @opaque="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"}}}}}, 0x0) pwrite64(r1, &(0x7f0000000000)='2', 0x1, 0x4fed0) pwrite64(0xffffffffffffffff, &(0x7f0000000140)='2', 0x1, 0x8000c61) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000a00), r1) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f0000001ec0)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001e80)={&(0x7f0000000a40)=ANY=[@ANYBLOB="10140000", @ANYRES16=r8, @ANYBLOB="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"], 0x1410}, 0x1, 0x0, 0x0, 0x800}, 0x4) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r9) sendmsg$NL80211_CMD_SET_WDS_PEER(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x50, r10, 0x300, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x9, 0x42}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_MAC={0xa}]}, 0x50}, 0x1, 0x0, 0x0, 0x4004}, 0x20048040) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@newtfilter={0x24, 0x11, 0x1, 0x691522ec, 0x0, {0x0, 0x0, 0x74, r7, {0x2, 0xf}, {}, {0x5, 0x7}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) r12 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000001f00)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xba, 0xba, 0x7, [@enum={0x3, 0x2, 0x0, 0x6, 0x4, [{0x2, 0x4f}, {0x10, 0x4}]}, @restrict={0x1}, @enum64={0x3, 0x3, 0x0, 0x13, 0x1, 0x8, [{0x4, 0x80, 0x400}, {0x6, 0x4, 0x10000}, {0x9, 0x1, 0x3}]}, @union={0x0, 0x5, 0x0, 0x5, 0x1, 0x4bb, [{0x1}, {0x9, 0x5, 0x2}, {0xa, 0x3, 0x752c21de}, {0xd, 0x4, 0x9}, {0x4, 0x2, 0x4}]}, @datasec={0x8, 0x1, 0x0, 0xf, 0x2, [{0x4, 0x8ac}], "3a15"}]}, {0x0, [0x61, 0x30, 0x5f, 0x61, 0x5f]}}, &(0x7f00000001c0)=""/67, 0xdb, 0x43, 0x1, 0x7}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x1e, 0x2ac0000, 0xee, 0x1, 0x40004, 0xffffffffffffffff, 0xb1, '\x00', r7, r12, 0x3, 0x3, 0x2}, 0x50) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0x40305829, &(0x7f0000000240)={0x17c04, 0xffffffffffffffff, 0x9, 0x100100001, 0xfffffffffffffffc}) inotify_init() eventfd2(0x8, 0x1) 298.426425ms ago: executing program 4 (id=3245): listen(0xffffffffffffffff, 0x6c6) r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000200)="580000001400192340834b80040d8c560a0637bc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd000000100001000c081000418e224e0004fcff", 0x58}], 0x1) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180200000000000000000000000000001801000020646c4300000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000850000000700000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r4}, 0x10) read(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0xe, 0x4, 0x4, 0x20002, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x48) r5 = gettid() tkill(r5, 0x7) r6 = msgget$private(0x0, 0xfffffffffffffffd) msgrcv(r6, 0x0, 0x0, 0x1, 0x3000) msgrcv(r6, 0x0, 0x0, 0x1, 0x0) msgsnd(r6, &(0x7f0000000000)=ANY=[@ANYBLOB="01005dd9"], 0x8, 0x0) msgrcv(r6, &(0x7f0000000140)={0x0, ""/140}, 0x94, 0x2, 0x1000) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000080)=0xc) getresuid(&(0x7f0000000180)=0x0, &(0x7f0000000200), 0x0) msgctl$IPC_SET(r6, 0x1, &(0x7f0000000680)={{0x3, r7, 0x0, r8, 0x0, 0x80, 0x8}, 0x0, 0x0, 0x0, 0x19, 0x5, 0x2bde, 0xffffffffffffff27, 0xc7, 0x2, 0x9}) newfstatat(0xffffffffffffff9c, &(0x7f0000000680)='./file0\x00', &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400) r10 = socket$unix(0x1, 0x5, 0x0) getsockopt$sock_cred(r10, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000002680)=0xc) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f00000005c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000000640)=[{&(0x7f0000000400)="9fef33c2ab526de3fb2e03b25da3aedf326b014903307c33173e7d49105ff74421", 0x21}], 0x1, &(0x7f00000007c0)=[@rights={{0x14, 0x1, 0x1, [r3]}}, @cred={{0x1c, 0x1, 0x2, {r5, r8, r9}}}, @cred={{0x1c, 0x1, 0x2, {0x0, r11}}}], 0x58, 0x20000040}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',access=', @ANYRESDEC=0x0, @ANYBLOB="2c657569f906", @ANYRESDEC=r8, @ANYBLOB=',appraise,\x00']) 257.738126ms ago: executing program 0 (id=3246): r0 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000), 0x80c02, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e0000000000000005000000"], 0x48) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x2c, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r3}, 0x18) write$cgroup_int(r0, 0x0, 0x2) 191.590496ms ago: executing program 0 (id=3247): openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000), 0x80c02, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00}, 0x94) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000000c0)='kfree\x00', r2, 0x0, 0xfffffffffffffffd}, 0x18) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000900)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x6c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x3f}, @NFTA_SET_EXPRESSIONS={0x28, 0x12, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x4}}}, {0x10, 0x1, 0x0, 0x1, @counter={{0xc}, @void}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x110}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xb4}, 0x1, 0x0, 0x0, 0x8000}, 0x20050800) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00'}, 0x18) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x8}}, @NFT_MSG_NEWSETELEM={0x24, 0xc, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x8}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x80}}, 0x0) 191.289207ms ago: executing program 2 (id=3248): unshare(0x8040480) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0200000004000000040000000800000014100000", @ANYRES32, @ANYBLOB="008000000000000000000000000000000000000034b3c16fc7ead7d4355166bbff9624600260b72ff22d3df794856ea1e1e96c1ba14c4cad4281c9f98eecba07b4e0603991c8af1bc8f732cbcf2713a37c25d9cceef0774907a9ee5e79454ed2a7c08655d89dee868ee895c3d7a5316c5bab3cb4903f9c386d2f97635715906661ad57ef236600e1f33bbd7ac5d2f02619b06d7a9d05c60d08fb53d4d99a2ea2542c0c78d00002d874a5c97222b58bbc0e1833f08e6d5d71f96e978709", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0xc, 0x4, 0x4, 0x7, 0x0, r0}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) socket$inet(0x2, 0x4000000000000001, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0100000004000000e27f000001"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = syz_open_dev$usbfs(&(0x7f00000000c0), 0xb, 0x82) r4 = dup(r3) ioctl$USBDEVFS_CONTROL(r4, 0xc0185500, &(0x7f0000000080)={0x23, 0x3, 0x93, 0x2000, 0x0, 0x0, 0x0}) 143.385888ms ago: executing program 0 (id=3249): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="18010000008000000000000000000004850000006d00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x0, 0x0, @loopback, 0x7ff}], 0x2c) sendto$inet6(r0, &(0x7f0000000000)='\x00', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback, 0x5}, 0x1c) socket(0x1, 0x1, 0x0) 127.124238ms ago: executing program 1 (id=3206): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x18, 0x7, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000e50003000000000085100000fcffffff250000001000000006000000faffffff95"], &(0x7f0000000140)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r3}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) 110.259378ms ago: executing program 2 (id=3250): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r0}, 0x10) socket(0x10, 0x2, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) r2 = getpid() syz_pidfd_open(r2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) socket$inet6_sctp(0xa, 0x1, 0x84) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r6, &(0x7f0000000340)={0xa, 0x3, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffffffe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x304}, "a6341a1a379332f5", "313c09de00fd6d007400", "62266bd8", "1e00040000000100"}, 0x28) 84.998159ms ago: executing program 0 (id=3251): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161281, 0x0) write$binfmt_aout(r3, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c812e5d6000"}) r4 = syz_open_pts(r3, 0x0) r5 = dup3(r4, r3, 0x0) ppoll(&(0x7f0000000140)=[{r3}], 0x1, 0x0, 0x0, 0x0) ioctl$TCSETSF(r4, 0x5404, &(0x7f0000000180)={0xd, 0x8, 0xfffffffc, 0xb6b, 0x4, "aa00003986b9ee6bd231334c1a280d7ea400"}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x18) recvmsg$unix(r0, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x40000102) ioctl$USBDEVFS_FREE_STREAMS(r5, 0x8008551d, &(0x7f00000001c0)={0xdec0, 0x16, [{0x5, 0x1}, {0x8}, {0xe}, {0x1, 0x1}, {0x3, 0x1}, {0xe, 0x1}, {0x9, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0xf, 0x1}, {0xd, 0x1}, {0x5}, {0x2}, {0xb, 0x1}, {0x9, 0x1}, {0xa}, {0xd, 0x1}, {0x7, 0x1}, {0x8, 0x1}, {0x6, 0x1}, {0x5}]}) sendmsg$inet(r1, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) socket$netlink(0x10, 0x3, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) clock_getres(0x2, 0x0) epoll_create(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x50) ioperm(0x7ffb, 0x8, 0x4) gettid() 0s ago: executing program 1 (id=3252): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, 0x0, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161281, 0x0) write$binfmt_aout(r1, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c812e5d6000"}) r2 = syz_open_pts(r1, 0x0) ioctl$TCSETSF(r2, 0x5404, &(0x7f0000000180)={0xd, 0x8, 0xfffffffc, 0xb6b, 0x4, "aa00003986b9ee6bd231334c1a280d7ea400"}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18) recvmsg$unix(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x40000102) ioctl$USBDEVFS_FREE_STREAMS(0xffffffffffffffff, 0x8008551d, &(0x7f00000001c0)={0xdec0, 0x16, [{0x5, 0x1}, {0x8}, {0xe}, {0x1, 0x1}, {0x3, 0x1}, {0xe, 0x1}, {0x9, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0xf, 0x1}, {0xd, 0x1}, {0x5}, {0x2}, {0xb, 0x1}, {0x9, 0x1}, {0xa}, {0xd, 0x1}, {0x7, 0x1}, {0x8, 0x1}, {0x6, 0x1}, {0x5}]}) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) clock_getres(0x2, 0x0) epoll_create(0x3) ioperm(0x7ffb, 0x8, 0x4) gettid() kernel console output (not intermixed with test programs): file system using the ext4 subsystem [ 158.175785][T10500] loop1: detected capacity change from 0 to 512 [ 158.242663][T10498] EXT4-fs (loop3): 1 truncate cleaned up [ 158.274549][T10500] EXT4-fs (loop1): 1 orphan inode deleted [ 158.282081][T10500] ext4 filesystem being mounted at /465/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 158.516252][T10505] tipc: Started in network mode [ 158.521296][T10505] tipc: Node identity 4, cluster identity 4711 [ 158.527488][T10505] tipc: Node number set to 4 [ 158.694028][T10521] 9pnet_fd: Insufficient options for proto=fd [ 158.807090][T10531] loop1: detected capacity change from 0 to 1024 [ 158.839266][T10531] EXT4-fs error (device loop1): mb_free_blocks:2017: group 0, inode 18: block 177:freeing already freed block (bit 11); block bitmap corrupt. [ 158.961486][T10539] loop1: detected capacity change from 0 to 512 [ 158.968885][T10539] EXT4-fs: Ignoring removed orlov option [ 158.975267][T10539] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 158.985051][T10539] EXT4-fs (loop1): 1 truncate cleaned up [ 159.119536][ T29] kauditd_printk_skb: 701 callbacks suppressed [ 159.119553][ T29] audit: type=1326 audit(1757018242.189:15188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10510 comm="syz.3.2443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f3ef52b5ba7 code=0x7ffc0000 [ 159.149505][ T29] audit: type=1326 audit(1757018242.209:15189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10510 comm="syz.3.2443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f3ef525adb9 code=0x7ffc0000 [ 159.173046][ T29] audit: type=1326 audit(1757018242.209:15190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10510 comm="syz.3.2443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ef52bebe9 code=0x7ffc0000 [ 159.196872][ T29] audit: type=1326 audit(1757018242.229:15191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10510 comm="syz.3.2443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f3ef52b5ba7 code=0x7ffc0000 [ 159.220557][ T29] audit: type=1326 audit(1757018242.229:15192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10510 comm="syz.3.2443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f3ef525adb9 code=0x7ffc0000 [ 159.244135][ T29] audit: type=1326 audit(1757018242.229:15193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10510 comm="syz.3.2443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f3ef52b5ba7 code=0x7ffc0000 [ 159.267681][ T29] audit: type=1326 audit(1757018242.229:15194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10510 comm="syz.3.2443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f3ef525adb9 code=0x7ffc0000 [ 159.291673][ T29] audit: type=1326 audit(1757018242.229:15195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10510 comm="syz.3.2443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ef52bebe9 code=0x7ffc0000 [ 159.315273][ T29] audit: type=1326 audit(1757018242.229:15196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10510 comm="syz.3.2443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f3ef52b5ba7 code=0x7ffc0000 [ 159.338910][ T29] audit: type=1326 audit(1757018242.229:15197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10510 comm="syz.3.2443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f3ef525adb9 code=0x7ffc0000 [ 159.380967][T10554] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 159.490325][T10564] loop0: detected capacity change from 0 to 1024 [ 159.497585][T10564] EXT4-fs: Ignoring removed nomblk_io_submit option [ 159.560313][T10573] loop0: detected capacity change from 0 to 512 [ 159.567341][T10573] EXT4-fs: Ignoring removed orlov option [ 159.573602][T10573] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 159.583281][T10573] EXT4-fs (loop0): 1 truncate cleaned up [ 159.688901][T10578] __nla_validate_parse: 7 callbacks suppressed [ 159.688921][T10578] netlink: 120 bytes leftover after parsing attributes in process `syz.3.2466'. [ 159.704473][T10578] netlink: 120 bytes leftover after parsing attributes in process `syz.3.2466'. [ 159.968969][T10599] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2470'. [ 160.077862][T10601] loop3: detected capacity change from 0 to 2048 [ 160.139273][T10601] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.2472: bg 0: block 120: padding at end of block bitmap is not set [ 160.461683][T10615] loop2: detected capacity change from 0 to 512 [ 160.469128][T10615] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 160.478655][T10617] loop3: detected capacity change from 0 to 256 [ 160.484804][T10615] EXT4-fs (loop2): 1 truncate cleaned up [ 160.485552][T10617] tmpfs: Unknown parameter 'shortname' [ 160.551225][T10624] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2478'. [ 160.568089][T10624] usb usb1: usbfs: interface 0 claimed by hub while 'syz.2.2478' sets config #1 [ 160.688609][T10636] loop3: detected capacity change from 0 to 2048 [ 160.732007][T10636] loop3: p1 < > p4 [ 160.736484][T10636] loop3: p4 size 8388608 extends beyond EOD, truncated [ 160.747753][ T3317] EXT4-fs unmount: 59 callbacks suppressed [ 160.747767][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 160.842045][T10643] 9pnet_fd: Insufficient options for proto=fd [ 160.886680][T10648] loop2: detected capacity change from 0 to 128 [ 160.913436][T10648] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 160.935048][T10648] ext4 filesystem being mounted at /500/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 160.978966][T10653] syz!: rxe_newlink: already configured on team_slave_0 [ 161.010494][T10654] bridge_slave_0: left allmulticast mode [ 161.016381][T10654] bridge_slave_0: left promiscuous mode [ 161.022127][T10654] bridge0: port 1(bridge_slave_0) entered disabled state [ 161.050165][T10654] bridge_slave_1: left allmulticast mode [ 161.056171][T10654] bridge_slave_1: left promiscuous mode [ 161.062044][T10654] bridge0: port 2(bridge_slave_1) entered disabled state [ 161.096282][ T3317] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 161.106164][T10654] bond0: (slave bond_slave_0): Releasing backup interface [ 161.119736][T10666] netlink: 'syz.4.2498': attribute type 13 has an invalid length. [ 161.153287][T10654] bond0: (slave bond_slave_1): Releasing backup interface [ 161.163931][T10654] team0: Port device team_slave_0 removed [ 161.174270][T10654] team0: Port device team_slave_1 removed [ 161.193964][T10666] gretap0: refused to change device tx_queue_len [ 161.208024][T10666] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 161.312435][T10674] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2495'. [ 161.327586][T10674] loop0: detected capacity change from 0 to 512 [ 161.458125][T10674] EXT4-fs (loop0): 1 orphan inode deleted [ 161.464890][T10674] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 161.477650][T10674] ext4 filesystem being mounted at /465/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 161.934552][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.983456][T10702] loop0: detected capacity change from 0 to 512 [ 162.002220][T10702] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 162.035290][T10702] EXT4-fs (loop0): 1 truncate cleaned up [ 162.047533][T10702] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 162.221953][T10715] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2506'. [ 162.255145][T10716] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2510'. [ 162.263117][T10702] usb usb1: usbfs: interface 0 claimed by hub while 'syz.0.2506' sets config #1 [ 162.314120][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.413874][T10722] loop2: detected capacity change from 0 to 2048 [ 162.442245][T10722] loop2: p1 < > p4 [ 162.451379][T10722] loop2: p4 size 8388608 extends beyond EOD, truncated [ 162.517409][T10728] loop2: detected capacity change from 0 to 512 [ 162.532177][T10728] EXT4-fs: Ignoring removed orlov option [ 162.549432][T10728] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 162.565367][T10728] EXT4-fs (loop2): 1 truncate cleaned up [ 162.578910][T10728] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 162.661419][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.885933][T10743] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2517'. [ 162.901113][T10743] loop2: detected capacity change from 0 to 512 [ 163.004885][T10747] loop3: detected capacity change from 0 to 1024 [ 163.084748][T10751] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2521'. [ 163.205413][T10747] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 163.219222][T10743] EXT4-fs (loop2): 1 orphan inode deleted [ 163.225880][T10743] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 163.238579][T10743] ext4 filesystem being mounted at /505/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 163.266923][T10761] netlink: 'syz.1.2524': attribute type 13 has an invalid length. [ 163.276050][T10761] gretap0: refused to change device tx_queue_len [ 163.277066][T10747] EXT4-fs error (device loop3): mb_free_blocks:2017: group 0, inode 18: block 177:freeing already freed block (bit 11); block bitmap corrupt. [ 163.298326][T10761] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 163.331749][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.440432][T10778] loop3: detected capacity change from 0 to 1024 [ 163.455340][T10778] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 163.499248][T10778] EXT4-fs error (device loop3): mb_free_blocks:2017: group 0, inode 18: block 177:freeing already freed block (bit 11); block bitmap corrupt. [ 163.565060][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.595172][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.618911][T10791] loop3: detected capacity change from 0 to 1024 [ 163.646529][T10791] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 163.703008][T10791] EXT4-fs error (device loop3): mb_free_blocks:2017: group 0, inode 18: block 177:freeing already freed block (bit 11); block bitmap corrupt. [ 163.738301][T10803] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2540'. [ 163.747966][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.101285][T10815] loop3: detected capacity change from 0 to 512 [ 164.144573][T10815] EXT4-fs (loop3): 1 orphan inode deleted [ 164.151094][T10815] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 164.163828][T10815] ext4 filesystem being mounted at /478/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 164.227169][ T29] kauditd_printk_skb: 615 callbacks suppressed [ 164.227188][ T29] audit: type=1400 audit(1757018247.299:15813): avc: denied { mounton } for pid=10819 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 164.364302][ T31] bridge_slave_1: left allmulticast mode [ 164.370367][ T31] bridge_slave_1: left promiscuous mode [ 164.376279][ T31] bridge0: port 2(bridge_slave_1) entered disabled state [ 164.376292][T10826] loop0: detected capacity change from 0 to 512 [ 164.391844][ T31] bridge_slave_0: left promiscuous mode [ 164.398165][ T31] bridge0: port 1(bridge_slave_0) entered disabled state [ 164.407737][T10826] EXT4-fs error (device loop0): ext4_orphan_get:1392: inode #15: comm syz.0.2546: casefold flag without casefold feature [ 164.420937][T10826] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.2546: couldn't read orphan inode 15 (err -117) [ 164.453764][T10826] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 164.528095][T10826] hub 9-0:1.0: USB hub found [ 164.537257][T10826] hub 9-0:1.0: 8 ports detected [ 164.554488][ T31] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 164.567689][ T31] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 164.582457][T10837] loop2: detected capacity change from 0 to 512 [ 164.589263][ T31] bond0 (unregistering): Released all slaves [ 164.598916][T10837] EXT4-fs error (device loop2): ext4_orphan_get:1392: inode #15: comm syz.2.2550: casefold flag without casefold feature [ 164.612762][T10837] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.2550: couldn't read orphan inode 15 (err -117) [ 164.652115][T10837] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 164.689860][T10837] hub 9-0:1.0: USB hub found [ 164.702675][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.723207][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.732508][T10837] hub 9-0:1.0: 8 ports detected [ 164.752453][ T29] audit: type=1326 audit(1757018247.809:15814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10838 comm="syz.1.2545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32497eebe9 code=0x7ffc0000 [ 164.776143][ T29] audit: type=1326 audit(1757018247.809:15815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10838 comm="syz.1.2545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32497eebe9 code=0x7ffc0000 [ 164.799861][ T29] audit: type=1326 audit(1757018247.819:15816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10838 comm="syz.1.2545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f32497eebe9 code=0x7ffc0000 [ 164.834978][ T29] audit: type=1400 audit(1757018247.899:15817): avc: denied { setcheckreqprot } for pid=10852 comm="syz.3.2551" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 164.863943][ T31] hsr_slave_0: left promiscuous mode [ 164.877620][ T31] hsr_slave_1: left promiscuous mode [ 164.899370][ T29] audit: type=1326 audit(1757018247.969:15818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10838 comm="syz.1.2545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32497eebe9 code=0x7ffc0000 [ 164.923337][ T29] audit: type=1326 audit(1757018247.969:15819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10838 comm="syz.1.2545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32497eebe9 code=0x7ffc0000 [ 164.947785][ T31] pim6reg (unregistering): left allmulticast mode [ 164.952648][T10849] __nla_validate_parse: 2 callbacks suppressed [ 164.952668][T10849] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2550'. [ 164.967570][T10860] loop3: detected capacity change from 0 to 512 [ 164.991616][T10860] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 165.013561][T10860] EXT4-fs (loop3): 1 truncate cleaned up [ 165.020143][T10860] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 165.056201][T10819] chnl_net:caif_netlink_parms(): no params data found [ 165.114915][T10873] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2553'. [ 165.140127][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.160933][T10819] bridge0: port 1(bridge_slave_0) entered blocking state [ 165.168265][T10819] bridge0: port 1(bridge_slave_0) entered disabled state [ 165.187236][T10819] bridge_slave_0: entered allmulticast mode [ 165.200478][T10819] bridge_slave_0: entered promiscuous mode [ 165.214721][T10819] bridge0: port 2(bridge_slave_1) entered blocking state [ 165.221897][T10819] bridge0: port 2(bridge_slave_1) entered disabled state [ 165.232067][T10819] bridge_slave_1: entered allmulticast mode [ 165.239747][T10819] bridge_slave_1: entered promiscuous mode [ 165.254033][T10875] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2557'. [ 165.272215][T10819] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 165.282221][T10860] usb usb1: usbfs: interface 0 claimed by hub while 'syz.3.2553' sets config #1 [ 165.292895][T10819] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 165.316886][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.324303][T10882] loop0: detected capacity change from 0 to 1024 [ 165.365287][T10819] team0: Port device team_slave_0 added [ 165.372700][T10819] team0: Port device team_slave_1 added [ 165.372932][T10882] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 165.399919][T10819] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 165.406927][T10819] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 165.407112][T10890] loop2: detected capacity change from 0 to 512 [ 165.432965][T10819] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 165.442501][T10882] EXT4-fs error (device loop0): mb_free_blocks:2017: group 0, inode 18: block 177:freeing already freed block (bit 11); block bitmap corrupt. [ 165.450569][T10819] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 165.471473][T10819] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 165.497479][T10819] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 165.509069][T10890] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 165.524875][T10890] EXT4-fs (loop2): 1 truncate cleaned up [ 165.531113][T10890] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 165.549343][T10819] hsr_slave_0: entered promiscuous mode [ 165.558640][T10819] hsr_slave_1: entered promiscuous mode [ 165.577337][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.602879][T10898] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2562'. [ 165.611587][ T29] audit: type=1326 audit(1757018248.669:15820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10894 comm="syz.1.2564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32497eebe9 code=0x7ffc0000 [ 165.635597][ T29] audit: type=1326 audit(1757018248.669:15821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10894 comm="syz.1.2564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32497eebe9 code=0x7ffc0000 [ 165.678282][T10902] usb usb1: usbfs: interface 0 claimed by hub while 'syz.2.2562' sets config #1 [ 165.709567][ T29] audit: type=1326 audit(1757018248.729:15822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10894 comm="syz.1.2564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f32497eebe9 code=0x7ffc0000 [ 165.768059][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.791903][T10907] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2566'. [ 165.995249][T10819] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 166.024172][T10819] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 166.053604][T10819] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 166.076891][T10819] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 166.118558][T10819] bridge0: port 2(bridge_slave_1) entered blocking state [ 166.125678][T10819] bridge0: port 2(bridge_slave_1) entered forwarding state [ 166.163892][ T51] bridge0: port 2(bridge_slave_1) entered disabled state [ 166.222864][T10819] 8021q: adding VLAN 0 to HW filter on device bond0 [ 166.262268][T10819] 8021q: adding VLAN 0 to HW filter on device team0 [ 166.290631][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 166.297832][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 166.365793][ T173] bridge0: port 2(bridge_slave_1) entered blocking state [ 166.373328][ T173] bridge0: port 2(bridge_slave_1) entered forwarding state [ 166.473333][T10929] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 166.519375][T10819] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 166.594999][T10950] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2577'. [ 166.607195][T10945] loop2: detected capacity change from 0 to 2048 [ 166.673078][T10945] loop2: p1 < > p4 [ 166.677749][T10945] loop2: p4 size 8388608 extends beyond EOD, truncated [ 166.849756][T10819] veth0_vlan: entered promiscuous mode [ 166.872108][T10819] veth1_vlan: entered promiscuous mode [ 166.911181][T10819] veth0_macvtap: entered promiscuous mode [ 166.925442][T10819] veth1_macvtap: entered promiscuous mode [ 166.958521][T10974] loop2: detected capacity change from 0 to 1024 [ 166.975551][T10819] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 167.000477][T10819] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 167.022506][ T31] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.031314][ T31] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.041848][T10974] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 167.042024][ T31] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.075661][ T31] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.126701][T10974] EXT4-fs error (device loop2): mb_free_blocks:2017: group 0, inode 18: block 177:freeing already freed block (bit 11); block bitmap corrupt. [ 167.172521][T10981] 9pnet_fd: Insufficient options for proto=fd [ 167.204429][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.307591][T10993] loop2: detected capacity change from 0 to 128 [ 167.333512][T10993] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 167.351635][T10998] loop4: detected capacity change from 0 to 1024 [ 167.365132][T10998] EXT4-fs: Ignoring removed nobh option [ 167.372978][T10993] ext4 filesystem being mounted at /523/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 167.409335][T10998] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 167.455500][T10998] EXT4-fs warning (device loop4): ext4_rename_delete:3731: inode #12: comm syz.4.2592: Deleting old file: nlink 2, error=-2 [ 167.529249][T10819] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.682158][ T3317] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 167.921762][T11023] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2593'. [ 168.871744][T11029] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2596'. [ 168.989328][T11030] loop0: detected capacity change from 0 to 512 [ 169.003955][T11030] EXT4-fs (loop0): 1 orphan inode deleted [ 169.010752][T11030] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 169.023304][T11030] ext4 filesystem being mounted at /481/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 169.178787][T11028] loop2: detected capacity change from 0 to 1024 [ 169.204033][T11028] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 169.252574][T11028] EXT4-fs error (device loop2): mb_free_blocks:2017: group 0, inode 18: block 177:freeing already freed block (bit 11); block bitmap corrupt. [ 169.307019][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 169.412517][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 169.508497][T11063] loop2: detected capacity change from 0 to 1024 [ 169.530287][T11063] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 169.554235][T11063] EXT4-fs error (device loop2): mb_free_blocks:2017: group 0, inode 18: block 177:freeing already freed block (bit 11); block bitmap corrupt. [ 169.557362][ T29] kauditd_printk_skb: 448 callbacks suppressed [ 169.557381][ T29] audit: type=1326 audit(1757018252.629:16265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11069 comm="syz.1.2609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32497eebe9 code=0x7ffc0000 [ 169.598698][ T29] audit: type=1326 audit(1757018252.629:16266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11069 comm="syz.1.2609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32497eebe9 code=0x7ffc0000 [ 169.622610][ T29] audit: type=1326 audit(1757018252.629:16267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11069 comm="syz.1.2609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32497eebe9 code=0x7ffc0000 [ 169.646313][ T29] audit: type=1326 audit(1757018252.629:16268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11069 comm="syz.1.2609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f32497eebe9 code=0x7ffc0000 [ 169.670119][ T29] audit: type=1326 audit(1757018252.629:16269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11069 comm="syz.1.2609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32497eebe9 code=0x7ffc0000 [ 169.694001][ T29] audit: type=1326 audit(1757018252.629:16270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11069 comm="syz.1.2609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32497eebe9 code=0x7ffc0000 [ 169.717987][ T29] audit: type=1326 audit(1757018252.629:16271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11069 comm="syz.1.2609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32497eebe9 code=0x7ffc0000 [ 169.742188][ T29] audit: type=1326 audit(1757018252.629:16272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11069 comm="syz.1.2609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f32497eebe9 code=0x7ffc0000 [ 169.768408][ T29] audit: type=1326 audit(1757018252.699:16273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11069 comm="syz.1.2609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32497eebe9 code=0x7ffc0000 [ 169.792121][ T29] audit: type=1326 audit(1757018252.699:16274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11069 comm="syz.1.2609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f32497eec23 code=0x7ffc0000 [ 169.830809][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 169.861218][T11078] loop2: detected capacity change from 0 to 2048 [ 169.892573][T11078] EXT4-fs (loop2): mounted filesystem 00000800-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 169.908716][T11078] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.2611: bg 0: block 120: padding at end of block bitmap is not set [ 169.937345][ T3317] EXT4-fs (loop2): unmounting filesystem 00000800-0000-0000-0000-000000000000. [ 169.966468][T11088] netlink: 'syz.0.2614': attribute type 13 has an invalid length. [ 169.975524][T11088] gretap0: refused to change device tx_queue_len [ 169.982536][T11088] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 170.028728][T11093] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2613'. [ 170.074998][T11093] usb usb1: usbfs: interface 0 claimed by hub while 'syz.1.2613' sets config #1 [ 170.262358][T11107] loop3: detected capacity change from 0 to 2048 [ 170.556709][T11111] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2622'. [ 170.666221][T11107] EXT4-fs (loop3): mounted filesystem 00000800-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 170.729564][T11115] loop0: detected capacity change from 0 to 128 [ 170.739348][T11111] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2622'. [ 170.759912][T11115] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 170.776555][T11115] ext4 filesystem being mounted at /489/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 170.787865][T11107] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.2620: bg 0: block 120: padding at end of block bitmap is not set [ 170.844622][T11111] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2622'. [ 170.857373][ T3314] EXT4-fs (loop3): unmounting filesystem 00000800-0000-0000-0000-000000000000. [ 170.978702][ T3303] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 171.045944][T11149] loop0: detected capacity change from 0 to 2048 [ 171.057148][T11150] SELinux: syz.2.2632 (11150) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 171.117060][T11149] EXT4-fs (loop0): mounted filesystem 00000800-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 171.149651][ T3303] EXT4-fs (loop0): unmounting filesystem 00000800-0000-0000-0000-000000000000. [ 171.181200][T11158] 9pnet_fd: Insufficient options for proto=fd [ 171.281083][T11164] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2638'. [ 171.380898][T11164] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2638'. [ 171.417591][T11164] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2638'. [ 171.666384][T11177] loop4: detected capacity change from 0 to 1024 [ 171.697258][T11177] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 171.723545][T11177] EXT4-fs error (device loop4): mb_free_blocks:2017: group 0, inode 18: block 177:freeing already freed block (bit 11); block bitmap corrupt. [ 171.752241][T10819] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.774682][T11184] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2642'. [ 171.808307][T11184] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2642'. [ 171.869883][T11191] loop3: detected capacity change from 0 to 128 [ 171.880524][T11184] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2642'. [ 171.883795][T11191] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 171.902065][T11191] ext4 filesystem being mounted at /494/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 171.966307][ T3314] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 172.030474][T11202] loop3: detected capacity change from 0 to 2048 [ 172.053549][T11204] : renamed from bond0 (while UP) [ 172.072610][T11202] loop3: p1 < > p4 [ 172.092229][T11202] loop3: p4 size 8388608 extends beyond EOD, truncated [ 172.136577][T11210] 9pnet_fd: Insufficient options for proto=fd [ 172.204552][T11216] netlink: 'syz.3.2653': attribute type 13 has an invalid length. [ 172.224403][T11216] gretap0: refused to change device tx_queue_len [ 172.247516][T11216] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 172.309329][T11219] : renamed from bond0 (while UP) [ 172.349335][T11228] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 172.427410][T11234] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 172.451892][T11243] 0·: renamed from hsr0 [ 172.459841][T11243] 0·: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 172.478526][T11243] 0·: entered allmulticast mode [ 172.483539][T11243] hsr_slave_0: entered allmulticast mode [ 172.498321][T11243] A link change request failed with some changes committed already. Interface 70· may have been left with an inconsistent configuration, please check. [ 172.517477][T11245] 9pnet_fd: Insufficient options for proto=fd [ 172.560971][T11248] loop0: detected capacity change from 0 to 2048 [ 172.631981][T11248] loop0: p1 < > p4 [ 172.636607][T11248] loop0: p4 size 8388608 extends beyond EOD, truncated [ 172.714995][T11259] loop3: detected capacity change from 0 to 512 [ 172.741516][T11259] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 172.793014][T11259] EXT4-fs (loop3): 1 truncate cleaned up [ 172.799235][T11259] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 172.868074][T11271] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 172.889445][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 172.914445][T11278] 9pnet_fd: Insufficient options for proto=fd [ 172.970688][T11285] loop0: detected capacity change from 0 to 1024 [ 173.004143][T11285] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 173.053643][T11285] EXT4-fs error (device loop0): mb_free_blocks:2017: group 0, inode 18: block 177:freeing already freed block (bit 11); block bitmap corrupt. [ 173.145983][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 173.252357][T11304] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 173.560904][T11315] loop4: detected capacity change from 0 to 512 [ 173.897394][T11315] EXT4-fs (loop4): 1 orphan inode deleted [ 173.904503][T11315] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 173.917404][T11315] ext4 filesystem being mounted at /30/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 174.255605][T10819] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 174.306385][T11321] 9pnet_fd: Insufficient options for proto=fd [ 174.592314][ T29] kauditd_printk_skb: 694 callbacks suppressed [ 174.592332][ T29] audit: type=1326 audit(1757018257.669:16969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11342 comm="syz.0.2698" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00cc8debe9 code=0x7ffc0000 [ 174.647912][T11343] syz!: rxe_newlink: already configured on team_slave_0 [ 174.661563][ T29] audit: type=1326 audit(1757018257.699:16970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11342 comm="syz.0.2698" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f00cc8debe9 code=0x7ffc0000 [ 174.685203][ T29] audit: type=1326 audit(1757018257.699:16971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11342 comm="syz.0.2698" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00cc8debe9 code=0x7ffc0000 [ 174.708829][ T29] audit: type=1326 audit(1757018257.699:16972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11342 comm="syz.0.2698" exe="/root/syz-executor" sig=0 arch=c000003e syscall=20 compat=0 ip=0x7f00cc8debe9 code=0x7ffc0000 [ 174.732450][ T29] audit: type=1326 audit(1757018257.699:16973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11342 comm="syz.0.2698" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00cc8debe9 code=0x7ffc0000 [ 174.756077][ T29] audit: type=1326 audit(1757018257.699:16974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11342 comm="syz.0.2698" exe="/root/syz-executor" sig=0 arch=c000003e syscall=434 compat=0 ip=0x7f00cc8debe9 code=0x7ffc0000 [ 174.779698][ T29] audit: type=1326 audit(1757018257.699:16975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11342 comm="syz.0.2698" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00cc8debe9 code=0x7ffc0000 [ 174.803348][ T29] audit: type=1326 audit(1757018257.699:16976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11342 comm="syz.0.2698" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f00cc8debe9 code=0x7ffc0000 [ 174.826872][ T29] audit: type=1326 audit(1757018257.709:16977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11342 comm="syz.0.2698" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00cc8debe9 code=0x7ffc0000 [ 174.850472][ T29] audit: type=1326 audit(1757018257.709:16978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11342 comm="syz.0.2698" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00cc8debe9 code=0x7ffc0000 [ 174.963764][T11356] loop0: detected capacity change from 0 to 512 [ 174.992337][T11356] EXT4-fs error (device loop0): ext4_orphan_get:1392: inode #15: comm syz.0.2702: casefold flag without casefold feature [ 175.039295][T11356] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.2702: couldn't read orphan inode 15 (err -117) [ 175.072442][T11356] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 175.116529][T11356] hub 9-0:1.0: USB hub found [ 175.121267][T11356] hub 9-0:1.0: 8 ports detected [ 175.182123][T11371] loop3: detected capacity change from 0 to 1024 [ 175.191050][T11356] __nla_validate_parse: 10 callbacks suppressed [ 175.191070][T11356] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2702'. [ 175.223434][T11371] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 175.244893][T11371] EXT4-fs error (device loop3): mb_free_blocks:2017: group 0, inode 18: block 177:freeing already freed block (bit 11); block bitmap corrupt. [ 175.277897][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 175.331960][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 175.384762][T11384] syz!: rxe_newlink: already configured on team_slave_0 [ 175.508285][T11392] loop0: detected capacity change from 0 to 2048 [ 175.538342][T11392] EXT4-fs (loop0): mounted filesystem 00000800-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 175.954217][T11436] netlink: 'syz.0.2726': attribute type 13 has an invalid length. [ 175.963212][T11436] gretap0: refused to change device tx_queue_len [ 175.969775][T11436] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 176.120283][T11455] loop2: detected capacity change from 0 to 1024 [ 176.129650][T11457] loop0: detected capacity change from 0 to 128 [ 176.138500][T11457] ext4 filesystem being mounted at /535/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 176.160760][T11455] EXT4-fs error (device loop2): mb_free_blocks:2017: group 0, inode 18: block 177:freeing already freed block (bit 11); block bitmap corrupt. [ 176.230942][T11467] loop2: detected capacity change from 0 to 2048 [ 176.262853][T11467] loop2: p1 < > p4 [ 176.267362][T11467] loop2: p4 size 8388608 extends beyond EOD, truncated [ 176.316087][T11472] netlink: 'syz.2.2739': attribute type 13 has an invalid length. [ 176.327882][T11472] gretap0: refused to change device tx_queue_len [ 176.344133][T11472] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 176.470579][T11477] : renamed from bond0 [ 176.709405][T11495] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 176.763410][T11497] loop3: detected capacity change from 0 to 2048 [ 176.820285][T11501] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2751'. [ 176.836304][T11497] loop3: p1 < > p4 [ 176.842490][T11501] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2751'. [ 176.862246][T11497] loop3: p4 size 8388608 extends beyond EOD, truncated [ 176.969908][T11501] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2751'. [ 176.987429][T11509] loop4: detected capacity change from 0 to 2048 [ 177.009135][T11513] netlink: 'syz.3.2755': attribute type 13 has an invalid length. [ 177.072898][T11513] gretap0: refused to change device tx_queue_len [ 177.081061][T11513] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 177.158526][T11519] loop4: detected capacity change from 0 to 2048 [ 177.232422][T11519] loop4: p1 < > p4 [ 177.236929][T11519] loop4: p4 size 8388608 extends beyond EOD, truncated [ 177.340483][T11533] loop3: detected capacity change from 0 to 1024 [ 177.377157][T11533] EXT4-fs error (device loop3): mb_free_blocks:2017: group 0, inode 18: block 177:freeing already freed block (bit 11); block bitmap corrupt. [ 177.379445][T11538] hub 9-0:1.0: USB hub found [ 177.420367][T11538] hub 9-0:1.0: 8 ports detected [ 177.425712][T11465] syz.0.2736 (11465) used greatest stack depth: 7512 bytes left [ 177.462867][T11545] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 177.475711][T11538] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2763'. [ 177.711988][T11555] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2766'. [ 177.727952][T11555] loop3: detected capacity change from 0 to 512 [ 177.826587][T11555] EXT4-fs (loop3): 1 orphan inode deleted [ 177.833621][T11555] ext4 filesystem being mounted at /519/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 177.963851][T11566] 9pnet_fd: Insufficient options for proto=fd [ 178.129679][T11576] loop0: detected capacity change from 0 to 128 [ 178.142005][T11576] ext4 filesystem being mounted at /539/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 178.192764][T11582] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2776'. [ 178.230473][T11586] FAULT_INJECTION: forcing a failure. [ 178.230473][T11586] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 178.244317][T11586] CPU: 0 UID: 0 PID: 11586 Comm: syz.0.2777 Not tainted syzkaller #0 PREEMPT(voluntary) [ 178.244350][T11586] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 178.244421][T11586] Call Trace: [ 178.244430][T11586] [ 178.244438][T11586] __dump_stack+0x1d/0x30 [ 178.244467][T11586] dump_stack_lvl+0xe8/0x140 [ 178.244495][T11586] dump_stack+0x15/0x1b [ 178.244519][T11586] should_fail_ex+0x265/0x280 [ 178.244578][T11586] should_fail_alloc_page+0xf2/0x100 [ 178.244617][T11586] __alloc_frozen_pages_noprof+0xff/0x360 [ 178.244671][T11586] alloc_pages_mpol+0xb3/0x250 [ 178.244716][T11586] alloc_pages_noprof+0x90/0x130 [ 178.244801][T11586] __pud_alloc+0x47/0x4c0 [ 178.244834][T11586] handle_mm_fault+0x1882/0x2c20 [ 178.244865][T11586] ? __rcu_read_unlock+0x4f/0x70 [ 178.244904][T11586] do_user_addr_fault+0x3fe/0x1090 [ 178.245013][T11586] exc_page_fault+0x62/0xa0 [ 178.245047][T11586] asm_exc_page_fault+0x26/0x30 [ 178.245142][T11586] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 178.245172][T11586] Code: f6 01 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 a4 c3 cc cc cc cc 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 [ 178.245197][T11586] RSP: 0018:ffffc9001216ba18 EFLAGS: 00050202 [ 178.245218][T11586] RAX: ffff8881022c9b20 RBX: 00000000000000f0 RCX: 00000000000000f0 [ 178.245235][T11586] RDX: 0000000000000001 RSI: 0000200000000000 RDI: ffffc9001216baec [ 178.245328][T11586] RBP: ffffc9001216be88 R08: 00000000000001bb R09: 0000000000000000 [ 178.245342][T11586] R10: 0001c9001216baec R11: 0001c9001216bbdb R12: 00000000000000f0 [ 178.245354][T11586] R13: ffffc9001216baec R14: ffffc9001216baec R15: 0000200000000000 [ 178.245394][T11586] _copy_from_user+0x6f/0xb0 [ 178.245441][T11586] do_sys_poll+0x149/0xbd0 [ 178.245519][T11586] ? selinux_file_open+0x2df/0x330 [ 178.245588][T11586] __se_sys_poll+0xdd/0x200 [ 178.245620][T11586] __x64_sys_poll+0x43/0x50 [ 178.245726][T11586] x64_sys_call+0x27d2/0x2ff0 [ 178.245755][T11586] do_syscall_64+0xd2/0x200 [ 178.245794][T11586] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 178.245826][T11586] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 178.245933][T11586] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 178.245961][T11586] RIP: 0033:0x7f00cc8debe9 [ 178.246054][T11586] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 178.246149][T11586] RSP: 002b:00007f00cb33f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000007 [ 178.246173][T11586] RAX: ffffffffffffffda RBX: 00007f00ccb15fa0 RCX: 00007f00cc8debe9 [ 178.246190][T11586] RDX: 0000000000000009 RSI: 20000000000000b5 RDI: 0000200000000000 [ 178.246207][T11586] RBP: 00007f00cb33f090 R08: 0000000000000000 R09: 0000000000000000 [ 178.246223][T11586] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 178.246283][T11586] R13: 00007f00ccb16038 R14: 00007f00ccb15fa0 R15: 00007ffc39b4a748 [ 178.246309][T11586] [ 178.463224][T11597] : renamed from bond0 (while UP) [ 178.658076][T11609] netlink: 'syz.1.2784': attribute type 13 has an invalid length. [ 178.667715][T11609] gretap0: refused to change device tx_queue_len [ 178.674768][T11609] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 178.771409][T11617] loop4: detected capacity change from 0 to 1024 [ 178.831700][T11618] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2783'. [ 178.848511][T11618] loop3: detected capacity change from 0 to 512 [ 178.864478][T11618] EXT4-fs (loop3): 1 orphan inode deleted [ 178.872049][T11618] ext4 filesystem being mounted at /522/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 178.976957][T11617] EXT4-fs error (device loop4): mb_free_blocks:2017: group 0, inode 18: block 177:freeing already freed block (bit 11); block bitmap corrupt. [ 179.169406][T11631] bridge: RTM_NEWNEIGH with invalid state 0x1 [ 179.179080][T11631] random: crng reseeded on system resumption [ 179.258906][T11640] loop2: detected capacity change from 0 to 2048 [ 179.322104][T11640] loop2: p1 < > p4 [ 179.326656][T11640] loop2: p4 size 8388608 extends beyond EOD, truncated [ 179.394800][T11642] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2789'. [ 179.404019][T11642] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 179.418492][T11642] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 179.454322][T11643] loop4: detected capacity change from 0 to 512 [ 179.603667][T11643] EXT4-fs (loop4): 1 orphan inode deleted [ 179.610663][T11643] ext4 filesystem being mounted at /44/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 179.935823][T11671] loop2: detected capacity change from 0 to 1024 [ 179.949433][ T29] kauditd_printk_skb: 480 callbacks suppressed [ 179.949450][ T29] audit: type=1326 audit(1757018263.019:17459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11668 comm="syz.1.2802" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32497eebe9 code=0x7ffc0000 [ 179.980256][ T29] audit: type=1326 audit(1757018263.019:17460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11668 comm="syz.1.2802" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32497eebe9 code=0x7ffc0000 [ 180.003905][ T29] audit: type=1326 audit(1757018263.029:17461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11668 comm="syz.1.2802" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f32497eebe9 code=0x7ffc0000 [ 180.027594][ T29] audit: type=1326 audit(1757018263.029:17462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11668 comm="syz.1.2802" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32497eebe9 code=0x7ffc0000 [ 180.051331][ T29] audit: type=1326 audit(1757018263.029:17463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11668 comm="syz.1.2802" exe="/root/syz-executor" sig=0 arch=c000003e syscall=20 compat=0 ip=0x7f32497eebe9 code=0x7ffc0000 [ 180.075068][ T29] audit: type=1326 audit(1757018263.029:17464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11668 comm="syz.1.2802" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32497eebe9 code=0x7ffc0000 [ 180.098806][ T29] audit: type=1326 audit(1757018263.029:17465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11668 comm="syz.1.2802" exe="/root/syz-executor" sig=0 arch=c000003e syscall=434 compat=0 ip=0x7f32497eebe9 code=0x7ffc0000 [ 180.122841][ T29] audit: type=1326 audit(1757018263.029:17466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11668 comm="syz.1.2802" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32497eebe9 code=0x7ffc0000 [ 180.146502][ T29] audit: type=1326 audit(1757018263.029:17467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11668 comm="syz.1.2802" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f32497eebe9 code=0x7ffc0000 [ 180.171127][ T29] audit: type=1326 audit(1757018263.039:17468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11668 comm="syz.1.2802" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32497eebe9 code=0x7ffc0000 [ 180.351384][T11677] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 180.402879][T11671] EXT4-fs error (device loop2): mb_free_blocks:2017: group 0, inode 18: block 177:freeing already freed block (bit 11); block bitmap corrupt. [ 180.671429][T11703] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2811'. [ 180.701624][T11703] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2811'. [ 180.735334][T11710] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2813'. [ 180.750778][T11703] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2811'. [ 180.768027][T11710] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2813'. [ 180.799308][T11710] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2813'. [ 181.053838][T11730] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2816'. [ 181.068990][T11730] loop4: detected capacity change from 0 to 512 [ 181.454685][T11730] EXT4-fs (loop4): 1 orphan inode deleted [ 181.461863][T11730] ext4 filesystem being mounted at /49/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 181.597933][T11752] loop3: detected capacity change from 0 to 512 [ 181.646968][T11752] EXT4-fs error (device loop3): ext4_orphan_get:1392: inode #15: comm syz.3.2825: casefold flag without casefold feature [ 181.672348][T11752] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.2825: couldn't read orphan inode 15 (err -117) [ 181.962992][T11752] hub 9-0:1.0: USB hub found [ 181.988147][T11752] hub 9-0:1.0: 8 ports detected [ 182.158111][T11752] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2825'. [ 182.223493][T11717] syz.2.2815 (11717) used greatest stack depth: 7336 bytes left [ 182.483430][T11809] loop4: detected capacity change from 0 to 512 [ 182.490633][T11809] EXT4-fs: Ignoring removed orlov option [ 182.498018][T11810] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 182.505200][T11809] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 182.516415][T11812] hub 9-0:1.0: USB hub found [ 182.521447][T11812] hub 9-0:1.0: 8 ports detected [ 182.527439][T11809] EXT4-fs (loop4): 1 truncate cleaned up [ 182.538696][T11816] loop2: detected capacity change from 0 to 1024 [ 182.564916][T11812] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2842'. [ 182.640279][T11826] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2846'. [ 182.686870][T11835] loop4: detected capacity change from 0 to 2048 [ 182.732742][T11835] loop4: p1 < > p4 [ 182.737303][T11835] loop4: p4 size 8388608 extends beyond EOD, truncated [ 182.869805][T11855] loop4: detected capacity change from 0 to 512 [ 182.877921][T11855] EXT4-fs error (device loop4): ext4_orphan_get:1392: inode #15: comm syz.4.2854: casefold flag without casefold feature [ 182.890939][T11855] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.2854: couldn't read orphan inode 15 (err -117) [ 182.908371][T11855] hub 9-0:1.0: USB hub found [ 182.913395][T11855] hub 9-0:1.0: 8 ports detected [ 182.929033][T11855] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 182.936522][T11855] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 183.003544][T11861] loop0: detected capacity change from 0 to 1024 [ 183.052166][T11865] syz!: rxe_newlink: already configured on team_slave_0 [ 183.076400][T11867] loop0: detected capacity change from 0 to 512 [ 183.084462][T11867] EXT4-fs error (device loop0): ext4_orphan_get:1392: inode #15: comm syz.0.2857: casefold flag without casefold feature [ 183.097526][T11867] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.2857: couldn't read orphan inode 15 (err -117) [ 183.113830][T11867] hub 9-0:1.0: USB hub found [ 183.118555][T11867] hub 9-0:1.0: 8 ports detected [ 183.252978][T11882] loop0: detected capacity change from 0 to 2048 [ 183.282160][T11882] loop0: p1 < > p4 [ 183.286564][T11882] loop0: p4 size 8388608 extends beyond EOD, truncated [ 183.369825][T11891] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=2049 sclass=netlink_tcpdiag_socket pid=11891 comm=syz.0.2864 [ 183.383540][T11891] SELinux: Context system_u:object_r:mtrr_device_t:s0 is not valid (left unmapped). [ 183.432865][T11898] loop4: detected capacity change from 0 to 1024 [ 183.489264][T11906] loop0: detected capacity change from 0 to 1024 [ 183.516363][T11908] loop4: detected capacity change from 0 to 512 [ 183.528550][T11906] EXT4-fs error (device loop0): mb_free_blocks:2017: group 0, inode 18: block 177:freeing already freed block (bit 11); block bitmap corrupt. [ 183.538514][T11908] ext4 filesystem being mounted at /67/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 183.704051][T11936] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 183.914144][T11965] FAULT_INJECTION: forcing a failure. [ 183.914144][T11965] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 183.927590][T11965] CPU: 0 UID: 0 PID: 11965 Comm: syz.0.2885 Not tainted syzkaller #0 PREEMPT(voluntary) [ 183.927676][T11965] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 183.927688][T11965] Call Trace: [ 183.927730][T11965] [ 183.927740][T11965] __dump_stack+0x1d/0x30 [ 183.927811][T11965] dump_stack_lvl+0xe8/0x140 [ 183.927830][T11965] dump_stack+0x15/0x1b [ 183.927912][T11965] should_fail_ex+0x265/0x280 [ 183.927933][T11965] should_fail_alloc_page+0xf2/0x100 [ 183.927968][T11965] __alloc_frozen_pages_noprof+0xff/0x360 [ 183.928016][T11965] alloc_pages_mpol+0xb3/0x250 [ 183.928081][T11965] alloc_pages_noprof+0x90/0x130 [ 183.928131][T11965] get_free_pages_noprof+0xc/0x40 [ 183.928251][T11965] do_proc_control+0x186/0x8b0 [ 183.928337][T11965] ? should_fail_ex+0xdb/0x280 [ 183.928365][T11965] proc_control+0x71/0xa0 [ 183.928431][T11965] usbdev_ioctl+0x948/0x1710 [ 183.928466][T11965] ? __pfx_usbdev_ioctl+0x10/0x10 [ 183.928518][T11965] __se_sys_ioctl+0xce/0x140 [ 183.928559][T11965] __x64_sys_ioctl+0x43/0x50 [ 183.928592][T11965] x64_sys_call+0x1816/0x2ff0 [ 183.928615][T11965] do_syscall_64+0xd2/0x200 [ 183.928646][T11965] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 183.928700][T11965] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 183.928812][T11965] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 183.928838][T11965] RIP: 0033:0x7f00cc8debe9 [ 183.928853][T11965] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 183.928947][T11965] RSP: 002b:00007f00cb33f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 183.929044][T11965] RAX: ffffffffffffffda RBX: 00007f00ccb15fa0 RCX: 00007f00cc8debe9 [ 183.929061][T11965] RDX: 0000200000000080 RSI: 00000000c0185500 RDI: 0000000000000004 [ 183.929077][T11965] RBP: 00007f00cb33f090 R08: 0000000000000000 R09: 0000000000000000 [ 183.929102][T11965] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 183.929187][T11965] R13: 00007f00ccb16038 R14: 00007f00ccb15fa0 R15: 00007ffc39b4a748 [ 183.929208][T11965] [ 184.532609][T11991] netlink: 'syz.3.2893': attribute type 13 has an invalid length. [ 184.541815][T11991] gretap0: refused to change device tx_queue_len [ 184.548582][T11991] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 184.581293][T11992] loop0: detected capacity change from 0 to 512 [ 184.674607][T11992] EXT4-fs (loop0): 1 orphan inode deleted [ 184.681912][T11992] ext4 filesystem being mounted at /564/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 185.043480][ T29] kauditd_printk_skb: 273 callbacks suppressed [ 185.043498][ T29] audit: type=1400 audit(1757018268.119:17742): avc: denied { create } for pid=12015 comm="syz.1.2899" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 185.128505][T12025] FAULT_INJECTION: forcing a failure. [ 185.128505][T12025] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 185.141744][T12025] CPU: 1 UID: 0 PID: 12025 Comm: syz.1.2903 Not tainted syzkaller #0 PREEMPT(voluntary) [ 185.141893][T12025] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 185.141904][T12025] Call Trace: [ 185.141911][T12025] [ 185.141918][T12025] __dump_stack+0x1d/0x30 [ 185.141936][T12025] dump_stack_lvl+0xe8/0x140 [ 185.141995][T12025] dump_stack+0x15/0x1b [ 185.142010][T12025] should_fail_ex+0x265/0x280 [ 185.142029][T12025] should_fail+0xb/0x20 [ 185.142046][T12025] should_fail_usercopy+0x1a/0x20 [ 185.142091][T12025] _copy_from_user+0x1c/0xb0 [ 185.142120][T12025] ___sys_sendmsg+0xc1/0x1d0 [ 185.142193][T12025] __x64_sys_sendmsg+0xd4/0x160 [ 185.142218][T12025] x64_sys_call+0x191e/0x2ff0 [ 185.142236][T12025] do_syscall_64+0xd2/0x200 [ 185.142266][T12025] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 185.142338][T12025] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 185.142362][T12025] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 185.142381][T12025] RIP: 0033:0x7f32497eebe9 [ 185.142394][T12025] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 185.142490][T12025] RSP: 002b:00007f324824f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 185.142510][T12025] RAX: ffffffffffffffda RBX: 00007f3249a25fa0 RCX: 00007f32497eebe9 [ 185.142521][T12025] RDX: 0000000000000000 RSI: 0000200000000340 RDI: 0000000000000003 [ 185.142531][T12025] RBP: 00007f324824f090 R08: 0000000000000000 R09: 0000000000000000 [ 185.142541][T12025] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 185.142552][T12025] R13: 00007f3249a26038 R14: 00007f3249a25fa0 R15: 00007ffdb2670bb8 [ 185.142647][T12025] [ 185.384315][T12029] vhci_hcd: invalid port number 0 [ 185.410699][ T29] audit: type=1326 audit(1757018268.449:17743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12020 comm="syz.2.2902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc52c5eebe9 code=0x7ffc0000 [ 185.434739][ T29] audit: type=1326 audit(1757018268.449:17744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12020 comm="syz.2.2902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc52c5eebe9 code=0x7ffc0000 [ 185.458625][ T29] audit: type=1326 audit(1757018268.469:17745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12020 comm="syz.2.2902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=284 compat=0 ip=0x7fc52c5eebe9 code=0x7ffc0000 [ 185.482229][ T29] audit: type=1326 audit(1757018268.469:17746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12020 comm="syz.2.2902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc52c5eebe9 code=0x7ffc0000 [ 185.505995][ T29] audit: type=1326 audit(1757018268.469:17747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12020 comm="syz.2.2902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc52c5eebe9 code=0x7ffc0000 [ 185.529837][ T29] audit: type=1326 audit(1757018268.479:17748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12020 comm="syz.2.2902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc52c5eebe9 code=0x7ffc0000 [ 185.553436][ T29] audit: type=1326 audit(1757018268.479:17749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12020 comm="syz.2.2902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc52c5eebe9 code=0x7ffc0000 [ 185.577186][ T29] audit: type=1326 audit(1757018268.479:17750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12020 comm="syz.2.2902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc52c5eebe9 code=0x7ffc0000 [ 185.600822][ T29] audit: type=1326 audit(1757018268.479:17751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12020 comm="syz.2.2902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7fc52c5eebe9 code=0x7ffc0000 [ 185.769359][T12055] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 185.821177][T12060] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 185.847453][T12062] loop4: detected capacity change from 0 to 1024 [ 185.907596][T12062] EXT4-fs error (device loop4): mb_free_blocks:2017: group 0, inode 18: block 177:freeing already freed block (bit 11); block bitmap corrupt. [ 186.294976][T12090] __nla_validate_parse: 15 callbacks suppressed [ 186.295000][T12090] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2916'. [ 186.317046][T12090] loop3: detected capacity change from 0 to 512 [ 186.334345][T12090] EXT4-fs (loop3): 1 orphan inode deleted [ 186.341030][T12090] ext4 filesystem being mounted at /541/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 186.609486][T12088] 9pnet_fd: Insufficient options for proto=fd [ 186.777225][T12100] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 187.092286][T12132] FAULT_INJECTION: forcing a failure. [ 187.092286][T12132] name failslab, interval 1, probability 0, space 0, times 0 [ 187.105204][T12132] CPU: 1 UID: 0 PID: 12132 Comm: syz.3.2937 Not tainted syzkaller #0 PREEMPT(voluntary) [ 187.105239][T12132] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 187.105252][T12132] Call Trace: [ 187.105260][T12132] [ 187.105269][T12132] __dump_stack+0x1d/0x30 [ 187.105296][T12132] dump_stack_lvl+0xe8/0x140 [ 187.105319][T12132] dump_stack+0x15/0x1b [ 187.105359][T12132] should_fail_ex+0x265/0x280 [ 187.105379][T12132] should_failslab+0x8c/0xb0 [ 187.105415][T12132] kmem_cache_alloc_noprof+0x50/0x310 [ 187.105442][T12132] ? skb_clone+0x151/0x1f0 [ 187.105487][T12132] skb_clone+0x151/0x1f0 [ 187.105509][T12132] __netlink_deliver_tap+0x2c9/0x500 [ 187.105592][T12132] __netlink_sendskb+0xc3/0xd0 [ 187.105616][T12132] netlink_dump+0x72b/0x8a0 [ 187.105645][T12132] __netlink_dump_start+0x43e/0x520 [ 187.105707][T12132] ? __pfx_neightbl_dump_info+0x10/0x10 [ 187.105732][T12132] rtnetlink_rcv_msg+0x552/0x6d0 [ 187.105767][T12132] ? __pfx_neightbl_dump_info+0x10/0x10 [ 187.105800][T12132] ? __pfx_rtnl_dumpit+0x10/0x10 [ 187.105834][T12132] ? __pfx_neightbl_dump_info+0x10/0x10 [ 187.105870][T12132] netlink_rcv_skb+0x120/0x220 [ 187.105914][T12132] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 187.105946][T12132] rtnetlink_rcv+0x1c/0x30 [ 187.105979][T12132] netlink_unicast+0x5c0/0x690 [ 187.106006][T12132] netlink_sendmsg+0x58b/0x6b0 [ 187.106043][T12132] ? __pfx_netlink_sendmsg+0x10/0x10 [ 187.106066][T12132] __sock_sendmsg+0x142/0x180 [ 187.106162][T12132] ____sys_sendmsg+0x31e/0x4e0 [ 187.106187][T12132] ___sys_sendmsg+0x17b/0x1d0 [ 187.106300][T12132] __x64_sys_sendmsg+0xd4/0x160 [ 187.106335][T12132] x64_sys_call+0x191e/0x2ff0 [ 187.106361][T12132] do_syscall_64+0xd2/0x200 [ 187.106389][T12132] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 187.106490][T12132] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 187.106520][T12132] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 187.106571][T12132] RIP: 0033:0x7f3ef52bebe9 [ 187.106589][T12132] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 187.106658][T12132] RSP: 002b:00007f3ef3d27038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 187.106682][T12132] RAX: ffffffffffffffda RBX: 00007f3ef54f5fa0 RCX: 00007f3ef52bebe9 [ 187.106693][T12132] RDX: 0000000000000000 RSI: 0000200000000340 RDI: 0000000000000003 [ 187.106705][T12132] RBP: 00007f3ef3d27090 R08: 0000000000000000 R09: 0000000000000000 [ 187.106716][T12132] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 187.106728][T12132] R13: 00007f3ef54f6038 R14: 00007f3ef54f5fa0 R15: 00007ffff8708738 [ 187.106745][T12132] [ 187.528837][T12143] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 187.656502][T12158] loop4: detected capacity change from 0 to 1024 [ 187.731014][T12158] EXT4-fs error (device loop4): mb_free_blocks:2017: group 0, inode 18: block 177:freeing already freed block (bit 11); block bitmap corrupt. [ 187.811823][T12167] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2944'. [ 187.826799][T12167] loop0: detected capacity change from 0 to 512 [ 188.473119][T12170] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2946'. [ 188.489678][T12170] loop3: detected capacity change from 0 to 512 [ 188.548835][T12167] EXT4-fs (loop0): 1 orphan inode deleted [ 188.556239][T12167] ext4 filesystem being mounted at /574/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 188.594309][T12170] EXT4-fs (loop3): 1 orphan inode deleted [ 188.600609][T12170] ext4 filesystem being mounted at /547/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 188.617682][T12177] netlink: 'syz.4.2951': attribute type 13 has an invalid length. [ 188.628988][T12177] gretap0: refused to change device tx_queue_len [ 188.636095][T12177] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 189.069549][T12186] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 189.273927][T12194] loop3: detected capacity change from 0 to 1024 [ 189.319702][T12199] loop0: detected capacity change from 0 to 128 [ 189.336107][T12199] ext4 filesystem being mounted at /576/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 189.592889][T12218] netlink: 'syz.2.2964': attribute type 13 has an invalid length. [ 189.609684][T12218] gretap0: refused to change device tx_queue_len [ 189.616561][T12218] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 189.707955][T12225] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 189.809907][T12236] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2963'. [ 189.825587][T12236] loop4: detected capacity change from 0 to 512 [ 190.054623][ T29] kauditd_printk_skb: 465 callbacks suppressed [ 190.054641][ T29] audit: type=1326 audit(1757018273.129:18217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12244 comm="syz.1.2972" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32497eebe9 code=0x7ffc0000 [ 190.143356][T12248] loop2: detected capacity change from 0 to 512 [ 190.164968][ T29] audit: type=1326 audit(1757018273.169:18218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12244 comm="syz.1.2972" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32497eebe9 code=0x7ffc0000 [ 190.167784][T12236] EXT4-fs (loop4): 1 orphan inode deleted [ 190.188961][ T29] audit: type=1326 audit(1757018273.179:18219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12244 comm="syz.1.2972" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f32497eebe9 code=0x7ffc0000 [ 190.195542][T12236] ext4 filesystem being mounted at /91/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 190.218972][ T29] audit: type=1326 audit(1757018273.179:18220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12244 comm="syz.1.2972" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32497eebe9 code=0x7ffc0000 [ 190.219009][ T29] audit: type=1326 audit(1757018273.179:18221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12244 comm="syz.1.2972" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32497eebe9 code=0x7ffc0000 [ 190.231951][T12248] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 4) [ 190.254213][ T29] audit: type=1326 audit(1757018273.189:18222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12244 comm="syz.1.2972" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32497eebe9 code=0x7ffc0000 [ 190.279001][T12248] FAT-fs (loop2): FAT read failed (blocknr 52768) [ 190.288786][ T29] audit: type=1326 audit(1757018273.189:18223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12244 comm="syz.1.2972" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32497eebe9 code=0x7ffc0000 [ 190.345755][ T29] audit: type=1326 audit(1757018273.189:18224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12244 comm="syz.1.2972" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32497eebe9 code=0x7ffc0000 [ 190.370064][ T29] audit: type=1326 audit(1757018273.189:18225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12244 comm="syz.1.2972" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32497eebe9 code=0x7ffc0000 [ 190.394087][ T29] audit: type=1326 audit(1757018273.189:18226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12244 comm="syz.1.2972" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f32497eebe9 code=0x7ffc0000 [ 190.446528][T12251] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2975'. [ 190.466060][T12251] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2975'. [ 190.499960][T12251] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2975'. [ 190.585597][T12276] vhci_hcd: invalid port number 0 [ 190.669225][T12291] netlink: 'syz.2.2987': attribute type 13 has an invalid length. [ 190.678610][T12291] gretap0: refused to change device tx_queue_len [ 190.686653][T12291] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 190.733175][T12302] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2990'. [ 190.754170][T12302] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2990'. [ 190.782807][T12302] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2990'. [ 190.811995][T12318] loop2: detected capacity change from 0 to 512 [ 190.819405][T12318] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 4) [ 190.828695][T12318] FAT-fs (loop2): FAT read failed (blocknr 52768) [ 190.975571][T12341] 9pnet_fd: Insufficient options for proto=fd [ 190.978781][T12343] netlink: 'syz.4.3001': attribute type 13 has an invalid length. [ 190.992865][T12343] gretap0: refused to change device tx_queue_len [ 191.000023][T12343] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 191.068587][T12352] loop2: detected capacity change from 0 to 128 [ 191.077285][T12352] EXT4-fs mount: 59 callbacks suppressed [ 191.077380][T12352] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 191.095692][T12352] ext4 filesystem being mounted at /591/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 191.171345][ T3317] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 191.195784][T12355] loop2: detected capacity change from 0 to 512 [ 191.203581][T12355] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 191.217713][T12355] EXT4-fs (loop2): 1 truncate cleaned up [ 191.224362][T12355] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 191.299769][T12355] usb usb1: usbfs: interface 0 claimed by hub while 'syz.2.3006' sets config #1 [ 191.322490][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 191.380433][T12367] loop2: detected capacity change from 0 to 1024 [ 191.403256][T12367] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 191.444034][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 191.617457][T12378] netlink: 'syz.3.3014': attribute type 13 has an invalid length. [ 191.742331][T12378] gretap0: refused to change device tx_queue_len [ 191.792271][T12378] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 192.080126][T12397] loop0: detected capacity change from 0 to 512 [ 192.105444][T12397] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 192.117565][T12397] EXT4-fs (loop0): 1 truncate cleaned up [ 192.125531][T12397] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 192.147434][T12403] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 192.149888][T12400] __nla_validate_parse: 4 callbacks suppressed [ 192.149907][T12400] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3020'. [ 192.194273][T12408] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3017'. [ 192.214804][T12408] usb usb1: usbfs: interface 0 claimed by hub while 'syz.0.3017' sets config #1 [ 192.259426][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 192.293060][T12414] loop0: detected capacity change from 0 to 512 [ 192.332614][T12414] FAT-fs (loop0): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 4) [ 192.342064][T12414] FAT-fs (loop0): FAT read failed (blocknr 52768) [ 192.394519][T12415] SELinux: syz.4.3021 (12415) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 193.119461][T12451] loop0: detected capacity change from 0 to 512 [ 193.166570][T12451] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 193.203875][T12451] EXT4-fs (loop0): 1 truncate cleaned up [ 193.218709][T12451] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 193.254631][T12457] 9pnet_fd: Insufficient options for proto=fd [ 193.291811][T12465] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3042'. [ 193.314855][T12465] usb usb1: usbfs: interface 0 claimed by hub while 'syz.0.3042' sets config #1 [ 193.393203][T12475] loop3: detected capacity change from 0 to 128 [ 193.403134][T12475] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 193.415684][T12475] ext4 filesystem being mounted at /568/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 193.450181][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 193.463551][T12454] chnl_net:caif_netlink_parms(): no params data found [ 193.485527][ T3314] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 193.515073][T12454] bridge0: port 1(bridge_slave_0) entered blocking state [ 193.522286][T12454] bridge0: port 1(bridge_slave_0) entered disabled state [ 193.530345][T12454] bridge_slave_0: entered allmulticast mode [ 193.537047][T12454] bridge_slave_0: entered promiscuous mode [ 193.545695][T12454] bridge0: port 2(bridge_slave_1) entered blocking state [ 193.552988][T12454] bridge0: port 2(bridge_slave_1) entered disabled state [ 193.560252][T12454] bridge_slave_1: entered allmulticast mode [ 193.567060][T12454] bridge_slave_1: entered promiscuous mode [ 193.586966][T12454] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 193.597785][T12454] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 193.620331][T12454] team0: Port device team_slave_0 added [ 193.628588][T12454] team0: Port device team_slave_1 added [ 193.645021][T12454] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 193.652087][T12454] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 193.678629][T12454] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 193.690099][T12454] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 193.697194][T12454] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 193.723345][T12454] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 193.757170][T12454] hsr_slave_0: entered promiscuous mode [ 193.763361][T12454] hsr_slave_1: entered promiscuous mode [ 193.769377][T12454] debugfs: 'hsr0' already exists in 'hsr' [ 193.775170][T12454] Cannot create hsr debugfs directory [ 193.850645][T12505] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3045'. [ 193.889855][T12503] usb usb1: usbfs: interface 0 claimed by hub while 'syz.1.3045' sets config #1 [ 194.316296][T12454] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 194.325992][T12454] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 194.335933][T12454] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 194.345936][T12454] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 194.391454][T12454] 8021q: adding VLAN 0 to HW filter on device bond0 [ 194.406996][T12522] loop0: detected capacity change from 0 to 512 [ 194.407054][T12454] 8021q: adding VLAN 0 to HW filter on device team0 [ 194.422928][ T3434] bridge0: port 1(bridge_slave_0) entered blocking state [ 194.430066][ T3434] bridge0: port 1(bridge_slave_0) entered forwarding state [ 194.432866][T12522] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 194.439619][ T3434] bridge0: port 2(bridge_slave_1) entered blocking state [ 194.449496][T12522] EXT4-fs (loop0): 1 truncate cleaned up [ 194.454364][ T3434] bridge0: port 2(bridge_slave_1) entered forwarding state [ 194.472465][T12522] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 194.509864][T12529] loop3: detected capacity change from 0 to 128 [ 194.523286][T12529] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 194.543957][T12454] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 194.551021][T12529] ext4 filesystem being mounted at /573/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 194.553067][T12532] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3049'. [ 194.612091][T12532] usb usb1: usbfs: interface 0 claimed by hub while 'syz.0.3049' sets config #1 [ 194.637512][T12454] veth0_vlan: entered promiscuous mode [ 194.644381][ T3314] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 194.649112][T12454] veth1_vlan: entered promiscuous mode [ 194.672263][T12454] veth0_macvtap: entered promiscuous mode [ 194.680118][T12454] veth1_macvtap: entered promiscuous mode [ 194.681931][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 194.705754][T12454] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 194.719898][T12454] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 194.731461][ T3434] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.745017][ T3434] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.763218][ T3434] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.777870][ T31] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.121783][ T29] kauditd_printk_skb: 440 callbacks suppressed [ 195.121800][ T29] audit: type=1326 audit(1757018278.169:18667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12545 comm="syz.2.3033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f144a0cebe9 code=0x7ffc0000 [ 195.151892][ T29] audit: type=1326 audit(1757018278.179:18668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12545 comm="syz.2.3033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f144a0cebe9 code=0x7ffc0000 [ 195.175498][ T29] audit: type=1326 audit(1757018278.179:18669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12545 comm="syz.2.3033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f144a0cebe9 code=0x7ffc0000 [ 195.199129][ T29] audit: type=1326 audit(1757018278.179:18670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12545 comm="syz.2.3033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f144a0cebe9 code=0x7ffc0000 [ 195.222773][ T29] audit: type=1326 audit(1757018278.179:18671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12545 comm="syz.2.3033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=229 compat=0 ip=0x7f144a0cebe9 code=0x7ffc0000 [ 195.246504][ T29] audit: type=1326 audit(1757018278.179:18672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12545 comm="syz.2.3033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f144a0cebe9 code=0x7ffc0000 [ 195.270134][ T29] audit: type=1326 audit(1757018278.179:18673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12545 comm="syz.2.3033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=213 compat=0 ip=0x7f144a0cebe9 code=0x7ffc0000 [ 195.293880][ T29] audit: type=1326 audit(1757018278.179:18674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12545 comm="syz.2.3033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f144a0cebe9 code=0x7ffc0000 [ 195.317828][ T29] audit: type=1326 audit(1757018278.179:18675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12545 comm="syz.2.3033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f144a0cebe9 code=0x7ffc0000 [ 195.341558][ T29] audit: type=1326 audit(1757018278.179:18676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12545 comm="syz.2.3033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f144a0cebe9 code=0x7ffc0000 [ 195.770765][T12570] 9pnet_fd: Insufficient options for proto=fd [ 195.794337][T12573] loop0: detected capacity change from 0 to 512 [ 195.808802][T12575] loop3: detected capacity change from 0 to 512 [ 195.816454][T12575] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 195.827483][T12573] EXT4-fs error (device loop0): ext4_orphan_get:1392: inode #15: comm syz.0.3060: casefold flag without casefold feature [ 195.840905][T12573] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.3060: couldn't read orphan inode 15 (err -117) [ 195.855494][T12575] EXT4-fs (loop3): 1 truncate cleaned up [ 195.862367][T12575] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 195.875610][T12573] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 195.890509][T12573] hub 9-0:1.0: USB hub found [ 195.895224][T12573] hub 9-0:1.0: 8 ports detected [ 195.940706][T12580] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3061'. [ 195.958897][T12573] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3060'. [ 195.962358][T12580] usb usb1: usbfs: interface 0 claimed by hub while 'syz.3.3061' sets config #1 [ 196.001903][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 196.033181][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 196.051982][T12587] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3063'. [ 196.106011][T12589] vhci_hcd: invalid port number 0 [ 196.125264][T12592] vhci_hcd: invalid port number 0 [ 196.179931][T12599] loop2: detected capacity change from 0 to 512 [ 196.188784][T12599] EXT4-fs error (device loop2): ext4_orphan_get:1392: inode #15: comm syz.2.3069: casefold flag without casefold feature [ 196.201972][T12599] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.3069: couldn't read orphan inode 15 (err -117) [ 196.221970][T12599] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 196.254989][T12599] hub 9-0:1.0: USB hub found [ 196.262620][T12599] hub 9-0:1.0: 8 ports detected [ 196.286184][T12605] SELinux: syz.0.3070 (12605) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 196.434179][T12599] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3069'. [ 196.457962][T12599] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 196.465446][T12599] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 196.549066][T12599] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 196.556910][T12599] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 196.705515][T12609] 9pnet_fd: Insufficient options for proto=fd [ 196.729389][T12612] loop3: detected capacity change from 0 to 512 [ 196.736397][T12612] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 196.748697][T12612] EXT4-fs (loop3): 1 truncate cleaned up [ 196.754816][T12612] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 196.843368][T12612] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3072'. [ 196.855457][T12612] usb usb1: usbfs: interface 0 claimed by hub while 'syz.3.3072' sets config #1 [ 196.879972][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 197.290359][T12646] 9pnet_fd: Insufficient options for proto=fd [ 198.121170][T12663] netlink: 'syz.3.3087': attribute type 13 has an invalid length. [ 198.131831][T12663] gretap0: refused to change device tx_queue_len [ 198.138558][T12663] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 198.193509][T12666] __nla_validate_parse: 1 callbacks suppressed [ 198.193527][T12666] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3089'. [ 198.238848][T12671] loop3: detected capacity change from 0 to 128 [ 198.252798][T12671] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 198.266112][T12671] ext4 filesystem being mounted at /589/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 198.362448][ T3314] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 198.410165][T12684] loop3: detected capacity change from 0 to 512 [ 198.433021][T12684] EXT4-fs: Ignoring removed orlov option [ 198.454614][T12684] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 198.483172][T12684] EXT4-fs (loop3): 1 truncate cleaned up [ 198.501392][T12684] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 198.550077][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 198.568853][T12691] loop3: detected capacity change from 0 to 512 [ 198.577237][T12691] EXT4-fs error (device loop3): ext4_orphan_get:1392: inode #15: comm syz.3.3097: casefold flag without casefold feature [ 198.590147][T12691] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.3097: couldn't read orphan inode 15 (err -117) [ 198.618257][T12691] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 198.784918][T12691] hub 9-0:1.0: USB hub found [ 198.789612][T12691] hub 9-0:1.0: 8 ports detected [ 198.830053][T12691] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3097'. [ 198.883271][T12706] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3102'. [ 198.910613][T12454] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 198.932169][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 198.975487][T12716] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3103'. [ 198.995076][T12716] usb usb1: usbfs: interface 0 claimed by hub while 'syz.1.3103' sets config #1 [ 199.158657][T12736] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3105'. [ 199.174644][T12736] loop4: detected capacity change from 0 to 512 [ 199.295047][T12736] EXT4-fs (loop4): 1 orphan inode deleted [ 199.301715][T12736] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 199.314786][T12736] ext4 filesystem being mounted at /114/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 199.424415][T12745] loop3: detected capacity change from 0 to 512 [ 199.465436][T12745] EXT4-fs error (device loop3): ext4_orphan_get:1392: inode #15: comm syz.3.3114: casefold flag without casefold feature [ 199.506666][T12750] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3115'. [ 199.526036][T12745] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.3114: couldn't read orphan inode 15 (err -117) [ 199.538822][T12745] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 199.557267][T12745] hub 9-0:1.0: USB hub found [ 199.562057][T12745] hub 9-0:1.0: 8 ports detected [ 199.603986][T12745] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3114'. [ 199.626916][T12756] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 199.684377][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 199.726333][T12764] loop2: detected capacity change from 0 to 512 [ 199.733428][T12764] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 199.745801][T12764] EXT4-fs (loop2): 1 truncate cleaned up [ 199.752106][T12764] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 199.824469][T12770] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3120'. [ 199.836112][T12770] usb usb1: usbfs: interface 0 claimed by hub while 'syz.2.3120' sets config #1 [ 199.848948][T10819] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 199.873793][T12454] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 199.957611][T12787] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 200.004876][T12792] netlink: 'syz.1.3129': attribute type 13 has an invalid length. [ 200.014380][T12792] gretap0: refused to change device tx_queue_len [ 200.022066][T12792] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 200.216225][T12814] loop2: detected capacity change from 0 to 512 [ 200.230512][T12814] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 200.326047][T12818] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3133'. [ 200.343565][T12818] loop4: detected capacity change from 0 to 512 [ 200.356430][T12814] EXT4-fs (loop2): 1 truncate cleaned up [ 200.363902][T12814] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 200.390393][T12818] EXT4-fs (loop4): 1 orphan inode deleted [ 200.397007][T12818] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 200.410004][T12818] ext4 filesystem being mounted at /119/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 200.464225][T12799] chnl_net:caif_netlink_parms(): no params data found [ 200.482554][T12826] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3134'. [ 200.540695][T12830] usb usb1: usbfs: interface 0 claimed by hub while 'syz.2.3134' sets config #1 [ 200.614217][ T29] kauditd_printk_skb: 480 callbacks suppressed [ 200.614232][ T29] audit: type=1326 audit(1757018283.659:19157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12819 comm="syz.1.3137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32497eebe9 code=0x7ffc0000 [ 200.644306][ T29] audit: type=1326 audit(1757018283.659:19158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12819 comm="syz.1.3137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32497eebe9 code=0x7ffc0000 [ 200.685449][T12799] bridge0: port 1(bridge_slave_0) entered blocking state [ 200.692821][T12799] bridge0: port 1(bridge_slave_0) entered disabled state [ 200.700218][T12799] bridge_slave_0: entered allmulticast mode [ 200.702309][T12454] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 200.706899][T12799] bridge_slave_0: entered promiscuous mode [ 200.722545][T12799] bridge0: port 2(bridge_slave_1) entered blocking state [ 200.729660][T12799] bridge0: port 2(bridge_slave_1) entered disabled state [ 200.736976][T12799] bridge_slave_1: entered allmulticast mode [ 200.755853][T12799] bridge_slave_1: entered promiscuous mode [ 200.783645][T12799] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 200.794281][T12799] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 200.817905][T12799] team0: Port device team_slave_0 added [ 200.827231][T12799] team0: Port device team_slave_1 added [ 200.879866][T12845] SELinux: syz.2.3140 (12845) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 200.930254][T12849] netlink: 'syz.1.3142': attribute type 13 has an invalid length. [ 200.983459][T10819] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 201.013881][ T29] audit: type=1400 audit(1757018284.089:19159): avc: denied { associate } for pid=12837 comm="syz.2.3140" name="file0" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 201.044941][T12854] loop4: detected capacity change from 0 to 128 [ 201.052596][ T29] audit: type=1326 audit(1757018284.119:19160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12853 comm="syz.4.3144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4f07eebe9 code=0x7ffc0000 [ 201.076391][ T29] audit: type=1326 audit(1757018284.119:19161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12853 comm="syz.4.3144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4f07eebe9 code=0x7ffc0000 [ 201.100190][ T29] audit: type=1326 audit(1757018284.119:19162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12853 comm="syz.4.3144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4f07eebe9 code=0x7ffc0000 [ 201.124008][ T29] audit: type=1326 audit(1757018284.119:19163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12853 comm="syz.4.3144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7fe4f07eebe9 code=0x7ffc0000 [ 201.147580][ T29] audit: type=1326 audit(1757018284.119:19164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12853 comm="syz.4.3144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4f07eebe9 code=0x7ffc0000 [ 201.171263][ T29] audit: type=1326 audit(1757018284.119:19165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12853 comm="syz.4.3144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4f07eebe9 code=0x7ffc0000 [ 201.194890][ T29] audit: type=1326 audit(1757018284.119:19166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12853 comm="syz.4.3144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4f07eebe9 code=0x7ffc0000 [ 201.221128][T12854] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 201.233745][T12854] ext4 filesystem being mounted at /121/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 201.253325][ T3434]  (unregistering): Released all slaves [ 201.267836][T12799] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 201.275026][T12799] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 201.301274][T12799] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 201.313619][T12849] gretap0: refused to change device tx_queue_len [ 201.320407][T12849] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 201.370036][T12799] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 201.377140][T12799] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 201.403244][T12799] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 201.414864][ T3434] tipc: Left network mode [ 201.452271][T12860] usb usb1: usbfs: interface 0 claimed by hub while 'syz.1.3145' sets config #1 [ 201.475257][ T3434] hsr_slave_0: left promiscuous mode [ 201.475974][T10819] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 201.542210][T12865] loop0: detected capacity change from 0 to 512 [ 201.561545][T12865] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 201.588694][T12865] EXT4-fs (loop0): 1 truncate cleaned up [ 201.595971][T12865] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 201.657868][T12799] hsr_slave_0: entered promiscuous mode [ 201.668891][T12799] hsr_slave_1: entered promiscuous mode [ 201.675768][T12799] debugfs: 'hsr0' already exists in 'hsr' [ 201.681659][T12799] Cannot create hsr debugfs directory [ 201.724526][T12873] usb usb1: usbfs: interface 0 claimed by hub while 'syz.0.3148' sets config #1 [ 201.791260][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 201.840818][T12872] usb usb1: usbfs: interface 0 claimed by hub while 'syz.1.3150' sets config #1 [ 202.025909][T12894] loop4: detected capacity change from 0 to 512 [ 202.364175][T12895] SELinux: syz.1.3155 (12895) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 202.409221][T12894] EXT4-fs (loop4): 1 orphan inode deleted [ 202.415609][T12894] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 202.432583][T12894] ext4 filesystem being mounted at /125/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 202.606689][T12799] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 202.615924][T12799] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 202.624920][T12799] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 202.634092][T12799] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 202.676626][T12799] 8021q: adding VLAN 0 to HW filter on device bond0 [ 202.689257][T12799] 8021q: adding VLAN 0 to HW filter on device team0 [ 202.697678][T10819] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 202.699960][ T173] bridge0: port 1(bridge_slave_0) entered blocking state [ 202.713849][ T173] bridge0: port 1(bridge_slave_0) entered forwarding state [ 202.725987][ T173] bridge0: port 2(bridge_slave_1) entered blocking state [ 202.733295][ T173] bridge0: port 2(bridge_slave_1) entered forwarding state [ 202.750506][T12799] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 202.761098][T12799] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 202.836101][T12799] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 202.905951][T12799] veth0_vlan: entered promiscuous mode [ 202.913725][T12799] veth1_vlan: entered promiscuous mode [ 202.928655][T12799] veth0_macvtap: entered promiscuous mode [ 202.936152][T12799] veth1_macvtap: entered promiscuous mode [ 202.946686][T12799] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 202.957867][T12799] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 202.968675][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.977785][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.987128][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.996299][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.061499][T12935] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 203.523259][T12955] loop3: detected capacity change from 0 to 512 [ 203.530302][T12955] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 203.543183][T12955] EXT4-fs (loop3): 1 truncate cleaned up [ 203.550650][T12955] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 203.594387][T12944] chnl_net:caif_netlink_parms(): no params data found [ 203.619027][T12959] __nla_validate_parse: 4 callbacks suppressed [ 203.619042][T12959] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3167'. [ 203.661644][T12944] bridge0: port 1(bridge_slave_0) entered blocking state [ 203.668641][T12955] usb usb1: usbfs: interface 0 claimed by hub while 'syz.3.3167' sets config #1 [ 203.669030][T12944] bridge0: port 1(bridge_slave_0) entered disabled state [ 203.685429][T12944] bridge_slave_0: entered allmulticast mode [ 203.692029][T12944] bridge_slave_0: entered promiscuous mode [ 203.699534][T12944] bridge0: port 2(bridge_slave_1) entered blocking state [ 203.706782][T12944] bridge0: port 2(bridge_slave_1) entered disabled state [ 203.714317][T12944] bridge_slave_1: entered allmulticast mode [ 203.720931][T12944] bridge_slave_1: entered promiscuous mode [ 203.745701][T12944] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 203.756735][T12944] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 203.768347][T12799] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 203.796182][T12944] team0: Port device team_slave_0 added [ 203.803741][T12944] team0: Port device team_slave_1 added [ 203.832892][T12944] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 203.839935][T12944] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 203.865900][T12944] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 203.877959][T12944] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 203.884970][T12944] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 203.911026][T12944] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 203.926068][ T3434] bridge_slave_1: left allmulticast mode [ 203.931782][ T3434] bridge_slave_1: left promiscuous mode [ 203.937469][ T3434] bridge0: port 2(bridge_slave_1) entered disabled state [ 203.946809][ T3434] bridge_slave_0: left allmulticast mode [ 203.952499][ T3434] bridge_slave_0: left promiscuous mode [ 203.958156][ T3434] bridge0: port 1(bridge_slave_0) entered disabled state [ 204.078636][T12975] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3168'. [ 204.094558][ T3434]  (unregistering): (slave bond_slave_0): Releasing backup interface [ 204.105179][ T3434]  (unregistering): (slave bond_slave_1): Releasing backup interface [ 204.115070][ T3434]  (unregistering): Released all slaves [ 204.136572][T12976] loop4: detected capacity change from 0 to 512 [ 204.235783][T12976] EXT4-fs (loop4): 1 orphan inode deleted [ 204.242584][T12976] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 204.258834][T12976] ext4 filesystem being mounted at /130/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 204.335161][ T3434] hsr_slave_0: left promiscuous mode [ 204.357071][ T3434] hsr_slave_1: left promiscuous mode [ 204.468479][ T3434] team0 (unregistering): Port device team_slave_1 removed [ 204.479139][ T3434] team0 (unregistering): Port device team_slave_0 removed [ 204.488424][ T182] smc: removing ib device syz! [ 204.514628][T12985] loop3: detected capacity change from 0 to 512 [ 204.523462][T12985] EXT4-fs error (device loop3): ext4_orphan_get:1392: inode #15: comm syz.3.3171: casefold flag without casefold feature [ 204.524343][T12944] hsr_slave_0: entered promiscuous mode [ 204.536485][T12985] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.3171: couldn't read orphan inode 15 (err -117) [ 204.542469][T12944] hsr_slave_1: entered promiscuous mode [ 204.555071][T12985] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 204.559886][T12944] debugfs: 'hsr0' already exists in 'hsr' [ 204.577738][T12944] Cannot create hsr debugfs directory [ 204.578572][T12985] hub 9-0:1.0: USB hub found [ 204.587967][T12985] hub 9-0:1.0: 8 ports detected [ 204.604819][T12985] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3171'. [ 204.665739][T10819] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 204.676344][T12985] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 204.683808][T12985] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 204.698262][T12985] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 204.705773][T12985] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 204.722497][T12991] loop4: detected capacity change from 0 to 512 [ 204.729743][T12991] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 204.747069][T12991] EXT4-fs (loop4): 1 truncate cleaned up [ 204.758448][T12991] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 204.820281][T10819] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 204.840526][T12994] loop4: detected capacity change from 0 to 512 [ 204.847872][T12994] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 204.859532][T12994] EXT4-fs (loop4): 1 truncate cleaned up [ 204.865743][T12994] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 204.957333][T12994] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3173'. [ 204.968955][T12994] usb usb1: usbfs: interface 0 claimed by hub while 'syz.4.3173' sets config #1 [ 204.992027][T10819] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 205.158952][T12944] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 205.168685][T12944] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 205.178474][T12944] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 205.188033][T12944] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 205.232481][T12944] 8021q: adding VLAN 0 to HW filter on device bond0 [ 205.246040][T12944] 8021q: adding VLAN 0 to HW filter on device team0 [ 205.255931][ T3434] bridge0: port 1(bridge_slave_0) entered blocking state [ 205.263076][ T3434] bridge0: port 1(bridge_slave_0) entered forwarding state [ 205.274825][ T173] bridge0: port 2(bridge_slave_1) entered blocking state [ 205.282209][ T173] bridge0: port 2(bridge_slave_1) entered forwarding state [ 205.365701][T12944] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 205.437294][T12944] veth0_vlan: entered promiscuous mode [ 205.445724][T12944] veth1_vlan: entered promiscuous mode [ 205.461144][T12944] veth0_macvtap: entered promiscuous mode [ 205.469090][T12944] veth1_macvtap: entered promiscuous mode [ 205.475774][T13024] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3179'. [ 205.482011][T12944] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 205.496278][T12944] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 205.507507][ T144] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.516623][ T144] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.531096][ T144] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.542757][ T144] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.617599][T13029] loop4: detected capacity change from 0 to 128 [ 205.624349][ T29] kauditd_printk_skb: 169 callbacks suppressed [ 205.624378][ T29] audit: type=1326 audit(1757018288.699:19336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13028 comm="syz.4.3180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fe4f07ed84a code=0x7ffc0000 [ 205.655463][ T29] audit: type=1326 audit(1757018288.729:19337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13028 comm="syz.4.3180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fe4f07ed84a code=0x7ffc0000 [ 205.675971][T13029] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 205.679010][ T29] audit: type=1326 audit(1757018288.729:19338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13028 comm="syz.4.3180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7fe4f07ed457 code=0x7ffc0000 [ 205.697403][T13034] loop0: detected capacity change from 0 to 512 [ 205.714920][ T29] audit: type=1326 audit(1757018288.729:19339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13028 comm="syz.4.3180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7fe4f07f038a code=0x7ffc0000 [ 205.724103][T13029] ext4 filesystem being mounted at /139/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 205.745578][T13034] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 205.756089][ T29] audit: type=1326 audit(1757018288.839:19340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13028 comm="syz.4.3180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe4f07ed550 code=0x7ffc0000 [ 205.788860][ T29] audit: type=1326 audit(1757018288.839:19341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13028 comm="syz.4.3180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=80 compat=0 ip=0x7fe4f07ed937 code=0x7ffc0000 [ 205.793641][T13034] EXT4-fs (loop0): 1 truncate cleaned up [ 205.812587][ T29] audit: type=1326 audit(1757018288.839:19342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13028 comm="syz.4.3180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe4f07ed550 code=0x7ffc0000 [ 205.829510][T13034] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 205.841860][ T29] audit: type=1326 audit(1757018288.839:19343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13028 comm="syz.4.3180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4f07eebe9 code=0x7ffc0000 [ 205.878031][ T29] audit: type=1326 audit(1757018288.839:19344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13028 comm="syz.4.3180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4f07eebe9 code=0x7ffc0000 [ 205.902405][ T29] audit: type=1326 audit(1757018288.849:19345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13028 comm="syz.4.3180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4f07eebe9 code=0x7ffc0000 [ 205.965049][T10819] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 206.002121][T13038] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3182'. [ 206.032839][T12799] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 206.081703][T13034] usb usb1: usbfs: interface 0 claimed by hub while 'syz.0.3182' sets config #1 [ 206.102998][T13043] loop3: detected capacity change from 0 to 128 [ 206.122246][T12944] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 206.122698][T13043] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 206.153310][T13043] ext4 filesystem being mounted at /8/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 206.196720][T13049] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3183'. [ 206.214061][T13049] loop2: detected capacity change from 0 to 512 [ 206.274370][T13049] EXT4-fs (loop2): 1 orphan inode deleted [ 206.281148][T13049] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 206.293821][T13049] ext4 filesystem being mounted at /22/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 206.452357][T12799] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 206.503703][T13051] infiniband syz!: set active [ 206.508449][T13051] infiniband syz!: added team_slave_0 [ 206.541706][T13051] RDS/IB: syz!: added [ 206.552262][T13051] smc: adding ib device syz! with port count 1 [ 206.559081][T13051] smc: ib device syz! port 1 has pnetid [ 206.602685][T13066] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3190'. [ 206.861014][T13072] loop0: detected capacity change from 0 to 512 [ 206.870236][T13072] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 206.881009][T12454] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 206.893645][T13074] loop4: detected capacity change from 0 to 512 [ 206.912743][T13072] EXT4-fs (loop0): 1 truncate cleaned up [ 206.925154][T13074] EXT4-fs error (device loop4): ext4_orphan_get:1392: inode #15: comm syz.4.3195: casefold flag without casefold feature [ 206.954524][T13074] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.3195: couldn't read orphan inode 15 (err -117) [ 206.986226][T13074] hub 9-0:1.0: USB hub found [ 206.991075][T13074] hub 9-0:1.0: 8 ports detected [ 207.056304][T13083] SELinux: syz.2.3194 (13083) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 207.111807][T13074] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3195'. [ 207.141102][T13086] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 207.334344][T13097] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3200'. [ 207.503266][T13108] loop3: detected capacity change from 0 to 512 [ 207.521925][T13108] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 207.572988][T13108] EXT4-fs (loop3): 1 truncate cleaned up [ 207.685011][T13115] usb usb1: usbfs: interface 0 claimed by hub while 'syz.3.3205' sets config #1 [ 207.936324][T13129] loop3: detected capacity change from 0 to 512 [ 207.945672][ T12] bridge_slave_1: left allmulticast mode [ 207.946281][T13129] EXT4-fs error (device loop3): ext4_orphan_get:1392: inode #15: comm syz.3.3211: casefold flag without casefold feature [ 207.951410][ T12] bridge_slave_1: left promiscuous mode [ 207.964677][T13129] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.3211: couldn't read orphan inode 15 (err -117) [ 207.969902][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 207.988337][T13129] hub 9-0:1.0: USB hub found [ 207.994064][T13129] hub 9-0:1.0: 8 ports detected [ 208.014201][ T12] bridge_slave_0: left promiscuous mode [ 208.020127][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 208.163727][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 208.182312][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 208.200155][ T12] bond0 (unregistering): Released all slaves [ 208.346005][ T12] hsr_slave_0: left promiscuous mode [ 208.352440][ T12] hsr_slave_1: left promiscuous mode [ 208.361984][ T12] pim6reg (unregistering): left allmulticast mode [ 208.407193][ T12] team0 (unregistering): Port device team_slave_1 removed [ 208.417501][ T12] team0 (unregistering): Port device team_slave_0 removed [ 208.456662][T13116] chnl_net:caif_netlink_parms(): no params data found [ 208.614773][T13116] bridge0: port 1(bridge_slave_0) entered blocking state [ 208.622066][T13116] bridge0: port 1(bridge_slave_0) entered disabled state [ 208.629569][T13116] bridge_slave_0: entered allmulticast mode [ 208.636729][T13116] bridge_slave_0: entered promiscuous mode [ 209.448154][T13116] bridge0: port 2(bridge_slave_1) entered blocking state [ 209.455354][T13116] bridge0: port 2(bridge_slave_1) entered disabled state [ 209.463427][T13116] bridge_slave_1: entered allmulticast mode [ 209.470237][T13116] bridge_slave_1: entered promiscuous mode [ 209.490525][T13116] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 209.509198][T13116] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 209.518728][T13161] __nla_validate_parse: 3 callbacks suppressed [ 209.518741][T13161] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3216'. [ 209.593279][T13116] team0: Port device team_slave_0 added [ 209.611323][T13116] team0: Port device team_slave_1 added [ 209.661916][T13116] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 209.668929][T13116] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 209.694960][T13116] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 209.786995][T13116] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 209.794281][T13116] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 209.820317][T13116] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 209.866655][T13116] hsr_slave_0: entered promiscuous mode [ 209.878460][T13116] hsr_slave_1: entered promiscuous mode [ 209.885139][T13116] debugfs: 'hsr0' already exists in 'hsr' [ 209.890914][T13116] Cannot create hsr debugfs directory [ 209.956314][T13184] loop3: detected capacity change from 0 to 512 [ 209.963578][T13186] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3226'. [ 209.965732][T13184] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 210.001384][T13184] EXT4-fs (loop3): 1 truncate cleaned up [ 210.137639][T13194] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3227'. [ 210.152986][T13184] usb usb1: usbfs: interface 0 claimed by hub while 'syz.3.3227' sets config #1 [ 210.849494][T13116] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 210.859171][T13116] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 210.936288][T13116] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 210.947600][T13116] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 211.136592][T13116] 8021q: adding VLAN 0 to HW filter on device bond0 [ 211.241286][T13116] 8021q: adding VLAN 0 to HW filter on device team0 [ 211.265174][T13116] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 211.275607][T13116] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 211.288800][T13224] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3237'. [ 211.340177][ T3434] bridge0: port 1(bridge_slave_0) entered blocking state [ 211.347541][ T3434] bridge0: port 1(bridge_slave_0) entered forwarding state [ 211.365464][T13226] vhci_hcd: invalid port number 0 [ 211.372702][ T3434] bridge0: port 2(bridge_slave_1) entered blocking state [ 211.379911][ T3434] bridge0: port 2(bridge_slave_1) entered forwarding state [ 211.417326][T13229] : renamed from bond0 (while UP) [ 211.451474][T13234] loop0: detected capacity change from 0 to 512 [ 211.470991][T13234] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 211.493620][T13116] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 211.744038][T13234] EXT4-fs (loop0): 1 truncate cleaned up [ 211.996868][T13116] veth0_vlan: entered promiscuous mode [ 212.015148][T13116] veth1_vlan: entered promiscuous mode [ 212.038823][T13116] veth0_macvtap: entered promiscuous mode [ 212.047385][T13259] loop3: detected capacity change from 0 to 512 [ 212.063560][T13116] veth1_macvtap: entered promiscuous mode [ 212.070633][T13259] EXT4-fs error (device loop3): ext4_orphan_get:1392: inode #15: comm syz.3.3244: casefold flag without casefold feature [ 212.079312][T13116] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 212.108644][T13259] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.3244: couldn't read orphan inode 15 (err -117) [ 212.120168][T13116] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 212.133023][ T182] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.150014][ T3434] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.166148][ T3434] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.181356][ T3434] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.183854][T13259] hub 9-0:1.0: USB hub found [ 212.201355][T13259] hub 9-0:1.0: 8 ports detected [ 212.214000][T13269] vhci_hcd: invalid port number 0 [ 212.313680][T13280] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3244'. [ 212.397527][ T182] ================================================================== [ 212.405818][ T182] BUG: KCSAN: data-race in n_tty_receive_char_flow_ctrl / tty_set_termios [ 212.414429][ T182] [ 212.416749][ T182] write to 0xffff888119339108 of 44 bytes by task 13288 on cpu 1: [ 212.424724][ T182] tty_set_termios+0xc0/0x8c0 [ 212.429412][ T182] set_termios+0x496/0x4e0 [ 212.433870][ T182] tty_mode_ioctl+0x379/0x5c0 [ 212.438649][ T182] n_tty_ioctl_helper+0x91/0x210 [ 212.443733][ T182] n_tty_ioctl+0x101/0x200 [ 212.448239][ T182] tty_ioctl+0x845/0xb80 [ 212.452664][ T182] __se_sys_ioctl+0xce/0x140 [ 212.457710][ T182] __x64_sys_ioctl+0x43/0x50 [ 212.462402][ T182] x64_sys_call+0x1816/0x2ff0 [ 212.467363][ T182] do_syscall_64+0xd2/0x200 [ 212.472065][ T182] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 212.477981][ T182] [ 212.480404][ T182] read to 0xffff888119339122 of 1 bytes by task 182 on cpu 0: [ 212.488044][ T182] n_tty_receive_char_flow_ctrl+0x59/0x1a0 [ 212.494242][ T182] n_tty_lookahead_flow_ctrl+0xed/0x130 [ 212.499812][ T182] tty_port_default_lookahead_buf+0x91/0xc0 [ 212.505739][ T182] flush_to_ldisc+0x285/0x340 [ 212.510453][ T182] process_scheduled_works+0x4ce/0x9d0 [ 212.515930][ T182] worker_thread+0x582/0x770 [ 212.520651][ T182] kthread+0x486/0x510 [ 212.524849][ T182] ret_from_fork+0xda/0x150 [ 212.529625][ T182] ret_from_fork_asm+0x1a/0x30 [ 212.534397][ T182] [ 212.536810][ T182] value changed: 0x13 -> 0x31 [ 212.542016][ T182] [ 212.544392][ T182] Reported by Kernel Concurrency Sanitizer on: [ 212.550650][ T182] CPU: 0 UID: 0 PID: 182 Comm: kworker/u8:6 Not tainted syzkaller #0 PREEMPT(voluntary) [ 212.560466][ T182] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 212.570533][ T182] Workqueue: events_unbound flush_to_ldisc [ 212.576454][ T182] ================================================================== [ 212.895307][ T29] kauditd_printk_skb: 331 callbacks suppressed [ 212.895322][ T29] audit: type=1326 audit(1757018295.959:19677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13278 comm="syz.0.3251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff54423ebe9 code=0x7ffc0000 [ 213.056275][ T29] audit: type=1326 audit(1757018296.009:19678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13278 comm="syz.0.3251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff54423ebe9 code=0x7ffc0000 [ 213.080015][ T29] audit: type=1326 audit(1757018296.009:19679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13278 comm="syz.0.3251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7ff54423ebe9 code=0x7ffc0000 [ 213.103741][ T29] audit: type=1326 audit(1757018296.029:19680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13278 comm="syz.0.3251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff54423ebe9 code=0x7ffc0000 [ 213.127677][ T29] audit: type=1326 audit(1757018296.029:19681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13278 comm="syz.0.3251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff54423ebe9 code=0x7ffc0000 [ 213.151430][ T29] audit: type=1326 audit(1757018296.049:19682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13278 comm="syz.0.3251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=229 compat=0 ip=0x7ff54423ebe9 code=0x7ffc0000 [ 213.175049][ T29] audit: type=1326 audit(1757018296.049:19683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13278 comm="syz.0.3251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff54423ebe9 code=0x7ffc0000 [ 213.199089][ T29] audit: type=1326 audit(1757018296.049:19684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13278 comm="syz.0.3251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff54423ebe9 code=0x7ffc0000 [ 213.223688][ T29] audit: type=1326 audit(1757018296.069:19685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13278 comm="syz.0.3251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=213 compat=0 ip=0x7ff54423ebe9 code=0x7ffc0000 [ 213.247424][ T29] audit: type=1326 audit(1757018296.069:19686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13278 comm="syz.0.3251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff54423ebe9 code=0x7ffc0000