last executing test programs: 4.955569821s ago: executing program 1 (id=154): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="b5af000000000000000001000000100002800c0001"], 0x24}}, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) gettid() r2 = socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x2, @perf_config_ext={0x1, 0x100}, 0x1000, 0x5dd8, 0x0, 0x5, 0x0, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$nl_route(0x10, 0x3, 0x0) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x4e20, @empty}, 0x10) sendto$inet(r2, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) shutdown(r2, 0x0) recvfrom(r2, &(0x7f0000000000)=""/116, 0xffffffdd, 0x734, 0x0, 0x0) 4.033363146s ago: executing program 1 (id=164): openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x3f) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB, @ANYRES32], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00'}, 0x10) ioctl$RTC_UIE_ON(0xffffffffffffffff, 0x7003) r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x0) creat(0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r1 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r1, 0x80045505, &(0x7f0000000040)=@usbdevfs_connect) r2 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x1ff, 0x1501) ioctl$USBDEVFS_SETCONFIGURATION(r2, 0x80045505, &(0x7f0000000000)=0x1) 3.879763338s ago: executing program 4 (id=166): socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f00000005c0)={[{@discard}, {@bh}, {@nomblk_io_submit}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12) write(r1, &(0x7f0000004200)='t', 0x1) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) fgetxattr(0xffffffffffffffff, 0x0, 0x0, 0x0) sendfile(r1, r0, 0x0, 0x3ffff) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) sendfile(r1, r0, 0x0, 0x7ffff000) 3.825790489s ago: executing program 1 (id=167): socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f00000005c0)={[{@discard}, {@bh}, {@nomblk_io_submit}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12) write(r1, &(0x7f0000004200)='t', 0x1) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) fgetxattr(0xffffffffffffffff, 0x0, 0x0, 0x0) sendfile(r1, r0, 0x0, 0x3ffff) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) sendfile(r1, r0, 0x0, 0x7ffff000) 3.269469568s ago: executing program 0 (id=169): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000400), 0x109000) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) r0 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x802) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="aefdda9d240303005a90f57f07703aeff0f64eb9ee07962c220a2e11b44e65d76641cb010852f42607", 0x29}], 0x1) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x38, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x10, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x10040047}, 0x240008c4) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000580)='sched_switch\x00'}, 0x10) r1 = syz_io_uring_setup(0x400a, &(0x7f0000000200)={0x0, 0x501c, 0x1410, 0x0, 0x29f}, &(0x7f0000000000), &(0x7f0000000080)) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r1, 0x10, &(0x7f0000000540)={0x7, 0x0, 0x0, &(0x7f0000000500)=[0xfffffffffffff2ea, 0x9, 0xf6c]}, 0x20) read(r0, &(0x7f0000001400)=""/4074, 0x103a) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x820, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x100000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff0000, 0x20, 0x0, 0x7ffffffe, 0x0, 0x9}, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f1, 0x0) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) 3.179395579s ago: executing program 0 (id=170): socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f00000700000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00@\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r3}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r2}, &(0x7f0000000040), &(0x7f0000000080)=r3}, 0x20) unshare(0x62040200) 2.878672224s ago: executing program 3 (id=173): openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x3f) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007000000000000", @ANYRES32], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00'}, 0x10) ioctl$RTC_UIE_ON(0xffffffffffffffff, 0x7003) r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x0) creat(0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r1 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r1, 0x80045505, &(0x7f0000000040)=@usbdevfs_connect) r2 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x1ff, 0x1501) ioctl$USBDEVFS_SETCONFIGURATION(r2, 0x80045505, &(0x7f0000000000)=0x1) 2.662265047s ago: executing program 4 (id=174): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, 0x0, 0x0) 2.648571098s ago: executing program 2 (id=175): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x8000) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f00000005c0)={[{@discard}, {@bh}, {@nomblk_io_submit}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12) write(r2, &(0x7f0000004200)='t', 0x1) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) fgetxattr(0xffffffffffffffff, 0x0, 0x0, 0x0) sendfile(r2, r1, 0x0, 0x3ffff) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) sendfile(r2, r1, 0x0, 0x7ffff000) 2.581630719s ago: executing program 4 (id=176): openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x3f) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f0000070000000000", @ANYRES32], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00'}, 0x10) ioctl$RTC_UIE_ON(0xffffffffffffffff, 0x7003) r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x0) creat(0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r1 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r1, 0x80045505, &(0x7f0000000040)=@usbdevfs_connect) r2 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x1ff, 0x1501) ioctl$USBDEVFS_SETCONFIGURATION(r2, 0x80045505, &(0x7f0000000000)=0x1) 2.581007149s ago: executing program 3 (id=177): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x8000) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f00000005c0)={[{@discard}, {@bh}, {@nomblk_io_submit}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12) write(r2, 0x0, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) fgetxattr(0xffffffffffffffff, 0x0, 0x0, 0x0) sendfile(r2, r1, 0x0, 0x3ffff) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) sendfile(r2, r1, 0x0, 0x7ffff000) 2.49343783s ago: executing program 1 (id=178): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b7040000000000008500000057"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="b5af000000000000000001000000100002800c0001"], 0x24}}, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x2, @perf_config_ext={0x1, 0x100}, 0x1000, 0x5dd8, 0x0, 0x5, 0x0, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$nl_route(0x10, 0x3, 0x0) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x4e20, @empty}, 0x10) sendto$inet(r2, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) shutdown(r2, 0x0) recvfrom(r2, &(0x7f0000000000)=""/116, 0xffffffdd, 0x734, 0x0, 0x0) 2.421794271s ago: executing program 4 (id=179): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="b5af000000000000000001000000100002800c0001"], 0x24}}, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) gettid() r2 = socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x2, @perf_config_ext={0x1, 0x100}, 0x1000, 0x5dd8, 0x0, 0x5, 0x0, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x4e20, @empty}, 0x10) sendto$inet(r2, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) recvfrom(r2, &(0x7f0000000000)=""/116, 0xffffffdd, 0x734, 0x0, 0x0) 2.369704512s ago: executing program 3 (id=180): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="b5af000000000000000001000000100002800c0001"], 0x24}}, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) gettid() r2 = socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x2, @perf_config_ext={0x1, 0x100}, 0x1000, 0x5dd8, 0x0, 0x5, 0x0, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$nl_route(0x10, 0x3, 0x0) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x4e20, @empty}, 0x10) sendto$inet(r2, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) shutdown(r2, 0x0) recvfrom(r2, &(0x7f0000000000)=""/116, 0xffffffdd, 0x734, 0x0, 0x0) 1.997573328s ago: executing program 0 (id=181): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x8000) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f00000005c0)={[{@discard}, {@bh}, {@nomblk_io_submit}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12) write(r2, &(0x7f0000004200)='t', 0x1) r3 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) fgetxattr(0xffffffffffffffff, 0x0, 0x0, 0x0) sendfile(r2, r1, 0x0, 0x3ffff) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) sendfile(r2, r1, 0x0, 0x7ffff000) 1.644875724s ago: executing program 2 (id=182): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0}, 0x18) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000200)={[{@init_itable_val}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@user_xattr}, {@errors_remount}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$eJzs289rHFUcAPDvzCat/WViqT+aVo1WMfgjadJae/CiKHhQEPRQjzFJS+y2kSaCLUGjSD1Kwbt4FPwLPOlF1JPgVe9SKJJLq6eV2Z1Jdje7aZJustX9fGCS92be8t53Z97ue/N2AuhZw9mfJGJ/RPweEQO1bGOB4dq/W8uLU38vL04lUam89VdSLXdzeXGqKFq8bl+R6YtIP0viSIt65y9fOT9ZLs9cyvNjCxfeH5u/fOW52QuT52bOzVycOH365InxF05NPN+ROLO4bg59NHf08GvvXHtj6sy1d3/+Ninib4qjQ4bXO/hkpdLh6rrrQF066etiQ9iUUq2bRn+1/w9EKVZP3kC8+mlXGwdsq0qlUnmg/eGlCvA/lkS3WwB0R/FFn81/i22Hhh53hRsv1SZAWdy38q12pC/SvEx/0/y2k4Yj4szSP19lW2zPfQgAgAbfZ+OfZ1uN/9Kovy90b76GMhgR90XEwYg4FRGHIuL+iGrZByPioU3W37xIsnb8k17fUmAblI3/XszXthrHf8XoLwZLee5ANf7+5OxseeZ4/p6MRP/uLD++Th0/vPLbF+2O1Y//si2rvxgL5u243re78TXTkwuTdxJzvRufRAz1tYo/WVkJSCLicEQMbbGO2ae/Odru2O3jX0cH1pkqX0c8VTv/S9EUfyFZf31y7J4ozxwfK66KtX759eqb7eq/o/g7IDv/e1te/yvxDyb167Xzm6/j6h+ft53TbPX635W83bDvw8mFhUvjEbuS12uNrt8/0VRuYrV8Fv/Isdb9/2CsvhNHIiK7iB+OiEci4tG87Y9FxOMRcWyd+H96+Yn3th7/9srin97U+V9N7IrmPa0TpfM/ftdQ6eBm4s/O/8lqaiTfs5HPv420a2tXMwAAAPz3pBGxP5J0dCWdpqOjtd/wH4q9aXlufuGZs3MfXJyuPSMwGP1pcadroO5+6Hg+rS/yE035E/l94y9Le6r50am58nS3g4cet69N/8/8Wep264Bt53kt6F36P/Qu/R96l/4PvatF/9/TjXYAO6/V9//HXWgHsPOa+r9lP+gh5v/Qu/R/6F36P/Sk+T1x+4fkJSTWJCK9K5ohsU2Jbn8yAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAdMa/AQAA//9QOObV") lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f0000000300), &(0x7f0000000040)=ANY=[], 0xfe37, 0x0) unlink(&(0x7f0000000180)='./file1\x00') bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYRESDEC=r0], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) perf_event_open(&(0x7f0000001700)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xf, 0x1}, 0x8806, 0x3, 0x634e, 0x0, 0x0, 0x1, 0xfff6, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) 1.602035014s ago: executing program 1 (id=183): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa2000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="b5af000000000000000001000000100002800c0001"], 0x24}}, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) gettid() r2 = socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x2, @perf_config_ext={0x1, 0x100}, 0x1000, 0x5dd8, 0x0, 0x5, 0x0, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$nl_route(0x10, 0x3, 0x0) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x4e20, @empty}, 0x10) sendto$inet(r2, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) shutdown(r2, 0x0) recvfrom(r2, &(0x7f0000000000)=""/116, 0xffffffdd, 0x734, 0x0, 0x0) 1.558888755s ago: executing program 4 (id=184): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x3f) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x9, 0x4, 0x7ffc0002}]}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f00000700000000000000", @ANYRES32], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00'}, 0x10) ioctl$RTC_UIE_ON(0xffffffffffffffff, 0x7003) r1 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) creat(0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r3 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r3, 0x80045505, &(0x7f0000000040)=@usbdevfs_connect) r4 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x1ff, 0x1501) ioctl$USBDEVFS_SETCONFIGURATION(r4, 0x80045505, &(0x7f0000000000)=0x1) fchdir(r2) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x513883, 0x488) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x10000, 0xa) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r6, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) getdents(r5, &(0x7f0000000080)=""/122, 0x7a) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x5) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYRES16], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r7}, 0x18) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x2) 1.483721456s ago: executing program 2 (id=185): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x3f) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x9, 0x4, 0x7ffc0002}]}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f00000700000000000000", @ANYRES32], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00'}, 0x10) ioctl$RTC_UIE_ON(0xffffffffffffffff, 0x7003) r1 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) creat(0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r3 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r3, 0x80045505, &(0x7f0000000040)=@usbdevfs_connect) r4 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x1ff, 0x1501) ioctl$USBDEVFS_SETCONFIGURATION(r4, 0x80045505, &(0x7f0000000000)=0x1) fchdir(r2) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x513883, 0x488) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x10000, 0xa) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r6, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000d00)='sched_switch\x00'}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) getdents(r5, &(0x7f0000000080)=""/122, 0x7a) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x5) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYRES16], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r7}, 0x18) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x2) 1.473399466s ago: executing program 3 (id=186): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, 0x0, 0x0) 1.385491908s ago: executing program 3 (id=187): socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f00000700000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00@\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r3}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r2}, &(0x7f0000000040), &(0x7f0000000080)=r3}, 0x20) unshare(0x62040200) 827.603747ms ago: executing program 0 (id=188): openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x3f) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f00000700000000000000"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00'}, 0x10) ioctl$RTC_UIE_ON(0xffffffffffffffff, 0x7003) r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x1) fsmount(r0, 0x0, 0x0) creat(0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r1 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r1, 0x80045505, &(0x7f0000000040)=@usbdevfs_connect) r2 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x1ff, 0x1501) ioctl$USBDEVFS_SETCONFIGURATION(r2, 0x80045505, &(0x7f0000000000)=0x1) 686.586209ms ago: executing program 1 (id=189): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="b5af000000000000000001000000100002800c0001"], 0x24}}, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) gettid() r2 = socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x2, @perf_config_ext={0x1, 0x100}, 0x1000, 0x5dd8, 0x0, 0x5, 0x0, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$nl_route(0x10, 0x3, 0x0) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x4e20, @empty}, 0x10) sendto$inet(r2, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) shutdown(r2, 0x0) recvfrom(r2, &(0x7f0000000000)=""/116, 0xffffffdd, 0x734, 0x0, 0x0) 682.895669ms ago: executing program 0 (id=190): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x3f) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x9, 0x4, 0x7ffc0002}]}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f00000700000000000000", @ANYRES32], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00'}, 0x10) ioctl$RTC_UIE_ON(0xffffffffffffffff, 0x7003) r1 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) creat(0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r3 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r3, 0x80045505, &(0x7f0000000040)=@usbdevfs_connect) r4 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x1ff, 0x1501) ioctl$USBDEVFS_SETCONFIGURATION(r4, 0x80045505, &(0x7f0000000000)=0x1) fchdir(r2) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x513883, 0x488) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x10000, 0xa) preadv(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000d00)='sched_switch\x00', r6}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) getdents(r5, &(0x7f0000000080)=""/122, 0x7a) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x5) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYRES16], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r7}, 0x18) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x2) 653.886539ms ago: executing program 4 (id=191): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x8000) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f00000005c0)={[{@discard}, {@bh}, {@nomblk_io_submit}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$eJzs3c9vFFUcAPDvbH/QUrSFGBUP0sQYSJSWFjDEeICrIQ3+iBcvVloQKdDQGi2aUBK8mBgvxph48iD+F0rkyklPHrx4MiREDUcT18x2pnTb2ZYubacyn0+y9M17O7w33X773r6+NxtAZQ2m/9Qi9kbEdBLRn8wvlnVGVji48Lx7f39yOn0kUa+/8WcSSZaXPz/JvvZlJ/dExM8/JbGnY2W9M3NXzo9PTU1ezo6HZy9MD8/MXTl47sL42cmzkxdHXxo9dvTI0WMjh9q6rqsFeSevv/9h/2djb3/3zT/JyPe/jSVxPF7Nnrj0OjbKYAw2vifJyqK+YxtdWUk6sp+TpS9x0llig1iX/PXrioinoj864v6L1x+fvlZq44BNVU8i6kBFJeIfKiofB+Tv7Ze/D66VMioBtsLdEwsTACvjv3NhbjB6GnMDO+8lsXRaJ4mI9mbmmu2KiNu3xq6fuTV2PTZpHg4oNn8tIp4uiv+kEf8D0RMDjfivNcV/Oi44lX1N819vs/7lU8XiH7bOQvz3rBr/0SL+31kS/++2Wf/g/eR7vU3x39vuJQEAAAAAAEBl3TwRES8W/f2/trj+JwrW//RFxPENqH9w2fHKv//X7mxANUCBuyciXilc/1vLV/8OdGSpxxrrAbqSM+emJg9FxOMRcSC6dqTHI6vUcfDzPV+3KhvM1v/lj7T+29lawKwddzp3NJ8zMT47/rDXDUTcvRbxTOH632Sx/08K+v/098H0A9ax5/kbp1qVrR3/wGapfxuxv7D/v3/XimT1+3MMN8YDw/moYKVnP/7ih1b1txv/bjEBDy/t/3euHv8DydL79cysv47Dc531VmXtjv+7kzcbt5zpzvI+Gp+dvTwS0Z2c7Ehzm/JH199meBTl8ZDHSxr/B55bff6vaPzfGxHzy/7v5K/mPcW5J//t+71Ve4z/oTxp/E+sq/9ff2L0xsCPrep/sP7/SKOvP5DlmP+DBV/lYdrdnF8Qjp1FRVvdXgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4FNQiYlcktaHFdK02NBTRFxFPxM7a1KWZ2RfOXPrg4kRa1vj8/1r+Sb/9C8dJ/vn/A0uOR5cdH46I3RHxZUdv43jo9KWpibIvHgAAAAAAAAAAAAAAAAAAALaJvhb7/1N/dJTdOmDTdZbdAKA0BfH/SxntALae/h+qS/xDdYl/qC7xD9Ul/qG6xD9Ul/iH6hL/AAAAAADwSNm97+avSUTMv9zbeKS6s7KuUlsGbLZa2Q0ASuMWP1Bdlv5AdXmPDyRrlPe0PGmtM1czffohTgYAAAAAAAAAAACAytm/1/5/qCr7/6G67P+H6sr3/+8ruR3A1vMeH4g1dvIX7v9f8ywAAAAAAAAAAAAAYCPNzF05Pz41NXlZ4q3t0YytTNTr9avpT8F2ac//PJEvhd8u7VmWyPf6PdhZ5f1OAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAmv0XAAD//xYSJMU=") r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12) write(r2, &(0x7f0000004200)='t', 0x1) r3 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) fgetxattr(0xffffffffffffffff, 0x0, 0x0, 0x0) sendfile(r2, r1, 0x0, 0x3ffff) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) sendfile(r2, r1, 0x0, 0x7ffff000) 572.749811ms ago: executing program 2 (id=192): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x3f) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x9, 0x4, 0x7ffc0002}]}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f", @ANYRES32], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00'}, 0x10) ioctl$RTC_UIE_ON(0xffffffffffffffff, 0x7003) r1 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) creat(0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r3 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r3, 0x80045505, &(0x7f0000000040)=@usbdevfs_connect) r4 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x1ff, 0x1501) ioctl$USBDEVFS_SETCONFIGURATION(r4, 0x80045505, &(0x7f0000000000)=0x1) fchdir(r2) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x513883, 0x488) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x10000, 0xa) preadv(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffff"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000d00)='sched_switch\x00', r6}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) getdents(r5, &(0x7f0000000080)=""/122, 0x7a) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x5) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYRES16], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r7}, 0x18) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x2) 478.071732ms ago: executing program 0 (id=193): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x3f) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x9, 0x4, 0x7ffc0002}]}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f00000700000000000000", @ANYRES32], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00'}, 0x10) ioctl$RTC_UIE_ON(0xffffffffffffffff, 0x7003) r1 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) creat(0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r3 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r3, 0x80045505, &(0x7f0000000040)=@usbdevfs_connect) r4 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x1ff, 0x1501) ioctl$USBDEVFS_SETCONFIGURATION(r4, 0x80045505, &(0x7f0000000000)=0x1) fchdir(r2) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x10000, 0xa) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r6, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000d00)='sched_switch\x00', r7}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) getdents(r5, &(0x7f0000000080)=""/122, 0x7a) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x5) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYRES16], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r8}, 0x18) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x2) 168.597317ms ago: executing program 2 (id=194): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r1}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) 69.592879ms ago: executing program 2 (id=195): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="b5af000000000000000001000000100002800c0001"], 0x24}}, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) gettid() r2 = socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x2, @perf_config_ext={0x1, 0x100}, 0x1000, 0x5dd8, 0x0, 0x5, 0x0, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x4e20, @empty}, 0x10) sendto$inet(r2, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) recvfrom(r2, &(0x7f0000000000)=""/116, 0xffffffdd, 0x734, 0x0, 0x0) 0s ago: executing program 3 (id=196): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x8000) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f00000005c0)={[{@discard}, {@bh}, {@nomblk_io_submit}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12) write(r2, &(0x7f0000004200)='t', 0x1) r3 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) fgetxattr(0xffffffffffffffff, 0x0, 0x0, 0x0) sendfile(r2, r1, 0x0, 0x3ffff) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) sendfile(r2, r1, 0x0, 0x7ffff000) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.95' (ED25519) to the list of known hosts. [ 28.453992][ T29] audit: type=1400 audit(1748802794.263:62): avc: denied { mounton } for pid=3304 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 28.455167][ T3304] cgroup: Unknown subsys name 'net' [ 28.476813][ T29] audit: type=1400 audit(1748802794.263:63): avc: denied { mount } for pid=3304 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 28.504210][ T29] audit: type=1400 audit(1748802794.293:64): avc: denied { unmount } for pid=3304 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 28.638249][ T3304] cgroup: Unknown subsys name 'cpuset' [ 28.644494][ T3304] cgroup: Unknown subsys name 'rlimit' [ 28.816660][ T29] audit: type=1400 audit(1748802794.623:65): avc: denied { setattr } for pid=3304 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 28.840623][ T29] audit: type=1400 audit(1748802794.633:66): avc: denied { create } for pid=3304 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 28.862334][ T29] audit: type=1400 audit(1748802794.633:67): avc: denied { write } for pid=3304 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 28.879869][ T3308] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 28.883642][ T29] audit: type=1400 audit(1748802794.633:68): avc: denied { read } for pid=3304 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 28.913124][ T29] audit: type=1400 audit(1748802794.643:69): avc: denied { mounton } for pid=3304 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 28.938083][ T29] audit: type=1400 audit(1748802794.643:70): avc: denied { mount } for pid=3304 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 28.958171][ T3304] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 28.961949][ T29] audit: type=1400 audit(1748802794.703:71): avc: denied { relabelto } for pid=3308 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 30.833151][ T3314] chnl_net:caif_netlink_parms(): no params data found [ 30.955801][ T3322] chnl_net:caif_netlink_parms(): no params data found [ 30.969117][ T3314] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.976281][ T3314] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.984628][ T3314] bridge_slave_0: entered allmulticast mode [ 30.992367][ T3314] bridge_slave_0: entered promiscuous mode [ 31.019774][ T3314] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.026992][ T3314] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.034724][ T3314] bridge_slave_1: entered allmulticast mode [ 31.041378][ T3314] bridge_slave_1: entered promiscuous mode [ 31.071231][ T3314] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.090710][ T3316] chnl_net:caif_netlink_parms(): no params data found [ 31.103152][ T3314] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.125616][ T3323] chnl_net:caif_netlink_parms(): no params data found [ 31.151142][ T3322] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.159540][ T3322] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.168206][ T3322] bridge_slave_0: entered allmulticast mode [ 31.176020][ T3322] bridge_slave_0: entered promiscuous mode [ 31.189148][ T3314] team0: Port device team_slave_0 added [ 31.198308][ T3319] chnl_net:caif_netlink_parms(): no params data found [ 31.214976][ T3322] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.222275][ T3322] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.229807][ T3322] bridge_slave_1: entered allmulticast mode [ 31.236462][ T3322] bridge_slave_1: entered promiscuous mode [ 31.244065][ T3314] team0: Port device team_slave_1 added [ 31.278947][ T3314] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.286961][ T3314] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.313337][ T3314] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.338638][ T3314] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.345719][ T3314] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.372529][ T3314] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.393167][ T3322] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.415143][ T3322] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.448353][ T3316] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.455649][ T3316] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.463273][ T3316] bridge_slave_0: entered allmulticast mode [ 31.469968][ T3316] bridge_slave_0: entered promiscuous mode [ 31.489146][ T3323] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.496264][ T3323] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.503645][ T3323] bridge_slave_0: entered allmulticast mode [ 31.510145][ T3323] bridge_slave_0: entered promiscuous mode [ 31.521688][ T3316] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.528959][ T3316] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.536328][ T3316] bridge_slave_1: entered allmulticast mode [ 31.543176][ T3316] bridge_slave_1: entered promiscuous mode [ 31.557174][ T3314] hsr_slave_0: entered promiscuous mode [ 31.564269][ T3314] hsr_slave_1: entered promiscuous mode [ 31.571989][ T3323] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.579590][ T3323] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.586949][ T3323] bridge_slave_1: entered allmulticast mode [ 31.594378][ T3323] bridge_slave_1: entered promiscuous mode [ 31.606055][ T3322] team0: Port device team_slave_0 added [ 31.622064][ T3319] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.629296][ T3319] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.636469][ T3319] bridge_slave_0: entered allmulticast mode [ 31.643225][ T3319] bridge_slave_0: entered promiscuous mode [ 31.656754][ T3322] team0: Port device team_slave_1 added [ 31.669428][ T3316] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.679653][ T3319] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.688858][ T3319] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.696882][ T3319] bridge_slave_1: entered allmulticast mode [ 31.705470][ T3319] bridge_slave_1: entered promiscuous mode [ 31.713290][ T3323] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.734166][ T3316] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.743575][ T3322] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.750558][ T3322] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.777337][ T3322] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.799947][ T3323] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.818474][ T3322] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.825537][ T3322] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.853183][ T3322] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.888457][ T3316] team0: Port device team_slave_0 added [ 31.897698][ T3319] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.910219][ T3319] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.930402][ T3316] team0: Port device team_slave_1 added [ 31.951463][ T3323] team0: Port device team_slave_0 added [ 31.960184][ T3323] team0: Port device team_slave_1 added [ 32.000914][ T3319] team0: Port device team_slave_0 added [ 32.009407][ T3319] team0: Port device team_slave_1 added [ 32.024053][ T3316] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 32.037252][ T3316] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 32.065141][ T3316] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 32.080364][ T3322] hsr_slave_0: entered promiscuous mode [ 32.087990][ T3322] hsr_slave_1: entered promiscuous mode [ 32.094417][ T3322] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 32.102553][ T3322] Cannot create hsr debugfs directory [ 32.121062][ T3323] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 32.128608][ T3323] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 32.158819][ T3323] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 32.171968][ T3316] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 32.181177][ T3316] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 32.209465][ T3316] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 32.238316][ T3319] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 32.245408][ T3319] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 32.271894][ T3319] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 32.283341][ T3319] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 32.290632][ T3319] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 32.316933][ T3319] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 32.328344][ T3323] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 32.335838][ T3323] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 32.363952][ T3323] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 32.433497][ T3316] hsr_slave_0: entered promiscuous mode [ 32.440546][ T3316] hsr_slave_1: entered promiscuous mode [ 32.446876][ T3316] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 32.455511][ T3316] Cannot create hsr debugfs directory [ 32.475850][ T3319] hsr_slave_0: entered promiscuous mode [ 32.485455][ T3319] hsr_slave_1: entered promiscuous mode [ 32.492112][ T3319] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 32.500155][ T3319] Cannot create hsr debugfs directory [ 32.518547][ T3323] hsr_slave_0: entered promiscuous mode [ 32.527760][ T3323] hsr_slave_1: entered promiscuous mode [ 32.535980][ T3323] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 32.546222][ T3323] Cannot create hsr debugfs directory [ 32.640085][ T3314] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 32.652489][ T3314] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 32.664312][ T3314] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 32.688681][ T3314] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 32.780259][ T3322] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 32.790946][ T3322] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 32.806873][ T3322] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 32.816774][ T3322] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 32.845974][ T3316] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 32.855455][ T3316] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 32.865088][ T3316] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 32.874690][ T3316] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 32.922395][ T3319] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 32.932128][ T3319] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 32.941561][ T3319] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 32.952839][ T3314] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.966910][ T3319] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 32.985532][ T3314] 8021q: adding VLAN 0 to HW filter on device team0 [ 33.009300][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.017130][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.041443][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.049330][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.062833][ T3323] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 33.071992][ T3323] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 33.082244][ T3323] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 33.092688][ T3323] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 33.112107][ T3322] 8021q: adding VLAN 0 to HW filter on device bond0 [ 33.146988][ T3316] 8021q: adding VLAN 0 to HW filter on device bond0 [ 33.174990][ T3322] 8021q: adding VLAN 0 to HW filter on device team0 [ 33.195021][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.203051][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.213227][ T3316] 8021q: adding VLAN 0 to HW filter on device team0 [ 33.230071][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.239007][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.257137][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.268148][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.279098][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.291897][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.342603][ T3319] 8021q: adding VLAN 0 to HW filter on device bond0 [ 33.366813][ T3323] 8021q: adding VLAN 0 to HW filter on device bond0 [ 33.385496][ T3319] 8021q: adding VLAN 0 to HW filter on device team0 [ 33.409966][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.418835][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.437303][ T3322] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 33.463316][ T3323] 8021q: adding VLAN 0 to HW filter on device team0 [ 33.478542][ T787] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.486865][ T787] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.521211][ T787] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.529596][ T787] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.539482][ T787] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.548808][ T787] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.575839][ T3314] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.599047][ T3316] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.611225][ T3322] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.668780][ T3323] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 33.735334][ T3319] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.812724][ T3314] veth0_vlan: entered promiscuous mode [ 33.842854][ T3323] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.852191][ T3314] veth1_vlan: entered promiscuous mode [ 33.891724][ T3322] veth0_vlan: entered promiscuous mode [ 33.928667][ T3314] veth0_macvtap: entered promiscuous mode [ 33.946466][ T3322] veth1_vlan: entered promiscuous mode [ 33.961402][ T3314] veth1_macvtap: entered promiscuous mode [ 33.998798][ T3319] veth0_vlan: entered promiscuous mode [ 34.013601][ T3314] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 34.025540][ T3316] veth0_vlan: entered promiscuous mode [ 34.033320][ T3322] veth0_macvtap: entered promiscuous mode [ 34.042246][ T3319] veth1_vlan: entered promiscuous mode [ 34.050145][ T3314] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 34.059620][ T3322] veth1_macvtap: entered promiscuous mode [ 34.079448][ T3314] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.089165][ T3314] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.098349][ T3314] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.107350][ T3314] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.130981][ T29] kauditd_printk_skb: 9 callbacks suppressed [ 34.130981][ T3323] veth0_vlan: entered promiscuous mode [ 34.130998][ T29] audit: type=1400 audit(1748802799.943:81): avc: denied { mounton } for pid=3314 comm="syz-executor" path="/root/syzkaller.a2XNiP/syz-tmp" dev="sda1" ino=2041 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 34.142084][ T29] audit: type=1400 audit(1748802799.943:82): avc: denied { mount } for pid=3314 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 34.150667][ T3319] veth0_macvtap: entered promiscuous mode [ 34.168144][ T29] audit: type=1400 audit(1748802799.943:83): avc: denied { mounton } for pid=3314 comm="syz-executor" path="/root/syzkaller.a2XNiP/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 34.196445][ T3316] veth1_vlan: entered promiscuous mode [ 34.197357][ T29] audit: type=1400 audit(1748802799.943:84): avc: denied { mount } for pid=3314 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 34.240487][ T3319] veth1_macvtap: entered promiscuous mode [ 34.251753][ T29] audit: type=1400 audit(1748802799.943:85): avc: denied { mounton } for pid=3314 comm="syz-executor" path="/root/syzkaller.a2XNiP/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 34.276151][ T3316] veth0_macvtap: entered promiscuous mode [ 34.286124][ T29] audit: type=1400 audit(1748802799.943:86): avc: denied { mounton } for pid=3314 comm="syz-executor" path="/root/syzkaller.a2XNiP/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=3726 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 34.301459][ T3323] veth1_vlan: entered promiscuous mode [ 34.327852][ T29] audit: type=1400 audit(1748802799.943:87): avc: denied { unmount } for pid=3314 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 34.341345][ T3316] veth1_macvtap: entered promiscuous mode [ 34.369402][ T29] audit: type=1400 audit(1748802800.183:88): avc: denied { mounton } for pid=3314 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=536 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 34.384208][ T3322] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 34.394716][ T29] audit: type=1400 audit(1748802800.183:89): avc: denied { mount } for pid=3314 comm="syz-executor" name="/" dev="gadgetfs" ino=4398 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 34.421290][ T3323] veth0_macvtap: entered promiscuous mode [ 34.447039][ T3319] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 34.460672][ T3314] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 34.464299][ T3316] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 34.488143][ T3322] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 34.497822][ T3319] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 34.506577][ T29] audit: type=1400 audit(1748802800.313:90): avc: denied { read write } for pid=3314 comm="syz-executor" name="loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 34.535945][ T3319] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.545563][ T3319] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.556193][ T3319] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.565822][ T3319] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.581746][ T3323] veth1_macvtap: entered promiscuous mode [ 34.596084][ T3323] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 34.615798][ T3316] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 34.635759][ T3454] infiniband syz1: set active [ 34.639386][ T3323] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 34.640877][ T3454] infiniband syz1: added veth0_to_bridge [ 34.655589][ T3322] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.666287][ T3322] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.672669][ T3454] RDS/IB: syz1: added [ 34.676753][ T3322] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.685588][ T3454] smc: adding ib device syz1 with port count 1 [ 34.691932][ T3322] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.700100][ T3454] smc: ib device syz1 port 1 has pnetid [ 34.726581][ T3316] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.735539][ T3316] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.745319][ T3316] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.754380][ T3316] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.777447][ T3323] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.786636][ T3323] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.795758][ T3323] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.805499][ T3323] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.977570][ T3467] loop3: detected capacity change from 0 to 128 [ 35.136201][ T3472] loop4: detected capacity change from 0 to 2048 [ 35.178478][ T3468] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1'. [ 35.449348][ T3468] loop0: detected capacity change from 0 to 512 [ 35.466243][ T3469] bridge0: entered promiscuous mode [ 35.530041][ T3469] macvlan2: entered promiscuous mode [ 35.536221][ T3468] EXT4-fs: Ignoring removed i_version option [ 35.565679][ T3463] netlink: 'syz.2.3': attribute type 13 has an invalid length. [ 35.598813][ T3469] bridge0: port 3(macvlan2) entered blocking state [ 35.606149][ T3469] bridge0: port 3(macvlan2) entered disabled state [ 35.613967][ T3468] ext4: Bad value for 'auto_da_alloc' [ 35.723105][ T3469] macvlan2: entered allmulticast mode [ 35.729141][ T3469] bridge0: entered allmulticast mode [ 36.137396][ T3454] syz.1.2 (3454) used greatest stack depth: 10616 bytes left [ 36.150263][ T3469] macvlan2: left allmulticast mode [ 36.156856][ T3469] bridge0: left allmulticast mode [ 36.194164][ T3469] bridge0: left promiscuous mode [ 36.239520][ T3482] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6'. [ 36.306091][ T3463] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.306321][ T3463] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.386565][ T3463] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 36.401847][ T3463] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 36.497810][ T3463] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 36.498098][ T3463] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 36.498132][ T3463] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 36.498162][ T3463] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 36.543618][ T3486] loop1: detected capacity change from 0 to 8192 [ 36.613132][ T3488] netlink: 'syz.2.8': attribute type 4 has an invalid length. [ 36.613158][ T3488] netlink: 17 bytes leftover after parsing attributes in process `syz.2.8'. [ 36.680671][ T3488] wireguard0: entered promiscuous mode [ 36.680693][ T3488] wireguard0: entered allmulticast mode [ 36.772256][ T3492] loop4: detected capacity change from 0 to 512 [ 36.772915][ T3492] ======================================================= [ 36.772915][ T3492] WARNING: The mand mount option has been deprecated and [ 36.772915][ T3492] and is ignored by this kernel. Remove the mand [ 36.772915][ T3492] option from the mount to silence this warning. [ 36.772915][ T3492] ======================================================= [ 36.793253][ T3492] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 36.793736][ T3492] ext4 filesystem being mounted at /1/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 36.837188][ T3492] netlink: 28 bytes leftover after parsing attributes in process `syz.4.9'. [ 36.837217][ T3492] netlink: 108 bytes leftover after parsing attributes in process `syz.4.9'. [ 36.837305][ T3492] netlink: 28 bytes leftover after parsing attributes in process `syz.4.9'. [ 36.837349][ T3492] netlink: 108 bytes leftover after parsing attributes in process `syz.4.9'. [ 36.837366][ T3492] netlink: 84 bytes leftover after parsing attributes in process `syz.4.9'. [ 36.857982][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.181285][ T3485] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 37.366125][ T3510] Zero length message leads to an empty skb [ 37.738689][ T3519] loop0: detected capacity change from 0 to 512 [ 37.748814][ T3519] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 37.781838][ T3519] EXT4-fs (loop0): 1 orphan inode deleted [ 37.790355][ T3519] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 37.803842][ T556] EXT4-fs error (device loop0): ext4_release_dquot:6969: comm kworker/u8:5: Failed to release dquot type 1 [ 37.803876][ T3519] ext4 filesystem being mounted at /2/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 37.851101][ T3524] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(4) [ 37.858224][ T3524] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 37.866185][ T3524] vhci_hcd vhci_hcd.0: Device attached [ 37.873905][ T3507] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 37.883764][ T3524] loop4: detected capacity change from 0 to 512 [ 37.901448][ T3524] EXT4-fs (loop4): 1 orphan inode deleted [ 37.909301][ T3524] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 37.923114][ T298] EXT4-fs error (device loop4): ext4_release_dquot:6969: comm kworker/u8:4: Failed to release dquot type 1 [ 37.923584][ T3524] ext4 filesystem being mounted at /3/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 37.954418][ T3524] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 37.965342][ T3524] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [ 37.978235][ T3524] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 37.990662][ T3524] EXT4-fs error (device loop4): ext4_lookup:1787: inode #15: comm syz.4.14: iget: bad i_size value: 360287970189639690 [ 38.015659][ T3525] vhci_hcd: connection closed [ 38.015820][ T298] vhci_hcd: stop threads [ 38.026026][ T298] vhci_hcd: release socket [ 38.031126][ T298] vhci_hcd: disconnect device [ 38.158620][ T3323] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.315577][ T3540] loop0: detected capacity change from 0 to 512 [ 38.352165][ T3540] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.369273][ T3540] ext4 filesystem being mounted at /5/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 38.483616][ T3540] syz.0.18 (3540) used greatest stack depth: 10200 bytes left [ 38.511170][ T3323] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.539221][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.892700][ T3555] loop0: detected capacity change from 0 to 512 [ 38.913920][ T3555] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 38.923017][ T3555] EXT4-fs (loop0): orphan cleanup on readonly fs [ 38.930949][ T3555] EXT4-fs warning (device loop0): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 38.948555][ T3555] EXT4-fs (loop0): Cannot turn on quotas: error -117 [ 38.956716][ T3555] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.19: bg 0: block 40: padding at end of block bitmap is not set [ 38.972452][ T3555] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 38.983596][ T3555] EXT4-fs (loop0): 1 truncate cleaned up [ 38.990386][ T3555] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 39.026195][ T3554] EXT4-fs error (device loop0): ext4_lookup:1787: inode #15: comm syz.0.19: iget: bad i_size value: 360287970189639690 [ 39.042309][ T3554] EXT4-fs error (device loop0): ext4_lookup:1787: inode #15: comm syz.0.19: iget: bad i_size value: 360287970189639690 [ 39.063952][ T3554] EXT4-fs error (device loop0): ext4_xattr_block_get:593: inode #16: comm syz.0.19: corrupted xattr block 31: invalid header [ 39.080361][ T3554] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=16 [ 39.090422][ T3554] EXT4-fs error (device loop0): ext4_xattr_block_get:593: inode #16: comm syz.0.19: corrupted xattr block 31: invalid header [ 39.105173][ T3554] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=16 [ 39.114857][ T3554] EXT4-fs error (device loop0): ext4_get_link:106: inode #16: comm syz.0.19: bad symlink. [ 39.185346][ T29] kauditd_printk_skb: 599 callbacks suppressed [ 39.185366][ T29] audit: type=1326 audit(1748802804.583:687): auid=4294967295 uid=0 gid=4294967040 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3552 comm="syz.4.21" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe645e8e969 code=0x7ffc0000 [ 39.217516][ T29] audit: type=1326 audit(1748802804.583:688): auid=4294967295 uid=0 gid=4294967040 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3552 comm="syz.4.21" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe645e8e969 code=0x7ffc0000 [ 39.242744][ T29] audit: type=1326 audit(1748802804.583:689): auid=4294967295 uid=0 gid=4294967040 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3552 comm="syz.4.21" exe="/root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7fe645e8e969 code=0x7ffc0000 [ 39.268662][ T29] audit: type=1326 audit(1748802804.593:690): auid=4294967295 uid=0 gid=4294967040 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3552 comm="syz.4.21" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe645e8e969 code=0x7ffc0000 [ 39.297850][ T29] audit: type=1326 audit(1748802804.593:691): auid=4294967295 uid=0 gid=4294967040 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3552 comm="syz.4.21" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe645e8e969 code=0x7ffc0000 [ 39.325018][ T29] audit: type=1326 audit(1748802804.593:692): auid=4294967295 uid=0 gid=4294967040 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3552 comm="syz.4.21" exe="/root/syz-executor" sig=0 arch=c000003e syscall=68 compat=0 ip=0x7fe645e8e969 code=0x7ffc0000 [ 39.351202][ T29] audit: type=1326 audit(1748802804.593:693): auid=4294967295 uid=0 gid=4294967040 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3552 comm="syz.4.21" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe645e8e969 code=0x7ffc0000 [ 39.377537][ T29] audit: type=1326 audit(1748802804.593:694): auid=4294967295 uid=0 gid=4294967040 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3552 comm="syz.4.21" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe645e8e969 code=0x7ffc0000 [ 39.404450][ T29] audit: type=1326 audit(1748802804.603:695): auid=4294967295 uid=0 gid=4294967040 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3552 comm="syz.4.21" exe="/root/syz-executor" sig=0 arch=c000003e syscall=69 compat=0 ip=0x7fe645e8e969 code=0x7ffc0000 [ 39.431410][ T29] audit: type=1326 audit(1748802804.603:696): auid=4294967295 uid=0 gid=4294967040 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3552 comm="syz.4.21" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe645e8e969 code=0x7ffc0000 [ 39.530810][ T3323] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.589850][ T3559] netlink: 14 bytes leftover after parsing attributes in process `syz.0.22'. [ 39.642576][ T3559] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 39.659253][ T3559] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 39.687490][ C1] hrtimer: interrupt took 27306 ns [ 39.695610][ T3559] bond0 (unregistering): Released all slaves [ 39.718431][ T3566] loop0: detected capacity change from 0 to 1024 [ 39.782469][ T3566] process 'syz.0.22' launched './file1' with NULL argv: empty string added [ 39.796528][ T3567] loop4: detected capacity change from 0 to 512 [ 39.851953][ T3567] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.881206][ T3543] syz.1.16 (3543) used greatest stack depth: 8616 bytes left [ 39.889816][ T3567] ext4 filesystem being mounted at /6/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 39.916320][ T3565] loop2: detected capacity change from 0 to 512 [ 39.931540][ T3567] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.058974][ T3565] EXT4-fs: Ignoring removed mblk_io_submit option [ 40.085889][ T3565] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 40.185010][ T3565] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 40.209600][ T3537] syz.1.16 (3537) used greatest stack depth: 7792 bytes left [ 40.219850][ T3565] EXT4-fs (loop2): 1 truncate cleaned up [ 40.246278][ T3565] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.302312][ T3565] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 40.377614][ T3582] loop0: detected capacity change from 0 to 1024 [ 40.421234][ T3582] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 40.461841][ T3587] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(14) [ 40.469633][ T3587] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 40.478244][ T3587] vhci_hcd vhci_hcd.0: Device attached [ 40.590009][ T3595] Illegal XDP return value 4294967282 on prog (id 32) dev N/A, expect packet loss! [ 40.620985][ T3589] vhci_hcd: connection closed [ 40.625115][ T12] vhci_hcd: stop threads [ 40.635714][ T12] vhci_hcd: release socket [ 40.640317][ T12] vhci_hcd: disconnect device [ 40.667796][ T23] vhci_hcd: vhci_device speed not set [ 40.707362][ T3595] netlink: 32 bytes leftover after parsing attributes in process `syz.1.32'. [ 41.151221][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.173561][ T3323] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.201178][ T3610] Invalid ELF header type: 3 != 1 [ 41.480077][ T3612] loop3: detected capacity change from 0 to 8192 [ 41.603507][ T3612] hsr0: entered promiscuous mode [ 41.652951][ T3612] netlink: 4 bytes leftover after parsing attributes in process `syz.3.37'. [ 41.685778][ T3612] hsr_slave_0: left promiscuous mode [ 41.701798][ T3617] syz.0.36 uses obsolete (PF_INET,SOCK_PACKET) [ 41.766231][ T3612] hsr_slave_1: left promiscuous mode [ 41.794841][ T3612] hsr0 (unregistering): left promiscuous mode [ 41.835579][ T3623] bond0: entered promiscuous mode [ 41.841271][ T3623] bond0: entered allmulticast mode [ 41.917833][ T3623] 8021q: adding VLAN 0 to HW filter on device bond0 [ 41.939935][ T3628] RDS: rds_bind could not find a transport for fe80::aa, load rds_tcp or rds_rdma? [ 42.028152][ T3623] bond0 (unregistering): Released all slaves [ 42.044301][ T3617] loop0: detected capacity change from 0 to 1024 [ 42.082600][ T3629] smc: net device bond0 applied user defined pnetid SYZ2 [ 42.090969][ T3630] smc: net device bond0 erased user defined pnetid SYZ2 [ 42.568105][ T3637] netlink: 8 bytes leftover after parsing attributes in process `+}[@'. [ 42.800376][ T3652] netlink: 'syz.2.42': attribute type 21 has an invalid length. [ 42.808932][ T3652] IPv6: NLM_F_CREATE should be specified when creating new route [ 42.896349][ T3654] hub 4-0:1.0: USB hub found [ 42.907776][ T3654] hub 4-0:1.0: 8 ports detected [ 42.948127][ T3654] loop0: detected capacity change from 0 to 512 [ 42.986300][ T3654] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 43.030524][ T3654] EXT4-fs (loop0): 1 truncate cleaned up [ 43.046238][ T3654] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 43.230286][ T3323] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.541697][ T3699] netlink: 24 bytes leftover after parsing attributes in process `syz.0.47'. [ 44.410509][ T29] kauditd_printk_skb: 228 callbacks suppressed [ 44.410524][ T29] audit: type=1326 audit(1748802810.223:925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3709 comm="syz.1.48" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7a74ae969 code=0x7ffc0000 [ 44.467974][ T29] audit: type=1326 audit(1748802810.253:926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3709 comm="syz.1.48" exe="/root/syz-executor" sig=0 arch=c000003e syscall=89 compat=0 ip=0x7fe7a74ae969 code=0x7ffc0000 [ 44.492598][ T29] audit: type=1326 audit(1748802810.253:927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3709 comm="syz.1.48" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7a74ae969 code=0x7ffc0000 [ 44.519789][ T29] audit: type=1326 audit(1748802810.253:928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3709 comm="syz.1.48" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7a74ae969 code=0x7ffc0000 [ 44.544379][ T29] audit: type=1326 audit(1748802810.263:929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3709 comm="syz.1.48" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe7a74ae969 code=0x7ffc0000 [ 44.568242][ T29] audit: type=1326 audit(1748802810.263:930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3709 comm="syz.1.48" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7a74ae969 code=0x7ffc0000 [ 44.592537][ T29] audit: type=1326 audit(1748802810.263:931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3709 comm="syz.1.48" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7a74ae969 code=0x7ffc0000 [ 44.618338][ T29] audit: type=1326 audit(1748802810.263:932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3709 comm="syz.1.48" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe7a74ae969 code=0x7ffc0000 [ 44.644087][ T29] audit: type=1326 audit(1748802810.263:933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3709 comm="syz.1.48" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7a74ae969 code=0x7ffc0000 [ 44.673963][ T29] audit: type=1326 audit(1748802810.263:934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3709 comm="syz.1.48" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7a74ae969 code=0x7ffc0000 [ 46.085847][ T3842] netlink: 'syz.4.58': attribute type 13 has an invalid length. [ 46.185930][ T3842] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.194379][ T3842] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.296894][ T3842] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 46.313422][ T3842] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 46.379202][ T3854] loop1: detected capacity change from 0 to 1024 [ 46.398772][ T3854] EXT4-fs: Ignoring removed bh option [ 46.405636][ T3854] EXT4-fs: Ignoring removed nomblk_io_submit option [ 46.418572][ T3842] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.428376][ T3842] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.438853][ T3842] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.449716][ T3842] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.464712][ T3854] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.961267][ T3862] usb usb1: usbfs: interface 0 claimed by hub while 'syz.3.63' sets config #0 [ 46.990374][ T3862] usb usb1: usbfs: interface 0 claimed by hub while 'syz.3.63' sets config #1 [ 47.273004][ T3871] loop4: detected capacity change from 0 to 512 [ 47.293352][ T3871] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 47.314951][ T3873] loop2: detected capacity change from 0 to 1024 [ 47.338235][ T3871] EXT4-fs (loop4): 1 truncate cleaned up [ 47.346364][ T3873] EXT4-fs: Ignoring removed bh option [ 47.353402][ T3873] EXT4-fs: Ignoring removed nomblk_io_submit option [ 47.366580][ T3871] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.387838][ T3873] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.504457][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.543802][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.559578][ T3878] SELinux: failed to load policy [ 47.587056][ T3880] netlink: 4 bytes leftover after parsing attributes in process `syz.1.70'. [ 47.673565][ T3885] netlink: 20 bytes leftover after parsing attributes in process `syz.4.71'. [ 47.695811][ T3885] futex_wake_op: syz.4.71 tries to shift op by -1; fix this program [ 47.763711][ T3890] loop0: detected capacity change from 0 to 1024 [ 47.789521][ T3890] EXT4-fs: Ignoring removed bh option [ 47.795480][ T3890] EXT4-fs: Ignoring removed nomblk_io_submit option [ 47.850281][ T3890] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.872148][ T3894] SELinux: syz.4.75 (3894) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 48.316359][ T3888] loop3: detected capacity change from 0 to 512 [ 48.466919][ T3888] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 48.570814][ T3888] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.596822][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.650050][ T3888] ext4 filesystem being mounted at /14/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 48.953195][ T3906] loop2: detected capacity change from 0 to 1024 [ 48.981060][ T3906] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.089938][ T3323] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.112569][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.867549][ T29] kauditd_printk_skb: 320 callbacks suppressed [ 49.867576][ T29] audit: type=1400 audit(1748802815.643:1255): avc: denied { write } for pid=3917 comm="syz.4.82" name="sg0" dev="devtmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 50.209918][ T29] audit: type=1400 audit(1748802815.713:1256): avc: denied { write } for pid=3917 comm="syz.4.82" name="ip6_tables_targets" dev="proc" ino=4026532758 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 50.484463][ T3924] netlink: 52 bytes leftover after parsing attributes in process `syz.2.83'. [ 50.508154][ T29] audit: type=1400 audit(1748802816.323:1257): avc: denied { accept } for pid=3923 comm="syz.2.83" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 50.548297][ T3924] netlink: 60 bytes leftover after parsing attributes in process `syz.2.83'. [ 50.619551][ T29] audit: type=1326 audit(1748802816.413:1258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3927 comm="syz.4.84" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe645e8e969 code=0x7ffc0000 [ 50.655939][ T3322] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.740698][ T29] audit: type=1326 audit(1748802816.453:1259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3927 comm="syz.4.84" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe645e8e969 code=0x7ffc0000 [ 50.769818][ T29] audit: type=1326 audit(1748802816.483:1260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3927 comm="syz.4.84" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe645e8e969 code=0x7ffc0000 [ 50.798015][ T29] audit: type=1326 audit(1748802816.483:1261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3927 comm="syz.4.84" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe645e8e969 code=0x7ffc0000 [ 50.824677][ T29] audit: type=1326 audit(1748802816.493:1262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3927 comm="syz.4.84" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fe645e8e969 code=0x7ffc0000 [ 50.851712][ T29] audit: type=1326 audit(1748802816.493:1263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3927 comm="syz.4.84" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe645e8e969 code=0x7ffc0000 [ 50.877243][ T29] audit: type=1326 audit(1748802816.513:1264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3927 comm="syz.4.84" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fe645e8e969 code=0x7ffc0000 [ 51.059994][ T3933] hub 1-0:1.0: USB hub found [ 51.130796][ T3933] hub 1-0:1.0: 8 ports detected [ 51.231638][ T3935] loop4: detected capacity change from 0 to 512 [ 51.498418][ T3938] netlink: 24 bytes leftover after parsing attributes in process `syz.2.86'. [ 52.033557][ T3948] loop2: detected capacity change from 0 to 1024 [ 52.069111][ T3948] EXT4-fs: Ignoring removed bh option [ 52.074656][ T3948] EXT4-fs: Ignoring removed nomblk_io_submit option [ 52.119681][ T3948] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 52.795863][ T3960] hub 1-0:1.0: USB hub found [ 52.817870][ T3960] hub 1-0:1.0: 8 ports detected [ 52.925863][ T3962] loop4: detected capacity change from 0 to 1024 [ 52.948015][ T3962] EXT4-fs: Ignoring removed bh option [ 52.953471][ T3962] EXT4-fs: Ignoring removed nomblk_io_submit option [ 53.013911][ T3962] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 53.200403][ T3966] loop0: detected capacity change from 0 to 512 [ 53.275868][ T3966] EXT4-fs (loop0): 1 orphan inode deleted [ 53.289409][ T556] EXT4-fs error (device loop0): ext4_release_dquot:6969: comm kworker/u8:5: Failed to release dquot type 1 [ 53.292731][ T3966] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 53.345017][ T3966] ext4 filesystem being mounted at /syzcgroup/cpu/syz0/cgroup.procs supports timestamps until 2038-01-19 (0x7fffffff) [ 53.372235][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.373195][ T3966] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.393102][ T3966] netlink: 12 bytes leftover after parsing attributes in process `syz.0.94'. [ 53.393128][ T3966] netlink: 12 bytes leftover after parsing attributes in process `syz.0.94'. [ 53.394080][ T3966] openvswitch: netlink: Message has 6 unknown bytes. [ 53.446310][ T3975] netlink: 8 bytes leftover after parsing attributes in process `syz.1.95'. [ 53.876882][ T3983] hub 1-0:1.0: USB hub found [ 53.889432][ T3983] hub 1-0:1.0: 8 ports detected [ 53.896205][ T3984] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.934653][ T3984] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.983219][ T3987] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 54.011225][ T3984] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.035197][ T3987] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 54.039845][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.081822][ T3984] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.107852][ T3989] loop4: detected capacity change from 0 to 1024 [ 54.108158][ T3989] EXT4-fs: Ignoring removed bh option [ 54.108185][ T3989] EXT4-fs: Ignoring removed nomblk_io_submit option [ 54.152224][ T3989] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 54.182901][ T3984] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.195785][ T3984] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.224184][ T3984] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.240564][ T3984] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.639746][ T4001] hub 1-0:1.0: USB hub found [ 54.656277][ T4001] hub 1-0:1.0: 8 ports detected [ 54.805085][ T4008] loop2: detected capacity change from 0 to 512 [ 54.847550][ T4008] EXT4-fs (loop2): 1 orphan inode deleted [ 54.867706][ T298] EXT4-fs error (device loop2): ext4_release_dquot:6969: comm kworker/u8:4: Failed to release dquot type 1 [ 54.869953][ T4008] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 54.896498][ T4008] ext4 filesystem being mounted at /syzcgroup/cpu/syz2/cgroup.procs supports timestamps until 2038-01-19 (0x7fffffff) [ 54.929890][ T4008] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.983410][ T4008] netlink: 12 bytes leftover after parsing attributes in process `syz.2.107'. [ 54.993586][ T4008] netlink: 12 bytes leftover after parsing attributes in process `syz.2.107'. [ 55.040607][ T4011] openvswitch: netlink: Message has 6 unknown bytes. [ 55.195798][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.277818][ T29] kauditd_printk_skb: 185 callbacks suppressed [ 55.277837][ T29] audit: type=1326 audit(1748802821.083:1448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4014 comm="syz.4.109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe645e8e969 code=0x7ffc0000 [ 55.352050][ T29] audit: type=1326 audit(1748802821.093:1449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4014 comm="syz.4.109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe645e8e969 code=0x7ffc0000 [ 55.377242][ T29] audit: type=1326 audit(1748802821.153:1450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4014 comm="syz.4.109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe645e8e969 code=0x7ffc0000 [ 55.401433][ T29] audit: type=1326 audit(1748802821.153:1451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4014 comm="syz.4.109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fe645e8e969 code=0x7ffc0000 [ 55.426196][ T29] audit: type=1326 audit(1748802821.153:1452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4014 comm="syz.4.109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe645e8e969 code=0x7ffc0000 [ 55.451923][ T29] audit: type=1326 audit(1748802821.153:1453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4014 comm="syz.4.109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fe645e8e969 code=0x7ffc0000 [ 55.476146][ T29] audit: type=1326 audit(1748802821.153:1454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4014 comm="syz.4.109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe645e8e969 code=0x7ffc0000 [ 55.500315][ T29] audit: type=1326 audit(1748802821.153:1455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4014 comm="syz.4.109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe645e8e969 code=0x7ffc0000 [ 55.523852][ T29] audit: type=1326 audit(1748802821.153:1456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4014 comm="syz.4.109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe645e8e969 code=0x7ffc0000 [ 55.601087][ T29] audit: type=1326 audit(1748802821.163:1457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4014 comm="syz.4.109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7fe645e8e969 code=0x7ffc0000 [ 55.673548][ T4020] loop0: detected capacity change from 0 to 1024 [ 55.696053][ T4020] EXT4-fs: Ignoring removed bh option [ 55.702492][ T4020] EXT4-fs: Ignoring removed nomblk_io_submit option [ 55.706467][ T4022] loop4: detected capacity change from 0 to 1024 [ 55.724099][ T4022] EXT4-fs: Ignoring removed bh option [ 55.730456][ T4022] EXT4-fs: Ignoring removed nomblk_io_submit option [ 55.730789][ T4020] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 55.763033][ T4022] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 56.372348][ T4029] loop2: detected capacity change from 0 to 1024 [ 56.382403][ T4029] EXT4-fs: Ignoring removed bh option [ 56.388520][ T4029] EXT4-fs: Ignoring removed nomblk_io_submit option [ 56.410230][ T4029] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 56.591215][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.769671][ T4036] loop2: detected capacity change from 0 to 512 [ 56.799452][ T4036] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 56.847292][ T4036] EXT4-fs (loop2): 1 truncate cleaned up [ 56.858052][ T3323] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.862075][ T4036] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 56.942338][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.000323][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.144979][ T4050] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 57.174994][ T4050] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 57.249853][ T4053] loop2: detected capacity change from 0 to 512 [ 57.281362][ T4053] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 57.309122][ T4053] EXT4-fs (loop2): 1 truncate cleaned up [ 57.337800][ T4053] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 57.470656][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.747723][ T4061] loop0: detected capacity change from 0 to 1024 [ 57.754600][ T4061] EXT4-fs: Ignoring removed bh option [ 57.760224][ T4061] EXT4-fs: Ignoring removed nomblk_io_submit option [ 57.801834][ T4064] loop4: detected capacity change from 0 to 1024 [ 57.828842][ T4064] EXT4-fs: Ignoring removed bh option [ 57.834331][ T4064] EXT4-fs: Ignoring removed nomblk_io_submit option [ 57.846093][ T4061] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 57.893300][ T4064] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 58.039346][ T4075] loop2: detected capacity change from 0 to 512 [ 58.126609][ T4075] EXT4-fs (loop2): 1 orphan inode deleted [ 58.137856][ T298] EXT4-fs error (device loop2): ext4_release_dquot:6969: comm kworker/u8:4: Failed to release dquot type 1 [ 58.171457][ T4075] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 58.262608][ T4075] ext4 filesystem being mounted at /syzcgroup/cpu/syz2/cgroup.procs supports timestamps until 2038-01-19 (0x7fffffff) [ 58.319026][ T4075] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.379693][ T4075] netlink: 12 bytes leftover after parsing attributes in process `syz.2.129'. [ 58.389254][ T4075] netlink: 12 bytes leftover after parsing attributes in process `syz.2.129'. [ 58.429649][ T4081] openvswitch: netlink: Message has 6 unknown bytes. [ 58.660158][ T4083] loop2: detected capacity change from 0 to 512 [ 58.707649][ T4083] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 58.756338][ T4083] EXT4-fs (loop2): 1 truncate cleaned up [ 58.772274][ T4083] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 58.995828][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.061725][ T3323] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.095438][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.151054][ T4088] hub 1-0:1.0: USB hub found [ 59.186306][ T4091] loop4: detected capacity change from 0 to 512 [ 59.197999][ T4088] hub 1-0:1.0: 8 ports detected [ 59.245316][ T4095] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 59.254964][ T4091] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 59.280536][ T4095] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 59.295224][ T4097] hub 1-0:1.0: USB hub found [ 59.311827][ T4091] EXT4-fs (loop4): 1 truncate cleaned up [ 59.323263][ T4097] hub 1-0:1.0: 8 ports detected [ 59.333623][ T4091] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 59.484936][ T4107] loop0: detected capacity change from 0 to 1024 [ 59.496652][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.504740][ T4107] EXT4-fs: Ignoring removed bh option [ 59.512276][ T4107] EXT4-fs: Ignoring removed nomblk_io_submit option [ 59.577281][ T4107] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 59.629545][ T4110] loop4: detected capacity change from 0 to 512 [ 59.670989][ T4110] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 59.744830][ T4110] EXT4-fs (loop4): 1 truncate cleaned up [ 59.778159][ T4110] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 60.012558][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.106139][ T4122] loop4: detected capacity change from 0 to 1024 [ 60.129040][ T4122] EXT4-fs: Ignoring removed bh option [ 60.134736][ T4122] EXT4-fs: Ignoring removed nomblk_io_submit option [ 60.183677][ T4122] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 60.683393][ T3323] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.273396][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.332503][ T4132] loop4: detected capacity change from 0 to 1024 [ 61.364720][ T4132] EXT4-fs: Ignoring removed bh option [ 61.370254][ T4132] EXT4-fs: Ignoring removed nomblk_io_submit option [ 61.543753][ T4136] loop2: detected capacity change from 0 to 512 [ 61.575566][ T4136] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 61.639600][ T4138] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 61.654976][ T4136] EXT4-fs (loop2): 1 truncate cleaned up [ 61.657953][ T4138] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 61.850033][ T4144] loop2: detected capacity change from 0 to 512 [ 61.873285][ T4144] EXT4-fs (loop2): 1 orphan inode deleted [ 61.880362][ T4144] ext4 filesystem being mounted at /syzcgroup/cpu/syz2/cgroup.procs supports timestamps until 2038-01-19 (0x7fffffff) [ 61.893034][ T31] __quota_error: 29 callbacks suppressed [ 61.893053][ T31] Quota error (device loop2): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 61.908896][ T31] EXT4-fs error (device loop2): ext4_release_dquot:6969: comm kworker/u8:1: Failed to release dquot type 1 [ 61.936596][ T4144] netlink: 12 bytes leftover after parsing attributes in process `syz.2.152'. [ 61.946422][ T4144] netlink: 12 bytes leftover after parsing attributes in process `syz.2.152'. [ 61.961330][ T4144] openvswitch: netlink: Message has 6 unknown bytes. [ 62.087077][ T29] audit: type=1326 audit(1748802827.893:1486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4147 comm="syz.2.153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3ed82e969 code=0x7ffc0000 [ 62.137412][ T4148] hub 1-0:1.0: USB hub found [ 62.147772][ T4148] hub 1-0:1.0: 8 ports detected [ 62.166432][ T29] audit: type=1326 audit(1748802827.893:1487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4147 comm="syz.2.153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3ed82e969 code=0x7ffc0000 [ 62.193035][ T29] audit: type=1326 audit(1748802827.933:1488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4147 comm="syz.2.153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff3ed82e969 code=0x7ffc0000 [ 62.220686][ T29] audit: type=1326 audit(1748802827.933:1489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4147 comm="syz.2.153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3ed82e969 code=0x7ffc0000 [ 62.248126][ T29] audit: type=1326 audit(1748802827.933:1490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4147 comm="syz.2.153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3ed82e969 code=0x7ffc0000 [ 62.272924][ T29] audit: type=1326 audit(1748802827.933:1491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4147 comm="syz.2.153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff3ed82e969 code=0x7ffc0000 [ 62.296751][ T29] audit: type=1326 audit(1748802827.933:1492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4147 comm="syz.2.153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3ed82e969 code=0x7ffc0000 [ 62.320669][ T29] audit: type=1326 audit(1748802827.933:1493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4147 comm="syz.2.153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3ed82e969 code=0x7ffc0000 [ 62.344705][ T29] audit: type=1326 audit(1748802827.933:1494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4147 comm="syz.2.153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ff3ed82e969 code=0x7ffc0000 [ 62.594339][ T4155] hub 1-0:1.0: USB hub found [ 62.600831][ T4155] hub 1-0:1.0: 8 ports detected [ 62.685167][ T4159] loop4: detected capacity change from 0 to 512 [ 62.717522][ T4159] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 62.757693][ T4159] EXT4-fs (loop4): 1 truncate cleaned up [ 62.861256][ T4163] hub 1-0:1.0: USB hub found [ 62.870598][ T4163] hub 1-0:1.0: 8 ports detected [ 62.912770][ T4165] loop4: detected capacity change from 0 to 1024 [ 62.923721][ T4165] EXT4-fs: Ignoring removed bh option [ 62.929796][ T4165] EXT4-fs: Ignoring removed nomblk_io_submit option [ 63.075813][ T4173] loop2: detected capacity change from 0 to 1024 [ 63.096420][ T4173] EXT4-fs: Ignoring removed bh option [ 63.102199][ T4173] EXT4-fs: Ignoring removed nomblk_io_submit option [ 63.147042][ T4176] loop4: detected capacity change from 0 to 512 [ 63.184763][ T4176] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 63.292909][ T4176] EXT4-fs (loop4): 1 truncate cleaned up [ 63.376459][ T4181] hub 1-0:1.0: USB hub found [ 63.396388][ T4181] hub 1-0:1.0: 8 ports detected [ 63.434575][ T4184] usb usb1: usbfs: interface 0 claimed by hub while 'syz.3.165' sets config #1 [ 63.554413][ T4187] loop4: detected capacity change from 0 to 1024 [ 63.578868][ T4187] EXT4-fs: Ignoring removed bh option [ 63.584624][ T4187] EXT4-fs: Ignoring removed nomblk_io_submit option [ 64.338262][ T4200] hub 1-0:1.0: USB hub found [ 64.361375][ T4200] hub 1-0:1.0: 8 ports detected [ 64.490449][ T4202] loop2: detected capacity change from 0 to 512 [ 64.518243][ T4202] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 64.579412][ T4202] EXT4-fs (loop2): 1 truncate cleaned up [ 64.599184][ T4204] hub 1-0:1.0: USB hub found [ 64.645525][ T4204] hub 1-0:1.0: 8 ports detected [ 64.709642][ T4210] loop2: detected capacity change from 0 to 1024 [ 64.735430][ T4210] EXT4-fs: Ignoring removed bh option [ 64.741115][ T4210] EXT4-fs: Ignoring removed nomblk_io_submit option [ 64.782663][ T4212] hub 1-0:1.0: USB hub found [ 64.793575][ T4215] loop3: detected capacity change from 0 to 1024 [ 64.798544][ T4212] hub 1-0:1.0: 8 ports detected [ 64.853011][ T4215] EXT4-fs: Ignoring removed bh option [ 64.858497][ T4215] EXT4-fs: Ignoring removed nomblk_io_submit option [ 65.356761][ T4229] loop0: detected capacity change from 0 to 1024 [ 65.363944][ T4229] EXT4-fs: Ignoring removed bh option [ 65.369607][ T4229] EXT4-fs: Ignoring removed nomblk_io_submit option [ 65.723320][ T4233] loop2: detected capacity change from 0 to 512 [ 65.732764][ T4233] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 65.763941][ T4233] EXT4-fs (loop2): 1 truncate cleaned up [ 65.799161][ T4238] hub 1-0:1.0: USB hub found [ 65.804268][ T4238] hub 1-0:1.0: 8 ports detected [ 65.916822][ T4245] hub 1-0:1.0: USB hub found [ 65.921862][ T4245] hub 1-0:1.0: 8 ports detected [ 66.580323][ T4253] hub 1-0:1.0: USB hub found [ 66.594494][ T4253] hub 1-0:1.0: 8 ports detected [ 66.696093][ T4255] hub 1-0:1.0: USB hub found [ 66.702469][ T4259] loop4: detected capacity change from 0 to 1024 [ 66.713179][ T4255] hub 1-0:1.0: 8 ports detected [ 66.722922][ T4259] EXT4-fs: Ignoring removed bh option [ 66.730198][ T4259] EXT4-fs: Ignoring removed nomblk_io_submit option [ 66.824989][ T4265] hub 1-0:1.0: USB hub found [ 66.849754][ T4265] hub 1-0:1.0: 8 ports detected [ 66.898306][ T29] kauditd_printk_skb: 268 callbacks suppressed [ 66.898360][ T29] audit: type=1326 audit(1748802832.713:1763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4263 comm="syz.2.192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff3ed82e969 code=0x7ffc0000 [ 66.955651][ T4268] hub 1-0:1.0: USB hub found [ 66.972078][ T29] audit: type=1326 audit(1748802832.743:1764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4263 comm="syz.2.192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3ed82e969 code=0x7ffc0000 [ 67.000855][ T29] audit: type=1326 audit(1748802832.743:1765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4263 comm="syz.2.192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3ed82e969 code=0x7ffc0000 [ 67.028068][ T29] audit: type=1326 audit(1748802832.743:1766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4267 comm="syz.0.193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde4b13e969 code=0x7ffc0000 [ 67.056112][ T29] audit: type=1326 audit(1748802832.743:1767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4267 comm="syz.0.193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde4b13e969 code=0x7ffc0000 [ 67.085877][ T29] audit: type=1326 audit(1748802832.743:1768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4263 comm="syz.2.192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff3ed82e969 code=0x7ffc0000 [ 67.114581][ T29] audit: type=1326 audit(1748802832.743:1769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4263 comm="syz.2.192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3ed82e969 code=0x7ffc0000 [ 67.141647][ T29] audit: type=1326 audit(1748802832.743:1770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4263 comm="syz.2.192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3ed82e969 code=0x7ffc0000 [ 67.171146][ T29] audit: type=1326 audit(1748802832.743:1771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4263 comm="syz.2.192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ff3ed82e969 code=0x7ffc0000 [ 67.203633][ T29] audit: type=1326 audit(1748802832.743:1772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4263 comm="syz.2.192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3ed82e969 code=0x7ffc0000 [ 67.247365][ T4268] hub 1-0:1.0: 8 ports detected [ 67.357400][ T4281] loop3: detected capacity change from 0 to 1024 [ 67.364491][ T4281] EXT4-fs: Ignoring removed bh option [ 67.370040][ T4281] EXT4-fs: Ignoring removed nomblk_io_submit option [ 67.447513][ T4281] ================================================================== [ 67.455864][ T4281] BUG: KCSAN: data-race in __mark_inode_dirty / writeback_single_inode [ 67.464884][ T4281] [ 67.467513][ T4281] write to 0xffff888106be4a50 of 4 bytes by task 4285 on cpu 1: [ 67.476017][ T4281] writeback_single_inode+0x14a/0x3e0 [ 67.481682][ T4281] sync_inode_metadata+0x5b/0x90 [ 67.487048][ T4281] generic_buffers_fsync_noflush+0xd9/0x120 [ 67.493520][ T4281] ext4_sync_file+0x1ab/0x690 [ 67.498518][ T4281] vfs_fsync_range+0x10d/0x130 [ 67.503522][ T4281] ext4_buffered_write_iter+0x34f/0x3c0 [ 67.510219][ T4281] ext4_file_write_iter+0x383/0xf00 [ 67.516699][ T4281] iter_file_splice_write+0x5f2/0x970 [ 67.523374][ T4281] direct_splice_actor+0x156/0x2a0 [ 67.528878][ T4281] splice_direct_to_actor+0x312/0x680 [ 67.534371][ T4281] do_splice_direct+0xda/0x150 [ 67.539267][ T4281] do_sendfile+0x380/0x650 [ 67.543813][ T4281] __x64_sys_sendfile64+0x105/0x150 [ 67.549920][ T4281] x64_sys_call+0xb39/0x2fb0 [ 67.554724][ T4281] do_syscall_64+0xd2/0x200 [ 67.559715][ T4281] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 67.565987][ T4281] [ 67.568386][ T4281] read to 0xffff888106be4a50 of 4 bytes by task 4281 on cpu 0: [ 67.575955][ T4281] __mark_inode_dirty+0x18e/0x760 [ 67.581308][ T4281] ext4_write_inline_data_end+0x3e5/0x5f0 [ 67.587608][ T4281] ext4_write_end+0x4cd/0x730 [ 67.592411][ T4281] generic_perform_write+0x312/0x490 [ 67.597837][ T4281] ext4_buffered_write_iter+0x1ee/0x3c0 [ 67.603497][ T4281] ext4_file_write_iter+0x383/0xf00 [ 67.608904][ T4281] iter_file_splice_write+0x5f2/0x970 [ 67.614428][ T4281] direct_splice_actor+0x156/0x2a0 [ 67.619659][ T4281] splice_direct_to_actor+0x312/0x680 [ 67.625510][ T4281] do_splice_direct+0xda/0x150 [ 67.630476][ T4281] do_sendfile+0x380/0x650 [ 67.635233][ T4281] __x64_sys_sendfile64+0x105/0x150 [ 67.640842][ T4281] x64_sys_call+0xb39/0x2fb0 [ 67.645944][ T4281] do_syscall_64+0xd2/0x200 [ 67.650774][ T4281] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 67.656692][ T4281] [ 67.659028][ T4281] value changed: 0x00000038 -> 0x00000002 [ 67.664955][ T4281] [ 67.667414][ T4281] Reported by Kernel Concurrency Sanitizer on: [ 67.674394][ T4281] CPU: 0 UID: 0 PID: 4281 Comm: syz.3.196 Not tainted 6.15.0-syzkaller-10815-gbb1556ec9464 #0 PREEMPT(voluntary) [ 67.687328][ T4281] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 67.698287][ T4281] ================================================================== [ 67.847757][ T3316] EXT4-fs unmount: 28 callbacks suppressed [ 67.847773][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.276161][ T3322] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.