last executing test programs: 4.23005002s ago: executing program 0 (id=1107): bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r0 = open(0x0, 0x0, 0x0) flock(r0, 0x1) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000cf00000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x2, 0x0, &(0x7f0000000140)={0x0, 0x0}) write(r2, &(0x7f0000000000)="fa", 0xfffffdef) syz_usb_connect$cdc_ecm(0x0, 0x77, &(0x7f0000000840)=ANY=[@ANYBLOB="12010000020000402505a1a4400000000101090265000101000000090400001202060000052406000005240000000d240f010000000000000000001524123f00a3"], 0x0) 2.512463436s ago: executing program 4 (id=1139): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, 0x0, 0x0) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000980)=ANY=[], 0x210) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b7030000000000f7850000002d00000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1817c1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000ff01000000000000002000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) faccessat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x5) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020148100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet6(0xa, 0x40000080806, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)={0x34, 0x0, 0xc4fc9e906872338b, 0x0, 0x0, {{0x15}, {@val={0x8}, @val={0xc, 0x99, {0xffffffc0}}}}, [@NL80211_ATTR_TID_CONFIG={0xc, 0x11d, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x4}]}]}]}, 0x34}}, 0x0) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) close(r2) 2.491217146s ago: executing program 4 (id=1140): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7020000080000001823", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x10, &(0x7f0000000000), 0x4) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x5, 0x0, "ff00f7000000000000000000af88008300"}) r3 = syz_open_pts(r2, 0x141601) write(r3, &(0x7f0000000000)="d5", 0xfffffedf) close_range(r2, 0xffffffffffffffff, 0x0) 2.420689516s ago: executing program 4 (id=1141): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) pivot_root(&(0x7f0000000500)='./file0\x00', &(0x7f0000000540)='./file0\x00') 2.402033016s ago: executing program 4 (id=1142): timer_create(0x3, 0x0, &(0x7f0000000780)=0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002a00)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc, @void, @value}, 0x94) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='signal_generate\x00', r3}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r2, 0x0, 0x8000000000000000}, 0x18) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000005b80)=@delchain={0x24, 0x26, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0xfff1}}}, 0x24}}, 0x0) recvmmsg(r4, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}, 0x80}, {{&(0x7f0000000280)=@isdn, 0x80, &(0x7f0000000380)=[{0x0, 0x34}], 0x1}, 0x5}, {{0x0, 0x0, 0x0}, 0x1}, {{&(0x7f00000003c0)=@hci, 0x80, &(0x7f0000000180)=[{&(0x7f0000002a00)=""/4096, 0xfffffffffffffe15}, {&(0x7f00000004c0)=""/75, 0x4b}], 0x2, &(0x7f0000000340)=""/45, 0x2d}, 0x8}, {{&(0x7f0000000540)=@xdp, 0x80, &(0x7f0000000600)=[{&(0x7f0000000440)=""/18, 0x12}], 0x1, &(0x7f0000000640)=""/130, 0x82}, 0xe9a8}, {{&(0x7f0000000700)=@caif, 0x80, &(0x7f00000008c0)=[{&(0x7f0000003a00)=""/4096, 0x1000}, {&(0x7f00000007c0)=""/226, 0xe2}], 0x2}, 0x6}], 0x6, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) timer_settime(r0, 0x1, &(0x7f00000001c0)={{}, {r5, r6+10000000}}, &(0x7f0000000200)) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffff"], 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) io_setup(0x8001, &(0x7f0000000040)=0x0) io_getevents(r8, 0x88, 0x2, &(0x7f00000000c0)=[{}, {}], &(0x7f0000000100)={0x77359400}) clock_gettime(0x0, &(0x7f00000002c0)) timer_create(0x4, &(0x7f0000000380)={0x0, 0xe, 0x4, @thr={&(0x7f0000000300)="f1cf9851764b611845d3e5da5fef22e82e1ebb845e0ed3d11d3707f6cd99043d07897a0a86fba4597130a72a955ab83898516d67f2ed3c840e15d0393f5b507aeb9202882c673ef2d298855eda552a4e40e8ca108d8586b548525536", &(0x7f00000004c0)="18e504478b44b7635df240db0048ddeca340fe4f70998d13bd7eb54bedf6e9dbb578a4505056b6393ac431742f99d806adeb3098a15c9c46e91fb640c75763ae5320f7b4e8511a18ae7f51d660dbc326e73fb11b53d445981cf234e127143d8de37589c2609be47b2b8fb6a366811d3ae4e9166238f982c18b1fe9d1b1fcd7247567674001e16b62559f4286a55956e1ea52757a15dc589a85c26e6101aff63f3585b53d3cf107b72fa20dea907217bd83f01d4bd33ef150a98eb99f9c4e6316056a7897163a54a3a6925af4574a96ce7fd2049853d21720c9deb34fa6fb7d7686e49264ae23de94a4"}}, &(0x7f00000003c0)) syz_usbip_server_init(0x4) 2.203108895s ago: executing program 0 (id=1147): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/sctp\x00') r3 = open_tree(r2, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000040)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='net/sctp\x00') pivot_root(&(0x7f0000000500)='./file0\x00', &(0x7f0000000540)='./file0\x00') 2.147685135s ago: executing program 0 (id=1150): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, 0x0, 0x0) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000980)=ANY=[], 0x210) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b7030000000000f7850000002d00000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1817c1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000ff01000000000000002000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) faccessat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x5) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020148100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet6(0xa, 0x40000080806, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)={0x34, 0x0, 0xc4fc9e906872338b, 0x0, 0x0, {{0x15}, {@val={0x8}, @val={0xc, 0x99, {0xffffffc0}}}}, [@NL80211_ATTR_TID_CONFIG={0xc, 0x11d, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x4}]}]}]}, 0x34}}, 0x0) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) close(r2) 2.095811935s ago: executing program 0 (id=1152): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) pivot_root(&(0x7f0000000500)='./file0\x00', &(0x7f0000000540)='./file0\x00') 2.060171575s ago: executing program 0 (id=1153): r0 = socket$igmp(0x2, 0x3, 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x2000020c, &(0x7f0000000300)=[{0x6, 0x7f, 0x0, 0xa}, {0x100, 0x7b, 0x1, 0x8}, {0x7, 0x4, 0xc0, 0x400}, {0xfeff, 0x0, 0x4, 0x6}, {0x3, 0x9, 0x5, 0x1}, {0x2, 0xa, 0x0, 0x7}]}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3e, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_bp={0x0, 0x3}, 0x140, 0x1, 0x3, 0x5, 0xc, 0x8, 0x5d, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) socket(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="500000001000210400000000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="adffa888e16000002800128009000100766c616e00000000180002800c0002000e0000000a000000060001000000000008000500", @ANYRES32=r6], 0x50}}, 0x2) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'veth1_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r7, {0xa}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000000180), 0x4) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r8}, &(0x7f0000000000), &(0x7f00000005c0)=r9}, 0x20) close(r0) 1.966797734s ago: executing program 0 (id=1157): bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r0 = open(0x0, 0x0, 0x0) flock(r0, 0x1) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000cf00000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x2, 0x0, &(0x7f0000000140)={0x0, 0x0}) write(r2, &(0x7f0000000000)="fa", 0xfffffdef) syz_usb_connect$cdc_ecm(0x0, 0x77, &(0x7f0000000840)=ANY=[@ANYBLOB="12010000020000402505a1a4400000000101090265000101000000090400001202060000052406000005240000000d240f010000000000000000001524123f00a3"], 0x0) 1.363185693s ago: executing program 2 (id=1170): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000280), 0x400, 0x0) 1.353246793s ago: executing program 2 (id=1171): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3e, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x800000000003}, 0x100000, 0x5dd8, 0x3, 0x0, 0x0, 0x8, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014fa0000b7030000000008008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000020000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000900)=ANY=[@ANYBLOB="440000001000090600"/20, @ANYRES32=0x0, @ANYBLOB="adffa888000000001c00128009000100626f6e64000000000c000280050001000600000008000a0079"], 0x44}}, 0x0) 1.163758343s ago: executing program 2 (id=1174): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f0000000080), 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) connect$inet(0xffffffffffffffff, &(0x7f0000000240)={0x2, 0x4e20, @multicast2}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10) chroot(&(0x7f0000000300)='./file0\x00') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r2}, 0x10) r5 = perf_event_open(&(0x7f0000001040)={0x2, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x2, 0x10}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x40082406, &(0x7f00000001c0)='cpu<00\t&&') r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r7, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmmsg$unix(r1, &(0x7f00000bd000), 0x80, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000280)={0x1, &(0x7f0000528000)=[{0x6}]}, 0x10) connect$unix(r1, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) close(r0) 1.112423823s ago: executing program 3 (id=1175): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3e, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x800000000003}, 0x100000, 0x5dd8, 0x3, 0x0, 0x0, 0x8, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r0 = fsopen(&(0x7f0000000040)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r1, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x80, 0x7}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000780)=@newtaction={0x68, 0x30, 0xb, 0x0, 0x25dfdbfd, {}, [{0x54, 0x1, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x6}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x5, 0x8001, 0x5, 0x1, 0x40}}]}, {0x4}, {0xc, 0xa}, {0xc, 0x9, {0xf5}}}}]}]}, 0x68}}, 0x0) fcntl$lock(r1, 0x25, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x80000000}) r3 = fsmount(r0, 0x0, 0x0) openat(r3, &(0x7f00000000c0)='./file2\x00', 0x143042, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014fa0000b7030000000008008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000020000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000000)='kmem_cache_free\x00', r6}, 0x10) r7 = socket(0x840000000002, 0x3, 0xff) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000000040)='gre0\x00', 0x10) sendmmsg$inet(r7, &(0x7f0000000440)=[{{&(0x7f00000001c0)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001980)=[{&(0x7f0000000200)="a9050000000074640000000000003552bde5c064c6", 0x15}, {&(0x7f0000000340)="174640b6d80fb2eedc81ba60ccbb9d", 0xf}], 0x2}}, {{&(0x7f00000004c0)={0x2, 0x0, @multicast1}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000140)="5825be57aff9352b356be67ca2746357d1787935", 0x14}], 0x1}}], 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) r8 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) sendmsg$nl_route(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000900)=ANY=[@ANYBLOB="440000001000090600"/20, @ANYRES32=0x0, @ANYBLOB="adffa888000000001c00128009000100626f6e64000000000c000280050001000600000008000a0079"], 0x44}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000040)={0xa, 0x0, @local}, 0x1c, &(0x7f0000000180)=[{&(0x7f0000000080)="a2", 0x34000}], 0x1, 0x0, 0x0, 0x2000}, 0x60) 1.038182093s ago: executing program 2 (id=1176): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @broadcast}) close(r0) 1.019296353s ago: executing program 4 (id=1177): r0 = add_key$keyring(&(0x7f0000000300), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x0}, &(0x7f0000000280)="d2", 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000380)='asymmetric\x00', &(0x7f0000000500)=@keyring={'key_or_keyring:', r1}) bpf$MAP_CREATE(0x0, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r2}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) close(0xffffffffffffffff) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) socketpair(0x2, 0x3, 0x1, 0x0) syz_clone(0x40089000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) r4 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, r3) r5 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000280)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x48, 0xffffffffffffffff) r6 = add_key$fscrypt_v1(&(0x7f0000000400), &(0x7f0000000440)={'fscrypt:', @desc2}, &(0x7f0000000480)={0x0, "6035ae1e0fe721441700322225930e6c1e3e2a51a92fd796bc34d7cf6e0236805b4377f7ab1a9b01c103a4c6de6269613800"}, 0x48, 0xfffffffffffffffd) keyctl$KEYCTL_MOVE(0x4, r6, r5, 0x0, 0x0) r7 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x52ba, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x4, r7, r5, r6, 0x0) keyctl$search(0xa, r7, &(0x7f0000000340)='user\x00', &(0x7f00000003c0)={'syz', 0x3}, r3) socket$inet6(0xa, 0x200000000003, 0x87) syz_emit_ethernet(0xf2, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd6030bb0000bc2b0000000000000000000000000000000000fe8000000000000000000000000000aa87"], 0x0) add_key$fscrypt_provisioning(&(0x7f0000000140), &(0x7f00000001c0)={'syz', 0x1}, &(0x7f00000002c0)={0x1, 0x0, @c}, 0x29, r4) keyctl$setperm(0x5, r0, 0x10) 831.566542ms ago: executing program 3 (id=1178): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f00000003c0)='kfree\x00', r0, 0x0, 0x8}, 0x18) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000700000002000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) signalfd(0xffffffffffffffff, &(0x7f0000000240)={[0xfffffffe]}, 0x8) socket$kcm(0x10, 0x2, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000a0db000000000000000000850000000e000000d50000002a00c50095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f00000000c0)='netlink_extack\x00', r2, 0x0, 0x4}, 0x18) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c0000000014"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b7040000000000008500000001"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4004110) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101804bc9555e1affd5020000000900010001797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a300000000009000300737975320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x480d5}, 0x0) dup2(r4, r5) 793.133162ms ago: executing program 2 (id=1180): timer_create(0x3, 0x0, &(0x7f0000000780)) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002a00)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc, @void, @value}, 0x94) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='signal_generate\x00', r0}, 0x10) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x77359400}, {0x0, 0x989680}}, 0x0) syz_usbip_server_init(0x4) 721.539802ms ago: executing program 4 (id=1182): timer_create(0x3, 0x0, &(0x7f0000000780)=0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002a00)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc, @void, @value}, 0x94) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='signal_generate\x00', r3}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r2, 0x0, 0x8000000000000000}, 0x18) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000005b80)=@delchain={0x24, 0x26, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0xfff1}}}, 0x24}}, 0x0) recvmmsg(r4, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}, 0x80}, {{&(0x7f0000000280)=@isdn, 0x80, &(0x7f0000000380)=[{0x0, 0x34}], 0x1}, 0x5}, {{0x0, 0x0, 0x0}, 0x1}, {{&(0x7f00000003c0)=@hci, 0x80, &(0x7f0000000180)=[{&(0x7f0000002a00)=""/4096, 0xfffffffffffffe15}, {&(0x7f00000004c0)=""/75, 0x4b}], 0x2, &(0x7f0000000340)=""/45, 0x2d}, 0x8}, {{&(0x7f0000000540)=@xdp, 0x80, &(0x7f0000000600)=[{&(0x7f0000000440)=""/18, 0x12}], 0x1, &(0x7f0000000640)=""/130, 0x82}, 0xe9a8}, {{&(0x7f0000000700)=@caif, 0x80, &(0x7f00000008c0)=[{&(0x7f0000003a00)=""/4096, 0x1000}, {&(0x7f00000007c0)=""/226, 0xe2}], 0x2}, 0x6}], 0x6, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) timer_settime(r0, 0x1, &(0x7f00000001c0)={{}, {r5, r6+10000000}}, &(0x7f0000000200)) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffff"], 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) io_setup(0x8001, &(0x7f0000000040)=0x0) io_getevents(r8, 0x88, 0x2, &(0x7f00000000c0)=[{}, {}], &(0x7f0000000100)={0x77359400}) clock_gettime(0x0, &(0x7f00000002c0)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x77359400}, {0x0, 0x989680}}, 0x0) syz_usbip_server_init(0x4) 717.913672ms ago: executing program 3 (id=1183): r0 = add_key$keyring(&(0x7f0000000300), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x0}, &(0x7f0000000280)="d2", 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000380)='asymmetric\x00', &(0x7f0000000500)=@keyring={'key_or_keyring:', r1}) bpf$MAP_CREATE(0x0, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r2}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) close(0xffffffffffffffff) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) socketpair(0x2, 0x3, 0x1, 0x0) syz_clone(0x40089000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) r4 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, r3) r5 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000280)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x48, 0xffffffffffffffff) r6 = add_key$fscrypt_v1(&(0x7f0000000400), &(0x7f0000000440)={'fscrypt:', @desc2}, &(0x7f0000000480)={0x0, "6035ae1e0fe721441700322225930e6c1e3e2a51a92fd796bc34d7cf6e0236805b4377f7ab1a9b01c103a4c6de6269613800"}, 0x48, 0xfffffffffffffffd) keyctl$KEYCTL_MOVE(0x4, r6, r5, 0x0, 0x0) r7 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x52ba, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x4, r7, r5, r6, 0x0) keyctl$search(0xa, r7, &(0x7f0000000340)='user\x00', &(0x7f00000003c0)={'syz', 0x3}, r3) socket$inet6(0xa, 0x200000000003, 0x87) syz_emit_ethernet(0xf2, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd6030bb0000bc2b0000000000000000000000000000000000fe8000000000000000000000000000aa87"], 0x0) add_key$fscrypt_provisioning(&(0x7f0000000140), &(0x7f00000001c0)={'syz', 0x1}, &(0x7f00000002c0)={0x1, 0x0, @c}, 0x29, r4) keyctl$setperm(0x5, r0, 0x10) 311.282741ms ago: executing program 3 (id=1187): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f0000000080), 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000180000000000000000000000180100002020702500000000002020207b1af8ff00000000bf"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) connect$inet(0xffffffffffffffff, &(0x7f0000000240)={0x2, 0x4e20, @multicast2}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10) chroot(&(0x7f0000000300)='./file0\x00') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r2}, 0x10) r5 = perf_event_open(&(0x7f0000001040)={0x2, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x2, 0x10}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x40082406, &(0x7f00000001c0)='cpu<00\t&&') r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r7, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmmsg$unix(r1, &(0x7f00000bd000), 0x80, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000280)={0x1, &(0x7f0000528000)=[{0x6}]}, 0x10) connect$unix(r1, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) close(r0) 307.672531ms ago: executing program 1 (id=1188): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000b80)=@mpls_delroute={0xfffffffffffffec2, 0x19, 0x10, 0x70bd29, 0x25dfdbfe, {0x1c, 0x10, 0x10, 0xf4, 0xfe, 0x0, 0xc8, 0x5, 0x1600}, [@RTA_NEWDST={0x84, 0x13, [{0x3}, {0x9, 0x0, 0x1}, {0x0, 0x0, 0x1}, {0x3, 0x0, 0x1}, {}, {0x9}, {0x5}, {0xffffc}, {0x9}, {0x67}, {0x7}, {0x4d9, 0x0, 0x1}, {0x4, 0x0, 0x1}, {0x8, 0x0, 0x1}, {0x8100}, {0x3}, {0xfc880, 0x0, 0x1}, {0x67, 0x0, 0x1}, {}, {0x2, 0x0, 0x1}, {0x3, 0x0, 0x1}, {0x4}, {0x1000}, {0x6}, {0x1}, {0x4}, {0x566}, {0x6, 0x0, 0x1}, {0x5}, {0x29c, 0x0, 0x1}, {0x100, 0x0, 0x1}, {0x400, 0x0, 0x1}]}, @RTA_MULTIPATH={0xc, 0x9, {0x981, 0x33, 0x7, r3}}, @RTA_VIA={0x14, 0x12, {0x21, "413293f294f9d5ea22b65afd411e"}}]}, 0xc0}, 0x1, 0xba01}, 0x0) setrlimit(0xf, &(0x7f00000000c0)={0x0, 0x3}) timer_create(0xfffffffffffffffc, 0x0, &(0x7f0000001400)) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000000800000700000000000000", @ANYRES32, @ANYBLOB="0000000000000400000000e2ef00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bind$rds(0xffffffffffffffff, &(0x7f0000000740)={0x2, 0x4e24, @multicast1}, 0x10) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x6}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) socket$xdp(0x2c, 0x3, 0x0) mremap(&(0x7f0000186000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f00000ad000/0x3000)=nil) mlock(&(0x7f0000bff000/0x400000)=nil, 0x400000) socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x80, 0x0, 0x0, 0x0, 0x4a42b203bab10940, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r5, 0x0, 0x9135}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0xe, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) syz_emit_ethernet(0x0, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140604000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) 240.27889ms ago: executing program 1 (id=1189): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000980)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000300000002000000ac1414bb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000002000000ac1414bb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0x210) setsockopt$inet_group_source_req(r0, 0x0, 0x2b, &(0x7f00000004c0)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x4e21, @remote}}}, 0x108) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b7030000000000f7850000002d00000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1, 0x0, 0x3}, 0x18) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1817c1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000ff01000000000000002000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0) faccessat(r3, &(0x7f0000000000)='./file0\x00', 0x5) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) r4 = socket$inet6(0xa, 0x40000080806, 0x0) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) close(r4) 204.681761ms ago: executing program 3 (id=1190): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000600)='./file2\x00', 0x404, &(0x7f0000000240), 0x3, 0x42f, &(0x7f0000000940)="$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") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0xc, &(0x7f0000000240)=@framed={{}, [@ringbuf_output={{0x18, 0x2, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x43}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000001640)='kfree\x00', r2}, 0x10) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x1200, 0x0, 0x3) 189.452171ms ago: executing program 1 (id=1191): r0 = socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b10000"], 0x0, 0x80, 0x0, 0x0, 0x0, 0x4a42b203bab10940, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0x9135}, 0x18) ioctl$sock_SIOCBRDELBR(r0, 0x89a2, &(0x7f0000000000)='bridge0\x00') 128.609581ms ago: executing program 2 (id=1192): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000b80)=@mpls_delroute={0xfffffffffffffec2, 0x19, 0x10, 0x70bd29, 0x25dfdbfe, {0x1c, 0x10, 0x10, 0xf4, 0xfe, 0x0, 0xc8, 0x5, 0x1600}, [@RTA_NEWDST={0x84, 0x13, [{0x3}, {0x9, 0x0, 0x1}, {0x0, 0x0, 0x1}, {0x3, 0x0, 0x1}, {}, {0x9}, {0x5}, {0xffffc}, {0x9}, {0x67}, {0x7}, {0x4d9, 0x0, 0x1}, {0x4, 0x0, 0x1}, {0x8, 0x0, 0x1}, {0x8100}, {0x3}, {0xfc880, 0x0, 0x1}, {0x67, 0x0, 0x1}, {}, {0x2, 0x0, 0x1}, {0x3, 0x0, 0x1}, {0x4}, {0x1000}, {0x6}, {0x1}, {0x4}, {0x566}, {0x6, 0x0, 0x1}, {0x5}, {0x29c, 0x0, 0x1}, {0x100, 0x0, 0x1}, {0x400, 0x0, 0x1}]}, @RTA_MULTIPATH={0xc, 0x9, {0x981, 0x33, 0x7, r3}}, @RTA_VIA={0x14, 0x12, {0x21, "413293f294f9d5ea22b65afd411e"}}]}, 0xc0}, 0x1, 0xba01}, 0x0) setrlimit(0xf, &(0x7f00000000c0)={0x0, 0x3}) timer_create(0xfffffffffffffffc, 0x0, &(0x7f0000001400)) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000000800000700000000000000", @ANYRES32, @ANYBLOB="0000000000000400000000e2ef00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000008007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000208500000001000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bind$rds(0xffffffffffffffff, &(0x7f0000000740)={0x2, 0x4e24, @multicast1}, 0x10) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x6}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) r6 = socket$xdp(0x2c, 0x3, 0x0) mremap(&(0x7f0000186000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f00000ad000/0x3000)=nil) setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x201000, 0x1000}, 0x20) mlock(&(0x7f0000bff000/0x400000)=nil, 0x400000) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x80, 0x0, 0x0, 0x0, 0x4a42b203bab10940, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1, @value}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r7, 0x0, 0x9135}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0xe, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) syz_emit_ethernet(0x0, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140604000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) 127.895851ms ago: executing program 1 (id=1202): r0 = socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b1000000"], 0x0, 0x80, 0x0, 0x0, 0x0, 0x4a42b203bab10940, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0x9135}, 0x18) ioctl$sock_SIOCBRDELBR(r0, 0x89a2, &(0x7f0000000000)='bridge0\x00') 104.554871ms ago: executing program 3 (id=1193): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7020000111e6ca5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) add_key(&(0x7f0000000540)='rxrpc\x00', 0x0, &(0x7f0000000100)="01000000020000000000006bb55a2a630bf7c045f94cd977", 0x18, 0xffffffffffffffff) 77.79022ms ago: executing program 1 (id=1194): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000ebff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f0000000140), 0x0) 0s ago: executing program 1 (id=1195): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_VERDICT(r0, &(0x7f00000001c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000040)={&(0x7f00000003c0)={0x168, 0x1, 0x3, 0x301, 0x0, 0x0, {0x1, 0x0, 0x7}, [@NFQA_VLAN={0x1c, 0x13, 0x0, 0x1, [@NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0x5f6d}, @NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x8100}, @NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x88a8}]}, @NFQA_PAYLOAD={0xf0, 0xa, "03cda6e5e5f3712ec37ee81318bc3e1ad5fbf2a1636e2ebbf719462df194ea6d104b503e931cbac6d036371e9aa05d9edd28e7321aa1be7d06cbe28239428ca2f71190626d3adcc616b845abe247b286ba56e75778f651086341e89b694c8c917d5f2b50f9c6179c28b806e64f0fec3d9f66c32ab77b7c18ed85f250d1d5e7670dd3f9356f05fd5d877540d219e3eea9dedf8a4f8cf65e7ea526ae90af45791a413f15af8d98b78f8bdf1a53db3e05d38bfb67ccbe7fe954f098c7f64bc9ebac7bb367917826e526387799d9de50bf364dc3455f2884fc523688a03afe6616e2274665a63475a3d545d437ca"}, @NFQA_PAYLOAD={0x3e, 0xa, "3bb7b184ad08604be3adfcddb1058e4287563eacb5cf1842eebdd5fb1565281cc0f87990a51cf133cc4195187abd16c43fdff2e83a097fd7663b"}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x4d}]}, 0x168}, 0x1, 0x0, 0x0, 0x44803}, 0x26040010) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10) perf_event_open(&(0x7f00000000c0)={0x2, 0x4, 0x67, 0x2, 0x0, 0x0, 0x0, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000580), 0x8}, 0x1125c, 0x0, 0x7f4, 0x6, 0x6, 0x0, 0x100, 0x0, 0x0, 0x0, 0xe3fc4e9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x143c62, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mount(&(0x7f0000000100), &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000300)='trans=rdma,') kernel console output (not intermixed with test programs): 292.639:840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3837 comm="syz.3.132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f152c805d29 code=0x7ffc0000 [ 48.966520][ T29] audit: type=1326 audit(1737334292.639:841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3837 comm="syz.3.132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f152c805d29 code=0x7ffc0000 [ 49.036557][ T3845] pim6reg1: entered promiscuous mode [ 49.041981][ T3845] pim6reg1: entered allmulticast mode [ 49.083936][ T3848] syz.0.136[3848] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 49.084042][ T3848] syz.0.136[3848] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 49.100208][ T3848] syz.0.136[3848] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 49.143425][ T3297] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.151439][ T3848] bond1: entered promiscuous mode [ 49.170380][ T3848] bond1: entered allmulticast mode [ 49.175797][ T3848] 8021q: adding VLAN 0 to HW filter on device bond1 [ 49.194897][ T3848] bond1 (unregistering): Released all slaves [ 49.312240][ T3856] IPv6: NLM_F_CREATE should be specified when creating new route [ 49.798895][ T3866] netlink: 144 bytes leftover after parsing attributes in process `syz.3.143'. [ 49.931948][ T3874] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 49.952110][ T3873] loop3: detected capacity change from 0 to 2048 [ 49.959441][ T3874] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 49.979889][ T3873] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 50.028283][ T3153] usb 7-1: enqueue for inactive port 0 [ 50.034026][ T3153] usb 7-1: enqueue for inactive port 0 [ 50.108219][ T3153] vhci_hcd: vhci_device speed not set [ 50.188010][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.204851][ T3879] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 50.232194][ T3879] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 50.522225][ T3888] loop2: detected capacity change from 0 to 164 [ 50.540148][ T3888] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 50.957158][ T3903] loop2: detected capacity change from 0 to 512 [ 50.971775][ T3903] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.153: bg 0: block 248: padding at end of block bitmap is not set [ 50.991098][ T3903] EXT4-fs error (device loop2): ext4_acquire_dquot:6938: comm syz.2.153: Failed to acquire dquot type 1 [ 51.013209][ T3903] EXT4-fs (loop2): 1 truncate cleaned up [ 51.020179][ T3903] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.034294][ T3903] ext4 filesystem being mounted at /33/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 51.132430][ T3907] loop3: detected capacity change from 0 to 512 [ 51.159891][ T3907] EXT4-fs: Ignoring removed i_version option [ 51.191020][ T3907] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.211970][ T3907] ext4 filesystem being mounted at /30/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 51.232639][ T3907] EXT4-fs error (device loop3): ext4_do_update_inode:5153: inode #4: comm syz.3.154: corrupted inode contents [ 51.245388][ T3907] EXT4-fs error (device loop3): ext4_dirty_inode:6041: inode #4: comm syz.3.154: mark_inode_dirty error [ 51.259720][ T3907] EXT4-fs error (device loop3): ext4_do_update_inode:5153: inode #4: comm syz.3.154: corrupted inode contents [ 51.272357][ T3907] EXT4-fs error (device loop3): __ext4_ext_dirty:207: inode #4: comm syz.3.154: mark_inode_dirty error [ 51.285643][ T3907] EXT4-fs error (device loop3): ext4_acquire_dquot:6938: comm syz.3.154: Failed to acquire dquot type 1 [ 51.298466][ T3911] EXT4-fs error (device loop3): ext4_do_update_inode:5153: inode #4: comm syz.3.154: corrupted inode contents [ 51.299853][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.320280][ T50] EXT4-fs error (device loop2): ext4_release_dquot:6961: comm kworker/u8:3: Failed to release dquot type 1 [ 51.322820][ T3911] EXT4-fs error (device loop3): ext4_dirty_inode:6041: inode #4: comm syz.3.154: mark_inode_dirty error [ 51.345064][ T3911] EXT4-fs error (device loop3): ext4_do_update_inode:5153: inode #4: comm syz.3.154: corrupted inode contents [ 51.360325][ T3911] EXT4-fs error (device loop3): __ext4_ext_dirty:207: inode #4: comm syz.3.154: mark_inode_dirty error [ 51.392828][ T3911] EXT4-fs error (device loop3): ext4_acquire_dquot:6938: comm syz.3.154: Failed to acquire dquot type 1 [ 51.468626][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.487923][ T3924] loop2: detected capacity change from 0 to 512 [ 51.530088][ T3924] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.544519][ T3924] ext4 filesystem being mounted at /35/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 51.584706][ T3926] loop0: detected capacity change from 0 to 8192 [ 51.591873][ T3934] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 51.602436][ T3934] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 51.670312][ T3926] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 51.745408][ T3938] netlink: 16 bytes leftover after parsing attributes in process `+}[@'. [ 51.767475][ T3942] ref_ctr_offset mismatch. inode: 0xd0 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x82 [ 51.824970][ T3943] loop1: detected capacity change from 0 to 1024 [ 51.832700][ T3943] EXT4-fs: Ignoring removed orlov option [ 51.839302][ T3943] EXT4-fs: Ignoring removed nomblk_io_submit option [ 51.874817][ T3943] EXT4-fs (loop1): can't mount with journal_async_commit, fs mounted w/o journal [ 51.986788][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.022326][ T3945] loop2: detected capacity change from 0 to 512 [ 52.070895][ T3945] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 52.099712][ T3945] ext4 filesystem being mounted at /36/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 52.180368][ T3951] syz.0.167[3951] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 52.180443][ T3951] syz.0.167[3951] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 52.201811][ T3951] syz.0.167[3951] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 52.236178][ T3951] loop0: detected capacity change from 0 to 512 [ 52.304213][ T3951] EXT4-fs (loop0): too many log groups per flexible block group [ 52.312179][ T3951] EXT4-fs (loop0): failed to initialize mballoc (-12) [ 52.319616][ T3951] EXT4-fs (loop0): mount failed [ 52.357191][ T3968] loop1: detected capacity change from 0 to 512 [ 52.378818][ T3968] EXT4-fs: Ignoring removed i_version option [ 52.392539][ T3970] batadv_slave_1: entered promiscuous mode [ 52.400326][ T3968] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 52.414789][ T3970] batadv_slave_0: entered promiscuous mode [ 52.421383][ T3969] batadv_slave_0: left promiscuous mode [ 52.427273][ T3969] batadv_slave_1: left promiscuous mode [ 52.434784][ T3968] ext4 filesystem being mounted at /40/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 52.473681][ T3968] EXT4-fs error (device loop1): ext4_do_update_inode:5153: inode #4: comm syz.1.171: corrupted inode contents [ 52.487539][ T3968] EXT4-fs error (device loop1): ext4_dirty_inode:6041: inode #4: comm syz.1.171: mark_inode_dirty error [ 52.500852][ T3968] EXT4-fs error (device loop1): ext4_do_update_inode:5153: inode #4: comm syz.1.171: corrupted inode contents [ 52.518975][ T3968] EXT4-fs error (device loop1): __ext4_ext_dirty:207: inode #4: comm syz.1.171: mark_inode_dirty error [ 52.528809][ T3977] xt_hashlimit: size too large, truncated to 1048576 [ 52.532383][ T3968] EXT4-fs error (device loop1): ext4_acquire_dquot:6938: comm syz.1.171: Failed to acquire dquot type 1 [ 52.554964][ T3968] EXT4-fs error (device loop1): ext4_do_update_inode:5153: inode #4: comm syz.1.171: corrupted inode contents [ 52.574994][ T3979] loop4: detected capacity change from 0 to 512 [ 52.595792][ T3979] EXT4-fs: Ignoring removed orlov option [ 52.633112][ T3968] EXT4-fs error (device loop1): ext4_dirty_inode:6041: inode #4: comm syz.1.171: mark_inode_dirty error [ 52.737687][ T3968] EXT4-fs error (device loop1): ext4_do_update_inode:5153: inode #4: comm syz.1.171: corrupted inode contents [ 52.785674][ T3968] EXT4-fs error (device loop1): __ext4_ext_dirty:207: inode #4: comm syz.1.171: mark_inode_dirty error [ 52.798514][ T3979] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8842c118, mo2=0002] [ 52.806924][ T3979] EXT4-fs (loop4): too many log groups per flexible block group [ 52.814702][ T3979] EXT4-fs (loop4): failed to initialize mballoc (-12) [ 52.833446][ T3968] EXT4-fs error (device loop1): ext4_acquire_dquot:6938: comm syz.1.171: Failed to acquire dquot type 1 [ 52.848178][ T3979] EXT4-fs (loop4): mount failed [ 52.892874][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.940781][ T3297] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.975282][ T3990] IPv6: NLM_F_CREATE should be specified when creating new route [ 53.200872][ T4003] loop1: detected capacity change from 0 to 164 [ 53.213911][ T4003] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 53.304052][ T9] IPVS: starting estimator thread 0... [ 53.336021][ T4015] loop1: detected capacity change from 0 to 512 [ 53.379599][ T4015] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.186: bg 0: block 248: padding at end of block bitmap is not set [ 53.398895][ T4020] loop0: detected capacity change from 0 to 512 [ 53.399448][ T4015] EXT4-fs error (device loop1): ext4_acquire_dquot:6938: comm syz.1.186: Failed to acquire dquot type 1 [ 53.408031][ T4013] IPVS: using max 2112 ests per chain, 105600 per kthread [ 53.419896][ T4015] EXT4-fs (loop1): 1 truncate cleaned up [ 53.429035][ T4020] EXT4-fs: Ignoring removed orlov option [ 53.430232][ T4015] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 53.448490][ T4015] ext4 filesystem being mounted at /44/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 53.469928][ T4020] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8842c118, mo2=0002] [ 53.497611][ T4020] EXT4-fs (loop0): too many log groups per flexible block group [ 53.505573][ T4020] EXT4-fs (loop0): failed to initialize mballoc (-12) [ 53.532691][ T4020] EXT4-fs (loop0): mount failed [ 53.633635][ T4025] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4025 comm=syz.0.188 [ 53.646551][ T4025] netlink: 'syz.0.188': attribute type 10 has an invalid length. [ 53.654634][ T4025] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.661860][ T4025] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.694131][ T4025] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.701273][ T4025] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.708614][ T4025] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.715752][ T4025] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.724846][ T4025] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 53.736120][ T3297] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.745776][ T55] __quota_error: 445 callbacks suppressed [ 53.745793][ T55] Quota error (device loop1): do_check_range: Getting block 0 out of range 1-5 [ 53.760705][ T55] EXT4-fs error (device loop1): ext4_release_dquot:6961: comm kworker/u8:4: Failed to release dquot type 1 [ 53.816241][ T4030] pim6reg1: entered promiscuous mode [ 53.822023][ T4030] pim6reg1: entered allmulticast mode [ 53.848462][ T4033] netlink: 4 bytes leftover after parsing attributes in process `syz.0.191'. [ 53.922184][ T4033] hsr_slave_1 (unregistering): left promiscuous mode [ 54.020173][ T4046] ref_ctr_offset mismatch. inode: 0xd0 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x82 [ 54.039156][ T29] audit: type=1400 audit(1737334297.899:1272): avc: denied { create } for pid=4050 comm="syz.3.197" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 54.093412][ T29] audit: type=1400 audit(1737334297.919:1273): avc: denied { write } for pid=4050 comm="syz.3.197" path="socket:[5773]" dev="sockfs" ino=5773 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 54.103623][ T4060] batadv_slave_1: entered promiscuous mode [ 54.117933][ T29] audit: type=1400 audit(1737334297.919:1274): avc: denied { nlmsg_read } for pid=4050 comm="syz.3.197" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 54.130529][ T4061] loop4: detected capacity change from 0 to 1024 [ 54.144655][ T4056] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(11) [ 54.157513][ T4056] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 54.165077][ T4056] vhci_hcd vhci_hcd.0: Device attached [ 54.175729][ T4064] batadv_slave_0: entered promiscuous mode [ 54.195500][ T4059] batadv_slave_0: left promiscuous mode [ 54.201379][ T4059] batadv_slave_1: left promiscuous mode [ 54.210996][ T4061] EXT4-fs: Ignoring removed orlov option [ 54.216835][ T4061] EXT4-fs: Ignoring removed nomblk_io_submit option [ 54.230638][ T4061] EXT4-fs (loop4): can't mount with journal_async_commit, fs mounted w/o journal [ 54.263161][ T4069] syz.0.202[4069] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 54.263233][ T4069] syz.0.202[4069] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 54.275116][ T4069] syz.0.202[4069] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 54.292985][ T4069] loop0: detected capacity change from 0 to 512 [ 54.322196][ T4069] EXT4-fs (loop0): too many log groups per flexible block group [ 54.330090][ T4069] EXT4-fs (loop0): failed to initialize mballoc (-12) [ 54.336937][ T4069] EXT4-fs (loop0): mount failed [ 54.348221][ T3374] vhci_hcd: vhci_device speed not set [ 54.383656][ T4075] ref_ctr_offset mismatch. inode: 0xf2 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x82 [ 54.405857][ T4075] loop0: detected capacity change from 0 to 1024 [ 54.412480][ T3374] usb 3-1: new full-speed USB device number 2 using vhci_hcd [ 54.420746][ T4075] EXT4-fs: Ignoring removed orlov option [ 54.426470][ T4075] EXT4-fs: Ignoring removed nomblk_io_submit option [ 54.437696][ T4075] EXT4-fs (loop0): can't mount with journal_async_commit, fs mounted w/o journal [ 54.560917][ T4079] netlink: 4 bytes leftover after parsing attributes in process `syz.0.205'. [ 54.591698][ T4084] netlink: 32 bytes leftover after parsing attributes in process `syz.0.206'. [ 54.616823][ T4084] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 54.716372][ T29] audit: type=1326 audit(1737334298.569:1275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4093 comm="syz.2.209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2fc5f5d29 code=0x7ffc0000 [ 54.739876][ T29] audit: type=1326 audit(1737334298.569:1276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4093 comm="syz.2.209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2fc5f5d29 code=0x7ffc0000 [ 54.779269][ T29] audit: type=1326 audit(1737334298.619:1277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4093 comm="syz.2.209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=252 compat=0 ip=0x7fd2fc5f5d29 code=0x7ffc0000 [ 54.805021][ T29] audit: type=1326 audit(1737334298.619:1278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4093 comm="syz.2.209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2fc5f5d29 code=0x7ffc0000 [ 54.830559][ T29] audit: type=1326 audit(1737334298.619:1279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4093 comm="syz.2.209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2fc5f5d29 code=0x7ffc0000 [ 54.855002][ T4057] vhci_hcd: connection reset by peer [ 54.863439][ T4100] loop2: detected capacity change from 0 to 512 [ 54.870761][ T55] vhci_hcd: stop threads [ 54.875042][ T55] vhci_hcd: release socket [ 54.878547][ T4100] EXT4-fs: Ignoring removed orlov option [ 54.879664][ T55] vhci_hcd: disconnect device [ 54.895584][ T4102] syz.0.214[4102] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 54.895638][ T4102] syz.0.214[4102] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 54.908031][ T4102] syz.0.214[4102] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 54.908743][ T4100] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8842c118, mo2=0002] [ 54.944537][ T4102] loop0: detected capacity change from 0 to 512 [ 54.951097][ T4100] EXT4-fs (loop2): too many log groups per flexible block group [ 54.958983][ T4100] EXT4-fs (loop2): failed to initialize mballoc (-12) [ 54.981581][ T4102] EXT4-fs (loop0): too many log groups per flexible block group [ 54.989579][ T4102] EXT4-fs (loop0): failed to initialize mballoc (-12) [ 55.002334][ T4102] EXT4-fs (loop0): mount failed [ 55.008414][ T4100] EXT4-fs (loop2): mount failed [ 55.084489][ T4116] netlink: 4 bytes leftover after parsing attributes in process `syz.4.216'. [ 55.110455][ T4120] syz.0.219[4120] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 55.110554][ T4120] syz.0.219[4120] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 55.124048][ T4116] hsr_slave_1 (unregistering): left promiscuous mode [ 55.132383][ T4120] syz.0.219[4120] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 55.166485][ T4120] bond1: entered promiscuous mode [ 55.183003][ T4120] bond1: entered allmulticast mode [ 55.188809][ T4120] 8021q: adding VLAN 0 to HW filter on device bond1 [ 55.245623][ T4120] bond1 (unregistering): Released all slaves [ 55.250264][ T4125] loop4: detected capacity change from 0 to 512 [ 55.267786][ T4125] EXT4-fs: Ignoring removed orlov option [ 55.320636][ T4125] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8842c118, mo2=0002] [ 55.329141][ T4125] EXT4-fs (loop4): too many log groups per flexible block group [ 55.337271][ T4125] EXT4-fs (loop4): failed to initialize mballoc (-12) [ 55.363037][ T4125] EXT4-fs (loop4): mount failed [ 55.431376][ T4132] loop3: detected capacity change from 0 to 512 [ 55.480305][ T4137] ref_ctr_offset mismatch. inode: 0x126 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x82 [ 55.523416][ T4132] EXT4-fs (loop3): too many log groups per flexible block group [ 55.531273][ T4132] EXT4-fs (loop3): failed to initialize mballoc (-12) [ 55.540323][ T4137] loop0: detected capacity change from 0 to 1024 [ 55.547397][ T4132] EXT4-fs (loop3): mount failed [ 55.553519][ T4137] EXT4-fs: Ignoring removed orlov option [ 55.559598][ T4137] EXT4-fs: Ignoring removed nomblk_io_submit option [ 55.619856][ T4137] EXT4-fs (loop0): can't mount with journal_async_commit, fs mounted w/o journal [ 55.620550][ T29] audit: type=1326 audit(1737334299.469:1280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4146 comm="syz.1.227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a208c5d29 code=0x7ffc0000 [ 55.697990][ T4147] netlink: 8 bytes leftover after parsing attributes in process `+}[@'. [ 55.750944][ T4155] IPv6: NLM_F_CREATE should be specified when creating new route [ 55.845593][ T3153] IPVS: starting estimator thread 0... [ 55.947178][ T4171] loop4: detected capacity change from 0 to 512 [ 55.954057][ T4165] IPVS: using max 2448 ests per chain, 122400 per kthread [ 55.963510][ T4171] EXT4-fs: Ignoring removed i_version option [ 55.989111][ T4174] SELinux: ebitmap: map size 0 does not match my size 64 (high bit was 0) [ 55.999422][ T4174] SELinux: failed to load policy [ 56.001367][ T4171] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 56.020913][ T4171] ext4 filesystem being mounted at /43/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 56.063161][ T4171] EXT4-fs error (device loop4): ext4_do_update_inode:5153: inode #4: comm syz.4.237: corrupted inode contents [ 56.088864][ T4171] EXT4-fs error (device loop4): ext4_dirty_inode:6041: inode #4: comm syz.4.237: mark_inode_dirty error [ 56.107288][ T4171] EXT4-fs error (device loop4): ext4_do_update_inode:5153: inode #4: comm syz.4.237: corrupted inode contents [ 56.126701][ T4171] EXT4-fs error (device loop4): __ext4_ext_dirty:207: inode #4: comm syz.4.237: mark_inode_dirty error [ 56.144419][ T4171] EXT4-fs error (device loop4): ext4_acquire_dquot:6938: comm syz.4.237: Failed to acquire dquot type 1 [ 56.156224][ T4187] EXT4-fs error (device loop4): ext4_do_update_inode:5153: inode #4: comm syz.4.237: corrupted inode contents [ 56.176244][ T4187] EXT4-fs error (device loop4): ext4_dirty_inode:6041: inode #4: comm syz.4.237: mark_inode_dirty error [ 56.190969][ T4192] ref_ctr_offset mismatch. inode: 0x14c offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x82 [ 56.202563][ T4187] EXT4-fs error (device loop4): ext4_do_update_inode:5153: inode #4: comm syz.4.237: corrupted inode contents [ 56.210552][ T4192] loop0: detected capacity change from 0 to 1024 [ 56.216531][ T4187] EXT4-fs error (device loop4): __ext4_ext_dirty:207: inode #4: comm syz.4.237: mark_inode_dirty error [ 56.223174][ T4192] EXT4-fs: Ignoring removed orlov option [ 56.237841][ T4192] EXT4-fs: Ignoring removed nomblk_io_submit option [ 56.246104][ T4187] EXT4-fs error (device loop4): ext4_acquire_dquot:6938: comm syz.4.237: Failed to acquire dquot type 1 [ 56.263071][ T4192] EXT4-fs (loop0): can't mount with journal_async_commit, fs mounted w/o journal [ 56.267523][ T4196] batadv_slave_0: entered promiscuous mode [ 56.279988][ T4195] batadv_slave_0: left promiscuous mode [ 56.301697][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.507514][ T4211] SELinux: ebitmap: map size 0 does not match my size 64 (high bit was 0) [ 56.517825][ T4211] SELinux: failed to load policy [ 56.585550][ T4217] netlink: 8 bytes leftover after parsing attributes in process `+}[@'. [ 56.603551][ T4222] pim6reg1: entered promiscuous mode [ 56.608968][ T4222] pim6reg1: entered allmulticast mode [ 56.732300][ T4232] syz.1.261[4232] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 56.756707][ T4232] loop1: detected capacity change from 0 to 512 [ 56.805254][ T4241] netlink: 4 bytes leftover after parsing attributes in process `syz.2.263'. [ 56.843172][ T4232] EXT4-fs (loop1): too many log groups per flexible block group [ 56.851300][ T4232] EXT4-fs (loop1): failed to initialize mballoc (-12) [ 56.865219][ T4241] hsr_slave_1 (unregistering): left promiscuous mode [ 56.876523][ T4232] EXT4-fs (loop1): mount failed [ 56.914118][ T4251] loop4: detected capacity change from 0 to 512 [ 56.929115][ T4251] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 56.990960][ T4259] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 57.000786][ T4260] loop1: detected capacity change from 0 to 512 [ 57.004791][ T4251] EXT4-fs (loop4): 1 truncate cleaned up [ 57.007386][ T4260] EXT4-fs: Ignoring removed i_version option [ 57.032487][ T4259] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 57.041468][ T4251] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 57.055437][ T4260] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 57.075839][ T4268] batadv_slave_0: entered promiscuous mode [ 57.083350][ T4267] batadv_slave_0: left promiscuous mode [ 57.089620][ T4260] ext4 filesystem being mounted at /56/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 57.117574][ T4260] EXT4-fs error (device loop1): ext4_do_update_inode:5153: inode #4: comm syz.1.269: corrupted inode contents [ 57.131072][ T4260] EXT4-fs error (device loop1): ext4_dirty_inode:6041: inode #4: comm syz.1.269: mark_inode_dirty error [ 57.150873][ T4260] EXT4-fs error (device loop1): ext4_do_update_inode:5153: inode #4: comm syz.1.269: corrupted inode contents [ 57.163114][ T4260] EXT4-fs error (device loop1): __ext4_ext_dirty:207: inode #4: comm syz.1.269: mark_inode_dirty error [ 57.176119][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.176153][ T4260] EXT4-fs error (device loop1): ext4_acquire_dquot:6938: comm syz.1.269: Failed to acquire dquot type 1 [ 57.176394][ T4273] EXT4-fs error (device loop1): ext4_do_update_inode:5153: inode #4: comm syz.1.269: corrupted inode contents [ 57.208401][ T4273] EXT4-fs error (device loop1): ext4_dirty_inode:6041: inode #4: comm syz.1.269: mark_inode_dirty error [ 57.221829][ T4273] EXT4-fs error (device loop1): ext4_do_update_inode:5153: inode #4: comm syz.1.269: corrupted inode contents [ 57.234098][ T4273] EXT4-fs error (device loop1): __ext4_ext_dirty:207: inode #4: comm syz.1.269: mark_inode_dirty error [ 57.247546][ T4273] EXT4-fs error (device loop1): ext4_acquire_dquot:6938: comm syz.1.269: Failed to acquire dquot type 1 [ 57.285448][ T3297] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.406946][ T4284] netlink: 8 bytes leftover after parsing attributes in process `+}[@'. [ 57.627812][ T4295] netlink: 4 bytes leftover after parsing attributes in process `syz.0.281'. [ 57.834090][ T4317] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 57.850591][ T4317] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 57.970146][ T4324] loop0: detected capacity change from 0 to 512 [ 57.976850][ T4324] EXT4-fs: Ignoring removed orlov option [ 58.007165][ T4324] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8842c118, mo2=0002] [ 58.017954][ T4324] EXT4-fs (loop0): too many log groups per flexible block group [ 58.025867][ T4324] EXT4-fs (loop0): failed to initialize mballoc (-12) [ 58.035033][ T4324] EXT4-fs (loop0): mount failed [ 58.084526][ T4332] netlink: 4 bytes leftover after parsing attributes in process `syz.2.297'. [ 58.111284][ T4339] SELinux: ebitmap: map size 0 does not match my size 64 (high bit was 0) [ 58.125620][ T4339] SELinux: failed to load policy [ 58.156550][ T4343] ref_ctr_offset mismatch. inode: 0x15e offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x82 [ 58.191028][ T4343] loop2: detected capacity change from 0 to 1024 [ 58.197965][ T4343] EXT4-fs: Ignoring removed orlov option [ 58.204213][ T4343] EXT4-fs: Ignoring removed nomblk_io_submit option [ 58.236790][ T4343] EXT4-fs (loop2): can't mount with journal_async_commit, fs mounted w/o journal [ 58.365815][ T4355] ref_ctr_offset mismatch. inode: 0x107 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x82 [ 58.401230][ T4355] loop3: detected capacity change from 0 to 1024 [ 58.415275][ T4358] pim6reg1: entered promiscuous mode [ 58.421398][ T4358] pim6reg1: entered allmulticast mode [ 58.427401][ T4355] EXT4-fs: Ignoring removed orlov option [ 58.433144][ T4355] EXT4-fs: Ignoring removed nomblk_io_submit option [ 58.484526][ T4355] EXT4-fs (loop3): can't mount with journal_async_commit, fs mounted w/o journal [ 58.557212][ T4371] loop1: detected capacity change from 0 to 512 [ 58.577908][ T4371] EXT4-fs: Invalid want_extra_isize 524392 [ 58.740115][ T4386] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 58.749075][ T29] kauditd_printk_skb: 709 callbacks suppressed [ 58.749091][ T29] audit: type=1326 audit(1737334302.609:1980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4364 comm="syz.0.310" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f7f8d0fcce7 code=0x7ffc0000 [ 58.757574][ T4386] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 58.778620][ T29] audit: type=1326 audit(1737334302.609:1981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4364 comm="syz.0.310" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f7f8d0a1f29 code=0x7ffc0000 [ 58.809574][ T29] audit: type=1326 audit(1737334302.609:1982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4364 comm="syz.0.310" exe="/root/syz-executor" sig=0 arch=c000003e syscall=242 compat=0 ip=0x7f7f8d105d29 code=0x7ffc0000 [ 58.840522][ T29] audit: type=1326 audit(1737334302.669:1983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4364 comm="syz.0.310" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f7f8d0fcce7 code=0x7ffc0000 [ 58.861393][ T4390] loop1: detected capacity change from 0 to 512 [ 58.865079][ T29] audit: type=1326 audit(1737334302.669:1984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4364 comm="syz.0.310" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f7f8d0a1f29 code=0x7ffc0000 [ 58.890534][ T4390] EXT4-fs: Ignoring removed orlov option [ 58.895402][ T29] audit: type=1326 audit(1737334302.669:1985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4364 comm="syz.0.310" exe="/root/syz-executor" sig=0 arch=c000003e syscall=242 compat=0 ip=0x7f7f8d105d29 code=0x7ffc0000 [ 58.925872][ T29] audit: type=1326 audit(1737334302.669:1986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4364 comm="syz.0.310" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f7f8d0fcce7 code=0x7ffc0000 [ 58.949411][ T29] audit: type=1326 audit(1737334302.669:1987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4364 comm="syz.0.310" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f7f8d0a1f29 code=0x7ffc0000 [ 58.972840][ T29] audit: type=1326 audit(1737334302.669:1988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4364 comm="syz.0.310" exe="/root/syz-executor" sig=0 arch=c000003e syscall=242 compat=0 ip=0x7f7f8d105d29 code=0x7ffc0000 [ 58.996245][ T29] audit: type=1326 audit(1737334302.689:1989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4387 comm="syz.1.320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a208c5d29 code=0x7ffc0000 [ 59.036428][ T4390] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8842c118, mo2=0002] [ 59.046210][ T4390] EXT4-fs (loop1): too many log groups per flexible block group [ 59.054099][ T4390] EXT4-fs (loop1): failed to initialize mballoc (-12) [ 59.059780][ T4394] batadv_slave_0: entered promiscuous mode [ 59.061188][ T4390] EXT4-fs (loop1): mount failed [ 59.067359][ T4393] batadv_slave_0: left promiscuous mode [ 59.203264][ T4400] netlink: 4 bytes leftover after parsing attributes in process `syz.1.325'. [ 59.256309][ T4406] ref_ctr_offset mismatch. inode: 0x17e offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x82 [ 59.280377][ T4406] loop2: detected capacity change from 0 to 1024 [ 59.287654][ T4406] EXT4-fs: Ignoring removed orlov option [ 59.293938][ T4406] EXT4-fs: Ignoring removed nomblk_io_submit option [ 59.322256][ T4406] EXT4-fs (loop2): can't mount with journal_async_commit, fs mounted w/o journal [ 59.420498][ T4413] bpf_get_probe_write_proto: 2 callbacks suppressed [ 59.420534][ T4413] syz.0.328[4413] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 59.428632][ T4413] syz.0.328[4413] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 59.447463][ T4413] syz.0.328[4413] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 59.470581][ T3374] usb 3-1: enqueue for inactive port 0 [ 59.539731][ T4419] pim6reg1: entered promiscuous mode [ 59.545232][ T4419] pim6reg1: entered allmulticast mode [ 59.555256][ T3374] usb 3-1: enqueue for inactive port 0 [ 59.581006][ T4423] batadv_slave_0: entered promiscuous mode [ 59.590090][ T4422] batadv_slave_0: left promiscuous mode [ 59.627770][ T4427] loop0: detected capacity change from 0 to 512 [ 59.638152][ T3374] vhci_hcd: vhci_device speed not set [ 59.692340][ T4433] loop1: detected capacity change from 0 to 512 [ 59.692750][ T4427] EXT4-fs (loop0): too many log groups per flexible block group [ 59.708337][ T4427] EXT4-fs (loop0): failed to initialize mballoc (-12) [ 59.715768][ T4427] EXT4-fs (loop0): mount failed [ 59.721729][ T4433] EXT4-fs: Ignoring removed i_version option [ 59.786264][ T4440] IPv6: NLM_F_CREATE should be specified when creating new route [ 59.801966][ T4433] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 59.821224][ T4433] ext4 filesystem being mounted at /71/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 59.837492][ T4433] EXT4-fs error (device loop1): ext4_do_update_inode:5153: inode #4: comm syz.1.339: corrupted inode contents [ 59.854463][ T4433] EXT4-fs error (device loop1): ext4_dirty_inode:6041: inode #4: comm syz.1.339: mark_inode_dirty error [ 59.872025][ T4446] netlink: 4 bytes leftover after parsing attributes in process `syz.4.343'. [ 59.882496][ T4433] EXT4-fs error (device loop1): ext4_do_update_inode:5153: inode #4: comm syz.1.339: corrupted inode contents [ 59.897734][ T4433] EXT4-fs error (device loop1): __ext4_ext_dirty:207: inode #4: comm syz.1.339: mark_inode_dirty error [ 59.922326][ T4433] EXT4-fs error (device loop1): ext4_acquire_dquot:6938: comm syz.1.339: Failed to acquire dquot type 1 [ 59.952086][ T4451] EXT4-fs error (device loop1): ext4_do_update_inode:5153: inode #4: comm syz.1.339: corrupted inode contents [ 59.969663][ T4451] EXT4-fs error (device loop1): ext4_dirty_inode:6041: inode #4: comm syz.1.339: mark_inode_dirty error [ 59.984400][ T4451] EXT4-fs error (device loop1): ext4_do_update_inode:5153: inode #4: comm syz.1.339: corrupted inode contents [ 60.008719][ T4451] EXT4-fs error (device loop1): __ext4_ext_dirty:207: inode #4: comm syz.1.339: mark_inode_dirty error [ 60.040386][ T4451] EXT4-fs error (device loop1): ext4_acquire_dquot:6938: comm syz.1.339: Failed to acquire dquot type 1 [ 60.045417][ T4464] loop2: detected capacity change from 0 to 512 [ 60.072736][ T4468] loop0: detected capacity change from 0 to 512 [ 60.082882][ T4464] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 60.103240][ T4468] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 60.117714][ T3297] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.129355][ T4468] EXT4-fs (loop0): 1 truncate cleaned up [ 60.135916][ T4464] EXT4-fs (loop2): 1 truncate cleaned up [ 60.139707][ T4468] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 60.157489][ T4464] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 60.260145][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.279762][ T3298] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.383242][ T3376] IPVS: starting estimator thread 0... [ 60.467647][ T4494] syz.1.360[4494] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 60.467809][ T4494] syz.1.360[4494] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 60.479804][ T4483] IPVS: using max 1920 ests per chain, 96000 per kthread [ 60.508709][ T4494] syz.1.360[4494] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 60.520513][ T4499] SELinux: ebitmap: map size 0 does not match my size 64 (high bit was 0) [ 60.553786][ T4499] SELinux: failed to load policy [ 60.600546][ T4501] pim6reg1: entered promiscuous mode [ 60.606078][ T4501] pim6reg1: entered allmulticast mode [ 60.634350][ T4508] loop0: detected capacity change from 0 to 512 [ 60.648075][ T4508] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 60.681350][ T4508] EXT4-fs (loop0): 1 truncate cleaned up [ 60.698607][ T4508] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 60.709435][ T4510] netlink: 4 bytes leftover after parsing attributes in process `syz.4.366'. [ 60.828057][ T4529] syz.1.372[4529] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 60.829523][ T4529] syz.1.372[4529] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 60.842326][ T4529] syz.1.372[4529] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 60.856288][ T3298] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.871916][ T4529] bond1: entered promiscuous mode [ 60.882051][ T4529] bond1: entered allmulticast mode [ 60.887682][ T4529] 8021q: adding VLAN 0 to HW filter on device bond1 [ 60.901324][ T4529] bond1 (unregistering): Released all slaves [ 60.981370][ T4538] netlink: 4 bytes leftover after parsing attributes in process `syz.0.375'. [ 61.027932][ T4550] pim6reg1: entered promiscuous mode [ 61.033343][ T4550] pim6reg1: entered allmulticast mode [ 61.057550][ T4549] syz.2.379[4549] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 61.175788][ T4561] loop2: detected capacity change from 0 to 512 [ 61.248324][ T4561] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 61.291691][ T4561] EXT4-fs (loop2): 1 truncate cleaned up [ 61.300379][ T4576] batadv_slave_1: entered promiscuous mode [ 61.316612][ T4576] batadv_slave_0: entered promiscuous mode [ 61.316779][ T4561] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 61.335304][ T4573] batadv_slave_0: left promiscuous mode [ 61.341173][ T4573] batadv_slave_1: left promiscuous mode [ 61.411286][ T4587] loop3: detected capacity change from 0 to 512 [ 61.418097][ T4587] EXT4-fs: Ignoring removed orlov option [ 61.482343][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.497851][ T4587] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8842c118, mo2=0002] [ 61.530621][ T4602] netlink: 4 bytes leftover after parsing attributes in process `syz.1.401'. [ 61.540931][ T4587] EXT4-fs (loop3): too many log groups per flexible block group [ 61.548740][ T4587] EXT4-fs (loop3): failed to initialize mballoc (-12) [ 61.601102][ T4587] EXT4-fs (loop3): mount failed [ 61.666364][ T4609] pim6reg1: entered promiscuous mode [ 61.672331][ T4609] pim6reg1: entered allmulticast mode [ 61.704312][ T4605] netlink: 'syz.0.402': attribute type 10 has an invalid length. [ 61.723092][ T4605] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.730710][ T4605] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.829651][ T4628] loop0: detected capacity change from 0 to 512 [ 61.846069][ T4628] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 61.874375][ T4632] loop1: detected capacity change from 0 to 512 [ 61.911771][ T4628] EXT4-fs (loop0): 1 truncate cleaned up [ 61.919451][ T4628] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 61.943984][ T4632] EXT4-fs (loop1): too many log groups per flexible block group [ 61.951878][ T4632] EXT4-fs (loop1): failed to initialize mballoc (-12) [ 61.962771][ T4632] EXT4-fs (loop1): mount failed [ 61.992469][ T4648] loop2: detected capacity change from 0 to 512 [ 62.025095][ T3298] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.037563][ T4648] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 62.050671][ T4648] ext4 filesystem being mounted at /90/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 62.090153][ T4657] pim6reg1: entered promiscuous mode [ 62.095557][ T4657] pim6reg1: entered allmulticast mode [ 62.259666][ T4676] IPv6: NLM_F_CREATE should be specified when creating new route [ 62.297712][ T4680] loop3: detected capacity change from 0 to 512 [ 62.306283][ T4680] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 62.318831][ T4680] EXT4-fs (loop3): 1 truncate cleaned up [ 62.326830][ T4680] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 62.394747][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.410719][ T4687] netlink: 4 bytes leftover after parsing attributes in process `syz.0.432'. [ 62.581936][ T4713] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 62.590830][ T4713] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 62.625869][ T4716] loop1: detected capacity change from 0 to 512 [ 62.668073][ T4716] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 62.709129][ T4716] EXT4-fs (loop1): 1 truncate cleaned up [ 62.715422][ T4716] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 62.797856][ T3297] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.849978][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.926949][ T4730] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 62.933513][ T4730] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 62.941105][ T4730] vhci_hcd vhci_hcd.0: Device attached [ 62.969310][ T4731] vhci_hcd: connection closed [ 62.969523][ T55] vhci_hcd: stop threads [ 62.978804][ T55] vhci_hcd: release socket [ 62.983419][ T55] vhci_hcd: disconnect device [ 63.292476][ T4750] loop3: detected capacity change from 0 to 512 [ 63.303211][ T4750] EXT4-fs: Ignoring removed orlov option [ 63.335730][ T4750] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8842c118, mo2=0002] [ 63.353390][ T4750] EXT4-fs (loop3): too many log groups per flexible block group [ 63.361139][ T4750] EXT4-fs (loop3): failed to initialize mballoc (-12) [ 63.368926][ T4750] EXT4-fs (loop3): mount failed [ 63.663207][ T4777] netlink: 4 bytes leftover after parsing attributes in process `syz.2.459'. [ 63.732658][ T4780] loop4: detected capacity change from 0 to 512 [ 63.782281][ T4780] EXT4-fs (loop4): too many log groups per flexible block group [ 63.790079][ T4780] EXT4-fs (loop4): failed to initialize mballoc (-12) [ 63.799586][ T4780] EXT4-fs (loop4): mount failed [ 63.918048][ T4795] loop2: detected capacity change from 0 to 512 [ 63.951743][ T4795] EXT4-fs (loop2): too many log groups per flexible block group [ 63.959697][ T4795] EXT4-fs (loop2): failed to initialize mballoc (-12) [ 63.961002][ T4802] loop4: detected capacity change from 0 to 512 [ 63.973677][ T4795] EXT4-fs (loop2): mount failed [ 63.983111][ T4802] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 64.015098][ T29] kauditd_printk_skb: 298 callbacks suppressed [ 64.015115][ T29] audit: type=1326 audit(1737334307.869:2283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4805 comm="syz.1.471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a208c5d29 code=0x7ffc0000 [ 64.057886][ T29] audit: type=1326 audit(1737334307.879:2284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4805 comm="syz.1.471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f5a208c5d29 code=0x7ffc0000 [ 64.082010][ T29] audit: type=1326 audit(1737334307.879:2285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4805 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a208c5d29 code=0x7ffc0000 [ 64.105291][ T29] audit: type=1326 audit(1737334307.879:2286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4805 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a208c5d29 code=0x7ffc0000 [ 64.114755][ T4802] EXT4-fs (loop4): 1 truncate cleaned up [ 64.128702][ T29] audit: type=1326 audit(1737334307.879:2287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4805 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5a208c5d29 code=0x7ffc0000 [ 64.128738][ T29] audit: type=1326 audit(1737334307.879:2288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4805 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a208c5d29 code=0x7ffc0000 [ 64.161868][ T4814] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 64.180932][ T29] audit: type=1326 audit(1737334307.879:2289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4805 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a208c5d29 code=0x7ffc0000 [ 64.183683][ T29] audit: type=1326 audit(1737334307.909:2290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4805 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f5a208c5d29 code=0x7ffc0000 [ 64.222405][ T4816] loop2: detected capacity change from 0 to 512 [ 64.236244][ T29] audit: type=1326 audit(1737334307.909:2291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4805 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a208c5d29 code=0x7ffc0000 [ 64.265735][ T29] audit: type=1326 audit(1737334307.909:2292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4805 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5a208c5d29 code=0x7ffc0000 [ 64.290381][ T4802] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 64.303016][ T4814] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 64.312701][ T4816] EXT4-fs: Ignoring removed i_version option [ 64.351533][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.385970][ T4816] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 64.435486][ T4822] batadv_slave_1: entered promiscuous mode [ 64.446635][ T4821] batadv_slave_1: left promiscuous mode [ 64.468210][ T4816] ext4 filesystem being mounted at /97/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 64.545244][ T4816] EXT4-fs error (device loop2): ext4_do_update_inode:5153: inode #4: comm syz.2.474: corrupted inode contents [ 64.576122][ T4816] EXT4-fs error (device loop2): ext4_dirty_inode:6041: inode #4: comm syz.2.474: mark_inode_dirty error [ 64.604063][ T4816] EXT4-fs error (device loop2): ext4_do_update_inode:5153: inode #4: comm syz.2.474: corrupted inode contents [ 64.651235][ T4816] EXT4-fs error (device loop2): __ext4_ext_dirty:207: inode #4: comm syz.2.474: mark_inode_dirty error [ 64.752794][ T4816] EXT4-fs error (device loop2): ext4_acquire_dquot:6938: comm syz.2.474: Failed to acquire dquot type 1 [ 64.846507][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.906694][ T4853] pim6reg1: entered promiscuous mode [ 64.912140][ T4853] pim6reg1: entered allmulticast mode [ 64.938841][ T4849] netlink: 'syz.1.486': attribute type 10 has an invalid length. [ 64.979014][ T4849] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.986609][ T4849] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.337343][ T4876] bpf_get_probe_write_proto: 11 callbacks suppressed [ 65.337361][ T4876] syz.0.496[4876] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 65.358420][ T4876] syz.0.496[4876] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 65.398827][ T4876] syz.0.496[4876] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 65.503963][ T4886] loop2: detected capacity change from 0 to 512 [ 65.531408][ T4886] EXT4-fs: Ignoring removed i_version option [ 65.564627][ T4884] netlink: 'syz.4.500': attribute type 10 has an invalid length. [ 65.587521][ T4884] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 65.601830][ T4886] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 65.628726][ T4886] ext4 filesystem being mounted at /99/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 65.674030][ T4886] EXT4-fs error (device loop2): ext4_do_update_inode:5153: inode #4: comm syz.2.499: corrupted inode contents [ 65.691128][ T4886] EXT4-fs error (device loop2): ext4_dirty_inode:6041: inode #4: comm syz.2.499: mark_inode_dirty error [ 65.722545][ T4886] EXT4-fs error (device loop2): ext4_do_update_inode:5153: inode #4: comm syz.2.499: corrupted inode contents [ 65.740648][ T4886] EXT4-fs error (device loop2): __ext4_ext_dirty:207: inode #4: comm syz.2.499: mark_inode_dirty error [ 65.752388][ T4886] EXT4-fs error (device loop2): ext4_acquire_dquot:6938: comm syz.2.499: Failed to acquire dquot type 1 [ 65.775317][ T4898] syz.4.504[4898] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 65.775432][ T4898] syz.4.504[4898] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 65.783918][ T4896] EXT4-fs error (device loop2): ext4_do_update_inode:5153: inode #4: comm syz.2.499: corrupted inode contents [ 65.811072][ T4898] syz.4.504[4898] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 65.817206][ T4896] EXT4-fs error (device loop2): ext4_dirty_inode:6041: inode #4: comm syz.2.499: mark_inode_dirty error [ 65.821224][ T4898] bond1: entered promiscuous mode [ 65.845644][ T4898] bond1: entered allmulticast mode [ 65.851251][ T4898] 8021q: adding VLAN 0 to HW filter on device bond1 [ 65.861608][ T4898] bond1 (unregistering): Released all slaves [ 65.886672][ T4896] EXT4-fs error (device loop2): ext4_do_update_inode:5153: inode #4: comm syz.2.499: corrupted inode contents [ 65.906139][ T4896] EXT4-fs error (device loop2): __ext4_ext_dirty:207: inode #4: comm syz.2.499: mark_inode_dirty error [ 65.938166][ T4896] EXT4-fs error (device loop2): ext4_acquire_dquot:6938: comm syz.2.499: Failed to acquire dquot type 1 [ 66.011352][ T4910] SELinux: ebitmap: map size 0 does not match my size 64 (high bit was 0) [ 66.022599][ T4910] SELinux: failed to load policy [ 66.033766][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.181733][ T4923] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(11) [ 66.188982][ T4923] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 66.196610][ T4923] vhci_hcd vhci_hcd.0: Device attached [ 66.388382][ T3376] vhci_hcd: vhci_device speed not set [ 66.448294][ T3376] usb 5-1: new full-speed USB device number 2 using vhci_hcd [ 66.462789][ T4943] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 66.474226][ T4944] loop0: detected capacity change from 0 to 512 [ 66.487059][ T4943] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 66.495641][ T4944] EXT4-fs: Ignoring removed i_version option [ 66.521238][ T4944] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 66.545951][ T4944] ext4 filesystem being mounted at /115/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 66.558117][ T4944] EXT4-fs error (device loop0): ext4_do_update_inode:5153: inode #4: comm syz.0.519: corrupted inode contents [ 66.570320][ T4944] EXT4-fs error (device loop0): ext4_dirty_inode:6041: inode #4: comm syz.0.519: mark_inode_dirty error [ 66.583655][ T4944] EXT4-fs error (device loop0): ext4_do_update_inode:5153: inode #4: comm syz.0.519: corrupted inode contents [ 66.595852][ T4944] EXT4-fs error (device loop0): __ext4_ext_dirty:207: inode #4: comm syz.0.519: mark_inode_dirty error [ 66.609145][ T4944] EXT4-fs error (device loop0): ext4_acquire_dquot:6938: comm syz.0.519: Failed to acquire dquot type 1 [ 66.622078][ T4947] EXT4-fs error (device loop0): ext4_do_update_inode:5153: inode #4: comm syz.0.519: corrupted inode contents [ 66.635085][ T4947] EXT4-fs error (device loop0): ext4_dirty_inode:6041: inode #4: comm syz.0.519: mark_inode_dirty error [ 66.647920][ T4947] EXT4-fs error (device loop0): ext4_do_update_inode:5153: inode #4: comm syz.0.519: corrupted inode contents [ 66.663123][ T4947] EXT4-fs error (device loop0): __ext4_ext_dirty:207: inode #4: comm syz.0.519: mark_inode_dirty error [ 66.677986][ T4947] EXT4-fs error (device loop0): ext4_acquire_dquot:6938: comm syz.0.519: Failed to acquire dquot type 1 [ 66.839620][ T4951] syz.3.521[4951] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 66.839766][ T4951] syz.3.521[4951] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 66.851471][ T4951] syz.3.521[4951] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 66.879439][ T4951] bond1: entered promiscuous mode [ 66.896519][ T4951] bond1: entered allmulticast mode [ 66.903444][ T4951] 8021q: adding VLAN 0 to HW filter on device bond1 [ 66.915592][ T4951] bond1 (unregistering): Released all slaves [ 66.931523][ T4924] vhci_hcd: connection reset by peer [ 66.940015][ T28] vhci_hcd: stop threads [ 66.944511][ T28] vhci_hcd: release socket [ 66.949081][ T28] vhci_hcd: disconnect device [ 67.254214][ T3298] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.282172][ T4964] syz.0.527[4964] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 67.291664][ T4964] bond1: entered promiscuous mode [ 67.308612][ T4964] bond1: entered allmulticast mode [ 67.314602][ T4964] 8021q: adding VLAN 0 to HW filter on device bond1 [ 67.326004][ T4964] bond1 (unregistering): Released all slaves [ 67.421070][ T4974] loop0: detected capacity change from 0 to 512 [ 67.437853][ T4974] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 67.475032][ T4974] EXT4-fs (loop0): 1 truncate cleaned up [ 67.481378][ T4974] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 67.557277][ T3298] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.632914][ T4984] SELinux: ebitmap: map size 0 does not match my size 64 (high bit was 0) [ 67.697460][ T4984] SELinux: failed to load policy [ 67.814359][ T5000] loop0: detected capacity change from 0 to 512 [ 67.831160][ T5000] EXT4-fs: Ignoring removed i_version option [ 67.865044][ T5000] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 67.884007][ T5000] ext4 filesystem being mounted at /120/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 67.897610][ T5000] EXT4-fs error (device loop0): ext4_do_update_inode:5153: inode #4: comm syz.0.537: corrupted inode contents [ 67.910422][ T5000] EXT4-fs error (device loop0): ext4_dirty_inode:6041: inode #4: comm syz.0.537: mark_inode_dirty error [ 67.923317][ T5000] EXT4-fs error (device loop0): ext4_do_update_inode:5153: inode #4: comm syz.0.537: corrupted inode contents [ 67.948238][ T5000] EXT4-fs error (device loop0): __ext4_ext_dirty:207: inode #4: comm syz.0.537: mark_inode_dirty error [ 67.965672][ T5000] EXT4-fs error (device loop0): ext4_acquire_dquot:6938: comm syz.0.537: Failed to acquire dquot type 1 [ 67.986218][ T5014] EXT4-fs error (device loop0): ext4_do_update_inode:5153: inode #4: comm syz.0.537: corrupted inode contents [ 68.032717][ T5014] EXT4-fs error (device loop0): ext4_dirty_inode:6041: inode #4: comm syz.0.537: mark_inode_dirty error [ 68.045000][ T5014] EXT4-fs error (device loop0): ext4_do_update_inode:5153: inode #4: comm syz.0.537: corrupted inode contents [ 68.058978][ T5014] EXT4-fs error (device loop0): __ext4_ext_dirty:207: inode #4: comm syz.0.537: mark_inode_dirty error [ 68.072608][ T5014] EXT4-fs error (device loop0): ext4_acquire_dquot:6938: comm syz.0.537: Failed to acquire dquot type 1 [ 68.158447][ T5024] loop2: detected capacity change from 0 to 512 [ 68.165219][ T5024] EXT4-fs: Ignoring removed i_version option [ 68.180344][ T5024] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 68.194154][ T5024] ext4 filesystem being mounted at /106/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 68.217127][ T5024] EXT4-fs error (device loop2): ext4_do_update_inode:5153: inode #4: comm syz.2.549: corrupted inode contents [ 68.229930][ T5024] EXT4-fs error (device loop2): ext4_dirty_inode:6041: inode #4: comm syz.2.549: mark_inode_dirty error [ 68.241723][ T5024] EXT4-fs error (device loop2): ext4_do_update_inode:5153: inode #4: comm syz.2.549: corrupted inode contents [ 68.253871][ T5024] EXT4-fs error (device loop2): __ext4_ext_dirty:207: inode #4: comm syz.2.549: mark_inode_dirty error [ 68.266692][ T5024] EXT4-fs error (device loop2): ext4_acquire_dquot:6938: comm syz.2.549: Failed to acquire dquot type 1 [ 68.298790][ T5031] EXT4-fs error (device loop2): ext4_do_update_inode:5153: inode #4: comm syz.2.549: corrupted inode contents [ 68.311197][ T5031] EXT4-fs error (device loop2): ext4_dirty_inode:6041: inode #4: comm syz.2.549: mark_inode_dirty error [ 68.330083][ T5031] EXT4-fs error (device loop2): ext4_do_update_inode:5153: inode #4: comm syz.2.549: corrupted inode contents [ 68.343001][ T5031] EXT4-fs error (device loop2): __ext4_ext_dirty:207: inode #4: comm syz.2.549: mark_inode_dirty error [ 68.354756][ T5031] EXT4-fs error (device loop2): ext4_acquire_dquot:6938: comm syz.2.549: Failed to acquire dquot type 1 [ 68.360783][ T5033] bond1: entered promiscuous mode [ 68.371380][ T5033] bond1: entered allmulticast mode [ 68.376865][ T5033] 8021q: adding VLAN 0 to HW filter on device bond1 [ 68.388659][ T5033] bond1 (unregistering): Released all slaves [ 68.416479][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.434594][ T5038] SELinux: ebitmap: map size 0 does not match my size 64 (high bit was 0) [ 68.452331][ T5038] SELinux: failed to load policy [ 68.489439][ T5042] loop3: detected capacity change from 0 to 512 [ 68.513441][ T5042] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 68.585960][ T3298] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.597570][ T5042] ext4 filesystem being mounted at /89/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 68.881761][ T5079] bond1: entered promiscuous mode [ 68.887257][ T5079] bond1: entered allmulticast mode [ 68.897134][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.909508][ T5079] 8021q: adding VLAN 0 to HW filter on device bond1 [ 68.931114][ T5082] ref_ctr_offset mismatch. inode: 0x25d offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x82 [ 68.945199][ T5079] bond1 (unregistering): Released all slaves [ 68.952662][ T5087] netlink: 12 bytes leftover after parsing attributes in process `syz.3.568'. [ 68.964554][ T5082] loop4: detected capacity change from 0 to 1024 [ 68.971571][ T5082] EXT4-fs: Ignoring removed orlov option [ 68.977345][ T5082] EXT4-fs: Ignoring removed nomblk_io_submit option [ 69.028212][ T5082] EXT4-fs (loop4): can't mount with journal_async_commit, fs mounted w/o journal [ 69.125212][ T5094] netlink: 4 bytes leftover after parsing attributes in process `syz.3.572'. [ 69.140970][ T5094] hsr_slave_1 (unregistering): left promiscuous mode [ 69.181185][ T5107] loop0: detected capacity change from 0 to 512 [ 69.188185][ T5100] netlink: 'syz.1.574': attribute type 10 has an invalid length. [ 69.191802][ T5107] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 69.221434][ T5107] EXT4-fs (loop0): 1 truncate cleaned up [ 69.227704][ T5107] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 69.300274][ T3298] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.314534][ T5115] loop3: detected capacity change from 0 to 512 [ 69.372927][ T29] kauditd_printk_skb: 227 callbacks suppressed [ 69.372945][ T29] audit: type=1326 audit(1737334313.229:2498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5124 comm="syz.4.584" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd128635d29 code=0x7ffc0000 [ 69.405203][ T5128] ref_ctr_offset mismatch. inode: 0x27d offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x82 [ 69.426607][ T29] audit: type=1326 audit(1737334313.229:2499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5124 comm="syz.4.584" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd128635d29 code=0x7ffc0000 [ 69.450867][ T29] audit: type=1326 audit(1737334313.279:2500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5124 comm="syz.4.584" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd128635d29 code=0x7ffc0000 [ 69.467038][ T5128] loop2: detected capacity change from 0 to 1024 [ 69.474887][ T29] audit: type=1326 audit(1737334313.279:2501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5124 comm="syz.4.584" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd128635d29 code=0x7ffc0000 [ 69.505913][ T29] audit: type=1326 audit(1737334313.279:2502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5124 comm="syz.4.584" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd128635d29 code=0x7ffc0000 [ 69.506736][ T5128] EXT4-fs: Ignoring removed orlov option [ 69.529595][ T29] audit: type=1326 audit(1737334313.279:2503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5124 comm="syz.4.584" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd128635d29 code=0x7ffc0000 [ 69.535364][ T5128] EXT4-fs: Ignoring removed nomblk_io_submit option [ 69.539087][ T5128] EXT4-fs (loop2): can't mount with journal_async_commit, fs mounted w/o journal [ 69.558875][ T29] audit: type=1326 audit(1737334313.279:2504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5124 comm="syz.4.584" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd128635d29 code=0x7ffc0000 [ 69.558944][ T29] audit: type=1326 audit(1737334313.279:2505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5124 comm="syz.4.584" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7fd128635d29 code=0x7ffc0000 [ 69.609416][ T5115] EXT4-fs (loop3): too many log groups per flexible block group [ 69.621691][ T29] audit: type=1326 audit(1737334313.279:2506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5124 comm="syz.4.584" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd128635d29 code=0x7ffc0000 [ 69.629489][ T5115] EXT4-fs (loop3): failed to initialize mballoc (-12) [ 69.636734][ T5133] bond1: entered promiscuous mode [ 69.653496][ T29] audit: type=1326 audit(1737334313.279:2507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5124 comm="syz.4.584" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7fd128635d29 code=0x7ffc0000 [ 69.660346][ T5133] bond1: entered allmulticast mode [ 69.660589][ T5133] 8021q: adding VLAN 0 to HW filter on device bond1 [ 69.666171][ T5115] EXT4-fs (loop3): mount failed [ 69.752010][ T5133] bond1 (unregistering): Released all slaves [ 69.830475][ T5146] pim6reg1: entered promiscuous mode [ 69.835838][ T5146] pim6reg1: entered allmulticast mode [ 69.990012][ T5170] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 69.998636][ T5170] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 70.015291][ T5171] ref_ctr_offset mismatch. inode: 0x207 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x82 [ 70.043804][ T5171] loop3: detected capacity change from 0 to 1024 [ 70.060179][ T5171] EXT4-fs: Ignoring removed orlov option [ 70.065915][ T5171] EXT4-fs: Ignoring removed nomblk_io_submit option [ 70.079267][ T5171] EXT4-fs (loop3): can't mount with journal_async_commit, fs mounted w/o journal [ 70.292120][ T5184] bond1: entered promiscuous mode [ 70.297226][ T5184] bond1: entered allmulticast mode [ 70.305911][ T5188] loop3: detected capacity change from 0 to 512 [ 70.316028][ T5184] 8021q: adding VLAN 0 to HW filter on device bond1 [ 70.330255][ T5188] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 70.342467][ T5188] EXT4-fs (loop3): 1 truncate cleaned up [ 70.349548][ T5188] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 70.350726][ T5184] bond1 (unregistering): Released all slaves [ 70.375549][ T5194] loop0: detected capacity change from 0 to 512 [ 70.378257][ T5186] netlink: 'syz.1.609': attribute type 10 has an invalid length. [ 70.393205][ T5194] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 70.422835][ T5194] EXT4-fs (loop0): 1 truncate cleaned up [ 70.448579][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.451398][ T5194] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 70.540592][ T5201] netlink: 'syz.4.615': attribute type 10 has an invalid length. [ 70.560021][ T3298] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.621585][ T5207] pim6reg1: entered promiscuous mode [ 70.627041][ T5207] pim6reg1: entered allmulticast mode [ 70.703575][ T5215] bpf_get_probe_write_proto: 23 callbacks suppressed [ 70.703592][ T5215] syz.1.620[5215] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 70.716097][ T5215] syz.1.620[5215] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 70.730949][ T5215] syz.1.620[5215] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 70.808372][ T5215] bond1: entered promiscuous mode [ 70.825028][ T5215] bond1: entered allmulticast mode [ 70.859023][ T5215] 8021q: adding VLAN 0 to HW filter on device bond1 [ 70.870344][ T5215] bond1 (unregistering): Released all slaves [ 70.884416][ T5227] SELinux: ebitmap: map size 0 does not match my size 64 (high bit was 0) [ 70.899691][ T5227] SELinux: failed to load policy [ 71.014323][ T5231] netlink: 'syz.0.626': attribute type 10 has an invalid length. [ 71.044815][ T5238] loop1: detected capacity change from 0 to 512 [ 71.096087][ T5238] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 71.116353][ T5246] syz.0.633[5246] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 71.116418][ T5246] syz.0.633[5246] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 71.132075][ T5238] EXT4-fs (loop1): 1 truncate cleaned up [ 71.156479][ T5249] ref_ctr_offset mismatch. inode: 0x2a8 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x82 [ 71.167763][ T5246] syz.0.633[5246] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 71.180736][ T5238] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 71.200058][ T5249] loop4: detected capacity change from 0 to 1024 [ 71.262497][ T5249] EXT4-fs: Ignoring removed orlov option [ 71.268395][ T5249] EXT4-fs: Ignoring removed nomblk_io_submit option [ 71.288211][ T3297] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.300497][ T5249] EXT4-fs (loop4): can't mount with journal_async_commit, fs mounted w/o journal [ 71.469820][ T3376] usb 5-1: enqueue for inactive port 0 [ 71.472378][ T5263] netlink: 'syz.4.641': attribute type 10 has an invalid length. [ 71.481420][ T3376] usb 5-1: enqueue for inactive port 0 [ 71.547517][ T5273] loop0: detected capacity change from 0 to 512 [ 71.568176][ T3376] vhci_hcd: vhci_device speed not set [ 71.576379][ T5273] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 71.592661][ T5273] EXT4-fs (loop0): 1 truncate cleaned up [ 71.599225][ T5273] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 71.663997][ T5285] ref_ctr_offset mismatch. inode: 0x228 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x82 [ 71.686947][ T5285] loop3: detected capacity change from 0 to 1024 [ 71.694395][ T5285] EXT4-fs: Ignoring removed orlov option [ 71.700180][ T5285] EXT4-fs: Ignoring removed nomblk_io_submit option [ 71.708217][ T5285] EXT4-fs (loop3): can't mount with journal_async_commit, fs mounted w/o journal [ 71.723469][ T3298] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.748404][ T5287] loop4: detected capacity change from 0 to 512 [ 71.769739][ T5292] netlink: 12 bytes leftover after parsing attributes in process `syz.0.651'. [ 71.801982][ T5287] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 71.837538][ T5287] ext4 filesystem being mounted at /130/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 71.848778][ T5300] ref_ctr_offset mismatch. inode: 0x33a offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x82 [ 71.873095][ T5300] loop1: detected capacity change from 0 to 1024 [ 71.895166][ T5300] EXT4-fs: Ignoring removed orlov option [ 71.901452][ T5300] EXT4-fs: Ignoring removed nomblk_io_submit option [ 71.962247][ T5308] netlink: 'syz.3.658': attribute type 10 has an invalid length. [ 71.977381][ T5300] EXT4-fs (loop1): can't mount with journal_async_commit, fs mounted w/o journal [ 71.987122][ T5308] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.994379][ T5308] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.006615][ T5308] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.014126][ T5308] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.021602][ T5308] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.028747][ T5308] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.039178][ T5308] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 72.040802][ T5312] loop2: detected capacity change from 0 to 512 [ 72.057944][ T5312] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 72.070429][ T5312] EXT4-fs (loop2): 1 truncate cleaned up [ 72.070644][ T5314] syz.0.659[5314] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 72.077159][ T5314] syz.0.659[5314] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 72.077488][ T5312] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 72.104114][ T5314] syz.0.659[5314] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 72.196225][ T5310] bond1: entered promiscuous mode [ 72.212931][ T5310] bond1: entered allmulticast mode [ 72.233464][ T5310] 8021q: adding VLAN 0 to HW filter on device bond1 [ 72.269892][ T5310] bond1 (unregistering): Released all slaves [ 72.277478][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.310451][ T5328] ref_ctr_offset mismatch. inode: 0x34b offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x82 [ 72.334840][ T5328] loop1: detected capacity change from 0 to 1024 [ 72.335130][ T5328] EXT4-fs: Ignoring removed orlov option [ 72.335300][ T5328] EXT4-fs: Ignoring removed nomblk_io_submit option [ 72.348303][ T5328] EXT4-fs (loop1): can't mount with journal_async_commit, fs mounted w/o journal [ 72.399270][ T5334] pim6reg1: entered promiscuous mode [ 72.399288][ T5334] pim6reg1: entered allmulticast mode [ 72.499738][ T5345] netlink: 12 bytes leftover after parsing attributes in process `syz.1.672'. [ 72.518680][ T5346] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 72.536203][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.558035][ T5346] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 72.604653][ T5355] loop1: detected capacity change from 0 to 512 [ 72.622857][ T5350] loop0: detected capacity change from 0 to 512 [ 72.629665][ T5355] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 72.659764][ T5355] EXT4-fs (loop1): 1 truncate cleaned up [ 72.677651][ T5355] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 72.699250][ T5350] EXT4-fs (loop0): too many log groups per flexible block group [ 72.707014][ T5350] EXT4-fs (loop0): failed to initialize mballoc (-12) [ 72.733888][ T5350] EXT4-fs (loop0): mount failed [ 72.804894][ T5370] ref_ctr_offset mismatch. inode: 0x262 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x82 [ 72.824613][ T3297] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.853021][ T5370] loop3: detected capacity change from 0 to 1024 [ 72.860046][ T5370] EXT4-fs: Ignoring removed orlov option [ 72.865777][ T5370] EXT4-fs: Ignoring removed nomblk_io_submit option [ 72.880509][ T5370] EXT4-fs (loop3): can't mount with journal_async_commit, fs mounted w/o journal [ 72.891288][ T5372] netlink: 4 bytes leftover after parsing attributes in process `syz.2.683'. [ 72.973529][ T5383] loop1: detected capacity change from 0 to 512 [ 73.004527][ T5385] ref_ctr_offset mismatch. inode: 0x2b2 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x82 [ 73.024676][ T5383] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.038338][ T5383] ext4 filesystem being mounted at /159/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 73.050371][ T5385] loop2: detected capacity change from 0 to 1024 [ 73.062200][ T5385] EXT4-fs: Ignoring removed orlov option [ 73.067950][ T5385] EXT4-fs: Ignoring removed nomblk_io_submit option [ 73.093957][ T5385] EXT4-fs (loop2): can't mount with journal_async_commit, fs mounted w/o journal [ 73.139488][ T5396] loop3: detected capacity change from 0 to 512 [ 73.163813][ T5396] EXT4-fs (loop3): too many log groups per flexible block group [ 73.172108][ T5396] EXT4-fs (loop3): failed to initialize mballoc (-12) [ 73.181009][ T5396] EXT4-fs (loop3): mount failed [ 73.252601][ T5408] loop2: detected capacity change from 0 to 512 [ 73.260222][ T5408] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 73.274573][ T5408] EXT4-fs (loop2): 1 truncate cleaned up [ 73.280949][ T5408] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.405200][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.440066][ T5417] netlink: 4 bytes leftover after parsing attributes in process `syz.3.698'. [ 73.603200][ T5438] loop3: detected capacity change from 0 to 512 [ 73.614083][ T5438] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 73.627178][ T5438] EXT4-fs (loop3): 1 truncate cleaned up [ 73.635349][ T5438] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 73.694097][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.742810][ T5447] pim6reg1: entered promiscuous mode [ 73.748499][ T5447] pim6reg1: entered allmulticast mode [ 73.802128][ T5449] bond1: entered promiscuous mode [ 73.807368][ T5449] bond1: entered allmulticast mode [ 73.817986][ T3297] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.831800][ T5449] 8021q: adding VLAN 0 to HW filter on device bond1 [ 73.913497][ T5458] netlink: 'syz.0.713': attribute type 10 has an invalid length. [ 73.923950][ T5449] bond1 (unregistering): Released all slaves [ 74.036521][ T5466] syz.1.718[5466] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 74.096687][ T5466] bond1: entered promiscuous mode [ 74.113393][ T5466] bond1: entered allmulticast mode [ 74.127151][ T5466] 8021q: adding VLAN 0 to HW filter on device bond1 [ 74.170672][ T5466] bond1 (unregistering): Released all slaves [ 74.192758][ T5483] loop3: detected capacity change from 0 to 512 [ 74.201233][ T5483] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 74.214022][ T5483] EXT4-fs (loop3): 1 truncate cleaned up [ 74.227552][ T5486] pim6reg1: entered promiscuous mode [ 74.232677][ T5483] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 74.233064][ T5486] pim6reg1: entered allmulticast mode [ 74.277543][ T5489] loop2: detected capacity change from 0 to 512 [ 74.284422][ T5489] EXT4-fs: Ignoring removed i_version option [ 74.305716][ T5489] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.318879][ T5489] ext4 filesystem being mounted at /136/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 74.336359][ T5489] EXT4-fs error (device loop2): ext4_do_update_inode:5153: inode #4: comm syz.2.727: corrupted inode contents [ 74.336467][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.366515][ T5489] EXT4-fs error (device loop2): ext4_dirty_inode:6041: inode #4: comm syz.2.727: mark_inode_dirty error [ 74.387956][ T5489] EXT4-fs error (device loop2): ext4_do_update_inode:5153: inode #4: comm syz.2.727: corrupted inode contents [ 74.408476][ T5489] EXT4-fs error (device loop2): __ext4_ext_dirty:207: inode #4: comm syz.2.727: mark_inode_dirty error [ 74.436877][ T5489] __quota_error: 611 callbacks suppressed [ 74.436893][ T5489] Quota error (device loop2): write_blk: dquota write failed [ 74.450257][ T5489] Quota error (device loop2): find_free_dqentry: Can't write quota data block 5 [ 74.459327][ T5489] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 74.469420][ T5489] EXT4-fs error (device loop2): ext4_acquire_dquot:6938: comm syz.2.727: Failed to acquire dquot type 1 [ 74.481737][ T5495] EXT4-fs error (device loop2): ext4_do_update_inode:5153: inode #4: comm syz.2.727: corrupted inode contents [ 74.494815][ T5495] EXT4-fs error (device loop2): ext4_dirty_inode:6041: inode #4: comm syz.2.727: mark_inode_dirty error [ 74.520909][ T5495] EXT4-fs error (device loop2): ext4_do_update_inode:5153: inode #4: comm syz.2.727: corrupted inode contents [ 74.533166][ T5495] EXT4-fs error (device loop2): __ext4_ext_dirty:207: inode #4: comm syz.2.727: mark_inode_dirty error [ 74.545099][ T5495] Quota error (device loop2): write_blk: dquota write failed [ 74.552794][ T5495] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 74.562921][ T5495] EXT4-fs error (device loop2): ext4_acquire_dquot:6938: comm syz.2.727: Failed to acquire dquot type 1 [ 74.616118][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.701081][ T29] audit: type=1326 audit(1737334318.559:3119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5510 comm="syz.2.734" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2fc5f5d29 code=0x7ffc0000 [ 74.757704][ T29] audit: type=1326 audit(1737334318.559:3120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5510 comm="syz.2.734" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2fc5f5d29 code=0x7ffc0000 [ 74.781198][ T29] audit: type=1326 audit(1737334318.559:3121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5510 comm="syz.2.734" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd2fc5f5d29 code=0x7ffc0000 [ 74.804636][ T29] audit: type=1326 audit(1737334318.559:3122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5510 comm="syz.2.734" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2fc5f5d29 code=0x7ffc0000 [ 74.828272][ T29] audit: type=1326 audit(1737334318.559:3123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5510 comm="syz.2.734" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2fc5f5d29 code=0x7ffc0000 [ 74.870979][ T5520] loop4: detected capacity change from 0 to 512 [ 74.877980][ T5520] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 74.909586][ T5520] EXT4-fs (loop4): 1 truncate cleaned up [ 74.916189][ T5520] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 74.983055][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.350055][ T5556] netlink: 'syz.0.751': attribute type 10 has an invalid length. [ 75.465025][ T3376] IPVS: starting estimator thread 0... [ 75.503980][ T5562] netlink: 'syz.4.755': attribute type 10 has an invalid length. [ 75.510787][ T5573] pim6reg1: entered promiscuous mode [ 75.517065][ T5573] pim6reg1: entered allmulticast mode [ 75.578178][ T5571] IPVS: using max 2448 ests per chain, 122400 per kthread [ 75.629475][ T5590] loop2: detected capacity change from 0 to 512 [ 75.656754][ T5590] EXT4-fs (loop2): too many log groups per flexible block group [ 75.664625][ T5590] EXT4-fs (loop2): failed to initialize mballoc (-12) [ 75.703495][ T5590] EXT4-fs (loop2): mount failed [ 75.705492][ T5598] loop0: detected capacity change from 0 to 512 [ 75.715680][ T5601] loop4: detected capacity change from 0 to 512 [ 75.724597][ T5601] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 75.734831][ T5603] ref_ctr_offset mismatch. inode: 0x2cd offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x82 [ 75.755363][ T5603] loop3: detected capacity change from 0 to 1024 [ 75.764912][ T5601] EXT4-fs (loop4): 1 truncate cleaned up [ 75.772558][ T5603] EXT4-fs: Ignoring removed orlov option [ 75.773487][ T5598] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 75.778739][ T5603] EXT4-fs: Ignoring removed nomblk_io_submit option [ 75.793704][ T5601] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 75.814367][ T5603] EXT4-fs (loop3): can't mount with journal_async_commit, fs mounted w/o journal [ 75.831495][ T5598] ext4 filesystem being mounted at /175/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 75.893392][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.010713][ T5626] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 76.043436][ T5626] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 76.082205][ T5631] pim6reg1: entered promiscuous mode [ 76.087642][ T5631] pim6reg1: entered allmulticast mode [ 76.196243][ T5636] netlink: 4 bytes leftover after parsing attributes in process `syz.3.784'. [ 76.276600][ T5643] loop1: detected capacity change from 0 to 512 [ 76.283678][ T5643] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 76.298371][ T5643] EXT4-fs (loop1): 1 truncate cleaned up [ 76.304596][ T5643] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 76.348751][ T3297] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.392468][ T5647] netlink: 'syz.3.789': attribute type 10 has an invalid length. [ 76.401095][ T5647] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.408402][ T5647] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.527914][ T3298] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.539458][ T5657] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(11) [ 76.546196][ T5657] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 76.553761][ T5657] vhci_hcd vhci_hcd.0: Device attached [ 76.694772][ T5671] netlink: 4 bytes leftover after parsing attributes in process `syz.2.797'. [ 76.731555][ T5674] pim6reg1: entered promiscuous mode [ 76.737388][ T5674] pim6reg1: entered allmulticast mode [ 76.748358][ T1035] vhci_hcd: vhci_device speed not set [ 76.794076][ T5677] bpf_get_probe_write_proto: 5 callbacks suppressed [ 76.794097][ T5677] syz.2.799[5677] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 76.801370][ T5677] syz.2.799[5677] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 76.813927][ T1035] usb 7-1: new full-speed USB device number 3 using vhci_hcd [ 76.848325][ T5677] syz.2.799[5677] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 76.879732][ T5677] bond1: entered promiscuous mode [ 76.896498][ T5677] bond1: entered allmulticast mode [ 76.902543][ T5677] 8021q: adding VLAN 0 to HW filter on device bond1 [ 76.921336][ T5677] bond1 (unregistering): Released all slaves [ 77.014929][ T5690] loop0: detected capacity change from 0 to 512 [ 77.040344][ T5690] EXT4-fs (loop0): too many log groups per flexible block group [ 77.048319][ T5690] EXT4-fs (loop0): failed to initialize mballoc (-12) [ 77.055633][ T5690] EXT4-fs (loop0): mount failed [ 77.168352][ T5701] syz.2.807[5701] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 77.168536][ T5701] syz.2.807[5701] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 77.180564][ T5701] syz.2.807[5701] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 77.214999][ T5701] bond1: entered promiscuous mode [ 77.231522][ T5701] bond1: entered allmulticast mode [ 77.237548][ T5701] 8021q: adding VLAN 0 to HW filter on device bond1 [ 77.250312][ T5701] bond1 (unregistering): Released all slaves [ 77.314059][ T5658] vhci_hcd: connection reset by peer [ 77.321674][ T50] vhci_hcd: stop threads [ 77.325983][ T50] vhci_hcd: release socket [ 77.330700][ T50] vhci_hcd: disconnect device [ 77.350353][ T5710] loop0: detected capacity change from 0 to 512 [ 77.365484][ T5710] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 77.379849][ T5710] EXT4-fs (loop0): 1 truncate cleaned up [ 77.386230][ T5710] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 77.400947][ T5716] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 77.407488][ T5716] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 77.415066][ T5716] vhci_hcd vhci_hcd.0: Device attached [ 77.422560][ T5717] vhci_hcd: connection closed [ 77.422781][ T3394] vhci_hcd: stop threads [ 77.431904][ T3394] vhci_hcd: release socket [ 77.436441][ T3394] vhci_hcd: disconnect device [ 77.468822][ T3298] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.499521][ T5720] loop0: detected capacity change from 0 to 512 [ 77.520025][ T5720] EXT4-fs (loop0): too many log groups per flexible block group [ 77.527781][ T5720] EXT4-fs (loop0): failed to initialize mballoc (-12) [ 77.534961][ T5720] EXT4-fs (loop0): mount failed [ 77.582797][ T5727] syz.0.815[5727] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 77.582849][ T5727] syz.0.815[5727] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 77.594447][ T5727] syz.0.815[5727] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 77.615337][ T5727] bond1: entered promiscuous mode [ 77.631838][ T5727] bond1: entered allmulticast mode [ 77.638254][ T5727] 8021q: adding VLAN 0 to HW filter on device bond1 [ 77.650238][ T5727] bond1 (unregistering): Released all slaves [ 77.742118][ T5733] loop0: detected capacity change from 0 to 512 [ 77.762403][ T5733] EXT4-fs (loop0): too many log groups per flexible block group [ 77.770203][ T5733] EXT4-fs (loop0): failed to initialize mballoc (-12) [ 77.777028][ T5733] EXT4-fs (loop0): mount failed [ 77.841550][ T5743] pim6reg1: entered promiscuous mode [ 77.846971][ T5743] pim6reg1: entered allmulticast mode [ 77.979696][ T5759] loop2: detected capacity change from 0 to 512 [ 77.994030][ T5759] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 78.029913][ T5759] EXT4-fs (loop2): 1 truncate cleaned up [ 78.059789][ T5759] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 78.076429][ T5770] SELinux: ebitmap: map size 0 does not match my size 64 (high bit was 0) [ 78.085699][ T5770] SELinux: failed to load policy [ 78.172692][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.305601][ T5785] pim6reg1: entered promiscuous mode [ 78.311060][ T5785] pim6reg1: entered allmulticast mode [ 78.394051][ T5794] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(11) [ 78.400692][ T5794] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 78.408257][ T5794] vhci_hcd vhci_hcd.0: Device attached [ 78.477092][ T5804] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 78.483781][ T5804] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 78.491376][ T5804] vhci_hcd vhci_hcd.0: Device attached [ 78.502958][ T5805] vhci_hcd: connection closed [ 78.503168][ T50] vhci_hcd: stop threads [ 78.512239][ T50] vhci_hcd: release socket [ 78.516717][ T50] vhci_hcd: disconnect device [ 78.531596][ T5808] netlink: 'syz.3.845': attribute type 10 has an invalid length. [ 78.588198][ T35] vhci_hcd: vhci_device speed not set [ 78.649539][ T35] usb 1-1: new high-speed USB device number 2 using vhci_hcd [ 78.792580][ T5826] loop3: detected capacity change from 0 to 512 [ 78.800506][ T5826] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 78.813169][ T5826] EXT4-fs (loop3): 1 truncate cleaned up [ 78.819342][ T5826] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 78.870334][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.012039][ T5843] loop3: detected capacity change from 0 to 512 [ 79.019389][ T5843] EXT4-fs: Ignoring removed i_version option [ 79.044857][ T5843] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 79.047258][ T5847] loop1: detected capacity change from 0 to 512 [ 79.058057][ T5843] ext4 filesystem being mounted at /159/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 79.066295][ T5846] loop2: detected capacity change from 0 to 512 [ 79.079805][ T5843] EXT4-fs error (device loop3): ext4_do_update_inode:5153: inode #4: comm syz.3.859: corrupted inode contents [ 79.097302][ T5847] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 79.109665][ T5843] EXT4-fs error (device loop3): ext4_dirty_inode:6041: inode #4: comm syz.3.859: mark_inode_dirty error [ 79.123054][ T5843] EXT4-fs error (device loop3): ext4_do_update_inode:5153: inode #4: comm syz.3.859: corrupted inode contents [ 79.123480][ T5847] EXT4-fs (loop1): 1 truncate cleaned up [ 79.137620][ T5843] EXT4-fs error (device loop3): __ext4_ext_dirty:207: inode #4: comm syz.3.859: mark_inode_dirty error [ 79.143881][ T5847] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 79.158461][ T5843] EXT4-fs error (device loop3): ext4_acquire_dquot:6938: comm syz.3.859: Failed to acquire dquot type 1 [ 79.165736][ T5795] vhci_hcd: connection reset by peer [ 79.177158][ T5851] EXT4-fs error (device loop3): ext4_do_update_inode:5153: inode #4: comm syz.3.859: corrupted inode contents [ 79.192881][ T3394] vhci_hcd: stop threads [ 79.197195][ T3394] vhci_hcd: release socket [ 79.201771][ T3394] vhci_hcd: disconnect device [ 79.207983][ T5846] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 79.208654][ T5851] EXT4-fs error (device loop3): ext4_dirty_inode:6041: inode #4: comm syz.3.859: mark_inode_dirty error [ 79.232971][ T5851] EXT4-fs error (device loop3): ext4_do_update_inode:5153: inode #4: comm syz.3.859: corrupted inode contents [ 79.245265][ T5851] EXT4-fs error (device loop3): __ext4_ext_dirty:207: inode #4: comm syz.3.859: mark_inode_dirty error [ 79.250127][ T5846] ext4 filesystem being mounted at /154/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 79.257477][ T5851] EXT4-fs error (device loop3): ext4_acquire_dquot:6938: comm syz.3.859: Failed to acquire dquot type 1 [ 79.306988][ T3297] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.318840][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.343393][ T5856] syz.1.862[5856] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 79.364210][ T5856] bond1: entered promiscuous mode [ 79.380843][ T5856] bond1: entered allmulticast mode [ 79.390803][ T5856] 8021q: adding VLAN 0 to HW filter on device bond1 [ 79.406737][ T5856] bond1 (unregistering): Released all slaves [ 79.482080][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.602829][ T5876] netlink: 4 bytes leftover after parsing attributes in process `syz.1.869'. [ 79.623650][ T5887] loop3: detected capacity change from 0 to 512 [ 79.630124][ T29] kauditd_printk_skb: 470 callbacks suppressed [ 79.630139][ T29] audit: type=1326 audit(1737334323.479:3589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5884 comm="syz.2.872" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2fc5f5d29 code=0x7ffc0000 [ 79.659939][ T29] audit: type=1326 audit(1737334323.479:3590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5884 comm="syz.2.872" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2fc5f5d29 code=0x7ffc0000 [ 79.683368][ T29] audit: type=1326 audit(1737334323.479:3591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5884 comm="syz.2.872" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd2fc5f5d29 code=0x7ffc0000 [ 79.706855][ T29] audit: type=1326 audit(1737334323.479:3592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5884 comm="syz.2.872" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2fc5f5d29 code=0x7ffc0000 [ 79.730353][ T29] audit: type=1326 audit(1737334323.479:3593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5884 comm="syz.2.872" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2fc5f5d29 code=0x7ffc0000 [ 79.753735][ T29] audit: type=1326 audit(1737334323.479:3594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5884 comm="syz.2.872" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd2fc5f5d29 code=0x7ffc0000 [ 79.777264][ T29] audit: type=1326 audit(1737334323.489:3595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5884 comm="syz.2.872" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2fc5f5d29 code=0x7ffc0000 [ 79.801651][ T29] audit: type=1326 audit(1737334323.489:3596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5884 comm="syz.2.872" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2fc5f5d29 code=0x7ffc0000 [ 79.802234][ T5887] EXT4-fs (loop3): too many log groups per flexible block group [ 79.825392][ T29] audit: type=1326 audit(1737334323.489:3597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5884 comm="syz.2.872" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7fd2fc5f5d29 code=0x7ffc0000 [ 79.825431][ T29] audit: type=1326 audit(1737334323.489:3598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5884 comm="syz.2.872" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2fc5f5d29 code=0x7ffc0000 [ 79.880208][ T5887] EXT4-fs (loop3): failed to initialize mballoc (-12) [ 79.888071][ T5887] EXT4-fs (loop3): mount failed [ 79.946303][ T5901] pim6reg1: entered promiscuous mode [ 79.951748][ T5901] pim6reg1: entered allmulticast mode [ 80.035869][ T5907] netlink: 'syz.0.882': attribute type 10 has an invalid length. [ 80.107734][ T5911] netlink: 4 bytes leftover after parsing attributes in process `syz.0.884'. [ 80.429252][ T5937] bond1: entered promiscuous mode [ 80.434342][ T5937] bond1: entered allmulticast mode [ 80.442039][ T5937] 8021q: adding VLAN 0 to HW filter on device bond1 [ 80.461302][ T5937] bond1 (unregistering): Released all slaves [ 80.572791][ T5944] netlink: 'syz.2.896': attribute type 10 has an invalid length. [ 80.580901][ T5944] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.588255][ T5944] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.598360][ T5944] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.605467][ T5944] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.612891][ T5944] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.620163][ T5944] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.631709][ T5944] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 80.655965][ T5952] loop0: detected capacity change from 0 to 512 [ 80.709706][ T5952] EXT4-fs (loop0): too many log groups per flexible block group [ 80.717815][ T5952] EXT4-fs (loop0): failed to initialize mballoc (-12) [ 80.723659][ T5963] loop1: detected capacity change from 0 to 512 [ 80.725494][ T5952] EXT4-fs (loop0): mount failed [ 80.740136][ T5958] bond1: entered promiscuous mode [ 80.745471][ T5958] bond1: entered allmulticast mode [ 80.752007][ T5958] 8021q: adding VLAN 0 to HW filter on device bond1 [ 80.766606][ T5963] EXT4-fs (loop1): too many log groups per flexible block group [ 80.774918][ T5963] EXT4-fs (loop1): failed to initialize mballoc (-12) [ 80.787544][ T5963] EXT4-fs (loop1): mount failed [ 80.800948][ T5958] bond1 (unregistering): Released all slaves [ 80.958477][ T5985] loop4: detected capacity change from 0 to 512 [ 80.968590][ T5985] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 80.999875][ T5982] bond1: entered promiscuous mode [ 81.005061][ T5982] bond1: entered allmulticast mode [ 81.010590][ T5985] EXT4-fs (loop4): 1 truncate cleaned up [ 81.018630][ T5985] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 81.031212][ T5982] 8021q: adding VLAN 0 to HW filter on device bond1 [ 81.043454][ T5982] bond1 (unregistering): Released all slaves [ 81.085480][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.162220][ T6006] loop0: detected capacity change from 0 to 512 [ 81.191070][ T6006] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 81.218864][ T6006] EXT4-fs (loop0): 1 truncate cleaned up [ 81.237188][ T6006] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 81.259045][ T6017] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(11) [ 81.265889][ T6017] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 81.274124][ T6017] vhci_hcd vhci_hcd.0: Device attached [ 81.324521][ T3298] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.344215][ T6022] netlink: 'syz.2.926': attribute type 10 has an invalid length. [ 81.357164][ T6022] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.364554][ T6022] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.398811][ T6030] loop1: detected capacity change from 0 to 512 [ 81.410219][ T6034] loop0: detected capacity change from 0 to 512 [ 81.441056][ T6030] EXT4-fs (loop1): too many log groups per flexible block group [ 81.448893][ T6030] EXT4-fs (loop1): failed to initialize mballoc (-12) [ 81.455922][ T6030] EXT4-fs (loop1): mount failed [ 81.460894][ T3153] vhci_hcd: vhci_device speed not set [ 81.467850][ T6038] bond1: entered promiscuous mode [ 81.468963][ T6034] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 81.473089][ T6038] bond1: entered allmulticast mode [ 81.486107][ T6034] ext4 filesystem being mounted at /218/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 81.511454][ T6038] 8021q: adding VLAN 0 to HW filter on device bond1 [ 81.520267][ T3153] usb 9-1: new full-speed USB device number 2 using vhci_hcd [ 81.547876][ T6038] bond1 (unregistering): Released all slaves [ 81.726143][ T3298] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.795247][ T6074] loop3: detected capacity change from 0 to 512 [ 81.819989][ T6074] EXT4-fs (loop3): too many log groups per flexible block group [ 81.827907][ T6074] EXT4-fs (loop3): failed to initialize mballoc (-12) [ 81.840229][ T6074] EXT4-fs (loop3): mount failed [ 81.874068][ T1035] usb 7-1: enqueue for inactive port 0 [ 81.876751][ T6086] loop0: detected capacity change from 0 to 512 [ 81.886344][ T1035] usb 7-1: enqueue for inactive port 0 [ 81.897529][ T6086] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 81.919135][ T6086] EXT4-fs (loop0): 1 truncate cleaned up [ 81.933245][ T6086] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 81.958236][ T1035] vhci_hcd: vhci_device speed not set [ 81.971825][ T6019] vhci_hcd: connection reset by peer [ 81.980594][ T3394] vhci_hcd: stop threads [ 81.984994][ T3394] vhci_hcd: release socket [ 81.989590][ T3394] vhci_hcd: disconnect device [ 82.003712][ T3298] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.067787][ T6105] pim6reg1: entered promiscuous mode [ 82.073173][ T6105] pim6reg1: entered allmulticast mode [ 82.089708][ T6111] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(9) [ 82.096385][ T6111] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 82.104083][ T6111] vhci_hcd vhci_hcd.0: Device attached [ 82.113277][ T6112] vhci_hcd: connection closed [ 82.113472][ T383] vhci_hcd: stop threads [ 82.122656][ T383] vhci_hcd: release socket [ 82.127101][ T383] vhci_hcd: disconnect device [ 82.147427][ T6117] pim6reg1: entered promiscuous mode [ 82.152817][ T6117] pim6reg1: entered allmulticast mode [ 82.289092][ T6126] bpf_get_probe_write_proto: 17 callbacks suppressed [ 82.289114][ T6126] syz.2.966[6126] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 82.297154][ T6126] syz.2.966[6126] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 82.310317][ T6126] syz.2.966[6126] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 82.331587][ T6126] bond1: entered promiscuous mode [ 82.348399][ T6126] bond1: entered allmulticast mode [ 82.353724][ T6126] 8021q: adding VLAN 0 to HW filter on device bond1 [ 82.366460][ T6126] bond1 (unregistering): Released all slaves [ 82.728723][ T6167] syz.4.982[6167] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 82.728803][ T6167] syz.4.982[6167] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 82.758251][ T6167] syz.4.982[6167] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 82.832643][ T6167] bond1: entered promiscuous mode [ 82.849165][ T6167] bond1: entered allmulticast mode [ 82.859990][ T6167] 8021q: adding VLAN 0 to HW filter on device bond1 [ 82.879279][ T6167] bond1 (unregistering): Released all slaves [ 82.898537][ T6192] loop0: detected capacity change from 0 to 512 [ 82.916477][ T6190] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(9) [ 82.923146][ T6190] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 82.930655][ T6190] vhci_hcd vhci_hcd.0: Device attached [ 82.938546][ T6192] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 82.952353][ T6194] vhci_hcd: connection closed [ 82.952545][ T3394] vhci_hcd: stop threads [ 82.961672][ T3394] vhci_hcd: release socket [ 82.966137][ T3394] vhci_hcd: disconnect device [ 82.975370][ T6192] EXT4-fs (loop0): 1 truncate cleaned up [ 82.992320][ T6192] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 83.078921][ T3298] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.146731][ T6217] netlink: 'syz.4.1001': attribute type 10 has an invalid length. [ 83.294792][ T6243] syz.4.1012[6243] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 83.294963][ T6243] syz.4.1012[6243] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 83.306868][ T6243] syz.4.1012[6243] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 83.361858][ T6251] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1015'. [ 83.392537][ T6253] bond1: entered promiscuous mode [ 83.397836][ T6253] bond1: entered allmulticast mode [ 83.403795][ T6253] 8021q: adding VLAN 0 to HW filter on device bond1 [ 83.413981][ T6253] bond1 (unregistering): Released all slaves [ 83.482041][ T6259] netlink: 'syz.0.1018': attribute type 10 has an invalid length. [ 83.526554][ T6269] loop3: detected capacity change from 0 to 512 [ 83.533995][ T6269] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 83.553518][ T6269] EXT4-fs (loop3): 1 truncate cleaned up [ 83.568724][ T6269] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 83.629997][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.669794][ T6272] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1024'. [ 83.685298][ T6284] pim6reg1: entered promiscuous mode [ 83.691035][ T6284] pim6reg1: entered allmulticast mode [ 83.737670][ T6292] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(9) [ 83.744250][ T6292] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 83.752104][ T6292] vhci_hcd vhci_hcd.0: Device attached [ 83.759889][ T6293] vhci_hcd: connection closed [ 83.760101][ T55] vhci_hcd: stop threads [ 83.769160][ T55] vhci_hcd: release socket [ 83.773682][ T55] vhci_hcd: disconnect device [ 83.779057][ T35] vhci_hcd: vhci_device speed not set [ 84.065891][ T6321] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 84.078907][ T6321] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 84.112153][ T6324] loop2: detected capacity change from 0 to 512 [ 84.123593][ T6324] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 84.144389][ T6324] EXT4-fs (loop2): 1 truncate cleaned up [ 84.151210][ T6324] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 84.240974][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.269600][ T6331] loop1: detected capacity change from 0 to 512 [ 84.288987][ T6335] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 84.298000][ T6335] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 84.308192][ T6331] EXT4-fs (loop1): too many log groups per flexible block group [ 84.315939][ T6331] EXT4-fs (loop1): failed to initialize mballoc (-12) [ 84.325676][ T6331] EXT4-fs (loop1): mount failed [ 84.400658][ T6347] loop0: detected capacity change from 0 to 512 [ 84.425643][ T6347] EXT4-fs (loop0): too many log groups per flexible block group [ 84.433473][ T6347] EXT4-fs (loop0): failed to initialize mballoc (-12) [ 84.451728][ T6351] pim6reg1: entered promiscuous mode [ 84.457192][ T6351] pim6reg1: entered allmulticast mode [ 84.469331][ T6347] EXT4-fs (loop0): mount failed [ 84.553222][ T6357] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1055'. [ 84.618616][ T6362] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 84.648322][ T6362] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 84.872535][ T29] kauditd_printk_skb: 712 callbacks suppressed [ 84.872605][ T29] audit: type=1326 audit(1737334328.729:4311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6368 comm="syz.1.1059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a208c5d29 code=0x7ffc0000 [ 84.902875][ T29] audit: type=1326 audit(1737334328.729:4312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6368 comm="syz.1.1059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a208c5d29 code=0x7ffc0000 [ 84.926815][ T29] audit: type=1326 audit(1737334328.729:4313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6368 comm="syz.1.1059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f5a208c5d29 code=0x7ffc0000 [ 84.950926][ T29] audit: type=1326 audit(1737334328.729:4314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6368 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a208c5d29 code=0x7ffc0000 [ 84.974095][ T29] audit: type=1326 audit(1737334328.729:4315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6368 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a208c5d29 code=0x7ffc0000 [ 84.997081][ T29] audit: type=1326 audit(1737334328.729:4316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6368 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5a208c5d29 code=0x7ffc0000 [ 85.020082][ T29] audit: type=1326 audit(1737334328.729:4317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6368 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a208c5d29 code=0x7ffc0000 [ 85.043007][ T29] audit: type=1326 audit(1737334328.729:4318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6368 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a208c5d29 code=0x7ffc0000 [ 85.065912][ T29] audit: type=1326 audit(1737334328.729:4319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6368 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f5a208c4690 code=0x7ffc0000 [ 85.088866][ T29] audit: type=1326 audit(1737334328.729:4320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6368 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f5a208c7557 code=0x7ffc0000 [ 85.369441][ T6384] netlink: 'syz.1.1065': attribute type 10 has an invalid length. [ 85.451204][ T6392] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1069'. [ 85.531055][ T6394] loop1: detected capacity change from 0 to 512 [ 85.549566][ T6394] EXT4-fs (loop1): too many log groups per flexible block group [ 85.557530][ T6394] EXT4-fs (loop1): failed to initialize mballoc (-12) [ 85.566077][ T6397] syz.2.1071[6397] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 85.568286][ T6394] EXT4-fs (loop1): mount failed [ 85.619321][ T6397] bond1: entered promiscuous mode [ 85.624478][ T6397] bond1: entered allmulticast mode [ 85.630183][ T6397] 8021q: adding VLAN 0 to HW filter on device bond1 [ 85.647181][ T6397] bond1 (unregistering): Released all slaves [ 85.770185][ T6409] bond1: entered promiscuous mode [ 85.775424][ T6409] bond1: entered allmulticast mode [ 85.797868][ T6409] 8021q: adding VLAN 0 to HW filter on device bond1 [ 85.831851][ T6409] bond1 (unregistering): Released all slaves [ 86.066940][ T6422] netlink: 'syz.1.1079': attribute type 10 has an invalid length. [ 86.090441][ T6426] loop2: detected capacity change from 0 to 512 [ 86.099562][ T6426] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 86.120457][ T6426] EXT4-fs (loop2): 1 truncate cleaned up [ 86.126581][ T6426] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 86.134725][ T6428] loop1: detected capacity change from 0 to 512 [ 86.171000][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.180617][ T6428] EXT4-fs (loop1): too many log groups per flexible block group [ 86.188455][ T6428] EXT4-fs (loop1): failed to initialize mballoc (-12) [ 86.198073][ T6428] EXT4-fs (loop1): mount failed [ 86.231522][ T6437] pim6reg1: entered promiscuous mode [ 86.237161][ T6437] pim6reg1: entered allmulticast mode [ 86.254423][ T6435] netlink: 'syz.2.1083': attribute type 10 has an invalid length. [ 86.363503][ T6443] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1087'. [ 86.477265][ T6456] bond1: entered promiscuous mode [ 86.482516][ T6456] bond1: entered allmulticast mode [ 86.490315][ T6456] 8021q: adding VLAN 0 to HW filter on device bond1 [ 86.500702][ T6456] bond1 (unregistering): Released all slaves [ 86.588240][ T3153] usb 9-1: enqueue for inactive port 0 [ 86.610035][ T3153] usb 9-1: enqueue for inactive port 0 [ 86.673711][ T6475] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 86.688207][ T3153] vhci_hcd: vhci_device speed not set [ 86.690169][ T6475] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 86.891381][ T6479] netlink: 'syz.1.1100': attribute type 10 has an invalid length. [ 87.048368][ T6490] bond1: entered promiscuous mode [ 87.053499][ T6490] bond1: entered allmulticast mode [ 87.078192][ T6490] 8021q: adding VLAN 0 to HW filter on device bond1 [ 87.106971][ T6490] bond1 (unregistering): Released all slaves [ 87.253826][ T6498] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 87.302026][ T6498] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 87.448516][ T6506] loop3: detected capacity change from 0 to 512 [ 87.480423][ T6506] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 87.508481][ T6510] loop2: detected capacity change from 0 to 512 [ 87.514086][ T6506] ext4 filesystem being mounted at /205/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 87.543367][ T6510] EXT4-fs (loop2): too many log groups per flexible block group [ 87.551319][ T6510] EXT4-fs (loop2): failed to initialize mballoc (-12) [ 87.559484][ T6510] EXT4-fs (loop2): mount failed [ 87.614610][ T6516] loop2: detected capacity change from 0 to 512 [ 87.622787][ T6516] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 87.634658][ T6516] EXT4-fs (loop2): 1 truncate cleaned up [ 87.809060][ T6520] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1114'. [ 87.841537][ T6527] loop1: detected capacity change from 0 to 512 [ 87.851501][ T6527] EXT4-fs: Ignoring removed i_version option [ 87.895787][ T6527] ext4 filesystem being mounted at /254/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 87.912470][ T6527] EXT4-fs error (device loop1): ext4_do_update_inode:5153: inode #4: comm syz.1.1116: corrupted inode contents [ 87.925065][ T6527] EXT4-fs error (device loop1): ext4_dirty_inode:6041: inode #4: comm syz.1.1116: mark_inode_dirty error [ 87.939010][ T6527] EXT4-fs error (device loop1): ext4_do_update_inode:5153: inode #4: comm syz.1.1116: corrupted inode contents [ 87.985943][ T6527] EXT4-fs error (device loop1): __ext4_ext_dirty:207: inode #4: comm syz.1.1116: mark_inode_dirty error [ 88.002712][ T6527] EXT4-fs error (device loop1): ext4_acquire_dquot:6938: comm syz.1.1116: Failed to acquire dquot type 1 [ 88.023377][ T6538] EXT4-fs error (device loop1): ext4_do_update_inode:5153: inode #4: comm syz.1.1116: corrupted inode contents [ 88.043976][ T6538] EXT4-fs error (device loop1): ext4_dirty_inode:6041: inode #4: comm syz.1.1116: mark_inode_dirty error [ 88.099997][ T6538] EXT4-fs error (device loop1): ext4_do_update_inode:5153: inode #4: comm syz.1.1116: corrupted inode contents [ 88.120059][ T6546] pim6reg1: entered promiscuous mode [ 88.125528][ T6546] pim6reg1: entered allmulticast mode [ 88.133989][ T6538] EXT4-fs error (device loop1): __ext4_ext_dirty:207: inode #4: comm syz.1.1116: mark_inode_dirty error [ 88.148128][ T6538] EXT4-fs error (device loop1): ext4_acquire_dquot:6938: comm syz.1.1116: Failed to acquire dquot type 1 [ 88.238518][ T6549] loop2: detected capacity change from 0 to 512 [ 88.260826][ T6549] ext4 filesystem being mounted at /224/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 88.495671][ T6569] pim6reg1: entered promiscuous mode [ 88.501123][ T6569] pim6reg1: entered allmulticast mode [ 88.740757][ T6577] bpf_get_probe_write_proto: 2 callbacks suppressed [ 88.740772][ T6577] syz.3.1134[6577] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 88.747720][ T6577] syz.3.1134[6577] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 88.760054][ T6577] syz.3.1134[6577] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 89.096838][ T6598] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(11) [ 89.115113][ T6598] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 89.123096][ T6598] vhci_hcd vhci_hcd.0: Device attached [ 89.156772][ T6600] netlink: 'syz.2.1144': attribute type 10 has an invalid length. [ 89.200139][ T6606] 9pnet_virtio: no channels available for device [ 89.308269][ T3376] vhci_hcd: vhci_device speed not set [ 89.378234][ T3376] usb 9-1: new full-speed USB device number 3 using vhci_hcd [ 89.416356][ T6622] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1153'. [ 89.482525][ T6637] loop2: detected capacity change from 0 to 512 [ 89.490882][ T6637] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 89.519299][ T6637] EXT4-fs (loop2): 1 truncate cleaned up [ 89.527840][ T6641] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 89.538012][ T6641] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 89.676372][ T6649] loop2: detected capacity change from 0 to 512 [ 89.738637][ T6649] EXT4-fs (loop2): too many log groups per flexible block group [ 89.747132][ T6649] EXT4-fs (loop2): failed to initialize mballoc (-12) [ 89.779364][ T6649] EXT4-fs (loop2): mount failed [ 89.838593][ T6658] loop3: detected capacity change from 0 to 512 [ 89.862025][ T6601] vhci_hcd: connection reset by peer [ 89.866790][ T6658] EXT4-fs: Ignoring removed i_version option [ 89.873621][ T50] vhci_hcd: stop threads [ 89.877991][ T50] vhci_hcd: release socket [ 89.882497][ T50] vhci_hcd: disconnect device [ 89.906820][ T6658] ext4 filesystem being mounted at /223/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 89.931043][ T6658] EXT4-fs error (device loop3): ext4_do_update_inode:5153: inode #4: comm syz.3.1164: corrupted inode contents [ 89.943596][ T6658] EXT4-fs error (device loop3): ext4_dirty_inode:6041: inode #4: comm syz.3.1164: mark_inode_dirty error [ 89.978231][ T6658] EXT4-fs error (device loop3): ext4_do_update_inode:5153: inode #4: comm syz.3.1164: corrupted inode contents [ 89.998746][ T6658] EXT4-fs error (device loop3): __ext4_ext_dirty:207: inode #4: comm syz.3.1164: mark_inode_dirty error [ 90.015320][ T6658] __quota_error: 890 callbacks suppressed [ 90.015363][ T6658] Quota error (device loop3): write_blk: dquota write failed [ 90.028867][ T6658] Quota error (device loop3): find_free_dqentry: Can't write quota data block 5 [ 90.038236][ T6658] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 90.048227][ T6658] EXT4-fs error (device loop3): ext4_acquire_dquot:6938: comm syz.3.1164: Failed to acquire dquot type 1 [ 90.048277][ T6669] EXT4-fs error (device loop3): ext4_do_update_inode:5153: inode #4: comm syz.3.1164: corrupted inode contents [ 90.093659][ T6669] EXT4-fs error (device loop3): ext4_dirty_inode:6041: inode #4: comm syz.3.1164: mark_inode_dirty error [ 90.105501][ T6676] bond1: entered promiscuous mode [ 90.110618][ T6676] bond1: entered allmulticast mode [ 90.114161][ T6669] EXT4-fs error (device loop3): ext4_do_update_inode:5153: inode #4: comm syz.3.1164: corrupted inode contents [ 90.122765][ T6676] 8021q: adding VLAN 0 to HW filter on device bond1 [ 90.131939][ T6669] EXT4-fs error (device loop3): __ext4_ext_dirty:207: inode #4: comm syz.3.1164: mark_inode_dirty error [ 90.159689][ T6669] Quota error (device loop3): write_blk: dquota write failed [ 90.167383][ T6669] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 90.177482][ T6669] EXT4-fs error (device loop3): ext4_acquire_dquot:6938: comm syz.3.1164: Failed to acquire dquot type 1 [ 90.191045][ T6676] bond1 (unregistering): Released all slaves [ 90.224101][ T6679] netlink: 'syz.1.1172': attribute type 10 has an invalid length. [ 90.333870][ T6685] syz.3.1175[6685] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 90.333930][ T6685] syz.3.1175[6685] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 90.373097][ T6685] syz.3.1175[6685] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 90.413059][ T6685] bond1: entered promiscuous mode [ 90.429515][ T6685] bond1: entered allmulticast mode [ 90.447122][ T6685] 8021q: adding VLAN 0 to HW filter on device bond1 [ 90.462159][ T6685] bond1 (unregistering): Released all slaves [ 90.497511][ T6691] pim6reg1: entered promiscuous mode [ 90.502898][ T6691] pim6reg1: entered allmulticast mode [ 90.670503][ T6702] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7) [ 90.677093][ T6702] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 90.684761][ T6702] vhci_hcd vhci_hcd.0: Device attached [ 90.719070][ T29] audit: type=1326 audit(1737334334.569:5206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6706 comm="syz.1.1181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a208c5d29 code=0x7ffc0000 [ 90.743444][ T29] audit: type=1326 audit(1737334334.569:5207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6706 comm="syz.1.1181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a208c5d29 code=0x7ffc0000 [ 90.743476][ T6703] vhci_hcd: connection closed [ 90.756082][ T29] audit: type=1326 audit(1737334334.579:5208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6706 comm="syz.1.1181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f5a208c5d29 code=0x7ffc0000 [ 90.798579][ T29] audit: type=1326 audit(1737334334.579:5209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6706 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a208c5d29 code=0x7ffc0000 [ 90.824366][ T29] audit: type=1326 audit(1737334334.579:5210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6706 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a208c5d29 code=0x7ffc0000 [ 90.845901][ T11] vhci_hcd: stop threads [ 90.852558][ T11] vhci_hcd: release socket [ 90.853061][ T6714] loop1: detected capacity change from 0 to 512 [ 90.857020][ T11] vhci_hcd: disconnect device [ 90.869705][ T3372] vhci_hcd: vhci_device speed not set [ 90.887708][ T6714] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 90.909178][ T6714] EXT4-fs (loop1): 1 truncate cleaned up [ 90.934726][ T6716] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(11) [ 90.941436][ T6716] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 90.949336][ T6716] vhci_hcd vhci_hcd.0: Device attached [ 91.154873][ T6726] netlink: 'syz.1.1188': attribute type 10 has an invalid length. [ 91.227408][ T6733] loop3: detected capacity change from 0 to 512 [ 91.236841][ T6733] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 91.250650][ T6733] EXT4-fs (loop3): 1 truncate cleaned up [ 91.371819][ T3290] ================================================================== [ 91.379978][ T3290] BUG: KCSAN: data-race in fill_mg_cmtime / shmem_symlink [ 91.387169][ T3290] [ 91.389512][ T3290] write to 0xffff888104b81834 of 4 bytes by task 3458 on cpu 0: [ 91.397251][ T3290] shmem_symlink+0x349/0x3a0 [ 91.398033][ T6738] netlink: 'syz.2.1192': attribute type 10 has an invalid length. [ 91.401877][ T3290] vfs_symlink+0xca/0x1d0 [ 91.401915][ T3290] do_symlinkat+0xdf/0x350 [ 91.418974][ T3290] __x64_sys_symlink+0x50/0x60 [ 91.423759][ T3290] x64_sys_call+0x28b0/0x2dc0 [ 91.428471][ T3290] do_syscall_64+0xc9/0x1c0 [ 91.433717][ T3290] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 91.439799][ T3290] [ 91.442167][ T3290] read to 0xffff888104b81834 of 4 bytes by task 3290 on cpu 1: [ 91.449812][ T3290] fill_mg_cmtime+0x58/0x280 [ 91.454626][ T3290] generic_fillattr+0x241/0x330 [ 91.459530][ T3290] shmem_getattr+0x17b/0x200 [ 91.464210][ T3290] vfs_statx_path+0x171/0x2d0 [ 91.468923][ T3290] vfs_statx+0xe1/0x170 [ 91.473180][ T3290] __se_sys_newfstatat+0xdc/0x300 [ 91.478223][ T3290] __x64_sys_newfstatat+0x55/0x70 [ 91.483469][ T3290] x64_sys_call+0x236d/0x2dc0 [ 91.488170][ T3290] do_syscall_64+0xc9/0x1c0 [ 91.492694][ T3290] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 91.498651][ T3290] [ 91.500991][ T3290] value changed: 0x0daa5dc1 -> 0x0e12d9c4 [ 91.506709][ T3290] [ 91.509034][ T3290] Reported by Kernel Concurrency Sanitizer on: [ 91.515404][ T3290] CPU: 1 UID: 0 PID: 3290 Comm: udevd Not tainted 6.13.0-rc7-syzkaller-00209-g9528d418de4d #0 [ 91.525823][ T3290] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 91.535988][ T3290] ================================================================== [ 91.551360][ T6717] vhci_hcd: connection closed [ 91.551895][ T50] vhci_hcd: stop threads [ 91.561086][ T50] vhci_hcd: release socket [ 91.565550][ T50] vhci_hcd: disconnect device [ 94.428699][ T3376] usb 9-1: enqueue for inactive port 0 [ 94.434228][ T3376] usb 9-1: enqueue for inactive port 0 [ 94.508210][ T3376] vhci_hcd: vhci_device speed not set