last executing test programs: 12.942895255s ago: executing program 4 (id=596): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) write$UHID_CREATE2(0xffffffffffffffff, 0x0, 0x118) mknod$loop(&(0x7f0000000000)='./file0\x00', 0x100000000000600d, 0x0) r4 = socket(0x200000100000011, 0x803, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'xfrm0\x00', 0x0}) sendto$packet(r4, &(0x7f0000000140)="4dcdc7d96a760000002f00050000000000060000450b21e9e89291df563213e9152234f5623c52", 0x27, 0x0, &(0x7f0000000080)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @multicast}, 0x14) add_key$keyring(&(0x7f0000000a80), 0x0, 0x0, 0x0, 0x0) request_key(&(0x7f0000000540)='id_legacy\x00', &(0x7f0000000580)={'syz', 0x2}, &(0x7f00000005c0)='\x00', 0x0) 11.965518156s ago: executing program 4 (id=598): openat$uhid(0xffffffffffffff9c, 0x0, 0x802, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x2d) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7c1496be2da30d9d, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94) bind$inet6(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x2, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000000)={0x0, 'veth0_vlan\x00', {0x300}}) 10.380838862s ago: executing program 4 (id=606): r0 = io_uring_setup(0x21e9, &(0x7f0000002400)={0x0, 0xffffffbc, 0x0, 0x2, 0x176}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000340)=0x2, 0xa2) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000000), 0x4) mbind(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4005, &(0x7f0000000c00)=0xc, 0x6, 0x2) mbind(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4005, &(0x7f0000000c00)=0xc, 0x6, 0x2) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f000000e0c0), 0x10010) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000200)=@gcm_256={{0x304}, "00e0f07600", "832b4d2434b35bca8c0b78d2afff6d70d2025c7f53123828322d5af0d5c6c3a5", '`\a-N', "298f0e6df9ae9b3d"}, 0x38) sendfile(r1, r2, &(0x7f0000000100), 0x100000000010001) write(r1, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000000000080000000000000000095", @ANYRES64], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="020000000400000008000000010000008000", @ANYRES32=0x0, @ANYBLOB="00000000000000000000000400a321e300000000eb0000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0xe) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r3}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 10.049362682s ago: executing program 4 (id=607): write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161281, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff, 0x8a6b577e50233715}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x4, 0x5, &(0x7f0000000300)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) write$binfmt_aout(r0, &(0x7f0000000380)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "0040041e1d113c812e5d601adda05c7b5d27c9"}) ioctl$TCSETAF(r0, 0x5408, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x6, 0x0, "dd529babae0ba6eb"}) vmsplice(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000640)="ec", 0x1}], 0x100000000000029d, 0xf) recvmsg$inet_nvme(0xffffffffffffffff, &(0x7f0000000b40)={&(0x7f0000000140)=@l2tp={0x2, 0x0, @remote}, 0x80, &(0x7f0000001bc0), 0x0, &(0x7f0000000480)=""/65, 0x41}, 0x40000003) r2 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00'}) setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, &(0x7f0000000140)=[{{}, {0x0, 0x0, 0x1, 0x1}}, {{}, {0x2}}], 0x10) bind$can_raw(r2, &(0x7f0000000080), 0x10) io_submit(0x0, 0x1, &(0x7f0000000b80)=[&(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000400)='\x00', 0x1}]) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0500000007000000e27f000001"], 0x48) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000, 0x0, &(0x7f0000c87000/0x2000)=nil) 9.401166862s ago: executing program 0 (id=612): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x2405}, 0x0, 0x0, 0xffffffffffffffff, 0xd) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000500)='9p_client_req\x00', r2}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000008500000082"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r6 = dup(r5) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[], [], 0x6b}}) 9.068469873s ago: executing program 0 (id=613): r0 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) io_uring_setup(0x71e4, 0x0) syz_emit_ethernet(0x7a, &(0x7f00000005c0)={@link_local, @dev, @val={@void}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f57a14", 0x40, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "508359", 0x0, 0x0, 0x0, @private1, @mcast1, [@hopopts={0x3a}, @routing={0x80}]}}}}}}}, 0x0) syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000d40)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @range={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_RANGE_OP={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x74}}, 0x0) mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x4002011, r3, 0x0) mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff5000/0x3000)=nil) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) msync(&(0x7f00005da000/0x3000)=nil, 0x3000, 0x2) madvise(&(0x7f0000215000/0x3000)=nil, 0x3000, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 9.036884746s ago: executing program 4 (id=614): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000280)='./bus\x00', 0x1200840, &(0x7f0000000d80)=ANY=[@ANYRESHEX], 0x1, 0x377, &(0x7f0000000f00)="$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") r0 = creat(&(0x7f00000201c0)='./bus\x00', 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x0) r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) recvmmsg(r1, &(0x7f0000002e40)=[{{0x0, 0x0, 0x0}}], 0x40000000000019e, 0x142, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000008c0)={r0, 0x20, &(0x7f0000000880)={0x0, 0x0, 0x0, &(0x7f0000000840)=""/7, 0x7}}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) sigaltstack(0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x38}}, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = syz_io_uring_setup(0x3b65, &(0x7f0000000000)={0x0, 0xf77a, 0x80, 0x1, 0x11c}, &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r5, 0x0, &(0x7f0000000700)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000400)=""/82, 0x52}], 0x4) 8.34055672s ago: executing program 4 (id=617): mkdir(0x0, 0x0) move_mount(0xffffffffffffffff, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000000)='./file0\x00') chroot(0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x5b8, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00'}, 0x10) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x20000000000000c8, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000010000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000300000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r2}, 0x10) sync() sendmsg$SMC_PNETID_DEL(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x40, r0, 0x1, 0x0, 0x0, {0x2, 0x2, 0x2}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'ip6_vti0\x00'}]}, 0x40}, 0x1, 0x40030000000000}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={0x0}, 0x1, 0xba01}, 0x0) syz_clone(0x4021400, 0x0, 0x9000, 0x0, 0x0, 0x0) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_DESTROY(r3, 0x0, 0x0) 5.872418348s ago: executing program 0 (id=632): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100000100000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7020000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mbind(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x3, &(0x7f0000000080)=0xffffffffffff1752, 0x1, 0x2) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000240)=@security={'security\x00', 0xe, 0x4, 0x348, 0xffffffff, 0x0, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x3a8, 0x3a8, 0x3a8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xc0, 0x120, 0x0, {}, [@common=@osf={{0x50}, {'syz1\x00', 0x0, 0xc, 0x1, 0x1}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0x169, 0xd, [0xe, 0x3b, 0x35, 0x3d, 0x27, 0x34, 0x2, 0x1, 0x29, 0x20, 0xb, 0x17, 0x14, 0x4, 0x3c, 0x2f], 0x1, 0x9f, 0xc2a9}}}, {{@ip={@multicast1, @rand_addr=0x2, 0xffffffff, 0xffffffff, 'macvlan1\x00', 'macvlan1\x00', {}, {}, 0x16, 0x0, 0x2a}, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@ttl={{0x28}, {0x2, 0xa}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x1}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x0, 0x4, 0x6, 0x4, 0x2460b3f4ad896aa5, 0x1], 0x2, 0xe}, {0xffffffffffffffff, [0x5, 0x1, 0x4, 0x1, 0x4, 0x4], 0x3, 0x3}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3a8) r1 = socket$can_bcm(0x1d, 0x2, 0x2) getdents(0xffffffffffffffff, &(0x7f0000001040)=""/4096, 0x1000) connect$can_bcm(r1, &(0x7f0000000480), 0x10) sendmsg$can_bcm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="05"], 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x4040) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'netdevsim0\x00', 0x0}) r5 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r5, 0x10e, 0xb, &(0x7f0000000000)=0x1a, 0x4) sendmsg$nl_route_sched(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=@newtaction={0x14, 0x30, 0x1, 0x0, 0x0, {0x0, 0x0, 0x1300}}, 0x14}}, 0x40040) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_RATE={0x6}]}, 0x38}}, 0x0) 5.693087055s ago: executing program 0 (id=634): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0x8, 0xb, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = socket$kcm(0x10, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000000000000000000008500000023000000850000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10) r5 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_buf(r5, 0x29, 0x39, &(0x7f0000e86000)="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", 0x118) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000007d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kmem_cache_free\x00', r6}, 0x10) r7 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000100)=[{0x80000006}]}, 0x10) syz_emit_ethernet(0x3e, &(0x7f0000004e00)={@multicast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f4adf7", 0x8, 0x2c, 0x0, @dev, @mcast2, {[], @echo_reply}}}}}, 0x0) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0xfe80, &(0x7f00000005c0)=[{&(0x7f0000000940)="2e00000010008188e6b62aa73772cc9f1ba1f8482e0000005e140602000000000e000a001000000002800000128c", 0x2e}], 0x1}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r8 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000100), 0x802, 0x0) write$UHID_CREATE2(r8, &(0x7f00000002c0)={0xb, {'syz0\x00', 'syz0\x00', 'syz1\x00', 0x5, 0x4, 0x9, 0x9, 0x4, 0x8, "6a2bdf768c"}}, 0x11d) 5.192755301s ago: executing program 0 (id=637): dup(0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r2}, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$SO_TIMESTAMP(r5, 0x1, 0x40, &(0x7f0000000040)=0x1fb98, 0x4) setsockopt$inet6_int(r5, 0x29, 0x3, 0x0, 0x0) recvmmsg(r5, 0x0, 0x0, 0x0, 0x0) setsockopt$inet6_int(r5, 0x29, 0x3c, 0x0, 0x0) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000700)={0x18, r1, 0xc4fc9e906872338b, 0x0, 0x0, {{0x15}, {@void, @void}}, [@NL80211_ATTR_TID_CONFIG={0x4}]}, 0x18}}, 0x0) 3.866348683s ago: executing program 0 (id=645): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB, @ANYRES32, @ANYRES32, @ANYRES8=0x0], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0xc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) r3 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_opts(r3, 0x0, 0x4, 0x0, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000080), 0x8) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f00000011c0)={'vxcan0\x00', 0x0}) setsockopt$SO_J1939_ERRQUEUE(r5, 0x6b, 0x4, &(0x7f00000000c0)=0x1, 0x4) bind$can_j1939(r5, &(0x7f0000001200)={0x1d, r6, 0x0, {0x0, 0x0, 0x4}}, 0x18) connect$can_j1939(r5, &(0x7f0000000080)={0x1d, r6}, 0x18) writev(r5, &(0x7f0000000240)=[{&(0x7f0000000000)='h', 0xfdef}], 0x1) r7 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000240)={'vxcan0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=@getchain={0x24, 0x11, 0x839, 0x0, 0x0, {0x0, 0x0, 0x0, r8}}, 0x24}}, 0x0) 3.754500923s ago: executing program 3 (id=646): openat$selinux_avc_hash_stats(0xffffff9c, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="000000000087fb00b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='sys_enter\x00', r0}, 0x18) fstatfs(0xffffffffffffffff, 0x0) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000000)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000200)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x400}}, './file0\x00'}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="00f8ffffff316c58efe5c14ff75eb1148c1c5340", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r3}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000880)={r3, 0xe0, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000001c0)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x5, &(0x7f0000000280)=[0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xa7, &(0x7f0000000640)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000680), &(0x7f0000000700), 0x8, 0xec, 0x8, 0x8, &(0x7f0000000840)}}, 0x10) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "7f12ddc1517600"}) r6 = syz_open_pts(r5, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000200)=0x2) read(r6, 0x0, 0x2006) close_range(r4, 0xffffffffffffffff, 0x0) 2.611134909s ago: executing program 3 (id=649): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0x8, 0xb, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = socket$kcm(0x10, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000000000000000000008500000023000000850000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10) r5 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_buf(r5, 0x29, 0x39, &(0x7f0000e86000)="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", 0x118) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000007d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kmem_cache_free\x00', r6}, 0x10) r7 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000100)=[{0x80000006}]}, 0x10) syz_emit_ethernet(0x3e, &(0x7f0000004e00)={@multicast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f4adf7", 0x8, 0x2c, 0x0, @dev, @mcast2, {[], @echo_reply}}}}}, 0x0) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0xfe80, &(0x7f00000005c0)=[{&(0x7f0000000940)="2e00000010008188e6b62aa73772cc9f1ba1f8482e0000005e140602000000000e000a001000000002800000128c", 0x2e}], 0x1}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r8 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000100), 0x802, 0x0) write$UHID_CREATE2(r8, &(0x7f00000002c0)={0xb, {'syz0\x00', 'syz0\x00', 'syz1\x00', 0x5, 0x4, 0x9, 0x9, 0x4, 0x8, "6a2bdf768c"}}, 0x11d) 2.349627633s ago: executing program 2 (id=650): prlimit64(0x0, 0xe, &(0x7f0000000240)={0xc, 0xfffffffffffff800}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) tkill(r0, 0x35) ioctl$BTRFS_IOC_SET_FEATURES(0xffffffffffffffff, 0x40309439, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0xb) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0xb) 2.227154424s ago: executing program 3 (id=651): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000fd0f00000200000000000000", @ANYRES32, @ANYRES32=0x0], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f9ffffffb703000000080000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) ioperm(0x0, 0x7, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b0000000700000001000100090000", @ANYBLOB, @ANYRES32=0x0], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000400)='./file1\x00', 0x0, &(0x7f00000004c0), 0x1, 0x787, &(0x7f0000002dc0)="$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") r2 = open(&(0x7f0000000000)='./bus\x00', 0x60142, 0x0) syz_emit_ethernet(0x32, &(0x7f0000000000)=ANY=[], 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r3}, 0x18) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, @perf_config_ext={0x7, 0x7}, 0x22484, 0x2}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f0000000300), &(0x7f0000000340)=0x4) copy_file_range(0xffffffffffffffff, 0x0, r2, &(0x7f00000000c0)=0x10000, 0x6, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100000001) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETFLOWTABLE(r4, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f00000013c0)=ANY=[@ANYBLOB="20000000170a0103"], 0x20}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 1.976104168s ago: executing program 3 (id=653): r0 = openat2(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x210402, 0x24}, 0x18) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, &(0x7f00000009c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000240)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000200)={&(0x7f0000001700)={0x1f8, r1, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@TIPC_NLA_LINK={0x4}, @TIPC_NLA_NODE={0x17c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0xed, 0x3, "48f08863656eb2ff8ddc24ad111744975922a053210d48ded44737e06da0edd29be945474a485e0ebe68c4bcf8a51d22db352312987127ca2732db208c13756ceee1798e788234c3aed41b5cc8d8b82ea49e81afc6577179e426eeb0cc1e1ba15c205262176fd40d3546d54bec794b1dd7475dcfb5a7153f13d1bab79eae0c6a87dce093e68745970185b8bf2b439785ce44fe7ab3af12778b27c519817130512b062cb39e0855d5b37d2102a0e97a4384891b76fe0943bf999bb40b1d6780b1a07dd984c73113b2350f441930761405f93c30350839d626846fe570ecb5813269b2df99e10b3b8d05"}, @TIPC_NLA_NODE_KEY={0x4a, 0x4, {'gcm(aes)\x00', 0x22, "170aac71ac5e1aac58e1046218b01067b8830239160078951c2af02abf5de543d1e9"}}, @TIPC_NLA_NODE_ID={0x2e, 0x3, "d34c4ebe3ae4d2cfbf59cbbbb028a69c1e0d9f5a20d452db1da608f680588352209f154aeb6696bb9102"}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x400}]}, @TIPC_NLA_MEDIA={0x4}, @TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0xe2}]}, @TIPC_NLA_LINK={0x24, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x4}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}]}]}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x9b}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x4648}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xff}]}]}, 0x1f8}, 0x1, 0x0, 0x0, 0x200000c0}, 0x4000) r2 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) connect$phonet_pipe(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000780)={&(0x7f00000007c0)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0x400000}, 0x18) syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000240)='./file1\x00', 0x80c406, &(0x7f0000000540)=ANY=[@ANYRESOCT, @ANYRESHEX=0x0, @ANYBLOB="2c646f733178666c6f70707900000000000000003030ffffffff303030303031373737373737373756c0f39fdb37372c004c0f1208ec0c34b7df4ba1c1e6b76697434db8574db9bcaef6a61a12c3f260bebc7ac5b1b11361119b83f1cf9f686b715b8e58fd37cea6623dc422c2ddbcefe94e5c255b5e8c90613e6b598b3b7a2c05de53dab7"], 0x1, 0x291, &(0x7f0000000280)="$eJzs3M9r034YwPGn6dZ0+7Ifpy/oxQe96CXMelQPVTYQC0q3inoQMpZpaG1HErQVwZw97e8YHr0J4j+w/8LbEGSnnYyszbKs+4Wza2f7fkHJkzz5tE8SUp5PId16uv66uupbq3YgRl7FEAllR2RWXNmTiZe5dpxLtsvdgoRyY+7N9sfFZ88fFkul+bLqQnHpVkFVp698ffv+09VvwX9PPk+bpmzOvtj6Wfi++f/mpa1fS69cX11f641AbV1uNAJ7ueboiutXLdXHNcf2HXXrvuMdyK/WGmtrLbXrK1OTa57j+2rXW2pIS4OG5uOq6mpZlk5N7sZ5GSG5Px5R2SiX7eK5FIMLw/OKdlZEJg7dDZWNwVQEAAAG6fj+30j22ev/je7+X+SU/v9DvNf0l573/1lJ+v+q0+7/A6+l9kvbTff/ONHZ+n/jfIrB38iEqZV7B1KeV5w4ehD9PwAAAAAAAAAAAAAAAAAAAAAA/4KdKJqJomhmd2mISBSvmyKSTa0fMXSknq0fVunrH6VeZnyBT7j+GAKpB/fyIj/CZqVZybSXnfzCg9L8nLalHvzbbjYr2SR/s5PXg/lxmYzzhSPzObl+rZPfzd1/VErn15uVCVk5sfKwV6cAAAAAAIChZ2liNtmYl2R+b1lqSne+PX/vROH+7wNd8/sxuTzWv+MAAAAAAADH81vvqnat5nj9CbJ9/KwzByJnG347MntSRlZETtmnvCgy+BN1KDDlQpQxzMGdnr1hlBHpbBmPvwy67gIAAAAAw2V/PjDoSgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGF39+OuyQR8jAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcFH8DgAA//8sg70h") lstat(&(0x7f0000000040)='./file1\x00', &(0x7f0000001680)) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20004044, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) gettid() readv(r3, &(0x7f0000001380)=[{&(0x7f0000000080)=""/45, 0x2d}], 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$USBDEVFS_DISCONNECT_CLAIM(r2, 0x8108551b, &(0x7f0000000000)={0x0, 0x0, "ec9fe44d4dbe56a60274fcffffffffffffff14e315eeb406bfdd73835e57efa94b1a0275781c647aa7e3470c6028643b17832b10b386a6f73791011c26a9aa141f406e312295ee620a9a46577b9249b738fe7750bec83bf6ed5b67213fa7d6c0823fd154ed29ede1ff379742c3f0b46caa357d70ee438f901d7645c3f87e4b21482b76f2ad8eaac090272081f98fd2e3e5a63e006204df635e731a5bfcf142f4529517454618de595cd179445b4bdbf698b9986356f0ebf7d25a57774ef474f86a3ad24ae9f0bf94b99e6b87de5f79d383d05bb32701daed400785a49788f08caecc9e0c48a3740bbe6e1c1fd400cfdfe756bc00d08e36655c00"}) ioctl$USBDEVFS_ALLOC_STREAMS(r2, 0x8008551c, &(0x7f00000002c0)=ANY=[@ANYBLOB="afb900000b00000081"]) 1.783188085s ago: executing program 1 (id=655): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000fc850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) socket$inet_sctp(0x2, 0x5, 0x84) r1 = syz_open_procfs(0xffffffffffffffff, 0x0) write$nci(r1, 0x0, 0x6a) bpf$MAP_CREATE(0x0, 0x0, 0x50) write$nci(r1, &(0x7f0000000600)=ANY=[@ANYBLOB="71dfee5e6bfa99aa03343e20a4f07b558a48d40ceaf8467ba1540be5d27b30289a7de4c3837cb228934f84f95282b3cfb160e30ec3956e65f862397089a26da1f0894ebab0f4e9df74029af5451488fb85956d0982568a51efe27ee97a9c47199a492b979a52a445f004acd5ebc96aa69bb008cf76c043e2798b007bdb47b5a121d6bd7cc96e05662d1a1400"/154], 0x9a) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01000005fc599208380003"], 0x4c}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x8052, &(0x7f00000005c0)={[{@noauto_da_alloc}, {@errors_remount}, {@jqfmt_vfsv0}]}, 0x1, 0x4c4, &(0x7f00000000c0)="$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") r4 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r5 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r5, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r5, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) r6 = accept4(r4, 0x0, 0x0, 0x0) r7 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r6) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x30, r7, 0x100, 0x70bd28, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x40000004, 0x3, 0x4, 0x3}}}}, 0x30}, 0x1, 0x0, 0x0, 0x8040}, 0x4000000) 1.698839703s ago: executing program 1 (id=656): perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x66, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, r1, 0x4, 0x0, 0x4, 0x0, {0xa, 0x0, 0x0, @remote}}}, 0x3a) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0x2, &(0x7f0000000200)=@raw=[@call={0x85, 0x0, 0x0, 0xa2}, @exit], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfe53, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) ioprio_set$uid(0x3, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000180)={'hsr0\x00', &(0x7f00000000c0)=@ethtool_eeprom={0x43}}) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5}, 0x0) r3 = open(0x0, 0x14927e, 0x0) r4 = open(&(0x7f00000005c0)='./bus\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x5) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x1e, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@call={0x85, 0x0, 0x0, 0x5f}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000040)='GPL\x00', 0x2, 0x1c, &(0x7f0000000080)=""/28, 0x41100, 0x4, '\x00', 0x0, 0x0, r4, 0x8, &(0x7f0000000240)={0x8, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[r4], 0x0, 0x10, 0xc072, @void, @value}, 0x90) socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_bt_hci(0xffffffffffffffff, 0x800448d7, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000080), 0xfd32) bind$bt_hci(r5, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r6, 0x400448cb, 0x0) 1.610858321s ago: executing program 1 (id=657): pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff}, 0x0) dup(r0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket(0x1d, 0x2, 0x6) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_io_uring_setup(0x10d, &(0x7f0000000200), &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x100}, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r6, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x12, r6, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080), 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index, 0x0, 0x0}) io_uring_enter(r1, 0x3f70, 0x0, 0x0, 0x0, 0x0) 1.545098137s ago: executing program 1 (id=658): perf_event_open(&(0x7f0000000900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getdents(0xffffffffffffffff, &(0x7f0000000740)=""/24, 0xff90) getdents64(0xffffffffffffffff, 0xffffffffffffffff, 0x43) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0b000000080000000c0000000000008001"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x5, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = dup2(0xffffffffffffffff, r1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sys_enter\x00', r2}, 0x10) process_madvise(0xffffffffffffffff, 0x0, 0x0, 0xa, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00') r4 = add_key(0x0, &(0x7f0000000000)={'syz', 0x2}, &(0x7f0000000040), 0x0, 0xfffffffffffffffc) keyctl$chown(0x4, r4, 0xee00, 0xffffffffffffffff) keyctl$chown(0x4, r4, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000000580)="6700000011008188040f56ecdb4cb9cca7480ef435000000e3bd6efb440009000e000a0010000000ba80010000005a8c3774fa0af3dc59a933c1e7a6d3361d83b20000319cdf5656826edaaa11032701c61ec666d482078ccebcb9a4f187f7a4e98f09cdc2649f", 0x67}], 0x1}, 0x0) 1.326821658s ago: executing program 2 (id=659): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff00000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="4bea7172a3caca0ed0daf9455924f000"/28], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0x9, &(0x7f0000000a40)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESOCT=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000057000000951fe883e4780531123cddd89247b22ca8714e32fd1f3777952fcb65d2b4a5c75aaaf3bbeadb0801a68fd99183c6e5d39de869c56e7f9ad439456f52751bdb4cd97c94dfcfd1592100000000000000000000000000009985597a529639d5575f336dd0603d81ada42c9813a7d0aae2e52b01bd96c6917c8276d01a8ad40fdb84e80bac7826fb0a8fdaabb7e84c69289e17ff021c7813a25f22b8", @ANYRESDEC=r0], 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @void, @value}, 0x94) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r1, 0x400, 0x0) fsetxattr$trusted_overlay_redirect(r1, &(0x7f0000000040), 0x0, 0x0, 0x0) timerfd_gettime(r1, &(0x7f0000000040)) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0xfff, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000002000000000000000000018190000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000008c0)='sys_enter\x00', r3}, 0x10) syz_io_uring_setup(0x24fd, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000200), &(0x7f0000000140)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='pids.events\x00', 0x275a, 0x0) r4 = io_uring_setup(0x1229, &(0x7f0000000180)={0x0, 0x10000002, 0x800}) r5 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r5, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) listen(r5, 0x400000001ffffffd) r6 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) recvmmsg(r6, &(0x7f0000009380)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) 248.585667ms ago: executing program 1 (id=660): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000940)=@framed={{0x18, 0x7}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x100000}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kfree\x00', r2}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r3, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) syz_emit_ethernet(0xfdef, &(0x7f0000001b80)={@multicast, @dev, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x2, 0x0, 0x0, 0x0, @empty=0x2, @multicast2}}}}}, 0x0) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x80000, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r5) syz_genetlink_get_family_id$devlink(&(0x7f0000000200), 0xffffffffffffffff) 248.305547ms ago: executing program 2 (id=661): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0x8, 0xb, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = socket$kcm(0x10, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000000000000000000008500000023000000850000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10) r5 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_buf(r5, 0x29, 0x39, &(0x7f0000e86000)="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", 0x118) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000007d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kmem_cache_free\x00', r6}, 0x10) r7 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000100)=[{0x80000006}]}, 0x10) syz_emit_ethernet(0x3e, &(0x7f0000004e00)={@multicast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f4adf7", 0x8, 0x2c, 0x0, @dev, @mcast2, {[], @echo_reply}}}}}, 0x0) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0xfe80, &(0x7f00000005c0)=[{&(0x7f0000000940)="2e00000010008188e6b62aa73772cc9f1ba1f8482e0000005e140602000000000e000a001000000002800000128c", 0x2e}], 0x1}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r8 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000100), 0x802, 0x0) write$UHID_CREATE2(r8, &(0x7f00000002c0)={0xb, {'syz0\x00', 'syz0\x00', 'syz1\x00', 0x5, 0x4, 0x9, 0x9, 0x4, 0x8, "6a2bdf768c"}}, 0x11d) 247.991617ms ago: executing program 3 (id=662): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000080000000800000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000001000"/28], 0x48) close(0xffffffffffffffff) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r2}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) rt_sigaction(0x19, &(0x7f0000000000)={0xfffffffffffffffc, 0x44000006, 0x0}, 0x0, 0x8, &(0x7f0000000440)) r3 = memfd_create(&(0x7f00000006c0)='\x00\xac=\x9d\xd2\xdb\xe6\xbf\xb4\xf2\xed\x04\x00\x00\x00\xd4N\x12\x9b\x1f\t\xd1Z+\x86T\x16\xf8\x01\x00\x00\x00\x9f+\x8d!\x0fG\xab\xc2\xdc\xa3\xb3\xae8\x9f9?\xefo\xa4k\x01\xb2>\xa1\x9c\x86xm\xe6\x9bZ4\x91\x1a\xdb\xdd\x89\xb9\xc0LF;\xd6\x84\x195\x06\x00\x00\x00~\xf3S\x12\"p^\xc1jP\x8a\xc6[\xbd\xe7q]\xdd\r\x1aZS\x01*\x1b\xfd\xbcMA\xdcq\xa1\x00\xb3\xf9\x91r\x7f\xdc\xf1\xc3G,\xdb\xccS\x15\x95b\x17\xab\xe4?\x96\x95\xa4kP\x99YO\xb8V\xd5p\x90X\xaaf', 0x0) fallocate(r3, 0x0, 0x400000000000000, 0x7) r4 = socket$netlink(0x10, 0x3, 0x0) writev(r4, &(0x7f0000000340)=[{&(0x7f00000000c0)="390000001000111867090707a640400f0021ff3f30000000170a001700000000040037000900030001632564b758b9a64411f6bb744dc48f57", 0x39}], 0x1) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r5, &(0x7f0000000040)={0x0, 0x51, &(0x7f0000000100)=[{&(0x7f00000006c0)="5c00000013006bcd9e3fe3dc6e48aa310b6b8703310000001f03000000000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) dup(0xffffffffffffffff) socket$xdp(0x2c, 0x3, 0x0) syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x1a3c82) sendto$inet(r0, &(0x7f0000001040)="8932ed209b230927", 0x8, 0x6000c804, 0x0, 0x0) 155.435066ms ago: executing program 1 (id=663): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = epoll_create1(0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$RTC_PIE_ON(r1, 0x7005) r2 = syz_io_uring_setup(0x680b, &(0x7f00000006c0)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000140)) syz_io_uring_setup(0x5e2, &(0x7f00000002c0)={0x0, 0x0, 0x1, 0x40000000, 0x54}, &(0x7f00000003c0), &(0x7f0000000040)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = timerfd_create(0x0, 0x0) timerfd_settime(r3, 0x1, &(0x7f0000000080)={{}, {0x0, 0x3938700}}, 0x0) timerfd_gettime(r3, &(0x7f0000000040)) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x80001, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r4, &(0x7f0000000600)={0x70000000}) fcntl$setstatus(r4, 0x4, 0x2800) writev(r4, &(0x7f0000000740)=[{&(0x7f0000000240)="82", 0x1}], 0x300) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r4, 0x10e, 0x1, &(0x7f0000000340)=0x2, 0x4) listen(0xffffffffffffffff, 0x3) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) io_uring_enter(r2, 0x381b, 0x0, 0x0, 0x0, 0x0) poll(0x0, 0x0, 0xfff) 128.780748ms ago: executing program 2 (id=664): timer_create(0x3, 0x0, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b707000008000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) syz_emit_ethernet(0xd20, &(0x7f00000004c0)={@link_local, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "00af00", 0xcea, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_na={0x88, 0x0, 0x0, 0x0, '\x00', @empty, [{0x0, 0x15, "a72dcca9d0e289f84eb7f1cdde3f25f3a398c9b10810cb7895aa26bea2dbe09b0e7c0b8a538e88853cd9487c6c1f91a93d856c44788465e03843c9a0535cb599a9b43d32afb7a77943630bcae2d5d18edb24af4fcb6437742bf443690125f903de9d372ed7d5817179a0d5cda2773868c383f8ecfda6ba5bea53d51b9bd34ebb9973d3d53f1b360f59a8b3a668f4397963323a1d00ec4b8c5be219182b685d9d4c15b1a85dd526"}, {0x3, 0x185, "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"}]}}}}}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'netdevsim0\x00', 0x0}) r5 = socket(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCADDRT(r5, 0x890b, &(0x7f0000001200)={@ipv4={'\x00', '\xff\xff', @local}, @ipv4={'\x00', '\xff\xff', @remote}, @loopback, 0x100, 0xfff6, 0x80, 0x0, 0x5, 0x1000004, r4}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001380)=@newneigh={0x2c, 0x1c, 0x2, 0x70bd25, 0x25dfdbfc, {0x1c, 0x0, 0x0, r4, 0x80, 0x10, 0x6}, [@NDA_DST_IPV4={0x8, 0x1, @private=0xa010102}, @NDA_PORT={0x6, 0x6, 0x4e23}]}, 0x2c}}, 0x0) r6 = memfd_create(&(0x7f00000001c0)='\x00\xc76\xbe\x91\x8d\x182)!\x9a%\xd9\x19\x17\xb0\xed|\xb3\xc2\x017h\xe9kL\xa2\xd28\xd6\x06\a\x0e\xfc\xfe\x12\x8f&\x13\xae%@T\xa3\xb0>\\\xec\xa9\xf9Q@6A\x10\x8cn|\x00\x00\x00\x00\x00\x00\x00\x00\xeb0\xdd\xe8\x87\x05=\xfb\x8b$\xdcQ\xee\xc5\x1f\x8bQ\xf7fo\"i\xa1hk\x1d\xf5z\xc1\x7f\xa4\\]\xc4\xbe3\xf9\xa8\t?:\xd8\xda\x84\xeepI[\x1c\x00\x00\x00\x00\xf9v\x00\x00\x00\x00\x00T\xb6\xbe\x0f~\xc0\x92\xe9O{\xa8\x81(\x01\x14\xfc\x83\xf9\xfb\x05\x94Tr@Lq]\xf9\x15zj\x87\xc4\x8e\xe8/\xb9-&R\x8e\xb2\xb3bBx\x1e1\x18\x8f2\xf7]#\xed,\xc7\x03\x00\x00\x00\xa3\xee\xcb\xaf\xb3\xe3\'}\x18\xe8O\xa8#K\xb6\xe4R$\xaa\x00U\x92\xd2\x99\xb80x0}) futex_waitv(&(0x7f0000001080)=[{0x3, &(0x7f0000001040)=0x3, 0x82}], 0x1, 0x0, &(0x7f0000001100)={r1}, 0x1) lseek(0xffffffffffffffff, 0xa, 0x1) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x8, 0x0, 0x0, 0x0, 0x61, 0x10, 0x49}, [@ldst={0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x0, 0x10, &(0x7f0000000080), 0xffffffffffffffb2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) ptrace(0x10, 0x1) waitid(0x0, 0x0, 0x0, 0xc, &(0x7f0000000500)) 0s ago: executing program 3 (id=667): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r4}, 0x10) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x1008002, &(0x7f0000000300)={[{@grpquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x84}}, {@resuid}, {@max_batch_time={'max_batch_time', 0x3d, 0x3}}, {@lazytime}, {@jqfmt_vfsold}, {@usrquota}, {@data_err_abort}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1b, 0x8, &(0x7f00000038c0)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x9}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x802) ioctl$F2FS_IOC_GARBAGE_COLLECT(r5, 0x40004580, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) kernel console output (not intermixed with test programs): batman_adv: batadv0: Interface activated: batadv_slave_1 [ 108.134372][ T4826] veth1_macvtap: entered promiscuous mode [ 108.173814][ T4971] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 108.187627][ T4878] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.196569][ T4878] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.205371][ T4878] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.214273][ T4878] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.250224][ T4971] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 108.260274][ T4971] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 108.296461][ T4971] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 108.379611][ T4826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 108.390274][ T4826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 108.396937][ T5202] syz.1.343[5202] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 108.400205][ T4826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 108.400335][ T5202] syz.1.343[5202] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 108.411425][ T4826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 108.411437][ T4826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 108.411452][ T4826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 108.411469][ T4826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 108.429876][ T5202] syz.1.343[5202] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 108.433788][ T4826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 108.495854][ T4826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 108.506755][ T4826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 108.516675][ T4826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 108.527398][ T4826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 108.537507][ T4826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 108.548165][ T4826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 108.560325][ T4826] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 108.569172][ T4826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 108.579687][ T4826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 108.589866][ T4826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 108.600598][ T4826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 108.610527][ T4826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 108.621158][ T4826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 108.631274][ T4826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 108.641927][ T4826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 108.651879][ T4826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 108.662498][ T4826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 108.672566][ T4826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 108.683101][ T4826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 108.693061][ T4826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 108.703568][ T4826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 108.715772][ T4826] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 108.742746][ T4826] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.751656][ T4826] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.760754][ T4826] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.769769][ T4826] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.854123][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 108.854137][ T29] audit: type=1400 audit(1727423832.630:891): avc: denied { create } for pid=5205 comm="syz.0.369" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 108.879673][ T29] audit: type=1400 audit(1727423832.630:892): avc: denied { connect } for pid=5205 comm="syz.0.369" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 108.923240][ T4945] 8021q: adding VLAN 0 to HW filter on device bond0 [ 108.932218][ T29] audit: type=1400 audit(1727423832.700:893): avc: denied { read write } for pid=5208 comm="syz.1.370" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 108.955720][ T29] audit: type=1400 audit(1727423832.700:894): avc: denied { open } for pid=5208 comm="syz.1.370" path="/dev/snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 108.985269][ T29] audit: type=1400 audit(1727423832.770:895): avc: denied { connect } for pid=5205 comm="syz.0.369" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 109.065131][ T4945] 8021q: adding VLAN 0 to HW filter on device team0 [ 109.147718][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.150366][ T29] audit: type=1400 audit(1727423832.930:896): avc: denied { ioctl } for pid=5208 comm="syz.1.370" path="/dev/snapshot" dev="devtmpfs" ino=90 ioctlcmd=0x3305 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 109.154975][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 109.182931][ T5209] Restarting kernel threads ... done. [ 109.233667][ T4971] 8021q: adding VLAN 0 to HW filter on device bond0 [ 109.250391][ T5214] serio: Serial port ttyS3 [ 109.321893][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.329143][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 109.338799][ T29] audit: type=1400 audit(1727423833.110:897): avc: denied { getopt } for pid=5208 comm="syz.1.370" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 109.416507][ T3344] hid-generic 0000:0000:0000.0002: unknown main item tag 0x7 [ 109.424040][ T3344] hid-generic 0000:0000:0000.0002: ignoring exceeding usage max [ 109.436156][ T3344] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 109.446357][ T3344] hid-generic 0000:0000:0000.0002: unknown main item tag 0x6 [ 109.453759][ T3344] hid-generic 0000:0000:0000.0002: unknown main item tag 0xd [ 109.462982][ T3344] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz0] on syz0 [ 109.491261][ T4971] 8021q: adding VLAN 0 to HW filter on device team0 [ 109.567180][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.572005][ T5224] loop2: detected capacity change from 0 to 512 [ 109.574350][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 109.725233][ T5224] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 109.742365][ T5224] ext4 filesystem being mounted at /1/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 109.857086][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.864389][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 109.903464][ T4945] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 110.318632][ T4826] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.624827][ T4971] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 110.635291][ T4971] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 110.936655][ T1705] EXT4-fs error: 3652 callbacks suppressed [ 110.936669][ T1705] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5780: Out of memory [ 111.026876][ T3659] kmmpd-loop1: attempt to access beyond end of device [ 111.026876][ T3659] loop1: rw=14337, sector=48, nr_sectors = 4 limit=11 [ 111.040510][ T3659] Buffer I/O error on dev loop1, logical block 12, lost sync page write [ 111.123510][ T1705] EXT4-fs error (device loop1): __ext4_ext_dirty:207: inode #19: comm kworker/u8:6: mark_inode_dirty error [ 111.300036][ T4945] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 111.393004][ T5247] netlink: 8 bytes leftover after parsing attributes in process `syz.1.376'. [ 111.482083][ T1705] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5780: Out of memory [ 111.489240][ T5247] batadv0: entered promiscuous mode [ 111.500662][ T5247] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 111.517553][ T5247] batadv0: left promiscuous mode [ 111.615928][ T1705] EXT4-fs error (device loop1): __ext4_ext_dirty:207: inode #19: comm kworker/u8:6: mark_inode_dirty error [ 111.652902][ T1705] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5780: Out of memory [ 111.805835][ T1705] EXT4-fs error (device loop1): __ext4_ext_dirty:207: inode #19: comm kworker/u8:6: mark_inode_dirty error [ 112.183131][ T4971] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 112.240915][ T29] audit: type=1400 audit(1727423836.020:898): avc: denied { map } for pid=5254 comm="syz.0.377" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=138 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 112.265051][ T29] audit: type=1400 audit(1727423836.020:899): avc: denied { execute } for pid=5254 comm="syz.0.377" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=138 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 112.476638][ T1850] bridge_slave_1: left allmulticast mode [ 112.482371][ T1850] bridge_slave_1: left promiscuous mode [ 112.488069][ T1850] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.521188][ T1705] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5780: Out of memory [ 112.585094][ T1705] EXT4-fs error (device loop1): __ext4_ext_dirty:207: inode #19: comm kworker/u8:6: mark_inode_dirty error [ 112.598369][ T1705] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5780: Out of memory [ 112.624377][ T1850] bridge_slave_0: left allmulticast mode [ 112.630083][ T1850] bridge_slave_0: left promiscuous mode [ 112.630107][ T29] audit: type=1400 audit(1727423836.090:900): avc: denied { mount } for pid=5254 comm="syz.0.377" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 112.635804][ T1850] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.690937][ T1705] EXT4-fs error (device loop1): __ext4_ext_dirty:207: inode #19: comm kworker/u8:6: mark_inode_dirty error [ 112.739285][ T5265] loop2: detected capacity change from 0 to 2048 [ 112.808694][ T5265] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 113.098266][ T1850] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 113.110611][ T1850] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 113.135711][ T1850] bond0 (unregistering): Released all slaves [ 113.204099][ T1850] hsr_slave_0: left promiscuous mode [ 113.266842][ T1850] hsr_slave_1: left promiscuous mode [ 113.286531][ T1850] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 113.294158][ T1850] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 113.305311][ T1850] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 113.312948][ T1850] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 113.323941][ T1850] veth1_macvtap: left promiscuous mode [ 113.329548][ T1850] veth0_macvtap: left promiscuous mode [ 113.335260][ T1850] veth1_vlan: left promiscuous mode [ 113.340544][ T1850] veth0_vlan: left promiscuous mode [ 113.591103][ T5265] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.380: bg 0: block 234: padding at end of block bitmap is not set [ 113.608246][ T5265] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 113.620877][ T5265] EXT4-fs (loop2): This should not happen!! Data will be lost [ 113.620877][ T5265] [ 113.630550][ T5265] EXT4-fs (loop2): Total free blocks count 0 [ 113.636655][ T5265] EXT4-fs (loop2): Free/Dirty block details [ 113.642562][ T5265] EXT4-fs (loop2): free_blocks=0 [ 113.647571][ T5265] EXT4-fs (loop2): dirty_blocks=6768 [ 113.652874][ T5265] EXT4-fs (loop2): Block reservation details [ 113.658946][ T5265] EXT4-fs (loop2): i_reserved_data_blocks=423 [ 113.686986][ T5273] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 2048 with error 28 [ 113.744025][ T1850] team0 (unregistering): Port device team_slave_1 removed [ 113.758228][ T1850] team0 (unregistering): Port device team_slave_0 removed [ 113.833147][ T5282] netlink: 'syz.0.383': attribute type 10 has an invalid length. [ 114.040039][ T4971] veth0_vlan: entered promiscuous mode [ 114.099447][ T29] kauditd_printk_skb: 13 callbacks suppressed [ 114.099464][ T29] audit: type=1400 audit(1727423837.880:914): avc: denied { unmount } for pid=4826 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 114.168512][ T5293] lo speed is unknown, defaulting to 1000 [ 114.695309][ T5296] loop2: detected capacity change from 0 to 512 [ 114.712621][ T4971] veth1_vlan: entered promiscuous mode [ 114.732699][ T5297] netlink: 8 bytes leftover after parsing attributes in process `syz.0.386'. [ 114.833239][ T29] audit: type=1400 audit(1727423838.510:915): avc: denied { connect } for pid=5292 comm="syz.0.386" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 114.949349][ T4971] veth0_macvtap: entered promiscuous mode [ 114.986305][ T5296] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 115.040800][ T5309] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 115.074527][ T5296] ext4 filesystem being mounted at /4/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 115.084869][ T5309] batadv_slave_0: entered promiscuous mode [ 115.107117][ T4971] veth1_macvtap: entered promiscuous mode [ 115.121247][ T4971] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 115.131730][ T4971] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.141718][ T4971] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 115.152213][ T4971] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.162300][ T4971] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 115.172834][ T4971] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.182726][ T4971] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 115.193237][ T4971] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.203129][ T4971] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 115.213799][ T4971] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.224024][ T4971] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 115.234565][ T4971] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.349580][ T29] audit: type=1326 audit(1727423839.130:916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5295 comm="syz.2.384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7433dcdf39 code=0x7ffc0000 [ 115.381891][ T4971] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 115.389966][ T29] audit: type=1326 audit(1727423839.160:917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5295 comm="syz.2.384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7433dcdf39 code=0x7ffc0000 [ 115.413265][ T29] audit: type=1326 audit(1727423839.160:918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5295 comm="syz.2.384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7f7433dcdf39 code=0x7ffc0000 [ 115.436712][ T29] audit: type=1326 audit(1727423839.160:919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5295 comm="syz.2.384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7433dcdf39 code=0x7ffc0000 [ 115.460219][ T29] audit: type=1326 audit(1727423839.160:920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5295 comm="syz.2.384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7433dcdf39 code=0x7ffc0000 [ 115.484035][ T29] audit: type=1326 audit(1727423839.160:921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5295 comm="syz.2.384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f7433dcdf39 code=0x7ffc0000 [ 115.507379][ T29] audit: type=1326 audit(1727423839.160:922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5295 comm="syz.2.384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7433dcdf39 code=0x7ffc0000 [ 115.517870][ T4945] veth0_vlan: entered promiscuous mode [ 115.530634][ T29] audit: type=1326 audit(1727423839.160:923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5295 comm="syz.2.384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7433dcdf39 code=0x7ffc0000 [ 115.539500][ T4945] veth1_vlan: entered promiscuous mode [ 115.580470][ T4971] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 115.591154][ T4971] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.601155][ T4971] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 115.611795][ T4971] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.621733][ T4971] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 115.632487][ T4971] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.642414][ T4971] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 115.652960][ T4971] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.662953][ T4971] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 115.673710][ T4971] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.683679][ T4971] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 115.694206][ T4971] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.704135][ T4971] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 115.714700][ T4971] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.727332][ T4826] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.745945][ T4971] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 115.760564][ T4945] veth0_macvtap: entered promiscuous mode [ 115.808743][ T4971] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.817864][ T4971] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.826787][ T4971] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.835677][ T4971] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.855051][ T5324] loop2: detected capacity change from 0 to 128 [ 115.858171][ T4945] veth1_macvtap: entered promiscuous mode [ 115.944667][ T5325] lo speed is unknown, defaulting to 1000 [ 115.946961][ T1705] EXT4-fs error: 3302 callbacks suppressed [ 115.947015][ T1705] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5780: Out of memory [ 115.972328][ T4945] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 115.982888][ T4945] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.992748][ T4945] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 115.996677][ T1705] EXT4-fs error (device loop1): __ext4_ext_dirty:207: inode #19: comm kworker/u8:6: mark_inode_dirty error [ 116.003174][ T4945] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.024614][ T4945] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 116.035136][ T4945] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.045057][ T4945] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 116.055607][ T4945] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.065457][ T4945] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 116.075897][ T4945] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.083441][ T1705] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5780: Out of memory [ 116.085728][ T4945] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 116.097245][ T1705] EXT4-fs error (device loop1): __ext4_ext_dirty:207: inode #19: comm kworker/u8:6: mark_inode_dirty error [ 116.105373][ T4945] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.105396][ T4945] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 116.105440][ T4945] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.108381][ T4945] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 116.117001][ T3659] kmmpd-loop1: attempt to access beyond end of device [ 116.117001][ T3659] loop1: rw=14337, sector=48, nr_sectors = 4 limit=11 [ 116.168074][ T3659] Buffer I/O error on dev loop1, logical block 12, lost sync page write [ 116.265312][ T1705] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5780: Out of memory [ 116.275226][ T1705] EXT4-fs error (device loop1): __ext4_ext_dirty:207: inode #19: comm kworker/u8:6: mark_inode_dirty error [ 116.292406][ T5329] lo speed is unknown, defaulting to 1000 [ 116.295064][ T4945] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 116.308683][ T4945] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.318545][ T4945] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 116.329044][ T4945] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.338913][ T4945] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 116.349457][ T4945] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.359290][ T4945] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 116.369741][ T4945] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.379593][ T4945] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 116.393531][ T4945] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.403393][ T4945] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 116.413974][ T4945] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.424011][ T4945] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 116.434587][ T4945] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.444565][ T4945] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 116.455006][ T4945] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.466196][ T4945] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 116.477516][ T1705] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5780: Out of memory [ 116.487831][ T1705] EXT4-fs error (device loop1): __ext4_ext_dirty:207: inode #19: comm kworker/u8:6: mark_inode_dirty error [ 116.507526][ T3658] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5780: Out of memory [ 116.519331][ T3658] EXT4-fs error (device loop1): __ext4_ext_dirty:207: inode #19: comm syz.1.42: mark_inode_dirty error [ 116.529132][ T5335] loop6: detected capacity change from 0 to 7 [ 116.548762][ T4945] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.555534][ T5335] Buffer I/O error on dev loop6, logical block 0, async page read [ 116.557625][ T4945] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.574064][ T4945] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.582801][ T4945] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.587146][ T5335] Buffer I/O error on dev loop6, logical block 0, async page read [ 116.599396][ T5335] loop6: unable to read partition table [ 116.616031][ T5338] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 116.624347][ T5335] loop_reread_partitions: partition scan of loop6 (被xڬdƤݡ [ 116.624347][ T5335] ) failed (rc=-5) [ 117.158903][ T5348] loop4: detected capacity change from 0 to 4096 [ 117.197051][ T5348] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 117.343848][ T4945] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.366535][ T5353] loop2: detected capacity change from 0 to 512 [ 117.389620][ T5353] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 117.407278][ T5353] ext4 filesystem being mounted at /7/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 117.643147][ T5353] EXT4-fs error (device loop2): ext4_do_update_inode:5121: inode #19: comm syz.2.399: corrupted inode contents [ 117.881986][ T5353] EXT4-fs error (device loop2): ext4_dirty_inode:5984: inode #19: comm syz.2.399: mark_inode_dirty error [ 118.184142][ T5353] EXT4-fs error (device loop2): ext4_do_update_inode:5121: inode #19: comm syz.2.399: corrupted inode contents [ 118.196795][ T5353] EXT4-fs error (device loop2): ext4_xattr_delete_inode:3005: inode #19: comm syz.2.399: mark_inode_dirty error [ 118.209633][ T5353] EXT4-fs error (device loop2): ext4_xattr_delete_inode:3008: inode #19: comm syz.2.399: mark inode dirty (error -117) [ 118.224950][ T5353] EXT4-fs warning (device loop2): ext4_evict_inode:276: xattr delete (err -117) [ 118.440820][ T4826] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.473781][ T5382] netlink: 'syz.4.410': attribute type 10 has an invalid length. [ 118.486604][ T5382] veth0_macvtap: left promiscuous mode [ 118.494825][ T5376] loop0: detected capacity change from 1024 to 64 [ 118.496812][ T5382] veth0_macvtap: entered promiscuous mode [ 118.512479][ T5382] team0: Device macvtap0 failed to register rx_handler [ 118.520139][ T5382] veth0_macvtap: left promiscuous mode [ 118.604646][ T5370] syzkaller1: entered promiscuous mode [ 118.610181][ T5370] syzkaller1: entered allmulticast mode [ 118.805950][ T5389] EXT4-fs (sda1): resizing filesystem from 262144 to 262144 blocks [ 119.100038][ T5392] loop3: detected capacity change from 0 to 512 [ 119.158615][ T5392] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2240: inode #15: comm syz.3.413: corrupted in-inode xattr: invalid ea_ino [ 119.195305][ T29] kauditd_printk_skb: 66 callbacks suppressed [ 119.195322][ T29] audit: type=1400 audit(1727423842.980:990): avc: denied { execute } for pid=5391 comm="syz.4.414" path="/6/cpu.stat" dev="tmpfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 119.233284][ T5392] EXT4-fs error (device loop3): ext4_orphan_get:1393: comm syz.3.413: couldn't read orphan inode 15 (err -117) [ 119.271174][ T5392] EXT4-fs (loop3): mounted filesystem 00000007-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 119.401139][ T5392] EXT4-fs error (device loop3): ext4_lookup:1813: inode #13: comm syz.3.413: iget: bad extended attribute block 7177 [ 119.596256][ T4971] EXT4-fs (loop3): unmounting filesystem 00000007-0000-0000-0000-000000000000. [ 119.740352][ T5414] loop4: detected capacity change from 0 to 1024 [ 119.883015][ T5414] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 119.892973][ T5414] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 119.912068][ T29] audit: type=1400 audit(1727423843.690:991): avc: denied { connect } for pid=5409 comm="syz.0.421" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 119.931791][ T5415] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=5415 comm=syz.2.422 [ 119.976324][ T5418] netlink: 4 bytes leftover after parsing attributes in process `syz.3.420'. [ 119.985204][ T5418] ip6gretap0: entered promiscuous mode [ 119.990751][ T5418] ip6gretap0: entered allmulticast mode [ 120.003098][ T29] audit: type=1400 audit(1727423843.780:992): avc: denied { read } for pid=5412 comm="syz.2.422" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 120.025192][ T5414] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 120.051253][ T5414] EXT4-fs error (device loop4): ext4_get_journal_inode:5762: inode #5: comm syz.4.419: unexpected bad inode w/o EXT4_IGET_BAD [ 120.080735][ T5414] EXT4-fs (loop4): no journal found [ 120.086034][ T5414] EXT4-fs (loop4): can't get journal size [ 120.141024][ T5414] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 120.174677][ T5423] loop3: detected capacity change from 0 to 512 [ 120.192985][ T5405] EXT4-fs error (device loop4): ext4_inlinedir_to_tree:1404: inode #12: block 16: comm syz.4.419: path /8/file0/file0: bad entry in directory: rec_len is too small for name_len - offset=20, inode=13, rec_len=16, size=60 fake=0 [ 120.193961][ T5423] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 120.237186][ T5423] EXT4-fs (loop3): 1 truncate cleaned up [ 120.243993][ T5423] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 120.305599][ T4945] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.354375][ T5423] loop3: detected capacity change from 512 to 64 [ 120.373730][ T5423] EXT4-fs error (device loop3): mb_free_blocks:1948: group 0, inode 15: block 96:freeing already freed block (bit 95); block bitmap corrupt. [ 120.388434][ T5423] EXT4-fs (loop3): pa ffff88810576b310: logic 32, phys. 65, len 32 [ 120.396468][ T5423] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:5366: group 0, free 10, pa_free 9 [ 120.407859][ T5423] EXT4-fs error (device loop3): ext4_free_branches:1036: inode #15: block 36: comm syz.3.423: Read failure [ 120.451338][ T29] audit: type=1400 audit(1727423844.230:993): avc: denied { rmdir } for pid=4971 comm="syz-executor" name="lost+found" dev="loop3" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 120.474615][ T4971] EXT4-fs warning (device loop3): ext4_empty_dir:3117: inode #11: lblock 5: comm syz-executor: error -12 reading directory block [ 120.498289][ T4971] EXT4-fs warning (device loop3): ext4_empty_dir:3117: inode #11: lblock 5: comm syz-executor: error -12 reading directory block [ 120.514741][ T4971] EXT4-fs warning (device loop3): ext4_empty_dir:3117: inode #11: lblock 5: comm syz-executor: error -12 reading directory block [ 120.528894][ T4971] EXT4-fs warning (device loop3): ext4_empty_dir:3117: inode #11: lblock 5: comm syz-executor: error -12 reading directory block [ 120.542946][ T4971] EXT4-fs warning (device loop3): ext4_empty_dir:3117: inode #11: lblock 5: comm syz-executor: error -12 reading directory block [ 120.557538][ T4971] EXT4-fs warning (device loop3): ext4_empty_dir:3117: inode #11: lblock 5: comm syz-executor: error -12 reading directory block [ 120.571591][ T4971] EXT4-fs warning (device loop3): ext4_empty_dir:3117: inode #11: lblock 5: comm syz-executor: error -12 reading directory block [ 120.702833][ T29] audit: type=1400 audit(1727423844.470:994): avc: denied { bind } for pid=5427 comm="syz.0.427" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 120.824949][ T29] audit: type=1400 audit(1727423844.600:995): avc: denied { write } for pid=5425 comm="syz.4.426" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 120.834665][ T4971] EXT4-fs warning (device loop3): ext4_empty_dir:3117: inode #11: lblock 5: comm syz-executor: error -12 reading directory block [ 120.887823][ T5437] tipc: Started in network mode [ 120.892735][ T5437] tipc: Node identity 101, cluster identity 4711 [ 120.899129][ T5437] tipc: Node number set to 257 [ 120.940154][ T4971] EXT4-fs warning (device loop3): ext4_empty_dir:3117: inode #11: lblock 5: comm syz-executor: error -12 reading directory block [ 120.984770][ T29] audit: type=1400 audit(1727423844.750:996): avc: denied { accept } for pid=5425 comm="syz.4.426" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 121.028262][ T1705] EXT4-fs error: 5836 callbacks suppressed [ 121.028278][ T1705] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5780: Out of memory [ 121.080396][ T1705] EXT4-fs error (device loop1): __ext4_ext_dirty:207: inode #19: comm kworker/u8:6: mark_inode_dirty error [ 121.097386][ T4971] EXT4-fs warning (device loop3): ext4_empty_dir:3117: inode #11: lblock 5: comm syz-executor: error -12 reading directory block [ 121.140278][ T3658] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5780: Out of memory [ 121.154260][ T3659] kmmpd-loop1: attempt to access beyond end of device [ 121.154260][ T3659] loop1: rw=14337, sector=48, nr_sectors = 4 limit=11 [ 121.160475][ T3658] EXT4-fs error (device loop1): __ext4_ext_dirty:207: inode #19: comm syz.1.42: mark_inode_dirty error [ 121.167698][ T3659] Buffer I/O error on dev loop1, logical block 12, lost sync page write [ 121.317259][ T3658] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5780: Out of memory [ 121.354208][ T4126] kmmpd-loop0: attempt to access beyond end of device [ 121.354208][ T4126] loop0: rw=14337, sector=128, nr_sectors = 2 limit=64 [ 121.367765][ T4126] Buffer I/O error on dev loop0, logical block 64, lost sync page write [ 121.376826][ T4126] EXT4-fs error (device loop0): kmmpd:186: comm kmmpd-loop0: Error writing to MMP block [ 121.415400][ T28] kworker/u8:1: attempt to access beyond end of device [ 121.415400][ T28] loop3: rw=1, sector=66, nr_sectors = 2 limit=64 [ 121.428692][ T28] Buffer I/O error on device loop3, logical block 33 [ 121.443663][ T171] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.470475][ T3658] EXT4-fs error (device loop1): __ext4_ext_dirty:207: inode #19: comm syz.1.42: mark_inode_dirty error [ 121.500243][ T28] kworker/u8:1: attempt to access beyond end of device [ 121.500243][ T28] loop3: rw=1, sector=172, nr_sectors = 2 limit=64 [ 121.513706][ T28] Buffer I/O error on device loop3, logical block 86 [ 121.581654][ T5447] loop2: detected capacity change from 0 to 2048 [ 121.588401][ T1705] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5780: Out of memory [ 121.596046][ T29] audit: type=1400 audit(1727423845.360:997): avc: denied { mount } for pid=5449 comm="syz.0.435" name="/" dev="ramfs" ino=12839 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 121.598071][ T1705] EXT4-fs error (device loop1): __ext4_ext_dirty:207: inode #19: comm kworker/u8:6: mark_inode_dirty error [ 121.633006][ T1705] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5780: Out of memory [ 121.636399][ T4971] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.643983][ T5447] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 121.652571][ T171] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.665885][ T1705] EXT4-fs error (device loop1): __ext4_ext_dirty:207: inode #19: comm kworker/u8:6: mark_inode_dirty error [ 121.714307][ T29] audit: type=1400 audit(1727423845.450:998): avc: denied { unmount } for pid=4304 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 121.734756][ T29] audit: type=1400 audit(1727423845.520:999): avc: denied { getopt } for pid=5446 comm="syz.2.434" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 121.774027][ T171] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.882250][ T171] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.084424][ T171] bridge_slave_1: left allmulticast mode [ 122.090128][ T171] bridge_slave_1: left promiscuous mode [ 122.095893][ T171] bridge0: port 2(bridge_slave_1) entered disabled state [ 122.108586][ T171] bridge_slave_0: left allmulticast mode [ 122.114283][ T171] bridge_slave_0: left promiscuous mode [ 122.119936][ T171] bridge0: port 1(bridge_slave_0) entered disabled state [ 122.346438][ T5466] serio: Serial port ptm0 [ 122.522619][ T171] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 122.539997][ T171] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 122.562171][ T171] bond0 (unregistering): Released all slaves [ 122.622703][ T171] hsr_slave_0: left promiscuous mode [ 122.644598][ T171] hsr_slave_1: left promiscuous mode [ 122.646230][ T5457] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.434: bg 0: block 234: padding at end of block bitmap is not set [ 122.664495][ T171] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 122.672188][ T171] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 122.701915][ T171] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 122.709423][ T171] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 122.726957][ T5457] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 117 [ 122.739586][ T5457] EXT4-fs (loop2): This should not happen!! Data will be lost [ 122.739586][ T5457] [ 122.760617][ T171] veth1_macvtap: left promiscuous mode [ 122.766244][ T171] veth0_macvtap: left promiscuous mode [ 122.771756][ T171] veth1_vlan: left promiscuous mode [ 122.777101][ T171] veth0_vlan: left promiscuous mode [ 123.020465][ T5447] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 2048 with error 28 [ 123.033281][ T5447] EXT4-fs (loop2): This should not happen!! Data will be lost [ 123.033281][ T5447] [ 123.042946][ T5447] EXT4-fs (loop2): Total free blocks count 0 [ 123.049029][ T5447] EXT4-fs (loop2): Free/Dirty block details [ 123.054974][ T5447] EXT4-fs (loop2): free_blocks=0 [ 123.060007][ T5447] EXT4-fs (loop2): dirty_blocks=3376 [ 123.065392][ T5447] EXT4-fs (loop2): Block reservation details [ 123.166151][ T171] team0 (unregistering): Port device team_slave_1 removed [ 123.184205][ T171] team0 (unregistering): Port device team_slave_0 removed [ 123.266399][ T5483] netlink: 'syz.1.440': attribute type 3 has an invalid length. [ 123.384097][ T5483] netlink: 'syz.1.440': attribute type 3 has an invalid length. [ 123.444302][ T5458] lo speed is unknown, defaulting to 1000 [ 123.685952][ T5458] chnl_net:caif_netlink_parms(): no params data found [ 124.077567][ T5458] bridge0: port 1(bridge_slave_0) entered blocking state [ 124.084764][ T5458] bridge0: port 1(bridge_slave_0) entered disabled state [ 124.104425][ T5458] bridge_slave_0: entered allmulticast mode [ 124.121771][ T5458] bridge_slave_0: entered promiscuous mode [ 124.158862][ T5511] syzkaller1: entered promiscuous mode [ 124.164598][ T5511] syzkaller1: entered allmulticast mode [ 124.198369][ T5458] bridge0: port 2(bridge_slave_1) entered blocking state [ 124.205558][ T5458] bridge0: port 2(bridge_slave_1) entered disabled state [ 124.224673][ T5458] bridge_slave_1: entered allmulticast mode [ 124.231747][ T5458] bridge_slave_1: entered promiscuous mode [ 124.313015][ T5458] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 124.345084][ T5458] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 124.395133][ T5458] team0: Port device team_slave_0 added [ 124.402520][ T5458] team0: Port device team_slave_1 added [ 124.424919][ T5458] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 124.431895][ T5458] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 124.457863][ T5458] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 124.498983][ T5458] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 124.506842][ T5458] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 124.533252][ T5458] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 124.700788][ T5458] hsr_slave_0: entered promiscuous mode [ 124.784818][ T5458] hsr_slave_1: entered promiscuous mode [ 124.800597][ T5458] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 124.851677][ T5458] Cannot create hsr debugfs directory [ 124.863551][ T5541] lo speed is unknown, defaulting to 1000 [ 124.885523][ T5545] team0: entered promiscuous mode [ 124.890642][ T5545] team_slave_0: entered promiscuous mode [ 124.896376][ T5545] team_slave_1: entered promiscuous mode [ 124.902104][ T5545] netdevsim netdevsim0 netdevsim1: entered promiscuous mode [ 124.938546][ T5545] team0: left promiscuous mode [ 124.943369][ T5545] team_slave_0: left promiscuous mode [ 124.948938][ T5545] team_slave_1: left promiscuous mode [ 124.954487][ T5545] netdevsim netdevsim0 netdevsim1: left promiscuous mode [ 125.330223][ T29] audit: type=1400 audit(1727423849.110:1000): avc: denied { search } for pid=5553 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 125.355498][ T29] audit: type=1400 audit(1727423849.140:1001): avc: denied { read } for pid=2950 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 125.407701][ T29] audit: type=1400 audit(1727423849.140:1002): avc: denied { search } for pid=2950 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 125.429362][ T29] audit: type=1400 audit(1727423849.140:1003): avc: denied { append } for pid=2950 comm="syslogd" name="messages" dev="tmpfs" ino=7 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 125.451826][ T29] audit: type=1400 audit(1727423849.140:1004): avc: denied { open } for pid=2950 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=7 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 125.474635][ T29] audit: type=1400 audit(1727423849.140:1005): avc: denied { getattr } for pid=2950 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=7 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 125.656356][ T29] audit: type=1400 audit(1727423849.190:1006): avc: denied { read } for pid=5561 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=343 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 125.679441][ T29] audit: type=1400 audit(1727423849.190:1007): avc: denied { open } for pid=5561 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=343 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 125.704645][ T29] audit: type=1400 audit(1727423849.190:1008): avc: denied { getattr } for pid=5561 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=343 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 125.730362][ T29] audit: type=1400 audit(1727423849.190:1009): avc: denied { read } for pid=5556 comm="syz.1.452" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 125.882025][ T5568] lo speed is unknown, defaulting to 1000 [ 126.045819][ T1705] EXT4-fs error: 3843 callbacks suppressed [ 126.045894][ T1705] EXT4-fs error (device loop1): __ext4_ext_dirty:207: inode #19: comm kworker/u8:6: mark_inode_dirty error [ 126.067869][ T3658] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5780: Out of memory [ 126.077831][ T3658] EXT4-fs error (device loop1): __ext4_ext_dirty:207: inode #19: comm syz.1.42: mark_inode_dirty error [ 126.092422][ T1705] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5780: Out of memory [ 126.103618][ T1705] EXT4-fs error (device loop1): __ext4_ext_dirty:207: inode #19: comm kworker/u8:6: mark_inode_dirty error [ 126.141234][ T1705] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5780: Out of memory [ 126.184359][ T3659] kmmpd-loop1: attempt to access beyond end of device [ 126.184359][ T3659] loop1: rw=14337, sector=48, nr_sectors = 4 limit=11 [ 126.198011][ T3659] Buffer I/O error on dev loop1, logical block 12, lost sync page write [ 126.424249][ T4126] kmmpd-loop0: attempt to access beyond end of device [ 126.424249][ T4126] loop0: rw=14337, sector=128, nr_sectors = 2 limit=64 [ 126.437819][ T4126] Buffer I/O error on dev loop0, logical block 64, lost sync page write [ 126.603567][ T5458] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 126.776662][ T5458] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 126.788448][ T1705] EXT4-fs error (device loop1): __ext4_ext_dirty:207: inode #19: comm kworker/u8:6: mark_inode_dirty error [ 126.810342][ T1705] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5780: Out of memory [ 126.843756][ T1705] EXT4-fs error (device loop1): __ext4_ext_dirty:207: inode #19: comm kworker/u8:6: mark_inode_dirty error [ 126.942643][ T1705] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5780: Out of memory [ 126.942676][ T5458] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 127.035046][ T5458] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 127.072131][ T5591] team_slave_0: entered promiscuous mode [ 127.077854][ T5591] team_slave_1: entered promiscuous mode [ 127.093615][ T5591] vlan2: entered promiscuous mode [ 127.098801][ T5591] team0: entered promiscuous mode [ 127.117718][ T5591] team0: left promiscuous mode [ 127.122757][ T5591] team_slave_0: left promiscuous mode [ 127.128252][ T5591] team_slave_1: left promiscuous mode [ 127.330192][ T5458] 8021q: adding VLAN 0 to HW filter on device bond0 [ 127.344955][ T5458] 8021q: adding VLAN 0 to HW filter on device team0 [ 127.360541][ T5594] tmpfs: Unknown parameter 'mpoeTinreave' [ 127.372891][ T171] bridge0: port 1(bridge_slave_0) entered blocking state [ 127.380071][ T171] bridge0: port 1(bridge_slave_0) entered forwarding state [ 127.463996][ T5598] lo speed is unknown, defaulting to 1000 [ 127.526353][ T1850] bridge0: port 2(bridge_slave_1) entered blocking state [ 127.533600][ T1850] bridge0: port 2(bridge_slave_1) entered forwarding state [ 127.826574][ T5616] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 127.895584][ T5616] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 128.018769][ T5458] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 128.308967][ T5458] veth0_vlan: entered promiscuous mode [ 128.340137][ T5458] veth1_vlan: entered promiscuous mode [ 128.430944][ T5458] veth0_macvtap: entered promiscuous mode [ 128.717969][ T5458] veth1_macvtap: entered promiscuous mode [ 128.754703][ T5632] lo speed is unknown, defaulting to 1000 [ 128.784833][ T5653] loop4: detected capacity change from 0 to 4096 [ 128.805182][ T5458] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 128.815759][ T5458] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 128.825700][ T5458] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 128.836333][ T5458] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 128.846328][ T5458] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 128.856915][ T5458] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 128.866872][ T5458] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 128.877329][ T5458] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 128.887257][ T5458] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 128.897714][ T5458] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 128.898342][ T5665] syz.0.465[5665] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 128.907956][ T5458] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 128.924360][ T5665] syz.0.465[5665] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 128.930182][ T5458] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 128.950634][ T5665] syz.0.465[5665] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 128.951376][ T5458] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 128.965775][ T5653] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 128.973109][ T5458] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 128.998733][ T5458] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 129.118844][ T5458] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 129.129316][ T5458] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 129.139196][ T5458] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 129.149744][ T5458] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 129.159586][ T5458] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 129.170123][ T5458] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 129.179990][ T5458] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 129.190441][ T5458] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 129.200315][ T5458] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 129.210841][ T5458] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 129.220767][ T5458] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 129.231324][ T5458] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 129.241167][ T5458] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 129.251613][ T5458] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 129.261448][ T5458] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 129.271894][ T5458] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 129.349567][ T5458] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 129.359532][ T5458] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.368380][ T5458] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.377142][ T5458] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.385897][ T5458] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.460463][ T4945] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.422389][ T29] kauditd_printk_skb: 116 callbacks suppressed [ 130.422405][ T29] audit: type=1400 audit(1727423854.200:1126): avc: denied { write } for pid=5717 comm="syz.3.438" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 130.452721][ T5720] netlink: 16 bytes leftover after parsing attributes in process `syz.3.438'. [ 130.993356][ T29] audit: type=1400 audit(1727423854.230:1127): avc: denied { nlmsg_write } for pid=5717 comm="syz.3.438" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 131.020108][ T5716] netlink: 4 bytes leftover after parsing attributes in process `syz.0.472'. [ 131.041401][ T5718] lo speed is unknown, defaulting to 1000 [ 131.112876][ T1705] EXT4-fs error: 3606 callbacks suppressed [ 131.112895][ T1705] EXT4-fs error (device loop1): __ext4_ext_dirty:207: inode #19: comm kworker/u8:6: mark_inode_dirty error [ 131.166243][ T1705] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5780: Out of memory [ 131.205384][ T29] audit: type=1400 audit(1727423854.990:1128): avc: denied { create } for pid=5727 comm="syz.4.476" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 131.212626][ T1705] EXT4-fs error (device loop1): __ext4_ext_dirty:207: inode #19: comm kworker/u8:6: mark_inode_dirty error [ 131.239798][ T1705] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5780: Out of memory [ 131.240517][ T3659] kmmpd-loop1: attempt to access beyond end of device [ 131.240517][ T3659] loop1: rw=14337, sector=48, nr_sectors = 4 limit=11 [ 131.249433][ T1705] EXT4-fs error (device loop1): __ext4_ext_dirty:207: inode #19: comm kworker/u8:6: mark_inode_dirty error [ 131.262226][ T3659] Buffer I/O error on dev loop1, logical block 12, lost sync page write [ 131.274115][ T3658] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5780: Out of memory [ 131.293242][ T3658] EXT4-fs error (device loop1): __ext4_ext_dirty:207: inode #19: comm syz.1.42: mark_inode_dirty error [ 131.309420][ T1705] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5780: Out of memory [ 131.341206][ T5729] loop4: detected capacity change from 0 to 128 [ 131.344425][ T1705] EXT4-fs error (device loop1): __ext4_ext_dirty:207: inode #19: comm kworker/u8:6: mark_inode_dirty error [ 131.374583][ T5729] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 131.397024][ T29] audit: type=1400 audit(1727423855.170:1129): avc: denied { create } for pid=5725 comm="syz.2.474" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 131.404325][ T1705] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5780: Out of memory [ 131.416387][ T29] audit: type=1400 audit(1727423855.180:1130): avc: denied { connect } for pid=5725 comm="syz.2.474" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 131.439625][ T5729] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 131.467763][ T4126] kmmpd-loop0: attempt to access beyond end of device [ 131.467763][ T4126] loop0: rw=14337, sector=128, nr_sectors = 2 limit=64 [ 131.467881][ T4126] Buffer I/O error on dev loop0, logical block 64, lost sync page write [ 131.614404][ T29] audit: type=1400 audit(1727423855.250:1131): avc: denied { read } for pid=5725 comm="syz.2.474" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 131.698857][ T29] audit: type=1400 audit(1727423855.470:1132): avc: denied { mount } for pid=5727 comm="syz.4.476" name="/" dev="loop4" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 131.866384][ T5737] loop3: detected capacity change from 0 to 256 [ 132.047065][ T5737] FAT-fs (loop3): codepage cp1250 not found [ 132.191410][ T29] audit: type=1400 audit(1727423855.840:1133): avc: denied { create } for pid=5733 comm="syz.3.477" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 132.211145][ T29] audit: type=1400 audit(1727423855.950:1134): avc: denied { write } for pid=5725 comm="syz.2.474" path="socket:[14032]" dev="sockfs" ino=14032 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 132.234415][ T29] audit: type=1400 audit(1727423855.950:1135): avc: denied { create } for pid=5725 comm="syz.2.474" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 132.408778][ T5740] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 132.512955][ T5740] can0: slcan on ttyS3. [ 132.721149][ T5751] netlink: 36 bytes leftover after parsing attributes in process `syz.1.480'. [ 132.726411][ T5729] lo speed is unknown, defaulting to 1000 [ 133.079415][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::ffff:0.0.0.0]:20002. Sending cookies. [ 133.154191][ T5739] can0 (unregistered): slcan off ttyS3. [ 133.261740][ T5768] lo speed is unknown, defaulting to 1000 [ 133.632090][ T5778] loop3: detected capacity change from 0 to 1024 [ 133.686847][ T5778] EXT4-fs: Ignoring removed nomblk_io_submit option [ 133.694150][ T5778] EXT4-fs (loop3): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 133.932681][ T5778] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 134.110822][ T5768] lo speed is unknown, defaulting to 1000 [ 134.875997][ T5458] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.207829][ T5804] loop3: detected capacity change from 0 to 1024 [ 135.398263][ T5804] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 135.753979][ T29] kauditd_printk_skb: 67 callbacks suppressed [ 135.753996][ T29] audit: type=1400 audit(1727423859.530:1203): avc: denied { create } for pid=5803 comm="syz.3.488" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 135.823833][ T29] audit: type=1400 audit(1727423859.580:1204): avc: denied { setopt } for pid=5803 comm="syz.3.488" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 135.843404][ T29] audit: type=1400 audit(1727423859.580:1205): avc: denied { bind } for pid=5803 comm="syz.3.488" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 135.862854][ T29] audit: type=1400 audit(1727423859.580:1206): avc: denied { name_bind } for pid=5803 comm="syz.3.488" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 135.884752][ T29] audit: type=1400 audit(1727423859.580:1207): avc: denied { node_bind } for pid=5803 comm="syz.3.488" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 135.905788][ T29] audit: type=1400 audit(1727423859.580:1208): avc: denied { getopt } for pid=5803 comm="syz.3.488" laddr=::ffff:0.0.0.0 lport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 135.928315][ T29] audit: type=1400 audit(1727423859.580:1209): avc: denied { connect } for pid=5803 comm="syz.3.488" laddr=::ffff:0.0.0.0 lport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 135.952343][ T29] audit: type=1400 audit(1727423859.580:1210): avc: denied { name_connect } for pid=5803 comm="syz.3.488" dest=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 136.044336][ T29] audit: type=1400 audit(1727423859.790:1211): avc: denied { write } for pid=5803 comm="syz.3.488" laddr=::ffff:172.20.20.170 lport=20000 faddr=::ffff:172.20.20.170 fport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 136.114752][ T1705] EXT4-fs error: 3088 callbacks suppressed [ 136.114780][ T1705] EXT4-fs error (device loop1): __ext4_ext_dirty:207: inode #19: comm kworker/u8:6: mark_inode_dirty error [ 136.136408][ T29] audit: type=1400 audit(1727423859.860:1212): avc: denied { ioctl } for pid=5803 comm="syz.3.488" path="socket:[14149]" dev="sockfs" ino=14149 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 136.178116][ T5804] vlan2: entered allmulticast mode [ 136.196369][ T1705] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5780: Out of memory [ 136.224688][ T1705] EXT4-fs error (device loop1): __ext4_ext_dirty:207: inode #19: comm kworker/u8:6: mark_inode_dirty error [ 136.248382][ T1705] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5780: Out of memory [ 136.264246][ T3659] kmmpd-loop1: attempt to access beyond end of device [ 136.264246][ T3659] loop1: rw=14337, sector=48, nr_sectors = 4 limit=11 [ 136.277780][ T3659] Buffer I/O error on dev loop1, logical block 12, lost sync page write [ 136.286845][ T1705] EXT4-fs error (device loop1): __ext4_ext_dirty:207: inode #19: comm kworker/u8:6: mark_inode_dirty error [ 136.331194][ T1705] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5780: Out of memory [ 136.351687][ T5458] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.368025][ T1705] EXT4-fs error (device loop1): __ext4_ext_dirty:207: inode #19: comm kworker/u8:6: mark_inode_dirty error [ 136.402891][ T1705] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5780: Out of memory [ 136.436085][ T1705] EXT4-fs error (device loop1): __ext4_ext_dirty:207: inode #19: comm kworker/u8:6: mark_inode_dirty error [ 136.460358][ T1705] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5780: Out of memory [ 136.504396][ T4126] kmmpd-loop0: attempt to access beyond end of device [ 136.504396][ T4126] loop0: rw=14337, sector=128, nr_sectors = 2 limit=64 [ 136.517979][ T4126] Buffer I/O error on dev loop0, logical block 64, lost sync page write [ 136.559999][ T5823] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(9) [ 136.566563][ T5823] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 136.574194][ T5823] vhci_hcd vhci_hcd.0: Device attached [ 136.795078][ T5824] vhci_hcd: connection closed [ 136.798556][ T56] vhci_hcd: stop threads [ 136.807636][ T56] vhci_hcd: release socket [ 136.812064][ T56] vhci_hcd: disconnect device [ 136.824261][ T3344] usb 7-1: new high-speed USB device number 2 using vhci_hcd [ 136.848211][ T3344] usb 7-1: enqueue for inactive port 0 [ 136.853847][ T3344] usb 7-1: enqueue for inactive port 0 [ 136.888312][ T3344] usb 7-1: enqueue for inactive port 0 [ 136.974303][ T3344] vhci_hcd: vhci_device speed not set [ 137.473918][ T5847] netlink: 132 bytes leftover after parsing attributes in process `syz.3.496'. [ 138.025891][ T5855] loop4: detected capacity change from 0 to 4096 [ 138.042845][ T5855] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 138.318330][ T4945] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.542636][ T3422] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz0] on syz1 [ 138.646319][ T5875] 9pnet_fd: Insufficient options for proto=fd [ 138.794030][ T5878] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=8192 sclass=netlink_xfrm_socket pid=5878 comm=syz.2.512 [ 138.850796][ T5878] netlink: 'syz.2.512': attribute type 1 has an invalid length. [ 139.017468][ T5888] lo: entered allmulticast mode [ 139.048697][ T5888] tunl0: entered allmulticast mode [ 139.084837][ T5888] gre0: entered allmulticast mode [ 139.096265][ T5888] gretap0: entered allmulticast mode [ 139.105200][ T5888] erspan0: entered allmulticast mode [ 139.113270][ T5888] ip_vti0: entered allmulticast mode [ 139.156920][ T5888] ip6_vti0: entered allmulticast mode [ 139.207217][ T5888] sit0: entered allmulticast mode [ 139.233084][ T5888] ip6tnl0: entered allmulticast mode [ 139.248210][ T5888] ip6gre0: entered allmulticast mode [ 139.261136][ T5888] syz_tun: entered allmulticast mode [ 139.269445][ T5888] ip6gretap0: entered allmulticast mode [ 139.278868][ T5888] bridge0: port 2(bridge_slave_1) entered disabled state [ 139.286167][ T5888] bridge0: port 1(bridge_slave_0) entered disabled state [ 139.303989][ T5888] bridge0: entered allmulticast mode [ 139.313354][ T5888] vcan0: entered allmulticast mode [ 139.321037][ T5888] bond0: entered allmulticast mode [ 139.326193][ T5888] bond_slave_0: entered allmulticast mode [ 139.331975][ T5888] bond_slave_1: entered allmulticast mode [ 139.343845][ T5888] team0: entered allmulticast mode [ 139.349218][ T5888] team_slave_0: entered allmulticast mode [ 139.355070][ T5888] team_slave_1: entered allmulticast mode [ 139.364867][ T5888] dummy0: entered allmulticast mode [ 139.372050][ T5888] nlmon0: entered allmulticast mode [ 139.380669][ T5888] caif0: entered allmulticast mode [ 139.387589][ T5888] batadv0: entered allmulticast mode [ 139.398591][ T5888] vxcan0: entered allmulticast mode [ 139.405338][ T5888] vxcan1: entered allmulticast mode [ 139.412395][ T5888] veth0: entered allmulticast mode [ 139.422747][ T5888] veth1: entered allmulticast mode [ 139.449396][ T5888] wg0: entered allmulticast mode [ 139.456949][ T5888] wg1: entered allmulticast mode [ 139.467772][ T5888] wg2: entered allmulticast mode [ 139.475260][ T5888] veth0_to_bridge: entered allmulticast mode [ 139.489451][ T5888] veth1_to_bridge: entered allmulticast mode [ 139.501288][ T5888] veth0_to_bond: entered allmulticast mode [ 139.514473][ T5888] veth1_to_bond: entered allmulticast mode [ 139.524419][ T5888] veth0_to_team: entered allmulticast mode [ 139.537808][ T5888] veth1_to_team: entered allmulticast mode [ 139.548517][ T5888] veth0_to_batadv: entered allmulticast mode [ 139.556604][ T5888] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 139.565144][ T5888] batadv_slave_0: entered allmulticast mode [ 139.573208][ T5888] veth1_to_batadv: entered allmulticast mode [ 139.581960][ T5888] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 139.589959][ T5888] batadv_slave_1: entered allmulticast mode [ 139.599211][ T5888] xfrm0: entered allmulticast mode [ 139.606295][ T5888] veth0_to_hsr: entered allmulticast mode [ 139.614378][ T5888] hsr_slave_0: entered allmulticast mode [ 139.621802][ T5888] veth1_to_hsr: entered allmulticast mode [ 139.630042][ T5888] hsr_slave_1: entered allmulticast mode [ 139.638336][ T5888] hsr0: entered allmulticast mode [ 139.645560][ T5888] veth1_virt_wifi: entered allmulticast mode [ 139.653980][ T5888] veth0_virt_wifi: entered allmulticast mode [ 139.663229][ T5888] veth1_vlan: entered allmulticast mode [ 139.683207][ T5888] veth0_vlan: entered allmulticast mode [ 139.695410][ T5888] vlan0: entered allmulticast mode [ 139.700613][ T5888] vlan1: entered allmulticast mode [ 139.707338][ T5888] macvlan0: entered allmulticast mode [ 139.715442][ T5888] macvlan1: entered allmulticast mode [ 139.722985][ T5888] ipvlan0: entered allmulticast mode [ 139.728801][ T5888] ipvlan1: entered allmulticast mode [ 139.735432][ T5888] veth1_macvtap: entered allmulticast mode [ 139.743679][ T5888] veth0_macvtap: entered allmulticast mode [ 139.752083][ T5888] macvtap0: entered allmulticast mode [ 139.758417][ T5888] macsec0: entered allmulticast mode [ 139.765909][ T5888] geneve0: entered allmulticast mode [ 139.772721][ T5888] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.781943][ T5888] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.791994][ T5888] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.801018][ T5888] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.810528][ T5888] geneve1: entered allmulticast mode [ 139.818429][ T5888] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 139.827258][ T5888] netdevsim netdevsim4 netdevsim1: entered allmulticast mode [ 139.837037][ T5888] netdevsim netdevsim4 netdevsim2: entered allmulticast mode [ 139.851626][ T5888] netdevsim netdevsim4 netdevsim3: entered allmulticast mode [ 139.862920][ T5889] hsr_slave_0: left promiscuous mode [ 139.869025][ T5889] hsr_slave_1: left promiscuous mode [ 139.903084][ T5893] netlink: 40 bytes leftover after parsing attributes in process `syz.2.516'. [ 139.906209][ T5902] loop4: detected capacity change from 0 to 128 [ 139.937198][ T5902] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 139.952945][ T5902] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 140.024663][ T5905] bond_slave_0: entered promiscuous mode [ 140.030382][ T5905] bond_slave_1: entered promiscuous mode [ 140.109076][ T5905] macsec1: entered promiscuous mode [ 140.114401][ T5905] bond0: entered promiscuous mode [ 140.119703][ T5905] macsec1: entered allmulticast mode [ 140.125074][ T5905] bond0: entered allmulticast mode [ 140.130195][ T5905] bond_slave_0: entered allmulticast mode [ 140.136034][ T5905] bond_slave_1: entered allmulticast mode [ 140.284511][ T5913] loop3: detected capacity change from 0 to 1024 [ 140.292461][ T5913] EXT4-fs: Ignoring removed nomblk_io_submit option [ 140.319247][ T5905] bond0: left allmulticast mode [ 140.324241][ T5905] bond_slave_0: left allmulticast mode [ 140.329746][ T5905] bond_slave_1: left allmulticast mode [ 140.335258][ T5905] bond0: left promiscuous mode [ 140.340307][ T5905] bond_slave_0: left promiscuous mode [ 140.345708][ T5905] bond_slave_1: left promiscuous mode [ 140.393615][ T5913] EXT4-fs (loop3): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 140.580117][ T5906] netlink: 12 bytes leftover after parsing attributes in process `syz.4.517'. [ 140.641656][ T5913] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 140.801254][ T5906] vlan2: entered promiscuous mode [ 140.806580][ T5906] vlan2: entered allmulticast mode [ 140.808627][ T29] kauditd_printk_skb: 72 callbacks suppressed [ 140.808643][ T29] audit: type=1326 audit(1727423864.560:1285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5912 comm="syz.3.521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa7cf6bc8d0 code=0x7ffc0000 [ 140.819437][ T5913] ext4: Unknown parameter '0xffffffffffffffff18446744073709551615' [ 140.841234][ T29] audit: type=1326 audit(1727423864.570:1286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5912 comm="syz.3.521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=80 compat=0 ip=0x7fa7cf6bccb7 code=0x7ffc0000 [ 140.841268][ T29] audit: type=1326 audit(1727423864.570:1287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5912 comm="syz.3.521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa7cf6bc8d0 code=0x7ffc0000 [ 140.897152][ T29] audit: type=1326 audit(1727423864.570:1288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5912 comm="syz.3.521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7cf6bdf39 code=0x7ffc0000 [ 140.920746][ T29] audit: type=1326 audit(1727423864.570:1289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5912 comm="syz.3.521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7cf6bdf39 code=0x7ffc0000 [ 140.957335][ T29] audit: type=1326 audit(1727423864.600:1290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5912 comm="syz.3.521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa7cf6bdf39 code=0x7ffc0000 [ 140.980738][ T29] audit: type=1326 audit(1727423864.600:1291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5912 comm="syz.3.521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7cf6bdf39 code=0x7ffc0000 [ 140.982599][ T5458] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.004184][ T29] audit: type=1326 audit(1727423864.600:1292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5912 comm="syz.3.521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7cf6bdf39 code=0x7ffc0000 [ 141.036577][ T29] audit: type=1326 audit(1727423864.600:1293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5912 comm="syz.3.521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fa7cf6bdf39 code=0x7ffc0000 [ 141.059940][ T29] audit: type=1326 audit(1727423864.600:1294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5912 comm="syz.3.521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7cf6bdf39 code=0x7ffc0000 [ 141.090564][ T5916] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 141.141400][ T5921] loop3: detected capacity change from 0 to 512 [ 141.152353][ T1705] EXT4-fs error: 9059 callbacks suppressed [ 141.152368][ T1705] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5780: Out of memory [ 141.170386][ T5921] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 141.199937][ T5924] loop2: detected capacity change from 0 to 512 [ 141.234386][ T1705] EXT4-fs error (device loop1): __ext4_ext_dirty:207: inode #19: comm kworker/u8:6: mark_inode_dirty error [ 141.248653][ T5924] EXT4-fs (loop2): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 141.270414][ T5921] EXT4-fs (loop3): 1 truncate cleaned up [ 141.280523][ T5921] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 141.284667][ T3658] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5780: Out of memory [ 141.301351][ T5924] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 141.309575][ T3658] EXT4-fs error (device loop1): __ext4_ext_dirty:207: inode #19: comm syz.1.42: mark_inode_dirty error [ 141.315600][ T3659] kmmpd-loop1: attempt to access beyond end of device [ 141.315600][ T3659] loop1: rw=14337, sector=48, nr_sectors = 4 limit=11 [ 141.334117][ T3659] Buffer I/O error on dev loop1, logical block 12, lost sync page write [ 141.342650][ T1705] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5780: Out of memory [ 141.352014][ T1705] EXT4-fs error (device loop1): __ext4_ext_dirty:207: inode #19: comm kworker/u8:6: mark_inode_dirty error [ 141.384633][ T1705] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5780: Out of memory [ 141.392958][ T5458] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.393831][ T1705] EXT4-fs error (device loop1): __ext4_ext_dirty:207: inode #19: comm kworker/u8:6: mark_inode_dirty error [ 141.424820][ T1705] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5780: Out of memory [ 141.434754][ T1705] EXT4-fs error (device loop1): __ext4_ext_dirty:207: inode #19: comm kworker/u8:6: mark_inode_dirty error [ 141.448125][ T5936] loop3: detected capacity change from 0 to 512 [ 141.457167][ T5936] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 141.468219][ T5909] lo speed is unknown, defaulting to 1000 [ 141.524234][ T4826] EXT4-fs (loop2): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 141.541225][ T5936] EXT4-fs (loop3): 1 truncate cleaned up [ 141.555112][ T4126] kmmpd-loop0: attempt to access beyond end of device [ 141.555112][ T4126] loop0: rw=14337, sector=128, nr_sectors = 2 limit=64 [ 141.566208][ T5936] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 141.568683][ T4126] Buffer I/O error on dev loop0, logical block 64, lost sync page write [ 141.724752][ T5909] chnl_net:caif_netlink_parms(): no params data found [ 141.755645][ T5939] Cannot find del_set index 4 as target [ 141.883486][ T5939] dummy0: entered promiscuous mode [ 141.888761][ T5939] dummy0: entered allmulticast mode [ 142.001813][ T5939] loop2: detected capacity change from 0 to 128 [ 142.028703][ T5945] syzkaller0: entered promiscuous mode [ 142.034356][ T5945] syzkaller0: entered allmulticast mode [ 142.268849][ T5939] syz.2.526: attempt to access beyond end of device [ 142.268849][ T5939] loop2: rw=0, sector=121, nr_sectors = 119 limit=128 [ 142.366684][ T5909] bridge0: port 1(bridge_slave_0) entered blocking state [ 142.373774][ T5909] bridge0: port 1(bridge_slave_0) entered disabled state [ 142.387238][ T5458] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.416916][ T5909] bridge_slave_0: entered allmulticast mode [ 142.423722][ T5909] bridge_slave_0: entered promiscuous mode [ 142.495028][ T5909] bridge0: port 2(bridge_slave_1) entered blocking state [ 142.502125][ T5909] bridge0: port 2(bridge_slave_1) entered disabled state [ 142.562545][ T5956] loop3: detected capacity change from 0 to 2048 [ 142.647734][ T5909] bridge_slave_1: entered allmulticast mode [ 142.654823][ T5909] bridge_slave_1: entered promiscuous mode [ 142.693562][ T5909] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 142.709398][ T5909] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 142.755476][ T5962] hub 6-0:1.0: USB hub found [ 142.760225][ T5962] hub 6-0:1.0: 8 ports detected [ 142.890106][ T5909] team0: Port device team_slave_0 added [ 142.968739][ T5909] team0: Port device team_slave_1 added [ 143.013973][ T5909] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 143.020994][ T5909] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 143.047087][ T5909] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 143.100214][ T5909] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 143.107412][ T5909] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 143.133570][ T5909] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 143.175727][ T5966] capability: warning: `syz.1.532' uses deprecated v2 capabilities in a way that may be insecure [ 143.476325][ T5909] hsr_slave_0: entered promiscuous mode [ 143.487961][ T5909] hsr_slave_1: entered promiscuous mode [ 143.511496][ T5909] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 143.624148][ T5909] Cannot create hsr debugfs directory [ 143.641360][ T5978] 9pnet_fd: Insufficient options for proto=fd [ 143.653557][ T5970] loop4: detected capacity change from 0 to 512 [ 143.810340][ T5983] loop2: detected capacity change from 0 to 256 [ 143.829079][ T5970] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 143.855695][ T5983] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 143.869363][ T5970] ext4 filesystem being mounted at /27/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 143.896015][ T5983] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 143.925202][ T5970] Process accounting resumed [ 143.936727][ T5970] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 144.068288][ T5909] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.139186][ T5909] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.156018][ T4945] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.227898][ T5998] hsr_slave_0: left promiscuous mode [ 144.247508][ T5998] hsr_slave_1: left promiscuous mode [ 144.268566][ T5909] team0: Port device netdevsim1 removed [ 144.285855][ T5909] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.361840][ T5909] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.994591][ T5909] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 145.012198][ T5909] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 145.025082][ T5909] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 145.051609][ T6004] netlink: 16 bytes leftover after parsing attributes in process `syz.1.540'. [ 145.139187][ T5909] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 145.240232][ T5909] 8021q: adding VLAN 0 to HW filter on device bond0 [ 145.407598][ T5909] 8021q: adding VLAN 0 to HW filter on device team0 [ 145.485974][ T28] bridge0: port 1(bridge_slave_0) entered blocking state [ 145.493317][ T28] bridge0: port 1(bridge_slave_0) entered forwarding state [ 145.739424][ T28] bridge0: port 2(bridge_slave_1) entered blocking state [ 145.746689][ T28] bridge0: port 2(bridge_slave_1) entered forwarding state [ 145.770677][ T5909] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 145.781065][ T5909] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 145.817606][ T6013] netlink: 48 bytes leftover after parsing attributes in process `syz.2.543'. [ 145.886880][ T6024] loop4: detected capacity change from 0 to 256 [ 145.939712][ T29] kauditd_printk_skb: 83 callbacks suppressed [ 145.939746][ T29] audit: type=1400 audit(1727423869.720:1377): avc: denied { remount } for pid=6023 comm="syz.4.545" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 146.122009][ T5909] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 146.164516][ T1705] EXT4-fs error: 5136 callbacks suppressed [ 146.164531][ T1705] EXT4-fs error (device loop1): __ext4_ext_dirty:207: inode #19: comm kworker/u8:6: mark_inode_dirty error [ 146.184273][ T29] audit: type=1400 audit(1727423869.930:1378): avc: denied { create } for pid=6027 comm="syz.1.546" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 146.258980][ T1705] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5780: Out of memory [ 146.276508][ T29] audit: type=1400 audit(1727423870.010:1379): avc: denied { write } for pid=6027 comm="syz.1.546" name="urandom" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 146.320719][ T1705] EXT4-fs error (device loop1): __ext4_ext_dirty:207: inode #19: comm kworker/u8:6: mark_inode_dirty error [ 146.343078][ T1705] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5780: Out of memory [ 146.352404][ T3659] kmmpd-loop1: attempt to access beyond end of device [ 146.352404][ T3659] loop1: rw=14337, sector=48, nr_sectors = 4 limit=11 [ 146.365904][ T3659] Buffer I/O error on dev loop1, logical block 12, lost sync page write [ 146.391601][ T1705] EXT4-fs error (device loop1): __ext4_ext_dirty:207: inode #19: comm kworker/u8:6: mark_inode_dirty error [ 146.413392][ T3658] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5780: Out of memory [ 146.471972][ T3658] EXT4-fs error (device loop1): __ext4_ext_dirty:207: inode #19: comm syz.1.42: mark_inode_dirty error [ 146.522227][ T6041] netlink: 4 bytes leftover after parsing attributes in process `syz.1.548'. [ 146.531270][ T6041] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 146.596167][ T6041] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 146.603751][ T6041] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 146.614797][ T1705] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5780: Out of memory [ 146.624523][ T4126] kmmpd-loop0: attempt to access beyond end of device [ 146.624523][ T4126] loop0: rw=14337, sector=128, nr_sectors = 2 limit=64 [ 146.638178][ T4126] Buffer I/O error on dev loop0, logical block 64, lost sync page write [ 146.647772][ T1705] EXT4-fs error (device loop1): __ext4_ext_dirty:207: inode #19: comm kworker/u8:6: mark_inode_dirty error [ 146.659588][ T1705] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5780: Out of memory [ 146.774108][ T29] audit: type=1400 audit(1727423870.550:1380): avc: denied { write } for pid=6023 comm="syz.4.545" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 146.808737][ T5909] veth0_vlan: entered promiscuous mode [ 146.828867][ T5909] veth1_vlan: entered promiscuous mode [ 146.880468][ T5909] veth0_macvtap: entered promiscuous mode [ 146.889532][ T5909] veth1_macvtap: entered promiscuous mode [ 146.901799][ T5909] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 146.912906][ T5909] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 146.923518][ T5909] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 146.933992][ T5909] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 146.943857][ T5909] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 146.954304][ T5909] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 146.964207][ T5909] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 146.974749][ T5909] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 146.984633][ T5909] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 146.995121][ T5909] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 147.005162][ T5909] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 147.015661][ T5909] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 147.025570][ T5909] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 147.036078][ T5909] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 147.047648][ T5909] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 147.062379][ T6047] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 147.063219][ T6048] IPVS: sync thread started: state = MASTER, mcast_ifn = ip6gre0, syncid = 0, id = 0 [ 147.071266][ T6047] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 147.088745][ T6010] syz.2.543 (6010) used greatest stack depth: 7464 bytes left [ 147.089414][ T6047] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 147.106070][ T6047] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 147.137707][ T5909] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 147.148586][ T5909] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 147.158622][ T5909] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 147.169159][ T5909] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 147.179082][ T5909] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 147.189702][ T5909] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 147.199700][ T5909] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 147.210309][ T5909] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 147.220224][ T5909] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 147.230713][ T5909] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 147.232090][ T6051] loop4: detected capacity change from 0 to 512 [ 147.240810][ T5909] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 147.240830][ T5909] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 147.267788][ T5909] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 147.278324][ T5909] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 147.300686][ T5909] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 147.312972][ T6050] tipc: Started in network mode [ 147.318006][ T6050] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 147.326911][ T6050] tipc: Enabling of bearer rejected, failed to enable media [ 147.394966][ T5909] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.403735][ T5909] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.412556][ T5909] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.421339][ T5909] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.432042][ T29] audit: type=1400 audit(1727423871.180:1381): avc: denied { setopt } for pid=6052 comm="syz.2.551" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 147.451634][ T29] audit: type=1400 audit(1727423871.190:1382): avc: denied { write } for pid=6052 comm="syz.2.551" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 147.454852][ T6051] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 147.471233][ T29] audit: type=1326 audit(1727423871.210:1383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6054 comm="syz.1.552" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f768ea8df39 code=0x0 [ 147.507648][ T29] audit: type=1400 audit(1727423871.280:1384): avc: denied { create } for pid=6054 comm="syz.1.552" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 147.527351][ T29] audit: type=1400 audit(1727423871.280:1385): avc: denied { sys_admin } for pid=6054 comm="syz.1.552" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 147.580374][ T6051] ext4 filesystem being mounted at /31/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 147.651741][ T29] audit: type=1400 audit(1727423871.430:1386): avc: denied { mounton } for pid=5909 comm="syz-executor" path="/root/syzkaller.uDm0eu/syz-tmp" dev="sda1" ino=1972 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 147.680059][ T6069] program syz.3.554 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 147.712646][ T4945] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.841761][ T6078] syz.2.556[6078] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 147.841952][ T6078] syz.2.556[6078] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 147.883168][ T6078] syz.2.556[6078] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 147.910589][ T6080] loop3: detected capacity change from 0 to 764 [ 148.088821][ T6080] No such timeout policy "syz0" [ 148.307478][ T6095] EXT4-fs (sda1): resizing filesystem from 262144 to 262144 blocks [ 148.336739][ T6093] lo speed is unknown, defaulting to 1000 [ 149.299392][ T6121] netlink: 16 bytes leftover after parsing attributes in process `syz.3.574'. [ 149.308666][ T6121] netlink: 44 bytes leftover after parsing attributes in process `syz.3.574'. [ 149.331281][ T6121] tipc: Started in network mode [ 149.336394][ T6121] tipc: Node identity 0a94ff8cc13c, cluster identity 4711 [ 149.343711][ T6121] tipc: Enabled bearer , priority 0 [ 149.351473][ T6121] : renamed from syzkaller0 [ 149.400739][ T6121] tipc: Disabling bearer [ 149.470728][ T6118] netlink: 'syz.2.572': attribute type 10 has an invalid length. [ 149.588283][ T6118] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 149.609902][ T6118] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 150.563044][ T6100] syz.0.564 (6100) used greatest stack depth: 6408 bytes left [ 150.585542][ T6152] loop3: detected capacity change from 0 to 512 [ 150.647285][ T6154] netlink: 72 bytes leftover after parsing attributes in process `syz.0.583'. [ 150.647338][ T6152] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 150.660650][ T6154] nfs: Unknown parameter '' [ 150.700752][ T6152] ext4 filesystem being mounted at /32/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 151.127620][ T29] kauditd_printk_skb: 205 callbacks suppressed [ 151.133930][ T29] audit: type=1400 audit(1727423874.910:1592): avc: denied { read } for pid=3006 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 151.157293][ T29] audit: type=1400 audit(1727423874.910:1593): avc: denied { search } for pid=3006 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 151.178858][ T29] audit: type=1400 audit(1727423874.910:1594): avc: denied { read } for pid=3006 comm="dhcpcd" name="n61" dev="tmpfs" ino=3853 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 151.182704][ T6162] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present! [ 151.200644][ T29] audit: type=1400 audit(1727423874.910:1595): avc: denied { open } for pid=3006 comm="dhcpcd" path="/run/udev/data/n61" dev="tmpfs" ino=3853 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 151.200681][ T29] audit: type=1400 audit(1727423874.910:1596): avc: denied { getattr } for pid=3006 comm="dhcpcd" path="/run/udev/data/n61" dev="tmpfs" ino=3853 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 151.211378][ T1705] EXT4-fs error: 4708 callbacks suppressed [ 151.211395][ T1705] EXT4-fs error (device loop1): __ext4_ext_dirty:207: inode #19: comm kworker/u8:6: mark_inode_dirty error [ 151.391833][ T3659] kmmpd-loop1: attempt to access beyond end of device [ 151.391833][ T3659] loop1: rw=14337, sector=48, nr_sectors = 4 limit=11 [ 151.405537][ T3659] Buffer I/O error on dev loop1, logical block 12, lost sync page write [ 151.454748][ T5458] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 151.458249][ T29] audit: type=1400 audit(1727423875.200:1597): avc: denied { unmount } for pid=5458 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 151.508114][ T1705] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5780: Out of memory [ 151.521786][ T1705] EXT4-fs error (device loop1): __ext4_ext_dirty:207: inode #19: comm kworker/u8:6: mark_inode_dirty error [ 151.560974][ T6170] batman_adv: batadv0: Adding interface: dummy0 [ 151.567455][ T6170] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 151.592749][ T6170] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 151.695398][ T29] audit: type=1400 audit(1727423875.420:1598): avc: denied { create } for pid=6166 comm="syz.4.586" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 151.715114][ T29] audit: type=1400 audit(1727423875.420:1599): avc: denied { ioctl } for pid=6166 comm="syz.4.586" path="socket:[16445]" dev="sockfs" ino=16445 ioctlcmd=0x8922 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 151.802840][ T4126] kmmpd-loop0: attempt to access beyond end of device [ 151.802840][ T4126] loop0: rw=14337, sector=128, nr_sectors = 2 limit=64 [ 151.816626][ T4126] Buffer I/O error on dev loop0, logical block 64, lost sync page write [ 151.894097][ T6169] loop3: detected capacity change from 0 to 1024 [ 152.055547][ T29] audit: type=1400 audit(1727423875.570:1600): avc: denied { read } for pid=6173 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=343 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 152.074682][ T3658] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5780: Out of memory [ 152.078667][ T29] audit: type=1400 audit(1727423875.570:1601): avc: denied { open } for pid=6173 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=343 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 152.142816][ T6181] vlan2: entered promiscuous mode [ 152.148091][ T6181] batadv0: entered promiscuous mode [ 152.159754][ T3658] EXT4-fs error (device loop1): __ext4_ext_dirty:207: inode #19: comm syz.1.42: mark_inode_dirty error [ 152.215730][ T6169] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 152.237486][ T6181] batadv0: left promiscuous mode [ 152.254510][ T1705] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5780: Out of memory [ 152.343318][ T6169] ext4 filesystem being mounted at /33/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 152.359292][ T1705] EXT4-fs error (device loop1): __ext4_ext_dirty:207: inode #19: comm kworker/u8:6: mark_inode_dirty error [ 152.387799][ T1705] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5780: Out of memory [ 152.439719][ T1705] EXT4-fs error (device loop1): __ext4_ext_dirty:207: inode #19: comm kworker/u8:6: mark_inode_dirty error [ 152.502175][ T6194] loop4: detected capacity change from 0 to 512 [ 152.541195][ T6194] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 152.554338][ T6194] ext4 filesystem being mounted at /43/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 152.613635][ T1705] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5780: Out of memory [ 152.697418][ T5458] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 152.725937][ T6193] Process accounting resumed [ 152.781374][ T4945] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 153.636711][ T6216] lo speed is unknown, defaulting to 1000 [ 155.367115][ T6260] loop3: detected capacity change from 0 to 512 [ 155.391686][ T6260] EXT4-fs (loop3): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 155.764087][ T6268] netlink: 4 bytes leftover after parsing attributes in process `syz.0.608'. [ 155.772944][ T6268] veth1_to_bridge: entered promiscuous mode [ 155.778956][ T6268] veth1_to_bridge: entered allmulticast mode [ 155.885272][ T5458] EXT4-fs (loop3): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 155.902464][ T37] bridge0: port 2(bridge_slave_1) entered disabled state [ 156.249590][ T3658] EXT4-fs error: 1698 callbacks suppressed [ 156.255562][ T3658] EXT4-fs error (device loop1): __ext4_ext_dirty:207: inode #19: comm syz.1.42: mark_inode_dirty error [ 156.350232][ T1705] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5780: Out of memory [ 156.371975][ T1705] EXT4-fs error (device loop1): __ext4_ext_dirty:207: inode #19: comm kworker/u8:6: mark_inode_dirty error [ 156.408009][ T1705] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5780: Out of memory [ 156.431282][ T3659] kmmpd-loop1: attempt to access beyond end of device [ 156.431282][ T3659] loop1: rw=14337, sector=48, nr_sectors = 4 limit=11 [ 156.445421][ T3659] Buffer I/O error on dev loop1, logical block 12, lost sync page write [ 156.465304][ T1705] EXT4-fs error (device loop1): __ext4_ext_dirty:207: inode #19: comm kworker/u8:6: mark_inode_dirty error [ 156.490811][ T3658] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5780: Out of memory [ 156.520600][ T3658] EXT4-fs error (device loop1): __ext4_ext_dirty:207: inode #19: comm syz.1.42: mark_inode_dirty error [ 156.568813][ T1705] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5780: Out of memory [ 156.629957][ T1705] EXT4-fs error (device loop1): __ext4_ext_dirty:207: inode #19: comm kworker/u8:6: mark_inode_dirty error [ 156.721415][ T6286] loop4: detected capacity change from 0 to 256 [ 156.729418][ T6286] vfat: Unknown parameter '0xffffffffffffffff' [ 156.740030][ T1705] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5780: Out of memory [ 156.781792][ T29] kauditd_printk_skb: 320 callbacks suppressed [ 156.781869][ T29] audit: type=1400 audit(1727423880.560:1922): avc: denied { write } for pid=6283 comm="syz.0.613" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 156.844256][ T4126] kmmpd-loop0: attempt to access beyond end of device [ 156.844256][ T4126] loop0: rw=14337, sector=128, nr_sectors = 2 limit=64 [ 156.857873][ T4126] Buffer I/O error on dev loop0, logical block 64, lost sync page write [ 157.080973][ T6276] loop3: detected capacity change from 0 to 1764 [ 157.143868][ T29] audit: type=1400 audit(1727423880.590:1923): avc: denied { read } for pid=6283 comm="syz.0.613" name="event2" dev="devtmpfs" ino=221 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 157.169012][ T29] audit: type=1400 audit(1727423880.590:1924): avc: denied { open } for pid=6283 comm="syz.0.613" path="/dev/input/event2" dev="devtmpfs" ino=221 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 157.193256][ T29] audit: type=1400 audit(1727423880.700:1925): avc: denied { read } for pid=6285 comm="syz.4.614" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 157.213304][ T29] audit: type=1326 audit(1727423880.710:1926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6285 comm="syz.4.614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc76683df39 code=0x7ffc0000 [ 157.236794][ T29] audit: type=1326 audit(1727423880.710:1927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6285 comm="syz.4.614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc76683df39 code=0x7ffc0000 [ 157.263105][ T29] audit: type=1326 audit(1727423880.710:1928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6285 comm="syz.4.614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=131 compat=0 ip=0x7fc76683df39 code=0x7ffc0000 [ 157.286697][ T29] audit: type=1326 audit(1727423880.710:1929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6285 comm="syz.4.614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc76683df39 code=0x7ffc0000 [ 157.310360][ T29] audit: type=1326 audit(1727423880.710:1930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6285 comm="syz.4.614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc76683df39 code=0x7ffc0000 [ 157.334203][ T29] audit: type=1326 audit(1727423880.710:1931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6285 comm="syz.4.614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc76683df39 code=0x7ffc0000 [ 157.540044][ T6296] loop2: detected capacity change from 0 to 1024 [ 157.556918][ T6296] EXT4-fs: Ignoring removed nomblk_io_submit option [ 157.611017][ T6296] EXT4-fs (loop2): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 157.675034][ T6296] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 157.677373][ T6301] loop3: detected capacity change from 0 to 512 [ 157.741956][ T6301] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 157.776719][ T6296] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 157.808908][ T6301] ext4 filesystem being mounted at /38/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 157.858281][ T6301] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 157.925011][ T6301] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 2 with error 28 [ 157.937572][ T6301] EXT4-fs (loop3): This should not happen!! Data will be lost [ 157.937572][ T6301] [ 157.945470][ T6307] random: crng reseeded on system resumption [ 157.947388][ T6301] EXT4-fs (loop3): Total free blocks count 0 [ 157.959411][ T6301] EXT4-fs (loop3): Free/Dirty block details [ 157.965433][ T6301] EXT4-fs (loop3): free_blocks=65280 [ 157.970746][ T6301] EXT4-fs (loop3): dirty_blocks=2 [ 157.970952][ T4826] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 157.975985][ T6301] EXT4-fs (loop3): Block reservation details [ 157.976002][ T6301] EXT4-fs (loop3): i_reserved_data_blocks=2 [ 158.182414][ T5458] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.257598][ T1850] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.275998][ T6314] loop3: detected capacity change from 0 to 164 [ 158.292231][ T6314] rock: corrupted directory entry. extent=28, offset=0, size=16777216 [ 158.371361][ T4687] syz_tun (unregistering): left promiscuous mode [ 158.398423][ T6314] lo speed is unknown, defaulting to 1000 [ 158.411348][ T1850] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.530818][ T1850] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.634381][ T1850] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.660516][ T6317] lo speed is unknown, defaulting to 1000 [ 158.706569][ T1850] bridge_slave_1: left allmulticast mode [ 158.712345][ T1850] bridge_slave_1: left promiscuous mode [ 158.719148][ T1850] bridge0: port 2(bridge_slave_1) entered disabled state [ 158.728159][ T1850] bridge_slave_0: left allmulticast mode [ 158.733834][ T1850] bridge_slave_0: left promiscuous mode [ 158.739743][ T1850] bridge0: port 1(bridge_slave_0) entered disabled state [ 158.989369][ T1850] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 159.032674][ T1850] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 159.079614][ T1850] bond0 (unregistering): Released all slaves [ 159.177857][ T1850] veth1_macvtap: left promiscuous mode [ 159.183445][ T1850] veth0_macvtap: left promiscuous mode [ 159.189039][ T1850] veth1_vlan: left promiscuous mode [ 159.194391][ T1850] veth0_vlan: left promiscuous mode [ 159.331805][ T1850] team0 (unregistering): Port device team_slave_1 removed [ 159.343972][ T1850] team0 (unregistering): Port device team_slave_0 removed [ 159.397212][ T6331] lo speed is unknown, defaulting to 1000 [ 159.472665][ T6334] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 159.635672][ T6317] chnl_net:caif_netlink_parms(): no params data found [ 159.829653][ T6317] bridge0: port 1(bridge_slave_0) entered blocking state [ 159.836922][ T6317] bridge0: port 1(bridge_slave_0) entered disabled state [ 159.848241][ T6354] loop2: detected capacity change from 0 to 8192 [ 159.863828][ T6317] bridge_slave_0: entered allmulticast mode [ 159.877644][ T6317] bridge_slave_0: entered promiscuous mode [ 159.885143][ T6317] bridge0: port 2(bridge_slave_1) entered blocking state [ 159.892244][ T6317] bridge0: port 2(bridge_slave_1) entered disabled state [ 159.899661][ T6317] bridge_slave_1: entered allmulticast mode [ 159.906339][ T6317] bridge_slave_1: entered promiscuous mode [ 159.912598][ T6358] 9pnet_fd: Insufficient options for proto=fd [ 159.947591][ T6317] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 159.962655][ T6317] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 160.038546][ T6317] team0: Port device team_slave_0 added [ 160.052549][ T1850] bridge_slave_1: left allmulticast mode [ 160.058309][ T1850] bridge_slave_1: left promiscuous mode [ 160.064088][ T1850] bridge0: port 2(bridge_slave_1) entered disabled state [ 160.073638][ T1850] bridge_slave_0: left allmulticast mode [ 160.079670][ T1850] bridge_slave_0: left promiscuous mode [ 160.085758][ T1850] bridge0: port 1(bridge_slave_0) entered disabled state [ 160.155306][ T3422] hid-generic 0004:0009:0009.0004: item fetching failed at offset 3/5 [ 160.163668][ T3422] hid-generic 0004:0009:0009.0004: probe with driver hid-generic failed with error -22 [ 160.276781][ T1850] gretap0 (unregistering): left promiscuous mode [ 160.379848][ T1850] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 160.397576][ T1850] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 160.418961][ T1850] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 160.429766][ T1850] bond0 (unregistering): Released all slaves [ 160.439075][ T6317] team0: Port device team_slave_1 added [ 160.453540][ T6378] netlink: 'syz.0.634': attribute type 10 has an invalid length. [ 160.477682][ T6378] team0: Device hsr_slave_0 failed to register rx_handler [ 160.536513][ T6317] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 160.543604][ T6317] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 160.569930][ T6317] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 160.603040][ T6397] can0: slcan on ttyS3. [ 160.697278][ T1850] tipc: Left network mode [ 160.703581][ T6317] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 160.710800][ T6317] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 160.737416][ T6317] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 160.795332][ T6400] can0 (unregistered): slcan off ttyS3. [ 160.854625][ T1850] hsr_slave_0: left promiscuous mode [ 160.868747][ T1850] hsr_slave_1: left promiscuous mode [ 160.886814][ T1850] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 160.894322][ T1850] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 160.938230][ T1850] veth1_macvtap: left promiscuous mode [ 160.944100][ T1850] veth0_macvtap: left promiscuous mode [ 160.950181][ T1850] veth1_vlan: left promiscuous mode [ 160.955883][ T1850] veth0_vlan: left promiscuous mode [ 161.210015][ T6431] tmpfs: Unknown parameter 'mpoeTinreave' [ 161.256701][ T1705] EXT4-fs error: 8160 callbacks suppressed [ 161.256721][ T1705] EXT4-fs error (device loop1): __ext4_ext_dirty:207: inode #19: comm kworker/u8:6: mark_inode_dirty error [ 161.278519][ T1705] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5780: Out of memory [ 161.288079][ T1705] EXT4-fs error (device loop1): __ext4_ext_dirty:207: inode #19: comm kworker/u8:6: mark_inode_dirty error [ 161.302213][ T3658] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5780: Out of memory [ 161.312529][ T3658] EXT4-fs error (device loop1): __ext4_ext_dirty:207: inode #19: comm syz.1.42: mark_inode_dirty error [ 161.326532][ T1705] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5780: Out of memory [ 161.336084][ T1705] EXT4-fs error (device loop1): __ext4_ext_dirty:207: inode #19: comm kworker/u8:6: mark_inode_dirty error [ 161.350178][ T1705] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5780: Out of memory [ 161.359752][ T1705] EXT4-fs error (device loop1): __ext4_ext_dirty:207: inode #19: comm kworker/u8:6: mark_inode_dirty error [ 161.373823][ T1705] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5780: Out of memory [ 161.439305][ T1850] team0 (unregistering): Port device team_slave_1 removed [ 161.459782][ T1850] team0 (unregistering): Port device team_slave_0 removed [ 161.474231][ T3659] kmmpd-loop1: attempt to access beyond end of device [ 161.474231][ T3659] loop1: rw=14337, sector=48, nr_sectors = 4 limit=11 [ 161.487791][ T3659] Buffer I/O error on dev loop1, logical block 12, lost sync page write [ 161.562548][ T6317] hsr_slave_0: entered promiscuous mode [ 161.580442][ T6317] hsr_slave_1: entered promiscuous mode [ 161.597194][ T6317] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 161.605058][ T6317] Cannot create hsr debugfs directory [ 161.631856][ T6430] lo speed is unknown, defaulting to 1000 [ 161.867470][ T4126] kmmpd-loop0: attempt to access beyond end of device [ 161.867470][ T4126] loop0: rw=14337, sector=128, nr_sectors = 2 limit=64 [ 161.881172][ T4126] Buffer I/O error on dev loop0, logical block 64, lost sync page write [ 161.894491][ T29] kauditd_printk_skb: 92 callbacks suppressed [ 161.894507][ T29] audit: type=1400 audit(1727423885.670:2024): avc: denied { write } for pid=6437 comm="syz.2.644" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 161.922690][ T29] audit: type=1400 audit(1727423885.670:2025): avc: denied { add_name } for pid=6437 comm="syz.2.644" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 161.943494][ T29] audit: type=1400 audit(1727423885.680:2026): avc: denied { create } for pid=6437 comm="syz.2.644" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 161.965077][ T29] audit: type=1400 audit(1727423885.680:2027): avc: denied { associate } for pid=6437 comm="syz.2.644" name="file1" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 162.014197][ T29] audit: type=1400 audit(1727423885.790:2028): avc: denied { unmount } for pid=4826 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 162.038673][ T6455] syz.3.646[6455] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 162.038812][ T6455] syz.3.646[6455] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 162.053962][ T6441] netlink: 4 bytes leftover after parsing attributes in process `syz.0.645'. [ 162.074785][ T6455] syz.3.646[6455] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 162.079449][ T6455] serio: Serial port pts0 [ 162.423216][ T6317] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 162.442338][ T6317] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 162.473130][ T6317] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 162.487491][ T6317] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 162.618726][ T6317] 8021q: adding VLAN 0 to HW filter on device bond0 [ 162.644862][ T6317] 8021q: adding VLAN 0 to HW filter on device team0 [ 162.668633][ T5262] bridge0: port 1(bridge_slave_0) entered blocking state [ 162.675929][ T5262] bridge0: port 1(bridge_slave_0) entered forwarding state [ 162.703199][ T5262] bridge0: port 2(bridge_slave_1) entered blocking state [ 162.710633][ T5262] bridge0: port 2(bridge_slave_1) entered forwarding state [ 162.805760][ T6317] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 162.911980][ T6317] veth0_vlan: entered promiscuous mode [ 162.927597][ T6317] veth1_vlan: entered promiscuous mode [ 162.949766][ T6317] veth0_macvtap: entered promiscuous mode [ 162.960899][ T6317] veth1_macvtap: entered promiscuous mode [ 162.975512][ T6317] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 162.986112][ T6317] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 162.996032][ T6317] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 163.006645][ T6317] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 163.016564][ T6317] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 163.027121][ T6317] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 163.037083][ T6317] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 163.047862][ T6317] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 163.058001][ T6317] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 163.069323][ T6317] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 163.079462][ T6317] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 163.090023][ T6317] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 163.099961][ T6317] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 163.110803][ T6317] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 163.123440][ T6317] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 163.141417][ T6317] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 163.152089][ T6317] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 163.162134][ T6317] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 163.173083][ T6317] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 163.183737][ T6317] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 163.194445][ T6317] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 163.204317][ T6317] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 163.214972][ T6317] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 163.225027][ T6317] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 163.236279][ T6317] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 163.246484][ T6317] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 163.257143][ T6317] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 163.267037][ T6317] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 163.278141][ T6317] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 163.288395][ T6317] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 163.298976][ T6317] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 163.313616][ T6317] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 163.328358][ T6523] netlink: 'syz.3.649': attribute type 10 has an invalid length. [ 163.371929][ T8] hid-generic 0004:0009:0009.0005: item fetching failed at offset 3/5 [ 163.396468][ T6523] team0: Device hsr_slave_0 failed to register rx_handler [ 163.404424][ T8] hid-generic 0004:0009:0009.0005: probe with driver hid-generic failed with error -22 [ 163.445645][ T6317] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.455630][ T6317] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.466196][ T6317] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.475610][ T6317] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.511556][ T29] audit: type=1400 audit(1727423887.290:2029): avc: denied { mounton } for pid=6317 comm="syz-executor" path="/root/syzkaller.JKHtkC/syz-tmp" dev="sda1" ino=1974 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 163.537594][ T29] audit: type=1400 audit(1727423887.320:2030): avc: denied { mounton } for pid=6317 comm="syz-executor" path="/dev/binderfs" dev="devtmpfs" ino=454 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 163.645125][ T6543] netlink: 12 bytes leftover after parsing attributes in process `syz.3.651'. [ 163.684008][ T29] audit: type=1400 audit(1727423887.460:2031): avc: denied { create } for pid=6548 comm="syz.1.652" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 163.704223][ T29] audit: type=1400 audit(1727423887.460:2032): avc: denied { write } for pid=6548 comm="syz.1.652" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 163.749554][ T29] audit: type=1400 audit(1727423887.530:2033): avc: denied { append } for pid=6551 comm="syz.3.653" name="001" dev="devtmpfs" ino=123 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 163.964737][ T6558] netlink: 56 bytes leftover after parsing attributes in process `syz.1.655'. [ 164.216094][ T6564] netlink: 'syz.1.658': attribute type 10 has an invalid length. [ 164.223946][ T6564] netlink: 55 bytes leftover after parsing attributes in process `syz.1.658'. [ 164.398203][ T6566] syz.2.659[6566] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 164.398366][ T6566] syz.2.659[6566] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 164.411866][ T6566] syz.2.659[6566] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 165.491936][ T6571] netlink: 'syz.2.661': attribute type 10 has an invalid length. [ 165.521319][ T6571] team0: Device hsr_slave_0 failed to register rx_handler [ 165.531128][ T6572] netlink: 9 bytes leftover after parsing attributes in process `syz.3.662'. [ 165.537765][ T5105] hid-generic 0004:0009:0009.0006: item fetching failed at offset 3/5 [ 165.551029][ T5105] hid-generic 0004:0009:0009.0006: probe with driver hid-generic failed with error -22 [ 165.565171][ T6572] 0: renamed from hsr_slave_1 (while UP) [ 165.580080][ T6572] 0: entered allmulticast mode [ 165.589683][ T6572] A link change request failed with some changes committed already. Interface c0 may have been left with an inconsistent configuration, please check. [ 165.624546][ T6574] netlink: 'syz.3.662': attribute type 10 has an invalid length. [ 165.632513][ T6574] netlink: 40 bytes leftover after parsing attributes in process `syz.3.662'. [ 165.641689][ T6574] hsr0: entered promiscuous mode [ 165.646746][ T6574] hsr0: entered allmulticast mode [ 165.652036][ T6574] hsr_slave_0: entered allmulticast mode [ 165.660311][ T6574] bridge0: port 3(hsr0) entered blocking state [ 165.666616][ T6574] bridge0: port 3(hsr0) entered disabled state [ 165.676208][ T6574] bridge0: port 3(hsr0) entered blocking state [ 165.682485][ T6574] bridge0: port 3(hsr0) entered forwarding state [ 165.960022][ T46] ================================================================== [ 165.968135][ T46] BUG: KCSAN: assert: race in dequeue_entities+0x6df/0x760 [ 165.975361][ T46] [ 165.977697][ T46] race at unknown origin, with assert no writes to 0xffff8881042131e8 of 4 bytes by task 46 on cpu 1: [ 165.988658][ T46] dequeue_entities+0x6df/0x760 [ 165.993550][ T46] pick_next_task_fair+0x7d/0x410 [ 165.998607][ T46] __schedule+0x284/0x940 [ 166.003061][ T46] schedule+0x55/0xc0 [ 166.007067][ T46] worker_thread+0x5f4/0x6f0 [ 166.011682][ T46] kthread+0x1d1/0x210 [ 166.015784][ T46] ret_from_fork+0x4b/0x60 [ 166.020220][ T46] ret_from_fork_asm+0x1a/0x30 [ 166.025014][ T46] [ 166.027351][ T46] value changed: 0x00000000 -> 0x00000001 [ 166.033110][ T46] [ 166.035443][ T46] Reported by Kernel Concurrency Sanitizer on: [ 166.041611][ T46] CPU: 1 UID: 0 PID: 46 Comm: kworker/1:1H Tainted: G W 6.11.0-syzkaller-11558-g075dbe9f6e3c #0 [ 166.053636][ T46] Tainted: [W]=WARN [ 166.057626][ T46] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 166.067899][ T46] Workqueue: 0x0 (kblockd) [ 166.072452][ T46] ================================================================== [ 166.264247][ T1705] EXT4-fs error: 16445 callbacks suppressed [ 166.264267][ T1705] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5780: Out of memory [ 166.279572][ T1705] EXT4-fs error (device loop1): __ext4_ext_dirty:207: inode #19: comm kworker/u8:6: mark_inode_dirty error [ 166.291349][ T1705] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5780: Out of memory [ 166.300688][ T1705] EXT4-fs error (device loop1): __ext4_ext_dirty:207: inode #19: comm kworker/u8:6: mark_inode_dirty error [ 166.312653][ T1705] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5780: Out of memory [ 166.321957][ T1705] EXT4-fs error (device loop1): __ext4_ext_dirty:207: inode #19: comm kworker/u8:6: mark_inode_dirty error [ 166.333736][ T3658] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5780: Out of memory [ 166.343281][ T3658] EXT4-fs error (device loop1): __ext4_ext_dirty:207: inode #19: comm syz.1.42: mark_inode_dirty error [ 166.355984][ T1705] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5780: Out of memory [ 166.365494][ T1705] EXT4-fs error (device loop1): __ext4_ext_dirty:207: inode #19: comm kworker/u8:6: mark_inode_dirty error [ 166.504300][ T3659] kmmpd-loop1: attempt to access beyond end of device [ 166.504300][ T3659] loop1: rw=14337, sector=48, nr_sectors = 4 limit=11 [ 166.517860][ T3659] Buffer I/O error on dev loop1, logical block 12, lost sync page write [ 166.904462][ T4126] kmmpd-loop0: attempt to access beyond end of device [ 166.904462][ T4126] loop0: rw=14337, sector=128, nr_sectors = 2 limit=64 [ 166.918070][ T4126] Buffer I/O error on dev loop0, logical block 64, lost sync page write [ 169.092564][ T46] ================================================================== [ 169.100817][ T46] BUG: KCSAN: assert: race in dequeue_entities+0x6df/0x760 [ 169.108156][ T46] [ 169.110502][ T46] race at unknown origin, with assert no writes to 0xffff8881042131e8 of 4 bytes by task 46 on cpu 1: [ 169.121572][ T46] dequeue_entities+0x6df/0x760 [ 169.126459][ T46] pick_next_task_fair+0x7d/0x410 [ 169.131605][ T46] __schedule+0x284/0x940 [ 169.135966][ T46] schedule+0x55/0xc0 [ 169.139971][ T46] worker_thread+0x5f4/0x6f0 [ 169.144587][ T46] kthread+0x1d1/0x210 [ 169.148679][ T46] ret_from_fork+0x4b/0x60 [ 169.153114][ T46] ret_from_fork_asm+0x1a/0x30 [ 169.157899][ T46] [ 169.160230][ T46] value changed: 0x00000000 -> 0x00000001 [ 169.166043][ T46] [ 169.168371][ T46] Reported by Kernel Concurrency Sanitizer on: [ 169.174532][ T46] CPU: 1 UID: 0 PID: 46 Comm: kworker/1:1H Tainted: G W 6.11.0-syzkaller-11558-g075dbe9f6e3c #0 [ 169.186355][ T46] Tainted: [W]=WARN [ 169.190165][ T46] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 169.200237][ T46] Workqueue: 0x0 (kblockd) [ 169.204759][ T46] ================================================================== [ 171.274295][ T1705] EXT4-fs error: 26241 callbacks suppressed [ 171.274314][ T1705] EXT4-fs error (device loop1): __ext4_ext_dirty:207: inode #19: comm kworker/u8:6: mark_inode_dirty error [ 171.292103][ T1705] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5780: Out of memory [ 171.301410][ T1705] EXT4-fs error (device loop1): __ext4_ext_dirty:207: inode #19: comm kworker/u8:6: mark_inode_dirty error [ 171.313265][ T1705] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5780: Out of memory [ 171.322819][ T1705] EXT4-fs error (device loop1): __ext4_ext_dirty:207: inode #19: comm kworker/u8:6: mark_inode_dirty error [ 171.335029][ T1705] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5780: Out of memory [ 171.345205][ T1705] EXT4-fs error (device loop1): __ext4_ext_dirty:207: inode #19: comm kworker/u8:6: mark_inode_dirty error [ 171.356838][ T3658] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5780: Out of memory [ 171.366111][ T3658] EXT4-fs error (device loop1): __ext4_ext_dirty:207: inode #19: comm syz.1.42: mark_inode_dirty error [ 171.378233][ T1705] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5780: Out of memory [ 171.544211][ T3659] kmmpd-loop1: attempt to access beyond end of device [ 171.544211][ T3659] loop1: rw=14337, sector=48, nr_sectors = 4 limit=11 [ 171.557719][ T3659] Buffer I/O error on dev loop1, logical block 12, lost sync page write [ 171.944933][ T4126] kmmpd-loop0: attempt to access beyond end of device [ 171.944933][ T4126] loop0: rw=14337, sector=128, nr_sectors = 2 limit=64 [ 171.958654][ T4126] Buffer I/O error on dev loop0, logical block 64, lost sync page write [ 173.051310][ T46] ================================================================== [ 173.059421][ T46] BUG: KCSAN: assert: race in dequeue_entities+0x6df/0x760 [ 173.066738][ T46] [ 173.069074][ T46] race at unknown origin, with assert no writes to 0xffff8881042131e8 of 4 bytes by task 46 on cpu 1: [ 173.080022][ T46] dequeue_entities+0x6df/0x760 [ 173.084956][ T46] pick_next_task_fair+0x7d/0x410 [ 173.090012][ T46] __schedule+0x284/0x940 [ 173.094369][ T46] schedule+0x55/0xc0 [ 173.098375][ T46] worker_thread+0x5f4/0x6f0 [ 173.103419][ T46] kthread+0x1d1/0x210 [ 173.107508][ T46] ret_from_fork+0x4b/0x60 [ 173.111937][ T46] ret_from_fork_asm+0x1a/0x30 [ 173.116824][ T46] [ 173.119152][ T46] value changed: 0x00000000 -> 0x00000001 [ 173.124876][ T46] [ 173.127732][ T46] Reported by Kernel Concurrency Sanitizer on: [ 173.133901][ T46] CPU: 1 UID: 0 PID: 46 Comm: kworker/1:1H Tainted: G W 6.11.0-syzkaller-11558-g075dbe9f6e3c #0 [ 173.145763][ T46] Tainted: [W]=WARN [ 173.149580][ T46] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 173.159655][ T46] Workqueue: 0x0 (kblockd) [ 173.164187][ T46] ================================================================== [ 173.724213][ T3434] unregister_netdevice: waiting for vcan0 to become free. Usage count = 2