last executing test programs: 30.441884609s ago: executing program 4 (id=344): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f00000000c0)=ANY=[], 0x8) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) rseq(&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x3}, 0x20, 0x0, 0x0) move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffff9c, 0x0, 0x0) pivot_root(0x0, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x441, 0x0) 29.466271884s ago: executing program 4 (id=358): unshare(0x62040200) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0xc, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000580)='sched_switch\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0x17, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b703000000000000850000008300", @ANYRES32, @ANYBLOB="0000000000000000b702000040000000850000008600000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7020000000000008500000017000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x141a82, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0xfca804a0, 0x0, 0x0, 0x0, 0x0, 0x800d, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000540), 0x84) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r2, 0x58, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYRESHEX=r2], &(0x7f0000000040)='GPL\x00', 0x80000, 0x0, 0x0, 0x0, 0x0, '\x00', r3, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) dup(0xffffffffffffffff) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x40047451, 0x2000000c) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/anycast6\x00') close_range(r4, 0xffffffffffffffff, 0x0) 29.063599966s ago: executing program 4 (id=364): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=@getchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x24}}, 0x0) r6 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_msfilter(r6, 0x0, 0x29, &(0x7f0000000400)=ANY=[], 0x20) bpf$MAP_CREATE(0x0, 0x0, 0x48) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000010003b1500"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012800a000100767863616e000000180002801400010000000000", @ANYRES8=r2], 0x48}}, 0x0) 28.732933828s ago: executing program 4 (id=366): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file2\x00', 0x200000, &(0x7f00000000c0)={[{@dioread_lock}, {@noblock_validity}, {@lazytime}, {@noblock_validity}]}, 0xfc, 0x564, &(0x7f00000008c0)="$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") r0 = open(&(0x7f0000000040)='./file2\x00', 0x181042, 0x0) write$P9_RREADDIR(r0, &(0x7f0000000140)={0x2a, 0x29, 0x2, {0x5, [{{0x80, 0x3, 0x8}, 0x6, 0x8, 0x7, './file0'}]}}, 0x2a) sendfile(r0, r0, &(0x7f0000000240), 0x7f03) creat(&(0x7f0000000080)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) socket$packet(0x11, 0x2, 0x300) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f00000004c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB='<\x00\x00\b', @ANYRES16=r2, @ANYBLOB="000429bd7000fddbdf25210000000500200000000000050020000000000009001f00706879300000000009001f007068793300000000"], 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x8004) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b40)={{0x14}, [], {0x14}}, 0x28}}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@printk={@p, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x71}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000004c0)='kmem_cache_free\x00', r3}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) link(0x0, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00') writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000040)="dc", 0x1}], 0x8) 28.446418189s ago: executing program 4 (id=368): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x200000, 0x108) sendmsg$OSF_MSG_REMOVE(r2, 0x0, 0x20000009) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000180)=@generic={&(0x7f0000000500)='./file0\x00', r2}, 0x18) socket$can_raw(0x1d, 0x3, 0x1) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_serviced\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000440)={'#! ', '', [{0x20, ',\\$%'}]}, 0x9) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000006, 0x10012, r3, 0x1000) setsockopt$MRT_ADD_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd2, &(0x7f0000000080)={@multicast2, @private=0xa010101, 0x1, "0e00116cda9204feffffffffffffff1152cb4b62c718271000", 0xfffffffe, 0x73e5, 0x2, 0x7fffffff}, 0x3c) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000600)={&(0x7f0000000000)=ANY=[@ANYRES16=r4, @ANYRESOCT=r1], 0x54}, 0x1, 0x0, 0x0, 0x930a36a927fef9b0}, 0x4000000) r5 = getpid() setreuid(0xee00, 0x0) r6 = syz_pidfd_open(r5, 0x0) setns(r6, 0x24020000) syz_clone3(&(0x7f00000008c0)={0x15340180, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[r5], 0x1}, 0x58) 27.277522385s ago: executing program 4 (id=379): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000002004007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r4 = perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r4, 0x4008240b, &(0x7f00000000c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x8}}) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f00000000c0)=0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r6) sendmsg$NFC_CMD_DEV_UP(r6, 0x0, 0x0) connect$nfc_llcp(r2, &(0x7f0000000000)={0x27, r5, 0x4, 0x4, 0x0, 0x0, "f235cd041ecfd237d48b9fc39aa09025f026b0634b6f82bded015a1b2cc967eff95fd0b6841d40ae65cd6ddd03de31eba0328a09ff4f717c7b1b1c65e750c8", 0x1d}, 0x60) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000340)={0x0, @nfc={0x27, r5, 0x0, 0x5}, @isdn={0x22, 0x0, 0x6, 0x7f, 0x6}, @vsock={0x28, 0x0, 0xffffffff}, 0x401, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000000), 0xc, 0x1, 0x7f}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xc0c8, &(0x7f0000000400)={[{@journal_dev={'journal_dev', 0x3d, 0x8004}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x9}}, {@nouser_xattr}], [{@seclabel}]}, 0xfb, 0x4b3, &(0x7f0000001300)="$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") 27.277183325s ago: executing program 32 (id=379): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000002004007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r4 = perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r4, 0x4008240b, &(0x7f00000000c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x8}}) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f00000000c0)=0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r6) sendmsg$NFC_CMD_DEV_UP(r6, 0x0, 0x0) connect$nfc_llcp(r2, &(0x7f0000000000)={0x27, r5, 0x4, 0x4, 0x0, 0x0, "f235cd041ecfd237d48b9fc39aa09025f026b0634b6f82bded015a1b2cc967eff95fd0b6841d40ae65cd6ddd03de31eba0328a09ff4f717c7b1b1c65e750c8", 0x1d}, 0x60) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000340)={0x0, @nfc={0x27, r5, 0x0, 0x5}, @isdn={0x22, 0x0, 0x6, 0x7f, 0x6}, @vsock={0x28, 0x0, 0xffffffff}, 0x401, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000000), 0xc, 0x1, 0x7f}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xc0c8, &(0x7f0000000400)={[{@journal_dev={'journal_dev', 0x3d, 0x8004}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x9}}, {@nouser_xattr}], [{@seclabel}]}, 0xfb, 0x4b3, &(0x7f0000001300)="$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") 5.066888265s ago: executing program 2 (id=582): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000040000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000180)='sys_enter\x00', r0}, 0x40) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) syncfs(r1) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r2, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1001}, 0xc) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), r5) getsockname$packet(r5, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0xf1d, 0x1, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0xc}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}}, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000001c0)={r0, r6, 0x25, 0x12, @void}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000031c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prctl$PR_SET_NAME(0xf, &(0x7f0000000a40)='GPL\x00') setsockopt$inet_buf(r3, 0x0, 0x10, &(0x7f0000000080)="170000000200020000ffbe8c5ee17688a2003c000303000afdff02a257fc5ad90200bb6a880000d6c9db0000db00000200df01800a0000ebfc0607bdff59100ac45761547a681f009cee4a5acba400001fb700674f00c88ebbf9315033bf79ac2dfc061f15003901dee2ffffffffe9000000000000000062068f5ee50ce5af9b1c568302ffff02ff0331dd3bab0840024f0298e9e90539062a80e605007f71174ab498a30b3e5a1b47b63a6323ded2aa084cd36276a3afff", 0xb8) sendto$inet(r3, 0x0, 0x0, 0x20024094, &(0x7f0000000040)={0x2, 0x0, @dev}, 0x10) 4.921452076s ago: executing program 2 (id=583): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket(0x11, 0x3, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x35, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, 0x0, 0x2, 0x0) writev(r0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r2, 0xc0a85320, &(0x7f0000001400)={{0x80}, 'port1\x00', 0xa0bf83d7d46f2cbb}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r2, 0x40505330, &(0x7f00000000c0)={0x800000, 0x0, 0x0, 0x0, 0x0, 0x6}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000005e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$F2FS_IOC_MOVE_RANGE(r3, 0x541b, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffff00}) close_range(r4, 0xffffffffffffffff, 0x0) 4.850126286s ago: executing program 2 (id=585): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000340)=@framed={{}, [@printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000080)='./file0\x00', 0x804498, &(0x7f0000001980)=ANY=[@ANYBLOB='shortname=winnt,uni_xlate=1,shortname=mixed,rodir,shortname=lower,utf8=0,uni_xlate=1,dos1xfloppy,check=strict,uni_xlate=1,shortname=win95,iocharset=iso8859-15,codepage=855,shortname=lower,nonumtail=0,nonumtail=0,uni_xlate=0,uni_xlate=0,iocharset=iso8859-6,shortname=lower,nnonumtail=1,shortname=win95,rodir,utf8=0,nnonumtail=1,shortname=lower,shortname=mixed,iocharset=ascii,appraise,uid>', @ANYBLOB="1880d396e7134e75872921883b53c77d0feb2b23455558cd3154f8cc077408245bf283ef5d7a6addc700447386d27ae3f18a643ddc3db5ed663493786a50333eef483786f4480a09e884bb757fe171cba190f2c08e8a4cf9f3f6df4fc6ef61936f17aac7fcb2e917d6f6a86b0e0285e2a69c36a808f638849528581a8b89c27d7c0815317896bf6d6934c9af3f11a005d9b6cd6d5571d97ac32f1661975ccf248689acc4a21a4dbb229b104ddd2b77965a41e4ed2f51eb1d8ff0d5ef5706b71c", @ANYBLOB="0200"], 0x6, 0x2d3, &(0x7f0000000a40)="$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") getdents64(0xffffffffffffffff, &(0x7f0000000f80)=""/4096, 0x1000) 4.480173038s ago: executing program 0 (id=597): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffc}]}) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000d00)='sched_switch\x00', r0}, 0x10) r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r2 = fcntl$dupfd(r1, 0x406, r1) r3 = getuid() quotactl$Q_GETFMT(0xffffffff80000401, &(0x7f0000000200)=@md0, r3, &(0x7f0000000340)) write$sndseq(r2, &(0x7f00000003c0), 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x1208002, &(0x7f0000000100)={[{@grpquota}, {@delalloc}, {@resuid}, {@debug}, {@dioread_nolock}, {}, {@nomblk_io_submit}, {@noauto_da_alloc}]}, 0x1, 0x5d8, &(0x7f00000005c0)="$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") prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000700)=@raw={'raw\x00', 0x3c1, 0x3, 0x4b0, 0x2e0, 0x940c, 0x3002, 0x2e0, 0x2c0, 0x3e0, 0x3d8, 0x3d8, 0x3e0, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2e0, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x200000, 0x0, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x2, 0x0, 'syz0\x00'}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@initdev={0xac, 0x1e, 0x80, 0x0}, 'virt_wifi0\x00', {0x6dbf}}}}, {{@uncond, 0x0, 0xd0, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0x0, 0x4, 0x1}, {0xffffffffffffffff, 0x3, 0x6}, 0x5, 0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x510) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000100000000000020000000000000000000"], 0x50) getrandom(0x0, 0x0, 0x0) 4.366362568s ago: executing program 0 (id=589): ioperm(0xb, 0x9, 0xfffffffffffffff1) r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$EVIOCGABS3F(r1, 0x8018457f, &(0x7f0000000400)=""/4096) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) ioctl$SG_GET_REQUEST_TABLE(r1, 0x2275, &(0x7f00000018c0)) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0xff14) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000200)='illinois\x00', 0x9) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r2, &(0x7f0000000000)='3', 0x1, 0x0, 0x0, 0x0) write$binfmt_elf64(r2, &(0x7f0000001580)=ANY=[], 0x40e2) add_key$user(&(0x7f00000003c0), 0x0, 0x0, 0x0, 0x0) 3.850968061s ago: executing program 0 (id=595): mkdir(&(0x7f0000000080)='./file0\x00', 0x80) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000140), 0x1e) syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000280)='./file0\x00', 0x414, &(0x7f0000000000)=ANY=[], 0x1, 0x2a1, &(0x7f0000000f40)="$eJzs3MFqE18Ux/Hzb/pv0pQ2EURQUA+60c3QxgfQIC2IAaU2RV0IUzvRkDEpM0MlIjYbcetzFJfuBPUFuhE37t0VQXDThTjiTKZN2rSmbdLE9PuBck9y7o+5bdNyUuis3339pFRwjYLpyVBCZUikJhsi6T9V3X/1dSioR6RRTS6P/fhy9s69+zezudz0rOpMdu5KRlUnzr9/+vzNhY/e2PzbiXdxWUs/WP+e+bp2au30+q+5x0VXi66WK56aulCpeOaCbeli0S0Zqrdty3QtLZZdy2nqF+zK0lJVzfLieHLJsVxXzXJVS1ZVvYp6TlXNR2axrIZh6HhSjrfhNvbkV2dnzeyubT/W0ROh60ZbPek42VrrZn71CM4EAAD6zN7zfzjr7z7/5+bDtcPzvwjzf5fUmh79Zf7HQHCcrJms//w2Y/4HAAAAAAAAAAAAAAAAAAAAAOBfsOH7Kd/3U9EafcRFJCEi0eNenxPdccDv/9UeHRcd1vCPewkR+9VyfjkfrmE/W5Ci2GLJpKTkZ/B6qAvrmRu56UkNpOWDvVLPryznYxKP8pF0q/y5E1NhXpvz/0uy8foZScnJ1tfPtMyPyKWLDXlDUvLpoVTElsXgdb2VfzGlev1Wblt+NNgHAAAAAMAgMHTTjvfvQT/YkJCd/TC/j78PbHt/PSxn2rlFJQAAAAAAODS3+qxk2rblHKCIi8gh4oNaxKQvjrGtuCYifXCMoyoSIhI+oweJf9uMt5Xy29gzLCI9/7Lso+j1byYAAAAAnbY19O8j9PllF08EAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMDx0+79wKL9O1pRY494w+ViR/4JAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAH3kdwAAAP//R8IgDA==") openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000400000000dfffff1918120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 2.858438466s ago: executing program 3 (id=607): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1e, 0xc, 0x0, &(0x7f0000000200)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) open(0x0, 0x81, 0x0) flistxattr(r0, &(0x7f0000000040)=""/65, 0x41) r1 = gettid() r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) readv(r2, &(0x7f0000001340)=[{&(0x7f0000001280)=""/151, 0x97}], 0x1) readv(r2, &(0x7f0000001240), 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$KDFONTOP_COPY(r2, 0x4b72, &(0x7f0000000140)={0x3, 0x1, 0x1e, 0x4, 0x90, 0x0}) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0xb, 0xe, @empty, 0x7fff800}, 0x1c) listen(0xffffffffffffffff, 0x101) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) add_key$user(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xffffffffffffffff) add_key$user(&(0x7f0000000080), &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 2.536964747s ago: executing program 2 (id=608): ioperm(0xb, 0x9, 0xfffffffffffffff1) r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$EVIOCGABS3F(r1, 0x8018457f, &(0x7f0000000400)=""/4096) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) ioctl$SG_GET_REQUEST_TABLE(r1, 0x2275, &(0x7f00000018c0)) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0xff14) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000200)='illinois\x00', 0x9) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r2, &(0x7f0000000000)='3', 0x1, 0x0, 0x0, 0x0) write$binfmt_elf64(r2, &(0x7f0000001580)=ANY=[], 0x40e2) add_key$user(&(0x7f00000003c0), 0x0, 0x0, 0x0, 0x0) 2.534314387s ago: executing program 0 (id=620): syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x0, &(0x7f0000000c00), 0x1, 0xb80, &(0x7f0000000c40)="$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") r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000140), 0xf2002) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0x40a85323, &(0x7f0000000180)={{0x7, 0x2}, 'port1\x00', 0x8c, 0x101020, 0x9, 0x4, 0x0, 0xfffffffe, 0xffffffff, 0x0, 0x1, 0x7f}) socket$inet(0x2, 0x5, 0x5) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000002780), 0x80000, 0x0) ppoll(&(0x7f00000027c0)=[{r2, 0x2000}], 0x1, 0x0, 0x0, 0x0) read$eventfd(r2, &(0x7f0000002880), 0x8) r3 = syz_open_dev$loop(&(0x7f0000000000), 0x8, 0x42180) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f0000000300)=0xc) ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000280)={'\x00', 0x2, 0x0, 0x9, 0x7, 0x7, r4}) pwrite64(r1, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xffc, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x107842, 0x42) sendfile(r5, r5, 0x0, 0x80000000) 2.292489359s ago: executing program 5 (id=614): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) modify_ldt$write(0x1, &(0x7f0000000300)={0x4, 0x20001000, 0x2000, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000240)='kfree\x00', r0}, 0x10) setxattr$trusted_overlay_upper(0x0, &(0x7f00000001c0), 0x0, 0x835, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000900), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x1000, &(0x7f0000000600)={0xffffffffffffffff}, 0x106, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r1, &(0x7f0000000580)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x7, @loopback, 0xfffffffe}, r2}}, 0x30) write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f00000004c0)={0x7, 0x8, 0xfa00, {r2, 0xd4}}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) write$sndseq(r3, &(0x7f0000000000)=[{0x1e, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}], 0x1001a) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f0000000200)) 2.245947849s ago: executing program 5 (id=617): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x27, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1200000006000000040000000600000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00#'], 0x48) r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000340), r2) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100fbdfd09172c182c60400000014000500000000000000000000000000000000010800020005000000140006"], 0x4c}}, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./bus\x00', 0x3000000, &(0x7f0000000500)=ANY=[@ANYBLOB="6e6f6e756d7461696c3d302c646973636172640061727365743d63703835322c757466383d202c6e6f6e756d7461696c3d302c6e6f6e75617461696c3d302c7574663c3d302c696f6368619615f9a9d8bc34fd234143727365743d69736f383835392d322c756e695f786c6174653d312c73686f72746e616d653d77696e6e742c756e695f786c6174653d312c757466383d312c756e695f786c6174653d302c756e695f786c6174653d302c73686f72746e616d653d6d697865642c726f6469722c756e695f786c"], 0x1, 0x379, &(0x7f0000000a00)="$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") open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0xc, 0x8, 0xc, 0xffffffff, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0), &(0x7f00000003c0), 0x5, r6}, 0x38) sendmsg$NFT_BATCH(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000380)=ANY=[@ANYBLOB="14000000100001008c7181cb6190636d0000000a20000000000a03000000000000000000010000000900010073797a300000000060000000160a01010000000000000000010000000900020073797a30000000000900010073797a300000000008000740000000032c0003800800024000000000080001400000000018000380140001006e657464657673696d306c275cb7a330000000000000140000001000010000000000000000000000000a"], 0xa8}, 0x1, 0x0, 0x0, 0x4080}, 0x0) 2.142000949s ago: executing program 2 (id=618): shmget(0x1, 0x4000, 0x200, &(0x7f0000ffb000/0x4000)=nil) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x16, 0x5, &(0x7f00000004c0)=ANY=[@ANYRES8=0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r0}, 0x18) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x2) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r1, 0x8982, &(0x7f0000000000)={0x1, 'vlan1\x00', {}, 0xfe01}) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000180)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x230) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000017b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'team_slave_1\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="88000000110001010000000000000000000000e3", @ANYRES32=r7, @ANYBLOB="000000000000000008000d0000000000050021000900000014000300767863616e31000000000000000000000a000200aaaaaaaaaaaa000004002b8014001400677265300000000000000000000000000800250003000000050010000900000008000d00ffff00000500210002000000"], 0x88}}, 0x0) 1.99843212s ago: executing program 5 (id=619): socket$nl_route(0x10, 0x3, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x66, 0x0, 0x0, 0x0, 0x0, 0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40000000}, 0x0, 0x1, 0x6, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000180), 0xfea7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r2 = socket$rxrpc(0x21, 0x2, 0xa) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="2d01080000c582b61bdd04878800080103"], 0x2c}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r5, @ANYBLOB="ff830500000700ffffff", @ANYRES32=r2], 0x4}}, 0x0) sendfile(r4, r3, 0x0, 0x100000002) 1.98011528s ago: executing program 2 (id=621): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000340)=@framed={{}, [@printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000080)='./file0\x00', 0x804498, &(0x7f0000001980)=ANY=[@ANYBLOB='shortname=winnt,uni_xlate=1,shortname=mixed,rodir,shortname=lower,utf8=0,uni_xlate=1,dos1xfloppy,check=strict,uni_xlate=1,shortname=win95,iocharset=iso8859-15,codepage=855,shortname=lower,nonumtail=0,nonumtail=0,uni_xlate=0,uni_xlate=0,iocharset=iso8859-6,shortname=lower,nnonumtail=1,shortname=win95,rodir,utf8=0,nnonumtail=1,shortname=lower,shortname=mixed,iocharset=ascii,appraise,uid>', @ANYBLOB="1880d396e7134e75872921883b53c77d0feb2b23455558cd3154f8cc077408245bf283ef5d7a6addc700447386d27ae3f18a643ddc3db5ed663493786a50333eef483786f4480a09e884bb757fe171cba190f2c08e8a4cf9f3f6df4fc6ef61936f17aac7fcb2e917d6f6a86b0e0285e2a69c36a808f638849528581a8b89c27d7c0815317896bf6d6934c9af3f11a005d9b6cd6d5571d97ac32f1661975ccf248689acc4a21a4dbb229b104ddd2b77965a41e4ed2f51eb1d8ff0d5ef5706b71c", @ANYBLOB="0200"], 0x6, 0x2d3, &(0x7f0000000a40)="$eJzs3b1rJGUYAPBnNrMfarFbWInggBZWx+Vamw1yB2Iqjy1OCw3eHUh2ES4Q8QPXq8TOxtK/QBD8Q2zsLAVbwc4IgZGZncl+ZNhsJBvx8vsVyZuZ55n3ed+ZJNPkyQcvTw4fZvH46Re/Ra+XRGvYjThJYhCtqH0VS4bfBgDwf3aS5/FnPtNw+tdv1uT2tlgXALA9F/z+r6TlxwdFxE/XVxsAsB33H7z79t7+/t13sqwX9yZfH4+SiCg+z87vPY6PYhyP4nb04zSifFFoR/m2UAzv5Xk+TbPCIF6bTI9HRebk/Z+r6+/9EVHm70Y/BuWhs7eNMv+t/bu72cxC/rSo4/lq/mGRfyf68eJZ8lL+nYb8GHXi9VcX6r8V/fjlw/g4xvGwLGKe/+Vulr2Zf/fX5+8V5RX5yfR41C3j5vKdevLpNd8jAAAAAAAAAAAAAAAAAAAAAACePbeq3jndKPv3FIeq/js7p8UX7chqg+X+PLP8pL7QvD9QtPI8n+bxfd1f53aWZXkVOM9P46W0aiwIAAAAAAAAAAAAAAAAAAAAN9zRp58dHozHj55cyaDuBpBGxN/3I/7tdYYLR16J9cHdas6D8bhVDZdj0sUjsVPHJBFryygWcUXbctHguXM1V4MffmzMKlZ0lEbTqd7Fk7ab57rk4JP2bB8bY+qn6/Agad7D7lnxveLGxeqN60Tz7O1YOdKp7+dqcP0obracTuOp/qW3pfNCOZiuiYlk3ffFG78vLSeJleBO2XGjMb1dDZp2Y/ZsbPQ8R2+Wfv5nRaJbBwAAAAAAAAAAAAAAAAAAbNX8r38bTj5dm9rKu1srCwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACu1fz//28ySJeTN8jqxJOj/2ptAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA3Bz/BAAA//8a6VGq") getdents64(0xffffffffffffffff, &(0x7f0000000f80)=""/4096, 0x1000) 1.97825053s ago: executing program 3 (id=622): socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, 0x0, &(0x7f00000002c0)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000001f80)=ANY=[@ANYBLOB], 0x48) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x80800, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000300)={0xffffffffffffffff, &(0x7f0000000240), 0x0}, 0x20) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0x24}}, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x202000, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) pipe2(0x0, 0x4800) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x6) 1.88107646s ago: executing program 5 (id=623): sendmsg$NFC_CMD_GET_TARGET(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000040)={0x14, 0x0, 0x4}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000140), 0xffffffffffffffff) syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r0}, 0x0, &(0x7f0000000040)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) syz_emit_ethernet(0x12, &(0x7f00000004c0)={@multicast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @void, {@llc={0x4, {@llc={0x42, 0x42, "f3", "f4"}}}}}, 0x0) r2 = fsopen(&(0x7f0000000000)='sysfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) renameat2(r3, &(0x7f0000000200)='./bus\x00', r3, &(0x7f0000000280)='./file0\x00', 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000002c0)={0x44, r5, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0xf, 0xa9, @name2}]}, 0x44}, 0x1, 0x0, 0x0, 0x41}, 0x0) sendmsg$DEVLINK_CMD_RATE_NEW(r4, &(0x7f0000000180)={0xfffffffffffffffc, 0x0, &(0x7f0000000000)={&(0x7f0000000740)={0x4c, r5, 0x8, 0x70bd2c, 0x25dfdbfe, {}, [@DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0x3}, @DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0x9}, @DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0x3}, @DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0x574}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x3}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000840}, 0x4000040) 1.88057248s ago: executing program 3 (id=634): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) 1.563055862s ago: executing program 0 (id=624): signalfd(0xffffffffffffffff, &(0x7f0000000c80)={[0xfffffffffffffffe]}, 0x8) r0 = syz_io_uring_setup(0x4169, &(0x7f00000010c0)={0x0, 0x0, 0x10100, 0x0, 0x200000}, &(0x7f0000000480), &(0x7f0000000000)=0x0) syz_io_uring_setup(0xa94, &(0x7f0000000280), &(0x7f0000000340)=0x0, &(0x7f00000005c0)) syz_io_uring_submit(r2, r1, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) execve(&(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0) r3 = inotify_init() inotify_add_watch(r3, &(0x7f0000000200)='./file0\x00', 0x2) r4 = open(&(0x7f0000000000)='./file0/bus\x00', 0x0, 0x0) getdents64(r4, &(0x7f00000006c0)=""/73, 0x49) creat(&(0x7f0000001140)='.\x00', 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) io_uring_enter(r0, 0x48e9, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000100)=ANY=[@ANYRESDEC], 0x0, 0x91, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00'}) write$tun(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0xfdef) rseq(&(0x7f0000000300), 0x20, 0x0, 0x0) 1.238700384s ago: executing program 1 (id=626): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000c00)=ANY=[], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000540)='{\x00', 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) symlink(&(0x7f0000001780)='./file0/../file0\x00', 0x0) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x1000) bind$inet(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x30, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) r3 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x4c001) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r3, 0xc0105303, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x1e8, 0x0, 0x25, 0x148, 0x340, 0x60, 0x438, 0x2a8, 0x2a8, 0x438, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xb8, 0x0, {0x200003ae, 0x7f00}}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x6, 'syz0\x00'}}}, {{@ip={@broadcast, @multicast1, 0x0, 0x0, 'veth1_to_bond\x00', 'dvmrp1\x00', {0xff}}, 0x0, 0x70, 0x98}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x9, 0x8001}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x248) 1.145697644s ago: executing program 1 (id=627): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1a, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r1, 0x0, 0x199}, 0x18) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000140)=[@in6={0xa, 0x100, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7}], 0x1c) r2 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r2, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000140)=[@in6={0xa, 0x100, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7}], 0x1c) fsmount(0xffffffffffffffff, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x34, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0}, 0x10, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$USBDEVFS_IOCTL(r3, 0x80045505, &(0x7f0000000040)=@usbdevfs_connect) r4 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x1ff, 0x1501) ioctl$USBDEVFS_SETCONFIGURATION(r4, 0x80045505, &(0x7f0000000000)=0x1) 1.115769965s ago: executing program 5 (id=628): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000f3ff0000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000001240)='./file0\x00', 0x0, &(0x7f0000002480)=ANY=[], 0x1, 0x11f4, &(0x7f0000001280)="$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") r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000001afc180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000000900008500000004"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000700)={&(0x7f0000000140)='cq_modify\x00', r0, 0x0, 0xfffffffffffffff8}, 0x18) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000080)={0x0, 0xffffffffffffff53, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="a00000000001010400000000000000000a0000003c0001802c0001801400030000000000000000000000000000000000000000000000000000010c00028005000100000000003c0002802c000180140003000000000000000000000200000000000014000400fe8000000000000000000000000000aa0c000280050001"], 0xa0}, 0x1, 0xfffff000}, 0x0) 1.086980404s ago: executing program 1 (id=630): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000001040)={'gre0\x00', &(0x7f0000001000)={'syztnl2\x00', 0x0, 0x0, 0xa000, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x2f, 0x0, @empty, @rand_addr=0x3}}}}) socket(0x0, 0x3, 0x6) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, 0x0, &(0x7f00000002c0)=@secondary) r1 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kfree\x00', r2}, 0x10) unshare(0x22020400) syz_io_uring_setup(0x5bae, &(0x7f0000000340)={0x0, 0x7150, 0x2, 0x0, 0x2d7}, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0b0000000700000001", @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/24], 0x48) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'veth1_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r4, {0x0, 0xfff2}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) 984.240175ms ago: executing program 3 (id=631): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='stack\x00') bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000240)='kfree\x00', r2}, 0x10) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, 0x0, 0x0) bind$inet6(r3, 0x0, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f00000000c0)='illinois\x00', 0x9) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r4}, 0x10) preadv2(r1, &(0x7f0000000580)=[{&(0x7f00000004c0)=""/142, 0x8e}], 0x1, 0x9e2, 0x7, 0x0) getsockopt$inet_int(r0, 0x0, 0x13, 0x0, &(0x7f00000001c0)=0x4) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @multicast2, 0x0, 0x0, 'lblcr\x00', 0x1b, 0xffffffff, 0x3e}, 0x2c) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0100000000000000000003000000400001802c0004001400010002000000ac1414aa00000000000000001400020002000000e000000200000000000004000d0001007564703a73"], 0x54}}, 0x0) 890.110536ms ago: executing program 1 (id=632): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) socket$nl_xfrm(0x10, 0x3, 0x6) statx(0xffffffffffffffff, 0x0, 0x800, 0x100, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f0000000080)={0x0, 0x1, 0x2, 0xff, 0x9, 0xbf15}, &(0x7f00000000c0)=0x14) socketpair(0x22, 0x2, 0x26, &(0x7f0000000180)) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'netdevsim0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x6, 0x3, &(0x7f0000000240)=@framed, &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r4, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 841.927726ms ago: executing program 3 (id=633): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x801, 0x84) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000280)) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000340)={[{@nojournal_checksum}, {}]}, 0x0, 0x4ee, &(0x7f0000000c40)="$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") r1 = syz_io_uring_setup(0x10d, &(0x7f0000000140), &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x29c780}) io_uring_enter(r1, 0x3516, 0x0, 0x0, 0x0, 0xfffffdcf) close(0x3) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) 832.594416ms ago: executing program 5 (id=635): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r0}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000001afc180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b703000000090000850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000040)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') r5 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x0) mmap(&(0x7f000001a000/0x3000)=nil, 0x3000, 0xf, 0x11012, r5, 0x0) pread64(r4, &(0x7f000001a240)=""/102400, 0x19000, 0x0) syz_clone(0x81088000, 0x0, 0x0, 0x0, 0x0, 0x0) 744.433006ms ago: executing program 3 (id=636): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x3, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000500)={'#! ', './file0', [{0x20, '/proc/self\x00'}, {0x20, '/proc/self\x00'}, {0x20, '/proc/self\x00'}, {0x20, '&](&*+/,'}, {0x20, '-'}, {0x20, '\xe6&-::.)'}, {0x20, '/proc/self\x00'}, {0x20, '/proc/self\x00'}], 0xa, "bb58884a34e8b5389b0b6c9f8d078fd036029f3286e30fc1e23e53fa93fca8448f02a8d6d5676c66c23ef56d75361f62ca7784b95bc4625b0bc5b9b277f2e8b6679fc830c4c7436c01dfc36e9530b8527881b69bb629ac26ebd7737fbcfe4b6fec8aaaed37408cee528e5a57fea46037b2f7ae794d2a8c38c9b01ebf31ad6bcc7b2d98aa9f0df0abe7e7dfafaf24645ac42905c0568202422a1102a67c0817e939cc3c1977488875c57d96bd5c038bc7f6b0289bcfff6cb0e2a5ef7e01d48f42cdbd3271e0781f813edb7ca0b156bef92210088d8d826a6014f5e9bc77adc9f2e38bddfb7fbcdbd459dc"}, 0x144) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f0000000340)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r3, 0xc0182101, &(0x7f0000000180)={r4}) chroot(&(0x7f00000001c0)='./file0\x00') ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f0000000480)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f0000000080)={r5, 0x3, r3, 0x5}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mprotect(&(0x7f0000ff2000/0xc000)=nil, 0xc000, 0x4) 457.724938ms ago: executing program 0 (id=637): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r1 = dup(r0) write$P9_RLERRORu(r1, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) syz_mount_image$ext4(&(0x7f0000000500)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f00000004c0)={[{}]}, 0x1, 0x453, &(0x7f0000001040)="$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") open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x185102, 0x0) ftruncate(r2, 0x2007ffb) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x13, r2, 0x0) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) r3 = open(&(0x7f0000000f00)='./bus\x00', 0x161142, 0x6) r4 = open(&(0x7f0000007f80)='./bus\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x1000000201005) write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$binfmt_elf64(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) stat(&(0x7f0000000740)='./file0\x00', 0x0) 457.522428ms ago: executing program 1 (id=638): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000540)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r0}, 0x18) migrate_pages(0x0, 0x6, 0x0, &(0x7f0000001340)=0x1) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000540)='./file2\x00', 0x808d, &(0x7f00000000c0), 0xfe, 0x504, &(0x7f0000000a80)="$eJzs3c9vG1kdAPDvTOJukmZxFjgsK7Gs2EVJBHWSDd2NOCwgITitBCz3EhI3iuLEVeLsNtEKUvUPQEIIkLjAiQsSfwAI9cQZIVWCOwIEQtDCgUNhkO1xmho7cVX/QM7nI73OD9v5fl/ceZ733sQTwKX1SkQsRESWZdliRBTz/Wle4qRZ6s97+OD9jXpJIsve+VsSSXPfTOtnPZcvr+Yvm4qIr34p4hvJ/8Y9ODreWa9Uyvv59lJtN3mUZcfXtnfXt8pb5b3V1ZU31t5cu7623Jd6zkXEW1/40/e+/ZMvvvXLT733+xt/Wfhms4JN9Xr1JVCbZtULjd9Fy2RE7A8i2IhMNmrYdH3EuQAAcL76+f4HI+LjEbEYxZhonM0BAAAA4yT77Gw8SprzfwAAAMB4SiNiNpK01LyMM2YjTUul5jW8H46ZtFI9qH0yK56OF8xFIb25XSkv59cOzEUhqW+v5NfYtrZfb9tejYgXIuK7xenGdmmjWtkc5cAHAAAAXCJXH/f/G38O+89is/8PAAAAjJm5UScAAAAADJz+PwAAAIw//X8AAAAYa19+++16yVr3v9589+hwp/rutc3ywU5p93CjtFHdv1Xaqla3Gt/Zt3vRz6tUq7c+HXuHt5dq5YPa0sHR8Y3d6uFe7cb2E7fABgAAAIbohY/d+10SESefmU5b+67ky0JENnH2yZNDTw8YoLR9x3mjdH8cbC7AcE2MOgFgZJ76lP5XvxhMIsDQFUadADByF7UDXYcFft3/XAAAgMGY/8jp/H+jxJn5/2SkmQGDls//J451uHzM/8Pl1cv83+LdISQCDF3hvDMAnQIYe2kPh/qzz/9n2VMlBQAA9N1soyRpKe8HzEaalkoRzzduC1BIbm5XyssR8YGI+G2x8Fx9e6XxysTwAAAAAAAAAAAAAAAAAAAAAAAAAAD0KMuSyAAAAICxFpH+Ocnv/zVffG22fXzgSvKvYmMZEe/98J3v316v1fZX6vv/frq/9oN8/+ujGMEAAAAA2rX66a1+PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD008MH72+0yjDj/vXzETHXKf5kTDWWU1GIiJl/JDF55nVJREz0If7JnYh4sVP8pJ5WzOVZtMdPI2J6xPGv9iE+XGb36u3P5zodf2m80lh2Pv4m8/Ksurd/6Wn7N9Gl/Xu+xxgv3f/ZUtf4dyJemuzc/rTiJ13iv9pj/K9/7fi422PZjyPmO37+JE/EWqrt3lo6ODq+tr27vlXeKu+trq68sfbm2vW15aWb25Vy/m/HGN/56M//c179Z7rEn7ug/q/1WP9/37/94EPN1ULbQ4X4UZYtvNr5/X+x+RtqOBu/9dn3ifxzoL4931o/aa6f9fJPf/PyefXf7FL/i97/hR7rv/iVu3/o8akAwBAcHB3vrFcq5f1xW7ny/5GGlfrKdAwx6Hp0fijN/8sPre7fygMOI9ZU32ONqEECAAAG5vFJfz6BAAAAAAAAAAAAAAAAAAAAAAzdRV8DFn34OrH2mCejqSoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwLn+GwAA//+6zNbf") msgsnd(0x0, 0x0, 0x401, 0x0) msgsnd(0x0, 0x0, 0x401, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000020000807b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r2}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x19, 0x3, 0x7ffc0001}]}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=ANY=[@ANYBLOB="6c000000100003042cbd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000003c00128009000100766c616e000000002c00028006000100000000001c0003800c00010000010000800000000c00010000000000ffffff7f0400048008000a00", @ANYRES32=r5, @ANYBLOB="08000500", @ANYRES32=r5], 0x6c}, 0x1, 0xba01}, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 0s ago: executing program 1 (id=639): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x7fff, 0x7, 0x20400, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000040), &(0x7f0000000280)='%pI4 \x00'}, 0x20) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x1, 0x0, 0x7ffc1ffb}]}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kmem_cache_free\x00', r1}, 0x10) mkdir(&(0x7f0000000200)='./bus\x00', 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70200000000010085000000860000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000000)={'netdevsim0\x00', &(0x7f0000000400)=@ethtool_flash={0x33, 0x0, '.\x00'}}) r6 = dup(r2) write$UHID_INPUT(r6, &(0x7f0000004000)={0xf, {"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", 0x1000}}, 0x1006) chroot(&(0x7f0000000000)='./bus\x00') r7 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r7, &(0x7f0000000040)=[{&(0x7f0000000280)="580000001400192340834b80040d8c560a0677bc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000014001080800418e00000004fcff", 0x58}], 0x1) kernel console output (not intermixed with test programs): 12 [ 32.552856][ T3597] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 32.639780][ T3603] loop0: detected capacity change from 0 to 512 [ 32.664105][ T3604] loop1: detected capacity change from 0 to 512 [ 32.674693][ T3604] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 32.685591][ T3597] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 32.709829][ T3604] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 32.722516][ T3604] ext4 filesystem being mounted at /7/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 32.759527][ T3597] ext4 filesystem being mounted at /10/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 32.794944][ T3603] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 32.826675][ T3603] EXT4-fs (loop0): orphan cleanup on readonly fs [ 32.850419][ T3603] EXT4-fs warning (device loop0): ext4_enable_quotas:7156: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 32.897479][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.908340][ T3603] EXT4-fs (loop0): Cannot turn on quotas: error -117 [ 32.918370][ T3603] EXT4-fs error (device loop0): ext4_orphan_get:1389: inode #16: comm syz.0.45: casefold flag without casefold feature [ 32.932033][ T3603] EXT4-fs error (device loop0): ext4_orphan_get:1394: comm syz.0.45: couldn't read orphan inode 16 (err -117) [ 32.947427][ T3603] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 33.147716][ T35] tipc: Node number set to 1 [ 33.398797][ T3609] syz.2.46 uses obsolete (PF_INET,SOCK_PACKET) [ 33.426596][ T29] kauditd_printk_skb: 425 callbacks suppressed [ 33.426610][ T29] audit: type=1326 audit(1732134228.211:566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3594 comm="syz.3.43" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f08b84957e7 code=0x7ffc0000 [ 33.455982][ T29] audit: type=1326 audit(1732134228.211:567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3594 comm="syz.3.43" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f08b843a1a9 code=0x7ffc0000 [ 33.479467][ T29] audit: type=1326 audit(1732134228.211:568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3594 comm="syz.3.43" exe="/root/syz-executor" sig=0 arch=c000003e syscall=278 compat=0 ip=0x7f08b849e819 code=0x7ffc0000 [ 33.534696][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.670261][ T3618] loop4: detected capacity change from 0 to 512 [ 33.684964][ T3618] ext4: Bad value for 'resgid' [ 33.689802][ T3618] ext4: Bad value for 'resgid' [ 33.706343][ T3616] loop2: detected capacity change from 0 to 8192 [ 33.712742][ T29] audit: type=1326 audit(1732134228.291:569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3594 comm="syz.3.43" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f08b84957e7 code=0x7ffc0000 [ 33.735870][ T29] audit: type=1326 audit(1732134228.291:570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3594 comm="syz.3.43" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f08b843a1a9 code=0x7ffc0000 [ 33.758898][ T29] audit: type=1326 audit(1732134228.291:571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3594 comm="syz.3.43" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08b849e819 code=0x7ffc0000 [ 33.782098][ T29] audit: type=1326 audit(1732134228.291:572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3594 comm="syz.3.43" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08b849e819 code=0x7ffc0000 [ 33.805325][ T29] audit: type=1400 audit(1732134228.301:573): avc: denied { write } for pid=3608 comm="syz.2.46" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 33.825461][ T29] audit: type=1400 audit(1732134228.301:574): avc: denied { read } for pid=3608 comm="syz.2.46" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 33.845670][ T29] audit: type=1400 audit(1732134228.341:575): avc: denied { mounton } for pid=3613 comm="syz.3.49" path="/2/file0" dev="tmpfs" ino=28 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 33.878405][ T3618] loop4: detected capacity change from 0 to 256 [ 33.878746][ T3321] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.901655][ T3618] FAT-fs (loop4): Directory bread(block 64) failed [ 33.918437][ T3618] FAT-fs (loop4): Directory bread(block 65) failed [ 33.926007][ T3618] FAT-fs (loop4): Directory bread(block 66) failed [ 33.933786][ T3625] capability: warning: `syz.1.53' uses deprecated v2 capabilities in a way that may be insecure [ 33.955261][ T3618] FAT-fs (loop4): Directory bread(block 67) failed [ 33.961846][ T3618] FAT-fs (loop4): Directory bread(block 68) failed [ 33.968609][ T3618] FAT-fs (loop4): Directory bread(block 69) failed [ 33.983695][ T3618] FAT-fs (loop4): Directory bread(block 70) failed [ 33.990871][ T3618] FAT-fs (loop4): Directory bread(block 71) failed [ 34.009103][ T3618] FAT-fs (loop4): Directory bread(block 72) failed [ 34.023957][ C0] hrtimer: interrupt took 26442 ns [ 34.052926][ T3618] FAT-fs (loop4): Directory bread(block 73) failed [ 34.094194][ T3635] netlink: 'syz.3.56': attribute type 4 has an invalid length. [ 34.105835][ T3618] process 'syz.4.52' launched './file0' with NULL argv: empty string added [ 34.121557][ T3618] syz.4.52: attempt to access beyond end of device [ 34.121557][ T3618] loop4: rw=524288, sector=1736, nr_sectors = 32 limit=256 [ 34.164011][ T3618] syz.4.52: attempt to access beyond end of device [ 34.164011][ T3618] loop4: rw=0, sector=1736, nr_sectors = 8 limit=256 [ 34.282402][ T3642] bridge0: port 3(bond0) entered blocking state [ 34.288814][ T3642] bridge0: port 3(bond0) entered disabled state [ 34.295414][ T3642] bond0: entered allmulticast mode [ 34.300611][ T3642] bond_slave_0: entered allmulticast mode [ 34.306385][ T3642] bond_slave_1: entered allmulticast mode [ 34.313358][ T3642] bond0: entered promiscuous mode [ 34.318447][ T3642] bond_slave_0: entered promiscuous mode [ 34.324282][ T3642] bond_slave_1: entered promiscuous mode [ 34.337301][ T3648] loop3: detected capacity change from 0 to 1024 [ 34.344080][ T3642] bridge0: port 3(bond0) entered blocking state [ 34.350354][ T3642] bridge0: port 3(bond0) entered forwarding state [ 34.357865][ T3646] @ÿ: renamed from vlan0 (while UP) [ 34.363586][ T3648] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 34.376430][ T3640] netlink: 'syz.0.58': attribute type 39 has an invalid length. [ 34.376826][ T3648] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 34.392309][ T3648] EXT4-fs (loop3): orphan cleanup on readonly fs [ 34.401004][ T3648] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5837: Corrupt filesystem [ 34.411075][ T3648] EXT4-fs (loop3): Remounting filesystem read-only [ 34.419314][ T3648] EXT4-fs (loop3): 1 orphan inode deleted [ 34.426107][ T3648] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 34.438199][ T3648] SELinux: (dev loop3, type ext4) getxattr errno 5 [ 34.446793][ T3648] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.492860][ T3651] sctp: [Deprecated]: syz.4.62 (pid 3651) Use of struct sctp_assoc_value in delayed_ack socket option. [ 34.492860][ T3651] Use struct sctp_sack_info instead [ 34.535869][ T3653] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 34.546507][ T3642] loop3: detected capacity change from 0 to 1764 [ 34.619454][ T3653] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 34.688071][ T3653] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 34.727082][ T3665] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 34.730191][ T3662] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(10) [ 34.742306][ T3662] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 34.749954][ T3662] vhci_hcd vhci_hcd.0: Device attached [ 34.788999][ T3666] vhci_hcd: cannot find a urb of seqnum 0 max seqnum 0 [ 34.799295][ T28] vhci_hcd: stop threads [ 34.803580][ T28] vhci_hcd: release socket [ 34.808118][ T28] vhci_hcd: disconnect device [ 34.814240][ T3653] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 34.907833][ T3653] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.938799][ T3653] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.952078][ T3653] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.963195][ T3653] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.238400][ T3678] netlink: 24 bytes leftover after parsing attributes in process `syz.2.72'. [ 35.494433][ T3678] netlink: 132 bytes leftover after parsing attributes in process `syz.2.72'. [ 35.504212][ T3676] netlink: 28 bytes leftover after parsing attributes in process `syz.3.71'. [ 35.513117][ T3676] netlink: 28 bytes leftover after parsing attributes in process `syz.3.71'. [ 35.540015][ T3678] netlink: 16 bytes leftover after parsing attributes in process `syz.2.72'. [ 35.584561][ T3676] netlink: 28 bytes leftover after parsing attributes in process `syz.3.71'. [ 35.593374][ T3676] netlink: 28 bytes leftover after parsing attributes in process `syz.3.71'. [ 35.630553][ T3684] loop2: detected capacity change from 0 to 736 [ 35.664332][ T3676] Zero length message leads to an empty skb [ 35.680184][ T3684] ISOFS: unable to read i-node block [ 35.688751][ T3687] loop1: detected capacity change from 0 to 512 [ 35.883740][ T3694] SELinux: Context system_u:object_r:semanage_exec_t:s0 is not valid (left unmapped). [ 35.903181][ T3700] program syz.1.80 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 35.920517][ T3699] loop2: detected capacity change from 0 to 164 [ 35.943775][ T3699] Unable to read rock-ridge attributes [ 35.966314][ T3699] Unable to read rock-ridge attributes [ 35.979886][ T3706] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 36.000961][ T3707] loop3: detected capacity change from 0 to 512 [ 36.017784][ T3706] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 36.032339][ T3707] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 36.056733][ T3707] EXT4-fs (loop3): orphan cleanup on readonly fs [ 36.063391][ T3707] EXT4-fs warning (device loop3): ext4_enable_quotas:7156: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 36.098777][ T3707] EXT4-fs (loop3): Cannot turn on quotas: error -117 [ 36.106181][ T3717] loop2: detected capacity change from 0 to 1024 [ 36.106963][ T3707] EXT4-fs error (device loop3): ext4_orphan_get:1389: inode #16: comm syz.3.82: casefold flag without casefold feature [ 36.112896][ T3717] ext4: Bad value for 'max_dir_size_kb' [ 36.137775][ T3706] team0: Port device netdevsim1 removed [ 36.145996][ T3706] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 36.174053][ T3707] EXT4-fs error (device loop3): ext4_orphan_get:1394: comm syz.3.82: couldn't read orphan inode 16 (err -117) [ 36.187257][ T3707] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 36.219425][ T3706] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 36.430134][ T3706] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.469649][ T3706] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.516553][ T3706] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.559013][ T3706] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.788544][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.815197][ T3727] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 36.821773][ T3727] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 36.829269][ T3727] vhci_hcd vhci_hcd.0: Device attached [ 36.916363][ T3739] loop1: detected capacity change from 0 to 2048 [ 37.037752][ T3739] Alternate GPT is invalid, using primary GPT. [ 37.044205][ T3739] loop1: p2 p3 p7 [ 37.053997][ T3393] vhci_hcd: vhci_device speed not set [ 37.062784][ T3746] wireguard0: entered promiscuous mode [ 37.068310][ T3746] wireguard0: entered allmulticast mode [ 37.134016][ T3393] usb 9-1: new high-speed USB device number 2 using vhci_hcd [ 37.830402][ T3761] loop1: detected capacity change from 0 to 512 [ 37.843782][ T3728] vhci_hcd: connection reset by peer [ 37.850426][ T11] vhci_hcd: stop threads [ 37.854730][ T11] vhci_hcd: release socket [ 37.859149][ T11] vhci_hcd: disconnect device [ 37.869460][ T3761] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 37.882085][ T3761] ext4 filesystem being mounted at /18/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 37.896798][ T3761] netlink: 20 bytes leftover after parsing attributes in process `syz.1.102'. [ 37.928629][ T3761] ªªªªªª: renamed from vlan0 (while UP) [ 37.946503][ T3321] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.041161][ T3781] syzkaller0: entered allmulticast mode [ 38.102906][ T3783] syzkaller0 (unregistering): left allmulticast mode [ 38.252025][ T3788] hub 6-0:1.0: USB hub found [ 38.257089][ T3788] hub 6-0:1.0: 8 ports detected [ 38.480908][ T29] kauditd_printk_skb: 452 callbacks suppressed [ 38.480923][ T29] audit: type=1400 audit(1732134233.261:1023): avc: denied { create } for pid=3786 comm="syz.3.110" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 38.577043][ T29] audit: type=1400 audit(1732134233.291:1024): avc: denied { setopt } for pid=3786 comm="syz.3.110" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 39.005469][ T29] audit: type=1400 audit(1732134233.781:1025): avc: denied { write } for pid=3792 comm="syz.4.111" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 39.074069][ T29] audit: type=1400 audit(1732134233.831:1026): avc: denied { create } for pid=3796 comm="syz.0.113" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 39.093490][ T29] audit: type=1400 audit(1732134233.831:1027): avc: denied { bind } for pid=3796 comm="syz.0.113" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 39.112802][ T29] audit: type=1400 audit(1732134233.831:1028): avc: denied { node_bind } for pid=3796 comm="syz.0.113" saddr=172.20.20.170 src=52768 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 39.135259][ T29] audit: type=1400 audit(1732134233.831:1029): avc: denied { name_bind } for pid=3796 comm="syz.0.113" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 39.160673][ T3795] loop1: detected capacity change from 0 to 4096 [ 39.195243][ T3795] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.286401][ T29] audit: type=1400 audit(1732134234.071:1030): avc: denied { write } for pid=3792 comm="syz.4.111" name="ip6_tables_names" dev="proc" ino=4026532914 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 39.334075][ T29] audit: type=1400 audit(1732134234.071:1031): avc: denied { write } for pid=3794 comm="syz.1.112" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 39.355675][ T29] audit: type=1400 audit(1732134234.071:1032): avc: denied { add_name } for pid=3794 comm="syz.1.112" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 39.552926][ T3814] netlink: 'syz.3.117': attribute type 10 has an invalid length. [ 39.560755][ T3814] netlink: 40 bytes leftover after parsing attributes in process `syz.3.117'. [ 39.573484][ T3814] team0: Port device geneve1 added [ 39.675331][ T3829] loop4: detected capacity change from 0 to 2048 [ 39.714891][ T3829] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 39.728287][ T3829] ext4 filesystem being mounted at /23/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 39.752136][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.882306][ T3321] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.106797][ T3856] netlink: 28 bytes leftover after parsing attributes in process `syz.3.121'. [ 40.115762][ T3856] netlink: 28 bytes leftover after parsing attributes in process `syz.3.121'. [ 40.159056][ T3859] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 40.165628][ T3859] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 40.173171][ T3859] vhci_hcd vhci_hcd.0: Device attached [ 40.208354][ T3859] loop1: detected capacity change from 0 to 512 [ 40.215101][ T3859] EXT4-fs: Ignoring removed orlov option [ 40.221231][ T3859] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 40.235481][ T3859] EXT4-fs (loop1): orphan cleanup on readonly fs [ 40.254155][ T3859] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.122: bg 0: block 248: padding at end of block bitmap is not set [ 40.269154][ T3859] EXT4-fs error (device loop1): ext4_acquire_dquot:6938: comm syz.1.122: Failed to acquire dquot type 1 [ 40.294378][ T3859] EXT4-fs (loop1): 1 truncate cleaned up [ 40.305589][ T3859] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 40.322454][ T3859] ext4: Unknown parameter '0x0000000000000000ÿÿÿÿÿÿÿÿ0000000000000000000400000000000000000000005' [ 40.336969][ T3859] EXT4-fs: Ignoring removed orlov option [ 40.342791][ T3859] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 40.351845][ T3859] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 40.362791][ T3395] vhci_hcd: vhci_device speed not set [ 40.376223][ T3859] EXT4-fs error (device loop1): __ext4_remount:6749: comm syz.1.122: Abort forced by user [ 40.386441][ T3859] EXT4-fs (loop1): Remounting filesystem read-only [ 40.392957][ T3859] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 40.415437][ T3859] ext4 filesystem being remounted at /23/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 40.423998][ T3395] usb 3-1: new full-speed USB device number 2 using vhci_hcd [ 40.439537][ T3860] vhci_hcd: connection reset by peer [ 40.445006][ T3868] xt_hashlimit: max too large, truncated to 1048576 [ 40.453625][ T2434] vhci_hcd: stop threads [ 40.457957][ T2434] vhci_hcd: release socket [ 40.462470][ T2434] vhci_hcd: disconnect device [ 40.842245][ T3875] loop3: detected capacity change from 0 to 1024 [ 40.853529][ T3875] ext4: Bad value for 'max_dir_size_kb' [ 40.921463][ T3878] loop4: detected capacity change from 0 to 512 [ 40.928424][ T3878] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 40.941515][ T3878] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 40.975012][ T3321] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.994616][ T3878] EXT4-fs (loop4): 1 truncate cleaned up [ 40.999004][ T3881] netlink: 'syz.1.129': attribute type 10 has an invalid length. [ 41.000507][ T3878] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 41.020085][ T3881] hsr0: entered promiscuous mode [ 41.039951][ T3881] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 41.052080][ T3881] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 41.062450][ T3881] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 41.074939][ T3881] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 41.396052][ T3884] loop2: detected capacity change from 0 to 512 [ 41.420501][ T3884] EXT4-fs error (device loop2): ext4_xattr_block_get:596: inode #2: comm syz.2.130: corrupted xattr block 255: invalid header [ 41.454106][ T3884] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117 [ 41.462734][ T3884] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.483733][ T3884] EXT4-fs error (device loop2): ext4_xattr_block_get:596: inode #2: comm syz.2.130: corrupted xattr block 255: invalid header [ 41.508804][ T3884] SELinux: (dev loop2, type ext4) getxattr errno 117 [ 41.512718][ T3884] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.559842][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.562453][ T3898] loop1: detected capacity change from 0 to 512 [ 41.580086][ T3898] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 41.580179][ T3898] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (63071!=33349) [ 41.580198][ T3898] EXT4-fs (loop1): group descriptors corrupted! [ 41.600978][ T3900] loop2: detected capacity change from 0 to 1024 [ 41.635612][ T3900] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.917091][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.264829][ T3393] vhci_hcd: vhci_device speed not set [ 43.876800][ T4042] loop1: detected capacity change from 0 to 512 [ 43.901500][ T4042] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 43.926047][ T4042] EXT4-fs error (device loop1): ext4_orphan_get:1415: comm syz.1.149: bad orphan inode 131083 [ 43.976588][ T4042] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 44.021952][ T29] kauditd_printk_skb: 180 callbacks suppressed [ 44.021967][ T29] audit: type=1400 audit(1732134238.801:1211): avc: denied { mounton } for pid=4040 comm="syz.1.149" path="/31/bus/file0" dev="loop1" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 44.100544][ T3321] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.138912][ T4057] loop2: detected capacity change from 0 to 128 [ 44.149313][ T29] audit: type=1400 audit(1732134238.931:1212): avc: denied { getopt } for pid=4055 comm="syz.0.152" laddr=::ffff:0.0.0.0 lport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 44.197741][ T29] audit: type=1400 audit(1732134238.941:1213): avc: denied { lock } for pid=4054 comm="syz.1.153" path="socket:[6128]" dev="sockfs" ino=6128 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 44.325901][ T29] audit: type=1400 audit(1732134239.111:1214): avc: denied { remount } for pid=4055 comm="syz.0.152" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 44.368731][ T29] audit: type=1400 audit(1732134239.131:1215): avc: denied { setattr } for pid=4066 comm="syz.1.155" name="/" dev="configfs" ino=2094 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 44.441819][ T29] audit: type=1400 audit(1732134239.221:1216): avc: denied { unmount } for pid=3321 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 44.513409][ T29] audit: type=1400 audit(1732134239.291:1217): avc: denied { ioctl } for pid=4070 comm="+}[@" path="socket:[6139]" dev="sockfs" ino=6139 ioctlcmd=0x8923 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 44.540079][ T4071] : renamed from bond0 (while UP) [ 44.627139][ T4078] sg_write: data in/out 231/14 bytes for SCSI command 0x0-- guessing data in; [ 44.627139][ T4078] program syz.1.159 not setting count and/or reply_len properly [ 44.779874][ T29] audit: type=1400 audit(1732134239.561:1218): avc: denied { create } for pid=4081 comm="syz.3.162" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 44.800589][ T29] audit: type=1400 audit(1732134239.561:1219): avc: denied { mounton } for pid=4081 comm="syz.3.162" path="/25/file0" dev="tmpfs" ino=152 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 44.823626][ T29] audit: type=1400 audit(1732134239.561:1220): avc: denied { mount } for pid=4081 comm="syz.3.162" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 44.854925][ T4082] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4082 comm=syz.3.162 [ 45.087187][ T4096] loop3: detected capacity change from 0 to 512 [ 45.157283][ T4100] loop1: detected capacity change from 0 to 128 [ 45.164417][ T4100] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 45.177565][ T4100] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 45.239750][ T4099] loop2: detected capacity change from 0 to 1024 [ 45.296181][ T4096] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 45.361439][ T4096] EXT4-fs (loop3): 1 truncate cleaned up [ 45.416749][ T4096] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 45.466447][ T3395] usb 3-1: enqueue for inactive port 0 [ 45.501027][ T3395] usb 3-1: enqueue for inactive port 0 [ 45.556147][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.584192][ T3395] vhci_hcd: vhci_device speed not set [ 46.390068][ T4123] netlink: '+}[@': attribute type 10 has an invalid length. [ 46.549238][ T4128] loop2: detected capacity change from 0 to 128 [ 46.562363][ T4128] syz.2.177: attempt to access beyond end of device [ 46.562363][ T4128] loop2: rw=2049, sector=145, nr_sectors = 88 limit=128 [ 46.591654][ T4130] vlan2: entered promiscuous mode [ 46.597335][ T4128] syz.2.177: attempt to access beyond end of device [ 46.597335][ T4128] loop2: rw=34817, sector=97, nr_sectors = 32 limit=128 [ 46.634009][ T4128] syz.2.177: attempt to access beyond end of device [ 46.634009][ T4128] loop2: rw=34817, sector=145, nr_sectors = 88 limit=128 [ 46.675060][ T4131] netlink: 16 bytes leftover after parsing attributes in process `syz.2.177'. [ 46.687768][ T4128] syz.2.177[4128] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 46.687853][ T4128] syz.2.177[4128] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 46.757909][ T4128] netlink: 24 bytes leftover after parsing attributes in process `syz.2.177'. [ 46.942448][ T4138] loop1: detected capacity change from 0 to 128 [ 47.113255][ T4141] loop2: detected capacity change from 0 to 512 [ 47.227824][ T4141] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 47.250483][ T4141] ext4 filesystem being mounted at /36/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 47.325807][ T4150] random: crng reseeded on system resumption [ 47.335202][ T4141] netlink: 4 bytes leftover after parsing attributes in process `syz.2.181'. [ 47.395578][ T4141] team0 (unregistering): Port device team_slave_0 removed [ 47.396702][ T4152] netlink: 24 bytes leftover after parsing attributes in process `syz.4.185'. [ 47.414482][ T4141] team0 (unregistering): Port device team_slave_1 removed [ 47.484374][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 47.663375][ T4164] netlink: 28 bytes leftover after parsing attributes in process `syz.1.189'. [ 47.672439][ T4164] netlink: 28 bytes leftover after parsing attributes in process `syz.1.189'. [ 48.074750][ T4168] loop4: detected capacity change from 0 to 256 [ 48.245918][ T4174] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 48.310683][ T4174] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 48.338490][ T4173] IPv6: NLM_F_CREATE should be specified when creating new route [ 48.444829][ T4173] block device autoloading is deprecated and will be removed. [ 48.460442][ T4173] syz.0.192: attempt to access beyond end of device [ 48.460442][ T4173] md34: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 48.506573][ T4176] netlink: 'syz.2.193': attribute type 10 has an invalid length. [ 48.516553][ T4176] netlink: 'syz.2.193': attribute type 10 has an invalid length. [ 48.524334][ T4176] netlink: 2 bytes leftover after parsing attributes in process `syz.2.193'. [ 48.575540][ T4185] netlink: 'syz.3.198': attribute type 1 has an invalid length. [ 48.578845][ T4181] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 48.589699][ T4181] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 48.597438][ T4181] vhci_hcd vhci_hcd.0: Device attached [ 48.609831][ T4186] vhci_hcd: connection closed [ 48.610548][ T3985] vhci_hcd: stop threads [ 48.619586][ T3985] vhci_hcd: release socket [ 48.624036][ T3985] vhci_hcd: disconnect device [ 49.169251][ T29] kauditd_printk_skb: 31 callbacks suppressed [ 49.169266][ T29] audit: type=1400 audit(1732134243.951:1252): avc: denied { nlmsg_write } for pid=4188 comm="syz.2.197" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 49.224265][ T29] audit: type=1326 audit(1732134243.961:1253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4199 comm="syz.0.201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74b5ece819 code=0x7ffc0000 [ 49.247672][ T29] audit: type=1326 audit(1732134243.961:1254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4199 comm="syz.0.201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74b5ece819 code=0x7ffc0000 [ 49.270984][ T29] audit: type=1326 audit(1732134243.961:1255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4199 comm="syz.0.201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=160 compat=0 ip=0x7f74b5ece819 code=0x7ffc0000 [ 49.294488][ T29] audit: type=1326 audit(1732134243.961:1256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4199 comm="syz.0.201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74b5ece819 code=0x7ffc0000 [ 49.317941][ T29] audit: type=1326 audit(1732134243.961:1257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4199 comm="syz.0.201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74b5ece819 code=0x7ffc0000 [ 49.341266][ T29] audit: type=1326 audit(1732134243.961:1258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4199 comm="syz.0.201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f74b5ecd1b0 code=0x7ffc0000 [ 49.364651][ T29] audit: type=1326 audit(1732134243.961:1259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4199 comm="syz.0.201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f74b5ecd1b0 code=0x7ffc0000 [ 49.387995][ T29] audit: type=1326 audit(1732134243.961:1260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4199 comm="syz.0.201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74b5ece819 code=0x7ffc0000 [ 49.411355][ T29] audit: type=1326 audit(1732134243.961:1261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4199 comm="syz.0.201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=17 compat=0 ip=0x7f74b5ece819 code=0x7ffc0000 [ 49.569147][ T4207] bond1: entered promiscuous mode [ 49.574274][ T4207] bond1: entered allmulticast mode [ 49.602936][ T4207] 8021q: adding VLAN 0 to HW filter on device bond1 [ 49.650462][ T4207] bond1 (unregistering): Released all slaves [ 50.076372][ T4222] dccp_close: ABORT with 58 bytes unread [ 50.089831][ T4225] netlink: 'syz.0.209': attribute type 21 has an invalid length. [ 50.098975][ T4225] netlink: 132 bytes leftover after parsing attributes in process `syz.0.209'. [ 50.151931][ T4230] loop4: detected capacity change from 0 to 256 [ 50.163768][ T4230] FAT-fs (loop4): Directory bread(block 64) failed [ 50.172144][ T4230] FAT-fs (loop4): Directory bread(block 65) failed [ 50.178891][ T4230] FAT-fs (loop4): Directory bread(block 66) failed [ 50.186890][ T4230] FAT-fs (loop4): Directory bread(block 67) failed [ 50.193891][ T4230] FAT-fs (loop4): Directory bread(block 68) failed [ 50.214016][ T4230] FAT-fs (loop4): Directory bread(block 69) failed [ 50.222839][ T4230] FAT-fs (loop4): Directory bread(block 70) failed [ 50.229533][ T4230] FAT-fs (loop4): Directory bread(block 71) failed [ 50.236994][ T4230] FAT-fs (loop4): Directory bread(block 72) failed [ 50.243633][ T4230] FAT-fs (loop4): Directory bread(block 73) failed [ 50.584183][ T4238] Process accounting resumed [ 50.633971][ T4240] syz.3.214[4240] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 50.634117][ T4240] syz.3.214[4240] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 50.647615][ T4240] syz.3.214[4240] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 50.721922][ T4240] team0: Device ipvlan1 failed to register rx_handler [ 51.204689][ T3394] hid-generic 0000:0003:0000.0001: unknown main item tag 0x0 [ 51.212262][ T3394] hid-generic 0000:0003:0000.0001: unknown main item tag 0x0 [ 51.219662][ T3394] hid-generic 0000:0003:0000.0001: unknown main item tag 0x0 [ 51.302435][ T4252] vhci_hcd: invalid port number 236 [ 51.320034][ T3394] hid-generic 0000:0003:0000.0001: unknown main item tag 0x0 [ 51.327525][ T3394] hid-generic 0000:0003:0000.0001: unknown main item tag 0x0 [ 51.334938][ T3394] hid-generic 0000:0003:0000.0001: unknown main item tag 0x0 [ 51.342321][ T3394] hid-generic 0000:0003:0000.0001: unknown main item tag 0x0 [ 51.349753][ T3394] hid-generic 0000:0003:0000.0001: unknown main item tag 0x0 [ 51.357183][ T3394] hid-generic 0000:0003:0000.0001: unknown main item tag 0x0 [ 51.364621][ T3394] hid-generic 0000:0003:0000.0001: unknown main item tag 0x0 [ 51.372008][ T3394] hid-generic 0000:0003:0000.0001: unknown main item tag 0x0 [ 51.374574][ T4260] netlink: 24 bytes leftover after parsing attributes in process `syz.4.220'. [ 51.379426][ T3394] hid-generic 0000:0003:0000.0001: unknown main item tag 0x0 [ 51.395697][ T3394] hid-generic 0000:0003:0000.0001: unknown main item tag 0x0 [ 51.403080][ T3394] hid-generic 0000:0003:0000.0001: unknown main item tag 0x0 [ 51.410486][ T3394] hid-generic 0000:0003:0000.0001: unknown main item tag 0x0 [ 51.417961][ T3394] hid-generic 0000:0003:0000.0001: unknown main item tag 0x0 [ 51.425385][ T3394] hid-generic 0000:0003:0000.0001: unknown main item tag 0x0 [ 51.432762][ T3394] hid-generic 0000:0003:0000.0001: unknown main item tag 0x0 [ 51.440154][ T3394] hid-generic 0000:0003:0000.0001: unknown main item tag 0x0 [ 51.458586][ T3394] hid-generic 0000:0003:0000.0001: unknown main item tag 0x0 [ 51.466032][ T3394] hid-generic 0000:0003:0000.0001: unknown main item tag 0x0 [ 51.473462][ T3394] hid-generic 0000:0003:0000.0001: unknown main item tag 0x0 [ 51.480871][ T3394] hid-generic 0000:0003:0000.0001: unknown main item tag 0x0 [ 51.488273][ T3394] hid-generic 0000:0003:0000.0001: unknown main item tag 0x0 [ 51.495693][ T3394] hid-generic 0000:0003:0000.0001: unknown main item tag 0x0 [ 51.503066][ T3394] hid-generic 0000:0003:0000.0001: unknown main item tag 0x0 [ 51.510532][ T3394] hid-generic 0000:0003:0000.0001: unknown main item tag 0x0 [ 51.518066][ T3394] hid-generic 0000:0003:0000.0001: unknown main item tag 0x0 [ 51.525500][ T3394] hid-generic 0000:0003:0000.0001: unknown main item tag 0x0 [ 51.532879][ T3394] hid-generic 0000:0003:0000.0001: unknown main item tag 0x0 [ 51.540297][ T3394] hid-generic 0000:0003:0000.0001: unknown main item tag 0x0 [ 51.547734][ T3394] hid-generic 0000:0003:0000.0001: unknown main item tag 0x0 [ 51.555163][ T3394] hid-generic 0000:0003:0000.0001: unknown main item tag 0x0 [ 51.562554][ T3394] hid-generic 0000:0003:0000.0001: unknown main item tag 0x0 [ 51.570048][ T3394] hid-generic 0000:0003:0000.0001: unknown main item tag 0x0 [ 51.586889][ T3394] hid-generic 0000:0003:0000.0001: hidraw0: HID v0.00 Device [syz0] on syz0 [ 51.631219][ T4266] loop2: detected capacity change from 0 to 1024 [ 51.657412][ T4266] ext4: Bad value for 'max_dir_size_kb' [ 51.796922][ T4269] syzkaller0: entered allmulticast mode [ 51.805587][ T4271] syzkaller0: entered allmulticast mode [ 51.878635][ T4269] syzkaller0 (unregistering): left allmulticast mode [ 52.195917][ T4280] lo speed is unknown, defaulting to 1000 [ 52.207006][ T4280] lo speed is unknown, defaulting to 1000 [ 52.219158][ T4280] lo speed is unknown, defaulting to 1000 [ 52.230554][ T4280] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 52.255754][ T4280] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 52.280606][ T4280] lo speed is unknown, defaulting to 1000 [ 52.292428][ T4280] lo speed is unknown, defaulting to 1000 [ 52.305816][ T4280] lo speed is unknown, defaulting to 1000 [ 52.319436][ T4280] lo speed is unknown, defaulting to 1000 [ 52.331809][ T4280] lo speed is unknown, defaulting to 1000 [ 52.431349][ T4287] lo speed is unknown, defaulting to 1000 [ 52.491122][ T4289] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 52.613560][ T4298] netlink: 4 bytes leftover after parsing attributes in process `syz.3.233'. [ 52.634645][ T4298] bond0: left allmulticast mode [ 52.639531][ T4298] bond_slave_0: left allmulticast mode [ 52.645066][ T4298] bond_slave_1: left allmulticast mode [ 52.649420][ T4295] infiniband syz1: set down [ 52.650543][ T4298] bond0: left promiscuous mode [ 52.655060][ T4295] infiniband syz1: added bond_slave_1 [ 52.665315][ T4298] bond_slave_0: left promiscuous mode [ 52.670814][ T4298] bond_slave_1: left promiscuous mode [ 52.676427][ T4298] bridge0: port 3(bond0) entered disabled state [ 52.710487][ T4295] RDS/IB: syz1: added [ 52.724222][ T4298] bridge_slave_1: left allmulticast mode [ 52.729888][ T4298] bridge_slave_1: left promiscuous mode [ 52.735661][ T4298] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.754343][ T4295] smc: adding ib device syz1 with port count 1 [ 52.763177][ T4295] smc: ib device syz1 port 1 has pnetid [ 52.807725][ T4298] bridge_slave_0: left allmulticast mode [ 52.813456][ T4298] bridge_slave_0: left promiscuous mode [ 52.819215][ T4298] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.897189][ T4308] loop2: detected capacity change from 0 to 1024 [ 52.934382][ T4308] EXT4-fs: Ignoring removed nomblk_io_submit option [ 52.965389][ T4308] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 52.974097][ T4308] System zones: 0-1, 3-36 [ 52.997491][ T4312] netlink: 'syz.3.236': attribute type 30 has an invalid length. [ 53.004635][ T4308] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 53.005247][ T4312] netlink: 32 bytes leftover after parsing attributes in process `syz.3.236'. [ 53.064751][ T4308] Cannot find add_set index 0 as target [ 53.094241][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.274337][ T4317] lo speed is unknown, defaulting to 1000 [ 53.375858][ T4323] loop4: detected capacity change from 0 to 1764 [ 53.425805][ T4325] netlink: 28 bytes leftover after parsing attributes in process `syz.4.240'. [ 53.434836][ T4325] netlink: 28 bytes leftover after parsing attributes in process `syz.4.240'. [ 53.715065][ T4335] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 53.723253][ T4335] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 53.738198][ T4339] loop1: detected capacity change from 0 to 512 [ 53.749927][ T4339] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 53.750482][ T4339] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.927002][ T4347] loop4: detected capacity change from 0 to 128 [ 53.948566][ T4347] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 54.072627][ T4351] loop2: detected capacity change from 0 to 256 [ 54.094947][ T4353] syz.0.249[4353] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 54.095090][ T4353] syz.0.249[4353] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 54.138093][ T4353] syz.0.249[4353] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 54.176418][ T29] kauditd_printk_skb: 680 callbacks suppressed [ 54.176430][ T29] audit: type=1400 audit(1732134248.961:1942): avc: denied { name_bind } for pid=4356 comm="syz.2.250" src=256 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 54.221497][ T4357] usb usb1: usbfs: interface 0 claimed by hub while 'syz.2.250' sets config #0 [ 54.254897][ T4357] usb usb1: usbfs: interface 0 claimed by hub while 'syz.2.250' sets config #1 [ 54.319941][ T4360] netlink: 'syz.0.251': attribute type 1 has an invalid length. [ 54.335415][ T4362] vlan0: entered promiscuous mode [ 54.340474][ T4362] batadv0: entered promiscuous mode [ 54.360954][ T4362] batadv0: left promiscuous mode [ 54.550397][ T3394] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x4 [ 54.558196][ T3394] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x2 [ 54.592445][ T3394] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x3 [ 54.617231][ T3394] hid-generic 0000:3000000:0000.0002: hidraw0: HID v0.00 Device [sy] on syz0 [ 54.630938][ T4367] loop2: detected capacity change from 0 to 8192 [ 54.684848][ T4367] netlink: 80 bytes leftover after parsing attributes in process `syz.2.254'. [ 54.695285][ T29] audit: type=1400 audit(1732134249.481:1943): avc: denied { mount } for pid=4371 comm="syz.3.256" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 54.728258][ T4367] netlink: 12 bytes leftover after parsing attributes in process `syz.2.254'. [ 54.737198][ T4367] netlink: 20 bytes leftover after parsing attributes in process `syz.2.254'. [ 54.749462][ T4372] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.885595][ T4372] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.946517][ T4372] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.076631][ T29] audit: type=1400 audit(1732134249.861:1944): avc: denied { mounton } for pid=4374 comm="syz.1.257" path="/47/file0" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 55.101349][ T4372] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.163248][ T4377] team0: Port device team_slave_1 removed [ 55.190821][ T4372] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.220620][ T4372] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.256725][ T4372] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.267208][ T29] audit: type=1400 audit(1732134250.041:1945): avc: denied { unmount } for pid=3321 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 55.309708][ T4372] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.337174][ T29] audit: type=1400 audit(1732134250.121:1946): avc: denied { bind } for pid=4382 comm="syz.1.259" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 55.358611][ T4383] syz.1.259[4383] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 55.358663][ T4383] syz.1.259[4383] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 55.373995][ T4383] syz.1.259[4383] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 55.726635][ T4391] lo speed is unknown, defaulting to 1000 [ 55.953709][ T4396] loop2: detected capacity change from 0 to 2048 [ 55.961837][ T4396] EXT4-fs: Ignoring removed bh option [ 55.970533][ T4398] sctp: [Deprecated]: syz.0.261 (pid 4398) Use of int in max_burst socket option. [ 55.970533][ T4398] Use struct sctp_assoc_value instead [ 55.991596][ T4396] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 56.020121][ T29] audit: type=1326 audit(1732134250.801:1947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4402 comm="syz.0.267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74b5ece819 code=0x7ffc0000 [ 56.054449][ T4403] Cannot find add_set index 0 as target [ 56.060138][ T29] audit: type=1326 audit(1732134250.801:1948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4402 comm="syz.0.267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74b5ece819 code=0x7ffc0000 [ 56.083534][ T29] audit: type=1326 audit(1732134250.801:1949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4402 comm="syz.0.267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f74b5ece819 code=0x7ffc0000 [ 56.106998][ T29] audit: type=1326 audit(1732134250.801:1950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4402 comm="syz.0.267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74b5ece819 code=0x7ffc0000 [ 56.130383][ T29] audit: type=1326 audit(1732134250.801:1951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4402 comm="syz.0.267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f74b5ece819 code=0x7ffc0000 [ 56.157194][ T4396] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.207666][ T4396] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.288738][ T4396] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.354087][ T4412] loop4: detected capacity change from 0 to 512 [ 56.365742][ T4396] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.385844][ T4412] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 56.399315][ T4412] ext4 filesystem being mounted at /51/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 56.430493][ T4396] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.442295][ T4396] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.453501][ T4396] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.464787][ T4401] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 56.485357][ T4396] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.504877][ T4421] netlink: 28 bytes leftover after parsing attributes in process `syz.4.271'. [ 56.559235][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.605718][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.619600][ T4434] atomic_op ffff8881163b6528 conn xmit_atomic 0000000000000000 [ 56.643390][ T4437] loop4: detected capacity change from 0 to 1024 [ 56.670214][ T4437] EXT4-fs: Ignoring removed orlov option [ 56.676017][ T4437] EXT4-fs: Ignoring removed nomblk_io_submit option [ 56.695978][ T4443] xt_CT: You must specify a L4 protocol and not use inversions on it [ 56.708678][ T4437] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 56.723072][ T4440] netlink: 8 bytes leftover after parsing attributes in process `syz.3.281'. [ 56.724876][ T4443] bridge_slave_0: left allmulticast mode [ 56.737946][ T4443] bridge_slave_0: left promiscuous mode [ 56.743886][ T4443] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.764215][ T4444] netlink: 28 bytes leftover after parsing attributes in process `syz.1.282'. [ 56.801822][ T4454] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 56.828337][ T4458] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 56.837700][ T4458] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 56.926245][ T4464] lo speed is unknown, defaulting to 1000 [ 57.045912][ T4464] xt_CT: You must specify a L4 protocol and not use inversions on it [ 57.578818][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.827231][ T4473] netlink: 4 bytes leftover after parsing attributes in process `syz.0.292'. [ 57.944199][ T4473] hsr_slave_1 (unregistering): left promiscuous mode [ 57.961857][ T4483] loop4: detected capacity change from 0 to 512 [ 57.987586][ T4483] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 58.005784][ T4483] ext4 filesystem being mounted at /53/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 58.027807][ T4483] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 58.086843][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.110673][ T3395] IPVS: starting estimator thread 0... [ 58.117368][ T4505] tipc: Started in network mode [ 58.117767][ T4501] serio: Serial port pts0 [ 58.122244][ T4505] tipc: Node identity ac1414aa, cluster identity 4711 [ 58.135821][ T4505] tipc: Enabled bearer , priority 10 [ 58.139917][ T4503] delete_channel: no stack [ 58.146326][ T4503] delete_channel: no stack [ 58.204035][ T4506] IPVS: using max 2976 ests per chain, 148800 per kthread [ 58.264634][ T4520] loop4: detected capacity change from 0 to 512 [ 58.275558][ T4520] EXT4-fs warning (device loop4): ext4_enable_quotas:7156: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 58.291234][ T4520] EXT4-fs (loop4): mount failed [ 58.414511][ T4528] netlink: 24 bytes leftover after parsing attributes in process `syz.2.303'. [ 58.425393][ T4528] vlan0: entered promiscuous mode [ 58.552092][ T4538] loop2: detected capacity change from 0 to 512 [ 58.565161][ T4538] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 58.573212][ T4538] EXT4-fs (loop2): orphan cleanup on readonly fs [ 58.595781][ T4538] EXT4-fs warning (device loop2): ext4_enable_quotas:7156: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 58.618110][ T4538] EXT4-fs (loop2): Cannot turn on quotas: error -117 [ 58.625655][ T4538] EXT4-fs error (device loop2): ext4_orphan_get:1389: inode #16: comm syz.2.304: casefold flag without casefold feature [ 58.640060][ T4538] EXT4-fs error (device loop2): ext4_orphan_get:1394: comm syz.2.304: couldn't read orphan inode 16 (err -117) [ 58.652438][ T4538] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 58.696235][ T4538] bridge0: port 3(vlan0) entered blocking state [ 58.702535][ T4538] bridge0: port 3(vlan0) entered disabled state [ 58.728894][ T4538] vlan0: entered allmulticast mode [ 58.742188][ T4538] vlan0: left allmulticast mode [ 58.808519][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.863323][ T4546] loop2: detected capacity change from 0 to 512 [ 58.962471][ T4552] netlink: 'syz.1.309': attribute type 10 has an invalid length. [ 58.970259][ T4552] netlink: 40 bytes leftover after parsing attributes in process `syz.1.309'. [ 59.002296][ T4552] bridge0: port 3(ipvlan0) entered blocking state [ 59.008807][ T4552] bridge0: port 3(ipvlan0) entered disabled state [ 59.029621][ T4552] ipvlan0: entered allmulticast mode [ 59.035025][ T4552] veth0_vlan: entered allmulticast mode [ 59.058181][ T4552] ipvlan0: left allmulticast mode [ 59.063292][ T4552] veth0_vlan: left allmulticast mode [ 59.082475][ T4552] A link change request failed with some changes committed already. Interface ipvlan0 may have been left with an inconsistent configuration, please check. [ 59.258937][ T9] tipc: Node number set to 2886997162 [ 59.346335][ T29] kauditd_printk_skb: 136 callbacks suppressed [ 59.346349][ T29] audit: type=1326 audit(1732134254.121:2086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4560 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08b849e819 code=0x7ffc0000 [ 59.375493][ T29] audit: type=1326 audit(1732134254.121:2087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4560 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08b849e819 code=0x7ffc0000 [ 59.375517][ T29] audit: type=1326 audit(1732134254.121:2088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4560 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f08b849e819 code=0x7ffc0000 [ 59.375562][ T29] audit: type=1326 audit(1732134254.131:2089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4560 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08b849e819 code=0x7ffc0000 [ 59.375636][ T29] audit: type=1326 audit(1732134254.131:2090): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4560 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08b849e819 code=0x7ffc0000 [ 59.399648][ T4565] netlink: 'syz.0.314': attribute type 2 has an invalid length. [ 59.425550][ T4567] loop2: detected capacity change from 0 to 1024 [ 59.444127][ T4565] netlink: 'syz.0.314': attribute type 8 has an invalid length. [ 59.488971][ T4565] netlink: 32 bytes leftover after parsing attributes in process `syz.0.314'. [ 59.519949][ T4567] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 59.545920][ T29] audit: type=1326 audit(1732134254.311:2091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4568 comm="syz.4.316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fceecd2e819 code=0x7ffc0000 [ 59.569261][ T29] audit: type=1326 audit(1732134254.311:2092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4568 comm="syz.4.316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fceecd2e819 code=0x7ffc0000 [ 59.592606][ T29] audit: type=1326 audit(1732134254.311:2093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4568 comm="syz.4.316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fceecd2e819 code=0x7ffc0000 [ 59.615946][ T29] audit: type=1326 audit(1732134254.311:2094): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4568 comm="syz.4.316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fceecd2e819 code=0x7ffc0000 [ 59.639326][ T29] audit: type=1326 audit(1732134254.311:2095): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4568 comm="syz.4.316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fceecd2e819 code=0x7ffc0000 [ 59.686459][ T4567] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.760676][ T4584] netlink: 28 bytes leftover after parsing attributes in process `syz.3.323'. [ 59.769637][ T4584] netlink: 28 bytes leftover after parsing attributes in process `syz.3.323'. [ 59.828276][ T4584] bond0: entered promiscuous mode [ 59.833415][ T4584] bond_slave_0: entered promiscuous mode [ 59.839136][ T4584] bond_slave_1: entered promiscuous mode [ 59.863309][ T4584] batadv_slave_1: entered promiscuous mode [ 59.883181][ T4584] netlink: 28 bytes leftover after parsing attributes in process `syz.3.323'. [ 59.892138][ T4584] netlink: 28 bytes leftover after parsing attributes in process `syz.3.323'. [ 59.903450][ T4587] Cannot find del_set index 0 as target [ 60.285442][ T4601] netlink: 8 bytes leftover after parsing attributes in process `syz.0.327'. [ 60.366257][ T4604] tipc: Started in network mode [ 60.371196][ T4604] tipc: Node identity ac14140f, cluster identity 4711 [ 60.396106][ T4604] tipc: New replicast peer: 255.255.255.255 [ 60.402314][ T4604] tipc: Enabled bearer , priority 10 [ 60.777847][ T4620] loop4: detected capacity change from 0 to 1024 [ 60.804431][ T4620] EXT4-fs: Ignoring removed orlov option [ 60.810110][ T4620] EXT4-fs: Ignoring removed nomblk_io_submit option [ 60.847955][ T4621] pimreg: entered allmulticast mode [ 60.867595][ T4620] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 60.977312][ T4612] pimreg: left allmulticast mode [ 61.141464][ T4629] loop1: detected capacity change from 0 to 164 [ 61.153827][ T4629] Unable to read rock-ridge attributes [ 61.188440][ T4629] Unable to read rock-ridge attributes [ 61.358232][ T4643] veth0_to_team: entered promiscuous mode [ 61.364004][ T4643] veth0_to_team: entered allmulticast mode [ 61.400315][ T4631] Cannot find set identified by id 0 to match [ 61.432716][ T4601] syz.0.327 (4601) used greatest stack depth: 6376 bytes left [ 61.811491][ T9] tipc: Node number set to 2886997007 [ 61.982622][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.174730][ T4661] netlink: 'syz.1.345': attribute type 10 has an invalid length. [ 62.182493][ T4661] netlink: 40 bytes leftover after parsing attributes in process `syz.1.345'. [ 62.216181][ T4661] team0: Port device geneve1 added [ 62.277053][ T4669] lo speed is unknown, defaulting to 1000 [ 62.324078][ T4671] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 62.344411][ T4671] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 62.794492][ T4685] syzkaller0: entered allmulticast mode [ 62.811828][ T4688] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=46112 sclass=netlink_route_socket pid=4688 comm=syz.1.355 [ 62.821056][ T4690] netlink: 'syz.0.356': attribute type 10 has an invalid length. [ 62.836002][ T4690] batman_adv: batadv0: Adding interface: team0 [ 62.842194][ T4690] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.867815][ T4690] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 62.882058][ T4685] syzkaller0 (unregistering): left allmulticast mode [ 62.936698][ T4690] netlink: 'syz.0.356': attribute type 10 has an invalid length. [ 62.944476][ T4690] netlink: 2 bytes leftover after parsing attributes in process `syz.0.356'. [ 62.980950][ T4690] team0: entered promiscuous mode [ 62.986051][ T4690] team_slave_0: entered promiscuous mode [ 62.991774][ T4690] team_slave_1: entered promiscuous mode [ 63.014755][ T4690] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.038938][ T4690] batman_adv: batadv0: Interface activated: team0 [ 63.045555][ T4690] batman_adv: batadv0: Interface deactivated: team0 [ 63.052342][ T4690] batman_adv: batadv0: Removing interface: team0 [ 63.075404][ T4690] bridge0: port 1(team0) entered blocking state [ 63.081812][ T4690] bridge0: port 1(team0) entered disabled state [ 63.090027][ T4690] team0: entered allmulticast mode [ 63.095237][ T4690] team_slave_0: entered allmulticast mode [ 63.100961][ T4690] team_slave_1: entered allmulticast mode [ 63.109087][ T4690] bridge0: port 1(team0) entered blocking state [ 63.115491][ T4690] bridge0: port 1(team0) entered forwarding state [ 63.133056][ T4695] lo speed is unknown, defaulting to 1000 [ 63.453091][ T4711] netlink: 4 bytes leftover after parsing attributes in process `syz.4.364'. [ 63.663092][ T4706] lo speed is unknown, defaulting to 1000 [ 63.703073][ T4716] loop4: detected capacity change from 0 to 1024 [ 63.738603][ T4716] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 63.830505][ T4720] SELinux: Context Ü is not valid (left unmapped). [ 63.854502][ T4716] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 63.871024][ T4716] EXT4-fs (loop4): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 1 with error 28 [ 63.883296][ T4716] EXT4-fs (loop4): This should not happen!! Data will be lost [ 63.883296][ T4716] [ 63.892992][ T4716] EXT4-fs (loop4): Total free blocks count 0 [ 63.898993][ T4716] EXT4-fs (loop4): Free/Dirty block details [ 63.904906][ T4716] EXT4-fs (loop4): free_blocks=68451041280 [ 63.910707][ T4716] EXT4-fs (loop4): dirty_blocks=16 [ 63.915864][ T4716] EXT4-fs (loop4): Block reservation details [ 63.921835][ T4716] EXT4-fs (loop4): i_reserved_data_blocks=1 [ 64.012756][ T3319] EXT4-fs error (device loop4): ext4_readdir:261: inode #11: block 32: comm syz-executor: path /65/file2/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 64.085120][ T3319] EXT4-fs error (device loop4): ext4_empty_dir:3103: inode #11: block 32: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 64.092429][ T4729] lo speed is unknown, defaulting to 1000 [ 64.121657][ T4731] loop1: detected capacity change from 0 to 1024 [ 64.130155][ T3319] EXT4-fs warning (device loop4): ext4_empty_dir:3105: inode #11: comm syz-executor: directory missing '.' [ 64.153018][ T3319] EXT4-fs error (device loop4): ext4_readdir:261: inode #11: block 32: comm syz-executor: path /65/file2/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 64.184736][ T3319] EXT4-fs error (device loop4): ext4_empty_dir:3103: inode #11: block 32: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 64.185487][ T4732] dccp_close: ABORT with 40 bytes unread [ 64.210547][ T4731] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 64.210708][ T3319] EXT4-fs warning (device loop4): ext4_empty_dir:3105: inode #11: comm syz-executor: directory missing '.' [ 64.245096][ T3319] EXT4-fs error (device loop4): ext4_readdir:261: inode #11: block 32: comm syz-executor: path /65/file2/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 64.322850][ T3319] EXT4-fs error (device loop4): ext4_empty_dir:3103: inode #11: block 32: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 64.377915][ T3319] EXT4-fs warning (device loop4): ext4_empty_dir:3105: inode #11: comm syz-executor: directory missing '.' [ 64.409255][ T3321] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.415761][ T3319] EXT4-fs error (device loop4): ext4_readdir:261: inode #11: block 32: comm syz-executor: path /65/file2/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 64.450286][ T3319] EXT4-fs error (device loop4): ext4_empty_dir:3103: inode #11: block 32: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 64.489835][ T3319] EXT4-fs warning (device loop4): ext4_empty_dir:3105: inode #11: comm syz-executor: directory missing '.' [ 64.505552][ T3319] EXT4-fs error (device loop4): ext4_readdir:261: inode #11: block 32: comm syz-executor: path /65/file2/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 64.535529][ T4743] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.541458][ T3319] EXT4-fs warning (device loop4): ext4_empty_dir:3105: inode #11: comm syz-executor: directory missing '.' [ 64.565220][ T3319] EXT4-fs warning (device loop4): ext4_empty_dir:3105: inode #11: comm syz-executor: directory missing '.' [ 64.578475][ T3319] EXT4-fs warning (device loop4): ext4_empty_dir:3105: inode #11: comm syz-executor: directory missing '.' [ 64.594702][ T29] kauditd_printk_skb: 675 callbacks suppressed [ 64.594712][ T29] audit: type=1400 audit(1732134515.381:2771): avc: denied { read } for pid=4751 comm="syz.1.377" name="usbmon7" dev="devtmpfs" ino=163 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 64.604445][ T3319] EXT4-fs warning (device loop4): ext4_empty_dir:3105: inode #11: comm syz-executor: directory missing '.' [ 64.643967][ T29] audit: type=1400 audit(1732134515.411:2772): avc: denied { open } for pid=4751 comm="syz.1.377" path="/dev/usbmon7" dev="devtmpfs" ino=163 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 64.647559][ T4758] loop2: detected capacity change from 0 to 4096 [ 64.667648][ T29] audit: type=1400 audit(1732134515.411:2773): avc: denied { lock } for pid=4751 comm="syz.1.377" path="socket:[8626]" dev="sockfs" ino=8626 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 64.675635][ T3319] EXT4-fs warning (device loop4): ext4_empty_dir:3105: inode #11: comm syz-executor: directory missing '.' [ 64.697767][ T29] audit: type=1400 audit(1732134515.411:2774): avc: denied { ioctl } for pid=4751 comm="syz.1.377" path="/dev/usbmon7" dev="devtmpfs" ino=163 ioctlcmd=0x9207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 64.737624][ T29] audit: type=1326 audit(1732134515.521:2775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4759 comm="syz.0.378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74b5ece819 code=0x7ffc0000 [ 64.761288][ T29] audit: type=1326 audit(1732134515.521:2776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4759 comm="syz.0.378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74b5ece819 code=0x7ffc0000 [ 64.763967][ T3319] EXT4-fs warning (device loop4): ext4_empty_dir:3105: inode #11: comm syz-executor: directory missing '.' [ 64.784581][ T29] audit: type=1326 audit(1732134515.521:2777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4759 comm="syz.0.378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74b5ece819 code=0x7ffc0000 [ 64.819292][ T29] audit: type=1326 audit(1732134515.521:2778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4759 comm="syz.0.378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7f74b5ece819 code=0x7ffc0000 [ 64.844160][ T4743] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.870867][ T4758] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 64.919015][ T29] audit: type=1400 audit(1732134515.701:2779): avc: denied { append } for pid=4742 comm="syz.2.374" path="/68/file0/blkio.throttle.io_serviced_recursive" dev="loop2" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 64.975700][ T4743] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.035939][ T4743] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.077521][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.090484][ T4020] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.109473][ T4743] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.120686][ T4743] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.140806][ T4743] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.158568][ T4020] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.175668][ T4743] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.186770][ T29] audit: type=1400 audit(1732134515.971:2780): avc: denied { mounton } for pid=4768 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 65.200026][ T4767] tap0: tun_chr_ioctl cmd 1074025677 [ 65.231918][ T4767] tap0: linktype set to 780 [ 65.264511][ T4020] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.295796][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.328781][ T4020] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.403101][ T4768] lo speed is unknown, defaulting to 1000 [ 65.616468][ T4020] bond0 (unregistering): Released all slaves [ 65.788333][ T4789] netlink: 'syz.3.383': attribute type 10 has an invalid length. [ 65.799610][ T4789] geneve1: entered promiscuous mode [ 65.819793][ T4789] team0: Port device geneve1 removed [ 65.827548][ T4789] bond0: (slave geneve1): Enslaving as an active interface with an up link [ 65.882594][ T4020] tipc: Disabling bearer [ 65.887719][ T4020] tipc: Left network mode [ 66.063266][ T4020] hsr_slave_0: left promiscuous mode [ 66.080719][ T4020] hsr_slave_1: left promiscuous mode [ 66.103535][ T4020] veth1_vlan: left promiscuous mode [ 66.108904][ T4020] veth0_vlan: left promiscuous mode [ 67.407346][ T28] smc: removing ib device syz1 [ 67.481879][ T4768] chnl_net:caif_netlink_parms(): no params data found [ 67.528206][ T4768] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.535351][ T4768] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.543570][ T4768] bridge_slave_0: entered allmulticast mode [ 67.550492][ T4768] bridge_slave_0: entered promiscuous mode [ 67.573701][ T4768] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.580780][ T4768] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.613839][ T4768] bridge_slave_1: entered allmulticast mode [ 67.625160][ T4768] bridge_slave_1: entered promiscuous mode [ 67.632317][ T4815] loop1: detected capacity change from 0 to 512 [ 67.641993][ T4815] EXT4-fs: Ignoring removed i_version option [ 67.648082][ T4815] EXT4-fs: Ignoring removed nobh option [ 67.655315][ T4815] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 67.667501][ T4768] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.677338][ T4815] EXT4-fs (loop1): 1 truncate cleaned up [ 67.683654][ T4815] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 67.687101][ T4768] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.710362][ T4813] hub 6-0:1.0: USB hub found [ 67.715068][ T4813] hub 6-0:1.0: 8 ports detected [ 67.741822][ T4768] team0: Port device team_slave_0 added [ 67.750086][ T4768] team0: Port device team_slave_1 added [ 67.765796][ T4768] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.772817][ T4768] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.798791][ T4768] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.812319][ T4768] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.819288][ T4768] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.845230][ T4768] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.875459][ T4768] hsr_slave_0: entered promiscuous mode [ 67.881474][ T4768] hsr_slave_1: entered promiscuous mode [ 67.887557][ T4768] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 67.899015][ T4768] Cannot create hsr debugfs directory [ 67.906590][ T4020] IPVS: stop unused estimator thread 0... [ 67.988331][ T4768] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 67.997295][ T4768] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 68.006961][ T4768] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 68.015679][ T4768] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 68.033101][ T4768] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.040151][ T4768] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.047566][ T4768] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.054616][ T4768] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.083816][ T4768] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.094909][ T28] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.102628][ T28] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.117681][ T4768] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.128339][ T3974] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.135471][ T3974] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.146639][ T3974] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.153763][ T3974] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.196181][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 68.231111][ T4768] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.364487][ T4848] blkio.bfq.io_se calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 68.364657][ T4768] veth0_vlan: entered promiscuous mode [ 68.401994][ T4768] veth1_vlan: entered promiscuous mode [ 68.419242][ T4768] veth0_macvtap: entered promiscuous mode [ 68.426646][ T4768] veth1_macvtap: entered promiscuous mode [ 68.438542][ T4768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.449041][ T4768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.458937][ T4768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.469367][ T4768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.479196][ T4768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.489620][ T4768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.499447][ T4768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.509910][ T4768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.522844][ T4768] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.535297][ T4768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.545831][ T4768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.555667][ T4768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.566144][ T4768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.576150][ T4768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.586689][ T4768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.596502][ T4768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.606966][ T4768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.618566][ T4768] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.618564][ T3321] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.636384][ T4768] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.645170][ T4768] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.653905][ T4768] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.662739][ T4768] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.623715][ T4868] netlink: 'syz.1.402': attribute type 16 has an invalid length. [ 69.631561][ T4868] netlink: 'syz.1.402': attribute type 17 has an invalid length. [ 69.640187][ T29] kauditd_printk_skb: 372 callbacks suppressed [ 69.640197][ T29] audit: type=1400 audit(1732134520.401:3153): avc: denied { ioctl } for pid=4867 comm="syz.1.402" path="socket:[9599]" dev="sockfs" ino=9599 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 69.670810][ T29] audit: type=1326 audit(1732134520.401:3154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4867 comm="syz.1.402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc08327e819 code=0x7ffc0000 [ 69.694208][ T29] audit: type=1326 audit(1732134520.401:3155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4867 comm="syz.1.402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc08327e819 code=0x7ffc0000 [ 69.717627][ T29] audit: type=1326 audit(1732134520.401:3156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4867 comm="syz.1.402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc08327e819 code=0x7ffc0000 [ 69.740934][ T29] audit: type=1326 audit(1732134520.401:3157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4867 comm="syz.1.402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc08327e819 code=0x7ffc0000 [ 69.764317][ T29] audit: type=1326 audit(1732134520.401:3158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4867 comm="syz.1.402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc08327e819 code=0x7ffc0000 [ 69.787696][ T29] audit: type=1326 audit(1732134520.401:3159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4867 comm="syz.1.402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc08327e819 code=0x7ffc0000 [ 69.811180][ T29] audit: type=1326 audit(1732134520.401:3160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4867 comm="syz.1.402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc08327e819 code=0x7ffc0000 [ 69.834572][ T29] audit: type=1326 audit(1732134520.401:3161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4867 comm="syz.1.402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc08327e819 code=0x7ffc0000 [ 69.858082][ T29] audit: type=1326 audit(1732134520.401:3162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4867 comm="syz.1.402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=282 compat=0 ip=0x7fc08327e819 code=0x7ffc0000 [ 69.910859][ T4868] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.918286][ T4868] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.989875][ T4868] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 70.000438][ T4868] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 70.014138][ T4868] hsr0: left promiscuous mode [ 70.124405][ T4868] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.133333][ T4868] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.142273][ T4868] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.151213][ T4868] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.187774][ T4875] netlink: 4 bytes leftover after parsing attributes in process `syz.5.403'. [ 70.196895][ T4875] bridge_slave_1: left allmulticast mode [ 70.202555][ T4875] bridge_slave_1: left promiscuous mode [ 70.208361][ T4875] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.256923][ T4875] bridge_slave_0: left allmulticast mode [ 70.262622][ T4875] bridge_slave_0: left promiscuous mode [ 70.268303][ T4875] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.376530][ T4866] netlink: 28 bytes leftover after parsing attributes in process `syz.0.401'. [ 70.385445][ T4866] netlink: 28 bytes leftover after parsing attributes in process `syz.0.401'. [ 70.399164][ T4866] bond0: entered promiscuous mode [ 70.404264][ T4866] bond_slave_0: entered promiscuous mode [ 70.409968][ T4866] bond_slave_1: entered promiscuous mode [ 70.419248][ T4866] batadv_slave_1: entered promiscuous mode [ 70.428958][ T4866] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 70.436599][ T4866] Cannot create hsr debugfs directory [ 70.443086][ T9] lo speed is unknown, defaulting to 1000 [ 70.451495][ T4866] netlink: 28 bytes leftover after parsing attributes in process `syz.0.401'. [ 70.460423][ T4866] netlink: 28 bytes leftover after parsing attributes in process `syz.0.401'. [ 70.499242][ T4879] tmpfs: Bad value for 'mpol' [ 70.824770][ T4888] wireguard0: entered promiscuous mode [ 70.830484][ T4888] wireguard0: entered allmulticast mode [ 71.519989][ T4906] netlink: 4 bytes leftover after parsing attributes in process `syz.2.415'. [ 71.603269][ T4908] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=4908 comm=syz.2.416 [ 71.679751][ T4912] netlink: 1392 bytes leftover after parsing attributes in process `syz.0.418'. [ 72.045638][ T4924] lo speed is unknown, defaulting to 1000 [ 72.142049][ T4927] netlink: 28 bytes leftover after parsing attributes in process `syz.2.422'. [ 72.347681][ T4938] netlink: 20 bytes leftover after parsing attributes in process `syz.3.425'. [ 72.356606][ T4938] netlink: 8 bytes leftover after parsing attributes in process `syz.3.425'. [ 72.431231][ T4936] lo speed is unknown, defaulting to 1000 [ 72.889896][ T4955] lo speed is unknown, defaulting to 1000 [ 73.030703][ T4964] loop1: detected capacity change from 0 to 2048 [ 73.075506][ T4964] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 73.109563][ T4964] ext4 filesystem being mounted at /91/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 73.183243][ T3321] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.391081][ T4988] xt_CT: You must specify a L4 protocol and not use inversions on it [ 73.426162][ T4988] bridge_slave_0: left allmulticast mode [ 73.432272][ T4988] bridge_slave_0: left promiscuous mode [ 73.439542][ T4988] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.861208][ T5010] lo speed is unknown, defaulting to 1000 [ 73.905478][ T5013] netlink: 'syz.0.450': attribute type 10 has an invalid length. [ 73.917161][ T5013] bridge0: port 1(team0) entered disabled state [ 73.924807][ T5013] team0: left allmulticast mode [ 73.929660][ T5013] team_slave_0: left allmulticast mode [ 73.935141][ T5013] team_slave_1: left allmulticast mode [ 73.940675][ T5013] team0: left promiscuous mode [ 73.945450][ T5013] team_slave_0: left promiscuous mode [ 73.950855][ T5013] team_slave_1: left promiscuous mode [ 73.956388][ T5013] bridge0: port 1(team0) entered disabled state [ 73.967452][ T5013] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.992361][ T5013] team0: entered promiscuous mode [ 73.997504][ T5013] team_slave_0: entered promiscuous mode [ 74.003212][ T5013] team_slave_1: entered promiscuous mode [ 74.010883][ T5013] bond0: (slave team0): Enslaving as an active interface with an up link [ 74.027077][ T5018] netlink: 'syz.0.450': attribute type 10 has an invalid length. [ 74.035912][ T5018] bond0: (slave team0): Releasing backup interface [ 74.043075][ T5018] team0: left promiscuous mode [ 74.047908][ T5018] team_slave_0: left promiscuous mode [ 74.053473][ T5018] team_slave_1: left promiscuous mode [ 74.075145][ T5018] bridge0: port 1(team0) entered blocking state [ 74.081440][ T5018] bridge0: port 1(team0) entered disabled state [ 74.094045][ T5018] team0: entered allmulticast mode [ 74.099199][ T5018] team_slave_0: entered allmulticast mode [ 74.105060][ T5018] team_slave_1: entered allmulticast mode [ 74.122232][ T5018] team0: entered promiscuous mode [ 74.127311][ T5018] team_slave_0: entered promiscuous mode [ 74.132996][ T5018] team_slave_1: entered promiscuous mode [ 74.171614][ T5021] netlink: 'syz.0.450': attribute type 10 has an invalid length. [ 74.195702][ T5021] veth0_vlan: left promiscuous mode [ 74.211844][ T5021] veth0_vlan: entered promiscuous mode [ 74.223065][ T5021] team0: Device veth0_vlan failed to register rx_handler [ 74.550852][ T5024] loop1: detected capacity change from 0 to 2048 [ 74.582892][ T5037] loop5: detected capacity change from 0 to 512 [ 74.595723][ T5037] EXT4-fs warning (device loop5): ext4_enable_quotas:7156: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 74.610744][ T5037] EXT4-fs (loop5): mount failed [ 74.639167][ T5024] loop1: unable to read partition table [ 74.644890][ T5024] loop1: partition table beyond EOD, truncated [ 74.651030][ T5024] loop_reread_partitions: partition scan of loop1 () failed (rc=-5) [ 74.696924][ T29] kauditd_printk_skb: 314 callbacks suppressed [ 74.696937][ T29] audit: type=1326 audit(1732134781.478:3476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5041 comm="syz.5.458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a10cae819 code=0x7ffc0000 [ 74.728354][ T29] audit: type=1326 audit(1732134781.478:3477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5041 comm="syz.5.458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a10cae819 code=0x7ffc0000 [ 74.759395][ T29] audit: type=1326 audit(1732134781.538:3478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5043 comm="syz.3.459" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08b849e819 code=0x7ffc0000 [ 74.782864][ T29] audit: type=1326 audit(1732134781.538:3479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5043 comm="syz.3.459" exe="/root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7f08b849e819 code=0x7ffc0000 [ 74.806223][ T29] audit: type=1326 audit(1732134781.538:3480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5043 comm="syz.3.459" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08b849e819 code=0x7ffc0000 [ 74.829647][ T29] audit: type=1326 audit(1732134781.538:3481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5043 comm="syz.3.459" exe="/root/syz-executor" sig=0 arch=c000003e syscall=242 compat=0 ip=0x7f08b849e819 code=0x7ffc0000 [ 74.853111][ T29] audit: type=1326 audit(1732134781.538:3482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5043 comm="syz.3.459" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08b849e819 code=0x7ffc0000 [ 74.876466][ T29] audit: type=1326 audit(1732134781.538:3483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5043 comm="syz.3.459" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08b849e819 code=0x7ffc0000 [ 74.924058][ T29] audit: type=1326 audit(1732134781.698:3484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5054 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc08327e819 code=0x7ffc0000 [ 74.946966][ T29] audit: type=1326 audit(1732134781.698:3485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5054 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc08327e819 code=0x7ffc0000 [ 75.015198][ T5061] loop1: detected capacity change from 0 to 256 [ 75.022078][ T5061] vfat: Bad value for 'time_offset' [ 75.042373][ T5064] Cannot find add_set index 0 as target [ 75.139266][ T5067] wireguard0: entered promiscuous mode [ 75.144891][ T5067] wireguard0: entered allmulticast mode [ 75.555305][ T5072] 9pnet: Could not find request transport: t [ 75.744759][ T5081] __nla_validate_parse: 6 callbacks suppressed [ 75.744781][ T5081] netlink: 4 bytes leftover after parsing attributes in process `syz.0.470'. [ 75.903194][ T5088] loop1: detected capacity change from 0 to 256 [ 76.097473][ T5097] program syz.1.476 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 76.215810][ T5114] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 76.224359][ T5114] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 76.233311][ T5114] rdma_op ffff88811884fd80 conn xmit_rdma 0000000000000000 [ 76.287790][ T5112] lo speed is unknown, defaulting to 1000 [ 76.413720][ T5124] xt_connbytes: Forcing CT accounting to be enabled [ 76.420483][ T5124] Cannot find add_set index 0 as target [ 76.621729][ T5127] lo speed is unknown, defaulting to 1000 [ 76.862538][ T5133] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 76.906001][ T5137] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 76.944198][ T5137] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 76.959224][ T5139] loop1: detected capacity change from 0 to 1024 [ 76.979073][ T5137] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.989285][ T5139] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 77.066048][ T5137] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.138265][ T5137] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.193680][ T5157] netlink: 36 bytes leftover after parsing attributes in process `syz.0.497'. [ 77.202638][ T5157] netlink: 36 bytes leftover after parsing attributes in process `syz.0.497'. [ 77.212357][ T5157] netlink: 36 bytes leftover after parsing attributes in process `syz.0.497'. [ 77.223621][ T5155] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 77.229555][ T5157] netlink: 36 bytes leftover after parsing attributes in process `syz.0.497'. [ 77.229572][ T5157] netlink: 36 bytes leftover after parsing attributes in process `syz.0.497'. [ 77.229602][ T5157] netlink: 36 bytes leftover after parsing attributes in process `syz.0.497'. [ 77.238486][ T5155] syzkaller0: Linktype set failed because interface is up [ 77.263560][ T3393] syzkaller0: tun_net_xmit 76 [ 77.270769][ T5155] hub 9-0:1.0: USB hub found [ 77.276872][ T5137] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.287338][ T5155] hub 9-0:1.0: 8 ports detected [ 77.310072][ T5157] netlink: 36 bytes leftover after parsing attributes in process `syz.0.497'. [ 77.319103][ T5157] netlink: 36 bytes leftover after parsing attributes in process `syz.0.497'. [ 77.329276][ T5157] netlink: 36 bytes leftover after parsing attributes in process `syz.0.497'. [ 77.393045][ T5137] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.419663][ T5137] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.476417][ T5137] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.506228][ T5167] team0 (unregistering): Port device team_slave_0 removed [ 77.526666][ T5167] team0 (unregistering): Port device team_slave_1 removed [ 77.576629][ T5137] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.754351][ T5173] loop5: detected capacity change from 0 to 4096 [ 77.762679][ T5173] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 77.784502][ T5139] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.831178][ T4768] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.848890][ T5176] macvlan0: entered promiscuous mode [ 77.855049][ T5176] ipvlan0: entered promiscuous mode [ 77.860740][ T5176] ipvlan0: left promiscuous mode [ 77.866763][ T5176] macvlan0: left promiscuous mode [ 77.905768][ T5184] loop5: detected capacity change from 0 to 512 [ 77.915627][ T5184] EXT4-fs warning (device loop5): ext4_enable_quotas:7156: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 77.930365][ T5184] EXT4-fs (loop5): mount failed [ 77.967216][ T5189] loop1: detected capacity change from 0 to 512 [ 78.015657][ T5189] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 78.028642][ T5189] ext4 filesystem being mounted at /105/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 78.066616][ T5189] EXT4-fs error (device loop1): ext4_do_update_inode:5153: inode #2: comm syz.1.508: corrupted inode contents [ 78.079799][ T5189] EXT4-fs error (device loop1): ext4_dirty_inode:6041: inode #2: comm syz.1.508: mark_inode_dirty error [ 78.107484][ T5197] bridge_slave_1: left allmulticast mode [ 78.113165][ T5197] bridge_slave_1: left promiscuous mode [ 78.118824][ T5197] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.126558][ T5189] EXT4-fs error (device loop1): ext4_do_update_inode:5153: inode #2: comm syz.1.508: corrupted inode contents [ 78.149347][ T5198] hub 1-0:1.0: USB hub found [ 78.156965][ T5198] hub 1-0:1.0: 8 ports detected [ 78.162070][ T5189] EXT4-fs error (device loop1): __ext4_ext_dirty:207: inode #2: comm syz.1.508: mark_inode_dirty error [ 78.198346][ T5191] lo speed is unknown, defaulting to 1000 [ 78.257774][ T3321] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.260656][ T5206] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5206 comm=syz.5.514 [ 78.307368][ T5212] lo speed is unknown, defaulting to 1000 [ 78.469437][ T5227] netlink: 'syz.5.519': attribute type 4 has an invalid length. [ 78.507792][ T5227] lo speed is unknown, defaulting to 1000 [ 78.790683][ T5231] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.866264][ T5231] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.936928][ T5235] loop5: detected capacity change from 0 to 2048 [ 78.943698][ T5235] EXT4-fs: Ignoring removed mblk_io_submit option [ 78.950201][ T5235] EXT4-fs: Ignoring removed i_version option [ 78.987353][ T5231] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.999394][ T5235] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem [ 79.018869][ T5235] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 79.055489][ T5231] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.072272][ T5237] loop1: detected capacity change from 0 to 8192 [ 79.111182][ T4768] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.125635][ T5231] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.136935][ T5231] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.151620][ T5231] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.170165][ T5231] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.373592][ T5248] loop2: detected capacity change from 0 to 4096 [ 79.394673][ T5248] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 79.401573][ T5250] loop5: detected capacity change from 0 to 1024 [ 79.488441][ T5250] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 79.597962][ T4768] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.757802][ T29] kauditd_printk_skb: 223 callbacks suppressed [ 79.757816][ T29] audit: type=1326 audit(1732134786.538:3708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5261 comm="syz.5.528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a10cae819 code=0x7ffc0000 [ 79.814297][ T5263] loop5: detected capacity change from 0 to 512 [ 79.859893][ T5263] EXT4-fs error (device loop5): ext4_xattr_block_get:596: inode #2: comm syz.5.528: corrupted xattr block 255: invalid header [ 79.894929][ T29] audit: type=1326 audit(1732134786.578:3709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5261 comm="syz.5.528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f6a10cae819 code=0x7ffc0000 [ 79.918355][ T29] audit: type=1326 audit(1732134786.578:3710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5261 comm="syz.5.528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f6a10cae853 code=0x7ffc0000 [ 79.941536][ T29] audit: type=1326 audit(1732134786.578:3711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5261 comm="syz.5.528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f6a10cad2ff code=0x7ffc0000 [ 79.964745][ T29] audit: type=1326 audit(1732134786.578:3712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5261 comm="syz.5.528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f6a10cae8a7 code=0x7ffc0000 [ 79.988030][ T29] audit: type=1326 audit(1732134786.578:3713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5261 comm="syz.5.528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f6a10cad1b0 code=0x7ffc0000 [ 80.011336][ T29] audit: type=1326 audit(1732134786.598:3714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5261 comm="syz.5.528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f6a10cae41b code=0x7ffc0000 [ 80.034763][ T29] audit: type=1326 audit(1732134786.628:3715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5261 comm="syz.5.528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f6a10cad4aa code=0x7ffc0000 [ 80.057995][ T29] audit: type=1326 audit(1732134786.628:3716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5261 comm="syz.5.528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f6a10cad4aa code=0x7ffc0000 [ 80.081153][ T29] audit: type=1326 audit(1732134786.628:3717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5261 comm="syz.5.528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f6a10cad0b7 code=0x7ffc0000 [ 80.333737][ T5263] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -117 [ 80.344387][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.364368][ T5263] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 80.385026][ T5263] EXT4-fs error (device loop5): ext4_xattr_block_get:596: inode #2: comm syz.5.528: corrupted xattr block 255: invalid header [ 80.431338][ T5267] lo speed is unknown, defaulting to 1000 [ 80.454277][ T5263] SELinux: (dev loop5, type ext4) getxattr errno 117 [ 80.477658][ T5263] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.598009][ T5279] bridge_slave_1: left allmulticast mode [ 80.603782][ T5279] bridge_slave_1: left promiscuous mode [ 80.609587][ T5279] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.618446][ T5279] bridge_slave_0: left allmulticast mode [ 80.624129][ T5279] bridge_slave_0: left promiscuous mode [ 80.629898][ T5279] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.732037][ T5283] hub 6-0:1.0: USB hub found [ 80.736940][ T5283] hub 6-0:1.0: 8 ports detected [ 80.751843][ T5280] netlink: 'syz.2.532': attribute type 4 has an invalid length. [ 80.820021][ T5282] lo speed is unknown, defaulting to 1000 [ 81.775867][ T5297] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 81.782402][ T5297] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 81.790031][ T5297] vhci_hcd vhci_hcd.0: Device attached [ 82.076173][ T5300] vhci_hcd: connection closed [ 82.076365][ T4020] vhci_hcd: stop threads [ 82.085466][ T4020] vhci_hcd: release socket [ 82.089887][ T4020] vhci_hcd: disconnect device [ 82.359605][ T5309] loop1: detected capacity change from 0 to 1024 [ 82.376779][ T5309] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 82.413336][ T5309] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 82.429914][ T5309] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 64 with error 28 [ 82.442234][ T5309] EXT4-fs (loop1): This should not happen!! Data will be lost [ 82.442234][ T5309] [ 82.451902][ T5309] EXT4-fs (loop1): Total free blocks count 0 [ 82.457933][ T5309] EXT4-fs (loop1): Free/Dirty block details [ 82.463828][ T5309] EXT4-fs (loop1): free_blocks=68451041280 [ 82.469727][ T5309] EXT4-fs (loop1): dirty_blocks=64 [ 82.474832][ T5309] EXT4-fs (loop1): Block reservation details [ 82.480784][ T5309] EXT4-fs (loop1): i_reserved_data_blocks=4 [ 82.546762][ T3321] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.580041][ T5315] can0: slcan on ttyS3. [ 82.586453][ T5320] loop1: detected capacity change from 0 to 512 [ 82.614840][ T5320] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 82.635307][ T5323] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.654466][ T5315] can0 (unregistered): slcan off ttyS3. [ 82.660135][ T5320] ext4 filesystem being mounted at /112/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 82.735123][ T5323] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.749227][ T5320] __nla_validate_parse: 11 callbacks suppressed [ 82.749242][ T5320] netlink: 4 bytes leftover after parsing attributes in process `syz.1.545'. [ 82.769692][ T5320] team0 (unregistering): Port device team_slave_0 removed [ 82.777666][ T5320] team0 (unregistering): Port device geneve1 removed [ 82.789188][ T5323] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.885833][ T5323] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.909075][ T5335] loop5: detected capacity change from 0 to 512 [ 82.916206][ T5335] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 82.940175][ T5335] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 82.944072][ T5323] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.964416][ T5323] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.973980][ T5335] ext4 filesystem being mounted at /34/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 82.976266][ T5323] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.996011][ T5323] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.011648][ T5335] EXT4-fs error (device loop5): __ext4_remount:6749: comm syz.5.549: Abort forced by user [ 83.022394][ T5335] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000d40000 ro. Quota mode: writeback. [ 83.142611][ T5348] loop2: detected capacity change from 0 to 1024 [ 83.155693][ T5348] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 83.167881][ T5348] ext4 filesystem being mounted at /96/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 83.185331][ T5348] Process accounting resumed [ 83.199807][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.223139][ T5357] syz.2.553[5357] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 83.223222][ T5357] syz.2.553[5357] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 83.235778][ T5357] syz.2.553[5357] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 83.259149][ T5357] lo speed is unknown, defaulting to 1000 [ 83.567190][ T5362] random: crng reseeded on system resumption [ 83.639174][ T4768] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 83.697465][ T5374] lo speed is unknown, defaulting to 1000 [ 83.848570][ T3321] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 83.960545][ T5383] hub 6-0:1.0: USB hub found [ 83.965312][ T5383] hub 6-0:1.0: 8 ports detected [ 84.885154][ T29] kauditd_printk_skb: 130 callbacks suppressed [ 84.885169][ T29] audit: type=1326 audit(1732134791.638:3848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5369 comm="syz.3.557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08b849e819 code=0x7ffc0000 [ 84.927765][ T5395] netlink: 24 bytes leftover after parsing attributes in process `syz.0.566'. [ 84.973839][ T29] audit: type=1400 audit(1732134791.708:3850): avc: denied { bind } for pid=5394 comm="syz.0.566" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 84.994114][ T29] audit: type=1326 audit(1732134791.638:3849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5369 comm="syz.3.557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f08b849e819 code=0x7ffc0000 [ 85.017481][ T29] audit: type=1326 audit(1732134791.708:3851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5369 comm="syz.3.557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08b849e819 code=0x7ffc0000 [ 85.040783][ T29] audit: type=1326 audit(1732134791.708:3852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5369 comm="syz.3.557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08b849e819 code=0x7ffc0000 [ 85.880429][ T5430] netlink: 16 bytes leftover after parsing attributes in process `syz.3.571'. [ 85.890993][ T5430] syz.3.571[5430] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 85.891073][ T5430] syz.3.571[5430] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 85.907909][ T5430] netlink: 24 bytes leftover after parsing attributes in process `syz.3.571'. [ 85.932535][ T5432] netlink: 4 bytes leftover after parsing attributes in process `syz.0.573'. [ 85.941722][ T5432] team0: left allmulticast mode [ 85.946701][ T5432] team_slave_0: left allmulticast mode [ 85.952200][ T5432] team_slave_1: left allmulticast mode [ 85.952245][ T5432] team0: left promiscuous mode [ 85.962524][ T5432] team_slave_0: left promiscuous mode [ 85.968009][ T5432] team_slave_1: left promiscuous mode [ 85.968250][ T5432] bridge0: port 1(team0) entered disabled state [ 86.006877][ T5429] loop1: detected capacity change from 0 to 512 [ 86.007688][ T5429] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 86.009688][ T5432] bridge_slave_1: left allmulticast mode [ 86.009702][ T5432] bridge_slave_1: left promiscuous mode [ 86.009807][ T5432] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.021143][ T5429] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 86.021201][ T5429] ext4 filesystem being mounted at /114/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 86.041138][ T5429] EXT4-fs error (device loop1): __ext4_remount:6749: comm syz.1.572: Abort forced by user [ 86.041391][ T5429] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000d40000 ro. Quota mode: writeback. [ 86.555776][ T5511] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 86.562431][ T5511] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 86.570116][ T5511] vhci_hcd vhci_hcd.0: Device attached [ 86.591445][ T5512] vhci_hcd: connection closed [ 86.593481][ T3976] vhci_hcd: stop threads [ 86.602490][ T3976] vhci_hcd: release socket [ 86.607014][ T3976] vhci_hcd: disconnect device [ 86.662971][ T3321] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 86.724381][ T29] audit: type=1400 audit(1732134793.508:3853): avc: denied { execute } for pid=5518 comm="syz.1.588" path=2F6D656D66643A59FFFF202864656C6574656429 dev="hugetlbfs" ino=12453 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 86.783355][ T5519] loop1: detected capacity change from 0 to 1764 [ 86.795925][ T29] audit: type=1400 audit(1732134793.538:3854): avc: denied { mount } for pid=5518 comm="syz.1.588" name="/" dev="hugetlbfs" ino=12455 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 86.818917][ T29] audit: type=1400 audit(1732134793.568:3855): avc: denied { mounton } for pid=5518 comm="syz.1.588" path="/115/file0/file0" dev="hugetlbfs" ino=12456 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=dir permissive=1 [ 86.842357][ T29] audit: type=1400 audit(1732134793.578:3856): avc: denied { write } for pid=2999 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 86.864727][ T29] audit: type=1400 audit(1732134793.578:3857): avc: denied { remove_name } for pid=2999 comm="syslogd" name="messages" dev="tmpfs" ino=6 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 86.914569][ T5523] lo speed is unknown, defaulting to 1000 [ 87.365832][ T5529] netlink: 24 bytes leftover after parsing attributes in process `syz.2.582'. [ 87.382294][ T5530] netlink: 'syz.3.577': attribute type 10 has an invalid length. [ 87.392631][ T5530] batman_adv: batadv0: Adding interface: team0 [ 87.398942][ T5530] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.424104][ T5530] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 87.436223][ T5532] netlink: 'syz.3.577': attribute type 10 has an invalid length. [ 87.443990][ T5532] netlink: 2 bytes leftover after parsing attributes in process `syz.3.577'. [ 87.452989][ T5532] team0: entered promiscuous mode [ 87.458096][ T5532] team_slave_0: entered promiscuous mode [ 87.463934][ T5532] team_slave_1: entered promiscuous mode [ 87.472152][ T5532] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.479474][ T5532] batman_adv: batadv0: Interface activated: team0 [ 87.486005][ T5532] batman_adv: batadv0: Interface deactivated: team0 [ 87.492641][ T5532] batman_adv: batadv0: Removing interface: team0 [ 87.578099][ T5536] netlink: '+}[@': attribute type 2 has an invalid length. [ 87.585444][ T5536] netlink: '+}[@': attribute type 8 has an invalid length. [ 87.592652][ T5536] netlink: 132 bytes leftover after parsing attributes in process `+}[@'. [ 87.715649][ T5541] loop2: detected capacity change from 0 to 256 [ 87.770839][ T5541] FAT-fs (loop2): codepage cp855 not found [ 87.959583][ T5548] bond0: entered promiscuous mode [ 87.964669][ T5548] bond0: entered allmulticast mode [ 87.997224][ T5548] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.005418][ T5547] Cannot find add_set index 0 as target [ 88.037389][ T5548] bond0 (unregistering): Released all slaves [ 88.085896][ T5556] usb usb1: usbfs: interface 0 claimed by hub while 'syz.3.590' sets config #0 [ 88.127568][ T5556] usb usb1: usbfs: interface 0 claimed by hub while 'syz.3.590' sets config #1 [ 88.220012][ T5558] loop5: detected capacity change from 0 to 8192 [ 88.230244][ T5563] syz.3.592[5563] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 88.230300][ T5563] syz.3.592[5563] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 88.265141][ T5565] loop1: detected capacity change from 0 to 128 [ 88.292807][ T5563] syz.3.592[5563] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 88.329245][ T5565] syz.1.593: attempt to access beyond end of device [ 88.329245][ T5565] loop1: rw=2049, sector=145, nr_sectors = 88 limit=128 [ 88.390044][ T5565] syz.1.593: attempt to access beyond end of device [ 88.390044][ T5565] loop1: rw=34817, sector=97, nr_sectors = 32 limit=128 [ 88.426047][ T5565] syz.1.593: attempt to access beyond end of device [ 88.426047][ T5565] loop1: rw=34817, sector=145, nr_sectors = 88 limit=128 [ 88.459421][ T5570] netlink: 16 bytes leftover after parsing attributes in process `syz.1.593'. [ 88.500153][ T5565] syz.1.593[5565] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 88.500221][ T5565] syz.1.593[5565] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 88.526476][ T5565] netlink: 24 bytes leftover after parsing attributes in process `syz.1.593'. [ 88.611897][ T5578] netlink: 24 bytes leftover after parsing attributes in process `syz.1.596'. [ 88.720706][ T3393] hid-generic 0000:0003:0000.0003: unknown main item tag 0x0 [ 88.728172][ T3393] hid-generic 0000:0003:0000.0003: unknown main item tag 0x0 [ 88.735645][ T3393] hid-generic 0000:0003:0000.0003: unknown main item tag 0x0 [ 88.754592][ T3393] hid-generic 0000:0003:0000.0003: unknown main item tag 0x0 [ 88.762080][ T3393] hid-generic 0000:0003:0000.0003: unknown main item tag 0x0 [ 88.769525][ T3393] hid-generic 0000:0003:0000.0003: unknown main item tag 0x0 [ 88.776975][ T3393] hid-generic 0000:0003:0000.0003: unknown main item tag 0x0 [ 88.784482][ T3393] hid-generic 0000:0003:0000.0003: unknown main item tag 0x0 [ 88.791866][ T3393] hid-generic 0000:0003:0000.0003: unknown main item tag 0x0 [ 88.799329][ T3393] hid-generic 0000:0003:0000.0003: unknown main item tag 0x0 [ 88.806730][ T3393] hid-generic 0000:0003:0000.0003: unknown main item tag 0x0 [ 88.814208][ T3393] hid-generic 0000:0003:0000.0003: unknown main item tag 0x0 [ 88.821595][ T3393] hid-generic 0000:0003:0000.0003: unknown main item tag 0x0 [ 88.829118][ T3393] hid-generic 0000:0003:0000.0003: unknown main item tag 0x0 [ 88.836594][ T3393] hid-generic 0000:0003:0000.0003: unknown main item tag 0x0 [ 88.844154][ T3393] hid-generic 0000:0003:0000.0003: unknown main item tag 0x0 [ 88.851557][ T3393] hid-generic 0000:0003:0000.0003: unknown main item tag 0x0 [ 88.858987][ T3393] hid-generic 0000:0003:0000.0003: unknown main item tag 0x0 [ 88.866388][ T3393] hid-generic 0000:0003:0000.0003: unknown main item tag 0x0 [ 88.897569][ T3393] hid-generic 0000:0003:0000.0003: unknown main item tag 0x0 [ 88.905024][ T3393] hid-generic 0000:0003:0000.0003: unknown main item tag 0x0 [ 88.912406][ T3393] hid-generic 0000:0003:0000.0003: unknown main item tag 0x0 [ 88.919835][ T3393] hid-generic 0000:0003:0000.0003: unknown main item tag 0x0 [ 88.927230][ T3393] hid-generic 0000:0003:0000.0003: unknown main item tag 0x0 [ 88.934689][ T3393] hid-generic 0000:0003:0000.0003: unknown main item tag 0x0 [ 88.942080][ T3393] hid-generic 0000:0003:0000.0003: unknown main item tag 0x0 [ 88.949531][ T3393] hid-generic 0000:0003:0000.0003: unknown main item tag 0x0 [ 88.956929][ T3393] hid-generic 0000:0003:0000.0003: unknown main item tag 0x0 [ 88.964339][ T3393] hid-generic 0000:0003:0000.0003: unknown main item tag 0x0 [ 88.971725][ T3393] hid-generic 0000:0003:0000.0003: unknown main item tag 0x0 [ 88.979143][ T3393] hid-generic 0000:0003:0000.0003: unknown main item tag 0x0 [ 88.986636][ T3393] hid-generic 0000:0003:0000.0003: unknown main item tag 0x0 [ 88.994095][ T3393] hid-generic 0000:0003:0000.0003: unknown main item tag 0x0 [ 89.001537][ T3393] hid-generic 0000:0003:0000.0003: unknown main item tag 0x0 [ 89.008985][ T3393] hid-generic 0000:0003:0000.0003: unknown main item tag 0x0 [ 89.023293][ T3393] hid-generic 0000:0003:0000.0003: hidraw0: HID v0.00 Device [syz0] on syz0 [ 89.272091][ T5598] loop5: detected capacity change from 0 to 2048 [ 89.326404][ T5598] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 89.448364][ T4768] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.471235][ T5604] netlink: 28 bytes leftover after parsing attributes in process `syz.3.616'. [ 89.542177][ T5606] netlink: 'syz.3.606': attribute type 1 has an invalid length. [ 89.572593][ T5608] usb usb1: usbfs: interface 0 claimed by hub while 'syz.5.605' sets config #0 [ 89.584750][ T5608] usb usb1: usbfs: interface 0 claimed by hub while 'syz.5.605' sets config #1 [ 89.889505][ T5613] loop5: detected capacity change from 0 to 128 [ 89.909305][ T5613] syz.5.609: attempt to access beyond end of device [ 89.909305][ T5613] loop5: rw=2049, sector=145, nr_sectors = 88 limit=128 [ 89.934509][ T5613] syz.5.609: attempt to access beyond end of device [ 89.934509][ T5613] loop5: rw=34817, sector=97, nr_sectors = 32 limit=128 [ 89.951153][ T5613] syz.5.609: attempt to access beyond end of device [ 89.951153][ T5613] loop5: rw=34817, sector=145, nr_sectors = 88 limit=128 [ 89.966824][ T5613] netlink: 16 bytes leftover after parsing attributes in process `syz.5.609'. [ 89.978647][ T5613] syz.5.609[5613] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 89.978728][ T5613] syz.5.609[5613] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 89.995523][ T5613] netlink: 24 bytes leftover after parsing attributes in process `syz.5.609'. [ 90.191331][ T5635] netlink: 8 bytes leftover after parsing attributes in process `syz.5.617'. [ 90.216844][ T5635] loop5: detected capacity change from 0 to 256 [ 90.255891][ T5635] FAT-fs (loop5): Directory bread(block 64) failed [ 90.262469][ T5635] FAT-fs (loop5): Directory bread(block 65) failed [ 90.272513][ T5635] FAT-fs (loop5): Directory bread(block 66) failed [ 90.279388][ T5635] FAT-fs (loop5): Directory bread(block 67) failed [ 90.281155][ T29] kauditd_printk_skb: 60 callbacks suppressed [ 90.281166][ T29] audit: type=1400 audit(1732134797.068:3918): avc: denied { mount } for pid=5637 comm="syz.2.618" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 90.286403][ T5635] FAT-fs (loop5): Directory bread(block 68) failed [ 90.323576][ T5635] FAT-fs (loop5): Directory bread(block 69) failed [ 90.330556][ T5635] FAT-fs (loop5): Directory bread(block 70) failed [ 90.337392][ T5635] FAT-fs (loop5): Directory bread(block 71) failed [ 90.344087][ T5635] FAT-fs (loop5): Directory bread(block 72) failed [ 90.350944][ T5635] FAT-fs (loop5): Directory bread(block 73) failed [ 90.440712][ T29] audit: type=1400 audit(1732134797.218:3919): avc: denied { unmount } for pid=3318 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 90.598704][ T29] audit: type=1400 audit(1732134797.378:3920): avc: denied { mount } for pid=5664 comm="syz.5.623" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 90.625783][ T5669] loop2: detected capacity change from 0 to 256 [ 90.664397][ T5668] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.678883][ T5669] FAT-fs (loop2): codepage cp855 not found [ 90.795381][ T5668] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.915596][ T5668] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.030174][ T5668] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.170745][ T5668] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.187742][ T5668] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.199477][ T5668] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.215325][ T5668] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.269541][ T5681] hub 1-0:1.0: USB hub found [ 91.282636][ T5681] hub 1-0:1.0: 8 ports detected [ 91.366964][ T5685] netlink: 4 bytes leftover after parsing attributes in process `syz.1.630'. [ 91.437233][ T5685] hsr_slave_1 (unregistering): left promiscuous mode [ 91.457461][ T3391] IPVS: starting estimator thread 0... [ 91.458315][ T5683] loop5: detected capacity change from 0 to 8192 [ 91.480497][ T5688] tipc: Started in network mode [ 91.485482][ T5688] tipc: Node identity ac1414aa, cluster identity 4711 [ 91.522225][ T5688] tipc: Enabled bearer , priority 10 [ 91.528611][ T5683] netlink: 80 bytes leftover after parsing attributes in process `syz.5.628'. [ 91.538518][ T5683] netlink: 12 bytes leftover after parsing attributes in process `syz.5.628'. [ 91.544209][ T5689] IPVS: using max 2976 ests per chain, 148800 per kthread [ 91.612313][ T5691] delete_channel: no stack [ 91.613982][ T29] audit: type=1400 audit(1732134798.388:3921): avc: denied { create } for pid=5690 comm="syz.1.632" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 91.624347][ T5691] delete_channel: no stack [ 91.978840][ T5705] loop1: detected capacity change from 0 to 512 [ 92.004105][ T5705] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 92.012049][ T5705] EXT4-fs (loop1): orphan cleanup on readonly fs [ 92.069598][ T29] audit: type=1400 audit(1732134798.848:3922): avc: denied { map } for pid=5696 comm="syz.5.635" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=162 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 92.093727][ T29] audit: type=1400 audit(1732134798.848:3923): avc: denied { execute } for pid=5696 comm="syz.5.635" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=162 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 92.130998][ T5705] Quota error (device loop1): v2_read_file_info: Block with free entry 1 out of range (1, 6). [ 92.162113][ T5705] EXT4-fs warning (device loop1): ext4_enable_quotas:7156: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 92.209491][ T5705] EXT4-fs (loop1): Cannot turn on quotas: error -117 [ 92.228740][ T5705] EXT4-fs error (device loop1): ext4_orphan_get:1389: inode #16: comm syz.1.638: casefold flag without casefold feature [ 92.261881][ T5705] EXT4-fs error (device loop1): ext4_orphan_get:1394: comm syz.1.638: couldn't read orphan inode 16 (err -117) [ 92.286554][ T5705] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 92.318752][ T29] audit: type=1326 audit(1732134799.098:3924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5704 comm="syz.1.638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc08327e819 code=0x7ffc0000 [ 92.369043][ T29] audit: type=1326 audit(1732134799.098:3925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5704 comm="syz.1.638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc08327e819 code=0x7ffc0000 [ 92.392402][ T29] audit: type=1326 audit(1732134799.098:3926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5704 comm="syz.1.638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc08327e819 code=0x7ffc0000 [ 92.420103][ T3321] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.442703][ T3321] ================================================================== [ 92.450786][ T3321] BUG: KCSAN: data-race in __lru_add_drain_all / folio_add_lru [ 92.458335][ T3321] [ 92.460661][ T3321] read-write to 0xffff888237c2aca8 of 1 bytes by task 5665 on cpu 0: [ 92.468721][ T3321] folio_add_lru+0xa3/0x1f0 [ 92.473221][ T3321] folio_add_lru_vma+0x48/0x60 [ 92.478001][ T3321] do_wp_page+0x17a5/0x2340 [ 92.482539][ T3321] handle_mm_fault+0xc47/0x2aa0 [ 92.487395][ T3321] exc_page_fault+0x296/0x650 [ 92.492071][ T3321] asm_exc_page_fault+0x26/0x30 [ 92.496932][ T3321] __put_user_nocheck_4+0x7/0x20 [ 92.501887][ T3321] ____sys_recvmsg+0x1a3/0x280 [ 92.506658][ T3321] do_recvmmsg+0x2aa/0x6d0 [ 92.511083][ T3321] __x64_sys_recvmmsg+0xe2/0x170 [ 92.516027][ T3321] x64_sys_call+0x2a9a/0x2dc0 [ 92.520710][ T3321] do_syscall_64+0xc9/0x1c0 [ 92.525219][ T3321] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 92.531108][ T3321] [ 92.533430][ T3321] read to 0xffff888237c2aca8 of 1 bytes by task 3321 on cpu 1: [ 92.540981][ T3321] __lru_add_drain_all+0x136/0x3f0 [ 92.546093][ T3321] lru_add_drain_all+0x10/0x20 [ 92.550857][ T3321] invalidate_bdev+0x47/0x70 [ 92.555459][ T3321] ext4_put_super+0x571/0x840 [ 92.560160][ T3321] generic_shutdown_super+0xe5/0x220 [ 92.565450][ T3321] kill_block_super+0x2a/0x70 [ 92.570135][ T3321] ext4_kill_sb+0x44/0x80 [ 92.574484][ T3321] deactivate_locked_super+0x7d/0x1c0 [ 92.579855][ T3321] deactivate_super+0x9f/0xb0 [ 92.584531][ T3321] cleanup_mnt+0x268/0x2e0 [ 92.588953][ T3321] __cleanup_mnt+0x19/0x20 [ 92.593390][ T3321] task_work_run+0x13a/0x1a0 [ 92.597987][ T3321] syscall_exit_to_user_mode+0xa8/0x120 [ 92.603537][ T3321] do_syscall_64+0xd6/0x1c0 [ 92.608067][ T3321] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 92.613964][ T3321] [ 92.616289][ T3321] value changed: 0x19 -> 0x1a [ 92.620956][ T3321] [ 92.623277][ T3321] Reported by Kernel Concurrency Sanitizer on: [ 92.629423][ T3321] CPU: 1 UID: 0 PID: 3321 Comm: syz-executor Not tainted 6.12.0-syzkaller-01892-g8f7c8b88bda4 #0 [ 92.639930][ T3321] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 92.643948][ T3391] tipc: Node number set to 2886997162 [ 92.649975][ T3321] ==================================================================