last executing test programs: 14.50621052s ago: executing program 3 (id=6589): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) close(r0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) close(r0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r2, &(0x7f0000000080), &(0x7f0000000a40)=""/166}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) ptrace(0x10, 0x1) r4 = inotify_init1(0x0) fcntl$setown(r4, 0x8, 0xffffffffffffffff) fcntl$getownex(r4, 0x10, &(0x7f0000000380)={0x0, 0x0}) ptrace$getenv(0x4204, r5, 0x201, &(0x7f0000000000)) 4.370405998s ago: executing program 1 (id=6657): r0 = inotify_init() r1 = creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) sendmsg$TIPC_NL_NET_GET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000), 0xc, 0x0}, 0x0) inotify_add_watch(r0, &(0x7f0000000240)='./file0\x00', 0x8c7) write$binfmt_elf32(r1, &(0x7f0000000040)=ANY=[], 0x69) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) 4.269548396s ago: executing program 1 (id=6658): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800004e9d00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000200)='jbd2_write_superblock\x00', r1}, 0x10) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r2) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r3 = inotify_init1(0x0) fcntl$setown(r3, 0x8, 0xffffffffffffffff) fcntl$getownex(r3, 0x10, &(0x7f0000000140)={0x0, 0x0}) r5 = syz_open_procfs(r4, &(0x7f0000000040)='fd/4\x00') ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r5, 0x40086610, &(0x7f0000000180)={@id={0x40000, 0x0, @b}}) 4.140078048s ago: executing program 1 (id=6660): r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) write(r1, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='.\x00', 0x0, 0x0, 0x0) r2 = inotify_init1(0x0) fcntl$setown(r2, 0x8, 0xffffffffffffffff) fcntl$getownex(r2, 0x10, &(0x7f0000000140)={0x0, 0x0}) setitimer(0x0, &(0x7f0000000580)={{}, {0x6}}, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000fbff000000000000001d8500000007000000850000002300000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='kmem_cache_free\x00', r4}, 0x10) r5 = signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) mkdir(&(0x7f0000000140)='./control\x00', 0x0) close(r5) r6 = inotify_init1(0x0) fcntl$setstatus(r5, 0x4, 0x2c00) gettid() fcntl$setsig(r6, 0xa, 0xe) rmdir(&(0x7f0000000100)='./control\x00') r7 = syz_open_procfs(r3, &(0x7f0000000600)='fd/4\x00') ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r7, 0xc0185879, &(0x7f0000000180)={@id={0xe400, 0x0, @auto="ffee8e3f00"}}) 4.11156446s ago: executing program 1 (id=6662): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000008000000000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r1}, 0x10) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 4.077900113s ago: executing program 1 (id=6663): syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000240)={0xb, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) getpid() sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) umount2(0x0, 0xa) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r1}, 0x10) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e000000020013000200000000000000ff0800ed05000600200000000a00060000000000ff0000000000000000001ffeff0001000003f1dc7f7c6e7c0200010000000000004000020000000005000500000000000a"], 0x80}}, 0x0) sendmmsg(r2, &(0x7f0000000180), 0x400008a, 0x0) 3.970540752s ago: executing program 2 (id=6665): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000003680)='sched_switch\x00', r2}, 0x10) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@minixdf}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") 3.829230605s ago: executing program 1 (id=6666): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) close(r0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) close(r0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r2, &(0x7f0000000080), &(0x7f0000000a40)=""/166}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) ptrace(0x10, 0x1) r4 = inotify_init1(0x0) fcntl$setown(r4, 0x8, 0xffffffffffffffff) fcntl$getownex(r4, 0x10, &(0x7f0000000380)={0x0, 0x0}) ptrace$getenv(0x4204, r5, 0x201, &(0x7f0000000000)) 3.190593651s ago: executing program 0 (id=6674): mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0xffffc000) bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r3}, 0x10) epoll_create(0x1ff) 2.86031514s ago: executing program 2 (id=6675): socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000000)={0xffffffffffffffff, 0xe0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffdb4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe15, 0x5, 0x0, 0x0, 0xfffffffffffffd53, 0x0, 0x8, 0xffffffffffffff4b, 0x0}}, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000740)={r0, &(0x7f0000000000), &(0x7f00000000c0)=""/109}, 0x20) openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000a80), 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) ptrace$setregs(0xd, r6, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") ptrace$getregset(0x4204, r6, 0x200, &(0x7f0000000740)={0x0}) 2.638676459s ago: executing program 4 (id=6676): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x3, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.stat\x00', 0x26e1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x2, 0x4, 0x10008, 0x1, 0x0, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000240)={0x8, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000017850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r3}, 0x10) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000000480)=ANY=[@ANYBLOB="08000000000000000a00000000000000ff010000000000000000000000000001"], 0x5000) 2.210575457s ago: executing program 0 (id=6677): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) unshare(0x22020600) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00') setns(r2, 0x0) 2.133367263s ago: executing program 0 (id=6678): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) r2 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) close(r2) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xa, &(0x7f0000000000)=0x2, 0x4) setsockopt$packet_tx_ring(r3, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000640), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) sendto$packet(r3, 0x0, 0x0, 0x0, &(0x7f0000003340)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) 2.098429287s ago: executing program 0 (id=6679): prlimit64(0x0, 0xe, 0x0, 0x0) getrlimit(0x9, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000008002b000000000000000018040000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r2}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000100), 0x45e, 0x101781) 2.098089166s ago: executing program 4 (id=6680): r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[], 0x1c}}, 0x0) getpeername$packet(r0, 0x0, &(0x7f00000005c0)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000000)={'sit0\x00', &(0x7f0000000440)={'syztnl1\x00', 0x0, 0x0, 0x40, 0x7, 0x200, {{0x13, 0x4, 0x3, 0x1, 0x4c, 0x68, 0x0, 0x4, 0x29, 0x0, @broadcast, @private=0xa010101, {[@timestamp_prespec={0x44, 0x4, 0xeb, 0x3, 0x7}, @timestamp_addr={0x44, 0x4, 0x84, 0x1, 0xb}, @timestamp={0x44, 0xc, 0x9c, 0x0, 0xa, [0x3, 0x3]}, @generic={0x83, 0x12, "7c5d95f1076cd9fb40a7202d76ba3942"}, @generic={0x7, 0x2}, @generic={0x5, 0x3, '{'}, @timestamp_prespec={0x44, 0xc, 0xd1, 0x3, 0xe, [{@empty, 0x5}]}]}}}}}) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x8, '\x00', r5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x2d) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) epoll_create1(0x0) r9 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r9, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x3c1, 0x3, 0x358, 0x0, 0x4c, 0x1a, 0x0, 0x73, 0x288, 0x258, 0x258, 0x288, 0x258, 0x3, 0x0, {[{{@ipv6={@private0, @local, [], [], 'wg2\x00', 'macvlan1\x00', {}, {}, 0x73}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x3, 0x0, 0x7}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}, {{@uncond, 0x0, 0xf8, 0x128, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@hl={{0x28}}]}, @common=@inet=@SET2={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x5400}}, {0x28}}}}, 0x3b8) 1.914566142s ago: executing program 2 (id=6681): bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000020000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10) chdir(0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 1.159356569s ago: executing program 4 (id=6682): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000080000000000000000000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r1}, 0x10) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 1.158971249s ago: executing program 0 (id=6683): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r0, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x20, 0x0, 0x708, 0x70bd26, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x9, 0x64}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0xc004) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x0, 0x6, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getpid() sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f0000005c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01000000000000000000030000005800018044000400200001000a00000400000000fe8000000000000000000000000000aafeff0000200002000a004e2200000007ff010000000000000000000000000001050000000d0001007564703a73"], 0x6c}}, 0x0) 1.123027432s ago: executing program 4 (id=6684): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000008000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r3}, 0x10) syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x0) 945.569077ms ago: executing program 3 (id=6656): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) syz_usb_connect(0x0, 0x24, &(0x7f0000004200)={{0x12, 0x1, 0x0, 0xe2, 0x79, 0x3b, 0x10, 0x5d1, 0x2001, 0x900, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x4d, 0x2f, 0x9c}}]}}]}}, 0x0) 675.278161ms ago: executing program 2 (id=6685): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000080)='sys_enter\x00', r0}, 0x10) openat2$dir(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', &(0x7f0000000040), 0x18) 660.303383ms ago: executing program 2 (id=6686): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01000000000000000000030000000500050008000000180001801400020073797a5f74756e"], 0x34}}, 0x0) 641.674444ms ago: executing program 2 (id=6687): mkdir(&(0x7f0000000180)='./file0\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000500)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000280)='ocfs2_dlmfs\x00', 0x0, 0x0) open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) renameat2(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000780)={'ip6gre0\x00', &(0x7f0000000700)={'syztnl0\x00', 0x0, 0x29, 0x40, 0x0, 0x4, 0x40, @ipv4={'\x00', '\xff\xff', @empty}, @local, 0x0, 0x7800, 0x3, 0xf}}) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) add_key(&(0x7f0000000440)='asymmetric\x00', 0x0, &(0x7f00000008c0)="308010", 0x10, r3) add_key$user(&(0x7f00000000c0), 0x0, &(0x7f00000003c0)="5c473b2212441647836b8e653b0049c405abbc0f83e189e58f0b55bc1f32c66725ffe3ffdd280aff527ed84824c982067ebdca", 0x33, r3) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000100)={0x3, &(0x7f0000000140)=[{0x44}, {}, {0x16, 0x3f}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x141f029329606bb5, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r4, 0x89f0, &(0x7f0000000000)={'ip6gre0\x00', &(0x7f0000000240)={'syztnl1\x00', 0x0, 0x4, 0xcc, 0x81, 0x9bc1, 0x4, @mcast2, @mcast1, 0x7, 0x10, 0xe16, 0x2}}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r5, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r6 = socket$packet(0x11, 0x2, 0x300) r7 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r7, 0x107, 0x12, &(0x7f0000000040), 0x4) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f00000000c0)={0x0, 0x2000}, 0x4) 349.556899ms ago: executing program 3 (id=6688): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) r2 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) close(r2) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xa, &(0x7f0000000000)=0x2, 0x4) setsockopt$packet_tx_ring(r3, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000640), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) sendto$packet(r3, 0x0, 0x0, 0x0, &(0x7f0000003340)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) 237.73961ms ago: executing program 4 (id=6689): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x3, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.stat\x00', 0x26e1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x2, 0x4, 0x10008, 0x1, 0x0, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000240)={0x8, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000017850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r3}, 0x10) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000000480)=ANY=[@ANYBLOB="08000000000000000a00000000000000ff010000000000000000000000000001"], 0x5000) 174.640455ms ago: executing program 3 (id=6690): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x5, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) tee(r2, r1, 0x8, 0x0) write$binfmt_script(r3, 0x0, 0xfffffe48) 115.57828ms ago: executing program 4 (id=6691): bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0xc9d7, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) openat$vcs(0xffffffffffffff9c, 0x0, 0x22200, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x2, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0xffffffffffffff74, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) unshare(0x40020000) 90.899172ms ago: executing program 0 (id=6692): socket$pppl2tp(0x18, 0x1, 0x1) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0x3, 0x0, 0x1, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x207, &(0x7f00000006c0)={[{@jqfmt_vfsold}, {@journal_path={'journal_path', 0x3d, './bus'}}, {@nojournal_checksum}], [{@euid_eq}, {@mask={'mask', 0x3d, 'MAY_READ'}}]}, 0x1, 0x475, &(0x7f00000024c0)="$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") 456.39µs ago: executing program 3 (id=6693): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000080000000000000000000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r1}, 0x10) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 0s ago: executing program 3 (id=6694): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000700000000000000000000850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) socket$packet(0x11, 0xa, 0x300) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'syz_tun\x00', 0x0}) bind$packet(r1, &(0x7f0000000300)={0x11, 0x0, r2}, 0x14) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000240)={'syz_tun\x00', 0x0}) bind$packet(r4, &(0x7f0000000300)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @remote}, 0x14) bind$inet(r3, 0x0, 0x0) connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0) kernel console output (not intermixed with test programs): unting filesystem 00000000-0000-0000-0000-000000000000. [ 533.155490][T21477] loop2: detected capacity change from 0 to 256 [ 533.166576][T21477] vfat: Bad value for 'shortname' [ 533.691589][T18094] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 534.469715][T21534] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 534.486831][T21534] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 534.969847][T21591] loop0: detected capacity change from 0 to 1024 [ 535.151718][T21591] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 535.177212][T21599] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5571'. [ 535.186312][T21599] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5571'. [ 535.732376][T21591] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2240: inode #15: comm syz.0.5569: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 535.750811][T21591] EXT4-fs (loop0): Remounting filesystem read-only [ 535.855815][T18094] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 536.313258][T21651] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 536.327341][T21651] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 536.600625][T21681] netlink: 87 bytes leftover after parsing attributes in process `syz.3.5583'. [ 537.404162][T21749] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 537.436111][T21749] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 537.473722][T21749] loop4: detected capacity change from 0 to 2048 [ 537.499459][T21749] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 537.730938][T21764] loop2: detected capacity change from 0 to 512 [ 537.805563][T21764] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 537.831698][T21764] ext4 filesystem being mounted at /180/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 538.041212][T16838] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 538.138551][T21771] tipc: Enabling of bearer rejected, already enabled [ 538.259432][T21773] loop2: detected capacity change from 0 to 256 [ 538.846238][T20059] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 539.202123][T21796] xt_hashlimit: size too large, truncated to 1048576 [ 539.699890][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 539.699905][ T29] audit: type=1400 audit(1725902721.458:1414): avc: denied { block_suspend } for pid=21799 comm="syz.2.5605" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 540.310285][T21814] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 540.419434][T21814] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 541.000157][T21814] loop3: detected capacity change from 0 to 2048 [ 541.151322][T21814] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 541.326979][T21827] loop4: detected capacity change from 0 to 256 [ 542.034563][T21831] tipc: Enabling of bearer rejected, already enabled [ 542.494533][T14886] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 542.613199][T21853] netlink: 87 bytes leftover after parsing attributes in process `syz.2.5622'. [ 542.741933][T21868] xt_hashlimit: size too large, truncated to 1048576 [ 542.886384][T21873] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 542.905029][T21873] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 543.019805][T21878] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 543.036162][T21878] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 543.065347][T21878] loop1: detected capacity change from 0 to 2048 [ 543.096752][T21878] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 543.432363][T21889] netlink: 87 bytes leftover after parsing attributes in process `syz.0.5635'. [ 543.498919][T21892] tipc: Enabling of bearer rejected, already enabled [ 544.137699][T17710] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 544.679203][T21920] netlink: 87 bytes leftover after parsing attributes in process `syz.4.5647'. [ 544.904885][T21936] loop0: detected capacity change from 0 to 1024 [ 544.939558][T21936] EXT4-fs error (device loop0): __ext4_fill_super:5435: inode #2: comm syz.0.5654: casefold flag without casefold feature [ 545.096262][T21936] EXT4-fs (loop0): get root inode failed [ 545.102041][T21936] EXT4-fs (loop0): mount failed [ 545.750148][T21955] netlink: 87 bytes leftover after parsing attributes in process `syz.0.5660'. [ 545.762646][T21953] loop2: detected capacity change from 0 to 1024 [ 545.829228][T21953] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 545.857500][T21959] EXT4-fs (sda1): resizing filesystem from 262144 to 262144 blocks [ 545.978482][ T29] audit: type=1326 audit(1725902727.738:1415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21966 comm="syz.0.5665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10677ecef9 code=0x7ffc0000 [ 546.002057][ T29] audit: type=1326 audit(1725902727.738:1416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21966 comm="syz.0.5665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10677ecef9 code=0x7ffc0000 [ 546.099853][ T29] audit: type=1326 audit(1725902727.788:1417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21966 comm="syz.0.5665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f10677ecef9 code=0x7ffc0000 [ 546.123473][ T29] audit: type=1326 audit(1725902727.788:1418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21966 comm="syz.0.5665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10677ecef9 code=0x7ffc0000 [ 546.147005][ T29] audit: type=1326 audit(1725902727.788:1419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21966 comm="syz.0.5665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f10677ecef9 code=0x7ffc0000 [ 546.170576][ T29] audit: type=1326 audit(1725902727.788:1420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21966 comm="syz.0.5665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10677ecef9 code=0x7ffc0000 [ 546.194386][ T29] audit: type=1326 audit(1725902727.788:1421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21966 comm="syz.0.5665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f10677ecef9 code=0x7ffc0000 [ 546.217963][ T29] audit: type=1326 audit(1725902727.788:1422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21966 comm="syz.0.5665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10677ecef9 code=0x7ffc0000 [ 546.241576][ T29] audit: type=1326 audit(1725902727.788:1423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21966 comm="syz.0.5665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f10677ecef9 code=0x7ffc0000 [ 546.265105][ T29] audit: type=1326 audit(1725902727.788:1424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21966 comm="syz.0.5665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10677ecef9 code=0x7ffc0000 [ 547.815363][T22017] netlink: 87 bytes leftover after parsing attributes in process `syz.3.5673'. [ 548.185108][T22071] netlink: 'syz.4.5674': attribute type 27 has an invalid length. [ 548.276078][T22079] loop0: detected capacity change from 0 to 1024 [ 548.436824][T22079] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 548.463831][T22085] xt_hashlimit: size too large, truncated to 1048576 [ 548.574605][T16838] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 548.590894][T22071] bridge0: port 2(bridge_slave_1) entered disabled state [ 548.598246][T22071] bridge0: port 1(bridge_slave_0) entered disabled state [ 548.609183][T22088] loop1: detected capacity change from 0 to 128 [ 548.846593][T22071] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 548.850180][T22092] loop1: detected capacity change from 0 to 512 [ 548.867647][T22071] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 548.885632][T22092] EXT4-fs (loop1): blocks per group (71) and clusters per group (20800) inconsistent [ 548.959712][T22071] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 548.968803][T22071] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 548.977729][T22071] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 548.986652][T22071] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 549.073266][T22080] 8021q: adding VLAN 0 to HW filter on device bond0 [ 549.131292][T22096] syz.1.5680[22096] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 549.131421][T22096] syz.1.5680[22096] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 549.168029][T22080] 8021q: adding VLAN 0 to HW filter on device team0 [ 549.481225][T18094] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 549.494990][T22080] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 549.627376][T22098] loop3: detected capacity change from 0 to 256 [ 549.701755][T22098] FAT-fs (loop3): codepage cp869 not found [ 549.959066][T22108] syz.3.5682[22108] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 549.959149][T22108] syz.3.5682[22108] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 550.042144][T22111] loop3: detected capacity change from 0 to 512 [ 550.125925][T22111] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 550.138631][T22111] ext4 filesystem being mounted at /267/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 550.167544][T22111] EXT4-fs error (device loop3): ext4_add_entry:2435: inode #2: comm syz.3.5682: Directory hole found for htree leaf block 0 [ 550.381545][T22121] loop4: detected capacity change from 0 to 256 [ 550.399990][T22121] vfat: Bad value for 'shortname' [ 550.566824][T14886] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 550.579822][T22128] syzkaller0: entered promiscuous mode [ 550.585403][T22128] syzkaller0: entered allmulticast mode [ 551.012914][T22135] loop0: detected capacity change from 0 to 512 [ 551.027485][T22135] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 551.040039][T22135] ext4 filesystem being mounted at /126/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 551.056648][T22139] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 551.093323][T22139] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 551.105600][T18094] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 551.228019][T22143] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5692'. [ 551.249154][T22143] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5692'. [ 551.281695][T22148] netlink: 'syz.2.5695': attribute type 27 has an invalid length. [ 551.358385][T22152] 8021q: adding VLAN 0 to HW filter on device bond0 [ 551.367028][T22152] 8021q: adding VLAN 0 to HW filter on device team0 [ 551.378761][T22152] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 551.466586][T22154] loop1: detected capacity change from 0 to 512 [ 551.482326][T22154] EXT4-fs (loop1): blocks per group (34) and clusters per group (32768) inconsistent [ 551.670880][ T29] kauditd_printk_skb: 8 callbacks suppressed [ 551.670897][ T29] audit: type=1400 audit(1725902733.428:1433): avc: denied { bind } for pid=22164 comm="syz.3.5701" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 551.696848][ T29] audit: type=1400 audit(1725902733.428:1434): avc: denied { write } for pid=22164 comm="syz.3.5701" name="ppp" dev="devtmpfs" ino=116 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 551.719884][ T29] audit: type=1400 audit(1725902733.428:1435): avc: denied { open } for pid=22164 comm="syz.3.5701" path="/dev/ppp" dev="devtmpfs" ino=116 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 551.743222][ T29] audit: type=1400 audit(1725902733.428:1436): avc: denied { ioctl } for pid=22164 comm="syz.3.5701" path="/dev/ppp" dev="devtmpfs" ino=116 ioctlcmd=0x7438 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 551.780730][ T29] audit: type=1326 audit(1725902733.538:1437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22168 comm="syz.3.5702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe60f4ccef9 code=0x7ffc0000 [ 551.805739][ T29] audit: type=1326 audit(1725902733.538:1438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22168 comm="syz.3.5702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe60f4ccef9 code=0x7ffc0000 [ 551.829417][ T29] audit: type=1326 audit(1725902733.538:1439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22168 comm="syz.3.5702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=201 compat=0 ip=0x7fe60f4ccef9 code=0x7ffc0000 [ 551.852958][ T29] audit: type=1326 audit(1725902733.538:1440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22168 comm="syz.3.5702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe60f4ccef9 code=0x7ffc0000 [ 551.876474][ T29] audit: type=1326 audit(1725902733.538:1441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22168 comm="syz.3.5702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe60f4ccef9 code=0x7ffc0000 [ 552.066333][T22175] loop2: detected capacity change from 0 to 256 [ 552.090683][T22175] vfat: Bad value for 'shortname' [ 552.121916][T22173] loop0: detected capacity change from 0 to 512 [ 552.231728][T22173] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 552.244371][T22173] ext4 filesystem being mounted at /128/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 552.373971][T18094] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 553.029479][T22196] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 553.047009][ T29] audit: type=1400 audit(1725902734.808:1442): avc: denied { bind } for pid=22197 comm="syz.3.5712" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 553.066772][T22196] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 553.155269][T22207] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5715'. [ 553.195481][T22207] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5715'. [ 553.305846][T22210] loop3: detected capacity change from 0 to 1024 [ 553.372953][T22210] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 553.386478][T22210] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 554.168703][T22239] loop4: detected capacity change from 0 to 256 [ 554.187903][T22239] vfat: Bad value for 'shortname' [ 554.620562][T22263] EXT4-fs (sda1): resizing filesystem from 262144 to 262144 blocks [ 554.882982][T22284] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 555.065628][T22284] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 555.256016][T22340] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5728'. [ 555.536866][T22350] loop3: detected capacity change from 0 to 512 [ 555.575271][T22350] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 555.580087][T22340] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5728'. [ 555.587987][T22350] ext4 filesystem being mounted at /278/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 555.635363][T14886] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 555.864425][T22391] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 555.877591][T22391] netlink: 'syz.2.5734': attribute type 27 has an invalid length. [ 555.972685][T22397] 8021q: adding VLAN 0 to HW filter on device bond0 [ 555.984108][T22397] 8021q: adding VLAN 0 to HW filter on device team0 [ 555.995791][T22397] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 556.630863][T22409] EXT4-fs (sda1): resizing filesystem from 262144 to 262144 blocks [ 557.320521][T22443] loop4: detected capacity change from 0 to 256 [ 557.436557][T22445] tipc: Enabling of bearer rejected, already enabled [ 558.340174][T22508] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5745'. [ 558.385317][T22508] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5745'. [ 558.726860][T22518] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 558.760415][T22518] netlink: 'syz.3.5749': attribute type 27 has an invalid length. [ 558.809027][T22518] 8021q: adding VLAN 0 to HW filter on device bond0 [ 558.828534][T22518] 8021q: adding VLAN 0 to HW filter on device team0 [ 558.849427][T22518] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 559.146435][T22524] EXT4-fs (sda1): resizing filesystem from 262144 to 262144 blocks [ 559.207956][T22525] xt_hashlimit: size too large, truncated to 1048576 [ 559.575038][ T29] kauditd_printk_skb: 27 callbacks suppressed [ 559.575127][ T29] audit: type=1400 audit(2000000006.270:1470): avc: denied { write } for pid=22532 comm="syz.4.5754" path="socket:[63737]" dev="sockfs" ino=63737 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 560.303350][T22571] tipc: Enabling of bearer rejected, already enabled [ 560.321190][T22575] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 560.331697][T22575] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 560.938919][T22643] EXT4-fs (sda1): resizing filesystem from 262144 to 262144 blocks [ 561.099617][T22647] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 561.131886][T22647] netlink: 'syz.0.5765': attribute type 27 has an invalid length. [ 561.176550][T22649] loop2: detected capacity change from 0 to 256 [ 561.208416][T22649] vfat: Bad value for 'shortname' [ 561.375386][T22650] 8021q: adding VLAN 0 to HW filter on device bond0 [ 561.394058][T22650] 8021q: adding VLAN 0 to HW filter on device team0 [ 561.426478][T22650] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 562.474776][T22676] EXT4-fs (sda1): resizing filesystem from 262144 to 262144 blocks [ 562.541428][T22678] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 562.566609][T22678] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 563.107329][T22689] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5779'. [ 563.142241][T22689] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5779'. [ 563.148799][T22691] loop4: detected capacity change from 0 to 256 [ 563.158383][T22691] vfat: Bad value for 'shortname' [ 563.840887][T22706] EXT4-fs (sda1): resizing filesystem from 262144 to 262144 blocks [ 564.132874][T22720] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 564.159052][T22720] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 564.412817][T22726] xt_hashlimit: size too large, truncated to 1048576 [ 565.258319][T22745] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5799'. [ 565.267495][T22745] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5799'. [ 565.634297][T22755] loop4: detected capacity change from 0 to 256 [ 565.643421][T22755] vfat: Bad value for 'shortname' [ 566.528444][T22765] tipc: Enabling of bearer rejected, already enabled [ 567.328759][T22789] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5814'. [ 567.350249][T22789] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5814'. [ 568.746433][T22808] loop0: detected capacity change from 0 to 256 [ 568.775513][T22808] vfat: Bad value for 'shortname' [ 569.211172][T22820] tipc: Enabling of bearer rejected, already enabled [ 569.228528][ T29] audit: type=1326 audit(2000000015.930:1471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22821 comm="syz.4.5824" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f934ac7cef9 code=0x7ffc0000 [ 569.266692][ T29] audit: type=1326 audit(2000000015.970:1472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22821 comm="syz.4.5824" exe="/root/syz-executor" sig=0 arch=c000003e syscall=141 compat=0 ip=0x7f934ac7cef9 code=0x7ffc0000 [ 569.290368][ T29] audit: type=1326 audit(2000000015.970:1473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22821 comm="syz.4.5824" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f934ac7cef9 code=0x7ffc0000 [ 569.314012][ T29] audit: type=1326 audit(2000000015.970:1474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22821 comm="syz.4.5824" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f934ac7cef9 code=0x7ffc0000 [ 570.280210][T22841] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 570.299410][T22841] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 570.498470][T22846] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5831'. [ 570.507858][T22846] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5831'. [ 571.580342][T22869] tipc: Enabling of bearer rejected, already enabled [ 571.794209][T22873] loop0: detected capacity change from 0 to 512 [ 571.821176][T22873] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 571.834089][T22873] ext4 filesystem being mounted at /154/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 572.468439][T18094] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 572.603953][T22892] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 572.617402][T22892] netlink: 'syz.4.5846': attribute type 27 has an invalid length. [ 572.719086][T22893] 8021q: adding VLAN 0 to HW filter on device bond0 [ 572.746277][T22893] 8021q: adding VLAN 0 to HW filter on device team0 [ 572.768651][T22893] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 573.252050][ T29] audit: type=1400 audit(2000000019.950:1475): avc: denied { create } for pid=22897 comm="syz.2.5848" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 573.279835][ T29] audit: type=1400 audit(2000000019.950:1476): avc: denied { bind } for pid=22897 comm="syz.2.5848" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 573.299482][ T29] audit: type=1400 audit(2000000019.950:1477): avc: denied { listen } for pid=22897 comm="syz.2.5848" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 573.319272][ T29] audit: type=1400 audit(2000000019.950:1478): avc: denied { connect } for pid=22897 comm="syz.2.5848" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 573.339146][ T29] audit: type=1400 audit(2000000019.950:1479): avc: denied { write } for pid=22897 comm="syz.2.5848" path="socket:[64961]" dev="sockfs" ino=64961 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 573.362866][ T29] audit: type=1326 audit(2000000019.980:1480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22899 comm="syz.2.5849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd189a8cef9 code=0x7ffc0000 [ 573.518829][T22908] loop0: detected capacity change from 0 to 256 [ 573.536029][T22908] vfat: Bad value for 'shortname' [ 574.439657][T22924] loop0: detected capacity change from 0 to 1024 [ 574.471822][T22924] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 574.659143][T22933] kernel profiling enabled (shift: 17) [ 574.740727][T22938] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 574.769249][T22938] netlink: 'syz.2.5862': attribute type 27 has an invalid length. [ 574.949619][T22941] 8021q: adding VLAN 0 to HW filter on device bond0 [ 574.980361][T22941] 8021q: adding VLAN 0 to HW filter on device team0 [ 575.014925][T22941] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 575.998487][T22957] loop1: detected capacity change from 0 to 256 [ 576.015591][T22957] vfat: Bad value for 'shortname' [ 576.066337][T18094] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 576.431219][T22972] loop0: detected capacity change from 0 to 2048 [ 576.530565][T22972] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 576.974506][T22981] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 576.989431][T22981] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 31 with max blocks 33 with error 28 [ 577.002315][T22981] EXT4-fs (loop0): This should not happen!! Data will be lost [ 577.002315][T22981] [ 577.012090][T22981] EXT4-fs (loop0): Total free blocks count 0 [ 577.018148][T22981] EXT4-fs (loop0): Free/Dirty block details [ 577.024068][T22981] EXT4-fs (loop0): free_blocks=2415919104 [ 577.029935][T22981] EXT4-fs (loop0): dirty_blocks=64 [ 577.035053][T22981] EXT4-fs (loop0): Block reservation details [ 577.041172][T22981] EXT4-fs (loop0): i_reserved_data_blocks=4 [ 577.428794][T14710] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 578.542185][T23020] loop4: detected capacity change from 0 to 512 [ 578.620493][T23020] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 578.666252][T23020] ext4 filesystem being mounted at /108/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 579.201062][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 579.201079][ T29] audit: type=1400 audit(2000000025.900:1483): avc: denied { ioctl } for pid=23028 comm="syz.2.5888" path="socket:[64357]" dev="sockfs" ino=64357 ioctlcmd=0x7437 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 579.203301][T23029] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 579.242066][T23029] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 579.527237][T20059] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 579.587361][T23047] loop1: detected capacity change from 0 to 1024 [ 579.602859][T23047] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 580.701424][T17710] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 580.979195][T23087] loop1: detected capacity change from 0 to 2048 [ 581.018127][T23087] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 581.226754][T23093] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 581.241740][T23093] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 31 with max blocks 33 with error 28 [ 581.254411][T23093] EXT4-fs (loop1): This should not happen!! Data will be lost [ 581.254411][T23093] [ 581.264099][T23093] EXT4-fs (loop1): Total free blocks count 0 [ 581.270106][T23093] EXT4-fs (loop1): Free/Dirty block details [ 581.276042][T23093] EXT4-fs (loop1): free_blocks=2415919104 [ 581.281768][T23093] EXT4-fs (loop1): dirty_blocks=64 [ 581.287057][T23093] EXT4-fs (loop1): Block reservation details [ 581.293049][T23093] EXT4-fs (loop1): i_reserved_data_blocks=4 [ 581.500346][T23097] EXT4-fs (sda1): resizing filesystem from 262144 to 262144 blocks [ 581.578965][ T29] audit: type=1326 audit(2000000028.280:1484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23099 comm="syz.2.5911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd189a8cef9 code=0x7ffc0000 [ 581.602789][T23100] capability: warning: `syz.2.5911' uses 32-bit capabilities (legacy support in use) [ 581.636808][ T29] audit: type=1326 audit(2000000028.300:1485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23099 comm="syz.2.5911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=125 compat=0 ip=0x7fd189a8cef9 code=0x7ffc0000 [ 581.660560][ T29] audit: type=1326 audit(2000000028.310:1486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23099 comm="syz.2.5911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd189a8cef9 code=0x7ffc0000 [ 581.692567][T23105] loop0: detected capacity change from 0 to 1024 [ 581.712960][T23105] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 581.866372][ T3281] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 582.045107][T18094] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 582.177736][T23130] tipc: Enabling of bearer rejected, already enabled [ 582.738188][ T29] audit: type=1326 audit(2000000029.440:1487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23137 comm="syz.2.5924" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd189a8cef9 code=0x0 [ 583.337300][T23156] loop3: detected capacity change from 0 to 1024 [ 583.363631][T23156] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 583.383705][T23162] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5932'. [ 583.406996][T23162] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5932'. [ 583.707560][T14886] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 583.826171][T23179] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5939'. [ 583.871918][T23183] tipc: Enabling of bearer rejected, already enabled [ 583.881465][T23182] EXT4-fs (sda1): resizing filesystem from 262144 to 262144 blocks [ 583.940575][T23190] loop2: detected capacity change from 0 to 256 [ 583.949583][T23190] vfat: Bad value for 'shortname' [ 584.633737][T23227] loop4: detected capacity change from 0 to 1024 [ 584.763845][T23227] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 585.704322][T20059] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 586.444728][T23322] tipc: Enabling of bearer rejected, already enabled [ 587.126710][T23382] loop2: detected capacity change from 0 to 1024 [ 587.173770][T23382] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 587.610218][T23441] loop4: detected capacity change from 0 to 512 [ 587.686835][T23441] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 587.724306][T23441] ext4 filesystem being mounted at /121/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 587.902719][T16838] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 588.599814][T20059] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 589.081747][T23489] loop4: detected capacity change from 0 to 1024 [ 589.095518][T23489] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 589.534333][T20059] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 589.571682][T23498] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5981'. [ 589.577878][T23497] loop0: detected capacity change from 0 to 256 [ 589.581165][T23498] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5981'. [ 589.607172][T23497] vfat: Bad value for 'shortname' [ 589.614420][T23499] tipc: Enabling of bearer rejected, already enabled [ 590.474483][T23513] loop1: detected capacity change from 0 to 512 [ 590.535197][ T29] audit: type=1400 audit(2000000037.200:1488): avc: denied { bind } for pid=23514 comm="syz.0.5987" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 590.573340][T23513] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 590.587360][ T29] audit: type=1400 audit(2000000037.260:1489): avc: denied { setopt } for pid=23514 comm="syz.0.5987" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 590.605358][T23513] ext4 filesystem being mounted at /211/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 590.720163][T23523] loop0: detected capacity change from 0 to 256 [ 591.027492][T23518] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=65535 sclass=netlink_tcpdiag_socket pid=23518 comm=syz.4.5988 [ 591.130176][T23539] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 591.138941][T23539] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 591.151353][ T29] audit: type=1400 audit(2000000037.850:1490): avc: denied { listen } for pid=23538 comm="syz.4.5996" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 591.368930][T17710] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 591.443521][ T29] audit: type=1400 audit(2000000038.140:1491): avc: denied { accept } for pid=23538 comm="syz.4.5996" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 591.896163][T23549] loop0: detected capacity change from 0 to 2048 [ 592.002502][T23549] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 592.121666][T23557] tipc: Enabling of bearer rejected, already enabled [ 592.191857][T23564] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6003'. [ 592.254814][T23565] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 592.269709][T23565] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 31 with max blocks 33 with error 28 [ 592.282083][T23565] EXT4-fs (loop0): This should not happen!! Data will be lost [ 592.282083][T23565] [ 592.291883][T23565] EXT4-fs (loop0): Total free blocks count 0 [ 592.297892][T23565] EXT4-fs (loop0): Free/Dirty block details [ 592.303796][T23565] EXT4-fs (loop0): free_blocks=2415919104 [ 592.309838][T23565] EXT4-fs (loop0): dirty_blocks=64 [ 592.315067][T23565] EXT4-fs (loop0): Block reservation details [ 592.321136][T23565] EXT4-fs (loop0): i_reserved_data_blocks=4 [ 592.437711][T23564] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6003'. [ 592.639987][T14686] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 592.817876][T23573] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=65535 sclass=netlink_tcpdiag_socket pid=23573 comm=syz.0.6005 [ 593.127894][T23594] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 593.137125][T23594] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 593.681727][T23600] xt_hashlimit: size too large, truncated to 1048576 [ 594.227387][ T29] audit: type=1400 audit(2000000040.930:1492): avc: denied { map } for pid=23606 comm="syz.3.6018" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=138 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 594.251756][ T29] audit: type=1400 audit(2000000040.930:1493): avc: denied { execute } for pid=23606 comm="syz.3.6018" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=138 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 595.109646][T23611] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=65535 sclass=netlink_tcpdiag_socket pid=23611 comm=syz.4.6019 [ 595.187095][T23627] loop2: detected capacity change from 0 to 256 [ 595.230105][T23627] FAT-fs (loop2): codepage cp869 not found [ 595.491492][T23636] syz.2.6025[23636] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 595.491614][T23636] syz.2.6025[23636] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 595.575739][T23639] loop2: detected capacity change from 0 to 512 [ 595.629327][T23639] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 595.641976][T23639] ext4 filesystem being mounted at /270/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 595.675672][T23639] EXT4-fs error (device loop2): ext4_add_entry:2435: inode #2: comm syz.2.6025: Directory hole found for htree leaf block 0 [ 596.122730][T16838] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 596.165720][T23649] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 596.177856][T23649] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 596.188254][T23649] EXT4-fs (sda1): resizing filesystem from 262144 to 262144 blocks [ 596.528122][T23658] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 596.536740][T23658] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 597.358259][ T29] audit: type=1326 audit(2000000044.060:1494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23664 comm="syz.1.6034" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f823a34cef9 code=0x7ffc0000 [ 597.398260][ T29] audit: type=1326 audit(2000000044.080:1495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23664 comm="syz.1.6034" exe="/root/syz-executor" sig=0 arch=c000003e syscall=201 compat=0 ip=0x7f823a34cef9 code=0x7ffc0000 [ 597.421860][ T29] audit: type=1326 audit(2000000044.080:1496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23664 comm="syz.1.6034" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f823a34cef9 code=0x7ffc0000 [ 597.445390][ T29] audit: type=1326 audit(2000000044.080:1497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23664 comm="syz.1.6034" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f823a34cef9 code=0x7ffc0000 [ 597.606734][T23678] loop1: detected capacity change from 0 to 256 [ 597.613698][T23678] vfat: Bad value for 'shortname' [ 598.548626][ T29] audit: type=1400 audit(2000000045.250:1498): avc: denied { write } for pid=23695 comm="syz.4.6046" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 598.570857][T23698] syz.1.6047[23698] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 598.570915][T23698] syz.1.6047[23698] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 598.605860][T23698] syz.1.6047[23698] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 598.635334][T23698] syz.1.6047[23698] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 598.690882][T23704] loop1: detected capacity change from 0 to 2048 [ 598.727290][T23704] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 598.937703][T23713] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 598.952648][T23713] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 31 with max blocks 33 with error 28 [ 598.965076][T23713] EXT4-fs (loop1): This should not happen!! Data will be lost [ 598.965076][T23713] [ 598.974887][T23713] EXT4-fs (loop1): Total free blocks count 0 [ 598.981020][T23713] EXT4-fs (loop1): Free/Dirty block details [ 598.986984][T23713] EXT4-fs (loop1): free_blocks=2415919104 [ 598.992727][T23713] EXT4-fs (loop1): dirty_blocks=64 [ 598.997997][T23713] EXT4-fs (loop1): Block reservation details [ 599.004040][T23713] EXT4-fs (loop1): i_reserved_data_blocks=4 [ 599.607034][T14714] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 599.748845][ T29] audit: type=1400 audit(2000000046.450:1499): avc: denied { unmount } for pid=14886 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 599.837023][T23726] loop4: detected capacity change from 0 to 256 [ 599.852706][T23726] vfat: Bad value for 'shortname' [ 600.225397][T23734] xt_hashlimit: size too large, truncated to 1048576 [ 600.447646][T23738] loop1: detected capacity change from 0 to 1024 [ 600.487375][T23738] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 600.502418][T23738] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 601.822632][T23770] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 601.859932][T23770] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 601.893339][T23770] EXT4-fs (sda1): resizing filesystem from 262144 to 262144 blocks [ 602.139346][T23833] loop1: detected capacity change from 0 to 256 [ 602.552632][T23841] loop2: detected capacity change from 0 to 512 [ 602.589498][T23841] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 602.602281][T23841] ext4 filesystem being mounted at /277/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 602.616692][T23841] EXT4-fs error (device loop2): ext4_add_entry:2435: inode #2: comm syz.2.6070: Directory hole found for htree leaf block 0 [ 602.641349][T16838] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 603.703396][T23865] chnl_net:caif_netlink_parms(): no params data found [ 604.178404][ T50] bridge_slave_1: left allmulticast mode [ 604.184243][ T50] bridge_slave_1: left promiscuous mode [ 604.190001][ T50] bridge0: port 2(bridge_slave_1) entered disabled state [ 604.197840][ T50] bridge_slave_0: left allmulticast mode [ 604.203507][ T50] bridge_slave_0: left promiscuous mode [ 604.209197][ T50] bridge0: port 1(bridge_slave_0) entered disabled state [ 604.435401][T23965] loop1: detected capacity change from 0 to 256 [ 604.668671][ T50] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 604.698906][ T50] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 604.730398][ T50] bond0 (unregistering): Released all slaves [ 604.783455][T23865] bridge0: port 1(bridge_slave_0) entered blocking state [ 604.790675][T23865] bridge0: port 1(bridge_slave_0) entered disabled state [ 604.832818][T23865] bridge_slave_0: entered allmulticast mode [ 604.855279][T23865] bridge_slave_0: entered promiscuous mode [ 604.879197][ T50] tipc: Disabling bearer [ 604.884240][ T50] tipc: Left network mode [ 604.890829][T23865] bridge0: port 2(bridge_slave_1) entered blocking state [ 604.897985][T23865] bridge0: port 2(bridge_slave_1) entered disabled state [ 604.934701][T23865] bridge_slave_1: entered allmulticast mode [ 604.943382][T23865] bridge_slave_1: entered promiscuous mode [ 604.964472][T23865] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 604.977749][ T50] hsr_slave_0: left promiscuous mode [ 604.983543][T23973] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 604.994664][ T50] hsr_slave_1: left promiscuous mode [ 605.000464][ T50] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 605.009885][ T50] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 605.017292][T23973] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 605.077346][ T50] team0 (unregistering): Port device team_slave_1 removed [ 605.089570][ T50] team0 (unregistering): Port device team_slave_0 removed [ 605.140296][T23865] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 605.164597][T23865] team0: Port device team_slave_0 added [ 605.172457][T23865] team0: Port device team_slave_1 added [ 605.196368][T23865] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 605.203487][T23865] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 605.229445][T23865] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 605.242597][T23865] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 605.249595][T23865] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 605.276231][T23865] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 605.373040][T23982] loop1: detected capacity change from 0 to 256 [ 605.383118][T23982] vfat: Bad value for 'shortname' [ 605.390134][T23865] hsr_slave_0: entered promiscuous mode [ 605.396638][T23865] hsr_slave_1: entered promiscuous mode [ 605.402738][T23865] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 605.410546][T23865] Cannot create hsr debugfs directory [ 605.419811][T23983] xt_hashlimit: size too large, truncated to 1048576 [ 605.981615][T23865] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 606.053343][T23865] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 606.064070][T23865] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 606.073909][T23865] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 606.118173][T23865] 8021q: adding VLAN 0 to HW filter on device bond0 [ 606.146135][T23865] 8021q: adding VLAN 0 to HW filter on device team0 [ 606.193122][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 606.200387][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 606.227040][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 606.234214][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 606.375354][T23865] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 606.543176][T23865] veth0_vlan: entered promiscuous mode [ 606.560805][T23865] veth1_vlan: entered promiscuous mode [ 606.577963][T23865] veth0_macvtap: entered promiscuous mode [ 606.586435][T23865] veth1_macvtap: entered promiscuous mode [ 606.612087][T23865] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 606.622694][T23865] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 606.637965][T23865] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 606.646750][T23865] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 606.657287][T23865] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 606.668403][T23865] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 606.677067][T23865] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 606.685827][T23865] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 606.694589][T23865] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 606.703332][T23865] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 607.618726][T24127] loop2: detected capacity change from 0 to 256 [ 607.627556][T24127] vfat: Bad value for 'shortname' [ 609.356853][T24153] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6108'. [ 609.390177][T24155] loop4: detected capacity change from 0 to 2048 [ 609.406900][T24155] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 609.587899][T24159] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 609.602730][T24159] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 31 with max blocks 33 with error 28 [ 609.615101][T24159] EXT4-fs (loop4): This should not happen!! Data will be lost [ 609.615101][T24159] [ 609.624770][T24159] EXT4-fs (loop4): Total free blocks count 0 [ 609.630813][T24159] EXT4-fs (loop4): Free/Dirty block details [ 609.636856][T24159] EXT4-fs (loop4): free_blocks=2415919104 [ 609.642583][T24159] EXT4-fs (loop4): dirty_blocks=64 [ 609.647771][T24159] EXT4-fs (loop4): Block reservation details [ 609.653784][T24159] EXT4-fs (loop4): i_reserved_data_blocks=4 [ 609.934278][T24172] loop2: detected capacity change from 0 to 256 [ 609.956559][T24172] vfat: Bad value for 'shortname' [ 610.264768][T16414] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 610.554371][T24179] IPv6: sit1: Disabled Multicast RS [ 612.406882][T24217] xt_hashlimit: size too large, truncated to 1048576 [ 612.510191][T24220] loop4: detected capacity change from 0 to 256 [ 612.876356][T24230] loop4: detected capacity change from 0 to 256 [ 612.895258][T24230] vfat: Bad value for 'shortname' [ 614.306542][T24255] loop0: detected capacity change from 0 to 2048 [ 614.352149][T24255] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 614.555380][T24262] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 614.567275][T24262] netlink: 'syz.4.6140': attribute type 27 has an invalid length. [ 614.579516][T24263] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 614.594367][T24263] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 31 with max blocks 33 with error 28 [ 614.606945][T24263] EXT4-fs (loop0): This should not happen!! Data will be lost [ 614.606945][T24263] [ 614.616630][T24263] EXT4-fs (loop0): Total free blocks count 0 [ 614.622647][T24263] EXT4-fs (loop0): Free/Dirty block details [ 614.628659][T24263] EXT4-fs (loop0): free_blocks=2415919104 [ 614.634389][T24263] EXT4-fs (loop0): dirty_blocks=64 [ 614.639536][T24263] EXT4-fs (loop0): Block reservation details [ 614.645639][T24263] EXT4-fs (loop0): i_reserved_data_blocks=4 [ 614.899175][T24264] 8021q: adding VLAN 0 to HW filter on device bond0 [ 614.907757][T24264] 8021q: adding VLAN 0 to HW filter on device team0 [ 614.918570][T24264] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 615.327099][ T11] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 615.349178][T24275] loop2: detected capacity change from 0 to 1024 [ 615.370060][T24275] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 615.708588][T24296] loop1: detected capacity change from 0 to 256 [ 615.731091][T24276] chnl_net:caif_netlink_parms(): no params data found [ 615.740219][T24296] vfat: Bad value for 'shortname' [ 615.879717][T24276] bridge0: port 1(bridge_slave_0) entered blocking state [ 615.886879][T24276] bridge0: port 1(bridge_slave_0) entered disabled state [ 615.894138][T24276] bridge_slave_0: entered allmulticast mode [ 615.915744][T24276] bridge_slave_0: entered promiscuous mode [ 615.943922][T24276] bridge0: port 2(bridge_slave_1) entered blocking state [ 615.951142][T24276] bridge0: port 2(bridge_slave_1) entered disabled state [ 615.992418][T24276] bridge_slave_1: entered allmulticast mode [ 616.018920][T24276] bridge_slave_1: entered promiscuous mode [ 616.073039][T24276] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 616.084022][T24276] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 616.346728][T14706] bridge_slave_1: left allmulticast mode [ 616.352432][T14706] bridge_slave_1: left promiscuous mode [ 616.358111][T14706] bridge0: port 2(bridge_slave_1) entered disabled state [ 616.496445][T14706] bridge_slave_0: left allmulticast mode [ 616.502124][T14706] bridge_slave_0: left promiscuous mode [ 616.507785][T14706] bridge0: port 1(bridge_slave_0) entered disabled state [ 616.571124][T14706] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 616.596588][T14706] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 616.615872][T14706] bond0 (unregistering): Released all slaves [ 616.654709][T24276] team0: Port device team_slave_0 added [ 616.661439][T24276] team0: Port device team_slave_1 added [ 616.675266][T14706] tipc: Disabling bearer [ 616.680297][T14706] tipc: Left network mode [ 616.707135][T24276] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 616.714098][T24276] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 616.740129][T24276] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 616.836537][T14706] hsr_slave_0: left promiscuous mode [ 616.845240][T14706] hsr_slave_1: left promiscuous mode [ 616.856772][T14706] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 616.875510][T14706] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 616.985844][T14706] team0 (unregistering): Port device team_slave_1 removed [ 616.998917][T14706] team0 (unregistering): Port device team_slave_0 removed [ 617.096870][T24276] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 617.103858][T24276] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 617.129952][T24276] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 617.176674][ T29] audit: type=1326 audit(2000000016.750:1500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24319 comm="syz.1.6154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f823a34cef9 code=0x7ffc0000 [ 617.200350][ T29] audit: type=1326 audit(2000000016.750:1501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24319 comm="syz.1.6154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f823a34cef9 code=0x7ffc0000 [ 617.252296][T24276] hsr_slave_0: entered promiscuous mode [ 617.259337][T24276] hsr_slave_1: entered promiscuous mode [ 617.267218][ T29] audit: type=1326 audit(2000000016.750:1502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24319 comm="syz.1.6154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f823a34cef9 code=0x7ffc0000 [ 617.291018][ T29] audit: type=1326 audit(2000000016.750:1503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24319 comm="syz.1.6154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f823a34cef9 code=0x7ffc0000 [ 617.314582][ T29] audit: type=1326 audit(2000000016.750:1504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24319 comm="syz.1.6154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f823a34cef9 code=0x7ffc0000 [ 617.338427][ T29] audit: type=1326 audit(2000000016.750:1505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24319 comm="syz.1.6154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f823a34cef9 code=0x7ffc0000 [ 617.362616][ T29] audit: type=1326 audit(2000000016.750:1506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24319 comm="syz.1.6154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f823a34cef9 code=0x7ffc0000 [ 617.386150][ T29] audit: type=1326 audit(2000000016.750:1507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24319 comm="syz.1.6154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f823a34cef9 code=0x7ffc0000 [ 617.409692][ T29] audit: type=1326 audit(2000000016.750:1508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24319 comm="syz.1.6154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f823a34b890 code=0x7ffc0000 [ 617.433334][ T29] audit: type=1326 audit(2000000016.750:1509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24319 comm="syz.1.6154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f823a34b890 code=0x7ffc0000 [ 617.471291][T16838] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 617.543417][T24276] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 617.581567][T24276] Cannot create hsr debugfs directory [ 617.698648][T24330] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 617.763452][T24330] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 618.656733][T24276] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 618.741093][T24276] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 618.814194][T24276] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 618.838114][T24276] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 618.928702][T24276] 8021q: adding VLAN 0 to HW filter on device bond0 [ 618.954331][T24276] 8021q: adding VLAN 0 to HW filter on device team0 [ 619.061705][T14706] bridge0: port 1(bridge_slave_0) entered blocking state [ 619.068980][T14706] bridge0: port 1(bridge_slave_0) entered forwarding state [ 619.297487][T14706] bridge0: port 2(bridge_slave_1) entered blocking state [ 619.304683][T14706] bridge0: port 2(bridge_slave_1) entered forwarding state [ 619.507790][T24276] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 619.518443][T24276] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 619.660294][T24276] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 619.835543][T24276] veth0_vlan: entered promiscuous mode [ 619.850848][T24276] veth1_vlan: entered promiscuous mode [ 619.876107][T24276] veth0_macvtap: entered promiscuous mode [ 619.890340][T24276] veth1_macvtap: entered promiscuous mode [ 619.932459][T24276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 619.943046][T24276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 619.952883][T24276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 619.963380][T24276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 619.974866][T24276] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 619.985878][T24276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 619.996431][T24276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 620.006263][T24276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 620.016763][T24276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 620.034913][T24363] loop4: detected capacity change from 0 to 512 [ 620.042740][T24276] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 620.060681][T24276] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 620.069496][T24276] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 620.078262][T24276] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 620.086990][T24276] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 620.099896][T24363] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 620.113947][T24363] ext4 filesystem being mounted at /171/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 620.555453][T24383] syz.1.6168[24383] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 620.555557][T24383] syz.1.6168[24383] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 620.723920][T20059] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 620.783470][T24389] loop1: detected capacity change from 0 to 256 [ 621.366476][T24397] loop2: detected capacity change from 0 to 2048 [ 621.424625][T24397] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 621.598473][T24403] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 621.613415][T24403] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 31 with max blocks 33 with error 28 [ 621.625850][T24403] EXT4-fs (loop2): This should not happen!! Data will be lost [ 621.625850][T24403] [ 621.635506][T24403] EXT4-fs (loop2): Total free blocks count 0 [ 621.641658][T24403] EXT4-fs (loop2): Free/Dirty block details [ 621.647627][T24403] EXT4-fs (loop2): free_blocks=2415919104 [ 621.653417][T24403] EXT4-fs (loop2): dirty_blocks=64 [ 621.658662][T24403] EXT4-fs (loop2): Block reservation details [ 621.664655][T24403] EXT4-fs (loop2): i_reserved_data_blocks=4 [ 621.716108][T16414] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 622.106064][T24409] pim6reg1: entered promiscuous mode [ 622.111405][T24409] pim6reg1: entered allmulticast mode [ 622.318394][ T29] kauditd_printk_skb: 67 callbacks suppressed [ 622.318411][ T29] audit: type=1326 audit(2000000021.890:1577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24410 comm="syz.4.6176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f934ac7cef9 code=0x7ffc0000 [ 622.375181][ T29] audit: type=1326 audit(2000000021.890:1578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24410 comm="syz.4.6176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f934ac7cef9 code=0x7ffc0000 [ 622.398891][ T29] audit: type=1326 audit(2000000021.890:1579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24410 comm="syz.4.6176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=200 compat=0 ip=0x7f934ac7cef9 code=0x7ffc0000 [ 622.422419][ T29] audit: type=1326 audit(2000000021.890:1580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24410 comm="syz.4.6176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f934ac7cef9 code=0x7ffc0000 [ 622.445989][ T29] audit: type=1326 audit(2000000021.890:1581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24410 comm="syz.4.6176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f934ac7cef9 code=0x7ffc0000 [ 622.548460][T24421] loop0: detected capacity change from 0 to 1024 [ 622.581280][T24421] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 622.609793][T24425] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6180'. [ 622.630475][ T29] audit: type=1400 audit(2000000022.200:1582): avc: denied { setattr } for pid=24420 comm="syz.0.6179" name="file0" dev="loop0" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 622.638819][T24425] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6180'. [ 622.808410][T24430] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 622.851085][T24429] netlink: 'syz.1.6182': attribute type 27 has an invalid length. [ 622.910022][T24431] loop4: detected capacity change from 0 to 512 [ 622.964060][T24431] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 622.994424][T24431] ext4 filesystem being mounted at /175/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 623.097588][T24429] bridge0: port 2(bridge_slave_1) entered disabled state [ 623.104802][T24429] bridge0: port 1(bridge_slave_0) entered disabled state [ 623.135262][ T29] audit: type=1400 audit(2000000022.700:1583): avc: denied { write } for pid=2944 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 623.157034][ T29] audit: type=1400 audit(2000000022.700:1584): avc: denied { remove_name } for pid=2944 comm="syslogd" name="messages" dev="tmpfs" ino=9 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 623.179722][ T29] audit: type=1400 audit(2000000022.700:1585): avc: denied { rename } for pid=2944 comm="syslogd" name="messages" dev="tmpfs" ino=9 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 623.202103][ T29] audit: type=1400 audit(2000000022.700:1586): avc: denied { add_name } for pid=2944 comm="syslogd" name="messages.0" dev="tmpfs" ino=8 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 623.235236][T23865] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 623.365044][T24429] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 623.399799][T24429] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 623.464885][T24429] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 623.473894][T24429] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 623.482899][T24429] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 623.491821][T24429] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 623.588734][T24430] 8021q: adding VLAN 0 to HW filter on device bond0 [ 623.617003][T24430] 8021q: adding VLAN 0 to HW filter on device team0 [ 623.645511][T24430] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 623.720519][T20059] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 624.598630][T24477] loop3: detected capacity change from 0 to 256 [ 624.787722][T24481] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 624.788687][T24483] loop4: detected capacity change from 0 to 512 [ 624.822381][T24483] EXT4-fs (loop4): bad s_min_extra_isize: 65535 [ 624.829146][T24481] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 624.860098][T24481] EXT4-fs (sda1): resizing filesystem from 262144 to 262144 blocks [ 624.994885][T24499] No source specified [ 625.227926][T24526] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 625.238845][T24526] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 625.250703][T24526] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6196'. [ 625.264025][T24526] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 625.363718][T24526] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 625.498280][T24575] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 625.515112][T24576] loop4: detected capacity change from 0 to 256 [ 625.534304][T24576] FAT-fs (loop4): codepage cp869 not found [ 625.575791][T24575] netlink: 'syz.2.6199': attribute type 27 has an invalid length. [ 625.731412][T24585] syz.4.6200[24585] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 625.731530][T24585] syz.4.6200[24585] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 625.862909][T24589] loop4: detected capacity change from 0 to 512 [ 625.890796][T24589] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 625.903541][T24589] ext4 filesystem being mounted at /179/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 625.921478][T24589] EXT4-fs error (device loop4): ext4_add_entry:2435: inode #2: comm syz.4.6200: Directory hole found for htree leaf block 0 [ 626.074175][T24580] 8021q: adding VLAN 0 to HW filter on device bond0 [ 626.107269][T24580] 8021q: adding VLAN 0 to HW filter on device team0 [ 626.158477][T24580] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 626.371076][T20059] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 626.743287][T24632] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 626.760539][T24632] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 626.783400][T24632] EXT4-fs (sda1): resizing filesystem from 262144 to 262144 blocks [ 627.944174][T24775] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 628.016883][T24775] netlink: 'syz.0.6220': attribute type 27 has an invalid length. [ 628.188134][T24775] bridge0: port 2(bridge_slave_1) entered disabled state [ 628.195424][T24775] bridge0: port 1(bridge_slave_0) entered disabled state [ 628.415837][T24775] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 628.452365][T24775] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 628.557450][T24775] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 628.566656][T24775] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 628.575732][T24775] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 628.584634][T24775] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 628.644121][T24790] 8021q: adding VLAN 0 to HW filter on device bond0 [ 628.652422][T24790] 8021q: adding VLAN 0 to HW filter on device team0 [ 628.663756][T24790] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 629.825898][ T29] kauditd_printk_skb: 32 callbacks suppressed [ 629.825916][ T29] audit: type=1400 audit(2000000029.390:1619): avc: denied { read } for pid=24834 comm="syz.4.6231" name="loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 629.856350][ T29] audit: type=1400 audit(2000000029.390:1620): avc: denied { open } for pid=24834 comm="syz.4.6231" path="/dev/loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 629.881063][ T29] audit: type=1400 audit(2000000029.400:1621): avc: denied { ioctl } for pid=24834 comm="syz.4.6231" path="/dev/loop-control" dev="devtmpfs" ino=99 ioctlcmd=0x4c81 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 630.979467][T24916] syzkaller0: entered promiscuous mode [ 630.985082][T24916] syzkaller0: entered allmulticast mode [ 631.499310][T24944] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 631.535979][T24944] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 632.609588][T25052] loop4: detected capacity change from 0 to 256 [ 632.787550][T25052] FAT-fs (loop4): codepage cp869 not found [ 632.841532][T25059] loop3: detected capacity change from 0 to 512 [ 633.088608][T25059] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 633.140424][T25071] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 633.159081][T25072] syz.4.6258[25072] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 633.159222][T25072] syz.4.6258[25072] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 633.236117][T25074] loop4: detected capacity change from 0 to 512 [ 633.300220][T25074] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 633.312979][T25074] ext4 filesystem being mounted at /187/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 633.353086][T25059] ext4 filesystem being mounted at /18/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 633.377432][T25071] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 633.567653][T20059] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 633.860219][T24276] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 634.039129][ T29] audit: type=1400 audit(2000000033.610:1622): avc: denied { setopt } for pid=25105 comm="syz.3.6268" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 634.833793][T25221] loop4: detected capacity change from 0 to 256 [ 634.859509][T25221] FAT-fs (loop4): codepage cp869 not found [ 635.102360][T25228] syz.4.6276[25228] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 635.102487][T25228] syz.4.6276[25228] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 635.178450][T25230] loop4: detected capacity change from 0 to 512 [ 635.264470][T25230] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 635.277110][T25230] ext4 filesystem being mounted at /192/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 635.619323][T25253] xt_hashlimit: size too large, truncated to 1048576 [ 635.765973][T20059] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 636.526558][T25346] loop0: detected capacity change from 0 to 512 [ 636.542137][T25346] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 636.555079][T25346] ext4 filesystem being mounted at /52/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 636.914845][T25352] EXT4-fs error (device loop0): ext4_add_entry:2435: inode #2: comm syz.0.6289: Directory hole found for htree leaf block 0 [ 637.094101][ T29] audit: type=1400 audit(2000000036.630:1623): avc: denied { read } for pid=25358 comm="syz.3.6292" name="ppp" dev="devtmpfs" ino=116 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 637.344200][T25369] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 637.409083][T25369] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 637.424711][T23865] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 637.927159][T25377] tipc: Started in network mode [ 637.932155][T25377] tipc: Node identity fe8000000000000000000000000000aa, cluster identity 4711 [ 637.941246][T25377] tipc: Enabling of bearer rejected, failed to enable media [ 638.559196][T25444] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 638.571215][T25444] netlink: 'syz.2.6302': attribute type 27 has an invalid length. [ 638.716511][T25448] 8021q: adding VLAN 0 to HW filter on device bond0 [ 638.724731][T25448] 8021q: adding VLAN 0 to HW filter on device team0 [ 638.778223][T25448] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 639.299634][T25518] loop0: detected capacity change from 0 to 256 [ 639.791597][ T29] audit: type=1400 audit(2000000039.360:1624): avc: denied { read } for pid=25548 comm="syz.3.6312" dev="sockfs" ino=69438 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 640.284310][T25570] loop1: detected capacity change from 0 to 2048 [ 640.300831][T25570] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 640.547708][T25581] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 640.615278][T25581] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 31 with max blocks 33 with error 28 [ 640.627861][T25581] EXT4-fs (loop1): This should not happen!! Data will be lost [ 640.627861][T25581] [ 640.637585][T25581] EXT4-fs (loop1): Total free blocks count 0 [ 640.643655][T25581] EXT4-fs (loop1): Free/Dirty block details [ 640.649750][T25581] EXT4-fs (loop1): free_blocks=2415919104 [ 640.655536][T25581] EXT4-fs (loop1): dirty_blocks=64 [ 640.660746][T25581] EXT4-fs (loop1): Block reservation details [ 640.666794][T25581] EXT4-fs (loop1): i_reserved_data_blocks=4 [ 641.849642][T25682] loop3: detected capacity change from 0 to 256 [ 642.027404][T25687] xt_hashlimit: size too large, truncated to 1048576 [ 642.375561][ T55] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 642.563121][T25692] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 642.617284][T25692] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 644.072223][T25765] loop4: detected capacity change from 0 to 256 [ 644.117090][T25765] FAT-fs (loop4): codepage cp869 not found [ 644.339675][T25794] syz.4.6343[25794] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 644.339891][T25794] syz.4.6343[25794] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 644.356169][T25794] loop4: detected capacity change from 0 to 512 [ 644.410378][T25794] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 644.423162][T25794] ext4 filesystem being mounted at /209/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 644.938997][T20059] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 645.140989][T25854] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 645.153686][T25865] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 645.175478][T25854] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 645.209324][T25865] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 645.720611][T25888] loop1: detected capacity change from 0 to 1024 [ 645.741364][T25888] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 646.110711][T25904] syz.3.6360[25904] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 646.110778][T25904] syz.3.6360[25904] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 646.300341][T25912] loop2: detected capacity change from 0 to 2048 [ 646.328113][T25912] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 646.570892][T25916] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 646.604367][T25916] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 31 with max blocks 33 with error 28 [ 646.616859][T25916] EXT4-fs (loop2): This should not happen!! Data will be lost [ 646.616859][T25916] [ 646.626687][T25916] EXT4-fs (loop2): Total free blocks count 0 [ 646.632736][T25916] EXT4-fs (loop2): Free/Dirty block details [ 646.638662][T25916] EXT4-fs (loop2): free_blocks=2415919104 [ 646.644419][T25916] EXT4-fs (loop2): dirty_blocks=64 [ 646.649567][T25916] EXT4-fs (loop2): Block reservation details [ 646.655646][T25916] EXT4-fs (loop2): i_reserved_data_blocks=4 [ 646.712501][T17710] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 647.889848][T25942] loop4: detected capacity change from 0 to 1024 [ 647.903044][T25942] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 647.914024][T25942] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (30349!=20869) [ 647.944854][T25942] EXT4-fs (loop4): invalid journal inode [ 647.955173][T25942] EXT4-fs (loop4): can't get journal size [ 648.016542][T25942] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 648.455750][T14708] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 648.548820][T25952] loop2: detected capacity change from 0 to 1024 [ 648.560078][T25952] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 648.970235][T25969] syz.1.6380[25969] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 648.970351][T25969] syz.1.6380[25969] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 649.195192][ T29] audit: type=1400 audit(2000000048.760:1625): avc: denied { write } for pid=25966 comm="syz.3.6379" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 649.249301][T25974] loop3: detected capacity change from 0 to 256 [ 649.545356][T25974] FAT-fs (loop3): codepage cp862 not found [ 649.567921][T25970] x_tables: duplicate underflow at hook 4 [ 649.690130][T25979] loop0: detected capacity change from 0 to 512 [ 649.720360][T25979] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 649.733028][T25979] ext4 filesystem being mounted at /71/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 649.787058][T20059] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 649.889328][T25985] loop3: detected capacity change from 0 to 2048 [ 650.024664][T25985] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 650.037860][T16838] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 650.049901][ T29] audit: type=1400 audit(2000000049.610:1626): avc: denied { create } for pid=25993 comm="syz.1.6386" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 650.480903][T26001] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 650.491428][T26000] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 650.511057][T26001] netlink: 'syz.2.6387': attribute type 27 has an invalid length. [ 650.562756][T26000] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 31 with max blocks 33 with error 28 [ 650.575253][T26000] EXT4-fs (loop3): This should not happen!! Data will be lost [ 650.575253][T26000] [ 650.584908][T26000] EXT4-fs (loop3): Total free blocks count 0 [ 650.590988][T26000] EXT4-fs (loop3): Free/Dirty block details [ 650.596935][T26000] EXT4-fs (loop3): free_blocks=2415919104 [ 650.602672][T26000] EXT4-fs (loop3): dirty_blocks=64 [ 650.607844][T26000] EXT4-fs (loop3): Block reservation details [ 650.613877][T26000] EXT4-fs (loop3): i_reserved_data_blocks=4 [ 650.687542][T26003] 8021q: adding VLAN 0 to HW filter on device bond0 [ 650.716045][T26003] 8021q: adding VLAN 0 to HW filter on device team0 [ 650.799776][T26003] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 650.879439][T26008] loop4: detected capacity change from 0 to 512 [ 650.916235][T26008] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 650.930061][T26008] ext4 filesystem being mounted at /218/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 651.109691][T26011] EXT4-fs error (device loop4): ext4_add_entry:2435: inode #2: comm syz.4.6390: Directory hole found for htree leaf block 0 [ 651.133673][T23865] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 651.189954][T26015] loop0: detected capacity change from 0 to 1024 [ 651.201893][T26015] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 651.212941][T26015] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (30349!=20869) [ 651.223102][T26015] EXT4-fs (loop0): invalid journal inode [ 651.228868][T26015] EXT4-fs (loop0): can't get journal size [ 651.236158][T26015] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 651.470012][T14692] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 651.525725][T26026] loop2: detected capacity change from 0 to 512 [ 651.535660][T26026] EXT4-fs (loop2): blocks per group (71) and clusters per group (20800) inconsistent [ 651.669974][T26031] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 651.688856][T26031] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 651.755476][T20059] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 652.265962][T26040] loop4: detected capacity change from 0 to 512 [ 652.292403][T26040] journal_path: Lookup failure for './bus' [ 652.298372][T26040] EXT4-fs: error: could not find journal device path [ 652.305741][T26044] loop3: detected capacity change from 0 to 512 [ 652.398262][T26044] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 652.431346][T26044] ext4 filesystem being mounted at /50/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 652.635499][T23865] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 652.763909][T26059] tc_dump_action: action bad kind [ 652.778771][T26058] loop0: detected capacity change from 0 to 2048 [ 652.816399][T26062] loop1: detected capacity change from 0 to 256 [ 652.820095][T26058] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 652.862520][T26062] FAT-fs (loop1): codepage cp869 not found [ 653.006149][T26057] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 653.091308][T26067] syz.1.6409[26067] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 653.091405][T26067] syz.1.6409[26067] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 653.167984][T26069] loop1: detected capacity change from 0 to 512 [ 653.264845][T26057] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 653.277397][T26069] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 653.290130][T26069] ext4 filesystem being mounted at /304/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 653.307417][T26069] EXT4-fs error (device loop1): ext4_add_entry:2435: inode #2: comm syz.1.6409: Directory hole found for htree leaf block 0 [ 653.371522][T26073] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 653.425000][T26073] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 31 with max blocks 33 with error 28 [ 653.437440][T26073] EXT4-fs (loop0): This should not happen!! Data will be lost [ 653.437440][T26073] [ 653.447148][T26073] EXT4-fs (loop0): Total free blocks count 0 [ 653.453214][T26073] EXT4-fs (loop0): Free/Dirty block details [ 653.459183][T26073] EXT4-fs (loop0): free_blocks=2415919104 [ 653.464923][T26073] EXT4-fs (loop0): dirty_blocks=64 [ 653.470105][T26073] EXT4-fs (loop0): Block reservation details [ 653.476133][T26073] EXT4-fs (loop0): i_reserved_data_blocks=4 [ 653.729263][T17710] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 654.063189][T26086] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 654.090640][T26086] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 654.678835][T26100] loop4: detected capacity change from 0 to 1024 [ 654.686128][T26100] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 654.697065][T26100] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (30349!=20869) [ 654.718733][T26100] EXT4-fs (loop4): invalid journal inode [ 654.745838][T26100] EXT4-fs (loop4): can't get journal size [ 654.771780][T26100] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 655.019954][T14727] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 655.118008][T26112] loop1: detected capacity change from 0 to 256 [ 655.118343][T26110] loop0: detected capacity change from 0 to 256 [ 655.218371][T26112] vfat: Bad value for 'shortname' [ 655.677238][T24276] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 655.818891][ T29] audit: type=1326 audit(2000000055.390:1627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26120 comm="syz.3.6422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f050bd7cef9 code=0x7ffc0000 [ 655.892091][ T29] audit: type=1326 audit(2000000055.390:1628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26120 comm="syz.3.6422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f050bd7cef9 code=0x7ffc0000 [ 655.915779][ T29] audit: type=1326 audit(2000000055.420:1629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26120 comm="syz.3.6422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f050bd7cef9 code=0x7ffc0000 [ 655.939531][ T29] audit: type=1326 audit(2000000055.420:1630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26120 comm="syz.3.6422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f050bd7cef9 code=0x7ffc0000 [ 655.963276][ T29] audit: type=1326 audit(2000000055.420:1631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26120 comm="syz.3.6422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f050bd7cef9 code=0x7ffc0000 [ 655.986970][ T29] audit: type=1326 audit(2000000055.420:1632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26120 comm="syz.3.6422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f050bd7cef9 code=0x7ffc0000 [ 656.010638][ T29] audit: type=1326 audit(2000000055.420:1633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26120 comm="syz.3.6422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f050bd7cef9 code=0x7ffc0000 [ 656.034287][ T29] audit: type=1326 audit(2000000055.420:1634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26120 comm="syz.3.6422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f050bd7cef9 code=0x7ffc0000 [ 656.057980][ T29] audit: type=1326 audit(2000000055.430:1635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26120 comm="syz.3.6422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f050bd7cef9 code=0x7ffc0000 [ 656.081587][ T29] audit: type=1326 audit(2000000055.430:1636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26120 comm="syz.3.6422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f050bd7cef9 code=0x7ffc0000 [ 656.585609][T20059] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 657.371378][T26141] futex_wake_op: syz.1.6429 tries to shift op by 32; fix this program [ 657.580948][T26144] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6429'. [ 657.724154][T26146] loop4: detected capacity change from 0 to 2048 [ 657.813806][T26146] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 657.936111][T26151] loop2: detected capacity change from 0 to 512 [ 657.958505][T26151] journal_path: Lookup failure for './bus' [ 657.964367][T26151] EXT4-fs: error: could not find journal device path [ 658.089458][T26158] loop0: detected capacity change from 0 to 2048 [ 658.113134][T26158] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 658.143457][T26163] loop2: detected capacity change from 0 to 1024 [ 658.151682][T26163] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 658.162755][T26163] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (30349!=20869) [ 658.197712][T26163] EXT4-fs (loop2): invalid journal inode [ 658.214416][T26163] EXT4-fs (loop2): can't get journal size [ 658.249019][T26163] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 658.972347][T23865] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 659.078177][T26176] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6438'. [ 659.175509][T26179] syz.0.6439[26179] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 659.175703][T26179] syz.0.6439[26179] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 659.576279][T20059] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 659.740888][T26195] loop1: detected capacity change from 0 to 512 [ 659.757082][T26195] EXT4-fs (loop1): 1 truncate cleaned up [ 659.763219][T26195] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 659.816338][T17710] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 659.950370][T16838] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 659.976538][T26207] EXT4-fs (sda1): resizing filesystem from 262144 to 262144 blocks [ 660.303566][T26211] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6450'. [ 660.392943][T26217] syz.0.6452[26217] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 660.393094][T26217] syz.0.6452[26217] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 660.415760][T26215] loop3: detected capacity change from 0 to 2048 [ 660.582785][T26215] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 660.840460][T26231] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 660.851053][T26231] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 660.977579][T26239] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 660.988783][T26239] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 661.082564][T26240] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 661.196892][T26240] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 661.443856][T26242] loop1: detected capacity change from 0 to 256 [ 661.460600][T26242] FAT-fs (loop1): codepage cp869 not found [ 661.579245][T26248] syz.0.6462[26248] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 661.579311][T26248] syz.0.6462[26248] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 661.656198][T26251] syz.1.6460[26251] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 661.667739][T26251] syz.1.6460[26251] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 661.690986][T26251] loop1: detected capacity change from 0 to 512 [ 661.794421][ T29] kauditd_printk_skb: 4 callbacks suppressed [ 661.794439][ T29] audit: type=1400 audit(2000000061.360:1641): avc: denied { watch_reads } for pid=26247 comm="syz.0.6462" path="/89" dev="tmpfs" ino=476 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 661.918327][T26251] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 661.931017][T26251] ext4 filesystem being mounted at /314/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 662.015269][T26255] EXT4-fs (sda1): resizing filesystem from 262144 to 262144 blocks [ 662.063591][T24276] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 662.090643][T26259] syz.3.6466[26259] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 662.090725][T26259] syz.3.6466[26259] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 662.208020][T26271] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 662.231638][T26271] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 662.241255][T26273] loop0: detected capacity change from 0 to 256 [ 662.382457][T17710] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 662.610382][T26284] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 662.655997][T26284] netlink: 'syz.1.6476': attribute type 27 has an invalid length. [ 662.762357][T26286] loop4: detected capacity change from 0 to 512 [ 662.808195][T26286] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 662.840370][T26286] ext4 filesystem being mounted at /238/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 662.843700][T26287] 8021q: adding VLAN 0 to HW filter on device bond0 [ 662.859221][T26287] 8021q: adding VLAN 0 to HW filter on device team0 [ 662.869801][T26287] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 662.986506][T26293] EXT4-fs (sda1): resizing filesystem from 262144 to 262144 blocks [ 663.111453][T26294] EXT4-fs error (device loop4): ext4_add_entry:2435: inode #2: comm syz.4.6477: Directory hole found for htree leaf block 0 [ 663.594020][T20059] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 663.762143][T26314] xt_hashlimit: size too large, truncated to 1048576 [ 664.156516][T26326] loop2: detected capacity change from 0 to 512 [ 664.206306][T26326] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 664.309069][T26326] ext4 filesystem being mounted at /345/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 664.390566][T26332] loop3: detected capacity change from 0 to 512 [ 664.419199][T26332] journal_path: Lookup failure for './bus' [ 664.425062][T26332] EXT4-fs: error: could not find journal device path [ 664.693272][T26338] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 664.835080][T26338] netlink: 'syz.0.6494': attribute type 27 has an invalid length. [ 664.933060][T26343] loop3: detected capacity change from 0 to 1024 [ 664.983421][T26343] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 665.066780][T26341] 8021q: adding VLAN 0 to HW filter on device bond0 [ 665.095540][T26341] 8021q: adding VLAN 0 to HW filter on device team0 [ 665.126686][T26341] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 665.408511][T26353] loop1: detected capacity change from 0 to 256 [ 665.499739][T26353] FAT-fs (loop1): codepage cp869 not found [ 665.900685][T26359] bpf_get_probe_write_proto: 2 callbacks suppressed [ 665.900707][T26359] syz.1.6499[26359] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 665.907579][T26359] syz.1.6499[26359] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 665.982959][T26361] loop1: detected capacity change from 0 to 512 [ 666.019661][T26361] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 666.032507][T26361] ext4 filesystem being mounted at /318/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 666.053356][T26361] EXT4-fs error (device loop1): ext4_add_entry:2435: inode #2: comm syz.1.6499: Directory hole found for htree leaf block 0 [ 666.088190][T16838] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 666.314687][T17710] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 666.327361][T26370] syz.2.6500[26370] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 666.327434][T26370] syz.2.6500[26370] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 666.377552][T26373] loop1: detected capacity change from 0 to 256 [ 666.398897][T26373] vfat: Bad value for 'shortname' [ 666.866511][T26391] loop4: detected capacity change from 0 to 512 [ 667.155259][ T29] audit: type=1400 audit(2000000066.670:1642): avc: denied { create } for pid=26390 comm="syz.4.6510" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 667.174990][ T29] audit: type=1400 audit(2000000066.670:1643): avc: denied { name_bind } for pid=26390 comm="syz.4.6510" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 667.204302][T26395] xt_hashlimit: size too large, truncated to 1048576 [ 667.243624][T24276] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 668.020061][T26407] loop4: detected capacity change from 0 to 256 [ 668.032164][T26408] loop3: detected capacity change from 0 to 512 [ 668.081543][T26407] FAT-fs (loop4): codepage cp869 not found [ 668.089309][T26408] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 668.128118][T26408] ext4 filesystem being mounted at /68/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 668.303703][T26414] syz.4.6514[26414] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 668.303791][T26414] syz.4.6514[26414] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 668.380526][T26417] loop4: detected capacity change from 0 to 512 [ 668.498839][T26417] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 668.511564][T26417] ext4 filesystem being mounted at /251/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 668.528835][T26417] EXT4-fs error (device loop4): ext4_add_entry:2435: inode #2: comm syz.4.6514: Directory hole found for htree leaf block 0 [ 668.880420][T20059] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 669.708382][T24276] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 669.971550][T26450] loop0: detected capacity change from 0 to 256 [ 670.091180][T26450] FAT-fs (loop0): codepage cp869 not found [ 670.189168][T26466] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 670.244547][T26466] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 670.334034][T26474] syz.0.6527[26474] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 670.334153][T26474] syz.0.6527[26474] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 670.359062][T26474] loop0: detected capacity change from 0 to 512 [ 670.460735][T26474] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 670.473681][T26474] ext4 filesystem being mounted at /107/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 670.694601][T26479] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6536'. [ 670.704300][T26479] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6536'. [ 670.830049][T23865] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 670.993629][T26491] xt_hashlimit: size too large, truncated to 1048576 [ 672.026052][T26510] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6547'. [ 672.066755][T26510] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6547'. [ 673.257334][T26535] loop0: detected capacity change from 0 to 2048 [ 673.295176][ T29] audit: type=1400 audit(2000000072.800:1644): avc: denied { write } for pid=26528 comm="syz.0.6553" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 673.319391][ T29] audit: type=1400 audit(2000000072.800:1645): avc: denied { open } for pid=26528 comm="syz.0.6553" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 673.351536][T26535] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 673.361830][T26535] EXT4-fs (loop0): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 673.490544][T26535] [EXT4 FS bs=2048, gc=1, bpg=262144, ipg=32, mo=a002e01c, mo2=0002] [ 673.498736][T26535] System zones: 0-19 [ 673.523064][T26535] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 673.553955][T26530] EXT4-fs error (device loop0): ext4_add_entry:2435: inode #2: comm syz.0.6553: Directory hole found for htree leaf block 0 [ 673.621459][ T29] audit: type=1400 audit(2000000073.190:1646): avc: denied { remount } for pid=26533 comm="syz.1.6555" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 673.657171][T26547] EXT4-fs (sda1): resizing filesystem from 262144 to 262144 blocks [ 673.861310][T23865] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 674.660042][T26571] loop1: detected capacity change from 0 to 2048 [ 674.667931][T26573] loop4: detected capacity change from 0 to 512 [ 674.708014][T26571] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 674.713358][T26575] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 674.722278][T26573] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 674.741202][T26573] ext4 filesystem being mounted at /262/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 674.805491][T26575] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 675.239032][T26584] loop2: detected capacity change from 0 to 2048 [ 675.257578][T26584] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 675.444472][T26590] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=26590 comm=syz.0.6571 [ 676.072763][T20059] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 676.115411][T16838] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 676.145395][T26540] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 676.186032][T26605] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 676.188762][ T29] audit: type=1400 audit(2000000075.760:1647): avc: denied { load_policy } for pid=26603 comm="syz.4.6576" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 676.205543][T26605] SELinux: failed to load policy [ 676.342285][T26610] loop4: detected capacity change from 0 to 512 [ 676.383716][T26610] EXT4-fs (loop4): 1 truncate cleaned up [ 676.418966][T26610] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 676.516790][T17710] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 676.601368][T26618] loop1: detected capacity change from 0 to 512 [ 676.658337][T26618] journal_path: Lookup failure for './bus' [ 676.664199][T26618] EXT4-fs: error: could not find journal device path [ 676.673582][T26620] EXT4-fs error (device loop4): ext4_add_entry:2435: inode #2: comm syz.4.6579: Directory hole found for htree leaf block 0 [ 676.970775][T26622] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 677.035317][T26622] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 677.114329][T26630] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6584'. [ 677.124233][T26630] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6584'. [ 677.220987][T20059] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 677.353228][T26643] loop2: detected capacity change from 0 to 2048 [ 677.482463][T26643] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 678.356761][T16838] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 678.412810][T26713] loop4: detected capacity change from 0 to 2048 [ 678.515240][T26713] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 679.531511][T26784] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6597'. [ 679.563727][T26784] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6597'. [ 679.713976][T20059] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 680.403750][T26820] loop2: detected capacity change from 0 to 512 [ 680.460169][T26820] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 680.557822][T26820] ext4 filesystem being mounted at /372/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 680.641436][T26844] loop4: detected capacity change from 0 to 256 [ 680.776401][T26844] FAT-fs (loop4): codepage cp869 not found [ 681.023012][T26891] syz.4.6605[26891] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 681.023081][T26891] syz.4.6605[26891] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 681.099884][T26893] loop4: detected capacity change from 0 to 512 [ 681.138595][T26893] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 681.151431][T26893] ext4 filesystem being mounted at /269/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 681.168577][T26893] EXT4-fs error (device loop4): ext4_add_entry:2435: inode #2: comm syz.4.6605: Directory hole found for htree leaf block 0 [ 681.519828][T20059] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 681.540853][ T29] audit: type=1400 audit(2000000081.110:1648): avc: denied { read } for pid=26906 comm="syz.4.6608" name="usbmon0" dev="devtmpfs" ino=117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 681.615188][ T29] audit: type=1400 audit(2000000081.130:1649): avc: denied { open } for pid=26906 comm="syz.4.6608" path="/dev/usbmon0" dev="devtmpfs" ino=117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 681.656398][T26909] EXT4-fs (sda1): resizing filesystem from 262144 to 262144 blocks [ 681.675181][T16838] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 681.726917][T26912] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6610'. [ 681.751006][T26912] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6610'. [ 681.783150][T26914] loop0: detected capacity change from 0 to 2048 [ 681.816027][T26914] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 681.936519][ T29] audit: type=1400 audit(2000000081.510:1650): avc: denied { ioctl } for pid=26906 comm="syz.4.6608" path="/dev/usbmon0" dev="devtmpfs" ino=117 ioctlcmd=0x9207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 682.758484][T26938] syz.2.6617[26938] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 682.758657][T26938] syz.2.6617[26938] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 683.020112][T23865] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 683.797019][T26952] loop4: detected capacity change from 0 to 512 [ 683.808385][T26954] EXT4-fs (sda1): resizing filesystem from 262144 to 262144 blocks [ 683.818996][T26952] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 683.838005][T26952] ext4 filesystem being mounted at /272/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 684.041332][T26964] loop0: detected capacity change from 0 to 1024 [ 684.055578][T26964] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 684.686606][T26973] loop2: detected capacity change from 0 to 2048 [ 684.738471][T26973] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 684.876119][T20059] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 684.998772][T26973] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 685.058844][T26973] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 31 with max blocks 33 with error 28 [ 685.071403][T26973] EXT4-fs (loop2): This should not happen!! Data will be lost [ 685.071403][T26973] [ 685.081087][T26973] EXT4-fs (loop2): Total free blocks count 0 [ 685.087117][T26973] EXT4-fs (loop2): Free/Dirty block details [ 685.093021][T26973] EXT4-fs (loop2): free_blocks=2415919104 [ 685.098848][T26973] EXT4-fs (loop2): dirty_blocks=64 [ 685.103970][T26973] EXT4-fs (loop2): Block reservation details [ 685.110207][T26973] EXT4-fs (loop2): i_reserved_data_blocks=4 [ 685.167297][T23865] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 685.210600][T14716] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 685.258482][T26987] EXT4-fs (sda1): resizing filesystem from 262144 to 262144 blocks [ 685.342133][T26993] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 685.366990][T26993] netlink: 'syz.2.6636': attribute type 27 has an invalid length. [ 685.626359][T26997] 8021q: adding VLAN 0 to HW filter on device bond0 [ 685.637574][T26997] 8021q: adding VLAN 0 to HW filter on device team0 [ 685.689291][T26997] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 687.101683][T27017] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 687.143319][T27017] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 687.222299][T27017] Â: renamed from pim6reg1 [ 687.281522][T27019] loop4: detected capacity change from 0 to 512 [ 687.317249][T27019] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 687.387400][T27019] ext4 filesystem being mounted at /277/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 687.437035][T20059] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 687.548706][T27028] EXT4-fs (sda1): resizing filesystem from 262144 to 262144 blocks [ 687.842073][T27049] loop1: detected capacity change from 0 to 256 [ 687.855964][T27049] msdos: Bad value for 'gid' [ 687.860669][T27049] msdos: Bad value for 'gid' [ 688.120680][T27063] EXT4-fs (sda1): resizing filesystem from 262144 to 262144 blocks [ 688.228154][T27058] chnl_net:caif_netlink_parms(): no params data found [ 688.283629][T14716] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 688.376805][T14716] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 688.520553][T14716] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 688.564098][T27058] bridge0: port 1(bridge_slave_0) entered blocking state [ 688.571268][T27058] bridge0: port 1(bridge_slave_0) entered disabled state [ 688.598660][T27093] loop2: detected capacity change from 0 to 512 [ 688.616019][T27058] bridge_slave_0: entered allmulticast mode [ 688.642528][T27058] bridge_slave_0: entered promiscuous mode [ 688.680868][T14716] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 688.700204][T27093] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 688.712997][T27093] ext4 filesystem being mounted at /385/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 688.724907][T27058] bridge0: port 2(bridge_slave_1) entered blocking state [ 688.732369][T27058] bridge0: port 2(bridge_slave_1) entered disabled state [ 688.754254][T27102] EXT4-fs (sda1): resizing filesystem from 262144 to 262144 blocks [ 688.777726][T27058] bridge_slave_1: entered allmulticast mode [ 688.784181][T27058] bridge_slave_1: entered promiscuous mode [ 688.811011][T27104] loop4: detected capacity change from 0 to 256 [ 688.839265][T27058] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 688.866989][T27058] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 688.880460][T27104] FAT-fs (loop4): codepage cp869 not found [ 689.009460][T14716] bridge_slave_1: left allmulticast mode [ 689.015265][T14716] bridge_slave_1: left promiscuous mode [ 689.020966][T14716] bridge0: port 2(bridge_slave_1) entered disabled state [ 689.039057][T14716] bridge_slave_0: left allmulticast mode [ 689.044787][T14716] bridge_slave_0: left promiscuous mode [ 689.050572][T14716] bridge0: port 1(bridge_slave_0) entered disabled state [ 689.058201][T27112] syz.4.6670[27112] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 689.058269][T27112] syz.4.6670[27112] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 689.075000][T27112] loop4: detected capacity change from 0 to 512 [ 689.096917][T27112] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 689.109557][T27112] ext4 filesystem being mounted at /284/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 689.347891][T14716] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 689.368103][T14716] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 689.389143][T14716] bond0 (unregistering): Released all slaves [ 689.418465][T27058] team0: Port device team_slave_0 added [ 689.432886][T27058] team0: Port device team_slave_1 added [ 689.468330][T27058] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 689.475440][T27058] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 689.501525][T27058] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 689.514855][T14716] hsr_slave_0: left promiscuous mode [ 689.520711][T14716] hsr_slave_1: left promiscuous mode [ 689.521186][T16838] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 689.535216][T14716] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 689.542622][T14716] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 689.552096][T14716] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 689.559515][T14716] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 689.574101][T14716] veth1_macvtap: left promiscuous mode [ 689.579779][T14716] veth0_macvtap: left promiscuous mode [ 689.585481][T14716] veth1_vlan: left promiscuous mode [ 689.590770][T14716] veth0_vlan: left promiscuous mode [ 689.737762][T20059] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 689.972637][T14716] team0 (unregistering): Port device team_slave_1 removed [ 690.031014][T14716] team0 (unregistering): Port device team_slave_0 removed [ 690.186725][T27058] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 690.193729][T27058] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 690.219749][T27058] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 690.284724][T27058] hsr_slave_0: entered promiscuous mode [ 690.291509][T27058] hsr_slave_1: entered promiscuous mode [ 690.297552][T27058] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 690.325227][T27058] Cannot create hsr debugfs directory [ 690.592536][T27141] xt_CT: No such helper "syz1" [ 690.921279][T27058] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 690.930037][T27058] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 690.938716][T27058] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 690.949029][T27058] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 690.994163][T27058] 8021q: adding VLAN 0 to HW filter on device bond0 [ 691.010769][T27058] 8021q: adding VLAN 0 to HW filter on device team0 [ 691.020974][T14716] bridge0: port 1(bridge_slave_0) entered blocking state [ 691.028074][T14716] bridge0: port 1(bridge_slave_0) entered forwarding state [ 691.039901][T14700] bridge0: port 2(bridge_slave_1) entered blocking state [ 691.047048][T14700] bridge0: port 2(bridge_slave_1) entered forwarding state [ 691.127711][T27058] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 691.260577][T27058] veth0_vlan: entered promiscuous mode [ 691.279988][T27058] veth1_vlan: entered promiscuous mode [ 691.300154][T27058] veth0_macvtap: entered promiscuous mode [ 691.308239][T27058] veth1_macvtap: entered promiscuous mode [ 691.320528][T27058] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 691.332478][T27058] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 691.343048][T27058] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 691.352037][T27058] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 691.360824][T27058] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 691.369579][T27058] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 691.437315][T27166] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 691.447267][T27166] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 691.527972][T27167] tipc: Enabling of bearer rejected, failed to enable media [ 691.944538][ T29] audit: type=1326 audit(2000000091.510:1651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27172 comm="syz.2.6687" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd189a8cef9 code=0x0 [ 692.367404][T27188] loop0: detected capacity change from 0 to 512 [ 692.381282][T27188] journal_path: Lookup failure for './bus' [ 692.387369][T27188] EXT4-fs: error: could not find journal device path [ 692.398649][T27188] ================================================================== [ 692.406771][T27188] BUG: KCSAN: data-race in fsnotify_detach_mark / fsnotify_handle_inode_event [ 692.415675][T27188] [ 692.418008][T27188] write to 0xffff888104124454 of 4 bytes by task 17256 on cpu 1: [ 692.425736][T27188] fsnotify_detach_mark+0xe1/0x190 [ 692.430968][T27188] fsnotify_destroy_mark+0x9a/0x1a0 [ 692.436209][T27188] __se_sys_inotify_rm_watch+0xfd/0x180 [ 692.441776][T27188] __x64_sys_inotify_rm_watch+0x31/0x40 [ 692.447350][T27188] x64_sys_call+0x1ae0/0x2d60 [ 692.452073][T27188] do_syscall_64+0xc9/0x1c0 [ 692.456599][T27188] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 692.462526][T27188] [ 692.464864][T27188] read to 0xffff888104124454 of 4 bytes by task 27188 on cpu 0: [ 692.472596][T27188] fsnotify_handle_inode_event+0xf6/0x1f0 [ 692.478355][T27188] fsnotify+0x10ba/0x11a0 [ 692.482705][T27188] __fsnotify_parent+0x285/0x380 [ 692.487662][T27188] __fput+0x5ca/0x6f0 [ 692.491665][T27188] __fput_sync+0x44/0x60 [ 692.495924][T27188] __se_sys_close+0x101/0x1b0 [ 692.500620][T27188] __x64_sys_close+0x1f/0x30 [ 692.505223][T27188] x64_sys_call+0x25cb/0x2d60 [ 692.509946][T27188] do_syscall_64+0xc9/0x1c0 [ 692.514469][T27188] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 692.520433][T27188] [ 692.522771][T27188] value changed: 0x00000003 -> 0x00000000 [ 692.528487][T27188] [ 692.530808][T27188] Reported by Kernel Concurrency Sanitizer on: [ 692.537065][T27188] CPU: 0 UID: 0 PID: 27188 Comm: syz.0.6692 Not tainted 6.11.0-rc7-syzkaller #0 [ 692.546162][T27188] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 692.556224][T27188] ================================================================== SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 692.568768][ T29] audit: type=1400 audit(2000000092.140:1652): avc: denied { write } for pid=3250 comm="syz-executor" path="pipe:[1739]" dev="pipefs" ino=1739 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 693.161478][T14679] bridge_slave_1: left allmulticast mode [ 693.167234][T14679] bridge_slave_1: left promiscuous mode [ 693.172845][T14679] bridge0: port 2(bridge_slave_1) entered disabled state [ 693.180828][T14679] bridge_slave_0: left allmulticast mode [ 693.186589][T14679] bridge_slave_0: left promiscuous mode [ 693.192243][T14679] bridge0: port 1(bridge_slave_0) entered disabled state [ 693.377106][T14679] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 693.386513][T14679] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 693.397096][T14679] bond0 (unregistering): Released all slaves [ 693.436799][T14679] tipc: Disabling bearer [ 693.441945][T14679] tipc: Left network mode [ 693.507725][T14679] hsr_slave_0: left promiscuous mode [ 693.513343][T14679] hsr_slave_1: left promiscuous mode [ 693.518974][T14679] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 693.526460][T14679] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 693.566759][T14679] team0 (unregistering): Port device team_slave_1 removed [ 693.577045][T14679] team0 (unregistering): Port device team_slave_0 removed [ 694.323087][T14679] bridge_slave_1: left allmulticast mode [ 694.328848][T14679] bridge_slave_1: left promiscuous mode [ 694.334478][T14679] bridge0: port 2(bridge_slave_1) entered disabled state [ 694.342592][T14679] bridge_slave_0: left allmulticast mode [ 694.348292][T14679] bridge_slave_0: left promiscuous mode [ 694.353994][T14679] bridge0: port 1(bridge_slave_0) entered disabled state [ 694.362894][T14679] bridge_slave_1: left allmulticast mode [ 694.368567][T14679] bridge_slave_1: left promiscuous mode [ 694.374254][T14679] bridge0: port 2(bridge_slave_1) entered disabled state [ 694.381937][T14679] bridge_slave_0: left allmulticast mode [ 694.387679][T14679] bridge_slave_0: left promiscuous mode [ 694.393387][T14679] bridge0: port 1(bridge_slave_0) entered disabled state [ 694.787394][T14679] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 694.796851][T14679] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 694.806414][T14679] bond0 (unregistering): Released all slaves [ 694.815667][T14679] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 694.825066][T14679] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 694.834463][T14679] bond0 (unregistering): Released all slaves [ 694.887463][T14679] tipc: Disabling bearer [ 694.892489][T14679] tipc: Left network mode [ 694.897303][T14679] tipc: Left network mode [ 694.967710][T14679] hsr_slave_0: left promiscuous mode [ 694.973352][T14679] hsr_slave_1: left promiscuous mode [ 694.979243][T14679] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 694.986779][T14679] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 694.996112][T14679] hsr_slave_0: left promiscuous mode [ 695.001696][T14679] hsr_slave_1: left promiscuous mode [ 695.007377][T14679] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 695.014832][T14679] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 695.055694][T14679] team0 (unregistering): Port device team_slave_1 removed [ 695.067403][T14679] team0 (unregistering): Port device team_slave_0 removed [ 695.133422][T14679] team0 (unregistering): Port device team_slave_1 removed [ 695.144602][T14679] team0 (unregistering): Port device team_slave_0 removed [ 696.310796][T14718] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 696.998671][T14718] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 697.067796][T14718] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 697.127969][T14718] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 697.201274][T14718] bridge_slave_1: left allmulticast mode [ 697.206975][T14718] bridge_slave_1: left promiscuous mode [ 697.212731][T14718] bridge0: port 2(bridge_slave_1) entered disabled state [ 697.220830][T14718] bridge_slave_0: left allmulticast mode [ 697.226644][T14718] bridge_slave_0: left promiscuous mode [ 697.232335][T14718] bridge0: port 1(bridge_slave_0) entered disabled state [ 697.327350][T14718] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 697.337890][T14718] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 697.347743][T14718] bond0 (unregistering): Released all slaves [ 697.447157][T14718] hsr_slave_0: left promiscuous mode [ 697.452784][T14718] hsr_slave_1: left promiscuous mode [ 697.458529][T14718] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 697.465924][T14718] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 697.473474][T14718] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 697.480907][T14718] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 697.489837][T14718] veth1_macvtap: left promiscuous mode [ 697.495534][T14718] veth0_macvtap: left promiscuous mode [ 697.501201][T14718] veth1_vlan: left promiscuous mode [ 697.506552][T14718] veth0_vlan: left promiscuous mode [ 697.583273][T14718] team0 (unregistering): Port device team_slave_1 removed [ 697.593242][T14718] team0 (unregistering): Port device team_slave_0 removed