last executing test programs: 4.558822028s ago: executing program 3 (id=2895): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x1, 0x8, 0x8}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000300)="d8000000180081054e81f782", 0xc}], 0x1, 0x0, 0x0, 0x4a0f0000}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10) write$binfmt_aout(r3, 0x0, 0xc1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000005, 0x13, r3, 0x0) preadv(r2, &(0x7f0000000040)=[{0x0}], 0x1, 0x0, 0x0) 4.468829914s ago: executing program 3 (id=2896): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x200080, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r1, 0x0, 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r2 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x4e20, @local}]}, &(0x7f0000000840)=0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f0000000000)={0x0, 0x0, 0x20}, 0xc) sendmmsg$inet6(r3, &(0x7f0000003f00)=[{{0x0, 0xf, &(0x7f0000000300)=[{&(0x7f0000000140)="a2", 0x1a058}], 0x1}}], 0x1, 0x0) writev(r3, &(0x7f0000000580)=[{&(0x7f00000003c0)='k', 0x171ac}], 0x1) dup3(r2, r3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000001780)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a010400000000000000000100000008000240000000020900010073797a300000000014000000110001"], 0x50}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000009006000000000000000000000a44000000090a050600000000000000000100000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000001405000d"], 0x6c}}, 0x0) 4.357847152s ago: executing program 3 (id=2900): r0 = socket(0x200000100000011, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) sendmsg$netlink(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000300)={0x10}, 0x10}], 0x1}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYRESDEC], 0x2c}}, 0x818) 4.313805316s ago: executing program 3 (id=2902): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=r2, @ANYBLOB="00000000000000001c00128009000100626f6e64000000000c000280050001"], 0x3c}}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), r1) socket$nl_generic(0x10, 0x3, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000001001000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000700)={&(0x7f00000001c0)='kmem_cache_free\x00', r4}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x1, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_init_net_socket$x25(0x9, 0x5, 0x0) unshare(0x68040200) 3.791671194s ago: executing program 3 (id=2909): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r2, 0x0) r3 = dup3(r2, r1, 0x0) ppoll(&(0x7f0000000340)=[{r0, 0x303}, {r3}], 0x2, 0x0, 0x0, 0x0) 3.736742998s ago: executing program 3 (id=2911): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r0}, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x66, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000003200)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$NFC_CMD_DEP_LINK_UP(r1, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x24, r2, 0x420, 0x70bd28, 0x25dfdbfc, {}, [@NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0x1}, @NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x8000) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r3, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000b80)={0x3c, r4, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x42}}]}, 0x3c}}, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x3, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000570000"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10) 1.044798504s ago: executing program 4 (id=3005): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./bus\x00', 0x20081e, &(0x7f0000000040)={[{@nodelalloc}, {@grpid}, {@auto_da_alloc}]}, 0x1, 0x4ef, &(0x7f00000003c0)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.numa_stat\x00', 0x275a, 0x0) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000300)='./file0\x00', 0x2000410, &(0x7f0000000000)={[{@commit={'commit', 0x3d, 0x5}}]}, 0x1, 0x79f, &(0x7f00000012c0)="$eJzs3ctrXFUYAPDvTl5NGk0EQesqIGigdGJrbBUUKi5EsFDQtW1IpqFmkimZSWlCwRYR3AgqLgTddO2j7sSdj63+Fy6kpWpbrLqQkTuPdtLMTDOkM1PI7wc3c869d+ac7577OJNzuRPArjWV/slE7IuID5OIidr8JCKGKqnBiKPV9W5dPz+fTkmUy2/8kVTWuXn9/Hw0vCe1t5Z5PCJ+fC9if2ZrucX1jaW5fD63WsvPlJbPzBTXNw6cXp5bzC3mVg4fnJ09dOS5I4fvX6x//bIxfvWjV5/++ui/7z52+YOfkjga47VljXHcL1MxVdsmQ+km3OSV+11YnyVtlr3Uw3rQmfTQHKge5bEvJmKgkmphtJc1AwC65Z2IKAMAu0zi+g8Au0xETEZt/Ks+9ft/Er107eWI2FONvz6+WV0yWBuz21MZBx27mWwaGUnqG26HpiLi82/f+jKdokvjkADNXLgYEScnp7ae/5Mt9yx06pl2C8sjlZepu2Y7/0HvfJ/2f55v1v/L3O7/RJP+T3r0TpXb3fWzPfc+/jNXdlxIG2n/78WGe9tuNcRfMzlQyz1U6fMNJadO53Ppue3hiJiOoZE0f7CyavPtMX3jvxutym/s//358dtfpOVvvgMnc2VwZPN7FuZKczsKusG1ixFPDDaLP7nd/kmL/u/xbZbx2gvvf9ZqWRp/Gnd9SstPX3cUVAfKlyKeatr+d9oyaXt/4kxld5ip7xRNfPPrp2Otym9s/3RKy69/F+iFtP3H2sc/mTTer1nsvIyfL0380GrZveNvvv8PJ29W0sO1eefmSqXVgxHDyetb5x+68956vr5+Gv/0k82P/3b7f/qd8OQ24x+8+vtXtY9qGn/Fhf61/0JH7d8mUb8e3LXo8q2lgVblb6/9Zyup6dqc7Zz/7lHTHezNAAAAAAAAAAAAAAAAAAAAAAAAANC5TESMR5LJ3k5nMtls9Te8H42xTL5QLO0/VVhbWYjx76rPP83UH3U50fA81PJA9Xn49fyh2Jx/NiIeiYhPRkYr+ex8Ib/Q7+ABAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoGZvi9//T/020u/aAQBds6ffFQAAes71HwB2n86u/6NdqwcA0Dsdf/8vJ92pCADQM9u+/p/sbj0AgN4x/g8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAECXHT92LJ3Kf18/P5/mF86ury0Vzh5YyBWXsstr89n5wuqZ7GKhsJjPZecLyy0/6EL1JV8onJmNlbVzM6VcsTRTXN84sVxYWymdOL08t5g7kRvqWWQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAsH3F9Y2luXw+tyrRNjH6YFSjh4nkn3brDEb/a7gbEsN9K73xLDHavxMUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwAPu/wAAAP//wJMmNg==") syz_emit_ethernet(0x2e, &(0x7f00000001c0)={@local, @multicast, @val={@void, {0x8100, 0x4, 0x1, 0x2}}, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x2, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x8}}}}}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x55, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000240)='./file0\x00', 0x147142, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(0xffffffffffffffff, 0x47ba, 0x0, 0x0, 0x0, 0x0) 935.734372ms ago: executing program 4 (id=3010): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000002000000000000000000018190000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000024000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0xfff, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3f, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000000020000000000000000018190000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) ptrace$getregset(0x4204, 0x0, 0xd2945a25acdce3af, &(0x7f00000000c0)={&(0x7f0000000040)=""/77, 0x4d}) 875.239866ms ago: executing program 4 (id=3012): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x200080, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r1, 0x0, 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r2 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x4e20, @local}]}, &(0x7f0000000840)=0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f0000000000)={0x0, 0x0, 0x20}, 0xc) sendmmsg$inet6(r3, &(0x7f0000003f00)=[{{0x0, 0xf, &(0x7f0000000300)=[{&(0x7f0000000140)="a2", 0x1a058}], 0x1}}], 0x1, 0x0) writev(r3, &(0x7f0000000580)=[{&(0x7f00000003c0)='k', 0x171ac}], 0x1) dup3(r2, r3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000001780)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a010400000000000000000100000008000240000000020900010073797a300000000014000000110001"], 0x50}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000009006000000000000000000000a44000000090a050600000000000000000100000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000001405000d"], 0x6c}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000080000002d01000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x90) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r5, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_clone(0x100100, &(0x7f0000003100), 0x0, 0x0, 0x0, 0x0) ioprio_set$pid(0x2, 0x0, 0x6000) 755.882055ms ago: executing program 4 (id=3016): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000fcffffff18110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000100850000008600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x8, 0x7ffc0002}]}) fchownat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0) 755.656885ms ago: executing program 2 (id=3017): r0 = io_uring_setup(0xc8e, &(0x7f0000000040)={0x0, 0x15cf}) io_uring_register$IORING_REGISTER_FILES2(r0, 0xd, &(0x7f0000000380)={0x60, 0x1, 0x0, 0x0, 0x0}, 0x20) mq_unlink(0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x2}, 0x20008800) mq_open(0x0, 0x6e93ebbbcc0884f2, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x3}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x40, 0x7ffc1ffb}]}) readahead(0xffffffffffffffff, 0x63, 0xf) 755.439785ms ago: executing program 4 (id=3018): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000002c0000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r3}, 0x10) write$selinux_load(r1, &(0x7f0000000140)=ANY=[@ANYBLOB='x\x00'/15], 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000072000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYRES32=r4], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r5}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000005c0)={[{@noblock_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x1, 0x56a, &(0x7f00000015c0)="$eJzs3c9rHFUcAPDvbJL+1qZQinqQQA9WajdN4o8KQutRtFjQe12SaSjZdEt2U5pYaHuwFy9SBBEL4h/g3WPxH/CvKGihSAl68BKZzWy7TbL5uXW3zucD0743M5s3b998335nZ5cNoLBGsn9KEa9GxDdJxOG2bYORbxxZ2W/p8Y3JbEliefmzP5NI8nWt/ZP8/4N55ZWI+PWriJOlte3WFxZnKtVqOpfXRxuzV0frC4unLs9WptPp9Mr4xMSZdybG33/v3a719c0Lf3//6f2Pznx9fOm7nx8euZvEuTiUb2vvxy7caq+MxEj+nAzFuVU7jnWhsX6S9PoA2JGBPM6HIpsDDsdAHvXA/9/NiFgGCioR/1BQrTygdW3fpevgF8ajD1cugNb2f3DlvZHY17w2OrCUPHNllF3vDneh/ayNX/64dzdbYpP3IW52oT2Allu3I+L04ODa+S/J57+dO91883hjq9so2usP9NL9LP95a738p/Qk/4l18p+D68TuTmwe/6WHXWimoyz/+2Dd/PfJ1DU8kNdeauZ8Q8mly9X0dES8HBEnYmhvVt/ofs6ZpQfLnba153/ZkrXfygXz43g4uPfZx0xVGpXd9Lndo9sRrz3Nf5NYM//va+a6q8c/ez4ubLGNY+m91ztt27z/7bqfAS//FPHGuuP/9I5WsvH9ydHm+TDaOivW+uvOsd86tb+9/ndfNv4HNu7/cNJ+v7a+/TZ+3PdP2mnbTs//PcnnzfKefN31SqMxNxaxJ/lk7frxp49t1Vv7Z/0/cXzj+W+9839/RHyxxf7fOXqn4679MP5T2xr/7RcefPzlD53a39r4v90sncjXbGX+2+oB7ua5AwAAAAAAgH5TiohDkZTKT8qlUrm88vmOo3GgVK3VGycv1eavTEXzu7LDMVRq3ek+3PZ5iLH887Ct+viq+kREHImIbwf2N+vlyVp1qtedBwAAAAAAAAAAAAAAAAAAgD5xsMP3/zO/D/T66IDnzk9+Q3FtGv/d+KUnoC95/YfiEv9QXOIfikv8Q3GJfygu8Q/FJf6huMQ/AAAAAAAAAAAAAAAAAAAAAAAAAAAAdNWF8+ezZXnp8Y3JrD51bWF+pnbt1FRanynPzk+WJ2tzV8vTtdp0NS1P1mY3+3vVWu3q2HjMXx9tpPXGaH1h8eJsbf5K4+Ll2cp0ejEd+k96BQAAAAAAAAAAAAAAAAAAAC+W+sLiTKVaTecUOhbORl8cxo4LyWajfDY/GXbUxGDvO6jwHAo9npgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoM2/AQAA///fKTPH") r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) r7 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)={0xffffffffffffffff}, 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={r7, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x8a, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380), 0x8, 0x8b, 0x8, 0x8, &(0x7f00000003c0)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r8}, 0x10) ioctl$PPPIOCNEWUNIT(r6, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMAXCID(r6, 0x40047451, &(0x7f0000000200)) ioctl$PPPIOCSFLAGS1(r6, 0x40047459, &(0x7f0000000100)=0x2000004) pwritev(r6, &(0x7f0000000540)=[{&(0x7f00000002c0)="00214717a70700000000030600710a069d317ebb906ce74b18272786533b905a56fef73ab4", 0x25}], 0x1, 0x2, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000200)='./file1\x00', &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0) r9 = socket$unix(0x1, 0x2, 0x0) getpeername$unix(r9, &(0x7f00000002c0), &(0x7f0000000000)=0x6e) lsetxattr$security_capability(&(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x0, 0x0, 0x0) 743.770636ms ago: executing program 2 (id=3019): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) r2 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x141341) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) 707.049029ms ago: executing program 0 (id=3020): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000140)=0x6784, 0x4) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x2d, 0x0) setsockopt$inet_int(r0, 0x0, 0x8, &(0x7f0000000040)=0xbbc, 0x4) recvmmsg(r0, &(0x7f00000010c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=""/21, 0x15}}, {{0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f00000006c0)=""/204, 0xcc}, {&(0x7f0000001140)=""/126, 0x7e}, {&(0x7f0000000d40)=""/241, 0xf1}, {&(0x7f00000029c0)=""/4096, 0x1000}, {&(0x7f0000000e40)=""/236, 0xec}], 0x5, &(0x7f0000000fc0)=""/198, 0xc6}, 0x813}], 0x2, 0x45833af92e4b39bd, 0x0) 688.53174ms ago: executing program 2 (id=3021): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x9}, 0xfffffffffffffd80) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0x0, 0x0, 0x0, 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 613.142405ms ago: executing program 0 (id=3022): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000002000000000000000000018190000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000024000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0xfff, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3f, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000000020000000000000000018190000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) ptrace$getregset(0x4204, 0x0, 0xd2945a25acdce3af, &(0x7f00000000c0)={&(0x7f0000000040)=""/77, 0x4d}) 612.167305ms ago: executing program 0 (id=3023): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0xd041}, 0x20000000) 579.652978ms ago: executing program 0 (id=3024): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x3}, @NFTA_EXTHDR_DREG={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}}, 0x0) 573.735278ms ago: executing program 2 (id=3025): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) r2 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x141341) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) 528.998681ms ago: executing program 4 (id=3026): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r0}, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x66, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000003200)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$NFC_CMD_DEP_LINK_UP(r1, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x24, r2, 0x420, 0x70bd28, 0x25dfdbfc, {}, [@NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0x1}, @NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x8000) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r3, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000b80)={0x3c, r4, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x42}}]}, 0x3c}}, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x3, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000570000"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10) 508.745983ms ago: executing program 0 (id=3027): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100"/13], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x14) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = socket(0x1, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r3, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x1) 480.253165ms ago: executing program 2 (id=3028): r0 = syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x2008002, &(0x7f0000000080), 0x1, 0x53d, &(0x7f0000000a80)="$eJzs3c9vHFcdAPDvjH82TesEeoAKSIBCQFF2400bVb20uYBQVQlRcUAcUmNvLJNdr/GuS20s4f4NIIHECf4EDkgckHriwI0jEgeEVA5IASxQjATSopkdO1t7TZbsepd6Px9pMvPmzcz3vWxm39u3m3kBTKyrEbEXEbMR8VZELBT7k2KJ1zpLdtzD/d3lg/3d5STa7Tf/muT52b7oOifzdHHN+Yj42pcjvpWcjNvc3rm/VKtVN4t0uVXfKDe3d26s1ZdWq6vV9Url9uLtmy/feqkytLpeqf/8wZfWXv/6r375yfd/u/fF72XFuljkdddjmDpVnzmKk5mOiNfPItgYTBXr2TGXgyeTRsRHIuIz+f2/EFP5v04A4DxrtxeivdCdBgDOuzQfA0vSUkSkadEJKHXG8J6LC2mt0Wxdv9fYWl/pjJVdipn03lqtevPy3O+/kx88k2TpxTwvz8/TlWPpWxFxOSJ+OPdUni4tN2or4+nyAMDEe7q7/Y+If8ylaanU16k9vtUDAD405sddAABg5LT/ADB5tP8AMHn6aP+LL/v3zrwsAMBo+PwPAJNH+w8Ak0f7DwAT5atvvJEt7YPi+dcrb29v3W+8fWOl2rxfqm8tl5Ybmxul1UZjNX9mT/1x16s1GhuLL8bWO+VWtdkqN7d37tYbW+utu/lzve9WZ0ZSKwDgv7l85b3fJRGx98pT+RJdczloq+F8S8ddAGBspgY5WQcBPtTM9gWTq68mPO8k/ObMywKMR8+Hec/33PygH/8PQfzOCP6vXPt4/+P/5niG88X4P0yuJxv/f3Xo5QBGz/g/TK52Ozk+5//sURYAcC4N8BO+9veH1QkBxupxk3kP5ft/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOGcuRsS3I0lL+VzgafZnWipFPBMRl2ImubdWq96MiGfjSkTMzGXpxXEXGgAYUPrnpJj/69rCCxeP584m/5zL1xHx3Z+8+aN3llqtzcVs/9+O9s8dTh9WeXTeAPMKAgBDlrfflWLd9UH+4f7u8uEyyvI8uBP/LqYiXj7Y382XTs50ZDsj5vO+xIW/JzFdnDMfEc9HxNQQ4u+9GxEf61X/JB8buVTMfNodP4rYz4w0fvqB+Gme11lnna+PDqEsMGneuxMRr/W6/9K4mq973//z+TvU4B7c6Vzs8L3voCv+dBFpqkf87J6/2m+MF3/9lRM72wudvHcjnp/uFT85ip+cEv+FPuP/4ROf+sGrp+S1fxpxLXrH745VbtU3ys3tnRtr9aXV6mp1vVK5vXj75su3XqqU8zHq8uFI9Ul/eeX6s6eVLav/hVPiz/es/+zRuZ/rs/4/+9db3/z0o+Tc8fhf+Gzv1/+5nvE7sjbx833GX7rwi1On787ir5xS/8e9/tf7jP/+n3ZW+jwUABiB5vbO/aVarbo50Eb2KXQY1zmxkRWxv4MPu4uDBf1jnEUtnnBj5qz+Vs98Y/qorzjcK38ju+KIq5MOvRYDbTwcVazxvScBo/Hoph93SQAAAAAAAAAAAAAAgNOM4r8ujbuOAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAnF//CQAA//+zi8zo") lsetxattr$system_posix_acl(&(0x7f0000000400)='.\x00', &(0x7f0000000440)='system.posix_acl_default\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0xee01, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=r0, @ANYBLOB="040000000000800008000000", @ANYRES32=r0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bf"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x68, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) open(&(0x7f0000000a40)='./bus\x00', 0x141a42, 0x0) 466.843456ms ago: executing program 0 (id=3029): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000180)=0x4a9a, 0x4) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={&(0x7f00000005c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x6, [@ptr={0xa, 0x0, 0x0, 0x2, 0x3}, @volatile={0x5, 0x0, 0x0, 0x9, 0x4}, @typedef={0x5, 0x0, 0x0, 0x8, 0x803}]}, {0x0, [0x61, 0x30, 0x61, 0x0]}}, &(0x7f0000000640)=""/48, 0x42, 0x30, 0x0, 0x7fffffff}, 0x20) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r1}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r3}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x2, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0x8}, {0x6}]}) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r4 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, 0x0, 0x0, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) epoll_wait(r4, &(0x7f0000000040), 0x0, 0xfffff001) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={0xffffffffffffffff, 0x10, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0x66, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x21b0, 0x6, 0x0, 0x3, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r7 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={0x60, 0x1403, 0x1, 0x1, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'sit0\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'vlan1\x00'}}]}, 0x60}}, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) 346.583405ms ago: executing program 2 (id=3030): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000021b70400000000000085000000c300000095"], 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000008c0)='sys_enter\x00', r1}, 0x10) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6}]}) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$unix(0x1, 0x5, 0x0) dup2(r3, r2) 216.721014ms ago: executing program 1 (id=3034): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0xd041}, 0x20000000) 169.112198ms ago: executing program 1 (id=3035): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x9}, 0xfffffffffffffd80) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0x0, 0x0, 0x0, 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 168.809377ms ago: executing program 1 (id=3036): r0 = syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x2008002, &(0x7f0000000080), 0x1, 0x53d, &(0x7f0000000a80)="$eJzs3c9vHFcdAPDvjH82TesEeoAKSIBCQFF2400bVb20uYBQVQlRcUAcUmNvLJNdr/GuS20s4f4NIIHECf4EDkgckHriwI0jEgeEVA5IASxQjATSopkdO1t7TZbsepd6Px9pMvPmzcz3vWxm39u3m3kBTKyrEbEXEbMR8VZELBT7k2KJ1zpLdtzD/d3lg/3d5STa7Tf/muT52b7oOifzdHHN+Yj42pcjvpWcjNvc3rm/VKtVN4t0uVXfKDe3d26s1ZdWq6vV9Url9uLtmy/feqkytLpeqf/8wZfWXv/6r375yfd/u/fF72XFuljkdddjmDpVnzmKk5mOiNfPItgYTBXr2TGXgyeTRsRHIuIz+f2/EFP5v04A4DxrtxeivdCdBgDOuzQfA0vSUkSkadEJKHXG8J6LC2mt0Wxdv9fYWl/pjJVdipn03lqtevPy3O+/kx88k2TpxTwvz8/TlWPpWxFxOSJ+OPdUni4tN2or4+nyAMDEe7q7/Y+If8ylaanU16k9vtUDAD405sddAABg5LT/ADB5tP8AMHn6aP+LL/v3zrwsAMBo+PwPAJNH+w8Ak0f7DwAT5atvvJEt7YPi+dcrb29v3W+8fWOl2rxfqm8tl5Ybmxul1UZjNX9mT/1x16s1GhuLL8bWO+VWtdkqN7d37tYbW+utu/lzve9WZ0ZSKwDgv7l85b3fJRGx98pT+RJdczloq+F8S8ddAGBspgY5WQcBPtTM9gWTq68mPO8k/ObMywKMR8+Hec/33PygH/8PQfzOCP6vXPt4/+P/5niG88X4P0yuJxv/f3Xo5QBGz/g/TK52Ozk+5//sURYAcC4N8BO+9veH1QkBxupxk3kP5ft/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOGcuRsS3I0lL+VzgafZnWipFPBMRl2ImubdWq96MiGfjSkTMzGXpxXEXGgAYUPrnpJj/69rCCxeP584m/5zL1xHx3Z+8+aN3llqtzcVs/9+O9s8dTh9WeXTeAPMKAgBDlrfflWLd9UH+4f7u8uEyyvI8uBP/LqYiXj7Y382XTs50ZDsj5vO+xIW/JzFdnDMfEc9HxNQQ4u+9GxEf61X/JB8buVTMfNodP4rYz4w0fvqB+Gme11lnna+PDqEsMGneuxMRr/W6/9K4mq973//z+TvU4B7c6Vzs8L3voCv+dBFpqkf87J6/2m+MF3/9lRM72wudvHcjnp/uFT85ip+cEv+FPuP/4ROf+sGrp+S1fxpxLXrH745VbtU3ys3tnRtr9aXV6mp1vVK5vXj75su3XqqU8zHq8uFI9Ul/eeX6s6eVLav/hVPiz/es/+zRuZ/rs/4/+9db3/z0o+Tc8fhf+Gzv1/+5nvE7sjbx833GX7rwi1On787ir5xS/8e9/tf7jP/+n3ZW+jwUABiB5vbO/aVarbo50Eb2KXQY1zmxkRWxv4MPu4uDBf1jnEUtnnBj5qz+Vs98Y/qorzjcK38ju+KIq5MOvRYDbTwcVazxvScBo/Hoph93SQAAAAAAAAAAAAAAgNOM4r8ujbuOAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAnF//CQAA//+zi8zo") lsetxattr$system_posix_acl(&(0x7f0000000400)='.\x00', &(0x7f0000000440)='system.posix_acl_default\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0xee01, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=r0, @ANYBLOB="040000000000800008000000", @ANYRES32=r0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) open(&(0x7f0000000a40)='./bus\x00', 0x141a42, 0x0) 46.735587ms ago: executing program 1 (id=3037): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) listen(r2, 0x0) r3 = dup3(r2, r1, 0x0) ppoll(&(0x7f0000000340)=[{r0, 0x303}, {r3}], 0x2, 0x0, 0x0, 0x0) 287.64µs ago: executing program 1 (id=3038): fchownat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0) 0s ago: executing program 1 (id=3039): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100"/13], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x14) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = socket(0x1, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r3, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x1) kernel console output (not intermixed with test programs): dm_t pid=26109 comm="syz.4.2470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9c1c5cef9 code=0x7ffc0000 [ 175.359317][ T29] audit: type=1326 audit(2000000031.180:7587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26109 comm="syz.4.2470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7fc9c1c5cef9 code=0x7ffc0000 [ 175.382821][ T29] audit: type=1326 audit(2000000031.180:7588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26109 comm="syz.4.2470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9c1c5cef9 code=0x7ffc0000 [ 175.620488][T26153] loop1: detected capacity change from 0 to 512 [ 175.668567][T26153] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2240: inode #15: comm syz.1.2475: corrupted in-inode xattr: invalid ea_ino [ 175.683500][T26153] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.2475: couldn't read orphan inode 15 (err -117) [ 175.725561][T26169] loop4: detected capacity change from 0 to 512 [ 175.753793][T26020] loop0: detected capacity change from 0 to 512 [ 175.769993][T26020] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 175.788447][T26169] ext4 filesystem being mounted at /122/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 175.829479][T26020] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #16: comm syz.0.2455: invalid indirect mapped block 4294967295 (level 0) [ 175.853337][T26169] EXT4-fs error (device loop4): ext4_add_entry:2435: inode #2: comm syz.4.2479: Directory hole found for htree leaf block 0 [ 175.868642][T26020] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #16: comm syz.0.2455: invalid indirect mapped block 4294967295 (level 1) [ 175.934402][T26020] EXT4-fs (loop0): 1 orphan inode deleted [ 175.938098][T26194] loop1: detected capacity change from 0 to 512 [ 175.940713][T26020] EXT4-fs (loop0): 1 truncate cleaned up [ 176.020782][T26020] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 176.034558][T26194] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 176.075072][T26194] EXT4-fs (loop1): 1 truncate cleaned up [ 176.085530][T26217] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2455'. [ 176.262411][T26271] loop0: detected capacity change from 0 to 512 [ 176.297846][T26271] ext4 filesystem being mounted at /92/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 176.325348][T26271] EXT4-fs error (device loop0): ext4_do_update_inode:5154: inode #2: comm syz.0.2491: corrupted inode contents [ 176.344661][T26287] loop4: detected capacity change from 0 to 512 [ 176.360491][T26287] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2240: inode #15: comm syz.4.2494: corrupted in-inode xattr: invalid ea_ino [ 176.367225][T26271] EXT4-fs error (device loop0): ext4_dirty_inode:6014: inode #2: comm syz.0.2491: mark_inode_dirty error [ 176.399293][T26287] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.2494: couldn't read orphan inode 15 (err -117) [ 176.428057][T26271] EXT4-fs error (device loop0): ext4_do_update_inode:5154: inode #2: comm syz.0.2491: corrupted inode contents [ 176.459577][T26307] loop1: detected capacity change from 0 to 512 [ 176.485084][T26307] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 176.492102][T26301] EXT4-fs error (device loop0): ext4_add_entry:2435: inode #2: comm syz.0.2491: Directory hole found for htree leaf block 0 [ 176.525388][T26307] EXT4-fs (loop1): 1 truncate cleaned up [ 176.632160][T26333] loop3: detected capacity change from 0 to 1024 [ 176.798028][T26370] loop1: detected capacity change from 0 to 512 [ 176.813698][T26376] loop0: detected capacity change from 0 to 512 [ 176.839956][T26370] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2240: inode #15: comm syz.1.2511: corrupted in-inode xattr: invalid ea_ino [ 176.899090][T26370] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.2511: couldn't read orphan inode 15 (err -117) [ 176.926544][T26376] ext4 filesystem being mounted at /96/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 176.966793][T26401] syz.3.2516[26401] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 176.966912][T26401] syz.3.2516[26401] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 176.987079][T26376] EXT4-fs error (device loop0): ext4_do_update_inode:5154: inode #2: comm syz.0.2513: corrupted inode contents [ 177.053204][T26376] EXT4-fs error (device loop0): ext4_dirty_inode:6014: inode #2: comm syz.0.2513: mark_inode_dirty error [ 177.065883][T26376] EXT4-fs error (device loop0): ext4_do_update_inode:5154: inode #2: comm syz.0.2513: corrupted inode contents [ 177.113806][T26411] EXT4-fs error (device loop0): ext4_add_entry:2435: inode #2: comm syz.0.2513: Directory hole found for htree leaf block 0 [ 177.318744][T26465] loop3: detected capacity change from 0 to 512 [ 177.389571][T26465] ext4 filesystem being mounted at /106/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 177.416386][T26479] loop0: detected capacity change from 0 to 512 [ 177.440778][T26479] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2240: inode #15: comm syz.0.2531: corrupted in-inode xattr: invalid ea_ino [ 177.468988][T26465] EXT4-fs error (device loop3): ext4_add_entry:2435: inode #2: comm syz.3.2528: Directory hole found for htree leaf block 0 [ 177.514761][T26479] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.2531: couldn't read orphan inode 15 (err -117) [ 177.827915][T26318] loop4: detected capacity change from 0 to 4096 [ 177.893731][T26561] syz.3.2547[26561] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 177.893785][T26561] syz.3.2547[26561] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 177.897118][T26567] loop2: detected capacity change from 0 to 512 [ 177.946241][T26567] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2240: inode #15: comm syz.2.2548: corrupted in-inode xattr: invalid ea_ino [ 177.988237][T26567] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.2548: couldn't read orphan inode 15 (err -117) [ 178.003795][T26585] loop0: detected capacity change from 0 to 512 [ 178.035716][T26585] EXT4-fs (loop0): external journal device major/minor numbers have changed [ 178.094234][T26585] EXT4-fs (loop0): failed to open journal device unknown-block(0,3) -6 [ 178.111328][T26318] loop4: detected capacity change from 0 to 512 [ 178.129072][T26318] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 178.184806][T26318] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #16: comm syz.4.2501: invalid indirect mapped block 4294967295 (level 0) [ 178.191989][T26585] hub 9-0:1.0: USB hub found [ 178.207375][T26627] loop3: detected capacity change from 0 to 512 [ 178.214140][T26585] hub 9-0:1.0: 8 ports detected [ 178.221592][T26318] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #16: comm syz.4.2501: invalid indirect mapped block 4294967295 (level 1) [ 178.247336][T26627] ext4 filesystem being mounted at /115/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 178.272237][T26318] EXT4-fs (loop4): 1 orphan inode deleted [ 178.279218][T26318] EXT4-fs (loop4): 1 truncate cleaned up [ 178.337283][T26627] EXT4-fs error (device loop3): ext4_add_entry:2435: inode #2: comm syz.3.2558: Directory hole found for htree leaf block 0 [ 178.391082][T26318] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 178.453160][T26318] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2501'. [ 178.464313][T26662] siw: device registration error -23 [ 178.557662][T26674] syz.3.2564[26674] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 178.557725][T26674] syz.3.2564[26674] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 178.577858][T26675] loop0: detected capacity change from 0 to 512 [ 178.581750][T26681] syz.4.2565[26681] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 178.608197][T26681] syz.4.2565[26681] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 178.648392][T26675] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2240: inode #15: comm syz.0.2563: corrupted in-inode xattr: invalid ea_ino [ 178.726862][T26675] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.2563: couldn't read orphan inode 15 (err -117) [ 178.827858][T26717] loop4: detected capacity change from 0 to 512 [ 178.835666][T26717] EXT4-fs (loop4): external journal device major/minor numbers have changed [ 178.872896][T26717] EXT4-fs (loop4): failed to open journal device unknown-block(0,3) -6 [ 178.926355][T26735] loop0: detected capacity change from 0 to 512 [ 178.947057][T26717] hub 9-0:1.0: USB hub found [ 178.967274][T26717] hub 9-0:1.0: 8 ports detected [ 178.986266][T26735] ext4 filesystem being mounted at /112/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 179.014013][T26735] EXT4-fs error (device loop0): ext4_do_update_inode:5154: inode #2: comm syz.0.2571: corrupted inode contents [ 179.047191][T26735] EXT4-fs error (device loop0): ext4_dirty_inode:6014: inode #2: comm syz.0.2571: mark_inode_dirty error [ 179.070558][T26735] EXT4-fs error (device loop0): ext4_do_update_inode:5154: inode #2: comm syz.0.2571: corrupted inode contents [ 179.122954][T26735] EXT4-fs error (device loop0): ext4_add_entry:2435: inode #2: comm syz.0.2571: Directory hole found for htree leaf block 0 [ 179.199145][T26789] syz.2.2578[26789] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 179.199204][T26789] syz.2.2578[26789] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 179.572650][T26891] loop1: detected capacity change from 0 to 512 [ 179.598357][T26893] loop2: detected capacity change from 0 to 512 [ 179.619207][T26893] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2240: inode #15: comm syz.2.2588: corrupted in-inode xattr: invalid ea_ino [ 179.645524][T26893] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.2588: couldn't read orphan inode 15 (err -117) [ 179.689061][T26891] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 179.746068][T26891] EXT4-fs (loop1): 1 truncate cleaned up [ 179.806319][T26891] veth0_vlan: entered allmulticast mode [ 179.888905][T26905] veth0_vlan: left promiscuous mode [ 179.910433][T26905] veth0_vlan: entered promiscuous mode [ 179.953118][T26910] 9pnet_fd: Insufficient options for proto=fd [ 180.027924][T26777] loop3: detected capacity change from 0 to 4096 [ 180.152273][T26928] loop4: detected capacity change from 0 to 512 [ 180.181207][T26928] EXT4-fs (loop4): external journal device major/minor numbers have changed [ 180.255524][T26928] EXT4-fs (loop4): failed to open journal device unknown-block(0,3) -6 [ 180.261354][T26777] loop3: detected capacity change from 0 to 512 [ 180.266470][T26940] loop2: detected capacity change from 0 to 512 [ 180.291597][T26777] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 180.315096][T26940] ext4 filesystem being mounted at /130/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 180.337414][T26777] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #16: comm syz.3.2575: invalid indirect mapped block 4294967295 (level 0) [ 180.355641][T26777] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #16: comm syz.3.2575: invalid indirect mapped block 4294967295 (level 1) [ 180.356464][T26928] hub 9-0:1.0: USB hub found [ 180.386935][T26777] EXT4-fs (loop3): 1 orphan inode deleted [ 180.393097][T26777] EXT4-fs (loop3): 1 truncate cleaned up [ 180.404857][T26928] hub 9-0:1.0: 8 ports detected [ 180.411509][T26777] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 180.448394][T26777] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2575'. [ 180.507110][T26971] loop1: detected capacity change from 0 to 256 [ 180.520191][T26970] EXT4-fs (loop2): shut down requested (0) [ 180.526134][ T29] kauditd_printk_skb: 482 callbacks suppressed [ 180.526187][ T29] audit: type=1400 audit(2000000036.600:8071): avc: denied { ioctl } for pid=26939 comm="syz.2.2597" path="/130/bus/memory.numa_stat" dev="loop2" ino=18 ioctlcmd=0x587d scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 180.527837][T26975] loop0: detected capacity change from 0 to 512 [ 180.579390][ T29] audit: type=1326 audit(2000000036.650:8072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26968 comm="syz.1.2602" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f752e25cef9 code=0x7ffc0000 [ 180.602921][ T29] audit: type=1326 audit(2000000036.650:8073): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26968 comm="syz.1.2602" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f752e25cef9 code=0x7ffc0000 [ 180.626611][ T29] audit: type=1326 audit(2000000036.650:8074): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26968 comm="syz.1.2602" exe="/root/syz-executor" sig=0 arch=c000003e syscall=88 compat=0 ip=0x7f752e25cef9 code=0x7ffc0000 [ 180.650186][ T29] audit: type=1326 audit(2000000036.650:8075): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26968 comm="syz.1.2602" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f752e25cef9 code=0x7ffc0000 [ 180.673832][ T29] audit: type=1326 audit(2000000036.650:8076): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26968 comm="syz.1.2602" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f752e25cef9 code=0x7ffc0000 [ 180.697418][ T29] audit: type=1326 audit(2000000036.650:8077): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26968 comm="syz.1.2602" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f752e25cef9 code=0x7ffc0000 [ 180.709476][T26975] ext4 filesystem being mounted at /118/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 180.720934][ T29] audit: type=1326 audit(2000000036.650:8078): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26968 comm="syz.1.2602" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f752e25cef9 code=0x7ffc0000 [ 180.754923][ T29] audit: type=1326 audit(2000000036.650:8079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26968 comm="syz.1.2602" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f752e25cef9 code=0x7ffc0000 [ 180.778327][ T29] audit: type=1326 audit(2000000036.660:8080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26968 comm="syz.1.2602" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f752e25cef9 code=0x7ffc0000 [ 180.847282][T26975] EXT4-fs error (device loop0): ext4_do_update_inode:5154: inode #2: comm syz.0.2603: corrupted inode contents [ 180.893240][T27003] loop1: detected capacity change from 0 to 512 [ 180.933691][T26975] EXT4-fs error (device loop0): ext4_dirty_inode:6014: inode #2: comm syz.0.2603: mark_inode_dirty error [ 180.960577][T27003] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2240: inode #15: comm syz.1.2607: corrupted in-inode xattr: invalid ea_ino [ 181.020540][T27025] loop2: detected capacity change from 0 to 512 [ 181.021418][T26975] EXT4-fs error (device loop0): ext4_do_update_inode:5154: inode #2: comm syz.0.2603: corrupted inode contents [ 181.040188][T27025] EXT4-fs (loop2): external journal device major/minor numbers have changed [ 181.074678][T27025] EXT4-fs (loop2): failed to open journal device unknown-block(0,3) -6 [ 181.083165][T27003] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.2607: couldn't read orphan inode 15 (err -117) [ 181.128097][T27025] hub 9-0:1.0: USB hub found [ 181.141489][T27004] EXT4-fs error (device loop0): ext4_add_entry:2435: inode #2: comm syz.0.2603: Directory hole found for htree leaf block 0 [ 181.165189][T27025] hub 9-0:1.0: 8 ports detected [ 181.397619][T27090] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2621'. [ 181.409834][T27090] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.422877][T27095] loop0: detected capacity change from 0 to 512 [ 181.431014][T27095] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2240: inode #15: comm syz.0.2622: corrupted in-inode xattr: invalid ea_ino [ 181.447710][T27095] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.2622: couldn't read orphan inode 15 (err -117) [ 181.496308][T27090] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.569361][T27090] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.626099][T27090] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.668934][T27121] Falling back ldisc for ptm0. [ 181.695305][T27090] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.732022][T27152] loop4: detected capacity change from 0 to 512 [ 181.742101][T27090] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.764252][T27090] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.776623][T27090] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.785881][T27152] ext4 filesystem being mounted at /150/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 181.814042][T27049] loop1: detected capacity change from 0 to 4096 [ 181.836334][T27152] EXT4-fs error (device loop4): ext4_add_entry:2435: inode #2: comm syz.4.2633: Directory hole found for htree leaf block 0 [ 181.986211][T27049] loop1: detected capacity change from 0 to 512 [ 181.998453][T27049] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 182.020168][T27208] bpf_get_probe_write_proto: 2 callbacks suppressed [ 182.020182][T27208] syz.4.2644[27208] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 182.032032][T27208] syz.4.2644[27208] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 182.055079][T27049] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #16: comm syz.1.2612: invalid indirect mapped block 4294967295 (level 0) [ 182.077313][T27219] FAULT_INJECTION: forcing a failure. [ 182.077313][T27219] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 182.097874][T27219] CPU: 0 UID: 0 PID: 27219 Comm: syz.4.2647 Not tainted 6.11.0-rc6-syzkaller-00048-gc7fb1692dc01 #0 [ 182.099590][T27049] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #16: comm syz.1.2612: invalid indirect mapped block 4294967295 (level 1) [ 182.108631][T27219] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 182.108646][T27219] Call Trace: [ 182.108652][T27219] [ 182.108658][T27219] dump_stack_lvl+0xf2/0x150 [ 182.108682][T27219] dump_stack+0x15/0x20 [ 182.108699][T27219] should_fail_ex+0x229/0x230 [ 182.108723][T27219] should_fail+0xb/0x10 [ 182.108754][T27219] should_fail_usercopy+0x1a/0x20 [ 182.108776][T27219] _copy_from_user+0x1e/0xd0 [ 182.108798][T27219] get_sg_io_hdr+0xbc/0x390 [ 182.108830][T27219] ? path_openat+0x19bc/0x1f10 [ 182.126684][T27049] EXT4-fs (loop1): 1 orphan inode deleted [ 182.132729][T27219] sg_new_write+0xca/0x8e0 [ 182.132816][T27219] sg_ioctl+0xe28/0x1870 [ 182.132844][T27219] ? __pfx_sg_ioctl+0x10/0x10 [ 182.136763][T27049] EXT4-fs (loop1): 1 truncate cleaned up [ 182.139642][T27219] __se_sys_ioctl+0xd3/0x150 [ 182.139668][T27219] __x64_sys_ioctl+0x43/0x50 [ 182.157616][T27049] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, [ 182.162361][T27219] x64_sys_call+0x15cc/0x2d60 [ 182.162450][T27219] do_syscall_64+0xc9/0x1c0 [ 182.167095][T27049] block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 182.171516][T27219] ? clear_bhb_loop+0x55/0xb0 [ 182.171548][T27219] ? clear_bhb_loop+0x55/0xb0 [ 182.171567][T27219] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 182.171602][T27219] RIP: 0033:0x7fc9c1c5cef9 [ 182.171618][T27219] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 182.211125][T27049] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2612'. [ 182.218534][T27219] RSP: 002b:00007fc9c08d7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 182.218610][T27219] RAX: ffffffffffffffda RBX: 00007fc9c1e15f80 RCX: 00007fc9c1c5cef9 [ 182.218623][T27219] RDX: 0000000020000040 RSI: 0000000000002285 RDI: 0000000000000004 [ 182.218636][T27219] RBP: 00007fc9c08d7090 R08: 0000000000000000 R09: 0000000000000000 [ 182.218649][T27219] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 182.218661][T27219] R13: 0000000000000000 R14: 00007fc9c1e15f80 R15: 00007ffe06c1ce38 [ 182.218678][T27219] [ 182.562108][T27282] syz.4.2657[27282] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 182.562255][T27282] syz.4.2657[27282] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 182.630235][T27294] loop4: detected capacity change from 0 to 512 [ 182.700725][T27294] EXT4-fs: Ignoring removed nobh option [ 182.788001][T27318] loop3: detected capacity change from 0 to 256 [ 182.902378][T27294] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -2 [ 182.950316][T27294] EXT4-fs error (device loop4): ext4_orphan_get:1391: inode #13: comm syz.4.2660: casefold flag without casefold feature [ 183.005899][T27294] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.2660: couldn't read orphan inode 13 (err -117) [ 183.212267][T27362] syz.4.2670[27362] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 183.212319][T27362] syz.4.2670[27362] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 183.219518][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 183.484011][T27297] loop1: detected capacity change from 0 to 4096 [ 183.523659][T27392] loop4: detected capacity change from 0 to 256 [ 183.852623][T27297] loop1: detected capacity change from 0 to 512 [ 183.912645][T27297] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 183.987106][T27297] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #16: comm syz.1.2659: invalid indirect mapped block 4294967295 (level 0) [ 184.049943][T27297] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #16: comm syz.1.2659: invalid indirect mapped block 4294967295 (level 1) [ 184.067713][T27297] EXT4-fs (loop1): 1 orphan inode deleted [ 184.073691][T27297] EXT4-fs (loop1): 1 truncate cleaned up [ 184.097484][T27297] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 184.130949][T27297] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2659'. [ 184.219047][T27459] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2678'. [ 184.245982][T27459] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.282500][T27476] loop0: detected capacity change from 0 to 128 [ 184.302278][T27476] ext4 filesystem being mounted at /128/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 184.338556][T27489] loop3: detected capacity change from 0 to 256 [ 184.347288][T27459] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.386620][T27486] SELinux: policydb magic number 0x78 does not match expected magic number 0xf97cff8c [ 184.397026][T27486] SELinux: failed to load policy [ 184.405804][T27459] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.442706][T27486] loop2: detected capacity change from 0 to 1024 [ 184.453404][T27486] EXT4-fs: Ignoring removed orlov option [ 184.459189][T27486] EXT4-fs: Ignoring removed nomblk_io_submit option [ 184.474033][T27459] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.535136][T27459] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.549004][T27520] loop4: detected capacity change from 0 to 512 [ 184.572094][T27459] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.591208][T27520] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2240: inode #15: comm syz.4.2691: corrupted in-inode xattr: invalid ea_ino [ 184.615684][T27520] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.2691: couldn't read orphan inode 15 (err -117) [ 184.625877][T27459] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.641824][T27459] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.747417][T27563] loop3: detected capacity change from 0 to 256 [ 184.822633][T27568] loop2: detected capacity change from 0 to 512 [ 184.860280][T27568] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2240: inode #15: comm syz.2.2699: corrupted in-inode xattr: invalid ea_ino [ 184.902284][T27568] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.2699: couldn't read orphan inode 15 (err -117) [ 184.977214][T27506] loop0: detected capacity change from 0 to 4096 [ 185.073432][T27608] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2708'. [ 185.078323][T27611] loop3: detected capacity change from 0 to 512 [ 185.092881][T27601] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2705'. [ 185.120992][T27608] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.132548][T27611] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2240: inode #15: comm syz.3.2709: corrupted in-inode xattr: invalid ea_ino [ 185.150492][T27611] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.2709: couldn't read orphan inode 15 (err -117) [ 185.165705][T27619] team0: Device vlan2 is already an upper device of the team interface [ 185.209388][T27608] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.244181][T27631] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2710'. [ 185.286400][T27608] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.292540][T27506] loop0: detected capacity change from 0 to 512 [ 185.331975][T27506] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 185.355781][T27608] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.374385][T27506] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #16: comm syz.0.2689: invalid indirect mapped block 4294967295 (level 0) [ 185.389111][T27671] vhci_hcd: default hub control req: 800e v1303 i0000 l0 [ 185.400088][T27506] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #16: comm syz.0.2689: invalid indirect mapped block 4294967295 (level 1) [ 185.412631][T27675] syz.2.2721[27675] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 185.414981][T27675] syz.2.2721[27675] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 185.420067][T27506] EXT4-fs (loop0): 1 orphan inode deleted [ 185.448657][T27506] EXT4-fs (loop0): 1 truncate cleaned up [ 185.462536][T27608] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.485923][T27506] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 185.505152][T27608] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.516480][T27608] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.532963][T27506] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2689'. [ 185.546520][T27608] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.568789][ T29] kauditd_printk_skb: 400 callbacks suppressed [ 185.568804][ T29] audit: type=1400 audit(2000000041.650:8481): avc: denied { search } for pid=2999 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 185.600060][ T29] audit: type=1400 audit(2000000041.650:8482): avc: denied { read } for pid=2999 comm="dhcpcd" name="n234" dev="tmpfs" ino=18836 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 185.622136][ T29] audit: type=1400 audit(2000000041.650:8483): avc: denied { open } for pid=2999 comm="dhcpcd" path="/run/udev/data/n234" dev="tmpfs" ino=18836 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 185.645405][ T29] audit: type=1400 audit(2000000041.650:8484): avc: denied { getattr } for pid=2999 comm="dhcpcd" path="/run/udev/data/n234" dev="tmpfs" ino=18836 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 185.674063][ T29] audit: type=1400 audit(2000000041.710:8485): avc: denied { read } for pid=27697 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=343 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 185.697225][ T29] audit: type=1400 audit(2000000041.710:8486): avc: denied { open } for pid=27697 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=343 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 185.722370][ T29] audit: type=1400 audit(2000000041.710:8487): avc: denied { getattr } for pid=27697 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=343 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 185.744168][T27706] loop2: detected capacity change from 0 to 256 [ 185.795466][ T29] audit: type=1400 audit(2000000041.870:8488): avc: denied { search } for pid=27718 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 185.817791][ T29] audit: type=1400 audit(2000000041.870:8489): avc: denied { mount } for pid=27705 comm="syz.2.2725" name="/" dev="loop2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 185.839831][ T29] audit: type=1400 audit(2000000041.870:8490): avc: denied { read write } for pid=27705 comm="syz.2.2725" name="loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 186.089687][T27753] siw: device registration error -23 [ 186.513103][T27789] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2737'. [ 186.550087][T27789] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.650630][T27789] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.707233][T27807] loop3: detected capacity change from 0 to 256 [ 186.736240][T27789] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.816187][T27823] loop0: detected capacity change from 0 to 256 [ 186.817283][T27789] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.164998][T27771] loop2: detected capacity change from 0 to 4096 [ 187.326886][T27771] EXT4-fs mount: 190 callbacks suppressed [ 187.327001][T27771] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 187.364867][T27771] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 187.488446][T27771] loop2: detected capacity change from 0 to 512 [ 187.500214][T27771] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 187.517908][T27771] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #16: comm syz.2.2735: invalid indirect mapped block 4294967295 (level 0) [ 187.536468][T27771] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #16: comm syz.2.2735: invalid indirect mapped block 4294967295 (level 1) [ 187.552457][T27771] EXT4-fs (loop2): 1 orphan inode deleted [ 187.558610][T27771] EXT4-fs (loop2): 1 truncate cleaned up [ 187.565883][T27771] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 187.584433][T27771] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 187.605877][T27771] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2735'. [ 187.622306][T20233] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 187.692123][T27893] syz.2.2748[27893] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 187.692280][T27893] syz.2.2748[27893] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 187.713918][T27893] loop2: detected capacity change from 0 to 512 [ 187.745378][T27893] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 187.753516][T27893] EXT4-fs (loop2): orphan cleanup on readonly fs [ 187.760175][T27893] EXT4-fs warning (device loop2): ext4_enable_quotas:7066: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 187.778043][T27893] EXT4-fs (loop2): Cannot turn on quotas: error -117 [ 187.787885][T27893] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.2748: bg 0: block 40: padding at end of block bitmap is not set [ 187.804855][T27893] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6551: Corrupt filesystem [ 187.807021][T27906] syz.0.2750[27906] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 187.813678][T27906] syz.0.2750[27906] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 187.814017][T27893] EXT4-fs (loop2): 1 truncate cleaned up [ 187.843768][T27893] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 187.869789][T27893] EXT4-fs error (device loop2): ext4_xattr_block_get:596: inode #16: comm syz.2.2748: corrupted xattr block 31: invalid header [ 187.884795][T27893] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=16 [ 187.893378][T27914] loop0: detected capacity change from 0 to 512 [ 187.893813][T27893] EXT4-fs error (device loop2): ext4_xattr_block_get:596: inode #16: comm syz.2.2748: corrupted xattr block 31: invalid header [ 187.902508][T27914] EXT4-fs (loop0): external journal device major/minor numbers have changed [ 187.917115][T27893] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=16 [ 187.931366][T27917] EXT4-fs error (device loop2): ext4_xattr_block_get:596: inode #16: comm syz.2.2748: corrupted xattr block 31: invalid header [ 187.944885][T27893] EXT4-fs error (device loop2): ext4_get_link:106: inode #16: comm syz.2.2748: bad symlink. [ 187.948790][T27914] EXT4-fs (loop0): failed to open journal device unknown-block(0,3) -6 [ 187.955525][T27917] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=16 [ 187.972581][T27917] EXT4-fs error (device loop2): ext4_get_link:106: inode #16: comm syz.2.2748: bad symlink. [ 188.008424][T20233] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 188.014367][T27914] hub 9-0:1.0: USB hub found [ 188.022230][T27914] hub 9-0:1.0: 8 ports detected [ 188.181433][T27957] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 188.187832][T27957] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 188.195572][T27957] hsr_slave_0: left promiscuous mode [ 188.201598][T27957] hsr_slave_1: left promiscuous mode [ 188.228088][T27960] syz.0.2762[27960] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 188.228223][T27960] syz.0.2762[27960] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 188.364077][T27989] loop0: detected capacity change from 0 to 512 [ 188.409248][T27989] EXT4-fs (loop0): external journal device major/minor numbers have changed [ 188.454936][T27989] block device autoloading is deprecated and will be removed. [ 188.492471][T27989] syz.0.2770: attempt to access beyond end of device [ 188.492471][T27989] loop75: rw=0, sector=2, nr_sectors = 2 limit=0 [ 188.528210][T28001] loop4: detected capacity change from 0 to 512 [ 188.536594][T27989] EXT4-fs (loop0): couldn't read superblock of external journal [ 188.568907][T28001] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2240: inode #15: comm syz.4.2771: corrupted in-inode xattr: invalid ea_ino [ 188.611041][T28001] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.2771: couldn't read orphan inode 15 (err -117) [ 188.766295][T28001] EXT4-fs (loop4): mounted filesystem 00000007-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 188.825351][T28041] syz.2.2774[28041] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 188.825472][T28041] syz.2.2774[28041] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 189.021691][T22369] EXT4-fs (loop4): unmounting filesystem 00000007-0000-0000-0000-000000000000. [ 189.123610][T28093] rose0: refused to change device tx_queue_len [ 189.140755][T28092] rose0: refused to change device tx_queue_len [ 189.158870][T28104] loop0: detected capacity change from 0 to 512 [ 189.184961][T28104] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2240: inode #15: comm syz.0.2776: corrupted in-inode xattr: invalid ea_ino [ 189.224258][T28104] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.2776: couldn't read orphan inode 15 (err -117) [ 189.240078][T28127] 9pnet_virtio: no channels available for device 127.0.0.1 [ 189.260451][T28104] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 189.268931][T28127] loop2: detected capacity change from 0 to 4096 [ 189.279799][T28127] EXT4-fs: Ignoring removed nobh option [ 189.285471][T28127] EXT4-fs: Ignoring removed i_version option [ 189.306101][T28127] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 189.314400][T28140] FAULT_INJECTION: forcing a failure. [ 189.314400][T28140] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 189.329911][T28127] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 189.331688][T28140] CPU: 0 UID: 0 PID: 28140 Comm: syz.3.2782 Not tainted 6.11.0-rc6-syzkaller-00048-gc7fb1692dc01 #0 [ 189.351396][T28140] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 189.361480][T28140] Call Trace: [ 189.364746][T28140] [ 189.367668][T28140] dump_stack_lvl+0xf2/0x150 [ 189.372249][T28140] dump_stack+0x15/0x20 [ 189.376488][T28140] should_fail_ex+0x229/0x230 [ 189.381161][T28140] should_fail+0xb/0x10 [ 189.385363][T28140] should_fail_usercopy+0x1a/0x20 [ 189.390380][T28140] _copy_from_iter+0xd3/0xb00 [ 189.395069][T28140] ? kmalloc_reserve+0x16e/0x190 [ 189.400048][T28140] ? __build_skb_around+0x196/0x1f0 [ 189.405297][T28140] ? __alloc_skb+0x21f/0x310 [ 189.409930][T28140] ? __virt_addr_valid+0x1ed/0x250 [ 189.415035][T28140] ? __check_object_size+0x35b/0x510 [ 189.420406][T28140] netlink_sendmsg+0x460/0x6e0 [ 189.425254][T28140] ? __pfx_netlink_sendmsg+0x10/0x10 [ 189.430534][T28140] __sock_sendmsg+0x140/0x180 [ 189.435210][T28140] ____sys_sendmsg+0x312/0x410 [ 189.440000][T28140] __sys_sendmmsg+0x269/0x500 [ 189.444805][T28140] __x64_sys_sendmmsg+0x57/0x70 [ 189.449698][T28140] x64_sys_call+0xa49/0x2d60 [ 189.454279][T28140] do_syscall_64+0xc9/0x1c0 [ 189.458786][T28140] ? clear_bhb_loop+0x55/0xb0 [ 189.463450][T28140] ? clear_bhb_loop+0x55/0xb0 [ 189.468201][T28140] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 189.474090][T28140] RIP: 0033:0x7fb58cfecef9 [ 189.478493][T28140] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 189.498118][T28140] RSP: 002b:00007fb58bc67038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 189.506608][T28140] RAX: ffffffffffffffda RBX: 00007fb58d1a5f80 RCX: 00007fb58cfecef9 [ 189.514586][T28140] RDX: 04000000000001f2 RSI: 0000000020000000 RDI: 0000000000000003 [ 189.522569][T28140] RBP: 00007fb58bc67090 R08: 0000000000000000 R09: 0000000000000000 [ 189.530538][T28140] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 189.538511][T28140] R13: 0000000000000000 R14: 00007fb58d1a5f80 R15: 00007ffca0b5f788 [ 189.546486][T28140] [ 189.558796][T28104] EXT4-fs error (device loop0): ext4_find_dest_de:2067: inode #2: block 13: comm syz.0.2776: bad entry in directory: rec_len is smaller than minimal - offset=76, inode=0, rec_len=0, size=1024 fake=0 [ 189.684784][T21233] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 190.766767][T27789] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.837118][T27789] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.917561][T27789] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.987454][T27789] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.166049][ T29] kauditd_printk_skb: 483 callbacks suppressed [ 191.166064][ T29] audit: type=1400 audit(2000000047.250:8971): avc: denied { block_suspend } for pid=28120 comm="syz.2.2779" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 191.956477][ T35] kernel write not supported for file bpf-prog (pid: 35 comm: kworker/1:1) [ 195.174837][T28127] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2779'. [ 195.185810][ T29] audit: type=1400 audit(2000000051.260:8972): avc: denied { write } for pid=28120 comm="syz.2.2779" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 195.206328][ T29] audit: type=1400 audit(2000000051.260:8973): avc: denied { nlmsg_write } for pid=28120 comm="syz.2.2779" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 199.566834][ T29] audit: type=1326 audit(2000000055.650:8974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28169 comm="syz.0.2785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74ae8ecef9 code=0x7ffc0000 [ 199.616338][ T29] audit: type=1326 audit(2000000055.680:8975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28169 comm="syz.0.2785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=79 compat=0 ip=0x7f74ae8ecef9 code=0x7ffc0000 [ 199.639846][ T29] audit: type=1326 audit(2000000055.680:8976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28169 comm="syz.0.2785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74ae8ecef9 code=0x7ffc0000 [ 199.663387][ T29] audit: type=1326 audit(2000000055.680:8977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28169 comm="syz.0.2785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74ae8ecef9 code=0x7ffc0000 [ 199.686917][ T29] audit: type=1326 audit(2000000055.680:8978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28169 comm="syz.0.2785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74ae8ecef9 code=0x7ffc0000 [ 199.710459][ T29] audit: type=1326 audit(2000000055.680:8979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28169 comm="syz.0.2785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f74ae8ecef9 code=0x7ffc0000 [ 199.733881][ T29] audit: type=1400 audit(2000000055.680:8980): avc: denied { module_request } for pid=28169 comm="syz.0.2785" kmod="net-pf-10-proto-8-type-5" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 199.889395][ T29] audit: type=1400 audit(2000000055.820:8981): avc: denied { mounton } for pid=28188 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 199.911147][ T29] audit: type=1400 audit(2000000055.870:8982): avc: denied { sys_module } for pid=28188 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 200.042904][ T3273] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.146116][ T3273] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.203568][ T3273] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.248935][ T3273] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.357255][T28188] chnl_net:caif_netlink_parms(): no params data found [ 200.382674][T28201] chnl_net:caif_netlink_parms(): no params data found [ 200.391985][T28190] chnl_net:caif_netlink_parms(): no params data found [ 200.438566][T28189] chnl_net:caif_netlink_parms(): no params data found [ 200.486644][T28208] chnl_net:caif_netlink_parms(): no params data found [ 200.514976][T28201] bridge0: port 1(bridge_slave_0) entered blocking state [ 200.522105][T28201] bridge0: port 1(bridge_slave_0) entered disabled state [ 200.529506][T28201] bridge_slave_0: entered allmulticast mode [ 200.536188][T28201] bridge_slave_0: entered promiscuous mode [ 200.567017][T28201] bridge0: port 2(bridge_slave_1) entered blocking state [ 200.574137][T28201] bridge0: port 2(bridge_slave_1) entered disabled state [ 200.581544][T28201] bridge_slave_1: entered allmulticast mode [ 200.588307][T28201] bridge_slave_1: entered promiscuous mode [ 200.610056][ T3273] bridge_slave_1: left allmulticast mode [ 200.615742][ T3273] bridge_slave_1: left promiscuous mode [ 200.621409][ T3273] bridge0: port 2(bridge_slave_1) entered disabled state [ 200.629273][ T3273] bridge_slave_0: left allmulticast mode [ 200.635008][ T3273] bridge_slave_0: left promiscuous mode [ 200.640651][ T3273] bridge0: port 1(bridge_slave_0) entered disabled state [ 200.726935][ T3273] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 200.737050][ T3273] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 200.747356][ T3273] bond0 (unregistering): Released all slaves [ 200.757343][T28188] bridge0: port 1(bridge_slave_0) entered blocking state [ 200.764382][T28188] bridge0: port 1(bridge_slave_0) entered disabled state [ 200.771734][T28188] bridge_slave_0: entered allmulticast mode [ 200.778005][T28188] bridge_slave_0: entered promiscuous mode [ 200.798985][T28190] bridge0: port 1(bridge_slave_0) entered blocking state [ 200.806084][T28190] bridge0: port 1(bridge_slave_0) entered disabled state [ 200.813347][T28190] bridge_slave_0: entered allmulticast mode [ 200.820031][T28190] bridge_slave_0: entered promiscuous mode [ 200.838614][T28188] bridge0: port 2(bridge_slave_1) entered blocking state [ 200.845745][T28188] bridge0: port 2(bridge_slave_1) entered disabled state [ 200.853019][T28188] bridge_slave_1: entered allmulticast mode [ 200.859468][T28188] bridge_slave_1: entered promiscuous mode [ 200.877059][T28201] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 200.889416][T28201] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 200.905225][T28190] bridge0: port 2(bridge_slave_1) entered blocking state [ 200.912304][T28190] bridge0: port 2(bridge_slave_1) entered disabled state [ 200.919618][T28190] bridge_slave_1: entered allmulticast mode [ 200.926105][T28190] bridge_slave_1: entered promiscuous mode [ 200.937808][T28189] bridge0: port 1(bridge_slave_0) entered blocking state [ 200.945099][T28189] bridge0: port 1(bridge_slave_0) entered disabled state [ 200.952298][T28189] bridge_slave_0: entered allmulticast mode [ 200.958920][T28189] bridge_slave_0: entered promiscuous mode [ 200.974691][ T3273] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 200.982100][ T3273] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 200.989736][ T3273] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 200.997208][ T3273] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 201.006131][ T3273] veth1_macvtap: left promiscuous mode [ 201.011584][ T3273] veth0_macvtap: left promiscuous mode [ 201.017105][ T3273] veth1_vlan: left promiscuous mode [ 201.022312][ T3273] veth0_vlan: left promiscuous mode [ 201.093276][ T3273] team0 (unregistering): Port device team_slave_1 removed [ 201.103276][ T3273] team0 (unregistering): Port device team_slave_0 removed [ 201.143667][T28201] team0: Port device team_slave_0 added [ 201.157214][T28189] bridge0: port 2(bridge_slave_1) entered blocking state [ 201.164346][T28189] bridge0: port 2(bridge_slave_1) entered disabled state [ 201.171746][T28189] bridge_slave_1: entered allmulticast mode [ 201.178440][T28189] bridge_slave_1: entered promiscuous mode [ 201.186509][T28188] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 201.213037][T28208] bridge0: port 1(bridge_slave_0) entered blocking state [ 201.220111][T28208] bridge0: port 1(bridge_slave_0) entered disabled state [ 201.227613][T28208] bridge_slave_0: entered allmulticast mode [ 201.234179][T28208] bridge_slave_0: entered promiscuous mode [ 201.241467][T28201] team0: Port device team_slave_1 added [ 201.254089][T28190] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 201.264618][T28188] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 201.275990][T28190] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 201.292149][T28189] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 201.301854][T28208] bridge0: port 2(bridge_slave_1) entered blocking state [ 201.308927][T28208] bridge0: port 2(bridge_slave_1) entered disabled state [ 201.316205][T28208] bridge_slave_1: entered allmulticast mode [ 201.322658][T28208] bridge_slave_1: entered promiscuous mode [ 201.362594][T28190] team0: Port device team_slave_0 added [ 201.369757][T28189] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 201.383868][T28201] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 201.391024][T28201] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 201.417248][T28201] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 201.428708][T28201] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 201.435766][T28201] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 201.461685][T28201] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 201.473235][T28188] team0: Port device team_slave_0 added [ 201.479641][T28188] team0: Port device team_slave_1 added [ 201.485977][T28190] team0: Port device team_slave_1 added [ 201.509780][T28208] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 201.520236][T28208] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 201.551620][T28189] team0: Port device team_slave_0 added [ 201.558314][T28189] team0: Port device team_slave_1 added [ 201.587894][T28188] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 201.594897][T28188] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 201.620804][T28188] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 201.638083][T28208] team0: Port device team_slave_0 added [ 201.652741][T28201] hsr_slave_0: entered promiscuous mode [ 201.659250][T28201] hsr_slave_1: entered promiscuous mode [ 201.665388][T28201] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 201.672933][T28201] Cannot create hsr debugfs directory [ 201.679115][T28190] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 201.686163][T28190] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 201.712483][T28190] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 201.725802][T28190] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 201.732746][T28190] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 201.758753][T28190] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 201.770058][T28188] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 201.777073][T28188] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 201.803055][T28188] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 201.814293][T28208] team0: Port device team_slave_1 added [ 201.826123][T28189] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 201.833058][T28189] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 201.858957][T28189] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 201.870307][T28189] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 201.877370][T28189] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 201.903334][T28189] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 201.971744][T28190] hsr_slave_0: entered promiscuous mode [ 201.978568][T28190] hsr_slave_1: entered promiscuous mode [ 201.986127][T28190] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 201.993682][T28190] Cannot create hsr debugfs directory [ 202.008076][T28208] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 202.015098][T28208] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 202.041065][T28208] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 202.060231][T28189] hsr_slave_0: entered promiscuous mode [ 202.066526][T28189] hsr_slave_1: entered promiscuous mode [ 202.072297][T28189] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 202.080135][T28189] Cannot create hsr debugfs directory [ 202.102202][T28188] hsr_slave_0: entered promiscuous mode [ 202.108215][T28188] hsr_slave_1: entered promiscuous mode [ 202.114081][T28188] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 202.121639][T28188] Cannot create hsr debugfs directory [ 202.135058][T28208] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 202.142077][T28208] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 202.168064][T28208] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 202.272981][T28208] hsr_slave_0: entered promiscuous mode [ 202.279314][T28208] hsr_slave_1: entered promiscuous mode [ 202.285140][T28208] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 202.292665][T28208] Cannot create hsr debugfs directory [ 202.302755][ T3350] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.376817][ T3350] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.418874][T28189] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.447672][ T3350] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.474303][T28189] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.500028][ T3350] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.546243][T28189] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.620311][ T3350] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.634805][T28189] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.687497][ T3350] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.731287][T28189] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 202.740557][T28189] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 202.749730][T28189] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 202.760675][T28189] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 202.787554][ T3350] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.817653][T28189] 8021q: adding VLAN 0 to HW filter on device bond0 [ 202.832628][T28189] 8021q: adding VLAN 0 to HW filter on device team0 [ 202.844734][ T28] bridge0: port 1(bridge_slave_0) entered blocking state [ 202.851829][ T28] bridge0: port 1(bridge_slave_0) entered forwarding state [ 202.871572][ T28] bridge0: port 2(bridge_slave_1) entered blocking state [ 202.878830][ T28] bridge0: port 2(bridge_slave_1) entered forwarding state [ 202.902087][ T3350] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.938899][T28189] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 202.985636][ T3350] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.038307][ T3350] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.061564][T28189] veth0_vlan: entered promiscuous mode [ 203.073747][T28189] veth1_vlan: entered promiscuous mode [ 203.086597][ T3350] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.104056][T28189] veth0_macvtap: entered promiscuous mode [ 203.114163][T28189] veth1_macvtap: entered promiscuous mode [ 203.129966][T28189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 203.140523][T28189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.150378][T28189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 203.161015][T28189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.170870][T28189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 203.181322][T28189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.191150][T28189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 203.201764][T28189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.211694][T28189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 203.222196][T28189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.232070][T28189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 203.242701][T28189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.254398][T28189] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 203.269558][ T29] audit: type=1400 audit(2000000059.350:8983): avc: denied { sys_chroot } for pid=29979 comm="dhcpcd" capability=18 scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=capability permissive=1 [ 203.300183][ T3350] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.314028][T28189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 203.324602][T28189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.334600][T28189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 203.345046][T28189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.354953][T28189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 203.365404][T28189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.375212][T28189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 203.385695][T28189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.395563][T28189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 203.405980][T28189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.415849][T28189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 203.426294][T28189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.437216][T28189] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 203.447651][T28189] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.456465][T28189] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.465199][T28189] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.473881][T28189] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.531026][ T3350] bridge_slave_1: left allmulticast mode [ 203.536719][ T3350] bridge_slave_1: left promiscuous mode [ 203.542406][ T3350] bridge0: port 2(bridge_slave_1) entered disabled state [ 203.553236][ T3350] bridge_slave_0: left allmulticast mode [ 203.558975][ T3350] bridge_slave_0: left promiscuous mode [ 203.564703][ T3350] bridge0: port 1(bridge_slave_0) entered disabled state [ 203.573913][ T3350] bridge_slave_1: left allmulticast mode [ 203.579810][ T3350] bridge_slave_1: left promiscuous mode [ 203.585507][ T3350] bridge0: port 2(bridge_slave_1) entered disabled state [ 203.595298][ T3350] bridge_slave_0: left allmulticast mode [ 203.601005][ T3350] bridge_slave_0: left promiscuous mode [ 203.606814][ T3350] bridge0: port 1(bridge_slave_0) entered disabled state [ 203.615506][ T3350] bridge_slave_1: left allmulticast mode [ 203.621248][ T3350] bridge_slave_1: left promiscuous mode [ 203.627023][ T3350] bridge0: port 2(bridge_slave_1) entered disabled state [ 203.635632][ T3350] bridge_slave_0: left allmulticast mode [ 203.641281][ T3350] bridge_slave_0: left promiscuous mode [ 203.647047][ T3350] bridge0: port 1(bridge_slave_0) entered disabled state [ 203.655930][ T3350] bridge_slave_1: left allmulticast mode [ 203.661576][ T3350] bridge_slave_1: left promiscuous mode [ 203.667256][ T3350] bridge0: port 2(bridge_slave_1) entered disabled state [ 203.675486][ T3350] bridge_slave_0: left allmulticast mode [ 203.681105][ T3350] bridge_slave_0: left promiscuous mode [ 203.686801][ T3350] bridge0: port 1(bridge_slave_0) entered disabled state [ 204.047064][ T3350] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 204.057618][ T3350] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 204.067462][ T3350] bond0 (unregistering): Released all slaves [ 204.077144][ T3350] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 204.087312][ T3350] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 204.097623][ T3350] bond0 (unregistering): Released all slaves [ 204.106832][ T3350] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 204.117037][ T3350] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 204.127234][ T3350] bond0 (unregistering): Released all slaves [ 204.136308][ T3350] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 204.146457][ T3350] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 204.156995][ T3350] bond0 (unregistering): Released all slaves [ 204.192902][T28190] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 204.209959][T28190] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 204.220640][T28190] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 204.235395][T28190] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 204.296076][T28190] 8021q: adding VLAN 0 to HW filter on device bond0 [ 204.311848][T28190] 8021q: adding VLAN 0 to HW filter on device team0 [ 204.337604][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 204.344750][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 204.354587][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 204.361683][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 204.399844][T30059] FAULT_INJECTION: forcing a failure. [ 204.399844][T30059] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 204.412995][T30059] CPU: 0 UID: 0 PID: 30059 Comm: syz.2.2792 Not tainted 6.11.0-rc6-syzkaller-00048-gc7fb1692dc01 #0 [ 204.423774][T30059] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 204.433845][T30059] Call Trace: [ 204.437197][T30059] [ 204.440115][T30059] dump_stack_lvl+0xf2/0x150 [ 204.444700][T30059] dump_stack+0x15/0x20 [ 204.448869][T30059] should_fail_ex+0x229/0x230 [ 204.453613][T30059] should_fail+0xb/0x10 [ 204.457775][T30059] should_fail_usercopy+0x1a/0x20 [ 204.462800][T30059] _copy_from_user+0x1e/0xd0 [ 204.467384][T30059] copy_msghdr_from_user+0x54/0x2a0 [ 204.472584][T30059] __sys_sendmsg+0x17d/0x280 [ 204.477180][T30059] __x64_sys_sendmsg+0x46/0x50 [ 204.482006][T30059] x64_sys_call+0x2689/0x2d60 [ 204.486676][T30059] do_syscall_64+0xc9/0x1c0 [ 204.491259][T30059] ? clear_bhb_loop+0x55/0xb0 [ 204.496442][T30059] ? clear_bhb_loop+0x55/0xb0 [ 204.501113][T30059] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 204.507011][T30059] RIP: 0033:0x7f278b92cef9 [ 204.511500][T30059] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 204.531409][T30059] RSP: 002b:00007f278a5a7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 204.539875][T30059] RAX: ffffffffffffffda RBX: 00007f278bae5f80 RCX: 00007f278b92cef9 [ 204.547855][T30059] RDX: 0000000000000000 RSI: 0000000020000540 RDI: 0000000000000003 [ 204.555823][T30059] RBP: 00007f278a5a7090 R08: 0000000000000000 R09: 0000000000000000 [ 204.563875][T30059] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 204.571884][T30059] R13: 0000000000000000 R14: 00007f278bae5f80 R15: 00007fff52fc1d58 [ 204.579848][T30059] [ 204.599321][ T3350] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 204.606837][ T3350] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 204.614866][ T3350] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 204.622272][ T3350] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 204.637218][ T29] kauditd_printk_skb: 33 callbacks suppressed [ 204.637232][ T29] audit: type=1326 audit(2000000060.720:9017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30068 comm="syz.2.2793" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f278b92cef9 code=0x7ffc0000 [ 204.669061][ T3350] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 204.676741][ T3350] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 204.684832][ T29] audit: type=1326 audit(2000000060.720:9018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30068 comm="syz.2.2793" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f278b92cef9 code=0x7ffc0000 [ 204.708521][ T29] audit: type=1326 audit(2000000060.720:9019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30068 comm="syz.2.2793" exe="/root/syz-executor" sig=0 arch=c000003e syscall=438 compat=0 ip=0x7f278b92cef9 code=0x7ffc0000 [ 204.732211][ T29] audit: type=1326 audit(2000000060.720:9020): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30068 comm="syz.2.2793" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f278b92cef9 code=0x7ffc0000 [ 204.755832][ T29] audit: type=1326 audit(2000000060.720:9021): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30068 comm="syz.2.2793" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f278b92cef9 code=0x7ffc0000 [ 204.779314][ T29] audit: type=1326 audit(2000000060.720:9022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30068 comm="syz.2.2793" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f278b92cef9 code=0x7ffc0000 [ 204.802994][ T29] audit: type=1326 audit(2000000060.720:9023): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30068 comm="syz.2.2793" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f278b92cef9 code=0x7ffc0000 [ 204.826528][ T29] audit: type=1326 audit(2000000060.720:9024): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30068 comm="syz.2.2793" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f278b92cef9 code=0x7ffc0000 [ 204.850080][ T29] audit: type=1326 audit(2000000060.720:9025): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30068 comm="syz.2.2793" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f278b92cef9 code=0x7ffc0000 [ 204.873563][ T29] audit: type=1400 audit(2000000060.720:9026): avc: denied { bind } for pid=30068 comm="syz.2.2793" lport=136 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 204.894789][ T3350] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 204.902249][ T3350] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 204.911342][ T3350] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 204.918916][ T3350] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 204.926649][ T3350] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 204.934109][ T3350] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 204.944228][ T3350] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 204.951667][ T3350] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 204.959327][ T3350] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 204.966766][ T3350] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 204.979350][ T3350] veth1_macvtap: left promiscuous mode [ 204.984910][ T3350] veth0_macvtap: left promiscuous mode [ 204.990378][ T3350] veth1_vlan: left promiscuous mode [ 204.995804][ T3350] veth0_vlan: left promiscuous mode [ 205.001724][ T3350] veth1_macvtap: left promiscuous mode [ 205.007211][ T3350] veth0_macvtap: left promiscuous mode [ 205.012764][ T3350] veth1_vlan: left promiscuous mode [ 205.018017][ T3350] veth0_vlan: left promiscuous mode [ 205.023738][ T3350] veth1_macvtap: left promiscuous mode [ 205.029252][ T3350] veth0_macvtap: left promiscuous mode [ 205.034869][ T3350] veth1_vlan: left promiscuous mode [ 205.040077][ T3350] veth0_vlan: left promiscuous mode [ 205.046584][ T3350] veth1_macvtap: left promiscuous mode [ 205.052053][ T3350] veth0_macvtap: left promiscuous mode [ 205.057653][ T3350] veth1_vlan: left promiscuous mode [ 205.062860][ T3350] veth0_vlan: left promiscuous mode [ 205.242234][ T3350] team0 (unregistering): Port device team_slave_1 removed [ 205.252622][ T3350] team0 (unregistering): Port device team_slave_0 removed [ 205.310961][ T3350] team0 (unregistering): Port device team_slave_1 removed [ 205.321236][ T3350] team0 (unregistering): Port device team_slave_0 removed [ 205.378775][ T3350] team0 (unregistering): Port device team_slave_1 removed [ 205.388987][ T3350] team0 (unregistering): Port device team_slave_0 removed [ 205.446402][ T3350] team0 (unregistering): Port device team_slave_1 removed [ 205.459748][ T3350] team0 (unregistering): Port device team_slave_0 removed [ 205.519361][T28190] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 205.592483][T28201] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 205.618862][T28201] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 205.635629][T28201] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 205.649094][T28201] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 205.699741][T28190] veth0_vlan: entered promiscuous mode [ 205.712602][T28190] veth1_vlan: entered promiscuous mode [ 205.738557][T28190] veth0_macvtap: entered promiscuous mode [ 205.754205][T28201] 8021q: adding VLAN 0 to HW filter on device bond0 [ 205.762696][T28190] veth1_macvtap: entered promiscuous mode [ 205.800665][T28190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 205.811211][T28190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 205.821046][T28190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 205.831542][T28190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 205.841399][T28190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 205.851861][T28190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 205.863756][T28190] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 205.872678][T28201] 8021q: adding VLAN 0 to HW filter on device team0 [ 205.918200][T28190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 205.928694][T28190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 205.938584][T28190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 205.949055][T28190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 205.958911][T28190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 205.969780][T28190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 205.981599][T28190] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 205.989646][ T3273] bridge0: port 1(bridge_slave_0) entered blocking state [ 205.996727][ T3273] bridge0: port 1(bridge_slave_0) entered forwarding state [ 206.005576][ T3273] bridge0: port 2(bridge_slave_1) entered blocking state [ 206.012678][ T3273] bridge0: port 2(bridge_slave_1) entered forwarding state [ 206.027841][T28190] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.036704][T28190] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.045581][T28190] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.054311][T28190] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.071419][T28201] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 206.147196][T28188] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 206.158281][T28188] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 206.167542][T28188] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 206.177934][T28188] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 206.200093][T28201] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 206.295235][T28188] 8021q: adding VLAN 0 to HW filter on device bond0 [ 206.315020][T28188] 8021q: adding VLAN 0 to HW filter on device team0 [ 206.330163][T30188] bridge0: port 1(bridge_slave_0) entered blocking state [ 206.337275][T30188] bridge0: port 1(bridge_slave_0) entered forwarding state [ 206.370176][ T3365] bridge0: port 2(bridge_slave_1) entered blocking state [ 206.377361][ T3365] bridge0: port 2(bridge_slave_1) entered forwarding state [ 206.391019][T28201] veth0_vlan: entered promiscuous mode [ 206.417277][T28201] veth1_vlan: entered promiscuous mode [ 206.485000][T28201] veth0_macvtap: entered promiscuous mode [ 206.495057][T28208] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 206.506731][T28201] veth1_macvtap: entered promiscuous mode [ 206.516364][T28208] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 206.527066][T28208] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 206.541284][T28208] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 206.579561][T28201] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 206.590372][T28201] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 206.600237][T28201] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 206.610701][T28201] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 206.620704][T28201] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 206.631153][T28201] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 206.641060][T28201] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 206.651541][T28201] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 206.663612][T28201] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 206.676000][T28201] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 206.686454][T28201] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 206.696400][T28201] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 206.706832][T28201] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 206.716759][T28201] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 206.727218][T28201] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 206.737051][T28201] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 206.747488][T28201] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 206.759127][T28201] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 206.788309][T28188] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 206.807350][T30306] bond0: option mode: unable to set because the bond device has slaves [ 206.824097][T28201] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.832865][T28201] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.841626][T28201] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.850412][T28201] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.896699][T28208] 8021q: adding VLAN 0 to HW filter on device bond0 [ 206.921350][T28208] 8021q: adding VLAN 0 to HW filter on device team0 [ 206.976840][T30188] bridge0: port 1(bridge_slave_0) entered blocking state [ 206.983919][T30188] bridge0: port 1(bridge_slave_0) entered forwarding state [ 207.019326][T30188] bridge0: port 2(bridge_slave_1) entered blocking state [ 207.026425][T30188] bridge0: port 2(bridge_slave_1) entered forwarding state [ 207.038671][T30339] loop3: detected capacity change from 0 to 256 [ 207.118549][T30353] SELinux: policydb magic number 0x78 does not match expected magic number 0xf97cff8c [ 207.135571][T30353] SELinux: failed to load policy [ 207.157073][T28208] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 207.181558][T30353] loop3: detected capacity change from 0 to 1024 [ 207.189357][T30353] EXT4-fs: Ignoring removed orlov option [ 207.195104][T30353] EXT4-fs: Ignoring removed nomblk_io_submit option [ 207.296457][T30353] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 207.335906][T28188] veth0_vlan: entered promiscuous mode [ 207.361617][T28188] veth1_vlan: entered promiscuous mode [ 207.397048][T28208] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 207.412647][T28188] veth0_macvtap: entered promiscuous mode [ 207.432408][T28188] veth1_macvtap: entered promiscuous mode [ 207.447074][T28188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 207.457623][T28188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.467828][T28188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 207.478926][T28188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.488773][T28188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 207.499195][T28188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.509071][T28188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 207.519633][T28188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.529548][T28188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 207.540044][T28188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.550829][T28201] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 207.552585][T28188] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 207.573204][T30400] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 207.596707][T28188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 207.607341][T28188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.617286][T28188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 207.627758][T28188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.637598][T28188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 207.648307][T28188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.658149][T28188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 207.668570][T28188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.678445][T28188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 207.688880][T28188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.700775][T28188] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 207.709653][T28188] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.718430][T28188] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.727199][T28188] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.735947][T28188] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.882632][T30436] loop1: detected capacity change from 0 to 256 [ 207.975436][T30448] loop1: detected capacity change from 0 to 512 [ 208.018126][T30448] EXT4-fs (loop1): couldn't mount as ext3 due to feature incompatibilities [ 208.027864][T28208] veth0_vlan: entered promiscuous mode [ 208.055675][T28208] veth1_vlan: entered promiscuous mode [ 208.133151][T30462] loop0: detected capacity change from 0 to 256 [ 208.176152][T30465] loop2: detected capacity change from 0 to 256 [ 208.191489][T28208] veth0_macvtap: entered promiscuous mode [ 208.199653][T28208] veth1_macvtap: entered promiscuous mode [ 208.229450][T28208] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 208.240025][T28208] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.249891][T28208] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 208.260330][T28208] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.270174][T28208] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 208.280703][T28208] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.290771][T28208] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 208.301222][T28208] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.311146][T28208] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 208.321982][T28208] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.331956][T28208] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 208.342420][T28208] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.393666][T28208] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 208.418607][T30491] bond0: option mode: unable to set because the bond device has slaves [ 208.432504][T28208] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 208.443039][T30485] Falling back ldisc for ptm1. [ 208.447848][T28208] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.457765][T28208] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 208.468307][T28208] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.478267][T28208] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 208.489165][T28208] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.499003][T28208] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 208.509474][T28208] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.519575][T28208] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 208.530164][T28208] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.540042][T28208] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 208.550481][T28208] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.603361][T28208] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 208.612355][T30508] debugfs: Directory 'ptm1' with parent 'caif_serial' already present! [ 208.681500][T28208] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.690564][T28208] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.699327][T28208] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.708057][T28208] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.635776][T30628] loop3: detected capacity change from 0 to 512 [ 209.653479][ T29] kauditd_printk_skb: 324 callbacks suppressed [ 209.653494][ T29] audit: type=1400 audit(2000000065.730:9351): avc: denied { mounton } for pid=30627 comm="syz.3.2821" path=2F352FE91F7189591E9233614B dev="tmpfs" ino=46 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 209.689872][T30628] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2240: inode #15: comm syz.3.2821: corrupted in-inode xattr: invalid ea_ino [ 209.735541][T30628] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.2821: couldn't read orphan inode 15 (err -117) [ 209.792389][T30628] EXT4-fs (loop3): mounted filesystem 00000007-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 209.851293][ T29] audit: type=1400 audit(2000000065.930:9352): avc: denied { mount } for pid=30627 comm="syz.3.2821" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 209.923712][ T29] audit: type=1400 audit(2000000065.940:9353): avc: denied { setattr } for pid=30627 comm="syz.3.2821" name="file0" dev="loop3" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 209.946097][ T29] audit: type=1400 audit(2000000065.960:9354): avc: denied { write } for pid=30627 comm="syz.3.2821" name="file0" dev="loop3" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 209.968341][ T29] audit: type=1400 audit(2000000065.960:9355): avc: denied { add_name } for pid=30627 comm="syz.3.2821" name="pids.current" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 209.989914][ T29] audit: type=1400 audit(2000000065.960:9356): avc: denied { create } for pid=30627 comm="syz.3.2821" name="pids.current" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 210.011035][ T29] audit: type=1400 audit(2000000065.980:9357): avc: denied { read append open } for pid=30627 comm="syz.3.2821" path=2F352FE91F7189591E9233614B2F66696C65302F706964732E63757272656E74 dev="loop3" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 210.050157][T28201] EXT4-fs (loop3): unmounting filesystem 00000007-0000-0000-0000-000000000000. [ 210.083661][ T29] audit: type=1400 audit(2000000066.030:9358): avc: denied { unmount } for pid=28201 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 210.126272][ T29] audit: type=1400 audit(2000000066.190:9359): avc: denied { create } for pid=30653 comm="syz.2.2825" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 210.183605][T30663] loop3: detected capacity change from 0 to 512 [ 210.190003][ T29] audit: type=1400 audit(2000000066.210:9360): avc: denied { write } for pid=30653 comm="syz.2.2825" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 210.232051][T30663] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0002] [ 210.240145][T30663] System zones: 0-2, 18-18, 34-35 [ 210.251087][T30663] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 210.263760][T30663] ext4 filesystem being mounted at /7/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 210.386525][T28201] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 210.511620][T30695] loop2: detected capacity change from 0 to 256 [ 210.692828][T30722] loop2: detected capacity change from 0 to 256 [ 210.715565][T30723] ALSA: seq fatal error: cannot create timer (-22) [ 210.715910][T30633] loop1: detected capacity change from 0 to 4096 [ 210.736879][T30723] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=30723 comm=syz.0.2835 [ 210.787232][T30633] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 210.851563][T30633] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 210.882625][T30642] loop4: detected capacity change from 0 to 4096 [ 210.959277][T30642] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 210.978902][T30755] loop0: detected capacity change from 0 to 2048 [ 211.013988][T30755] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 211.058558][T30642] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 211.073040][T30765] loop2: detected capacity change from 0 to 1024 [ 211.106259][T30765] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 211.148943][T30633] loop1: detected capacity change from 0 to 512 [ 211.189285][T30633] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 211.214813][T28189] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 211.264663][T30633] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #16: comm syz.1.2822: invalid indirect mapped block 4294967295 (level 0) [ 211.294024][T30642] loop4: detected capacity change from 0 to 512 [ 211.305677][T30642] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 211.320702][T30633] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #16: comm syz.1.2822: invalid indirect mapped block 4294967295 (level 1) [ 211.345352][T30633] EXT4-fs (loop1): 1 orphan inode deleted [ 211.352182][T30633] EXT4-fs (loop1): 1 truncate cleaned up [ 211.358445][T30796] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2842'. [ 211.358486][T30796] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 211.358519][T30796] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 211.358651][T30642] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #16: comm syz.4.2823: invalid indirect mapped block 4294967295 (level 0) [ 211.362473][T30642] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #16: comm syz.4.2823: invalid indirect mapped block 4294967295 (level 1) [ 211.376409][T30633] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 211.430103][T30796] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 211.431354][T30642] EXT4-fs (loop4): 1 orphan inode deleted [ 211.437975][T30796] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 211.453952][T30642] EXT4-fs (loop4): 1 truncate cleaned up [ 211.465800][T30642] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 211.481182][T30633] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 211.532796][T30633] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2822'. [ 211.554941][T30642] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 211.585415][T28188] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 211.641150][T30642] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2823'. [ 211.683902][T28208] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 211.691207][T30825] loop1: detected capacity change from 0 to 512 [ 211.720163][T30825] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2240: inode #15: comm syz.1.2844: corrupted in-inode xattr: invalid ea_ino [ 211.744379][T30825] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.2844: couldn't read orphan inode 15 (err -117) [ 211.772680][T30825] EXT4-fs (loop1): mounted filesystem 00000007-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 211.829763][T28188] EXT4-fs (loop1): unmounting filesystem 00000007-0000-0000-0000-000000000000. [ 212.050152][T28190] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 212.063260][T30875] 9pnet_fd: Insufficient options for proto=fd [ 212.115596][T30882] loop0: detected capacity change from 0 to 512 [ 212.118580][T30888] loop2: detected capacity change from 0 to 512 [ 212.151546][T30882] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 212.163849][T30888] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 212.202104][T30888] ext4 filesystem being mounted at /28/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 212.226365][T30882] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 212.246537][T30882] ext4 filesystem being mounted at /15/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 212.338076][T30888] caif0: entered allmulticast mode [ 212.343763][T30888] netlink: 116 bytes leftover after parsing attributes in process `syz.2.2853'. [ 212.353399][T30882] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=263 sclass=netlink_route_socket pid=30882 comm=syz.0.2852 [ 212.373202][T30888] caif0 (unregistering): left allmulticast mode [ 212.402248][T28190] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 212.456190][T28189] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 212.518273][T30812] loop3: detected capacity change from 0 to 4096 [ 212.539208][T30949] siw: device registration error -23 [ 212.548310][T30951] syz.0.2857[30951] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 212.548445][T30951] syz.0.2857[30951] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 212.569914][T30951] loop0: detected capacity change from 0 to 512 [ 212.594579][T30943] loop2: detected capacity change from 0 to 164 [ 212.595411][T30951] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 212.611637][T30943] process 'syz.2.2856' launched './file0' with NULL argv: empty string added [ 212.614271][T30951] EXT4-fs (loop0): orphan cleanup on readonly fs [ 212.629556][T30951] EXT4-fs warning (device loop0): ext4_enable_quotas:7066: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 212.639366][T30943] syz.2.2856: attempt to access beyond end of device [ 212.639366][T30943] loop2: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 212.648356][T30812] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 212.659697][T30951] EXT4-fs (loop0): Cannot turn on quotas: error -117 [ 212.673402][T30943] syz.2.2856: attempt to access beyond end of device [ 212.673402][T30943] loop2: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 212.690673][T30812] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 212.712440][T30951] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.2857: bg 0: block 40: padding at end of block bitmap is not set [ 212.727494][T30951] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6551: Corrupt filesystem [ 212.743580][T30951] EXT4-fs (loop0): 1 truncate cleaned up [ 212.749997][T30951] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 212.766669][T30951] EXT4-fs error (device loop0): ext4_xattr_block_get:596: inode #16: comm syz.0.2857: corrupted xattr block 31: invalid header [ 212.783473][T30951] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=16 [ 212.792543][T30951] EXT4-fs error (device loop0): ext4_xattr_block_get:596: inode #16: comm syz.0.2857: corrupted xattr block 31: invalid header [ 212.806486][T30951] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=16 [ 212.821646][T30951] EXT4-fs error (device loop0): ext4_get_link:106: inode #16: comm syz.0.2857: bad symlink. [ 212.823714][T30968] EXT4-fs error (device loop0): ext4_xattr_block_get:596: inode #16: comm syz.0.2857: corrupted xattr block 31: invalid header [ 212.858672][T30968] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=16 [ 212.861667][T30972] Falling back ldisc for ptm0. [ 212.892322][T30968] EXT4-fs error (device loop0): ext4_get_link:106: inode #16: comm syz.0.2857: bad symlink. [ 212.916864][T28190] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 212.923124][T30986] loop2: detected capacity change from 0 to 2048 [ 212.953143][T30986] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 212.960622][T30812] loop3: detected capacity change from 0 to 512 [ 212.998788][T30812] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 213.038552][T30812] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #16: comm syz.3.2843: invalid indirect mapped block 4294967295 (level 0) [ 213.046069][T31002] hub 9-0:1.0: USB hub found [ 213.057826][T30812] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #16: comm syz.3.2843: invalid indirect mapped block 4294967295 (level 1) [ 213.057881][T31002] hub 9-0:1.0: 8 ports detected [ 213.090146][T30812] EXT4-fs (loop3): 1 orphan inode deleted [ 213.098005][T30812] EXT4-fs (loop3): 1 truncate cleaned up [ 213.145541][T31021] bond0: option mode: unable to set because the bond device has slaves [ 213.154293][T30812] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 213.211381][T30812] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 213.282462][T30812] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2843'. [ 213.326698][T28201] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 213.342694][T30986] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 213.358820][T30986] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 213.371349][T30986] EXT4-fs (loop2): This should not happen!! Data will be lost [ 213.371349][T30986] [ 213.381020][T30986] EXT4-fs (loop2): Total free blocks count 0 [ 213.387131][T30986] EXT4-fs (loop2): Free/Dirty block details [ 213.393041][T30986] EXT4-fs (loop2): free_blocks=2415919104 [ 213.398842][T30986] EXT4-fs (loop2): dirty_blocks=8192 [ 213.404454][T30986] EXT4-fs (loop2): Block reservation details [ 213.410566][T30986] EXT4-fs (loop2): i_reserved_data_blocks=512 [ 213.445610][T31066] hub 9-0:1.0: USB hub found [ 213.449374][T31067] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2876'. [ 213.450471][T31066] hub 9-0:1.0: 8 ports detected [ 213.484736][T31067] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.546300][T31067] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.561689][T30188] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 2048 with error 28 [ 213.652102][T31067] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.681174][T31095] SELinux: policydb magic number 0x78 does not match expected magic number 0xf97cff8c [ 213.691173][T31095] SELinux: failed to load policy [ 213.700998][T31095] loop2: detected capacity change from 0 to 1024 [ 213.707871][T31095] EXT4-fs: Ignoring removed orlov option [ 213.713649][T31095] EXT4-fs: Ignoring removed nomblk_io_submit option [ 213.726450][T31067] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.727087][T31095] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 213.804382][T31067] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.816337][T31067] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.827424][T31067] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.838806][T31067] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.847809][T28189] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 213.886035][T31124] loop3: detected capacity change from 0 to 512 [ 213.893880][T31124] EXT4-fs (loop3): couldn't mount as ext3 due to feature incompatibilities [ 213.941985][T31151] loop3: detected capacity change from 0 to 512 [ 213.956321][T31151] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 213.971191][T31156] siw: device registration error -23 [ 213.990888][T31151] ext4 filesystem being mounted at /13/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 214.012233][T31151] EXT4-fs error (device loop3): ext4_do_update_inode:5154: inode #2: comm syz.3.2886: corrupted inode contents [ 214.039546][T31151] EXT4-fs error (device loop3): ext4_dirty_inode:6014: inode #2: comm syz.3.2886: mark_inode_dirty error [ 214.055129][T31151] EXT4-fs error (device loop3): ext4_do_update_inode:5154: inode #2: comm syz.3.2886: corrupted inode contents [ 214.085670][T31151] EXT4-fs error (device loop3): ext4_add_entry:2435: inode #2: comm syz.3.2886: Directory hole found for htree leaf block 0 [ 214.117641][T31166] hub 9-0:1.0: USB hub found [ 214.123391][T31166] hub 9-0:1.0: 8 ports detected [ 214.154106][T28201] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 214.212726][T31184] loop1: detected capacity change from 0 to 512 [ 214.227181][T31185] loop3: detected capacity change from 0 to 512 [ 214.238648][T31181] loop2: detected capacity change from 0 to 2048 [ 214.245335][T31185] EXT4-fs (loop3): couldn't mount as ext3 due to feature incompatibilities [ 214.256786][T31184] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 214.270594][T31184] ext4 filesystem being mounted at /11/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 214.282784][T31184] EXT4-fs error (device loop1): ext4_do_update_inode:5154: inode #2: comm syz.1.2894: corrupted inode contents [ 214.314860][T31181] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 214.331891][T31184] EXT4-fs error (device loop1): ext4_dirty_inode:6014: inode #2: comm syz.1.2894: mark_inode_dirty error [ 214.355842][T31184] EXT4-fs error (device loop1): ext4_do_update_inode:5154: inode #2: comm syz.1.2894: corrupted inode contents [ 214.446576][T28188] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 214.487651][T31208] hub 9-0:1.0: USB hub found [ 214.494829][T31208] hub 9-0:1.0: 8 ports detected [ 214.561641][T31220] Falling back ldisc for ptm0. [ 214.604259][T31238] bond0: option mode: unable to set because the bond device has slaves [ 214.622366][T31248] hub 9-0:1.0: USB hub found [ 214.635984][T31248] hub 9-0:1.0: 8 ports detected [ 214.665319][ T29] kauditd_printk_skb: 409 callbacks suppressed [ 214.665332][ T29] audit: type=1326 audit(2000000070.750:9768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31231 comm="syz.3.2902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb091bcef9 code=0x7ffc0000 [ 214.727664][T31277] loop0: detected capacity change from 0 to 512 [ 214.743247][ T29] audit: type=1326 audit(2000000070.750:9769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31231 comm="syz.3.2902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdb091bcef9 code=0x7ffc0000 [ 214.766826][ T29] audit: type=1326 audit(2000000070.750:9770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31231 comm="syz.3.2902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb091bcef9 code=0x7ffc0000 [ 214.790373][ T29] audit: type=1326 audit(2000000070.750:9771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31231 comm="syz.3.2902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb091bcef9 code=0x7ffc0000 [ 214.813970][ T29] audit: type=1326 audit(2000000070.750:9772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31231 comm="syz.3.2902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdb091bcef9 code=0x7ffc0000 [ 214.837516][ T29] audit: type=1326 audit(2000000070.750:9773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31231 comm="syz.3.2902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb091bcef9 code=0x7ffc0000 [ 214.860996][ T29] audit: type=1326 audit(2000000070.750:9774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31231 comm="syz.3.2902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb091bcef9 code=0x7ffc0000 [ 214.884558][ T29] audit: type=1326 audit(2000000070.750:9775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31231 comm="syz.3.2902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fdb091bb890 code=0x7ffc0000 [ 214.913805][ T29] audit: type=1326 audit(2000000070.750:9776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31231 comm="syz.3.2902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7fdb091be727 code=0x7ffc0000 [ 214.937625][ T29] audit: type=1326 audit(2000000070.750:9777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31231 comm="syz.3.2902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fdb091bcef9 code=0x7ffc0000 [ 214.989427][T31308] loop4: detected capacity change from 0 to 512 [ 214.993576][T31277] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 215.009487][T31308] EXT4-fs (loop4): couldn't mount as ext3 due to feature incompatibilities [ 215.055678][T31277] ext4 filesystem being mounted at /20/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 215.059001][T31181] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 215.082088][T31181] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 215.094559][T31181] EXT4-fs (loop2): This should not happen!! Data will be lost [ 215.094559][T31181] [ 215.104269][T31301] SELinux: policydb magic number 0x78 does not match expected magic number 0xf97cff8c [ 215.104297][T31301] SELinux: failed to load policy [ 215.119056][T31181] EXT4-fs (loop2): Total free blocks count 0 [ 215.125134][T31181] EXT4-fs (loop2): Free/Dirty block details [ 215.131152][T31181] EXT4-fs (loop2): free_blocks=2415919104 [ 215.136936][T31181] EXT4-fs (loop2): dirty_blocks=7856 [ 215.142377][T31181] EXT4-fs (loop2): Block reservation details [ 215.148446][T31181] EXT4-fs (loop2): i_reserved_data_blocks=491 [ 215.158375][T31301] loop1: detected capacity change from 0 to 1024 [ 215.165302][T31301] EXT4-fs: Ignoring removed orlov option [ 215.170973][T31301] EXT4-fs: Ignoring removed nomblk_io_submit option [ 215.181240][T31277] EXT4-fs error (device loop0): ext4_do_update_inode:5154: inode #2: comm syz.0.2905: corrupted inode contents [ 215.198421][T31331] loop4: detected capacity change from 0 to 512 [ 215.215634][T31277] EXT4-fs error (device loop0): ext4_dirty_inode:6014: inode #2: comm syz.0.2905: mark_inode_dirty error [ 215.227715][T31325] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2911'. [ 215.239051][T31301] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 215.245197][T31277] EXT4-fs error (device loop0): ext4_do_update_inode:5154: inode #2: comm syz.0.2905: corrupted inode contents [ 215.252771][T31331] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 215.277000][T31325] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.288630][T31331] ext4 filesystem being mounted at /29/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 215.305577][T31277] EXT4-fs error (device loop0): ext4_add_entry:2435: inode #2: comm syz.0.2905: Directory hole found for htree leaf block 0 [ 215.329150][ T11] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 2048 with error 28 [ 215.349721][T31325] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.381396][T28208] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 215.391522][T28190] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 215.426948][T31325] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.442905][T28188] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 215.506742][T31325] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.507433][T31385] hub 9-0:1.0: USB hub found [ 215.526451][T31385] hub 9-0:1.0: 8 ports detected [ 215.531494][T31384] bond0: option mode: unable to set because the bond device has slaves [ 215.534952][T31395] loop0: detected capacity change from 0 to 512 [ 215.561052][T31395] EXT4-fs (loop0): couldn't mount as ext3 due to feature incompatibilities [ 215.674749][T31443] loop2: detected capacity change from 0 to 512 [ 215.710300][T31443] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 215.723321][T31458] bond0: option mode: unable to set because the bond device has slaves [ 215.725328][T31443] ext4 filesystem being mounted at /44/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 215.768640][T31467] hub 9-0:1.0: USB hub found [ 215.778411][T31467] hub 9-0:1.0: 8 ports detected [ 215.822385][T31496] loop1: detected capacity change from 0 to 512 [ 215.835709][T31496] EXT4-fs (loop1): couldn't mount as ext3 due to feature incompatibilities [ 215.889736][T28189] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 215.903812][T31509] SELinux: policydb magic number 0x78 does not match expected magic number 0xf97cff8c [ 215.932851][T31509] SELinux: failed to load policy [ 215.960111][T31509] loop4: detected capacity change from 0 to 1024 [ 215.970218][T31526] bond0: option mode: unable to set because the bond device has slaves [ 215.977066][T31509] EXT4-fs: Ignoring removed orlov option [ 215.984230][T31509] EXT4-fs: Ignoring removed nomblk_io_submit option [ 215.993005][T31525] bond0: option mode: unable to set because the bond device has slaves [ 216.010978][T31509] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 216.125144][T31595] loop2: detected capacity change from 0 to 512 [ 216.139371][T28208] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 216.151899][T31601] loop0: detected capacity change from 0 to 512 [ 216.160815][T31595] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 216.164061][T31601] EXT4-fs (loop0): couldn't mount as ext3 due to feature incompatibilities [ 216.182439][T31595] ext4 filesystem being mounted at /46/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 216.271855][T31613] loop4: detected capacity change from 0 to 164 [ 216.306510][T28189] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 216.311618][T31613] syz.4.2951: attempt to access beyond end of device [ 216.311618][T31613] loop4: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 216.327437][T31627] syz.1.2957[31627] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 216.329444][T31627] syz.1.2957[31627] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 216.331713][T31613] syz.4.2951: attempt to access beyond end of device [ 216.331713][T31613] loop4: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 216.408994][T31641] loop2: detected capacity change from 0 to 512 [ 216.426392][T31650] bond0: option mode: unable to set because the bond device has slaves [ 216.437740][T31641] ext4 filesystem being mounted at /48/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 216.461670][T31641] EXT4-fs error (device loop2): ext4_do_update_inode:5154: inode #2: comm syz.2.2959: corrupted inode contents [ 216.494768][T31641] EXT4-fs error (device loop2): ext4_dirty_inode:6014: inode #2: comm syz.2.2959: mark_inode_dirty error [ 216.507715][T31641] EXT4-fs error (device loop2): ext4_do_update_inode:5154: inode #2: comm syz.2.2959: corrupted inode contents [ 216.530177][T31641] EXT4-fs error (device loop2): ext4_add_entry:2435: inode #2: comm syz.2.2959: Directory hole found for htree leaf block 0 [ 216.531644][T31686] loop1: detected capacity change from 0 to 512 [ 216.571220][T31686] EXT4-fs (loop1): couldn't mount as ext3 due to feature incompatibilities [ 216.597260][T31697] Falling back ldisc for ptm0. [ 216.629665][T31712] syz.4.2969[31712] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 216.629726][T31712] syz.4.2969[31712] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 216.661916][T31718] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2971'. [ 216.730419][T31726] loop2: detected capacity change from 0 to 164 [ 216.745639][T31726] syz.2.2974: attempt to access beyond end of device [ 216.745639][T31726] loop2: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 216.761022][T31726] syz.2.2974: attempt to access beyond end of device [ 216.761022][T31726] loop2: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 216.843501][T31767] Falling back ldisc for ptm0. [ 216.982057][T31792] loop2: detected capacity change from 0 to 512 [ 217.001552][T31792] EXT4-fs (loop2): couldn't mount as ext3 due to feature incompatibilities [ 217.197821][T31817] Falling back ldisc for ptm0. [ 217.328978][T31852] loop0: detected capacity change from 0 to 512 [ 217.350761][T31852] EXT4-fs mount: 2 callbacks suppressed [ 217.350774][T31852] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 217.378515][T31852] ext4 filesystem being mounted at /41/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 217.391861][T31852] EXT4-fs error (device loop0): ext4_do_update_inode:5154: inode #2: comm syz.0.2996: corrupted inode contents [ 217.404189][T31852] EXT4-fs error (device loop0): ext4_dirty_inode:6014: inode #2: comm syz.0.2996: mark_inode_dirty error [ 217.416864][T31852] EXT4-fs error (device loop0): ext4_do_update_inode:5154: inode #2: comm syz.0.2996: corrupted inode contents [ 217.431218][T31852] EXT4-fs error (device loop0): ext4_add_entry:2435: inode #2: comm syz.0.2996: Directory hole found for htree leaf block 0 [ 217.457052][T28190] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 217.498005][T31880] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2998'. [ 217.507036][T31880] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 217.514446][T31880] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 217.522565][T31880] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 217.530050][T31880] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 217.609140][T31889] loop1: detected capacity change from 0 to 512 [ 217.621572][T31889] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 217.633652][T31889] EXT4-fs (loop1): 1 truncate cleaned up [ 217.640521][T31889] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 217.659427][T31889] veth0_vlan: entered allmulticast mode [ 217.720631][T31897] Falling back ldisc for ptm0. [ 217.796315][T31922] loop4: detected capacity change from 0 to 512 [ 217.818099][T31922] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 217.842077][T31922] ext4 filesystem being mounted at /49/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 217.867822][T31939] hub 9-0:1.0: USB hub found [ 217.872533][T31939] hub 9-0:1.0: 8 ports detected [ 217.926494][T28208] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 217.927465][T31952] syz.0.3009[31952] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 217.935683][T31952] syz.0.3009[31952] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 218.033377][T31976] Falling back ldisc for ptm0. [ 218.125196][T32000] SELinux: policydb magic number 0x78 does not match expected magic number 0xf97cff8c [ 218.132185][T32003] hub 9-0:1.0: USB hub found [ 218.139720][T32003] hub 9-0:1.0: 8 ports detected [ 218.141966][T32000] SELinux: failed to load policy [ 218.166393][T32000] loop4: detected capacity change from 0 to 1024 [ 218.176308][T32000] EXT4-fs: Ignoring removed orlov option [ 218.181985][T32000] EXT4-fs: Ignoring removed nomblk_io_submit option [ 218.222499][T32000] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 218.292943][T28208] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 218.334864][T32043] hub 9-0:1.0: USB hub found [ 218.344307][T32043] hub 9-0:1.0: 8 ports detected [ 218.371869][T32060] Falling back ldisc for ptm0. [ 218.384949][T32056] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3026'. [ 218.397211][T32071] loop2: detected capacity change from 0 to 512 [ 218.415339][T32056] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.422441][T32071] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 218.439176][T32071] ext4 filesystem being mounted at /70/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 218.452414][T32071] EXT4-fs error (device loop2): ext4_do_update_inode:5154: inode #2: comm syz.2.3028: corrupted inode contents [ 218.464636][T32071] EXT4-fs error (device loop2): ext4_dirty_inode:6014: inode #2: comm syz.2.3028: mark_inode_dirty error [ 218.476213][T32071] EXT4-fs error (device loop2): ext4_do_update_inode:5154: inode #2: comm syz.2.3028: corrupted inode contents [ 218.489574][T32071] EXT4-fs error (device loop2): ext4_add_entry:2435: inode #2: comm syz.2.3028: Directory hole found for htree leaf block 0 [ 218.511891][T32082] siw: device registration error -23 [ 218.518850][T32056] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.518844][T28189] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 218.543478][T28188] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 218.572041][T32056] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.630236][T32056] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.700532][T32114] loop1: detected capacity change from 0 to 512 [ 218.716152][T32114] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 218.728836][T32114] ext4 filesystem being mounted at /43/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 218.740847][T32114] EXT4-fs error (device loop1): ext4_do_update_inode:5154: inode #2: comm syz.1.3036: corrupted inode contents [ 218.752919][T32114] EXT4-fs error (device loop1): ext4_dirty_inode:6014: inode #2: comm syz.1.3036: mark_inode_dirty error [ 218.756883][T32056] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.765644][T32114] EXT4-fs error (device loop1): ext4_do_update_inode:5154: inode #2: comm syz.1.3036: corrupted inode contents [ 218.775508][T32056] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.788788][T32114] EXT4-fs error (device loop1): ext4_add_entry:2435: inode #2: comm syz.1.3036: Directory hole found for htree leaf block 0 [ 218.795302][T32056] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.816572][T28188] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 218.817423][T32056] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.839829][ T2961] ================================================================== [ 218.847929][ T2961] BUG: KCSAN: data-race in __fsnotify_parent / fsnotify_put_mark [ 218.855663][ T2961] [ 218.858064][ T2961] write to 0xffff88810142da08 of 4 bytes by task 3249 on cpu 1: [ 218.865689][ T2961] fsnotify_put_mark+0x2db/0x5d0 [ 218.870644][ T2961] __se_sys_inotify_rm_watch+0x105/0x180 [ 218.874238][T32133] Falling back ldisc for ptm0. [ 218.876263][ T2961] __x64_sys_inotify_rm_watch+0x31/0x40 [ 218.876288][ T2961] x64_sys_call+0x1ae0/0x2d60 [ 218.891296][ T2961] do_syscall_64+0xc9/0x1c0 [ 218.895793][ T2961] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 218.901682][ T2961] [ 218.903989][ T2961] read to 0xffff88810142da08 of 4 bytes by task 2961 on cpu 0: [ 218.911513][ T2961] __fsnotify_parent+0xd4/0x380 [ 218.916357][ T2961] __fput+0x5ca/0x6f0 [ 218.920320][ T2961] __fput_sync+0x44/0x60 [ 218.924550][ T2961] __se_sys_close+0x101/0x1b0 [ 218.929211][ T2961] __x64_sys_close+0x1f/0x30 [ 218.933787][ T2961] x64_sys_call+0x25cb/0x2d60 [ 218.938456][ T2961] do_syscall_64+0xc9/0x1c0 [ 218.942945][ T2961] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 218.948830][ T2961] [ 218.951139][ T2961] value changed: 0x00002008 -> 0x00000000 [ 218.956833][ T2961] [ 218.959138][ T2961] Reported by Kernel Concurrency Sanitizer on: [ 218.965267][ T2961] CPU: 0 UID: 0 PID: 2961 Comm: udevd Not tainted 6.11.0-rc6-syzkaller-00048-gc7fb1692dc01 #0 [ 218.975490][ T2961] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 218.985527][ T2961] ================================================================== [ 219.479298][T31325] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.490311][T31325] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.501207][T31325] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.511963][T31325] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0