last executing test programs: 7.683392538s ago: executing program 1 (id=1437): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000e40)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2ed0300000000000000af99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14008c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000006da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3ab60fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4978ea8e4aa37014191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff2a49c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6eba3bd4c440e6e2172e3fcc01b8babb757b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa165099c5ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd231088e570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88cf573fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb423c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50261a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953e88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a72e1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e48701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867857ed13a4fa4ae033a09673866cd77f4bcdaaa05207166b19a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d9a0e06da200481cde8bf475bc3e1fe9c0b4a4a268921738938aa9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9ea81232fbef665f6212f875b2a00"/3576], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000003c0)='initcall_level\x00', r0}, 0x10) 7.601179614s ago: executing program 1 (id=1439): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) socketpair$unix(0x1, 0x0, 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) poll(0x0, 0x0, 0x64) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) rt_sigreturn() mlockall(0x1) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r1, 0x10e, 0x8, 0x0, 0x13) 7.493247233s ago: executing program 1 (id=1444): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f00000000c0), 0x10) r1 = semget$private(0x0, 0x1, 0x0) socket$inet6(0xa, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) rt_sigreturn() semop(r1, &(0x7f00000000c0)=[{0x0, 0x5}, {}], 0x2) shutdown(r0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0x541b, 0x0) 6.646345663s ago: executing program 1 (id=1471): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r0, &(0x7f0000000580)="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", 0x124) r1 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, 0x0, 0x44810) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x14004850) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) process_vm_readv(0x0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x36}], 0x1, &(0x7f0000008640)=[{0x0}], 0x1, 0x0) socket(0x0, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYRESHEX, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b0001006272696467650000040002800a0001000180c2"], 0x40}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x14) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r4, &(0x7f00000001c0)={0x0, 0xfe3c, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYRES32=r3], 0x104}}, 0x40000) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) keyctl$restrict_keyring(0xa, 0x0, &(0x7f00000003c0)='cifs.idmap\x00', &(0x7f0000000000)='n\x00\xe2e') r5 = io_uring_setup(0x336b, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x7a}) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r6, r7, 0x0, 0x20000023896) r8 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x103040, 0x0) ioctl$TCSETSF(r8, 0x5409, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) close(r1) 5.997744466s ago: executing program 1 (id=1474): write$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000140)={'full'}, 0xfffffdef) r0 = syz_io_uring_setup(0x70ca, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000002600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)=ANY=[], 0x28}}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r3, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kfree\x00', r5}, 0x10) io_uring_enter(r0, 0x5113, 0x0, 0x0, 0x0, 0x0) 5.978223698s ago: executing program 1 (id=1475): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xe, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="720ac4ff4700000070105000000000d6fd6b6adf585d7027ea0d00950000ffffffff00"], &(0x7f0000000040)='syzkaller\x00'}, 0x90) ioperm(0x0, 0xf, 0x5) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000580)={0xa, 0x4e23, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}, 0x1c) prlimit64(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) recvmsg(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000002640)=""/4096, 0x1000}, {&(0x7f0000000600)=""/235, 0xeb}], 0x2}, 0x0) r2 = syz_open_pts(0xffffffffffffffff, 0x2080) ioctl$VT_GETSTATE(r2, 0x5603, &(0x7f0000000080)={0x1, 0x0, 0x4}) syz_read_part_table(0x5db, &(0x7f0000000300)="$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") bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000a80)={0x28, 0x0, 0x0, @local}, 0x10) r3 = socket$nl_sock_diag(0x10, 0x3, 0x4) close_range(r3, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0xa) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$KDENABIO(0xffffffffffffffff, 0x4b36) quotactl_fd$Q_GETINFO(0xffffffffffffffff, 0xffffffff80000501, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0) socket(0x0, 0x1, 0x0) epoll_create1(0x0) ioctl$PPPIOCGCHAN(0xffffffffffffffff, 0x80047437, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}], {0x14}}, 0x64}}, 0x0) syz_open_dev$usbfs(&(0x7f0000000040), 0x77, 0x101301) 2.011416535s ago: executing program 0 (id=1541): r0 = socket$inet(0x2, 0x6, 0x0) r1 = syz_io_uring_setup(0x60f2, &(0x7f0000000300)={0x0, 0x0, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x20, 0x3, r0, 0x0, &(0x7f00000000c0)={0x0, 0x8, 0x0}}) io_uring_enter(r1, 0x5b43, 0x0, 0x0, 0x0, 0x0) (fail_nth: 2) 1.752191026s ago: executing program 0 (id=1544): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000001980), 0xffffffffffffffff) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000001a40)={0x0, 0x0, &(0x7f0000001a00)={&(0x7f00000019c0)={0x34, r1, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'batadv_slave_1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x34}}, 0x0) sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x34, r1, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'ip6gre0\x00'}]}, 0x34}}, 0x0) 1.751760566s ago: executing program 0 (id=1545): r0 = socket$inet6_dccp(0xa, 0x6, 0x0) setsockopt$inet6_int(r0, 0x29, 0x24, &(0x7f0000000000)=0x9, 0x4) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x2000205) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x100) r1 = openat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x404401, 0x80) mknod(&(0x7f0000000100)='./file0\x00', 0x8000, 0x4) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000140)={@mcast2, 0xc2c, 0x2, 0x3, 0xa, 0x7f}, 0x20) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r3, 0x6, 0x3, &(0x7f0000000180)=0x4, 0x4) r4 = openat$cgroup_ro(r1, &(0x7f00000001c0)='cpu.stat\x00', 0x0, 0x0) getxattr(&(0x7f0000000200)='./file0/file0\x00', &(0x7f0000000240)=@random={'osx.', '#\x00'}, &(0x7f0000000280)=""/97, 0x61) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000300)={'veth0_to_hsr\x00', 0x2}) r5 = socket$rxrpc(0x21, 0x2, 0x2) sendto$rxrpc(r5, &(0x7f0000000340)="3ad4d0e802", 0x5, 0x22004000, &(0x7f0000000380)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e22, @multicast1}}, 0x24) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r6, 0x6, 0x1, &(0x7f00000003c0)={0x7e46, 0x1000, 0x5, 0x9, 0x0, 0x44, 0x6}, 0xc) r7 = socket$inet_sctp(0x2, 0x1, 0x84) connect$inet(r7, &(0x7f0000000400)={0x2, 0x4e20, @local}, 0x10) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000440)={0x7fff, 0x8000, 0x40, 0x7, 0x0}, &(0x7f0000000480)=0x10) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r4, 0x84, 0x19, &(0x7f00000004c0)={r8}, 0x8) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), r4) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000580)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r9, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x34, r10, 0x800, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r11}, @val={0xc, 0x99, {0xff, 0x34}}}}, [@NL80211_ATTR_BSSID={0xa, 0xf5, @random="be153dc3bf3c"}]}, 0x34}, 0x1, 0x0, 0x0, 0x8010}, 0x40) r12 = pidfd_getfd(r1, r4, 0x0) setsockopt$inet6_udp_int(r12, 0x11, 0xb, &(0x7f0000000680)=0x3c6, 0x4) bind$vsock_stream(r4, &(0x7f00000006c0)={0x28, 0x0, 0x2711, @local}, 0x10) r13 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000a00)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x2, '\x00', 0x0, r12, 0x3, 0x3, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000a80)={&(0x7f0000000700)="79dd107266dbc7808f7e01a7bcf0d65c", &(0x7f0000000740)=""/250, &(0x7f0000000840)="2a89a207a8f3802f54e528b71c457ceea03d159d3c16a017bd91d7923617efc479ff9473922f7bb2ef84c8237310e530427325e463d153974c9e65484a5966ede09e6f8ca1d72e1b5c3aea0bf3a6797c0c21b0cca2aa19b2fe96835ce324c516d0bca21919db8af7e3223708d6cda8f2c9e1de78a54472ea6a0e21d209bb268e5dfe0a450e90c15af6e057c5695284e81e8488470488a5f3a1685afc98b9e5bac8c7e76829779b8856b1d4be7d2f7664ff41d759", &(0x7f0000000900)="08dd9fca7d462532994d6c3f79a737d553784cff1b9c1d8154f384a5aec3a54c9ba864e718f4e937c50138f01ce0a7f9530a7b335747cc0ec059d72273f5961a69325cea5f211fb258926de2cbacb68cf6559bca555b2eaa58baee331257d2bf93461edaaf7ad9803ed500138a1594eb14a262786f39fa3c21fbd5122ce4934ea754e55769e68eb3bcd2d37619fbc8d4b1a54414f465b3e3823a4fb94e139e716d13edc200ee7c5870f896346cd9af93298f09827c680ac9193d760faa46fa56ff7695e80915452929ae0f8b6475fcf1c48a1738551700d6b0721bbd8e641bd91f7d86946e4328cb6caa5cc158ae64f2", 0xd, r13, 0x4}, 0x38) 1.742587997s ago: executing program 3 (id=1546): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) 1.693330051s ago: executing program 3 (id=1547): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="0303000000000000000005000000080003"], 0x1c}}, 0x0) (fail_nth: 3) 1.693190751s ago: executing program 3 (id=1548): perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket(0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f00000002c0)) perf_event_open(&(0x7f0000000700)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4025, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x411, 0x6, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$RTC_PIE_OFF(r0, 0x7006) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x16, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="1400001c1000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c00000002"], 0x7c}}, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000500), 0x12) 1.650150544s ago: executing program 3 (id=1549): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r0, &(0x7f0000000580)="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", 0x124) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, 0x0, 0x44810) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x14004850) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) process_vm_readv(0x0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x36}], 0x1, &(0x7f0000008640)=[{0x0}], 0x1, 0x0) socket(0x0, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYRESHEX, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b0001006272696467650000040002800a0001000180c2"], 0x40}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x14) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r3, &(0x7f00000001c0)={0x0, 0xfe3c, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYRES32=r2], 0x104}}, 0x40000) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) keyctl$restrict_keyring(0xa, 0x0, &(0x7f00000003c0)='cifs.idmap\x00', &(0x7f0000000000)='n\x00\xe2e') io_uring_setup(0x336b, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x7a}) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x20000023896) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x103040, 0x0) ioctl$TCSETSF(r6, 0x5409, 0x0) 950.059772ms ago: executing program 4 (id=1556): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x10000, 0x8}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x2, 0x6, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000001ecd0a000000000000000018200000", @ANYRES32=r0, @ANYBLOB="000000000000000800000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x4, 0x41, &(0x7f00000001c0)=""/226}, 0x21) 941.470003ms ago: executing program 4 (id=1557): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r1) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYBLOB="01000100f3ff0000000024000000080002"], 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x0) 932.570914ms ago: executing program 4 (id=1558): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000140)={0x2, &(0x7f0000000080)=[{0x28, 0x8, 0x0, 0xfffff038}, {0x5, 0xfc}]}, 0x10) r1 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10) 923.070684ms ago: executing program 4 (id=1559): r0 = socket(0x11, 0x800000003, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0xd, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000569a000000000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe}, 0x80) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x54, 0x0, 0xfffe, {0x0, 0x1}, {0x4b, 0x2}, @ramp={0x0, 0x0, {0x0, 0x0, 0x81}}}) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(0xffffffffffffffff, &(0x7f0000000900)="49bafb874933d7ad07c685bc47aa5e5442f24bbc44b662cfb677b68fffc6ef78eb5df55ccd2db8f83785c0c8a6695c7ae95aefabc9b67e0c", 0x38) write$evdev(r2, &(0x7f0000000540)=[{{0x0, 0xea60}, 0x5, 0x6e7, 0x4}, {{0x77359400}, 0x11, 0x401, 0x7}, {{0x77359400}, 0x12, 0x1}], 0x48) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000006c0)=ANY=[@ANYBLOB="7000000003080101000000000000000000000000060002400000000005000300210000004c0004"], 0x70}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={r1, 0xe0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x9, 0x5, &(0x7f0000000a80)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8b, &(0x7f0000000280), 0x0, 0x10, &(0x7f00000002c0), &(0x7f00000009c0), 0x8, 0x37, 0x8, 0x8, &(0x7f0000000980)}}, 0x10) r4 = socket(0x10, 0x803, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={r1, 0xe0, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000300)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500), &(0x7f0000000600), 0x0, 0xda, &(0x7f0000000640)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000680), &(0x7f00000006c0), 0x8, 0x6c, 0x8, 0x8, &(0x7f0000000700)}}, 0x10) sendmsg$BATADV_CMD_GET_MESH(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}, 0x1, 0x0, 0x0, 0x4c041}, 0x2004c090) getsockname$packet(r4, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) syz_genetlink_get_family_id$tipc2(&(0x7f00000008c0), r4) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r5) r6 = socket$inet_sctp(0x2, 0x1, 0x84) socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r6, 0x84, 0x1f, &(0x7f00000001c0)={0x0, @in={{0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x0, 0x2}, 0x90) write$UHID_INPUT(r0, &(0x7f0000002080)={0xf, {"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", 0x1000}}, 0x1006) sendmsg$TIPC_NL_KEY_FLUSH(r4, &(0x7f0000000b80)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000940)={&(0x7f0000002080)=ANY=[], 0x210}}, 0x20041000) mount(0x0, &(0x7f0000000740)='./file0\x00', &(0x7f0000000780)='debugfs\x00', 0x2, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x66, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000003200)=ANY=[@ANYBLOB="850000002a00000025000000000000009500000000000000aecd48d6494d614dcc6fab5335ec06000000000000002176dd2963038e1d69ba7ea94c500dc4ef2fad96ed406f3cc2b0da31fa21caf5adcf920569c00cc1199684fa7c93836d9ea2cfb0e60436e05425cc4686b066707de94a4f4d5fc79c1faca0f9d9924be41a9169bdfaf16da915b2e249ee1c6eee84309e7a23c19a39484809539fca4e0b6fab1aa7d55545a34effa077faa55c59e88254f54077f799bf1683010000ddbe2255d6a0244d35b213bca84cc172afd8cc2e47a7d8b85a5e3d77ac463920e231b7ae0da8616d2b79db2e3d5986c82b5aa94e539b204d58f91f5da6c025d060ab186d94af98af1da2b5952eb15855933a212304e03564f7f7a35dfc72c81256a55a25f8fe3b28d7e53c78fbfe5ab0255f347160ec83070000020000004015cf05003f6cded6a2f8550b973b818184ebad0485fbaa816e3b26199d928365a7ea3fab8b4b380a00d72b0000000000001cf555c14d56b51c2298237bebfc08e0d5976a942b846970cfd98b9d4139f1111f2cc5e46ac1c10a9b030074bfbcd4b09012175484135f0e519f0b1e4aaa026d02000000a3ff4f8a4cf796b07a6ff61c5d52417fd703f7f14d8b78ac02ca3cdf6a662d8bc9c89c9120072a5d00dcdd8595356c9b2492aaf1264d4ef4a410c882834867bcd2b6e559d17879570c9ad943e392955f4f979ea13201bafe4f0f6ea5080000000cdcd2063d11dd665647223c78a996810000000571cbb17d9f37282462f0e9c147c0d497c61433c6ccc35601eef97ee611be8c97f4151ffdf6f7820549cda6cb799c6e924966a7f90bf8fd1e75ee76bd72346cfbb5567e54d3504723177d356c4604b7a492ecec37e83efceefd7ca2533659edc8be05cc85451c6a14507434eb54b6f43caea5c4bf690441974b155f5adc681a03c0bbb8358856175e2ce8b0cbbbe3c033e54ffca9ec9a7a3755e0f209150a07682c4e14e3a83558df6f3fc97f1730a136bdee07e98cb984b2e2304a1b63afefdb636e56bbaae4e62136574bc6371a0bb2be1a962aae9c1258da6ef590e1d85ea9e12b3025f43e7e08ccffc5064dea4c39cf4b98e1fc6efb5978f51e16b678eca0b658a56008948e561a9845e4ff29e2bdb1d0b923b272341c5e093fd66a294351c5356c1d06c92cf8ce3c7c56cd31121624d74517fd3666277f670e812b28e2f30d035cee5d0e77a3c7220000000000000005a474816bc59d2e2a00092419304b338a987e9d3044d856ce24f370030be3b5f79f034b8d3ebce68663ef5af469abe75b314fae31a0445859a5ece8fb11a4ee8e46354c9c3a041e12289ee34463aaf28345bd168b4177ce37ed85464c31799053e7f9d04bb5cb51da0b7958989fd70f241262d0af3246eb4fc4bda345360200000001fbddeacd3adaa4d2ee6fe0d072ccd44341f7fd53df58ae791ee8b489a7c9efe3625a9d971b5997485d6a063dc6f7359e2eccc2fb39d401adf59d44e58eb1c60b3475be31a9b7cf42b6402312d2725b8d9fa700a86407e79ae29d2c117ca65fc86c2dce97aa03279a66ec87122219b0f796ab92b1adecae50fdb40f7f02f750d6c977a1919f9f69a6cfefdf879d447df53f3b9b70d10355b0030000000000ea8809820000553d18a6cc50feeb7bfad9b7be3283b6450d264e7712d2f1d7004548b19162cef04d18d4f5987baab97a9bfbd8f185b5631820420bf5b6522c0e21c882c66f55e550fafa4cedd763ada3104f25ffb6d95e07de02205fca4f18a2eb5b63e45d5d80fe527340935aa3c0b4f3f45bfff2418a18217747ae442e31560e5b741445ea2a1acee2a81425ef1b71c1d2a0a765d20b30f87af976a46f9a9a1ac7dea1ea6845f9aa6623920dacc107f532348cc21164efc794874eac73381e6f523d9c8c21578fe3245097c280abe51427b9f6cd72b51b7689969c72fb632d1c072492d9da6d0252803c66730cd5eac907f09b9695906313f88735fce513974a24eee239baa91322608c6fc01e1b9e16587bb5f721303e6b89000000fa08ad0731c4b839688b22c4da2a6bc4cf45dbeea042f9b33393f85a0417854d221a2d5f96bc64647f15daa2ba79cd0f4254ed55217912ef84bd2927df82fc061aef2920c49b2a90886da75561173fa186cb7ee86dd4285c4721eb428c953296ac2f5d825da54dbef07c1b349b4901e093d13e6b9a0000009b5b22e887bc061d40bcaf0aa18623fd9b7179ccc692baffffffff5c4decf9d080a8ac7e82d4cde1267aa64b2a94fd87a009e6742c2ddc3a9d7eccbb1831b1fa218277c2814a91cab7cb59c697166d6f1bb1a360470000000000000000000000000000000000000000000000000000f9f9b4ce7e871f507084c8c88e0652decbe579b042d84ea94597dd1059620a050f69ea03b99b4e19d35f4a3b54e96ae2172effecec80f6baa4bf69a6ebf53928867d596987024952b698d4a01c08aca45ea8727be6c8bc8fdcdff1917db98f152625b8465bc46dbe9762d1183ec79f4ab393541a6d9cabc4de71c5a65d228e4cb483cca06858dc6727c7a2322c9580d9afc33f6fcf87518ecca6dd027cb995f1eb4e98e4b500b5843d4ee1"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r8) r9 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x802) write$evdev(r9, &(0x7f0000000000), 0x100000008) ioctl$EXT4_IOC_GROUP_EXTEND(r9, 0x80004507, 0x0) 853.18234ms ago: executing program 0 (id=1560): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x1c, &(0x7f0000000340)=[@in6={0xa, 0x4e23, 0x0, @private2}]}, &(0x7f0000000200)=0x10) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, 0x0) 798.170725ms ago: executing program 3 (id=1561): syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x2010400, &(0x7f0000000400), 0x1, 0x4b9, &(0x7f0000000480)="$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") r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x12, 0x4, 0x8, 0x8}, 0x48) r1 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r1, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000001400)={r0, &(0x7f0000001940), &(0x7f0000001300)=@tcp=r1}, 0x20) recvmmsg(r1, &(0x7f0000000c80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2042, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000002400010025bd70e9ffff070000000000060004"], 0x1c}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x50000, 0x0, 0x0, 0x0, &(0x7f0000000000)) mount$9p_fd(0x20000000, &(0x7f0000000200)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='tians=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',msize=0x0000000000000000A\x00']) socket(0x200000100000011, 0x803, 0x0) socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wg1\x00'}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000540)={{{@in6=@empty, @in6=@mcast2}, {0xfffffffffffffffe, 0x0, 0x0, 0x0, 0xfff}}, {{@in6=@empty}, 0x0, @in6=@loopback}}, 0xe8) r4 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) bind$packet(r4, &(0x7f0000000080)={0x11, 0x800, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) syz_emit_ethernet(0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb080040000058000000cdacda775b810446becbb10000069078ffffffffacdf491e00010723007f000001e0000001e0000001ac1414aae0000002ac1414bbac141400ac1414bb860600"/115], 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r6, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x4, 0x4, 0x12}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000a80)={r7, &(0x7f0000000940), &(0x7f0000000a40)=@tcp6=r6}, 0x20) r8 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r8, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], 0x128}, 0x1, 0x7}, 0x0) 718.730911ms ago: executing program 3 (id=1562): openat$random(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000500), 0x28002) write$sndseq(r0, 0x0, 0x0) r1 = dup(0xffffffffffffffff) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNGETFILTER(r3, 0x801054db, &(0x7f0000000840)=""/83) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$9p_tcp(&(0x7f0000000500), &(0x7f0000000540)='./file0\x00', &(0x7f0000000580), 0x0, &(0x7f0000000940)=ANY=[@ANYBLOB='trans=tcp,port=0x0000000000000000,privport']) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events.local\x00', 0x275a, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r4, 0x8008662c, &(0x7f0000000040)={0x8}) ioctl$TUNSETSTEERINGEBPF(r3, 0x800454e0, &(0x7f0000000080)=r4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @lookup={{0xb}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_LOOKUP_SET_ID={0x8}, @NFTA_LOOKUP_SET={0x9, 0x1, 'syz2\x00'}, @NFTA_LOOKUP_SREG={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x4}}, 0xd0}}, 0x0) syz_usbip_server_init(0x4) syz_usbip_server_init(0x0) syz_usbip_server_init(0x0) syz_usbip_server_init(0x4) syz_usbip_server_init(0x0) syz_usbip_server_init(0x0) syz_usbip_server_init(0x0) syz_usbip_server_init(0x0) syz_usbip_server_init(0x1) clock_getres(0xbdb3e6c2cd532211, 0x0) read$rfkill(0xffffffffffffffff, &(0x7f0000000040), 0x8) 314.595845ms ago: executing program 2 (id=1564): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000040), 0xffffffffffffffff) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000080)=0x0) sendmsg$NFC_CMD_ACTIVATE_TARGET(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x44, r1, 0x300, 0x70bd2d, 0x25dfdbfb, {}, [@NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x4}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x3}, @NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0xffffffffffffffff}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r2}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x3}]}, 0x44}, 0x1, 0x0, 0x0, 0x14}, 0x20000000) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0x501c00, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r3, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, r4, {0x7}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r5, 0xc0189378, &(0x7f0000000280)={{0x1, 0x1, 0x18, r5, {r5}}, './file0\x00'}) ioctl$SIOCX25SDTEFACILITIES(r7, 0x89eb, &(0x7f00000002c0)={0xe82b, 0x8, 0x6, 0x9, 0x1, 0x27, 0x20, "6e3318423a74d4a584e2e1cc8f41209764aeadba", "858e7d8f6b142e5a092efdf2d6b1f121a52beaf2"}) r8 = pidfd_getfd(r6, r7, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={r5, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3, &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0], 0x0, 0x2c, &(0x7f0000000400)=[{}], 0x8, 0x10, &(0x7f0000000440), &(0x7f0000000480), 0x8, 0x91, 0x8, 0x8, &(0x7f00000004c0)}}, 0x10) sendmsg$nl_route_sched(r8, &(0x7f00000006c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)=@newchain={0x3c, 0x64, 0x200, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0xffff, 0xfff1}, {0xfff2, 0x9}, {0xb}}, [@TCA_CHAIN={0x8, 0xb, 0x4}, @TCA_RATE={0x6, 0x5, {0x41}}, @TCA_CHAIN={0x8, 0xb, 0x2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x890}, 0x80) r10 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000700)='/sys/power/resume', 0xc0000, 0x20) r11 = socket$isdn_base(0x22, 0x3, 0x0) sendto(r6, &(0x7f0000000740)='-R', 0x2, 0x20008082, &(0x7f0000000780)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e23, 0x40, @empty, 0x7}}, 0x80) sendmsg$NFC_CMD_FW_DOWNLOAD(r0, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x1c, r1, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x480c4) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000900)={0x1b, 0x0, 0x0, 0x80, 0x0, r10, 0x800, '\x00', r9, 0xffffffffffffffff, 0x4}, 0x48) r12 = syz_genetlink_get_family_id$nl802154(&(0x7f00000009c0), r0) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r0, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x28, r12, 0x100, 0x70bd2a, 0x25dfdbfe, {}, [@NL802154_ATTR_MAX_FRAME_RETRIES={0x5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000) ioctl$SCSI_IOCTL_GET_PCI(r7, 0x5387, &(0x7f0000000ac0)) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000b40), r6) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000b80)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_MPATH(r6, &(0x7f0000000cc0)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000c80)={&(0x7f0000000bc0)={0x88, r13, 0x400, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8, 0x3, r14}, @val={0xc, 0x99, {0x5a50, 0x3a}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x88}, 0x1, 0x0, 0x0, 0x84}, 0x4040000) r15 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000d40), r10) sendmsg$TIPC_NL_PUBL_GET(r10, &(0x7f0000001080)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001040)={&(0x7f0000000d80)={0x284, r15, 0x12, 0x70bd2a, 0x25dfdbfc, {}, [@TIPC_NLA_MON={0x3c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x836}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x800}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xdd72}]}, @TIPC_NLA_NET={0x50, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x80}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xffffffff}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x78}, @TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xffff0000}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x800}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7fffffff}]}, @TIPC_NLA_BEARER={0x38, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xddd}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x4436}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x311ca8d5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x96}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1ff}]}, @TIPC_NLA_SOCK={0x6c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xf}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7a45}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}]}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8}]}, @TIPC_NLA_BEARER={0xf0, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_BEARER_NAME={0x17, 0x1, @l2={'ib', 0x3a, 'veth0_to_batadv\x00'}}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x614}]}, @TIPC_NLA_BEARER_NAME={0x18, 0x1, @l2={'eth', 0x3a, 'veth0_to_bridge\x00'}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @l2={'ib', 0x3a, 'veth1\x00'}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x3, @empty, 0xa000}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0xfffffff6, @remote, 0x2}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}]}]}, 0x284}, 0x1, 0x0, 0x0, 0x800}, 0x8c0) r16 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r16, &(0x7f00000014c0)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001480)={&(0x7f0000001100)={0x350, r13, 0x800, 0x70bd2b, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x3, 0x17}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_FRAME={0x2d8, 0x33, @mgmt_frame=@assoc_req={{{0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1}, {0x741d}, @broadcast, @device_b, @from_mac=@broadcast, {0x6, 0x6}, @value=@ver_80211n={0x0, 0x7ed7, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0x80, 0x8, {0x0, 0x9, @random="3c27291023efd51ef6"}, @val={0x1, 0x5, [{0x5, 0x1}, {0x1b, 0x1}, {0x60, 0x1}, {0x36}, {0x2, 0x1}]}, @void, [{0xdd, 0xef, "4217f79ef2da11f4e4c5faad907d1eb138bff11eb1d5ee0035910672f6cf5f265c9bd4618cde48db66cb1d70141664bec2295fb300299ea3b9fb1c92c1b96a766d89b57e292a63133fa48fa6f6b77e64390e81b466ea08f4c14b68b3a49b58dbb23e62c698d6d02f45ec86921b50063b187cfe34de854fc662a67d74b3be4c13017a245dc139a1b62258ed7772fbdb48f65a330444f0d2bf45ef9fbb5b7d219d933fcbf2ec4e23932f68e8b846d09c289ac616140c3e6b673de860a77374be126e3ec22a85f7e2fb35822f3cfe213f125a0bdfffe9aaf0ed1142cf3f66fde9eaab85ff0225f4ce6faba7b5e47261f2"}, {0xdd, 0xaf, "318f420e92d1771b9960f27e8a0273e5afe0e30423accc133bddc9d30fd69fff39df9d9e8ed3756b260b110586abd7fe13203727995fedf9338ce939dd0e6a52b6ea1723646c532ae10d8d7d38f3ac6ea82dc7f7cf10ba51438fc641c2d7750b67f17caa5d6bcbc76ac5b69f0776bce81020f4787df472f063af21985c902127c763e252e7384bcebc9e4a7c651d3d353cdd1cbacab3402228abfc0124a45ef82574c432627eabeb64a7e2e1c5981a"}, {0xdd, 0xfe, "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"}]}}, @NL80211_ATTR_FRAME={0xe, 0x33, @ctrl_frame=@cts={{}, {0x20}, @broadcast}}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x19}]}, 0x350}, 0x1, 0x0, 0x0, 0xdd3035ba9d62df58}, 0x48051) r17 = syz_genetlink_get_family_id$tipc(&(0x7f0000001540), r8) sendmsg$TIPC_CMD_SHOW_PORTS(r6, &(0x7f0000001600)={&(0x7f0000001500)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000015c0)={&(0x7f0000001580)={0x1c, r17, 0x10, 0x70bd25, 0x25dfdbfe, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4400c}, 0x4000000) close_range(r11, r7, 0x2) 302.301085ms ago: executing program 2 (id=1565): r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1800007400000000100100000e"], 0x18}, 0x0) 273.897128ms ago: executing program 2 (id=1566): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000001980), 0xffffffffffffffff) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000001a40)={0x0, 0x0, &(0x7f0000001a00)={&(0x7f00000019c0)={0x34, r1, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'batadv_slave_1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x34}}, 0x0) sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x34, r1, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'ip6gre0\x00'}]}, 0x34}}, 0x0) 273.472718ms ago: executing program 2 (id=1567): syz_genetlink_get_family_id$batadv(&(0x7f0000000140), 0xffffffffffffffff) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x400500, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0x42, 0x8) close(r1) gettid() bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0xe, &(0x7f0000000440)=ANY=[@ANYBLOB="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", @ANYRESDEC=r1, @ANYRESHEX=r0], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r1}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x4, 0x6, 0x80, 0x42}, 0x48) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18"], &(0x7f00000000c0)='GPL\x00'}, 0x90) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000280)=0x5) ioctl$sock_inet_SIOCSIFPFLAGS(r3, 0x8934, &(0x7f0000000180)={'tunl0\x00', 0x2}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_int(r4, &(0x7f0000000140)='cpuset.memory_spread_slab\x00', 0x2, 0x0) r6 = openat$cgroup_procs(r4, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) sendfile(r6, r5, 0x0, 0x4) sendfile(r5, r6, 0x0, 0x3) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='tlb_flush\x00', r2}, 0x10) syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000200)='/sys/power/sync_on_suspend', 0x20001, 0x0) io_submit(0x0, 0x1, &(0x7f0000000040)=[&(0x7f0000001500)={0x0, 0x0, 0x0, 0x1, 0x0, r7, &(0x7f0000000100)='9', 0x20000101}]) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000700)=@bpf_tracing={0x1a, 0x5, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x3}, [@map_val={0x18, 0x2, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xfffffa20}]}, &(0x7f0000000240)='syzkaller\x00', 0x100, 0xdd, &(0x7f0000000500)=""/221, 0x41100, 0x58, '\x00', 0x0, 0x0, r7, 0x8, &(0x7f00000003c0)={0x0, 0x1}, 0x8, 0x10, &(0x7f0000000400)={0x1, 0x2, 0x1, 0x5}, 0x10, 0x28409, 0xffffffffffffffff, 0x1, &(0x7f0000000440)=[r7, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000600)=[{0x2, 0x3, 0x4, 0xa}], 0x10, 0x6}, 0x90) open_tree(0xffffffffffffff9c, &(0x7f00000006c0)='.\x00', 0x0) 201.243614ms ago: executing program 2 (id=1568): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r1) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYBLOB="01000100f3ff0000000024000000080002"], 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x0) 201.093154ms ago: executing program 2 (id=1569): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000140)={0x2, &(0x7f0000000080)=[{0x28, 0x8, 0x0, 0xfffff038}, {0x5, 0xfc}]}, 0x10) r1 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10) 109.478601ms ago: executing program 4 (id=1570): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="18010000007b00000000000000000000850000007b00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) (async) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="18010000007b00000000000000000000850000007b00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={0x0, r1}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_deladdr={0x34, 0x15, 0x1, 0x0, 0x0, {}, [@IFA_ADDRESS={0x14, 0x1, @dev}, @IFA_FLAGS={0x8}]}, 0x34}}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e00e020023200b02d25a80ef8c6394f93e24fc60049d0d", 0x17}], 0x1}, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)=@gettaction={0x80, 0x32, 0x20, 0x70bd29, 0x25dfdbfe, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc}, @action_gd=@TCA_ACT_TAB={0x60, 0x1, [{0xc, 0x9, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0xc, 0xd, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xd99}}, {0xc, 0x18, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0xc, 0x8, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0x10, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0xc, 0xc, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xdc2a}}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x20000080}, 0x48004) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)=@gettaction={0x80, 0x32, 0x20, 0x70bd29, 0x25dfdbfe, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc}, @action_gd=@TCA_ACT_TAB={0x60, 0x1, [{0xc, 0x9, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0xc, 0xd, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xd99}}, {0xc, 0x18, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0xc, 0x8, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0x10, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0xc, 0xc, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xdc2a}}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x20000080}, 0x48004) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x13, &(0x7f0000000000)=ANY=[@ANYRES8=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x35, 0x0, 0x0, 0x0}, 0x90) write$cgroup_subtree(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe0000180091c8b14a0778a8123d181d"], 0xfe33) (async) write$cgroup_subtree(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe0000180091c8b14a0778a8123d181d"], 0xfe33) 99.555132ms ago: executing program 4 (id=1571): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r0, &(0x7f0000000580)="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", 0x124) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, 0x0, 0x44810) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x14004850) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) process_vm_readv(0x0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x36}], 0x1, &(0x7f0000008640)=[{0x0}], 0x1, 0x0) socket(0x0, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYRESHEX, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b0001006272696467650000040002800a0001000180c2"], 0x40}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x14) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r3, &(0x7f00000001c0)={0x0, 0xfe3c, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYRES32=r2], 0x104}}, 0x40000) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) keyctl$restrict_keyring(0xa, 0x0, &(0x7f00000003c0)='cifs.idmap\x00', &(0x7f0000000000)='n\x00\xe2e') r4 = io_uring_setup(0x336b, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x7a}) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x20000023896) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x103040, 0x0) ioctl$TCSETSF(r7, 0x5409, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) 5.08723ms ago: executing program 0 (id=1572): syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x2010400, &(0x7f0000000400), 0x1, 0x4b9, &(0x7f0000000480)="$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") r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x12, 0x4, 0x8, 0x8}, 0x48) r1 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r1, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000001400)={r0, &(0x7f0000001940), &(0x7f0000001300)=@tcp=r1}, 0x20) recvmmsg(r1, &(0x7f0000000c80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2042, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000002400010025bd70e9ffff070000000000060004"], 0x1c}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x50000, 0x0, 0x0, 0x0, &(0x7f0000000000)) mount$9p_fd(0x20000000, &(0x7f0000000200)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='tians=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',msize=0x0000000000000000A\x00']) socket(0x200000100000011, 0x803, 0x0) socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wg1\x00'}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000540)={{{@in6=@empty, @in6=@mcast2}, {0xfffffffffffffffe, 0x0, 0x0, 0x0, 0xfff}}, {{@in6=@empty}, 0x0, @in6=@loopback}}, 0xe8) r4 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) bind$packet(r4, &(0x7f0000000080)={0x11, 0x800, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) syz_emit_ethernet(0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb080040000058000000cdacda775b810446becbb10000069078ffffffffacdf491e00010723007f000001e0000001e0000001ac1414aae0000002ac1414bbac141400ac1414bb860600"/115], 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r6, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x4, 0x4, 0x12}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000a80)={r7, &(0x7f0000000940), &(0x7f0000000a40)=@tcp6=r6}, 0x20) r8 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r8, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], 0x128}, 0x1, 0x7}, 0x0) 0s ago: executing program 0 (id=1573): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="18010000007b00000000000000000000850000007b00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='netlink_extack\x00', r0}, 0x10) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000400)={r1, r3, 0x25, 0xc, @void}, 0x10) kernel console output (not intermixed with test programs): ontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 59.132732][ T29] audit: type=1400 audit(1721174780.428:872): avc: denied { open } for pid=5350 comm="syz.0.575" path="/dev/uhid" dev="devtmpfs" ino=226 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 59.156015][ T3156] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz0] on syz1 [ 59.678664][ T5364] netlink: 'syz.0.580': attribute type 10 has an invalid length. [ 59.696487][ T29] audit: type=1400 audit(1721174781.028:873): avc: denied { connect } for pid=5366 comm="syz.2.581" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 59.706260][ T5364] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 59.724893][ T5367] netlink: 8 bytes leftover after parsing attributes in process `syz.3.582'. [ 59.777851][ T5376] loop3: detected capacity change from 0 to 512 [ 59.788044][ T5376] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2234: inode #15: comm syz.3.586: corrupted in-inode xattr: bad e_name length [ 59.828215][ T5376] EXT4-fs error (device loop3): ext4_orphan_get:1399: comm syz.3.586: couldn't read orphan inode 15 (err -117) [ 59.930049][ T29] audit: type=1400 audit(1721174781.258:874): avc: denied { accept } for pid=5379 comm="syz.3.587" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 59.995273][ T29] audit: type=1400 audit(1721174781.308:875): avc: denied { map } for pid=5379 comm="syz.3.587" path="socket:[12441]" dev="sockfs" ino=12441 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 60.505031][ T5390] netlink: 'syz.0.590': attribute type 2 has an invalid length. [ 60.554382][ T5390] loop0: detected capacity change from 0 to 1024 [ 60.571032][ T5390] EXT4-fs: Ignoring removed mblk_io_submit option [ 60.644924][ T5398] loop2: detected capacity change from 0 to 1024 [ 60.659255][ T5398] EXT4-fs: Ignoring removed i_version option [ 60.676353][ T5398] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 60.712809][ T5398] netlink: 'syz.2.593': attribute type 21 has an invalid length. [ 60.752246][ T5407] loop3: detected capacity change from 0 to 1024 [ 60.758799][ T5398] netlink: 156 bytes leftover after parsing attributes in process `syz.2.593'. [ 60.808623][ T5407] EXT4-fs: Ignoring removed i_version option [ 60.828281][ T5407] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 60.840493][ T5409] loop2: detected capacity change from 0 to 512 [ 60.880950][ T5409] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2234: inode #15: comm syz.2.597: corrupted in-inode xattr: bad e_name length [ 60.905539][ T5407] netlink: 'syz.3.596': attribute type 21 has an invalid length. [ 60.913285][ T5407] netlink: 156 bytes leftover after parsing attributes in process `syz.3.596'. [ 60.922252][ T5407] FAULT_INJECTION: forcing a failure. [ 60.922252][ T5407] name failslab, interval 1, probability 0, space 0, times 0 [ 60.934859][ T5407] CPU: 1 PID: 5407 Comm: syz.3.596 Not tainted 6.10.0-syzkaller-01155-gd67978318827 #0 [ 60.944558][ T5407] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 60.954616][ T5407] Call Trace: [ 60.957884][ T5407] [ 60.960805][ T5407] dump_stack_lvl+0xf2/0x150 [ 60.965396][ T5407] dump_stack+0x15/0x20 [ 60.969622][ T5407] should_fail_ex+0x229/0x230 [ 60.974300][ T5407] ? lwtunnel_state_alloc+0x1d/0x30 [ 60.979543][ T5407] __should_failslab+0x92/0xa0 [ 60.984313][ T5407] should_failslab+0x9/0x20 [ 60.988884][ T5407] __kmalloc_noprof+0xa5/0x370 [ 60.992614][ T5409] EXT4-fs error (device loop2): ext4_orphan_get:1399: comm syz.2.597: couldn't read orphan inode 15 (err -117) [ 60.993634][ T5407] lwtunnel_state_alloc+0x1d/0x30 [ 60.993658][ T5407] mpls_build_state+0x131/0x290 [ 61.015217][ T5407] ? pcpu_alloc_noprof+0xb92/0x10c0 [ 61.020430][ T5407] lwtunnel_build_state+0x11f/0x1f0 [ 61.025676][ T5407] fib_nh_common_init+0xb3/0x2b0 [ 61.030619][ T5407] fib_nh_init+0x64/0x1b0 [ 61.035021][ T5407] ? fib_create_info+0xa07/0x1500 [ 61.040060][ T5407] fib_create_info+0xa26/0x1500 [ 61.044949][ T5407] fib_table_insert+0x101/0xfa0 [ 61.049816][ T5407] ? fib_trie_table+0xce/0xf0 [ 61.054503][ T5407] inet_rtm_newroute+0xa3/0x140 [ 61.059353][ T5407] ? __pfx_inet_rtm_newroute+0x10/0x10 [ 61.064817][ T5407] rtnetlink_rcv_msg+0x85e/0x910 [ 61.069818][ T5407] ? memcg_list_lru_alloc+0xd2/0x740 [ 61.075107][ T5407] ? mod_objcg_state+0x2e2/0x4e0 [ 61.080047][ T5407] ? mod_objcg_state+0x2e2/0x4e0 [ 61.085048][ T5407] ? __memcg_slab_free_hook+0xc9/0x1e0 [ 61.090502][ T5407] ? xas_load+0x3ae/0x3d0 [ 61.094882][ T5407] ? kmem_cache_free+0xd8/0x280 [ 61.099736][ T5407] ? nlmon_xmit+0x51/0x60 [ 61.104121][ T5407] ? __kfree_skb+0x102/0x150 [ 61.108715][ T5407] ? consume_skb+0x57/0x180 [ 61.113295][ T5407] ? nlmon_xmit+0x51/0x60 [ 61.117639][ T5407] ? dev_hard_start_xmit+0x3c1/0x3f0 [ 61.122985][ T5407] ? __dev_queue_xmit+0xb21/0x1e50 [ 61.128158][ T5407] ? ref_tracker_free+0x3a5/0x410 [ 61.133201][ T5407] netlink_rcv_skb+0x12c/0x230 [ 61.137985][ T5407] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 61.143446][ T5407] rtnetlink_rcv+0x1c/0x30 [ 61.147868][ T5407] netlink_unicast+0x58d/0x660 [ 61.152654][ T5407] netlink_sendmsg+0x5ca/0x6e0 [ 61.157452][ T5407] ? __pfx_netlink_sendmsg+0x10/0x10 [ 61.162754][ T5407] __sock_sendmsg+0x140/0x180 [ 61.167428][ T5407] ____sys_sendmsg+0x312/0x410 [ 61.172302][ T5407] __sys_sendmsg+0x1e9/0x280 [ 61.176929][ T5407] __x64_sys_sendmsg+0x46/0x50 [ 61.181695][ T5407] x64_sys_call+0x2689/0x2d60 [ 61.186398][ T5407] do_syscall_64+0xc9/0x1c0 [ 61.190894][ T5407] ? clear_bhb_loop+0x55/0xb0 [ 61.195599][ T5407] ? clear_bhb_loop+0x55/0xb0 [ 61.198287][ T5416] loop1: detected capacity change from 0 to 512 [ 61.200265][ T5407] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 61.212421][ T5407] RIP: 0033:0x7ff587c92bd9 [ 61.216833][ T5407] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 61.236482][ T5407] RSP: 002b:00007ff586f14048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 61.244944][ T5407] RAX: ffffffffffffffda RBX: 00007ff587e20f60 RCX: 00007ff587c92bd9 [ 61.252901][ T5407] RDX: 0000000000000000 RSI: 0000000020000940 RDI: 0000000000000005 [ 61.260930][ T5407] RBP: 00007ff586f140a0 R08: 0000000000000000 R09: 0000000000000000 [ 61.268974][ T5407] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 61.276931][ T5407] R13: 000000000000000b R14: 00007ff587e20f60 R15: 00007ffd3fb7bf08 [ 61.284890][ T5407] [ 61.299346][ T5416] ext4 filesystem being mounted at /25/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 61.321864][ T5423] netlink: 56 bytes leftover after parsing attributes in process `syz.2.599'. [ 61.385056][ T5434] loop3: detected capacity change from 0 to 512 [ 61.411379][ T5434] ext4 filesystem being mounted at /147/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 61.526982][ T5446] loop1: detected capacity change from 0 to 512 [ 61.566029][ T5446] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2234: inode #15: comm syz.1.610: corrupted in-inode xattr: bad e_name length [ 62.193604][ T5446] EXT4-fs error (device loop1): ext4_orphan_get:1399: comm syz.1.610: couldn't read orphan inode 15 (err -117) [ 62.426652][ T5463] SELinux: Context system_u:object_r:syslog_conf_t:s0 is not valid (left unmapped). [ 62.491663][ T5483] loop2: detected capacity change from 0 to 512 [ 62.500619][ T5480] loop1: detected capacity change from 0 to 512 [ 62.510498][ T5480] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2234: inode #15: comm syz.1.622: corrupted in-inode xattr: bad e_name length [ 62.524554][ T5480] EXT4-fs error (device loop1): ext4_orphan_get:1399: comm syz.1.622: couldn't read orphan inode 15 (err -117) [ 62.538641][ T5479] loop0: detected capacity change from 0 to 2048 [ 62.555457][ T5483] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 62.559026][ T5490] loop3: detected capacity change from 0 to 2048 [ 62.563361][ T5483] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 62.590325][ T5479] loop0: p1 < > p4 [ 62.594630][ T5483] System zones: 0-1, 15-15, 18-18, 34-34 [ 62.600252][ T5479] loop0: p4 size 8388608 extends beyond EOD, truncated [ 62.608397][ T5483] EXT4-fs (loop2): orphan cleanup on readonly fs [ 62.628707][ T5483] EXT4-fs warning (device loop2): ext4_enable_quotas:7062: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 62.643358][ T5483] EXT4-fs (loop2): Cannot turn on quotas: error -22 [ 62.692207][ T5492] loop1: detected capacity change from 0 to 2048 [ 62.699983][ T5483] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.623: bg 0: block 40: padding at end of block bitmap is not set [ 62.730133][ T5492] FAULT_INJECTION: forcing a failure. [ 62.730133][ T5492] name failslab, interval 1, probability 0, space 0, times 0 [ 62.742756][ T5492] CPU: 0 PID: 5492 Comm: syz.1.625 Not tainted 6.10.0-syzkaller-01155-gd67978318827 #0 [ 62.752376][ T5492] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 62.762469][ T5492] Call Trace: [ 62.765778][ T5492] [ 62.768697][ T5492] dump_stack_lvl+0xf2/0x150 [ 62.773365][ T5492] dump_stack+0x15/0x20 [ 62.777512][ T5492] should_fail_ex+0x229/0x230 [ 62.782228][ T5492] ? kvmalloc_node_noprof+0x72/0x170 [ 62.787523][ T5492] __should_failslab+0x92/0xa0 [ 62.792374][ T5492] should_failslab+0x9/0x20 [ 62.797006][ T5492] __kmalloc_node_noprof+0xa8/0x380 [ 62.802202][ T5492] kvmalloc_node_noprof+0x72/0x170 [ 62.807444][ T5492] traverse+0x9f/0x3c0 [ 62.811562][ T5492] ? terminate_walk+0x260/0x280 [ 62.816247][ T5483] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6551: Corrupt filesystem [ 62.816392][ T5492] seq_read_iter+0x85a/0x940 [ 62.829670][ T5492] ? _parse_integer_limit+0x167/0x180 [ 62.835103][ T5492] seq_read+0x1eb/0x230 [ 62.836393][ T5483] EXT4-fs (loop2): 1 truncate cleaned up [ 62.839254][ T5492] ? __pfx_seq_read+0x10/0x10 [ 62.849525][ T5492] proc_reg_read+0x145/0x1e0 [ 62.854152][ T5492] vfs_readv+0x3f1/0x660 [ 62.858437][ T5492] ? __pfx_proc_reg_read+0x10/0x10 [ 62.863623][ T5492] __x64_sys_preadv+0x100/0x1c0 [ 62.868550][ T5492] x64_sys_call+0x1d5c/0x2d60 [ 62.873238][ T5492] do_syscall_64+0xc9/0x1c0 [ 62.877816][ T5492] ? clear_bhb_loop+0x55/0xb0 [ 62.882488][ T5492] ? clear_bhb_loop+0x55/0xb0 [ 62.887176][ T5492] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 62.893091][ T5492] RIP: 0033:0x7f3fd14abbd9 [ 62.897494][ T5492] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 62.917105][ T5492] RSP: 002b:00007f3fd072d048 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 62.925514][ T5492] RAX: ffffffffffffffda RBX: 00007f3fd1639f60 RCX: 00007f3fd14abbd9 [ 62.933512][ T5492] RDX: 0000000000000001 RSI: 0000000020000040 RDI: 0000000000000009 [ 62.941479][ T5492] RBP: 00007f3fd072d0a0 R08: 0000000000000000 R09: 0000000000000000 [ 62.949457][ T5492] R10: 0000000000000fff R11: 0000000000000246 R12: 0000000000000001 [ 62.957421][ T5492] R13: 000000000000000b R14: 00007f3fd1639f60 R15: 00007ffee48c49d8 [ 62.965393][ T5492] [ 62.987872][ T5499] loop0: detected capacity change from 0 to 2048 [ 63.096738][ T5517] loop0: detected capacity change from 0 to 512 [ 63.118278][ T5517] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2234: inode #15: comm syz.0.635: corrupted in-inode xattr: bad e_name length [ 63.165001][ T5517] EXT4-fs error (device loop0): ext4_orphan_get:1399: comm syz.0.635: couldn't read orphan inode 15 (err -117) [ 63.437339][ T5552] loop2: detected capacity change from 0 to 512 [ 63.479890][ T5552] ext4 filesystem being mounted at /44/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 63.544270][ T5558] netlink: 80 bytes leftover after parsing attributes in process `syz.2.650'. [ 63.573969][ T5560] loop1: detected capacity change from 0 to 512 [ 63.613488][ T5560] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2234: inode #15: comm syz.1.651: corrupted in-inode xattr: bad e_name length [ 63.645352][ T5560] EXT4-fs error (device loop1): ext4_orphan_get:1399: comm syz.1.651: couldn't read orphan inode 15 (err -117) [ 63.693358][ T5574] loop2: detected capacity change from 0 to 512 [ 63.716283][ T5574] ext4: Unknown parameter 'dont_hash' [ 63.775131][ T5596] loop2: detected capacity change from 0 to 2048 [ 63.872166][ T5609] loop3: detected capacity change from 0 to 512 [ 63.888801][ T5609] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2234: inode #15: comm syz.3.668: corrupted in-inode xattr: bad e_name length [ 63.922807][ T5609] EXT4-fs error (device loop3): ext4_orphan_get:1399: comm syz.3.668: couldn't read orphan inode 15 (err -117) [ 63.977176][ T29] kauditd_printk_skb: 22 callbacks suppressed [ 63.977190][ T29] audit: type=1400 audit(1721174785.308:897): avc: denied { unmount } for pid=4816 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 64.004282][ T5614] netlink: 8 bytes leftover after parsing attributes in process `syz.3.669'. [ 64.023193][ T5616] loop1: detected capacity change from 0 to 512 [ 64.038481][ T5616] ext4 filesystem being mounted at /49/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 64.180868][ T5621] netlink: 'syz.3.671': attribute type 28 has an invalid length. [ 64.202513][ T29] audit: type=1326 audit(1721174785.528:898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5622 comm="syz.0.672" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4197276bd9 code=0x0 [ 64.235351][ T5621] FAULT_INJECTION: forcing a failure. [ 64.235351][ T5621] name failslab, interval 1, probability 0, space 0, times 0 [ 64.248043][ T5621] CPU: 1 PID: 5621 Comm: syz.3.671 Not tainted 6.10.0-syzkaller-01155-gd67978318827 #0 [ 64.257672][ T5621] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 64.267731][ T5621] Call Trace: [ 64.271004][ T5621] [ 64.273919][ T5621] dump_stack_lvl+0xf2/0x150 [ 64.278501][ T5621] dump_stack+0x15/0x20 [ 64.282685][ T5621] should_fail_ex+0x229/0x230 [ 64.287412][ T5621] ? __alloc_skb+0x10b/0x300 [ 64.292020][ T5621] __should_failslab+0x92/0xa0 [ 64.296774][ T5621] should_failslab+0x9/0x20 [ 64.301349][ T5621] kmem_cache_alloc_node_noprof+0x51/0x2b0 [ 64.307154][ T5621] ? nlmon_xmit+0x51/0x60 [ 64.311527][ T5621] __alloc_skb+0x10b/0x300 [ 64.315948][ T5621] netlink_ack+0xef/0x4f0 [ 64.320271][ T5621] netlink_rcv_skb+0x19c/0x230 [ 64.325151][ T5621] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 64.330603][ T5621] rtnetlink_rcv+0x1c/0x30 [ 64.335003][ T5621] netlink_unicast+0x58d/0x660 [ 64.339754][ T5621] netlink_sendmsg+0x5ca/0x6e0 [ 64.344548][ T5621] ? __pfx_netlink_sendmsg+0x10/0x10 [ 64.349863][ T5621] __sock_sendmsg+0x140/0x180 [ 64.354529][ T5621] ____sys_sendmsg+0x312/0x410 [ 64.359288][ T5621] __sys_sendmsg+0x1e9/0x280 [ 64.363880][ T5621] __x64_sys_sendmsg+0x46/0x50 [ 64.368630][ T5621] x64_sys_call+0x2689/0x2d60 [ 64.373296][ T5621] do_syscall_64+0xc9/0x1c0 [ 64.377838][ T5621] ? clear_bhb_loop+0x55/0xb0 [ 64.382551][ T5621] ? clear_bhb_loop+0x55/0xb0 [ 64.387356][ T5621] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 64.393244][ T5621] RIP: 0033:0x7ff587c92bd9 [ 64.397809][ T5621] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 64.417418][ T5621] RSP: 002b:00007ff586f14048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 64.425896][ T5621] RAX: ffffffffffffffda RBX: 00007ff587e20f60 RCX: 00007ff587c92bd9 [ 64.433929][ T5621] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000000000003 [ 64.441887][ T5621] RBP: 00007ff586f140a0 R08: 0000000000000000 R09: 0000000000000000 [ 64.449906][ T5621] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 64.457863][ T5621] R13: 000000000000000b R14: 00007ff587e20f60 R15: 00007ffd3fb7bf08 [ 64.465872][ T5621] [ 64.474440][ T29] audit: type=1400 audit(1721174785.798:899): avc: denied { unmount } for pid=4567 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 64.523554][ T5628] loop0: detected capacity change from 0 to 512 [ 64.557069][ T5628] ext4 filesystem being mounted at /78/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 64.576644][ T29] audit: type=1400 audit(1721174785.908:900): avc: denied { rename } for pid=5627 comm="syz.0.674" name="file0" dev="loop0" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 64.644283][ T5637] loop0: detected capacity change from 0 to 128 [ 64.667863][ T5637] ext4 filesystem being mounted at /79/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 64.721113][ T5641] team0: entered promiscuous mode [ 64.726295][ T5641] team_slave_0: entered promiscuous mode [ 64.732054][ T5641] team_slave_1: entered promiscuous mode [ 64.757963][ T5643] loop3: detected capacity change from 0 to 512 [ 64.776476][ T5640] team0: left promiscuous mode [ 64.779161][ T5643] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2234: inode #15: comm syz.3.679: corrupted in-inode xattr: bad e_name length [ 64.781262][ T5640] team_slave_0: left promiscuous mode [ 64.781372][ T5640] team_slave_1: left promiscuous mode [ 64.796709][ T5643] EXT4-fs error (device loop3): ext4_orphan_get:1399: comm syz.3.679: couldn't read orphan inode 15 (err -117) [ 64.849694][ T24] kernel write not supported for file /snd/seq (pid: 24 comm: kworker/1:0) [ 64.864675][ T4816] EXT4-fs unmount: 40 callbacks suppressed [ 64.864689][ T4816] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.882946][ T29] audit: type=1400 audit(1721174786.208:901): avc: denied { unlink } for pid=5636 comm="syz.0.676" name="file0" dev="loop0" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 64.910310][ T5650] 9pnet_fd: p9_fd_create_tcp (5650): problem connecting socket to 127.0.0.1 [ 64.921297][ T5650] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(10) [ 64.927937][ T5650] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 64.935435][ T5650] vhci_hcd vhci_hcd.0: Device attached [ 64.958446][ T29] audit: type=1326 audit(1721174786.288:902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5655 comm="syz.1.682" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3fd14abbd9 code=0x0 [ 64.985327][ T29] audit: type=1400 audit(1721174786.308:903): avc: denied { nlmsg_write } for pid=5657 comm="syz.3.684" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 65.007688][ T5650] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 65.019363][ T5650] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 65.031736][ T5650] vhci_hcd vhci_hcd.0: pdev(2) rhport(3) sockfd(16) [ 65.038345][ T5650] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 65.045792][ T5650] vhci_hcd vhci_hcd.0: Device attached [ 65.055748][ T5650] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 65.064290][ T5650] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 65.074023][ T5650] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 65.084052][ T5650] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 65.096690][ T5650] vhci_hcd vhci_hcd.0: port 0 already used [ 65.103516][ T5660] vhci_hcd: connection closed [ 65.103612][ T3595] vhci_hcd: stop threads [ 65.103731][ T5653] vhci_hcd: connection closed [ 65.108368][ T3595] vhci_hcd: release socket [ 65.108382][ T3595] vhci_hcd: disconnect device [ 65.129377][ T3595] vhci_hcd: stop threads [ 65.133633][ T3595] vhci_hcd: release socket [ 65.138119][ T3595] vhci_hcd: disconnect device [ 65.142886][ T24] vhci_hcd: vhci_device speed not set [ 65.502056][ T4567] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 65.528861][ T29] audit: type=1400 audit(1721174786.858:904): avc: denied { append } for pid=5670 comm="syz.0.687" name="nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 65.570179][ T5677] loop0: detected capacity change from 0 to 2048 [ 65.598293][ T5677] loop0: p1 < > p4 [ 65.602538][ T5677] loop0: p4 size 8388608 extends beyond EOD, truncated [ 65.615336][ T5677] netlink: 104 bytes leftover after parsing attributes in process `syz.0.689'. [ 65.642140][ T5686] loop0: detected capacity change from 0 to 512 [ 65.650378][ T5686] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2234: inode #15: comm syz.0.690: corrupted in-inode xattr: bad e_name length [ 65.664404][ T5686] EXT4-fs error (device loop0): ext4_orphan_get:1399: comm syz.0.690: couldn't read orphan inode 15 (err -117) [ 65.677012][ T5686] EXT4-fs (loop0): mounted filesystem 00000004-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 65.694341][ T5669] chnl_net:caif_netlink_parms(): no params data found [ 65.702904][ T4567] EXT4-fs (loop0): unmounting filesystem 00000004-0000-0000-0000-000000000000. [ 65.745455][ T5669] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.752569][ T5669] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.762455][ T5669] bridge_slave_0: entered allmulticast mode [ 65.768536][ T29] audit: type=1400 audit(1721174787.098:905): avc: denied { setcurrent } for pid=5691 comm="syz.0.691" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 65.775959][ T5669] bridge_slave_0: entered promiscuous mode [ 65.787854][ T29] audit: type=1401 audit(1721174787.098:906): op=security_bounded_transition seresult=denied oldcontext=root:sysadm_r:sysadm_t newcontext=system_u:object_r:hugetlbfs_t [ 65.811689][ T5669] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.818789][ T5669] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.827071][ T4061] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.827732][ T5669] bridge_slave_1: entered allmulticast mode [ 65.842569][ T5669] bridge_slave_1: entered promiscuous mode [ 65.874000][ T3593] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.886948][ T5703] team0: entered promiscuous mode [ 65.892076][ T5703] team_slave_0: entered promiscuous mode [ 65.897835][ T5703] team_slave_1: entered promiscuous mode [ 65.904953][ T5669] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.916015][ T5669] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.933428][ T3593] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.943840][ T5709] loop1: detected capacity change from 0 to 512 [ 65.954316][ T5713] loop3: detected capacity change from 0 to 512 [ 65.963154][ T5709] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 65.971780][ T5713] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2234: inode #15: comm syz.3.700: corrupted in-inode xattr: bad e_name length [ 65.977810][ T5717] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=65280 sclass=netlink_xfrm_socket pid=5717 comm=syz.0.693 [ 65.990684][ T5709] ext4 filesystem being mounted at /52/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 66.014008][ T5713] EXT4-fs error (device loop3): ext4_orphan_get:1399: comm syz.3.700: couldn't read orphan inode 15 (err -117) [ 66.028659][ T5713] EXT4-fs (loop3): mounted filesystem 00000004-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 66.042424][ T5669] team0: Port device team_slave_0 added [ 66.050022][ T3079] EXT4-fs (loop3): unmounting filesystem 00000004-0000-0000-0000-000000000000. [ 66.061132][ T3593] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.079081][ T5669] team0: Port device team_slave_1 added [ 66.102732][ T5669] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.109776][ T5669] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.135713][ T5669] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.151519][ T4816] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.161733][ T3593] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.180021][ T5669] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.187072][ T5669] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.212992][ T5669] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.239689][ T5729] loop3: detected capacity change from 0 to 1024 [ 66.246374][ T5729] EXT4-fs: Ignoring removed orlov option [ 66.252074][ T5729] EXT4-fs: Ignoring removed nomblk_io_submit option [ 66.269058][ T5729] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 66.290144][ T5669] hsr_slave_0: entered promiscuous mode [ 66.296200][ T5669] hsr_slave_1: entered promiscuous mode [ 66.302081][ T5669] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 66.309979][ T5669] Cannot create hsr debugfs directory [ 66.326503][ T3593] bridge_slave_1: left allmulticast mode [ 66.332185][ T3593] bridge_slave_1: left promiscuous mode [ 66.337943][ T3593] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.345804][ T3593] bridge_slave_0: left allmulticast mode [ 66.347154][ T3079] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.351435][ T3593] bridge_slave_0: left promiscuous mode [ 66.351592][ T3593] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.448215][ T3593] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 66.458610][ T3593] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 66.468591][ T3593] bond0 (unregistering): Released all slaves [ 66.491950][ T5744] loop3: detected capacity change from 0 to 512 [ 66.501333][ T5744] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2234: inode #15: comm syz.3.711: corrupted in-inode xattr: bad e_name length [ 66.515252][ T5744] EXT4-fs error (device loop3): ext4_orphan_get:1399: comm syz.3.711: couldn't read orphan inode 15 (err -117) [ 66.527536][ T5744] EXT4-fs (loop3): mounted filesystem 00000004-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 66.548607][ T3079] EXT4-fs (loop3): unmounting filesystem 00000004-0000-0000-0000-000000000000. [ 66.577214][ T3593] hsr_slave_0: left promiscuous mode [ 66.583066][ T3593] hsr_slave_1: left promiscuous mode [ 66.589041][ T3593] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 66.596968][ T3593] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 66.604920][ T3593] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 66.612356][ T3593] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 66.621294][ T3593] veth1_macvtap: left promiscuous mode [ 66.626888][ T3593] veth0_macvtap: left promiscuous mode [ 66.632524][ T3593] veth1_vlan: left promiscuous mode [ 66.637753][ T3593] veth0_vlan: left promiscuous mode [ 66.710618][ T3593] team0 (unregistering): Port device team_slave_1 removed [ 66.720823][ T3593] team0 (unregistering): Port device team_slave_0 removed [ 66.756434][ T5701] team0: left promiscuous mode [ 66.761240][ T5701] team_slave_0: left promiscuous mode [ 66.766771][ T5701] team_slave_1: left promiscuous mode [ 66.802116][ T5751] 9pnet: p9_errstr2errno: server reported unknown error  [ 66.811553][ T5751] loop0: detected capacity change from 0 to 512 [ 66.818604][ T5751] ext4: Unknown parameter 'appraise_type' [ 66.837423][ T5753] loop0: detected capacity change from 0 to 512 [ 66.844096][ T5753] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 66.854046][ T5753] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 not in group (block 3)! [ 66.864218][ T5753] EXT4-fs (loop0): group descriptors corrupted! [ 66.948106][ T5761] loop2: detected capacity change from 0 to 512 [ 66.955912][ T5761] EXT4-fs (loop2): orphan cleanup on readonly fs [ 66.962801][ T5761] EXT4-fs error (device loop2): ext4_acquire_dquot:6844: comm syz.2.718: Failed to acquire dquot type 0 [ 66.974328][ T5761] EXT4-fs (loop2): 1 truncate cleaned up [ 66.980618][ T5761] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 66.996596][ T5761] netlink: 12 bytes leftover after parsing attributes in process `syz.2.718'. [ 67.008606][ T5669] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 67.018620][ T5669] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 67.025739][ T4766] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.041831][ T5669] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 67.044715][ T5769] loop2: detected capacity change from 0 to 512 [ 67.059907][ T5769] EXT4-fs (loop2): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 67.061102][ T5767] lo speed is unknown, defaulting to 1000 [ 67.072357][ T5669] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 67.113386][ T5767] lo speed is unknown, defaulting to 1000 [ 67.140148][ T5767] lo speed is unknown, defaulting to 1000 [ 67.144707][ T5669] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.160721][ T5669] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.167703][ T4766] EXT4-fs (loop2): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 67.170547][ T24] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.183725][ T24] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.204773][ T3158] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.211890][ T3158] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.221973][ T5767] infiniband syz0: set active [ 67.226715][ T5767] infiniband syz0: added lo [ 67.244657][ T24] lo speed is unknown, defaulting to 1000 [ 67.256836][ T5767] RDS/IB: syz0: added [ 67.263576][ T5767] smc: adding ib device syz0 with port count 1 [ 67.277335][ T5767] smc: ib device syz0 port 1 has pnetid [ 67.283283][ T35] lo speed is unknown, defaulting to 1000 [ 67.284704][ T5779] loop2: detected capacity change from 0 to 2048 [ 67.291390][ T5767] lo speed is unknown, defaulting to 1000 [ 67.328368][ T5767] lo speed is unknown, defaulting to 1000 [ 67.332766][ T5669] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.355780][ T5779] loop2: p1 < > p4 [ 67.360898][ T5767] lo speed is unknown, defaulting to 1000 [ 67.365337][ T5779] loop2: p4 size 8388608 extends beyond EOD, truncated [ 67.414918][ T5779] netlink: 104 bytes leftover after parsing attributes in process `syz.2.722'. [ 67.420142][ T5767] lo speed is unknown, defaulting to 1000 [ 67.488725][ T5797] netlink: get zone limit has 4 unknown bytes [ 67.516857][ T5767] lo speed is unknown, defaulting to 1000 [ 67.566011][ T5806] syz.3.729 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 67.584580][ T5767] lo speed is unknown, defaulting to 1000 [ 67.629083][ T5767] lo speed is unknown, defaulting to 1000 [ 67.647234][ T5669] veth0_vlan: entered promiscuous mode [ 67.661232][ T5669] veth1_vlan: entered promiscuous mode [ 67.682734][ T5669] veth0_macvtap: entered promiscuous mode [ 67.690541][ T5669] veth1_macvtap: entered promiscuous mode [ 67.711367][ T5669] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.721986][ T5669] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.731979][ T5669] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.742661][ T5669] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.752674][ T5669] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.763165][ T5669] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.772968][ T5669] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.783405][ T5669] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.793209][ T5669] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.803635][ T5669] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.814411][ T5669] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.826266][ T5669] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.836735][ T5669] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.846562][ T5669] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.857064][ T5669] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.866946][ T5669] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.877360][ T5669] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.887206][ T5669] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.897604][ T5669] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.907513][ T5669] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.917964][ T5669] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.928692][ T5669] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.938850][ T5669] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.947695][ T5669] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.956502][ T5669] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.965211][ T5669] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.022690][ T5823] netlink: 8 bytes leftover after parsing attributes in process `syz.4.688'. [ 68.032038][ T5823] lo speed is unknown, defaulting to 1000 [ 68.040571][ T5825] loop1: detected capacity change from 0 to 128 [ 68.052471][ T5825] all: renamed from team_slave_0 (while UP) [ 68.084603][ T5832] loop1: detected capacity change from 0 to 2048 [ 68.101368][ T5834] loop4: detected capacity change from 0 to 128 [ 68.108171][ T5832] loop1: p1 < > p4 [ 68.112645][ T5832] loop1: p4 size 8388608 extends beyond EOD, truncated [ 68.125497][ T5832] netlink: 104 bytes leftover after parsing attributes in process `syz.1.734'. [ 68.310818][ T5856] loop4: detected capacity change from 0 to 2048 [ 68.320896][ T5856] EXT4-fs: Ignoring removed mblk_io_submit option [ 68.342765][ T5856] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 68.365064][ T5669] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.390765][ T5863] netlink: 8 bytes leftover after parsing attributes in process `syz.4.746'. [ 68.464679][ T5872] loop2: detected capacity change from 0 to 4096 [ 68.474197][ T5872] EXT4-fs: Ignoring removed nobh option [ 68.479845][ T5872] EXT4-fs: Ignoring removed i_version option [ 68.492077][ T5872] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 68.549949][ T4766] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.700099][ T5909] netlink: 32 bytes leftover after parsing attributes in process `syz.3.759'. [ 69.540767][ T5924] loop3: detected capacity change from 0 to 1024 [ 69.575935][ T5924] EXT4-fs: Ignoring removed orlov option [ 69.581740][ T5924] EXT4-fs: Ignoring removed nomblk_io_submit option [ 69.592014][ T5928] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12 sclass=netlink_route_socket pid=5928 comm=syz.2.769 [ 69.638875][ T29] kauditd_printk_skb: 33 callbacks suppressed [ 69.638891][ T29] audit: type=1400 audit(1721174790.958:938): avc: denied { bind } for pid=5929 comm="syz.0.770" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 69.664857][ T29] audit: type=1400 audit(1721174790.958:939): avc: denied { connect } for pid=5929 comm="syz.0.770" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 69.690128][ T29] audit: type=1400 audit(1721174791.018:940): avc: denied { getopt } for pid=5929 comm="syz.0.770" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 69.711353][ T5934] loop2: detected capacity change from 0 to 1024 [ 69.721825][ T5934] workqueue: Failed to create a rescuer kthread for wq "ext4-rsv-conversion": -EINTR [ 69.721877][ T5934] EXT4-fs: failed to create workqueue [ 69.730232][ T5924] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 69.731920][ T5934] EXT4-fs (loop2): mount failed [ 69.761797][ T3079] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.773304][ T5946] netlink: 4 bytes leftover after parsing attributes in process `syz.2.774'. [ 69.786437][ T29] audit: type=1326 audit(1721174791.108:941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5948 comm="syz.3.775" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff587c92bd9 code=0x0 [ 69.823298][ T5951] lo speed is unknown, defaulting to 1000 [ 69.932612][ T5954] netlink: 52 bytes leftover after parsing attributes in process `syz.1.777'. [ 70.022981][ T5960] netlink: 8 bytes leftover after parsing attributes in process `syz.1.779'. [ 70.136022][ T5974] loop4: detected capacity change from 0 to 164 [ 70.147845][ T5971] netlink: 92 bytes leftover after parsing attributes in process `syz.1.784'. [ 70.168831][ T29] audit: type=1326 audit(1721174791.498:942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5970 comm="syz.1.784" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3fd14abbd9 code=0x0 [ 70.168884][ T29] audit: type=1326 audit(1721174791.498:943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5970 comm="syz.1.784" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3fd14abbd9 code=0x0 [ 70.631374][ T29] audit: type=1400 audit(1721174791.958:944): avc: denied { create } for pid=6049 comm="syz.3.793" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 70.636941][ T6047] tap0: tun_chr_ioctl cmd 1074025675 [ 70.656233][ T6047] tap0: persist disabled [ 70.668547][ T29] audit: type=1400 audit(1721174791.958:945): avc: denied { connect } for pid=6046 comm="syz.0.792" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 70.823035][ T6079] loop3: detected capacity change from 0 to 512 [ 70.829749][ T6078] gretap0: entered promiscuous mode [ 70.839297][ T6079] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2234: inode #15: comm syz.3.798: corrupted in-inode xattr: bad e_name length [ 70.849674][ T6078] 0ªX¹¦D: renamed from gretap0 [ 70.860610][ T6078] 0ªX¹¦D: left promiscuous mode [ 70.863029][ T6079] EXT4-fs error (device loop3): ext4_orphan_get:1399: comm syz.3.798: couldn't read orphan inode 15 (err -117) [ 70.865566][ T6078] 0ªX¹¦D: entered allmulticast mode [ 70.871540][ T6078] A link change request failed with some changes committed already. Interface 30ªX¹¦D may have been left with an inconsistent configuration, please check. [ 70.888486][ T6079] EXT4-fs (loop3): mounted filesystem 00000004-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 70.922133][ T3079] EXT4-fs (loop3): unmounting filesystem 00000004-0000-0000-0000-000000000000. [ 71.012569][ T6109] loop3: detected capacity change from 0 to 512 [ 71.031395][ T6109] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 71.040565][ T6109] EXT4-fs (loop3): Couldn't mount because of unsupported optional features (fffc1829) [ 71.050186][ T6109] EXT4-fs (loop3): couldn't mount as ext3 due to feature incompatibilities [ 71.240852][ T6169] loop3: detected capacity change from 0 to 512 [ 71.241074][ T6117] netlink: 'syz.4.804': attribute type 12 has an invalid length. [ 71.254910][ T6117] netlink: 'syz.4.804': attribute type 29 has an invalid length. [ 71.255975][ T6169] EXT4-fs: Ignoring removed mblk_io_submit option [ 71.262657][ T6117] netlink: 'syz.4.804': attribute type 2 has an invalid length. [ 71.276839][ T6117] netlink: 'syz.4.804': attribute type 2 has an invalid length. [ 71.278089][ T6169] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 71.284454][ T6117] netlink: 'syz.4.804': attribute type 1 has an invalid length. [ 71.284466][ T6117] netlink: 'syz.4.804': attribute type 37 has an invalid length. [ 71.284476][ T6117] netlink: 'syz.4.804': attribute type 2 has an invalid length. [ 71.315731][ T6117] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.326871][ T6169] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=b042c118, mo2=0002] [ 71.339008][ T6169] System zones: 1-12 [ 71.344547][ T6169] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2234: inode #15: comm syz.3.809: corrupted in-inode xattr: e_value size too large [ 71.363465][ T6169] EXT4-fs error (device loop3): ext4_orphan_get:1399: comm syz.3.809: couldn't read orphan inode 15 (err -117) [ 71.384881][ T6169] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 71.417173][ T6175] gretap0: entered promiscuous mode [ 71.437797][ T3079] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.457777][ T6175] 0ªX¹¦D: renamed from gretap0 [ 71.471505][ T6175] 0ªX¹¦D: left promiscuous mode [ 71.476586][ T6175] 0ªX¹¦D: entered allmulticast mode [ 71.485460][ T6175] A link change request failed with some changes committed already. Interface 30ªX¹¦D may have been left with an inconsistent configuration, please check. [ 71.507954][ T6186] IPv6: NLM_F_CREATE should be specified when creating new route [ 71.550236][ T6190] loop3: detected capacity change from 0 to 512 [ 71.560795][ T6190] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 71.576886][ T6190] EXT4-fs error (device loop3): ext4_map_blocks:580: inode #2: block 3: comm syz.3.818: lblock 0 mapped to illegal pblock 3 (length 1) [ 71.591174][ T6190] EXT4-fs warning (device loop3): dx_probe:822: inode #2: lblock 0: comm syz.3.818: error -117 reading directory block [ 71.606479][ T6190] EXT4-fs error (device loop3): ext4_map_blocks:580: inode #2: block 3: comm syz.3.818: lblock 0 mapped to illegal pblock 3 (length 1) [ 71.612604][ T6200] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 71.632412][ T6190] EXT4-fs warning (device loop3): dx_probe:822: inode #2: lblock 0: comm syz.3.818: error -117 reading directory block [ 71.647236][ T6190] EXT4-fs error (device loop3): ext4_map_blocks:580: inode #2: block 3: comm syz.3.818: lblock 0 mapped to illegal pblock 3 (length 1) [ 71.671858][ T6190] EXT4-fs warning (device loop3): dx_probe:822: inode #2: lblock 0: comm syz.3.818: error -117 reading directory block [ 71.672239][ T6208] loop2: detected capacity change from 0 to 512 [ 71.686798][ T6190] EXT4-fs error (device loop3): ext4_map_blocks:580: inode #2: block 3: comm syz.3.818: lblock 0 mapped to illegal pblock 3 (length 1) [ 71.703555][ T6208] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2234: inode #15: comm syz.2.825: corrupted in-inode xattr: bad e_name length [ 71.704688][ T6190] EXT4-fs warning (device loop3): dx_probe:822: inode #2: lblock 0: comm syz.3.818: error -117 reading directory block [ 71.719351][ T6208] EXT4-fs error (device loop2): ext4_orphan_get:1399: comm syz.2.825: couldn't read orphan inode 15 (err -117) [ 71.735359][ T6190] EXT4-fs error (device loop3): ext4_map_blocks:580: inode #2: block 3: comm syz.3.818: lblock 0 mapped to illegal pblock 3 (length 1) [ 71.743113][ T6208] EXT4-fs (loop2): mounted filesystem 00000004-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 71.758360][ T6190] EXT4-fs warning (device loop3): dx_probe:822: inode #2: lblock 0: comm syz.3.818: error -117 reading directory block [ 71.786320][ T6190] EXT4-fs error (device loop3): ext4_map_blocks:580: inode #2: block 3: comm syz.3.818: lblock 0 mapped to illegal pblock 3 (length 1) [ 71.803533][ T4766] EXT4-fs (loop2): unmounting filesystem 00000004-0000-0000-0000-000000000000. [ 71.805253][ T6190] EXT4-fs warning (device loop3): dx_probe:822: inode #2: lblock 0: comm syz.3.818: error -117 reading directory block [ 71.826875][ T6219] loop1: detected capacity change from 0 to 1024 [ 71.827968][ T6190] EXT4-fs error (device loop3): ext4_map_blocks:580: inode #2: block 3: comm syz.3.818: lblock 0 mapped to illegal pblock 3 (length 1) [ 71.833493][ T6219] EXT4-fs: Ignoring removed orlov option [ 71.852796][ T6219] EXT4-fs: Ignoring removed nomblk_io_submit option [ 71.869069][ T6190] EXT4-fs warning (device loop3): dx_probe:822: inode #2: lblock 0: comm syz.3.818: error -117 reading directory block [ 71.884296][ T6190] EXT4-fs error (device loop3): ext4_map_blocks:580: inode #2: block 3: comm syz.3.818: lblock 0 mapped to illegal pblock 3 (length 1) [ 71.900900][ T6190] EXT4-fs warning (device loop3): dx_probe:822: inode #2: lblock 0: comm syz.3.818: error -117 reading directory block [ 71.914141][ T6190] EXT4-fs error (device loop3): ext4_map_blocks:580: inode #2: block 3: comm syz.3.818: lblock 0 mapped to illegal pblock 3 (length 1) [ 71.930253][ T6219] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 71.933760][ T6190] EXT4-fs warning (device loop3): dx_probe:822: inode #2: lblock 0: comm syz.3.818: error -117 reading directory block [ 71.963291][ T29] audit: type=1326 audit(1721174793.288:946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6239 comm="syz.0.836" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4197276bd9 code=0x7ffc0000 [ 71.986748][ T29] audit: type=1326 audit(1721174793.288:947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6239 comm="syz.0.836" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4197276bd9 code=0x7ffc0000 [ 72.014796][ T6190] EXT4-fs error (device loop3): ext4_map_blocks:580: inode #2: block 3: comm syz.3.818: lblock 0 mapped to illegal pblock 3 (length 1) [ 72.030075][ T4816] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.030570][ T6190] EXT4-fs warning (device loop3): dx_probe:822: inode #2: lblock 0: comm syz.3.818: error -117 reading directory block [ 72.072593][ T3079] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.090255][ T6252] loop3: detected capacity change from 0 to 512 [ 72.098256][ T6252] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2234: inode #15: comm syz.3.840: corrupted in-inode xattr: bad e_name length [ 72.112067][ T6252] EXT4-fs error (device loop3): ext4_orphan_get:1399: comm syz.3.840: couldn't read orphan inode 15 (err -117) [ 72.124885][ T6252] EXT4-fs (loop3): mounted filesystem 00000004-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 72.135279][ T6256] loop1: detected capacity change from 0 to 2048 [ 72.152498][ T3079] EXT4-fs (loop3): unmounting filesystem 00000004-0000-0000-0000-000000000000. [ 72.194121][ T6256] loop1: p1 p3 p4 < p5 p6 p7 p8 p9 p10 p11 p12 p13 p14 p15 p16 p17 p18 p19 p20 p21 p22 p23 p24 p25 p26 p27 p28 p29 p30 p31 p32 p33 p34 p35 p36 p37 p38 p39 p40 p41 p42 p43 p44 p45 p46 p47 p48 p49 p50 p51 p52 p53 p54 p55 p56 p57 p58 p59 p60 p61 p62 p63 p64 p65 p66 p67 p68 p69 p70 p71 p72 p73 p74 p75 p76 p77 p78 p79 p80 p81 p82 p83 p84 p85 p86 p87 p88 p89 p90 p91 p92 p93 p94 p95 p96 p97 p98 p99 p100 p101 p102 p103 p104 p105 p106 p107 p108 p109 p110 p111 p112 p113 p114 p115 p116 p117 p118 p119 p120 p121 p122 p123 p124 p125 p126 p127 p128 p129 p130 p131 p132 p133 p134 p135 p136 p137 p138 p139 p140 p141 p142 p143 p144 p145 p146 p147 p148 p149 p150 p151 p152 p153 p154 p155 p156 p157 p158 p159 p160 p161 p162 p163 p164 p165 p166 p167 p168 p169 p170 p171 p172 p173 p174 p175 p176 p177 p178 p179 p180 p181 p182 p183 p184 p185 p186 p187 p188 p189 p190 p191 p192 p193 p194 p195 p196 p197 p198 p199 p200 p201 p202 p203 p204 p205 p206 p207 p208 p209 p210 p211 p212 p213 p214 p215 p216 p217 p218 p219 p220 p221 p222 p223 p224 p2 [ 72.194925][ T6256] loop1: p3 start 4259840 is beyond EOD, truncated [ 72.393759][ T6270] __nla_validate_parse: 10 callbacks suppressed [ 72.393774][ T6270] netlink: 4 bytes leftover after parsing attributes in process `syz.1.838'. [ 72.617126][ T6291] loop4: detected capacity change from 0 to 512 [ 72.624674][ T6291] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2234: inode #15: comm syz.4.853: corrupted in-inode xattr: bad e_name length [ 72.638639][ T6291] EXT4-fs error (device loop4): ext4_orphan_get:1399: comm syz.4.853: couldn't read orphan inode 15 (err -117) [ 72.652278][ T6291] EXT4-fs (loop4): mounted filesystem 00000004-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 72.670498][ T5669] EXT4-fs (loop4): unmounting filesystem 00000004-0000-0000-0000-000000000000. [ 72.974922][ T6299] loop2: detected capacity change from 0 to 512 [ 72.982397][ T6299] EXT4-fs: Ignoring removed orlov option [ 72.991753][ T6299] EXT4-fs (loop2): Invalid log cluster size: 1537 [ 73.237700][ T6311] usb usb8: usbfs: interface 0 claimed by hub while 'syz.3.861' sets config #-1 [ 73.279901][ T6314] loop3: detected capacity change from 0 to 512 [ 73.287068][ T6314] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 not in group (block 0)! [ 73.297219][ T6314] EXT4-fs (loop3): group descriptors corrupted! [ 73.379968][ T6318] loop3: detected capacity change from 0 to 512 [ 73.387936][ T6318] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2234: inode #15: comm syz.3.864: corrupted in-inode xattr: bad e_name length [ 73.402923][ T6318] EXT4-fs error (device loop3): ext4_orphan_get:1399: comm syz.3.864: couldn't read orphan inode 15 (err -117) [ 73.416929][ T6318] EXT4-fs (loop3): mounted filesystem 00000004-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.438993][ T3079] EXT4-fs (loop3): unmounting filesystem 00000004-0000-0000-0000-000000000000. [ 73.578829][ T6327] loop3: detected capacity change from 0 to 2048 [ 73.632249][ T6327] loop3: p1 p3 p4 < p5 p6 p7 p8 p9 p10 p11 p12 p13 p14 p15 p16 p17 p18 p19 p20 p21 p22 p23 p24 p25 p26 p27 p28 p29 p30 p31 p32 p33 p34 p35 p36 p37 p38 p39 p40 p41 p42 p43 p44 p45 p46 p47 p48 p49 p50 p51 p52 p53 p54 p55 p56 p57 p58 p59 p60 p61 p62 p63 p64 p65 p66 p67 p68 p69 p70 p71 p72 p73 p74 p75 p76 p77 p78 p79 p80 p81 p82 p83 p84 p85 p86 p87 p88 p89 p90 p91 p92 p93 p94 p95 p96 p97 p98 p99 p100 p101 p102 p103 p104 p105 p106 p107 p108 p109 p110 p111 p112 p113 p114 p115 p116 p117 p118 p119 p120 p121 p122 p123 p124 p125 p126 p127 p128 p129 p130 p131 p132 p133 p134 p135 p136 p137 p138 p139 p140 p141 p142 p143 p144 p145 p146 p147 p148 p149 p150 p151 p152 p153 p154 p155 p156 p157 p158 p159 p160 p161 p162 p163 p164 p165 p166 p167 p168 p169 p170 p171 p172 p173 p174 p175 p176 p177 p178 p179 p180 p181 p182 p183 p184 p185 p186 p187 p188 p189 p190 p191 p192 p193 p194 p195 p196 p197 p198 p199 p200 p201 p202 p203 p204 p205 p206 p207 p208 p209 p210 p211 p212 p213 p214 p215 p216 p217 p218 p219 p220 p221 p222 p223 p224 p2 [ 73.635234][ T6327] loop3: p3 start 4259840 is beyond EOD, truncated [ 73.836110][ T6330] netlink: 4 bytes leftover after parsing attributes in process `syz.3.866'. [ 73.955556][ T6344] netlink: 8 bytes leftover after parsing attributes in process `syz.0.871'. [ 74.056700][ T6352] netlink: 72 bytes leftover after parsing attributes in process `syz.0.873'. [ 74.093785][ T6356] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 74.101602][ T6356] vhci_hcd: default hub control req: 0000 v0000 i0000 l0 [ 74.157367][ T6364] netlink: 4 bytes leftover after parsing attributes in process `syz.0.879'. [ 74.397691][ T6371] netlink: 24 bytes leftover after parsing attributes in process `syz.3.882'. [ 74.417033][ T6374] loop4: detected capacity change from 0 to 1024 [ 74.426939][ T6374] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 74.450115][ T5669] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.484145][ T6385] loop4: detected capacity change from 0 to 512 [ 74.490812][ T6385] EXT4-fs: Ignoring removed i_version option [ 74.496957][ T6385] EXT4-fs: Ignoring removed nobh option [ 74.502938][ T6385] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 74.514117][ T6385] EXT4-fs (loop4): 1 truncate cleaned up [ 74.521741][ T6385] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 74.536294][ T6385] 9pnet: p9_errstr2errno: server reported unknown error œæçæŒÎs• [ 74.553341][ T6385] lo speed is unknown, defaulting to 1000 [ 74.622142][ T5669] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.724973][ T6399] loop4: detected capacity change from 0 to 1764 [ 74.782463][ T6405] loop1: detected capacity change from 0 to 512 [ 74.791139][ T6405] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2234: inode #15: comm syz.1.893: corrupted in-inode xattr: bad e_name length [ 74.805100][ T6405] EXT4-fs error (device loop1): ext4_orphan_get:1399: comm syz.1.893: couldn't read orphan inode 15 (err -117) [ 74.817512][ T6405] EXT4-fs (loop1): mounted filesystem 00000004-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.851291][ T4816] EXT4-fs (loop1): unmounting filesystem 00000004-0000-0000-0000-000000000000. [ 74.855924][ T6415] 9pnet_fd: Insufficient options for proto=fd [ 74.878405][ T6415] 9pnet_fd: p9_fd_create_tcp (6415): problem connecting socket to 127.0.0.1 [ 74.890549][ T6415] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(9) [ 74.897087][ T6415] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 74.904510][ T6415] vhci_hcd vhci_hcd.0: Device attached [ 74.911605][ T6415] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 74.920291][ T6415] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 74.929128][ T6415] vhci_hcd vhci_hcd.0: pdev(4) rhport(3) sockfd(15) [ 74.935793][ T6415] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 74.939798][ T6421] loop1: detected capacity change from 0 to 2048 [ 74.943402][ T6415] vhci_hcd vhci_hcd.0: Device attached [ 74.959799][ T6415] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 74.968841][ T6415] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 74.977581][ T6415] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 74.986499][ T6415] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 74.992617][ T6421] loop1: p1 p3 p4 < p5 p6 p7 p8 p9 p10 p11 p12 p13 p14 p15 p16 p17 p18 p19 p20 p21 p22 p23 p24 p25 p26 p27 p28 p29 p30 p31 p32 p33 p34 p35 p36 p37 p38 p39 p40 p41 p42 p43 p44 p45 p46 p47 p48 p49 p50 p51 p52 p53 p54 p55 p56 p57 p58 p59 p60 p61 p62 p63 p64 p65 p66 p67 p68 p69 p70 p71 p72 p73 p74 p75 p76 p77 p78 p79 p80 p81 p82 p83 p84 p85 p86 p87 p88 p89 p90 p91 p92 p93 p94 p95 p96 p97 p98 p99 p100 p101 p102 p103 p104 p105 p106 p107 p108 p109 p110 p111 p112 p113 p114 p115 p116 p117 p118 p119 p120 p121 p122 p123 p124 p125 p126 p127 p128 p129 p130 p131 p132 p133 p134 p135 p136 p137 p138 p139 p140 p141 p142 p143 p144 p145 p146 p147 p148 p149 p150 p151 p152 p153 p154 p155 p156 p157 p158 p159 p160 p161 p162 p163 p164 p165 p166 p167 p168 p169 p170 p171 p172 p173 p174 p175 p176 p177 p178 p179 p180 p181 p182 p183 p184 p185 p186 p187 p188 p189 p190 p191 p192 p193 p194 p195 p196 p197 p198 p199 p200 p201 p202 p203 p204 p205 p206 p207 p208 p209 p210 p211 p212 p213 p214 p215 p216 p217 p218 p219 p220 p221 p222 p223 p224 p2 [ 74.995385][ T6421] loop1: p3 start 4259840 is beyond EOD, [ 74.996451][ T6415] vhci_hcd vhci_hcd.0: port 0 already used [ 75.086495][ T6421] truncated [ 75.104284][ T6422] vhci_hcd: connection closed [ 75.104332][ T3598] vhci_hcd: stop threads [ 75.113265][ T3598] vhci_hcd: release socket [ 75.117704][ T3598] vhci_hcd: disconnect device [ 75.122640][ T6419] vhci_hcd: connection closed [ 75.128356][ T3598] vhci_hcd: stop threads [ 75.137319][ T3598] vhci_hcd: release socket [ 75.141741][ T3598] vhci_hcd: disconnect device [ 75.176047][ T3165] vhci_hcd: vhci_device speed not set [ 75.193172][ T6434] netlink: 4 bytes leftover after parsing attributes in process `syz.1.897'. [ 75.707266][ T6452] loop4: detected capacity change from 0 to 512 [ 75.715113][ T6452] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2234: inode #15: comm syz.4.907: corrupted in-inode xattr: bad e_name length [ 75.729094][ T6452] EXT4-fs error (device loop4): ext4_orphan_get:1399: comm syz.4.907: couldn't read orphan inode 15 (err -117) [ 75.741500][ T6452] EXT4-fs (loop4): mounted filesystem 00000004-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 75.774799][ T5669] EXT4-fs (loop4): unmounting filesystem 00000004-0000-0000-0000-000000000000. [ 75.794949][ T6456] loop4: detected capacity change from 0 to 512 [ 75.810543][ T6456] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 75.823355][ T6456] ext4 filesystem being mounted at /38/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 75.860468][ T5669] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.197457][ T29] kauditd_printk_skb: 76 callbacks suppressed [ 76.197469][ T29] audit: type=1326 audit(1721174797.528:1024): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6478 comm="syz.0.915" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4197276bd9 code=0x0 [ 76.243189][ T6481] 9pnet_fd: Insufficient options for proto=fd [ 76.257214][ T6481] 9pnet_fd: p9_fd_create_tcp (6481): problem connecting socket to 127.0.0.1 [ 76.268317][ T6481] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(9) [ 76.274860][ T6481] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 76.282287][ T6481] vhci_hcd vhci_hcd.0: Device attached [ 76.288921][ T6481] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 76.297724][ T6481] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 76.306897][ T6481] vhci_hcd vhci_hcd.0: pdev(4) rhport(3) sockfd(15) [ 76.313510][ T6481] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 76.320957][ T6481] vhci_hcd vhci_hcd.0: Device attached [ 76.327806][ T6481] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 76.329510][ T6494] loop2: detected capacity change from 0 to 512 [ 76.336791][ T6481] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 76.343417][ T6494] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2234: inode #15: comm syz.2.919: corrupted in-inode xattr: bad e_name length [ 76.364926][ T6494] EXT4-fs error (device loop2): ext4_orphan_get:1399: comm syz.2.919: couldn't read orphan inode 15 (err -117) [ 76.372429][ T6481] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 76.377329][ T6494] EXT4-fs (loop2): mounted filesystem 00000004-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 76.391259][ T6481] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 76.412583][ T6481] vhci_hcd vhci_hcd.0: port 0 already used [ 76.419362][ T6487] vhci_hcd: connection closed [ 76.419484][ T6483] vhci_hcd: connection closed [ 76.419628][ T3600] vhci_hcd: stop threads [ 76.433137][ T3600] vhci_hcd: release socket [ 76.437680][ T3600] vhci_hcd: disconnect device [ 76.442835][ T3600] vhci_hcd: stop threads [ 76.447126][ T3600] vhci_hcd: release socket [ 76.451577][ T3600] vhci_hcd: disconnect device [ 76.462698][ T4766] EXT4-fs (loop2): unmounting filesystem 00000004-0000-0000-0000-000000000000. [ 76.488765][ T6502] loop2: detected capacity change from 0 to 128 [ 76.495630][ T6502] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 76.507018][ T6502] FAT-fs (loop2): error, fat_free_clusters: deleting FAT entry beyond EOF [ 76.515569][ T6502] FAT-fs (loop2): Filesystem has been set read-only [ 76.522608][ T6502] netlink: 'syz.2.921': attribute type 4 has an invalid length. [ 76.530469][ T6502] netlink: 148 bytes leftover after parsing attributes in process `syz.2.921'. [ 76.710478][ T6508] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.923'. [ 76.720021][ T6507] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.923'. [ 76.741688][ T6510] loop1: detected capacity change from 0 to 1024 [ 76.748380][ T6510] EXT4-fs: Ignoring removed orlov option [ 76.756726][ T6510] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 76.789216][ T6510] EXT4-fs error (device loop1): ext4_find_dest_de:2066: inode #2: block 16: comm syz.1.924: bad entry in directory: inode out of bounds - offset=76, inode=2320, rec_len=16, size=1024 fake=0 [ 76.810242][ T29] audit: type=1400 audit(1721174798.138:1025): avc: denied { create } for pid=6509 comm="syz.1.924" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 76.820848][ T6510] can0: slcan on ptm1. [ 76.885359][ T6509] can0 (unregistered): slcan off ptm1. [ 76.910937][ T4816] EXT4-fs error (device loop1): ext4_readdir:260: inode #2: block 16: comm syz-executor: path /94/file0: bad entry in directory: inode out of bounds - offset=76, inode=2320, rec_len=16, size=1024 fake=0 [ 76.933706][ T4816] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.080525][ T29] audit: type=1326 audit(1721174798.408:1026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6530 comm="syz.0.932" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4197276bd9 code=0x0 [ 77.181906][ T29] audit: type=1326 audit(1721174798.508:1027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6530 comm="syz.0.932" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4197276bd9 code=0x0 [ 77.216335][ T29] audit: type=1326 audit(1721174798.548:1028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6537 comm="syz.1.934" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3fd14abbd9 code=0x0 [ 77.455077][ T29] audit: type=1326 audit(1721174798.778:1029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6541 comm="syz.2.935" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9acb7efbd9 code=0x0 [ 77.896875][ T29] audit: type=1400 audit(1721174799.228:1030): avc: denied { unmount } for pid=5669 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 77.941049][ T6554] 9pnet_fd: Insufficient options for proto=fd [ 77.953193][ T6554] 9pnet_fd: p9_fd_create_tcp (6554): problem connecting socket to 127.0.0.1 [ 77.964128][ T6554] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(9) [ 77.970645][ T6554] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 77.978079][ T6554] vhci_hcd vhci_hcd.0: Device attached [ 77.985134][ T6554] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 77.994189][ T6554] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 77.998383][ T6555] __nla_validate_parse: 1 callbacks suppressed [ 77.998395][ T6555] netlink: 4 bytes leftover after parsing attributes in process `syz.0.938'. [ 78.003074][ T6554] vhci_hcd vhci_hcd.0: pdev(4) rhport(3) sockfd(15) [ 78.023700][ T6554] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 78.031111][ T6554] vhci_hcd vhci_hcd.0: Device attached [ 78.040905][ T6554] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 78.049671][ T6554] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 78.058885][ T6554] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 78.069721][ T6554] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 78.071372][ T6564] loop1: detected capacity change from 0 to 512 [ 78.078765][ T6554] vhci_hcd vhci_hcd.0: port 0 already used [ 78.085891][ T6564] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2234: inode #15: comm syz.1.942: corrupted in-inode xattr: bad e_name length [ 78.103504][ T6559] vhci_hcd: connection closed [ 78.103600][ T6556] vhci_hcd: connection closed [ 78.103645][ T3579] vhci_hcd: stop threads [ 78.110024][ T6564] EXT4-fs error (device loop1): ext4_orphan_get:1399: comm syz.1.942: couldn't read orphan inode 15 (err -117) [ 78.112956][ T3579] vhci_hcd: release socket [ 78.117759][ T6564] EXT4-fs (loop1): mounted filesystem 00000004-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 78.129023][ T3579] vhci_hcd: disconnect device [ 78.152089][ T3579] vhci_hcd: stop threads [ 78.156374][ T3579] vhci_hcd: release socket [ 78.160786][ T3579] vhci_hcd: disconnect device [ 78.170602][ T4816] EXT4-fs (loop1): unmounting filesystem 00000004-0000-0000-0000-000000000000. [ 78.185238][ T3149] vhci_hcd: vhci_device speed not set [ 78.186977][ T29] audit: type=1400 audit(1721174799.518:1031): avc: denied { read } for pid=6570 comm="syz.1.943" name="vsock" dev="devtmpfs" ino=231 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 78.213353][ T29] audit: type=1400 audit(1721174799.518:1032): avc: denied { open } for pid=6570 comm="syz.1.943" path="/dev/vsock" dev="devtmpfs" ino=231 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 78.246174][ T6575] loop1: detected capacity change from 0 to 256 [ 78.253431][ T6575] FAULT_INJECTION: forcing a failure. [ 78.253431][ T6575] name failslab, interval 1, probability 0, space 0, times 0 [ 78.266173][ T6575] CPU: 1 PID: 6575 Comm: syz.1.944 Not tainted 6.10.0-syzkaller-01155-gd67978318827 #0 [ 78.275868][ T6575] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 78.285925][ T6575] Call Trace: [ 78.289207][ T6575] [ 78.292135][ T6575] dump_stack_lvl+0xf2/0x150 [ 78.296738][ T6575] dump_stack+0x15/0x20 [ 78.300981][ T6575] should_fail_ex+0x229/0x230 [ 78.305675][ T6575] ? __d_alloc+0x3d/0x340 [ 78.310003][ T6575] __should_failslab+0x92/0xa0 [ 78.314822][ T6575] should_failslab+0x9/0x20 [ 78.319337][ T6575] kmem_cache_alloc_lru_noprof+0x51/0x2a0 [ 78.325131][ T6575] __d_alloc+0x3d/0x340 [ 78.329348][ T6575] ? __rcu_read_unlock+0x34/0x70 [ 78.334382][ T6575] d_alloc_parallel+0x54/0xc80 [ 78.339191][ T6575] ? __d_lookup_rcu_op_compare+0x21d/0x260 [ 78.345033][ T6575] ? lockref_get_not_dead+0x118/0x1b0 [ 78.350395][ T6575] ? down_read+0x171/0x4b0 [ 78.354886][ T6575] __lookup_slow+0x8d/0x250 [ 78.359380][ T6575] lookup_slow+0x3c/0x60 [ 78.363611][ T6575] walk_component+0x1f5/0x230 [ 78.368274][ T6575] ? path_lookupat+0xfd/0x2b0 [ 78.372952][ T6575] path_lookupat+0x10a/0x2b0 [ 78.377538][ T6575] filename_lookup+0x127/0x300 [ 78.382336][ T6575] user_path_at+0x3c/0x110 [ 78.386750][ T6575] do_sys_truncate+0x5b/0x130 [ 78.391442][ T6575] __x64_sys_truncate+0x31/0x40 [ 78.396284][ T6575] x64_sys_call+0x262f/0x2d60 [ 78.400950][ T6575] do_syscall_64+0xc9/0x1c0 [ 78.405444][ T6575] ? clear_bhb_loop+0x55/0xb0 [ 78.410107][ T6575] ? clear_bhb_loop+0x55/0xb0 [ 78.414768][ T6575] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 78.420655][ T6575] RIP: 0033:0x7f3fd14abbd9 [ 78.425128][ T6575] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 78.444731][ T6575] RSP: 002b:00007f3fd072d048 EFLAGS: 00000246 ORIG_RAX: 000000000000004c [ 78.453138][ T6575] RAX: ffffffffffffffda RBX: 00007f3fd1639f60 RCX: 00007f3fd14abbd9 [ 78.461138][ T6575] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000200000c0 [ 78.469115][ T6575] RBP: 00007f3fd072d0a0 R08: 0000000000000000 R09: 0000000000000000 [ 78.477128][ T6575] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 78.485082][ T6575] R13: 000000000000000b R14: 00007f3fd1639f60 R15: 00007ffee48c49d8 [ 78.493044][ T6575] [ 78.517871][ T6583] netlink: 4 bytes leftover after parsing attributes in process `syz.2.947'. [ 78.538056][ T29] audit: type=1400 audit(1721174799.868:1033): avc: denied { wake_alarm } for pid=6589 comm="syz.1.949" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 78.593304][ T6598] loop2: detected capacity change from 0 to 512 [ 78.601142][ T6598] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2234: inode #15: comm syz.2.953: corrupted in-inode xattr: bad e_name length [ 78.615653][ T6598] EXT4-fs error (device loop2): ext4_orphan_get:1399: comm syz.2.953: couldn't read orphan inode 15 (err -117) [ 78.628610][ T6598] EXT4-fs (loop2): mounted filesystem 00000004-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 78.655983][ T6606] bond1: entered promiscuous mode [ 78.661043][ T6606] bond1: entered allmulticast mode [ 78.666685][ T6606] 8021q: adding VLAN 0 to HW filter on device bond1 [ 78.667594][ T4766] EXT4-fs (loop2): unmounting filesystem 00000004-0000-0000-0000-000000000000. [ 78.686701][ T6606] bond1 (unregistering): Released all slaves [ 78.811046][ T6619] loop1: detected capacity change from 0 to 256 [ 78.817835][ T6619] FAT-fs (loop1): bogus number of FAT structure [ 78.824086][ T6619] FAT-fs (loop1): This doesn't look like a DOS 1.x volume; no bootstrapping code [ 78.833244][ T6619] FAT-fs (loop1): Can't find a valid FAT filesystem [ 78.930284][ T6621] loop2: detected capacity change from 0 to 2048 [ 78.947612][ T6621] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 79.314277][ T6637] loop4: detected capacity change from 0 to 512 [ 79.321892][ T6637] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2234: inode #15: comm syz.4.967: corrupted in-inode xattr: bad e_name length [ 79.335659][ T6637] EXT4-fs error (device loop4): ext4_orphan_get:1399: comm syz.4.967: couldn't read orphan inode 15 (err -117) [ 79.348141][ T6637] EXT4-fs (loop4): mounted filesystem 00000004-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 79.376346][ T5669] EXT4-fs (loop4): unmounting filesystem 00000004-0000-0000-0000-000000000000. [ 79.526413][ T6645] netlink: 36 bytes leftover after parsing attributes in process `syz.4.970'. [ 79.602906][ T4766] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.681340][ T6665] netlink: 560 bytes leftover after parsing attributes in process `syz.1.979'. [ 79.699249][ T6665] loop1: detected capacity change from 0 to 512 [ 79.722630][ T6665] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 79.736318][ T6665] EXT4-fs (loop1): orphan cleanup on readonly fs [ 79.750240][ T6665] EXT4-fs warning (device loop1): ext4_enable_quotas:7062: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 79.772061][ T6665] EXT4-fs (loop1): Cannot turn on quotas: error -22 [ 79.787763][ T6665] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.979: bg 0: block 40: padding at end of block bitmap is not set [ 79.811150][ T6665] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6551: Corrupt filesystem [ 79.824503][ T6665] EXT4-fs (loop1): 1 truncate cleaned up [ 79.840575][ T6665] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 79.864962][ T4816] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.877359][ T6691] usb usb5: usbfs: process 6691 (syz.0.984) did not claim interface 0 before use [ 79.946722][ T6700] loop1: detected capacity change from 0 to 2048 [ 79.954468][ T6702] tipc: Started in network mode [ 79.959476][ T6702] tipc: Node identity 1, cluster identity 4711 [ 79.965665][ T6702] tipc: Node number set to 1 [ 79.991814][ T6700] loop1: p1 p3 p4 < p5 p6 p7 p8 p9 p10 p11 p12 p13 p14 p15 p16 p17 p18 p19 p20 p21 p22 p23 p24 p25 p26 p27 p28 p29 p30 p31 p32 p33 p34 p35 p36 p37 p38 p39 p40 p41 p42 p43 p44 p45 p46 p47 p48 p49 p50 p51 p52 p53 p54 p55 p56 p57 p58 p59 p60 p61 p62 p63 p64 p65 p66 p67 p68 p69 p70 p71 p72 p73 p74 p75 p76 p77 p78 p79 p80 p81 p82 p83 p84 p85 p86 p87 p88 p89 p90 p91 p92 p93 p94 p95 p96 p97 p98 p99 p100 p101 p102 p103 p104 p105 p106 p107 p108 p109 p110 p111 p112 p113 p114 p115 p116 p117 p118 p119 p120 p121 p122 p123 p124 p125 p126 p127 p128 p129 p130 p131 p132 p133 p134 p135 p136 p137 p138 p139 p140 p141 p142 p143 p144 p145 p146 p147 p148 p149 p150 p151 p152 p153 p154 p155 p156 p157 p158 p159 p160 p161 p162 p163 p164 p165 p166 p167 p168 p169 p170 p171 p172 p173 p174 p175 p176 p177 p178 p179 p180 p181 p182 p183 p184 p185 p186 p187 p188 p189 p190 p191 p192 p193 p194 p195 p196 p197 p198 p199 p200 p201 p202 p203 p204 p205 p206 p207 p208 p209 p210 p211 p212 p213 p214 p215 p216 p217 p218 p219 p220 p221 p222 p223 p224 p2 [ 79.992318][ T6700] loop1: p3 start 4259840 is beyond EOD, truncated [ 80.193961][ T6700] netlink: 4 bytes leftover after parsing attributes in process `syz.1.985'. [ 81.654028][ T6756] loop1: detected capacity change from 0 to 1024 [ 81.663224][ T6756] loop1: detected capacity change from 0 to 128 [ 81.734604][ T6759] 9pnet_fd: p9_fd_create_tcp (6759): problem connecting socket to 127.0.0.1 [ 81.744952][ T6759] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(11) [ 81.751614][ T6759] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 81.759078][ T6759] vhci_hcd vhci_hcd.0: Device attached [ 81.765423][ T6759] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 81.773899][ T6759] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 81.782586][ T6759] vhci_hcd vhci_hcd.0: pdev(1) rhport(3) sockfd(17) [ 81.789171][ T6759] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 81.796638][ T6759] vhci_hcd vhci_hcd.0: Device attached [ 81.802654][ T6759] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 81.811185][ T6759] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 81.819647][ T6759] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 81.828302][ T6759] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 81.837391][ T6759] vhci_hcd vhci_hcd.0: port 0 already used [ 81.956015][ T6774] xt_CT: You must specify a L4 protocol and not use inversions on it [ 81.975832][ T3149] vhci_hcd: vhci_device speed not set [ 82.047399][ T3149] usb 3-1: new full-speed USB device number 2 using vhci_hcd [ 82.052508][ T29] kauditd_printk_skb: 10 callbacks suppressed [ 82.052521][ T29] audit: type=1400 audit(1721174803.378:1044): avc: denied { setattr } for pid=6783 comm="syz.0.1017" name="urandom" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 82.376286][ T6813] IPv6: Can't replace route, no match found [ 82.512431][ T6762] vhci_hcd: connection closed [ 82.512468][ T6760] vhci_hcd: connection reset by peer [ 82.523700][ T3579] vhci_hcd: stop threads [ 82.528190][ T3579] vhci_hcd: release socket [ 82.532601][ T3579] vhci_hcd: disconnect device [ 82.543079][ T3579] vhci_hcd: stop threads [ 82.547421][ T3579] vhci_hcd: release socket [ 82.551990][ T3579] vhci_hcd: disconnect device [ 82.677064][ T6841] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:0603:0000:0023 with DS=0x3f [ 82.900808][ T6864] netlink: 'syz.0.1051': attribute type 10 has an invalid length. [ 82.915446][ T6864] geneve1: entered promiscuous mode [ 82.928921][ T6864] bond0: (slave geneve1): Enslaving as an active interface with an up link [ 82.962897][ T6871] veth0_vlan: entered allmulticast mode [ 83.006637][ T6871] veth0_vlan: left promiscuous mode [ 83.019029][ T6871] veth0_vlan: entered promiscuous mode [ 83.126340][ T6891] bridge0: port 3(ip6gretap0) entered blocking state [ 83.133085][ T6891] bridge0: port 3(ip6gretap0) entered disabled state [ 83.141395][ T6891] ip6gretap0: entered allmulticast mode [ 83.149252][ T6891] ip6gretap0: entered promiscuous mode [ 83.155475][ T6891] bridge0: port 3(ip6gretap0) entered blocking state [ 83.162183][ T6891] bridge0: port 3(ip6gretap0) entered forwarding state [ 83.204861][ T6905] netlink: 'syz.0.1068': attribute type 29 has an invalid length. [ 83.213461][ T6905] netlink: 'syz.0.1068': attribute type 29 has an invalid length. [ 83.221990][ T6905] netlink: 'syz.0.1068': attribute type 29 has an invalid length. [ 84.152141][ C0] TCP: request_sock_TCP: Possible SYN flooding on port [::]:2. Sending cookies. [ 84.191979][ T4766] syz_tun (unregistering): left promiscuous mode [ 84.257485][ T6953] lo speed is unknown, defaulting to 1000 [ 84.337861][ T6953] chnl_net:caif_netlink_parms(): no params data found [ 84.369609][ T6953] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.376862][ T6953] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.384122][ T6953] bridge_slave_0: entered allmulticast mode [ 84.390510][ T6953] bridge_slave_0: entered promiscuous mode [ 84.397777][ T6953] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.404998][ T6953] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.412504][ T6953] bridge_slave_1: entered allmulticast mode [ 84.419145][ T6953] bridge_slave_1: entered promiscuous mode [ 84.439497][ T6953] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.449948][ T6953] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.471848][ T6953] team0: Port device team_slave_0 added [ 84.478906][ T6953] team0: Port device team_slave_1 added [ 84.503584][ T6953] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.510586][ T6953] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.536619][ T6953] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.551522][ T6953] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.558679][ T6953] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.584687][ T6953] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.623264][ T6953] hsr_slave_0: entered promiscuous mode [ 84.630033][ T6953] hsr_slave_1: entered promiscuous mode [ 84.637916][ T6953] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 84.651761][ T6953] Cannot create hsr debugfs directory [ 84.759365][ T7034] lo speed is unknown, defaulting to 1000 [ 84.782091][ T6953] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.872612][ T6953] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.912324][ T7034] chnl_net:caif_netlink_parms(): no params data found [ 84.948846][ T6953] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.953580][ C0] TCP: request_sock_TCP: Possible SYN flooding on port [::]:2. Sending cookies. [ 85.001335][ T7034] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.008470][ T7034] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.015768][ T7034] bridge_slave_0: entered allmulticast mode [ 85.022020][ T7034] bridge_slave_0: entered promiscuous mode [ 85.046276][ T6953] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.067816][ T7034] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.074911][ T7034] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.084805][ T7034] bridge_slave_1: entered allmulticast mode [ 85.091476][ T7034] bridge_slave_1: entered promiscuous mode [ 85.131126][ T6953] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 85.144990][ T7034] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.154423][ T6953] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 85.166128][ T7034] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.175611][ T6953] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 85.190299][ T6953] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 85.204527][ T7034] team0: Port device team_slave_0 added [ 85.214105][ T7034] team0: Port device team_slave_1 added [ 85.224371][ T6953] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.231475][ T6953] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.238817][ T6953] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.245983][ T6953] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.275583][ T3156] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.295958][ T3156] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.326577][ T7034] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.333588][ T7034] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.359529][ T7034] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.398851][ T7034] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.405910][ T7034] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.432103][ T7034] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.507163][ T7034] hsr_slave_0: entered promiscuous mode [ 85.525450][ T7034] hsr_slave_1: entered promiscuous mode [ 85.531420][ T7034] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 85.539552][ T7034] Cannot create hsr debugfs directory [ 85.563641][ T6953] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.604176][ T6953] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.624605][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.631725][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.648327][ T3156] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.655469][ T3156] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.694529][ T6953] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 85.704985][ T6953] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 85.724796][ T7034] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.757178][ T7034] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.790697][ T6953] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.827988][ T7034] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.874971][ T6953] veth0_vlan: entered promiscuous mode [ 85.885719][ T6953] veth1_vlan: entered promiscuous mode [ 85.893157][ T7034] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.918618][ T6953] veth0_macvtap: entered promiscuous mode [ 85.926267][ T6953] veth1_macvtap: entered promiscuous mode [ 85.937759][ T6953] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.948215][ T6953] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.958116][ T6953] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.968568][ T6953] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.978420][ T6953] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.988847][ T6953] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.998664][ T6953] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.009154][ T6953] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.018973][ T6953] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.029438][ T6953] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.039290][ T6953] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.049862][ T6953] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.061724][ T6953] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.070600][ T6953] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.081097][ T6953] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.090911][ T6953] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.101364][ T6953] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.111339][ T6953] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.121763][ T6953] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.131582][ T6953] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.142093][ T6953] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.151991][ T6953] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.162525][ T6953] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.172424][ T6953] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.182854][ T6953] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.194642][ T6953] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.208966][ T6953] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.217741][ T6953] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.226601][ T6953] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.235338][ T6953] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.262695][ T7034] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 86.287675][ T7034] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 86.303404][ T7034] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 86.319297][ T7034] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 86.420808][ T7034] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.446363][ T7034] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.466740][ T4801] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.473862][ T4801] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.503136][ T24] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.510242][ T24] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.544143][ T7034] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 86.554583][ T7034] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 86.749121][ T7034] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.851627][ T29] audit: type=1400 audit(1721174808.178:1045): avc: denied { mounton } for pid=7158 comm="syz.2.1150" path="/proc/14/task" dev="proc" ino=17705 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 87.112458][ T3149] usb 3-1: enqueue for inactive port 0 [ 87.118012][ T3149] usb 3-1: enqueue for inactive port 0 [ 87.167952][ T7034] veth0_vlan: entered promiscuous mode [ 87.196515][ T7034] veth1_vlan: entered promiscuous mode [ 87.216619][ T3149] vhci_hcd: vhci_device speed not set [ 87.229625][ T7034] veth0_macvtap: entered promiscuous mode [ 87.262247][ T7034] veth1_macvtap: entered promiscuous mode [ 87.292918][ T7034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.303440][ T7034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.313259][ T7034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.324209][ T7034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.334065][ T7034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.344562][ T7034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.354944][ T7034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.365685][ T7034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.375520][ T7034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.386020][ T7034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.395842][ T7034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.406334][ T7034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.416596][ T7034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.427060][ T7034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.440222][ T7034] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.451132][ T7034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.461584][ T7034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.471406][ T7034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.481910][ T7034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.491736][ T7034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.502227][ T7034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.512143][ T7034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.522586][ T7034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.532424][ T7034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.542909][ T7034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.552730][ T7034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.563316][ T7034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.573163][ T7034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.583598][ T7034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.604940][ T7184] openvswitch: netlink: Tunnel attr 10 has unexpected len 0 expected 2 [ 87.627599][ T29] audit: type=1400 audit(1721174808.958:1046): avc: denied { read } for pid=7183 comm="syz.4.1153" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 87.634810][ T7034] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.656956][ T7034] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.665722][ T7034] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.674427][ T7034] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.683166][ T7034] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.695708][ T7186] loop2: detected capacity change from 0 to 256 [ 87.702143][ T7186] vfat: Bad value for 'fmask' [ 87.718684][ T7180] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 87.726274][ T7180] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 87.727979][ T7187] loop2: detected capacity change from 0 to 2048 [ 87.742244][ T7187] EXT4-fs (loop2): couldn't mount as ext3 due to feature incompatibilities [ 87.751286][ T7180] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 87.758748][ T7180] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 87.907278][ C0] TCP: request_sock_TCP: Possible SYN flooding on port [::]:2. Sending cookies. [ 87.993010][ T7227] loop4: detected capacity change from 0 to 512 [ 88.010597][ T7227] EXT4-fs: Ignoring removed mblk_io_submit option [ 88.044321][ T7227] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 88.054005][ T29] audit: type=1400 audit(1721174809.378:1047): avc: denied { listen } for pid=7238 comm="syz.3.1172" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 88.072304][ T7227] EXT4-fs (loop4): 1 truncate cleaned up [ 88.091552][ T7227] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 88.097947][ T7244] 9pnet_fd: Insufficient options for proto=fd [ 88.193430][ T29] audit: type=1400 audit(1721174809.518:1048): avc: denied { read } for pid=7243 comm="syz.2.1175" name="/" dev="configfs" ino=209 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 88.254815][ T7248] loop3: detected capacity change from 0 to 256 [ 88.264396][ T29] audit: type=1400 audit(1721174809.548:1049): avc: denied { open } for pid=7243 comm="syz.2.1175" path="/13/file0" dev="configfs" ino=209 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 88.275473][ T7248] vfat: Unknown parameter '/dev/cpu/#/msr' [ 88.287098][ T29] audit: type=1400 audit(1721174809.548:1050): avc: denied { search } for pid=7243 comm="syz.2.1175" name="/" dev="configfs" ino=209 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 88.346805][ T7251] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=7251 comm=syz.0.1173 [ 88.649088][ T7263] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1182'. [ 88.708288][ T7265] loop1: detected capacity change from 0 to 512 [ 88.723797][ T7265] EXT4-fs: Ignoring removed mblk_io_submit option [ 88.749735][ T7265] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 88.759538][ T7265] EXT4-fs (loop1): 1 truncate cleaned up [ 88.918195][ T7281] 9pnet_fd: Insufficient options for proto=fd [ 88.920639][ T7280] loop3: detected capacity change from 0 to 512 [ 88.932439][ T7280] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 88.965453][ T7280] ext4 filesystem being mounted at /4/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 89.010513][ T7296] loop1: detected capacity change from 0 to 512 [ 89.032374][ T7296] ext4 filesystem being mounted at /151/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 89.054827][ T29] audit: type=1400 audit(1721174810.378:1051): avc: denied { setattr } for pid=7294 comm="syz.1.1193" name="cgroup.controllers" dev="loop1" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 90.392735][ T29] audit: type=1400 audit(1721174811.713:1052): avc: denied { map } for pid=7411 comm="syz.4.1235" path="socket:[19333]" dev="sockfs" ino=19333 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 90.484038][ T29] audit: type=1400 audit(1721174811.802:1053): avc: denied { write } for pid=7431 comm="syz.2.1244" name="rdma_cm" dev="devtmpfs" ino=225 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 90.509949][ T29] audit: type=1400 audit(1721174811.822:1054): avc: denied { setopt } for pid=7434 comm="syz.4.1246" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 90.576838][ T29] audit: type=1400 audit(1721174811.891:1055): avc: denied { ioctl } for pid=7452 comm="syz.4.1254" path="socket:[19395]" dev="sockfs" ino=19395 ioctlcmd=0x662b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 90.640649][ T7465] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 90.726341][ T7488] lo speed is unknown, defaulting to 1000 [ 91.065847][ T7506] lo speed is unknown, defaulting to 1000 [ 91.904993][ T7588] syzkaller0: entered promiscuous mode [ 91.910500][ T7588] syzkaller0: entered allmulticast mode [ 91.930795][ T7592] bond_slave_1: mtu less than device minimum [ 92.019022][ T7604] lo speed is unknown, defaulting to 1000 [ 92.126173][ T7611] veth1_macvtap: left promiscuous mode [ 92.140710][ T7614] bond_slave_1: mtu less than device minimum [ 92.153179][ T7611] veth1_macvtap: entered promiscuous mode [ 92.159081][ T7611] macsec0: entered promiscuous mode [ 92.164565][ T7611] macsec0: entered allmulticast mode [ 92.169859][ T7611] veth1_macvtap: entered allmulticast mode [ 92.269588][ T7633] loop1: detected capacity change from 0 to 2048 [ 92.304124][ T7633] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 92.345966][ T7644] loop1: detected capacity change from 0 to 128 [ 92.869097][ T7677] veth0_to_team: entered promiscuous mode [ 92.875380][ T7677] veth0_to_team: entered allmulticast mode [ 92.955022][ T7682] veth0_vlan: entered allmulticast mode [ 93.099371][ T7690] lo speed is unknown, defaulting to 1000 [ 93.179950][ T7698] rose0: tun_chr_ioctl cmd 1074025677 [ 93.200456][ T7698] rose0: linktype set to 825 [ 93.294644][ T7719] x_tables: unsorted entry at hook 2 [ 93.294731][ T7717] smc: net device batadv_slave_1 applied user defined pnetid SYZ2 [ 93.548603][ T29] kauditd_printk_skb: 8 callbacks suppressed [ 93.548617][ T29] audit: type=1400 audit(1721174814.849:1064): avc: denied { read } for pid=7759 comm="syz.1.1378" path="socket:[19887]" dev="sockfs" ino=19887 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 93.610978][ T7767] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1379'. [ 93.620041][ T7767] lo speed is unknown, defaulting to 1000 [ 93.865584][ T7802] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1390'. [ 94.038484][ T7826] loop2: detected capacity change from 0 to 512 [ 94.044952][ T7826] EXT4-fs: Ignoring removed mblk_io_submit option [ 94.052955][ T7826] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a064e09c, mo2=0002] [ 94.061596][ T7826] System zones: 1-12 [ 94.065886][ T7826] EXT4-fs error (device loop2): ext4_orphan_get:1394: inode #15: comm syz.2.1398: casefold flag without casefold feature [ 94.079369][ T7826] EXT4-fs error (device loop2): ext4_orphan_get:1399: comm syz.2.1398: couldn't read orphan inode 15 (err -117) [ 94.805128][ T7864] loop4: detected capacity change from 0 to 128 [ 95.109166][ T29] audit: type=1400 audit(1721174816.109:1065): avc: denied { relabelfrom } for pid=7858 comm="syz.1.1412" name="" dev="pipefs" ino=20873 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 95.753959][ T7877] loop3: detected capacity change from 0 to 128 [ 95.993535][ T7880] loop4: detected capacity change from 0 to 2048 [ 96.015265][ T7880] EXT4-fs (loop4): can't mount with journal_async_commit, fs mounted w/o journal [ 96.173480][ T7900] loop2: detected capacity change from 0 to 128 [ 96.281017][ T7903] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 96.803128][ T29] audit: type=1400 audit(1721174818.075:1066): avc: denied { write } for pid=7927 comm="syz.2.1436" lport=56128 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 96.840550][ T29] audit: type=1400 audit(1721174818.095:1067): avc: denied { setopt } for pid=7927 comm="syz.2.1436" lport=56128 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 96.864565][ T7933] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.871885][ T7933] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.896950][ T7933] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.904098][ T7933] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.911438][ T7933] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.918538][ T7933] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.927156][ T7933] bridge0: entered promiscuous mode [ 96.932414][ T7933] bridge0: entered allmulticast mode [ 97.009667][ T7961] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1450'. [ 97.066183][ T7967] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1452'. [ 97.074435][ T7977] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1456'. [ 97.106690][ T7983] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1460'. [ 97.222452][ T7998] 9pnet_fd: p9_fd_create_tcp (7998): problem connecting socket to 127.0.0.1 [ 97.236811][ T8000] loop2: detected capacity change from 0 to 512 [ 97.252930][ T8000] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2234: inode #15: comm syz.2.1466: corrupted in-inode xattr: bad e_name length [ 97.253377][ T7998] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(11) [ 97.268434][ T8000] EXT4-fs error (device loop2): ext4_orphan_get:1399: comm syz.2.1466: couldn't read orphan inode 15 (err -117) [ 97.273145][ T7998] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 97.273369][ T7998] vhci_hcd vhci_hcd.0: Device attached [ 97.300715][ T7998] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 97.353968][ T29] audit: type=1400 audit(1721174818.621:1068): avc: denied { mount } for pid=7990 comm="syz.0.1463" name="/" dev="gadgetfs" ino=21102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 97.406488][ T7998] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 97.431965][ T8000] EXT4-fs mount: 11 callbacks suppressed [ 97.431979][ T8000] EXT4-fs (loop2): mounted filesystem 00000004-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 97.481565][ T7998] vhci_hcd vhci_hcd.0: pdev(3) rhport(3) sockfd(17) [ 97.488186][ T7998] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 97.495755][ T7998] vhci_hcd vhci_hcd.0: Device attached [ 97.501680][ T35] vhci_hcd: vhci_device speed not set [ 97.561351][ T8010] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 97.583888][ T35] usb 7-1: new full-speed USB device number 3 using vhci_hcd [ 97.608080][ T6953] EXT4-fs (loop2): unmounting filesystem 00000004-0000-0000-0000-000000000000. [ 97.618739][ T7998] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 97.627788][ T7998] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 97.641796][ T7998] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 97.653643][ T7998] vhci_hcd vhci_hcd.0: port 0 already used [ 97.674726][ T8014] loop2: detected capacity change from 0 to 2048 [ 97.706074][ T8014] loop2: p1 < > p4 [ 97.710408][ T8014] loop2: p4 size 8388608 extends beyond EOD, truncated [ 97.735493][ T8017] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1468'. [ 97.837711][ T29] audit: type=1326 audit(1721174819.108:1069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8025 comm="syz.4.1472" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1083856bd9 code=0x0 [ 97.984423][ T8007] vhci_hcd: connection closed [ 97.984814][ T8004] vhci_hcd: connection reset by peer [ 97.995216][ T3579] vhci_hcd: stop threads [ 97.999688][ T3579] vhci_hcd: release socket [ 98.004229][ T3579] vhci_hcd: disconnect device [ 98.018410][ T3579] vhci_hcd: stop threads [ 98.022761][ T3579] vhci_hcd: release socket [ 98.027348][ T3579] vhci_hcd: disconnect device [ 98.562890][ T8038] loop1: detected capacity change from 0 to 2048 [ 98.616361][ T8040] smc: net device ip6gre0 applied user defined pnetid SYZ0 [ 98.632477][ T8038] loop1: p1 p3 p4 < p5 p6 p7 p8 p9 p10 p11 p12 p13 p14 p15 p16 p17 p18 p19 p20 p21 p22 p23 p24 p25 p26 p27 p28 p29 p30 p31 p32 p33 p34 p35 p36 p37 p38 p39 p40 p41 p42 p43 p44 p45 p46 p47 p48 p49 p50 p51 p52 p53 p54 p55 p56 p57 p58 p59 p60 p61 p62 p63 p64 p65 p66 p67 p68 p69 p70 p71 p72 p73 p74 p75 p76 p77 p78 p79 p80 p81 p82 p83 p84 p85 p86 p87 p88 p89 p90 p91 p92 p93 p94 p95 p96 p97 p98 p99 p100 p101 p102 p103 p104 p105 p106 p107 p108 p109 p110 p111 p112 p113 p114 p115 p116 p117 p118 p119 p120 p121 p122 p123 p124 p125 p126 p127 p128 p129 p130 p131 p132 p133 p134 p135 p136 p137 p138 p139 p140 p141 p142 p143 p144 p145 p146 p147 p148 p149 p150 p151 p152 p153 p154 p155 p156 p157 p158 p159 p160 p161 p162 p163 p164 p165 p166 p167 p168 p169 p170 p171 p172 p173 p174 p175 p176 p177 p178 p179 p180 p181 p182 p183 p184 p185 p186 p187 p188 p189 p190 p191 p192 p193 p194 p195 p196 p197 p198 p199 p200 p201 p202 p203 p204 p205 p206 p207 p208 p209 p210 p211 p212 p213 p214 p215 p216 p217 p218 p219 p220 p221 p222 p223 p224 p2 [ 98.633511][ T8042] loop2: detected capacity change from 0 to 512 [ 98.640438][ T8038] loop1: p3 start 4259840 is beyond EOD, truncated [ 98.753743][ T8044] loop3: detected capacity change from 0 to 2048 [ 98.762050][ T8042] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2234: inode #15: comm syz.2.1477: corrupted in-inode xattr: bad e_name length [ 98.777096][ T8042] EXT4-fs error (device loop2): ext4_orphan_get:1399: comm syz.2.1477: couldn't read orphan inode 15 (err -117) [ 98.789613][ T8049] loop4: detected capacity change from 0 to 512 [ 98.796892][ T8044] loop3: p1 < > p4 [ 98.801467][ T8042] EXT4-fs (loop2): mounted filesystem 00000004-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 98.801794][ T8044] loop3: p4 size 8388608 extends beyond EOD, truncated [ 98.826079][ T8052] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1475'. [ 98.827955][ T8049] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 98.867506][ T6953] EXT4-fs (loop2): unmounting filesystem 00000004-0000-0000-0000-000000000000. [ 98.930206][ T8064] netlink: 'syz.3.1482': attribute type 1 has an invalid length. [ 98.938420][ T8064] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1482'. [ 98.948300][ T5669] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.015569][ T29] audit: type=1326 audit(1721174820.270:1070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8081 comm="syz.0.1490" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4197276bd9 code=0x0 [ 99.017083][ T8082] loop3: detected capacity change from 0 to 512 [ 99.046640][ T8082] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2234: inode #15: comm syz.3.1491: corrupted in-inode xattr: bad e_name length [ 99.060814][ T8082] EXT4-fs error (device loop3): ext4_orphan_get:1399: comm syz.3.1491: couldn't read orphan inode 15 (err -117) [ 99.075388][ T8082] EXT4-fs (loop3): mounted filesystem 00000004-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 99.076665][ T8085] 9pnet_fd: p9_fd_create_tcp (8085): problem connecting socket to 127.0.0.1 [ 99.108402][ T8085] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(11) [ 99.115043][ T8085] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 99.122490][ T8085] vhci_hcd vhci_hcd.0: Device attached [ 99.128554][ T8085] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 99.137110][ T7034] EXT4-fs (loop3): unmounting filesystem 00000004-0000-0000-0000-000000000000. [ 99.137361][ T8085] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 99.158594][ T8085] vhci_hcd vhci_hcd.0: pdev(4) rhport(3) sockfd(17) [ 99.165234][ T8085] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 99.172705][ T8085] vhci_hcd vhci_hcd.0: Device attached [ 99.180202][ T8085] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 99.183407][ T8096] loop3: detected capacity change from 0 to 2048 [ 99.188743][ T8085] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 99.205182][ T8085] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 99.213815][ T8085] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 99.222835][ T8085] vhci_hcd vhci_hcd.0: port 0 already used [ 99.255833][ T8096] loop3: p1 < > p4 [ 99.264070][ T8096] loop3: p4 size 8388608 extends beyond EOD, truncated [ 99.427499][ T4801] vhci_hcd: vhci_device speed not set [ 99.498366][ T4801] usb 9-1: new full-speed USB device number 6 using vhci_hcd [ 99.811693][ T8091] vhci_hcd: connection closed [ 99.811767][ T8089] vhci_hcd: connection reset by peer [ 99.821902][ T3579] vhci_hcd: stop threads [ 99.826166][ T3579] vhci_hcd: release socket [ 99.830681][ T3579] vhci_hcd: disconnect device [ 99.835704][ T3579] vhci_hcd: stop threads [ 99.840031][ T3579] vhci_hcd: release socket [ 99.844435][ T3579] vhci_hcd: disconnect device [ 99.909675][ T8114] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1500'. [ 99.949691][ T8118] loop2: detected capacity change from 0 to 512 [ 99.957759][ T8118] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2234: inode #15: comm syz.2.1502: corrupted in-inode xattr: bad e_name length [ 99.971616][ T8118] EXT4-fs error (device loop2): ext4_orphan_get:1399: comm syz.2.1502: couldn't read orphan inode 15 (err -117) [ 99.984029][ T8118] EXT4-fs (loop2): mounted filesystem 00000004-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 100.012274][ T6953] EXT4-fs (loop2): unmounting filesystem 00000004-0000-0000-0000-000000000000. [ 100.086780][ T8124] loop2: detected capacity change from 0 to 2048 [ 100.121385][ T8124] loop2: p1 < > p4 [ 100.125694][ T8124] loop2: p4 size 8388608 extends beyond EOD, truncated [ 100.504396][ T8140] smc: net device ip6gre0 applied user defined pnetid SYZ0 [ 100.637391][ T8146] loop4: detected capacity change from 0 to 512 [ 100.646169][ T8146] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2234: inode #15: comm syz.4.1513: corrupted in-inode xattr: bad e_name length [ 100.661868][ T8146] EXT4-fs error (device loop4): ext4_orphan_get:1399: comm syz.4.1513: couldn't read orphan inode 15 (err -117) [ 100.684491][ T8146] EXT4-fs (loop4): mounted filesystem 00000004-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 100.734134][ T5669] EXT4-fs (loop4): unmounting filesystem 00000004-0000-0000-0000-000000000000. [ 100.771064][ T8154] loop4: detected capacity change from 0 to 2048 [ 100.816112][ T8154] loop4: p1 < > p4 [ 100.820405][ T8154] loop4: p4 size 8388608 extends beyond EOD, truncated [ 100.843686][ T8157] ip6tnl1: entered promiscuous mode [ 100.848962][ T8157] ip6tnl1: entered allmulticast mode [ 100.864076][ T8159] 9pnet_fd: Insufficient options for proto=fd [ 100.875836][ T8159] 9pnet_fd: p9_fd_create_tcp (8159): problem connecting socket to 127.0.0.1 [ 100.886012][ T8159] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(10) [ 100.892627][ T8159] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 100.900178][ T8159] vhci_hcd vhci_hcd.0: Device attached [ 100.906022][ T8159] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 100.914496][ T8159] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 100.923428][ T8159] vhci_hcd vhci_hcd.0: pdev(4) rhport(3) sockfd(16) [ 100.930026][ T8159] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 100.937437][ T8159] vhci_hcd vhci_hcd.0: Device attached [ 100.943293][ T8159] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 100.951665][ T8159] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 100.960200][ T8159] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 100.968644][ T8159] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 100.977666][ T8159] vhci_hcd vhci_hcd.0: port 0 already used [ 100.984092][ T8162] vhci_hcd: connection closed [ 100.984246][ T3579] vhci_hcd: stop threads [ 100.993217][ T3579] vhci_hcd: release socket [ 100.997746][ T3579] vhci_hcd: disconnect device [ 101.002432][ T8160] vhci_hcd: connection closed [ 101.003989][ T3579] vhci_hcd: stop threads [ 101.012961][ T3579] vhci_hcd: release socket [ 101.017468][ T3579] vhci_hcd: disconnect device [ 101.068761][ T29] audit: type=1326 audit(1721174822.316:1071): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8172 comm="syz.3.1522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbcd8dbbd9 code=0x7ffc0000 [ 101.093105][ T29] audit: type=1326 audit(1721174822.316:1072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8172 comm="syz.3.1522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=451 compat=0 ip=0x7ffbcd8dbbd9 code=0x7ffc0000 [ 101.116622][ T29] audit: type=1326 audit(1721174822.316:1073): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8172 comm="syz.3.1522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbcd8dbbd9 code=0x7ffc0000 [ 101.140035][ T29] audit: type=1326 audit(1721174822.316:1074): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8172 comm="syz.3.1522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbcd8dbbd9 code=0x7ffc0000 [ 101.218719][ T8184] loop3: detected capacity change from 0 to 512 [ 101.226805][ T8184] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2234: inode #15: comm syz.3.1527: corrupted in-inode xattr: bad e_name length [ 101.240629][ T8184] EXT4-fs error (device loop3): ext4_orphan_get:1399: comm syz.3.1527: couldn't read orphan inode 15 (err -117) [ 101.252941][ T8184] EXT4-fs (loop3): mounted filesystem 00000004-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 101.280353][ T7034] EXT4-fs (loop3): unmounting filesystem 00000004-0000-0000-0000-000000000000. [ 101.607660][ T29] audit: type=1400 audit(1721174822.843:1075): avc: denied { ioctl } for pid=8198 comm="syz.4.1532" path="/dev/virtual_nci" dev="devtmpfs" ino=108 ioctlcmd=0x0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 102.076290][ T29] audit: type=1326 audit(1721174823.310:1076): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8217 comm="syz.2.1537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2cdd6f2bd9 code=0x7ffc0000 [ 102.078718][ T8218] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1537'. [ 102.100112][ T29] audit: type=1326 audit(1721174823.310:1077): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8217 comm="syz.2.1537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2cdd6f2bd9 code=0x7ffc0000 [ 102.132133][ T29] audit: type=1326 audit(1721174823.310:1078): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8217 comm="syz.2.1537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=77 compat=0 ip=0x7f2cdd6f2bd9 code=0x7ffc0000 [ 102.156560][ T29] audit: type=1326 audit(1721174823.310:1079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8217 comm="syz.2.1537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2cdd6f2bd9 code=0x7ffc0000 [ 102.195524][ T8223] loop3: detected capacity change from 0 to 256 [ 102.196013][ T8222] loop2: detected capacity change from 0 to 512 [ 102.209210][ T8223] FAT-fs (loop3): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1) [ 102.210726][ T8222] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2234: inode #15: comm syz.2.1538: corrupted in-inode xattr: bad e_name length [ 102.232907][ T8222] EXT4-fs error (device loop2): ext4_orphan_get:1399: comm syz.2.1538: couldn't read orphan inode 15 (err -117) [ 102.245431][ T8222] EXT4-fs (loop2): mounted filesystem 00000004-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 102.273858][ T6953] EXT4-fs (loop2): unmounting filesystem 00000004-0000-0000-0000-000000000000. [ 102.295310][ T8228] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8228 comm=syz.3.1539 [ 102.466005][ T8231] FAULT_INJECTION: forcing a failure. [ 102.466005][ T8231] name failslab, interval 1, probability 0, space 0, times 0 [ 102.474674][ T8235] 9pnet_fd: Insufficient options for proto=fd [ 102.478749][ T8231] CPU: 1 PID: 8231 Comm: syz.0.1541 Not tainted 6.10.0-syzkaller-01155-gd67978318827 #0 [ 102.494481][ T8231] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 102.504540][ T8231] Call Trace: [ 102.507807][ T8231] [ 102.510770][ T8231] dump_stack_lvl+0xf2/0x150 [ 102.515371][ T8231] dump_stack+0x15/0x20 [ 102.519557][ T8231] should_fail_ex+0x229/0x230 [ 102.524226][ T8231] ? io_alloc_async_data+0x4a/0xb0 [ 102.529347][ T8231] __should_failslab+0x92/0xa0 [ 102.534102][ T8231] should_failslab+0x9/0x20 [ 102.538616][ T8231] __kmalloc_noprof+0xa5/0x370 [ 102.543378][ T8231] io_alloc_async_data+0x4a/0xb0 [ 102.548446][ T8231] io_recvmsg_prep+0x449/0x8d0 [ 102.553211][ T8231] io_submit_sqes+0x64c/0x1080 [ 102.557965][ T8231] ? __rcu_read_unlock+0x4e/0x70 [ 102.562899][ T8231] ? xa_load+0xb9/0xe0 [ 102.566960][ T8231] __se_sys_io_uring_enter+0x1c6/0x15a0 [ 102.572500][ T8231] ? __fget_files+0x1da/0x210 [ 102.577230][ T8231] ? fput+0x13b/0x180 [ 102.581204][ T8231] ? ksys_write+0x178/0x1b0 [ 102.585698][ T8231] __x64_sys_io_uring_enter+0x78/0x90 [ 102.591090][ T8231] x64_sys_call+0x2567/0x2d60 [ 102.595819][ T8231] do_syscall_64+0xc9/0x1c0 [ 102.600321][ T8231] ? clear_bhb_loop+0x55/0xb0 [ 102.605006][ T8231] ? clear_bhb_loop+0x55/0xb0 [ 102.609744][ T8231] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.615762][ T8231] RIP: 0033:0x7f4197276bd9 [ 102.620184][ T8231] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 102.639820][ T8231] RSP: 002b:00007f41964f8048 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 102.648217][ T8231] RAX: ffffffffffffffda RBX: 00007f4197404f60 RCX: 00007f4197276bd9 [ 102.656234][ T8231] RDX: 0000000000000000 RSI: 0000000000005b43 RDI: 0000000000000004 [ 102.664281][ T8231] RBP: 00007f41964f80a0 R08: 0000000000000000 R09: 0000000000000000 [ 102.672240][ T8231] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 102.680204][ T8231] R13: 000000000000000b R14: 00007f4197404f60 R15: 00007ffc0a5d9468 [ 102.688220][ T8231] [ 102.694441][ T35] usb 7-1: enqueue for inactive port 0 [ 102.700690][ T8235] 9pnet_fd: p9_fd_create_tcp (8235): problem connecting socket to 127.0.0.1 [ 102.704533][ T8237] smc: net device ip6gre0 applied user defined pnetid SYZ0 [ 102.709742][ T35] usb 7-1: enqueue for inactive port 0 [ 102.730942][ T8235] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(10) [ 102.737573][ T8235] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 102.745037][ T8235] vhci_hcd vhci_hcd.0: Device attached [ 102.751119][ T8235] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 102.760838][ T8235] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 102.770256][ T8235] vhci_hcd vhci_hcd.0: pdev(4) rhport(3) sockfd(16) [ 102.776858][ T8235] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 102.784263][ T8235] vhci_hcd vhci_hcd.0: Device attached [ 102.790210][ T8235] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 102.798773][ T8235] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 102.800270][ T35] vhci_hcd: vhci_device speed not set [ 102.807375][ T8235] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 102.822935][ T8235] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 102.832068][ T8235] vhci_hcd vhci_hcd.0: port 0 already used [ 102.838632][ T8250] vhci_hcd: connection closed [ 102.838775][ T8238] vhci_hcd: connection closed [ 102.843532][ T3582] vhci_hcd: stop threads [ 102.852501][ T3582] vhci_hcd: release socket [ 102.856924][ T3582] vhci_hcd: disconnect device [ 102.861884][ T3582] vhci_hcd: stop threads [ 102.866182][ T3582] vhci_hcd: release socket [ 102.870703][ T3582] vhci_hcd: disconnect device [ 103.146710][ T8260] loop2: detected capacity change from 0 to 512 [ 103.156160][ T8260] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2234: inode #15: comm syz.2.1550: corrupted in-inode xattr: bad e_name length [ 103.169942][ T8260] EXT4-fs error (device loop2): ext4_orphan_get:1399: comm syz.2.1550: couldn't read orphan inode 15 (err -117) [ 103.182409][ T8260] EXT4-fs (loop2): mounted filesystem 00000004-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 103.210782][ T6953] EXT4-fs (loop2): unmounting filesystem 00000004-0000-0000-0000-000000000000. [ 103.559194][ T8282] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1559'. [ 103.687155][ T8288] loop3: detected capacity change from 0 to 512 [ 103.697205][ T8288] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2234: inode #15: comm syz.3.1561: corrupted in-inode xattr: bad e_name length [ 103.711171][ T8288] EXT4-fs error (device loop3): ext4_orphan_get:1399: comm syz.3.1561: couldn't read orphan inode 15 (err -117) [ 103.725081][ T8288] EXT4-fs (loop3): mounted filesystem 00000004-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 103.758285][ T7034] EXT4-fs (loop3): unmounting filesystem 00000004-0000-0000-0000-000000000000. [ 103.775725][ T8292] 9pnet_fd: Insufficient options for proto=fd [ 103.788568][ T8292] 9pnet_fd: p9_fd_create_tcp (8292): problem connecting socket to 127.0.0.1 [ 103.799182][ T8292] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(10) [ 103.805868][ T8292] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 103.813465][ T8292] vhci_hcd vhci_hcd.0: Device attached [ 103.821024][ T8292] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 103.829445][ T8292] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 103.839311][ T8292] vhci_hcd vhci_hcd.0: pdev(3) rhport(3) sockfd(16) [ 103.845946][ T8292] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 103.853386][ T8292] vhci_hcd vhci_hcd.0: Device attached [ 103.861047][ T8292] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 103.869637][ T8292] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 103.878200][ T8292] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 103.886650][ T8292] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 103.895647][ T8292] vhci_hcd vhci_hcd.0: port 0 already used [ 103.901982][ T8295] vhci_hcd: connection closed [ 103.902289][ T3598] vhci_hcd: stop threads [ 103.911380][ T3598] vhci_hcd: release socket [ 103.915821][ T3598] vhci_hcd: disconnect device [ 103.920510][ T8293] vhci_hcd: connection closed [ 103.921289][ T3598] vhci_hcd: stop threads [ 103.930201][ T3598] vhci_hcd: release socket [ 103.934616][ T3598] vhci_hcd: disconnect device [ 104.190150][ T8307] smc: net device ip6gre0 applied user defined pnetid SYZ0 [ 104.494545][ T8320] ================================================================== [ 104.502635][ T8320] BUG: KCSAN: data-race in print_cpu / tick_nohz_idle_enter [ 104.509904][ T8320] [ 104.512207][ T8320] read-write to 0xffff888237d204b8 of 8 bytes by task 0 on cpu 1: [ 104.519992][ T8320] tick_nohz_idle_enter+0x59/0xe0 [ 104.525018][ T8320] do_idle+0x3d/0x230 [ 104.528989][ T8320] cpu_startup_entry+0x25/0x30 [ 104.533735][ T8320] start_secondary+0x94/0xa0 [ 104.538303][ T8320] common_startup_64+0x12c/0x137 [ 104.543226][ T8320] [ 104.545529][ T8320] read to 0xffff888237d204b8 of 8 bytes by task 8320 on cpu 0: [ 104.553057][ T8320] print_cpu+0x404/0x670 [ 104.557283][ T8320] timer_list_show+0x115/0x180 [ 104.562023][ T8320] seq_read_iter+0x2d7/0x940 [ 104.566591][ T8320] proc_reg_read_iter+0x11e/0x190 [ 104.569847][ T4801] usb 9-1: enqueue for inactive port 0 [ 104.571592][ T8320] copy_splice_read+0x3a4/0x5d0 [ 104.577101][ T4801] usb 9-1: enqueue for inactive port 0 [ 104.581844][ T8320] splice_direct_to_actor+0x26c/0x670 [ 104.581865][ T8320] do_splice_direct+0xd7/0x150 [ 104.597388][ T8320] do_sendfile+0x3ab/0x950 [ 104.601785][ T8320] __x64_sys_sendfile64+0x110/0x150 [ 104.606965][ T8320] x64_sys_call+0xed5/0x2d60 [ 104.611537][ T8320] do_syscall_64+0xc9/0x1c0 [ 104.616017][ T8320] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.621896][ T8320] [ 104.624196][ T8320] value changed: 0x0000000000000038 -> 0x000000000000003d [ 104.631275][ T8320] [ 104.633574][ T8320] Reported by Kernel Concurrency Sanitizer on: [ 104.639696][ T8320] CPU: 0 PID: 8320 Comm: syz.4.1571 Not tainted 6.10.0-syzkaller-01155-gd67978318827 #0 [ 104.649395][ T8320] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 104.659437][ T8320] ================================================================== [ 104.660383][ T4801] vhci_hcd: vhci_device speed not set