last executing test programs: 4.74473113s ago: executing program 2 (id=1455): socket$unix(0x1, 0x1, 0x0) listen(0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r1, 0xfffffffc) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) close_range(r3, 0xffffffffffffffff, 0x0) 4.316812716s ago: executing program 3 (id=1463): bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x1, 0x6}, 0x2, 0x0, 0x400, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="070000000400000008000000010000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={r0}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="10000000040000000400000002000000000000", @ANYRES32=0x1, @ANYBLOB="00fe7d1830daa688de001dfd99d53e5090bd0000", @ANYRES32=0x0, @ANYBLOB='\x00'/17], 0x48) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) syz_clone(0x20000000, &(0x7f0000001040)="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", 0x1000, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000001c0)="57156587095867f239687b952a8906492ea8f6be83a79fe1e88ade49356be93fc9e1f868197990609f3872c647e26faec0dcbee9f789") openat2(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', &(0x7f0000000280)={0x591002, 0x1, 0xc}, 0x18) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000000050005000200000c12000300686173683a6e65742c706f7274"], 0x4c}}, 0x2) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000090601020000000000000000020000000900020073797a3100000000050001000700"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000070601080000001e000000000a0000040500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x66b2c000) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000280)={'geneve0\x00', &(0x7f0000000800)=@ethtool_eeprom={0xc, 0x8, 0x101, 0xd8, "395ba861f6fb07e88be0863739922a2da35a339557edadb495d7e7f1f9da62ee9a87af9b4505b89b5cc5e515999d85f8303bdacda68cd54bdc2a0481cd6c9d48db497444756aba856bd11895716502574d3deb5c93bf35345ec82ad9df0fb7fdb14949a5bbccbf2e6789f646893782ec6771441543d44fe94887ac5a425c3e63dfc86737658a4ec75edef50eeaa72fb07e05c18b088183cacd944918b333b4bee9bfd6d48ade579ce653d398f869ea2515701c0c8c66999d87ed6220c229583fe66d13f1c3d5202fb2c60e3aad9c77335042275ced808a27"}}) r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r6}, 0x10) syz_mount_image$vfat(&(0x7f0000001800), &(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000000, &(0x7f0000000780)=ANY=[@ANYRES16, @ANYRES8=r7, @ANYRESOCT, @ANYRESDEC=0x0, @ANYRES32, @ANYRESHEX, @ANYRES64=r5, @ANYRESDEC], 0x4, 0x275, &(0x7f00000009c0)="$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") close(0x3) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x22004004, &(0x7f0000000140)={[{@jqfmt_vfsold}, {@nojournal_checksum}, {@noload}, {@user_xattr}, {@usrjquota}, {@grpjquota, 0x2e}]}, 0x81, 0x46c, &(0x7f00000004c0)="$eJzs3MtvG8UfAPDvrpP09ctD/ZVHH1BDQUQUkiYU6IELCKRekJDgAMeQhqrUbVETJFpVtCBUjoi/ADgi8RdwggsCTiCucEdIFeqFwgEtWnu3dWIndZwYN/jzkdae2YdnZmcnnp3xJoCBVc1fkogsIn6OiPFGdPkO1cbbjeuX5v+8fmk+iSx7+fekvt8f1y/Nl7uWx+0qIpNpRPpBEvvbpLt44eLpuVpt4XwRn14689b04oWLj586M3dy4eTC2dljx44+MfP0U7NPbko5R/O87nv33IG9x1/7+MX5LF7/7os8v/8rtjeXo2Fiw2lWo7r8XNaN1F8f3vCn31lGm8LJUB8zwrpUIiKvruF6+x+PStyqvPF44f2+Zg7oqSzLsm0taytl4EoG/Icl0e8cAP1RftHn97/l8i92P/ru2rONG6C83DeKpbFlKNL8bXvjjn20R+lXI+LVK399ki/RdhwCAGBzfZX3fx5r1/8bS+5u2m+smBuaiIjDEbE7Iv4fEXsi4q6IyPe9JyLuXWf61RXx1v7Pjzu6KliH8v7fM8Xc1vL+X1ruMlEpYqP18g8nb5yqLRwpzslkDG/L4zNrpPH18z99tNq25v5fvuTpl33BIh+/Da0YoDsxtzS3kTI3u/ZexL6hduVPbs4EJBGxNyL2dfH5+Tk79ejnB/Lw2K7W7QduW/41bMI8U/ZZxCON+r8SK8pfShoprTY/Ob09agtHpsurotX3P1x9qTk+3BS+ff33Vl7/O9te/0X5y2ZQztcurj+Nq798uOo9TbfX/0jySj08Uqx7Z25p6fxMxEixYtn62VvHlvFy/7z8k4falX8s2R3x96fFcfuLa/W+iLg/Ig4WeX8gIh6MiENrlP/b5x56c+0z1N/6P7FW/UdMJM3z9V0EKqe/+XK19Dur/6P10GSxppO/f51mcCPnDgAAALaKtP4b+CSduhlO06mpxm/498TOtHZucelwNd4+e6LxW/mJGE7Lka7xpvHQmWJsuIzProiXY15ZtqMen5o/V+vVnDrQmV2rtP/cr5V+5w7ouXXNo7U+0QZsYZ7XhMGl/cPg0v5hcGn/MLjatf/LETeaoj19CAPoH9//MLi0fxhc2j8MLu0fBlLrI/HlSF83T/rfCuw+vqHDByhQ6dEnR/M/7ehBINK+n7ruA+mdkI2DRWBbRHR61OWe1unK6wcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGDr+ycAAP//ENre5A==") bpf$OBJ_GET_MAP(0x7, &(0x7f0000000900)=@generic={&(0x7f00000008c0)='./file0\x00', 0x0, 0x8}, 0x18) 4.05554648s ago: executing program 3 (id=1467): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0xffffffff, &(0x7f0000001a80)) socket$nl_route(0x10, 0x3, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="1800"/14, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000580)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r1}, &(0x7f0000000380), &(0x7f0000000280)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = perf_event_open(&(0x7f0000000380)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xece7, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x1007, 0x9, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xfc}, 0x0, 0x0, 0xffffffffffffffff, 0x8) mmap$perf(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x11, r3, 0x0) perf_event_open(&(0x7f0000000480)={0x6, 0x80, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x2000, 0x0, 0x0, 0x1, 0x0, 0x3, 0xfffc, 0x0, 0xc7d7}, 0x0, 0x0, r3, 0xa) ioctl$TUNSETLINK(r0, 0x400454cd, 0x6) r4 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001080)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'syzkaller0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4040000}, 0x100) 3.913793612s ago: executing program 3 (id=1469): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37, 0x0, 0x1}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f000000d000)={0xa, 0x3, &(0x7f0000008000)=ANY=[@ANYBLOB="8500000000eec49538000000000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x2, 0x1000, &(0x7f0000014000)=""/4096, 0x0, 0x0, '\x00', 0x0, @fallback, r1, 0x14, &(0x7f00000000c0), 0x1, 0x10, &(0x7f0000000000), 0xa, 0x0, 0xffffffffffffffff, 0x4c}, 0x70) symlink(0x0, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x80, 0xf, 0x0, 0x0, 0x7995}, 0x10007, 0x0, 0x0, 0x48000000, 0x0, 0x40000000, 0x0}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000a3850000007000000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r4, 0x0, 0x6}, 0x18) r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r6 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0000}]}) getitimer(0x1, 0x0) sendto$llc(r6, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x9, 0xfd}, 0x10) close_range(r5, 0xffffffffffffffff, 0x200000000000000) socket$key(0xf, 0x3, 0x2) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x6, 0x0, 0x7ffc1ffb}]}) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000001f80)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000000000008500000073000000850000005000000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x1e00, 0x0, '\x00', 0x0, @fallback=0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r8}, 0x10) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000140)=@base={0x6, 0x4, 0x1ff, 0x5c, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffe}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3477, 0x0, 0x0, 0x0, 0x8}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7535}}]}, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r9, 0xc05c5340, &(0x7f0000000280)={0xa, 0x6, 0x2, {0x8, 0x8}, 0x8, 0xc}) 3.797052824s ago: executing program 2 (id=1470): syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x48e01) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) openat$dir(0xffffffffffffff9c, 0x0, 0xea, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000000), 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000480)) socket$inet(0x2b, 0x801, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r2, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000380)={0x0, 0x34}, 0x1, 0x0, 0x0, 0x4040840}, 0x800) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB='\v\x00\x00\x00syz0\x00'/54], 0x118) 3.667639616s ago: executing program 3 (id=1472): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'bond0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'macvlan1\x00'}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=@newlink={0x38, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4dc1}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @hsr={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x80c0) 3.599562897s ago: executing program 3 (id=1473): pipe(0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1f, 0x0, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0xfffffffd, 0x0, 0x0, 0x41000, 0x71, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x94) inotify_init1(0x0) r0 = msgget$private(0x0, 0x790) msgsnd(r0, &(0x7f0000000d00)=ANY=[@ANYRES8], 0x401, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x64, 0x1, 0x0, 0x0, 0x0, 0x210e, 0xc0002, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b80, 0x2, @perf_bp={&(0x7f0000000040), 0xe}, 0x14105, 0x32, 0xfffffbff, 0x3, 0x2, 0x0, 0xfffa, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffbfffffffff, 0xffffffffffffffff, 0xb) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r4, 0x0, 0xf3a, 0x0) write(r2, &(0x7f0000000240)="94", 0x1) vmsplice(r4, &(0x7f0000000380)=[{&(0x7f0000013580)='\r', 0x1}], 0x1, 0x0) 2.71517985s ago: executing program 2 (id=1480): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000004c0)='mm_page_free\x00', r0, 0x0, 0x1d6}, 0x18) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, 0x0, 0x2) sendmsg$IPSET_CMD_DESTROY(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c00000003060101000000007e625f4609ca6fd90500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x8000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180008000000000600000e00000000008500000007000000950000000000000000"], 0x0, 0x1, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000300)={0xffffffff}, 0x8) preadv(0xffffffffffffffff, &(0x7f00000015c0)=[{&(0x7f00000017c0)=""/4066, 0xfe2}], 0x1, 0xf0, 0x6) 2.649105591s ago: executing program 2 (id=1482): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x200c840, &(0x7f0000000040)={[{@discard}, {@noload}, {@jqfmt_vfsv0}]}, 0x64, 0x526, &(0x7f0000000a40)="$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") r0 = gettid() r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x4098884, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) recvmmsg(r1, &(0x7f0000003ac0)=[{{0x0, 0x0, 0x0}, 0xf}, {{0x0, 0x0, 0x0}, 0x3ff}], 0x2, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0x2a, &(0x7f0000000140)=0x2f, 0x4) syz_open_dev$sg(0x0, 0x7fffffff, 0x200500) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r3, &(0x7f0000000580), 0x0, 0x10008034, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x80, &(0x7f0000000240)={0xa, 0x4e20, 0x8000, @mcast1}, 0x1c) timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) timer_settime(r5, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 2.088058189s ago: executing program 2 (id=1490): syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x48e01) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) openat$dir(0xffffffffffffff9c, 0x0, 0xea, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000000), 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000480)) socket$inet(0x2b, 0x801, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r2, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000380)={0x0, 0x34}, 0x1, 0x0, 0x0, 0x4040840}, 0x800) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB='\v\x00\x00\x00syz0\x00'/54], 0x118) 1.952283481s ago: executing program 0 (id=1492): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x4000000, 0x1, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, &(0x7f0000000180)={0x0, 0x0, {0x2, 0x3}}) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet6(0xa, 0x80002, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYRESDEC=r1], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x18) acct(0x0) socket(0x1e, 0x4, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6c9fc0be700202fe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="0207e80702"], 0x10}}, 0x40044) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSBRKP(r6, 0x5425, 0x0) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/partitions\x00', 0x0, 0x0) syz_io_uring_setup(0x4d40, &(0x7f00000007c0)={0x0, 0x3416, 0x800, 0x1, 0x367, 0x0, r8}, &(0x7f00000002c0), &(0x7f00000001c0)) sendfile(r7, r8, 0x0, 0x20000023896) 1.386935909s ago: executing program 1 (id=1498): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180200000020702500000000002020207b1af8ff00000000bfa100000000000007010000dbffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x23, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r0, 0x0, 0xfffffffffffffffc}, 0x18) syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000040)={[{@noquota}]}, 0x1, 0x775, &(0x7f0000001180)="$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") r1 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x88882, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./bus\x00', 0x1c5902, 0x2d) write(r3, &(0x7f0000004200)='t', 0x1) sendfile(r3, r2, 0x0, 0x7ffff000) fallocate(r1, 0x0, 0x0, 0x1001f4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x18) mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000880)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX]) 1.166036083s ago: executing program 1 (id=1500): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x200c840, &(0x7f0000000040)={[{@discard}, {@noload}, {@jqfmt_vfsv0}]}, 0x64, 0x526, &(0x7f0000000a40)="$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") r0 = gettid() r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x4098884, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) recvmmsg(r1, &(0x7f0000003ac0)=[{{0x0, 0x0, 0x0}, 0xf}, {{0x0, 0x0, 0x0}, 0x3ff}], 0x2, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0x2a, &(0x7f0000000140)=0x2f, 0x4) syz_open_dev$sg(0x0, 0x7fffffff, 0x200500) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r3, &(0x7f0000000580), 0x0, 0x10008034, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x80, &(0x7f0000000240)={0xa, 0x4e20, 0x8000, @mcast1}, 0x1c) timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) timer_settime(r5, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 1.108851844s ago: executing program 2 (id=1501): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000d80)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1e, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9cbc899f72d3e3f7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1, 0x0, 0x100}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) readv(r3, &(0x7f0000001340)=[{&(0x7f0000000580)=""/148, 0x94}], 0x1) readv(r3, &(0x7f0000000100)=[{&(0x7f00000002c0)=""/215, 0xd7}], 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10) close(0xffffffffffffffff) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r4, 0xa02000000000000, 0x60, &(0x7f0000000000)={'filter\x00', 0xb001, 0x4, 0x3e0, 0xffffff7f, 0x0, 0x130, 0x300, 0x300, 0x300, 0x7fffffe, 0x0, {[{{@arp={@local, @empty, 0x0, 0x0, 0x0, 0x0, {}, {@mac=@local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'pimreg\x00', 'veth0_to_bridge\x00'}, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f67b23ffdfa27f907a03732da3acbc6518e62a77ca06f258762e88c0d9f9d2f413b94a105f4bdf01425ce81c5d000000000000000500ffffffff00"}}}, {{@arp={@multicast2, @empty, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_to_team\x00', 'ip6tnl0\x00'}, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) r5 = socket$kcm(0xa, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x4e23, 0xb00, @mcast1}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=[{0x10, 0x29, 0x3}], 0x10}, 0xf7e5) r6 = socket$key(0xf, 0x3, 0x2) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2010008, &(0x7f00000001c0), 0xff, 0x531, &(0x7f0000000640)="$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") sendmsg$key(r6, &(0x7f0000000400)={0x10000000, 0x0, &(0x7f0000000040)={&(0x7f0000000840)=ANY=[@ANYBLOB="020e0080150000000000000000000000030005000000000002004e24ac1e00010000000000000000030006003c000000020000fc34000000000000000000000001001800000000000800120000000200fcffffff000000000600330000000000000000000000eafffd8000000000000000000000000000aa000000000000000000000000000000000400"], 0xa8}}, 0x2) 1.029657925s ago: executing program 0 (id=1502): r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) read$usbmon(r0, 0x0, 0x0) 1.028522085s ago: executing program 4 (id=1503): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x8, 0x400, 0x9, 0x1}, 0x50) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x20400, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000440)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x18) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000140)=0x2) ioctl$TIOCVHANGUP(r1, 0x5437, 0x2) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0xf, 0x0, 0x0, 0x4}) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x800, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000060000000000000000008500000007000000850000000e00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000012c0)={&(0x7f0000000040)='kfree\x00', r3}, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r4 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r4, &(0x7f0000000340)={0x18, 0x0, {0x0, @multicast, 'macvlan0\x00'}}, 0x1e) 945.683976ms ago: executing program 0 (id=1504): r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = dup(r0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) ioctl$PTP_EXTTS_REQUEST2(r1, 0x43403d05, 0x0) 877.027687ms ago: executing program 4 (id=1505): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), 0x0, 0x1, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000019200)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1, 0x0, 0x2}, 0x18) renameat2(0xffffffffffffff9c, &(0x7f0000000a00)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000600)='./file1\x00', 0x2) 847.934668ms ago: executing program 0 (id=1506): syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x48e01) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) openat$dir(0xffffffffffffff9c, 0x0, 0xea, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000000), 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000480)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000240)={r1, 0x2}) 847.335808ms ago: executing program 4 (id=1507): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = epoll_create(0x3ff) r2 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000240)={0xa0000000}) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'macvlan0\x00'}]}, 0x34}}, 0x8000) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r2, &(0x7f0000000100)={0x4}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r3, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4009000}, 0x4090) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, &(0x7f00000001c0), &(0x7f0000000480)=0x30) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYRES16=r4, @ANYBLOB="13080000000000000000110000003c000980080001000000000008000100000000000800010000000000080002000000000008000200000000000800010000000000080001000000000034000980080002000000"], 0x84}}, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'bond0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'macvlan1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4dc1}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r6}, @IFLA_HSR_SLAVE1={0x8, 0x1, r5}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x80c0) 602.623662ms ago: executing program 4 (id=1508): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5001e}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4090}, 0x2000000) 511.860572ms ago: executing program 4 (id=1509): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r1}, 0x10) fspick(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0x0) 458.429993ms ago: executing program 0 (id=1510): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000900), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r1, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000940)={0x4c, r2, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x69, 0xb, 0x8}, {0x6, 0x11, 0xa}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x10) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000740), 0x1, r0}, 0x38) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r3, 0x0, 0x8}, 0x18) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48) getresuid(&(0x7f00000001c0), &(0x7f00000002c0), &(0x7f0000000300)) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r5}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x14, &(0x7f0000000e40)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000e606020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = gettid() process_vm_writev(r7, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0x7ffff000}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) 458.204413ms ago: executing program 4 (id=1511): syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x48e01) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) openat$dir(0xffffffffffffff9c, 0x0, 0xea, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000000), 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000480)) socket$inet(0x2b, 0x801, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r2, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000380)={0x0, 0x34}, 0x1, 0x0, 0x0, 0x4040840}, 0x800) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB='\v\x00\x00\x00syz0\x00'/54], 0x118) 457.747204ms ago: executing program 1 (id=1512): bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x1, 0x6}, 0x2, 0x0, 0x400, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="070000000400000008000000010000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={r0}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="10000000040000000400000002000000000000", @ANYRES32=0x1, @ANYBLOB="00fe7d1830daa688de001dfd99d53e5090bd0000", @ANYRES32=0x0, @ANYBLOB='\x00'/17], 0x48) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) syz_clone(0x20000000, &(0x7f0000001040)="625a0f0ea9dc395ac6df9c31ff506da806552732c5c1bd1c9be8eb487a0df1f724d0f1b11ce89579fb8a4d89d0eb96264a240dfff3a9d270b15951a34c9f758707948248e7b5a734c6394b0ae5b38eb8e17d2506568c169fe1a9e7203658e053fe6ca3ea13cd3bffd5f2ed01764521e5d38f07ef5c56052687b92437578b234da8285da241d172d67d289e342d6d2043ea996d3176d58ccac9da50d5fb817f7a4509f904d3288af01a6934114b244e573490fbebb2eebc3426544ed442927d022d1834b421e523a4c0c9baa032c416fc77dd7fef3b222286188dbc78208e538fb7457fe75d2b02b31dc529bf295ba665f0c8d928eade399175f6259b12da19b733ef4a16f6566c6034f67043efe001911f362dbb31e1916fa775c2a689428e8031c2d490c9c7915fb0ae97f0fd46f9296f90fc375fdf160aec804f1e47b0036adc2743aa81a6cf096a43ad06b885ad65baefec685f56e2750038a7b37b1bc00ac8b40643ebaa49eedd6437175cdf95ce1057e4d6389459cfa117bebc1b31e086218824fa440bbeb65c8137849f58ed0517f037a7d895dd6e50e75c40ddb3096514613de7ce724a86faf4180582ae3dcaa83942d2b2011465790869379e4d2219a1594506a9adc6ee34c5ea8e38dbe55431758fa0c72e97265e7080ce61b8648473d56f11fcccc2d4b4e3da3e57c8ee7794b2281f44c5eb44f2936a20b503e0ab9ed33d7eed7ffab8004f1ab33df23d31cb52e2b61194c3fce92677407c84dc7d7df827d22a902d57013a1f4c1b9ef730eed6b7cea9518ea048cc03613270f582171e2804e2d5756fba293d5b923b19ed83cffd6de88cad2ca34f5e5e5b262a10c0cafe954599b1a9559c6aa703e8c3c660f0e6cc05a8c6e4d6c9acb1244dd7b99e010901bece0d555aeea08ea8b1582aab2e8717a3177c6f10ae24832414e0f59999381f5d7fcaa4a89bf142f36b6bebe33a689474e4122c30e2144e5e63023b374c23569fed00e9586609e07dc032f6a9a949a25dafd44ea859fd411a5c298d7d8e18d1723904144ffda5ad3c81fb4f1ee006e6e788968caf04b8d6c0d64333808db7fc48cfb605ad26a5b545035b143b9abef06da9b3210d4e235c45baf56b4a0007049b353883c5a3c7aa049381535afce862f54c1745e5beb23fdb6e2eae766dbd15faac04ac65718b2dbdd9d6e54af04712e31c66ea66dfc45035abf34cddcee5f4c355ede22214934d3f5cb74a46ed853076d609581f1743f3e99169f5893480b093960777926ebaaaf81d76474a9b3969e0d5d8f9d5a90de73fac1b3452efd909be7320e6b2bdb4dd09d2799be5860298763ff4cadd504f6d5eb476349fe97d533ebdd2ef9067f9712ef33112931b225beaf9bca101172324115d47547ecda38dae1b6531cfdfdd9c9a0761417db535f16650a854fbab3d826045e710b05bc8d559320f9181c70a3b84fea0eb6dc35f6afd5c352f0d175d4303671dfd6d80a1689e3398e8e6f7dd5b382b0e27e1d9a0ce32325c97f4457128626918f429ca0ee42eb821cb28bffc0a07cae6c2619e8d02dbe5f0f640d09240319d8474b8886f3591ddd5673a8092024372dcbf9fc084f7888651d6089a5410d21bda35426dbfb0c0a32e0a933e645e91e1c157cb41032a0222364f4396d0ec1aed9f8e66729f1c3e5544932313049f2358999f04505cc1956c9fc436111c100333e23965e31b473127e8496647f75256217bd62485b582fb05a1a9b93d191dbe06acd0149d1ce12af84e1690a1a5cbd66988f28206e547a42a8b76e0f36301b07bfcfbdab6d4937031f450f0edee31eecb30ca4b18ef3db96b5e3f739616689e8739d738901aff57fd468d9617f7da03355dc6a6b723fe1873814041e339f7b761b88bb5f9aa12083647ab9499f2adaa5eb836d530b0f66dc545d1d0e196bde04afe674f199bd6d191eb9d1de586d7448cb1c00e7779dcdf45fee2b55ddcd8bc38dd27bfa6c4202cc10a1779d04459a4536f34322ad0b5fdd7e913c8467d3fccc09037c58956fdd606ce9cc1cec38dc6f0d3ea7eae848338a540ab73e863394a17a5776ee9442017834ec1d9ca5e5b6dbb7d2927eb14921e3a800861a93be1e4c017040ba5364919027c341873e7113b354df66b4d06fdb602f124c09e89e478f19edae15c0fa4bac5113e3395d16cd42a16e181dd4f4bd265fbd1a03f5b4ce665ffd0b3c86c2efa8c5beea76d07445cd099cdf35aec04f8149f48a4ba3b08384a89dc944a44d11a7ea4501f1f80d3fe19a23640ebea1162b08b4257d21c53f3916e69929d050a287c57c699db1c1bbb81366b2aaf83983306c1f9b47a288a3e62891f41afe01710772de5da92b91503cb5fbe016075f7538858fe5debf8a6c3bd4898fe400efe6e1fa311d3c5508509b282f1d6538b31e3c7fd0e6d530ff42a4b658c73eee316600d0d7a2b05eaa6ac27d64437f2e0cda7685a575b2edb317747f0c096e79bd5364c451346c608cdc2a617e3460ecf386b5052c0cae86002fedbc3b3690b6a4553fb961437c53dad3d1191a22a3e1da511598a474f50a5d4a0b6647cc59d258072bbaf62199892b26e613c2456694b67339c36142cc08ac64b09a1ae6a103c16fc462b2fe94a861272c03d0ce27a91e9fba5f485448221304efb147ded157e5b4257017c3045040b1e245bb98181dbbe7586bccb5caf44bba2f5596efc45afdb967a945810ac552cbf9c2930d664aef88a92b86ec9138a7077bc5615b8ab737d2e9a34ed975099a2047bf31dc8af377bc4b3f073f3698330d00819d20b71295dc3ce651bf3f42a5481db0b7404edcbc25b5ff0c2d808dea6df894f96ebfc130d8eb180d327a0887f85e67b23ea679c98ac1f600e59c405d48d53dedd6d9c0ca63f39ed148f8e7526f2d2c54261ed8ea3eb93a609fc9aff88c4e289ff8b6f5e35285f1b6412aeab12901edf8b67da2f43bbf3c3110c547a7772856647c98cb2656ab0d04e8813d1c6fc98000cfc710ef319ee6beccd732efe03109b1f69f11f4caf0ce3271a15eff55a65dd965b3c6051c13e29a2bc8c92ea701ef40f82eeb0d54bd175633864f4a08c3cc24cc9e849a7ef35c239134cb48d774978bd7b1a36c9762fe3d78d49e7898a19f39701a3bdd62eb9dd8cbfb4a38d3473e485bbcdb95ff81b7a894f0f843eb1067344828e0a5c6485c819961b7e69b60bfa4d24e404db3a8844ca55911de1713f4850f760f36695e7afddbf20474b3ccd7f7a63f9650bb7503133d3a9490f870f44b530f9ceef6d3c475a689e83a072585e39304503efb1f80ed20fe741abb09b27c0f26c3d059d83b77792eedf235981de767203af659001070ad714213d1d8969ac5699c41db5bd709b37e815d0a1bf4c691866b761efb003a2b10b216c1095b2c55d879630a53a543377bfea90abbee1a33380bdd30d71a1423b4f3e004bac424a79ce55e37282e5a223c32a3fa92dea2d5d06ff46ee1b65ac83995e264eb5565a380d04326f6ab4285aae7a36849e97e1ad7fff002d2f360dd2c3bfc1b18f2d6607968c2fe6b4e6d73993cb26340a756f893169a0d7f9ded8c5eb483e05df3cd1b2d3dd8f6df2f60ddde002949ec85400fc6ade2100cad4472d58c24cc730eb472a9a742abea8c4249c56da1917a1e14f275a5692bed2583a4e93f3047c7ecc6226fb085e4ea1bbe7daed8d2035003212bc0579ccb61e56de171b6d6409d5a4c9dd0e9b5c85f00f60cedde9ae90fc67d649623f0357a2d1ff29ac0f08a26702ae57a609a3f596b9003db094e54e99943e35bbbcbf8fc09e67e123d27aaf8b49497d63c479c7d082ad97b5c6b086b2f40bd72c33c09443d06db5f58926d8a93ae69f6bf918345907331fb2986236e9d4bf4b5759b43f5392ce3d4aa3d49b6135f31d0ed1c03f56d2f39964ae2fe0a69fb054b76cd8005c171f3b2d335762f7573f57d3d959d59932f1257a79bf887d9db7ebe89c53be51ca8457c4698cae916055a4b9400cdbdd5693fcd0e5f7bfabb6a715e4fa6d463931133421958c208be663de31b7bb1787ecee56cdfca90f77cbf1472bd743e7926c1178f7cfff5f7d502973af6b0fb366fb16fe5e66aa32885008c2431953acb724e30a18ec70bed4b198cf1752ac409efc399eac4c816001a032f45a95ba9c0468c8e77e5c4581765a86aa73c15a4247383155c1462cfc8e01bc4c2cc9557bcedb59c2b9f2e43af05e4aa49b49e87d04de0756cbc52ae62513524d56cde9c837fcb83e411ea9f7e9af3146e287feee94860a8e28db4f937c046873dbe2de31e0990d42d865f9dc22f1187eaa9bde5ae6fe3be2666ddd854d24b5455719c8743b45b58b83a1c774ded7d5c4f01a0bbe72792532d1faed2b45720ed5a3ba6e3c11eb2957bb929786ed12bd3ea114e0212c106aa60048ca9796fa709448d28eb4f55fb2da9e0b02884c487dc424ba4535dea049f17b8c6ec8b47e4c9351d06bda87ae286ec1aa2ddb1ed07aa2376dd8fb70dcc13ae53204129f24d8f226aa117f98d84bcd91b1c8002d64c72efcb9e35c57eb42b6759f9145b388178b243f787899254f4cc3255001a057dfcae8884e468a2faa36ab6882e0a1c6a8ace39ea18b4f0408b465d46891e8d46af956f9c27f82373969d3266d428c27e4ed03a217bf8dfb672e61a38adaddc582cb3855a9afb38e31c20988ecabd02dc844b26a2f222b54b4316c8d4587bf33c3203f6f4d227b6e656724e6d8b1499e232c1da4595e5141b76fd6a6964f6039901ca663f9c40e04858d05eb723d269d6675ab7a153d394c4c98da57aac1eed552436ea1a827e6e7842d535d937f25033366617878960062f80e5a073aff290a2306d45eab49301baaf954b86ad991c5e65f9da4b4122d8410e2d0715390f803030aaae1c1986c862e18c93bc13fcc1fabf3063fa176c869633a8674ff0f95ddfcc6f733f2df73af24aeb36e58d952a81a22e43b34066a6e3ac3231c2657913a95c0ff90df3f8789a3b501e7356a321bc8c58f1196c6e84b1fb8c518a8e39d12d157ae5de55ef7be5128758d9f18dc9911ae958dd0788a0d50eab5edc3dc0a1ad2648e9ae8340033aa80f796736a9a12811aed2838851e34ada686cdddc1607be506b41c92ede45cd0df4a263a1254c9ac6cff8495d95e1b475df3ffc7942f3e1b11118ad4fb3b752eb205b7ddf8e6a41aa95d3615e36d9c7308ce1bd27257fac824806c37eb0f2595c9094833807237dfc6c0429abd345973668ceb3f57eb4f0488737dc5e023982b112a9a09e98a69984bdc3896b7f81e61cd24cbc30d884ae4d0ad4b757f17125bdec6f43db48ee2704e97620e7a8d9c1ee659e14976aacc4b5190bd37a5e22ca81ff5282fc67c6a2cbb6a11107718d3563567cae763cefa4ac57e726eedb12b019458575d5c6cb49ef69626d57f84470b144ec68e4070bb64f936e3d45ba73544fc5238ce65a2b2c7b6022f26373909e7105460285c3e040cd714b0a7bbbd589d80cdf31069e84468e8a9cbdc1fe94c8b3182d50117d8d695e5c1a933496790de51e6dfab97c2f882cd7c41ac0050f0a69b404a3f9d2caac45919aa589151d20497eea6cc1c117b27e6c8dacb892dc6956c6f9f9794b90354862ab907a8c2b9e77851ff2965f552c5af0288bbff2d6f300568d55cf8beddac06ec84607c9f7d4bb42bb74be910bbb0454926e175e10f21b5e601f466beb1e844ac43ac3f953896729fc3badb3c902ce8f544d0652af30e789148b828c97f74d79d2ca97cfe47ec2070280ab4827aed", 0x1000, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000001c0)="57156587095867f239687b952a8906492ea8f6be83a79fe1e88ade49356be93fc9e1f868197990609f3872c647e26faec0dcbee9f789") openat2(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', &(0x7f0000000280)={0x591002, 0x1, 0xc}, 0x18) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000000050005000200000c12000300686173683a6e65742c706f7274"], 0x4c}}, 0x2) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000090601020000000000000000020000000900020073797a31000000000500010007000000280007800c00018008000140ffffffff05"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000070601080000001e000000000a0000040500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x66b2c000) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000280)={'geneve0\x00', &(0x7f0000000800)=@ethtool_eeprom={0xc, 0x8, 0x101, 0xd8, "395ba861f6fb07e88be0863739922a2da35a339557edadb495d7e7f1f9da62ee9a87af9b4505b89b5cc5e515999d85f8303bdacda68cd54bdc2a0481cd6c9d48db497444756aba856bd11895716502574d3deb5c93bf35345ec82ad9df0fb7fdb14949a5bbccbf2e6789f646893782ec6771441543d44fe94887ac5a425c3e63dfc86737658a4ec75edef50eeaa72fb07e05c18b088183cacd944918b333b4bee9bfd6d48ade579ce653d398f869ea2515701c0c8c66999d87ed6220c229583fe66d13f1c3d5202fb2c60e3aad9c77335042275ced808a27"}}) r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r6}, 0x10) syz_mount_image$vfat(&(0x7f0000001800), &(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000000, &(0x7f0000000780)=ANY=[@ANYRES16, @ANYRES8=r7, @ANYRESOCT, @ANYRESDEC=0x0, @ANYRES32, @ANYRESHEX, @ANYRES64=r5, @ANYRESDEC], 0x4, 0x275, &(0x7f00000009c0)="$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") close(0x3) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x22004004, &(0x7f0000000140)={[{@jqfmt_vfsold}, {@nojournal_checksum}, {@noload}, {@user_xattr}, {@usrjquota}, {@grpjquota, 0x2e}]}, 0x81, 0x46c, &(0x7f00000004c0)="$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") bpf$OBJ_GET_MAP(0x7, &(0x7f0000000900)=@generic={&(0x7f00000008c0)='./file0\x00', 0x0, 0x8}, 0x18) 396.799385ms ago: executing program 3 (id=1513): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x4000000, 0x1, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, &(0x7f0000000180)={0x0, 0x0, {0x2, 0x3}}) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet6(0xa, 0x80002, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYRESDEC=r1], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x18) acct(0x0) socket(0x1e, 0x4, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6c9fc0be700202fe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="0207e80702"], 0x10}}, 0x40044) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSBRKP(r6, 0x5425, 0x0) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/partitions\x00', 0x0, 0x0) syz_io_uring_setup(0x4d40, &(0x7f00000007c0)={0x0, 0x3416, 0x800, 0x1, 0x367, 0x0, r8}, &(0x7f00000002c0), &(0x7f00000001c0)) sendfile(r7, r8, 0x0, 0x20000023896) 210.295367ms ago: executing program 1 (id=1514): listen(0xffffffffffffffff, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r0, 0xfffffffc) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="070000000000000000000200000014000180060001000200000008000300ac1414aaa0"], 0x28}}, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r4, 0xffffffffffffffff, 0x0) 109.888028ms ago: executing program 1 (id=1515): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000027"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) creat(&(0x7f0000000180)='./file0\x00', 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000240)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x7], 0x0, 0x0, 0x2000000000000116}}, 0x40) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x200000, &(0x7f0000000500)={[{@dioread_nolock}, {@stripe={'stripe', 0x3d, 0x3}}, {@min_batch_time={'min_batch_time', 0x3d, 0x1}}, {@nogrpid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nodelalloc}, {@errors_remount}, {@acl}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x343}}, {@jqfmt_vfsold}, {@barrier_val={'barrier', 0x3d, 0x7}}, {@nombcache}]}, 0xfd, 0x573, &(0x7f0000000cc0)="$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") bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r3, &(0x7f0000002980)={&(0x7f0000000180)={0x2, 0xe23, @remote}, 0x10, &(0x7f0000000680)=[{&(0x7f0000000380)='_q', 0x2}], 0x1}, 0x448e4) setsockopt$sock_attach_bpf(r3, 0x84, 0x1e, &(0x7f0000000000), 0x10) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000080)={'batadv_slave_1\x00', {0x2, 0x0, @remote}}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000080000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a30000000000800054000000021440011800a0001006d617463680000003400028008000240000000001c0003000afe6cbf96caa5debdad61b67ddb2fb68fcf19f7807076430a00010071756f7461"], 0xc8}, 0x1, 0x0, 0x0, 0x4000005}, 0x20000004) 104.326569ms ago: executing program 0 (id=1516): syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000380)=ANY=[@ANYBLOB="12006b19eb00020000402505a1a440000102030109025c00ea0700000002010000000904000001020d0000052406000305240000000d240f010000000000000000000900000000000000810300020000000904010000020d00000904010102020d000009058202000200000009ec0202000200000000cd6bc8eb2d4cde081ea8f88ba8e5e60fa1e86f985a015ad7e45671194823aa2c78144ce5e63c15f88c06340f4dca69070194baa601688a87"], 0x0) r0 = openat$rtc(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0x7005, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f00000039c0)={0x28, 0x76, 0x31f, 0x0, 0x0, "", [@typed={0x8, 0x14f, 0x0, 0x0, @ipv4=@empty}, @nested={0x10, 0x47, 0x0, 0x1, [@typed={0xc, 0x1, 0x0, 0x0, @u64=0x5}]}]}, 0x28}], 0x1, 0x0, 0x0, 0x4004000}, 0x0) r2 = syz_io_uring_setup(0x9e, &(0x7f0000000640)={0x0, 0x5867, 0x10, 0xfffffffc, 0x389}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b708000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = accept4$phonet_pipe(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000300)=0x10, 0x800) sendmmsg(r6, &(0x7f0000000b40)=[{{&(0x7f00000004c0)=@pptp={0x18, 0x2, {0x1, @dev={0xac, 0x14, 0x14, 0x37}}}, 0x80, &(0x7f0000000ac0)=[{&(0x7f0000000540)="d6d9654fbd9e45083820e3dcda8e6342d1c31ec03a20cc49ea51faac6694ec91b8f230b4da559cc32a3ce4cbe717e7c248a59b3c2bfed7a6610ef7cdc15b974e3d8400f4c1bbf55571456a328f6e9aaeaaa4f8874386b0c9ff3b4d939584d4347082ff8090ee1cb1", 0x68}, {&(0x7f0000000780)="3782b7b93b8d927b14c568173467a08191966dc377ea9d2816c1673545fa59b0729c8bde1a0f58800d8e0a6bffc884a8d75629218dd8066f2ef27eca3240f62fdc556f6c934e414f84c07b1f0ec77fbeb5d48cd9476a8bc36012f20b3df4098764d0bc2b2a98f9f32d5b161a2ac752040d015cf0ee88821e9e49776222f2c4a57fb61608daf2c187d540deee9e52b1dad208a4c51133a378cb78", 0x9a}, {&(0x7f00000009c0)="478b329fe6e76c182db3fc74626adb7af2608449e3995f440776867d6a76e8c8b2568b60e3c252c236b21ae59cba18ba6aa11ecb0aeefc1d578f232f822db5316f5914570b1cc8f02764a3737c8cc02b213ea4ab1224c627334a1462db56e8b2d2ac9a863cf45963a71027c526ee73598ccc9fe897d140af4d3aeb87baa563416e815662e475f722253e68811751afd407853b9188b6b62f3a421ddace53a83877bf93eb5ffba8c91001a471365e98b547d5aac3ea3fee023f4cd8f62bbbe4a4d767f78fa74673a6b33377f0adf1fa2ae6ed952f49b6cccd1208924d2fb6eefe80386c4c31393e9b1a00", 0xea}, {&(0x7f0000000840)="30b3781b7ecad98f04e172e2f356417b42477825b767b8236f85b8845437b4cd4b53a7da1bda533247d450a01de524821daafbda4fd66c57a0aedd8abf6205163d9d30423b6ee00a37c4c61e2f9f967916a8c15fcaea342977f89c5856b8baad5b849ca414f40d4ff6849eca8db46112c294f94b041b7f39766697ea510a4f83a79fd303", 0x84}, {&(0x7f00000005c0)="1b", 0x1}], 0x5, &(0x7f0000001340)=[{0x98, 0x107, 0x1000, "ff7e938855e8761786924bc550664e18be7bc434a62533293c0da6201a72b7cb00236460d333c960617f1ca874c553286f342f184c0f823460531009bfe20c2d7ba47a7b95bb619e5e43f04b4558f98efc6bbe5d44dc4a3858e237f583976032bb28d0dc26931620589ab6b6832910c27553c616a18a2f89e94e62f46e4a5b2049fb972fb332"}, {0x110, 0x102, 0x0, "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"}, {0x1010, 0x1, 0x80000000, "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"}, {0x68, 0xcea6c11b03c948a, 0x4, "cfdfa74b404938909845eadc125cf29d56b6ad409641f0fdba1eee5a5904ae9577bf20287d15c6800c077dbd19c96541b71df25d7c1fd67cf55a159c476063c921a7b649fdfa542801392f7bbc146549cfaab8b2"}, {0x88, 0x103, 0x6, "e607e4b154fe9c44b9b107faa333825c61e3b2790a82e1508ddaef7c87b2d7a83edb6ebfe6a80cbbd0b2a39867cb80b0d91a7a79da7f6c06f64ff155c6a48fc86c7b4d89131355f39c81f21ceda07c34ae293efafcff19a173fff360946f8f915d3e6efe53974dbae54bb7fa51f54f4f9665"}, {0xc0, 0x10d, 0x8000, "70079688afec6ff24ca0a65873734faaa6f52311199dda5d727834c22b2331ad3ad5ca045910c7e3af6512d9a98c69812726cfec62099d42ecb23cbdb3d2c0681f39dc00ecc69c97e21388505d57a3ce916072a546524f4cae96f813937ca41cbc10eb34994bc4076386b5a78aa4a08a48812e3dbaf0c964d2418335574d9446e8d670e3896a1a07170698a59318a3ed1b9a2614c76391c3ba94debd6aef834b752dc7b4574e1aa0c5e62d6d"}], 0x1368}}, {{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000600)="83e8ac4220f1ae7580376f80094f", 0xe}], 0x1, &(0x7f0000000c40)=[{0x80, 0x109, 0x2, "c7645e55415c31150c792d9e68f090d894045c55015714a1c0a066ba9ddee7a07fee86a8339f3e8c9ee1e2070481f1f195c8850f1b6b9a8b9e74208abce9463385b34e237b0167e2d3249e64ce6ec2bba7d34a75950b5cdd49f51fe6bbe64111f2bc9560dcb7b0e0348972"}, {0x98, 0x115, 0x7, "001566aca4d557a4ac138470c51171143670173e6d4e4081610b34b671bb17ba787e8babfe75fde67090d8ac1cb04c6a16e9db2785aeefb45ac60091ac6b3cced6fd1c613b0aad0bd11b7a422aa7a3da73c79a36aab148080453c38272fcf2ca309ed3e78b0ed98014eac5e7ac9d14da6e7fd24aab96c09b6322c73d0c0f692bd7a590"}, {0x78, 0x84, 0x400, "c09924bb6b6ae8b48b37699d5eefe6d03c4940e26a0a1671581af88a7bc886b9b6e40a8dab4381b64778cd642832c52ee70e0efd7247ed9ed7b6248a58614835e935e613661ee026810bda9cf92943178ff64ef1f5e67991005060dfa9484f7f23bf4a"}], 0x190}}], 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001300)={&(0x7f0000000c00)='net_dev_start_xmit\x00', r8}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r7, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="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", 0x0, 0x24, 0x60000000}, 0x2c) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f00000002c0)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x4007, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r2, 0x100847c0, 0x0, 0x1, 0x0, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xae, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffff0b8}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r10}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) prctl$PR_SVE_SET_VL(0x32, 0x92ad) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) umount2(&(0x7f0000000580)='./file0\x00', 0x3) socket$nl_route(0x10, 0x3, 0x0) 0s ago: executing program 1 (id=1517): r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = dup(r0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bf"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) ioctl$PTP_EXTTS_REQUEST2(r1, 0x43403d05, 0x0) kernel console output (not intermixed with test programs): ving as an active interface with an up link [ 28.880153][ T3317] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.887284][ T3317] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.894412][ T3317] bridge_slave_0: entered allmulticast mode [ 28.900698][ T3317] bridge_slave_0: entered promiscuous mode [ 28.927843][ T3317] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.934946][ T3317] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.942017][ T3317] bridge_slave_1: entered allmulticast mode [ 28.948549][ T3317] bridge_slave_1: entered promiscuous mode [ 28.968745][ T3309] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 28.975801][ T3309] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.001810][ T3309] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.013456][ T3304] team0: Port device team_slave_0 added [ 29.033393][ T3309] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.040418][ T3309] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.066348][ T3309] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.077702][ T3304] team0: Port device team_slave_1 added [ 29.094228][ T3317] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.103379][ T3305] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.110495][ T3305] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.117722][ T3305] bridge_slave_0: entered allmulticast mode [ 29.124049][ T3305] bridge_slave_0: entered promiscuous mode [ 29.131586][ T3305] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.138676][ T3305] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.145874][ T3305] bridge_slave_1: entered allmulticast mode [ 29.152109][ T3305] bridge_slave_1: entered promiscuous mode [ 29.166671][ T3317] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.176013][ T3304] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.182992][ T3304] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.208969][ T3304] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.220524][ T3304] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.227500][ T3304] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.253450][ T3304] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.303190][ T3309] hsr_slave_0: entered promiscuous mode [ 29.309277][ T3309] hsr_slave_1: entered promiscuous mode [ 29.316342][ T3305] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.335275][ T3314] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.342404][ T3314] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.349797][ T3314] bridge_slave_0: entered allmulticast mode [ 29.356255][ T3314] bridge_slave_0: entered promiscuous mode [ 29.363318][ T3317] team0: Port device team_slave_0 added [ 29.370032][ T3317] team0: Port device team_slave_1 added [ 29.377310][ T3305] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.391515][ T3314] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.398598][ T3314] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.405701][ T3314] bridge_slave_1: entered allmulticast mode [ 29.412137][ T3314] bridge_slave_1: entered promiscuous mode [ 29.455946][ T3304] hsr_slave_0: entered promiscuous mode [ 29.461859][ T3304] hsr_slave_1: entered promiscuous mode [ 29.467882][ T3304] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 29.475531][ T3304] Cannot create hsr debugfs directory [ 29.485030][ T3305] team0: Port device team_slave_0 added [ 29.491652][ T3314] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.500985][ T3317] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.507965][ T3317] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.533909][ T3317] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.554010][ T3305] team0: Port device team_slave_1 added [ 29.560578][ T3314] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.574590][ T3317] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.581603][ T3317] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.607614][ T3317] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.644100][ T3305] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.651092][ T3305] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.677058][ T3305] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.701952][ T3314] team0: Port device team_slave_0 added [ 29.709199][ T3314] team0: Port device team_slave_1 added [ 29.715212][ T3305] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.722145][ T3305] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.748119][ T3305] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.793750][ T3314] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.800773][ T3314] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.826716][ T3314] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.850957][ T3317] hsr_slave_0: entered promiscuous mode [ 29.857030][ T3317] hsr_slave_1: entered promiscuous mode [ 29.862809][ T3317] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 29.870514][ T3317] Cannot create hsr debugfs directory [ 29.876623][ T3314] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.883722][ T3314] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.909746][ T3314] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.944048][ T3305] hsr_slave_0: entered promiscuous mode [ 29.950160][ T3305] hsr_slave_1: entered promiscuous mode [ 29.956036][ T3305] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 29.963580][ T3305] Cannot create hsr debugfs directory [ 29.992801][ T3314] hsr_slave_0: entered promiscuous mode [ 29.998869][ T3314] hsr_slave_1: entered promiscuous mode [ 30.004738][ T3314] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 30.012366][ T3314] Cannot create hsr debugfs directory [ 30.062890][ T3309] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 30.088880][ T3309] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 30.111845][ T3309] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 30.133371][ T3309] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 30.182874][ T3304] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 30.199987][ T3304] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 30.216458][ T3304] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 30.225996][ T3304] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 30.240824][ T3317] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 30.249897][ T3317] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 30.260018][ T3317] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 30.274966][ T3317] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 30.314503][ T3305] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 30.331298][ T3305] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 30.340758][ T3305] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 30.349392][ T3305] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 30.368623][ T3309] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.397216][ T3314] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 30.409127][ T3309] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.419293][ T3314] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 30.438163][ T3314] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 30.447468][ T3314] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 30.457573][ T780] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.464722][ T780] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.478303][ T3317] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.496985][ T780] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.505529][ T780] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.526153][ T3304] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.538330][ T3317] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.555012][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.562303][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.572760][ T3304] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.592750][ T265] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.599915][ T265] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.624823][ T265] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.631983][ T265] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.640657][ T265] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.647711][ T265] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.684735][ T3305] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.715193][ T3305] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.728422][ T3304] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 30.750945][ T3309] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.761055][ T265] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.768239][ T265] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.785758][ T3314] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.793907][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.801073][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.819381][ T3317] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.833915][ T3314] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.852755][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.859830][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.877837][ T3304] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.888889][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.896052][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.009073][ T3305] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.031421][ T3314] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.047674][ T3309] veth0_vlan: entered promiscuous mode [ 31.070790][ T3309] veth1_vlan: entered promiscuous mode [ 31.096208][ T3317] veth0_vlan: entered promiscuous mode [ 31.115783][ T3317] veth1_vlan: entered promiscuous mode [ 31.122327][ T3304] veth0_vlan: entered promiscuous mode [ 31.141520][ T3309] veth0_macvtap: entered promiscuous mode [ 31.157281][ T3304] veth1_vlan: entered promiscuous mode [ 31.168553][ T3309] veth1_macvtap: entered promiscuous mode [ 31.178179][ T3317] veth0_macvtap: entered promiscuous mode [ 31.193669][ T3309] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.202869][ T3317] veth1_macvtap: entered promiscuous mode [ 31.211844][ T3309] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.230366][ T3304] veth0_macvtap: entered promiscuous mode [ 31.239526][ T3309] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.248472][ T3309] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.257306][ T3309] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.266096][ T3309] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.286011][ T3304] veth1_macvtap: entered promiscuous mode [ 31.298442][ T3317] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.311831][ T3317] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.321255][ T3314] veth0_vlan: entered promiscuous mode [ 31.333341][ T3304] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.342496][ T3314] veth1_vlan: entered promiscuous mode [ 31.352772][ T3317] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.361535][ T3317] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.370373][ T3317] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.379103][ T3317] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.393665][ T3304] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.409383][ T3305] veth0_vlan: entered promiscuous mode [ 31.419626][ T3305] veth1_vlan: entered promiscuous mode [ 31.430118][ T3304] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.439109][ T3304] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.447844][ T3304] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.456593][ T3304] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.468592][ T3309] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 31.498460][ T3314] veth0_macvtap: entered promiscuous mode [ 31.520976][ T3314] veth1_macvtap: entered promiscuous mode [ 31.537594][ T3314] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.546537][ T3314] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.554890][ T3314] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.563708][ T3314] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.572602][ T3314] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.581418][ T3314] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.627031][ T3305] veth0_macvtap: entered promiscuous mode [ 31.641825][ T3305] veth1_macvtap: entered promiscuous mode [ 31.680562][ T3305] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.745510][ T3305] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.765995][ T3305] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.774831][ T3305] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.783560][ T3305] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.792455][ T3305] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.874737][ T3491] loop1: detected capacity change from 0 to 256 [ 32.050378][ T29] kauditd_printk_skb: 37 callbacks suppressed [ 32.050395][ T29] audit: type=1400 audit(1752567607.436:109): avc: denied { mount } for pid=3490 comm="syz.1.6" name="/" dev="loop1" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 32.103576][ T3485] bond0: entered promiscuous mode [ 32.108688][ T3485] bond_slave_0: entered promiscuous mode [ 32.114687][ T3485] bond_slave_1: entered promiscuous mode [ 32.123254][ T3485] macvlan1: entered promiscuous mode [ 32.129689][ T3485] hsr1: entered promiscuous mode [ 32.164703][ T29] audit: type=1400 audit(1752567607.666:110): avc: denied { create } for pid=3490 comm="syz.1.6" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 32.183860][ T29] audit: type=1400 audit(1752567607.676:111): avc: denied { bind } for pid=3490 comm="syz.1.6" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 32.202831][ T29] audit: type=1400 audit(1752567607.676:112): avc: denied { setopt } for pid=3490 comm="syz.1.6" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 32.591965][ T3506] io-wq is not configured for unbound workers [ 32.611250][ T29] audit: type=1400 audit(1752567608.046:113): avc: denied { name_bind } for pid=3501 comm="syz.2.7" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 32.638820][ T29] audit: type=1400 audit(1752567608.046:114): avc: denied { allowed } for pid=3501 comm="syz.2.7" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 32.657820][ T29] audit: type=1400 audit(1752567608.046:115): avc: denied { create } for pid=3501 comm="syz.2.7" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 32.678758][ T29] audit: type=1400 audit(1752567608.046:116): avc: denied { create } for pid=3497 comm="syz.4.5" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 32.697994][ T29] audit: type=1400 audit(1752567608.086:117): avc: denied { setopt } for pid=3505 comm="syz.0.9" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 32.717330][ T29] audit: type=1400 audit(1752567608.086:118): avc: denied { map } for pid=3505 comm="syz.0.9" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=4058 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 33.047178][ T3520] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 33.092408][ T3520] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 33.156868][ T3523] loop2: detected capacity change from 0 to 128 [ 33.236379][ T3525] loop1: detected capacity change from 0 to 512 [ 33.243178][ T3525] EXT4-fs: dax option not supported [ 34.548580][ T3547] loop1: detected capacity change from 0 to 1024 [ 34.607803][ T3547] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 34.619942][ T3554] loop0: detected capacity change from 0 to 1024 [ 34.632338][ T3556] loop2: detected capacity change from 0 to 256 [ 34.675426][ T3554] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 34.727587][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.776586][ T3561] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 34.795780][ T3304] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.805532][ T3561] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 35.398493][ T3571] Invalid ELF header magic: != ELF [ 35.764008][ T3574] netlink: 'syz.2.29': attribute type 9 has an invalid length. [ 35.876488][ T3579] loop1: detected capacity change from 0 to 512 [ 35.883346][ T3579] ======================================================= [ 35.883346][ T3579] WARNING: The mand mount option has been deprecated and [ 35.883346][ T3579] and is ignored by this kernel. Remove the mand [ 35.883346][ T3579] option from the mount to silence this warning. [ 35.883346][ T3579] ======================================================= [ 35.930115][ T3579] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 35.947578][ T3579] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.31: Failed to acquire dquot type 1 [ 35.959977][ T3579] EXT4-fs (loop1): 1 truncate cleaned up [ 35.967209][ T3579] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 35.987701][ T3579] ext4 filesystem being mounted at /7/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 36.689705][ T3598] loop2: detected capacity change from 0 to 2048 [ 36.762590][ T3594] syz.3.32 (3594) used greatest stack depth: 10896 bytes left [ 36.901916][ T3598] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 37.152013][ T3605] loop3: detected capacity change from 0 to 256 [ 37.190922][ T29] kauditd_printk_skb: 42 callbacks suppressed [ 37.190935][ T29] audit: type=1400 audit(1752567612.706:159): avc: denied { connect } for pid=3606 comm="syz.0.39" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 37.230757][ T29] audit: type=1400 audit(1752567612.736:160): avc: denied { remove_name } for pid=3597 comm="syz.2.37" name="file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 37.253160][ T29] audit: type=1400 audit(1752567612.736:161): avc: denied { unlink } for pid=3597 comm="syz.2.37" name="file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 37.275601][ T29] audit: type=1400 audit(1752567612.736:162): avc: denied { add_name } for pid=3597 comm="syz.2.37" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 37.296255][ T29] audit: type=1400 audit(1752567612.736:163): avc: denied { create } for pid=3597 comm="syz.2.37" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 37.316688][ T29] audit: type=1400 audit(1752567612.736:164): avc: denied { read write open } for pid=3597 comm="syz.2.37" path="/11/file0/file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 37.328310][ T3613] Zero length message leads to an empty skb [ 37.340034][ T29] audit: type=1400 audit(1752567612.736:165): avc: denied { ioctl } for pid=3597 comm="syz.2.37" path="/11/file0/file1" dev="loop2" ino=15 ioctlcmd=0x6611 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 37.351905][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.369904][ T29] audit: type=1400 audit(1752567612.736:166): avc: denied { ioctl } for pid=3606 comm="syz.0.39" path="socket:[4484]" dev="sockfs" ino=4484 ioctlcmd=0x48c8 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 37.406063][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.414876][ T29] audit: type=1400 audit(1752567612.776:167): avc: denied { create } for pid=3608 comm="syz.0.42" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 37.435012][ T29] audit: type=1400 audit(1752567612.796:168): avc: denied { write } for pid=3608 comm="syz.0.42" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 37.486484][ T3621] loop4: detected capacity change from 0 to 4096 [ 37.510668][ T3621] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 37.643787][ T3625] block device autoloading is deprecated and will be removed. [ 37.651722][ T3625] syz.3.47: attempt to access beyond end of device [ 37.651722][ T3625] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 37.732887][ T3630] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=3630 comm=syz.0.43 [ 37.756717][ T3630] loop0: detected capacity change from 0 to 1024 [ 37.807362][ T3630] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 37.818357][ T3630] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (30349!=20869) [ 37.829888][ T3630] EXT4-fs (loop0): invalid journal inode [ 37.835594][ T3630] EXT4-fs (loop0): can't get journal size [ 37.844877][ T3630] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 38.216840][ T3621] syz.4.48 (3621) used greatest stack depth: 10792 bytes left [ 38.266722][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.277541][ T3304] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.481208][ T3643] loop4: detected capacity change from 0 to 1024 [ 38.518812][ T3643] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 38.618831][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.704180][ T3668] vxcan1: entered allmulticast mode [ 38.714485][ T3662] netlink: 12 bytes leftover after parsing attributes in process `syz.0.61'. [ 38.773144][ T3675] loop1: detected capacity change from 0 to 256 [ 40.016037][ T3691] netlink: 16 bytes leftover after parsing attributes in process `syz.0.69'. [ 40.271978][ T3697] netlink: 'syz.3.70': attribute type 4 has an invalid length. [ 40.927608][ T3693] netlink: 59 bytes leftover after parsing attributes in process `syz.0.69'. [ 40.989980][ T3700] bridge_slave_0: left allmulticast mode [ 40.995909][ T3700] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.038769][ T3700] syz.1.71 (3700) used greatest stack depth: 10664 bytes left [ 41.149997][ T3728] netlink: 'syz.3.85': attribute type 4 has an invalid length. [ 41.179605][ T3733] loop2: detected capacity change from 0 to 1024 [ 41.257000][ T3733] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.260717][ T3747] loop1: detected capacity change from 0 to 512 [ 41.291362][ T3747] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 41.304975][ T3747] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 41.312911][ T3747] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e000e118, mo2=0002] [ 41.386495][ T3747] System zones: 0-1, 15-15, 18-18, 34-34 [ 41.402698][ T3747] EXT4-fs (loop1): orphan cleanup on readonly fs [ 41.403667][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.409275][ T3747] EXT4-fs warning (device loop1): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 41.432663][ T3747] EXT4-fs (loop1): Cannot turn on quotas: error -22 [ 41.439703][ T3747] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.93: bg 0: block 40: padding at end of block bitmap is not set [ 41.478391][ T3764] netlink: 'syz.0.101': attribute type 4 has an invalid length. [ 41.606697][ T3747] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 41.677187][ T3747] EXT4-fs (loop1): 1 truncate cleaned up [ 41.729195][ T3747] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 41.841137][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.991049][ T3797] netlink: 'syz.0.115': attribute type 4 has an invalid length. [ 41.993778][ T3799] loop1: detected capacity change from 0 to 512 [ 42.007113][ T3799] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 42.026091][ T3799] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 42.034070][ T3799] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e000e118, mo2=0002] [ 42.047397][ T3799] System zones: 0-1, 15-15, 18-18, 34-34 [ 42.054891][ T3799] EXT4-fs (loop1): orphan cleanup on readonly fs [ 42.061366][ T3799] EXT4-fs warning (device loop1): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 42.076010][ T3799] EXT4-fs (loop1): Cannot turn on quotas: error -22 [ 42.084223][ T3805] loop0: detected capacity change from 0 to 1024 [ 42.108029][ T3805] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.123254][ T3799] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.116: bg 0: block 40: padding at end of block bitmap is not set [ 42.179811][ T3799] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 42.190519][ T3304] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.202518][ T3799] EXT4-fs (loop1): 1 truncate cleaned up [ 42.213493][ T3799] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 42.245334][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.323175][ T3831] loop0: detected capacity change from 0 to 1024 [ 42.365577][ T3836] loop4: detected capacity change from 0 to 1024 [ 42.428009][ T3831] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 42.436577][ T3836] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.467654][ T3304] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.487490][ T3848] loop3: detected capacity change from 0 to 512 [ 42.495903][ T3848] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 42.597216][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.655285][ T3848] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 42.663260][ T3848] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e000e118, mo2=0002] [ 42.680730][ T3848] System zones: 0-1, 15-15, 18-18, 34-34 [ 42.687105][ T3848] EXT4-fs (loop3): orphan cleanup on readonly fs [ 42.693786][ T3848] __quota_error: 26 callbacks suppressed [ 42.693798][ T3848] Quota error (device loop3): v2_read_header: Failed header read: expected=8 got=0 [ 42.809258][ T3848] EXT4-fs warning (device loop3): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 42.823890][ T3848] EXT4-fs (loop3): Cannot turn on quotas: error -22 [ 42.842358][ T3848] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.137: bg 0: block 40: padding at end of block bitmap is not set [ 42.877916][ T3848] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 42.887406][ T3848] EXT4-fs (loop3): 1 truncate cleaned up [ 42.894612][ T3848] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 42.921430][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.029433][ T3868] netlink: 64 bytes leftover after parsing attributes in process `syz.3.143'. [ 43.116199][ T3876] loop3: detected capacity change from 0 to 1024 [ 43.135758][ T3876] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 43.248909][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.345965][ T3887] loop3: detected capacity change from 0 to 1024 [ 43.372558][ T3891] loop1: detected capacity change from 0 to 512 [ 43.386497][ T3887] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.415352][ T3891] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 43.434949][ T3891] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 43.442886][ T3891] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e000e118, mo2=0002] [ 43.466169][ T3891] System zones: 0-1, 15-15, 18-18, 34-34 [ 43.472180][ T3891] EXT4-fs (loop1): orphan cleanup on readonly fs [ 43.474845][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.478720][ T3891] Quota error (device loop1): v2_read_header: Failed header read: expected=8 got=0 [ 43.496836][ T3891] EXT4-fs warning (device loop1): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 43.511373][ T3891] EXT4-fs (loop1): Cannot turn on quotas: error -22 [ 43.518487][ T3891] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.152: bg 0: block 40: padding at end of block bitmap is not set [ 43.533708][ T3891] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 43.565079][ T3891] EXT4-fs (loop1): 1 truncate cleaned up [ 43.571146][ T3891] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 43.614335][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.627085][ T3901] netlink: 64 bytes leftover after parsing attributes in process `syz.3.155'. [ 43.813190][ T3918] loop2: detected capacity change from 0 to 1024 [ 43.864793][ T3916] loop0: detected capacity change from 0 to 1024 [ 43.900365][ T3918] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.007135][ T3916] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 44.077686][ T3929] loop1: detected capacity change from 0 to 512 [ 44.175166][ T3929] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 44.206059][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.231227][ T3304] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.242077][ T3929] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 44.250099][ T3929] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e000e118, mo2=0002] [ 44.258237][ T3929] System zones: 0-1, 15-15, 18-18, 34-34 [ 44.264295][ T3929] EXT4-fs (loop1): orphan cleanup on readonly fs [ 44.284096][ T3937] netlink: 64 bytes leftover after parsing attributes in process `syz.2.168'. [ 44.286284][ T3929] Quota error (device loop1): v2_read_header: Failed header read: expected=8 got=0 [ 44.339437][ T3929] EXT4-fs warning (device loop1): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 44.354115][ T3929] EXT4-fs (loop1): Cannot turn on quotas: error -22 [ 44.361587][ T3929] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.166: bg 0: block 40: padding at end of block bitmap is not set [ 44.377162][ T3929] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 44.386447][ T3929] EXT4-fs (loop1): 1 truncate cleaned up [ 44.392644][ T3929] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 44.438958][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.733594][ T3959] loop0: detected capacity change from 0 to 1024 [ 44.854597][ T3959] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.938205][ T3972] loop1: detected capacity change from 0 to 512 [ 44.946040][ T3972] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 44.965600][ T3304] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.987090][ T3972] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 44.995114][ T3972] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e000e118, mo2=0002] [ 45.014749][ T3972] System zones: 0-1, 15-15, 18-18, 34-34 [ 45.025591][ T3972] EXT4-fs (loop1): orphan cleanup on readonly fs [ 45.039845][ T3972] Quota error (device loop1): v2_read_header: Failed header read: expected=8 got=0 [ 45.056579][ T3986] netlink: 64 bytes leftover after parsing attributes in process `syz.0.186'. [ 45.078497][ T3972] EXT4-fs warning (device loop1): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 45.093083][ T3972] EXT4-fs (loop1): Cannot turn on quotas: error -22 [ 45.166023][ T3972] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.185: bg 0: block 40: padding at end of block bitmap is not set [ 45.182880][ T3972] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 45.194487][ T3972] EXT4-fs (loop1): 1 truncate cleaned up [ 45.200603][ T3972] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 45.405624][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.555529][ T4002] loop4: detected capacity change from 0 to 1024 [ 45.619936][ T4002] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.682202][ T4019] netlink: 64 bytes leftover after parsing attributes in process `syz.2.203'. [ 45.692151][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.232502][ T4050] loop4: detected capacity change from 0 to 1024 [ 46.288446][ T4053] netlink: 64 bytes leftover after parsing attributes in process `syz.3.217'. [ 46.318049][ T4050] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.356309][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.367702][ T4060] loop3: detected capacity change from 0 to 1024 [ 46.391977][ T4060] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 46.462581][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.496642][ T4075] netlink: 36 bytes leftover after parsing attributes in process `syz.2.227'. [ 46.604174][ T4084] netlink: 64 bytes leftover after parsing attributes in process `syz.2.231'. [ 46.696035][ T4093] loop4: detected capacity change from 0 to 1024 [ 46.737610][ T4096] netlink: 'syz.3.226': attribute type 4 has an invalid length. [ 46.783930][ T4093] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.808757][ T4102] loop1: detected capacity change from 0 to 1024 [ 46.850125][ T4102] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 46.976564][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.093654][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.142854][ T4113] netlink: 36 bytes leftover after parsing attributes in process `syz.4.240'. [ 47.246622][ T4119] netlink: 64 bytes leftover after parsing attributes in process `syz.4.243'. [ 47.653191][ T4137] loop3: detected capacity change from 0 to 1024 [ 47.682829][ T4137] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 47.701481][ T4145] netlink: 36 bytes leftover after parsing attributes in process `syz.4.254'. [ 47.734638][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.748433][ T4148] netlink: 64 bytes leftover after parsing attributes in process `syz.2.255'. [ 47.952636][ T4164] netlink: 'syz.4.258': attribute type 4 has an invalid length. [ 49.272693][ T4230] netlink: 'syz.2.289': attribute type 4 has an invalid length. [ 49.419823][ T4232] __nla_validate_parse: 4 callbacks suppressed [ 49.419840][ T4232] netlink: 36 bytes leftover after parsing attributes in process `syz.0.291'. [ 49.464327][ T4234] loop3: detected capacity change from 0 to 1024 [ 49.577546][ T4234] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.635930][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.698665][ T4247] netlink: 64 bytes leftover after parsing attributes in process `syz.3.295'. [ 49.782971][ T4259] netlink: 24 bytes leftover after parsing attributes in process `syz.1.304'. [ 49.832822][ T4265] loop1: detected capacity change from 0 to 1024 [ 49.846547][ T4265] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.869942][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.061926][ T4282] netlink: 64 bytes leftover after parsing attributes in process `syz.4.313'. [ 50.290846][ T4292] netlink: 24 bytes leftover after parsing attributes in process `syz.2.316'. [ 50.380554][ T4294] loop4: detected capacity change from 0 to 1024 [ 50.442832][ T4294] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.490944][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.649475][ T4308] netlink: 'syz.4.321': attribute type 4 has an invalid length. [ 50.657942][ T4313] netlink: 64 bytes leftover after parsing attributes in process `syz.0.325'. [ 50.713243][ T4322] netlink: 24 bytes leftover after parsing attributes in process `syz.3.328'. [ 50.778604][ T4328] loop3: detected capacity change from 0 to 1024 [ 50.819840][ T4328] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.882087][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.916349][ T4344] netlink: 64 bytes leftover after parsing attributes in process `syz.3.338'. [ 50.953340][ T4348] netlink: 16 bytes leftover after parsing attributes in process `syz.3.341'. [ 51.156363][ T4369] loop0: detected capacity change from 0 to 1024 [ 51.214101][ T4369] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.278724][ T3304] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.518116][ T4378] netlink: 64 bytes leftover after parsing attributes in process `syz.0.352'. [ 51.698679][ T4398] loop2: detected capacity change from 0 to 1024 [ 51.791713][ T4398] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.818714][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.842021][ T4405] netlink: 'syz.4.363': attribute type 4 has an invalid length. [ 51.856838][ T4412] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 51.868419][ T4412] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.875682][ T4412] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.898242][ T29] audit: type=1400 audit(1752567627.376:193): avc: denied { ioctl } for pid=4411 comm="syz.0.369" path="socket:[7558]" dev="sockfs" ino=7558 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 52.354012][ T4449] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 52.365185][ T4449] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.372471][ T4449] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.823259][ T4475] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 52.841025][ T4475] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.848263][ T4475] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.048395][ T4490] netlink: 'syz.3.402': attribute type 4 has an invalid length. [ 53.898066][ T4544] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.905403][ T4544] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.948464][ T4551] vhci_hcd: default hub control req: 800f v0000 i0000 l31125 [ 53.975578][ T29] audit: type=1400 audit(1752567629.486:194): avc: denied { write } for pid=4554 comm="syz.0.433" path="socket:[8472]" dev="sockfs" ino=8472 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 53.998694][ T29] audit: type=1400 audit(1752567629.486:195): avc: denied { create } for pid=4550 comm="syz.1.432" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 54.011545][ T4560] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 54.018500][ T29] audit: type=1400 audit(1752567629.486:196): avc: denied { write } for pid=4550 comm="syz.1.432" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 54.046367][ T4560] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 54.052575][ T29] audit: type=1400 audit(1752567629.496:197): avc: denied { setopt } for pid=4556 comm="syz.3.434" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 54.074205][ T29] audit: type=1400 audit(1752567629.496:198): avc: denied { create } for pid=4556 comm="syz.3.434" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 54.094381][ T29] audit: type=1400 audit(1752567629.556:199): avc: denied { create } for pid=4549 comm="syz.4.431" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 54.113749][ T29] audit: type=1400 audit(1752567629.556:200): avc: denied { write } for pid=4549 comm="syz.4.431" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 54.199073][ T29] audit: type=1400 audit(1752567629.716:201): avc: denied { ioctl } for pid=4556 comm="syz.3.434" path="socket:[7808]" dev="sockfs" ino=7808 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 54.237991][ T29] audit: type=1400 audit(1752567629.746:202): avc: denied { unmount } for pid=4567 comm="syz.1.435" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 54.278649][ T4582] FAULT_INJECTION: forcing a failure. [ 54.278649][ T4582] name failslab, interval 1, probability 0, space 0, times 1 [ 54.291353][ T4582] CPU: 1 UID: 0 PID: 4582 Comm: syz.2.436 Not tainted 6.16.0-rc6-syzkaller-00002-g155a3c003e55 #0 PREEMPT(voluntary) [ 54.291385][ T4582] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 54.291456][ T4582] Call Trace: [ 54.291461][ T4582] [ 54.291467][ T4582] __dump_stack+0x1d/0x30 [ 54.291486][ T4582] dump_stack_lvl+0xe8/0x140 [ 54.291503][ T4582] dump_stack+0x15/0x1b [ 54.291518][ T4582] should_fail_ex+0x265/0x280 [ 54.291546][ T4582] should_failslab+0x8c/0xb0 [ 54.291621][ T4582] __kmalloc_cache_node_noprof+0x54/0x320 [ 54.291646][ T4582] ? __get_vm_area_node+0x106/0x1d0 [ 54.291672][ T4582] __get_vm_area_node+0x106/0x1d0 [ 54.291767][ T4582] __vmalloc_node_range_noprof+0x273/0xe00 [ 54.291795][ T4582] ? do_replace+0x188/0x320 [ 54.291822][ T4582] ? __rcu_read_unlock+0x4f/0x70 [ 54.291885][ T4582] ? do_replace+0x188/0x320 [ 54.291913][ T4582] __vmalloc_noprof+0x83/0xc0 [ 54.291987][ T4582] ? do_replace+0x188/0x320 [ 54.292089][ T4582] do_replace+0x188/0x320 [ 54.292122][ T4582] do_ebt_set_ctl+0x12e/0xac0 [ 54.292155][ T4582] ? _parse_integer_limit+0x170/0x190 [ 54.292237][ T4582] ? __rcu_read_unlock+0x4f/0x70 [ 54.292311][ T4582] ? __pfx_ip4_datagram_release_cb+0x10/0x10 [ 54.292340][ T4582] ? ip4_datagram_release_cb+0x341/0x370 [ 54.292367][ T4582] ? _parse_integer+0x27/0x40 [ 54.292412][ T4582] ? kstrtoull+0x111/0x140 [ 54.292436][ T4582] ? _raw_spin_unlock_bh+0x36/0x40 [ 54.292457][ T4582] ? release_sock+0x116/0x150 [ 54.292499][ T4582] ? sockopt_release_sock+0x42/0x50 [ 54.292660][ T4582] ? do_ip_setsockopt+0x1af3/0x2240 [ 54.292752][ T4582] nf_setsockopt+0x196/0x1b0 [ 54.292772][ T4582] ip_setsockopt+0x102/0x110 [ 54.292800][ T4582] raw_setsockopt+0xbd/0x150 [ 54.292908][ T4582] sock_common_setsockopt+0x69/0x80 [ 54.292932][ T4582] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 54.292957][ T4582] __sys_setsockopt+0x184/0x200 [ 54.292988][ T4582] __x64_sys_setsockopt+0x64/0x80 [ 54.293046][ T4582] x64_sys_call+0x2bd5/0x2fb0 [ 54.293066][ T4582] do_syscall_64+0xd2/0x200 [ 54.293082][ T4582] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 54.293107][ T4582] ? clear_bhb_loop+0x40/0x90 [ 54.293128][ T4582] ? clear_bhb_loop+0x40/0x90 [ 54.293263][ T4582] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 54.293283][ T4582] RIP: 0033:0x7fd37afae929 [ 54.293302][ T4582] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 54.293341][ T4582] RSP: 002b:00007fd379617038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 54.293359][ T4582] RAX: ffffffffffffffda RBX: 00007fd37b1d5fa0 RCX: 00007fd37afae929 [ 54.293370][ T4582] RDX: 0000000000000080 RSI: 0000000000000000 RDI: 0000000000000003 [ 54.293382][ T4582] RBP: 00007fd379617090 R08: 0000000000000108 R09: 0000000000000000 [ 54.293446][ T4582] R10: 0000200000000080 R11: 0000000000000246 R12: 0000000000000001 [ 54.293457][ T4582] R13: 0000000000000000 R14: 00007fd37b1d5fa0 R15: 00007ffec6b065b8 [ 54.293475][ T4582] [ 54.293483][ T4582] syz.2.436: vmalloc error: size 128, vm_struct allocation failed, mode:0x400cc0(GFP_KERNEL_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0 [ 54.606168][ T4582] CPU: 1 UID: 0 PID: 4582 Comm: syz.2.436 Not tainted 6.16.0-rc6-syzkaller-00002-g155a3c003e55 #0 PREEMPT(voluntary) [ 54.606227][ T4582] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 54.606241][ T4582] Call Trace: [ 54.606247][ T4582] [ 54.606254][ T4582] __dump_stack+0x1d/0x30 [ 54.606278][ T4582] dump_stack_lvl+0xe8/0x140 [ 54.606356][ T4582] dump_stack+0x15/0x1b [ 54.606443][ T4582] warn_alloc+0x12b/0x1a0 [ 54.606481][ T4582] __vmalloc_node_range_noprof+0x297/0xe00 [ 54.606516][ T4582] ? __rcu_read_unlock+0x4f/0x70 [ 54.606548][ T4582] ? do_replace+0x188/0x320 [ 54.606650][ T4582] __vmalloc_noprof+0x83/0xc0 [ 54.606685][ T4582] ? do_replace+0x188/0x320 [ 54.606722][ T4582] do_replace+0x188/0x320 [ 54.606810][ T4582] do_ebt_set_ctl+0x12e/0xac0 [ 54.606845][ T4582] ? _parse_integer_limit+0x170/0x190 [ 54.606956][ T4582] ? __rcu_read_unlock+0x4f/0x70 [ 54.607083][ T4582] ? __pfx_ip4_datagram_release_cb+0x10/0x10 [ 54.607144][ T4582] ? ip4_datagram_release_cb+0x341/0x370 [ 54.607319][ T4582] ? _parse_integer+0x27/0x40 [ 54.607430][ T4582] ? kstrtoull+0x111/0x140 [ 54.607461][ T4582] ? _raw_spin_unlock_bh+0x36/0x40 [ 54.607488][ T4582] ? release_sock+0x116/0x150 [ 54.607555][ T4582] ? sockopt_release_sock+0x42/0x50 [ 54.607587][ T4582] ? do_ip_setsockopt+0x1af3/0x2240 [ 54.607711][ T4582] nf_setsockopt+0x196/0x1b0 [ 54.607731][ T4582] ip_setsockopt+0x102/0x110 [ 54.607764][ T4582] raw_setsockopt+0xbd/0x150 [ 54.607800][ T4582] sock_common_setsockopt+0x69/0x80 [ 54.607881][ T4582] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 54.607957][ T4582] __sys_setsockopt+0x184/0x200 [ 54.607988][ T4582] __x64_sys_setsockopt+0x64/0x80 [ 54.608059][ T4582] x64_sys_call+0x2bd5/0x2fb0 [ 54.608083][ T4582] do_syscall_64+0xd2/0x200 [ 54.608163][ T4582] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 54.608195][ T4582] ? clear_bhb_loop+0x40/0x90 [ 54.608216][ T4582] ? clear_bhb_loop+0x40/0x90 [ 54.608240][ T4582] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 54.608280][ T4582] RIP: 0033:0x7fd37afae929 [ 54.608298][ T4582] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 54.608319][ T4582] RSP: 002b:00007fd379617038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 54.608341][ T4582] RAX: ffffffffffffffda RBX: 00007fd37b1d5fa0 RCX: 00007fd37afae929 [ 54.608356][ T4582] RDX: 0000000000000080 RSI: 0000000000000000 RDI: 0000000000000003 [ 54.608368][ T4582] RBP: 00007fd379617090 R08: 0000000000000108 R09: 0000000000000000 [ 54.608379][ T4582] R10: 0000200000000080 R11: 0000000000000246 R12: 0000000000000001 [ 54.608390][ T4582] R13: 0000000000000000 R14: 00007fd37b1d5fa0 R15: 00007ffec6b065b8 [ 54.608425][ T4582] [ 54.608443][ T4582] Mem-Info: [ 54.883967][ T4582] active_anon:6972 inactive_anon:0 isolated_anon:0 [ 54.883967][ T4582] active_file:6011 inactive_file:2184 isolated_file:0 [ 54.883967][ T4582] unevictable:0 dirty:391 writeback:0 [ 54.883967][ T4582] slab_reclaimable:2933 slab_unreclaimable:13918 [ 54.883967][ T4582] mapped:31059 shmem:203 pagetables:1745 [ 54.883967][ T4582] sec_pagetables:0 bounce:0 [ 54.883967][ T4582] kernel_misc_reclaimable:0 [ 54.883967][ T4582] free:1893736 free_pcp:16217 free_cma:0 [ 54.928936][ T4582] Node 0 active_anon:28120kB inactive_anon:0kB active_file:24044kB inactive_file:8736kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:124236kB dirty:1564kB writeback:0kB shmem:812kB writeback_tmp:0kB kernel_stack:3632kB pagetables:7444kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 54.957745][ T4582] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 54.986464][ T4582] lowmem_reserve[]: 0 2882 7860 7860 [ 54.991848][ T4582] Node 0 DMA32 free:2947828kB boost:0kB min:4132kB low:7060kB high:9988kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2951356kB mlocked:0kB bounce:0kB free_pcp:3528kB local_pcp:0kB free_cma:0kB [ 55.022073][ T4582] lowmem_reserve[]: 0 0 4978 4978 [ 55.027229][ T4582] Node 0 Normal free:4610248kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0KB free_highatomic:0KB active_anon:28468kB inactive_anon:0kB active_file:24044kB inactive_file:8736kB unevictable:0kB writepending:1564kB present:5242880kB managed:5098240kB mlocked:0kB bounce:0kB free_pcp:60692kB local_pcp:49020kB free_cma:0kB [ 55.059239][ T4582] lowmem_reserve[]: 0 0 0 0 [ 55.063822][ T4582] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 55.076610][ T4582] Node 0 DMA32: 3*4kB (M) 1*8kB (M) 4*16kB (M) 3*32kB (M) 5*64kB (M) 4*128kB (M) 3*256kB (M) 4*512kB (M) 3*1024kB (M) 2*2048kB (M) 717*4096kB (M) = 2947828kB [ 55.092948][ T4582] Node 0 Normal: 3*4kB (UME) 3*8kB (E) 0*16kB 2*32kB (ME) 3*64kB (E) 28*128kB (UME) 27*256kB (UME) 11*512kB (UME) 14*1024kB (UME) 4*2048kB (UME) 1115*4096kB (M) = 4605988kB [ 55.110378][ T4582] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 55.119778][ T4582] 8393 total pagecache pages [ 55.124402][ T4582] 0 pages in swap cache [ 55.128663][ T4582] Free swap = 124996kB [ 55.132821][ T4582] Total swap = 124996kB [ 55.137043][ T4582] 2097051 pages RAM [ 55.140901][ T4582] 0 pages HighMem/MovableOnly [ 55.145618][ T4582] 80812 pages reserved [ 55.218535][ T4673] __nla_validate_parse: 11 callbacks suppressed [ 55.218552][ T4673] netlink: 8 bytes leftover after parsing attributes in process `syz.2.441'. [ 55.255991][ T4681] netlink: 64 bytes leftover after parsing attributes in process `syz.4.443'. [ 55.557713][ T4705] netlink: 'syz.3.449': attribute type 4 has an invalid length. [ 55.958425][ T4715] netlink: 8 bytes leftover after parsing attributes in process `syz.4.456'. [ 55.998006][ T4719] netlink: 64 bytes leftover after parsing attributes in process `syz.4.458'. [ 56.182942][ T4734] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 56.200891][ T4739] netlink: 'syz.0.468': attribute type 1 has an invalid length. [ 56.210284][ T4734] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.244560][ T4743] netlink: 64 bytes leftover after parsing attributes in process `syz.2.470'. [ 56.436793][ T4766] netlink: 'syz.0.481': attribute type 1 has an invalid length. [ 56.475086][ T4771] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 56.644542][ T4774] netlink: 'syz.0.485': attribute type 4 has an invalid length. [ 57.060294][ T4795] netlink: 'syz.4.492': attribute type 1 has an invalid length. [ 57.111770][ T4801] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 57.471495][ T4844] netlink: 8 bytes leftover after parsing attributes in process `syz.2.516'. [ 57.485410][ T4844] netlink: 12 bytes leftover after parsing attributes in process `syz.2.516'. [ 57.571128][ T4854] netlink: 64 bytes leftover after parsing attributes in process `syz.2.520'. [ 58.028838][ T4856] netlink: 'syz.2.521': attribute type 4 has an invalid length. [ 58.168801][ T4885] netlink: 64 bytes leftover after parsing attributes in process `syz.0.532'. [ 58.390207][ T4907] netlink: 64 bytes leftover after parsing attributes in process `syz.1.544'. [ 59.264591][ T4966] netlink: 'syz.2.564': attribute type 4 has an invalid length. [ 59.559026][ T4987] bridge_slave_0: left allmulticast mode [ 59.564866][ T4987] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.412530][ T5050] __nla_validate_parse: 2 callbacks suppressed [ 60.412546][ T5050] netlink: 8 bytes leftover after parsing attributes in process `syz.1.610'. [ 60.431327][ T5050] netlink: 12 bytes leftover after parsing attributes in process `syz.1.610'. [ 60.446880][ T5053] netlink: 'syz.3.612': attribute type 1 has an invalid length. [ 60.654821][ T5076] netlink: 'syz.2.611': attribute type 4 has an invalid length. [ 60.758472][ T5083] netlink: 8 bytes leftover after parsing attributes in process `syz.3.624'. [ 60.780332][ T5083] netlink: 12 bytes leftover after parsing attributes in process `syz.3.624'. [ 60.860139][ T5087] netlink: 'syz.3.626': attribute type 1 has an invalid length. [ 61.077717][ T5112] netlink: 8 bytes leftover after parsing attributes in process `syz.4.638'. [ 61.088787][ T5112] netlink: 12 bytes leftover after parsing attributes in process `syz.4.638'. [ 61.405886][ T5118] netlink: 'syz.2.640': attribute type 1 has an invalid length. [ 61.423486][ T5120] vxcan1: entered allmulticast mode [ 61.619477][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 61.619494][ T29] audit: type=1400 audit(1752567637.136:204): avc: denied { ioctl } for pid=5137 comm="syz.4.650" path="socket:[9723]" dev="sockfs" ino=9723 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 61.650159][ T29] audit: type=1400 audit(1752567637.136:205): avc: denied { bind } for pid=5137 comm="syz.4.650" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 61.673610][ T29] audit: type=1400 audit(1752567637.196:206): avc: denied { write } for pid=5137 comm="syz.4.650" name="ptype" dev="proc" ino=4026532637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 61.724996][ T5145] netlink: 'syz.4.653': attribute type 8 has an invalid length. [ 61.732775][ T5145] netlink: 36 bytes leftover after parsing attributes in process `syz.4.653'. [ 61.767458][ T5143] netlink: 8 bytes leftover after parsing attributes in process `syz.2.652'. [ 61.826885][ T5143] netlink: 12 bytes leftover after parsing attributes in process `syz.2.652'. [ 61.845057][ T5151] vxcan1: entered allmulticast mode [ 61.899618][ T5155] netlink: 'syz.0.651': attribute type 4 has an invalid length. [ 62.150059][ T5174] netlink: 'syz.1.666': attribute type 8 has an invalid length. [ 62.157781][ T5174] netlink: 36 bytes leftover after parsing attributes in process `syz.1.666'. [ 62.611197][ T5198] netlink: 'syz.0.678': attribute type 8 has an invalid length. [ 62.993677][ T5222] netlink: 'syz.0.690': attribute type 4 has an invalid length. [ 63.340802][ T5257] netlink: 'syz.2.705': attribute type 4 has an invalid length. [ 63.741132][ T5296] netlink: 'syz.2.723': attribute type 4 has an invalid length. [ 64.129755][ T5330] netlink: 'syz.4.736': attribute type 4 has an invalid length. [ 64.443335][ T5369] vxcan1: entered allmulticast mode [ 65.205344][ T5409] loop2: detected capacity change from 0 to 256 [ 65.282636][ T5417] loop4: detected capacity change from 0 to 1024 [ 65.321655][ T5417] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 65.365743][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.506250][ T5448] __nla_validate_parse: 29 callbacks suppressed [ 65.506324][ T5448] netlink: 16 bytes leftover after parsing attributes in process `syz.1.794'. [ 65.520501][ T5452] loop4: detected capacity change from 0 to 1024 [ 65.521498][ T5448] netlink: 120 bytes leftover after parsing attributes in process `syz.1.794'. [ 65.556896][ T5448] netlink: 16 bytes leftover after parsing attributes in process `syz.1.794'. [ 65.633998][ T5452] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 65.648890][ T5463] netlink: 8 bytes leftover after parsing attributes in process `syz.1.800'. [ 65.658079][ T5463] netlink: 12 bytes leftover after parsing attributes in process `syz.1.800'. [ 65.668570][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.775967][ T5477] netlink: 16 bytes leftover after parsing attributes in process `syz.1.807'. [ 65.784885][ T5477] netlink: 120 bytes leftover after parsing attributes in process `syz.1.807'. [ 65.795490][ T5477] netlink: 16 bytes leftover after parsing attributes in process `syz.1.807'. [ 66.017646][ T29] audit: type=1326 audit(1752567641.536:207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5404 comm="syz.0.774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faab5b0e929 code=0x7fc00000 [ 66.041117][ T29] audit: type=1326 audit(1752567641.536:208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5404 comm="syz.0.774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7faab5b0e929 code=0x7fc00000 [ 66.064390][ T29] audit: type=1326 audit(1752567641.536:209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5404 comm="syz.0.774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faab5b0e929 code=0x7fc00000 [ 66.087693][ T29] audit: type=1326 audit(1752567641.536:210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5404 comm="syz.0.774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faab5b0e929 code=0x7fc00000 [ 66.110980][ T29] audit: type=1326 audit(1752567641.536:211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5404 comm="syz.0.774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faab5b0e929 code=0x7fc00000 [ 66.134301][ T29] audit: type=1326 audit(1752567641.536:212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5404 comm="syz.0.774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faab5b0e929 code=0x7fc00000 [ 66.157515][ T29] audit: type=1326 audit(1752567641.536:213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5404 comm="syz.0.774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faab5b0e929 code=0x7fc00000 [ 66.227210][ T5490] netlink: 8 bytes leftover after parsing attributes in process `syz.0.812'. [ 66.237340][ T5490] netlink: 12 bytes leftover after parsing attributes in process `syz.0.812'. [ 66.263775][ T5494] syz_tun: entered allmulticast mode [ 66.429917][ T5506] loop3: detected capacity change from 0 to 2048 [ 66.450537][ T5506] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 66.519135][ T5518] loop3: detected capacity change from 0 to 1024 [ 66.793547][ T5543] loop3: detected capacity change from 0 to 1024 [ 66.944366][ T29] kauditd_printk_skb: 60 callbacks suppressed [ 66.944383][ T29] audit: type=1400 audit(1752567642.456:274): avc: denied { open } for pid=5561 comm="syz.3.843" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 66.969703][ T29] audit: type=1400 audit(1752567642.456:275): avc: denied { kernel } for pid=5561 comm="syz.3.843" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 66.991528][ T29] audit: type=1326 audit(1752567642.516:276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5561 comm="syz.3.843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1808fe929 code=0x7ffc0000 [ 67.014836][ T29] audit: type=1326 audit(1752567642.516:277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5561 comm="syz.3.843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1808fe929 code=0x7ffc0000 [ 67.038373][ T29] audit: type=1326 audit(1752567642.516:278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5561 comm="syz.3.843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7fc1808fe929 code=0x7ffc0000 [ 67.061648][ T29] audit: type=1326 audit(1752567642.516:279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5561 comm="syz.3.843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1808fe929 code=0x7ffc0000 [ 67.084940][ T29] audit: type=1326 audit(1752567642.516:280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5561 comm="syz.3.843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7fc1808fe929 code=0x7ffc0000 [ 67.085196][ T5562] loop3: detected capacity change from 0 to 128 [ 67.108093][ T29] audit: type=1326 audit(1752567642.536:281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5561 comm="syz.3.843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1808fe929 code=0x7ffc0000 [ 67.137799][ T29] audit: type=1326 audit(1752567642.536:282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5561 comm="syz.3.843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1808fe929 code=0x7ffc0000 [ 67.161064][ T29] audit: type=1326 audit(1752567642.536:283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5564 comm="syz.3.843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7fc1808fe929 code=0x7ffc0000 [ 67.281953][ T5574] vhci_hcd: default hub control req: 800f v0000 i0000 l31125 [ 67.318492][ T5581] syz_tun: entered allmulticast mode [ 67.372149][ T5589] loop2: detected capacity change from 0 to 1024 [ 67.565595][ T5608] syz_tun: entered allmulticast mode [ 68.305884][ T5641] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 68.315006][ T5641] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 68.587335][ T5657] syz_tun: entered allmulticast mode [ 68.667449][ T5664] loop1: detected capacity change from 0 to 2048 [ 68.695533][ T5664] EXT4-fs mount: 7 callbacks suppressed [ 68.695545][ T5664] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 68.724288][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.745257][ T5672] loop1: detected capacity change from 0 to 256 [ 68.913667][ T5685] loop1: detected capacity change from 0 to 1024 [ 68.941908][ T5685] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 69.008509][ T5687] loop3: detected capacity change from 0 to 128 [ 69.058637][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.193427][ T5707] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 69.208163][ T5707] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 69.425664][ T5719] netlink: 'syz.0.908': attribute type 4 has an invalid length. [ 69.670127][ T5723] loop4: detected capacity change from 0 to 1024 [ 69.688634][ T5723] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 69.729538][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.841384][ T5735] loop4: detected capacity change from 0 to 128 [ 70.069893][ T5753] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 70.081505][ T5753] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 70.322844][ T5756] loop2: detected capacity change from 0 to 1024 [ 70.360242][ T5756] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 70.416271][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.496992][ T5774] loop1: detected capacity change from 0 to 4096 [ 70.508665][ T5774] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 70.551293][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.560704][ T5782] __nla_validate_parse: 30 callbacks suppressed [ 70.560721][ T5782] netlink: 28 bytes leftover after parsing attributes in process `syz.0.934'. [ 70.581375][ T5782] loop0: detected capacity change from 0 to 128 [ 70.630087][ T5789] vhci_hcd: default hub control req: 800f v0000 i0000 l31125 [ 70.692001][ T5798] loop0: detected capacity change from 0 to 1024 [ 70.715807][ T5798] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 70.743874][ T3304] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.842990][ T5814] netlink: 'syz.4.937': attribute type 4 has an invalid length. [ 70.968756][ T5822] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 70.989944][ T5818] loop3: detected capacity change from 0 to 4096 [ 71.014697][ T5822] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 71.023759][ T5824] netlink: 20 bytes leftover after parsing attributes in process `syz.0.950'. [ 71.051231][ T5824] loop0: detected capacity change from 0 to 128 [ 71.079352][ T5818] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 71.153275][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.168695][ T5828] loop0: detected capacity change from 0 to 1024 [ 71.188562][ T5828] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 71.214834][ T3304] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.267899][ T5834] vhci_hcd: default hub control req: 800f v0000 i0000 l31125 [ 71.598443][ T5873] loop1: detected capacity change from 0 to 512 [ 71.624707][ T5873] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 71.647653][ T5881] vhci_hcd: default hub control req: 800f v0000 i0000 l31125 [ 71.662892][ T5873] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.964: Failed to acquire dquot type 1 [ 71.677806][ T5873] EXT4-fs (loop1): 1 truncate cleaned up [ 71.683957][ T5873] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 71.697189][ T5873] ext4 filesystem being mounted at /181/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 72.317581][ T6007] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 72.342460][ T6007] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 72.426847][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.761432][ T6036] loop4: detected capacity change from 0 to 4096 [ 72.771379][ T6036] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 72.799956][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.823825][ T6039] vhci_hcd: default hub control req: 800f v0000 i0000 l31125 [ 72.836396][ T29] kauditd_printk_skb: 416 callbacks suppressed [ 72.836411][ T29] audit: type=1326 audit(1752567648.356:698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6038 comm="syz.4.985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efea795e929 code=0x7ffc0000 [ 72.869389][ T29] audit: type=1326 audit(1752567648.356:699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6038 comm="syz.4.985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efea795e929 code=0x7ffc0000 [ 72.892806][ T29] audit: type=1326 audit(1752567648.356:700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6038 comm="syz.4.985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efea795e929 code=0x7ffc0000 [ 72.916101][ T29] audit: type=1326 audit(1752567648.356:701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6038 comm="syz.4.985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efea795e929 code=0x7ffc0000 [ 72.939414][ T29] audit: type=1326 audit(1752567648.356:702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6038 comm="syz.4.985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efea795e929 code=0x7ffc0000 [ 72.962769][ T29] audit: type=1326 audit(1752567648.356:703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6038 comm="syz.4.985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efea795e929 code=0x7ffc0000 [ 72.986156][ T29] audit: type=1326 audit(1752567648.356:704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6038 comm="syz.4.985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efea795e929 code=0x7ffc0000 [ 73.009598][ T29] audit: type=1326 audit(1752567648.356:705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6038 comm="syz.4.985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efea795e929 code=0x7ffc0000 [ 73.032880][ T29] audit: type=1326 audit(1752567648.356:706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6038 comm="syz.4.985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efea795e929 code=0x7ffc0000 [ 73.056198][ T29] audit: type=1326 audit(1752567648.356:707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6038 comm="syz.4.985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efea795e929 code=0x7ffc0000 [ 73.152481][ T6063] loop4: detected capacity change from 0 to 512 [ 73.162633][ T6063] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 73.195553][ T6063] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.990: Failed to acquire dquot type 1 [ 73.213032][ T6063] EXT4-fs (loop4): 1 truncate cleaned up [ 73.222419][ T6063] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.251127][ T6063] ext4 filesystem being mounted at /215/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 73.365833][ T6093] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 73.375580][ T6093] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 73.412604][ T6101] loop1: detected capacity change from 0 to 1024 [ 73.428491][ T6101] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 73.459831][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.004512][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.047947][ T6218] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1004'. [ 74.057474][ T6218] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1004'. [ 74.222060][ T6229] loop4: detected capacity change from 0 to 1024 [ 74.247364][ T6229] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 74.269625][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.356757][ T6239] netlink: 'syz.2.1007': attribute type 4 has an invalid length. [ 74.415875][ T6242] loop1: detected capacity change from 0 to 512 [ 74.427875][ T6242] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 74.456702][ T6242] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.1014: Failed to acquire dquot type 1 [ 74.469587][ T6242] EXT4-fs (loop1): 1 truncate cleaned up [ 74.476278][ T6242] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.490387][ T6242] ext4 filesystem being mounted at /189/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 74.969224][ T6256] vhci_hcd: default hub control req: 800f v0000 i0000 l31125 [ 75.028030][ T6261] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 75.035867][ T6261] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 75.104537][ T6261] syz.3.1020 (6261) used greatest stack depth: 10424 bytes left [ 75.133953][ T6271] loop3: detected capacity change from 0 to 2048 [ 75.146847][ T6271] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 75.171100][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.259023][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.500981][ T6294] loop4: detected capacity change from 0 to 4096 [ 75.519962][ T6294] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 75.604209][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.700751][ T6300] loop3: detected capacity change from 0 to 2048 [ 75.718436][ T6300] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 75.725429][ T6306] netlink: 'syz.1.1031': attribute type 4 has an invalid length. [ 75.820733][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.944687][ T6319] vxcan1: entered allmulticast mode [ 75.967478][ T6321] syz_tun: entered allmulticast mode [ 76.750667][ T6429] loop3: detected capacity change from 0 to 4096 [ 76.774768][ T6429] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 76.865805][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.875014][ T6450] loop0: detected capacity change from 0 to 2048 [ 76.902234][ T6450] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 76.951513][ T3304] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.142752][ T6476] netlink: 'syz.4.1056': attribute type 4 has an invalid length. [ 77.724900][ T6555] netlink: 188 bytes leftover after parsing attributes in process `syz.2.1067'. [ 77.735479][ T6551] loop1: detected capacity change from 0 to 4096 [ 77.748700][ T6551] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 77.805398][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.827237][ T6564] bond0: entered promiscuous mode [ 77.832419][ T6564] bond_slave_0: entered promiscuous mode [ 77.838348][ T6564] bond_slave_1: entered promiscuous mode [ 77.845887][ T6564] macvlan1: entered promiscuous mode [ 77.851588][ T6564] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 77.883535][ T6572] netlink: 188 bytes leftover after parsing attributes in process `syz.1.1079'. [ 77.886727][ T6564] Cannot create hsr debugfs directory [ 77.908173][ T6564] hsr1: entered promiscuous mode [ 78.125100][ T6605] loop4: detected capacity change from 0 to 1024 [ 78.145381][ T6605] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 78.168090][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.724745][ T6624] loop0: detected capacity change from 0 to 2048 [ 78.736836][ T6626] netlink: 188 bytes leftover after parsing attributes in process `syz.2.1083'. [ 78.757228][ T6624] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 78.783805][ T3304] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.927654][ T6644] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1090'. [ 78.936773][ T6644] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1090'. [ 79.019607][ T6652] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 79.028317][ T6652] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 79.132162][ T6657] loop2: detected capacity change from 0 to 1024 [ 79.173689][ T6657] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 79.214505][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.363852][ T6673] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1103'. [ 79.379191][ T6673] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1103'. [ 79.809324][ T6696] netlink: 172 bytes leftover after parsing attributes in process `syz.2.1112'. [ 79.886516][ T6705] loop2: detected capacity change from 0 to 1024 [ 79.899423][ T6707] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 79.913112][ T6707] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 79.935691][ T6705] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 79.963665][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.025727][ T6719] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1122'. [ 80.035846][ T6719] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1122'. [ 80.050767][ T29] kauditd_printk_skb: 46 callbacks suppressed [ 80.050782][ T29] audit: type=1326 audit(1752567655.566:750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6720 comm="syz.2.1123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd37afae929 code=0x7ffc0000 [ 80.080886][ T29] audit: type=1326 audit(1752567655.566:751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6720 comm="syz.2.1123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7fd37afae929 code=0x7ffc0000 [ 80.104411][ T29] audit: type=1326 audit(1752567655.566:752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6720 comm="syz.2.1123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd37afae929 code=0x7ffc0000 [ 80.127760][ T29] audit: type=1326 audit(1752567655.566:753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6720 comm="syz.2.1123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7fd37afae929 code=0x7ffc0000 [ 80.151276][ T29] audit: type=1326 audit(1752567655.606:754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6720 comm="syz.2.1123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd37afae929 code=0x7ffc0000 [ 80.151781][ T6721] loop2: detected capacity change from 0 to 128 [ 80.174671][ T29] audit: type=1326 audit(1752567655.606:755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6720 comm="syz.2.1123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd37afae929 code=0x7ffc0000 [ 80.174704][ T29] audit: type=1326 audit(1752567655.606:756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6722 comm="syz.2.1123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7fd37afae929 code=0x7ffc0000 [ 80.174733][ T29] audit: type=1326 audit(1752567655.646:757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6720 comm="syz.2.1123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=437 compat=0 ip=0x7fd37afae929 code=0x7ffc0000 [ 80.174761][ T29] audit: type=1326 audit(1752567655.646:758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6720 comm="syz.2.1123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd37afae929 code=0x7ffc0000 [ 80.274297][ T29] audit: type=1326 audit(1752567655.646:759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6720 comm="syz.2.1123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd37afae929 code=0x7ffc0000 [ 80.731062][ T6767] loop2: detected capacity change from 0 to 512 [ 80.746644][ T6767] EXT4-fs: dax option not supported [ 80.801953][ T6776] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 80.814055][ T6776] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 81.374808][ T6801] loop3: detected capacity change from 0 to 512 [ 81.383666][ T6801] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 81.396470][ T6801] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.1153: Failed to acquire dquot type 1 [ 81.409116][ T6801] EXT4-fs (loop3): 1 truncate cleaned up [ 81.415289][ T6801] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 81.427998][ T6801] ext4 filesystem being mounted at /229/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 81.624418][ T6806] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 248: padding at end of block bitmap is not set [ 81.690187][ T6817] loop4: detected capacity change from 0 to 1024 [ 81.712355][ T6817] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 81.807274][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.041120][ T6840] loop1: detected capacity change from 0 to 4096 [ 82.071825][ T6840] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 82.104097][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.214947][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.246600][ T6849] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 82.258941][ T6849] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 82.659482][ T6855] loop2: detected capacity change from 0 to 1024 [ 82.677374][ T6855] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 82.699927][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.183844][ T6882] loop1: detected capacity change from 0 to 512 [ 83.303386][ T6882] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 83.397462][ T6882] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.1179: Failed to acquire dquot type 1 [ 83.410607][ T6882] EXT4-fs (loop1): 1 truncate cleaned up [ 83.416942][ T6882] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 83.429793][ T6882] ext4 filesystem being mounted at /210/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 83.486927][ T6891] loop0: detected capacity change from 0 to 1024 [ 83.508572][ T6891] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 83.541863][ T3304] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.869141][ T6904] loop0: detected capacity change from 0 to 4096 [ 83.888258][ T6904] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 83.958770][ T3304] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.026643][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.136752][ T6920] bond0: entered promiscuous mode [ 84.141895][ T6920] bond_slave_0: entered promiscuous mode [ 84.147667][ T6920] bond_slave_1: entered promiscuous mode [ 84.155255][ T6920] macvlan1: entered promiscuous mode [ 84.161024][ T6920] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 84.182853][ T6920] Cannot create hsr debugfs directory [ 84.188707][ T6920] hsr1: entered promiscuous mode [ 84.208774][ T6923] __nla_validate_parse: 4 callbacks suppressed [ 84.208790][ T6923] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1195'. [ 84.227524][ T6923] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1195'. [ 84.309517][ T6934] loop0: detected capacity change from 0 to 128 [ 84.329301][ T6937] loop3: detected capacity change from 0 to 512 [ 84.344529][ T6937] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 84.450896][ T6937] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.1202: Failed to acquire dquot type 1 [ 84.464630][ T6937] EXT4-fs (loop3): 1 truncate cleaned up [ 84.472801][ T6937] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 84.485752][ T6937] ext4 filesystem being mounted at /241/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 84.535698][ T6952] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 84.545674][ T6952] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 85.249383][ T6967] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1211'. [ 85.262992][ T6967] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1211'. [ 85.270201][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.281012][ T29] kauditd_printk_skb: 162 callbacks suppressed [ 85.281024][ T29] audit: type=1326 audit(1752567660.806:916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6946 comm="syz.0.1205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faab5b0e929 code=0x7fc00000 [ 85.342207][ T29] audit: type=1326 audit(1752567660.806:917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6946 comm="syz.0.1205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7faab5b0e929 code=0x7fc00000 [ 85.347821][ T6979] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 85.365812][ T29] audit: type=1326 audit(1752567660.806:918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6946 comm="syz.0.1205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faab5b0e929 code=0x7fc00000 [ 85.376366][ T6979] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 85.397289][ T29] audit: type=1326 audit(1752567660.806:919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6946 comm="syz.0.1205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faab5b0e929 code=0x7fc00000 [ 85.428429][ T29] audit: type=1326 audit(1752567660.806:920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6946 comm="syz.0.1205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faab5b0e929 code=0x7fc00000 [ 85.451820][ T29] audit: type=1326 audit(1752567660.806:921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6946 comm="syz.0.1205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faab5b0e929 code=0x7fc00000 [ 85.475273][ T29] audit: type=1326 audit(1752567660.806:922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6946 comm="syz.0.1205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faab5b0e929 code=0x7fc00000 [ 85.498680][ T29] audit: type=1326 audit(1752567660.806:923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6946 comm="syz.0.1205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faab5b0e929 code=0x7fc00000 [ 85.522021][ T29] audit: type=1326 audit(1752567660.806:924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6946 comm="syz.0.1205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faab5b0e929 code=0x7fc00000 [ 85.545514][ T29] audit: type=1326 audit(1752567660.806:925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6946 comm="syz.0.1205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faab5b0e929 code=0x7fc00000 [ 85.563956][ T6985] loop0: detected capacity change from 0 to 4096 [ 85.717430][ T6997] loop0: detected capacity change from 0 to 512 [ 85.726273][ T6997] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 85.745387][ T6997] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.1224: Failed to acquire dquot type 1 [ 85.757416][ T6997] EXT4-fs (loop0): 1 truncate cleaned up [ 85.763468][ T6997] ext4 filesystem being mounted at /275/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 86.098496][ T7003] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1225'. [ 86.107533][ T7003] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1225'. [ 87.358849][ T7035] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1237'. [ 87.375634][ T7035] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1237'. [ 87.384792][ T7037] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 87.409777][ T7037] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 87.518980][ T7045] loop0: detected capacity change from 0 to 512 [ 87.581593][ T7045] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 87.602920][ T7052] loop1: detected capacity change from 0 to 1024 [ 87.610705][ T7052] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 87.627877][ T7045] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.1242: Failed to acquire dquot type 1 [ 87.640661][ T7045] EXT4-fs (loop0): 1 truncate cleaned up [ 87.648839][ T7045] ext4 filesystem being mounted at /278/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 88.002402][ T7075] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1252'. [ 88.012127][ T7075] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1252'. [ 88.130473][ T7086] team_slave_0: entered promiscuous mode [ 88.136249][ T7086] team_slave_1: entered promiscuous mode [ 88.142820][ T7086] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 88.151449][ T7086] team0: Device macvtap1 is already an upper device of the team interface [ 88.160603][ T7086] team_slave_0: left promiscuous mode [ 88.166066][ T7086] team_slave_1: left promiscuous mode [ 88.182159][ T7087] loop2: detected capacity change from 0 to 512 [ 88.189037][ T7087] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 88.205395][ T7087] EXT4-fs warning (device loop2): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 88.220264][ T7087] EXT4-fs (loop2): mount failed [ 88.232819][ T7086] bridge0: port 3(batadv1) entered blocking state [ 88.239416][ T7086] bridge0: port 3(batadv1) entered disabled state [ 88.246108][ T7086] batadv1: entered allmulticast mode [ 88.251932][ T7086] batadv1: entered promiscuous mode [ 88.275005][ T7091] loop2: detected capacity change from 0 to 128 [ 88.283314][ T7091] EXT4-fs: Ignoring removed nobh option [ 88.303346][ T7093] bond0: entered promiscuous mode [ 88.303901][ T7091] ext4 filesystem being mounted at /233/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 88.308529][ T7093] bond_slave_0: entered promiscuous mode [ 88.308687][ T7093] bond_slave_1: entered promiscuous mode [ 88.333669][ T7093] macvlan1: entered promiscuous mode [ 88.339931][ T7093] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 88.347831][ T7093] Cannot create hsr debugfs directory [ 88.353775][ T7093] hsr1: entered promiscuous mode [ 88.561213][ T7115] vhci_hcd: default hub control req: 800f v0000 i0000 l31125 [ 88.600859][ T7122] loop2: detected capacity change from 0 to 512 [ 88.611644][ T7124] loop1: detected capacity change from 0 to 128 [ 88.618846][ T7124] EXT4-fs: Ignoring removed nobh option [ 88.626012][ T7122] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 88.643631][ T7124] ext4 filesystem being mounted at /226/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 88.694167][ T7122] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.1271: Failed to acquire dquot type 1 [ 88.708962][ T7122] EXT4-fs (loop2): 1 truncate cleaned up [ 88.726544][ T7122] ext4 filesystem being mounted at /240/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 88.738107][ T37] batman_adv: batadv1: IGMP Querier appeared [ 88.744190][ T37] batman_adv: batadv1: MLD Querier appeared [ 89.027350][ T7139] team_slave_0: entered promiscuous mode [ 89.033091][ T7139] team_slave_1: entered promiscuous mode [ 89.078387][ T7139] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 89.088129][ T7139] team0: Device macvtap1 is already an upper device of the team interface [ 89.099498][ T7139] team_slave_0: left promiscuous mode [ 89.104919][ T7139] team_slave_1: left promiscuous mode [ 89.132516][ T7142] loop3: detected capacity change from 0 to 512 [ 89.186072][ T7142] EXT4-fs warning (device loop3): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 89.200802][ T7142] EXT4-fs (loop3): mount failed [ 89.222599][ T7142] bridge0: port 1(batadv1) entered blocking state [ 89.229098][ T7142] bridge0: port 1(batadv1) entered disabled state [ 89.248128][ T7144] loop1: detected capacity change from 0 to 4096 [ 89.272956][ T7148] loop0: detected capacity change from 0 to 2048 [ 89.285005][ T7142] batadv1: entered allmulticast mode [ 89.360510][ T7152] 9pnet_fd: Insufficient options for proto=fd [ 89.366334][ T7142] batadv1: entered promiscuous mode [ 89.463196][ T7157] vhci_hcd: default hub control req: 800f v0000 i0000 l31125 [ 89.732099][ T12] batman_adv: batadv1: IGMP Querier appeared [ 89.738179][ T12] batman_adv: batadv1: MLD Querier appeared [ 89.757778][ T7180] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 89.871236][ T7184] 9pnet_fd: Insufficient options for proto=fd [ 89.884211][ T7183] loop4: detected capacity change from 0 to 4096 [ 89.922855][ T7189] loop3: detected capacity change from 0 to 512 [ 89.932328][ T7189] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 89.951596][ T7189] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.1292: Failed to acquire dquot type 1 [ 89.963867][ T7189] EXT4-fs (loop3): 1 truncate cleaned up [ 89.970846][ T7189] ext4 filesystem being mounted at /260/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 89.972775][ T7193] __nla_validate_parse: 4 callbacks suppressed [ 89.972792][ T7193] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1293'. [ 89.996697][ T7193] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1293'. [ 90.078917][ T7200] vhci_hcd: default hub control req: 800f v0000 i0000 l31125 [ 90.318108][ T29] kauditd_printk_skb: 338 callbacks suppressed [ 90.318125][ T29] audit: type=1326 audit(1752567665.836:1254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7159 comm="syz.1.1279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78b934e929 code=0x7fc00000 [ 90.409965][ T7217] 9pnet_fd: Insufficient options for proto=fd [ 90.428479][ T7216] loop3: detected capacity change from 0 to 1024 [ 90.450333][ T7216] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 90.461311][ T7216] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (30349!=20869) [ 90.481687][ T29] audit: type=1326 audit(1752567665.996:1255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7218 comm="syz.1.1301" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78b934e929 code=0x7ffc0000 [ 90.506243][ T7216] EXT4-fs (loop3): invalid journal inode [ 90.516095][ T29] audit: type=1326 audit(1752567665.996:1256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7218 comm="syz.1.1301" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78b934e929 code=0x7ffc0000 [ 90.528743][ T7216] EXT4-fs (loop3): can't get journal size [ 90.539553][ T29] audit: type=1326 audit(1752567665.996:1257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7218 comm="syz.1.1301" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f78b934e929 code=0x7ffc0000 [ 90.568997][ T29] audit: type=1326 audit(1752567665.996:1258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7218 comm="syz.1.1301" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78b934e929 code=0x7ffc0000 [ 90.592638][ T29] audit: type=1326 audit(1752567665.996:1259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7218 comm="syz.1.1301" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f78b934e929 code=0x7ffc0000 [ 90.616157][ T29] audit: type=1326 audit(1752567665.996:1260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7218 comm="syz.1.1301" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78b934e929 code=0x7ffc0000 [ 90.628482][ T7224] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1305'. [ 90.639843][ T29] audit: type=1326 audit(1752567665.996:1261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7218 comm="syz.1.1301" exe="/root/syz-executor" sig=0 arch=c000003e syscall=12 compat=0 ip=0x7f78b934e929 code=0x7ffc0000 [ 90.672047][ T29] audit: type=1326 audit(1752567665.996:1262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7218 comm="syz.1.1301" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78b934e929 code=0x7ffc0000 [ 90.695544][ T29] audit: type=1326 audit(1752567665.996:1263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7218 comm="syz.1.1301" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f78b934e929 code=0x7ffc0000 [ 90.763829][ T7224] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1305'. [ 90.826194][ T7232] loop2: detected capacity change from 0 to 2048 [ 90.896747][ T7238] loop1: detected capacity change from 0 to 512 [ 90.973951][ T7238] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 90.993238][ T7246] 9pnet_fd: Insufficient options for proto=fd [ 91.001384][ T7240] loop0: detected capacity change from 0 to 1024 [ 91.015362][ T7240] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 91.073822][ T7238] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.1311: Failed to acquire dquot type 1 [ 91.087237][ T7238] EXT4-fs (loop1): 1 truncate cleaned up [ 91.101715][ T7238] ext4 filesystem being mounted at /234/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 91.327941][ T7260] loop2: detected capacity change from 0 to 1024 [ 91.347216][ T7260] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 91.358158][ T7260] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (30349!=20869) [ 91.446099][ T7260] EXT4-fs (loop2): invalid journal inode [ 91.468571][ T7260] EXT4-fs (loop2): can't get journal size [ 91.528005][ T7270] 9pnet_fd: Insufficient options for proto=fd [ 91.678254][ T7288] loop1: detected capacity change from 0 to 2048 [ 91.730174][ T7292] loop2: detected capacity change from 0 to 128 [ 91.755859][ T7297] loop4: detected capacity change from 0 to 1024 [ 91.772020][ T7297] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 91.780401][ T7300] 9pnet_fd: Insufficient options for proto=fd [ 91.783053][ T7297] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (30349!=20869) [ 91.802087][ T7297] EXT4-fs (loop4): invalid journal inode [ 91.807995][ T7297] EXT4-fs (loop4): can't get journal size [ 91.895182][ T7303] loop2: detected capacity change from 0 to 512 [ 91.902201][ T7303] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 91.927201][ T7303] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.1336: Failed to acquire dquot type 1 [ 91.940729][ T7303] EXT4-fs (loop2): 1 truncate cleaned up [ 91.955163][ T7303] ext4 filesystem being mounted at /253/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 91.978198][ T7310] 9pnet_fd: Insufficient options for proto=fd [ 92.520815][ T7331] loop2: detected capacity change from 0 to 128 [ 92.602451][ T7336] loop1: detected capacity change from 0 to 4096 [ 92.898935][ T7366] loop2: detected capacity change from 0 to 1024 [ 92.918556][ T7366] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 92.993893][ T7379] loop0: detected capacity change from 0 to 4096 [ 93.258164][ T7415] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 93.809371][ T7498] team_slave_0: entered promiscuous mode [ 93.815083][ T7498] team_slave_1: entered promiscuous mode [ 93.821803][ T7498] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 93.830581][ T7498] team0: Device macvtap1 is already an upper device of the team interface [ 93.839973][ T7498] team_slave_0: left promiscuous mode [ 93.845420][ T7498] team_slave_1: left promiscuous mode [ 93.868971][ T7501] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1383'. [ 93.887131][ T7501] bridge0: port 1(batadv1) entered blocking state [ 93.893625][ T7501] bridge0: port 1(batadv1) entered disabled state [ 93.902739][ T7501] batadv1: entered allmulticast mode [ 93.910538][ T7501] batadv1: entered promiscuous mode [ 93.942254][ T7508] loop1: detected capacity change from 0 to 512 [ 93.949738][ T7508] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 94.022824][ T7508] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.1387: Failed to acquire dquot type 1 [ 94.035535][ T7508] EXT4-fs (loop1): 1 truncate cleaned up [ 94.072338][ T7508] ext4 filesystem being mounted at /248/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 94.158785][ T7523] vhci_hcd: default hub control req: 800f v0000 i0000 l31125 [ 94.390754][ T37] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 94.400065][ T37] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 94.573247][ T7544] loop3: detected capacity change from 0 to 2048 [ 94.639560][ T7550] 9pnet_fd: Insufficient options for proto=fd [ 94.829440][ T7559] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1404'. [ 94.839031][ T7559] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1404'. [ 94.963975][ T7563] loop3: detected capacity change from 0 to 4096 [ 95.029109][ T7569] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1408'. [ 95.132425][ T7573] loop4: detected capacity change from 0 to 512 [ 95.143895][ T7573] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 95.165472][ T7573] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.1410: Failed to acquire dquot type 1 [ 95.177506][ T7573] EXT4-fs (loop4): 1 truncate cleaned up [ 95.183478][ T7573] ext4 filesystem being mounted at /295/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 95.263293][ T7578] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7578 comm=syz.3.1409 [ 95.286725][ T7578] loop3: detected capacity change from 0 to 1024 [ 95.490462][ T29] kauditd_printk_skb: 689 callbacks suppressed [ 95.490478][ T29] audit: type=1326 audit(1752567671.006:1945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7551 comm="syz.0.1402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faab5b0e929 code=0x7fc00000 [ 95.639717][ T7578] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 95.650671][ T7578] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (30349!=20869) [ 95.659816][ T7584] bond0: entered promiscuous mode [ 95.665096][ T7578] EXT4-fs (loop3): invalid journal inode [ 95.665471][ T7584] bond_slave_0: entered promiscuous mode [ 95.671077][ T7578] EXT4-fs (loop3): can't get journal size [ 95.676824][ T7584] bond_slave_1: entered promiscuous mode [ 95.702531][ T7584] macvlan1: entered promiscuous mode [ 95.727887][ T7591] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1415'. [ 95.733218][ T7584] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 95.747986][ T7584] Cannot create hsr debugfs directory [ 95.753723][ T7584] hsr1: entered promiscuous mode [ 95.760434][ T7591] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1415'. [ 95.844308][ T7598] vhci_hcd: default hub control req: 800f v0000 i0000 l31125 [ 95.854211][ T7596] loop4: detected capacity change from 0 to 4096 [ 95.888448][ T29] audit: type=1326 audit(1752567671.406:1946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7597 comm="syz.1.1418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78b934e929 code=0x7ffc0000 [ 95.957193][ T29] audit: type=1326 audit(1752567671.406:1947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7597 comm="syz.1.1418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f78b934e929 code=0x7ffc0000 [ 95.980822][ T29] audit: type=1326 audit(1752567671.406:1948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7597 comm="syz.1.1418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78b934e929 code=0x7ffc0000 [ 96.004348][ T29] audit: type=1326 audit(1752567671.406:1949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7597 comm="syz.1.1418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f78b934e929 code=0x7ffc0000 [ 96.028132][ T29] audit: type=1326 audit(1752567671.406:1950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7597 comm="syz.1.1418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78b934e929 code=0x7ffc0000 [ 96.051993][ T29] audit: type=1326 audit(1752567671.406:1951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7597 comm="syz.1.1418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f78b934e929 code=0x7ffc0000 [ 96.075509][ T29] audit: type=1326 audit(1752567671.406:1952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7597 comm="syz.1.1418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78b934e929 code=0x7ffc0000 [ 96.099078][ T29] audit: type=1326 audit(1752567671.406:1953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7597 comm="syz.1.1418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78b934e929 code=0x7ffc0000 [ 96.122639][ T29] audit: type=1326 audit(1752567671.416:1954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7597 comm="syz.1.1418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f78b934e929 code=0x7ffc0000 [ 96.737307][ T7628] 9pnet_fd: Insufficient options for proto=fd [ 96.765058][ T7630] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1427'. [ 96.774013][ T7630] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1427'. [ 97.052114][ T7645] loop4: detected capacity change from 0 to 2048 [ 97.105154][ T7650] team_slave_0: entered promiscuous mode [ 97.110848][ T7650] team_slave_1: entered promiscuous mode [ 97.119987][ T7650] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 97.128292][ T7650] team0: Device macvtap1 is already an upper device of the team interface [ 97.140726][ T7651] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7651 comm=syz.0.1433 [ 97.165648][ T7651] loop0: detected capacity change from 0 to 1024 [ 97.225406][ T7652] netlink: 'syz.2.1431': attribute type 4 has an invalid length. [ 97.246453][ T7651] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 97.257368][ T7651] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (30349!=20869) [ 97.268386][ T7651] EXT4-fs (loop0): invalid journal inode [ 97.274118][ T7651] EXT4-fs (loop0): can't get journal size [ 97.416772][ T7655] 9pnet_fd: Insufficient options for proto=fd [ 97.442029][ T7656] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1435'. [ 97.476702][ T7650] team_slave_0: left promiscuous mode [ 97.482175][ T7650] team_slave_1: left promiscuous mode [ 97.881821][ T7669] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 98.614545][ T7685] loop1: detected capacity change from 0 to 1024 [ 98.623704][ T7685] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 98.858007][ T7698] loop4: detected capacity change from 0 to 128 [ 98.948593][ T7703] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 99.131788][ T7714] tipc: Enabling of bearer rejected, failed to enable media [ 99.159985][ T7716] vhci_hcd: default hub control req: 800f v0000 i0000 l31125 [ 99.264446][ T7723] loop4: detected capacity change from 0 to 2048 [ 99.282336][ T7723] EXT4-fs mount: 54 callbacks suppressed [ 99.282378][ T7723] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 99.365233][ T7728] 9pnet_fd: Insufficient options for proto=fd [ 99.450884][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.458776][ T7733] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1463'. [ 99.482870][ T7736] loop4: detected capacity change from 0 to 512 [ 99.491271][ T7736] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 99.539523][ T7736] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.1464: Failed to acquire dquot type 1 [ 99.553479][ T7736] EXT4-fs (loop4): 1 truncate cleaned up [ 99.559400][ T7733] loop3: detected capacity change from 0 to 128 [ 99.560135][ T7736] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 99.580338][ T7736] ext4 filesystem being mounted at /309/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 99.730542][ T7745] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 99.898354][ T7751] vhci_hcd: default hub control req: 800f v0000 i0000 l31125 [ 100.076910][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.338180][ T7770] loop4: detected capacity change from 0 to 1024 [ 100.466866][ T7774] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1475'. [ 100.477150][ T7774] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1475'. [ 100.685818][ T7770] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 100.696780][ T7770] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (30349!=20869) [ 100.706935][ T7770] EXT4-fs (loop4): invalid journal inode [ 100.712711][ T7770] EXT4-fs (loop4): can't get journal size [ 100.721273][ T7770] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 100.780307][ T7783] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 100.787631][ T29] kauditd_printk_skb: 330 callbacks suppressed [ 100.787645][ T29] audit: type=1326 audit(1752567676.306:2283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7755 comm="syz.2.1470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd37afae929 code=0x7fc00000 [ 100.817729][ T29] audit: type=1326 audit(1752567676.306:2284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7755 comm="syz.2.1470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd37afae929 code=0x7fc00000 [ 100.841320][ T29] audit: type=1326 audit(1752567676.306:2285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7755 comm="syz.2.1470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd37afae929 code=0x7fc00000 [ 100.864968][ T29] audit: type=1326 audit(1752567676.306:2286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7755 comm="syz.2.1470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd37afae929 code=0x7fc00000 [ 100.888416][ T29] audit: type=1326 audit(1752567676.306:2287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7755 comm="syz.2.1470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd37afae929 code=0x7fc00000 [ 100.911853][ T29] audit: type=1326 audit(1752567676.306:2288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7755 comm="syz.2.1470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd37afae929 code=0x7fc00000 [ 100.935277][ T29] audit: type=1326 audit(1752567676.306:2289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7755 comm="syz.2.1470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd37afae929 code=0x7fc00000 [ 100.958720][ T29] audit: type=1326 audit(1752567676.306:2290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7755 comm="syz.2.1470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd37afae929 code=0x7fc00000 [ 100.982284][ T29] audit: type=1326 audit(1752567676.306:2291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7755 comm="syz.2.1470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd37afae929 code=0x7fc00000 [ 101.005690][ T29] audit: type=1326 audit(1752567676.306:2292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7755 comm="syz.2.1470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd37afae929 code=0x7fc00000 [ 101.083912][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.126572][ T7787] loop2: detected capacity change from 0 to 512 [ 101.135131][ T7787] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 101.159264][ T7789] loop4: detected capacity change from 0 to 2048 [ 101.166643][ T7787] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.1482: Failed to acquire dquot type 1 [ 101.184064][ T7787] EXT4-fs (loop2): 1 truncate cleaned up [ 101.191306][ T7787] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 101.206276][ T7787] ext4 filesystem being mounted at /285/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 101.206879][ T7789] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 101.255464][ T7797] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1484'. [ 101.272122][ T7797] loop1: detected capacity change from 0 to 128 [ 101.297915][ T7800] 9pnet_fd: Insufficient options for proto=fd [ 101.487646][ T7803] team_slave_0: entered promiscuous mode [ 101.488060][ T7805] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1486'. [ 101.493395][ T7803] team_slave_1: entered promiscuous mode [ 101.494755][ T7803] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 101.536684][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.540712][ T7803] team0: Device macvtap1 is already an upper device of the team interface [ 101.556588][ T7803] team_slave_0: left promiscuous mode [ 101.562054][ T7803] team_slave_1: left promiscuous mode [ 101.688783][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.707926][ T7811] loop1: detected capacity change from 0 to 1024 [ 101.728911][ T7811] EXT4-fs (loop1): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 101.751565][ T7815] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 101.775678][ T7815] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 101.823383][ T7811] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 101.866241][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.981553][ T7844] tipc: Enabling of bearer rejected, failed to enable media [ 102.325885][ T7884] loop1: detected capacity change from 0 to 1024 [ 102.334713][ T7884] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 102.399227][ T7893] loop1: detected capacity change from 0 to 2048 [ 102.417558][ T7893] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 102.484444][ T7908] 9pnet_fd: Insufficient options for proto=fd [ 102.584638][ T7916] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1499'. [ 102.598678][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.611944][ T7916] bridge0: port 3(batadv1) entered blocking state [ 102.618483][ T7916] bridge0: port 3(batadv1) entered disabled state [ 102.627880][ T7916] batadv1: entered allmulticast mode [ 102.634903][ T7916] batadv1: entered promiscuous mode [ 102.740689][ T7940] loop1: detected capacity change from 0 to 512 [ 102.766813][ T7940] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 102.783153][ T7949] loop2: detected capacity change from 0 to 512 [ 102.827020][ T7949] EXT4-fs warning (device loop2): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 102.846948][ T7940] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.1500: Failed to acquire dquot type 1 [ 102.861892][ T7940] EXT4-fs (loop1): 1 truncate cleaned up [ 102.868560][ T7940] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 102.870612][ T7949] EXT4-fs (loop2): mount failed [ 102.894614][ T7940] ext4 filesystem being mounted at /278/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 103.148819][ T4640] batman_adv: batadv1: IGMP Querier appeared [ 103.155203][ T4640] batman_adv: batadv1: MLD Querier appeared [ 103.315524][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.327815][ T7976] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1510'. [ 103.455089][ T7981] loop1: detected capacity change from 0 to 128 [ 103.679652][ T8003] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 103.692249][ T8003] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 103.692643][ T8002] loop1: detected capacity change from 0 to 1024 [ 103.709426][ T8002] EXT4-fs (loop1): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 103.729200][ T8002] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 103.764673][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.867611][ T8003] ================================================================== [ 103.875771][ T8003] BUG: KCSAN: data-race in rtc_dev_poll / rtc_pie_update_irq [ 103.883203][ T8003] [ 103.885544][ T8003] read-write to 0xffff8881027ff380 of 8 bytes by interrupt on cpu 1: [ 103.893638][ T8003] rtc_pie_update_irq+0x93/0xf0 [ 103.898531][ T8003] __hrtimer_run_queues+0x20f/0x5a0 [ 103.903767][ T8003] hrtimer_interrupt+0x21a/0x460 [ 103.908747][ T8003] __sysvec_apic_timer_interrupt+0x5c/0x1d0 [ 103.914744][ T8003] sysvec_apic_timer_interrupt+0x6f/0x80 [ 103.920440][ T8003] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 103.926459][ T8003] __tsan_read8+0x12/0x190 [ 103.930925][ T8003] change_protection+0x79b/0x15f0 [ 103.935992][ T8003] mprotect_fixup+0x41a/0x570 [ 103.940699][ T8003] do_mprotect_pkey+0x6d6/0x980 [ 103.945585][ T8003] __x64_sys_mprotect+0x48/0x60 [ 103.950466][ T8003] x64_sys_call+0x2794/0x2fb0 [ 103.955172][ T8003] do_syscall_64+0xd2/0x200 [ 103.959706][ T8003] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.965638][ T8003] [ 103.967989][ T8003] read to 0xffff8881027ff380 of 8 bytes by task 8003 on cpu 0: [ 103.975562][ T8003] rtc_dev_poll+0x78/0xb0 [ 103.979939][ T8003] __io_arm_poll_handler+0x1eb/0xb70 [ 103.985271][ T8003] io_arm_poll_handler+0x427/0x590 [ 103.990419][ T8003] io_queue_async+0x60/0x3a0 [ 103.995052][ T8003] io_req_task_submit+0xbb/0xc0 [ 103.999943][ T8003] io_handle_tw_list+0x18d/0x1c0 [ 104.004915][ T8003] tctx_task_work_run+0x6d/0x1a0 [ 104.009890][ T8003] tctx_task_work+0x3f/0x80 [ 104.014437][ T8003] task_work_run+0x131/0x1a0 [ 104.019067][ T8003] get_signal+0xe13/0xf70 [ 104.023443][ T8003] arch_do_signal_or_restart+0x96/0x480 [ 104.029035][ T8003] exit_to_user_mode_loop+0x7a/0x100 [ 104.034376][ T8003] do_syscall_64+0x1d6/0x200 [ 104.039007][ T8003] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.044942][ T8003] [ 104.047282][ T8003] value changed: 0x000000000000a1c0 -> 0x000000000000a2c0 [ 104.054398][ T8003] [ 104.056746][ T8003] Reported by Kernel Concurrency Sanitizer on: [ 104.062923][ T8003] CPU: 0 UID: 0 PID: 8003 Comm: syz.0.1516 Not tainted 6.16.0-rc6-syzkaller-00002-g155a3c003e55 #0 PREEMPT(voluntary) [ 104.075358][ T8003] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 104.085427][ T8003] ==================================================================