last executing test programs: 3m31.319916834s ago: executing program 4 (id=1028): syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="636865636b3d7374726963742c757466383d312c757466383d302c757466383d312c6e66732c6572726f72733d72656d6f756e742d726f2c73686f72746e616d653d77696e6e742c00043518f9aad8a4f2c1cdb3e993cf0444d9d2d40bb509d4da042c2c85e3650de97db42c38cafa7a9d7503c3c985486cf7fc80515e9bef7e9e56fb346de370b3eb3ecbc59d343c36bf04efc3d68033308b0014b0c677ae5ef2932cc05f566112668fa4f6844dcf823618a2993da771384e8fc12467a56b33e3b00030dbfd82ea2f8ddbeb1d04bac86815ebe0b9d084d60edf56b15e74589892dce86962f611a4313120b738dddfd38d20b443570197dc795020ecf541601ef9a5618869febf769dd50261849a47e170ba166b97e76a0261d0dc1fb3e2646595f1c8b49057d94f10f7b5e35ead0a38"], 0x3, 0x21f, &(0x7f0000000940)="$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") mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) creat(&(0x7f0000000100)='./file0\x00', 0x1) 3m31.251538546s ago: executing program 4 (id=1030): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2}}, 0x2}, 0x1c) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) r1 = fcntl$dupfd(r0, 0x406, r0) syz_genetlink_get_family_id$tipc(&(0x7f0000000100), r1) 3m31.181475707s ago: executing program 4 (id=1031): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x57) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x702, 0x0, 0x0, &(0x7f0000000580), 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 3m31.111533468s ago: executing program 4 (id=1034): syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000780)='./file0\x00', 0x0, &(0x7f00000007c0), 0x1, 0x73a, &(0x7f0000000800)="$eJzs3M9rHGUfAPDvTJO2b5v33bzgQTwJFSvUTtJU7UmIeC4U+gfUsJmEkEk2ZDe1iQFbDx4EQUXwRy/6H3hRBC+l/4MieFPwIGhN40HwsLKT3a1ud9PYJl2onw/Mzvd5Zme+zzc7PGRgnw3gX+vJ1ksSMRYRFyKi0u5PI+JwGR2NuLrzvttbm9Xtrc1qEs3mxVtJ67Syr3OtpL0/HuUp8XhE3ByNOPXG3Xnr6xuLM0WRr7bbE42llYn6+sbphaWZ+Xw+X56anDx79oWp55+b3Lda337ts1/e+vLlrz8+t/THi7eenU1iuqw7eurYTzt/k9GY7ulfPohkQ9RsNpvDHgMAAPeWlv+dRoyU+0ocKiMAAADgUdI80gQAAAAeeUkMewQAAADAwep8D+D21ma1sz3M7x/8/FJEjN9ZW7zdzT9SriGOOFquTzi2nfxtZUKycxo8kKvXIuLGdJ/7P2nff/evd+V68oDXY//daM0/0/3mv7Q7/0Sf+Wek89sJD6gz/23fNf/dyX9owPx3YY85jqye/GZg/msRT4z0y5908ycD8r+yx/yfj333/aBjzU8jTkb//H/NtcvvQ0zMLRR5+7VvjhNfvH5qt/qPDcqf7F7/yh7r/+H61PyguaSV/5kTu3/+/fK37ol32uNII+Ld9r7Vfq8nx9M3Jz/arf7ZAfXf6/P/ZI/1f/Xmxo97fCsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACU0ogYiyTNunGaZlnE8Yh4LI6lRa3eODVXW1uebR2LGI/RdG6hyCcjorLTTlrtM2V8pz3V0z4bEf+PiPcr/ynbWbVWzA67eAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALqOR8RYJGkWEWlE/FZJ0ywb9qgAAACAfTc+7AEAAAAAB87zPwAAADz6PP8DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD8GF8+dbW3N7a7Paas9eXl9brF0+PZvXF7OltWpWra2uZPO12nyRZ9Xa0r2uV9RqK+diee3KRCOvNybq6xuXlmpry41LC0sz8/mlfPShVAUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMA/NVZuSZpFRFrGaZplEf+NiPEYTeYWinwyIv4XEd9WRo+02meGPWgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD2XX19Y3GmKPJVgUAg6AbDnpkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABiG+vrG4kxR5Kv1YY8EAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA4Up/SiKitZ2sPDXWe/Rw8nul3EfEq9cvfnBlptFYPdPq/7Xb3/iw3T81jPEDAAAAvTrP6Z3neAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgL2qr28szhRFvnqAwbBrBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA7s+fAQAA//8gLc9Y") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x242, 0x18e) clock_gettime(0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{}, 0x0, &(0x7f0000000600)}, 0x20) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x6142, 0x85) quotactl_fd$Q_SETINFO(r0, 0xffffffff80000601, 0x0, &(0x7f00000001c0)={0x2, 0x7f, 0x0, 0x7}) 3m30.828244433s ago: executing program 4 (id=1040): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$inet6(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a000000020000000110000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00'}, 0x10) sendto$inet6(r0, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) 3m30.228009343s ago: executing program 4 (id=1050): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000280000002800000002000000000000000000000300000000000000000000000000000000000000000000000105"], 0x0, 0x42}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317ce22000000"], 0xb1de0244d95b7ddf) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 3m30.191986804s ago: executing program 32 (id=1050): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000280000002800000002000000000000000000000300000000000000000000000000000000000000000000000105"], 0x0, 0x42}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317ce22000000"], 0xb1de0244d95b7ddf) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 2m34.521858406s ago: executing program 0 (id=2585): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wg1\x00', 0x0}) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000180)=0x19ca, 0x4) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) sendto$packet(r0, &(0x7f00000000c0)="3f03fe7f0302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c153cfdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) 2m34.363221319s ago: executing program 0 (id=2587): r0 = socket$kcm(0x2, 0x5, 0x84) close(r0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) r1 = socket$kcm(0x11, 0x200000000000002, 0x300) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, 0x0, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000000)=r2, 0x4) r3 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r3, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r3, &(0x7f0000000040)={&(0x7f0000001340)=@hci={0x1f, 0x0, 0x12}, 0x80, &(0x7f0000000140)=[{&(0x7f00000006c0)="62043c00590200000001ad2f1eafbcf706e12b30087f5c582d26116642c47a5f8786ee601e65ab3c06d4b8bf4a81cb3e247345af215542f41ddf82f618438a34f90186cee8441e2305e495d04ad68ab8fef69df82de6456fbb48b63f60c9c9097be968ea872c4801e5d0711b4373c7224ed7a9cbd49d40f82bdb6afc0036824be26fc96e49a70e90797e6caa1b38ddacb3cb2b3eac7c068a185b644582f25edfa3d6a46e2a894ca809a422a6a29bd7145bb6e7992570484d6a710292ea0c3f97b7cbff701684b13c5593262534a7af9eab48f2ca2d74d9a4de33", 0xda}, {&(0x7f0000000c00)="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", 0x114}, {&(0x7f0000000a40)="0a985d7879f1bbff16c7d66e33657e452299fd0ef8c2afda588eb05891b7da030e01452a7986bea19b59c98dc2996c0ea09604d00ea48336d0c813d83025aca8623a5915ddddce2c11c5e374f2e0f387d2398fe0b899ff60dc7a73addcf253cf32aafbe2b9f90799e7fc583bdd9b564697ba988080270bdceb4714219a2d4c229fffb0d86fb286e3553a8b3ac02badc66ada5fceabe5f63c79da96e641a45901128063d6e1e31b11bcfbc3e70bd3c8c6c0be9f653f977f16", 0xfff0}, {&(0x7f0000000840)="6f4720baeb54", 0x6}], 0x4}, 0x0) 2m34.28484212s ago: executing program 0 (id=2589): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000400)={r0, 0x3, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socket(0x10, 0x80002, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0x0, 0x0, 0x0, 0x78664db, 0x0, 0x0, 0x41000, 0x6, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffa}, 0x94) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x30, &(0x7f0000000600)=ANY=[], 0x110) 2m33.497284594s ago: executing program 0 (id=2594): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f00000003c0)={[{@noblock_validity}, {@test_dummy_encryption_v1}]}, 0x0, 0x48f, &(0x7f0000001800)="$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") syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000300)={[{@noauto_da_alloc}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1}}, {@dioread_lock}, {@norecovery}, {@discard}, {@lazytime}, {@noload}, {@usrquota}, {@noauto_da_alloc}]}, 0xfe, 0x54d, &(0x7f0000000400)="$eJzs3d9rW1UcAPDvTdv96nQdjKE+SGEPTubStfXHBB/mo+hwoO8ztHdlNFlGk461Dtwe3IsvMgQRB+If4LuPw3/Av2KggyGj6IMvkZvedNmatFmXrZn5fOC259x703NPzv2enpOTkACG1mT2oxDxakR8m0Qcajs2GvnByfXz1h5cm8u2JBqNz/5KIsn3tc5P8t/jeeaViPjt64gThc3l1lZWF0vlcrqU56fqlctTtZXVkxcrpYV0Ib00Mzt7+p3Zmfffe7dvdX3z3D8/fHrno9PfHFv7/pd7h28lcSYO5sfa6/EUrrdnJmMyf07G4sxjJ073obBBkuz2BbAjI3mcj0XWBxyKkTzqgf+/ryKiAQypRPzDkGqNA1pz+z7Ng18Y9z9cnwBtrv/o+msjsa85NzqwljwyM8rmuxN9KD8r49c/b9/Ktujf6xAA27p+IyJOjY5u7v+SvP/buVM9nPN4Gfo/eH7uZOOftzqNfwob45/oMP4Z7xC7O7F9/Bfu9aGYrrLx3wcdx78bi1YTI3nupeaYbyy5cLGcZn3byxFxPMb2Zvmt1nNOr91tdDvWPv7Ltqz81lgwv457o3sffcx8qV56mjq3u38j4rWO499ko/2TDu2fPR/neizjaHr79W7Htq//s9X4OeKNju3/cEUr2Xp9cqp5P0y17orN/r559Pdu5e92/bP2P7B1/SeS9vXa2pOX8dO+f9Nux3Z6/+9JPm+m9+T7rpbq9aXpiD3JJ5v3zzx8bCvfOj+r//FjW/d/ne7//RHxRY/1v3nkZtdTB6H955+o/Z88cffjL3/sVn5v7f92M3U839NL/9frBT7NcwcAAAAAAACDphARByMpFDfShUKxuP7+jiNxoFCu1uonLlSXL81H87OyEzFWaK10j7e9H2I6fz9sKz/zWH42Ig5HxHcj+5v54ly1PL/blQcAAAAAAAAAAAAAAAAAAIABMd7l8/+ZP0Z2++qAZ85XfsPw2jb++/FNT8BA8v8fhpf4h+El/mF4iX8YXuIfhpf4h+El/mF4iX8AAAAAAAAAAAAAAAAAAAAAAAAAAADoq3Nnz2ZbY+3BtbksP39lZXmxeuXkfFpbLFaW54pz1aXLxYVqdaGcFueqle3+XrlavTw9E8tXp+pprT5VW1k9X6kuX6qfv1gpLaTn07HnUisAAAAAAAAAAAAAAAAAAAB4sdRWVhdL5XK6JCGxo8ToYFyGRJ8Tu90zAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMBD/wUAAP//y284sw==") open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000180)='./bus\x00', 0x14113e, 0x6ceac77f206eabb9) write$binfmt_script(r0, &(0x7f0000000080), 0x208e24b) mount(0x0, &(0x7f0000000040)='./file0/../file0\x00', 0x0, 0x2088029, &(0x7f0000000140)='usrjquota=') 2m33.020309382s ago: executing program 0 (id=2603): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='dctcp\x00', 0x6) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @loopback}, 0x8}, 0x1c) connect$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0x7, @empty, 0x106}, 0x1c) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000400)=0x10, 0x4) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x56c}, 0x1, 0x0, 0x0, 0x40000}, 0x8011) syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), r1) 2m32.835362665s ago: executing program 0 (id=2607): syz_open_procfs$namespace(0x0, 0x0) r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x5, @perf_config_ext={0x9, 0x489}, 0x3000, 0x4, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x6, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0x28, 0x0, &(0x7f0000000040)="b90103606989068c3c270040f0832f9e0ff008001fffffe1ffff8100632f080686dd00017f020001", 0x0, 0x104, 0x6000000000000000, 0x0, 0x0, 0x0}, 0x50) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="bb204ce418bce1d51ccf970aea9d6c48c7e65218", 0x14}], 0x1}, 0x44) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="8500000002"], 0x0}, 0x94) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x3b) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'netdevsim0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8946, &(0x7f0000000080)) 2m32.776660957s ago: executing program 33 (id=2607): syz_open_procfs$namespace(0x0, 0x0) r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x5, @perf_config_ext={0x9, 0x489}, 0x3000, 0x4, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x6, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0x28, 0x0, &(0x7f0000000040)="b90103606989068c3c270040f0832f9e0ff008001fffffe1ffff8100632f080686dd00017f020001", 0x0, 0x104, 0x6000000000000000, 0x0, 0x0, 0x0}, 0x50) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="bb204ce418bce1d51ccf970aea9d6c48c7e65218", 0x14}], 0x1}, 0x44) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="8500000002"], 0x0}, 0x94) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x3b) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'netdevsim0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8946, &(0x7f0000000080)) 37.346234391s ago: executing program 5 (id=4579): r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$IPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x43, &(0x7f0000000000)={'ah\x00'}, &(0x7f0000000040)=0x1e) 37.289840622s ago: executing program 5 (id=4581): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="01002bbd7000fedbdf250f0000001c0007800c00040003000000000000000c0003002d"], 0x30}, 0x1, 0x0, 0x0, 0x4c004}, 0x804) 37.271584603s ago: executing program 5 (id=4583): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x408e, &(0x7f00000000c0)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x32}}, {@min_batch_time={'min_batch_time', 0x3d, 0xfff}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x80}}, {@stripe={'stripe', 0x3d, 0x12}}, {@i_version}, {@max_batch_time={'max_batch_time', 0x3d, 0x7}}]}, 0x3, 0x43a, &(0x7f0000000340)="$eJzs28tvG0UYAPBv13FKXySU8ugDCBRExCNp0gI9cAGBxAEkJDiUY0jSqtRtUBMkWlUQECpHVIk74ojEX8AJLgg4IXGFO6pUoVxaOBmtvZs4jp0mwY5L/ftJm8zsjjPzeXbs2Z1sAH1rJPuRROyJiN8jYqieXV1gpP7r5tLl6b+XLk8nUa2+9VdSK3dj6fJ0UbR43e48M5pGpJ8lcahFvfMXL52dqlRmL+T58YVz74/PX7z07JlzU6dnT8+enzxx4vixiReen3yuI3Fmbbpx8KO5wwdee+fqG9Mnr77787dJEX9THB0yst7BJ6rVDlfXW3sb0slADxvCppQiIuuucm38D0UpVjpvKF79tKeNA7qqWq1Wd7c/vFgF7mBJbLTk2fzzArgzFF/02fVvsW3T1OO2cP2l+gVQFvfNfKsfGYg0L1Nuur7tpJGIOLn4z1fZFt25DwEAsMr32fznmVbzvzTubyh3d742NBwR90TEvoi4NyL2R8R9EbWyD0TEg5usv3mRZO38J722pcA2KJv/vZivba2e/xWzvxgu5bm9tfjLyakzldmj+XsyGuUdWX5inTp+eOW3L9oda5z/ZVtWfzEXzNtxbWDH6tfMTC1M/ZeYG13/JOLgQKv4k+WVgCQiDkTEwS3Wceapbw63O9Yu/vJG/nAH1pmqX0c8We//xWiKv5Csvz45fldUZo+OF2fFWr/8euXNdvXfuv+7K+v/XS3P/+X4h5PG9dr5zddx5Y/P217TbPX8H0zerqUH830fTi0sXJiIGExerze6cf/kymuLfFE+i3/0SOvxvy9W3olDEZGdxA9FxMMR8Uje9kcj4rGIOLJO/D+9/Ph7W4+/u7L4ZzbV/yuJwWje0zpROvvjd6sqHd5M/Fn/H6+lRvM9G/n820i7tnY2AwAAwP9PGhF7IknHltNpOjZW/3/5/bErrczNLzx9au6D8zP1ZwSGo5wWd7qGGu6HTuSX9UV+sil/LL9v/GVpZy0/Nj1Xmel18NDndrcZ/5k/S71uHdB1nteC/mX8Q/8y/qF/Gf/Qv1qM/529aAew/Vp9/3/cg3YA269p/Fv2gz7i+h/6l/EP/cv4h740vzNu/ZC8hMSaRKS3RTMkupTo9ScTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAZ/wbAAD//9E940M=") socket$nl_audit(0x10, 0x3, 0x9) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCGETD(r0, 0x5424, 0x0) ioctl$VT_DISALLOCATE(r0, 0x5608) 36.887161699s ago: executing program 5 (id=4588): syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000280)='./file2\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="74696d655f6f66667365743d3078303030303030303030303030303333372c757466383d312c6e6f6e756d7461696c3d302c757466383d312c73686f72746e616d653d77696e39352c756d61736b3d30303030303030303030303031373737373737373737372c73686f72746e616d653d77696e39352c00e4393a908be68fc338cfe98eac30a94e18f517aa19cb31ea9b73a2f2245353cd36a84ff80ecb8d220be55184d5b912da618bf6d6099c5138c50ea063"], 0x3, 0x21e, &(0x7f0000000940)="$eJzs2j+LHGUcB/DfnJHEC5dd8R8JiA9aqM2Q3doihyQgLiiaFaIgmXizuuy4e+wsBytirtLWl2AtlnaCpLS5xldgYXfNlSnEkWRjcnesyCG6aj6fZr7wzBeeh2d4eIrZf+XLj0eDOh8Us1jLsli7FLtxO4t2rMXvduPlF6/98Ozb1959fbPXu/xWSlc2r3a6KaVzz33/3qffPH9rdvadb899dzr22u/vH3R/3nt67/z+r1c/GtZpWKfxZJaKdGMymRU3qjJtDetRntKbVVnUZRqO63J6ZHxQTba356kYb22sb0/Luk7FeJ5G5TzNJmk2nafiw2I4Tnmep4314K/of327aeKgefR6NE3z2Fdx9lZs/BStyB5P2ROXsqeuZ8/sZucPmqa16qnyt7D/D7dDh/qZiOqLnf5Of/FcjG8OYhhVlHExWvFL3PlM7lnkK6/1Ll9Md7Xj8+rmvf7Nnf4jR/udaEV7eb+z6Kej/dOxfrjfjVY8ubzfXdo/Ey+9cKifRyt+/CAmUcVW3Ok+6H/WSenVN3rH+hfuvgcA8H+Tp/uW3t/y/I/GF/0T3A+P3a9OxYVTq107EfX8k1FRVeVUEAThfvjzsyNzfv/nPdj0Vc8EAAAAAAAAAACAk/gnfidc9RoBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIB/t98CAAD//6v91cc=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x802, 0xa2) syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000040)={[{@noquota}]}, 0x1, 0x775, &(0x7f0000001180)="$eJzs3c9rXNUeAPDvnSRNm/a95MGD9+oqIGigdGJqbBVcVFyIYKGga9thMg01k0zJTEoTAlpEcCOouBB007U/6s6tP7b6X7gQS9W0WHEhkTu5t502M2mSJpnqfD5wM+fceyfnfOf+OGfmHu4NoGeNpn8KEYcj4t0kYjibn0TEQDPVH3Fybb1bK8vldEpidfXlX5LmOjdXlsvR8p7UwSzz/4j45q2II4X15dYXl2ZK1WplPsuPN2YvjNcXl46eny1NV6Yrc8cnJiePnXjqxPGdi/W375cOXXvvhcc/P/nHm/+7+s63SZyMQ9my1jh2ymiMZp/JQPoR3uX5nS6sy5JuV4BtSQ/NvrWjPA7HcPQ1UwDAP9nrEbEKAPSYRPsPAD0m/x3g5spyOZ+6+4vE3rr+XETsX4s/v765tqQ/u2a3v3kddOhmcteVkSQiRnag/NGI+PjLVz9Np9il65AA7bxxOSLOjoyuP/8n68YsbNUTGyzbl72O3jPf+Q/2zldp/+fpdv2/wu3+T7Tp/wy2OXa3477H/4EdKGQDaf/v2Zaxbbda4s+M9GW5fzX7fAPJufPVSnpu+3dEjMXAYJqf2KCMsRt/3ui0rLX/9+v7r32Slp++3lmj8FP/4N3vmSo1Sg8Sc6vrlyMe6W8Xf3J7+ycd+r+nN1nGi8+8/VGnZWn8abz5tD7+yEYn7Y7VKxGPtd3+d0a0JRuOTxxv7g7j+U7Rxhc/fDjUqfzW7Z9Oafn5d4G9kG7/oY3jH0lax2vWt17Gd1eGv+607P7xt9//9yWvNNN5P+JSqdGYn4jYl7y0fv6xO+/N8/n6afxjj7Y//jfa/9PvhGc3GX//tZ8/2378uyuNf2pL23/riau3Zvo6lb+57T/ZTI1lczZz/ttsBR/kswMAAAAAAAAAAAAAAAAAAAAAAACAzSpExKFICsXb6UKhWFx7hvd/Y6hQrdUbR87VFuamovms7JEYKOS3uhxuuR/qRHY//Dx/7J78kxHxn4j4YPBAkt9HcarLsQMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABA7mCH5/+nfhzsdu0AgF2zv9sVAAD2nPYfAHqP9h8Aeo/2HwB6j/YfAHqP9h8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIBddvrUqXRa/X1luZzmpy4uLszULh6dqtRnirML5WK5Nn+hOF2rTVcrxXJt9n7/r1qrXZiMuYVL441KvTFeX1w6M1tbmGucOT9bmq6cqQzsSVQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAsDX1xaWZUrVamZfYRmL14ahG9xN92e70sNRnTxPJw1GNHU50+cQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8DfxVwAAAP//02Ii/w==") r1 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file2\x00', 0x90440, 0x190) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) socket$inet(0x2, 0xa, 0x8) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000200000000"], &(0x7f0000000040)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x5, 0x14, 0x0, &(0x7f0000000000)="259a53f271a76d2608004c6588a80a3888ca2f15", 0x0, 0xd11, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x40}, 0x50) ptrace(0x10, r2) wait4(r2, 0x0, 0x40000000, 0x0) ptrace$getregset(0x4204, r2, 0x40a, &(0x7f0000000000)={0x0}) getdents64(r1, 0x0, 0x44) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000000050000000000000000007f9b5404c7984587d60808d89e1f2ac8a6cc9e78df8fec123b52e682a766aa9ab8072b62162c2e908e804ffa88eb45fa19e4eb3a1daa5016f280b2e5cc06500d42db5dafadb326068d788ae3650385a66edc773dee5577544b118e772c5e4f2198ed85200a643a8bcac5908e44f36c613b1c45f9f8c1467dcfdddcf4b2c4453a32ddbbf9c4b1e3b1d9b4d9f226fbc6d5ca418ab912bd8f6efc5d5e68669f1cb74857460a341fab3b1fde3dd62ab3210a6ed36d08983709e996d126099dc7", @ANYRES32=0x0, @ANYRES32=0x0], 0x48) r5 = socket$inet_udp(0x2, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000005000000000000000600000085000000190002009500000000000000a85518624dfa3689fbcbc017ec7d4dee7dab46bc8b1de268aa0ebc5937f5c61d6affab456bd8db000000"], &(0x7f0000000200)='syzkaller\x00', 0x5, 0x0, 0x0, 0x41000, 0x28}, 0x94) bind$inet(r5, &(0x7f0000000040)={0x2, 0x9, @remote}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x3, 0x10, &(0x7f0000000580)=@framed={{}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}, {}, {0x85, 0x0, 0x0, 0x6a}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000240)='percpu_alloc_percpu\x00', r6}, 0x66) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000100)=ANY=[@ANYBLOB="05000000000000007111aa00000066e40b5372fcb44538abfc528d067ae700008510000002000000850000000ea5c600000000009500a5f60000000000000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000000)=0x4) 36.620048064s ago: executing program 5 (id=4589): r0 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r0, &(0x7f0000000b40)={&(0x7f0000000240)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000280)='0', 0x1}], 0x1}, 0x45) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{}, {0x1}], 0x10, 0x3}, 0x94) sendmsg$inet(r0, &(0x7f00000029c0)={&(0x7f0000000100)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000001c0)=[{&(0x7f00000006c0)='\x00', 0x1}], 0x1}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x10}}], 0x10}, 0x0) sendmsg$inet(r0, &(0x7f0000000b00)={&(0x7f0000000140)={0x2, 0x4e23, @rand_addr=0x64010102}, 0x10, &(0x7f0000000ac0)=[{&(0x7f0000000600)="f2fcf796", 0x4}], 0x1}, 0x8d0) setsockopt$sock_attach_bpf(r0, 0x84, 0x76, &(0x7f0000000000), 0x8) 35.13972872s ago: executing program 5 (id=4619): mprotect(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x5) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000010040b7080000000000007b8af8ff00000000b7080000000000107b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r0, @ANYBLOB="0000000002000000b705000008000000850000005e00000095"], &(0x7f00000001c0)='GPL\x00', 0x8, 0xff8, &(0x7f0000002e00)=""/4088, 0x0, 0xa}, 0x94) 35.110723171s ago: executing program 34 (id=4619): mprotect(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x5) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000010040b7080000000000007b8af8ff00000000b7080000000000107b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r0, @ANYBLOB="0000000002000000b705000008000000850000005e00000095"], &(0x7f00000001c0)='GPL\x00', 0x8, 0xff8, &(0x7f0000002e00)=""/4088, 0x0, 0xa}, 0x94) 3.570983557s ago: executing program 1 (id=5279): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x1a, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000c40)={0x18, 0x4, &(0x7f0000000480)=ANY=[], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000040), 0x81, r2}, 0x38) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) r4 = io_uring_setup(0xf08, &(0x7f0000000780)={0x0, 0x400826e, 0x40, 0x3, 0xf0}) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f0000000c00)=[{0x0}], 0x1) openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x220204, 0x0) syz_clone3(&(0x7f0000000000)={0x285002400, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x46) io_uring_register$IORING_REGISTER_FILES(r4, 0x1e, &(0x7f0000000000)=[r4], 0x1) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0x7, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000090003008649889f4edab35af089f87a3f1f95000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000003000010850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000a80)='kfree\x00', r5}, 0x18) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f00000002c0)=0x1) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x37, 0x1, 0x0, 0x0, 0x0, 0x6, 0x91511, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x6dd0, 0x2}, 0x8e3d25bb10069d78, 0x7, 0x0, 0x1, 0x8, 0x6, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$snapshot(0xffffffffffffff9c, 0x0, 0x481, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x7, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) r7 = socket$inet(0x2, 0x2, 0x1) unshare(0x62040200) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000800)="d8000000140081044e81f782db44b9040a1d080206000000040000a118000200fe05000000000e1208000f0100810401a80016ea1f00010000005f54c92011148ed08734843cb12b00000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5e835913b04e18a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f52eb4edbb57a5025ccca9e00360d8bcc00400040fad95667e00600010000d5e1cace81b341139fe3cd4032e8edb12d1d2eb0c0ed0bfffdccfa5df947e5e0633c2698be22bff440fa086116a7e43dca48edaf6eedec9501930b10c38de59e36c85fa240213911a60990607abeb56fae9e62c0a665095793e018a19d16563335003508523d", 0x11e}], 0x1, 0x0, 0x0, 0x7400}, 0x8000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32, @ANYBLOB="00000000000000001c001a800800028008000200080000003e"], 0x44}}, 0x0) sendmsg$inet(r7, &(0x7f0000000600)={&(0x7f0000000040)={0x2, 0xffff, @multicast2}, 0x10, &(0x7f0000000d40)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f00000004c0)="1ed8b7f9d457", 0x6}], 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000007000000890b040a0101027f00000100000000001c00"/43], 0x40}, 0x20008080) socket$inet(0x2, 0x2, 0x1) 3.194738313s ago: executing program 6 (id=5284): r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000100)={0x0, 0x4}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @empty}], 0x10) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, 0x0, 0x0) sendmsg$inet_sctp(r1, &(0x7f0000000140)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000000)=[{&(0x7f00000001c0)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x4000891) socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000280)={0x0, 0x6}, 0x8) close_range(r0, 0xffffffffffffffff, 0x0) 2.902053899s ago: executing program 1 (id=5287): r0 = socket(0xa, 0x3, 0xff) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000040)=0x8008, 0x4) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaa923986dd6c370c8900082b0120010000000000000000000000000000fe8000000000000000000000000000aa"], 0x0) ioctl$SIOCGSTAMP(r0, 0x8906, 0x0) recvfrom(r0, 0x0, 0x0, 0x60, 0x0, 0x0) 2.8126215s ago: executing program 1 (id=5289): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000140)='illinois\x00', 0x9) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x4) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f0000000340), 0x0, 0x0, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x12, 0x0, 0x12) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1800483, &(0x7f0000000740)={[{@dax}, {@norecovery}, {@max_dir_size_kb}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x333}}, {@norecovery}, {@jqfmt_vfsold}, {@sysvgroups}, {@data_writeback}]}, 0x0, 0x5ad, &(0x7f0000000180)="$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") 2.81200431s ago: executing program 1 (id=5291): bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000c80)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000838500000071000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) unshare(0x60480) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="18020000000000000000000000000000850000002e000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000d000000095"], &(0x7f0000000080)='GPL\x00'}, 0x90) getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000000)=""/145, &(0x7f0000695ffc)=0x24b) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000002c0)='rtc_irq_set_freq\x00', r0}, 0x18) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$RTC_IRQP_SET(r3, 0x4008700c, 0x80000000000725) 2.643941413s ago: executing program 2 (id=5292): perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x4, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x0, @perf_config_ext={0x3, 0x8001}, 0x0, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x94) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc5, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x1e, 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/17], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xc, 0x1c, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000010000850000008200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000000000828500000017000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0x8}, 0x48) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f00000000c0)=@framed, &(0x7f00000001c0)='GPL\x00'}, 0x80) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x202, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) syz_open_procfs$namespace(0x0, &(0x7f0000001000)='ns/pid_for_children\x00') syz_open_procfs$namespace(0x0, &(0x7f0000000240)='ns/pid\x00') sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x128}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f00000014c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x10}}], 0xd0}, 0x40000002) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x19, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x25}, 0x94) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x4b) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_virt_wifi\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8946, &(0x7f0000000080)) 2.592894864s ago: executing program 1 (id=5293): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @local}], 0x10) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000001c0)={0x101, 0x6, 0x660, 0xfff}, 0x8) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x3}, 0x8) sendmsg$inet_sctp(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000380)='J', 0x1}], 0x1, 0x0, 0x0, 0x2804c044}, 0x0) 2.549191605s ago: executing program 1 (id=5294): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200001400000bb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b70200"], &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000700)='kfree\x00', r1}, 0x18) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0x4, &(0x7f0000000600)=ANY=[@ANYRES64=r2, @ANYRES32=r2, @ANYRES8, @ANYBLOB="8c665a23d0e2d98d0054cc1408c6e8ef781148e33ef7faef28e49946819394150d4e0893833e909d397da37b83ab24c9a8f5112cff5d9eed0734071e8a76cda0abe48e98fc1c7417bf4a6253996ca263e87298376544beb89ca1", @ANYRESOCT=r0], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x14, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3, 0x0, 0x4}, 0x18) r4 = syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0xaa81, 0x1, 0x8000, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000100)={0x0, 0x989680}, 0x1, 0x4, 0x1}) io_uring_enter(r4, 0x627, 0xc104c204, 0x43, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x84042, 0x1fb) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x4f0, 0x340, 0x25, 0x148, 0x0, 0x60, 0x458, 0x2a8, 0x2a8, 0x458, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'geneve0\x00', {0x44, 0x0, 0x9, 0x0, 0x0, 0xffffffff, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x0, 0x6, './file0\x00'}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x6, 'syz0\x00'}}}, {{@ip={@broadcast, @multicast1, 0x0, 0x0, 'veth1_to_bond\x00', 'veth0\x00', {0xff}}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@unspec=@cgroup0={{0x28}, {0x4}}, @common=@unspec=@statistic={{0x38}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x8000, 'syz0\x00', {0x481c}}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x550) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x10, &(0x7f0000000740)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x14, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x91382e36}, 0x94) sendmsg$key(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="020900000700000000000000000000000500", @ANYRES32], 0x38}}, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000580), 0x8201, 0x0) 2.317871119s ago: executing program 6 (id=5297): r0 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty, 0xc7ec}, 0x1c) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) 2.23192236s ago: executing program 6 (id=5299): bind$inet(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x5, 0x8c4b815a5465c2b1, r0, 0x100000) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x2) lsetxattr$security_selinux(&(0x7f00000001c0)='.\x00', &(0x7f0000000240), &(0x7f0000000040)='u:r:untrusted_app:s0:c512,c768\x00', 0x1f, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000009900000001"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x64, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x18) utime(&(0x7f0000000100)='./file0\x00', 0x0) r3 = socket$tipc(0x1e, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001e00010a"], 0x14}}, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r5, &(0x7f0000005380)=[{{0x0, 0x0, 0x0}, 0x6}], 0x1, 0x10001, 0x0) syz_emit_ethernet(0xfc2, &(0x7f0000001c00)={@local, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xfb4, 0x2, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0xfa0, 0x0, @wg=@data={0x4, 0x2007407, 0xfffffffffffffffd, "9c67524ed6ed152d4f775bbc411126513b67ab2818e6f3aeb55bee6ae1049f195705bc8bd9b1085cd41af77353267df8a1d4cecdb01908186ea04e641c89a2ee0432e9c0894a8d7aff0c865e96548d507f048f907320b0f8b1e83b5f1425b63ad9c6adfd09578bbda92c9bd8f57d6efd752a6f20487ebea241d612212e3ccb077a5150c08f56aed6ee45acd4439043886b78cc5562b00bc57cf509d90b02a7bc86919f1b882f556e6aac5e9b93ee545b2b68bd014e2a49c332432ef4adeb61ac418aa4e20ee299f1a8b7a72e985223996b11a8913f3b1c23b10f88c3de28660457a37126fd3b6394536da0cd962f532ff22c496e1df4ffe049b193514c02571399d3618383a287068f4f15d51d1781cc0bc2af66ddc68135bfd33634e1a75be80630ce76ef79c86c9abb2fdc6d84367ea10fd8a6ee3c99eaec83c66bf5ffce6eb5ccc2546b6df905ff1aea223029ba2f7eb2469c5b8637b79347361f8cf0fa9d58a039e7811f343961b22c23d68b2c04eb8b5aeee7c6f71ce95cab886bf2694e0643d18761043e2d1dcb8ce0bdd15817a75f591b05146424797f729689e2a7bd53cb6c02fd15c339057c714794b407b342d12e69ec383b6ea6c99f845d04fd5128203c78a388fb0a1caf1f725f7636eb41e415951f8284a9c475760eb9312f7d6307037d472fbda509d56a0cf8e36d44f3f0b67fabdd2842ab4241cbfc7d309188d3a634129a13bfcac3b39b75d46bed585550ff7b41746dfd7e0f0c8a25e9f39deb7e2a4f0e068b86c6593b3b37838d2809eef3eb2f3120fde2fe3e9fef4e4bea1ddf3d17c40f753b37baaa110a8b4ad805d500e0235e9371b828993da25c5697d1001c8971b3862eef047730b242350403c851cd74cdea94501c0e2875a5830aa71733a0f022cb37e1cfffaee8eb0a23d51181a0691dadcd6b30a86a5fbf5c499120e265938f6430ffde09eb173327c2e25bdf22ae0d742141db856c4beee07af0ce37c078f6e59b41a29502cc01737c984185f6622a3ce02ed04daf2a7eb03c92a5a5ecce5973ef704aba9efcb99bf52f5c662d52f4399a13af760f9f9ff3d5930c3fae014b92ee0aded4ba51d95cf946d5f55f5b5d4603f8b76087d681ad77fc385fe114331c24a4ada85eaebf5405467dbe656b31b79a0f893864a13bda309a2fec2f4fc4858d9daf946df31f4077338bfc3116a45827ce8907ad691d241d3a8859a3672aeee3878e45b0be6f68194638dee30ba6735a6424e51f8b9a4965d37ab7ca96e167a5c32c8a935ff34693e24d067039db0f4ffe4dc5fe7c56a0d6e52a7cef9a6f1cc8b88d61d2258e3e0e8f2d7b699d4a22ab661f6afae5b48cc8fbc9ddfe57e76f274e65b210994fd96cd4deb6fdb795df4147ca0d876b1b08b64d20a28a358f48086c0f8d1f0741260f95adabba51f2d3f36107d49d46ba0c666232597bf08bfab60b5a432a1652e2c503fcf977ea6ff15c8e8f3bd9b7a3017c36be787d5a6579f5236b17d7bdc2c3918d9257e266bdf7929bb366d98d2b225c08c3c5ed22113b8c051c811bd1e52ecbe619dbc9579270c7cf69ac129e84a7141e689d9745d56e1cda6affdc1856757a6e39039b17d5286cf393186b99b20c54987087ece9972c39b4a05f1ca218c35254c666e7fcb7df4aa401cc79e1aade63732064ca80af164709a85fcf8ac72fa5ace60aa04d2ee0d5f051cb032f7c25100facb7ec1c247812b0de4f1c3c1ab98f904d9752cc427bc0445d8e27b51d5a8084087ea61f82ccc1114679f673753eddc7cfc00ba7e25db3391579ecdf638ab73078133e49b522d3d16bf2ebd06e7cefc24154088965ad3c9291c68f19f7cdd2943abc716ecf0b33fe249108da2b1f9abdbcb4dba89746a8c5711a41556efe5537327e253bd9ac68dc56516392292152b86ef118e25cac4e3c7c2b20bbc5bbc2d825c8dc14e9807aa6a423fdebfa7deee913c8f9f58bd967d43af1d65dc5ce72b2cd1a17ce34facd199bf2c62beeb752d156d6f31ea0323bc3ec0500587c485d8141f5b5ac81457df9396fbf98222212ef70527b6ed8d6e4d11156c8ecaee4692e068a72cb3b12686436028a7297956c48ee8fc393907edd3695fddbb786808c0a48182e3334e73fedcef0ee1bfbb13dce8a79b8822fd1ca0ed645f64d134c240844be5a7ac3aa15419ae79e7b1d721ae5abe1b0896c6189f23b65d79f5c3677b89f40aceff98dfca244a160dff264a2b14a3774064e1152fe0cabfc23e3e16dba5f46ea6af09fb3b8529022837c7e9303e3ecd0170fcc0e6fb0f3981d9f8f838412eae1a3dd13b7a980a642739e8abebed29db34c06460f09e27ddba1ed76b4ac6290235f6f81fcd3eb12af9821575b050aaf80d5c6c695807f7480f24e4bc0159744f9045a2d37574508d7e687482f775d0a4c471c4914e6a64b0d444037407b8d079751ddf4b14ed0ee6f1e622952a331a1a147f3a805fb7ca29c3c7feb2dddd0db795ac0ca327d95b19ff37bd8d553703014e5137f8c41b947d199f95f245d3354f9679876db736da5cfbd7cb9f80a12e50c895b999b670c9e161aa12e82c79d98fed5017e11674158a2f258ecc7c550f10dee6bb9d159316c567e3973e8aa30f157f6d30f239877021e7161c0a93c7b6bedccc7a3d8c9313f6f860d33ae0c162236853ae29d7a619bc306998e51c5d91a73475119a648700fbf3a41701ef87b440b83573a44339aea5806c0883470613e38baa518466dee2c671d96768f8d842feb5a812ea3ecd1e307a913a1032f06af2656b0a969b38366c39ca149205540391f36c897efb80aa43707c12e21544386fc232a45c9eb40a64c35edd4db20bd4970d642c0c2a0ee43ce8bf4d1bd84b3c3fa198cfc8d1f83960a1c3cd85a164926dc962a9078c5b079e0f4bb0b4e94b0aec3d13e7c47edc936927da2e6e7fe9485b0489bc4fdd1699611aeb00d767057602b8e53dfb4a6651c0f2873e5f60fdd7e2542d6aba79f491f87522f77427323e87386c89e1df9dd6e4f32be85c9eefbd6e6b177dde573b0d0bb8df828185aedc7aba2e6c3d4d9df393b203c1147f005860a6dd44dbcebead0eeb29fe3216930ef4a5994a93851df960d3be82d4294b64ba8295a59d099fd10afe39c2a79727a5447fa27909d53df6a00a63897261619e853036a6852e95ac6da62276007f2f3f386267cd8a0d136e645247e76db84e466e56ba42618b4fdef3e6d8c48dae5d03e1e369cd74042146e361cd6b4e654c8adc75446c454d3275a7d91646c4fb721966df9df3f761f10bebd212bfc87db9c48ffa0c6efcb17db3955f4a6f58919a036cda4f0a0c07a7306d2909adeeb474bd0bbec58865c4a5804108a014838673ff26438c162ec61e71bb880b154d475c71d500bfda3128b9fac2bccecb790dbd3075f424b1244f111c7eb5cbb7af0b6f3ec9cac20f82b1631822b940c03d697e213747627a5a7ed57414f2826888e515b88e61e69b742b053fe086ffc916abe00a41870cd332201d96c96bd174b369094b0da81ddc50affefa3709a358a5c00308d30a41d10b1c3f91a011bd246588336ff76dd60c10c3bbc8eec06adb3e73cc21d218b83eb9306e0650dd4e41bd65e15bb99a0653fc312251c174abed9e3ed04ef0378feaf78d839ebf61fda85c290f140cd3690cff881c348c57f504c50ca61986b29e58fdb0cbe276e42c982154762110c0f65b240aebe4291c66157629f0a45ea48e8e6a5dfe062214d635c5f828d1c888ec83a279ddac80f748c00e984248bef8e884590dcc1322aceb2d3b525618450fa0649e4ae8722769c6a32eb47161f7bf08bd59f903240ab9f790313b41607554b21ce45f10cde937f9f68fbb23ace0eaebd86b1201ea230c7f4c57f6594e655904db2a6d3d294f98fe630a524573f52c145b19eea382bc3adac7c7b62863bfa04f2d9fb9b93e7cda0fff4af897281580b879912ebd2c9c9d433ef479e886a477ce4538590179049aaff5e8e51b25db6c0300393a37c25c350e1e4effdd657f26de15199d39e134d1e7fe278b68377674a0e31a12e67096d44f62bd0353147041050fe44d9fbfc95fa8aa368e5868148a9e7a6f5551cf55f677b48ac2b4cd29a300d3cb9cd3a5ef486b9b3138018fb1568ce3f59385b98e93b7113dc85cd242bb57e545d6c151727d1c33ced565b2e29419bc6c458b45ab2107a55793618d20bd476e81ff79543cbace7b26a53a67a3f17ad0e2f2c0cc55f45d374ddc3cf8ada0c52cf1251cc4a6e1c7e84a1536cf328a0a392a3b79bbef1b40ad6e69811f3ec73b971c7cf6d64bfd0b183135d76fbb121aa99c753dce310f3288d460a1158a0c1c2ca4a66eadb38c6669dae4742a1da14b007555ffdae4e60f535ee23018dde93863b028346edc0f8da3ee5208b06fb107e921492ed9f2f2064d865afb5f955c80b1a6c5dbc540f1af7dd68925353d288fce304243f09d1791661027ea11f21ade9abb81a71343f1d405f35b01a504a99e08514f3b8307dce0b7c4305c0e531a538c6c11d8021183a87c2de3e1e384d114559601b948359f153d9845067683d8ef3dc75829a46211368ddf4837c021bf3ba1cc8005ab6902e094635f86f2f090851d5ac0af51c3aec46bdf9024ebe196351e2acd483f71821f033aa02d7bdee2fe987412bda115a5ce7f51dfdb78ce378485801fa10180339d3c5372a65cc46d2f0ef8ad3317062af5c243f81d920075e4874ea69081ba22d8be502422e973128c657da28f4f63d34919b5a4663544e244524263bae0a9a6c7455a16b5b860aedea7a2ea87abb402e151461d8310d05dd611e063e278628420a3f7bf0fd9acfb6dc82741cb588b4d1d8a5b2b5db58e052b07c4e354034842102305c0b070dbe2cea7a59b306054ffcb08432c67d272f40d6d9f42826ed660e6558f80f8522499e0f89335c18297ee395bcbf0ad1af122434e9319177f9ad9c5c140841551733282f74ea025e4e3c4ae11dc64df48497d747ab0d08a2de58abff2242c6267a7498b7ae4fc1ebabc8dc5ede8a053000fe8af5ade0f6868c22d4b2602c36cfc3605a616850973edcc5ebec3e18dea4a4e3f4e11f1c979991b636233ae70f0cb42d592e5bc5b7b3773820b22c386f365738d4ba6a0e76e6e5ab480a77336b394fc807950df4939f6dda4cf088b318660da8b487b1cd0b8b8aaf69bc5c1f7330d1cfc7a7ab84f01a5f4d8ee0b887bd91d8af80be32e171ca03e9a906c6c8b342baec668db3ff9522002d5f60e751e712031d3cbeff0d47523625b3d41633e7c0d3ef3b5b4336b17c36075debcdea4b6357ab468114ae7265eaa39545973a602af35dfbd0ed03a3c6b717eefb92c52291a0b014ae4467a233db1d48c625228733262acf9d08c98e2aba18df6dde6160fe748bbaf217cae345449c1cb5e22ef26e6e8ef2666a307a3ca7a08ab2a7e3a938eab61b772a69aa4dce0ace312136870dadad35c98d2911b4d37dfcf31c3c36cd26177e3cda3049aecc9928545c2e102d2586225cfc96e9884042923e2874ebf71dc81060970705aba2a7ad1127b218e4ade098a41285ff7bee3a0b8dfcddf9933730183c92158d0bbc8dd874e3fab555c30075d798"}}}}}}, 0x0) 1.793602958s ago: executing program 2 (id=5305): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x0, 0x2, 0x4}, &(0x7f0000000140)=0x0, &(0x7f0000000280)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0x200, 0x0, 0x4) io_uring_enter(r1, 0x66a8, 0x4000, 0xc, 0x0, 0x0) 1.348938036s ago: executing program 6 (id=5307): r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000100)={0x0, 0x4}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @empty}], 0x10) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, 0x0, 0x0) sendmsg$inet_sctp(r1, &(0x7f0000000140)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000000)=[{&(0x7f00000001c0)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x4000891) socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000280)={0x0, 0x6}, 0x8) close_range(r0, 0xffffffffffffffff, 0x0) 1.167273919s ago: executing program 7 (id=5309): creat(&(0x7f0000000080)='./file0\x00', 0xc7) r0 = syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000300)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1200000002000000040000000200000000000000df95f6e590fb0bcef95e72ea76fa6579f9684972558dd50622b56317dd39b5263ceec5219f8b5c2a3fbd8aa3971b9632340d809a90557cae29fdfc1214163c06d9054615a2b78f18e465a9c17fe4921bf77092cd47f928736436411ed5adfa6adad8e1d00ddd049c7202310bd734db7a1a4fdcd0cf6d54a9f717e08fb2c2b9701329547ab8b26c501dce6572b00f6de2fa942d7873a08ec5ba41e1ff0cf5982b9e57f0832043754cd0fb1efab301beba3ee779", @ANYRESDEC=0x0, @ANYBLOB='\x00'/10, @ANYRES32=0x0, @ANYRES8, @ANYBLOB='\x00'/28], 0x24) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xfeffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r2 = perf_event_open(&(0x7f0000004cc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x9, 0x400, 0x6, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0xaf1d, 0x1, @perf_bp={0x0, 0x1}, 0x100410, 0x200, 0x2, 0x1, 0x9, 0x9, 0xfffd, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000007111ae00000000008510000002000000850000000500000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) r3 = getpid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000c80)={r3, r2, 0x0, 0x0, 0x0}, 0x30) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.net/syz1\x00', 0x1ff) 997.377422ms ago: executing program 3 (id=5311): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'macvlan1\x00', 0x0}) socket$inet6_udp(0xa, 0x2, 0x0) r2 = open(&(0x7f00009e1000)='./file0\x00', 0x149040, 0x10) unshare(0x2040400) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) r4 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) unshare(0x2000400) fsmount(r4, 0x0, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) fcntl$setlease(r2, 0x400, 0x0) socket$packet(0x11, 0x2, 0x300) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0b00000005000c000200000000000000fdff000029186589b8ac0505b1900087d44601114c8f78207139ef141f8a3da81272b2ed319988206725fc86339d0a2e9573", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r2, @ANYBLOB='\x00'/28], 0x50) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000040)="fb6bba8839fe8bc048c0cdafd1f8a9918bc4055eaaeb6db4ee9bcb25b1811dbf40b3a7da5a8a64db04ed6dd26eea2e37229c339b1f91201c2796173864", 0x3d}], 0x1}, 0x0) recvmsg(r6, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)=""/60, 0x3c}], 0x1}, 0x40fd) close(r6) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000080000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000ffffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703060008ffffffff04000002000000850000000300000095000000000000004949225b761143a55cebdee88aeac0017b3e61c1e8be147228be589ed44b57852b3bf26e0cdee146334f917bca"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1801000000000000000000004b84ffec850000006d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1, 0x2}, 0x94) r8 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$TIOCL_SETSEL(r8, 0x541c, &(0x7f00000000c0)={0x2, {0x2, 0x3bf, 0x4, 0x14a, 0x0, 0x300}}) 996.448402ms ago: executing program 7 (id=5312): r0 = openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) openat$cgroup_ro(r0, 0x0, 0x0, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x28, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffeb2, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r2}, 0x10) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'veth0_to_hsr\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) bind$packet(r4, &(0x7f0000000080)={0x11, 0x4, r5, 0x1, 0x6, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3e}}, 0x14) sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000680)=@getchain={0x44, 0x11, 0x1, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0xfff1}, {0xfff1, 0x10}, {0x0, 0x2}}, [{0x8, 0xb, 0x2}, {0x8, 0xb, 0x9}, {0x8, 0xb, 0xfff}, {0x8, 0xb, 0x3}]}, 0x44}, 0x1, 0x0, 0x0, 0x4008010}, 0x40000) 943.627323ms ago: executing program 3 (id=5313): r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f00000000c0)="240000005a001f001007f4f9002304000a04f51108000400020100020800038005000000", 0x24) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r1) sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="40000080", @ANYRES16=r2, @ANYBLOB="010000000000fcdbdf250100000008000100030000001c0004800500030001000000050003008000000005000300010000000800020003000000"], 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x20044842) r3 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x37, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x1, @perf_bp={0x0, 0xd}, 0x4c58, 0x10000, 0x0, 0x1, 0x8, 0x20002, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x8010, r3, 0xb7c5d000) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @hash={{0x9}, @void}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_USERDATA={0x5, 0x7, 0x1, 0x0, "9d"}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) r6 = gettid() sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x24, r5, 0x1, 0x70bd28, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_PID={0x8, 0x1c, r6}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000000) 845.615145ms ago: executing program 7 (id=5314): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000000d40)={0x0, 0x7000000, &(0x7f00000023c0)=[{&(0x7f0000000b40)='?', 0x1}, {0x0, 0x1}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x20001) 845.000775ms ago: executing program 2 (id=5315): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x61980, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000200)='kfree\x00', r4, 0x0, 0x80}, 0x18) r5 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) ioctl$USBDEVFS_SUBMITURB(r5, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x20000009, 0x0, &(0x7f0000000240)={0x0, 0x0, 0xfffc, 0x360}, 0x8, 0x9, 0x80, 0x0, 0x0, 0xfff, 0x0}) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x88640, 0x0) ioctl$TCSETS(r6, 0x40045431, &(0x7f0000000040)={0x0, 0x0, 0x4, 0x0, 0x0, "ff00f7000000000000000000af88008300"}) syz_open_pts(r6, 0x141601) timer_settime(0x0, 0x0, 0x0, 0x0) inotify_init() close_range(r3, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c00000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800900010076657468000000000400028008000a00", @ANYRES32=r2, @ANYRESOCT], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'veth1\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x4c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x4}]}}}, @IFLA_LINK={0x8, 0x5, r10}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x600}, 0x0) 772.008206ms ago: executing program 3 (id=5316): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x25}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x23) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000000500)=@filename='./file0\x00', 0x0, &(0x7f0000000680)='./file0/../file0\x00') r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4400000010000104fcffffff8000000000000000", @ANYRES32=0x0, @ANYBLOB="0315000000000000140012800b0001006d616373656300000400028008000500", @ANYRES32=r3, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r3], 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) 755.258297ms ago: executing program 7 (id=5317): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xc97c, 0x0, @perf_config_ext={0x2, 0x3}, 0x8, 0xa88, 0x8409, 0x5, 0x0, 0x3c, 0xfffe, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x1) close(0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020700000000000002030207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000100850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) write$P9_RLERRORu(r1, &(0x7f00000023c0)=ANY=[@ANYBLOB="5300000007000046009d40", @ANYRESHEX=r0], 0x53) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x2004000, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [], 0x6b}}) 648.946319ms ago: executing program 3 (id=5318): bind$inet(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x5, 0x8c4b815a5465c2b1, r0, 0x100000) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000009900000001"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x64, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x18) syz_emit_ethernet(0xfc2, &(0x7f0000001c00)={@local, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xfb4, 0x2, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0xfa0, 0x0, @wg=@data={0x4, 0x2007407, 0xfffffffffffffffd, "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"}}}}}}, 0x0) connect$qrtr(0xffffffffffffffff, &(0x7f0000000080)={0x2a, 0x3, 0x8000}, 0xc) getpgid(0x0) 512.078481ms ago: executing program 3 (id=5319): bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000c80)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000838500000071000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) unshare(0x60480) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="18020000000000000000000000000000850000002e000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000d000000095"], &(0x7f0000000080)='GPL\x00'}, 0x90) getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000000)=""/145, &(0x7f0000695ffc)=0x24b) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000002c0)='rtc_irq_set_freq\x00', r0}, 0x18) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$RTC_IRQP_SET(r3, 0x4008700c, 0x80000000000725) 411.226143ms ago: executing program 2 (id=5320): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000100)={0x1, &(0x7f00000001c0)=[{0x30, 0x5, 0x53, 0xfffff034}]}, 0x10) r1 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r1, &(0x7f0000000140)={0xa, 0xfffd, 0x7, @mcast2, 0x9}, 0x1c) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x9588, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0x5dc}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) 392.292813ms ago: executing program 7 (id=5321): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20020084, &(0x7f00000018c0)={0x2, 0x4e20}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) sendto$inet(r0, &(0x7f0000000740)="e124", 0x2, 0x40, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0xa, 0x9, 0x8, 0x2}, 0x48) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x6, &(0x7f0000000180)=@framed={{0x18, 0x2}, [@map_fd={0x18, 0x3, 0x1, 0x0, r2}, @call={0x85, 0x0, 0x0, 0x26}]}, &(0x7f0000000000)='GPL\x00'}, 0x90) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r1, @ANYRES32=r3, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r1, &(0x7f0000000340), &(0x7f0000000040)=@tcp=r0}, 0x20) sendmmsg$inet(r0, &(0x7f00000002c0), 0x0, 0x4000) 390.367673ms ago: executing program 6 (id=5322): r0 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r0, &(0x7f0000000040), 0x10) listen(r0, 0x0) r1 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r1, &(0x7f0000000080), 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000280)="fbb9", 0x2}], 0x1) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000140)={0x1, 0x9}, 0x8) close(r1) 280.133685ms ago: executing program 2 (id=5323): bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0xf, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, &(0x7f00000000c0)}) setitimer(0x0, 0x0, 0x0) 158.271477ms ago: executing program 6 (id=5324): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) recvmmsg(r0, &(0x7f0000005f40)=[{{0x0, 0x0, 0x0}, 0x80000000}], 0x1, 0x40000021, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x659, @empty, 0xff}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x80, 0x0, 0x0) 91.587998ms ago: executing program 2 (id=5325): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x0, 0x2, 0x4}, &(0x7f0000000140)=0x0, &(0x7f0000000280)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0x200, 0x0, 0x4) io_uring_enter(r1, 0x66a8, 0x4000, 0xc, 0x0, 0x0) 90.858658ms ago: executing program 7 (id=5326): r0 = socket$inet_sctp(0x2, 0x1, 0x84) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000095"], 0x0, 0x9, 0x0, 0x0, 0x41000, 0x59, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000100)={0x0, 0x4}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, 0x0, 0x0) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000040)={0x0, 0x5}, 0x8) sendmsg$inet_sctp(r0, &(0x7f0000000140)={&(0x7f0000000340)=@in={0x2, 0x4e21, @loopback}, 0x10, &(0x7f00000002c0)=[{&(0x7f0000000000)='N', 0x1}], 0x1, 0x0, 0x0, 0xc04c000}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f00000000c0)={0x0, 0x6, 0x102}, 0x8) 0s ago: executing program 3 (id=5327): r0 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty, 0xc7ec}, 0x1c) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)=',', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) kernel console output (not intermixed with test programs): _file permissive=1 [ 128.621565][ T29] audit: type=1400 audit(1753424176.757:1089): avc: denied { open } for pid=9478 comm="syz.0.2570" path="/dev/raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 129.373915][ T29] kauditd_printk_skb: 5 callbacks suppressed [ 129.373932][ T29] audit: type=1400 audit(1753424177.557:1095): avc: denied { ioctl } for pid=9510 comm="syz.0.2585" path="socket:[25607]" dev="sockfs" ino=25607 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 129.505276][ T9517] loop3: detected capacity change from 0 to 512 [ 129.562670][ T9517] EXT4-fs: Ignoring removed mblk_io_submit option [ 129.652596][ T9524] loop5: detected capacity change from 0 to 256 [ 129.666929][ T9517] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 129.685854][ T9524] FAT-fs (loop5): bogus number of FAT sectors [ 129.692037][ T9524] FAT-fs (loop5): Can't find a valid FAT filesystem [ 130.424040][ T9540] loop0: detected capacity change from 0 to 512 [ 130.445074][ T9542] loop2: detected capacity change from 0 to 256 [ 130.478580][ T9540] EXT4-fs: test_dummy_encryption option not supported [ 130.552386][ T9547] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 130.576042][ T9540] loop0: detected capacity change from 0 to 1024 [ 130.650437][ T9547] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 130.722620][ T9540] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 130.796791][ T29] audit: type=1400 audit(1753424178.987:1096): avc: denied { mounton } for pid=9536 comm="syz.0.2594" path="/472/file1/bus" dev="loop0" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 130.846223][ T3305] EXT4-fs error (device loop0): ext4_lookup:1791: inode #2: comm syz-executor: deleted inode referenced: 11 [ 130.889874][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.901725][ T3305] EXT4-fs error (device loop0): ext4_lookup:1791: inode #2: comm syz-executor: deleted inode referenced: 11 [ 130.961411][ T9565] loop1: detected capacity change from 0 to 764 [ 131.018696][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.086542][ T9571] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 131.099320][ T9571] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 131.324612][ T29] audit: type=1400 audit(1753424179.497:1097): avc: denied { write } for pid=9585 comm="syz.5.2612" name="event2" dev="devtmpfs" ino=245 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 131.348022][ T29] audit: type=1400 audit(1753424179.497:1098): avc: denied { open } for pid=9585 comm="syz.5.2612" path="/dev/input/event2" dev="devtmpfs" ino=245 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 131.415124][ T9574] chnl_net:caif_netlink_parms(): no params data found [ 131.507169][ T9601] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 131.515788][ T9601] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 131.529809][ T9603] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 131.539079][ T9603] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 131.539235][ T9574] bridge0: port 1(bridge_slave_0) entered blocking state [ 131.554042][ T9574] bridge0: port 1(bridge_slave_0) entered disabled state [ 131.561442][ T9574] bridge_slave_0: entered allmulticast mode [ 131.568220][ T9574] bridge_slave_0: entered promiscuous mode [ 131.575175][ T9574] bridge0: port 2(bridge_slave_1) entered blocking state [ 131.582308][ T9574] bridge0: port 2(bridge_slave_1) entered disabled state [ 131.589976][ T9574] bridge_slave_1: entered allmulticast mode [ 131.596590][ T9574] bridge_slave_1: entered promiscuous mode [ 131.616262][ T9574] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 131.627059][ T9574] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 131.647625][ T9574] team0: Port device team_slave_0 added [ 131.654269][ T9574] team0: Port device team_slave_1 added [ 131.670539][ T9574] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 131.677557][ T9574] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 131.703505][ T9574] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 131.715010][ T9574] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 131.722123][ T9574] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 131.748114][ T9574] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 131.777684][ T9574] hsr_slave_0: entered promiscuous mode [ 131.783768][ T9574] hsr_slave_1: entered promiscuous mode [ 131.789917][ T9574] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 131.797584][ T9574] Cannot create hsr debugfs directory [ 131.910636][ T9574] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 131.919825][ T9574] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 131.930473][ T9574] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 131.941663][ T9574] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 131.963936][ T9574] bridge0: port 2(bridge_slave_1) entered blocking state [ 131.971062][ T9574] bridge0: port 2(bridge_slave_1) entered forwarding state [ 131.978359][ T9574] bridge0: port 1(bridge_slave_0) entered blocking state [ 131.985459][ T9574] bridge0: port 1(bridge_slave_0) entered forwarding state [ 132.014835][ T9574] 8021q: adding VLAN 0 to HW filter on device bond0 [ 132.027446][ T9574] 8021q: adding VLAN 0 to HW filter on device team0 [ 132.208253][ T29] audit: type=1400 audit(1753424180.377:1099): avc: denied { read write } for pid=9633 comm="syz.3.2626" name="nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 132.231885][ T29] audit: type=1400 audit(1753424180.377:1100): avc: denied { open } for pid=9633 comm="syz.3.2626" path="/dev/nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 132.580112][ T9647] syzkaller1: entered promiscuous mode [ 132.585650][ T9647] syzkaller1: entered allmulticast mode [ 132.595666][ T9649] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 132.625089][ T9649] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 132.648116][ T9574] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 132.666707][ T29] audit: type=1400 audit(1753424180.557:1101): avc: denied { bind } for pid=9641 comm="syz.5.2628" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 132.835822][ T37] nci: nci_extract_activation_params_iso_dep: unsupported activation_rf_tech_and_mode 0x2 [ 132.970507][ T9677] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 133.030106][ T9677] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 133.054017][ T9684] loop1: detected capacity change from 0 to 1024 [ 133.063362][ T29] audit: type=1400 audit(1753424181.227:1102): avc: denied { create } for pid=9681 comm="syz.2.2639" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 133.088320][ T9684] EXT4-fs: Ignoring removed i_version option [ 133.146676][ T9684] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 133.170402][ T9690] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 133.209546][ T9574] veth0_vlan: entered promiscuous mode [ 133.247515][ T9684] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:483: comm syz.1.2636: Invalid block bitmap block 0 in block_group 0 [ 133.269803][ T9574] veth1_vlan: entered promiscuous mode [ 133.275630][ T9690] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 133.291230][ T9684] Quota error (device loop1): write_blk: dquota write failed [ 133.298744][ T9684] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 133.314612][ T9574] veth0_macvtap: entered promiscuous mode [ 133.322323][ T9574] veth1_macvtap: entered promiscuous mode [ 133.332914][ T9574] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 133.336207][ T9694] netlink: 72 bytes leftover after parsing attributes in process `syz.5.2641'. [ 133.340264][ T9684] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.2636: Failed to acquire dquot type 0 [ 133.351026][ T9574] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 133.372738][ T9684] EXT4-fs error (device loop1): ext4_free_blocks:6587: comm syz.1.2636: Freeing blocks not in datazone - block = 0, count = 4096 [ 133.390582][ T9574] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.399484][ T9574] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.408239][ T9574] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.416988][ T9574] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.442483][ T9684] EXT4-fs error (device loop1): ext4_read_inode_bitmap:139: comm syz.1.2636: Invalid inode bitmap blk 0 in block_group 0 [ 133.455539][ T9684] EXT4-fs error (device loop1) in ext4_free_inode:361: Corrupt filesystem [ 133.469185][ T9684] EXT4-fs (loop1): 1 orphan inode deleted [ 133.470513][ T3432] EXT4-fs error (device loop1): ext4_release_dquot:6969: comm kworker/u8:7: Failed to release dquot type 0 [ 133.475390][ T9684] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 134.486468][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 134.486482][ T29] audit: type=1400 audit(1753424182.667:1105): avc: denied { setopt } for pid=9725 comm="syz.6.2652" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 134.572803][ T9732] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 134.581518][ T9732] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 134.586545][ T9731] syzkaller1: entered promiscuous mode [ 134.594843][ T9731] syzkaller1: entered allmulticast mode [ 134.890810][ T9740] loop5: detected capacity change from 0 to 2048 [ 134.999606][ T9740] Alternate GPT is invalid, using primary GPT. [ 135.006053][ T9740] loop5: p1 p2 p3 [ 135.509866][ T29] audit: type=1400 audit(1753424183.697:1106): avc: denied { unmount } for pid=3304 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 135.613349][ T3317] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.827473][ T9769] usb usb8: usbfs: process 9769 (syz.3.2671) did not claim interface 0 before use [ 135.839234][ T9772] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 135.864635][ T9772] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 135.876051][ T29] audit: type=1400 audit(1753424184.067:1107): avc: denied { read write } for pid=9773 comm="syz.3.2673" name="uhid" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 135.899556][ T29] audit: type=1400 audit(1753424184.067:1108): avc: denied { open } for pid=9773 comm="syz.3.2673" path="/dev/uhid" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 135.925115][ T3392] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 135.942919][ T3392] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 136.174791][ T9779] syzkaller1: entered promiscuous mode [ 136.180430][ T9779] syzkaller1: entered allmulticast mode [ 136.463424][ T9783] pim6reg1: entered promiscuous mode [ 136.468873][ T9783] pim6reg1: entered allmulticast mode [ 136.504795][ T29] audit: type=1400 audit(1753424184.687:1109): avc: denied { ioctl } for pid=9784 comm="syz.3.2677" path="/dev/input/event2" dev="devtmpfs" ino=245 ioctlcmd=0x4592 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 136.713735][ T29] audit: type=1400 audit(1753424184.897:1110): avc: denied { read } for pid=9799 comm="syz.5.2683" name="loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 136.738087][ T29] audit: type=1400 audit(1753424184.897:1111): avc: denied { open } for pid=9799 comm="syz.5.2683" path="/dev/loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 136.762744][ T29] audit: type=1400 audit(1753424184.897:1112): avc: denied { ioctl } for pid=9799 comm="syz.5.2683" path="/dev/loop-control" dev="devtmpfs" ino=99 ioctlcmd=0x4c82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 136.870279][ T29] audit: type=1400 audit(1753424185.057:1113): avc: denied { bind } for pid=9815 comm="syz.5.2688" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 136.898734][ T9820] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 136.909890][ T9820] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 136.925650][ T9819] pim6reg1: entered promiscuous mode [ 136.931114][ T9819] pim6reg1: entered allmulticast mode [ 137.444319][ T9853] loop3: detected capacity change from 0 to 2048 [ 137.461400][ T29] audit: type=1400 audit(1753424185.647:1114): avc: denied { listen } for pid=9856 comm="syz.1.2705" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 137.483886][ T7207] Alternate GPT is invalid, using primary GPT. [ 137.490344][ T7207] loop3: p1 p2 p3 [ 137.501302][ T9853] Alternate GPT is invalid, using primary GPT. [ 137.507754][ T9853] loop3: p1 p2 p3 [ 137.538385][ T9864] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2708'. [ 137.567702][ T9865] loop2: detected capacity change from 0 to 1024 [ 137.574403][ T9865] EXT4-fs: Ignoring removed i_version option [ 137.591875][ T3295] udevd[3295]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 137.617064][ T3297] udevd[3297]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 137.628054][ T7207] udevd[7207]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 137.668755][ T3295] udevd[3295]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 137.683821][ T3297] udevd[3297]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 137.696803][ T7207] udevd[7207]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 137.736477][ T9865] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 137.751087][ T9865] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:483: comm syz.2.2704: Invalid block bitmap block 0 in block_group 0 [ 137.764983][ T9865] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.2704: Failed to acquire dquot type 0 [ 137.776953][ T9865] EXT4-fs error (device loop2): ext4_free_blocks:6587: comm syz.2.2704: Freeing blocks not in datazone - block = 0, count = 4096 [ 137.790943][ T9865] EXT4-fs error (device loop2): ext4_read_inode_bitmap:139: comm syz.2.2704: Invalid inode bitmap blk 0 in block_group 0 [ 137.815630][ T9865] EXT4-fs error (device loop2) in ext4_free_inode:361: Corrupt filesystem [ 137.824772][ T9865] EXT4-fs (loop2): 1 orphan inode deleted [ 137.830923][ T9865] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 138.459777][ T3434] EXT4-fs error (device loop2): ext4_release_dquot:6969: comm kworker/u8:8: Failed to release dquot type 0 [ 138.833302][ T9940] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 138.845756][ T9940] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 138.926429][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.351238][ T9957] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 139.359815][ T9957] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 139.627727][ T29] kauditd_printk_skb: 10 callbacks suppressed [ 139.627741][ T29] audit: type=1400 audit(1753424187.817:1122): avc: denied { map } for pid=9964 comm="syz.3.2752" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=162 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 139.884791][ T9986] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 139.908994][ T9986] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 139.925310][ T29] audit: type=1400 audit(1753424188.107:1123): avc: denied { write } for pid=9988 comm="syz.5.2762" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 140.327860][T10016] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 140.337200][T10016] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 140.346273][ T29] audit: type=1400 audit(1753424188.527:1124): avc: denied { read } for pid=10015 comm="syz.5.2773" name="event0" dev="devtmpfs" ino=242 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 140.446693][T10020] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 140.455379][T10020] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 140.504331][T10024] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 140.512961][T10024] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 141.100887][T10049] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 141.110895][T10049] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 141.184598][T10052] pim6reg1: entered promiscuous mode [ 141.189990][T10052] pim6reg1: entered allmulticast mode [ 141.203006][T10057] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 141.211919][T10057] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 141.353759][T10063] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 141.362310][T10063] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 141.797674][T10101] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 141.816487][T10101] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 141.833246][T10107] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2813'. [ 141.865389][T10111] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 141.874183][T10111] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 141.925120][T10121] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 141.935103][T10121] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 141.943147][ T29] audit: type=1400 audit(1753424190.127:1125): avc: denied { execute } for pid=10122 comm="syz.1.2820" path="/598/cpu.stat" dev="tmpfs" ino=3094 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 142.092733][T10137] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 142.103101][T10137] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 142.147131][T10127] chnl_net:caif_netlink_parms(): no params data found [ 142.182805][T10127] bridge0: port 1(bridge_slave_0) entered blocking state [ 142.190006][T10127] bridge0: port 1(bridge_slave_0) entered disabled state [ 142.197480][T10127] bridge_slave_0: entered allmulticast mode [ 142.203871][T10127] bridge_slave_0: entered promiscuous mode [ 142.210566][T10127] bridge0: port 2(bridge_slave_1) entered blocking state [ 142.217745][T10127] bridge0: port 2(bridge_slave_1) entered disabled state [ 142.225080][T10127] bridge_slave_1: entered allmulticast mode [ 142.231467][T10127] bridge_slave_1: entered promiscuous mode [ 142.249530][T10127] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 142.260050][T10127] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 142.279754][T10127] team0: Port device team_slave_0 added [ 142.286587][T10127] team0: Port device team_slave_1 added [ 142.302001][T10127] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 142.309004][T10127] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 142.335029][T10127] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 142.346232][T10127] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 142.353242][T10127] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 142.379245][T10127] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 142.384076][T10144] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 142.403122][T10144] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 142.425377][T10127] hsr_slave_0: entered promiscuous mode [ 142.431648][T10127] hsr_slave_1: entered promiscuous mode [ 142.441022][T10148] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 142.444648][T10127] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 142.451777][T10148] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 142.461382][T10127] Cannot create hsr debugfs directory [ 142.569699][ T31] nci: nci_extract_activation_params_iso_dep: unsupported activation_rf_tech_and_mode 0x2 [ 142.638040][T10163] netlink: 104 bytes leftover after parsing attributes in process `syz.5.2831'. [ 142.646579][ T29] audit: type=1400 audit(1753424190.827:1126): avc: denied { nlmsg_read } for pid=10162 comm="syz.5.2831" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 142.744821][T10127] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 142.753914][T10127] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 142.762623][T10127] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 142.771268][T10127] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 142.818997][T10127] 8021q: adding VLAN 0 to HW filter on device bond0 [ 142.833453][T10127] 8021q: adding VLAN 0 to HW filter on device team0 [ 142.846333][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 142.853540][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 142.876081][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 142.883219][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 142.969778][T10127] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 143.043052][T10127] veth0_vlan: entered promiscuous mode [ 143.051654][T10127] veth1_vlan: entered promiscuous mode [ 143.070992][T10127] veth0_macvtap: entered promiscuous mode [ 143.079590][T10127] veth1_macvtap: entered promiscuous mode [ 143.096279][T10127] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 143.110807][T10127] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 143.120964][T10127] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.129811][T10127] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.135907][T10202] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 143.138650][T10127] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.138700][T10127] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.165175][T10202] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 143.250754][ T31] nci: nci_extract_activation_params_iso_dep: unsupported activation_rf_tech_and_mode 0x2 [ 143.278546][ T29] audit: type=1400 audit(1753424191.467:1127): avc: denied { read } for pid=10210 comm="syz.1.2842" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 143.301925][ T29] audit: type=1400 audit(1753424191.467:1128): avc: denied { open } for pid=10210 comm="syz.1.2842" path="/dev/snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 143.786150][ T29] audit: type=1400 audit(1753424191.967:1129): avc: denied { connect } for pid=10248 comm="syz.5.2859" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 143.860652][T10265] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 143.870507][T10265] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 143.909532][ T29] audit: type=1400 audit(1753424192.097:1130): avc: denied { setopt } for pid=10268 comm="syz.5.2867" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 143.929764][ T29] audit: type=1400 audit(1753424192.097:1131): avc: denied { bind } for pid=10268 comm="syz.5.2867" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 144.461003][T10332] netlink: 'syz.5.2894': attribute type 39 has an invalid length. [ 144.556696][ T3412] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 144.564609][ T3412] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 144.594790][T10345] fido_id[10345]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 144.654489][T10351] pim6reg1: entered promiscuous mode [ 144.659893][T10351] pim6reg1: entered allmulticast mode [ 144.887258][T10369] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 144.895930][T10369] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 144.990311][T10373] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 145.002241][T10373] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 145.062053][T10373] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 145.084990][T10373] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 145.610819][T10387] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 145.648281][T10387] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 145.907412][T10411] netlink: 96 bytes leftover after parsing attributes in process `syz.2.2928'. [ 145.940277][T10413] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 145.951788][T10413] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 145.985029][T10416] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 145.993636][T10416] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 146.338903][T10436] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 146.348050][ T31] nci: nci_extract_activation_params_iso_dep: unsupported activation_rf_tech_and_mode 0x2 [ 146.348550][T10436] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 146.539818][T10448] usb usb8: usbfs: process 10448 (syz.2.2941) did not claim interface 0 before use [ 146.590098][ T29] audit: type=1400 audit(1753424194.777:1132): avc: denied { unmount } for pid=3313 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 146.652811][T10464] program syz.2.2948 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 146.755102][T10474] loop3: detected capacity change from 0 to 2048 [ 146.780556][T10478] tipc: Started in network mode [ 146.785573][T10478] tipc: Node identity e0000001, cluster identity 4711 [ 146.792433][T10478] tipc: Enabling of bearer rejected, failed to enable media [ 146.856439][T10474] Alternate GPT is invalid, using primary GPT. [ 146.862857][T10474] loop3: p1 p2 p3 [ 146.867491][T10484] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 146.875953][T10484] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 147.013441][T10495] random: crng reseeded on system resumption [ 147.026802][T10495] Restarting kernel threads ... [ 147.034250][T10495] Done restarting kernel threads. [ 147.126579][ T29] audit: type=1400 audit(1753424195.197:1133): avc: denied { append } for pid=10494 comm="syz.1.2960" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 147.150017][ T29] audit: type=1400 audit(1753424195.207:1134): avc: denied { ioctl } for pid=10494 comm="syz.1.2960" path="/dev/snapshot" dev="devtmpfs" ino=90 ioctlcmd=0x3305 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 147.225299][T10506] syzkaller1: entered promiscuous mode [ 147.230995][T10506] syzkaller1: entered allmulticast mode [ 147.256259][ T29] audit: type=1400 audit(1753424195.387:1135): avc: denied { read } for pid=3035 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 147.279660][T10512] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 147.289433][T10512] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 147.303153][ T1698] bridge_slave_1: left allmulticast mode [ 147.308898][ T1698] bridge_slave_1: left promiscuous mode [ 147.314707][ T1698] bridge0: port 2(bridge_slave_1) entered disabled state [ 147.324435][ T1698] bridge_slave_0: left allmulticast mode [ 147.330238][ T1698] bridge_slave_0: left promiscuous mode [ 147.335989][ T1698] bridge0: port 1(bridge_slave_0) entered disabled state [ 147.399364][ T1698] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 147.410382][ T1698] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 147.420947][ T1698] bond0 (unregistering): (slave macvlan1): Releasing backup interface [ 147.430733][ T1698] veth1_vlan: left allmulticast mode [ 147.438832][ T1698] bond0 (unregistering): Released all slaves [ 147.464310][T10515] pim6reg1: entered promiscuous mode [ 147.469766][T10515] pim6reg1: entered allmulticast mode [ 147.476219][ T29] audit: type=1400 audit(1753424195.647:1136): avc: denied { search } for pid=3035 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 147.497677][ T29] audit: type=1400 audit(1753424195.647:1137): avc: denied { search } for pid=3035 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 147.519307][ T29] audit: type=1400 audit(1753424195.647:1138): avc: denied { search } for pid=3035 comm="dhcpcd" name="data" dev="tmpfs" ino=13 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 147.541064][ T29] audit: type=1400 audit(1753424195.647:1139): avc: denied { read } for pid=3035 comm="dhcpcd" name="n25" dev="tmpfs" ino=13763 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 147.563279][ T29] audit: type=1400 audit(1753424195.647:1140): avc: denied { open } for pid=3035 comm="dhcpcd" path="/run/udev/data/n25" dev="tmpfs" ino=13763 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 147.586544][ T29] audit: type=1400 audit(1753424195.647:1141): avc: denied { getattr } for pid=3035 comm="dhcpcd" path="/run/udev/data/n25" dev="tmpfs" ino=13763 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 147.633230][ T1698] hsr_slave_0: left promiscuous mode [ 147.650577][ T1698] hsr_slave_1: left promiscuous mode [ 147.659929][ T1698] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 147.722207][ T1698] team0 (unregistering): Port device team_slave_1 removed [ 147.734581][ T1698] team0 (unregistering): Port device team_slave_0 removed [ 147.940329][T10488] chnl_net:caif_netlink_parms(): no params data found [ 148.210414][T10488] bridge0: port 1(bridge_slave_0) entered blocking state [ 148.217588][T10488] bridge0: port 1(bridge_slave_0) entered disabled state [ 148.250136][T10488] bridge_slave_0: entered allmulticast mode [ 148.268944][T10488] bridge_slave_0: entered promiscuous mode [ 148.287902][T10488] bridge0: port 2(bridge_slave_1) entered blocking state [ 148.295039][T10488] bridge0: port 2(bridge_slave_1) entered disabled state [ 148.324865][T10488] bridge_slave_1: entered allmulticast mode [ 148.342312][T10488] bridge_slave_1: entered promiscuous mode [ 148.381123][T10488] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 148.409969][T10488] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 148.464826][T10488] team0: Port device team_slave_0 added [ 148.484761][T10488] team0: Port device team_slave_1 added [ 148.523735][T10488] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 148.529442][T10576] mmap: syz.1.2978 (10576) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 148.530827][T10488] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 148.558800][T10598] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 148.568834][T10488] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 148.590528][T10598] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 148.608203][T10488] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 148.615202][T10488] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 148.641507][T10488] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 148.733706][T10488] hsr_slave_0: entered promiscuous mode [ 148.748681][T10488] hsr_slave_1: entered promiscuous mode [ 148.761119][T10488] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 148.777135][T10488] Cannot create hsr debugfs directory [ 148.832476][T10616] program syz.1.2987 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 149.091502][T10648] syzkaller1: entered promiscuous mode [ 149.097185][T10648] syzkaller1: entered allmulticast mode [ 149.170370][T10655] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2997'. [ 149.218498][T10663] syzkaller1: entered promiscuous mode [ 149.224083][T10663] syzkaller1: entered allmulticast mode [ 149.281082][T10673] program syz.3.2999 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 149.294309][T10488] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 149.319830][T10488] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 149.347407][T10488] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 149.386525][T10488] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 149.457537][T10488] 8021q: adding VLAN 0 to HW filter on device bond0 [ 149.477010][T10488] 8021q: adding VLAN 0 to HW filter on device team0 [ 149.506549][ T151] bridge0: port 1(bridge_slave_0) entered blocking state [ 149.513679][ T151] bridge0: port 1(bridge_slave_0) entered forwarding state [ 149.543419][T10709] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3008'. [ 149.566971][ T151] bridge0: port 2(bridge_slave_1) entered blocking state [ 149.574101][ T151] bridge0: port 2(bridge_slave_1) entered forwarding state [ 149.603962][T10718] syzkaller1: entered promiscuous mode [ 149.609711][T10718] syzkaller1: entered allmulticast mode [ 149.653827][T10488] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 149.760053][T10488] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 149.894290][T10488] veth0_vlan: entered promiscuous mode [ 149.905716][T10488] veth1_vlan: entered promiscuous mode [ 149.930764][T10488] veth0_macvtap: entered promiscuous mode [ 149.952693][T10488] veth1_macvtap: entered promiscuous mode [ 149.981029][T10488] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 149.995945][T10488] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 150.021236][T10488] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.030126][T10488] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.038995][T10488] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.049018][T10488] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.060697][T10793] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 150.070032][T10793] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 150.174592][T10808] pim6reg1: entered promiscuous mode [ 150.180075][T10808] pim6reg1: entered allmulticast mode [ 150.237198][T10815] syzkaller1: entered promiscuous mode [ 150.242734][T10815] syzkaller1: entered allmulticast mode [ 150.391353][T10836] netlink: 96 bytes leftover after parsing attributes in process `syz.3.3044'. [ 150.436872][T10841] loop2: detected capacity change from 0 to 256 [ 150.501828][T10841] FAT-fs (loop2): bogus number of FAT sectors [ 150.508147][T10841] FAT-fs (loop2): Can't find a valid FAT filesystem [ 151.605142][T10860] netlink: 'syz.3.3053': attribute type 21 has an invalid length. [ 151.613172][T10860] netlink: 156 bytes leftover after parsing attributes in process `syz.3.3053'. [ 152.268691][T10894] netlink: 'syz.5.3068': attribute type 10 has an invalid length. [ 152.292820][T10894] lo: entered promiscuous mode [ 152.297802][T10894] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 152.409952][T10902] bridge_slave_0: left allmulticast mode [ 152.432966][T10902] bridge_slave_0: entered promiscuous mode [ 152.438971][T10902] bridge_slave_0: entered allmulticast mode [ 152.878793][T10933] chnl_net:caif_netlink_parms(): no params data found [ 152.945416][T10933] bridge0: port 1(bridge_slave_0) entered blocking state [ 152.952677][T10933] bridge0: port 1(bridge_slave_0) entered disabled state [ 152.960102][T10933] bridge_slave_0: entered allmulticast mode [ 152.966852][T10933] bridge_slave_0: entered promiscuous mode [ 152.973618][T10933] bridge0: port 2(bridge_slave_1) entered blocking state [ 152.980744][T10933] bridge0: port 2(bridge_slave_1) entered disabled state [ 152.988327][T10933] bridge_slave_1: entered allmulticast mode [ 152.995835][T10933] bridge_slave_1: entered promiscuous mode [ 153.028988][T10933] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 153.045233][T10933] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 153.080020][T10933] team0: Port device team_slave_0 added [ 153.088050][T10933] team0: Port device team_slave_1 added [ 153.119391][T10933] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 153.126434][T10933] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 153.152473][T10933] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 153.168443][T10933] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 153.175459][T10933] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 153.201591][T10933] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 153.249952][T10933] hsr_slave_0: entered promiscuous mode [ 153.256703][T10933] hsr_slave_1: entered promiscuous mode [ 153.262815][T10933] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 153.274932][T10933] Cannot create hsr debugfs directory [ 153.603778][T10933] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 153.655059][T10933] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 153.741866][T10933] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 153.793618][T10933] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 153.851235][T10933] bridge0: port 2(bridge_slave_1) entered blocking state [ 153.858418][T10933] bridge0: port 2(bridge_slave_1) entered forwarding state [ 153.865734][T10933] bridge0: port 1(bridge_slave_0) entered blocking state [ 153.872805][T10933] bridge0: port 1(bridge_slave_0) entered forwarding state [ 153.946928][ T151] bridge0: port 1(bridge_slave_0) entered disabled state [ 153.958151][ T151] bridge0: port 2(bridge_slave_1) entered disabled state [ 154.060552][T10992] netlink: 'syz.6.3097': attribute type 29 has an invalid length. [ 154.077804][T10933] 8021q: adding VLAN 0 to HW filter on device bond0 [ 154.088622][T10992] netlink: 'syz.6.3097': attribute type 29 has an invalid length. [ 154.102253][T10933] 8021q: adding VLAN 0 to HW filter on device team0 [ 154.119720][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 154.126844][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 154.216838][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 154.223961][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 154.460902][T10933] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 154.482847][T11008] netlink: 'syz.1.3103': attribute type 29 has an invalid length. [ 154.492221][T11008] netlink: 'syz.1.3103': attribute type 29 has an invalid length. [ 154.632184][T10933] veth0_vlan: entered promiscuous mode [ 154.641277][T10933] veth1_vlan: entered promiscuous mode [ 154.658465][T10933] veth0_macvtap: entered promiscuous mode [ 154.775999][T11021] syzkaller0: entered promiscuous mode [ 154.781654][T11021] syzkaller0: entered allmulticast mode [ 154.794993][T10933] veth1_macvtap: entered promiscuous mode [ 154.824574][T10933] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 154.850724][T10933] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 154.882709][T11030] pim6reg1: entered promiscuous mode [ 154.888238][T11030] pim6reg1: entered allmulticast mode [ 154.895620][T10933] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.904635][T10933] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.913417][T10933] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.922277][T10933] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.973913][T11039] macsec0: entered promiscuous mode [ 154.979261][T11039] macsec0: entered allmulticast mode [ 154.984658][T11039] veth1_macvtap: entered allmulticast mode [ 155.090787][T11049] loop3: detected capacity change from 0 to 256 [ 155.125419][T11051] bridge_slave_1: mtu less than device minimum [ 155.134944][T11049] FAT-fs (loop3): bogus number of FAT sectors [ 155.141830][T11049] FAT-fs (loop3): Can't find a valid FAT filesystem [ 156.143416][T11058] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.3119'. [ 156.613570][T11071] pim6reg1: entered promiscuous mode [ 156.619165][T11071] pim6reg1: entered allmulticast mode [ 157.239580][T11087] netlink: 104 bytes leftover after parsing attributes in process `syz.5.3132'. [ 157.409914][T11100] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.3136'. [ 157.450960][T11097] loop6: detected capacity change from 0 to 512 [ 157.461757][T11097] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem [ 157.472087][T11097] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c118, mo2=0002] [ 157.481272][T11097] EXT4-fs error (device loop6): ext4_iget_extra_inode:5035: inode #15: comm syz.6.3133: corrupted in-inode xattr: e_value size too large [ 157.496702][T11097] EXT4-fs error (device loop6): ext4_orphan_get:1398: comm syz.6.3133: couldn't read orphan inode 15 (err -117) [ 157.509981][T11097] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 157.576790][T11111] netlink: 164 bytes leftover after parsing attributes in process `syz.1.3139'. [ 157.650736][T11113] syzkaller0: entered promiscuous mode [ 157.656330][T11113] syzkaller0: entered allmulticast mode [ 157.772016][T11125] netlink: 104 bytes leftover after parsing attributes in process `syz.3.3145'. [ 157.786784][T11127] netlink: 'syz.2.3146': attribute type 29 has an invalid length. [ 157.812308][T11129] netlink: 14568 bytes leftover after parsing attributes in process `syz.1.3147'. [ 157.813426][T11127] netlink: 'syz.2.3146': attribute type 29 has an invalid length. [ 157.838736][T11131] netlink: 96 bytes leftover after parsing attributes in process `syz.3.3148'. [ 158.172621][ T9574] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.383468][T11181] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11181 comm=syz.6.3163 [ 158.919893][T11223] netlink: 'syz.6.3170': attribute type 25 has an invalid length. [ 159.128639][T11286] netlink: 96 bytes leftover after parsing attributes in process `syz.2.3175'. [ 159.250686][ T29] kauditd_printk_skb: 14 callbacks suppressed [ 159.250710][ T29] audit: type=1400 audit(1753424207.437:1156): avc: denied { write } for pid=11287 comm="syz.2.3176" path="socket:[31084]" dev="sockfs" ino=31084 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 159.317279][T11288] raw_sendmsg: syz.2.3176 forgot to set AF_INET. Fix it! [ 159.512293][T11308] netlink: 'syz.6.3184': attribute type 25 has an invalid length. [ 159.664523][T11315] netlink: 96 bytes leftover after parsing attributes in process `syz.6.3186'. [ 160.281139][T11341] netlink: 'syz.5.3198': attribute type 25 has an invalid length. [ 160.396094][T11353] netlink: 96 bytes leftover after parsing attributes in process `syz.5.3201'. [ 160.432756][T11355] pim6reg1: entered promiscuous mode [ 160.438441][T11355] pim6reg1: entered allmulticast mode [ 160.675222][T11375] netlink: 'syz.5.3210': attribute type 10 has an invalid length. [ 160.683579][T11375] bond0: entered promiscuous mode [ 160.688689][T11375] bond_slave_0: entered promiscuous mode [ 160.694454][T11375] bond_slave_1: entered promiscuous mode [ 160.701007][T11375] 8021q: adding VLAN 0 to HW filter on device bond0 [ 161.354153][T11394] loop3: detected capacity change from 0 to 512 [ 161.361249][T11394] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 161.538972][T11394] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c118, mo2=0002] [ 161.547279][T11394] EXT4-fs error (device loop3): ext4_iget_extra_inode:5035: inode #15: comm syz.3.3215: corrupted in-inode xattr: e_value size too large [ 161.561748][T11394] EXT4-fs error (device loop3): ext4_orphan_get:1398: comm syz.3.3215: couldn't read orphan inode 15 (err -117) [ 161.577051][T11394] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 161.704260][T11413] __nla_validate_parse: 3 callbacks suppressed [ 161.704275][T11413] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3222'. [ 162.333166][T10933] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.536711][T11442] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=11442 comm=syz.2.3233 [ 163.053797][T11487] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=14385 sclass=netlink_route_socket pid=11487 comm=syz.2.3247 [ 163.240174][T11495] netlink: 'syz.1.3250': attribute type 24 has an invalid length. [ 163.452558][T11511] netlink: 96 bytes leftover after parsing attributes in process `syz.6.3256'. [ 163.700975][ T29] audit: type=1400 audit(1753424211.527:1157): avc: denied { create } for pid=11503 comm="syz.2.3254" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 163.720969][ T29] audit: type=1400 audit(1753424211.887:1158): avc: denied { connect } for pid=11519 comm="syz.2.3259" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 163.984799][T11535] netlink: 'syz.1.3264': attribute type 24 has an invalid length. [ 164.630113][T11559] lo speed is unknown, defaulting to 1000 [ 164.636059][T11559] lo speed is unknown, defaulting to 1000 [ 164.642149][T11559] lo speed is unknown, defaulting to 1000 [ 164.648322][T11559] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 164.655899][T11559] infiniband 3yz0: RDMA CMA: cma_listen_on_dev, error -98 [ 164.666163][T11559] lo speed is unknown, defaulting to 1000 [ 164.672501][T11559] lo speed is unknown, defaulting to 1000 [ 164.679138][T11559] lo speed is unknown, defaulting to 1000 [ 164.685838][T11559] lo speed is unknown, defaulting to 1000 [ 164.692743][T11559] lo speed is unknown, defaulting to 1000 [ 164.699392][T11559] lo speed is unknown, defaulting to 1000 [ 164.705834][T11559] lo speed is unknown, defaulting to 1000 [ 164.712685][T11559] lo speed is unknown, defaulting to 1000 [ 164.719130][T11559] lo speed is unknown, defaulting to 1000 [ 164.725757][T11560] netlink: 184 bytes leftover after parsing attributes in process `syz.5.3270'. [ 164.775799][ T29] audit: type=1400 audit(1753424212.817:1159): avc: denied { create } for pid=11549 comm="syz.5.3270" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 164.796285][ T29] audit: type=1400 audit(1753424212.817:1160): avc: denied { write } for pid=11549 comm="syz.5.3270" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 165.084626][T11569] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3275'. [ 165.148352][T11573] netlink: 'syz.2.3277': attribute type 24 has an invalid length. [ 166.108196][T11609] netlink: 104 bytes leftover after parsing attributes in process `syz.5.3291'. [ 166.176770][T11617] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3285'. [ 166.223011][T11618] syzkaller1: entered promiscuous mode [ 166.228780][T11618] syzkaller1: entered allmulticast mode [ 166.498156][T11645] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=14385 sclass=netlink_route_socket pid=11645 comm=syz.1.3304 [ 166.538477][T11647] netlink: 104 bytes leftover after parsing attributes in process `syz.2.3305'. [ 166.854889][T11670] netlink: 'syz.5.3314': attribute type 39 has an invalid length. [ 167.037214][T11686] netlink: 104 bytes leftover after parsing attributes in process `syz.1.3319'. [ 167.528715][T11704] netlink: 96 bytes leftover after parsing attributes in process `syz.1.3325'. [ 167.574620][T11706] loop3: detected capacity change from 0 to 1024 [ 167.602491][T11706] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 167.629357][ T29] audit: type=1400 audit(1753424215.817:1161): avc: denied { create } for pid=11712 comm="syz.1.3328" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 167.672785][ T29] audit: type=1400 audit(1753424215.837:1162): avc: denied { ioctl } for pid=11712 comm="syz.1.3328" path="socket:[31481]" dev="sockfs" ino=31481 ioctlcmd=0x89eb scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 167.697696][ T29] audit: type=1400 audit(1753424215.857:1163): avc: denied { map } for pid=11705 comm="syz.3.3326" path="/29/file1/cpuset.memory_pressure_enabled" dev="loop3" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 167.722621][ T29] audit: type=1400 audit(1753424215.857:1164): avc: denied { execute } for pid=11705 comm="syz.3.3326" path="/29/file1/cpuset.memory_pressure_enabled" dev="loop3" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 167.806672][T10933] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.994482][T11729] syzkaller0: entered promiscuous mode [ 168.000108][T11729] syzkaller0: entered allmulticast mode [ 168.079174][T11737] netlink: 'syz.5.3337': attribute type 3 has an invalid length. [ 168.210018][T11752] tipc: Cannot configure node identity twice [ 168.651309][T11779] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3354'. [ 168.933522][T11801] pim6reg1: entered promiscuous mode [ 168.938929][T11801] pim6reg1: entered allmulticast mode [ 169.203118][ T29] audit: type=1400 audit(1753424217.027:1165): avc: denied { bind } for pid=11787 comm="syz.2.3358" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 169.222669][ T29] audit: type=1400 audit(1753424217.037:1166): avc: denied { name_bind } for pid=11787 comm="syz.2.3358" src=512 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 169.231937][T11809] netlink: 'syz.6.3364': attribute type 39 has an invalid length. [ 169.243440][ T29] audit: type=1400 audit(1753424217.037:1167): avc: denied { node_bind } for pid=11787 comm="syz.2.3358" src=512 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 169.317524][T11818] loop3: detected capacity change from 0 to 256 [ 169.336606][T11818] FAT-fs (loop3): codepage cp852 not found [ 169.649805][ T29] audit: type=1400 audit(1753424217.837:1168): avc: denied { getopt } for pid=11838 comm="syz.2.3377" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 169.762274][T11849] netlink: 'syz.5.3382': attribute type 39 has an invalid length. [ 170.333696][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 170.333713][ T29] audit: type=1400 audit(1753424218.517:1171): avc: denied { mounton } for pid=11870 comm="syz.1.3391" path="/101/file1" dev="tmpfs" ino=532 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 170.449792][T11881] netlink: 'syz.3.3394': attribute type 39 has an invalid length. [ 170.563912][T11883] netlink: 32 bytes leftover after parsing attributes in process `syz.6.3395'. [ 170.665633][T11898] loop3: detected capacity change from 0 to 512 [ 170.676700][T11898] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 170.688184][T11898] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c118, mo2=0002] [ 170.696339][T11898] EXT4-fs error (device loop3): ext4_iget_extra_inode:5035: inode #15: comm syz.3.3398: corrupted in-inode xattr: e_value size too large [ 170.710995][T11898] EXT4-fs error (device loop3): ext4_orphan_get:1398: comm syz.3.3398: couldn't read orphan inode 15 (err -117) [ 170.723498][T11898] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 170.844217][T11910] netlink: 'syz.5.3407': attribute type 39 has an invalid length. [ 170.986964][T11923] netlink: 96 bytes leftover after parsing attributes in process `syz.5.3413'. [ 171.565656][T10933] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 172.417595][ T29] audit: type=1400 audit(1753424220.227:1172): avc: denied { setopt } for pid=11940 comm="syz.1.3418" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 172.710414][T11956] loop3: detected capacity change from 0 to 8192 [ 172.806953][T11956] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 172.836278][T11959] netlink: 'syz.6.3425': attribute type 25 has an invalid length. [ 172.890342][T11262] bridge_slave_1: left allmulticast mode [ 172.896080][T11262] bridge_slave_1: left promiscuous mode [ 172.901799][T11262] bridge0: port 2(bridge_slave_1) entered disabled state [ 172.968325][T11262] bridge_slave_0: left allmulticast mode [ 172.974133][T11262] bridge_slave_0: left promiscuous mode [ 172.979895][T11262] bridge0: port 1(bridge_slave_0) entered disabled state [ 173.205252][T11987] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3437'. [ 173.214442][T11987] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3437'. [ 173.525385][ T29] audit: type=1400 audit(1753424221.707:1173): avc: denied { connect } for pid=11973 comm="syz.5.3432" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 173.545214][ T29] audit: type=1400 audit(1753424221.707:1174): avc: denied { bind } for pid=11973 comm="syz.5.3432" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 173.564586][ T29] audit: type=1400 audit(1753424221.707:1175): avc: denied { write } for pid=11973 comm="syz.5.3432" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 173.592212][T11262]  (unregistering): (slave bond_slave_0): Releasing backup interface [ 173.604279][T11262]  (unregistering): (slave bond_slave_1): Releasing backup interface [ 173.616153][T11262]  (unregistering): Released all slaves [ 173.637469][T11998] netlink: 'syz.6.3440': attribute type 5 has an invalid length. [ 173.692616][T11262] hsr_slave_0: left promiscuous mode [ 173.706844][T11262] hsr_slave_1: left promiscuous mode [ 173.730468][T11262] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 173.761369][T11262] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 173.788623][T12020] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3448'. [ 173.888572][T11262] team0 (unregistering): Port device team_slave_1 removed [ 173.956656][T11262] team0 (unregistering): Port device team_slave_0 removed [ 174.777559][T12097] vcan0: tx drop: invalid da for name 0xfffffffffffffffd [ 174.801896][ T29] audit: type=1400 audit(1753424222.967:1176): avc: denied { bind } for pid=12090 comm="syz.6.3465" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 174.821390][ T29] audit: type=1400 audit(1753424222.967:1177): avc: denied { write } for pid=12090 comm="syz.6.3465" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 177.128989][T12221] netlink: 'syz.2.3502': attribute type 25 has an invalid length. [ 177.307866][T12249] hsr0: entered promiscuous mode [ 177.314212][T12248] hsr0: left promiscuous mode [ 177.450819][T12272] netlink: 128 bytes leftover after parsing attributes in process `syz.1.3520'. [ 177.616102][T12302] netlink: 'syz.5.3527': attribute type 39 has an invalid length. [ 178.227130][T12382] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3550'. [ 178.236110][T12382] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3550'. [ 179.372218][T12410] netlink: 92 bytes leftover after parsing attributes in process `syz.6.3559'. [ 179.694874][T12428] netlink: 'syz.5.3565': attribute type 39 has an invalid length. [ 179.711090][ T29] audit: type=1400 audit(1753424227.897:1178): avc: denied { ioctl } for pid=12434 comm="syz.1.3567" path="socket:[34330]" dev="sockfs" ino=34330 ioctlcmd=0x8b32 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 179.975429][T12465] netlink: 'syz.6.3579': attribute type 29 has an invalid length. [ 180.025745][T12471] netlink: 104 bytes leftover after parsing attributes in process `syz.1.3581'. [ 180.453852][T12495] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3587'. [ 180.462985][ T29] audit: type=1400 audit(1753424228.647:1179): avc: denied { ioctl } for pid=12494 comm="syz.2.3587" path="socket:[33668]" dev="sockfs" ino=33668 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 180.546211][T12504] netlink: 'syz.1.3591': attribute type 29 has an invalid length. [ 180.554952][T12504] netlink: 'syz.1.3591': attribute type 29 has an invalid length. [ 180.991485][T12537] netlink: 'syz.1.3603': attribute type 29 has an invalid length. [ 181.025260][T12537] netlink: 'syz.1.3603': attribute type 29 has an invalid length. [ 181.861290][T12584] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12584 comm=syz.5.3618 [ 181.941386][T12592] netlink: 'syz.3.3621': attribute type 39 has an invalid length. [ 182.592785][T12627] netlink: 'syz.2.3633': attribute type 29 has an invalid length. [ 182.601319][T12627] netlink: 'syz.2.3633': attribute type 29 has an invalid length. [ 182.647170][T12634] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12634 comm=syz.2.3636 [ 182.670676][T12638] netlink: 'syz.5.3638': attribute type 39 has an invalid length. [ 182.842358][T12655] netlink: 'syz.2.3645': attribute type 29 has an invalid length. [ 182.860072][T12655] netlink: 'syz.2.3645': attribute type 29 has an invalid length. [ 183.061490][T12681] netlink: 'syz.6.3657': attribute type 29 has an invalid length. [ 183.070192][T12681] netlink: 'syz.6.3657': attribute type 29 has an invalid length. [ 184.274921][T12718] lo speed is unknown, defaulting to 1000 [ 184.606036][T12735] netlink: 104 bytes leftover after parsing attributes in process `syz.3.3676'. [ 185.360715][T12755] netlink: 'syz.1.3683': attribute type 25 has an invalid length. [ 185.542286][T12761] netlink: 'syz.5.3685': attribute type 39 has an invalid length. [ 185.706304][T12775] netlink: 'syz.6.3690': attribute type 29 has an invalid length. [ 186.089105][T12805] lo speed is unknown, defaulting to 1000 [ 186.220228][T12805] chnl_net:caif_netlink_parms(): no params data found [ 186.306317][T12859] tipc: Enabling of bearer rejected, failed to enable media [ 186.321008][T12805] bridge0: port 1(bridge_slave_0) entered blocking state [ 186.328133][T12805] bridge0: port 1(bridge_slave_0) entered disabled state [ 186.335578][T12805] bridge_slave_0: entered allmulticast mode [ 186.342345][T12805] bridge_slave_0: entered promiscuous mode [ 186.349582][T12805] bridge0: port 2(bridge_slave_1) entered blocking state [ 186.356810][T12805] bridge0: port 2(bridge_slave_1) entered disabled state [ 186.364201][T12805] bridge_slave_1: entered allmulticast mode [ 186.370897][T12805] bridge_slave_1: entered promiscuous mode [ 186.389603][T12805] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 186.400566][T12805] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 186.439627][T12805] team0: Port device team_slave_0 added [ 186.447125][T12805] team0: Port device team_slave_1 added [ 186.471503][T12805] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 186.478550][T12805] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 186.504783][T12805] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 186.517221][T12805] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 186.524224][T12805] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 186.550269][T12805] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 186.729790][T12805] hsr_slave_0: entered promiscuous mode [ 186.745903][T12805] hsr_slave_1: entered promiscuous mode [ 187.129750][T12943] netlink: 104 bytes leftover after parsing attributes in process `syz.1.3712'. [ 187.303152][T12805] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 187.358676][T12805] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 187.380260][T12805] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 187.402096][T12805] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 187.442700][T12805] 8021q: adding VLAN 0 to HW filter on device bond0 [ 187.455965][T12805] 8021q: adding VLAN 0 to HW filter on device team0 [ 187.468542][T12976] netlink: 104 bytes leftover after parsing attributes in process `syz.1.3724'. [ 187.468953][T11252] bridge0: port 1(bridge_slave_0) entered blocking state [ 187.484769][T11252] bridge0: port 1(bridge_slave_0) entered forwarding state [ 187.507066][T11252] bridge0: port 2(bridge_slave_1) entered blocking state [ 187.514208][T11252] bridge0: port 2(bridge_slave_1) entered forwarding state [ 187.600909][T12805] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 187.668794][T12805] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 187.741311][T13008] netlink: 104 bytes leftover after parsing attributes in process `syz.2.3735'. [ 187.786261][T13016] validate_nla: 5 callbacks suppressed [ 187.786324][T13016] netlink: 'syz.2.3737': attribute type 25 has an invalid length. [ 187.870956][T12805] veth0_vlan: entered promiscuous mode [ 187.882102][T12805] veth1_vlan: entered promiscuous mode [ 187.904610][T12805] veth0_macvtap: entered promiscuous mode [ 187.913683][T12805] veth1_macvtap: entered promiscuous mode [ 187.931619][T12805] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 187.945707][T12805] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 187.961283][T12805] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.970209][T12805] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.978964][T12805] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.987799][T12805] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.084482][T13043] lo speed is unknown, defaulting to 1000 [ 188.092011][T13043] lo speed is unknown, defaulting to 1000 [ 188.099068][T13043] lo speed is unknown, defaulting to 1000 [ 188.319546][T13046] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 188.470574][T13054] netlink: 'syz.3.3749': attribute type 25 has an invalid length. [ 188.526296][T13043] infiniband syz0: set active [ 188.531129][T13043] infiniband syz0: added lo [ 188.536218][ T3385] lo speed is unknown, defaulting to 1000 [ 188.566872][T13043] RDS/IB: syz0: added [ 188.579789][T13043] smc: adding ib device syz0 with port count 1 [ 188.586355][T13043] smc: ib device syz0 port 1 has pnetid [ 188.592516][ T3385] lo speed is unknown, defaulting to 1000 [ 188.600878][T13043] lo speed is unknown, defaulting to 1000 [ 188.618421][T13071] netlink: 'syz.2.3753': attribute type 39 has an invalid length. [ 188.639381][T13043] lo speed is unknown, defaulting to 1000 [ 188.699908][T13043] lo speed is unknown, defaulting to 1000 [ 188.771771][T13043] lo speed is unknown, defaulting to 1000 [ 188.814285][ T29] audit: type=1400 audit(1753424236.997:1180): avc: denied { override_creds } for pid=13094 comm="syz.3.3760" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 188.935775][T13043] lo speed is unknown, defaulting to 1000 [ 189.014744][T13127] netlink: 'syz.1.3768': attribute type 25 has an invalid length. [ 189.105832][T13043] lo speed is unknown, defaulting to 1000 [ 189.532927][T13043] lo speed is unknown, defaulting to 1000 [ 189.839333][T13043] lo speed is unknown, defaulting to 1000 [ 189.874223][T13043] lo speed is unknown, defaulting to 1000 [ 190.080999][ T29] audit: type=1400 audit(1753424238.267:1181): avc: denied { cmd } for pid=13164 comm="syz.3.3781" path="socket:[35586]" dev="sockfs" ino=35586 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 191.057709][T13209] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3798'. [ 191.306734][T13229] netlink: 'syz.1.3806': attribute type 25 has an invalid length. [ 191.327093][T13230] loop5: detected capacity change from 0 to 1024 [ 191.333995][T13230] EXT4-fs: Ignoring removed i_version option [ 191.399638][T13230] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 191.848742][T13249] netlink: 'syz.3.3811': attribute type 29 has an invalid length. [ 191.908881][T13253] netlink: 'syz.3.3811': attribute type 29 has an invalid length. [ 192.268768][T13230] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:483: comm syz.5.3801: Invalid block bitmap block 0 in block_group 0 [ 192.306150][T13230] Quota error (device loop5): write_blk: dquota write failed [ 192.313729][T13230] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 192.323797][T13230] EXT4-fs error (device loop5): ext4_acquire_dquot:6933: comm syz.5.3801: Failed to acquire dquot type 0 [ 192.338045][T13230] EXT4-fs error (device loop5): ext4_free_blocks:6587: comm syz.5.3801: Freeing blocks not in datazone - block = 0, count = 4096 [ 192.352016][T13230] EXT4-fs error (device loop5): ext4_read_inode_bitmap:139: comm syz.5.3801: Invalid inode bitmap blk 0 in block_group 0 [ 192.365376][T13230] EXT4-fs error (device loop5) in ext4_free_inode:361: Corrupt filesystem [ 192.374425][T13230] EXT4-fs (loop5): 1 orphan inode deleted [ 192.381589][T13230] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 192.406475][T11254] Quota error (device loop5): do_check_range: Getting block 0 out of range 1-8 [ 192.415494][T11254] EXT4-fs error (device loop5): ext4_release_dquot:6969: comm kworker/u8:12: Failed to release dquot type 0 [ 193.636986][T12805] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 193.840297][T13310] No such timeout policy "syz0" [ 194.303334][T13337] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3830'. [ 194.652585][T13359] netlink: 88 bytes leftover after parsing attributes in process `syz.1.3834'. [ 195.060002][T13383] loop5: detected capacity change from 0 to 512 [ 195.091503][T13383] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 195.125507][T13383] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c118, mo2=0002] [ 195.177216][T13383] EXT4-fs error (device loop5): ext4_iget_extra_inode:5035: inode #15: comm syz.5.3836: corrupted in-inode xattr: e_value size too large [ 195.199242][T13383] EXT4-fs error (device loop5): ext4_orphan_get:1398: comm syz.5.3836: couldn't read orphan inode 15 (err -117) [ 195.233872][T13383] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 195.663701][T12805] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 195.685631][T13422] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3843'. [ 195.927235][T13430] netlink: 'syz.5.3847': attribute type 2 has an invalid length. [ 195.935067][T13430] netlink: 'syz.5.3847': attribute type 1 has an invalid length. [ 195.942841][T13430] netlink: 'syz.5.3847': attribute type 2 has an invalid length. [ 195.976681][T13434] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=14385 sclass=netlink_route_socket pid=13434 comm=syz.3.3849 [ 195.990046][T13435] netlink: 88 bytes leftover after parsing attributes in process `syz.1.3848'. [ 196.663684][T13470] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=14385 sclass=netlink_route_socket pid=13470 comm=syz.5.3862 [ 196.779368][T13479] netlink: 104 bytes leftover after parsing attributes in process `syz.5.3866'. [ 197.050941][T13497] loop5: detected capacity change from 0 to 8192 [ 197.184451][T13503] netlink: 'syz.1.3874': attribute type 25 has an invalid length. [ 198.161817][T13518] netlink: 104 bytes leftover after parsing attributes in process `syz.6.3878'. [ 198.182424][T13520] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3880'. [ 198.254164][T13535] netlink: 'syz.2.3887': attribute type 25 has an invalid length. [ 198.464918][ T29] audit: type=1400 audit(1753424246.647:1182): avc: denied { read } for pid=13556 comm="syz.5.3897" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 198.502936][T13560] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3898'. [ 199.651893][T13595] lo speed is unknown, defaulting to 1000 [ 199.868966][T13595] lo speed is unknown, defaulting to 1000 [ 200.125157][T13617] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=14385 sclass=netlink_route_socket pid=13617 comm=syz.6.3920 [ 200.719632][T13643] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3929'. [ 200.815659][T13647] syzkaller1: entered promiscuous mode [ 200.821251][T13647] syzkaller1: entered allmulticast mode [ 200.832333][T13649] tipc: Started in network mode [ 200.837318][T13649] tipc: Node identity 2d0000000000000003, cluster identity 4711 [ 200.981570][ T29] audit: type=1400 audit(1753424249.167:1183): avc: denied { getopt } for pid=13672 comm="syz.6.3938" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 200.985614][T13675] netlink: 'syz.3.3941': attribute type 10 has an invalid length. [ 201.028640][T13680] loop5: detected capacity change from 0 to 256 [ 201.087183][T13680] FAT-fs (loop5): codepage cp852 not found [ 201.108814][T13689] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=14385 sclass=netlink_route_socket pid=13689 comm=syz.2.3948 [ 201.132597][T13684] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 202.902378][T13764] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13764 comm=syz.6.3973 [ 203.223777][T13778] netlink: 'syz.1.3980': attribute type 29 has an invalid length. [ 203.269218][T13778] netlink: 'syz.1.3980': attribute type 29 has an invalid length. [ 203.525586][T13793] syzkaller0: entered promiscuous mode [ 203.531308][T13793] syzkaller0: entered allmulticast mode [ 203.619514][T13807] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3991'. [ 203.655168][T13811] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=14385 sclass=netlink_route_socket pid=13811 comm=syz.6.3994 [ 204.758848][T13870] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4017'. [ 204.822940][T13874] loop5: detected capacity change from 0 to 512 [ 204.907493][T13874] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 204.919029][T13884] netlink: 'syz.1.4022': attribute type 25 has an invalid length. [ 204.920192][T13874] ext4 filesystem being mounted at /52/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 204.965158][ T29] audit: type=1400 audit(1753424253.147:1184): avc: denied { map } for pid=13886 comm="syz.6.4023" path="socket:[38100]" dev="sockfs" ino=38100 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 205.025491][T12805] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 205.373930][ T29] audit: type=1326 audit(1753424253.557:1185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13898 comm="syz.2.4029" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fcacd09e9a9 code=0x0 [ 205.503145][T13905] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4031'. [ 205.580665][T13917] loop5: detected capacity change from 0 to 256 [ 205.598263][T13918] netlink: 'syz.6.4035': attribute type 39 has an invalid length. [ 205.879091][T13945] netlink: 'syz.1.4046': attribute type 29 has an invalid length. [ 205.890396][T13948] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 205.903859][T13945] netlink: 'syz.1.4046': attribute type 29 has an invalid length. [ 205.909959][T13948] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 206.096507][ T29] audit: type=1400 audit(1753424254.277:1186): avc: denied { getopt } for pid=13958 comm="syz.1.4052" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 206.376569][ T29] audit: type=1326 audit(1753424254.557:1187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13979 comm="syz.3.4063" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa6128be9a9 code=0x0 [ 206.594915][T14022] netlink: 'syz.6.4082': attribute type 29 has an invalid length. [ 206.616240][T14022] netlink: 'syz.6.4082': attribute type 29 has an invalid length. [ 206.652865][ T29] audit: type=1326 audit(1753424254.837:1188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14020 comm="syz.5.4081" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0b915ce9a9 code=0x0 [ 206.939598][T14057] netlink: 'syz.6.4097': attribute type 29 has an invalid length. [ 206.974145][T14057] netlink: 'syz.6.4097': attribute type 29 has an invalid length. [ 206.986273][T14061] netlink: 'syz.3.4099': attribute type 39 has an invalid length. [ 207.789888][ T3385] IPVS: starting estimator thread 0... [ 208.026520][T14093] IPVS: using max 1776 ests per chain, 88800 per kthread [ 208.083006][T14099] netlink: 'syz.2.4115': attribute type 24 has an invalid length. [ 208.439867][ T29] audit: type=1400 audit(1753424256.607:1189): avc: denied { watch } for pid=14103 comm="syz.3.4119" path="/191" dev="tmpfs" ino=992 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 209.349150][T14146] netlink: 36 bytes leftover after parsing attributes in process `syz.5.4129'. [ 209.358236][T14146] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4129'. [ 209.367357][T14146] netlink: 36 bytes leftover after parsing attributes in process `syz.5.4129'. [ 209.415420][T14146] netlink: 36 bytes leftover after parsing attributes in process `syz.5.4129'. [ 210.808586][T14177] netlink: 'syz.2.4145': attribute type 24 has an invalid length. [ 212.105500][T14203] netlink: 'syz.1.4154': attribute type 39 has an invalid length. [ 212.229491][T14219] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 212.240708][T14219] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 213.368580][T14232] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 213.375882][T14232] IPv6: NLM_F_CREATE should be set when creating new route [ 213.383130][T14232] IPv6: NLM_F_CREATE should be set when creating new route [ 214.157913][T14261] netlink: 'syz.3.4176': attribute type 29 has an invalid length. [ 214.178315][T14261] netlink: 'syz.3.4176': attribute type 29 has an invalid length. [ 214.985086][T14276] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=14385 sclass=netlink_route_socket pid=14276 comm=syz.3.4181 [ 215.558977][T14305] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=14385 sclass=netlink_route_socket pid=14305 comm=syz.2.4194 [ 215.870352][T14311] netlink: 'syz.2.4197': attribute type 29 has an invalid length. [ 215.923350][T14312] netlink: 'syz.2.4197': attribute type 29 has an invalid length. [ 216.340647][T14331] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=14385 sclass=netlink_route_socket pid=14331 comm=syz.5.4205 [ 217.090796][T14347] netlink: 'syz.1.4211': attribute type 39 has an invalid length. [ 219.232745][T14444] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4252'. [ 219.242693][T14444] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4252'. [ 219.251899][T14444] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4252'. [ 219.291379][T14444] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4252'. [ 219.300711][T14448] loop5: detected capacity change from 0 to 256 [ 219.342288][T14448] FAT-fs (loop5): bogus number of FAT sectors [ 219.348573][T14448] FAT-fs (loop5): Can't find a valid FAT filesystem [ 220.127310][T14480] bridge0: port 3(syz_tun) entered blocking state [ 220.133903][T14480] bridge0: port 3(syz_tun) entered disabled state [ 220.140579][T14480] syz_tun: entered allmulticast mode [ 220.147859][T14480] syz_tun: entered promiscuous mode [ 220.153579][T14480] bridge0: port 3(syz_tun) entered blocking state [ 220.160091][T14480] bridge0: port 3(syz_tun) entered forwarding state [ 220.382139][T14483] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4267'. [ 220.391309][T14483] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4267'. [ 220.400502][T14483] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4267'. [ 220.586736][T14483] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4267'. [ 220.806753][T14492] netlink: 'syz.6.4272': attribute type 29 has an invalid length. [ 220.836156][T14492] netlink: 'syz.6.4272': attribute type 29 has an invalid length. [ 221.029155][T14504] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=14385 sclass=netlink_route_socket pid=14504 comm=syz.1.4275 [ 222.394515][T14543] futex_wake_op: syz.5.4292 tries to shift op by -1; fix this program [ 222.403920][T14539] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=14385 sclass=netlink_route_socket pid=14539 comm=syz.3.4291 [ 222.487630][T14545] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4293'. [ 223.689137][ T29] audit: type=1400 audit(1753424271.307:1190): avc: denied { create } for pid=14552 comm="syz.3.4297" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 223.771338][T14567] loop5: detected capacity change from 0 to 1024 [ 223.802657][T14567] EXT4-fs: Ignoring removed i_version option [ 224.518719][T14567] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 224.546636][T14567] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:483: comm syz.5.4300: Invalid block bitmap block 0 in block_group 0 [ 224.561136][T14567] Quota error (device loop5): write_blk: dquota write failed [ 224.568585][T14567] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 224.578593][T14567] EXT4-fs error (device loop5): ext4_acquire_dquot:6933: comm syz.5.4300: Failed to acquire dquot type 0 [ 224.590947][T14567] EXT4-fs error (device loop5): ext4_free_blocks:6587: comm syz.5.4300: Freeing blocks not in datazone - block = 0, count = 4096 [ 224.605195][T14567] EXT4-fs error (device loop5): ext4_read_inode_bitmap:139: comm syz.5.4300: Invalid inode bitmap blk 0 in block_group 0 [ 224.618724][T14567] EXT4-fs error (device loop5) in ext4_free_inode:361: Corrupt filesystem [ 224.627370][T14567] EXT4-fs (loop5): 1 orphan inode deleted [ 224.634185][T14567] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 224.662571][ T151] Quota error (device loop5): do_check_range: Getting block 0 out of range 1-8 [ 224.671616][ T151] EXT4-fs error (device loop5): ext4_release_dquot:6969: comm kworker/u8:4: Failed to release dquot type 0 [ 226.107108][ T29] audit: type=1400 audit(1753424274.287:1191): avc: denied { ioctl } for pid=14593 comm="syz.6.4312" path="socket:[39678]" dev="sockfs" ino=39678 ioctlcmd=0x8982 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 226.241860][T12805] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 226.875606][T14612] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4316'. [ 226.895090][T14612] hsr_slave_1 (unregistering): left promiscuous mode [ 226.936592][ T29] audit: type=1326 audit(1753424275.107:1192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14615 comm="syz.6.4320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffba6c5e9a9 code=0x7ffc0000 [ 226.960305][ T29] audit: type=1326 audit(1753424275.107:1193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14615 comm="syz.6.4320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7ffba6c5e9a9 code=0x7ffc0000 [ 226.984099][ T29] audit: type=1326 audit(1753424275.107:1194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14615 comm="syz.6.4320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffba6c5e9a9 code=0x7ffc0000 [ 227.007849][ T29] audit: type=1326 audit(1753424275.107:1195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14615 comm="syz.6.4320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffba6c5e9a9 code=0x7ffc0000 [ 227.031746][ T29] audit: type=1326 audit(1753424275.107:1196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14615 comm="syz.6.4320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=84 compat=0 ip=0x7ffba6c5e9a9 code=0x7ffc0000 [ 227.745038][ T3392] IPVS: starting estimator thread 0... [ 227.828975][T14642] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 227.856553][T14640] IPVS: using max 2496 ests per chain, 124800 per kthread [ 227.931709][T14642] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 228.519672][T14667] netlink: 'syz.6.4341': attribute type 10 has an invalid length. [ 230.295202][T14716] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4360'. [ 230.304372][T14716] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4360'. [ 231.490718][T14738] loop5: detected capacity change from 0 to 512 [ 231.507204][T14738] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 231.549219][T14738] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c118, mo2=0002] [ 231.579252][T14738] EXT4-fs error (device loop5): ext4_iget_extra_inode:5035: inode #15: comm syz.5.4367: corrupted in-inode xattr: e_value size too large [ 231.649032][T14738] EXT4-fs error (device loop5): ext4_orphan_get:1398: comm syz.5.4367: couldn't read orphan inode 15 (err -117) [ 231.678981][T14738] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 231.889991][T12805] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 231.922267][T14761] netlink: 484 bytes leftover after parsing attributes in process `syz.5.4376'. [ 232.705057][T14773] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4382'. [ 232.810570][T14787] netlink: 40 bytes leftover after parsing attributes in process `syz.6.4388'. [ 232.813653][T14789] netlink: 'syz.3.4389': attribute type 29 has an invalid length. [ 232.829144][T14789] netlink: 'syz.3.4389': attribute type 29 has an invalid length. [ 233.036225][T14794] tipc: Started in network mode [ 233.041236][T14794] tipc: Node identity 000000000000000003, cluster identity 4711 [ 233.751793][T14822] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4399'. [ 233.843973][T14825] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4401'. [ 234.461786][T14833] tipc: Started in network mode [ 234.466763][T14833] tipc: Node identity 000000000000000003, cluster identity 4711 [ 235.611549][ T29] kauditd_printk_skb: 69 callbacks suppressed [ 235.611598][ T29] audit: type=1400 audit(1753424283.797:1266): avc: denied { listen } for pid=14846 comm="syz.3.4409" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 235.665601][ T29] audit: type=1400 audit(1753424283.827:1267): avc: denied { connect } for pid=14846 comm="syz.3.4409" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 235.685425][ T29] audit: type=1400 audit(1753424283.847:1268): avc: denied { bind } for pid=14849 comm="syz.5.4411" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 235.715605][T14850] bridge0: port 3(gretap0) entered blocking state [ 235.722193][T14850] bridge0: port 3(gretap0) entered disabled state [ 235.787654][T14850] gretap0: entered allmulticast mode [ 235.795147][T14850] gretap0: entered promiscuous mode [ 235.800956][T14850] bridge0: port 3(gretap0) entered blocking state [ 235.807502][T14850] bridge0: port 3(gretap0) entered forwarding state [ 235.885424][T14871] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=14385 sclass=netlink_route_socket pid=14871 comm=syz.1.4420 [ 235.992130][ T29] audit: type=1400 audit(1753424284.177:1269): avc: denied { mounton } for pid=14882 comm="syz.2.4424" path="/247/file0" dev="tmpfs" ino=1282 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 236.088231][ T29] audit: type=1400 audit(1753424284.257:1270): avc: denied { mount } for pid=14882 comm="syz.2.4424" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 236.110451][ T29] audit: type=1400 audit(1753424284.277:1271): avc: denied { write } for pid=14882 comm="syz.2.4424" name="file0" dev="tmpfs" ino=1282 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 236.133701][ T29] audit: type=1400 audit(1753424284.277:1272): avc: denied { open } for pid=14882 comm="syz.2.4424" path="/247/file0" dev="tmpfs" ino=1282 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 236.254574][T14895] syzkaller0: entered promiscuous mode [ 236.260152][T14895] syzkaller0: entered allmulticast mode [ 236.328006][ T29] audit: type=1400 audit(1753424284.457:1273): avc: denied { getopt } for pid=14896 comm="syz.1.4429" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 236.369097][T14901] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4430'. [ 236.414090][ T2959] IPVS: starting estimator thread 0... [ 236.463266][T14908] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=14385 sclass=netlink_route_socket pid=14908 comm=syz.2.4433 [ 236.506486][T14904] IPVS: using max 2016 ests per chain, 100800 per kthread [ 237.107359][T14928] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4437'. [ 237.150175][ T29] audit: type=1400 audit(1753424285.287:1274): avc: denied { ioctl } for pid=14919 comm="syz.2.4437" path="socket:[41058]" dev="sockfs" ino=41058 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 237.693798][T14944] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4444'. [ 237.818156][T14947] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=14385 sclass=netlink_route_socket pid=14947 comm=syz.3.4446 [ 238.773838][T14971] tipc: Started in network mode [ 238.779562][T14971] tipc: Node identity 000000000000000003, cluster identity 4711 [ 239.071772][T14974] Cannot find add_set index 0 as target [ 239.148909][T14976] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=14385 sclass=netlink_route_socket pid=14976 comm=syz.2.4458 [ 239.514262][ T29] audit: type=1400 audit(1753424287.697:1275): avc: denied { bind } for pid=14999 comm="syz.1.4468" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 240.133040][T15008] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=14385 sclass=netlink_route_socket pid=15008 comm=syz.3.4470 [ 240.285264][T15010] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4471'. [ 241.427434][T15052] 9pnet_virtio: no channels available for device syz [ 241.812586][T15074] loop5: detected capacity change from 0 to 1024 [ 241.821295][T15074] EXT4-fs: dax option not supported [ 241.986087][T15079] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4498'. [ 241.995235][T15079] bridge_slave_1: left allmulticast mode [ 242.000978][T15079] bridge_slave_1: left promiscuous mode [ 242.006742][T15079] bridge0: port 2(bridge_slave_1) entered disabled state [ 242.014487][T15079] bridge_slave_0: left allmulticast mode [ 242.020249][T15079] bridge_slave_0: left promiscuous mode [ 242.026020][T15079] bridge0: port 1(bridge_slave_0) entered disabled state [ 244.254333][T15133] netlink: 36 bytes leftover after parsing attributes in process `syz.6.4513'. [ 244.263389][T15133] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4513'. [ 244.272487][T15133] netlink: 36 bytes leftover after parsing attributes in process `syz.6.4513'. [ 244.298202][T15133] netlink: 36 bytes leftover after parsing attributes in process `syz.6.4513'. [ 244.798139][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 244.798153][ T29] audit: type=1400 audit(1753424292.987:1277): avc: denied { bind } for pid=15165 comm="syz.5.4529" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 244.967793][T15176] sctp: [Deprecated]: syz.5.4533 (pid 15176) Use of struct sctp_assoc_value in delayed_ack socket option. [ 244.967793][T15176] Use struct sctp_sack_info instead [ 245.155280][ T29] audit: type=1400 audit(1753424293.307:1278): avc: denied { mount } for pid=15185 comm="syz.1.4538" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 245.608718][T15226] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4555'. [ 245.617807][T15226] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4555'. [ 245.627538][T15226] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4555'. [ 245.661256][T15226] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4555'. [ 246.351707][T15268] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4574'. [ 246.360802][T15268] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4574'. [ 246.452640][ T29] audit: type=1400 audit(1753424294.637:1279): avc: denied { mount } for pid=15273 comm="syz.2.4577" name="/" dev="ramfs" ino=41520 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 246.554686][T15275] bridge0: port 3(syz_tun) entered disabled state [ 246.569669][T15275] bridge0: port 2(bridge_slave_1) entered disabled state [ 246.576876][T15275] bridge0: port 1(bridge_slave_0) entered disabled state [ 246.629647][T15289] loop5: detected capacity change from 0 to 512 [ 246.658492][T15289] EXT4-fs: Ignoring removed i_version option [ 246.667510][T15275] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 246.680550][T15289] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 246.691705][T15275] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 246.720701][T15289] EXT4-fs (loop5): 1 truncate cleaned up [ 246.726964][T15289] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 246.741815][T15275] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.750845][T15275] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.750903][T15275] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.750954][T15275] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.965914][T12805] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 247.112483][T15306] loop5: detected capacity change from 0 to 128 [ 247.607395][ T31] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.731989][ T31] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.820102][ T31] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.906175][ T31] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.055222][ T31] gretap0: left allmulticast mode [ 248.060422][ T31] gretap0: left promiscuous mode [ 248.065501][ T31] bridge0: port 3(gretap0) entered disabled state [ 248.101333][ T31] bridge_slave_1: left allmulticast mode [ 248.107192][ T31] bridge_slave_1: left promiscuous mode [ 248.113002][ T31] bridge0: port 2(bridge_slave_1) entered disabled state [ 248.145213][ T31] bridge_slave_0: left allmulticast mode [ 248.151717][ T31] bridge_slave_0: left promiscuous mode [ 248.158294][ T31] bridge0: port 1(bridge_slave_0) entered disabled state [ 248.340045][ T31] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 248.360544][ T31] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 248.381897][ T31] bond0 (unregistering): Released all slaves [ 248.452327][ T31] tipc: Left network mode [ 248.561254][ T31] hsr_slave_0: left promiscuous mode [ 248.605421][ T31] hsr_slave_1: left promiscuous mode [ 248.632900][ T31] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 248.641248][ T31] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 248.693241][ T31] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 248.701510][ T31] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 248.736738][ T31] veth1_macvtap: left promiscuous mode [ 248.752922][ T31] veth0_macvtap: left promiscuous mode [ 248.766557][ T31] veth1_vlan: left promiscuous mode [ 248.771904][ T31] veth0_vlan: left promiscuous mode [ 248.923686][ T31] team0 (unregistering): Port device team_slave_1 removed [ 248.939036][ T31] team0 (unregistering): Port device team_slave_0 removed [ 248.985545][T11252] smc: removing ib device syz0 [ 248.995611][ T23] lo speed is unknown, defaulting to 1000 [ 249.002064][ T23] syz0: Port: 1 Link DOWN [ 249.161392][T15404] lo speed is unknown, defaulting to 1000 [ 249.307955][T15463] veth0_to_hsr: entered promiscuous mode [ 249.336395][T15463] veth0_to_hsr: entered allmulticast mode [ 249.365444][T15404] chnl_net:caif_netlink_parms(): no params data found [ 249.375374][ T29] audit: type=1400 audit(1753424297.567:1280): avc: denied { mounton } for pid=15471 comm="syz.1.4642" path="/file0" dev="ramfs" ino=42189 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 249.473121][T15404] bridge0: port 1(bridge_slave_0) entered blocking state [ 249.480306][T15404] bridge0: port 1(bridge_slave_0) entered disabled state [ 249.494545][T15404] bridge_slave_0: entered allmulticast mode [ 249.503170][T15404] bridge_slave_0: entered promiscuous mode [ 249.510179][T15404] bridge0: port 2(bridge_slave_1) entered blocking state [ 249.517395][T15404] bridge0: port 2(bridge_slave_1) entered disabled state [ 249.524625][T15404] bridge_slave_1: entered allmulticast mode [ 249.531399][T15404] bridge_slave_1: entered promiscuous mode [ 249.556020][T15404] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 249.573741][T15404] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 249.603132][T15404] team0: Port device team_slave_0 added [ 249.612436][T15404] team0: Port device team_slave_1 added [ 249.618386][ T31] IPVS: stop unused estimator thread 0... [ 249.631410][T15404] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 249.638616][T15404] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 249.641581][T15496] __nla_validate_parse: 2 callbacks suppressed [ 249.641610][T15496] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4647'. [ 249.664732][T15404] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 249.691303][T15496] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4647'. [ 249.701277][T15496] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4647'. [ 249.713758][T15496] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4647'. [ 249.714105][T15404] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 249.729870][T15404] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 249.756249][T15404] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 249.808038][T15404] hsr_slave_0: entered promiscuous mode [ 249.821506][T15404] hsr_slave_1: entered promiscuous mode [ 249.928727][T15404] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 249.937640][T15404] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 249.946293][T15404] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 249.955781][T15404] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 249.972487][T15404] bridge0: port 2(bridge_slave_1) entered blocking state [ 249.979721][T15404] bridge0: port 2(bridge_slave_1) entered forwarding state [ 249.987085][T15404] bridge0: port 1(bridge_slave_0) entered blocking state [ 249.994186][T15404] bridge0: port 1(bridge_slave_0) entered forwarding state [ 250.033033][T15404] 8021q: adding VLAN 0 to HW filter on device bond0 [ 250.040948][T15448] veth0_to_hsr: left allmulticast mode [ 250.046558][T15448] veth0_to_hsr: left promiscuous mode [ 250.053023][T11252] bridge0: port 1(bridge_slave_0) entered disabled state [ 250.063906][T11252] bridge0: port 2(bridge_slave_1) entered disabled state [ 250.089464][T15404] 8021q: adding VLAN 0 to HW filter on device team0 [ 250.106653][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 250.113794][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 250.129510][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 250.136638][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 250.246463][T15404] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 250.428440][T15404] veth0_vlan: entered promiscuous mode [ 250.438403][T15404] veth1_vlan: entered promiscuous mode [ 250.464043][T15404] veth0_macvtap: entered promiscuous mode [ 250.479989][T15404] veth1_macvtap: entered promiscuous mode [ 250.500243][T15404] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 250.529337][T15404] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 250.542910][T15404] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.551739][T15404] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.560529][T15404] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.569354][T15404] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.633326][T15615] veth0_to_hsr: entered promiscuous mode [ 250.639269][T15615] veth0_to_hsr: entered allmulticast mode [ 250.803272][T15637] loop7: detected capacity change from 0 to 1024 [ 250.813940][T15637] EXT4-fs: dax option not supported [ 250.970949][T15660] loop7: detected capacity change from 0 to 512 [ 250.987399][T15660] EXT4-fs: Ignoring removed bh option [ 251.007714][ T29] audit: type=1400 audit(1753424299.187:1281): avc: denied { bind } for pid=15662 comm="syz.6.4676" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 251.032523][T15660] EXT4-fs (loop7): feature flags set on rev 0 fs, running e2fsck is recommended [ 251.041767][T15660] EXT4-fs (loop7): mounting ext2 file system using the ext4 subsystem [ 251.063831][T15660] EXT4-fs (loop7): warning: mounting unchecked fs, running e2fsck is recommended [ 251.074982][T15660] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006] [ 251.083901][T15660] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 251.097793][ T29] audit: type=1400 audit(1753424299.287:1282): avc: denied { watch } for pid=15655 comm="syz.7.4675" path="/4/file0" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 251.129684][T15404] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 251.263698][T15677] loop7: detected capacity change from 0 to 1024 [ 251.275071][T15677] EXT4-fs: dax option not supported [ 251.332584][T15599] veth0_to_hsr: left allmulticast mode [ 251.338288][T15599] veth0_to_hsr: left promiscuous mode [ 251.612031][T15713] loop7: detected capacity change from 0 to 1024 [ 251.634752][T15713] EXT4-fs: dax option not supported [ 251.722208][ T29] audit: type=1400 audit(1753424299.907:1283): avc: denied { getopt } for pid=15720 comm="syz.3.4702" lport=53258 faddr=::ffff:100.1.1.0 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 254.130510][T15814] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4741'. [ 254.213468][T15815] loop7: detected capacity change from 0 to 512 [ 254.243095][T15815] EXT4-fs (loop7): mounting ext3 file system using the ext4 subsystem [ 254.380596][T15815] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c118, mo2=0002] [ 254.422651][T15815] EXT4-fs error (device loop7): ext4_iget_extra_inode:5035: inode #15: comm syz.7.4740: corrupted in-inode xattr: e_value size too large [ 254.507816][T15815] EXT4-fs error (device loop7): ext4_orphan_get:1398: comm syz.7.4740: couldn't read orphan inode 15 (err -117) [ 254.568593][T15815] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 255.224813][T15404] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 255.363107][T15851] loop7: detected capacity change from 0 to 512 [ 255.384860][T15851] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 255.413857][T15851] ext4 filesystem being mounted at /23/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 255.433841][T15857] batadv_slave_1: entered promiscuous mode [ 255.441774][ T29] audit: type=1400 audit(1753424303.637:1284): avc: denied { append } for pid=15850 comm="syz.7.4754" name="file1" dev="loop7" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 255.470091][T15856] batadv_slave_1: left promiscuous mode [ 255.499241][T15404] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 255.676651][ T29] audit: type=1326 audit(1753424303.867:1285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15873 comm="syz.6.4765" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ffba6c5e9a9 code=0x0 [ 256.328520][T15955] loop7: detected capacity change from 0 to 1024 [ 256.351382][T15955] EXT4-fs: dax option not supported [ 256.541711][ T29] audit: type=1400 audit(1753424304.727:1286): avc: denied { read } for pid=15961 comm="syz.7.4803" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 257.143213][ T29] audit: type=1400 audit(1753424305.327:1287): avc: denied { bind } for pid=15990 comm="syz.3.4817" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 257.266215][T16006] loop7: detected capacity change from 0 to 512 [ 257.287994][T16006] EXT4-fs warning (device loop7): read_mmp_block:115: Error -117 while reading MMP block 24 [ 258.389589][ T29] audit: type=1400 audit(1753424306.577:1288): avc: denied { sqpoll } for pid=16048 comm="syz.6.4839" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 258.676092][ T29] audit: type=1400 audit(1753424306.857:1289): avc: denied { map } for pid=16089 comm="syz.7.4857" path="socket:[43595]" dev="sockfs" ino=43595 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 259.143907][T16149] loop7: detected capacity change from 0 to 512 [ 259.172375][T16149] EXT4-fs error (device loop7): ext4_orphan_get:1393: inode #15: comm syz.7.4885: iget: bad i_size value: 38620345925642 [ 259.189597][T16149] EXT4-fs error (device loop7): ext4_orphan_get:1398: comm syz.7.4885: couldn't read orphan inode 15 (err -117) [ 259.202277][T16149] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 259.218857][T16149] EXT4-fs error (device loop7): ext4_lookup:1787: inode #15: comm syz.7.4885: iget: bad i_size value: 38620345925642 [ 259.231832][T16149] EXT4-fs error (device loop7): ext4_lookup:1787: inode #15: comm syz.7.4885: iget: bad i_size value: 38620345925642 [ 259.254717][T15404] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 259.339918][T16173] loop7: detected capacity change from 0 to 512 [ 259.497666][T16186] bridge0: port 3(syz_tun) entered blocking state [ 259.504199][T16186] bridge0: port 3(syz_tun) entered forwarding state [ 259.541946][T16186] 8021q: adding VLAN 0 to HW filter on device bond0 [ 259.550377][T16186] 8021q: adding VLAN 0 to HW filter on device team0 [ 259.564717][T16186] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 259.583711][T16194] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4905'. [ 260.119637][ T29] audit: type=1400 audit(1753424308.307:1290): avc: denied { write } for pid=2959 comm="kworker/0:2" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=44571 scontext=system_u:system_r:kernel_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 260.173766][ T29] audit: type=1400 audit(1753424308.347:1291): avc: denied { accept } for pid=16249 comm="syz.3.4924" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 260.599711][T16276] loop7: detected capacity change from 0 to 1024 [ 260.655265][T16276] EXT4-fs: inline encryption not supported [ 260.661198][T16276] EXT4-fs: Ignoring removed i_version option [ 260.912903][T16276] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 261.138426][T15404] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 261.199186][ T29] audit: type=1400 audit(1753424309.387:1292): avc: denied { bind } for pid=16301 comm="syz.6.4945" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 261.219606][ T29] audit: type=1400 audit(1753424309.387:1293): avc: denied { name_bind } for pid=16301 comm="syz.6.4945" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 261.240642][ T29] audit: type=1400 audit(1753424309.387:1294): avc: denied { node_bind } for pid=16301 comm="syz.6.4945" saddr=::1 src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 261.351838][T16316] loop7: detected capacity change from 0 to 512 [ 261.393603][T16316] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 261.406567][T16316] ext4 filesystem being mounted at /87/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 261.698197][ T29] audit: type=1400 audit(1753424309.887:1295): avc: denied { remount } for pid=16351 comm="syz.3.4951" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 261.936833][T15404] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 261.983271][T16373] sch_tbf: burst 0 is lower than device veth0_to_bridge mtu (1514) ! [ 262.052112][T16386] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 262.177704][ T29] audit: type=1326 audit(1753424310.367:1296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16398 comm="syz.7.4972" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f46235ae9a9 code=0x0 [ 262.439620][ T29] audit: type=1400 audit(1753424310.627:1297): avc: denied { execute } for pid=16424 comm="syz.1.4977" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=44678 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 262.755016][T16466] 9pnet_fd: Insufficient options for proto=fd [ 262.942954][T16499] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5002'. [ 262.952740][T16499] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5002'. [ 262.962134][T16499] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5002'. [ 262.971526][T16499] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5002'. [ 263.064540][ T29] audit: type=1400 audit(1753424311.247:1298): avc: denied { ioctl } for pid=16512 comm="syz.6.5013" path="socket:[45090]" dev="sockfs" ino=45090 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 263.087314][T16515] loop7: detected capacity change from 0 to 512 [ 263.105893][T16515] EXT4-fs (loop7): mounting ext3 file system using the ext4 subsystem [ 263.121923][T16515] EXT4-fs (loop7): invalid journal inode [ 263.130016][T16515] EXT4-fs (loop7): can't get journal size [ 263.156580][T16515] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e056c118, mo2=0002] [ 263.165227][T16515] System zones: 1-12, 13-13 [ 263.170597][T16515] EXT4-fs (loop7): 1 truncate cleaned up [ 263.180346][T16515] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 263.234227][T15404] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 263.492088][T16553] syz.7.5030 (16553) used greatest stack depth: 9432 bytes left [ 267.782814][T16737] netlink: 36 bytes leftover after parsing attributes in process `syz.3.5094'. [ 267.791992][T16737] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5094'. [ 267.801807][T16737] netlink: 36 bytes leftover after parsing attributes in process `syz.3.5094'. [ 267.860907][T16737] netlink: 36 bytes leftover after parsing attributes in process `syz.3.5094'. [ 267.992323][T16748] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1280) ! [ 268.042092][T16752] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5098'. [ 268.872174][T16778] lo speed is unknown, defaulting to 1000 [ 268.924968][T16781] $H: renamed from bond0 (while UP) [ 268.943845][T16783] netlink: 132 bytes leftover after parsing attributes in process `syz.6.5108'. [ 268.968459][T16781] $H: entered promiscuous mode [ 268.973536][T16781] bond_slave_0: entered promiscuous mode [ 268.979488][T16781] bond_slave_1: entered promiscuous mode [ 269.339562][ T29] audit: type=1400 audit(1753424317.527:1299): avc: denied { shutdown } for pid=16795 comm="syz.2.5116" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 269.632864][T16811] netlink: 16 bytes leftover after parsing attributes in process `syz.6.5123'. [ 269.887959][T16828] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1280) ! [ 270.243381][T16844] loop7: detected capacity change from 0 to 1024 [ 270.348614][T16844] EXT4-fs: dax option not supported [ 271.600778][T16904] netlink: 132 bytes leftover after parsing attributes in process `syz.7.5155'. [ 271.921880][T16889] lo speed is unknown, defaulting to 1000 [ 272.670717][T16968] loop7: detected capacity change from 0 to 1024 [ 272.690186][T16968] EXT4-fs: dax option not supported [ 273.749351][T16997] $H: renamed from bond0 (while UP) [ 273.778006][T16997] $H: entered promiscuous mode [ 273.783108][T16997] bond_slave_0: entered promiscuous mode [ 273.788941][T16997] bond_slave_1: entered promiscuous mode [ 274.492490][T17050] $H: renamed from bond0 (while UP) [ 274.551782][T17050] $H: entered promiscuous mode [ 274.556955][T17050] bond_slave_0: entered promiscuous mode [ 274.562965][T17050] bond_slave_1: entered promiscuous mode [ 275.641798][T17091] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5209'. [ 275.704495][T17091] 8021q: adding VLAN 0 to HW filter on device bond1 [ 275.769529][T17098] vlan0: entered allmulticast mode [ 275.774708][T17098] bond1: entered allmulticast mode [ 276.353549][T17142] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5227'. [ 276.728304][T17155] bridge0: entered promiscuous mode [ 276.733639][T17155] macsec1: entered promiscuous mode [ 276.740166][T17155] bridge0: port 3(macsec1) entered blocking state [ 276.746801][T17155] bridge0: port 3(macsec1) entered disabled state [ 276.753461][T17155] macsec1: entered allmulticast mode [ 276.758873][T17155] bridge0: entered allmulticast mode [ 276.765164][T17155] macsec1: left allmulticast mode [ 276.770306][T17155] bridge0: left allmulticast mode [ 276.777519][T17155] bridge0: left promiscuous mode [ 277.685451][ T29] audit: type=1326 audit(1753424325.867:1300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17168 comm="syz.3.5238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6128be9a9 code=0x7ffc0000 [ 277.717672][T17169] SELinux: Context u:r:untrusted_app:s0:c512,c768 is not valid (left unmapped). [ 278.102767][ T29] audit: type=1326 audit(1753424325.907:1301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17168 comm="syz.3.5238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6128be9a9 code=0x7ffc0000 [ 278.126598][ T29] audit: type=1326 audit(1753424325.907:1302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17168 comm="syz.3.5238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=279 compat=0 ip=0x7fa6128be9a9 code=0x7ffc0000 [ 278.150355][ T29] audit: type=1326 audit(1753424325.907:1303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17168 comm="syz.3.5238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6128be9a9 code=0x7ffc0000 [ 278.174002][ T29] audit: type=1326 audit(1753424325.907:1304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17168 comm="syz.3.5238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6128be9a9 code=0x7ffc0000 [ 278.197530][ T29] audit: type=1326 audit(1753424325.907:1305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17168 comm="syz.3.5238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=189 compat=0 ip=0x7fa6128be9a9 code=0x7ffc0000 [ 278.221053][ T29] audit: type=1400 audit(1753424325.907:1306): avc: denied { mac_admin } for pid=17168 comm="syz.3.5238" capability=33 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 278.242212][ T29] audit: type=1400 audit(1753424325.917:1307): avc: denied { relabelto } for pid=17168 comm="syz.3.5238" name="451" dev="tmpfs" ino=2317 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="u:r:untrusted_app:s0:c512,c768" [ 278.268448][ T29] audit: type=1400 audit(1753424325.917:1308): avc: denied { associate } for pid=17168 comm="syz.3.5238" name="451" dev="tmpfs" ino=2317 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="u:r:untrusted_app:s0:c512,c768" [ 278.295814][ T29] audit: type=1326 audit(1753424326.057:1309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17168 comm="syz.3.5238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6128be9a9 code=0x7ffc0000 [ 278.696454][T17202] loop7: detected capacity change from 0 to 1024 [ 278.732026][T17202] EXT4-fs: dax option not supported [ 279.070315][T17211] netlink: 16 bytes leftover after parsing attributes in process `syz.6.5255'. [ 279.547036][T17242] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5267'. [ 279.563262][T17242] 8021q: adding VLAN 0 to HW filter on device bond0 [ 279.671533][T17242] vlan2: entered allmulticast mode [ 279.676753][T17242] bond0: entered allmulticast mode [ 280.009668][T17252] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5270'. [ 280.067429][T17252] hsr_slave_0 (unregistering): left promiscuous mode [ 280.110514][T17258] netlink: 'syz.7.5273': attribute type 1 has an invalid length. [ 280.130291][T17258] 8021q: adding VLAN 0 to HW filter on device bond0 [ 280.169667][T17258] vhci_hcd: invalid port number 96 [ 280.174907][T17258] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 280.192074][T17258] bond0: (slave veth3): Enslaving as an active interface with a down link [ 280.457149][T17277] netlink: 132 bytes leftover after parsing attributes in process `syz.1.5279'. [ 280.471594][T17278] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5280'. [ 280.517707][T17278] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5280'. [ 280.560832][T17274] lo speed is unknown, defaulting to 1000 [ 281.735963][T17330] netlink: 'syz.7.5300': attribute type 1 has an invalid length. [ 281.781547][T17330] 8021q: adding VLAN 0 to HW filter on device bond1 [ 281.878512][T17326] vhci_hcd: invalid port number 96 [ 281.883692][T17326] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 281.916684][T17326] bond1: (slave veth5): Enslaving as an active interface with a down link [ 281.950909][T17326] vlan2: entered allmulticast mode [ 281.956109][T17326] veth1: entered allmulticast mode [ 282.324364][T17346] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5306'. [ 282.908625][T17362] netlink: 36 bytes leftover after parsing attributes in process `syz.7.5312'. [ 282.944186][T17362] hsr_slave_0 (unregistering): left promiscuous mode [ 283.073403][T17368] netlink: 'syz.2.5315': attribute type 1 has an invalid length. [ 283.145904][T17368] 8021q: adding VLAN 0 to HW filter on device bond1 [ 283.208811][T17376] 9pnet: p9_errstr2errno: server reported unknown error @0x0000000000000005 [ 283.222188][T17377] bond1: (slave veth3): Enslaving as an active interface with a down link [ 283.241742][T17368] vlan2: entered allmulticast mode [ 283.246977][T17368] veth1: entered allmulticast mode [ 283.256684][ T29] kauditd_printk_skb: 148 callbacks suppressed [ 283.256696][ T29] audit: type=1326 audit(1753424331.437:1458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17378 comm="syz.3.5318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6128be9a9 code=0x7ffc0000 [ 283.287284][ T29] audit: type=1326 audit(1753424331.437:1459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17378 comm="syz.3.5318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6128be9a9 code=0x7ffc0000 [ 283.310990][ T29] audit: type=1326 audit(1753424331.437:1460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17378 comm="syz.3.5318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa6128be9a9 code=0x7ffc0000 [ 283.335156][ T29] audit: type=1326 audit(1753424331.437:1461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17378 comm="syz.3.5318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6128be9a9 code=0x7ffc0000 [ 283.359372][ T29] audit: type=1326 audit(1753424331.437:1462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17378 comm="syz.3.5318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa6128be9a9 code=0x7ffc0000 [ 283.382920][ T29] audit: type=1326 audit(1753424331.437:1463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17378 comm="syz.3.5318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6128be9a9 code=0x7ffc0000 [ 283.407211][ T29] audit: type=1326 audit(1753424331.447:1464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17378 comm="syz.3.5318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa6128be9a9 code=0x7ffc0000 [ 283.607975][ T29] audit: type=1326 audit(1753424331.447:1465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17378 comm="syz.3.5318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6128be9a9 code=0x7ffc0000 [ 283.631724][ T29] audit: type=1326 audit(1753424331.447:1466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17378 comm="syz.3.5318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fa6128bd45f code=0x7ffc0000 [ 283.655153][ T29] audit: type=1326 audit(1753424331.447:1467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17378 comm="syz.3.5318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6128be9a9 code=0x7ffc0000 [ 283.719858][T17391] syz.2.5323 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 283.830609][T10933] ================================================================== [ 283.838750][T10933] BUG: KCSAN: data-race in shmem_add_to_page_cache / shmem_getattr [ 283.846699][T10933] [ 283.849045][T10933] read-write to 0xffff88811b2896a0 of 8 bytes by task 17389 on cpu 0: [ 283.857237][T10933] shmem_add_to_page_cache+0x37f/0x490 [ 283.862734][T10933] shmem_get_folio_gfp+0x4e8/0xd60 [ 283.867869][T10933] shmem_write_begin+0xa8/0x190 [ 283.872754][T10933] generic_perform_write+0x181/0x490 [ 283.878077][T10933] shmem_file_write_iter+0xc5/0xf0 [ 283.883308][T10933] __kernel_write_iter+0x253/0x4c0 [ 283.888476][T10933] dump_user_range+0x407/0x8c0 [ 283.893277][T10933] elf_core_dump+0x1dc2/0x1f80 [ 283.898067][T10933] do_coredump+0x1dfa/0x27b0 [ 283.902695][T10933] get_signal+0xd85/0xf70 [ 283.907067][T10933] arch_do_signal_or_restart+0x96/0x480 [ 283.912723][T10933] irqentry_exit_to_user_mode+0x5e/0xa0 [ 283.918325][T10933] irqentry_exit+0x12/0x50 [ 283.922800][T10933] asm_exc_page_fault+0x26/0x30 [ 283.927681][T10933] [ 283.930028][T10933] read to 0xffff88811b2896a0 of 8 bytes by task 10933 on cpu 1: [ 283.937676][T10933] shmem_getattr+0x68/0x200 [ 283.942196][T10933] vfs_getattr_nosec+0x146/0x1e0 [ 283.947159][T10933] vfs_statx+0x113/0x390 [ 283.951429][T10933] vfs_fstatat+0x115/0x170 [ 283.955866][T10933] __se_sys_newfstatat+0x55/0x260 [ 283.960921][T10933] __x64_sys_newfstatat+0x55/0x70 [ 283.965970][T10933] x64_sys_call+0x2c22/0x2fb0 [ 283.970673][T10933] do_syscall_64+0xd2/0x200 [ 283.975200][T10933] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 283.981128][T10933] [ 283.983467][T10933] value changed: 0x0000000000001c0a -> 0x0000000000001c0d [ 283.990610][T10933] [ 283.992945][T10933] Reported by Kernel Concurrency Sanitizer on: [ 283.999136][T10933] CPU: 1 UID: 0 PID: 10933 Comm: syz-executor Not tainted 6.16.0-rc7-syzkaller-00093-g94ce1ac2c9b4 #0 PREEMPT(voluntary) [ 284.011931][T10933] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 284.022033][T10933] ================================================================== [ 284.159554][T17401] netlink: 256 bytes leftover after parsing attributes in process `syz.7.5328'.