last executing test programs: 4.941086911s ago: executing program 0 (id=662): socket$packet(0x11, 0x3, 0x300) r0 = socket$packet(0x11, 0x2, 0x300) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="180800000000010000000000000000008510000006", @ANYBLOB], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x8}, 0x94) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x0, 0x0}, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYRES8], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sys_enter\x00', r1, 0x0, 0x2}, 0x18) r3 = epoll_create1(0x0) syz_open_dev$usbfs(&(0x7f0000000140), 0x1, 0x222040) epoll_wait(r3, &(0x7f00000014c0)=[{}, {}], 0x2, 0x6) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f0000000040)=[{0x200000000006, 0xfc, 0x0, 0x7ffc0002}]}) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000016c0)={0x0, 0x8, 0x0, &(0x7f0000000100)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000280)='bcache_alloc\x00', r4}, 0x18) mlock2(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) sendmmsg$inet(r3, &(0x7f0000000100)=[{{&(0x7f00000004c0)={0x2, 0x4e24, @multicast1}, 0x10, 0x0}}], 0x1, 0x2000c044) sendto$inet(r2, 0x0, 0x0, 0x12000000, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext3\x00', &(0x7f00000001c0)='./file0\x00', 0x22681e, &(0x7f00000003c0), 0x5, 0x527, &(0x7f0000001780)="$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") setxattr$security_capability(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240), &(0x7f00000002c0)=@v2={0x2000000, [{0x8001, 0x6}, {0x4, 0x9}]}, 0x14, 0x1) syz_io_uring_setup(0xbda, &(0x7f0000000080)={0x0, 0x356e, 0x101, 0x1, 0x37a}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) shmctl$IPC_RMID(0x0, 0x0) 4.812817496s ago: executing program 0 (id=668): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000050b6850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0xb, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0, 0x0, 0x80}, 0x18) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x41, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kmem_cache_free\x00', r2, 0x0, 0xf7}, 0x18) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r4, 0x0, 0xf3a, 0x0) ioctl$int_in(r4, 0x5452, &(0x7f0000000240)=0x1) 2.148231739s ago: executing program 3 (id=727): socket$packet(0x11, 0x3, 0x300) r0 = socket$packet(0x11, 0x2, 0x300) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="180800000000010000000000000000008510000006", @ANYBLOB], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x8}, 0x94) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x0, 0x0}, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYRES8], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sys_enter\x00', r1, 0x0, 0x2}, 0x18) r3 = epoll_create1(0x0) syz_open_dev$usbfs(&(0x7f0000000140), 0x1, 0x222040) epoll_wait(r3, &(0x7f00000014c0)=[{}, {}], 0x2, 0x6) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f0000000040)=[{0x200000000006, 0xfc, 0x0, 0x7ffc0002}]}) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000016c0)={0x0, 0x8, 0x0, &(0x7f0000000100)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000280)='bcache_alloc\x00', r4}, 0x18) mlock2(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) sendmmsg$inet(r3, &(0x7f0000000100)=[{{&(0x7f00000004c0)={0x2, 0x4e24, @multicast1}, 0x10, 0x0}}], 0x1, 0x2000c044) sendto$inet(r2, &(0x7f0000000c80), 0x0, 0x12000000, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext3\x00', &(0x7f00000001c0)='./file0\x00', 0x22681e, &(0x7f00000003c0), 0x5, 0x527, &(0x7f0000001780)="$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") setxattr$security_capability(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240), &(0x7f00000002c0)=@v2={0x2000000, [{0x8001, 0x6}, {0x4, 0x9}]}, 0x14, 0x1) syz_io_uring_setup(0xbda, &(0x7f0000000080)={0x0, 0x356e, 0x101, 0x1, 0x37a}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) shmctl$IPC_RMID(0x0, 0x0) 2.054154343s ago: executing program 2 (id=728): mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffcfffffa, 0x4031, 0xffffffffffffffff, 0x41d1000) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x420008}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x18, 0x140b, 0x1, 0x70bd27, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}]}, 0x18}, 0x1, 0x0, 0x0, 0x4800}, 0x4040000) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f00000017c0)='./file1\x00', 0x10042, &(0x7f0000000000), 0x1, 0xb80, &(0x7f0000001800)="$eJzs3MtrXFUYAPDv3jyaNrGTiqgtggGpFcVp2hSFrlrXooIuuuyYTErI9GEmggldpHWvLkRcFKR/guDeunAluKgLrX9BEYsU3bQuInce6dBkktjO9PTx+8GZe86c6XzfN5fOPQfmJoAn1kTxkEfsjYiTWUSp9XweEcON3kjESvN1t2+eny5aFqur7/+VRRYRt26en26/V9Y6jrYGIxFx9a0snv50fdz60vJ8pVarLrTGBxdPnztYX1p+fe505VT1VPXMkak3j0y9MTXVw1qvn/vw6xd+eefli5c/m3z3q90/ZXEsxlpznXX0ykRMrH0mnQYjotLrYIkMtOrprDMbTJgQAACbyjvWcM9GKQbizuKtFD/+mjQ5AAAAoCdWByJWAQAAgMdcZv8PAAAAj7n27wBu3Tw/3W5pf5HwYN04HhHjzfrb9zc3ZwZjpXEciaGI2PV3Fp23tWbNf3bfJopI3/1cLVr06T7kzaxciIjnNzr/WaP+8cZd3OvrzyNisgfxJ+4aP0r1H+tB/NT1A/BkunK8eSFbf/3L19Y/scH1b3CDa9e9SH39a6//bq9b/92pf6DL+u+9bcbY9++rV7vNda7/Tnz++0wRvzjeV1H/w40LEfsGN6o/W6s/61L/yW3GGJ2+fqnbXFF/UW+7Pej6Vy9H7I+N62/LNvv7RAdn52rVyeZjlxj7fzhxoFv8zvNftCJ+ey/wIBTnf1eX+rc6/+e2GWP8uT/3dpvbuv78j+Hsg0ZvuPXMJ5XFxYVDEcPZ2+ufP7x5Lu3XtN+jqP+Vlzb//79R/cV3wkrrcyj2Ahdax2J88a6Yo/sPf3vv9fdXUf/MPZ7/L7YZ45vvL33UbS51/QAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8GvKIGIssL6/187xcjhiNiGdiV147W198bfbsx2dmirmI8RjKZ+dq1cmIKDXHWTE+1OjfGR++azwVEXsi4svSzsa4PH22NpO6eAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANaMRsRYZHk5IvKI+KeU5+Vy6qwAAACAnhtPnQAAAADQd/b/AAAA8Piz/wcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKDP9rx45VoWEStHdzZaYbg1N5Q0M6Df8tQJAMkMpE4ASGYwdQJAMvb4QLbF/EjXmR09zwUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAh9eBvVeuZRGxcnRnoxWGW3NDSTMD+i1PnQCQzEDqBIBkBlMnACRjjw9kW8yPdJ3Z0fNcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHh4jTValpcjIm/087xcjngqIsZjKJudq1UnI2J3RPxWGtpRjA+lThoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAICeqy8tz1dqteqCjo6Ozlon9TcTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAp1JeW5yu1WnWhnjoTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAILX60vJ8pVarLvSxk7pGAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADS+S8AAP//szUGGQ==") r1 = open(&(0x7f0000000140)='./file1\x00', 0x64042, 0x1e9) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=@setlink={0x3c, 0x13, 0x1, 0x4, 0x0, {}, [@IFLA_MASTER={0x8, 0xa, r5}, @IFLA_ALT_IFNAME={0x14, 0x35, 'dummy0\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8004010}, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000a00)=ANY=[@ANYBLOB="180100000700002c0000000000000004850000002a00000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80001}, 0x94) r7 = socket(0x28, 0x1, 0x0) r8 = syz_io_uring_setup(0x4f6, &(0x7f0000000380)={0x0, 0xc81d, 0x10, 0x4, 0x2cf}, &(0x7f0000000300)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r9, r10, &(0x7f0000000140)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r7, 0x80, &(0x7f00000001c0)=@vsock={0x28, 0x0, 0xffffffff, @host}, 0x0, 0x0, 0x1}) io_uring_enter(r8, 0x47b2, 0x10f9, 0x82, 0x0, 0x48) r11 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r11, 0x20, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x2, 0x2, &(0x7f0000000000)=@raw=[@btf_id={0x18, 0x6, 0x3, 0x0, 0x3}], 0x0, 0x7, 0x0, 0x0, 0x41100, 0x11, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r12, r6, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) r13 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000340), 0x80000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0xa57e04f7afd3d146, 0x1, &(0x7f00000001c0)=@raw=[@ldst={0x3, 0x0, 0x6, 0x9, 0x5, 0x50, 0xfffffffffffffffc}], &(0x7f0000000200)='syzkaller\x00', 0xfff, 0x45, &(0x7f0000000280)=""/69, 0x40f00, 0xc5fac2c4c7ea4bb1, '\x00', r5, @fallback=0x17, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x2, 0x5}, 0x8, 0x10, 0x0, 0x0, r12, r2, 0x3, &(0x7f0000000380)=[r1, r13, r1], &(0x7f00000003c0)=[{0x3, 0x5, 0x7, 0x1}, {0x5, 0x4, 0xc, 0x7}, {0x3, 0x2, 0xd, 0x4}], 0x10, 0x3}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) pwritev2(r1, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x2000, 0x0, 0x3) 1.913372299s ago: executing program 3 (id=729): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000050b6850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0xb, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0, 0x0, 0x80}, 0x18) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x41, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kmem_cache_free\x00', r2, 0x0, 0xf7}, 0x18) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r5, 0x0, 0xf3a, 0x0) ioctl$int_in(r5, 0x5452, &(0x7f0000000240)=0x1) ioctl$int_in(r5, 0x5452, &(0x7f0000000000)=0x10001) write(r3, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') socket$inet6_sctp(0xa, 0x5, 0x84) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r6, 0xffffffffffffffff, 0x0) 1.714143527s ago: executing program 0 (id=730): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r0}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='rxrpc_rtt_rx\x00'}, 0x18) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x18, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='page_pool_release\x00', r1}, 0x10) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) set_mempolicy(0x4000, &(0x7f0000000080)=0x1, 0x32c) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x8, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2, 0x0, 0x3}, 0x18) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0xdc}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace$getregset(0x4205, r3, 0x202, &(0x7f0000000240)={&(0x7f0000000180)=""/120, 0xffffffffffffff28}) 1.713740367s ago: executing program 0 (id=731): getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, 0x0, &(0x7f0000000140)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000cc0)=@bpf_ext={0x1c, 0x28, 0x0, 0x0, 0xb6, 0x0, 0x0, 0x41000, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x19b28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) quotactl$Q_SETQUOTA(0xffffffff80000800, &(0x7f0000000100)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000280)={0x7, 0x806, 0x800077, 0x20800000000412, 0x6, 0xfffffffffffffffd, 0x1000, 0xf67, 0xfffffffc}) lchown(&(0x7f0000000080)='./file1\x00', 0xee01, 0xffffffffffffffff) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r0 = creat(&(0x7f0000001940)='./file0/file1\x00', 0x90) write$cgroup_type(r0, &(0x7f00000009c0), 0xd4ba0ff) unlink(&(0x7f0000000100)='./file0/file1\x00') rmdir(&(0x7f0000000000)='./file0\x00') 1.616840172s ago: executing program 2 (id=734): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001540)={&(0x7f0000000240)=ANY=[], 0x124}}, 0x0) 1.560022704s ago: executing program 3 (id=735): sendmsg$NFT_MSG_GETOBJ(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000f40)=@raw={'raw\x00', 0x8, 0x3, 0x478, 0x1c0, 0xffffffff, 0xffffffff, 0x1c0, 0xffffffff, 0x3a8, 0xffffffff, 0xffffffff, 0x3a8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@remote, @loopback, [0xff, 0x0, 0xff, 0xff], [0xffffffff, 0xff, 0xff], 'team_slave_0\x00', 'netdevsim0\x00', {}, {0xff}, 0x29, 0x3, 0x0, 0x60}, 0x0, 0x1a0, 0x1c0, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x9, 0x2, 0x24, 0x0, 'syz0\x00'}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x1c8, 0x1e8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x1000000, 0x1, 0x1, 'syz0\x00', 0xfe}}, @common=@mh={{0x28}, {"b11c", 0x1}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) 1.530930355s ago: executing program 3 (id=736): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000000)='GPL\x00', 0xffffffff, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000380), 0x440, 0x0) getpgid(0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0xffffffffffffffff}, 0x18) pipe(&(0x7f0000005880)) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='kfree\x00', r3}, 0x18) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000100010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a31000000002c0003800800014000000000180003801400010076657468315f746f5f626f6e6400000008000240000000006c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000004000038008000140000000002c0003801400010067656e657665300000000000000000001400010076657468315f746f5f626f6e64000000080002"], 0x10c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'veth0_macvtap\x00', 0x0}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000400)='io_uring_create\x00', r7}, 0x18) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000400)='io_uring_create\x00', r8}, 0x18) syz_io_uring_setup(0x496, &(0x7f0000000940)={0x0, 0x422e, 0x800, 0x3, 0xac}, &(0x7f0000000080), &(0x7f0000000400)) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x200, {0x0, 0x0, 0x0, r5, {0xfff2, 0x9}, {0x10}, {0x9, 0xd}}}, 0x24}, 0x1, 0x0, 0x0, 0xc0}, 0x0) r9 = socket$inet_udp(0x2, 0x2, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @random, @void, {@ipv4={0x800, @tcp={{0xa, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x6, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0xd}, {[@lsrr={0x83, 0x7, 0xd7, [@multicast2]}, @timestamp={0x44, 0x4, 0x5, 0x3}, @cipso={0x86, 0x6}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) setsockopt$SO_ATTACH_FILTER(r9, 0x1, 0x4a, &(0x7f00000a2000)={0x0, 0x0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0900000004000000e27f00000100000002000000", @ANYRES32, @ANYBLOB="00000000000000e20000000000000040008008d9", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) 1.483833547s ago: executing program 2 (id=737): bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000000)='GPL\x00', 0xffffffff, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000380), 0x440, 0x0) r0 = getpgid(0x0) prlimit64(r0, 0x5, 0x0, 0x0) pipe(&(0x7f0000005880)) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='kfree\x00', r3}, 0x18) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000100010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a31000000002c0003800800014000000000180003801400010076657468315f746f5f626f6e6400000008000240000000006c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000004000038008000140000000002c0003801400010067656e657665300000000000000000001400010076657468315f746f5f626f6e64000000080002"], 0x10c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'veth0_macvtap\x00', 0x0}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000400)='io_uring_create\x00', r7}, 0x18) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000400)='io_uring_create\x00', r8}, 0x18) syz_io_uring_setup(0x496, &(0x7f0000000940)={0x0, 0x422e, 0x800, 0x3, 0xac}, &(0x7f0000000080), &(0x7f0000000400)) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x200, {0x0, 0x0, 0x0, r5, {0xfff2, 0x9}, {0x10}, {0x9, 0xd}}}, 0x24}, 0x1, 0x0, 0x0, 0xc0}, 0x0) r9 = socket$inet_udp(0x2, 0x2, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @random, @void, {@ipv4={0x800, @tcp={{0xa, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x6, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0xd}, {[@lsrr={0x83, 0x7, 0xd7, [@multicast2]}, @timestamp={0x44, 0x4, 0x5, 0x3}, @cipso={0x86, 0x6}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) setsockopt$SO_ATTACH_FILTER(r9, 0x1, 0x4a, &(0x7f00000a2000)={0x0, 0x0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0900000004000000e27f00000100000002000000", @ANYRES32, @ANYBLOB="00000000000000e20000000000000040008008d9", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) 1.202870789s ago: executing program 1 (id=739): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r1}, &(0x7f0000000000), &(0x7f00000005c0)=r2}, 0x20) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0xc, 0x4, 0x2f0, 0xffffffff, 0xd0, 0xd0, 0x178, 0x98, 0xffffffff, 0x258, 0x258, 0x258, 0x98, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @local, 0x1, 0x2, [0x35, 0x33, 0xb, 0xb, 0x25, 0x9, 0x2c, 0x40, 0x11, 0x26, 0x39, 0x20, 0x0, 0xd, 0x3, 0x39], 0x0, 0x440, 0x8000}}}, {{@uncond, 0x0, 0x70, 0xa8}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff, 0x1, 0x1}, {0x3, 0x0, 0x6}, {0x2, 0x5, 0x1}, 0x94ee, 0x8001}}}, {{@ip={@local, @broadcast, 0x0, 0x0, 'veth0_macvtap\x00', 'macvlan1\x00'}, 0x0, 0xb0, 0xe0, 0x0, {}, [@common=@set={{0x40}, {{0x4, [0x1, 0x1, 0x2, 0x0, 0x2, 0x2], 0x3, 0x6}}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xffffffffffffffff, 0x3, 0x2}, {0x4, 0x5, 0x1}, 0x9, 0x3}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x350) 1.170155221s ago: executing program 0 (id=740): mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffcfffffa, 0x4031, 0xffffffffffffffff, 0x41d1000) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x420008}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x18, 0x140b, 0x1, 0x70bd27, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}]}, 0x18}, 0x1, 0x0, 0x0, 0x4800}, 0x4040000) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f00000017c0)='./file1\x00', 0x10042, &(0x7f0000000000), 0x1, 0xb80, &(0x7f0000001800)="$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") r1 = open(&(0x7f0000000140)='./file1\x00', 0x64042, 0x1e9) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=@setlink={0x3c, 0x13, 0x1, 0x4, 0x0, {}, [@IFLA_MASTER={0x8, 0xa, r5}, @IFLA_ALT_IFNAME={0x14, 0x35, 'dummy0\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8004010}, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000a00)=ANY=[@ANYBLOB="180100000700002c0000000000000004850000002a00000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80001}, 0x94) r7 = socket(0x28, 0x1, 0x0) syz_io_uring_setup(0x4f6, &(0x7f0000000380)={0x0, 0xc81d, 0x10, 0x4, 0x2cf}, &(0x7f0000000300)=0x0, &(0x7f00000002c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f0000000140)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r7, 0x80, &(0x7f00000001c0)=@vsock={0x28, 0x0, 0xffffffff, @host}, 0x0, 0x0, 0x1}) r10 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r10, 0x20, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x2, 0x2, &(0x7f0000000000)=@raw=[@btf_id={0x18, 0x6, 0x3, 0x0, 0x3}], 0x0, 0x7, 0x0, 0x0, 0x41100, 0x11, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r11, r6, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) r12 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000340), 0x80000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0xa57e04f7afd3d146, 0x1, &(0x7f00000001c0)=@raw=[@ldst={0x3, 0x0, 0x6, 0x9, 0x5, 0x50, 0xfffffffffffffffc}], &(0x7f0000000200)='syzkaller\x00', 0xfff, 0x45, &(0x7f0000000280)=""/69, 0x40f00, 0xc5fac2c4c7ea4bb1, '\x00', r5, @fallback=0x17, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x2, 0x5}, 0x8, 0x10, 0x0, 0x0, r11, r2, 0x3, &(0x7f0000000380)=[r1, r12, r1], &(0x7f00000003c0)=[{0x3, 0x5, 0x7, 0x1}, {0x5, 0x4, 0xc, 0x7}, {0x3, 0x2, 0xd, 0x4}], 0x10, 0x3}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) pwritev2(r1, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x2000, 0x0, 0x3) 1.070136505s ago: executing program 1 (id=741): mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffcfffffa, 0x4031, 0xffffffffffffffff, 0x41d1000) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x420008}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x18, 0x140b, 0x1, 0x70bd27, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}]}, 0x18}, 0x1, 0x0, 0x0, 0x4800}, 0x4040000) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f00000017c0)='./file1\x00', 0x10042, &(0x7f0000000000), 0x1, 0xb80, &(0x7f0000001800)="$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") r1 = open(&(0x7f0000000140)='./file1\x00', 0x64042, 0x1e9) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=@setlink={0x3c, 0x13, 0x1, 0x4, 0x0, {}, [@IFLA_MASTER={0x8, 0xa, r5}, @IFLA_ALT_IFNAME={0x14, 0x35, 'dummy0\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8004010}, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000a00)=ANY=[@ANYBLOB="180100000700002c0000000000000004850000002a00000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80001}, 0x94) socket(0x28, 0x1, 0x0) r7 = syz_io_uring_setup(0x4f6, &(0x7f0000000380)={0x0, 0xc81d, 0x10, 0x4, 0x2cf}, &(0x7f0000000300)=0x0, &(0x7f00000002c0)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) io_uring_enter(r7, 0x47b2, 0x10f9, 0x82, 0x0, 0x48) r9 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r9, 0x20, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x2, 0x2, &(0x7f0000000000)=@raw=[@btf_id={0x18, 0x6, 0x3, 0x0, 0x3}], 0x0, 0x7, 0x0, 0x0, 0x41100, 0x11, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r10, r6, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) r11 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000340), 0x80000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0xa57e04f7afd3d146, 0x1, &(0x7f00000001c0)=@raw=[@ldst={0x3, 0x0, 0x6, 0x9, 0x5, 0x50, 0xfffffffffffffffc}], &(0x7f0000000200)='syzkaller\x00', 0xfff, 0x45, &(0x7f0000000280)=""/69, 0x40f00, 0xc5fac2c4c7ea4bb1, '\x00', r5, @fallback=0x17, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x2, 0x5}, 0x8, 0x10, 0x0, 0x0, r10, r2, 0x3, &(0x7f0000000380)=[r1, r11, r1], &(0x7f00000003c0)=[{0x3, 0x5, 0x7, 0x1}, {0x5, 0x4, 0xc, 0x7}, {0x3, 0x2, 0xd, 0x4}], 0x10, 0x3}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) pwritev2(r1, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x2000, 0x0, 0x3) 926.530941ms ago: executing program 0 (id=742): socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = timerfd_create(0x0, 0x0) readv(r1, &(0x7f00000009c0)=[{&(0x7f0000000200)=""/33, 0x21}], 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0700000004000000800000000400000028350400", @ANYRES32, @ANYRES8, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000ca2cd67e68054d8eb41c2b54cee873d8c92d1dfdafe71777839728ad5d6fb110d4065b38981c8d7cc2c200bce1f5e257c5cfbb2f02abf5350ed16a631324d6d8b981f0d1574890daaf690cb3605946c8cdf92ae3c65902b22f739029f1"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="92e26a9e0fb67d82180000000000000022000000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000001b000000b7000000000000009500000000000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000f00)='kfree\x00', r3}, 0x18) r4 = socket(0x10, 0xdc68cfeadf5a1277, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'gre0\x00', 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="400000001000210400"/20, @ANYRES32=r6, @ANYBLOB="00000000000001002000128008000100677265001400028006000f00ab00000006000e00005e"], 0x40}}, 0x90) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000000880)={{{@in6=@private0, @in=@empty}}, {{@in=@initdev}, 0x0, @in6=@empty}}, &(0x7f0000000040)=0xe8) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r4, 0x84, 0xa, &(0x7f00000001c0)={0x8, 0x0, 0x8203, 0xfffffffc, 0x0, 0xa, 0x8, 0x7f, 0x0}, &(0x7f0000000240)=0x20) openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='.\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r4, 0x84, 0xf, &(0x7f0000000380)={r8, @in6={{0xa, 0x4e21, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x400}}, 0x1, 0x6, 0x578, 0xfd, 0x9}, &(0x7f0000000300)=0x98) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) socket$nl_route(0x10, 0x3, 0x0) socket$kcm(0x11, 0xa, 0x300) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) syz_usbip_server_init(0x1) syz_usbip_server_init(0x1) 802.175337ms ago: executing program 1 (id=743): sync() bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848100000005e140602000000000e000a000f00000002", 0x29}], 0x1}, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000000400000004000000"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3fffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) r2 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000200)) openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x111001, 0x2) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000070080000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='mm_page_free\x00', r3, 0x0, 0x10000000ca38}, 0x18) setrlimit(0x9, &(0x7f0000000080)={0x8606, 0xffff}) io_setup(0x8f0, &(0x7f0000002400)) sendmsg$rds(r0, &(0x7f0000000580)={&(0x7f00000005c0)={0x2, 0x4, @rand_addr=0x64010101}, 0x10, 0x0, 0x0, &(0x7f00000004c0)=[@mask_fadd={0x58, 0x114, 0x8, {{0x4, 0xbed}, &(0x7f00000003c0)=0x9, &(0x7f0000000400)=0x2, 0xb694, 0x0, 0x6, 0xe, 0x4, 0x6}}], 0x58, 0x4000000}, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="300000001d"], 0x30}, 0x1, 0x0, 0x0, 0x44}, 0xc31fe084736598c) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4) 747.814248ms ago: executing program 4 (id=744): sync() bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848100000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x111001, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='mm_page_free\x00', 0xffffffffffffffff, 0x0, 0x10000000ca38}, 0x18) setrlimit(0x9, &(0x7f0000000080)={0x8606, 0xffff}) io_setup(0x8f0, &(0x7f0000002400)) sendmsg$rds(r0, &(0x7f0000000580)={&(0x7f00000005c0)={0x2, 0x4, @rand_addr=0x64010101}, 0x10, 0x0, 0x0, &(0x7f00000004c0)=[@mask_fadd={0x58, 0x114, 0x8, {{0x4, 0xbed}, &(0x7f00000003c0)=0x9, &(0x7f0000000400)=0x2, 0xb694, 0x0, 0x6, 0xe, 0x4, 0x6}}], 0x58, 0x4000000}, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="300000001d"], 0x30}, 0x1, 0x0, 0x0, 0x44}, 0xc31fe084736598c) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4) 655.531382ms ago: executing program 4 (id=745): mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffcfffffa, 0x4031, 0xffffffffffffffff, 0x41d1000) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x420008}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x18, 0x140b, 0x1, 0x70bd27, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}]}, 0x18}, 0x1, 0x0, 0x0, 0x4800}, 0x4040000) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f00000017c0)='./file1\x00', 0x10042, &(0x7f0000000000), 0x1, 0xb80, &(0x7f0000001800)="$eJzs3MtrXFUYAPDv3jyaNrGTiqgtggGpFcVp2hSFrlrXooIuuuyYTErI9GEmggldpHWvLkRcFKR/guDeunAluKgLrX9BEYsU3bQuInce6dBkktjO9PTx+8GZe86c6XzfN5fOPQfmJoAn1kTxkEfsjYiTWUSp9XweEcON3kjESvN1t2+eny5aFqur7/+VRRYRt26en26/V9Y6jrYGIxFx9a0snv50fdz60vJ8pVarLrTGBxdPnztYX1p+fe505VT1VPXMkak3j0y9MTXVw1qvn/vw6xd+eefli5c/m3z3q90/ZXEsxlpznXX0ykRMrH0mnQYjotLrYIkMtOrprDMbTJgQAACbyjvWcM9GKQbizuKtFD/+mjQ5AAAAoCdWByJWAQAAgMdcZv8PAAAAj7n27wBu3Tw/3W5pf5HwYN04HhHjzfrb9zc3ZwZjpXEciaGI2PV3Fp23tWbNf3bfJopI3/1cLVr06T7kzaxciIjnNzr/WaP+8cZd3OvrzyNisgfxJ+4aP0r1H+tB/NT1A/BkunK8eSFbf/3L19Y/scH1b3CDa9e9SH39a6//bq9b/92pf6DL+u+9bcbY9++rV7vNda7/Tnz++0wRvzjeV1H/w40LEfsGN6o/W6s/61L/yW3GGJ2+fqnbXFF/UW+7Pej6Vy9H7I+N62/LNvv7RAdn52rVyeZjlxj7fzhxoFv8zvNftCJ+ey/wIBTnf1eX+rc6/+e2GWP8uT/3dpvbuv78j+Hsg0ZvuPXMJ5XFxYVDEcPZ2+ufP7x5Lu3XtN+jqP+Vlzb//79R/cV3wkrrcyj2Ahdax2J88a6Yo/sPf3vv9fdXUf/MPZ7/L7YZ45vvL33UbS51/QAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8GvKIGIssL6/187xcjhiNiGdiV147W198bfbsx2dmirmI8RjKZ+dq1cmIKDXHWTE+1OjfGR++azwVEXsi4svSzsa4PH22NpO6eAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANaMRsRYZHk5IvKI+KeU5+Vy6qwAAACAnhtPnQAAAADQd/b/AAAA8Piz/wcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKDP9rx45VoWEStHdzZaYbg1N5Q0M6Df8tQJAMkMpE4ASGYwdQJAMvb4QLbF/EjXmR09zwUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAh9eBvVeuZRGxcnRnoxWGW3NDSTMD+i1PnQCQzEDqBIBkBlMnACRjjw9kW8yPdJ3Z0fNcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHh4jTValpcjIm/087xcjngqIsZjKJudq1UnI2J3RPxWGtpRjA+lThoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAICeqy8tz1dqteqCjo6Ozlon9TcTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAp1JeW5yu1WnWhnjoTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAILX60vJ8pVarLvSxk7pGAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADS+S8AAP//szUGGQ==") r1 = open(&(0x7f0000000140)='./file1\x00', 0x64042, 0x1e9) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=@setlink={0x3c, 0x13, 0x1, 0x4, 0x0, {}, [@IFLA_MASTER={0x8, 0xa, r5}, @IFLA_ALT_IFNAME={0x14, 0x35, 'dummy0\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8004010}, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000a00)=ANY=[@ANYBLOB="180100000700002c0000000000000004850000002a00000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80001}, 0x94) r7 = socket(0x28, 0x1, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r7, 0x80, &(0x7f00000001c0)=@vsock={0x28, 0x0, 0xffffffff, @host}, 0x0, 0x0, 0x1}) io_uring_enter(0xffffffffffffffff, 0x47b2, 0x10f9, 0x82, 0x0, 0x48) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r8, 0x20, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x2, 0x2, &(0x7f0000000000)=@raw=[@btf_id={0x18, 0x6, 0x3, 0x0, 0x3}], 0x0, 0x7, 0x0, 0x0, 0x41100, 0x11, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r9, r6, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) r10 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000340), 0x80000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0xa57e04f7afd3d146, 0x1, &(0x7f00000001c0)=@raw=[@ldst={0x3, 0x0, 0x6, 0x9, 0x5, 0x50, 0xfffffffffffffffc}], &(0x7f0000000200)='syzkaller\x00', 0xfff, 0x45, &(0x7f0000000280)=""/69, 0x40f00, 0xc5fac2c4c7ea4bb1, '\x00', r5, @fallback=0x17, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x2, 0x5}, 0x8, 0x10, 0x0, 0x0, r9, r2, 0x3, &(0x7f0000000380)=[r1, r10, r1], &(0x7f00000003c0)=[{0x3, 0x5, 0x7, 0x1}, {0x5, 0x4, 0xc, 0x7}, {0x3, 0x2, 0xd, 0x4}], 0x10, 0x3}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) pwritev2(r1, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x2000, 0x0, 0x3) 616.159175ms ago: executing program 1 (id=746): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000050b6850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0xb, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0, 0x0, 0x80}, 0x18) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x41, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kmem_cache_free\x00', r2, 0x0, 0xf7}, 0x18) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r5, 0x0, 0xf3a, 0x0) ioctl$int_in(r5, 0x5452, &(0x7f0000000240)=0x1) ioctl$int_in(r5, 0x5452, &(0x7f0000000000)=0x10001) write(r3, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') socket$inet6_sctp(0xa, 0x5, 0x84) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r6, 0xffffffffffffffff, 0x0) 537.171538ms ago: executing program 3 (id=747): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000130000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r0}, &(0x7f0000000280), &(0x7f00000002c0)=r1}, 0x20) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000540)='inet_sock_set_state\x00', r3}, 0x10) listen(r2, 0x5) 478.84807ms ago: executing program 3 (id=748): getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000280)='kmem_cache_free\x00', r0, 0x0, 0x200000000000006}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) kexec_load(0x0, 0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r2 = socket$netlink(0x10, 0x3, 0x0) sigaltstack(&(0x7f0000000400)={&(0x7f0000000640)=""/75, 0x80000000, 0x4b}, &(0x7f0000000740)={&(0x7f00000006c0)=""/121, 0x0, 0x79}) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) read(r1, &(0x7f0000000440)=""/247, 0x26) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f00000000c0)={0x31, @tick=0x40, 0x4, {0x0, 0x2}, 0xa, 0x0, 0x4}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x4058534c, &(0x7f0000000040)={0x7, 0x7, 0x6, 0x2, 0x3, 0x824b}) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r1, 0x80045300, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendto$unix(r3, &(0x7f0000000540)="1896d7236edfb216dee397ee16d6fe256f02c72fe4598171b27b52260a4d7263166f74a87f71d1b15991208eedddd582ba68bbdbe5a1f55593a464aaea925a06c25a01e409956f07364a36c8fbc687f62b27275382311c63df0ac18ba97838ef4e61cf7e2c3bca73014a5f92eb6d59f1f11a2b3cacbdcf51f78337363a5213108ec9f2fef7ad237b0829efb5fd4f1cf67464948dee43ed91b4ccae37469230bbc7af8e31361181cfa6e632df2d4cf6a77ada450b4f32823919bde831934c96e2ccba578bacc51b16fc711ab8e7be6d9bd48eff98316c", 0xd6, 0x880, &(0x7f0000000380)=@file={0x1, './file0\x00'}, 0x6e) mount(0x0, &(0x7f0000000240)='.\x00', &(0x7f00000000c0)='nfs\x00', 0x810004, &(0x7f0000000ac0)='\x06\x00\x00\x00\x04\xb0\xfe\x98\x9a!s\x91]\xab\xc9\xa2IV\xb6-\xd9z\x81\x91\x8aP}I\xc6\x0e\xd9\v\xda\xbfS\x04\xc3\x00\x00\x00\x00\x00\x00\xaf\r\x11\xa0\xd7\xd7\xb6\x9bz\x99\xaf\xfd\x87fN\xad\x90U\xb4A\xdf\xabB\xbba\x7f\xb8\x96\x1a\xe7\xc1\xab\x16\x02\x000x0) timer_settime(r4, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000380)=[{0x200000000006, 0x1, 0x7, 0x7ffc1ffb}]}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0b0000000500000001000100090000"], 0x48) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kfree\x00', r7}, 0x10) r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r6) sendmsg$IEEE802154_LIST_PHY(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)={0x14, r8, 0x30b, 0x0, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4044}, 0x20000004) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000640)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000022007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000140)={0x1, &(0x7f00000000c0)=[{0x5, 0x2, 0x80, 0xfffffff1}]}) truncate(&(0x7f0000000900)='./file1\x00', 0x24b9) 106.438256ms ago: executing program 2 (id=756): mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) times(&(0x7f0000000040)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r2) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$TIPC_NL_NODE_GET(r2, &(0x7f0000000440)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x3c, 0x0, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_UPPER={0x8}]}, @TIPC_NLA_SOCK={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xfffffff9}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x5}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000400)=@newqdisc={0x38, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x5}]}, 0x38}}, 0x4000800) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=@delchain={0x24, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xfff3, 0xffff}, {0xa, 0x1b}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x4000) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') name_to_handle_at(r6, &(0x7f0000000240)='./mnt\x00', 0x0, 0x0, 0x200) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000000)='spmi_write_end\x00', r4}, 0x18) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0xffff, 0x0, 0x1c42}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8, 0x2, 0xfffffffe}]}}}, @IFLA_IFNAME={0x14, 0x3, 'xfrm0\x00'}]}, 0x50}}, 0x0) 0s ago: executing program 2 (id=757): getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, 0x0, &(0x7f0000000140)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@nogrpid}, {@quota}]}, 0x0, 0x4fa, &(0x7f00000005c0)="$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") quotactl$Q_SETQUOTA(0xffffffff80000800, &(0x7f0000000100)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000280)={0x7, 0x806, 0x800077, 0x20800000000412, 0x6, 0xfffffffffffffffd, 0x1000, 0xf67, 0xfffffffc}) lchown(&(0x7f0000000080)='./file1\x00', 0xee01, 0xffffffffffffffff) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) creat(&(0x7f0000001940)='./file0/file1\x00', 0x90) unlink(&(0x7f0000000100)='./file0/file1\x00') rmdir(&(0x7f0000000000)='./file0\x00') kernel console output (not intermixed with test programs): cess permissive=1 [ 17.857355][ T29] audit: type=1400 audit(1764250400.763:61): avc: denied { siginh } for pid=3187 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 18.338692][ T3188] sshd-session (3188) used greatest stack depth: 10648 bytes left Warning: Permanently added '10.128.1.251' (ED25519) to the list of known hosts. [ 25.713747][ T29] audit: type=1400 audit(1764250408.633:62): avc: denied { mounton } for pid=3298 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 25.736708][ T29] audit: type=1400 audit(1764250408.653:63): avc: denied { mount } for pid=3298 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 25.737547][ T3298] cgroup: Unknown subsys name 'net' [ 25.764383][ T29] audit: type=1400 audit(1764250408.683:64): avc: denied { unmount } for pid=3298 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 25.878591][ T3298] cgroup: Unknown subsys name 'cpuset' [ 25.884839][ T3298] cgroup: Unknown subsys name 'rlimit' [ 25.995589][ T29] audit: type=1400 audit(1764250408.913:65): avc: denied { setattr } for pid=3298 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 26.018922][ T29] audit: type=1400 audit(1764250408.913:66): avc: denied { create } for pid=3298 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 26.039383][ T29] audit: type=1400 audit(1764250408.913:67): avc: denied { write } for pid=3298 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 26.059813][ T29] audit: type=1400 audit(1764250408.913:68): avc: denied { read } for pid=3298 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 26.073245][ T3303] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 26.080127][ T29] audit: type=1400 audit(1764250408.913:69): avc: denied { mounton } for pid=3298 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 26.113416][ T29] audit: type=1400 audit(1764250408.913:70): avc: denied { mount } for pid=3298 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 26.136706][ T29] audit: type=1400 audit(1764250409.013:71): avc: denied { relabelto } for pid=3303 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 26.181516][ T3298] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 27.319709][ T3315] chnl_net:caif_netlink_parms(): no params data found [ 27.406043][ T3315] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.413195][ T3315] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.420365][ T3315] bridge_slave_0: entered allmulticast mode [ 27.426942][ T3315] bridge_slave_0: entered promiscuous mode [ 27.442091][ T3315] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.449232][ T3315] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.456328][ T3315] bridge_slave_1: entered allmulticast mode [ 27.462983][ T3315] bridge_slave_1: entered promiscuous mode [ 27.499181][ T3315] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 27.517377][ T3315] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 27.530788][ T3318] chnl_net:caif_netlink_parms(): no params data found [ 27.539664][ T3311] chnl_net:caif_netlink_parms(): no params data found [ 27.575952][ T3315] team0: Port device team_slave_0 added [ 27.586711][ T3312] chnl_net:caif_netlink_parms(): no params data found [ 27.609093][ T3315] team0: Port device team_slave_1 added [ 27.642941][ T3315] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 27.649986][ T3315] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 27.675904][ T3315] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 27.699829][ T3315] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 27.706783][ T3315] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 27.732723][ T3315] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 27.748032][ T3319] chnl_net:caif_netlink_parms(): no params data found [ 27.774890][ T3318] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.782191][ T3318] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.789460][ T3318] bridge_slave_0: entered allmulticast mode [ 27.795880][ T3318] bridge_slave_0: entered promiscuous mode [ 27.814427][ T3311] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.821555][ T3311] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.828845][ T3311] bridge_slave_0: entered allmulticast mode [ 27.835222][ T3311] bridge_slave_0: entered promiscuous mode [ 27.845750][ T3311] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.852833][ T3311] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.859994][ T3311] bridge_slave_1: entered allmulticast mode [ 27.866392][ T3311] bridge_slave_1: entered promiscuous mode [ 27.872672][ T3318] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.879789][ T3318] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.886859][ T3318] bridge_slave_1: entered allmulticast mode [ 27.893221][ T3318] bridge_slave_1: entered promiscuous mode [ 27.923337][ T3312] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.930876][ T3312] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.938241][ T3312] bridge_slave_0: entered allmulticast mode [ 27.944588][ T3312] bridge_slave_0: entered promiscuous mode [ 27.968625][ T3312] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.975687][ T3312] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.982935][ T3312] bridge_slave_1: entered allmulticast mode [ 27.989348][ T3312] bridge_slave_1: entered promiscuous mode [ 28.001244][ T3311] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 28.011539][ T3311] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 28.021876][ T3318] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 28.033255][ T3315] hsr_slave_0: entered promiscuous mode [ 28.039190][ T3315] hsr_slave_1: entered promiscuous mode [ 28.059640][ T3318] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 28.094170][ T3312] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 28.108553][ T3319] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.115671][ T3319] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.123011][ T3319] bridge_slave_0: entered allmulticast mode [ 28.129521][ T3319] bridge_slave_0: entered promiscuous mode [ 28.141455][ T3311] team0: Port device team_slave_0 added [ 28.147977][ T3318] team0: Port device team_slave_0 added [ 28.154724][ T3312] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 28.166027][ T3319] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.173136][ T3319] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.180229][ T3319] bridge_slave_1: entered allmulticast mode [ 28.186488][ T3319] bridge_slave_1: entered promiscuous mode [ 28.193359][ T3311] team0: Port device team_slave_1 added [ 28.199654][ T3318] team0: Port device team_slave_1 added [ 28.240608][ T3311] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 28.247574][ T3311] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 28.273585][ T3311] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 28.285345][ T3312] team0: Port device team_slave_0 added [ 28.303609][ T3318] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 28.310654][ T3318] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 28.336619][ T3318] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 28.348158][ T3311] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 28.355112][ T3311] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 28.381075][ T3311] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 28.399809][ T3312] team0: Port device team_slave_1 added [ 28.406794][ T3319] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 28.418850][ T3318] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 28.425852][ T3318] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 28.451832][ T3318] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 28.469735][ T3319] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 28.498068][ T3312] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 28.505014][ T3312] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 28.530953][ T3312] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 28.560420][ T3312] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 28.567372][ T3312] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 28.593317][ T3312] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 28.616126][ T3311] hsr_slave_0: entered promiscuous mode [ 28.622213][ T3311] hsr_slave_1: entered promiscuous mode [ 28.628120][ T3311] debugfs: 'hsr0' already exists in 'hsr' [ 28.633847][ T3311] Cannot create hsr debugfs directory [ 28.639983][ T3319] team0: Port device team_slave_0 added [ 28.658855][ T3318] hsr_slave_0: entered promiscuous mode [ 28.664821][ T3318] hsr_slave_1: entered promiscuous mode [ 28.670806][ T3318] debugfs: 'hsr0' already exists in 'hsr' [ 28.676538][ T3318] Cannot create hsr debugfs directory [ 28.684581][ T3319] team0: Port device team_slave_1 added [ 28.732726][ T3312] hsr_slave_0: entered promiscuous mode [ 28.738854][ T3312] hsr_slave_1: entered promiscuous mode [ 28.744695][ T3312] debugfs: 'hsr0' already exists in 'hsr' [ 28.750453][ T3312] Cannot create hsr debugfs directory [ 28.758536][ T3319] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 28.765490][ T3319] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 28.791634][ T3319] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 28.814436][ T3319] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 28.821424][ T3319] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 28.847360][ T3319] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 28.917716][ T3319] hsr_slave_0: entered promiscuous mode [ 28.923896][ T3319] hsr_slave_1: entered promiscuous mode [ 28.929839][ T3319] debugfs: 'hsr0' already exists in 'hsr' [ 28.935563][ T3319] Cannot create hsr debugfs directory [ 28.970077][ T3315] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 28.988556][ T3315] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 29.002199][ T3315] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 29.013335][ T3315] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 29.055913][ T3311] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 29.073229][ T3311] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 29.082086][ T3311] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 29.098430][ T3311] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 29.129928][ T3318] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 29.143846][ T3318] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 29.152916][ T3318] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 29.162491][ T3318] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 29.197997][ T3315] 8021q: adding VLAN 0 to HW filter on device bond0 [ 29.221528][ T3312] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 29.231444][ T3312] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 29.241338][ T3312] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 29.250310][ T3312] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 29.269345][ T3311] 8021q: adding VLAN 0 to HW filter on device bond0 [ 29.287808][ T3319] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 29.302789][ T3311] 8021q: adding VLAN 0 to HW filter on device team0 [ 29.315002][ T3315] 8021q: adding VLAN 0 to HW filter on device team0 [ 29.322122][ T3319] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 29.331705][ T3319] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 29.340375][ T3319] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 29.358304][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.365372][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.374097][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.381244][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.392720][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.399837][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.427480][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.434546][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.466046][ T3318] 8021q: adding VLAN 0 to HW filter on device bond0 [ 29.488973][ T3318] 8021q: adding VLAN 0 to HW filter on device team0 [ 29.512409][ T113] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.519537][ T113] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.539519][ T113] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.546846][ T113] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.563658][ T3319] 8021q: adding VLAN 0 to HW filter on device bond0 [ 29.594501][ T3312] 8021q: adding VLAN 0 to HW filter on device bond0 [ 29.611520][ T3315] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 29.626591][ T3312] 8021q: adding VLAN 0 to HW filter on device team0 [ 29.634778][ T3319] 8021q: adding VLAN 0 to HW filter on device team0 [ 29.650045][ T2632] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.657155][ T2632] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.666355][ T2632] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.673397][ T2632] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.686109][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.693193][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.707158][ T3311] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 29.722825][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.729913][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.770494][ T3312] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 29.804520][ T3315] veth0_vlan: entered promiscuous mode [ 29.834557][ T3315] veth1_vlan: entered promiscuous mode [ 29.849490][ T3318] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 29.857015][ T3315] veth0_macvtap: entered promiscuous mode [ 29.882801][ T3315] veth1_macvtap: entered promiscuous mode [ 29.920021][ T3312] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 29.928203][ T3315] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 29.939270][ T3315] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 29.965889][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.996831][ T113] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.012288][ T3319] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.026191][ T3311] veth0_vlan: entered promiscuous mode [ 30.032368][ T113] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.059966][ T3311] veth1_vlan: entered promiscuous mode [ 30.065993][ T113] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.083132][ T3318] veth0_vlan: entered promiscuous mode [ 30.105838][ T3311] veth0_macvtap: entered promiscuous mode [ 30.114552][ T3315] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 30.138257][ T3318] veth1_vlan: entered promiscuous mode [ 30.165505][ T3311] veth1_macvtap: entered promiscuous mode [ 30.205263][ T3318] veth0_macvtap: entered promiscuous mode [ 30.216777][ T3311] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.226831][ T3312] veth0_vlan: entered promiscuous mode [ 30.245245][ T3318] veth1_macvtap: entered promiscuous mode [ 30.252694][ T3311] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.263584][ T3319] veth0_vlan: entered promiscuous mode [ 30.271995][ T3312] veth1_vlan: entered promiscuous mode [ 30.284482][ T3318] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.295724][ T113] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.313091][ T3312] veth0_macvtap: entered promiscuous mode [ 30.320941][ T113] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.331417][ T3318] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.343126][ T3319] veth1_vlan: entered promiscuous mode [ 30.353917][ T113] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.365589][ T3312] veth1_macvtap: entered promiscuous mode [ 30.389559][ T113] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.399053][ T113] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.414405][ T3312] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.425862][ T113] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.435245][ T113] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.449271][ T3319] veth0_macvtap: entered promiscuous mode [ 30.456738][ T3312] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.466537][ T113] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.478376][ T3319] veth1_macvtap: entered promiscuous mode [ 30.485944][ T3485] Zero length message leads to an empty skb [ 30.503646][ T3485] wireguard0: entered promiscuous mode [ 30.509158][ T3485] wireguard0: entered allmulticast mode [ 30.519113][ T31] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.529205][ T31] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.539981][ T31] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.558142][ T3319] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.569286][ T31] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.602415][ T3493] loop2: detected capacity change from 0 to 512 [ 30.609570][ T3493] EXT4-fs: Ignoring removed orlov option [ 30.615237][ T3493] EXT4-fs: Ignoring removed i_version option [ 30.629460][ T3493] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 30.645650][ T3319] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.655442][ T3491] netlink: 'syz.1.2': attribute type 10 has an invalid length. [ 30.668525][ T3491] team0 (unregistering): Port device team_slave_0 removed [ 30.673922][ T3493] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 30.688728][ T3493] ext4 filesystem being mounted at /0/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 30.690263][ T3491] team0 (unregistering): Port device team_slave_1 removed [ 30.708484][ T3493] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #2: comm syz.2.3: corrupted inode contents [ 30.720301][ T3493] EXT4-fs (loop2): Remounting filesystem read-only [ 30.722137][ T29] kauditd_printk_skb: 80 callbacks suppressed [ 30.722162][ T29] audit: type=1400 audit(1764250413.643:152): avc: denied { read } for pid=3043 comm="dhcpcd" name="n25" dev="tmpfs" ino=571 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 30.754512][ T29] audit: type=1400 audit(1764250413.643:153): avc: denied { open } for pid=3043 comm="dhcpcd" path="/run/udev/data/n25" dev="tmpfs" ino=571 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 30.779383][ T29] audit: type=1400 audit(1764250413.703:154): avc: denied { getattr } for pid=3043 comm="dhcpcd" path="/run/udev/data/n25" dev="tmpfs" ino=571 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 30.808537][ T29] audit: type=1400 audit(1764250413.703:155): avc: denied { create } for pid=3492 comm="syz.2.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 30.828467][ T29] audit: type=1400 audit(1764250413.703:156): avc: denied { write } for pid=3492 comm="syz.2.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 30.838253][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.848316][ T29] audit: type=1400 audit(1764250413.703:157): avc: denied { nlmsg_write } for pid=3492 comm="syz.2.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 30.903971][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.915481][ T29] audit: type=1400 audit(1764250413.813:158): avc: denied { relabelfrom } for pid=3500 comm="syz.4.5" name="" dev="pipefs" ino=3934 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 30.915516][ T29] audit: type=1400 audit(1764250413.823:159): avc: denied { allowed } for pid=3500 comm="syz.4.5" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 30.915543][ T29] audit: type=1400 audit(1764250413.823:160): avc: denied { create } for pid=3500 comm="syz.4.5" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 30.915570][ T29] audit: type=1400 audit(1764250413.823:161): avc: denied { map } for pid=3500 comm="syz.4.5" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=3935 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 30.960854][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.032015][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.041572][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 31.196548][ T3533] xt_recent: hitcount (16777216) is larger than allowed maximum (65535) [ 31.502704][ T3567] netlink: 12 bytes leftover after parsing attributes in process `syz.3.19'. [ 31.524988][ T3567] netlink: 4 bytes leftover after parsing attributes in process `syz.3.19'. [ 31.555561][ T3574] SELinux: security_context_str_to_sid (Gl>h^dӽY=7 oo#PMFqf*,0Cx٫TG=RgqggzF_}&J^z.K LҀ%aWWCQM؏ۍs芃[Ҵ&QCtaj/ yq ]\9-:xTTdToJU$.8ȷDU>ϛtU4nZ) failed with errno=-22 [ 31.877237][ T3613] netlink: 4 bytes leftover after parsing attributes in process `syz.1.21'. [ 31.964521][ T3618] netlink: 'syz.1.22': attribute type 10 has an invalid length. [ 31.997676][ T3618] atomic_op ffff88811a35a528 conn xmit_atomic 0000000000000000 [ 32.216421][ T3640] loop2: detected capacity change from 0 to 512 [ 32.223917][ T3640] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 32.237000][ T3640] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 32.249856][ T3640] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2853: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 32.298684][ T3640] EXT4-fs (loop2): 1 truncate cleaned up [ 32.304813][ T3640] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 32.400778][ T3647] wg1 speed is unknown, defaulting to 1000 [ 32.406610][ T3647] wg1 speed is unknown, defaulting to 1000 [ 32.413405][ T3647] wg1 speed is unknown, defaulting to 1000 [ 32.420024][ T3647] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 32.428256][ T3647] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 32.440793][ T3647] wg1 speed is unknown, defaulting to 1000 [ 32.448191][ T3647] wg1 speed is unknown, defaulting to 1000 [ 32.456205][ T3647] wg1 speed is unknown, defaulting to 1000 [ 32.463216][ T3647] wg1 speed is unknown, defaulting to 1000 [ 32.470180][ T3647] wg1 speed is unknown, defaulting to 1000 [ 32.498532][ T3647] syz.0.33 (3647) used greatest stack depth: 10248 bytes left [ 32.515151][ T3651] vhci_hcd: USB_PORT_FEAT_LINK_STATE req not supported for USB 2.0 roothub [ 32.584819][ T3657] netlink: 12 bytes leftover after parsing attributes in process `syz.0.37'. [ 32.601066][ T3657] netlink: 4 bytes leftover after parsing attributes in process `syz.0.37'. [ 32.615157][ T3657] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.625885][ T3657] bridge_slave_1 (unregistering): left allmulticast mode [ 32.633109][ T3657] bridge_slave_1 (unregistering): left promiscuous mode [ 32.640092][ T3657] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.747550][ T3660] netlink: 4 bytes leftover after parsing attributes in process `syz.0.38'. [ 32.837436][ T3664] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(14) [ 32.844065][ T3664] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 32.851603][ T3664] vhci_hcd vhci_hcd.0: Device attached [ 32.859219][ T3664] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(16) [ 32.865817][ T3664] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 32.873375][ T3664] vhci_hcd vhci_hcd.0: Device attached [ 32.973559][ T3670] netlink: 'syz.4.40': attribute type 10 has an invalid length. [ 32.984063][ T3670] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.993076][ T3670] bond0: (slave team0): Enslaving as an active interface with an up link [ 33.015800][ T3670] atomic_op ffff88811a35b528 conn xmit_atomic 0000000000000000 [ 33.035445][ T3672] loop3: detected capacity change from 0 to 164 [ 33.054833][ T3672] iso9660: Bad value for 'map' [ 33.062694][ T3672] netlink: 7 bytes leftover after parsing attributes in process `syz.3.41'. [ 33.072541][ T3672] netlink: 32 bytes leftover after parsing attributes in process `syz.3.41'. [ 33.082856][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.092010][ T10] usb 1-1: new low-speed USB device number 2 using vhci_hcd [ 33.113439][ T3677] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(14) [ 33.120047][ T3677] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 33.127633][ T3677] vhci_hcd vhci_hcd.0: Device attached [ 33.146972][ T3677] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(16) [ 33.153667][ T3677] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 33.161308][ T3677] vhci_hcd vhci_hcd.0: Device attached [ 33.179509][ T3676] loop4: detected capacity change from 0 to 512 [ 33.368107][ T1036] usb 3-1: new low-speed USB device number 2 using vhci_hcd [ 33.422429][ T3699] loop2: detected capacity change from 0 to 1024 [ 33.471040][ T3703] netlink: 80 bytes leftover after parsing attributes in process `syz.2.50'. [ 33.480518][ T3703] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2579 sclass=netlink_route_socket pid=3703 comm=syz.2.50 [ 33.501228][ T3703] xt_recent: hitcount (16777216) is larger than allowed maximum (65535) [ 33.540911][ T3707] SELinux: security_context_str_to_sid (Bz8-5nd>&BTx'1WG*6v}g?qN\1"X<4#fS) failed with errno=-22 [ 33.615452][ T3667] vhci_hcd: connection closed [ 33.615656][ T3665] vhci_hcd: connection reset by peer [ 33.626229][ T12] vhci_hcd: stop threads [ 33.630546][ T12] vhci_hcd: release socket [ 33.634986][ T12] vhci_hcd: disconnect device [ 33.640615][ T12] vhci_hcd: stop threads [ 33.644894][ T12] vhci_hcd: release socket [ 33.649521][ T12] vhci_hcd: disconnect device [ 33.888338][ T3678] vhci_hcd: connection reset by peer [ 33.888405][ T3684] vhci_hcd: connection closed [ 33.894147][ T12] vhci_hcd: stop threads [ 33.903213][ T12] vhci_hcd: release socket [ 33.907654][ T12] vhci_hcd: disconnect device [ 33.914874][ T12] vhci_hcd: stop threads [ 33.919163][ T12] vhci_hcd: release socket [ 33.923600][ T12] vhci_hcd: disconnect device [ 34.451886][ T3720] netlink: 4 bytes leftover after parsing attributes in process `syz.1.56'. [ 34.555555][ T3724] loop1: detected capacity change from 0 to 512 [ 34.678814][ T3730] syz.2.58 uses obsolete (PF_INET,SOCK_PACKET) [ 34.689018][ T3730] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 34.696333][ T3730] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 34.816514][ T3734] wg1 speed is unknown, defaulting to 1000 [ 34.822834][ T3734] wg1 speed is unknown, defaulting to 1000 [ 34.829475][ T3734] wg1 speed is unknown, defaulting to 1000 [ 34.837127][ T3734] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 34.851539][ T3734] wg1 speed is unknown, defaulting to 1000 [ 34.858555][ T3734] wg1 speed is unknown, defaulting to 1000 [ 34.865083][ T3734] wg1 speed is unknown, defaulting to 1000 [ 34.871705][ T3734] wg1 speed is unknown, defaulting to 1000 [ 34.878199][ T3734] wg1 speed is unknown, defaulting to 1000 [ 35.155811][ T3748] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(14) [ 35.162545][ T3748] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 35.170577][ T3748] vhci_hcd vhci_hcd.0: Device attached [ 35.187141][ T3748] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(16) [ 35.193775][ T3748] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 35.201299][ T3748] vhci_hcd vhci_hcd.0: Device attached [ 35.242865][ T3759] wg1 speed is unknown, defaulting to 1000 [ 35.260082][ T3760] SELinux: security_context_str_to_sid ( *3wI%O* zB.G}wE`_NPA*Ex'Sx36V-p|)Mn]Th^#Wbٳ/H4.w$[gm 1;,k5Bz?^ ]׍z)>ḛ>1D l[^jm ̪e  [ 38.840898][ T4038] .FdvdpkⰐ7b?ee [ 38.840898][ T4038] wˎ) failed with errno=-22 [ 38.929894][ T4042] netlink: 'syz.0.117': attribute type 10 has an invalid length. [ 38.956907][ T4042] atomic_op ffff888102bbf128 conn xmit_atomic 0000000000000000 [ 38.986620][ T4044] x_tables: duplicate underflow at hook 3 [ 39.086478][ T4052] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(14) [ 39.093116][ T4052] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 39.100675][ T4052] vhci_hcd vhci_hcd.0: Device attached [ 39.116431][ T4052] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(16) [ 39.123093][ T4052] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 39.130841][ T4052] vhci_hcd vhci_hcd.0: Device attached [ 39.309931][ T4061] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 39.317535][ T4061] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 39.483465][ T4072] loop2: detected capacity change from 0 to 512 [ 39.493990][ T4072] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 39.513804][ T4074] loop3: detected capacity change from 0 to 1024 [ 39.566556][ T4072] EXT4-fs (loop2): 1 truncate cleaned up [ 39.578757][ T4072] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.631689][ T4084] loop4: detected capacity change from 0 to 512 [ 39.645900][ T4086] x_tables: duplicate underflow at hook 3 [ 39.665070][ T4084] ------------[ cut here ]------------ [ 39.670734][ T4084] EA inode 11 i_nlink=2 [ 39.671075][ T4084] WARNING: CPU: 1 PID: 4084 at fs/ext4/xattr.c:1058 ext4_xattr_inode_update_ref+0x36a/0x380 [ 39.685349][ T4084] Modules linked in: [ 39.689349][ T4084] CPU: 1 UID: 0 PID: 4084 Comm: syz.4.131 Not tainted syzkaller #0 PREEMPT(voluntary) [ 39.699016][ T4084] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 39.709265][ T4084] RIP: 0010:ext4_xattr_inode_update_ref+0x36a/0x380 [ 39.715964][ T4084] Code: 90 49 8d 7e 40 e8 16 f7 b8 ff 4d 8b 6e 40 4c 89 e7 e8 2a f2 b8 ff 41 8b 56 48 48 c7 c7 82 d6 55 86 4c 89 ee e8 e7 f2 67 ff 90 <0f> 0b 90 90 e9 ff fe ff ff e8 68 01 b6 03 0f 1f 84 00 00 00 00 00 [ 39.735658][ T4084] RSP: 0018:ffffc900132635a0 EFLAGS: 00010246 [ 39.741893][ T4084] RAX: 0d4967812d80f600 RBX: ffff8881198f1bb8 RCX: 0000000000080000 [ 39.749919][ T4084] RDX: ffffc90003676000 RSI: 0000000000003f0e RDI: 0000000000003f0f [ 39.758010][ T4084] RBP: 0000000000000002 R08: 0001c90013263427 R09: 0000000000000000 [ 39.765994][ T4084] R10: 00000000ffffffff R11: 0000000000000002 R12: ffff8881198f1b68 [ 39.774013][ T4084] R13: 000000000000000b R14: ffff8881198f1b20 R15: 0000000000000001 [ 39.782081][ T4084] FS: 00007f4dd456f6c0(0000) GS:ffff8882aef11000(0000) knlGS:0000000000000000 [ 39.791100][ T4084] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 39.797709][ T4084] CR2: 00007f4dd5af2a60 CR3: 000000011a9ea000 CR4: 00000000003506f0 [ 39.805716][ T4084] Call Trace: [ 39.809066][ T4084] [ 39.812012][ T4084] ext4_xattr_set_entry+0x77f/0x1020 [ 39.817337][ T4084] ext4_xattr_ibody_set+0x184/0x3c0 [ 39.822627][ T4084] ext4_expand_extra_isize_ea+0xcbb/0x11f0 [ 39.828528][ T4084] __ext4_expand_extra_isize+0x246/0x280 [ 39.834457][ T4084] __ext4_mark_inode_dirty+0x29d/0x3f0 [ 39.839971][ T4084] ext4_evict_inode+0x80e/0xd90 [ 39.844860][ T4084] ? __pfx_ext4_evict_inode+0x10/0x10 [ 39.849433][ T4054] vhci_hcd: connection reset by peer [ 39.850420][ T4084] evict+0x2e3/0x550 [ 39.856110][ T4058] vhci_hcd: connection closed [ 39.859639][ T4084] ? __dquot_initialize+0x146/0x7c0 [ 39.869570][ T4084] iput+0x4ed/0x650 [ 39.873427][ T4084] ext4_process_orphan+0x1a9/0x1c0 [ 39.878648][ T4084] ext4_orphan_cleanup+0x6a8/0xa00 [ 39.883791][ T4084] ext4_fill_super+0x3483/0x3810 [ 39.888833][ T4084] ? snprintf+0x86/0xb0 [ 39.889747][ T2632] vhci_hcd: stop threads [ 39.893070][ T4084] ? set_blocksize+0x1a8/0x310 [ 39.893101][ T4084] ? sb_set_blocksize+0xe3/0x100 [ 39.897351][ T2632] vhci_hcd: release socket [ 39.902124][ T4084] ? setup_bdev_super+0x30e/0x370 [ 39.902163][ T4084] ? __pfx_ext4_fill_super+0x10/0x10 [ 39.907109][ T2632] vhci_hcd: disconnect device [ 39.911527][ T4084] get_tree_bdev_flags+0x291/0x300 [ 39.911563][ T4084] ? __pfx_ext4_fill_super+0x10/0x10 [ 39.932770][ T2632] vhci_hcd: stop threads [ 39.936922][ T4084] get_tree_bdev+0x1f/0x30 [ 39.941211][ T2632] vhci_hcd: release socket [ 39.945592][ T4084] ext4_get_tree+0x1c/0x30 [ 39.950036][ T2632] vhci_hcd: disconnect device [ 39.954452][ T4084] vfs_get_tree+0x57/0x1d0 [ 39.963581][ T4084] do_new_mount+0x24d/0x660 [ 39.968191][ T4084] path_mount+0x4a5/0xb70 [ 39.972501][ T4094] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 39.972541][ T4084] ? user_path_at+0x109/0x130 [ 39.982251][ T4094] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 39.985566][ T4084] __se_sys_mount+0x28c/0x2e0 [ 39.998010][ T4084] __x64_sys_mount+0x67/0x80 [ 40.002683][ T4084] x64_sys_call+0x2b51/0x3000 [ 40.007430][ T4084] do_syscall_64+0xd2/0x200 [ 40.012037][ T4084] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 40.018178][ T4084] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 40.023942][ T4084] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 40.029874][ T4084] RIP: 0033:0x7f4dd5b10eea [ 40.034343][ T4084] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 40.054045][ T4084] RSP: 002b:00007f4dd456ee68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 40.062517][ T4084] RAX: ffffffffffffffda RBX: 00007f4dd456eef0 RCX: 00007f4dd5b10eea [ 40.070560][ T4084] RDX: 0000200000000180 RSI: 00002000000001c0 RDI: 00007f4dd456eeb0 [ 40.078648][ T4084] RBP: 0000200000000180 R08: 00007f4dd456eef0 R09: 0000000000800700 [ 40.086614][ T4084] R10: 0000000000800700 R11: 0000000000000246 R12: 00002000000001c0 [ 40.094647][ T4084] R13: 00007f4dd456eeb0 R14: 000000000000046f R15: 0000200000000200 [ 40.102859][ T4084] [ 40.106136][ T4084] ---[ end trace 0000000000000000 ]--- [ 40.111819][ T4084] EXT4-fs error (device loop4): ext4_xattr_inode_iget:441: inode #18: comm syz.4.131: iget: bad extra_isize 90 (inode size 256) [ 40.135662][ T4084] EXT4-fs error (device loop4): ext4_xattr_inode_iget:446: comm syz.4.131: error while reading EA inode 18 err=-117 [ 40.156946][ T4084] EXT4-fs error (device loop4): ext4_xattr_inode_iget:441: inode #18: comm syz.4.131: iget: bad extra_isize 90 (inode size 256) [ 40.170661][ T4084] EXT4-fs error (device loop4): ext4_xattr_inode_iget:446: comm syz.4.131: error while reading EA inode 18 err=-117 [ 40.184845][ T4084] EXT4-fs (loop4): 1 orphan inode deleted [ 40.191097][ T4084] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 40.198768][ T4098] wg1 speed is unknown, defaulting to 1000 [ 40.232075][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.335048][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.347229][ T4113] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2579 sclass=netlink_route_socket pid=4113 comm=syz.3.138 [ 40.370197][ T4113] xt_recent: hitcount (16777216) is larger than allowed maximum (65535) [ 40.524932][ T4130] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 40.533502][ T4130] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 40.571087][ T4132] loop2: detected capacity change from 0 to 512 [ 40.637607][ T4135] loop1: detected capacity change from 0 to 512 [ 40.650130][ T4135] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.651102][ T4139] siw: device registration error -23 [ 40.668860][ T4135] ext4 filesystem being mounted at /28/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 40.967952][ T29] kauditd_printk_skb: 1572 callbacks suppressed [ 40.967965][ T29] audit: type=1326 audit(1764250423.893:5068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4124 comm="syz.3.141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fbb3eba65e7 code=0x7ffc0000 [ 40.998430][ T29] audit: type=1326 audit(1764250423.893:5069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4124 comm="syz.3.141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fbb3ebe2005 code=0x7ffc0000 [ 41.018689][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.021783][ T29] audit: type=1326 audit(1764250423.893:5070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4124 comm="syz.3.141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fbb3ebe2005 code=0x7ffc0000 [ 41.053992][ T29] audit: type=1326 audit(1764250423.893:5071): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4124 comm="syz.3.141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fbb3ebe2005 code=0x7ffc0000 [ 41.060040][ T4153] SELinux: security_context_str_to_sid (9t7]sK{p$A&#|RS&H4΀[:1CIZMaV [ 41.060040][ T4153] nL8/?tt+R0a^)"[6r&)IJ) failed with errno=-22 [ 41.077419][ T29] audit: type=1326 audit(1764250423.893:5072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4124 comm="syz.3.141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fbb3ebe2005 code=0x7ffc0000 [ 41.077453][ T29] audit: type=1326 audit(1764250423.893:5073): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4124 comm="syz.3.141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fbb3ebe2005 code=0x7ffc0000 [ 41.143756][ T29] audit: type=1326 audit(1764250423.893:5074): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4124 comm="syz.3.141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fbb3ebe2005 code=0x7ffc0000 [ 41.167162][ T29] audit: type=1326 audit(1764250423.893:5075): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4124 comm="syz.3.141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fbb3ebe2005 code=0x7ffc0000 [ 41.190530][ T29] audit: type=1326 audit(1764250423.893:5076): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4124 comm="syz.3.141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fbb3ebe2005 code=0x7ffc0000 [ 41.213940][ T29] audit: type=1326 audit(1764250423.903:5077): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4124 comm="syz.3.141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fbb3ebe2005 code=0x7ffc0000 [ 41.327946][ T3422] usb 5-1: enqueue for inactive port 0 [ 41.333767][ T3422] usb 5-1: enqueue for inactive port 0 [ 41.340511][ T4161] wg1 speed is unknown, defaulting to 1000 [ 41.370310][ T4166] loop3: detected capacity change from 0 to 512 [ 41.418175][ T3422] vhci_hcd: vhci_device speed not set [ 41.424049][ T4166] EXT4-fs warning (device loop3): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 41.467986][ T4176] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(14) [ 41.474721][ T4176] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 41.482308][ T4176] vhci_hcd vhci_hcd.0: Device attached [ 41.498202][ T4166] EXT4-fs (loop3): mount failed [ 41.504423][ T4179] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(16) [ 41.511066][ T4179] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 41.518720][ T4179] vhci_hcd vhci_hcd.0: Device attached [ 41.562969][ T4183] siw: device registration error -23 [ 41.674721][ T4187] x_tables: duplicate underflow at hook 3 [ 41.718941][ T4191] netlink: 'syz.3.163': attribute type 1 has an invalid length. [ 41.728066][ T23] usb 1-1: new low-speed USB device number 3 using vhci_hcd [ 41.859647][ T4194] macvlan2: entered promiscuous mode [ 41.864985][ T4194] macvlan2: entered allmulticast mode [ 41.941012][ T4196] __nla_validate_parse: 8 callbacks suppressed [ 41.941025][ T4196] netlink: 4 bytes leftover after parsing attributes in process `syz.3.165'. [ 42.051238][ T4198] x_tables: duplicate underflow at hook 3 [ 42.139819][ T4202] netlink: 80 bytes leftover after parsing attributes in process `syz.3.168'. [ 42.178475][ T4202] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2579 sclass=netlink_route_socket pid=4202 comm=syz.3.168 [ 42.202612][ T4177] vhci_hcd: connection reset by peer [ 42.207955][ T4180] vhci_hcd: connection closed [ 42.210710][ T4202] xt_recent: hitcount (16777216) is larger than allowed maximum (65535) [ 42.224791][ T31] vhci_hcd: stop threads [ 42.229139][ T31] vhci_hcd: release socket [ 42.233624][ T31] vhci_hcd: disconnect device [ 42.246765][ T31] vhci_hcd: stop threads [ 42.251172][ T31] vhci_hcd: release socket [ 42.255616][ T31] vhci_hcd: disconnect device [ 42.329646][ T4207] siw: device registration error -23 [ 42.397068][ T4212] FAULT_INJECTION: forcing a failure. [ 42.397068][ T4212] name failslab, interval 1, probability 0, space 0, times 1 [ 42.409823][ T4212] CPU: 0 UID: 0 PID: 4212 Comm: syz.3.172 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 42.409908][ T4212] Tainted: [W]=WARN [ 42.409913][ T4212] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 42.409925][ T4212] Call Trace: [ 42.409930][ T4212] [ 42.409978][ T4212] __dump_stack+0x1d/0x30 [ 42.410000][ T4212] dump_stack_lvl+0xe8/0x140 [ 42.410019][ T4212] dump_stack+0x15/0x1b [ 42.410053][ T4212] should_fail_ex+0x265/0x280 [ 42.410077][ T4212] should_failslab+0x8c/0xb0 [ 42.410183][ T4212] __kmalloc_noprof+0xa5/0x570 [ 42.410218][ T4212] ? context_struct_to_string+0x24d/0x3a0 [ 42.410316][ T4212] context_struct_to_string+0x24d/0x3a0 [ 42.410358][ T4212] security_sid_to_context_core+0x215/0x2e0 [ 42.410433][ T4212] security_sid_to_context+0x27/0x40 [ 42.410531][ T4212] avc_audit_post_callback+0x10f/0x520 [ 42.410572][ T4212] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 42.410620][ T4212] common_lsm_audit+0x1bb/0x230 [ 42.410791][ T4212] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 42.410834][ T4212] slow_avc_audit+0x104/0x140 [ 42.410875][ T4212] avc_has_perm+0x13a/0x180 [ 42.410937][ T4212] sel_write_load+0xf8/0x380 [ 42.411011][ T4212] ? __pfx_sel_write_load+0x10/0x10 [ 42.411035][ T4212] vfs_write+0x269/0x960 [ 42.411066][ T4212] ? __rcu_read_unlock+0x4f/0x70 [ 42.411098][ T4212] ? __fget_files+0x184/0x1c0 [ 42.411149][ T4212] ksys_write+0xda/0x1a0 [ 42.411257][ T4212] __x64_sys_write+0x40/0x50 [ 42.411290][ T4212] x64_sys_call+0x2802/0x3000 [ 42.411394][ T4212] do_syscall_64+0xd2/0x200 [ 42.411435][ T4212] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 42.411515][ T4212] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 42.411556][ T4212] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 42.411580][ T4212] RIP: 0033:0x7fbb3ebaf749 [ 42.411598][ T4212] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 42.411668][ T4212] RSP: 002b:00007fbb3d60f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 42.411692][ T4212] RAX: ffffffffffffffda RBX: 00007fbb3ee05fa0 RCX: 00007fbb3ebaf749 [ 42.411745][ T4212] RDX: 000000000000fffe RSI: 0000200000000000 RDI: 0000000000000003 [ 42.411805][ T4212] RBP: 00007fbb3d60f090 R08: 0000000000000000 R09: 0000000000000000 [ 42.411820][ T4212] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 42.411876][ T4212] R13: 00007fbb3ee06038 R14: 00007fbb3ee05fa0 R15: 00007ffc90f4af48 [ 42.411910][ T4212] [ 42.418951][ T4212] SELinux: ebitmap: truncated map [ 42.677080][ T4212] SELinux: failed to load policy [ 42.700556][ T4217] x_tables: duplicate underflow at hook 3 [ 42.729121][ T4220] loop3: detected capacity change from 0 to 512 [ 42.746341][ T4220] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 42.780224][ T4226] loop0: detected capacity change from 0 to 512 [ 42.780260][ T4223] wg1 speed is unknown, defaulting to 1000 [ 42.786702][ T4220] EXT4-fs (loop3): 1 truncate cleaned up [ 42.803601][ T4220] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.817810][ T4226] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.834087][ T4226] ext4 filesystem being mounted at /40/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 42.844667][ T4223] loop2: detected capacity change from 0 to 512 [ 42.863012][ T4223] EXT4-fs warning (device loop2): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 42.878013][ T4223] EXT4-fs (loop2): mount failed [ 42.878811][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.936377][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.974965][ T4244] loop3: detected capacity change from 0 to 512 [ 42.999542][ T4244] EXT4-fs error (device loop3): ext4_orphan_get:1418: comm syz.3.181: bad orphan inode 11862016 [ 43.038466][ T4244] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 43.059815][ T4244] ext4 filesystem being mounted at /27/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 43.171696][ T4253] loop0: detected capacity change from 0 to 512 [ 43.188623][ T4253] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 43.200523][ T4253] EXT4-fs (loop0): 1 truncate cleaned up [ 43.206852][ T4253] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.318095][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.618587][ T4263] x_tables: duplicate underflow at hook 3 [ 43.624166][ T4261] loop4: detected capacity change from 0 to 4096 [ 43.631748][ T4261] ======================================================= [ 43.631748][ T4261] WARNING: The mand mount option has been deprecated and [ 43.631748][ T4261] and is ignored by this kernel. Remove the mand [ 43.631748][ T4261] option from the mount to silence this warning. [ 43.631748][ T4261] ======================================================= [ 43.674417][ T4261] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.689284][ T4265] xt_hashlimit: max too large, truncated to 1048576 [ 43.691299][ T4261] batman_adv: batadv0: Adding interface: dummy0 [ 43.702243][ T4261] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 43.730676][ T4261] batman_adv: batadv0: Interface activated: dummy0 [ 43.798929][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.814639][ T4244] syz.3.181 (4244) used greatest stack depth: 9880 bytes left [ 43.846916][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 44.058764][ T4278] netlink: 228 bytes leftover after parsing attributes in process `syz.4.193'. [ 44.123525][ T4283] loop3: detected capacity change from 0 to 1024 [ 44.162667][ T4285] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 44.172058][ T4285] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 44.264809][ T4294] netlink: 28 bytes leftover after parsing attributes in process `syz.0.200'. [ 44.274910][ T4294] netlink: 8 bytes leftover after parsing attributes in process `syz.0.200'. [ 44.541111][ T4312] netlink: 80 bytes leftover after parsing attributes in process `syz.0.208'. [ 44.550235][ T4312] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2579 sclass=netlink_route_socket pid=4312 comm=syz.0.208 [ 44.653340][ T4318] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 44.688009][ T1036] usb 3-1: enqueue for inactive port 0 [ 44.698085][ T1036] usb 3-1: enqueue for inactive port 0 [ 44.709392][ T4318] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=4318 comm=syz.1.211 [ 44.778345][ T1036] vhci_hcd: vhci_device speed not set [ 44.812611][ T4320] wg1 speed is unknown, defaulting to 1000 [ 44.938049][ T4324] netlink: 4 bytes leftover after parsing attributes in process `syz.1.213'. [ 44.947512][ T4324] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 44.955077][ T4324] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 44.962935][ T4324] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 44.970522][ T4324] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 45.070635][ T4328] x_tables: duplicate underflow at hook 3 [ 45.196341][ T4332] loop1: detected capacity change from 0 to 512 [ 45.275312][ T4338] netlink: 80 bytes leftover after parsing attributes in process `syz.1.219'. [ 45.285655][ T4338] xt_recent: hitcount (16777216) is larger than allowed maximum (65535) [ 45.365804][ T4346] wg1 speed is unknown, defaulting to 1000 [ 45.447980][ T4353] netlink: 24 bytes leftover after parsing attributes in process `syz.3.225'. [ 45.479534][ T4354] bridge0: port 3(batadv0) entered blocking state [ 45.486144][ T4354] bridge0: port 3(batadv0) entered disabled state [ 45.493146][ T4354] batadv0: entered allmulticast mode [ 45.501275][ T4354] batadv0: entered promiscuous mode [ 45.512182][ T4353] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4353 comm=syz.3.225 [ 45.615435][ T4367] netlink: 80 bytes leftover after parsing attributes in process `syz.1.232'. [ 45.627659][ T4367] xt_recent: hitcount (16777216) is larger than allowed maximum (65535) [ 45.698687][ T4377] wg1 speed is unknown, defaulting to 1000 [ 45.721546][ T4379] loop3: detected capacity change from 0 to 164 [ 45.731053][ T4379] Unable to read rock-ridge attributes [ 45.743729][ T4379] Unable to read rock-ridge attributes [ 45.755734][ T4379] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.770445][ T4383] x_tables: duplicate underflow at hook 3 [ 45.826372][ T4390] netlink: 'syz.0.241': attribute type 298 has an invalid length. [ 45.837931][ T4379] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.850084][ T4390] netlink: 'syz.0.241': attribute type 298 has an invalid length. [ 45.858171][ T4390] netlink: 'syz.0.241': attribute type 298 has an invalid length. [ 45.858274][ T4391] 9pnet_fd: Insufficient options for proto=fd [ 45.901020][ T4379] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.978009][ T113] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 45.987236][ T113] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 45.998618][ T4379] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.065549][ T113] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.077256][ T113] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.088108][ T113] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.099690][ T113] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.121712][ T29] kauditd_printk_skb: 7112 callbacks suppressed [ 46.121724][ T29] audit: type=1400 audit(1764250429.043:12188): avc: denied { unmount } for pid=3319 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 46.159347][ T4402] xt_recent: hitcount (16777216) is larger than allowed maximum (65535) [ 46.203662][ T29] audit: type=1326 audit(1764250429.123:12189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4405 comm="syz.3.247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb3ebaf749 code=0x7ffc0000 [ 46.228228][ T29] audit: type=1326 audit(1764250429.123:12190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4405 comm="syz.3.247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb3ebaf749 code=0x7ffc0000 [ 46.251636][ T29] audit: type=1326 audit(1764250429.133:12191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4405 comm="syz.3.247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbb3ebaf749 code=0x7ffc0000 [ 46.275039][ T29] audit: type=1326 audit(1764250429.133:12192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4405 comm="syz.3.247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb3ebaf749 code=0x7ffc0000 [ 46.298608][ T29] audit: type=1326 audit(1764250429.133:12193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4405 comm="syz.3.247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb3ebaf749 code=0x7ffc0000 [ 46.322196][ T29] audit: type=1326 audit(1764250429.133:12194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4405 comm="syz.3.247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbb3ebaf749 code=0x7ffc0000 [ 46.345762][ T29] audit: type=1326 audit(1764250429.133:12195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4405 comm="syz.3.247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb3ebaf749 code=0x7ffc0000 [ 46.369170][ T29] audit: type=1326 audit(1764250429.133:12196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4405 comm="syz.3.247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb3ebaf749 code=0x7ffc0000 [ 46.392624][ T29] audit: type=1326 audit(1764250429.133:12197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4405 comm="syz.3.247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbb3ebaf749 code=0x7ffc0000 [ 46.536449][ T4410] wg1 speed is unknown, defaulting to 1000 [ 46.592989][ T4414] x_tables: duplicate underflow at hook 3 [ 46.622698][ T4418] loop3: detected capacity change from 0 to 512 [ 46.631647][ T4416] atomic_op ffff888103e1e928 conn xmit_atomic 0000000000000000 [ 46.641500][ T4418] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.654181][ T4418] ext4 filesystem being mounted at /48/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 46.768087][ T23] usb 1-1: enqueue for inactive port 0 [ 46.773602][ T23] usb 1-1: enqueue for inactive port 0 [ 46.858079][ T23] vhci_hcd: vhci_device speed not set [ 46.968228][ T4455] __nla_validate_parse: 3 callbacks suppressed [ 46.968244][ T4455] netlink: 28 bytes leftover after parsing attributes in process `syz.0.258'. [ 46.983386][ T4455] netlink: 8 bytes leftover after parsing attributes in process `syz.0.258'. [ 47.081773][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.135297][ T4467] wg1 speed is unknown, defaulting to 1000 [ 47.287473][ T4474] x_tables: duplicate underflow at hook 3 [ 47.384550][ T4485] netlink: 4 bytes leftover after parsing attributes in process `syz.3.268'. [ 47.403236][ T4491] netlink: 28 bytes leftover after parsing attributes in process `syz.4.270'. [ 47.412308][ T4491] netlink: 8 bytes leftover after parsing attributes in process `syz.4.270'. [ 47.455656][ T4493] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 47.464363][ T4493] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 47.477466][ T4495] xt_recent: hitcount (16777216) is larger than allowed maximum (65535) [ 47.585896][ T4502] loop3: detected capacity change from 0 to 512 [ 47.609315][ T4502] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 47.622246][ T4502] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.641678][ T4498] unsupported nla_type 52263 [ 47.720055][ T4508] x_tables: duplicate underflow at hook 3 [ 47.757116][ T4510] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 47.768505][ T4510] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 47.935086][ T4520] process 'syz.3.275' launched './file0' with NULL argv: empty string added [ 48.286420][ T4528] netlink: 4 bytes leftover after parsing attributes in process `syz.1.282'. [ 48.582983][ T4532] loop1: detected capacity change from 0 to 8192 [ 48.620690][ T4532] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 48.655948][ T4538] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=15 sclass=netlink_route_socket pid=4538 comm=syz.3.286 [ 48.669734][ T4538] netlink: 4 bytes leftover after parsing attributes in process `syz.3.286'. [ 48.747487][ T4534] batman_adv: batadv0: Adding interface: dummy0 [ 48.753796][ T4534] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.783369][ T4534] batman_adv: batadv0: Interface activated: dummy0 [ 48.969765][ T4557] loop1: detected capacity change from 0 to 512 [ 48.991926][ T4557] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 49.003446][ T4557] EXT4-fs (loop1): 1 truncate cleaned up [ 49.009854][ T4557] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.042061][ T4560] wg1 speed is unknown, defaulting to 1000 [ 49.071174][ T4560] loop2: detected capacity change from 0 to 512 [ 49.089369][ T4560] EXT4-fs warning (device loop2): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 49.104253][ T4560] EXT4-fs (loop2): mount failed [ 49.133434][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.143700][ T4566] x_tables: duplicate underflow at hook 3 [ 49.177041][ T4570] netlink: 28 bytes leftover after parsing attributes in process `syz.2.297'. [ 49.189215][ T4570] netlink: 4 bytes leftover after parsing attributes in process `syz.2.297'. [ 49.202764][ T4572] batadv0 (unregistering): left allmulticast mode [ 49.209314][ T4572] batadv0 (unregistering): left promiscuous mode [ 49.215843][ T4572] bridge0: port 3(batadv0) entered disabled state [ 49.279570][ T4574] atomic_op ffff8881048ab928 conn xmit_atomic 0000000000000000 [ 49.340057][ T4579] loop2: detected capacity change from 0 to 1024 [ 49.368351][ T4581] netlink: 40 bytes leftover after parsing attributes in process `syz.1.302'. [ 49.668587][ T4596] loop2: detected capacity change from 0 to 512 [ 49.675750][ T4596] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 49.687143][ T4596] EXT4-fs (loop2): 1 truncate cleaned up [ 49.693226][ T4596] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.722439][ T4599] x_tables: duplicate underflow at hook 3 [ 49.808799][ T4608] atomic_op ffff88811dbe3928 conn xmit_atomic 0000000000000000 [ 49.842530][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.270742][ T4620] loop1: detected capacity change from 0 to 4096 [ 50.284260][ T4620] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.330114][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.371072][ T4626] wg1 speed is unknown, defaulting to 1000 [ 50.513865][ T4634] x_tables: duplicate underflow at hook 3 [ 50.647341][ T4644] loop1: detected capacity change from 0 to 512 [ 50.817559][ T4651] loop1: detected capacity change from 0 to 4096 [ 50.839614][ T4651] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.892477][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.909686][ T4658] xt_recent: hitcount (16777216) is larger than allowed maximum (65535) [ 50.981251][ T4670] loop1: detected capacity change from 0 to 1024 [ 51.000785][ T4670] EXT4-fs (loop1): couldn't mount as ext2 due to feature incompatibilities [ 51.145191][ T4675] loop3: detected capacity change from 0 to 512 [ 51.222428][ T4676] wg1 speed is unknown, defaulting to 1000 [ 51.280131][ T4676] 9pnet_fd: Insufficient options for proto=fd [ 51.726755][ T4688] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(14) [ 51.733391][ T4688] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 51.740914][ T4688] vhci_hcd vhci_hcd.0: Device attached [ 51.802558][ T4693] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(16) [ 51.809272][ T4693] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 51.816871][ T4693] vhci_hcd vhci_hcd.0: Device attached [ 51.969132][ T4692] loop2: detected capacity change from 0 to 4096 [ 52.007927][ T3400] usb 7-1: new low-speed USB device number 2 using vhci_hcd [ 52.038882][ T4692] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 52.082091][ T4692] batman_adv: batadv0: Adding interface: dummy0 [ 52.088402][ T4692] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 52.114840][ T4692] batman_adv: batadv0: Interface activated: dummy0 [ 52.131589][ T4705] wg1 speed is unknown, defaulting to 1000 [ 52.138728][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.209439][ T29] kauditd_printk_skb: 1179 callbacks suppressed [ 52.209454][ T29] audit: type=1400 audit(1764250435.133:13376): avc: denied { read write } for pid=4712 comm="syz.4.348" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 52.226262][ T4713] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 52.239501][ T29] audit: type=1400 audit(1764250435.133:13377): avc: denied { open } for pid=4712 comm="syz.4.348" path="/dev/raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 52.271936][ T4713] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 52.279770][ T29] audit: type=1400 audit(1764250435.143:13378): avc: denied { ioctl } for pid=4712 comm="syz.4.348" path="/dev/raw-gadget" dev="devtmpfs" ino=142 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 52.358768][ T29] audit: type=1326 audit(1764250435.273:13379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4712 comm="syz.4.348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4dd5b0f749 code=0x7ffc0000 [ 52.382328][ T29] audit: type=1326 audit(1764250435.273:13380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4712 comm="syz.4.348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4dd5b0f749 code=0x7ffc0000 [ 52.405860][ T29] audit: type=1326 audit(1764250435.273:13381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4712 comm="syz.4.348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4dd5b0f749 code=0x7ffc0000 [ 52.429324][ T29] audit: type=1326 audit(1764250435.273:13382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4712 comm="syz.4.348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4dd5b0f749 code=0x7ffc0000 [ 52.437131][ T4720] loop1: detected capacity change from 0 to 512 [ 52.452821][ T29] audit: type=1326 audit(1764250435.273:13383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4712 comm="syz.4.348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4dd5b0f749 code=0x7ffc0000 [ 52.482491][ T29] audit: type=1326 audit(1764250435.273:13384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4712 comm="syz.4.348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=201 compat=0 ip=0x7f4dd5b0f749 code=0x7ffc0000 [ 52.505900][ T29] audit: type=1326 audit(1764250435.273:13385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4712 comm="syz.4.348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4dd5b0f749 code=0x7ffc0000 [ 52.529643][ T4694] vhci_hcd: connection closed [ 52.529759][ T4689] vhci_hcd: connection reset by peer [ 52.540005][ T291] vhci_hcd: stop threads [ 52.544293][ T291] vhci_hcd: release socket [ 52.548811][ T291] vhci_hcd: disconnect device [ 52.554049][ T291] vhci_hcd: stop threads [ 52.558384][ T291] vhci_hcd: release socket [ 52.562827][ T291] vhci_hcd: disconnect device [ 52.586901][ T4728] x_tables: duplicate underflow at hook 3 [ 52.601610][ T4720] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 52.618705][ T4731] __nla_validate_parse: 10 callbacks suppressed [ 52.618722][ T4731] netlink: 28 bytes leftover after parsing attributes in process `syz.4.354'. [ 52.624025][ T4720] ext4 filesystem being mounted at /86/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 52.645551][ T4731] netlink: 4 bytes leftover after parsing attributes in process `syz.4.354'. [ 52.701995][ T4735] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=4735 comm=syz.4.357 [ 52.703180][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.714460][ T4735] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=4735 comm=syz.4.357 [ 52.811483][ T4742] wg1 speed is unknown, defaulting to 1000 [ 52.856881][ T4746] xt_recent: hitcount (16777216) is larger than allowed maximum (65535) [ 52.916068][ T4748] wg1 speed is unknown, defaulting to 1000 [ 52.937984][ T4755] xt_recent: hitcount (16777216) is larger than allowed maximum (65535) [ 52.974650][ T4760] netlink: 4 bytes leftover after parsing attributes in process `syz.4.365'. [ 53.062120][ T4766] FAULT_INJECTION: forcing a failure. [ 53.062120][ T4766] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 53.075372][ T4766] CPU: 1 UID: 0 PID: 4766 Comm: syz.4.366 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 53.075410][ T4766] Tainted: [W]=WARN [ 53.075418][ T4766] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 53.075431][ T4766] Call Trace: [ 53.075450][ T4766] [ 53.075457][ T4766] __dump_stack+0x1d/0x30 [ 53.075476][ T4766] dump_stack_lvl+0xe8/0x140 [ 53.075498][ T4766] dump_stack+0x15/0x1b [ 53.075519][ T4766] should_fail_ex+0x265/0x280 [ 53.075542][ T4766] should_fail+0xb/0x20 [ 53.075561][ T4766] should_fail_usercopy+0x1a/0x20 [ 53.075588][ T4766] copy_fpstate_to_sigframe+0x628/0x7d0 [ 53.075636][ T4766] ? copy_fpstate_to_sigframe+0xe6/0x7d0 [ 53.075678][ T4766] ? x86_task_fpu+0x36/0x60 [ 53.075737][ T4766] get_sigframe+0x34d/0x490 [ 53.075760][ T4766] ? get_signal+0xdc7/0xf70 [ 53.075819][ T4766] x64_setup_rt_frame+0xa8/0x580 [ 53.075846][ T4766] arch_do_signal_or_restart+0x23e/0x440 [ 53.075881][ T4766] exit_to_user_mode_loop+0x77/0x110 [ 53.075981][ T4766] do_syscall_64+0x1d6/0x200 [ 53.076049][ T4766] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 53.076087][ T4766] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 53.076199][ T4766] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 53.076220][ T4766] RIP: 0033:0x7f4dd5b0f747 [ 53.076233][ T4766] Code: ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 <0f> 05 48 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 [ 53.076316][ T4766] RSP: 002b:00007f4dd456f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000013 [ 53.076411][ T4766] RAX: 0000000000000013 RBX: 00007f4dd5d65fa0 RCX: 00007f4dd5b0f749 [ 53.076431][ T4766] RDX: 0000000000000001 RSI: 0000200000000140 RDI: 0000000000000004 [ 53.076441][ T4766] RBP: 00007f4dd456f090 R08: 0000000000000000 R09: 0000000000000000 [ 53.076451][ T4766] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 53.076487][ T4766] R13: 00007f4dd5d66038 R14: 00007f4dd5d65fa0 R15: 00007ffe2e2063a8 [ 53.076504][ T4766] [ 53.327156][ T4790] netlink: 4 bytes leftover after parsing attributes in process `syz.4.368'. [ 54.250023][ T4859] netlink: 4 bytes leftover after parsing attributes in process `syz.4.370'. [ 54.253083][ T4863] wg1 speed is unknown, defaulting to 1000 [ 54.353968][ T4880] loop3: detected capacity change from 0 to 512 [ 54.376018][ T4880] EXT4-fs warning (device loop3): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 54.391210][ T4880] EXT4-fs (loop3): mount failed [ 54.623743][ T4910] wg1 speed is unknown, defaulting to 1000 [ 54.709488][ T4918] xt_recent: hitcount (16777216) is larger than allowed maximum (65535) [ 54.730961][ T4919] netlink: 'syz.3.374': attribute type 10 has an invalid length. [ 54.749271][ T4919] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.757793][ T4919] bond0: (slave team0): Enslaving as an active interface with an up link [ 54.777641][ T4916] atomic_op ffff88811dbe3528 conn xmit_atomic 0000000000000000 [ 54.802254][ T4921] netlink: 4 bytes leftover after parsing attributes in process `syz.2.376'. [ 54.836714][ T4923] loop3: detected capacity change from 0 to 512 [ 54.869490][ T4923] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 54.882974][ T4923] ext4 filesystem being mounted at /76/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 55.180106][ T4938] netlink: 4 bytes leftover after parsing attributes in process `syz.1.382'. [ 55.211326][ T4935] netlink: 4 bytes leftover after parsing attributes in process `syz.4.381'. [ 55.229722][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.282414][ T4947] loop2: detected capacity change from 0 to 512 [ 55.299983][ T4947] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 55.317220][ T4947] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.586576][ T4956] wg1 speed is unknown, defaulting to 1000 [ 56.135557][ T4973] wg1 speed is unknown, defaulting to 1000 [ 56.145098][ T4976] netlink: 4 bytes leftover after parsing attributes in process `syz.3.393'. [ 56.215328][ T4984] SELinux: security_context_str_to_sid ({25+6ߒq 1>-ȕ\=T_R{B=ԄSY.%HUAfλ)ǒʯpy&C^9LQ4LBD W?b(pehZÓ~ :rK}%<\)W4%|&܄K}9Я`k.[7h燋DgDžj) failed with errno=-22 [ 56.270747][ T4988] xt_recent: hitcount (16777216) is larger than allowed maximum (65535) [ 56.576567][ T5025] netlink: 12 bytes leftover after parsing attributes in process `syz.1.398'. [ 56.661437][ T5038] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 56.674673][ T5038] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 57.087990][ T3400] usb 7-1: enqueue for inactive port 0 [ 57.099455][ T3400] usb 7-1: enqueue for inactive port 0 [ 57.139849][ T5091] x_tables: duplicate underflow at hook 3 [ 57.177994][ T3400] vhci_hcd: vhci_device speed not set [ 57.281743][ T29] kauditd_printk_skb: 311 callbacks suppressed [ 57.281761][ T29] audit: type=1326 audit(1764250440.203:13696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5110 comm="syz.0.407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a16cff749 code=0x7ffc0000 [ 57.319935][ T29] audit: type=1326 audit(1764250440.243:13697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5110 comm="syz.0.407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a16cff749 code=0x7ffc0000 [ 57.343442][ T29] audit: type=1326 audit(1764250440.243:13698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5110 comm="syz.0.407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a16cff749 code=0x7ffc0000 [ 57.366916][ T29] audit: type=1326 audit(1764250440.243:13699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5110 comm="syz.0.407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f9a16cff749 code=0x7ffc0000 [ 57.390405][ T29] audit: type=1326 audit(1764250440.243:13700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5110 comm="syz.0.407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a16cff749 code=0x7ffc0000 [ 57.413926][ T29] audit: type=1326 audit(1764250440.243:13701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5110 comm="syz.0.407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a16cff749 code=0x7ffc0000 [ 57.437374][ T29] audit: type=1326 audit(1764250440.243:13702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5110 comm="syz.0.407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a16cff749 code=0x7ffc0000 [ 57.461006][ T29] audit: type=1326 audit(1764250440.243:13703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5110 comm="syz.0.407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f9a16cff749 code=0x7ffc0000 [ 57.484473][ T29] audit: type=1326 audit(1764250440.243:13704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5110 comm="syz.0.407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a16cff749 code=0x7ffc0000 [ 57.507892][ T29] audit: type=1326 audit(1764250440.243:13705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5110 comm="syz.0.407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a16cff749 code=0x7ffc0000 [ 57.822033][ T5156] __nla_validate_parse: 3 callbacks suppressed [ 57.822050][ T5156] netlink: 28 bytes leftover after parsing attributes in process `syz.2.409'. [ 57.837396][ T5156] netlink: 8 bytes leftover after parsing attributes in process `syz.2.409'. [ 57.877020][ T5162] netlink: 12 bytes leftover after parsing attributes in process `syz.3.410'. [ 57.896157][ T5162] netlink: 4 bytes leftover after parsing attributes in process `syz.3.410'. [ 57.905622][ T5161] loop2: detected capacity change from 0 to 4096 [ 57.918417][ T5161] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 57.992674][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.002623][ T5171] loop3: detected capacity change from 0 to 4096 [ 58.020017][ T5171] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 58.028094][ T5174] netlink: 24 bytes leftover after parsing attributes in process `syz.2.415'. [ 58.038210][ T5171] batman_adv: batadv0: Adding interface: dummy0 [ 58.047713][ T5171] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 58.074130][ T5171] batman_adv: batadv0: Interface activated: dummy0 [ 58.104564][ T5174] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5174 comm=syz.2.415 [ 58.145308][ T5177] netlink: 4 bytes leftover after parsing attributes in process `syz.0.417'. [ 58.158371][ T5179] netlink: 40 bytes leftover after parsing attributes in process `syz.2.418'. [ 58.169245][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.221618][ T5184] netlink: 28 bytes leftover after parsing attributes in process `syz.3.416'. [ 58.230644][ T5184] netlink: 8 bytes leftover after parsing attributes in process `syz.3.416'. [ 58.405434][ T5194] netlink: 12 bytes leftover after parsing attributes in process `syz.4.422'. [ 58.523565][ T5199] netlink: 'syz.4.424': attribute type 10 has an invalid length. [ 58.541810][ T5199] atomic_op ffff88811dbe3928 conn xmit_atomic 0000000000000000 [ 58.654053][ T5205] loop4: detected capacity change from 0 to 512 [ 58.669936][ T5205] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 58.683226][ T5205] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.826463][ T5211] loop4: detected capacity change from 0 to 512 [ 58.859879][ T5211] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 58.872916][ T5211] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.080544][ T5217] loop2: detected capacity change from 0 to 512 [ 59.194719][ T5223] wg1 speed is unknown, defaulting to 1000 [ 59.362499][ T5248] wg1 speed is unknown, defaulting to 1000 [ 59.799654][ T5319] vhci_hcd: USB_PORT_FEAT_LINK_STATE req not supported for USB 2.0 roothub [ 59.848692][ T5323] loop1: detected capacity change from 0 to 4096 [ 59.862197][ T5323] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 59.945877][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.051911][ T5348] loop1: detected capacity change from 0 to 512 [ 60.273848][ T5392] xt_recent: hitcount (16777216) is larger than allowed maximum (65535) [ 60.288339][ T5394] SELinux: security_context_str_to_sid (=Ro>_&m ~6)Wm} V) failed with errno=-22 [ 60.874180][ T5411] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5411 comm=syz.0.452 [ 60.971023][ T5415] loop4: detected capacity change from 0 to 512 [ 61.085963][ T5424] wg1 speed is unknown, defaulting to 1000 [ 61.136386][ T5429] netlink: 'syz.2.460': attribute type 10 has an invalid length. [ 61.147359][ T5429] 8021q: adding VLAN 0 to HW filter on device team0 [ 61.157956][ T5429] bond0: (slave team0): Enslaving as an active interface with an up link [ 61.174192][ T5429] atomic_op ffff888102bbed28 conn xmit_atomic 0000000000000000 [ 61.273816][ T5435] loop1: detected capacity change from 0 to 512 [ 61.291556][ T5437] wg1 speed is unknown, defaulting to 1000 [ 61.321927][ T5435] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 61.351554][ T5435] ext4 filesystem being mounted at /101/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 61.414041][ T5446] wg1 speed is unknown, defaulting to 1000 [ 61.431548][ T5452] SELinux: security_context_str_to_sid (S1ފNa)jB߶IC4ml!`uu9 $^#_ѐ~6 g3vQyMZP 7 ~k/(0wgN /sӂBlUs|7WtX_,*6`vߩ|7XH҇5O7:'U(IqAM jgbKv5-S;$e\Ps=Ƭ;lY$ƚ) failed with errno=-22 [ 61.553941][ T5456] wg1 speed is unknown, defaulting to 1000 [ 61.865114][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.909981][ T5497] loop1: detected capacity change from 0 to 512 [ 61.981446][ T5497] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 62.006630][ T5497] ext4 filesystem being mounted at /102/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 62.040339][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.218427][ T5516] loop1: detected capacity change from 0 to 512 [ 62.288234][ T29] kauditd_printk_skb: 2788 callbacks suppressed [ 62.288251][ T29] audit: type=1326 audit(1764250445.213:16494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5484 comm="syz.0.475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f9a16cf65e7 code=0x7ffc0000 [ 62.318106][ T29] audit: type=1326 audit(1764250445.213:16495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5484 comm="syz.0.475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f9a16c9b829 code=0x7ffc0000 [ 62.341474][ T29] audit: type=1326 audit(1764250445.213:16496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5484 comm="syz.0.475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=76 compat=0 ip=0x7f9a16cff749 code=0x7ffc0000 [ 62.375967][ T29] audit: type=1326 audit(1764250445.213:16497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5484 comm="syz.0.475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f9a16d32005 code=0x7ffc0000 [ 62.385139][ T5555] xt_recent: hitcount (16777216) is larger than allowed maximum (65535) [ 62.399633][ T29] audit: type=1326 audit(1764250445.213:16498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5484 comm="syz.0.475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f9a16d32005 code=0x7ffc0000 [ 62.431442][ T29] audit: type=1326 audit(1764250445.213:16499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5484 comm="syz.0.475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f9a16d32005 code=0x7ffc0000 [ 62.455066][ T29] audit: type=1326 audit(1764250445.213:16500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5484 comm="syz.0.475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f9a16d32005 code=0x7ffc0000 [ 62.455208][ T5537] loop3: detected capacity change from 0 to 512 [ 62.478523][ T29] audit: type=1326 audit(1764250445.213:16501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5484 comm="syz.0.475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f9a16d32005 code=0x7ffc0000 [ 62.508175][ T29] audit: type=1326 audit(1764250445.213:16502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5484 comm="syz.0.475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f9a16d32005 code=0x7ffc0000 [ 62.531600][ T29] audit: type=1326 audit(1764250445.213:16503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5484 comm="syz.0.475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f9a16d32005 code=0x7ffc0000 [ 62.564968][ T5537] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 62.578304][ T5537] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.583936][ T5562] x_tables: duplicate underflow at hook 3 [ 62.739218][ T5584] netlink: 'syz.0.489': attribute type 10 has an invalid length. [ 62.751984][ T5584] atomic_op ffff88811bd96928 conn xmit_atomic 0000000000000000 [ 62.808507][ T5605] loop3: detected capacity change from 0 to 512 [ 62.819042][ T5599] wg1 speed is unknown, defaulting to 1000 [ 62.862398][ T5605] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 62.881235][ T5605] ext4 filesystem being mounted at /103/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 62.914604][ T5618] xt_recent: hitcount (16777216) is larger than allowed maximum (65535) [ 62.957354][ T5625] x_tables: duplicate underflow at hook 3 [ 63.263777][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.329533][ T5672] netlink: 'syz.3.502': attribute type 10 has an invalid length. [ 63.345464][ T5672] atomic_op ffff888103e1e928 conn xmit_atomic 0000000000000000 [ 63.382396][ T5684] __nla_validate_parse: 20 callbacks suppressed [ 63.382413][ T5684] netlink: 28 bytes leftover after parsing attributes in process `syz.3.503'. [ 63.397568][ T5684] netlink: 8 bytes leftover after parsing attributes in process `syz.3.503'. [ 63.438878][ T5690] netlink: 16 bytes leftover after parsing attributes in process `syz.3.504'. [ 63.458704][ T5690] netlink: 4 bytes leftover after parsing attributes in process `syz.3.504'. [ 63.518604][ T5699] xt_recent: hitcount (16777216) is larger than allowed maximum (65535) [ 63.546922][ T5701] x_tables: duplicate underflow at hook 3 [ 63.605077][ T5710] netlink: 28 bytes leftover after parsing attributes in process `syz.3.510'. [ 63.614115][ T5710] netlink: 8 bytes leftover after parsing attributes in process `syz.3.510'. [ 63.823669][ T5724] loop3: detected capacity change from 0 to 1024 [ 63.831975][ T5724] EXT4-fs (loop3): couldn't mount as ext2 due to feature incompatibilities [ 63.948125][ T5727] netlink: 28 bytes leftover after parsing attributes in process `syz.0.516'. [ 63.957016][ T5727] netlink: 8 bytes leftover after parsing attributes in process `syz.0.516'. [ 63.968628][ T5729] xt_recent: hitcount (16777216) is larger than allowed maximum (65535) [ 64.058161][ T5733] wg1 speed is unknown, defaulting to 1000 [ 64.161230][ T5731] x_tables: duplicate underflow at hook 3 [ 64.237073][ T5740] loop1: detected capacity change from 0 to 512 [ 64.420135][ T5740] EXT4-fs error (device loop1): ext4_orphan_get:1418: comm syz.1.520: bad orphan inode 11862016 [ 64.421198][ T5740] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 64.421358][ T5740] ext4 filesystem being mounted at /112/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 64.480940][ T5742] loop4: detected capacity change from 0 to 512 [ 64.612205][ T5757] netlink: 'syz.4.526': attribute type 10 has an invalid length. [ 64.628889][ T5757] atomic_op ffff88811dc68928 conn xmit_atomic 0000000000000000 [ 64.728864][ T5766] xt_recent: hitcount (16777216) is larger than allowed maximum (65535) [ 64.787202][ T5767] wg1 speed is unknown, defaulting to 1000 [ 64.847763][ T5774] loop4: detected capacity change from 0 to 512 [ 65.001765][ T5774] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 65.030349][ T5774] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.079160][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 65.300086][ T5786] wg1 speed is unknown, defaulting to 1000 [ 65.425798][ T5807] netlink: 40 bytes leftover after parsing attributes in process `syz.4.534'. [ 65.611575][ T5810] loop1: detected capacity change from 0 to 512 [ 65.701270][ T5834] netlink: 24 bytes leftover after parsing attributes in process `syz.1.539'. [ 65.725845][ T5834] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5834 comm=syz.1.539 [ 65.839069][ T5843] wg1 speed is unknown, defaulting to 1000 [ 65.888953][ T5855] loop1: detected capacity change from 0 to 1024 [ 65.897490][ T5858] SELinux: security_context_str_to_sid (¦I/ AXwӲ>eK 2%I^pԎM:&g|yq+?kT'W\b /NLG) failed with errno=-22 [ 66.002372][ T5843] loop2: detected capacity change from 0 to 512 [ 66.024044][ T5843] EXT4-fs warning (device loop2): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 66.056665][ T5843] EXT4-fs (loop2): mount failed [ 66.482794][ T5928] loop1: detected capacity change from 0 to 512 [ 66.531453][ T5928] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 66.554983][ T5928] ext4 filesystem being mounted at /123/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 66.897730][ T5959] loop2: detected capacity change from 0 to 512 [ 66.972938][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.005284][ T5976] SELinux: security_context_str_to_sid (D;geFW2"a&g ^4!m!q sZdPlO%)=5;/q0qL(XAN+p_G>x5ڤT& ĘH< 3\šg߲D,$޿8)r̐ڙrYYu%=j;HjԩBQ3#YU [ 67.005284][ T5976] G̔xuWW)1N?U x<60l-5ɀXpK03!) failed with errno=-22 [ 67.053512][ T5979] vhci_hcd: USB_PORT_FEAT_LINK_STATE req not supported for USB 2.0 roothub [ 67.107120][ T5981] loop1: detected capacity change from 0 to 4096 [ 67.135629][ T5981] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 67.148555][ T5985] loop2: detected capacity change from 0 to 1024 [ 67.156816][ T5985] EXT4-fs (loop2): couldn't mount as ext2 due to feature incompatibilities [ 67.588620][ T5997] wg1 speed is unknown, defaulting to 1000 [ 67.741527][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.906993][ T6002] wg1 speed is unknown, defaulting to 1000 [ 68.040650][ T6013] loop1: detected capacity change from 0 to 1024 [ 68.070248][ T6016] loop2: detected capacity change from 0 to 4096 [ 68.081596][ T6016] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 68.198569][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.274737][ T6021] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6021 comm=syz.4.568 [ 68.330974][ T6028] loop4: detected capacity change from 0 to 4096 [ 68.649015][ T6042] netlink: 'syz.0.575': attribute type 10 has an invalid length. [ 68.702109][ T29] kauditd_printk_skb: 2150 callbacks suppressed [ 68.702123][ T29] audit: type=1326 audit(1764250451.623:18653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6038 comm="syz.0.575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a16cff749 code=0x7ffc0000 [ 68.787321][ T6039] atomic_op ffff88811dbe3128 conn xmit_atomic 0000000000000000 [ 68.799734][ T6041] wg1 speed is unknown, defaulting to 1000 [ 68.846294][ T29] audit: type=1326 audit(1764250451.663:18654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6038 comm="syz.0.575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a16cff749 code=0x7ffc0000 [ 69.255239][ T6062] __nla_validate_parse: 1 callbacks suppressed [ 69.255256][ T6062] netlink: 4 bytes leftover after parsing attributes in process `syz.3.581'. [ 69.573546][ T6074] netlink: 24 bytes leftover after parsing attributes in process `syz.0.583'. [ 69.585338][ T6072] loop3: detected capacity change from 0 to 1024 [ 69.592801][ T6072] EXT4-fs (loop3): couldn't mount as ext2 due to feature incompatibilities [ 69.646872][ T6074] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6074 comm=syz.0.583 [ 70.028030][ T6077] wg1 speed is unknown, defaulting to 1000 [ 70.366434][ T6081] vhci_hcd: USB_PORT_FEAT_LINK_STATE req not supported for USB 2.0 roothub [ 70.676791][ T29] audit: type=1326 audit(1764250453.593:18655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6090 comm="syz.1.591" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63659cf749 code=0x7ffc0000 [ 70.700483][ T29] audit: type=1326 audit(1764250453.593:18656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6090 comm="syz.1.591" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63659cf749 code=0x7ffc0000 [ 70.715185][ T6093] SELinux: security_context_str_to_sid (hr ߆ tE >O zMM~1Aü!:z*ߋ迊O87 b鷢ޝʌJpjl]!}]Qp^εrI'^' 11 [ 70.715185][ T6093]  [ 70.715185][ T6093] RI[GsXOYYi [ 70.715185][ T6093] Jg{ (d|Wu.VRJ@,^Fr drg{==>Jbq+&FXҔ}0߹ ,Cxj%w/Øa)I) failed with errno=-22 [ 70.724107][ T29] audit: type=1326 audit(1764250453.593:18657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6090 comm="syz.1.591" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63659cf749 code=0x7ffc0000 [ 70.822449][ T29] audit: type=1326 audit(1764250453.683:18658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6090 comm="syz.1.591" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f63659cf749 code=0x7ffc0000 [ 70.845915][ T29] audit: type=1326 audit(1764250453.683:18659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6090 comm="syz.1.591" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63659cf749 code=0x7ffc0000 [ 70.869886][ T29] audit: type=1326 audit(1764250453.683:18660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6090 comm="syz.1.591" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63659cf749 code=0x7ffc0000 [ 70.893477][ T29] audit: type=1326 audit(1764250453.723:18661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6090 comm="syz.1.591" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63659cf749 code=0x7ffc0000 [ 70.916972][ T29] audit: type=1326 audit(1764250453.723:18662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6090 comm="syz.1.591" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63659cf749 code=0x7ffc0000 [ 71.109373][ T6099] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 71.120733][ T6099] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 71.480161][ T6104] netlink: 4 bytes leftover after parsing attributes in process `syz.0.594'. [ 71.523682][ T6108] netlink: 28 bytes leftover after parsing attributes in process `syz.1.595'. [ 71.532909][ T6108] netlink: 8 bytes leftover after parsing attributes in process `syz.1.595'. [ 71.567201][ T6111] netlink: 4 bytes leftover after parsing attributes in process `syz.1.597'. [ 71.605936][ T6113] loop1: detected capacity change from 0 to 512 [ 71.631267][ T6113] EXT4-fs mount: 2 callbacks suppressed [ 71.631279][ T6113] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 71.649393][ T6113] ext4 filesystem being mounted at /135/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 71.671724][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.699733][ T6119] netlink: 'syz.0.599': attribute type 10 has an invalid length. [ 71.719519][ T6115] atomic_op ffff88811c117128 conn xmit_atomic 0000000000000000 [ 71.772265][ T6124] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 71.779714][ T6124] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 71.886708][ T6130] netlink: 'syz.0.604': attribute type 10 has an invalid length. [ 71.902693][ T6130] atomic_op ffff88811dbe3128 conn xmit_atomic 0000000000000000 [ 71.991413][ T6135] SELinux: security_context_str_to_sid (padlc5bVS7B IXƗr"G!`g=mA`4 ~tNs_aبGi\>.RDmK2 [ 71.991413][ T6135] Q(WFg # Pove;Kz~~,2RW. EwO'*iXc{\mhQdh]1tA2J~\jEYڌHFۺ:|) failed with errno=-22 [ 71.991892][ T6137] netlink: 4 bytes leftover after parsing attributes in process `syz.4.607'. [ 72.092416][ T6141] netlink: 28 bytes leftover after parsing attributes in process `syz.4.608'. [ 72.101409][ T6141] netlink: 8 bytes leftover after parsing attributes in process `syz.4.608'. [ 72.137731][ T6143] netlink: 28 bytes leftover after parsing attributes in process `syz.4.609'. [ 72.219648][ T6145] loop4: detected capacity change from 0 to 512 [ 72.305471][ T6147] loop4: detected capacity change from 0 to 512 [ 72.332749][ T6147] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 72.348788][ T6147] ext4 filesystem being mounted at /107/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 72.377555][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.456057][ T6153] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6153 comm=syz.4.613 [ 72.521729][ T6155] loop4: detected capacity change from 0 to 4096 [ 72.549482][ T6155] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 72.664361][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.729422][ T6160] netlink: 'syz.4.616': attribute type 10 has an invalid length. [ 72.750377][ T6160] atomic_op ffff88810352b528 conn xmit_atomic 0000000000000000 [ 72.819143][ T6169] xt_recent: hitcount (16777216) is larger than allowed maximum (65535) [ 72.885382][ T6177] loop4: detected capacity change from 0 to 512 [ 72.922024][ T6177] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 72.948847][ T6177] ext4 filesystem being mounted at /114/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 73.000534][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.051556][ T6186] loop4: detected capacity change from 0 to 4096 [ 73.072531][ T6186] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.139158][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.209842][ T6194] SELinux: security_context_str_to_sid (Z [ 73.209842][ T6194] 䔺a'j́BՓCVᾡ!6 }+4rlisZ flAL [ 73.209842][ T6194] !⻻1wn|P_G%QSKe my.3wqvC,vmܲc67䪉2kb) failed with errno=-22 [ 73.708245][ T29] kauditd_printk_skb: 3365 callbacks suppressed [ 73.708258][ T29] audit: type=1326 audit(1764250456.633:22028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6195 comm="syz.3.631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fbb3eba65e7 code=0x7ffc0000 [ 73.737929][ T29] audit: type=1326 audit(1764250456.633:22029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6195 comm="syz.3.631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fbb3eb4b829 code=0x7ffc0000 [ 73.761360][ T29] audit: type=1326 audit(1764250456.633:22030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6195 comm="syz.3.631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=76 compat=0 ip=0x7fbb3ebaf749 code=0x7ffc0000 [ 73.784890][ T29] audit: type=1326 audit(1764250456.693:22031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6195 comm="syz.3.631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fbb3ebe2005 code=0x7ffc0000 [ 73.808507][ T29] audit: type=1326 audit(1764250456.693:22032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6195 comm="syz.3.631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fbb3eba65e7 code=0x7ffc0000 [ 73.831950][ T29] audit: type=1326 audit(1764250456.693:22033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6195 comm="syz.3.631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fbb3eb4b829 code=0x7ffc0000 [ 73.855286][ T29] audit: type=1326 audit(1764250456.693:22034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6195 comm="syz.3.631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=76 compat=0 ip=0x7fbb3ebaf749 code=0x7ffc0000 [ 73.878639][ T29] audit: type=1326 audit(1764250456.693:22035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6195 comm="syz.3.631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fbb3ebe2005 code=0x7ffc0000 [ 73.902064][ T29] audit: type=1326 audit(1764250456.693:22036): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6195 comm="syz.3.631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fbb3ebe2005 code=0x7ffc0000 [ 73.925501][ T29] audit: type=1326 audit(1764250456.693:22037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6195 comm="syz.3.631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fbb3ebe2005 code=0x7ffc0000 [ 73.990243][ T6207] x_tables: duplicate underflow at hook 3 [ 74.048680][ T6211] vhci_hcd: USB_PORT_FEAT_LINK_STATE req not supported for USB 2.0 roothub [ 74.182576][ T6205] syz.4.634 (6205) used greatest stack depth: 9344 bytes left [ 74.196216][ T6217] vhci_hcd: USB_PORT_FEAT_LINK_STATE req not supported for USB 2.0 roothub [ 74.284956][ T6224] __nla_validate_parse: 8 callbacks suppressed [ 74.284973][ T6224] netlink: 4 bytes leftover after parsing attributes in process `syz.4.642'. [ 74.960214][ T6236] loop3: detected capacity change from 0 to 512 [ 74.983615][ T6237] SELinux: security_context_str_to_sid (Q Iv) failed with errno=-22 [ 75.001480][ T6236] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 75.043226][ T6236] ext4 filesystem being mounted at /128/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 75.121574][ T6243] netlink: 40 bytes leftover after parsing attributes in process `syz.2.647'. [ 75.193721][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.349917][ T6252] vhci_hcd: USB_PORT_FEAT_LINK_STATE req not supported for USB 2.0 roothub [ 75.624552][ T6267] vhci_hcd: USB_PORT_FEAT_LINK_STATE req not supported for USB 2.0 roothub [ 75.774638][ T6272] x_tables: duplicate underflow at hook 3 [ 75.945844][ T6289] netlink: 28 bytes leftover after parsing attributes in process `syz.1.666'. [ 75.954791][ T6289] netlink: 8 bytes leftover after parsing attributes in process `syz.1.666'. [ 76.017079][ T6293] loop1: detected capacity change from 0 to 512 [ 76.050977][ T6293] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 76.063749][ T6293] ext4 filesystem being mounted at /145/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 76.088969][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.121994][ T6301] netlink: 'syz.1.670': attribute type 10 has an invalid length. [ 76.141117][ T6301] atomic_op ffff88811bd95128 conn xmit_atomic 0000000000000000 [ 76.297367][ T6311] x_tables: duplicate underflow at hook 3 [ 76.321090][ T6309] loop2: detected capacity change from 0 to 1024 [ 76.349209][ T6315] netlink: 28 bytes leftover after parsing attributes in process `syz.4.676'. [ 76.394420][ T6322] netlink: 28 bytes leftover after parsing attributes in process `syz.4.678'. [ 76.403536][ T6322] netlink: 8 bytes leftover after parsing attributes in process `syz.4.678'. [ 76.492511][ T6331] loop3: detected capacity change from 0 to 512 [ 76.533643][ T6331] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 76.550237][ T6330] netlink: 4 bytes leftover after parsing attributes in process `syz.4.682'. [ 76.569097][ T6331] ext4 filesystem being mounted at /135/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 76.768935][ T6344] x_tables: duplicate underflow at hook 3 [ 76.930261][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.995601][ T6354] netlink: 28 bytes leftover after parsing attributes in process `syz.3.689'. [ 77.041370][ T6352] loop1: detected capacity change from 0 to 4096 [ 77.061634][ T6352] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 77.148901][ T6363] vhci_hcd: USB_PORT_FEAT_LINK_STATE req not supported for USB 2.0 roothub [ 77.190931][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.375933][ T6379] x_tables: duplicate underflow at hook 3 [ 77.426313][ T6386] netlink: 28 bytes leftover after parsing attributes in process `syz.4.701'. [ 77.456845][ T6382] loop1: detected capacity change from 0 to 512 [ 77.527781][ T6392] loop2: detected capacity change from 0 to 4096 [ 77.544528][ T6392] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 77.548319][ T6399] loop1: detected capacity change from 0 to 512 [ 77.599485][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.611329][ T6399] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 77.630006][ T6399] ext4 filesystem being mounted at /162/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 77.679789][ T6410] bridge0: port 3(batadv1) entered blocking state [ 77.686355][ T6410] bridge0: port 3(batadv1) entered disabled state [ 77.693363][ T6410] batadv1: entered allmulticast mode [ 77.699769][ T6410] batadv1: entered promiscuous mode [ 77.868614][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.042085][ T6424] loop3: detected capacity change from 0 to 512 [ 78.145175][ T6430] loop3: detected capacity change from 0 to 4096 [ 78.156254][ T6430] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 78.178381][ T37] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 78.187644][ T37] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 78.218858][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.492189][ T6447] loop1: detected capacity change from 0 to 1024 [ 78.641202][ T6457] vhci_hcd: USB_PORT_FEAT_LINK_STATE req not supported for USB 2.0 roothub [ 78.718315][ T29] kauditd_printk_skb: 2253 callbacks suppressed [ 78.718327][ T29] audit: type=1326 audit(1764250461.643:24291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6458 comm="syz.3.727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fbb3ebae1ff code=0x7ffc0000 [ 78.749519][ T6459] loop3: detected capacity change from 0 to 512 [ 78.797497][ T29] audit: type=1326 audit(1764250461.673:24292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6458 comm="syz.3.727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7fbb3ebaf7d7 code=0x7ffc0000 [ 78.821085][ T29] audit: type=1326 audit(1764250461.673:24293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6458 comm="syz.3.727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fbb3ebadf90 code=0x7ffc0000 [ 78.826946][ T6462] loop2: detected capacity change from 0 to 4096 [ 78.844569][ T29] audit: type=1326 audit(1764250461.673:24294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6458 comm="syz.3.727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fbb3ebaf34b code=0x7ffc0000 [ 78.874337][ T29] audit: type=1326 audit(1764250461.683:24295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6458 comm="syz.3.727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fbb3ebae3aa code=0x7ffc0000 [ 78.897653][ T29] audit: type=1326 audit(1764250461.683:24296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6458 comm="syz.3.727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fbb3ebae3aa code=0x7ffc0000 [ 78.921118][ T29] audit: type=1326 audit(1764250461.683:24297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6458 comm="syz.3.727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7fbb3ebade97 code=0x7ffc0000 [ 78.944673][ T29] audit: type=1326 audit(1764250461.683:24298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6458 comm="syz.3.727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7fbb3ebb0eea code=0x7ffc0000 [ 78.968299][ T29] audit: type=1326 audit(1764250461.683:24299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6458 comm="syz.3.727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fbb3ebadf90 code=0x7ffc0000 [ 78.991831][ T29] audit: type=1326 audit(1764250461.683:24300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6458 comm="syz.3.727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fbb3ebaf34b code=0x7ffc0000 [ 79.021177][ T6467] SELinux: security_context_str_to_sid (i &` [ 79.021177][ T6467] 5&K9oO@,h{۽_eABs,0Zx!~.n&_dtQ2|m޺s[r8 XO) failed with errno=-22 [ 79.063349][ T6462] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 79.195292][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.257690][ T6485] xt_recent: hitcount (16777216) is larger than allowed maximum (65535) [ 79.307359][ T6488] __nla_validate_parse: 3 callbacks suppressed [ 79.307443][ T6488] netlink: 4 bytes leftover after parsing attributes in process `syz.3.736'. [ 79.414202][ T6491] netlink: 4 bytes leftover after parsing attributes in process `syz.2.737'. [ 79.512167][ T6496] vhci_hcd: USB_PORT_FEAT_LINK_STATE req not supported for USB 2.0 roothub [ 79.700713][ T6499] x_tables: duplicate underflow at hook 3 [ 79.785332][ T6502] loop1: detected capacity change from 0 to 4096 [ 79.827927][ T6502] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 80.010461][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.409641][ T6529] netlink: 'syz.4.751': attribute type 10 has an invalid length. [ 80.462810][ T6529] atomic_op ffff88811dc69128 conn xmit_atomic 0000000000000000 [ 80.487738][ T6538] xt_recent: hitcount (16777216) is larger than allowed maximum (65535) [ 80.504188][ T6540] loop1: detected capacity change from 0 to 512 [ 80.533087][ T6540] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 80.545887][ T6540] ext4 filesystem being mounted at /178/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 80.635040][ T6548] SELinux: security_context_str_to_sid (OievSfx) failed with errno=-22 [ 80.729165][ T6551] netlink: 24 bytes leftover after parsing attributes in process `syz.2.756'. [ 80.771307][ T6551] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6551 comm=syz.2.756 [ 80.834370][ T6554] loop2: detected capacity change from 0 to 512 [ 80.841835][ T3304] ================================================================== [ 80.849936][ T3304] BUG: KCSAN: data-race in set_nlink / set_nlink [ 80.856292][ T3304] [ 80.858625][ T3304] read to 0xffff88810712f858 of 4 bytes by task 3004 on cpu 1: [ 80.866173][ T3304] set_nlink+0x29/0xb0 [ 80.870256][ T3304] kernfs_iop_permission+0x1e2/0x220 [ 80.875560][ T3304] inode_permission+0x1ca/0x310 [ 80.880431][ T3304] link_path_walk+0x162/0x900 [ 80.885128][ T3304] path_lookupat+0x63/0x2a0 [ 80.889657][ T3304] filename_lookup+0x147/0x340 [ 80.894439][ T3304] vfs_statx+0x9d/0x390 [ 80.898612][ T3304] vfs_fstatat+0x115/0x170 [ 80.903045][ T3304] __se_sys_newfstatat+0x55/0x260 [ 80.908104][ T3304] __x64_sys_newfstatat+0x55/0x70 [ 80.913148][ T3304] x64_sys_call+0x135a/0x3000 [ 80.917847][ T3304] do_syscall_64+0xd2/0x200 [ 80.922355][ T3304] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 80.928271][ T3304] [ 80.930596][ T3304] write to 0xffff88810712f858 of 4 bytes by task 3304 on cpu 0: [ 80.938225][ T3304] set_nlink+0x99/0xb0 [ 80.942316][ T3304] kernfs_iop_permission+0x1e2/0x220 [ 80.947628][ T3304] inode_permission+0x1ca/0x310 [ 80.952498][ T3304] link_path_walk+0x162/0x900 [ 80.957311][ T3304] path_openat+0x1de/0x2170 [ 80.961823][ T3304] do_filp_open+0x109/0x230 [ 80.966344][ T3304] do_sys_openat2+0xa6/0x110 [ 80.971031][ T3304] __x64_sys_openat+0xf2/0x120 [ 80.975803][ T3304] x64_sys_call+0x2eab/0x3000 [ 80.980495][ T3304] do_syscall_64+0xd2/0x200 [ 80.985007][ T3304] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 80.990901][ T3304] [ 80.993223][ T3304] value changed: 0x00000008 -> 0x00000009 [ 80.998936][ T3304] [ 81.001262][ T3304] Reported by Kernel Concurrency Sanitizer on: [ 81.007413][ T3304] CPU: 0 UID: 0 PID: 3304 Comm: udevd Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 81.018355][ T3304] Tainted: [W]=WARN [ 81.022155][ T3304] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 81.032207][ T3304] ================================================================== [ 81.121371][ T6554] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 81.138284][ T6554] ext4 filesystem being mounted at /113/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 81.202794][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.231493][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.