last executing test programs: 32m30.718570771s ago: executing program 4 (id=5): bpf$MAP_CREATE(0x0, 0x0, 0x48) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000540)={[{@noblock_validity}, {}, {@sysvgroups}, {@errors_remount}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nolazytime}, {@quota}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = creat(&(0x7f0000000240)='./bus\x00', 0xc6) mount(&(0x7f0000000600)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x22, &(0x7f0000000080)={[{@nolazytime}, {@grpjquota}, {@journal_path={'journal_path', 0x3d, './bus'}}, {@bsdgroups}, {@errors_continue}, {@noload}], [{@context={'context', 0x3d, 'system_u'}}, {@uid_eq}, {@obj_user={'obj_user', 0x3d, '%$]\x85'}}]}, 0x3, 0x469, &(0x7f0000001080)="$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") setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) write(r2, &(0x7f0000004200)='t', 0x1) sendfile(r2, r1, 0x0, 0x3ffff) bind$unix(r0, &(0x7f00000001c0)=@abs={0x1, 0x0, 0x4e24}, 0x6e) sendfile(r2, r1, 0x0, 0x7ffff000) 32m30.16801241s ago: executing program 4 (id=9): sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0xc) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={0xffffffffffffffff, 0x0, &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x6, 0xe, &(0x7f0000000300)=ANY=[@ANYBLOB], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000000c0), 0x10}, 0x94) ppoll(&(0x7f0000000100)=[{0xffffffffffffffff, 0x109c}, {r3, 0x6a0}, {r1, 0x108c}], 0x3, &(0x7f0000000180)={0x0, 0x3938700}, &(0x7f0000000240)={[0x5]}, 0x8) 32m29.787782025s ago: executing program 4 (id=10): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) socket$inet_tcp(0x2, 0x1, 0x0) open(&(0x7f0000000100)='./file0\x00', 0x80ff, 0x6) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f0000006300)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0x0, 0x10408}}, 0x50) syz_fuse_handle_req(r1, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r1, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x78, 0x0, 0x6, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3966, 0x3, 0x8000, 0x0, r3, r4, 0xe, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0) write$tcp_congestion(r5, &(0x7f00000000c0)='lp\x00', 0xfffffdef) dup2(r5, r1) 32m29.517666519s ago: executing program 32 (id=10): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) socket$inet_tcp(0x2, 0x1, 0x0) open(&(0x7f0000000100)='./file0\x00', 0x80ff, 0x6) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f0000006300)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0x0, 0x10408}}, 0x50) syz_fuse_handle_req(r1, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r1, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x78, 0x0, 0x6, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3966, 0x3, 0x8000, 0x0, r3, r4, 0xe, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0) write$tcp_congestion(r5, &(0x7f00000000c0)='lp\x00', 0xfffffdef) dup2(r5, r1) 4m30.866767716s ago: executing program 5 (id=5037): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0500000004000000ff0f00000700000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000000000000000000005017ac03bcf291fc51d97cec162750cbd874bebd976339ec50"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000021b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000001b40)='sched_switch\x00', r1}, 0x10) syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x100004, 0x0, 0xfd, 0x0, &(0x7f0000000000)) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = io_uring_setup(0x51d2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS2(r5, 0xf, &(0x7f0000002700)={0x2, 0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000480)=""/264, 0x108}, {&(0x7f0000002a00)=""/88, 0x58}], 0x0}, 0x20) 4m28.400038853s ago: executing program 5 (id=5040): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="16000000000000000400000005"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r4}, 0x10) syz_mount_image$ext4(&(0x7f0000000ac0)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x3810744, &(0x7f0000000340)={[{@noauto_da_alloc}, {@user_xattr}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x9}}, {}, {@nouid32}, {@sysvgroups}, {@nojournal_checksum}, {@noauto_da_alloc}, {@test_dummy_encryption}, {@jqfmt_vfsv1}, {@journal_dev={'journal_dev', 0x3d, 0x8}}, {@acl}]}, 0x1, 0x47f, &(0x7f0000002080)="$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") prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r5 = syz_open_procfs(0xffffffffffffffff, 0x0) ioctl$TIOCGPTPEER(r5, 0x5441, 0x3) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 4m26.751638587s ago: executing program 5 (id=5043): syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000001000000e27f000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000005700)={{r3, 0xffffffffffffffff}, &(0x7f0000005680), &(0x7f00000056c0)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1b, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000004}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x1e8629867d7bdaee, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) bind$inet6(0xffffffffffffffff, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="fc0000001900010000000000fcdbdf2500000000000000000000000000000000fe8000000000000000000000000000bb00000000000000000200000000000000", @ANYRES32=0x0], 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) 4m20.938944214s ago: executing program 5 (id=5054): truncate(&(0x7f0000000000)='./file0\x00', 0x5) socket$vsock_stream(0x28, 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x213) sendmsg$nl_route(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)=ANY=[@ANYBLOB="1400000042000dad000000f9ff8effff"], 0x14}}, 0x0) 4m19.24450734s ago: executing program 5 (id=5058): socket$netlink(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.kill\x00', 0x275a, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="fc0000001900010000000000fcdbdf2500000000000000000000000000000000fe8000000002000000000000000000bb00000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000004000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000001000000000000004400050000000000000000000000000000000000000000022b0000000a000000fe8000000000000000000000000000aa0000000004000000"], 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) bind$inet(r2, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xb}}, 0x10) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r2, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r2, &(0x7f0000004d00)=[{{0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf00) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x4, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffff8}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x18) 4m16.849279895s ago: executing program 3 (id=5063): bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[], 0x39) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xd}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) add_key$keyring(&(0x7f0000000200), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) socket(0x10, 0x3, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup/syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r1, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r2, &(0x7f0000000440), 0x10) listen(r2, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) writev(r3, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x20000081}], 0x2) writev(r3, &(0x7f0000000100)=[{&(0x7f00000000c0)="cd", 0x1}], 0x1) 4m16.848331205s ago: executing program 5 (id=5064): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="16000000000000000400000005"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r4}, 0x10) syz_mount_image$ext4(&(0x7f0000000ac0)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x3810744, &(0x7f0000000340)={[{@noauto_da_alloc}, {@user_xattr}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x9}}, {}, {@nouid32}, {@sysvgroups}, {@nojournal_checksum}, {@noauto_da_alloc}, {@test_dummy_encryption}, {@jqfmt_vfsv1}, {@journal_dev={'journal_dev', 0x3d, 0x8}}, {@acl}]}, 0x1, 0x47f, &(0x7f0000002080)="$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") prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r5 = syz_open_procfs(0xffffffffffffffff, 0x0) ioctl$TIOCGPTPEER(r5, 0x5441, 0x3) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 4m13.629146523s ago: executing program 3 (id=5068): socket$packet(0x11, 0x3, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="1a0000004ebd0000080000000000000001000400", @ANYRES32=r3, @ANYRES32=0x0, @ANYRES32], 0x50) socketpair(0x18, 0x0, 0x2, &(0x7f0000000000)={0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) close_range(0xffffffffffffffff, r4, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) unshare(0x42000000) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000040)='./file0\x00', 0x1000801, &(0x7f00000000c0)=ANY=[@ANYRES64=0x0], 0x23, 0x203, &(0x7f0000000ec0)="$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") 4m1.625433223s ago: executing program 3 (id=5073): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x2c00) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x18) r6 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) getgroups(0x2, &(0x7f0000001080)=[0xee01, 0xffffffffffffffff]) keyctl$chown(0x4, r6, 0xee01, r7) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) 4m1.607860563s ago: executing program 33 (id=5064): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="16000000000000000400000005"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r4}, 0x10) syz_mount_image$ext4(&(0x7f0000000ac0)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x3810744, &(0x7f0000000340)={[{@noauto_da_alloc}, {@user_xattr}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x9}}, {}, {@nouid32}, {@sysvgroups}, {@nojournal_checksum}, {@noauto_da_alloc}, {@test_dummy_encryption}, {@jqfmt_vfsv1}, {@journal_dev={'journal_dev', 0x3d, 0x8}}, {@acl}]}, 0x1, 0x47f, &(0x7f0000002080)="$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") prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r5 = syz_open_procfs(0xffffffffffffffff, 0x0) ioctl$TIOCGPTPEER(r5, 0x5441, 0x3) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 3m59.573306924s ago: executing program 3 (id=5076): bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0xd, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000002a00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x11, &(0x7f00000001c0)={[{@journal_dev={'journal_dev', 0x3d, 0xb40}}, {@noquota}, {@i_version}, {@usrjquota}, {@prjquota}, {@errors_remount}, {@init_itable_val={'init_itable', 0x3d, 0x313}}, {@noinit_itable}, {@grpjquota_path={'grpjquota', 0x3d, './file0'}}]}, 0x0, 0x607, &(0x7f0000001100)="$eJzs3ctvFdUfAPDvTJ+0v58txKi4kCbGQKK0tIAhxkTYGkLwsXNVaSFIoYTWaJHEkuDGxLhxYeLKhfhfKIlbF25duHFlSIgxLMQQuWZuZ8r09t4+bh+33H4+ydBzZrjnnCn3y5l77jkzAexaQ9kfacT+iLiaRAyUjnVGfnBo4e/d/+vGuWxLolJ5588kbnyazJfLSvKf/fmL/x2I5Jc0Yl/H8npn5q5fGp+amryW50dmL18dmZm7fvji5fELkxcmr4y9Onbi+LHjJ0aPbOj8klL69K0PPhr4/Mx7333zMBn9/rczSZyMR3nbsvOqfW3PhmrOfmdDUVnwoLw/+72e2GDZO8XfA8X75LGkdgc7Vpq/H7si4tkYiI7Sv+ZAfPZWSxsHbKlKEkUfBew6SVPx37v5DQG2WXEdUHy2r/c5eLl0i69KgO1w79TCAMBC7HdFRBH/nQtjg9FbHRvou58sGedJImJjI3MLsjp+/unMrWyLBuNwwNaYv1mMctf2/0k1Ngejt5rru58uif+0tGX7326y/qGa/LL4f7PJgoFVzd+MiOfy/r871hX/Q6X4f7/J+leNfwAAAAAAAGDN7pyKiFfqzf9LF+f/dNeZ/9MfESc3of7Vv/9L7+aJZBOqA0runYp4ve7838U5voMdee7/1fkAXcn5i1OTRyLiqYg4FF09WX60ptzyDOHDX+z7ulH95fl/2ZbVX8wFzEu621mzEHdifHZ8o+cNRNy7GfF8df7vgXzP0vk/Wf+f1On/s/i+usY69r10+2yjY6vHP7BVKt9GHKzb/z++3E5Wvj/HSPV6YKS4KljuhU++/KFR/eIfWifr//tWjv+epHy/npn1ld8dEUfnOiuNjjd7/d+dvNtRlJ/5eHx29tpoRHdyevn+sfW1GdpVEQ9FvGTxf+jFlcf/Fq//S3G4JyLm11jnM4/6f290TP8PrZPF/8TK/f/g0v5//Ymx24M/Nqr/7Jr6/2PVPv1Qvsf4H5Qtvx/HWgO0Jc0FAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgCdcGhH/iyQdXkyn6fBwRH9EPB196dT0zOzL56c/vDKRHas+/z8tnvQ7sJBPiuf/D5byYzX5oxGxNyK+6thTzQ+fm56aaPXJAwAAAAAAAAAAAAAAAAAAwA7RX13zX+mpXf+f+aOj1a0Dtlxn/lO8w+7T2fQrKz2Nj/U2XSqwfZqPf+BJt/b479rSdgDbr3H8P3hYqdrW5gDbyPU/7F5Nxr+vC6AN6P9ht1rjmJ6v86At6f8BAAAAAKCt7D1w59ckIuZf21PdMt35MZP9ob2lrW4A0DLm8MLu1Tnd6hYAreIzPpAspv6pu9i/8ez/ZGsaBAAAAAAAAAAAAAAsc3C/9f+wW628/t/cfmhnK6z/rxf8bhcAbaTxoz/0/dDufMYHVuvtrf8HAAAAAAAAAAAAgB2g9/ql8ampyWszc09e4o2d0Yz1JebHd0QzNi9RTA3f/JK7ImIHnGALEsUtOFrYjBb+nwQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACzxXwAAAP//elUjeQ==") openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x101000, 0x0) r2 = getpid() process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x2, 0x0, &(0x7f0000000140)={0x0, 0x0}) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x310, 0x130, 0x4c, 0x1a, 0x130, 0x2d, 0x240, 0x258, 0x258, 0x240, 0x258, 0x3, 0x0, {[{{@ipv6={@local, @local, [], [], 'wg2\x00', 'macvlan1\x00'}, 0x0, 0x100, 0x130, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x1, 0xc}}, @inet=@rpfilter={{0x28}}]}, @common=@inet=@SET2={0x30}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x370) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r4, 0x0, &(0x7f0000000280)=@udp}, 0x20) write(r3, &(0x7f0000000000)="fa", 0xfffffdef) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x800000000003) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) unlink(&(0x7f0000000140)='./cgroup\x00') 3m54.632629597s ago: executing program 3 (id=5083): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x88e, &(0x7f0000000d80)={[{@mblk_io_submit}, {@dioread_nolock}, {@bh}, {@errors_continue}, {@nouid32}, {@quota}, {@nogrpid}]}, 0x3, 0x445, &(0x7f0000000800)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.stat\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x4, 0x0, 0x0, &(0x7f0000000280)='GPL\x00', 0x2000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='io_uring_defer\x00', r0}, 0x18) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) fdatasync(r0) r1 = socket$inet_udp(0x2, 0x2, 0x0) socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) sendmsg$TIPC_NL_NET_GET(r0, &(0x7f0000000680)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4004011}, 0x40000) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@dev={0xfe, 0x80, '\x00', 0x8}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, {}, 0x0, 0x0, 0x1}, {{@in6=@dev, 0x0, 0x33}, 0x0, @in=@private=0xa010100, 0x0, 0x0, 0x0, 0xb7, 0x7144}}, 0xe8) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="2c00000010008100000000000080000000000000", @ANYRES32=0x0, @ANYBLOB="0a043cbf", @ANYRES32, @ANYBLOB="0a001b"], 0x2c}], 0x1}, 0x0) keyctl$KEYCTL_CAPABILITIES(0x1f, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) syz_usb_connect$hid(0x2, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) 3m40.961764071s ago: executing program 3 (id=5089): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, &(0x7f00000000c0)=r0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000170000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095000000"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x2d) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@ipv4_newrule={0x1c, 0x20, 0x301, 0x70bd2a, 0x25dfdbff, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x0) setsockopt$packet_fanout(r5, 0x107, 0x12, 0x0, 0x0) syz_clone3(&(0x7f0000000680)={0x40004000, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) 3m24.99857972s ago: executing program 34 (id=5089): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, &(0x7f00000000c0)=r0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000170000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095000000"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x2d) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@ipv4_newrule={0x1c, 0x20, 0x301, 0x70bd2a, 0x25dfdbff, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x0) setsockopt$packet_fanout(r5, 0x107, 0x12, 0x0, 0x0) syz_clone3(&(0x7f0000000680)={0x40004000, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) 19.893372502s ago: executing program 2 (id=5528): keyctl$unlink(0x9, 0x0, 0x0) keyctl$get_keyring_id(0x0, 0x0, 0x81) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000400000000dfffff1918120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r4}, 0x10) syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) socket$nl_route(0x10, 0x3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) mkdirat$cgroup(r5, &(0x7f00000000c0)='syz1\x00', 0x1ff) 15.239837951s ago: executing program 2 (id=5532): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xf, 0xc, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_device, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48) socketpair(0x18, 0x0, 0x2, &(0x7f0000000000)) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffbfff, 0x1, 0x1}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r3}, 0x18) r4 = io_uring_setup(0xad5, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, 0x3d0}) close(r4) clock_nanosleep(0xfffffff2, 0x0, &(0x7f0000000000)={0x77359400}, 0xfffffffffffffffe) 12.210206957s ago: executing program 0 (id=5535): r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000380)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@data_err_ignore}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@data_err_ignore}, {@grpquota}, {@nobh}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000000a40)="$eJzs3d9rW1UcAPDvTdv91nUwhopIYQ9O5tK19ccEH+aj6HCg7zO0d2U0WUaTjrUO3B7ciy8yBBEH4ru++zj8B/wrBjoYMoo++BK56U2XrUmbddnSmc8Hbjkn9ybnfnPv9/TcnBsSwNCayP4UIl6OiG+SiIMRkeTrRiNfObG23er9q7PZkkSj8elfSXO7rN56rdbz9ueVlyLit68ijhc2tltbXlkolcvpYl6frFcuTdaWV05cqJTm0/n04vTMzKm3Z6bfe/edvsX6xtl/vv/k9oenvj66+t0vdw/dTOJ0HMjXtcfxBK61VyZiIn9PxuL0IxtO9aGxnSQZ9A6wLSN5no9F1gccjJE864H/vy8jogEMqUT+w5BqjQNa1/Z9ug5+btz7YO0CaGP8o2ufjcSe5rXRvtXkoSuj7Hp3vA/tZ238+uetm9kS/fscAmBL165HxMnR0Y39X5L3f9t3sodtHm1D/wfPzu1s/PNmp/FPYX38Ex3GP/s75O52bJ3/hbt9aKarbPz3fsfx7/qk1fhIXnuhOeYbS85fKKdZ3/ZiRByLsd1ZfbP5nFOrdxrd1rWP/7Ila781Fsz34+7o7oefM1eql54k5nb3rke80nH8m6wf/6TD8c/ej7M9tnEkvfVat3Vbx/90NX6KeL3j8X8wo5VsPj852TwfJltnxUZ/3zjye7f2Bx1/dvz3bR7/eNI+X1t7/DZ+3PNv2m3dQ/FH7+f/ruSzZnlX/tiVUr2+OBWxK/l44+PTD57bqre2z+I/dnTz/q/T+b83Ij7vMf4bh39+taf4B3T85x7r+D9+4c5HX/zQrf3e+r+3mqVj+SO99H+97uCTvHcAAAAAAACw0xQi4kAkheJ6uVAoFtfu7zgc+wrlaq1+/Hx16eJcNL8rOx5jhdZM98G2+yGm8vthW/XpR+ozEXEoIr4d2dusF2er5blBBw8AAAAAAAAAAAAAAAAAAAA7xP4u3//P/DEy6L0Dnjo/+Q3Da8v878cvPQE7kv//MLzkPwwv+Q/DS/7D8JL/MLzkPwwv+Q/DS/4DAAAAAAAAAAAAAAAAAAAAAAAAAABAX509cyZbGqv3r85m9bnLy0sL1csn5tLaQrGyNFucrS5eKs5Xq/PltDhbrWz1euVq9dLUdCxdmayntfpkbXnlXKW6dLF+7kKlNJ+eS8eeSVQAAAAAAAAAAAAAAAAAAADwfKktryyUyuV0UUFhW4XRnbEbCn0uDLpnAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAH/gsAAP//6AY3sQ==") r1 = openat(0xffffffffffffff9c, 0x0, 0x441, 0x20) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) truncate(&(0x7f0000000900)='./file1\x00', 0x3000000) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r2, 0x0) fallocate(r1, 0x8, 0x4000, 0x4000) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1802000000000000"], 0x0}, 0x94) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000340)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000300)={&(0x7f0000000fc0)={0xc0, 0x1, 0x1, 0x3, 0x0, 0x0, {0x5, 0x0, 0x8}, [@CTA_TUPLE_ORIG={0x68, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}]}, @CTA_TUPLE_ORIG={0x44, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1}, {0x14, 0x4, @local}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x9, 0x0}}}}]}]}, 0xc0}, 0x1, 0x0, 0x0, 0x8810}, 0x20008004) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x2200, 0x0) ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000080)={0x8000, 0x0, 0x0, 0x1, 0x0, "000100"}) r4 = userfaultfd(0x80801) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_WAKE(r4, 0x8010aa02, &(0x7f0000000080)={&(0x7f00004c5000/0x1000)=nil, 0x1000}) r5 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f000000a440)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x0, @remote, 0x9}, 0x1c, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x590}}, {{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000001c0)="66929348cc416e0750bf509e8c2da63b6b0a21ccb07912482d4aec13e8b97913ef61f1c1cc5e8675d53820f16a897ee8d7db1487c6cc7a386cfb2363010fdea769fce40b8167f103b427123bbfe0e7c1b5", 0x51}], 0x1}}, {{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000380)="4dad36f4", 0x4}], 0x1}}], 0x3, 0x8008801) 12.181537798s ago: executing program 2 (id=5537): socket$packet(0x11, 0xa, 0x300) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x884}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x88b81, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(&(0x7f00000002c0)={0x8040000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x8, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x4) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) 12.180912927s ago: executing program 1 (id=5538): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001780)=ANY=[@ANYBLOB="0200000004000000060000000500"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$BINDER_THREAD_EXIT(0xffffffffffffffff, 0x40046208, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) r5 = syz_open_procfs(0x0, &(0x7f00000042c0)='mounts\x00') pread64(r5, &(0x7f0000002240)=""/237, 0xed, 0x4eb) 12.169007248s ago: executing program 7 (id=5539): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000c00000000000000008500000007000000040000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x38, r2, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0x4}]}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}]}]}, 0x38}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/schedstat\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sendto$unix(0xffffffffffffffff, 0x0, 0x0, 0x4000046, &(0x7f0000000000)=@abs={0x1, 0x0, 0x4e23}, 0x6e) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, 0x0, 0x0, 0x2, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYBLOB, @ANYRES32=0x0, @ANYRES32], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r8}, 0x10) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') sendmsg$IPCTNL_MSG_CT_DELETE(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={0x18, 0x2, 0x1, 0x201, 0x0, 0x0, {0x2, 0x0, 0x9}, [@CTA_TUPLE_REPLY={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000) 12.03911876s ago: executing program 6 (id=5542): io_setup(0xffff, &(0x7f0000000080)) r0 = openat$selinux_checkreqprot(0xffffffffffffff9c, 0x0, 0x4be100, 0x0) ftruncate(r0, 0x8) r1 = socket$inet6(0xa, 0x3, 0x8) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e24, 0x2, @empty}, 0x1c) sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0x0) setsockopt$inet6_IPV6_RTHDR(r1, 0x29, 0x39, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) io_uring_setup(0x564e, &(0x7f0000000180)={0x0, 0x426d, 0x80, 0x0, 0x2fb}) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001980)={0x1, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000009500"], &(0x7f0000001400)='syzkaller\x00'}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r2, 0x104, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffe5, 0x0, 0x0, 0x0, 0x0, 0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x8, 0x0, 0x0}}, 0x10) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, 0xffffffffffffffff, 0x0) unlinkat(0xffffffffffffffff, 0x0, 0x200) getsockname$packet(0xffffffffffffffff, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, &(0x7f00000019c0)={0x0, 0x0, &(0x7f0000001980)={&(0x7f0000000080)={0x14, 0x3, 0x3, 0x3, 0x0, 0x0, {0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x4000000) getsockname$netlink(0xffffffffffffffff, &(0x7f0000000240), 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0xd, &(0x7f0000000040)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 11.416647039s ago: executing program 0 (id=5543): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000640)='./file1\x00', 0x3014850, &(0x7f0000000080)={[{@quota}, {@barrier_val={'barrier', 0x3d, 0x1000}}, {@grpjquota}, {@norecovery}, {@dioread_lock}]}, 0x3, 0x4d1, &(0x7f0000000b80)="$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") r0 = socket(0x10, 0x3, 0x9) accept4$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000180)=0x1c, 0x80000) bpf$MAP_CREATE(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x2000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x66, 0x8}, @initr0, @exit, @alu={0x6, 0x0, 0x3, 0xa, 0x0, 0x2}, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x78) openat(0xffffffffffffff9c, 0x0, 0x8042, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x143042, 0x99) pwritev2(r5, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfe}], 0x1, 0x5405, 0x0, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f00000001c0)={0xe, {{0xa, 0x4e23, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}}}}, 0x88) sendfile(r5, r5, 0x0, 0x7a680000) 11.240824802s ago: executing program 1 (id=5544): bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x2, 0x5}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x8, 0x7, 0x1000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000740)='scsi_dispatch_cmd_start\x00'}, 0x10) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010005000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000740)=ANY=[@ANYBLOB="b702000004000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff1d6405000000000065040400210000000404000001e37c60b7040000e5cd00006a0a00fe000000008500000032000000b70000000000000095000000000000000ce0de7621e5e832249c04112cf7af2b75d0d1f034b1b3fb6bd3ce8fa62c7941272ff49142d860010ab162aa2264ab67e55a00000000000000edfe0969a9ddc166b686a1e83c8790c893d713b3295dad0ea697181d1e85b64126b5d72f20ff0f0000000000005dee354e93cfc3f50ff23f8432c72012f021c84c59a9d4c142db5bdb0032c0b748cf0cfee621589fb3a20b407c7cbed48e7026f8d52d4bca2608c79aa4a73732028f88ce0787a375da4a2ef44e3d8b88873f0b1de87dfb6d15936ec0a27cb554def9e27396df6b7851ffa26237ea6730880f06371beb3b290b7d8629a6f0373fefa0acb60888fc14ad2b83ca03ac2ac4020000006e00c5b2200a91cbc0c6065a697d6fc8aa8b65aee0783b04cff0218ce82c9687b4474da89c474c23727555fc5e5f8ad0f2f7a261140440fce1f12cc6df312accd011d888384283092d987c40bbb46f68c243291c9b6300000000349834fa147bd5923bbd4e606708034931a8f1a89bdf77093a0000427aab8e21e1a33d3fe093547532fce6549dd648ad233e05a7b3ea178007c1c32e871ac81f287c4aabbd033390b16d1d41ee433e3a54ea9ee82cf14f3a4cc523ee000000000009e106d6b5289f0000100000000000000000f7bc9f46cb71f6b889d37807865e3b4e9916dd0f72c9d58ea333b90f8886dcbf5ddda0e42ca08e3303632401f2f5212b40c0e88c957fd767dbfc80b07ad668b4f6f92fb209d7c2dbac597843c8eb7bf92fe6d0bb0b72549795c2ed19e4411b422a35d3ec4752da0588e42cdbc5fcd245ce5e3ef0dca24931276702a312db7956f0a75eb9caa17d47a6331c7c963cbf86a845ce27c26b7136d3e7207318b1df7a6320c64f18ccd926eaeddcde8d5006e1c38db117fb1115221a661605f4bb9172720ccca770bff37e59511b2606138377eda44b2f288b491ab8aae0e11a98303b0e407e3c9d21f4a3ebbd3fabf6da9a1a1f869a339f67010000100000000734fd1147d45da1a30964e15a19b33c8644fff71b0162f2e1b827e2663e06a751182e968c8ab05fa1d0115d4b11d944f2c06acc023a02b7416a9a10218d21503cda13bb5df6c992e52e1c01793b728eac6b5c58ab3b3900d279297dadc127e2f38fc60c23af2e1fefa5a834564e7191ba1953d335f59aa261fe79613df6bf43884e9649691e32680d75a541c27ffe74f9d13340f2cf1c7dc2b7db01213296cd4ecfd30efe137641471987289b8a00482e026b26eacd1b97443e2ea2d1d6e31a01ee0ae7fa195a2152b2338b086423a3883f2ce3e2f84e04f4d52c985eac4b46336908599564b47db0e6aa97ee51a360f4382fd99745727a44c77d097f69d19fe86f71c38a0226d44ea00ecbd959f14b540745cd03b8c9f02b825ba45ca85706c73115f70871db9d2a1bc2a517b39f9648123917a5db07ba4e27f961373767e1ea8f7cc558e483abef1a9923c5cf7c377626b557ad31fdee17ba7bb235416e72c84afef2bdb08fb375147b028b89f15bc8976b91158c13c9876daa71e7db0f3f17376be39ea79ce1246c547c740e31c64e5d293e0e5a564dd166b60e61d6ccae46c173b8e1707b15c7d4f9d612a14c2156f4050ebefb69503fdd45e75fee4766694e890940ca9e02da1213440a3dec50ed065ceb3ae84b45163f37dbfeaec7bff2d98d877f81fa184b17f94fc26e3ab969efcd72554766939637835a0340b78e94076e8508d32f1448755216e1b12319bfb0704f27fcd939ee95729b870147346e70415da2ea338a792a0bb0a747b019d2a07c2ab71f220415129f3fea51d39f3dfa96e751d23c880e1fc9bc36432446f25bbb8432946dd3f4d6d753e3c7290358ac1089bd24345d2f55598262624125cfa2fae0eee9f2f6f50261a2cac50a335d5f8fca61c8cd9694144da20eff19ad230c9a43"], &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0xfffffffc}, 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffffe, 0x0, 0xffffffffffffffff, 0xfffffcf2}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x700, 0xe, 0x0, &(0x7f0000000380)="e460cdfbef2408000008019386dd", 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) close(0xffffffffffffffff) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000000)={0xffffffffffffffff, 0xe0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffdb4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe15, 0x5, 0x0, 0x0, 0x0, 0x0, 0x8, 0xffffffffffffff4b, 0x0}}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x18) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r3, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x3}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@private=0xa010100, 0x0, 0x0, 0x0, 0xb7, 0xffffffff}}, 0xe8) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0) 11.230825542s ago: executing program 2 (id=5545): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() getgroups(0x2, &(0x7f0000001080)=[0xee01, 0xffffffffffffffff]) keyctl$chown(0x4, 0x0, 0xee01, r3) keyctl$chown(0x4, 0x0, 0xee01, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) keyctl$session_to_parent(0x12) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10) io_setup(0x7, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f00000001c0)="4cddec51633d69f69da24072e4684765", 0x10) 11.052812835s ago: executing program 1 (id=5546): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="16000000000000000400"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r4}, 0x10) syz_mount_image$ext4(&(0x7f0000000ac0)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x3810744, &(0x7f0000000340)={[{@noauto_da_alloc}, {@user_xattr}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x9}}, {}, {@nouid32}, {@sysvgroups}, {@nojournal_checksum}, {@noauto_da_alloc}, {@test_dummy_encryption}, {@jqfmt_vfsv1}, {@journal_dev={'journal_dev', 0x3d, 0x8}}, {@acl}]}, 0x1, 0x47f, &(0x7f0000002080)="$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") prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r5 = syz_open_procfs(0xffffffffffffffff, 0x0) ioctl$TIOCGPTPEER(r5, 0x5441, 0x3) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 8.68927361s ago: executing program 2 (id=5547): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffffff85000000040000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$can_raw(0x1d, 0x3, 0x1) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) prctl$PR_GET_SPECULATION_CTRL(0x35, 0x0, 0x8) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='status\x00') r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000240), 0x80000, 0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, 0x0) preadv(r4, &(0x7f0000000100)=[{&(0x7f0000001140)=""/4096, 0x1000}], 0x1, 0x0, 0x0) 8.637080901s ago: executing program 1 (id=5548): bind$can_raw(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f0000000a40)=ANY=[@ANYBLOB="1801000000050000000000000000ea0485000000d000000095"], &(0x7f0000000a00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) add_key$keyring(&(0x7f0000000100), &(0x7f0000000240)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$setperm(0x5, 0x0, 0x3220120) r4 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00'}) sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x0) 8.586107222s ago: executing program 7 (id=5549): truncate(&(0x7f0000000000)='./file0\x00', 0x5) socket$vsock_stream(0x28, 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x213) sendmsg$nl_route(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)=ANY=[@ANYBLOB], 0x14}}, 0x0) 7.32371234s ago: executing program 6 (id=5550): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="16000000000000"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r4}, 0x10) syz_mount_image$ext4(&(0x7f0000000ac0)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x3810744, &(0x7f0000000340)={[{@noauto_da_alloc}, {@user_xattr}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x9}}, {}, {@nouid32}, {@sysvgroups}, {@nojournal_checksum}, {@noauto_da_alloc}, {@test_dummy_encryption}, {@jqfmt_vfsv1}, {@journal_dev={'journal_dev', 0x3d, 0x8}}, {@acl}]}, 0x1, 0x47f, &(0x7f0000002080)="$eJzs281vVFUbAPDn3k4pXy/ti/gBolbR2PjR0oLKwo1GExeamOgCl7UtBCnU0JoIITIag0tD4p4YV/4LrlwZ48rErW6NISFKTEA2jrkz99KZYabQ6ZQpzO+XDHPO3HPvuQ/nnLln7ukNoG+NZv8kEdsj4teIGK5lGwuM1t6uXTk788+VszNJVCrv/JlUy129cnamKFrsty3PjKUR6edJXkmjxdNnjk/Pz8+dyvMTSyc+nFg8feb5Yyemj84dnTs5dejQwQOTL7049UJX4szO6eqeTxb27n7jvQtvzRy+8P7mhu31cXTLaBb4X5Wq5m1PdbuyHvu3shxnUur12XC7BiIia67B6vgfjoFYbrzheP2znp4csK6y7+zfmz8cvJEqV4B7WBId7Rad7QZsHMWFPvv9W7zu4PSj5y6/UvsBlMV9LX/VtpQizf+DBtex/tGIOFy+fjF7RdN9iEqL+wYAAGv1fTb/ee7m+V8SEQ/UlUvytaGRiPh/ROyMiPsiYldE3J+XfTAiHlpl/c1LQzfPP9NLHYZ2W7L538v52lbj/C8tiowM5Ln/VeMfTI4cm5/bHxE7ImIsBoey/GSrgxeHeO2XL9vVXz//O1zOJn1JFHPB/CCXSkN1O5z7pvbepUnp5U8j9pRaxZ9UVwKSqFSytt8dEXtWd+gdReLYM9/ubVeoMf7rF7P6G+NfQRfWmSpfRzxda/9yNMVfSFZen5zYHPNz+yeKXnGzn34+/3a7+tcUfxdk7b+1sf83lRj+O6lfr11cfR3nf/ui7W/K0i3jr+//tTXb2eml6U3Ju9U16035lo+nl5ZOTUZsSt6s5hs+n1o+WpEvymfxj+1rPf535vtk8T8cEVknfiQiHo2Ix/K2ezwinoiIfSvE/+OrT34w1HH86yuLf7bl99+N/j/S2P6rTwwc/+G7dvXfuv9n7X+wmhrLP8nav5ba3Dau9qdT7NNpbwYAAIC7TxoR2yNJx2+k03R8vPb38rtiazq/sLj07JGFj07O1p4RGInBtLjTNVx3P3QyKedHrOWn8nvFxfYD+X3jrwa2VPPjMwvzsz2OHfrdtjbjP/PHQK/PDlh3nteC/tU8/tMenQdw57n+Q//qdPybJ8Ddz/Uf+ler8X+uKW8tAO5Nrv/Qv4x/6F/GP/Qv4x/60lqe6+9OYkt+JsuflFZ4el9ioyQiXbcqyqvca2gDdOMNlSh1YXT38EsJAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACgi/4LAAD//wC47TI=") prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r5 = syz_open_procfs(0xffffffffffffffff, 0x0) ioctl$TIOCGPTPEER(r5, 0x5441, 0x3) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 7.275838291s ago: executing program 7 (id=5551): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000017850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) poll(0x0, 0x0, 0x5) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r5, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) r6 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r6, 0x29, 0x2a, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) close(r6) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) socket(0x840000000002, 0x3, 0xff) 5.156849753s ago: executing program 0 (id=5552): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x10000, &(0x7f0000000080)={[{@nobh}, {@auto_da_alloc}, {@data_err_ignore}]}, 0x3, 0x4cd, &(0x7f0000000c80)="$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") r0 = open(&(0x7f0000000340)='./file1\x00', 0x185102, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082"], 0x0, 0x2, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r2, 0x29, 0x11, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sys_enter\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x800, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f0000000200)=ANY=[@ANYBLOB="010000000000000049"]) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='br_fdb_add\x00', r7}, 0x10) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'bridge0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="280000001c000100000000000000000007000000", @ANYRES32=r10, @ANYBLOB="4000aa000a0002"], 0x28}}, 0x0) write$uinput_user_dev(r0, &(0x7f0000000380)={'syz1\x00', {0x2, 0x3, 0x0, 0x1}, 0x23, [0x6, 0x9, 0x1ff, 0x2, 0x100, 0x7, 0x4, 0x5, 0xd, 0xfffffff7, 0x9, 0x4, 0xfffffffb, 0x8, 0x40, 0x41d, 0x68b4, 0x9, 0xe, 0x7fffffff, 0xff, 0x0, 0x8, 0x2, 0x8, 0x10000, 0x1, 0x4, 0x1ff, 0x80, 0x8, 0x5, 0x5, 0x3, 0x81, 0x98b, 0x7, 0xb, 0x1, 0x1, 0x2, 0x72, 0x7, 0x1, 0x42, 0x2, 0x6d71, 0x3, 0x80000000, 0x2, 0x5, 0x5, 0x0, 0x7, 0x3, 0x7, 0x5, 0x7f4, 0x3, 0x9, 0x3, 0x2, 0x4, 0x20004000], [0x4, 0x6, 0x7fffffff, 0x2, 0x6, 0x7cf, 0x7ff, 0x7, 0x8, 0x20000000, 0x10001, 0x0, 0xfff, 0x8001, 0x5, 0xfffffff8, 0x40, 0x9, 0x4, 0x1, 0x1, 0x7ff, 0x3, 0x6, 0x3d7b, 0x80000000, 0x6, 0x2, 0x1, 0x3, 0x4, 0xcb, 0x8d09, 0x5178, 0x8, 0x7507, 0x9, 0x1, 0x9, 0x5, 0x5, 0x1, 0x9, 0x1000, 0x5, 0xb18, 0x5, 0x24, 0x8, 0x35c4f03, 0xfffffffb, 0x7, 0x0, 0x4, 0xffff, 0x1, 0x80, 0x2, 0x3, 0x4, 0x8, 0x707b, 0x8, 0xfffffff7], [0x401, 0x7, 0x2, 0x5, 0x0, 0x8, 0xb, 0x0, 0x3, 0x8, 0x8, 0x8, 0x6, 0x0, 0x7, 0xffffffff, 0x4, 0x803, 0x0, 0xfffffff7, 0x924, 0x1d5, 0x401, 0x7, 0x40, 0xfffffff9, 0xffffe625, 0x7, 0x27870d92, 0x3, 0x7, 0xaf1f7484, 0x1, 0x2, 0x3, 0x37b, 0x5, 0x3, 0x2, 0xfffffff8, 0x5, 0x400002, 0x9, 0x3, 0x800, 0x7, 0x3ff, 0x2, 0x5, 0x2, 0x5034, 0x1, 0x96, 0xff, 0x2d1, 0x9, 0x0, 0xa, 0xc5, 0x540c, 0x7ff, 0x7, 0x0, 0x9], [0x4, 0xffffffff, 0x9d, 0xbdc, 0x9, 0x9563, 0x200, 0xb, 0xffff9f79, 0x80000000, 0x40, 0x16c1b515, 0xc, 0x5, 0x800, 0x9, 0x4, 0x8769, 0x9, 0x2, 0x2, 0x55f, 0x2, 0x40, 0x7, 0x5, 0x9, 0x4, 0x2, 0x9, 0x6, 0x12, 0x7, 0x100, 0xc, 0x2, 0xa8, 0xa601, 0x2, 0x0, 0xc, 0x9, 0x9, 0x7, 0x2, 0xaf5, 0x72a, 0x1ff, 0x3, 0x78, 0x0, 0x7f, 0x4d, 0x5, 0x4, 0x1, 0x3, 0x4, 0x1, 0x7, 0x0, 0xdcd8, 0x4, 0xc53]}, 0x45c) ioctl$USBDEVFS_ALLOC_STREAMS(r0, 0x8008551c, &(0x7f00000002c0)=ANY=[@ANYBLOB="6cc20006000000c17cd545c0ffde000000c57e080d0148362864a81e390c076c7bd0988f77400482090582"]) 5.156146163s ago: executing program 1 (id=5553): truncate(&(0x7f0000000000)='./file0\x00', 0x5) socket$vsock_stream(0x28, 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x213) sendmsg$nl_route(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)=ANY=[@ANYBLOB], 0x14}}, 0x0) 5.155421823s ago: executing program 6 (id=5554): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000480)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b7030000000000008500000073000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/rcu_normal', 0x80000, 0x90) write$P9_RVERSION(r0, &(0x7f0000000240)={0x15, 0x65, 0xffff, 0x2, 0x8, '9P2000.u'}, 0x15) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, 0x0, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="190000000400000008000000"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x805}, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0) ioctl$MON_IOCX_MFETCH(r3, 0xc0109207, &(0x7f0000000180)={0x0, 0x0, 0xfffffffd}) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) ioctl$MON_IOCH_MFLUSH(r3, 0x9208, 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000300)={0x1b, 0x0, 0x0, 0x8, 0x0, r0, 0x6, '\x00', 0x0, r0, 0x0, 0x5, 0x1}, 0x50) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000500)={0x0, @rand_addr, @local}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x20, 0x1d, &(0x7f0000000380)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x7f}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2}}, @map_fd={0x18, 0x7, 0x1, 0x0, r5}, @initr0={0x18, 0x0, 0x0, 0x0, 0xc7}, @btf_id={0x18, 0x7, 0x3, 0x0, 0x2}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000280)='syzkaller\x00', 0x6, 0xd6, &(0x7f0000000940)=""/214, 0x40f00, 0x20, '\x00', r6, @netfilter=0x2d, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000680)={0x5, 0xa, 0x802, 0x9}, 0x10, 0x0, r0, 0x0, &(0x7f00000006c0)=[r1, r1, r0], &(0x7f0000000880), 0x10, 0x3}, 0x94) waitid(0x0, 0x0, 0x0, 0x4, 0x0) fstatfs(0xffffffffffffffff, &(0x7f00000007c0)=""/141) 4.529009192s ago: executing program 0 (id=5555): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=@newlink={0x28, 0x10, 0x1, 0x170bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2100}, [@IFLA_AF_SPEC={0x8, 0x1a, 0x0, 0x1, [@AF_BRIDGE={0x4}]}]}, 0x28}, 0x1, 0x0, 0x0, 0xc0}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) ioctl$AUTOFS_IOC_PROTOSUBVER(r3, 0x80049367, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001c80)={{r4}, &(0x7f0000001c00), &(0x7f0000001c40)=r5}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000f80)=ANY=[@ANYBLOB, @ANYRES32, @ANYRES32, @ANYRES8, @ANYRESHEX=r6, @ANYRES64=0x0, @ANYRES32=r3], 0x48) ioctl$VHOST_VSOCK_SET_GUEST_CID(0xffffffffffffffff, 0x4008af60, &(0x7f0000000040)={@local}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x9, 0x0, 0x0, 0x41100}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) 4.469935503s ago: executing program 2 (id=5556): sched_setscheduler(0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) sched_setscheduler(0x0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r2, @ANYBLOB], 0x58}, 0x1, 0x0, 0x0, 0x20000800}, 0x4010) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, 0x0}) getxattr(0x0, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0x10}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0xffffffffffffff28}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_clone(0xae12e400, 0x0, 0x0, 0x0, 0x0, 0x0) 3.715703985s ago: executing program 1 (id=5557): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x8, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) socket(0x10, 0x803, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newqdisc={0x2c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0x7}, {0xffff, 0xffff}, {0xc, 0x1}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x400dc}, 0x4040890) mkdir(&(0x7f0000000080)='./control\x00', 0x109) inotify_init1(0x800) 3.715080495s ago: executing program 7 (id=5558): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="16000000000000000400"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r4}, 0x10) syz_mount_image$ext4(&(0x7f0000000ac0)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x3810744, &(0x7f0000000340)={[{@noauto_da_alloc}, {@user_xattr}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x9}}, {}, {@nouid32}, {@sysvgroups}, {@nojournal_checksum}, {@noauto_da_alloc}, {@test_dummy_encryption}, {@jqfmt_vfsv1}, {@journal_dev={'journal_dev', 0x3d, 0x8}}, {@acl}]}, 0x1, 0x47f, &(0x7f0000002080)="$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") prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r5 = syz_open_procfs(0xffffffffffffffff, 0x0) ioctl$TIOCGPTPEER(r5, 0x5441, 0x3) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 3.595610467s ago: executing program 6 (id=5559): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() getgroups(0x2, &(0x7f0000001080)=[0xee01, 0xffffffffffffffff]) keyctl$chown(0x4, 0x0, 0xee01, r3) keyctl$chown(0x4, 0x0, 0xee01, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) keyctl$session_to_parent(0x12) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10) io_setup(0x7, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f00000001c0)="4cddec51633d69f69da24072e4684765", 0x10) 3.447763089s ago: executing program 0 (id=5560): r0 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', &(0x7f00000001c0)={0x20040, 0xe, 0x2}, 0x18) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0xc0406618, &(0x7f0000000200)={@id={0x2, 0x0, @d}}) r1 = syz_usb_connect$cdc_ncm(0x0, 0x7a, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902680002010040000904000001020e0000052406000105240000000d370f0100000000000000000006241a0000000c241b4800f3ff00050080050905810300020000000904010000020d00000904010102020d0000090582020004000000090503020002"], 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000022020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='hrtimer_init\x00', r2}, 0x18) socketpair(0xa, 0x1, 0x0, &(0x7f0000000000)) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f0000000bc0)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x4, 0x6e, &(0x7f00000001c0)=ANY=[], 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_usb_connect$cdc_ecm(0x0, 0x5e, 0x0, 0x0) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt(r3, 0x28, 0x8, 0x0, &(0x7f0000000000)) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000e40)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r4}, 0x10) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000040)={r5, r4, 0x0, r4}, 0x10) 2.388459364s ago: executing program 6 (id=5561): truncate(&(0x7f0000000000)='./file0\x00', 0x5) socket$vsock_stream(0x28, 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x213) sendmsg$nl_route(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)=ANY=[@ANYBLOB], 0x14}}, 0x0) 1.474497088s ago: executing program 7 (id=5562): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f0000000480), 0x400034f, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00'}, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r7, r6, 0x26}, 0x10) r8 = open_tree(0xffffffffffffff9c, &(0x7f00000002c0)='\x00', 0x89901) move_mount(r8, &(0x7f0000000400)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r7}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) recvmsg$unix(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000001780)=""/4071, 0xfe7}], 0x1}, 0x40020000) sendmsg$inet(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0xfffe}], 0x1}, 0x0) 1.474079759s ago: executing program 6 (id=5563): r0 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', &(0x7f00000001c0)={0x20040, 0xe, 0x2}, 0x18) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0xc0406618, &(0x7f0000000200)={@id={0x2, 0x0, @d}}) r1 = syz_usb_connect$cdc_ncm(0x0, 0x7a, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902680002010040000904000001020e0000052406000105240000000d370f0100000000000000000006241a0000000c241b4800f3ff00050080050905810300020000000904010000020d00000904010102020d0000090582020004000000090503020002"], 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000022020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='hrtimer_init\x00', r2}, 0x18) socketpair(0xa, 0x1, 0x0, &(0x7f0000000000)) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f0000000bc0)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x4, 0x6e, &(0x7f00000001c0)=ANY=[], 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_usb_connect$cdc_ecm(0x0, 0x5e, 0x0, 0x0) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt(r3, 0x28, 0x8, 0x0, &(0x7f0000000000)) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r4}, 0x10) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000040)={r5, r4, 0x0, r4}, 0x10) 15.1446ms ago: executing program 0 (id=5564): bind$can_raw(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f0000000a40)=ANY=[@ANYBLOB="1801000000050000000000000000ea0485000000d000000095"], &(0x7f0000000a00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) add_key$keyring(&(0x7f0000000100), &(0x7f0000000240)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$setperm(0x5, 0x0, 0x3220120) r4 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00'}) sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x0) 0s ago: executing program 7 (id=5565): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="16000000000000"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r4}, 0x10) syz_mount_image$ext4(&(0x7f0000000ac0)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x3810744, &(0x7f0000000340)={[{@noauto_da_alloc}, {@user_xattr}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x9}}, {}, {@nouid32}, {@sysvgroups}, {@nojournal_checksum}, {@noauto_da_alloc}, {@test_dummy_encryption}, {@jqfmt_vfsv1}, {@journal_dev={'journal_dev', 0x3d, 0x8}}, {@acl}]}, 0x1, 0x47f, &(0x7f0000002080)="$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") prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r5 = syz_open_procfs(0xffffffffffffffff, 0x0) ioctl$TIOCGPTPEER(r5, 0x5441, 0x3) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) kernel console output (not intermixed with test programs): DEV_CHANGE): macsec0: link becomes ready [ 1588.621430][ T1331] IPv6: ADDRCONF(NETDEV_CHANGE): veth3: link becomes ready [ 1588.628958][ T1331] IPv6: ADDRCONF(NETDEV_CHANGE): veth2: link becomes ready [ 1588.636612][ T1331] IPv6: ADDRCONF(NETDEV_CHANGE): veth5: link becomes ready [ 1588.644178][ T1331] IPv6: ADDRCONF(NETDEV_CHANGE): veth4: link becomes ready [ 1588.651744][ T1331] IPv6: ADDRCONF(NETDEV_CHANGE): veth7: link becomes ready [ 1588.659255][ T1331] IPv6: ADDRCONF(NETDEV_CHANGE): veth6: link becomes ready [ 1588.666891][ T1331] IPv6: ADDRCONF(NETDEV_CHANGE): veth9: link becomes ready [ 1588.674442][ T1331] IPv6: ADDRCONF(NETDEV_CHANGE): veth8: link becomes ready [ 1588.682060][ T1331] IPv6: ADDRCONF(NETDEV_CHANGE): veth11: link becomes ready [ 1588.689613][ T1331] bridge3: port 1(veth11) entered blocking state [ 1588.695992][ T1331] bridge3: port 1(veth11) entered forwarding state [ 1588.702804][ T1331] IPv6: ADDRCONF(NETDEV_CHANGE): veth10: link becomes ready [ 1588.710591][ T1331] IPv6: ADDRCONF(NETDEV_CHANGE): veth13: link becomes ready [ 1588.722592][ T1331] IPv6: ADDRCONF(NETDEV_CHANGE): veth12: link becomes ready [ 1588.735335][ T1331] IPv6: ADDRCONF(NETDEV_CHANGE): veth15: link becomes ready [ 1588.743194][ T1331] IPv6: ADDRCONF(NETDEV_CHANGE): veth14: link becomes ready [ 1588.750950][ T1331] IPv6: ADDRCONF(NETDEV_CHANGE): veth17: link becomes ready [ 1588.759198][ T1331] IPv6: ADDRCONF(NETDEV_CHANGE): veth16: link becomes ready [ 1588.767091][ T1331] IPv6: ADDRCONF(NETDEV_CHANGE): bridge3: link becomes ready [ 1588.775005][ T1331] IPv6: ADDRCONF(NETDEV_CHANGE): vlan4: link becomes ready [ 1594.770345][T17996] 9pnet_fd: Insufficient options for proto=fd [ 1594.977788][T18003] device wg2 entered promiscuous mode [ 1600.048976][T18066] netlink: 'syz.2.4797': attribute type 27 has an invalid length. [ 1600.097887][T18066] bridge3: port 2(vlan3) entered disabled state [ 1600.205750][T18066] bridge3: port 1(veth11) entered disabled state [ 1600.256963][T18069] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1600.309136][T18069] device veth0_vlan left promiscuous mode [ 1600.319389][T18069] device veth0_vlan entered promiscuous mode [ 1600.326973][T18069] device veth1_macvtap left promiscuous mode [ 1600.335122][T18069] device veth1_macvtap entered promiscuous mode [ 1600.367815][T13880] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1600.375620][T13880] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1600.383409][T13880] IPv6: ADDRCONF(NETDEV_CHANGE): vlan3: link becomes ready [ 1600.390978][T13880] bridge3: port 2(vlan3) entered blocking state [ 1600.397282][T13880] bridge3: port 2(vlan3) entered forwarding state [ 1600.404433][T13880] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1600.413118][T13880] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1600.421649][T13880] IPv6: ADDRCONF(NETDEV_CHANGE): vlan5: link becomes ready [ 1600.429516][T13880] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 1600.437940][T13880] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1600.446481][T13880] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1600.455178][T13880] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1600.463637][T13880] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1600.471874][T13880] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1600.480363][T13880] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1600.488958][T13880] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1600.497642][T13880] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1600.506277][T13880] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1600.515015][T13880] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1600.523278][T13880] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1600.531395][T13880] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1600.540108][T13880] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1600.548628][T13880] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1600.556821][T13880] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1600.564892][T13880] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1600.572356][T13880] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1600.580212][T13880] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1600.588881][T13880] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1600.598209][T13880] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1600.606615][T13880] IPv6: ADDRCONF(NETDEV_CHANGE): veth3: link becomes ready [ 1600.614513][T13880] IPv6: ADDRCONF(NETDEV_CHANGE): veth2: link becomes ready [ 1600.622145][T13880] IPv6: ADDRCONF(NETDEV_CHANGE): veth5: link becomes ready [ 1600.629907][T13880] IPv6: ADDRCONF(NETDEV_CHANGE): veth4: link becomes ready [ 1600.638021][T13880] IPv6: ADDRCONF(NETDEV_CHANGE): veth7: link becomes ready [ 1600.645652][T13880] IPv6: ADDRCONF(NETDEV_CHANGE): veth6: link becomes ready [ 1600.657951][T13880] IPv6: ADDRCONF(NETDEV_CHANGE): veth9: link becomes ready [ 1600.665590][T13880] IPv6: ADDRCONF(NETDEV_CHANGE): veth8: link becomes ready [ 1600.673297][T13880] IPv6: ADDRCONF(NETDEV_CHANGE): veth11: link becomes ready [ 1600.680928][T13880] bridge3: port 1(veth11) entered blocking state [ 1600.687303][T13880] bridge3: port 1(veth11) entered forwarding state [ 1600.694144][T13880] IPv6: ADDRCONF(NETDEV_CHANGE): veth10: link becomes ready [ 1600.701848][T13880] IPv6: ADDRCONF(NETDEV_CHANGE): veth13: link becomes ready [ 1600.709620][T13880] IPv6: ADDRCONF(NETDEV_CHANGE): veth12: link becomes ready [ 1600.717533][T13880] IPv6: ADDRCONF(NETDEV_CHANGE): veth15: link becomes ready [ 1600.725217][T13880] IPv6: ADDRCONF(NETDEV_CHANGE): veth14: link becomes ready [ 1600.732946][T13880] IPv6: ADDRCONF(NETDEV_CHANGE): veth17: link becomes ready [ 1600.740482][T13880] IPv6: ADDRCONF(NETDEV_CHANGE): veth16: link becomes ready [ 1600.748194][T13880] IPv6: ADDRCONF(NETDEV_CHANGE): bridge3: link becomes ready [ 1600.756031][T13880] IPv6: ADDRCONF(NETDEV_CHANGE): vlan4: link becomes ready [ 1602.677348][T18101] SELinux: Context system_u:object_r:var_lib_t:s0 is not valid (left unmapped). [ 1602.684137][ T28] audit: type=1400 audit(2000000139.090:3613): avc: denied { relabelfrom } for pid=18098 comm="syz.0.4805" name="UDP" dev="sockfs" ino=57519 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 1602.710071][ T28] audit: type=1400 audit(2000000139.120:3614): avc: denied { relabelto } for pid=18098 comm="syz.0.4805" name="UDP" dev="sockfs" ino=57519 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=udp_socket permissive=1 trawcon="system_u:object_r:var_lib_t:s0" [ 1605.319100][T18131] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1606.392504][ C0] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 1611.507581][T18192] netlink: 'syz.1.4832': attribute type 27 has an invalid length. [ 1611.527754][T18192] bridge0: port 2(bridge_slave_1) entered disabled state [ 1611.535000][T18192] bridge0: port 1(bridge_slave_0) entered disabled state [ 1611.913592][T18194] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1611.927199][T18194] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1612.249759][T18194] device veth0_vlan left promiscuous mode [ 1612.255907][T18194] device veth0_vlan entered promiscuous mode [ 1612.308695][ T850] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1612.316959][ T850] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1612.349104][ T850] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1612.367567][ T850] bridge0: port 1(bridge_slave_0) entered blocking state [ 1612.374677][ T850] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1612.382795][ T850] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1612.391317][ T850] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1612.401224][ T850] bridge0: port 2(bridge_slave_1) entered blocking state [ 1612.408319][ T850] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1612.416555][ T850] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1612.425310][ T850] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 1612.433696][ T850] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1612.490452][ T850] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1612.499666][ T850] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1612.508903][ T850] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1612.743748][ T850] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1612.778319][ T850] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1612.793904][ T850] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1612.803991][ T850] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1612.815129][ T850] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1612.825800][ T850] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1612.836240][ T850] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1612.846985][ T850] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1612.858201][ T850] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1612.868875][ T850] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1612.880127][ T850] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1612.890371][ T850] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1612.908949][ T850] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1612.916613][ T850] IPv6: ADDRCONF(NETDEV_CHANGE): veth3: link becomes ready [ 1612.924261][ T850] IPv6: ADDRCONF(NETDEV_CHANGE): veth2: link becomes ready [ 1612.931825][ T850] IPv6: ADDRCONF(NETDEV_CHANGE): veth5: link becomes ready [ 1612.939439][ T850] IPv6: ADDRCONF(NETDEV_CHANGE): veth4: link becomes ready [ 1612.947181][ T850] IPv6: ADDRCONF(NETDEV_CHANGE): veth7: link becomes ready [ 1612.955007][ T850] IPv6: ADDRCONF(NETDEV_CHANGE): veth6: link becomes ready [ 1612.962674][ T850] IPv6: ADDRCONF(NETDEV_CHANGE): veth9: link becomes ready [ 1612.970198][ T850] IPv6: ADDRCONF(NETDEV_CHANGE): veth8: link becomes ready [ 1612.983503][ T850] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1612.992906][T15385] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 1613.000517][T15385] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 1613.022579][T15385] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 1613.132896][T18218] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4839'. [ 1613.162263][T15385] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 1613.171953][T15385] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 1613.305737][T18220] netlink: 68 bytes leftover after parsing attributes in process `syz.2.4840'. [ 1613.315050][T18220] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4840'. [ 1615.142931][T18245] netlink: 'syz.0.4847': attribute type 27 has an invalid length. [ 1615.158849][T18245] device sit0 left promiscuous mode [ 1615.173596][T18245] bridge2: port 2(vlan1) entered disabled state [ 1615.182815][T18245] device wg2 left promiscuous mode [ 1615.233737][T18245] bridge2: port 1(veth7) entered disabled state [ 1615.247154][T18245] device veth11 left promiscuous mode [ 1615.557161][T18250] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1615.634369][T18250] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1615.693682][T18250] device veth0_vlan left promiscuous mode [ 1615.711952][T18250] device veth0_vlan entered promiscuous mode [ 1615.725789][T18250] device veth1_macvtap left promiscuous mode [ 1615.733383][T18250] device veth1_macvtap entered promiscuous mode [ 1615.762687][ T1351] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1615.772896][ T1351] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1615.780603][ T1351] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1615.790030][ T1351] bridge2: port 2(vlan1) entered blocking state [ 1615.796345][ T1351] bridge2: port 2(vlan1) entered forwarding state [ 1615.803107][ T1351] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1615.811632][ T1351] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1615.820386][ T1351] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1615.829184][ T1351] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1615.838204][ T1351] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 1615.847216][ T1351] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1615.855796][ T1351] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1615.885635][ T1351] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1615.894296][ T1351] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1615.902671][ T1351] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1615.912594][ T1351] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1615.921015][ T1351] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1615.929751][ T1351] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1615.938899][ T1351] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1615.947550][ T1351] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1615.955996][ T1351] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1615.964536][ T1351] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1615.972857][ T1351] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1615.981098][ T1351] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1615.992039][ T1351] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1616.000924][ T1351] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1616.009182][ T1351] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1616.017204][ T1351] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1616.024644][ T1351] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1616.033209][ T1351] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1616.041473][ T1351] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1616.049412][ T1351] IPv6: ADDRCONF(NETDEV_CHANGE): veth3: link becomes ready [ 1616.058378][ T1351] IPv6: ADDRCONF(NETDEV_CHANGE): veth2: link becomes ready [ 1616.068232][ T1351] IPv6: ADDRCONF(NETDEV_CHANGE): veth5: link becomes ready [ 1616.077969][ T1351] IPv6: ADDRCONF(NETDEV_CHANGE): veth4: link becomes ready [ 1616.089182][ T1351] IPv6: ADDRCONF(NETDEV_CHANGE): veth7: link becomes ready [ 1616.098359][ T1351] bridge2: port 1(veth7) entered blocking state [ 1616.104667][ T1351] bridge2: port 1(veth7) entered forwarding state [ 1616.120621][ T1351] IPv6: ADDRCONF(NETDEV_CHANGE): veth6: link becomes ready [ 1616.131337][ T1351] IPv6: ADDRCONF(NETDEV_CHANGE): veth9: link becomes ready [ 1616.141626][ T1351] IPv6: ADDRCONF(NETDEV_CHANGE): veth8: link becomes ready [ 1616.151578][ T1351] IPv6: ADDRCONF(NETDEV_CHANGE): veth11: link becomes ready [ 1616.163659][ T1351] IPv6: ADDRCONF(NETDEV_CHANGE): veth10: link becomes ready [ 1616.174138][ T1351] IPv6: ADDRCONF(NETDEV_CHANGE): bridge2: link becomes ready [ 1616.872288][ C0] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 1617.116292][ T6841] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 1617.124059][ T6841] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 1617.193614][ T6841] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 1617.209102][T12269] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 1618.832452][ T6841] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 1621.032342][ C1] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 1623.737216][T18346] overlayfs: failed to resolve './file1': -2 [ 1624.322263][ C0] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 1628.257949][T18364] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4874'. [ 1628.292925][T18365] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4876'. [ 1628.792234][ C1] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 1630.962358][T18387] overlayfs: missing 'lowerdir' [ 1632.360174][ T28] audit: type=1326 audit(2000000168.700:3615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18397 comm="syz.1.4887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe65038e929 code=0x7ffc0000 [ 1632.389136][ T28] audit: type=1326 audit(2000000168.700:3616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18397 comm="syz.1.4887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe65038e929 code=0x7ffc0000 [ 1633.765716][ T28] audit: type=1326 audit(2000000168.700:3617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18397 comm="syz.1.4887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe65038e929 code=0x7ffc0000 [ 1636.271502][ T28] audit: type=1326 audit(2000000168.700:3618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18397 comm="syz.1.4887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe65038e929 code=0x7ffc0000 [ 1636.380593][ T28] audit: type=1326 audit(2000000168.700:3619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18397 comm="syz.1.4887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe65038e929 code=0x7ffc0000 [ 1636.583974][ T28] audit: type=1326 audit(2000000168.700:3620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18397 comm="syz.1.4887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe65038e929 code=0x7ffc0000 [ 1636.615814][ T28] audit: type=1326 audit(2000000168.700:3621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18397 comm="syz.1.4887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe65038e929 code=0x7ffc0000 [ 1636.674678][ T28] audit: type=1326 audit(2000000168.700:3622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18397 comm="syz.1.4887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe65038d290 code=0x7ffc0000 [ 1636.753736][ T28] audit: type=1326 audit(2000000168.700:3623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18397 comm="syz.1.4887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe65038e929 code=0x7ffc0000 [ 1637.765903][ T28] audit: type=1326 audit(2000000168.700:3624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18397 comm="syz.1.4887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe65038d290 code=0x7ffc0000 [ 1637.803923][ T28] audit: type=1326 audit(2000000168.700:3625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18397 comm="syz.1.4887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe65038d290 code=0x7ffc0000 [ 1637.829545][ T28] audit: type=1326 audit(2000000168.700:3626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18397 comm="syz.1.4887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe65038e929 code=0x7ffc0000 [ 1637.854088][ T28] audit: type=1326 audit(2000000168.700:3627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18397 comm="syz.1.4887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=295 compat=0 ip=0x7fe65038e929 code=0x7ffc0000 [ 1637.878712][ T28] audit: type=1326 audit(2000000168.700:3628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18397 comm="syz.1.4887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe65038e929 code=0x7ffc0000 [ 1637.962187][ T28] audit: type=1326 audit(2000000168.700:3629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18397 comm="syz.1.4887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe65038e929 code=0x7ffc0000 [ 1638.040992][ T28] audit: type=1326 audit(2000000168.700:3630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18397 comm="syz.1.4887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe65038e929 code=0x7ffc0000 [ 1638.072378][ T28] audit: type=1326 audit(2000000168.700:3631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18397 comm="syz.1.4887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe65038e929 code=0x7ffc0000 [ 1638.531288][ T28] audit: type=1326 audit(2000000168.700:3632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18397 comm="syz.1.4887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe65038e929 code=0x7ffc0000 [ 1638.720649][ T28] audit: type=1326 audit(2000000168.700:3633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18397 comm="syz.1.4887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe65038e929 code=0x7ffc0000 [ 1639.682323][ C0] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 1639.923870][T18457] netlink: 'syz.0.4901': attribute type 4 has an invalid length. [ 1643.512251][ C1] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 1645.104749][T18509] netlink: 'syz.1.4915': attribute type 4 has an invalid length. [ 1645.416068][T18507] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1645.469116][T18507] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1646.629884][T18534] SELinux: Context system_u:object_r:semanage_exec_t:s0 is not valid (left unmapped). [ 1647.309362][T18532] device veth1_macvtap left promiscuous mode [ 1647.315424][T18532] device macsec0 entered promiscuous mode [ 1647.324801][ T28] kauditd_printk_skb: 22 callbacks suppressed [ 1647.324819][ T28] audit: type=1400 audit(2000000183.060:3656): avc: denied { relabelto } for pid=18528 comm="syz.2.4920" name="" dev="pipefs" ino=15177 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=fifo_file permissive=1 trawcon="system_u:object_r:semanage_exec_t:s0" [ 1647.363163][ T28] audit: type=1400 audit(2000000183.110:3657): avc: denied { create } for pid=18528 comm="syz.2.4920" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1647.702325][ T28] audit: type=1400 audit(2000000184.030:3658): avc: denied { execmem } for pid=18541 comm="syz.1.4927" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 1647.948177][ T28] audit: type=1400 audit(2000000184.360:3659): avc: denied { write } for pid=18535 comm="syz.2.4924" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1647.968713][T18551] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4924'. [ 1647.977757][ T28] audit: type=1400 audit(2000000184.380:3660): avc: denied { nlmsg_write } for pid=18535 comm="syz.2.4924" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1649.067708][T18570] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1652.543735][T18598] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4938'. [ 1652.609574][T18600] incfs: Backing dir is not set, filesystem can't be mounted. [ 1652.642243][T18600] incfs: mount failed -2 [ 1657.234492][T18652] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4952'. [ 1657.426516][T18655] netlink: 104 bytes leftover after parsing attributes in process `syz.0.4951'. [ 1657.435959][T18655] netlink: 104 bytes leftover after parsing attributes in process `syz.0.4951'. [ 1657.445221][T18655] netlink: 104 bytes leftover after parsing attributes in process `syz.0.4951'. [ 1657.545534][T18656] netlink: 'syz.5.4950': attribute type 4 has an invalid length. [ 1658.824525][T18662] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 1659.322965][T18665] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4964'. [ 1668.552406][T18721] syz.2.4962[18721] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1668.552486][T18721] syz.2.4962[18721] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1671.046159][T18732] syz.3.4970[18732] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1671.682263][ C0] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 1672.312243][ C1] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 1673.382232][T18726] netlink: 'syz.2.4972': attribute type 27 has an invalid length. [ 1673.522255][T18726] bridge3: port 2(vlan3) entered disabled state [ 1673.777644][ T28] audit: type=1400 audit(2000000210.190:3661): avc: denied { watch_reads } for pid=18742 comm="syz.1.4976" path="/1024/file0" dev="tmpfs" ino=5462 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 1673.873823][T18726] bridge3: port 1(veth11) entered disabled state [ 1673.985151][T18731] netlink: 'syz.2.4972': attribute type 27 has an invalid length. [ 1681.084341][T18774] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4984'. [ 1702.385919][T18884] netlink: 'syz.2.5012': attribute type 27 has an invalid length. [ 1703.362592][T18884] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1703.759482][T18884] device veth0_vlan left promiscuous mode [ 1703.955869][T18888] x_tables: ip_tables: socket match: used from hooks FORWARD, but only valid from PREROUTING/INPUT [ 1704.068667][T18884] device veth0_vlan entered promiscuous mode [ 1704.075920][T18884] device veth1_macvtap left promiscuous mode [ 1704.090575][T18884] device veth1_macvtap entered promiscuous mode [ 1704.325028][ T1351] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1704.333066][ T1351] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1704.340735][ T1351] IPv6: ADDRCONF(NETDEV_CHANGE): vlan3: link becomes ready [ 1704.349598][ T1351] bridge3: port 2(vlan3) entered blocking state [ 1704.355902][ T1351] bridge3: port 2(vlan3) entered forwarding state [ 1704.363763][ T1351] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1704.373566][ T1351] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1704.382057][ T1351] IPv6: ADDRCONF(NETDEV_CHANGE): vlan5: link becomes ready [ 1704.390123][ T1351] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 1704.399018][ T1351] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1704.407662][ T1351] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1704.416297][ T1351] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1704.424930][ T1351] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1704.433448][ T1351] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1704.441813][ T1351] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1704.450520][ T1351] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1704.489915][ T1351] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1704.498168][ T1351] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1704.506780][ T1351] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1704.515145][ T1351] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1704.523644][ T1351] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1704.532344][ T1351] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1704.540918][ T1351] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1704.549702][ T1351] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1704.558087][ T1351] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1704.565657][ T1351] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1704.573610][ T1351] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1704.582423][ T1351] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1704.591007][ T1351] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1704.599031][ T1351] IPv6: ADDRCONF(NETDEV_CHANGE): veth3: link becomes ready [ 1704.607124][ T1351] IPv6: ADDRCONF(NETDEV_CHANGE): veth2: link becomes ready [ 1704.615085][ T1351] IPv6: ADDRCONF(NETDEV_CHANGE): veth5: link becomes ready [ 1704.623073][ T1351] IPv6: ADDRCONF(NETDEV_CHANGE): veth4: link becomes ready [ 1704.631078][ T1351] IPv6: ADDRCONF(NETDEV_CHANGE): veth7: link becomes ready [ 1704.639379][ T1351] IPv6: ADDRCONF(NETDEV_CHANGE): veth6: link becomes ready [ 1704.647450][ T1351] IPv6: ADDRCONF(NETDEV_CHANGE): veth9: link becomes ready [ 1704.655426][ T1351] IPv6: ADDRCONF(NETDEV_CHANGE): veth8: link becomes ready [ 1704.663541][ T1351] IPv6: ADDRCONF(NETDEV_CHANGE): veth11: link becomes ready [ 1704.671439][ T1351] bridge3: port 1(veth11) entered blocking state [ 1704.678005][ T1351] bridge3: port 1(veth11) entered forwarding state [ 1704.685141][ T1351] IPv6: ADDRCONF(NETDEV_CHANGE): veth10: link becomes ready [ 1704.693127][ T1351] IPv6: ADDRCONF(NETDEV_CHANGE): veth13: link becomes ready [ 1704.701059][ T1351] IPv6: ADDRCONF(NETDEV_CHANGE): veth12: link becomes ready [ 1704.709794][ T1351] IPv6: ADDRCONF(NETDEV_CHANGE): veth15: link becomes ready [ 1704.718165][ T1351] IPv6: ADDRCONF(NETDEV_CHANGE): veth14: link becomes ready [ 1704.726161][ T1351] IPv6: ADDRCONF(NETDEV_CHANGE): veth17: link becomes ready [ 1704.734641][ T1351] IPv6: ADDRCONF(NETDEV_CHANGE): veth16: link becomes ready [ 1704.742741][ T1351] IPv6: ADDRCONF(NETDEV_CHANGE): bridge3: link becomes ready [ 1704.750644][ T1351] IPv6: ADDRCONF(NETDEV_CHANGE): vlan4: link becomes ready [ 1715.932415][T18961] overlayfs: failed to clone upperpath [ 1721.319531][T18989] bridge0: port 1(gretap0) entered blocking state [ 1721.364922][T18989] bridge0: port 1(gretap0) entered disabled state [ 1721.371940][T18989] device gretap0 entered promiscuous mode [ 1721.381138][T18991] netlink: 277 bytes leftover after parsing attributes in process `syz.2.5041'. [ 1721.391070][T18989] bridge0: port 1(gretap0) entered blocking state [ 1721.397760][T18989] bridge0: port 1(gretap0) entered forwarding state [ 1721.443877][ T1331] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1721.515190][T18992] device gretap0 left promiscuous mode [ 1721.540148][T18992] bridge0: port 1(gretap0) entered disabled state [ 1722.455693][ T28] audit: type=1326 audit(2000000258.870:3662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19007 comm="syz.1.5045" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe65038e929 code=0x7ffc0000 [ 1722.619496][ T28] audit: type=1326 audit(2000000258.980:3663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19007 comm="syz.1.5045" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fe6503858e7 code=0x7ffc0000 [ 1722.713762][ T28] audit: type=1326 audit(2000000258.980:3664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19007 comm="syz.1.5045" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fe65032ab19 code=0x7ffc0000 [ 1722.804026][ T28] audit: type=1326 audit(2000000258.980:3665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19007 comm="syz.1.5045" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe65038e929 code=0x7ffc0000 [ 1722.891325][ T28] audit: type=1326 audit(2000000258.980:3666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19007 comm="syz.1.5045" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe65038e929 code=0x7ffc0000 [ 1722.983114][ T28] audit: type=1326 audit(2000000258.980:3667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19007 comm="syz.1.5045" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe65038e929 code=0x7ffc0000 [ 1723.096779][ T28] audit: type=1326 audit(2000000258.980:3668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19007 comm="syz.1.5045" exe="/root/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7fe65038e929 code=0x7ffc0000 [ 1723.165539][T19015] netlink: 68 bytes leftover after parsing attributes in process `syz.5.5043'. [ 1723.213633][ T28] audit: type=1326 audit(2000000258.990:3669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19007 comm="syz.1.5045" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fe6503858e7 code=0x7ffc0000 [ 1723.334008][ T28] audit: type=1326 audit(2000000258.990:3670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19007 comm="syz.1.5045" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fe65032ab19 code=0x7ffc0000 [ 1723.373868][ T28] audit: type=1326 audit(2000000258.990:3671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19007 comm="syz.1.5045" exe="/root/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7fe65038e929 code=0x7ffc0000 [ 1734.392425][ C1] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 1735.392347][T19102] overlayfs: missing 'lowerdir' [ 1739.513181][ C0] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 1749.824909][T19130] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5077'. [ 1750.021723][ T28] kauditd_printk_skb: 59 callbacks suppressed [ 1750.021741][ T28] audit: type=1400 audit(2000000286.430:3731): avc: denied { mounton } for pid=19136 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 1750.223968][T19136] bridge0: port 1(bridge_slave_0) entered blocking state [ 1750.258768][T19136] bridge0: port 1(bridge_slave_0) entered disabled state [ 1750.287883][T19136] device bridge_slave_0 entered promiscuous mode [ 1750.322519][T19136] bridge0: port 2(bridge_slave_1) entered blocking state [ 1750.404350][T19136] bridge0: port 2(bridge_slave_1) entered disabled state [ 1750.411952][T19136] device bridge_slave_1 entered promiscuous mode [ 1751.202651][ T1331] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1751.220718][ T1331] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1751.269399][ T1331] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1751.313257][ T1331] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1751.357347][ T1331] bridge0: port 1(bridge_slave_0) entered blocking state [ 1751.364486][ T1331] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1752.461843][ T1331] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1752.471036][ T1331] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1752.580525][ T1331] bridge0: port 2(bridge_slave_1) entered blocking state [ 1752.587633][ T1331] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1753.395351][ T1331] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1754.361507][ T1331] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1754.372917][ T1331] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1754.381047][ T1331] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1755.143715][ T1331] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1755.212910][ T28] audit: type=1326 audit(2000000291.540:3732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19159 comm="syz.1.5082" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe65038e929 code=0x7ffc0000 [ 1756.368701][ T28] audit: type=1326 audit(2000000291.540:3733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19159 comm="syz.1.5082" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe65038e929 code=0x7ffc0000 [ 1765.887764][T19171] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5085'. [ 1765.969073][ T28] audit: type=1326 audit(2000000291.540:3734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19159 comm="syz.1.5082" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe65038e929 code=0x7ffc0000 [ 1766.000557][ T28] audit: type=1326 audit(2000000291.540:3735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19159 comm="syz.1.5082" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe65038e929 code=0x7ffc0000 [ 1766.024491][ T28] audit: type=1326 audit(2000000291.540:3736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19159 comm="syz.1.5082" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe65038e929 code=0x7ffc0000 [ 1766.049068][ T28] audit: type=1326 audit(2000000291.540:3737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19159 comm="syz.1.5082" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe65038e929 code=0x7ffc0000 [ 1766.072961][ T28] audit: type=1326 audit(2000000292.810:3738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19159 comm="syz.1.5082" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe65038e929 code=0x7ffc0000 [ 1766.096785][ T28] audit: type=1326 audit(2000000292.810:3739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19159 comm="syz.1.5082" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe65038e929 code=0x7ffc0000 [ 1767.377252][ T1331] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1767.391487][ T1331] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1767.400067][T19162] netlink: 'syz.1.5082': attribute type 27 has an invalid length. [ 1767.431810][T19162] bridge0: port 2(bridge_slave_1) entered disabled state [ 1767.439070][T19162] bridge0: port 1(bridge_slave_0) entered disabled state [ 1767.608810][T19168] netlink: 'syz.3.5083': attribute type 27 has an invalid length. [ 1767.665900][ T28] audit: type=1326 audit(2000000304.080:3740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19182 comm="syz.1.5088" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe65038e929 code=0x0 [ 1767.810604][T19136] device veth0_vlan entered promiscuous mode [ 1767.873268][T19136] device veth1_macvtap entered promiscuous mode [ 1767.959423][ T28] audit: type=1400 audit(2000000304.370:3741): avc: denied { mounton } for pid=19136 comm="syz-executor" path="/root/syzkaller.BHfg1f/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 1768.079486][ T1331] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1769.492548][ T1331] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1769.518132][ T1331] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1781.237290][T19202] loop6: detected capacity change from 0 to 512 [ 1781.243976][T19202] EXT4-fs: Ignoring removed oldalloc option [ 1781.252577][ T1331] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1781.260780][ T1331] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1781.282346][T19202] EXT4-fs: failed to create workqueue [ 1781.287786][T19202] EXT4-fs (loop6): mount failed [ 1781.310957][ T1331] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1781.343227][ T1331] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1781.360368][ T1331] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1781.378461][ T1331] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1781.399118][ T1331] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1781.414333][ T1331] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1784.073599][ T1331] tipc: Disabling bearer [ 1784.080617][ T1331] tipc: Left network mode [ 1784.476746][T19235] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5095'. [ 1784.725055][T19233] bridge0: port 1(bridge_slave_0) entered blocking state [ 1784.732288][T19233] bridge0: port 1(bridge_slave_0) entered disabled state [ 1784.739881][T19233] device bridge_slave_0 entered promiscuous mode [ 1784.747731][T19233] bridge0: port 2(bridge_slave_1) entered blocking state [ 1784.755880][T19233] bridge0: port 2(bridge_slave_1) entered disabled state [ 1784.763662][T19233] device bridge_slave_1 entered promiscuous mode [ 1785.416185][ T1229] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1785.423901][ T1229] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1785.437364][ T1229] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1785.471216][ T1229] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1785.485751][ T1229] bridge0: port 1(bridge_slave_0) entered blocking state [ 1785.492854][ T1229] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1785.506551][ T1229] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1785.519319][ T1229] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1785.535838][ T1229] bridge0: port 2(bridge_slave_1) entered blocking state [ 1785.542959][ T1229] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1785.557654][ T1229] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1785.589655][ T1229] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1785.599964][ T1229] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1785.613012][ T1229] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1785.621340][ T1229] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1785.926944][ T1229] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1785.981321][ T1229] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1786.077362][ T1229] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1786.085809][ T1229] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1786.095120][T19233] device veth0_vlan entered promiscuous mode [ 1786.103131][ T1229] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1786.109802][T19260] loop6: detected capacity change from 0 to 256 [ 1786.111035][ T1229] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1786.124752][T19260] FAT-fs (loop6): Unrecognized mount option "dmask=0100000L000000000000000" or missing value [ 1786.131679][ T1229] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1786.148891][T19233] device veth1_macvtap entered promiscuous mode [ 1786.160557][ T1229] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1786.169614][ T1229] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1786.194394][ T28] audit: type=1400 audit(2000000322.610:3742): avc: denied { read } for pid=19259 comm="syz.6.5106" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1786.214984][ T1229] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1786.228725][T19264] netlink: 104 bytes leftover after parsing attributes in process `syz.0.5105'. [ 1786.241607][ T1229] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1790.943490][T19299] loop6: detected capacity change from 0 to 512 [ 1790.979683][T19299] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1791.075812][T19299] EXT4-fs (loop6): orphan cleanup on readonly fs [ 1791.117959][T19299] Quota error (device loop6): do_check_range: Getting block 196613 out of range 1-5 [ 1791.127828][T19299] Quota error (device loop6): qtree_read_dquot: Can't read quota structure for id 0 [ 1791.139213][T19299] EXT4-fs error (device loop6): ext4_acquire_dquot:6801: comm syz.6.5113: Failed to acquire dquot type 1 [ 1791.170267][T19299] EXT4-fs (loop6): 1 truncate cleaned up [ 1791.176758][T19299] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 1793.349067][T19290] usb 8-1: new full-speed USB device number 2 using dummy_hcd [ 1793.365878][T19136] EXT4-fs (loop6): unmounting filesystem. [ 1793.531241][ T28] audit: type=1326 audit(2000000329.940:3743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19302 comm="syz.1.5115" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe65038e929 code=0x0 [ 1796.946207][T19329] loop7: detected capacity change from 0 to 40427 [ 1796.972383][T19329] F2FS-fs (loop7): Invalid log_blocksize (268), supports only 12 [ 1797.007053][T19329] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock [ 1797.295293][T19329] F2FS-fs (loop7): Found nat_bits in checkpoint [ 1797.337390][T19349] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1797.362872][T19329] F2FS-fs (loop7): Try to recover 1th superblock, ret: 0 [ 1797.370001][T19329] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 1797.396783][T19349] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1797.416582][ T1229] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 1797.427520][ T1229] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1797.436753][ T1229] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 1797.446224][ T1229] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1797.454579][ T1229] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1797.476700][ T1229] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1797.485275][ T1229] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1797.493718][ T1229] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1799.312700][T19377] netlink: 104 bytes leftover after parsing attributes in process `syz.7.5129'. [ 1804.912705][T19407] device xfrm0 entered promiscuous mode [ 1806.295263][ T28] audit: type=1400 audit(2000000342.710:3744): avc: denied { listen } for pid=19424 comm="syz.7.5144" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1808.676644][T19450] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5150'. [ 1811.117896][T19474] loop6: detected capacity change from 0 to 512 [ 1811.135260][T19474] EXT4-fs (loop6): Test dummy encryption mode enabled [ 1811.157896][T19474] EXT4-fs error (device loop6): __ext4_iget:5078: inode #11: block 1: comm syz.6.5156: invalid block [ 1811.272520][T19479] loop7: detected capacity change from 0 to 256 [ 1811.281254][T19479] exfat: Deprecated parameter 'utf8' [ 1811.286761][T19479] exfat: Deprecated parameter 'utf8' [ 1811.375974][T19479] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0x18acca35, utbl_chksum : 0xe619d30d) [ 1811.472835][T19474] EXT4-fs error (device loop6): ext4_orphan_get:1405: comm syz.6.5156: couldn't read orphan inode 11 (err -117) [ 1811.485219][T19474] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 1812.222156][T19290] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 1812.413274][T19290] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1812.424481][T19290] usb 8-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 1812.444297][T19290] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1812.453597][T19290] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1812.461681][T19290] usb 8-1: Product: syz [ 1812.466341][T19290] usb 8-1: Manufacturer: syz [ 1812.471019][T19290] usb 8-1: SerialNumber: syz [ 1812.480871][T19136] EXT4-fs (loop6): unmounting filesystem. [ 1812.481681][T19290] cdc_mbim 8-1:1.0: skipping garbage [ 1812.504955][T19495] loop6: detected capacity change from 0 to 512 [ 1812.516892][T19495] EXT4-fs (loop6): Cannot turn on journaled quota: type 0: error -2 [ 1812.527814][T19495] EXT4-fs (loop6): Cannot turn on journaled quota: type 1: error -2 [ 1812.539069][T19495] EXT4-fs (loop6): 1 truncate cleaned up [ 1812.545550][T19495] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 1812.681142][T19489] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 1813.230474][T19290] cdc_mbim 8-1:1.0: failed GET_NTB_PARAMETERS [ 1813.237067][T19290] cdc_mbim 8-1:1.0: bind() failure [ 1813.247130][T19290] cdc_ncm 8-1:1.1: CDC Union missing and no IAD found [ 1813.254153][T19290] cdc_ncm 8-1:1.1: bind() failure [ 1813.378178][T19136] EXT4-fs (loop6): unmounting filesystem. [ 1814.211010][T19516] loop6: detected capacity change from 0 to 512 [ 1814.225110][T19516] EXT4-fs (loop6): external journal device major/minor numbers have changed [ 1814.244002][T19516] block device autoloading is deprecated and will be removed. [ 1814.251609][T19516] EXT4-fs (loop6): external journal has bad superblock [ 1814.991415][T19532] futex_wake_op: syz.2.5173 tries to shift op by -1; fix this program [ 1815.010124][ T28] audit: type=1326 audit(2000000351.410:3745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19527 comm="syz.2.5173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe66978e929 code=0x7ffc0000 [ 1815.034508][ T28] audit: type=1326 audit(2000000351.410:3746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19527 comm="syz.2.5173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe66978e929 code=0x7ffc0000 [ 1815.059627][ T28] audit: type=1326 audit(2000000351.420:3747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19527 comm="syz.2.5173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe66978e929 code=0x7ffc0000 [ 1815.102577][ T28] audit: type=1326 audit(2000000351.420:3748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19527 comm="syz.2.5173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7fe66978e929 code=0x7ffc0000 [ 1815.127997][ T28] audit: type=1326 audit(2000000351.450:3749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19527 comm="syz.2.5173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fe6697858e7 code=0x7ffc0000 [ 1815.151706][ T28] audit: type=1326 audit(2000000351.450:3750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19527 comm="syz.2.5173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fe66972ab19 code=0x7ffc0000 [ 1815.175321][ T28] audit: type=1326 audit(2000000351.450:3751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19527 comm="syz.2.5173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7fe66978e929 code=0x7ffc0000 [ 1815.202149][ T28] audit: type=1326 audit(2000000351.470:3752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19527 comm="syz.2.5173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fe6697858e7 code=0x7ffc0000 [ 1815.385132][ T28] audit: type=1326 audit(2000000351.470:3753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19527 comm="syz.2.5173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fe66972ab19 code=0x7ffc0000 [ 1815.409533][ T28] audit: type=1326 audit(2000000351.470:3754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19527 comm="syz.2.5173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7fe66978e929 code=0x7ffc0000 [ 1815.409971][ T7462] usb 8-1: USB disconnect, device number 3 [ 1816.942157][ T7462] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 1817.123340][ T7462] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1817.140882][ T7462] usb 7-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 1817.162879][ T7462] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1817.173510][ T7462] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1817.181540][ T7462] usb 7-1: Product: syz [ 1817.187491][ T7462] usb 7-1: Manufacturer: syz [ 1817.192419][T15385] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 1817.200258][ T7462] usb 7-1: SerialNumber: syz [ 1817.214879][ T7462] cdc_mbim 7-1:1.0: skipping garbage [ 1817.394067][T15385] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1817.405145][T15385] usb 8-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 1817.421016][T19548] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1817.433045][T15385] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1817.442324][T15385] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1817.451369][T15385] usb 8-1: Product: syz [ 1817.456237][T15385] usb 8-1: Manufacturer: syz [ 1817.459399][T19565] netlink: 104 bytes leftover after parsing attributes in process `syz.2.5183'. [ 1817.460956][T15385] usb 8-1: SerialNumber: syz [ 1817.495455][T15385] cdc_mbim 8-1:1.0: skipping garbage [ 1817.690258][T19558] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 1817.970020][ T7462] cdc_mbim 7-1:1.0: failed GET_NTB_PARAMETERS [ 1818.021654][ T7462] cdc_mbim 7-1:1.0: bind() failure [ 1818.109553][ T7462] cdc_ncm 7-1:1.1: CDC Union missing and no IAD found [ 1818.116658][ T7462] cdc_ncm 7-1:1.1: bind() failure [ 1818.179695][T15385] cdc_mbim 8-1:1.0: failed GET_NTB_PARAMETERS [ 1818.186138][T15385] cdc_mbim 8-1:1.0: bind() failure [ 1818.199407][T15385] cdc_ncm 8-1:1.1: CDC Union missing and no IAD found [ 1818.222191][T15385] cdc_ncm 8-1:1.1: bind() failure [ 1819.452979][T19290] usb 7-1: USB disconnect, device number 2 [ 1819.900260][ T6841] usb 8-1: USB disconnect, device number 4 [ 1820.696889][T19610] loop6: detected capacity change from 0 to 512 [ 1820.753114][T19610] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 1820.954782][T19610] EXT4-fs error (device loop6): ext4_orphan_get:1400: inode #17: comm syz.6.5193: iget: bad extra_isize 1568 (inode size 256) [ 1820.972208][T19610] EXT4-fs error (device loop6): ext4_orphan_get:1405: comm syz.6.5193: couldn't read orphan inode 17 (err -117) [ 1820.984451][T19610] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 1821.104168][T19616] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5194'. [ 1821.401221][T19136] EXT4-fs (loop6): unmounting filesystem. [ 1824.261838][T19629] netlink: 'syz.0.5208': attribute type 4 has an invalid length. [ 1824.301274][T19629] netlink: 'syz.0.5208': attribute type 4 has an invalid length. [ 1824.578978][T19640] loop6: detected capacity change from 0 to 256 [ 1824.591357][T19640] FAT-fs (loop6): Unrecognized mount option "uoi_xlate=0" or missing value [ 1824.601143][ T28] kauditd_printk_skb: 148 callbacks suppressed [ 1824.601181][ T28] audit: type=1400 audit(2000000366.973:3903): avc: denied { bind } for pid=19632 comm="syz.6.5200" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1824.710901][T19640] device xfrm0 entered promiscuous mode [ 1825.721563][T19644] loop6: detected capacity change from 0 to 128 [ 1825.749355][T19644] EXT4-fs (loop6): Test dummy encryption mode enabled [ 1825.778701][T19644] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 1825.792308][T19644] ext4 filesystem being mounted at /21/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1825.950601][ T28] audit: type=1326 audit(2000000368.353:3904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19651 comm="syz.7.5204" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f58c9b8e929 code=0x0 [ 1826.942249][ T28] audit: type=1400 audit(2000000368.503:3905): avc: denied { write } for pid=19643 comm="syz.6.5202" name="bus" dev="loop6" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 1827.022941][ T28] audit: type=1400 audit(2000000368.503:3906): avc: denied { add_name } for pid=19643 comm="syz.6.5202" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 1827.139244][T19660] device xfrm0 entered promiscuous mode [ 1827.180634][T19136] EXT4-fs (loop6): unmounting filesystem. [ 1828.465491][T19676] loop7: detected capacity change from 0 to 16 [ 1828.483590][T19676] erofs: Unknown parameter 'ÿÿÿÿvΡeçú1ûì' [ 1830.990424][T19729] overlayfs: failed to resolve './file1': -2 [ 1831.504047][T19730] xt_hashlimit: max too large, truncated to 1048576 [ 1834.164360][T19732] device xfrm0 entered promiscuous mode [ 1836.064770][T19746] loop7: detected capacity change from 0 to 512 [ 1838.962629][T19746] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 1838.971648][T19746] ext4 filesystem being mounted at /19/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1839.023314][ T28] audit: type=1400 audit(2000000381.433:3907): avc: denied { create } for pid=19736 comm="syz.7.5225" name="memory.stat" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 1839.062852][ T28] audit: type=1400 audit(2000000381.463:3908): avc: denied { read append open } for pid=19736 comm="syz.7.5225" path="/19/file0/memory.stat" dev="loop7" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 1839.267976][T19233] EXT4-fs (loop7): unmounting filesystem. [ 1839.346813][T19761] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1839.414242][T19761] device xfrm0 left promiscuous mode [ 1839.717103][T19761] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1840.386153][ T1351] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1840.772008][T19774] overlayfs: failed to clone lowerpath [ 1842.344895][T19794] futex_wake_op: syz.0.5240 tries to shift op by -1; fix this program [ 1842.582572][T19801] overlayfs: failed to clone upperpath [ 1843.349079][T19290] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 1843.543410][T19290] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1844.562439][T19290] usb 7-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 1844.572800][T15385] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 1845.445669][T19290] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1845.490561][T19816] futex_wake_op: syz.1.5246 tries to shift op by -1; fix this program [ 1845.513939][T19290] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1846.539622][ T28] audit: type=1326 audit(2000000388.083:3909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19815 comm="syz.1.5246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe65038e929 code=0x7ffc0000 [ 1846.588921][T19290] usb 7-1: can't set config #1, error -71 [ 1846.621316][T19290] usb 7-1: USB disconnect, device number 3 [ 1846.679231][ T28] audit: type=1326 audit(2000000388.083:3910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19815 comm="syz.1.5246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe65038e929 code=0x7ffc0000 [ 1846.788217][ T28] audit: type=1326 audit(2000000388.083:3911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19815 comm="syz.1.5246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe65038e929 code=0x7ffc0000 [ 1846.834401][T19820] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1846.856778][T19820] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1846.872890][ T28] audit: type=1326 audit(2000000388.083:3912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19815 comm="syz.1.5246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7fe65038e929 code=0x7ffc0000 [ 1846.952823][ T28] audit: type=1326 audit(2000000388.983:3913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19815 comm="syz.1.5246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fe6503858e7 code=0x7ffc0000 [ 1847.012152][ T28] audit: type=1326 audit(2000000388.983:3914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19815 comm="syz.1.5246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fe65032ab19 code=0x7ffc0000 [ 1847.054935][ T28] audit: type=1326 audit(2000000388.983:3915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19815 comm="syz.1.5246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7fe65038e929 code=0x7ffc0000 [ 1847.078551][ T28] audit: type=1326 audit(2000000388.983:3916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19815 comm="syz.1.5246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fe6503858e7 code=0x7ffc0000 [ 1847.102000][ T28] audit: type=1326 audit(2000000388.983:3917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19815 comm="syz.1.5246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fe65032ab19 code=0x7ffc0000 [ 1847.125524][ T28] audit: type=1326 audit(2000000388.983:3918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19815 comm="syz.1.5246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7fe65038e929 code=0x7ffc0000 [ 1847.217729][T19842] loop7: detected capacity change from 0 to 512 [ 1847.224838][T19842] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 1847.256188][T19842] EXT4-fs (loop7): 1 truncate cleaned up [ 1847.261956][T19842] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 1849.310636][T19233] EXT4-fs (loop7): unmounting filesystem. [ 1849.398605][ T7462] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 1849.883247][ T7462] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1849.900872][ T7462] usb 7-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 1849.915744][ T7462] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1849.925014][T15385] usb 8-1: device descriptor read/64, error -71 [ 1849.931292][ T7462] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1849.939437][ T7462] usb 7-1: Product: syz [ 1849.943651][ T7462] usb 7-1: Manufacturer: syz [ 1849.948262][ T7462] usb 7-1: SerialNumber: syz [ 1849.955531][ T7462] cdc_mbim 7-1:1.0: skipping garbage [ 1850.155817][T19840] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1850.239567][T15385] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1850.273391][T15385] usb 8-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 1850.285789][T15385] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1850.573143][T15385] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1850.581770][T15385] usb 8-1: Product: syz [ 1850.586436][T15385] usb 8-1: Manufacturer: syz [ 1850.591557][T15385] usb 8-1: SerialNumber: syz [ 1851.160137][ T7462] cdc_mbim 7-1:1.0: failed GET_NTB_PARAMETERS [ 1851.203636][ T7462] cdc_mbim 7-1:1.0: bind() failure [ 1851.223436][T15385] cdc_mbim 8-1:1.0: skipping garbage [ 1852.152169][ C1] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 1853.201080][ T7462] cdc_ncm 7-1:1.1: CDC Union missing and no IAD found [ 1853.223472][T15385] cdc_mbim 8-1:1.0: bind() failure [ 1853.259307][T15385] cdc_ncm 8-1:1.1: CDC Union missing and no IAD found [ 1853.269009][ T7462] cdc_ncm 7-1:1.1: bind() failure [ 1854.425323][T19894] loop6: detected capacity change from 0 to 512 [ 1854.439990][ T7462] usb 7-1: USB disconnect, device number 4 [ 1854.445924][T15385] cdc_ncm 8-1:1.1: bind() failure [ 1854.456344][T15385] usb 8-1: USB disconnect, device number 5 [ 1854.466705][T19894] EXT4-fs (loop6): Test dummy encryption mode enabled [ 1855.139632][T19894] EXT4-fs error (device loop6): __ext4_iget:5078: inode #11: block 1: comm syz.6.5267: invalid block [ 1855.151201][T19894] EXT4-fs error (device loop6): ext4_orphan_get:1405: comm syz.6.5267: couldn't read orphan inode 11 (err -117) [ 1855.163745][T19894] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 1855.571113][T19136] EXT4-fs (loop6): unmounting filesystem. [ 1856.874927][T19929] netlink: 'syz.1.5273': attribute type 27 has an invalid length. [ 1856.918461][T19929] device xfrm0 left promiscuous mode [ 1857.050200][T19915] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1857.092711][T19915] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1857.176117][T19915] device veth0_vlan left promiscuous mode [ 1857.188024][T19915] device veth0_vlan entered promiscuous mode [ 1857.488704][T19928] loop6: detected capacity change from 0 to 40427 [ 1857.504937][ T850] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1857.516911][T19928] F2FS-fs (loop6): Invalid log blocks per segment (83886089) [ 1857.525789][ T850] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1857.539504][T19928] F2FS-fs (loop6): Can't find valid F2FS filesystem in 2th superblock [ 1857.546209][ T850] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1857.561303][T19928] F2FS-fs (loop6): invalid crc value [ 1857.562818][ T850] bridge0: port 1(bridge_slave_0) entered blocking state [ 1857.573717][ T850] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1857.587994][T19928] F2FS-fs (loop6): Found nat_bits in checkpoint [ 1857.594636][ T850] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1857.611531][ T850] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1857.620087][ T850] bridge0: port 2(bridge_slave_1) entered blocking state [ 1857.627167][ T850] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1857.635042][ T850] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1857.643705][ T850] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 1857.652036][ T850] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1857.660624][ T850] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1857.666933][T19928] F2FS-fs (loop6): Start checkpoint disabled! [ 1857.669971][ T850] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1857.683281][ T850] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1857.691523][ T850] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1857.700182][ T850] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1857.708723][ T850] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1857.731693][T19928] F2FS-fs (loop6): Try to recover 2th superblock, ret: 0 [ 1857.739425][ T850] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1857.747557][T19928] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e6 [ 1857.756083][ T850] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1857.771361][T19945] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5281'. [ 1857.780843][ T850] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1857.839315][ T850] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1857.886166][T19947] loop7: detected capacity change from 0 to 2048 [ 1858.101042][T19947] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 1858.572683][T19948] syz.2.5281[19948] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1858.573432][T19948] syz.2.5281[19948] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1859.072477][ T850] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1859.124777][ T850] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1859.133434][ T850] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1859.141575][ T850] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1859.149651][ T850] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1859.157237][ T850] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1859.165006][ T850] IPv6: ADDRCONF(NETDEV_CHANGE): veth3: link becomes ready [ 1859.172587][ T850] IPv6: ADDRCONF(NETDEV_CHANGE): veth2: link becomes ready [ 1859.180403][ T850] IPv6: ADDRCONF(NETDEV_CHANGE): veth5: link becomes ready [ 1859.196092][T19233] EXT4-fs (loop7): unmounting filesystem. [ 1859.202824][ T850] IPv6: ADDRCONF(NETDEV_CHANGE): veth4: link becomes ready [ 1859.210417][ T850] IPv6: ADDRCONF(NETDEV_CHANGE): veth7: link becomes ready [ 1859.218539][ T850] IPv6: ADDRCONF(NETDEV_CHANGE): veth6: link becomes ready [ 1859.226353][ T850] IPv6: ADDRCONF(NETDEV_CHANGE): veth9: link becomes ready [ 1859.234211][ T850] IPv6: ADDRCONF(NETDEV_CHANGE): veth8: link becomes ready [ 1859.241827][ T850] IPv6: ADDRCONF(NETDEV_CHANGE): veth11: link becomes ready [ 1859.249841][ T850] IPv6: ADDRCONF(NETDEV_CHANGE): veth10: link becomes ready [ 1859.295829][ T850] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1859.307500][T19945] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5281'. [ 1859.325121][T19200] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 1859.338166][T19200] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 1859.349011][T19200] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 1859.357218][T19200] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 1859.365227][T19200] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 1859.373163][T19200] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 1859.382594][T19200] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 1859.418395][T19959] syz.6.5277: attempt to access beyond end of device [ 1859.418395][T19959] loop6: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1859.519903][ T28] kauditd_printk_skb: 27 callbacks suppressed [ 1859.540291][T19961] netlink: 'syz.2.5284': attribute type 4 has an invalid length. [ 1859.558818][ T28] audit: type=1400 audit(2000000401.813:3946): avc: denied { write } for pid=19925 comm="syz.6.5277" path="/33/file0/file1" dev="loop6" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 1859.632525][T19961] netlink: 'syz.2.5284': attribute type 4 has an invalid length. [ 1859.643659][T19200] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 1859.647860][ T5327] kworker/u4:266: attempt to access beyond end of device [ 1859.647860][ T5327] loop6: rw=2049, sector=40960, nr_sectors = 24 limit=40427 [ 1859.694805][T19968] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5286'. [ 1859.732172][T19200] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 1859.892695][T12269] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 1860.404759][T19981] overlayfs: overlapping lowerdir path [ 1860.885471][T19991] netlink: 'syz.6.5289': attribute type 9 has an invalid length. [ 1860.893332][T19991] netlink: 'syz.6.5289': attribute type 6 has an invalid length. [ 1860.943052][T19991] loop6: detected capacity change from 0 to 1024 [ 1860.992282][ T28] audit: type=1400 audit(2000000403.313:3947): avc: denied { append } for pid=19982 comm="syz.6.5289" name="001" dev="devtmpfs" ino=164 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 1861.016228][T19991] EXT4-fs: Invalid want_extra_isize 8 [ 1861.639740][T20002] futex_wake_op: syz.0.5295 tries to shift op by -1; fix this program [ 1861.654679][ T28] audit: type=1326 audit(2000000404.063:3948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20001 comm="syz.0.5295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd70b8e929 code=0x7ffc0000 [ 1861.678567][ T28] audit: type=1326 audit(2000000404.063:3949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20001 comm="syz.0.5295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd70b8e929 code=0x7ffc0000 [ 1861.702663][ T28] audit: type=1326 audit(2000000404.063:3950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20001 comm="syz.0.5295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fbd70b8e929 code=0x7ffc0000 [ 1861.726948][ T28] audit: type=1326 audit(2000000404.063:3951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20001 comm="syz.0.5295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd70b8e929 code=0x7ffc0000 [ 1861.750842][ T28] audit: type=1326 audit(2000000404.063:3952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20001 comm="syz.0.5295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd70b8e929 code=0x7ffc0000 [ 1861.775090][ T28] audit: type=1326 audit(2000000404.063:3953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20001 comm="syz.0.5295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7fbd70b8e929 code=0x7ffc0000 [ 1861.799313][ T28] audit: type=1326 audit(2000000404.063:3954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20001 comm="syz.0.5295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fbd70b858e7 code=0x7ffc0000 [ 1861.822996][ T28] audit: type=1326 audit(2000000404.063:3955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20001 comm="syz.0.5295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fbd70b2ab19 code=0x7ffc0000 [ 1861.922189][T15385] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 1863.049737][T15385] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1863.080504][T15385] usb 7-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 1863.100853][T15385] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1863.110470][T15385] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1863.118724][T15385] usb 7-1: Product: syz [ 1863.123196][T15385] usb 7-1: Manufacturer: syz [ 1863.127813][T15385] usb 7-1: SerialNumber: syz [ 1863.139085][T15385] cdc_mbim 7-1:1.0: skipping garbage [ 1864.160491][T20000] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1864.189211][T20031] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5303'. [ 1864.639961][ T28] kauditd_printk_skb: 101 callbacks suppressed [ 1864.639983][ T28] audit: type=1400 audit(2000000406.983:4057): avc: denied { getattr } for pid=20030 comm="syz.7.5303" path="cgroup:[4026533258]" dev="nsfs" ino=4026533258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1864.780739][T15385] cdc_mbim 7-1:1.0: failed GET_NTB_PARAMETERS [ 1864.789723][T15385] cdc_mbim 7-1:1.0: bind() failure [ 1864.797102][T15385] cdc_ncm 7-1:1.1: CDC Union missing and no IAD found [ 1864.805128][T15385] cdc_ncm 7-1:1.1: bind() failure [ 1866.631990][T19290] usb 7-1: USB disconnect, device number 5 [ 1867.703450][T20076] netlink: 'syz.1.5310': attribute type 27 has an invalid length. [ 1867.787696][T20076] bridge0: port 2(bridge_slave_1) entered disabled state [ 1867.794959][T20076] bridge0: port 1(bridge_slave_0) entered disabled state [ 1868.304771][T20077] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1868.357110][T20077] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1868.400159][T20077] bridge0: port 1(bridge_slave_0) entered blocking state [ 1868.407288][T20077] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1868.473026][T20077] bridge0: port 2(bridge_slave_1) entered blocking state [ 1868.480114][T20077] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1868.528200][T20077] device veth0_vlan left promiscuous mode [ 1868.542359][T20077] device veth0_vlan entered promiscuous mode [ 1868.600962][ T1331] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1868.611284][ T1331] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1868.640553][ T1331] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1868.668983][ T1331] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1868.693004][ T1331] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1868.925747][ T1331] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1868.995479][ T1331] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1869.003952][ T1331] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1869.013034][ T1331] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1869.021601][ T1331] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1869.030237][ T1331] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1869.039160][ T1331] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1869.047936][ T1331] IPv6: ADDRCONF(NETDEV_CHANGE): veth2: link becomes ready [ 1869.055829][ T1331] IPv6: ADDRCONF(NETDEV_CHANGE): veth4: link becomes ready [ 1869.063749][ T1331] IPv6: ADDRCONF(NETDEV_CHANGE): veth6: link becomes ready [ 1869.071434][ T1331] IPv6: ADDRCONF(NETDEV_CHANGE): veth8: link becomes ready [ 1869.082635][ T1331] IPv6: ADDRCONF(NETDEV_CHANGE): veth10: link becomes ready [ 1869.102572][ T1331] IPv6: ADDRCONF(NETDEV_CHANGE): veth13: link becomes ready [ 1869.110268][ T1331] IPv6: ADDRCONF(NETDEV_CHANGE): veth12: link becomes ready [ 1869.172846][T18894] ip6_tnl_xmit_ctl: 2 callbacks suppressed [ 1869.172862][T18894] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 1869.193529][T18894] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 1869.210915][T15385] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 1869.222065][T15385] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 1869.238113][T15385] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 1869.255175][T15385] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 1869.272518][T15385] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 1869.383852][T20093] loop7: detected capacity change from 0 to 40427 [ 1869.399796][T20093] F2FS-fs (loop7): Image doesn't support compression [ 1869.465639][T20093] F2FS-fs (loop7): Unrecognized mount option "whint_mode=fs-based" or missing value [ 1869.522432][T18894] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 1869.562181][T18894] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 1870.816788][T19290] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 1871.004202][T19290] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1871.061129][T19290] usb 8-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 1871.158344][T19290] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1871.241414][T19290] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1871.315131][T19290] usb 8-1: Product: syz [ 1871.355504][T19290] usb 8-1: Manufacturer: syz [ 1871.364426][ T7462] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 1871.380615][T19290] usb 8-1: SerialNumber: syz [ 1871.398247][T19290] cdc_mbim 8-1:1.0: skipping garbage [ 1871.701572][T20105] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 1872.182885][T19290] cdc_mbim 8-1:1.0: failed GET_NTB_PARAMETERS [ 1872.196188][T19290] cdc_mbim 8-1:1.0: bind() failure [ 1872.960069][T19290] cdc_ncm 8-1:1.1: CDC Union missing and no IAD found [ 1872.967090][T19290] cdc_ncm 8-1:1.1: bind() failure [ 1875.411152][T12269] usb 8-1: USB disconnect, device number 6 [ 1875.928141][T20175] overlayfs: failed to clone upperpath [ 1877.363796][T20184] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1877.394558][T20184] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1877.436567][T19323] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 1877.516272][T20181] netlink: 'syz.0.5339': attribute type 27 has an invalid length. [ 1877.569979][T20181] bridge2: port 2(vlan1) entered disabled state [ 1878.289230][T20189] incfs: ino conflict with backing FS 1 [ 1878.426989][T20189] incfs: Unexpected inode type [ 1880.586512][ T28] audit: type=1400 audit(2000000420.693:4058): avc: denied { mounton } for pid=20186 comm="syz.7.5342" path="/42/file0" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=dir permissive=1 [ 1880.749998][T20181] device xfrm0 left promiscuous mode [ 1880.757806][ T28] audit: type=1400 audit(2000000423.173:4059): avc: denied { unmount } for pid=19233 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 1881.039358][T20181] device macsec0 left promiscuous mode [ 1881.063416][T20181] bridge2: port 1(veth7) entered disabled state [ 1881.300472][T19323] usb 7-1: device not accepting address 6, error -71 [ 1881.427466][T20173] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1881.586684][T20173] device veth0_vlan left promiscuous mode [ 1881.646985][T20173] device veth0_vlan entered promiscuous mode [ 1881.719188][T20173] device veth1_macvtap entered promiscuous mode [ 1882.232201][ C0] ip6_tnl_xmit_ctl: 2 callbacks suppressed [ 1882.232221][ C0] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 1882.245654][ C0] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 1882.326533][T19148] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 1882.346258][T19148] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 1882.372837][T20215] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5347'. [ 1882.387815][ T1351] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1882.404686][ T1351] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1882.412614][T12269] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 1882.413544][ T1351] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1882.431554][T20217] loop7: detected capacity change from 0 to 256 [ 1882.445448][ T1351] bridge2: port 2(vlan1) entered blocking state [ 1882.451760][ T1351] bridge2: port 2(vlan1) entered forwarding state [ 1882.466367][T20217] exFAT-fs (loop7): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x53fda505, utbl_chksum : 0xe619d30d) [ 1882.494609][T20217] exFAT-fs (loop7): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 1882.552503][ T1351] IPv6: ADDRCONF(NETDEV_CHANGE): vlan2: link becomes ready [ 1882.582553][ T1351] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1882.722441][T19148] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 1882.785206][ T1351] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1882.879622][ T1351] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1882.888111][ T1351] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1882.928777][ T1351] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 1882.939299][T20219] block device autoloading is deprecated and will be removed. [ 1882.954758][ T1351] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1882.967388][T20217] syz.7.5347[20217] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1882.967463][T20217] syz.7.5347[20217] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1882.980191][ T1351] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1882.999685][T19148] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 1883.000088][ T1351] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1883.015590][ T1351] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1883.023818][ T1351] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1883.032243][ T1351] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1883.040714][ T1351] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1883.049348][ T1351] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1883.057774][ T1351] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1883.066390][ T1351] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1883.074667][ T1351] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1883.082917][ T1351] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1883.091044][ T1351] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1883.099412][ T1351] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1883.107920][ T1351] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1883.116754][ T1351] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1883.125087][ T1351] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1883.133156][ T1351] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1883.140502][ T1351] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1883.148914][ T1351] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1883.157204][ T1351] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1883.165059][ T1351] IPv6: ADDRCONF(NETDEV_CHANGE): veth3: link becomes ready [ 1883.172639][ T1351] IPv6: ADDRCONF(NETDEV_CHANGE): veth2: link becomes ready [ 1883.180171][ T1351] IPv6: ADDRCONF(NETDEV_CHANGE): veth5: link becomes ready [ 1883.187770][ T1351] IPv6: ADDRCONF(NETDEV_CHANGE): veth4: link becomes ready [ 1883.195502][ T1351] IPv6: ADDRCONF(NETDEV_CHANGE): veth7: link becomes ready [ 1883.203108][ T1351] bridge2: port 1(veth7) entered blocking state [ 1883.209403][ T1351] bridge2: port 1(veth7) entered forwarding state [ 1883.216136][ T1351] IPv6: ADDRCONF(NETDEV_CHANGE): veth6: link becomes ready [ 1883.226285][ T1351] IPv6: ADDRCONF(NETDEV_CHANGE): veth9: link becomes ready [ 1883.234753][ T1351] IPv6: ADDRCONF(NETDEV_CHANGE): veth8: link becomes ready [ 1883.242526][ T1351] IPv6: ADDRCONF(NETDEV_CHANGE): veth11: link becomes ready [ 1883.250405][ T1351] IPv6: ADDRCONF(NETDEV_CHANGE): veth10: link becomes ready [ 1883.258345][ T1351] IPv6: ADDRCONF(NETDEV_CHANGE): veth13: link becomes ready [ 1883.266773][ T1351] IPv6: ADDRCONF(NETDEV_CHANGE): veth12: link becomes ready [ 1883.282154][T20215] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5347'. [ 1883.357590][ T1351] IPv6: ADDRCONF(NETDEV_CHANGE): bridge2: link becomes ready [ 1884.303771][T20239] loop7: detected capacity change from 0 to 1024 [ 1884.417761][T20239] EXT4-fs: dax option not supported [ 1885.787920][T20246] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1885.799382][T20246] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1885.835486][T12269] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 1886.632333][ C1] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 1887.439967][T19148] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 1887.856032][T20256] netlink: 'syz.7.5359': attribute type 9 has an invalid length. [ 1887.863848][T20256] netlink: 'syz.7.5359': attribute type 6 has an invalid length. [ 1887.877154][T20256] loop7: detected capacity change from 0 to 1024 [ 1887.919834][T20256] EXT4-fs: Invalid want_extra_isize 8 [ 1890.463439][T20282] netlink: 'syz.2.5366': attribute type 27 has an invalid length. [ 1890.589192][T20282] bridge3: port 2(vlan3) entered disabled state [ 1890.705162][T20282] bridge3: port 1(veth11) entered disabled state [ 1890.749707][T20286] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1890.804781][T20286] device veth0_vlan left promiscuous mode [ 1890.811467][T20286] device veth0_vlan entered promiscuous mode [ 1890.825765][T20286] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1890.833419][T20286] device veth1_macvtap left promiscuous mode [ 1890.841191][T20286] device veth1_macvtap entered promiscuous mode [ 1890.859819][T20286] bridge3: port 2(vlan3) entered blocking state [ 1890.866175][T20286] bridge3: port 2(vlan3) entered forwarding state [ 1890.874266][T20286] bridge3: port 1(veth11) entered blocking state [ 1890.879788][T18894] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 1890.880658][T20286] bridge3: port 1(veth11) entered forwarding state [ 1890.918424][ T850] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1890.926969][ T850] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1890.943159][ T850] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1890.963133][ T850] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1890.980521][ T850] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1891.034238][ T850] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1891.044323][ T850] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1891.055372][ T850] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1891.066243][ T850] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1891.075293][ T850] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1891.083965][ T850] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1891.091330][ T850] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1891.109998][ T850] IPv6: ADDRCONF(NETDEV_CHANGE): vlan4: link becomes ready [ 1891.120879][ T850] IPv6: ADDRCONF(NETDEV_CHANGE): veth2: link becomes ready [ 1891.129913][ T850] IPv6: ADDRCONF(NETDEV_CHANGE): veth4: link becomes ready [ 1891.138729][ T850] IPv6: ADDRCONF(NETDEV_CHANGE): veth6: link becomes ready [ 1891.147510][ T850] IPv6: ADDRCONF(NETDEV_CHANGE): veth8: link becomes ready [ 1891.156752][ T850] IPv6: ADDRCONF(NETDEV_CHANGE): veth10: link becomes ready [ 1891.167357][ T850] IPv6: ADDRCONF(NETDEV_CHANGE): veth12: link becomes ready [ 1891.179750][ T850] IPv6: ADDRCONF(NETDEV_CHANGE): veth14: link becomes ready [ 1891.188975][ T850] IPv6: ADDRCONF(NETDEV_CHANGE): veth16: link becomes ready [ 1891.483854][T18894] usb 7-1: device not accepting address 8, error -71 [ 1895.672123][ C1] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 1895.776637][T20312] loop7: detected capacity change from 0 to 40427 [ 1896.236896][T20332] loop6: detected capacity change from 0 to 512 [ 1896.274985][T20332] EXT4-fs (loop6): Test dummy encryption mode enabled [ 1896.349750][T20312] F2FS-fs (loop7): Invalid log_blocksize (268), supports only 12 [ 1896.464515][T20332] EXT4-fs error (device loop6): __ext4_iget:5078: inode #11: block 1: comm syz.6.5379: invalid block [ 1896.476768][T20332] EXT4-fs error (device loop6): ext4_orphan_get:1405: comm syz.6.5379: couldn't read orphan inode 11 (err -117) [ 1896.489849][T20332] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 1896.935912][T20312] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock [ 1897.032424][T20312] F2FS-fs (loop7): invalid crc value [ 1897.050624][T20312] F2FS-fs (loop7): Failed to start F2FS issue_checkpoint_thread (-4) [ 1897.081484][T19136] EXT4-fs (loop6): unmounting filesystem. [ 1897.190620][T20341] xt_CT: No such helper "netbios-ns" [ 1897.664437][T20350] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5383'. [ 1897.692069][T20350] netlink: 40 bytes leftover after parsing attributes in process `syz.7.5383'. [ 1897.701071][T20350] netlink: 40 bytes leftover after parsing attributes in process `syz.7.5383'. [ 1898.232472][ C0] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 1899.512828][ C0] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 1902.166110][T20385] loop7: detected capacity change from 0 to 512 [ 1903.602873][T20385] EXT4-fs (loop7): Test dummy encryption mode enabled [ 1903.647327][T20385] EXT4-fs error (device loop7): __ext4_iget:5078: inode #11: block 1: comm syz.7.5390: invalid block [ 1903.661733][T20385] EXT4-fs error (device loop7): ext4_orphan_get:1405: comm syz.7.5390: couldn't read orphan inode 11 (err -117) [ 1903.679578][T20385] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 1904.326927][T19233] EXT4-fs (loop7): unmounting filesystem. [ 1904.993998][T20408] overlayfs: failed to clone upperpath [ 1905.117551][T20410] IPv6: Can't replace route, no match found [ 1909.995410][T20451] loop7: detected capacity change from 0 to 512 [ 1910.022348][T20451] EXT4-fs: Ignoring removed mblk_io_submit option [ 1910.673661][T20451] EXT4-fs: Ignoring removed bh option [ 1913.332665][T20451] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1913.360856][T20451] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 1913.512378][T20451] EXT4-fs: failed to create workqueue [ 1913.524404][T20451] EXT4-fs (loop7): mount failed [ 1914.232197][ C1] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 1917.397089][T20484] loop7: detected capacity change from 0 to 512 [ 1917.408383][T20484] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 1917.774804][T20484] EXT4-fs (loop7): 1 truncate cleaned up [ 1917.782142][T20484] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 1919.687779][T19233] EXT4-fs (loop7): unmounting filesystem. [ 1922.169976][T20518] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1922.812277][T20529] xt_CT: No such helper "netbios-ns" [ 1926.368432][T12274] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 1927.460941][T12274] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1927.473472][T12274] usb 8-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 1929.465155][T12274] usb 8-1: string descriptor 0 read error: -71 [ 1929.517840][T12274] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1929.802833][T12274] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1929.945089][T12274] usb 8-1: can't set config #1, error -71 [ 1930.043760][T12274] usb 8-1: USB disconnect, device number 7 [ 1930.232124][ C0] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 1930.246463][T20600] overlayfs: failed to resolve './file0': -2 [ 1930.684752][T20606] loop7: detected capacity change from 0 to 2048 [ 1930.790003][T20606] loop7: p1 < > p3 [ 1930.795305][T20606] loop7: p3 size 134217728 extends beyond EOD, truncated [ 1931.522469][ C0] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 1937.876559][ T28] audit: type=1400 audit(2000000046.361:4060): avc: denied { map } for pid=20630 comm="syz.7.5458" path="/dev/binderfs/binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1939.315433][T20673] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5466'. [ 1939.343241][T20667] futex_wake_op: syz.6.5464 tries to shift op by -1; fix this program [ 1939.450631][T20681] loop7: detected capacity change from 0 to 512 [ 1939.505918][T20681] EXT4-fs (loop7): Test dummy encryption mode enabled [ 1939.648935][T20681] EXT4-fs error (device loop7): __ext4_iget:5078: inode #11: block 1: comm syz.7.5467: invalid block [ 1939.660946][T20681] EXT4-fs error (device loop7): ext4_orphan_get:1405: comm syz.7.5467: couldn't read orphan inode 11 (err -117) [ 1939.674045][T20681] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 1941.349017][ T28] audit: type=1400 audit(2000000049.201:4061): avc: denied { setopt } for pid=20688 comm="syz.0.5470" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1941.490990][T19233] EXT4-fs (loop7): unmounting filesystem. [ 1942.162984][T20707] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5473'. [ 1942.889185][T15385] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 1943.148416][T20721] overlayfs: failed to clone lowerpath [ 1945.018544][T20726] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5479'. [ 1947.584076][T15385] usb 8-1: device not accepting address 8, error -71 [ 1947.632888][T20756] fuse: Invalid rootmode [ 1948.286460][T15385] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 1948.496841][T15385] usb 8-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 1948.516570][T15385] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1948.528848][T15385] usb 8-1: config 0 descriptor?? [ 1949.290517][T20780] syz.0.5492[20780] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1949.291012][T20780] syz.0.5492[20780] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1950.455654][T15385] usb 8-1: Cannot read MAC address [ 1950.472535][T15385] MOSCHIP usb-ethernet driver: probe of 8-1:0.0 failed with error -71 [ 1950.481969][T15385] usb 8-1: USB disconnect, device number 9 [ 1950.539400][T20791] fuse: Invalid rootmode [ 1951.352236][ C1] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 1954.062098][T19323] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 1962.952600][T20874] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1965.272109][ C1] ------------[ cut here ]------------ [ 1965.277631][ C1] refcount_t: addition on 0; use-after-free. [ 1965.283783][ C1] WARNING: CPU: 1 PID: 20878 at lib/refcount.c:25 refcount_warn_saturate+0x104/0x1a0 [ 1965.293343][ C1] Modules linked in: [ 1965.297298][ C1] CPU: 1 PID: 20878 Comm: syz.6.5519 Tainted: G W 6.1.141-syzkaller-00036-g7011769d221c #0 [ 1965.308765][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1965.318902][ C1] RIP: 0010:refcount_warn_saturate+0x104/0x1a0 [ 1965.325117][ C1] Code: 05 01 48 c7 c7 e0 a1 a9 85 e8 38 fb dd fe 0f 0b eb df e8 6f b5 0c ff c6 05 cf ab 0b 05 01 48 c7 c7 20 a1 a9 85 e8 1c fb dd fe <0f> 0b eb c3 e8 53 b5 0c ff c6 05 b4 ab 0b 05 01 48 c7 c7 80 a1 a9 [ 1965.344763][ C1] RSP: 0000:ffffc900001b09e0 EFLAGS: 00010246 [ 1965.350855][ C1] RAX: 599ee4b66a850100 RBX: 0000000000000002 RCX: ffff88811332e540 [ 1965.358869][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000002 [ 1965.366868][ C1] RBP: ffffc900001b09f0 R08: dffffc0000000000 R09: fffff520000360b9 [ 1965.374887][ C1] R10: fffff520000360b9 R11: 1ffff920000360b8 R12: ffffc900001b0ba0 [ 1965.382905][ C1] R13: dffffc0000000000 R14: 0000000000000002 R15: ffff888114233800 [ 1965.390913][ C1] FS: 000055556b73d500(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 1965.399930][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1965.406579][ C1] CR2: 0000001b2d819ff8 CR3: 000000011f912000 CR4: 00000000003506a0 [ 1965.414621][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1965.422638][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1965.430630][ C1] Call Trace: [ 1965.433943][ C1] [ 1965.436816][ C1] tipc_crypto_xmit+0x1822/0x2220 [ 1965.441879][ C1] ? __cfi_tipc_crypto_xmit+0x10/0x10 [ 1965.447297][ C1] ? __copy_skb_header+0x49f/0x630 [ 1965.452487][ C1] tipc_bearer_xmit_skb+0x226/0x380 [ 1965.457732][ C1] ? __skb_clone+0x47a/0x790 [ 1965.462393][ C1] ? __cfi_tipc_bearer_xmit_skb+0x10/0x10 [ 1965.468155][ C1] ? skb_clone+0x228/0x380 [ 1965.472657][ C1] tipc_disc_timeout+0x6a2/0x830 [ 1965.477630][ C1] ? __cfi_tipc_disc_timeout+0x10/0x10 [ 1965.483233][ C1] ? irq_work_single+0xaf/0x170 [ 1965.488119][ C1] ? __cfi_tipc_disc_timeout+0x10/0x10 [ 1965.493656][ C1] call_timer_fn+0x46/0x2a0 [ 1965.498187][ C1] ? __cfi_tipc_disc_timeout+0x10/0x10 [ 1965.503698][ C1] __run_timers+0x639/0x9a0 [ 1965.508255][ C1] ? calc_index+0x200/0x200 [ 1965.512818][ C1] ? __kasan_check_read+0x11/0x20 [ 1965.517877][ C1] ? asm_sysvec_reschedule_ipi+0x1b/0x20 [ 1965.523577][ C1] run_timer_softirq+0x6a/0xf0 [ 1965.528420][ C1] handle_softirqs+0x1d7/0x600 [ 1965.533252][ C1] ? irqtime_account_irq+0xc4/0x240 [ 1965.538500][ C1] __irq_exit_rcu+0x52/0xf0 [ 1965.543073][ C1] irq_exit_rcu+0x9/0x10 [ 1965.547361][ C1] sysvec_call_function_single+0xa6/0xc0 [ 1965.553056][ C1] [ 1965.556020][ C1] [ 1965.558978][ C1] asm_sysvec_call_function_single+0x1b/0x20 [ 1965.565025][ C1] RIP: 0010:finish_task_switch+0x173/0x7b0 [ 1965.570873][ C1] Code: 80 3c 2b 00 74 08 4c 89 f7 e8 f9 ed 67 00 4d 8b 2e 4d 85 ed 0f 85 cd 00 00 00 4c 89 e7 e8 55 e1 a3 03 fb 49 8d 9f 48 0b 00 00 <48> 89 d8 48 c1 e8 03 49 bd 00 00 00 00 00 fc ff df 42 0f b6 04 28 [ 1965.590545][ C1] RSP: 0000:ffffc90003cb7d20 EFLAGS: 00000282 [ 1965.596689][ C1] RAX: 0000000080000001 RBX: ffff88811332f088 RCX: 0000000000000000 [ 1965.604763][ C1] RDX: 0000000000000001 RSI: 0000000000000004 RDI: 00000000ffffffff [ 1965.612801][ C1] RBP: ffffc90003cb7d70 R08: dffffc0000000000 R09: ffffed10270a6006 [ 1965.620836][ C1] R10: ffffed10270a6006 R11: 1ffff110270a6005 R12: ffff8881f7137d40 [ 1965.628878][ C1] R13: 0000000000000000 R14: 0000000000000000 R15: ffff88811332e540 [ 1965.636940][ C1] ? __switch_to_asm+0x3a/0x60 [ 1965.641766][ C1] __schedule+0xb8f/0x14e0 [ 1965.646273][ C1] ? __cfi_sched_clock_cpu+0x10/0x10 [ 1965.651585][ C1] ? release_firmware_map_entry+0x194/0x194 [ 1965.657542][ C1] schedule+0xbd/0x170 [ 1965.661640][ C1] exit_to_user_mode_loop+0x51/0xb0 [ 1965.666888][ C1] exit_to_user_mode_prepare+0x5a/0xa0 [ 1965.672384][ C1] irqentry_exit_to_user_mode+0x9/0x10 [ 1965.677872][ C1] irqentry_exit+0x12/0x40 [ 1965.682364][ C1] sysvec_reschedule_ipi+0x78/0x80 [ 1965.687533][ C1] asm_sysvec_reschedule_ipi+0x1b/0x20 [ 1965.693062][ C1] RIP: 0033:0x7ff527a6ea3a [ 1965.697494][ C1] Code: c4 38 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 00 c6 44 24 1e 01 48 89 ee 44 89 e7 4c 89 44 24 10 4c 89 54 24 08 e8 66 ef fd ff <4c> 8b 54 24 08 4c 8b 44 24 10 84 c0 0f 85 60 ff ff ff 80 7c 24 1f [ 1965.717145][ C1] RSP: 002b:00007ffea69ed240 EFLAGS: 00000246 [ 1965.723262][ C1] RAX: 0000000000000001 RBX: 00007ff5288e5720 RCX: ffffffff83dcf7dd [ 1965.731237][ C1] RDX: 00000000000017dd RSI: ffffffff83dcf7dd RDI: 000000000000000b [ 1965.739253][ C1] RBP: ffffffff83dcf7dd R08: 00007ff527da0000 R09: 00007ff527da2000 [ 1965.747455][ C1] R10: 0000000083dcf7e1 R11: 000000000000000b R12: 000000000000000b [ 1965.755607][ C1] R13: 0000000000000000 R14: ffffffff83dcf767 R15: 000000000004bcec [ 1965.763728][ C1] ? ___sys_recvmsg+0xb7/0x510 [ 1965.768580][ C1] ? ___sys_recvmsg+0x12d/0x510 [ 1965.773548][ C1] ? ___sys_recvmsg+0x12d/0x510 [ 1965.778459][ C1] ? ___sys_recvmsg+0x12d/0x510 [ 1965.783418][ C1] [ 1965.786468][ C1] ---[ end trace 0000000000000000 ]--- [ 1965.792033][ C1] ------------[ cut here ]------------ [ 1965.797515][ C1] refcount_t: underflow; use-after-free. [ 1965.803382][ C1] WARNING: CPU: 1 PID: 20878 at lib/refcount.c:28 refcount_warn_saturate+0x120/0x1a0 [ 1965.812943][ C1] Modules linked in: [ 1965.816884][ C1] CPU: 1 PID: 20878 Comm: syz.6.5519 Tainted: G W 6.1.141-syzkaller-00036-g7011769d221c #0 [ 1965.828336][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1965.838480][ C1] RIP: 0010:refcount_warn_saturate+0x120/0x1a0 [ 1965.844739][ C1] Code: 05 01 48 c7 c7 20 a1 a9 85 e8 1c fb dd fe 0f 0b eb c3 e8 53 b5 0c ff c6 05 b4 ab 0b 05 01 48 c7 c7 80 a1 a9 85 e8 00 fb dd fe <0f> 0b eb a7 e8 37 b5 0c ff c6 05 95 ab 0b 05 01 48 c7 c7 c0 a0 a9 [ 1965.864447][ C1] RSP: 0000:ffffc900001b09e0 EFLAGS: 00010246 [ 1965.870593][ C1] RAX: 599ee4b66a850100 RBX: 0000000000000003 RCX: ffff88811332e540 [ 1965.878634][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000002 [ 1965.886702][ C1] RBP: ffffc900001b09f0 R08: dffffc0000000000 R09: fffff520000360b9 [ 1965.894772][ C1] R10: fffff520000360b9 R11: 1ffff920000360b8 R12: 00000000c0000000 [ 1965.902837][ C1] R13: dffffc0000000000 R14: 0000000000000003 R15: ffff888114233800 [ 1965.910857][ C1] FS: 000055556b73d500(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 1965.919875][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1965.926543][ C1] CR2: 0000001b2d819ff8 CR3: 000000011f912000 CR4: 00000000003506a0 [ 1965.934624][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1965.942674][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1965.950698][ C1] Call Trace: [ 1965.954068][ C1] [ 1965.956943][ C1] tipc_crypto_xmit+0x195e/0x2220 [ 1965.962060][ C1] ? __cfi_tipc_crypto_xmit+0x10/0x10 [ 1965.967502][ C1] ? __copy_skb_header+0x49f/0x630 [ 1965.972711][ C1] tipc_bearer_xmit_skb+0x226/0x380 [ 1965.977965][ C1] ? __skb_clone+0x47a/0x790 [ 1965.982681][ C1] ? __cfi_tipc_bearer_xmit_skb+0x10/0x10 [ 1965.988473][ C1] ? skb_clone+0x228/0x380 [ 1965.992961][ C1] tipc_disc_timeout+0x6a2/0x830 [ 1965.997963][ C1] ? __cfi_tipc_disc_timeout+0x10/0x10 [ 1966.003509][ C1] ? irq_work_single+0xaf/0x170 [ 1966.008442][ C1] ? __cfi_tipc_disc_timeout+0x10/0x10 [ 1966.013986][ C1] call_timer_fn+0x46/0x2a0 [ 1966.018540][ C1] ? __cfi_tipc_disc_timeout+0x10/0x10 [ 1966.024080][ C1] __run_timers+0x639/0x9a0 [ 1966.028668][ C1] ? calc_index+0x200/0x200 [ 1966.033249][ C1] ? __kasan_check_read+0x11/0x20 [ 1966.038330][ C1] ? asm_sysvec_reschedule_ipi+0x1b/0x20 [ 1966.044058][ C1] run_timer_softirq+0x6a/0xf0 [ 1966.048888][ C1] handle_softirqs+0x1d7/0x600 [ 1966.053753][ C1] ? irqtime_account_irq+0xc4/0x240 [ 1966.059014][ C1] __irq_exit_rcu+0x52/0xf0 [ 1966.063603][ C1] irq_exit_rcu+0x9/0x10 [ 1966.067905][ C1] sysvec_call_function_single+0xa6/0xc0 [ 1966.073633][ C1] [ 1966.076707][ C1] [ 1966.079699][ C1] asm_sysvec_call_function_single+0x1b/0x20 [ 1966.085798][ C1] RIP: 0010:finish_task_switch+0x173/0x7b0 [ 1966.091684][ C1] Code: 80 3c 2b 00 74 08 4c 89 f7 e8 f9 ed 67 00 4d 8b 2e 4d 85 ed 0f 85 cd 00 00 00 4c 89 e7 e8 55 e1 a3 03 fb 49 8d 9f 48 0b 00 00 <48> 89 d8 48 c1 e8 03 49 bd 00 00 00 00 00 fc ff df 42 0f b6 04 28 [ 1966.111419][ C1] RSP: 0000:ffffc90003cb7d20 EFLAGS: 00000282 [ 1966.117598][ C1] RAX: 0000000080000001 RBX: ffff88811332f088 RCX: 0000000000000000 [ 1966.125668][ C1] RDX: 0000000000000001 RSI: 0000000000000004 RDI: 00000000ffffffff [ 1966.133729][ C1] RBP: ffffc90003cb7d70 R08: dffffc0000000000 R09: ffffed10270a6006 [ 1966.141774][ C1] R10: ffffed10270a6006 R11: 1ffff110270a6005 R12: ffff8881f7137d40 [ 1966.149835][ C1] R13: 0000000000000000 R14: 0000000000000000 R15: ffff88811332e540 [ 1966.157919][ C1] ? __switch_to_asm+0x3a/0x60 [ 1966.162786][ C1] __schedule+0xb8f/0x14e0 [ 1966.167273][ C1] ? __cfi_sched_clock_cpu+0x10/0x10 [ 1966.172663][ C1] ? release_firmware_map_entry+0x194/0x194 [ 1966.178662][ C1] schedule+0xbd/0x170 [ 1966.182815][ C1] exit_to_user_mode_loop+0x51/0xb0 [ 1966.188065][ C1] exit_to_user_mode_prepare+0x5a/0xa0 [ 1966.193599][ C1] irqentry_exit_to_user_mode+0x9/0x10 [ 1966.199116][ C1] irqentry_exit+0x12/0x40 [ 1966.203630][ C1] sysvec_reschedule_ipi+0x78/0x80 [ 1966.208794][ C1] asm_sysvec_reschedule_ipi+0x1b/0x20 [ 1966.214329][ C1] RIP: 0033:0x7ff527a6ea3a [ 1966.218798][ C1] Code: c4 38 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 00 c6 44 24 1e 01 48 89 ee 44 89 e7 4c 89 44 24 10 4c 89 54 24 08 e8 66 ef fd ff <4c> 8b 54 24 08 4c 8b 44 24 10 84 c0 0f 85 60 ff ff ff 80 7c 24 1f [ 1966.238490][ C1] RSP: 002b:00007ffea69ed240 EFLAGS: 00000246 [ 1966.244669][ C1] RAX: 0000000000000001 RBX: 00007ff5288e5720 RCX: ffffffff83dcf7dd [ 1966.252727][ C1] RDX: 00000000000017dd RSI: ffffffff83dcf7dd RDI: 000000000000000b [ 1966.260745][ C1] RBP: ffffffff83dcf7dd R08: 00007ff527da0000 R09: 00007ff527da2000 [ 1966.268816][ C1] R10: 0000000083dcf7e1 R11: 000000000000000b R12: 000000000000000b [ 1966.276880][ C1] R13: 0000000000000000 R14: ffffffff83dcf767 R15: 000000000004bcec [ 1966.284945][ C1] ? ___sys_recvmsg+0xb7/0x510 [ 1966.289779][ C1] ? ___sys_recvmsg+0x12d/0x510 [ 1966.294711][ C1] ? ___sys_recvmsg+0x12d/0x510 [ 1966.299622][ C1] ? ___sys_recvmsg+0x12d/0x510 [ 1966.304558][ C1] [ 1966.307613][ C1] ---[ end trace 0000000000000000 ]--- [ 1966.313459][ C1] ------------[ cut here ]------------ [ 1966.318943][ C1] refcount_t: saturated; leaking memory. [ 1966.324828][ C1] WARNING: CPU: 1 PID: 20878 at lib/refcount.c:22 refcount_warn_saturate+0x158/0x1a0 [ 1966.334382][ C1] Modules linked in: [ 1966.338326][ C1] CPU: 1 PID: 20878 Comm: syz.6.5519 Tainted: G W 6.1.141-syzkaller-00036-g7011769d221c #0 [ 1966.349778][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1966.359912][ C1] RIP: 0010:refcount_warn_saturate+0x158/0x1a0 [ 1966.366156][ C1] Code: 05 01 48 c7 c7 c0 a0 a9 85 e8 e4 fa dd fe 0f 0b eb 8b e8 1b b5 0c ff c6 05 7a ab 0b 05 01 48 c7 c7 c0 a0 a9 85 e8 c8 fa dd fe <0f> 0b e9 6c ff ff ff e8 fc b4 0c ff c6 05 5f ab 0b 05 01 48 c7 c7 [ 1966.385853][ C1] RSP: 0000:ffffc900001b09e0 EFLAGS: 00010246 [ 1966.391953][ C1] RAX: 599ee4b66a850100 RBX: 0000000000000001 RCX: ffff88811332e540 [ 1966.399998][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000002 [ 1966.408072][ C1] RBP: ffffc900001b09f0 R08: dffffc0000000000 R09: fffff520000360b9 [ 1966.416136][ C1] R10: fffff520000360b9 R11: 1ffff920000360b8 R12: ffffc900001b0ba0 [ 1966.424205][ C1] R13: dffffc0000000000 R14: 0000000000000001 R15: ffff888114233800 [ 1966.432260][ C1] FS: 000055556b73d500(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 1966.441258][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1966.447933][ C1] CR2: 0000001b2d819ff8 CR3: 000000011f912000 CR4: 00000000003506a0 [ 1966.456002][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1966.464062][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1966.472119][ C1] Call Trace: [ 1966.475423][ C1] [ 1966.478301][ C1] tipc_crypto_xmit+0x1822/0x2220 [ 1966.483420][ C1] ? __cfi_tipc_crypto_xmit+0x10/0x10 [ 1966.488850][ C1] ? __copy_skb_header+0x49f/0x630 [ 1966.494035][ C1] tipc_bearer_xmit_skb+0x226/0x380 [ 1966.499287][ C1] ? __skb_clone+0x47a/0x790 [ 1966.504014][ C1] ? __cfi_tipc_bearer_xmit_skb+0x10/0x10 [ 1966.509804][ C1] ? skb_clone+0x228/0x380 [ 1966.514302][ C1] tipc_disc_timeout+0x6a2/0x830 [ 1966.519281][ C1] ? irqtime_account_irq+0xc4/0x240 [ 1966.524558][ C1] ? __cfi_tipc_disc_timeout+0x10/0x10 [ 1966.530081][ C1] ? asm_sysvec_irq_work+0x1b/0x20 [ 1966.535306][ C1] ? __cfi_tipc_disc_timeout+0x10/0x10 [ 1966.540810][ C1] call_timer_fn+0x46/0x2a0 [ 1966.545408][ C1] ? __cfi_tipc_disc_timeout+0x10/0x10 [ 1966.550933][ C1] __run_timers+0x639/0x9a0 [ 1966.555543][ C1] ? calc_index+0x200/0x200 [ 1966.560109][ C1] ? __kasan_check_read+0x11/0x20 [ 1966.565249][ C1] ? asm_sysvec_reschedule_ipi+0x1b/0x20 [ 1966.570945][ C1] run_timer_softirq+0x6a/0xf0 [ 1966.575810][ C1] handle_softirqs+0x1d7/0x600 [ 1966.580640][ C1] ? irqtime_account_irq+0xc4/0x240 [ 1966.585939][ C1] __irq_exit_rcu+0x52/0xf0 [ 1966.590488][ C1] irq_exit_rcu+0x9/0x10 [ 1966.594807][ C1] sysvec_call_function_single+0xa6/0xc0 [ 1966.600502][ C1] [ 1966.603489][ C1] [ 1966.606462][ C1] asm_sysvec_call_function_single+0x1b/0x20 [ 1966.612531][ C1] RIP: 0010:finish_task_switch+0x173/0x7b0 [ 1966.618394][ C1] Code: 80 3c 2b 00 74 08 4c 89 f7 e8 f9 ed 67 00 4d 8b 2e 4d 85 ed 0f 85 cd 00 00 00 4c 89 e7 e8 55 e1 a3 03 fb 49 8d 9f 48 0b 00 00 <48> 89 d8 48 c1 e8 03 49 bd 00 00 00 00 00 fc ff df 42 0f b6 04 28 [ 1966.638083][ C1] RSP: 0000:ffffc90003cb7d20 EFLAGS: 00000282 [ 1966.644230][ C1] RAX: 0000000080000001 RBX: ffff88811332f088 RCX: 0000000000000000 [ 1966.652302][ C1] RDX: 0000000000000001 RSI: 0000000000000004 RDI: 00000000ffffffff [ 1966.660322][ C1] RBP: ffffc90003cb7d70 R08: dffffc0000000000 R09: ffffed10270a6006 [ 1966.668368][ C1] R10: ffffed10270a6006 R11: 1ffff110270a6005 R12: ffff8881f7137d40 [ 1966.676432][ C1] R13: 0000000000000000 R14: 0000000000000000 R15: ffff88811332e540 [ 1966.684498][ C1] ? __switch_to_asm+0x3a/0x60 [ 1966.689331][ C1] __schedule+0xb8f/0x14e0 [ 1966.693847][ C1] ? __cfi_sched_clock_cpu+0x10/0x10 [ 1966.699201][ C1] ? release_firmware_map_entry+0x194/0x194 [ 1966.705199][ C1] schedule+0xbd/0x170 [ 1966.709344][ C1] exit_to_user_mode_loop+0x51/0xb0 [ 1966.714642][ C1] exit_to_user_mode_prepare+0x5a/0xa0 [ 1966.720171][ C1] irqentry_exit_to_user_mode+0x9/0x10 [ 1966.725718][ C1] irqentry_exit+0x12/0x40 [ 1966.730187][ C1] sysvec_reschedule_ipi+0x78/0x80 [ 1966.735373][ C1] asm_sysvec_reschedule_ipi+0x1b/0x20 [ 1966.740894][ C1] RIP: 0033:0x7ff527a6ea3a [ 1966.745381][ C1] Code: c4 38 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 00 c6 44 24 1e 01 48 89 ee 44 89 e7 4c 89 44 24 10 4c 89 54 24 08 e8 66 ef fd ff <4c> 8b 54 24 08 4c 8b 44 24 10 84 c0 0f 85 60 ff ff ff 80 7c 24 1f [ 1966.765069][ C1] RSP: 002b:00007ffea69ed240 EFLAGS: 00000246 [ 1966.771191][ C1] RAX: 0000000000000001 RBX: 00007ff5288e5720 RCX: ffffffff83dcf7dd [ 1966.779234][ C1] RDX: 00000000000017dd RSI: ffffffff83dcf7dd RDI: 000000000000000b [ 1966.787403][ C1] RBP: ffffffff83dcf7dd R08: 00007ff527da0000 R09: 00007ff527da2000 [ 1966.795498][ C1] R10: 0000000083dcf7e1 R11: 000000000000000b R12: 000000000000000b [ 1966.803586][ C1] R13: 0000000000000000 R14: ffffffff83dcf767 R15: 000000000004bcec [ 1966.811626][ C1] ? ___sys_recvmsg+0xb7/0x510 [ 1966.816492][ C1] ? ___sys_recvmsg+0x12d/0x510 [ 1966.821395][ C1] ? ___sys_recvmsg+0x12d/0x510 [ 1966.826321][ C1] ? ___sys_recvmsg+0x12d/0x510 [ 1966.831223][ C1] [ 1966.834310][ C1] ---[ end trace 0000000000000000 ]--- [ 1966.924849][T20899] loop7: detected capacity change from 0 to 512 [ 1967.337660][T20899] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 1967.347414][T20899] ext4 filesystem being mounted at /68/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1967.522316][T20899] netlink: 'syz.7.5522': attribute type 13 has an invalid length. [ 1968.916206][T20899] gretap0: refused to change device tx_queue_len [ 1968.924683][T20899] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 1969.788117][T19233] EXT4-fs (loop7): unmounting filesystem. [ 1973.492250][ T1331] tipc: Disabling bearer [ 1973.510005][T20935] loop7: detected capacity change from 0 to 2048 [ 1973.529077][ T1331] tipc: Left network mode [ 1973.554154][T20935] EXT4-fs: Ignoring removed mblk_io_submit option [ 1973.577472][T20935] EXT4-fs: dax option not supported [ 1973.624603][ T1331] ------------[ cut here ]------------ [ 1973.630140][ T1331] refcount_t: saturated; leaking memory. [ 1973.646228][ T1331] WARNING: CPU: 0 PID: 1331 at lib/refcount.c:19 refcount_warn_saturate+0x13c/0x1a0 [ 1973.655845][ T1331] Modules linked in: [ 1973.659883][ T1331] CPU: 0 PID: 1331 Comm: kworker/u4:216 Tainted: G W 6.1.141-syzkaller-00036-g7011769d221c #0 [ 1973.671757][ T1331] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1973.681944][ T1331] Workqueue: netns cleanup_net [ 1973.686852][ T1331] RIP: 0010:refcount_warn_saturate+0x13c/0x1a0 [ 1973.693129][ T1331] Code: 05 01 48 c7 c7 80 a1 a9 85 e8 00 fb dd fe 0f 0b eb a7 e8 37 b5 0c ff c6 05 95 ab 0b 05 01 48 c7 c7 c0 a0 a9 85 e8 e4 fa dd fe <0f> 0b eb 8b e8 1b b5 0c ff c6 05 7a ab 0b 05 01 48 c7 c7 c0 a0 a9 [ 1973.712866][ T1331] RSP: 0018:ffffc900089477c0 EFLAGS: 00010246 [ 1973.718955][ T1331] RAX: 922b8277032b4100 RBX: 0000000000000000 RCX: ffff88811036bcc0 [ 1973.727044][ T1331] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002 [ 1973.735147][ T1331] RBP: ffffc900089477d0 R08: dffffc0000000000 R09: fffff52001128e75 [ 1973.743235][ T1331] R10: fffff52001128e75 R11: 1ffff92001128e74 R12: 1ffff92001128f04 [ 1973.751240][ T1331] R13: ffffc90008947840 R14: 0000000000000000 R15: ffff88810e1e468c [ 1973.759354][ T1331] FS: 0000000000000000(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 1973.768368][ T1331] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1973.775019][ T1331] CR2: 00007fbd67c61000 CR3: 0000000144f95000 CR4: 00000000003506b0 [ 1973.783294][ T1331] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1973.791288][ T1331] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1973.799320][ T1331] Call Trace: [ 1973.802632][ T1331] [ 1973.805582][ T1331] nf_nat_masq_schedule+0x46b/0x4e0 [ 1973.810809][ T1331] ? __kasan_check_write+0x14/0x20 [ 1973.816000][ T1331] ? __cfi_device_cmp+0x10/0x10 [ 1973.820889][ T1331] ? masq_device_event+0xd0/0xd0 [ 1973.825894][ T1331] ? nfqnl_rcv_dev_event+0x441/0x470 [ 1973.831305][ T1331] ? rtnl_is_locked+0x15/0x20 [ 1973.836058][ T1331] masq_device_event+0x9b/0xd0 [ 1973.840856][ T1331] raw_notifier_call_chain+0xa1/0x110 [ 1973.846298][ T1331] dev_close_many+0x32d/0x4d0 [ 1973.851171][ T1331] ? __kasan_slab_free+0x11/0x20 [ 1973.856173][ T1331] ? __cfi_dev_close_many+0x10/0x10 [ 1973.861390][ T1331] ? kfree_const+0x39/0x40 [ 1973.865873][ T1331] ? __kmem_cache_free+0xb7/0x1b0 [ 1973.870931][ T1331] ? __kasan_check_read+0x11/0x20 [ 1973.876020][ T1331] unregister_netdevice_many+0x439/0x1820 [ 1973.881788][ T1331] ? kobject_put+0x227/0x280 [ 1973.886461][ T1331] ? __cfi_unregister_netdevice_many+0x10/0x10 [ 1973.892654][ T1331] ? unregister_netdevice_queue+0x1aa/0x360 [ 1973.898582][ T1331] ? __cfi_unregister_netdevice_queue+0x10/0x10 [ 1973.904908][ T1331] ? rcu_barrier+0x7e/0x600 [ 1973.909450][ T1331] ip6_tnl_exit_batch_net+0x3cf/0x420 [ 1973.914903][ T1331] ? __cfi_ip6_tnl_exit_batch_net+0x10/0x10 [ 1973.920829][ T1331] ? __cfi_ip6_tnl_exit_batch_net+0x10/0x10 [ 1973.926796][ T1331] cleanup_net+0x62d/0xb00 [ 1973.931259][ T1331] ? __cfi_cleanup_net+0x10/0x10 [ 1973.936244][ T1331] ? pwq_dec_nr_in_flight+0x18c/0x3c0 [ 1973.941649][ T1331] process_one_work+0x71f/0xc40 [ 1973.946714][ T1331] worker_thread+0xa29/0x11f0 [ 1973.951428][ T1331] kthread+0x281/0x320 [ 1973.955528][ T1331] ? __cfi_worker_thread+0x10/0x10 [ 1973.960695][ T1331] ? __cfi_kthread+0x10/0x10 [ 1973.965332][ T1331] ret_from_fork+0x1f/0x30 [ 1973.969766][ T1331] [ 1973.972820][ T1331] ---[ end trace 0000000000000000 ]--- [ 1973.978491][ T1331] ------------[ cut here ]------------ [ 1973.984006][ T1331] WARNING: CPU: 1 PID: 1331 at lib/ref_tracker.c:77 ref_tracker_alloc+0x2ae/0x430 [ 1973.993300][ T1331] Modules linked in: [ 1973.997200][ T1331] CPU: 1 PID: 1331 Comm: kworker/u4:216 Tainted: G W 6.1.141-syzkaller-00036-g7011769d221c #0 [ 1974.008897][ T1331] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1974.018994][ T1331] Workqueue: netns cleanup_net [ 1974.023814][ T1331] RIP: 0010:ref_tracker_alloc+0x2ae/0x430 [ 1974.029573][ T1331] Code: f9 e5 fe 48 bb 00 00 00 00 00 fc ff df 4c 8b 74 24 08 48 8b 7c 24 10 48 8b 74 24 18 e8 1b 47 66 02 31 c0 eb 6d e8 52 f9 e5 fe <0f> 0b 4d 85 e4 0f 85 09 fe ff ff 4c 8b 64 24 10 4d 8d 74 24 0c 4c [ 1974.049310][ T1331] RSP: 0018:ffffc900089476a0 EFLAGS: 00010293 [ 1974.055685][ T1331] RAX: ffffffff8289fe1e RBX: dffffc0000000000 RCX: ffff88811036bcc0 [ 1974.063955][ T1331] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffc90008947760 [ 1974.072173][ T1331] RBP: ffffc900089477d0 R08: dffffc0000000000 R09: ffffc900089476e0 [ 1974.080210][ T1331] R10: fffff52001128eec R11: 1ffff92001128edc R12: ffff8881214a6ab8 [ 1974.080800][T20946] syz.0.5540[20946] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1974.088238][ T1331] R13: ffff88810e1e46a0 R14: 0000000000000cc0 R15: ffff88810e1e4690 [ 1974.088258][ T1331] FS: 0000000000000000(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 1974.088277][ T1331] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1974.088292][ T1331] CR2: 000000110c2477bf CR3: 000000013058e000 CR4: 00000000003506a0 [ 1974.099991][T20946] syz.0.5540[20946] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1974.107883][ T1331] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1974.151054][ T1331] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1974.159155][ T1331] Call Trace: [ 1974.162540][ T1331] [ 1974.165515][ T1331] ? __cfi_ref_tracker_alloc+0x10/0x10 [ 1974.171050][ T1331] ? kasan_save_alloc_info+0x25/0x30 [ 1974.176439][ T1331] ? __kasan_kmalloc+0x95/0xb0 [ 1974.181265][ T1331] ? nf_nat_masq_schedule+0x238/0x4e0 [ 1974.186730][ T1331] ? kmalloc_trace+0x40/0xb0 [ 1974.191400][ T1331] nf_nat_masq_schedule+0x338/0x4e0 [ 1974.196708][ T1331] ? __kasan_check_write+0x14/0x20 [ 1974.202048][ T1331] ? __cfi_device_cmp+0x10/0x10 [ 1974.206956][ T1331] ? masq_device_event+0xd0/0xd0 [ 1974.211962][ T1331] ? nfqnl_rcv_dev_event+0x441/0x470 [ 1974.217347][ T1331] ? rtnl_is_locked+0x15/0x20 [ 1974.222163][ T1331] masq_device_event+0x9b/0xd0 [ 1974.226989][ T1331] raw_notifier_call_chain+0xa1/0x110 [ 1974.232459][ T1331] dev_close_many+0x32d/0x4d0 [ 1974.237184][ T1331] ? __kasan_slab_free+0x11/0x20 [ 1974.242225][ T1331] ? __cfi_dev_close_many+0x10/0x10 [ 1974.247482][ T1331] ? kfree_const+0x39/0x40 [ 1974.251958][ T1331] ? __kmem_cache_free+0xb7/0x1b0 [ 1974.257047][ T1331] ? __kasan_check_read+0x11/0x20 [ 1974.262150][ T1331] unregister_netdevice_many+0x439/0x1820 [ 1974.267923][ T1331] ? kobject_put+0x227/0x280 [ 1974.272628][ T1331] ? __cfi_unregister_netdevice_many+0x10/0x10 [ 1974.278830][ T1331] ? unregister_netdevice_queue+0x1aa/0x360 [ 1974.284896][ T1331] ? __cfi_unregister_netdevice_queue+0x10/0x10 [ 1974.291200][ T1331] ? rcu_barrier+0x7e/0x600 [ 1974.295794][ T1331] ip6_tnl_exit_batch_net+0x3cf/0x420 [ 1974.301222][ T1331] ? __cfi_ip6_tnl_exit_batch_net+0x10/0x10 [ 1974.307222][ T1331] ? __cfi_ip6_tnl_exit_batch_net+0x10/0x10 [ 1974.313267][ T1331] cleanup_net+0x62d/0xb00 [ 1974.317845][ T1331] ? __cfi_cleanup_net+0x10/0x10 [ 1974.322949][ T1331] ? pwq_dec_nr_in_flight+0x18c/0x3c0 [ 1974.328429][ T1331] process_one_work+0x71f/0xc40 [ 1974.333419][ T1331] worker_thread+0xa29/0x11f0 [ 1974.338189][ T1331] kthread+0x281/0x320 [ 1974.342379][ T1331] ? __cfi_worker_thread+0x10/0x10 [ 1974.347565][ T1331] ? __cfi_kthread+0x10/0x10 [ 1974.352257][ T1331] ret_from_fork+0x1f/0x30 [ 1974.356777][ T1331] [ 1974.359931][ T1331] ---[ end trace 0000000000000000 ]--- [ 1974.376120][T19323] ------------[ cut here ]------------ [ 1974.382215][T19323] WARNING: CPU: 0 PID: 19323 at lib/ref_tracker.c:110 ref_tracker_free+0x5de/0x7c0 [ 1974.391541][T19323] Modules linked in: [ 1974.395505][T19323] CPU: 0 PID: 19323 Comm: kworker/0:5 Tainted: G W 6.1.141-syzkaller-00036-g7011769d221c #0 [ 1974.407017][T19323] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1974.417218][T19323] Workqueue: events iterate_cleanup_work [ 1974.422908][T19323] RIP: 0010:ref_tracker_free+0x5de/0x7c0 [ 1974.428578][T19323] Code: 85 e8 2e 70 5b 02 43 0f b6 04 2c 84 c0 4c 8b 74 24 08 0f 85 c9 01 00 00 41 8b 3f e8 dc e8 ff ff 4c 89 f6 eb 84 e8 62 f1 e5 fe <0f> 0b 4d 85 ff 0f 85 d3 fa ff ff 4c 8b 24 24 4d 8d 74 24 0c 4c 89 [ 1974.448218][T19323] RSP: 0018:ffffc90000e47b20 EFLAGS: 00010293 [ 1974.454321][T19323] RAX: ffffffff828a060e RBX: 1ffff920001c8f68 RCX: ffff88811e7a6540 [ 1974.462320][T19323] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffc90000e47be0 [ 1974.470307][T19323] RBP: ffffc90000e47c50 R08: dffffc0000000000 R09: ffffc90000e47b60 [ 1974.478502][T19323] R10: fffff520001c8f7c R11: 1ffff920001c8f6c R12: ffff88810e1e46a0 [ 1974.486534][T19323] R13: dffffc0000000000 R14: ffffc90000e47b60 R15: ffff8881214a6ab8 [ 1974.494563][T19323] FS: 0000000000000000(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 1974.503534][T19323] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1974.510142][T19323] CR2: 00002000000cb030 CR3: 000000011e0aa000 CR4: 00000000003506b0 [ 1974.518161][T19323] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1974.526193][T19323] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1974.534199][T19323] Call Trace: [ 1974.537493][T19323] [ 1974.540448][T19323] ? __this_cpu_preempt_check+0x13/0x20 [ 1974.546035][T19323] ? __cfi_ref_tracker_free+0x10/0x10 [ 1974.551449][T19323] iterate_cleanup_work+0x105/0x1f0 [ 1974.556694][T19323] ? __cfi_iterate_cleanup_work+0x10/0x10 [ 1974.562449][T19323] ? __schedule+0xb8f/0x14e0 [ 1974.567069][T19323] process_one_work+0x71f/0xc40 [ 1974.571942][T19323] worker_thread+0xa29/0x11f0 [ 1974.576664][T19323] ? _raw_spin_lock_irqsave+0xb0/0x110 [ 1974.582176][T19323] kthread+0x281/0x320 [ 1974.586263][T19323] ? __cfi_worker_thread+0x10/0x10 [ 1974.591389][T19323] ? __cfi_kthread+0x10/0x10 [ 1974.596007][T19323] ret_from_fork+0x1f/0x30 [ 1974.600444][T19323] [ 1974.603482][T19323] ---[ end trace 0000000000000000 ]--- [ 1976.746585][T20952] bridge: RTM_NEWNEIGH with invalid ether address [ 1977.636442][ T28] audit: type=1400 audit(2000000086.121:4062): avc: denied { accept } for pid=20975 comm="syz.0.5543" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 1977.733668][ T1331] device vlan2 left promiscuous mode [ 1977.741222][ T1331] device veth1 left promiscuous mode [ 1977.753803][ T1331] bridge4: port 2(vlan2) entered disabled state [ 1977.865212][ T1331] device veth7 left promiscuous mode [ 1977.875307][ T1331] bridge4: port 1(veth7) entered disabled state [ 1984.422319][T21023] bridge: RTM_NEWNEIGH with invalid ether address [ 1985.439912][T21049] loop7: detected capacity change from 0 to 512 [ 1985.472716][T21049] EXT4-fs (loop7): Test dummy encryption mode enabled [ 1986.484448][T21049] EXT4-fs error (device loop7): __ext4_iget:5078: inode #11: block 1: comm syz.7.5558: invalid block [ 1986.496488][T21049] EXT4-fs error (device loop7): ext4_orphan_get:1405: comm syz.7.5558: couldn't read orphan inode 11 (err -117) [ 1986.509424][T21049] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 1987.496551][T19233] EXT4-fs (loop7): unmounting filesystem. [ 1988.996278][ T796] ================================================================== [ 1989.004403][ T796] BUG: KASAN: use-after-free in tcp_metrics_flush_all+0xd3/0x210 [ 1989.012148][ T796] Read of size 4 at addr ffff88810e1e468c by task kworker/u4:29/796 [ 1989.020139][ T796] [ 1989.022473][ T796] CPU: 1 PID: 796 Comm: kworker/u4:29 Tainted: G W 6.1.141-syzkaller-00036-g7011769d221c #0 [ 1989.033945][ T796] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1989.044012][ T796] Workqueue: netns cleanup_net [ 1989.048802][ T796] Call Trace: [ 1989.052098][ T796] [ 1989.055039][ T796] __dump_stack+0x21/0x24 [ 1989.059397][ T796] dump_stack_lvl+0xee/0x150 [ 1989.064012][ T796] ? __cfi_dump_stack_lvl+0x8/0x8 [ 1989.069066][ T796] ? __cfi__printk+0x8/0x8 [ 1989.073508][ T796] ? tcp_metrics_flush_all+0xd3/0x210 [ 1989.078903][ T796] print_address_description+0x71/0x210 [ 1989.084480][ T796] print_report+0x4a/0x60 [ 1989.088838][ T796] kasan_report+0x122/0x150 [ 1989.093363][ T796] ? tcp_metrics_flush_all+0xd3/0x210 [ 1989.098762][ T796] kasan_check_range+0x280/0x290 [ 1989.103721][ T796] __kasan_check_read+0x11/0x20 [ 1989.108604][ T796] tcp_metrics_flush_all+0xd3/0x210 [ 1989.113821][ T796] ? __cfi_tcp_net_metrics_exit_batch+0x10/0x10 [ 1989.120079][ T796] tcp_net_metrics_exit_batch+0x10/0x20 [ 1989.125648][ T796] cleanup_net+0x62d/0xb00 [ 1989.130086][ T796] ? __cfi_cleanup_net+0x10/0x10 [ 1989.135048][ T796] process_one_work+0x71f/0xc40 [ 1989.139923][ T796] worker_thread+0xa29/0x11f0 [ 1989.144626][ T796] kthread+0x281/0x320 [ 1989.148715][ T796] ? __cfi_worker_thread+0x10/0x10 [ 1989.153853][ T796] ? __cfi_kthread+0x10/0x10 [ 1989.158462][ T796] ret_from_fork+0x1f/0x30 [ 1989.162908][ T796] [ 1989.165937][ T796] [ 1989.168278][ T796] Allocated by task 356: [ 1989.172527][ T796] kasan_set_track+0x4b/0x70 [ 1989.177134][ T796] kasan_save_alloc_info+0x25/0x30 [ 1989.182270][ T796] __kasan_slab_alloc+0x72/0x80 [ 1989.187141][ T796] slab_post_alloc_hook+0x4f/0x2d0 [ 1989.192274][ T796] kmem_cache_alloc+0x16e/0x330 [ 1989.197144][ T796] copy_net_ns+0x145/0x5c0 [ 1989.201575][ T796] create_new_namespaces+0x3a2/0x660 [ 1989.206884][ T796] unshare_nsproxy_namespaces+0x120/0x170 [ 1989.212629][ T796] ksys_unshare+0x4ac/0x7b0 [ 1989.217155][ T796] __x64_sys_unshare+0x38/0x40 [ 1989.221944][ T796] x64_sys_call+0x767/0x9a0 [ 1989.226557][ T796] do_syscall_64+0x4c/0xa0 [ 1989.230985][ T796] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1989.236890][ T796] [ 1989.239221][ T796] Freed by task 1331: [ 1989.243208][ T796] kasan_set_track+0x4b/0x70 [ 1989.247818][ T796] kasan_save_free_info+0x31/0x50 [ 1989.252862][ T796] ____kasan_slab_free+0x132/0x180 [ 1989.257991][ T796] __kasan_slab_free+0x11/0x20 [ 1989.262782][ T796] slab_free_freelist_hook+0xc2/0x190 [ 1989.268175][ T796] kmem_cache_free+0x12d/0x300 [ 1989.272964][ T796] cleanup_net+0xa58/0xb00 [ 1989.277395][ T796] process_one_work+0x71f/0xc40 [ 1989.282261][ T796] worker_thread+0xa29/0x11f0 [ 1989.286952][ T796] kthread+0x281/0x320 [ 1989.291035][ T796] ret_from_fork+0x1f/0x30 [ 1989.295475][ T796] [ 1989.297826][ T796] Last potentially related work creation: [ 1989.303544][ T796] kasan_save_stack+0x3a/0x60 [ 1989.308238][ T796] __kasan_record_aux_stack+0xb6/0xc0 [ 1989.313632][ T796] kasan_record_aux_stack_noalloc+0xb/0x10 [ 1989.319457][ T796] insert_work+0x51/0x300 [ 1989.323825][ T796] __queue_work+0x9b1/0xd30 [ 1989.328364][ T796] delayed_work_timer_fn+0x61/0x80 [ 1989.333498][ T796] call_timer_fn+0x46/0x2a0 [ 1989.338028][ T796] __run_timers+0x667/0x9a0 [ 1989.342551][ T796] run_timer_softirq+0xb8/0xf0 [ 1989.347343][ T796] handle_softirqs+0x1d7/0x600 [ 1989.352125][ T796] __irq_exit_rcu+0x52/0xf0 [ 1989.356645][ T796] irq_exit_rcu+0x9/0x10 [ 1989.360900][ T796] sysvec_apic_timer_interrupt+0xa9/0xc0 [ 1989.366559][ T796] asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 1989.372557][ T796] [ 1989.374896][ T796] Second to last potentially related work creation: [ 1989.381492][ T796] kasan_save_stack+0x3a/0x60 [ 1989.386190][ T796] __kasan_record_aux_stack+0xb6/0xc0 [ 1989.391584][ T796] kasan_record_aux_stack_noalloc+0xb/0x10 [ 1989.397417][ T796] insert_work+0x51/0x300 [ 1989.401769][ T796] __queue_work+0x9b1/0xd30 [ 1989.406294][ T796] delayed_work_timer_fn+0x61/0x80 [ 1989.411426][ T796] call_timer_fn+0x46/0x2a0 [ 1989.415974][ T796] __run_timers+0x667/0x9a0 [ 1989.420504][ T796] run_timer_softirq+0xb8/0xf0 [ 1989.425299][ T796] handle_softirqs+0x1d7/0x600 [ 1989.430075][ T796] __irq_exit_rcu+0x52/0xf0 [ 1989.434591][ T796] irq_exit_rcu+0x9/0x10 [ 1989.438847][ T796] sysvec_apic_timer_interrupt+0xa9/0xc0 [ 1989.444589][ T796] asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 1989.450587][ T796] [ 1989.452916][ T796] The buggy address belongs to the object at ffff88810e1e4600 [ 1989.452916][ T796] which belongs to the cache net_namespace of size 4224 [ 1989.467238][ T796] The buggy address is located 140 bytes inside of [ 1989.467238][ T796] 4224-byte region [ffff88810e1e4600, ffff88810e1e5680) [ 1989.480616][ T796] [ 1989.482953][ T796] The buggy address belongs to the physical page: [ 1989.489367][ T796] page:ffffea0004387800 refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff88810e1e1180 pfn:0x10e1e0 [ 1989.500922][ T796] head:ffffea0004387800 order:3 compound_mapcount:0 compound_pincount:0 [ 1989.509260][ T796] flags: 0x4000000000010200(slab|head|zone=1) [ 1989.515364][ T796] raw: 4000000000010200 ffffea0004747008 ffffea0004355808 ffff8881002acc00 [ 1989.523969][ T796] raw: ffff88810e1e1180 0000000000070002 00000001ffffffff 0000000000000000 [ 1989.532559][ T796] page dumped because: kasan: bad access detected [ 1989.538981][ T796] page_owner tracks the page as allocated [ 1989.544701][ T796] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 286, tgid 286 (syz-executor), ts 35064811128, free_ts 35056472754 [ 1989.565913][ T796] post_alloc_hook+0x1f5/0x210 [ 1989.570699][ T796] prep_new_page+0x1c/0x110 [ 1989.575218][ T796] get_page_from_freelist+0x2c7b/0x2cf0 [ 1989.580788][ T796] __alloc_pages+0x19e/0x3a0 [ 1989.585398][ T796] alloc_slab_page+0x6e/0xf0 [ 1989.590014][ T796] new_slab+0x98/0x3d0 [ 1989.594105][ T796] ___slab_alloc+0x6f6/0xb50 [ 1989.598724][ T796] __slab_alloc+0x5e/0xa0 [ 1989.603074][ T796] kmem_cache_alloc+0x1b0/0x330 [ 1989.607944][ T796] copy_net_ns+0x145/0x5c0 [ 1989.612375][ T796] create_new_namespaces+0x3a2/0x660 [ 1989.617680][ T796] unshare_nsproxy_namespaces+0x120/0x170 [ 1989.623429][ T796] ksys_unshare+0x4ac/0x7b0 [ 1989.627967][ T796] __x64_sys_unshare+0x38/0x40 [ 1989.632757][ T796] x64_sys_call+0x767/0x9a0 [ 1989.637273][ T796] do_syscall_64+0x4c/0xa0 [ 1989.641682][ T796] page last free stack trace: [ 1989.646394][ T796] free_unref_page_prepare+0x742/0x750 [ 1989.651856][ T796] free_unref_page+0x8f/0x530 [ 1989.656537][ T796] __free_pages+0x67/0x100 [ 1989.660951][ T796] __free_slab+0xca/0x1a0 [ 1989.665289][ T796] __unfreeze_partials+0x160/0x190 [ 1989.670401][ T796] put_cpu_partial+0xa9/0x100 [ 1989.675073][ T796] __slab_free+0x1c4/0x280 [ 1989.679492][ T796] ___cache_free+0xbf/0xd0 [ 1989.683901][ T796] qlist_free_all+0xc6/0x140 [ 1989.688493][ T796] kasan_quarantine_reduce+0x14a/0x170 [ 1989.693953][ T796] __kasan_slab_alloc+0x24/0x80 [ 1989.698798][ T796] slab_post_alloc_hook+0x4f/0x2d0 [ 1989.703906][ T796] __kmem_cache_alloc_node+0x192/0x2c0 [ 1989.709364][ T796] __kmalloc_node_track_caller+0xa0/0x1e0 [ 1989.715084][ T796] kstrdup_const+0x5a/0xa0 [ 1989.719527][ T796] alloc_vfsmnt+0xa1/0x4a0 [ 1989.723942][ T796] [ 1989.726257][ T796] Memory state around the buggy address: [ 1989.731877][ T796] ffff88810e1e4580: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1989.739926][ T796] ffff88810e1e4600: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1989.747981][ T796] >ffff88810e1e4680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1989.756045][ T796] ^ [ 1989.760374][ T796] ffff88810e1e4700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1989.768430][ T796] ffff88810e1e4780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1989.776488][ T796] ================================================================== [ 1989.784649][ T796] Disabling lock debugging due to kernel taint [ 1989.864130][T21080] loop7: detected capacity change from 0 to 512 [ 1989.871148][ T28] audit: type=1400 audit(2000000098.281:4063): avc: denied { read } for pid=84 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 1989.871907][T21080] EXT4-fs (loop7): Test dummy encryption mode enabled [ 1989.992500][ T28] audit: type=1400 audit(2000000098.281:4064): avc: denied { search } for pid=84 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1990.016006][T21080] EXT4-fs error (device loop7): __ext4_iget:5078: inode #11: block 1: comm syz.7.5565: invalid block [ 1990.028995][T21080] EXT4-fs error (device loop7): ext4_orphan_get:1405: comm syz.7.5565: couldn't read orphan inode 11 (err -117) [ 1990.042152][T21080] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 1990.420066][ T28] audit: type=1400 audit(2000000098.281:4065): avc: denied { write } for pid=84 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1990.441829][ T28] audit: type=1400 audit(2000000098.281:4066): avc: denied { add_name } for pid=84 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1990.464186][ T28] audit: type=1400 audit(2000000098.281:4067): avc: denied { create } for pid=84 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1990.485209][ T28] audit: type=1400 audit(2000000098.411:4068): avc: denied { append open } for pid=84 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1990.508805][ T28] audit: type=1400 audit(2000000098.421:4069): avc: denied { getattr } for pid=84 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1990.699711][T19233] EXT4-fs (loop7): unmounting filesystem. [ 1995.522449][ C0] ip6_tunnel: syztnl2 xmit: Local address not yet configured!