last executing test programs: 30m1.394581488s ago: executing program 1 (id=3519): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=@newqdisc={0x24, 0x73, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, 0x0, {}, {0xffe0, 0xa}, {0x1, 0x10}}}, 0x24}, 0x1, 0x0, 0x0, 0x55}, 0x4000) 30m1.394009828s ago: executing program 1 (id=3520): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x1, 0x0, @dev={0xfe, 0x80, '\x00', 0xd}, 0x4}, 0x1c) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)=ANY=[@ANYRES8=r0, @ANYRES64=r0, @ANYRESOCT=r0, @ANYRESDEC=r0, @ANYBLOB="83fe670231a20ad1dd96291c5dda9647da2eb8fdbb57b0014a05aef3804741a3fffb57bb8629e6d87ce60d99277cd54b82dd0a4036e509fccc8a6aaa16d9553eb8d926a763a6876a3a67c2901d", @ANYRES8=r0], 0x48) socket$unix(0x1, 0x3, 0x0) pipe2$9p(&(0x7f00000000c0), 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt(r1, 0x7, 0x7, &(0x7f0000000000)=""/56, &(0x7f0000000040)=0x38) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) mmap(&(0x7f0000abb000/0x1000)=nil, 0x1000, 0x0, 0x102000200032, 0xffffffffffffffff, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_timeval(r2, 0x1, 0x1a, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020700000000000002030207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000100850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sched_switch\x00', r6}, 0x10) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000001040)=@nat={'nat\x00', 0x8, 0x5, 0x6c0, 0x390, 0xf0, 0xffffffff, 0x2a0, 0x390, 0x5f0, 0x5f0, 0xffffffff, 0x5f0, 0x5f0, 0x5, 0x0, {[{{@uncond, 0xb7030000, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x1d, @ipv6=@private1, @ipv6=@private0, @port, @gre_key}}}, {{@uncond, 0x0, 0x168, 0x1b0, 0x0, {}, [@common=@unspec=@conntrack2={{0xc0}, {{@ipv4=@dev, [], @ipv6=@private1, [], @ipv6=@private1, [], @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}]}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x1, @ipv4, @ipv6=@local, @icmp_id, @icmp_id}}}, {{@ipv6={@mcast1, @local, [], [], 'wg1\x00', 'virt_wifi0\x00'}, 0x0, 0xa8, 0xf0}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv4, @ipv4=@multicast1, @gre_key, @icmp_id}}}, {{@ipv6={@rand_addr=' \x01\x00', @ipv4={'\x00', '\xff\xff', @empty}, [], [], 'dummy0\x00', 'syzkaller0\x00'}, 0x0, 0x218, 0x260, 0x0, {}, [@common=@inet=@sctp={{0x148}}, @common=@mh={{0x28}, {"0c06"}}]}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv4=@multicast1, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id, @icmp_id}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x726) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1c, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="77bb573b10b7f956e7fc900cab8ccf964b41498524902a4de9b6db421800"/52], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r7, &(0x7f0000001000)={0x0, 0x3f, &(0x7f0000000fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="ec000000", @ANYRES16=r8, @ANYBLOB="01000000000000000000010000000800050001000000140002007767310000000000000000000000000024000300a0cb879a47f5bc644c0e693fa6d031c74a1553b6e901b9ff2f518c78042fb5420800050000000000900008808c00008024000100975c9d81c983c8209ee781254b899f8ed925ae9f0923c23c62f53c57cdbf691c640009801c000080060001000200000008000200ffffffff05000300030000001c000080060001000200000008000200ac141427050003"], 0xec}, 0x1, 0x0, 0x0, 0x4084}, 0x20000010) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r9 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000180), 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x3, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r9, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 30m0.514122201s ago: executing program 1 (id=3542): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) 30m0.259143666s ago: executing program 1 (id=3544): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000100000000000000000850000007d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kmem_cache_free\x00', r0}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff"], 0x15) r3 = dup(r2) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfd', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) 30m0.243619635s ago: executing program 1 (id=3545): r0 = syz_open_dev$loop(&(0x7f0000000140), 0x760, 0xa382) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, 0xffffffffffffffff) open_tree(0xffffffffffffff9c, 0x0, 0x89901) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) syz_open_pts(r2, 0x141601) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCBRADDBR(0xffffffffffffffff, 0x89a0, &(0x7f0000000100)='veth1_to_team\x00') syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000440)={[{@grpquota}, {@lazytime}, {@minixdf}, {@acl}, {@resuid}, {@noinit_itable}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") setreuid(0xffffffffffffffff, 0xee00) ioctl$TIOCPKT(r2, 0x5420, &(0x7f0000000240)=0xffff) chown(&(0x7f0000000280)='./file0\x00', 0xee01, 0x0) 29m59.861262661s ago: executing program 1 (id=3546): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x1e, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3, @void, @value}, 0x94) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000640)='./file1\x00', 0x3000010, &(0x7f0000000000), 0x3e, 0x51b, &(0x7f0000001200)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.numa_stat\x00', 0x275a, 0x0) fallocate(r0, 0x10, 0x17e, 0x1000f) lseek(r0, 0x1, 0x4) 29m58.355586653s ago: executing program 2 (id=3558): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) bpf$MAP_CREATE(0x0, 0x0, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r3}, &(0x7f0000000040), &(0x7f0000000280)}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r4}, 0x10) mount(&(0x7f00000001c0)=@filename='./file0\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0) 29m57.467128717s ago: executing program 2 (id=3568): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, 0x0, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r0}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) unshare(0x60600) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001900)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 29m56.478922412s ago: executing program 2 (id=3586): syz_open_dev$evdev(&(0x7f00000000c0), 0x200000000000000, 0x820b01) epoll_create(0x6) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) 29m56.421313753s ago: executing program 2 (id=3587): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000001100)='./file1\x00', 0x0, &(0x7f0000000200)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x4}}, {@usrjquota}, {@errors_remount}, {@dioread_lock}, {@max_batch_time={'max_batch_time', 0x3d, 0x5}}, {@mblk_io_submit}, {@minixdf}, {@barrier_val}, {@nombcache}, {}]}, 0x45, 0x7b6, &(0x7f0000001140)="$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") mount$incfs(&(0x7f0000000300)='./file0\x00', &(0x7f0000000400)='./file0\x00', &(0x7f0000000280), 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) r1 = openat$incfs(r0, &(0x7f0000000040)='.pending_reads\x00', 0x10b441, 0x0) ioctl$INCFS_IOC_CREATE_FILE(r1, 0xc058671e, &(0x7f0000000440)={{'\x00', 0x3}, {0x100000001}, 0x82, 0x0, 0x0, 0x0, &(0x7f0000000140)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, 0x0, 0x0, 0x0, 0x19}) 29m56.108898067s ago: executing program 2 (id=3589): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000160000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000140)={0x28, 0x0, 0x0, @my=0x1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r2}, 0x18) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r1, 0x28, 0x1, &(0x7f0000000100)=0xfffffffffffffffe, 0x112) 29m55.720228323s ago: executing program 2 (id=3601): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r2, 0xc018620c, 0x0) 29m55.627942864s ago: executing program 32 (id=3601): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r2, 0xc018620c, 0x0) 29m44.446450962s ago: executing program 33 (id=3546): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x1e, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3, @void, @value}, 0x94) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000640)='./file1\x00', 0x3000010, &(0x7f0000000000), 0x3e, 0x51b, &(0x7f0000001200)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.numa_stat\x00', 0x275a, 0x0) fallocate(r0, 0x10, 0x17e, 0x1000f) lseek(r0, 0x1, 0x4) 28m38.415581642s ago: executing program 3 (id=4766): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000009c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000280)={[{@iocharset={'iocharset', 0x3d, 'ascii'}}, {@discard}, {@time_offset={'time_offset', 0x3d, 0x8001}}, {@fmask={'fmask', 0x3d, 0x4b280000}}, {@dmask={'dmask', 0x3d, 0x6a}}, {@iocharset={'iocharset', 0x3d, 'iso8859-1'}}, {@gid}, {@dmask={'dmask', 0x3d, 0x7fd}}, {@allow_utime={'allow_utime', 0x3d, 0xe61}}]}, 0x0, 0x14f5, &(0x7f0000001580)="$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") setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x8, 0x3, 0x330, 0x1d0, 0x11, 0x148, 0x0, 0x0, 0x2d0, 0x2a8, 0x2a8, 0x2d0, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x188, 0x1d0, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x0, 0x0, 0x3f, 0x0, 0x88000000, 0x3, 0x7}}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv4=@remote, [0xffffff00, 0xff, 0xffffff00], @ipv6=@dev={0xfe, 0x80, '\x00', 0xe}, [0x0, 0xffffff00], @ipv4=@private=0xa010100, [0xffffff00, 0x0, 0xffffff00], @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, [0xff000000, 0xff000000, 0xff], 0x8, 0x6, 0x5e, 0x4e21, 0x4e23, 0x4e24, 0x4e21}, 0x40, 0x8e0}}]}, @unspec=@CT0={0x48}}, {{@ip={@multicast2, @empty, 0x0, 0xffffffff, 'vlan0\x00', 'netdevsim0\x00'}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@addrtype={{0x30}, {0x242, 0x75f65a4e97d6873f, 0x1}}]}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x3, 0x6, 0x2}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x390) r6 = socket$netlink(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)={0x64, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_ID={0x8, 0xc, 0x1, 0x0, 0x3}]}, 0x64}}, 0x0) 28m37.426207987s ago: executing program 3 (id=4776): r0 = socket$igmp(0x2, 0x3, 0x2) ioctl$SIOCGETMIFCNT_IN6(r0, 0x89e0, &(0x7f0000000000)) 28m37.311365869s ago: executing program 3 (id=4778): r0 = syz_open_dev$loop(&(0x7f0000000900), 0xf, 0x446) ioctl$BLKPG(r0, 0x1269, &(0x7f0000000a00)={0x0, 0x0, 0x98, &(0x7f00000002c0)={0x4, 0x5, 0x11}}) 28m37.310789729s ago: executing program 3 (id=4780): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f00000007c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x840, &(0x7f0000000180)={[{@test_dummy_encryption_v1}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x2}}]}, 0x1, 0x241, &(0x7f00000008c0)="$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") setxattr$security_capability(0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000380)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@nouid32}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@noblock_validity}, {@grpquota}, {@user_xattr}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x567, &(0x7f0000000b00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0)=0x20) 28m36.809558146s ago: executing program 3 (id=4783): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r0}, &(0x7f0000000380), &(0x7f00000003c0)=r1}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000e00)={0x11, 0x7, &(0x7f0000000000)=@framed={{}, [@ringbuf_query]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x88e, &(0x7f00000001c0)={[{@nobarrier}, {@mblk_io_submit}, {@inlinecrypt}, {@test_dummy_encryption_v1}, {@barrier}, {@mblk_io_submit}, {@nomblk_io_submit}]}, 0x3, 0x445, &(0x7f0000000800)="$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") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00'}, 0x10) rename(&(0x7f0000000000)='./file1\x00', &(0x7f00000001c0)='./bus\x00') 28m36.237340095s ago: executing program 3 (id=4792): sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, 0x0, 0x40000) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, 0x0, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) 28m34.381093732s ago: executing program 34 (id=4792): sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, 0x0, 0x40000) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, 0x0, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) 28m9.756981902s ago: executing program 7 (id=5041): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(r0, 0xc008ae05, &(0x7f0000000040)=""/139) 28m9.756901212s ago: executing program 7 (id=5042): iopl(0x3) chroot(0x0) 28m9.756809532s ago: executing program 7 (id=5043): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c000000ffbfffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000810018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r1, 0x0, 0x0}, 0x10) 28m9.735528982s ago: executing program 7 (id=5044): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000001c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x14008, &(0x7f0000000340)={[{@nodelalloc}, {@jqfmt_vfsv0}]}, 0x1, 0x52b, &(0x7f00000015c0)="$eJzs3cFvI1cZAPBvZpO1d5uSFHoAVGgphQVVayfedlX1QjlVCFVC9MhhGxJvFK0dr9ZOacIesv8DEpV6ghNnDkgckHrijsQBblzKAanACtQgcTDyeLx1nHjtNLG9xL+fNPKb9zz+3lvL70WfvfMCmFsvRMRBRFyOiHciYjmvT/Ij3ugened98vD+xuHD+xtJtNtv/yPJ2jt10XdNx1P5axYj4odvRvw4GQj6x4jm3v6d9Vqtei+vKrfqd8vNvf3r2/X1repWdadSubl2c/W1G69Wzm2sz9d//fGViPjdb7/y0R8Ovv3TTreW8rb+cZyn7tAXH8XpWIiI708i2Axcysdz+bNc/Jku4jylEfH5iHgx+/wvx6Xs3Tzq6Nv0nSn2DgCYhHZ7OdrL/ecAwEWXZjmwJC3luYClSNNSqZvDezauprVGs/Xy7cbuzmY3V7YSi+nt7Vp1Nc8VrsRicnt7obqWlXvntWpl4PxGRDwTET8rXMnOSxuN2uYs//ABgDn21MD6/+9Cd/0HAC644qfFwiz7AQBMT/HI2eCvdQGAi6g46w4AAFNn/QeA+WP9B4D5Y/0HgPlj/QeAufKDt97qHO3D/P7Xm+/u7d5pvHt9s9q8U6rvbpQ2GvfulrYaja3snj31Ua9XazTurr0Su++VW9Vmq9zc279Vb+zutG5l9/W+VV2cyqgAgMd55vkP/5xExMHrV7Ij+u73P3Ktfm7SvQMmKZ11B4CZuTTrDgAzc3y3L2BenCIff2WS/QBmp++mXw/6qovHCoPeH+vlU/uGwpPn2pfOkP8H/q/J/8P8OiH/P8ay7295uAjk/2F+tduJPf8BYM7I8QOjNv3q//5/td13MvD9v98TAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAME+WsiNJS/le4EuRpqVSxNMRsRKLye3tWnU1Ij4XEX8qLBY652vjbRIMADyx0r8l+f5f15ZfWhpsvVz4TyF7jIiffPD2z99bb7XurUVcTv75qL71fl5fmUX/AYBReut0bx3v+eTh/Y3eMc3+fPzd7uainbiH+dFtWYiF7LGY5Rqu/ivJz7uSc9pr9OBBRHzxpPEnWW5kJd/5dDB+J/bTU42fHomfZm3dx86/xRfOoS8wbz7szD9vnPT5S+OF7PHkz38xm6HOrjf/HR6b/9JH89+lIfPfgJWhMV75/feOVbaXu20PIr68EHHYe/G++acXPxkS/6Uxx/iX57764rC29i8irsVJ40+OxCq36nfLzb3969v19a3qVnWnUrm5dnP1tRuvVspZjrrcy1Qf9/fXk6HbW3fGf3VI/OKI8X9jzPH/8r/v/Ohrj4n/ra+f/P4/+5j4nTXxm2PGX7/6m+Kwtk78zSHjH/X+vzxm/I/+ur855lMBgClo7u3fWa/VqveOFXby7wJ6NYsnPOcUhfRsl/cK7VHPSSIOzhbiFIXCr5I3pxVrgoWYbtAPImLWQ1YYVZj1zARM2qcf+tNddx65LwAAAAAAAAAAAAAAYDwT+M9DURyomfUYAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAuLj+FwAA///yu87n") openat(0xffffffffffffff9c, &(0x7f0000000440)='./bus\x00', 0x141842, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000240)='./bus\x00', 0x1c7102, 0x1) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2, 0x28011, r0, 0x0) syz_mount_image$exfat(&(0x7f0000000400), &(0x7f0000000240)='./file0\x00', 0x2000084c, &(0x7f0000000540)=ANY=[@ANYBLOB='iocharset=ascii,discard,dmask=00000000000000000000007,uid=', @ANYRESHEX, @ANYBLOB=',dmask=00000000000000000000152,fmask=00000000000000000000006,gid=', @ANYRESHEX, @ANYBLOB=',uid=', @ANYRESHEX=0xee00, @ANYBLOB="2c646973636172642c00fb278330ab3b4884d36adf6908d11f57832035e96a1513231140da182ca77aeedc492bbc501d94f854a7e26909bde6e698d72a15ec808a86c25d"], 0x81, 0x14f5, &(0x7f0000001580)="$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") syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='mnt\x00', 0x4, &(0x7f0000000000), 0x0, 0x236, &(0x7f0000000300)="$eJzs3TFoM2UcBvDnLomf/b4gVRdBUEFEtFDqJrjURaEgpYgIKlREXJRWqC1urZOLg84qnVyKuFkdpUtxUQSnqh3qImhxsDjoELlcK9VGFFNz8t3vB5fcJe97//e4e95kOS5Aa00nmU/SSTKTpJekON/grnqZPt3cntpfTgaDx38shu3q7dpZv2tJtpI8mGSvLPJiN9nYffro54NH731jvXfPe7tPTU30IE8dHx0+dvLu4usfLjyw8fmX3y8WmU//D8d1+YoRn3WL5Jb/otj/RNFtegT8E0uvfvBVlftbk9w9zH8vZeqT9+baDXu93P/OX/V964cvbp/kWIHLNxj0qt/ArQHQOmWSfopyNkm9Xpazs/V/+K87V8uXVtdemXlhdX3l+aZnKuCy9JPDRz6+8tG1P+X/u06df+D6VeX/iaWdb6r1k07TowEmqcr/zLOb90X+oXXkH9pL/qG95B/aS/6hveQf2kv+ob3kH9pL/qG95B/a63z+AYB2GVxp+g5koClNzz8AAAAAAAAAAAAAAAAAAMBF21P7y2fLpGp++nZy/HCS7qj6neHziJMbh69XfyqqZr8r6m5jeebOMXcwpvcbvvv6pm+brf/ZHc3W31xJtl5LMtftXrz+itPr79+7+W++7z03ZoExPfRks/V/3Wm2/sJB8kk1/8yNmn/K3DZ8Hz3/9KvzN2b9l38ZcwcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABMzG8BAAD//8n0bSk=") ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000004780)={'syz_tun\x00', &(0x7f0000000400)=@ethtool_link_settings={0xf, 0x1, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, [0x0, 0x2]}}) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0x1) 28m9.439030926s ago: executing program 7 (id=5049): setreuid(0xee01, 0x0) setresgid(0xee00, 0xee01, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2f00000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000000000008500000006000000850000000700000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xd}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x800) 28m8.868522885s ago: executing program 7 (id=5054): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000480)={{0x2e, 0xffff, 0x6, 0x7}, 'syz0\x00', 0x2}) 28m8.838864615s ago: executing program 35 (id=5054): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000480)={{0x2e, 0xffff, 0x6, 0x7}, 'syz0\x00', 0x2}) 25m25.223995052s ago: executing program 0 (id=5737): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) r1 = syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000480)='./file2\x00', 0x2000000, &(0x7f0000000280)=ANY=[], 0x8, 0x2f8, &(0x7f0000000ac0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) getresuid(0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x4000884) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(0xffffffffffffffff, 0x0, 0x40010) mkdir(0x0, 0x21) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r5 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r6, &(0x7f0000000240)=[{0x0}, {&(0x7f0000000040)="045ec6b8", 0x4}], 0x2, 0x8) writev(r5, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17", 0x2b}], 0x1) 25m23.027030794s ago: executing program 0 (id=5741): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./bus\x00', 0x80000e, &(0x7f0000000080)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x1f}}, {@resuid={'resuid', 0x3d, 0xee01}}, {@usrjquota}, {@quota}, {@errors_remount}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x6}}]}, 0x3, 0x44a, &(0x7f0000000180)="$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") socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="13ee27bd7000fddbdf2501000000080001002c00000008000300", @ANYRES32=0x0, @ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x800) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000009500"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x17, 0x20000038, &(0x7f0000000440)=ANY=[@ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0}, 0x18) dup(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="01000000040000000800000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x82000, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r8}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f00000000c0)={{}, 0x2c, {'rootmode', 0x3d, 0x4000}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002ac0)={0x1a, 0x3, &(0x7f00000004c0)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x2008, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 25m21.703664694s ago: executing program 0 (id=5745): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, 0x0) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus/file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0a00000001000000e27f000001"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000059000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) setsockopt(0xffffffffffffffff, 0x1, 0x8, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x4, &(0x7f0000000040)=0x3e, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) setreuid(0xffffffffffffffff, 0xee00) prctl$PR_MCE_KILL(0x35, 0x1, 0x0) 25m7.933854549s ago: executing program 0 (id=5766): bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000100)={0x5}, 0x8) syz_mount_image$ext4(&(0x7f0000000880)='ext2\x00', &(0x7f0000000000)='./file1\x00', 0x21000e, &(0x7f0000000180)={[{@nolazytime}, {@abort}, {@lazytime}, {@mblk_io_submit}, {@noauto_da_alloc}]}, 0xde, 0x53b, &(0x7f0000000e00)="$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") r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) getsockopt$inet_int(r0, 0x0, 0xe, &(0x7f0000000240), &(0x7f0000000340)=0x4) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a00)={&(0x7f0000000d00)='sched_switch\x00', r0}, 0x10) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0x3, 0xf, 0x8, 0x80, 0x2, 0x3, 0x7f, 0x20000006, 0x20000000, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x5, 0x6, 0x0, 0x7, 0x3c1b, 0x1, 0x24, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x3, 0x8, 0x4c74, 0x80000000, 0x242, 0x3, 0xe, 0x0, 0x8071, 0x7, 0x6, 0xffffffff, 0x7, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x0, 0x5, 0x4, 0x8, 0x3ff, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432e2, 0xc8, 0xf9, 0xe, 0x2bf, 0x1, 0x9, 0xfffffffc, 0x4, 0x10001, 0x0, 0x5, 0x2f, 0xe, 0x6, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f31, 0x1000d, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x9, 0x4, 0xd, 0xffff8001, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x5, 0x408, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x200, 0x83, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0xac8, 0xbf, 0x4002, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x3, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x9, 0x7fff, 0xffff, 0xa620, 0x1, 0x78b, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x4, 0x4, 0xc8, 0x1, 0xfffff000, 0x5, 0x3, 0x7e, 0x100, 0x9602, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf44, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff343e, 0xfff]}, 0x45c) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, 0xffffffffffffffff, &(0x7f0000000280)={0x58002005}) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x24048000) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r5 = syz_open_dev$tty20(0xc, 0x4, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') r7 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r6, &(0x7f0000000040)) ioctl$TCSETSW(r5, 0x5403, &(0x7f0000000040)={0x10000, 0x0, 0x4, 0xf7c, 0xf, "010100"}) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) 25m3.374618897s ago: executing program 0 (id=5774): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./bus\x00', 0x80000e, &(0x7f0000000080)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x1f}}, {@resuid={'resuid', 0x3d, 0xee01}}, {@usrjquota}, {@quota}, {@errors_remount}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x6}}]}, 0x3, 0x44a, &(0x7f0000000180)="$eJzs271vG2UYAPDn7CSlXyRU5aMfQKAgylfSpKV0YAGBxFAkJBjKGJK0CnUb1ASJVhEEhMqIKjGxIEYk/gImWBAwIbHCjipVKEsLk9HZd43t2E6dOnGpfz/p3Pe9O/d9nrt77ffujQPoW6PpSxKxKyL+iIjharV+h9HqPzdWlqb/WVmaTqJcfuvvpLLf9ZWl6XzX/H0788pAROGzJA40aXfh4qWzU6XS7IWsPr547v3xhYuXnp87N3Vm9szs+ckTJ44dnXjx+OQLXckzzev6/o/mD+57/Z0rb0yfuvLuL98lef4NeXTJaLuNT5bLXW6ut3bXlJOBHgZCR4rVbhqDlf4/HMVYPXnD8dqnPQ0O2FTlcrn8QOvNy2XgLpZEryMAeiP/ok/vf/Nli4Yed4RrL1dvgNK8b2RLdctAFLJ9Bhvub7tpNCJOLf/7dbrE5jyHAACo80M6/nmu2fivELXPhe7N5lBGIuK+iNgTEccjYm9E3B9R2ffBiHiow/YbJ0nWjn8KV2tr5aTDBtaRjv9eyua26sd/+egvRopZbXcl/8Hk9Fxp9kh2TA7H4La0PtGmjR9f/f2LVttqx3/pkrafjwWzOK4ObKt/z8zU4tTt5Fzr2icR+wca8j8ZlQm8fCYgPeT7ImL/BtuYe+bbg622rZ9/G12YZyp/E/FU9fwvR935X73Qkvbzk+P3RGn2yHh+Vaz162+X32zV/m3l3wXp+d/R9Pq/mf9IUjtfu9DJ//7V0+nr5T8/b3lPs9Hrfyh5u1IeytZ9OLW4eGEiYig5WQ26dv3k6nvzer5/mv/hQ837/55YPRIHIiK9iB+OiEci4tEs9sci4vGIONTmKPz8yhPvbTz/zZXmP9PR+V8tDEXjmuaF4tmfvq9rdKST/NPzf6xSOpytuZXPv1uJq9OrGQAAAP6vChGxK5LC2M1yoTA2Vv0b/r2xo1CaX1h89vT8B+dnqr8RGInBQv6ka7jmeehEdluf1ycb6kez58ZfFrdX6mPT86WZXicPfW5ni/6f+qvY6+iATef3WtC/9H/oX/o/9C/9H/pXk/6/vRdxAFuv2ff/xz2IA9h6Df3ftB/0Eff/0L820v99ZsDdoW1fHtq6OIAttbA91v+RvILCmkIU7ogwFDap0OtPJgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgO74LwAA///lI+j0") socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="13ee27bd7000fddbdf2501000000080001002c00000008000300", @ANYRES32=0x0, @ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x800) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x17, 0x20000038, &(0x7f0000000440)=ANY=[@ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0}, 0x18) dup(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="01000000040000000800000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x82000, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r8}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r9 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f00000000c0)={{'fd', 0x3d, r9}, 0x2c, {'rootmode', 0x3d, 0x4000}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002ac0)={0x1a, 0x3, &(0x7f00000004c0)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x2008, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 24m59.600125203s ago: executing program 0 (id=5780): r0 = socket$key(0xf, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r3 = syz_mount_image$msdos(&(0x7f0000000000), &(0x7f00000004c0)='./file0\x00', 0x0, &(0x7f0000000700)=ANY=[], 0xfd, 0x1bf, &(0x7f0000000300)="$eJzs3TGL02AYB/Cn9bzmnG4TRCHg4nSon+BEThADgtJBJ4XT5SqCt0SX9mP4Af0A0qmLRGrSxkaHWmxS6++39En/edvnHZp26ZNXN99dnL+/fPvl+udIkl70T+M0Zr04jn4sTAIA2CezooivRanrXgCAdqzx/f+t5ZYAgC17/uLlkwdZdvYsTZOI6SQf5sPyscwfPc7O7qY/HNerpnk+vLLM76XN3w7z/Gpcq/L75fp0NT+MO7fLfJ49fJo18kGcb3frAAAAAAAAAAAAAAAAAAAAAADQmVuRLvx2vs/JSTM/qvLy6Kf5QI35PQdx46A6rMcDFeM2NgUAAAAAAAAAAAAAAAAAAAD/mMuPny5ej0ZvPtTFICJWn/mTole98IbL2y76sRNtKP5qke5GG6MNPwWHEbGtxmZFUax1cn2NGHR1cQIAAAAAAAAAAAAAAAAAgP9M/affX7Oki4YAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoAP1/f83KMYRscbJyzc76nSrAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA7LHvAQAA///DgjXa") ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000080)={'tunl0\x00', 0x0}) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETS(r4, 0x5402, &(0x7f0000000440)={0xb, 0x20000006, 0x4000008, 0x0, 0x1e, "04000000000000000000004000"}) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x4000) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r5}, &(0x7f0000000540), &(0x7f0000000580)}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={r5, &(0x7f0000000780)}, 0x20) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) sendmsg$key(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="020900030500000025bd7000ffdbdf25030017006c20000202"], 0x28}}, 0x4000000) 24m44.416013768s ago: executing program 36 (id=5780): r0 = socket$key(0xf, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r3 = syz_mount_image$msdos(&(0x7f0000000000), &(0x7f00000004c0)='./file0\x00', 0x0, &(0x7f0000000700)=ANY=[], 0xfd, 0x1bf, &(0x7f0000000300)="$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") ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000080)={'tunl0\x00', 0x0}) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETS(r4, 0x5402, &(0x7f0000000440)={0xb, 0x20000006, 0x4000008, 0x0, 0x1e, "04000000000000000000004000"}) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x4000) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r5}, &(0x7f0000000540), &(0x7f0000000580)}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={r5, &(0x7f0000000780)}, 0x20) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) sendmsg$key(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="020900030500000025bd7000ffdbdf25030017006c20000202"], 0x28}}, 0x4000000) 1.183410312s ago: executing program 6 (id=11816): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000150000001811", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x4, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7040000000000008500000057"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000180)='kmem_cache_free\x00', r2}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000cc0)='mmap_lock_acquire_returned\x00', r3}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000cc0)='mmap_lock_acquire_returned\x00', r0}, 0x10) openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0) 875.188317ms ago: executing program 6 (id=11819): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000800007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x52) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_deliver\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_deliver\x00', r2}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) 860.099857ms ago: executing program 6 (id=11821): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x36, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000500)='page_pool_state_release\x00', r1}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x11, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 760.795638ms ago: executing program 6 (id=11829): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000020b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000300)='qdisc_dequeue\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000640)=ANY=[@ANYBLOB="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"/2566], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xe40, 0x0, &(0x7f0000000100)="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", 0x0, 0x8, 0x60000000}, 0x1e) 748.468319ms ago: executing program 6 (id=11831): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000800007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b0000000500000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x52) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_deliver\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_deliver\x00', r2}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) 714.878539ms ago: executing program 6 (id=11836): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x80000000, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x3, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f0000000380)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000080000003d0301000000000095000000000000006926000000000000bf6700000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000100)=@bpf_ext={0x1c, 0x0, 0x0, 0x0, 0xf0f, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1313b, 0xffffffffffffffff, 0x0, 0x0, &(0x7f00000003c0), 0x10, 0x1ff, @void, @value}, 0x94) close(0xffffffffffffffff) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r3, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(0xffffffffffffffff, 0x4010744d, &(0x7f0000000180)) 612.256331ms ago: executing program 5 (id=11843): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @void, @value}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000680)={{r0}, &(0x7f0000000400), &(0x7f0000000740)='%pi6 \x00'}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r2}, 0x10) syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) 611.490781ms ago: executing program 5 (id=11844): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000208500000004"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x36, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='workqueue_queue_work\x00', r0}, 0x18) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='workqueue_queue_work\x00', r1}, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x1d, &(0x7f0000000340), 0x5c3fd2920b365bba) 496.506863ms ago: executing program 5 (id=11846): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000800007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b0000000500000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x52) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_deliver\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_deliver\x00', r2}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) 466.365783ms ago: executing program 5 (id=11847): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) socketpair(0x1d, 0x2, 0x2, &(0x7f0000000300)={0x0, 0x0}) 305.650655ms ago: executing program 5 (id=11850): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffffff, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000af000000000000000080000000"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x10005, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1c, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x400}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x2bf, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0xfffffffffffffffe) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00'}, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x2d, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r1, 0x40047451, &(0x7f0000000180)) 253.576326ms ago: executing program 5 (id=11853): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000340), &(0x7f0000000300)=0x1f06) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="30000000100001000000ce6bb9092919507f3400", @ANYRES32=0x0, @ANYBLOB="000000000000000408000a00", @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) 184.195997ms ago: executing program 4 (id=11859): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000181100"/20, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000208500000004"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='qdisc_destroy\x00', r1}, 0x18) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @link_local}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='qdisc_destroy\x00', r3}, 0x10) close(r0) 162.303917ms ago: executing program 4 (id=11861): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) close(r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r5}, &(0x7f0000000000), &(0x7f0000000080)=r2}, 0x20) recvmsg$unix(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000006c0)=""/179, 0x33fe0}], 0x1, 0x0, 0x0, 0x300}, 0x0) sendmsg$inet(r4, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) 148.177358ms ago: executing program 8 (id=11864): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffffff, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000af000000000000000080000000"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x10005, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x2d, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$TUNSETOFFLOAD(r3, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r2, 0x40047451, &(0x7f0000000180)) 129.524598ms ago: executing program 9 (id=11866): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000800007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b000000050000000004000009"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x52) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_deliver\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_deliver\x00', r2}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) 92.357409ms ago: executing program 9 (id=11867): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="01000000010000000500080001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000f7ff0000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='workqueue_activate_work\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='workqueue_activate_work\x00', r2}, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r3, 0x1, 0x1d, &(0x7f00000001c0), 0x4) 91.871969ms ago: executing program 9 (id=11868): bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) 91.321638ms ago: executing program 4 (id=11869): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000400000000000000000004850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0xc, &(0x7f00000003c0)=ANY=[@ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000851000000300000018000000000000000000000000000000950000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 70.994909ms ago: executing program 9 (id=11870): bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x1e, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000080)='task_rename\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x10, 0x4, 0x8, 0x7, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000940)={{r2}, &(0x7f00000008c0), &(0x7f0000000900)=r1}, 0x20) 70.395509ms ago: executing program 4 (id=11871): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000080000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f28bd421850000008200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_deliver\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_deliver\x00', r2}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) 70.159989ms ago: executing program 8 (id=11872): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a80)={{r1}, &(0x7f0000000a00), &(0x7f0000000a40)=r0}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r1}, &(0x7f0000000880), &(0x7f00000008c0)=r0}, 0x20) 56.754939ms ago: executing program 8 (id=11873): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) socketpair(0x1d, 0x2, 0x2, &(0x7f0000000300)={0x0, 0x0}) 46.326519ms ago: executing program 8 (id=11874): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f00000022c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040), 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r0, 0x0, 0x62, 0xfe, &(0x7f0000000140)="cb74445b7d4c0b24676c6c71ae37efcedaf40242309766deb4e793f90000000000000000dbc856cbc664650634231454ca2d8034c4ca29e0d99c3b6615e91835a600c08f989af45438a54981be310aad92ae545b1c961e5f3762a51fe4c736edec6f", &(0x7f0000000440)=""/254, 0x2f00, 0x0, 0x82, 0x194, &(0x7f0000000980)="ffc4438e5c3081d0e133e812196ec0ed923733aa8b5aba32c8650e7a66d6136853773dfbc6226be13039e230d511f1ac50cc7811aac0400e4c833fedf842ae2918e6fddb550729246fcf4c0a01bc64989ea3985fb362751a83991bd56e761379caa64f6148893ff25f38d5cd6dd695bbf9ca709a9960e0e6b054d5e2239bcb7c0fb2", &(0x7f00000007c0)="4c87fe555ceb79157b1e507ff4d3cc053321e42ae89f596427188b4877ab8f1776c0685784f1174c6401ecc1dd6e2a77bc79238f87ad9215a92ff203a30099e77c543e702b4a4438d358616381745f24f74e585498af129c4b173b242f445b08135f7fa40eb7ba78160ff4f0c80e1b324d0c234cb7f43a3ff9e9535dc16000c797113a039f4508a09144090000009f38a90a24f173b3e68377e4272950a80cfcd3aa6850e917bc7e57370060f5e6db941d67fc98a1e98103830b821657438325578d2af822dd4fc13ea7a7eef8d9be4e715aec8fd6cadc41c8da5ce9da2b9e1559d92a1936fc2b3a00000000000000000072200e10ba6269b634f10f7098c65ba67ba65c0e2687637e131fb8d5ba6c12c09c8356853c434a44ff0878e496dcf9a4f5ca02c293279948f37ebb28843f92c87c057a3b410e04418557d5deda7ddd3bd1d384d64ec980187e8b64a0696571a49e847db79349c9b3c3fab5f1f977bde4d802d9026ae0c11744eb1525c5195fd215d7a432497f35c2f2cfcd2b6336b26dfef0cb968c910ea2af5cdd4d58cc08535d5514", 0x2, 0x0, 0x10000}, 0x50) 31.48961ms ago: executing program 4 (id=11875): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='workqueue_activate_work\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='workqueue_activate_work\x00', r2}, 0x10) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, &(0x7f0000000040)=""/73}, 0x20) 30.785419ms ago: executing program 9 (id=11876): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000080000000000000000000001811", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001700)=ANY=[@ANYBLOB="160000000000000061b1000002"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r2}, 0x0, &(0x7f0000000040)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x15, &(0x7f0000000200)={r2, 0x0, &(0x7f0000001740)=""/4085}, 0x20) 4.6139ms ago: executing program 8 (id=11877): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000800007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b000000050000000004000009"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x52) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_deliver\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_deliver\x00', r2}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) 4.02777ms ago: executing program 8 (id=11878): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x1e, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000080)='task_rename\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x10, 0x4, 0x8, 0x7, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000940)={{r3}, &(0x7f00000008c0), &(0x7f0000000900)=r2}, 0x20) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000280)={'wg2\x00'}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r5, 0x0, 0x8000000000000}, 0x9) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00'}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000040)={'wg2\x00', @multicast}) 3.56786ms ago: executing program 9 (id=11879): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x5, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000300)='sys_enter\x00', r1}, 0x10) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000180), 0x10) 0s ago: executing program 4 (id=11880): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x1000}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x3}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000004fc0), 0x0) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r3, 0x400454a4, &(0x7f0000005000)) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x400) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0xe2) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x12140, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/wakeup_count', 0x101a02, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) write$uinput_user_dev(r6, &(0x7f0000000540)={'syz1\x00', {0xf9d, 0x1ff, 0xec00, 0x6cc7}, 0x42, [0x80000001, 0x7fff, 0x7ff, 0x0, 0x4, 0x3, 0x2, 0xffffffff, 0x5, 0x2, 0x9, 0x9, 0x6, 0x80000000, 0x8, 0x7fff, 0x9, 0x8, 0x7, 0x0, 0xb, 0x7a47, 0x7ff, 0x9, 0xd4, 0x8, 0x4, 0x2, 0xfffffffd, 0x5, 0x5, 0x4, 0x100, 0x1, 0x5, 0x9, 0xffff, 0x51b1, 0x2, 0x2, 0x9, 0x0, 0x7fffffff, 0x1, 0xee, 0x0, 0x800, 0xfffffffb, 0x10000, 0x5, 0x2, 0x6, 0x7, 0x8000, 0xc0, 0x6, 0x6, 0x8, 0x4, 0x1, 0x10001, 0xff1, 0xf, 0x5], [0x8, 0x3, 0x6, 0x101, 0x2, 0x7ff, 0x7, 0x0, 0x2, 0x7, 0x8, 0x4, 0x3ff, 0x6310, 0x6, 0x1e1, 0xfffffffe, 0x10000, 0x0, 0xffff, 0xe, 0x9, 0x8384, 0x9, 0x8c, 0x688, 0x8, 0xfffffff9, 0x2, 0x8, 0x4, 0xf, 0xffff0000, 0x9, 0x7ff, 0xeeb, 0x7ff, 0xfff, 0x0, 0x9, 0x8a27, 0x8, 0x3, 0x8, 0x0, 0x6, 0x3, 0x3, 0x27173dc7, 0x5, 0xb0e, 0x7, 0x8, 0x4, 0x7, 0x219c000, 0x4, 0xfffffffe, 0x7ff, 0x10001, 0x6, 0x7, 0x8, 0x8], [0xc18, 0x5, 0xa, 0x6448, 0xc, 0x7, 0x8, 0x401, 0x7f, 0x9f, 0x0, 0x0, 0x3, 0x40, 0x36, 0x591, 0x7b2c, 0x4, 0xb, 0x0, 0x800, 0x6, 0x4, 0x2, 0x9, 0xb, 0x800, 0x5, 0x3, 0x20, 0x0, 0x0, 0x8, 0x400, 0x3, 0x6, 0xc8, 0x17f, 0x8654, 0xfc1b, 0x0, 0x89c, 0x8, 0x3, 0x2c0c, 0x8, 0xff, 0x7, 0x1, 0x3, 0x7, 0x80000000, 0x7, 0x7ff, 0x2c0d, 0xfffffffc, 0x7aa, 0x9, 0x4, 0x1, 0x2, 0x2, 0x6, 0xfffff753], [0xfffffffb, 0x5, 0x7fff, 0x0, 0x9, 0x0, 0x2, 0x9, 0x3, 0x9, 0x2, 0x9, 0xfffffad0, 0xe4, 0xe, 0x3, 0x10, 0x81, 0x468, 0x9, 0x4, 0x2, 0x3, 0x7fffffff, 0x4, 0x4, 0x101, 0x9, 0xa, 0x1, 0x81, 0x7, 0x7fff, 0x2, 0xcdb, 0x200, 0x2, 0x3, 0x7f, 0x5, 0x7, 0x7, 0x3, 0xf, 0xfffffff7, 0x2, 0x0, 0x6, 0x3ff, 0xffc00000, 0x6d5, 0x100, 0x10000, 0x8, 0x6, 0x9, 0xd, 0x1, 0x1, 0x5, 0x4, 0x1, 0x5, 0x7]}, 0x2fe) getsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x28, 0x0, &(0x7f00000002c0)) memfd_create(&(0x7f0000000300)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xae\xd1md\xc8\x85\x00\x00\xfb\xff\x00\x18\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;2\xb5\xe1jS\xeb\xbf%||\xa0\x8e\x01\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x4) symlink(&(0x7f00000049c0)='.\x00', &(0x7f00000059c0)='./file0\x00') kernel console output (not intermixed with test programs): 750433754.071:8803): avc: denied { open } for pid=3523 comm="syz.9.10469" path="/dev/cpu/0/msr" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 2447.069058][ T3565] loop8: detected capacity change from 0 to 512 [ 2447.074609][ T3561] loop5: detected capacity change from 0 to 512 [ 2447.090037][ T3565] EXT4-fs: dax option not supported [ 2447.098373][ T3561] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 2447.113212][ T3563] I/O error, dev loop19, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2447.126833][ T3561] EXT4-fs (loop5): orphan cleanup on readonly fs [ 2447.199271][ T3563] FAT-fs (loop19): unable to read boot sector [ 2447.231999][ T3561] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz.5.10478: bg 0: block 248: padding at end of block bitmap is not set [ 2447.273909][ T3549] kvm [3546]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc1 data 0x32 [ 2447.294650][ T3561] EXT4-fs error (device loop5): ext4_acquire_dquot:6789: comm syz.5.10478: Failed to acquire dquot type 1 [ 2447.307879][ T3568] futex_wake_op: syz.9.10481 tries to shift op by -1; fix this program [ 2447.317776][ T3549] kvm [3546]: vcpu0, guest rIP: 0x1b8 disabled perfctr wrmsr: 0xc1 data 0x6445 [ 2447.627521][ T3561] EXT4-fs (loop5): 1 truncate cleaned up [ 2447.737786][ T3561] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 2448.076124][ T3578] loop8: detected capacity change from 0 to 512 [ 2448.560831][ T3578] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 2448.684292][ T3578] EXT4-fs (loop8): orphan cleanup on readonly fs [ 2448.693113][ T3578] EXT4-fs error (device loop8): ext4_validate_block_bitmap:438: comm syz.8.10483: bg 0: block 248: padding at end of block bitmap is not set [ 2448.708962][ T3578] __quota_error: 6 callbacks suppressed [ 2448.708986][ T3578] Quota error (device loop8): write_blk: dquota write failed [ 2448.722122][ T3578] Quota error (device loop8): qtree_write_dquot: Error -117 occurred while creating quota [ 2448.732114][ T3578] EXT4-fs error (device loop8): ext4_acquire_dquot:6789: comm syz.8.10483: Failed to acquire dquot type 1 [ 2448.745751][ T3578] EXT4-fs (loop8): 1 truncate cleaned up [ 2448.753121][ T3578] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 2448.962437][ T3584] loop4: detected capacity change from 0 to 512 [ 2450.174545][T27217] EXT4-fs (loop8): unmounting filesystem. [ 2450.181509][ T3584] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 2450.222374][ T3584] ext4 filesystem being mounted at /323/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 2450.325612][ T3595] loop9: detected capacity change from 0 to 512 [ 2450.380534][ T3595] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 2450.606546][ T28] audit: type=1400 audit(1750433760.611:8808): avc: denied { read write } for pid=3592 comm="syz.8.10486" name="uinput" dev="devtmpfs" ino=262 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 2451.178893][ T3595] EXT4-fs (loop9): orphan cleanup on readonly fs [ 2451.188239][ T3595] EXT4-fs error (device loop9): ext4_validate_block_bitmap:438: comm syz.9.10487: bg 0: block 248: padding at end of block bitmap is not set [ 2451.205076][ T3595] Quota error (device loop9): write_blk: dquota write failed [ 2451.212733][ T3595] Quota error (device loop9): qtree_write_dquot: Error -117 occurred while creating quota [ 2451.222811][ T3595] EXT4-fs error (device loop9): ext4_acquire_dquot:6789: comm syz.9.10487: Failed to acquire dquot type 1 [ 2451.238340][ T3595] EXT4-fs (loop9): 1 truncate cleaned up [ 2451.245316][ T3595] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 2451.408349][ T28] audit: type=1400 audit(1750433760.611:8809): avc: denied { open } for pid=3592 comm="syz.8.10486" path="/dev/uinput" dev="devtmpfs" ino=262 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 2452.318869][T29348] EXT4-fs (loop4): unmounting filesystem. [ 2452.380858][T30014] EXT4-fs (loop9): unmounting filesystem. [ 2452.425731][ T3604] loop6: detected capacity change from 0 to 256 [ 2452.442378][ T3604] exFAT-fs (loop6): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x89cb6648, utbl_chksum : 0xe619d30d) [ 2452.463641][ T28] audit: type=1400 audit(1750433762.521:8810): avc: denied { mount } for pid=3603 comm="syz.6.10490" name="/" dev="loop6" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 2452.931639][ T3612] loop4: detected capacity change from 0 to 512 [ 2453.094026][ T3612] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 2453.944086][ T3612] EXT4-fs (loop4): orphan cleanup on readonly fs [ 2453.953065][ T3612] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.10489: bg 0: block 248: padding at end of block bitmap is not set [ 2453.969576][ T3612] Quota error (device loop4): write_blk: dquota write failed [ 2453.977090][ T3612] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 2453.987694][ T3612] EXT4-fs error (device loop4): ext4_acquire_dquot:6789: comm syz.4.10489: Failed to acquire dquot type 1 [ 2454.001561][ T3612] EXT4-fs (loop4): 1 truncate cleaned up [ 2454.008208][ T3612] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 2454.420199][ T28] audit: type=1400 audit(1750433762.641:8811): avc: denied { setopt } for pid=3601 comm="syz.8.10491" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 2454.547415][ T3614] kvm [3607]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc1 data 0x32 [ 2454.597068][ T3614] kvm [3607]: vcpu0, guest rIP: 0x1b8 disabled perfctr wrmsr: 0xc1 data 0x6445 [ 2454.619245][T10298] usb 9-1: new high-speed USB device number 55 using dummy_hcd [ 2454.703044][T31476] EXT4-fs (loop5): unmounting filesystem. [ 2454.710980][T29348] EXT4-fs (loop4): unmounting filesystem. [ 2454.777684][ T3623] loop5: detected capacity change from 0 to 512 [ 2454.800097][ T3623] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 2454.827623][ T3623] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec019, mo2=0002] [ 2454.845339][ T3623] System zones: 1-12 [ 2454.850296][ T3623] EXT4-fs error (device loop5): ext4_xattr_ibody_find:2195: inode #15: comm syz.5.10494: corrupted in-inode xattr [ 2454.867160][ T3627] loop4: detected capacity change from 0 to 512 [ 2454.891723][ T3627] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 2454.911383][ T3627] EXT4-fs (loop4): orphan cleanup on readonly fs [ 2454.918396][ T3627] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.10495: bg 0: block 248: padding at end of block bitmap is not set [ 2454.933421][ T28] audit: type=1400 audit(1750433764.941:8812): avc: denied { write } for pid=3603 comm="syz.6.10490" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 2454.953360][ T3627] Quota error (device loop4): write_blk: dquota write failed [ 2454.962496][ T3627] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 2454.972559][ T3627] EXT4-fs error (device loop4): ext4_acquire_dquot:6789: comm syz.4.10495: Failed to acquire dquot type 1 [ 2454.984502][ T3627] EXT4-fs (loop4): 1 truncate cleaned up [ 2454.990730][ T3623] EXT4-fs error (device loop5): ext4_orphan_get:1405: comm syz.5.10494: couldn't read orphan inode 15 (err -117) [ 2455.004650][ T3623] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 2455.023212][ T3623] futex_wake_op: syz.5.10494 tries to shift op by -1; fix this program [ 2455.103151][ T28] audit: type=1400 audit(1750433765.161:8813): avc: denied { unmount } for pid=31743 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 2455.152224][ T3630] loop6: detected capacity change from 0 to 256 [ 2455.186055][ T3630] exFAT-fs (loop6): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x89cb6648, utbl_chksum : 0xe619d30d) [ 2455.343591][ T3627] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 2455.432012][ T28] audit: type=1400 audit(1750433765.491:8814): avc: denied { write } for pid=3633 comm="syz.9.10497" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 2455.450057][T10298] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2455.463955][T10298] usb 9-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 2455.473004][T10298] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2455.482096][T10298] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2455.493927][T10298] usb 9-1: config 0 descriptor?? [ 2455.542683][ T28] audit: type=1400 audit(1750433765.601:8815): avc: denied { setopt } for pid=3629 comm="syz.6.10496" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 2455.620094][T29348] EXT4-fs (loop4): unmounting filesystem. [ 2455.777246][T31476] EXT4-fs (loop5): unmounting filesystem. [ 2456.118779][ T3646] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2456.163454][ T3646] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2456.584930][T10298] usb 9-1: string descriptor 0 read error: -71 [ 2456.597721][T10298] usb 9-1: USB disconnect, device number 55 [ 2456.621422][ T3651] loop5: detected capacity change from 0 to 128 [ 2456.664841][ T3654] loop9: detected capacity change from 0 to 512 [ 2456.674492][ T3654] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 2456.685036][ T3654] EXT4-fs (loop9): orphan cleanup on readonly fs [ 2456.708550][ T3654] EXT4-fs error (device loop9): ext4_validate_block_bitmap:438: comm syz.9.10502: bg 0: block 248: padding at end of block bitmap is not set [ 2456.723413][ T3654] Quota error (device loop9): write_blk: dquota write failed [ 2456.730875][ T3654] EXT4-fs error (device loop9): ext4_acquire_dquot:6789: comm syz.9.10502: Failed to acquire dquot type 1 [ 2456.762302][ T3654] EXT4-fs (loop9): 1 truncate cleaned up [ 2456.768202][ T3654] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 2457.598067][ T3662] tty tty30: ldisc open failed (-12), clearing slot 29 [ 2457.727370][T30014] EXT4-fs (loop9): unmounting filesystem. [ 2458.221226][ T3669] loop5: detected capacity change from 0 to 512 [ 2458.230862][ T3669] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 2458.372297][ T3669] EXT4-fs (loop5): orphan cleanup on readonly fs [ 2458.381383][ T3669] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz.5.10507: bg 0: block 248: padding at end of block bitmap is not set [ 2458.397290][ T3669] EXT4-fs error (device loop5): ext4_acquire_dquot:6789: comm syz.5.10507: Failed to acquire dquot type 1 [ 2458.410882][ T3669] EXT4-fs (loop5): 1 truncate cleaned up [ 2458.417386][ T3669] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 2459.015571][ T3674] loop6: detected capacity change from 0 to 512 [ 2459.042130][ T3674] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 2459.074091][T31476] EXT4-fs (loop5): unmounting filesystem. [ 2459.108959][ T3667] loop4: detected capacity change from 0 to 512 [ 2459.136307][ T3674] EXT4-fs (loop6): orphan cleanup on readonly fs [ 2459.145231][ T3674] EXT4-fs error (device loop6): ext4_validate_block_bitmap:438: comm syz.6.10508: bg 0: block 248: padding at end of block bitmap is not set [ 2459.161022][ T3674] __quota_error: 3 callbacks suppressed [ 2459.161047][ T3674] Quota error (device loop6): write_blk: dquota write failed [ 2459.174092][ T3674] Quota error (device loop6): qtree_write_dquot: Error -117 occurred while creating quota [ 2459.184181][ T3674] EXT4-fs error (device loop6): ext4_acquire_dquot:6789: comm syz.6.10508: Failed to acquire dquot type 1 [ 2459.197986][ T3674] EXT4-fs (loop6): 1 truncate cleaned up [ 2459.204588][ T3674] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 2459.545915][ T3680] loop9: detected capacity change from 0 to 128 [ 2459.552488][ T3667] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 2459.620266][ T3667] EXT4-fs (loop4): orphan cleanup on readonly fs [ 2459.627249][ T3667] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.10505: bg 0: block 248: padding at end of block bitmap is not set [ 2459.641869][ T3667] Quota error (device loop4): write_blk: dquota write failed [ 2459.649292][ T3667] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 2459.659211][ T3667] EXT4-fs error (device loop4): ext4_acquire_dquot:6789: comm syz.4.10505: Failed to acquire dquot type 1 [ 2459.671031][ T3667] EXT4-fs (loop4): 1 truncate cleaned up [ 2459.676867][ T3667] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 2459.858738][T31743] EXT4-fs (loop6): unmounting filesystem. [ 2460.390285][ T3684] syz.9.10506: attempt to access beyond end of device [ 2460.390285][ T3684] loop9: rw=0, sector=121, nr_sectors = 920 limit=128 [ 2462.410139][ T3705] loop6: detected capacity change from 0 to 128 [ 2462.890428][ T3708] syz.6.10515: attempt to access beyond end of device [ 2462.890428][ T3708] loop6: rw=0, sector=121, nr_sectors = 920 limit=128 [ 2463.009076][ T3714] loop9: detected capacity change from 0 to 512 [ 2463.039903][ T3715] loop8: detected capacity change from 0 to 512 [ 2463.050324][ T3715] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 2463.059620][ T3714] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 2463.090780][ T3714] EXT4-fs (loop9): orphan cleanup on readonly fs [ 2463.100227][ T3714] EXT4-fs error (device loop9): ext4_validate_block_bitmap:438: comm syz.9.10517: bg 0: block 248: padding at end of block bitmap is not set [ 2463.115538][ T3714] Quota error (device loop9): write_blk: dquota write failed [ 2463.123161][ T3714] Quota error (device loop9): qtree_write_dquot: Error -117 occurred while creating quota [ 2463.133290][ T3714] EXT4-fs error (device loop9): ext4_acquire_dquot:6789: comm syz.9.10517: Failed to acquire dquot type 1 [ 2463.147042][ T3714] EXT4-fs (loop9): 1 truncate cleaned up [ 2463.155113][ T3714] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 2463.213916][ T3715] EXT4-fs (loop8): orphan cleanup on readonly fs [ 2463.223503][ T3715] EXT4-fs error (device loop8): ext4_validate_block_bitmap:438: comm syz.8.10516: bg 0: block 248: padding at end of block bitmap is not set [ 2463.259220][ T3715] Quota error (device loop8): write_blk: dquota write failed [ 2463.266644][ T3715] Quota error (device loop8): qtree_write_dquot: Error -117 occurred while creating quota [ 2463.276843][ T3715] EXT4-fs error (device loop8): ext4_acquire_dquot:6789: comm syz.8.10516: Failed to acquire dquot type 1 [ 2463.290956][ T3715] EXT4-fs (loop8): 1 truncate cleaned up [ 2463.297785][ T3715] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 2463.598404][ T28] audit: type=1400 audit(1750433773.601:8816): avc: denied { ioctl } for pid=3718 comm="syz.6.10518" path="socket:[142702]" dev="sockfs" ino=142702 ioctlcmd=0x89f3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 2463.673275][ T3721] loop5: detected capacity change from 0 to 128 [ 2463.812212][T27217] EXT4-fs (loop8): unmounting filesystem. [ 2463.861989][T30014] EXT4-fs (loop9): unmounting filesystem. [ 2463.936912][ T28] audit: type=1400 audit(1750433773.991:8817): avc: denied { read write } for pid=3728 comm="syz.9.10520" name="raw-gadget" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 2464.055193][ T3734] loop8: detected capacity change from 0 to 512 [ 2464.067458][ T3734] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 2464.103747][ T3734] EXT4-fs (loop8): orphan cleanup on readonly fs [ 2464.112811][ T3734] EXT4-fs error (device loop8): ext4_validate_block_bitmap:438: comm syz.8.10521: bg 0: block 248: padding at end of block bitmap is not set [ 2464.128514][ T3734] EXT4-fs error (device loop8): ext4_acquire_dquot:6789: comm syz.8.10521: Failed to acquire dquot type 1 [ 2464.141888][ T3734] EXT4-fs (loop8): 1 truncate cleaned up [ 2464.148980][ T3734] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 2464.300736][ T28] kauditd_printk_skb: 15 callbacks suppressed [ 2464.300871][ T28] audit: type=1400 audit(1750433774.221:8831): avc: denied { mount } for pid=3725 comm="syz.8.10521" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 2464.499607][T30777] usb 10-1: new high-speed USB device number 26 using dummy_hcd [ 2464.548495][ T28] audit: type=1400 audit(1750433774.271:8832): avc: denied { read } for pid=3725 comm="syz.8.10521" dev="nsfs" ino=4026532775 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 2464.599465][ T28] audit: type=1400 audit(1750433774.271:8833): avc: denied { open } for pid=3725 comm="syz.8.10521" path="net:[4026532775]" dev="nsfs" ino=4026532775 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 2464.669027][ T28] audit: type=1400 audit(1750433774.281:8834): avc: denied { create } for pid=3725 comm="syz.8.10521" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 2464.719563][ T28] audit: type=1400 audit(1750433774.291:8835): avc: denied { bind } for pid=3725 comm="syz.8.10521" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 2465.145746][ T28] audit: type=1400 audit(1750433774.301:8836): avc: denied { write } for pid=3725 comm="syz.8.10521" path="socket:[142251]" dev="sockfs" ino=142251 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 2465.146351][T27217] EXT4-fs (loop8): unmounting filesystem. [ 2465.175932][T30777] usb 10-1: Using ep0 maxpacket: 32 [ 2465.179233][ T28] audit: type=1400 audit(1750433775.201:8837): avc: denied { unmount } for pid=27217 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 2465.182193][T30777] usb 10-1: config 1 has an invalid interface number: 137 but max is 0 [ 2465.239191][T30777] usb 10-1: config 1 has no interface number 0 [ 2465.254999][ T3745] loop8: detected capacity change from 0 to 128 [ 2465.255564][T30777] usb 10-1: config 1 interface 137 has no altsetting 0 [ 2465.280816][T30777] usb 10-1: New USB device found, idVendor=0557, idProduct=2021, bcdDevice=74.1a [ 2465.294445][ T28] audit: type=1400 audit(1750433775.351:8838): avc: denied { mount } for pid=3744 comm="syz.8.10523" name="/" dev="loop8" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 2465.309197][T30777] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2465.356941][ T28] audit: type=1400 audit(1750433775.391:8839): avc: denied { mount } for pid=3730 comm="syz.5.10522" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 2465.380168][T30777] usb 10-1: Product: syz [ 2465.384435][T30777] usb 10-1: Manufacturer: syz [ 2465.391507][T30777] usb 10-1: SerialNumber: syz [ 2465.431716][T29348] EXT4-fs (loop4): unmounting filesystem. [ 2465.611168][ T3747] syz.8.10523: attempt to access beyond end of device [ 2465.611168][ T3747] loop8: rw=0, sector=121, nr_sectors = 920 limit=128 [ 2465.654875][ T28] audit: type=1400 audit(1750433775.551:8840): avc: denied { prog_run } for pid=3744 comm="syz.8.10523" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 2465.742509][ T3753] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2465.778167][ T3753] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2465.787507][ T3756] binder: BINDER_SET_CONTEXT_MGR already set [ 2465.793643][ T3756] binder: 3755:3756 ioctl 4018620d 200000000040 returned -16 [ 2465.806310][ T3757] loop5: detected capacity change from 0 to 512 [ 2465.815969][ T3757] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 2465.841620][ T3757] EXT4-fs (loop5): orphan cleanup on readonly fs [ 2465.848738][ T3757] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz.5.10525: bg 0: block 248: padding at end of block bitmap is not set [ 2465.863729][ T3757] EXT4-fs error (device loop5): ext4_acquire_dquot:6789: comm syz.5.10525: Failed to acquire dquot type 1 [ 2465.875720][ T3757] EXT4-fs (loop5): 1 truncate cleaned up [ 2465.882424][ T3757] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 2466.024203][T30777] pl2303 10-1:1.137: required interrupt-in endpoint missing [ 2466.054585][T30777] usb 10-1: USB disconnect, device number 26 [ 2466.555285][T31476] EXT4-fs (loop5): unmounting filesystem. [ 2466.695061][ T3775] loop9: detected capacity change from 0 to 512 [ 2466.702523][ T3775] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 2466.721422][ T3775] EXT4-fs (loop9): orphan cleanup on readonly fs [ 2466.728443][ T3775] EXT4-fs error (device loop9): ext4_validate_block_bitmap:438: comm syz.9.10531: bg 0: block 248: padding at end of block bitmap is not set [ 2466.743291][ T3775] EXT4-fs error (device loop9): ext4_acquire_dquot:6789: comm syz.9.10531: Failed to acquire dquot type 1 [ 2466.756251][ T3775] EXT4-fs (loop9): 1 truncate cleaned up [ 2466.762596][ T3775] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 2467.011007][ T3782] loop6: detected capacity change from 0 to 512 [ 2467.020719][ T3782] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 2467.052230][ T3782] EXT4-fs (loop6): orphan cleanup on readonly fs [ 2467.114389][ T3782] EXT4-fs error (device loop6): ext4_validate_block_bitmap:438: comm syz.6.10532: bg 0: block 248: padding at end of block bitmap is not set [ 2467.136454][ T3782] EXT4-fs error (device loop6): ext4_acquire_dquot:6789: comm syz.6.10532: Failed to acquire dquot type 1 [ 2467.149934][ T3782] EXT4-fs (loop6): 1 truncate cleaned up [ 2467.156627][ T3782] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 2467.508118][T30014] EXT4-fs (loop9): unmounting filesystem. [ 2468.014128][ T3789] loop9: detected capacity change from 0 to 512 [ 2468.098318][ T3789] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 2468.107564][T31743] EXT4-fs (loop6): unmounting filesystem. [ 2468.195928][ T3789] EXT4-fs (loop9): orphan cleanup on readonly fs [ 2468.204647][ T3789] EXT4-fs error (device loop9): ext4_validate_block_bitmap:438: comm syz.9.10533: bg 0: block 248: padding at end of block bitmap is not set [ 2468.219511][ T3789] EXT4-fs error (device loop9): ext4_acquire_dquot:6789: comm syz.9.10533: Failed to acquire dquot type 1 [ 2468.231463][ T3789] EXT4-fs (loop9): 1 truncate cleaned up [ 2468.237482][ T3789] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 2468.290306][ T3794] loop5: detected capacity change from 0 to 512 [ 2468.357538][ T3794] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 2468.517454][ T3801] loop8: detected capacity change from 0 to 512 [ 2468.527124][ T3801] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 2468.766435][T30014] EXT4-fs (loop9): unmounting filesystem. [ 2468.784354][ T3801] EXT4-fs (loop8): orphan cleanup on readonly fs [ 2468.793020][ T3801] EXT4-fs error (device loop8): ext4_validate_block_bitmap:438: comm syz.8.10538: bg 0: block 248: padding at end of block bitmap is not set [ 2468.808917][ T3801] EXT4-fs error (device loop8): ext4_acquire_dquot:6789: comm syz.8.10538: Failed to acquire dquot type 1 [ 2468.822415][ T3801] EXT4-fs (loop8): 1 truncate cleaned up [ 2468.829680][ T3801] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 2468.945251][ T3794] EXT4-fs (loop5): orphan cleanup on readonly fs [ 2469.019271][ T3794] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz.5.10534: bg 0: block 248: padding at end of block bitmap is not set [ 2469.424352][ T3794] __quota_error: 22 callbacks suppressed [ 2469.424372][ T3794] Quota error (device loop5): write_blk: dquota write failed [ 2469.444127][ T3807] netlink: 4 bytes leftover after parsing attributes in process `syz.9.10539'. [ 2469.474046][ T3794] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 2469.559337][T27217] EXT4-fs (loop8): unmounting filesystem. [ 2469.565375][ T3794] EXT4-fs error (device loop5): ext4_acquire_dquot:6789: comm syz.5.10534: Failed to acquire dquot type 1 [ 2469.607811][ T3810] netlink: 12 bytes leftover after parsing attributes in process `syz.9.10539'. [ 2469.626469][ T28] audit: type=1400 audit(1750433779.681:8853): avc: denied { read write } for pid=3812 comm="syz.8.10541" name="raw-gadget" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 2469.654881][ T3794] EXT4-fs (loop5): 1 truncate cleaned up [ 2469.689200][ T28] audit: type=1400 audit(1750433779.711:8854): avc: denied { open } for pid=3812 comm="syz.8.10541" path="/dev/raw-gadget" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 2469.720647][ T28] audit: type=1400 audit(1750433779.721:8855): avc: denied { ioctl } for pid=3812 comm="syz.8.10541" path="/dev/raw-gadget" dev="devtmpfs" ino=258 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 2471.210629][ T3794] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 2471.302318][ T28] audit: type=1400 audit(1750433779.751:8856): avc: denied { read write } for pid=29348 comm="syz-executor" name="loop4" dev="devtmpfs" ino=122 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 2471.327082][ T28] audit: type=1400 audit(1750433779.751:8857): avc: denied { open } for pid=29348 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=122 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 2471.351319][ T28] audit: type=1400 audit(1750433779.751:8858): avc: denied { ioctl } for pid=29348 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=122 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 2471.374058][ T3818] loop4: detected capacity change from 0 to 512 [ 2471.378038][ T28] audit: type=1400 audit(1750433779.911:8859): avc: denied { create } for pid=3804 comm="syz.6.10535" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 2471.418409][ T3818] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 2471.430372][ T28] audit: type=1400 audit(1750433780.111:8860): avc: denied { setopt } for pid=3804 comm="syz.6.10535" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 2471.499262][ T3495] usb 9-1: new high-speed USB device number 56 using dummy_hcd [ 2471.507264][ T3818] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec019, mo2=0002] [ 2471.515402][ T3818] System zones: 1-12 [ 2471.596681][ T3824] loop6: detected capacity change from 0 to 512 [ 2471.610792][ T3824] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 2471.625438][ T3824] EXT4-fs (loop6): orphan cleanup on readonly fs [ 2471.635504][ T3824] EXT4-fs error (device loop6): ext4_validate_block_bitmap:438: comm syz.6.10543: bg 0: block 248: padding at end of block bitmap is not set [ 2471.651656][ T3824] EXT4-fs error (device loop6): ext4_acquire_dquot:6789: comm syz.6.10543: Failed to acquire dquot type 1 [ 2471.665805][ T3824] EXT4-fs (loop6): 1 truncate cleaned up [ 2471.672632][ T3824] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 2471.713954][ T3818] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2195: inode #15: comm syz.4.10542: corrupted in-inode xattr [ 2471.729280][ T3495] usb 9-1: Using ep0 maxpacket: 32 [ 2471.781863][ T3495] usb 9-1: config 1 has an invalid interface number: 137 but max is 0 [ 2471.852023][ T3495] usb 9-1: config 1 has no interface number 0 [ 2471.863453][ T3818] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.10542: couldn't read orphan inode 15 (err -117) [ 2471.917568][ T3495] usb 9-1: config 1 interface 137 has no altsetting 0 [ 2471.971580][ T3818] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 2471.990310][ T3495] usb 9-1: New USB device found, idVendor=0557, idProduct=2021, bcdDevice=74.1a [ 2472.072457][ T3495] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2472.130229][ T3818] futex_wake_op: syz.4.10542 tries to shift op by -1; fix this program [ 2472.222657][ T3495] usb 9-1: Product: syz [ 2472.257664][ T3495] usb 9-1: Manufacturer: syz [ 2472.850128][T29348] EXT4-fs (loop4): unmounting filesystem. [ 2473.092974][ T3495] usb 9-1: SerialNumber: syz [ 2473.093622][T31743] EXT4-fs (loop6): unmounting filesystem. [ 2473.099824][ T3495] usb 9-1: can't set config #1, error -71 [ 2473.110293][ T3495] usb 9-1: USB disconnect, device number 56 [ 2473.683105][ T3495] usb 9-1: new high-speed USB device number 57 using dummy_hcd [ 2473.921389][ T3495] usb 9-1: Using ep0 maxpacket: 32 [ 2474.130136][ T3840] futex_wake_op: syz.4.10547 tries to shift op by -1; fix this program [ 2474.426280][ T3495] usb 9-1: config 0 has an invalid interface number: 67 but max is 0 [ 2474.443696][ T3495] usb 9-1: config 0 has no interface number 0 [ 2474.458785][ T3495] usb 9-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 2474.469435][T31476] EXT4-fs (loop5): unmounting filesystem. [ 2474.475249][ T3495] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2474.483608][ T3495] usb 9-1: Product: syz [ 2474.489039][ T3495] usb 9-1: Manufacturer: syz [ 2474.493719][ T3495] usb 9-1: SerialNumber: syz [ 2474.685217][ T28] kauditd_printk_skb: 15 callbacks suppressed [ 2474.685276][ T28] audit: type=1400 audit(1750433784.621:8874): avc: denied { create } for pid=3842 comm="syz.6.10548" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 2474.725608][ T28] audit: type=1400 audit(1750433784.621:8875): avc: denied { setopt } for pid=3842 comm="syz.6.10548" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 2474.746968][ T3495] usb 9-1: config 0 descriptor?? [ 2474.753312][ T3495] smsc95xx v2.0.0 [ 2474.799945][ T3849] loop5: detected capacity change from 0 to 512 [ 2474.807368][ T3849] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 2474.820581][ T3849] EXT4-fs (loop5): orphan cleanup on readonly fs [ 2474.827637][ T3849] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz.5.10549: bg 0: block 248: padding at end of block bitmap is not set [ 2474.842493][ T3849] Quota error (device loop5): write_blk: dquota write failed [ 2474.850117][ T3849] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 2474.860508][ T3849] EXT4-fs error (device loop5): ext4_acquire_dquot:6789: comm syz.5.10549: Failed to acquire dquot type 1 [ 2474.872763][ T3849] EXT4-fs (loop5): 1 truncate cleaned up [ 2474.878704][ T3849] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 2474.975706][ T3852] loop9: detected capacity change from 0 to 512 [ 2474.985580][ T3852] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 2475.010488][ T3852] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec019, mo2=0002] [ 2475.018572][ T3852] System zones: 1-12 [ 2475.024469][ T3852] EXT4-fs error (device loop9): ext4_xattr_ibody_find:2195: inode #15: comm syz.9.10550: corrupted in-inode xattr [ 2475.037199][ T3852] EXT4-fs error (device loop9): ext4_orphan_get:1405: comm syz.9.10550: couldn't read orphan inode 15 (err -117) [ 2475.051054][ T3852] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 2475.067198][ T3852] futex_wake_op: syz.9.10550 tries to shift op by -1; fix this program [ 2475.169490][ T3495] smsc95xx 9-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 2475.180371][ T3495] smsc95xx 9-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 2475.293805][ T28] audit: type=1400 audit(1750433785.351:8876): avc: denied { create } for pid=3861 comm="syz.6.10552" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 2475.316375][ T3862] I/O error, dev loop13, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2475.360614][ T3862] FAT-fs (loop13): unable to read boot sector [ 2475.361534][ T28] audit: type=1400 audit(1750433785.381:8877): avc: denied { mounton } for pid=3861 comm="syz.6.10552" path="/247/file0" dev="tmpfs" ino=1376 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 2475.421894][ T28] audit: type=1400 audit(1750433785.481:8878): avc: denied { unlink } for pid=31743 comm="syz-executor" name="file0" dev="tmpfs" ino=1376 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 2475.565145][T31476] EXT4-fs (loop5): unmounting filesystem. [ 2476.976401][ T3872] loop5: detected capacity change from 0 to 512 [ 2476.984395][ T28] audit: type=1400 audit(1750433787.011:8879): avc: denied { read } for pid=3866 comm="syz.6.10555" dev="nsfs" ino=4026532324 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 2477.008118][ T3872] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 2477.046855][T30014] EXT4-fs (loop9): unmounting filesystem. [ 2477.365995][ T3872] EXT4-fs (loop5): orphan cleanup on readonly fs [ 2477.375229][ T3872] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz.5.10554: bg 0: block 248: padding at end of block bitmap is not set [ 2477.391659][ T3872] Quota error (device loop5): write_blk: dquota write failed [ 2477.399245][ T3872] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 2477.409265][ T3872] EXT4-fs error (device loop5): ext4_acquire_dquot:6789: comm syz.5.10554: Failed to acquire dquot type 1 [ 2477.423361][ T3872] EXT4-fs (loop5): 1 truncate cleaned up [ 2477.430221][ T3872] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 2477.519399][ T3495] smsc95xx 9-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000104: -71 [ 2477.942958][ T3495] smsc95xx: probe of 9-1:0.67 failed with error -71 [ 2477.976245][ T3495] usb 9-1: USB disconnect, device number 57 [ 2478.011629][ T3881] loop8: detected capacity change from 0 to 512 [ 2478.106120][T31476] EXT4-fs (loop5): unmounting filesystem. [ 2478.119686][ T3881] EXT4-fs: dax option not supported [ 2478.289197][T10298] usb 10-1: new high-speed USB device number 27 using dummy_hcd [ 2478.572400][T10298] usb 10-1: Using ep0 maxpacket: 32 [ 2478.667340][T10298] usb 10-1: config 1 has an invalid interface number: 137 but max is 0 [ 2478.724477][T10298] usb 10-1: config 1 has no interface number 0 [ 2478.737009][T10298] usb 10-1: config 1 interface 137 has no altsetting 0 [ 2478.966507][ T3890] loop6: detected capacity change from 0 to 512 [ 2479.580722][ T3890] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 2479.701193][T10298] usb 10-1: New USB device found, idVendor=0557, idProduct=2021, bcdDevice=74.1a [ 2479.721523][ T3890] EXT4-fs (loop6): orphan cleanup on readonly fs [ 2479.730634][ T3890] EXT4-fs error (device loop6): ext4_validate_block_bitmap:438: comm syz.6.10560: bg 0: block 248: padding at end of block bitmap is not set [ 2479.746806][ T3890] __quota_error: 18 callbacks suppressed [ 2479.746836][ T3890] Quota error (device loop6): write_blk: dquota write failed [ 2479.760027][ T3890] Quota error (device loop6): qtree_write_dquot: Error -117 occurred while creating quota [ 2479.769994][ T3890] EXT4-fs error (device loop6): ext4_acquire_dquot:6789: comm syz.6.10560: Failed to acquire dquot type 1 [ 2479.783951][ T3890] EXT4-fs (loop6): 1 truncate cleaned up [ 2481.370277][ T3896] loop8: detected capacity change from 0 to 512 [ 2481.400206][ T3896] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 2481.497619][T10298] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2481.532549][ T3896] EXT4-fs (loop8): orphan cleanup on readonly fs [ 2481.540212][ T3896] EXT4-fs error (device loop8): ext4_validate_block_bitmap:438: comm syz.8.10562: bg 0: block 248: padding at end of block bitmap is not set [ 2481.646791][ T3901] netlink: 4 bytes leftover after parsing attributes in process `syz.5.10563'. [ 2481.669055][T10298] usb 10-1: Product: syz [ 2481.762477][ T3896] Quota error (device loop8): write_blk: dquota write failed [ 2481.769946][ T3896] Quota error (device loop8): qtree_write_dquot: Error -117 occurred while creating quota [ 2481.779878][ T3896] EXT4-fs error (device loop8): ext4_acquire_dquot:6789: comm syz.8.10562: Failed to acquire dquot type 1 [ 2481.798557][ T3896] EXT4-fs (loop8): 1 truncate cleaned up [ 2481.810280][T10298] usb 10-1: Manufacturer: syz [ 2482.075857][T10298] usb 10-1: SerialNumber: syz [ 2482.129532][ T3908] loop4: detected capacity change from 0 to 512 [ 2482.135498][ T3890] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 2482.144898][ T28] audit: type=1400 audit(1750433792.201:8898): avc: denied { mount } for pid=3887 comm="syz.6.10560" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 2482.167155][ T3908] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 2482.176664][ T3896] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 2482.177031][T31743] EXT4-fs (loop6): unmounting filesystem. [ 2482.193544][T10298] usb 10-1: can't set config #1, error -71 [ 2482.210960][T10298] usb 10-1: USB disconnect, device number 27 [ 2482.218319][ T3908] EXT4-fs (loop4): orphan cleanup on readonly fs [ 2482.225818][ T3908] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.10565: bg 0: block 248: padding at end of block bitmap is not set [ 2482.232698][ T3911] netlink: 12 bytes leftover after parsing attributes in process `syz.5.10563'. [ 2482.240881][ T3908] Quota error (device loop4): write_blk: dquota write failed [ 2482.257046][ T3908] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 2482.267224][ T3908] EXT4-fs error (device loop4): ext4_acquire_dquot:6789: comm syz.4.10565: Failed to acquire dquot type 1 [ 2482.280016][ T28] audit: type=1400 audit(1750433792.291:8899): avc: denied { write } for pid=3900 comm="syz.5.10563" name="001" dev="devtmpfs" ino=179 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 2482.280016][ T3908] EXT4-fs (loop4): 1 truncate cleaned up [ 2482.309653][ T3908] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 2482.472137][T27217] EXT4-fs (loop8): unmounting filesystem. [ 2482.579934][ T28] audit: type=1400 audit(1750433792.611:8900): avc: denied { read } for pid=3915 comm="syz.9.10568" name="kvm" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 2482.638095][ T28] audit: type=1400 audit(1750433792.611:8901): avc: denied { open } for pid=3915 comm="syz.9.10568" path="/dev/kvm" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 2483.080882][T29348] EXT4-fs (loop4): unmounting filesystem. [ 2483.124862][ T3924] loop4: detected capacity change from 0 to 128 [ 2483.211160][ T3916] kvm [3915]: vcpu0, guest rIP: 0x18e ignored wrmsr: 0x11e data 0xff21 [ 2483.234895][ T3916] kvm [3915]: vcpu0, guest rIP: 0x1b8 ignored wrmsr: 0x11e data 0xff21 [ 2483.255391][ T3916] kvm [3915]: vcpu0, guest rIP: 0x18e vmx_set_msr: BTF|LBR in IA32_DEBUGCTLMSR 0xff13, nop [ 2483.270901][ T3916] kvm [3915]: vcpu0, guest rIP: 0x18e vmx_set_msr: BTF|LBR in IA32_DEBUGCTLMSR 0xff51, nop [ 2483.414836][ T3930] loop6: detected capacity change from 0 to 1024 [ 2483.469628][ T3930] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 2483.529265][ T3930] ext4 filesystem being mounted at /253/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 2483.585061][T31743] EXT4-fs (loop6): unmounting filesystem. [ 2483.834077][ T3943] loop6: detected capacity change from 0 to 512 [ 2483.892735][ T3943] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 2484.253345][T10298] usb 10-1: new high-speed USB device number 28 using dummy_hcd [ 2484.259572][ T3943] EXT4-fs (loop6): orphan cleanup on readonly fs [ 2485.682480][ T3943] EXT4-fs error (device loop6): ext4_validate_block_bitmap:438: comm syz.6.10573: bg 0: block 248: padding at end of block bitmap is not set [ 2485.698612][ T3943] __quota_error: 13 callbacks suppressed [ 2485.698635][ T3943] Quota error (device loop6): write_blk: dquota write failed [ 2485.711828][ T3943] Quota error (device loop6): qtree_write_dquot: Error -117 occurred while creating quota [ 2485.721794][ T3943] EXT4-fs error (device loop6): ext4_acquire_dquot:6789: comm syz.6.10573: Failed to acquire dquot type 1 [ 2485.736178][ T3943] EXT4-fs (loop6): 1 truncate cleaned up [ 2485.742987][ T3943] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 2486.923537][T31743] EXT4-fs (loop6): unmounting filesystem. [ 2486.924789][T10298] usb 10-1: device descriptor read/all, error -71 [ 2486.974635][ T3960] loop9: detected capacity change from 0 to 128 [ 2487.049288][ T3963] loop4: detected capacity change from 0 to 512 [ 2487.056934][ T3963] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 2487.755607][ T3966] syz.9.10579: attempt to access beyond end of device [ 2487.755607][ T3966] loop9: rw=0, sector=121, nr_sectors = 920 limit=128 [ 2487.956459][ T3963] EXT4-fs (loop4): orphan cleanup on readonly fs [ 2487.975305][ T3963] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.10576: bg 0: block 248: padding at end of block bitmap is not set [ 2487.990915][ T3963] Quota error (device loop4): write_blk: dquota write failed [ 2487.998432][ T3963] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 2488.008447][ T3963] EXT4-fs error (device loop4): ext4_acquire_dquot:6789: comm syz.4.10576: Failed to acquire dquot type 1 [ 2488.023461][ T3963] EXT4-fs (loop4): 1 truncate cleaned up [ 2488.033899][ T3963] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 2488.067663][ T28] audit: type=1400 audit(1750433798.121:8915): avc: denied { create } for pid=3951 comm="syz.4.10576" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 2488.247198][ T28] audit: type=1400 audit(1750433798.121:8916): avc: denied { bind } for pid=3951 comm="syz.4.10576" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 2488.395943][ T3976] loop6: detected capacity change from 0 to 512 [ 2488.402326][ T28] audit: type=1400 audit(1750433798.451:8917): avc: denied { write } for pid=3973 comm="syz.9.10580" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 2488.424257][ T3975] loop9: detected capacity change from 0 to 128 [ 2488.463235][ T3976] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 2488.507987][ T28] audit: type=1400 audit(1750433798.451:8918): avc: denied { read } for pid=3973 comm="syz.9.10580" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 2488.587435][T29348] EXT4-fs (loop4): unmounting filesystem. [ 2488.653008][ T3976] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec019, mo2=0002] [ 2488.677243][ T3979] loop4: detected capacity change from 0 to 128 [ 2488.679324][ T3976] System zones: 1-12 [ 2488.701292][ T3976] EXT4-fs error (device loop6): ext4_xattr_ibody_find:2195: inode #15: comm syz.6.10581: corrupted in-inode xattr [ 2488.736999][ T3976] EXT4-fs error (device loop6): ext4_orphan_get:1405: comm syz.6.10581: couldn't read orphan inode 15 (err -117) [ 2488.751554][ T3976] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 2488.751777][ T3979] syz.4.10582: attempt to access beyond end of device [ 2488.751777][ T3979] loop4: rw=0, sector=121, nr_sectors = 920 limit=128 [ 2488.777274][ T3976] futex_wake_op: syz.6.10581 tries to shift op by -1; fix this program [ 2489.693201][ T28] audit: type=1400 audit(1750433799.751:8919): avc: denied { read } for pid=3974 comm="syz.6.10581" name="loop-control" dev="devtmpfs" ino=117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 2489.722942][ T28] audit: type=1400 audit(1750433799.751:8920): avc: denied { open } for pid=3974 comm="syz.6.10581" path="/dev/loop-control" dev="devtmpfs" ino=117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 2489.747685][ T3989] loop5: detected capacity change from 0 to 128 [ 2489.855284][T31743] EXT4-fs (loop6): unmounting filesystem. [ 2490.119010][ T3997] overlayfs: missing 'lowerdir' [ 2490.343983][ T4005] loop4: detected capacity change from 0 to 512 [ 2490.357237][ T4005] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 2490.461579][ T4005] EXT4-fs (loop4): orphan cleanup on readonly fs [ 2490.472191][ T4005] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.10589: bg 0: block 248: padding at end of block bitmap is not set [ 2490.489437][ T4005] EXT4-fs error (device loop4): ext4_acquire_dquot:6789: comm syz.4.10589: Failed to acquire dquot type 1 [ 2490.519049][ T4005] EXT4-fs (loop4): 1 truncate cleaned up [ 2490.561420][ T4005] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 2492.182500][ T4012] loop5: detected capacity change from 0 to 128 [ 2492.293097][T29348] EXT4-fs (loop4): unmounting filesystem. [ 2492.516332][ T4016] syz.5.10591: attempt to access beyond end of device [ 2492.516332][ T4016] loop5: rw=0, sector=121, nr_sectors = 920 limit=128 [ 2492.695177][ T4019] loop4: detected capacity change from 0 to 512 [ 2492.727343][ T4019] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 2492.773901][ T4019] EXT4-fs (loop4): orphan cleanup on readonly fs [ 2492.802022][ T4019] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.10592: bg 0: block 248: padding at end of block bitmap is not set [ 2492.830100][ T4019] __quota_error: 7 callbacks suppressed [ 2492.830124][ T4019] Quota error (device loop4): write_blk: dquota write failed [ 2492.843668][ T4019] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 2492.853668][ T4019] EXT4-fs error (device loop4): ext4_acquire_dquot:6789: comm syz.4.10592: Failed to acquire dquot type 1 [ 2492.873236][ T4019] EXT4-fs (loop4): 1 truncate cleaned up [ 2492.881811][ T4019] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 2493.244408][ T4023] loop9: detected capacity change from 0 to 512 [ 2493.299356][ T4023] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 2493.458523][ T4023] EXT4-fs (loop9): orphan cleanup on readonly fs [ 2493.487485][ T4023] EXT4-fs error (device loop9): ext4_validate_block_bitmap:438: comm syz.9.10593: bg 0: block 248: padding at end of block bitmap is not set [ 2493.521430][ T4032] loop5: detected capacity change from 0 to 512 [ 2493.558595][ T4032] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 2493.570267][ T4023] Quota error (device loop9): write_blk: dquota write failed [ 2493.577693][ T4023] Quota error (device loop9): qtree_write_dquot: Error -117 occurred while creating quota [ 2493.589334][T29348] EXT4-fs (loop4): unmounting filesystem. [ 2493.615483][ T4032] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec019, mo2=0002] [ 2493.629317][ T4032] System zones: 1-12 [ 2493.633487][ T4023] EXT4-fs error (device loop9): ext4_acquire_dquot:6789: comm syz.9.10593: Failed to acquire dquot type 1 [ 2493.666560][ T4038] loop4: detected capacity change from 0 to 256 [ 2493.675182][ T4032] EXT4-fs error (device loop5): ext4_xattr_ibody_find:2195: inode #15: comm syz.5.10596: corrupted in-inode xattr [ 2493.687904][ T4023] EXT4-fs (loop9): 1 truncate cleaned up [ 2493.708490][ T4038] exfat: Unknown parameter 'aPlow_u000000000000000304' [ 2493.712391][ T4032] EXT4-fs error (device loop5): ext4_orphan_get:1405: comm syz.5.10596: couldn't read orphan inode 15 (err -117) [ 2493.732530][ T4023] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 2493.741723][ T4032] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 2493.754962][ T28] audit: type=1400 audit(1750433803.811:8926): avc: denied { mounton } for pid=4039 comm="syz.6.10599" path="/258/file0" dev="tmpfs" ino=1436 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 2493.778770][ T4040] I/O error, dev loop13, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2493.792336][ T4032] futex_wake_op: syz.5.10596 tries to shift op by -1; fix this program [ 2493.824774][ T4040] FAT-fs (loop13): unable to read boot sector [ 2493.832485][ T28] audit: type=1400 audit(1750433803.841:8927): avc: denied { write } for pid=4021 comm="syz.9.10593" path="socket:[143180]" dev="sockfs" ino=143180 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 2494.808122][T30014] EXT4-fs (loop9): unmounting filesystem. [ 2495.727758][ T28] audit: type=1400 audit(1750433804.981:8928): avc: denied { ioctl } for pid=4037 comm="syz.4.10598" path="socket:[143190]" dev="sockfs" ino=143190 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 2495.831850][ T4056] netlink: 4 bytes leftover after parsing attributes in process `syz.9.10602'. [ 2495.859327][T31476] EXT4-fs (loop5): unmounting filesystem. [ 2495.892885][ T4058] loop6: detected capacity change from 0 to 128 [ 2495.970491][ T28] audit: type=1326 audit(1750433806.031:8929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4060 comm="syz.4.10605" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4e4758e929 code=0x0 [ 2495.994186][ T4065] netlink: 12 bytes leftover after parsing attributes in process `syz.9.10602'. [ 2496.280409][ T4069] syz.6.10604: attempt to access beyond end of device [ 2496.280409][ T4069] loop6: rw=0, sector=121, nr_sectors = 920 limit=128 [ 2496.328346][ T4075] futex_wake_op: syz.5.10607 tries to shift op by -1; fix this program [ 2496.881975][ T4082] loop6: detected capacity change from 0 to 256 [ 2496.937735][T29588] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 2497.088428][ T4087] loop4: detected capacity change from 0 to 512 [ 2497.130742][ T4087] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 2497.272107][ T4087] EXT4-fs (loop4): orphan cleanup on readonly fs [ 2497.281786][ T4087] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.10610: bg 0: block 248: padding at end of block bitmap is not set [ 2497.297286][ T4087] Quota error (device loop4): write_blk: dquota write failed [ 2497.304841][ T4087] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 2497.314886][ T4087] EXT4-fs error (device loop4): ext4_acquire_dquot:6789: comm syz.4.10610: Failed to acquire dquot type 1 [ 2497.329891][ T4087] EXT4-fs (loop4): 1 truncate cleaned up [ 2497.336239][ T4087] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 2498.364364][ T4094] loop5: detected capacity change from 0 to 512 [ 2498.409720][ T4094] EXT4-fs: dax option not supported [ 2498.941216][T29348] EXT4-fs (loop4): unmounting filesystem. [ 2499.033703][ T4100] loop4: detected capacity change from 0 to 512 [ 2499.054494][ T4100] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 2499.080091][ T4100] EXT4-fs (loop4): orphan cleanup on readonly fs [ 2499.099629][ T4100] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.10613: bg 0: block 248: padding at end of block bitmap is not set [ 2499.129458][ T4100] Quota error (device loop4): write_blk: dquota write failed [ 2499.136884][ T4100] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 2499.147031][ T4100] EXT4-fs error (device loop4): ext4_acquire_dquot:6789: comm syz.4.10613: Failed to acquire dquot type 1 [ 2499.173857][ T28] audit: type=1400 audit(1750433809.231:8930): avc: denied { read write } for pid=4102 comm="syz.6.10614" name="raw-gadget" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 2499.234023][ T4100] EXT4-fs (loop4): 1 truncate cleaned up [ 2499.241243][ T4100] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 2499.277253][ T28] audit: type=1400 audit(1750433809.291:8931): avc: denied { read write } for pid=31476 comm="syz-executor" name="loop5" dev="devtmpfs" ino=123 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 2499.339189][ T28] audit: type=1400 audit(1750433809.291:8932): avc: denied { open } for pid=31476 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=123 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 2499.409062][ T28] audit: type=1400 audit(1750433809.291:8933): avc: denied { ioctl } for pid=31476 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=123 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 2499.435767][ T28] audit: type=1400 audit(1750433809.311:8934): avc: denied { open } for pid=4102 comm="syz.6.10614" path="/dev/raw-gadget" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 2499.459630][ T28] audit: type=1400 audit(1750433809.311:8935): avc: denied { ioctl } for pid=4102 comm="syz.6.10614" path="/dev/raw-gadget" dev="devtmpfs" ino=258 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 2499.499460][ T28] audit: type=1400 audit(1750433809.311:8936): avc: denied { bpf } for pid=4104 comm="syz.5.10615" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 2499.535559][ T422] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 2499.626325][ T28] audit: type=1400 audit(1750433809.311:8937): avc: denied { prog_load } for pid=4104 comm="syz.5.10615" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 2499.729739][ T4113] loop9: detected capacity change from 0 to 512 [ 2499.745110][ T4113] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 2499.753813][ T422] usb 7-1: Using ep0 maxpacket: 32 [ 2499.760093][ T422] usb 7-1: config 1 has an invalid interface number: 137 but max is 0 [ 2499.771064][ T4113] EXT4-fs (loop9): orphan cleanup on readonly fs [ 2499.787030][ T422] usb 7-1: config 1 has no interface number 0 [ 2499.794005][ T422] usb 7-1: config 1 interface 137 has no altsetting 0 [ 2499.804907][ T4113] EXT4-fs error (device loop9): ext4_validate_block_bitmap:438: comm syz.9.10617: bg 0: block 248: padding at end of block bitmap is not set [ 2499.827596][T29348] EXT4-fs (loop4): unmounting filesystem. [ 2499.848861][ T422] usb 7-1: New USB device found, idVendor=0557, idProduct=2021, bcdDevice=74.1a [ 2499.862999][ T4113] EXT4-fs error (device loop9): ext4_acquire_dquot:6789: comm syz.9.10617: Failed to acquire dquot type 1 [ 2499.873410][ T422] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2499.884621][ T4120] loop8: detected capacity change from 0 to 128 [ 2499.891591][ T4113] EXT4-fs (loop9): 1 truncate cleaned up [ 2499.972941][ T422] usb 7-1: Product: syz [ 2499.977367][ T422] usb 7-1: Manufacturer: syz [ 2499.982431][ T422] usb 7-1: SerialNumber: syz [ 2499.992547][ T4113] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 2500.060237][ T4123] futex_wake_op: syz.4.10621 tries to shift op by -1; fix this program [ 2500.195222][ T4126] loop5: detected capacity change from 0 to 512 [ 2500.209232][ T4126] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 2500.229492][ T4126] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec019, mo2=0002] [ 2500.237603][ T4126] System zones: 1-12 [ 2500.250263][ T4126] EXT4-fs error (device loop5): ext4_xattr_ibody_find:2195: inode #15: comm syz.5.10622: corrupted in-inode xattr [ 2500.256362][ T4129] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2500.271964][ T4126] EXT4-fs error (device loop5): ext4_orphan_get:1405: comm syz.5.10622: couldn't read orphan inode 15 (err -117) [ 2500.284941][ T4126] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 2500.295218][ T4129] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2500.323749][ T4126] futex_wake_op: syz.5.10622 tries to shift op by -1; fix this program [ 2500.462862][T31476] EXT4-fs (loop5): unmounting filesystem. [ 2500.567125][ T422] pl2303 7-1:1.137: required interrupt-in endpoint missing [ 2500.588069][ T422] usb 7-1: USB disconnect, device number 23 [ 2500.677761][ T4133] kvm [4132]: vcpu0, guest rIP: 0x18e ignored wrmsr: 0x11e data 0xff21 [ 2500.686267][ T4133] kvm [4132]: vcpu0, guest rIP: 0x1b8 ignored wrmsr: 0x11e data 0xff21 [ 2500.698191][ T4133] kvm [4132]: vcpu0, guest rIP: 0x18e vmx_set_msr: BTF|LBR in IA32_DEBUGCTLMSR 0xff13, nop [ 2500.714091][ T4133] kvm [4132]: vcpu0, guest rIP: 0x18e vmx_set_msr: BTF|LBR in IA32_DEBUGCTLMSR 0xff51, nop [ 2500.730507][ T4133] kvm [4132]: vcpu0, guest rIP: 0x18e vmx_set_msr: BTF|LBR in IA32_DEBUGCTLMSR 0xff13, nop [ 2500.741409][T30014] EXT4-fs (loop9): unmounting filesystem. [ 2500.743843][ T4133] kvm [4132]: vcpu0, guest rIP: 0x18e vmx_set_msr: BTF|LBR in IA32_DEBUGCTLMSR 0xff13, nop [ 2500.767831][ T4133] kvm [4132]: vcpu0, guest rIP: 0x18e vmx_set_msr: BTF|LBR in IA32_DEBUGCTLMSR 0xff13, nop [ 2500.791510][ T4133] kvm [4132]: vcpu0, guest rIP: 0x18e vmx_set_msr: BTF|LBR in IA32_DEBUGCTLMSR 0xff13, nop [ 2500.804854][ T4133] kvm [4132]: vcpu0, guest rIP: 0x18e vmx_set_msr: BTF|LBR in IA32_DEBUGCTLMSR 0xff13, nop [ 2500.823317][ T4133] kvm [4132]: vcpu0, guest rIP: 0x18e ignored wrmsr: 0x11e data 0xdf71 [ 2500.824764][ T4139] loop8: detected capacity change from 0 to 512 [ 2500.831869][ T4133] kvm [4132]: vcpu0, guest rIP: 0x1b8 ignored wrmsr: 0x11e data 0xdf71 [ 2500.924688][ T4141] loop9: detected capacity change from 0 to 512 [ 2500.941749][ T4141] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 2500.953309][ T4139] EXT4-fs: dax option not supported [ 2501.938466][ T4141] EXT4-fs (loop9): orphan cleanup on readonly fs [ 2501.947081][ T4141] EXT4-fs error (device loop9): ext4_validate_block_bitmap:438: comm syz.9.10624: bg 0: block 248: padding at end of block bitmap is not set [ 2501.962940][ T4141] EXT4-fs error (device loop9): ext4_acquire_dquot:6789: comm syz.9.10624: Failed to acquire dquot type 1 [ 2501.976342][ T4141] EXT4-fs (loop9): 1 truncate cleaned up [ 2501.982816][ T4141] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 2502.147505][ T4133] kvm [4132]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0x186 data 0x20 [ 2502.166674][ T4133] kvm [4132]: vcpu0, guest rIP: 0x1b8 disabled perfctr wrmsr: 0x186 data 0x20 [ 2502.950448][ T4154] loop6: detected capacity change from 0 to 512 [ 2503.003587][ T4154] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 2503.027250][ T4151] loop8: detected capacity change from 0 to 1024 [ 2503.050576][ T4154] EXT4-fs (loop6): orphan cleanup on readonly fs [ 2503.058347][ T4154] EXT4-fs error (device loop6): ext4_validate_block_bitmap:438: comm syz.6.10628: bg 0: block 248: padding at end of block bitmap is not set [ 2503.073495][ T4154] EXT4-fs error (device loop6): ext4_acquire_dquot:6789: comm syz.6.10628: Failed to acquire dquot type 1 [ 2503.089725][ T4154] EXT4-fs (loop6): 1 truncate cleaned up [ 2503.092847][T30014] EXT4-fs (loop9): unmounting filesystem. [ 2503.099370][ T4154] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 2503.124565][ T4151] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 2503.133218][ T4151] ext4 filesystem being mounted at /491/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 2503.177316][ T4151] kvm: pic: non byte write [ 2503.190112][ T4164] loop9: detected capacity change from 0 to 512 [ 2503.203776][ T4164] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 2503.217213][ T4164] EXT4-fs (loop9): orphan cleanup on readonly fs [ 2503.224575][ T4164] EXT4-fs error (device loop9): ext4_validate_block_bitmap:438: comm syz.9.10630: bg 0: block 248: padding at end of block bitmap is not set [ 2503.240339][ T4164] EXT4-fs error (device loop9): ext4_acquire_dquot:6789: comm syz.9.10630: Failed to acquire dquot type 1 [ 2503.252138][ T4151] kvm: vcpu 0: requested 155768 ns lapic timer period limited to 200000 ns [ 2503.259359][ T4164] EXT4-fs (loop9): 1 truncate cleaned up [ 2503.261475][ T4151] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3091007040 (6182014080 ns) > initial count (200000 ns). Using initial count to start timer. [ 2503.284486][T31743] EXT4-fs (loop6): unmounting filesystem. [ 2503.290505][ T4164] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 2503.528824][ T4177] loop6: detected capacity change from 0 to 512 [ 2503.543389][ T4177] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 2503.616266][ T4177] EXT4-fs (loop6): orphan cleanup on readonly fs [ 2503.625676][ T4177] EXT4-fs error (device loop6): ext4_validate_block_bitmap:438: comm syz.6.10634: bg 0: block 248: padding at end of block bitmap is not set [ 2503.641636][ T4177] EXT4-fs error (device loop6): ext4_acquire_dquot:6789: comm syz.6.10634: Failed to acquire dquot type 1 [ 2503.656088][ T4177] EXT4-fs (loop6): 1 truncate cleaned up [ 2503.662896][ T4177] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 2504.039665][T30014] EXT4-fs (loop9): unmounting filesystem. [ 2504.543983][ T4181] loop4: detected capacity change from 0 to 128 [ 2504.640453][T31743] EXT4-fs (loop6): unmounting filesystem. [ 2504.765337][ T4187] loop9: detected capacity change from 0 to 512 [ 2504.788584][ T4187] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 2504.792457][T27217] EXT4-fs (loop8): unmounting filesystem. [ 2504.819719][ T4187] EXT4-fs (loop9): orphan cleanup on readonly fs [ 2504.827335][ T28] kauditd_printk_skb: 43 callbacks suppressed [ 2504.827350][ T28] audit: type=1400 audit(1750433814.881:8971): avc: denied { read write } for pid=4189 comm="syz.8.10638" name="raw-gadget" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 2504.968175][ T4187] EXT4-fs error (device loop9): ext4_validate_block_bitmap:438: comm syz.9.10635: bg 0: block 248: padding at end of block bitmap is not set [ 2505.028419][ T28] audit: type=1400 audit(1750433814.931:8972): avc: denied { open } for pid=4189 comm="syz.8.10638" path="/dev/raw-gadget" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 2505.081961][ T4187] Quota error (device loop9): write_blk: dquota write failed [ 2505.124871][ T4187] Quota error (device loop9): qtree_write_dquot: Error -117 occurred while creating quota [ 2505.154587][ T28] audit: type=1400 audit(1750433814.951:8974): avc: denied { create } for pid=4185 comm="syz.6.10637" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 2505.199585][ T422] usb 9-1: new high-speed USB device number 58 using dummy_hcd [ 2505.238129][ T4187] EXT4-fs error (device loop9): ext4_acquire_dquot:6789: comm syz.9.10635: Failed to acquire dquot type 1 [ 2505.290184][ T28] audit: type=1400 audit(1750433814.951:8975): avc: denied { bpf } for pid=4185 comm="syz.6.10637" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 2505.348067][ T4187] EXT4-fs (loop9): 1 truncate cleaned up [ 2505.384648][ T4187] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 2505.394147][ T422] usb 9-1: Using ep0 maxpacket: 32 [ 2505.402451][ T422] usb 9-1: config 1 has an invalid interface number: 137 but max is 0 [ 2505.425308][ T28] audit: type=1400 audit(1750433814.951:8976): avc: denied { prog_load } for pid=4185 comm="syz.6.10637" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 2505.459634][ T422] usb 9-1: config 1 has no interface number 0 [ 2505.488106][ T422] usb 9-1: config 1 interface 137 has no altsetting 0 [ 2505.684157][ T28] audit: type=1400 audit(1750433814.951:8977): avc: denied { perfmon } for pid=4185 comm="syz.6.10637" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 2505.714233][ T28] audit: type=1400 audit(1750433814.961:8978): avc: denied { prog_run } for pid=4185 comm="syz.6.10637" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 2505.737142][ T4196] loop4: detected capacity change from 0 to 512 [ 2505.744291][ T28] audit: type=1400 audit(1750433814.941:8973): avc: denied { ioctl } for pid=4189 comm="syz.8.10638" path="/dev/raw-gadget" dev="devtmpfs" ino=258 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 2505.770415][ T422] usb 9-1: New USB device found, idVendor=0557, idProduct=2021, bcdDevice=74.1a [ 2505.789215][ T4196] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 2505.789375][ T422] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2505.818306][ T422] usb 9-1: Product: syz [ 2505.818740][ T4196] EXT4-fs (loop4): orphan cleanup on readonly fs [ 2505.822953][ T422] usb 9-1: Manufacturer: syz [ 2505.834310][ T4196] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.10639: bg 0: block 248: padding at end of block bitmap is not set [ 2505.843914][ T422] usb 9-1: SerialNumber: syz [ 2505.854203][ T4196] EXT4-fs error (device loop4): ext4_acquire_dquot:6789: comm syz.4.10639: Failed to acquire dquot type 1 [ 2505.867691][ T4196] EXT4-fs (loop4): 1 truncate cleaned up [ 2505.873728][ T4196] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 2506.169226][ T4203] loop6: detected capacity change from 0 to 512 [ 2506.211705][ T4203] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 2506.256827][ T4203] EXT4-fs (loop6): orphan cleanup on readonly fs [ 2506.267209][ T4203] EXT4-fs error (device loop6): ext4_validate_block_bitmap:438: comm syz.6.10641: bg 0: block 248: padding at end of block bitmap is not set [ 2506.287023][ T4203] EXT4-fs error (device loop6): ext4_acquire_dquot:6789: comm syz.6.10641: Failed to acquire dquot type 1 [ 2506.303327][ T4203] EXT4-fs (loop6): 1 truncate cleaned up [ 2506.310767][ T4203] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 2506.393706][ T4205] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2506.457996][T29348] EXT4-fs (loop4): unmounting filesystem. [ 2506.529967][ T4205] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2507.277339][T31743] EXT4-fs (loop6): unmounting filesystem. [ 2507.317032][ T422] pl2303 9-1:1.137: required interrupt-in endpoint missing [ 2507.328600][ T422] usb 9-1: USB disconnect, device number 58 [ 2507.371442][ T4216] loop4: detected capacity change from 0 to 512 [ 2507.378635][ T4216] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 2507.419957][ T4216] EXT4-fs (loop4): orphan cleanup on readonly fs [ 2507.427086][ T4216] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.10642: bg 0: block 248: padding at end of block bitmap is not set [ 2507.442100][ T4216] EXT4-fs error (device loop4): ext4_acquire_dquot:6789: comm syz.4.10642: Failed to acquire dquot type 1 [ 2507.456633][ T4216] EXT4-fs (loop4): 1 truncate cleaned up [ 2507.462765][ T4216] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 2507.639635][ T4226] loop6: detected capacity change from 0 to 256 [ 2507.648834][ T4226] exfat: Unknown parameter 'aPlow_u000000000000000304' [ 2507.672321][T29588] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 2507.704261][ T4226] loop6: detected capacity change from 0 to 512 [ 2507.742509][ T4226] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 2507.752225][ T4226] ext4 filesystem being mounted at /273/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 2507.760710][ T4220] kvm [4219]: vcpu0, guest rIP: 0x18e ignored wrmsr: 0x11e data 0xff21 [ 2507.793854][ T4220] kvm [4219]: vcpu0, guest rIP: 0x1b8 ignored wrmsr: 0x11e data 0xff21 [ 2507.823879][ T4220] kvm [4219]: vcpu0, guest rIP: 0x18e vmx_set_msr: BTF|LBR in IA32_DEBUGCTLMSR 0xff13, nop [ 2507.838565][ T4220] kvm [4219]: vcpu0, guest rIP: 0x18e vmx_set_msr: BTF|LBR in IA32_DEBUGCTLMSR 0xff51, nop [ 2507.854970][ T4220] kvm [4219]: vcpu0, guest rIP: 0x18e vmx_set_msr: BTF|LBR in IA32_DEBUGCTLMSR 0xff13, nop [ 2507.868765][ T4220] kvm [4219]: vcpu0, guest rIP: 0x18e vmx_set_msr: BTF|LBR in IA32_DEBUGCTLMSR 0xff13, nop [ 2507.886148][ T4220] kvm [4219]: vcpu0, guest rIP: 0x18e vmx_set_msr: BTF|LBR in IA32_DEBUGCTLMSR 0xff13, nop [ 2507.896699][T30014] EXT4-fs (loop9): unmounting filesystem. [ 2508.906757][ T4220] kvm [4219]: vcpu0, guest rIP: 0x18e vmx_set_msr: BTF|LBR in IA32_DEBUGCTLMSR 0xff13, nop [ 2508.947325][T29348] EXT4-fs (loop4): unmounting filesystem. [ 2508.995951][T31743] EXT4-fs (loop6): unmounting filesystem. [ 2509.052697][ T4244] loop8: detected capacity change from 0 to 512 [ 2509.063045][ T4244] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 2509.221925][ T4244] EXT4-fs (loop8): orphan cleanup on readonly fs [ 2509.231790][ T4244] EXT4-fs error (device loop8): ext4_validate_block_bitmap:438: comm syz.8.10650: bg 0: block 248: padding at end of block bitmap is not set [ 2509.247521][ T4244] EXT4-fs error (device loop8): ext4_acquire_dquot:6789: comm syz.8.10650: Failed to acquire dquot type 1 [ 2509.261060][ T4244] EXT4-fs (loop8): 1 truncate cleaned up [ 2509.268298][ T4244] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 2509.411259][ T4246] loop4: detected capacity change from 0 to 128 [ 2510.145615][ T4250] loop9: detected capacity change from 0 to 512 [ 2510.178861][ T4250] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 2510.199320][T27217] EXT4-fs (loop8): unmounting filesystem. [ 2510.252258][ T28] kauditd_printk_skb: 45 callbacks suppressed [ 2510.252280][ T28] audit: type=1400 audit(1750433820.311:9016): avc: denied { mount } for pid=4243 comm="syz.4.10652" name="/" dev="loop4" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 2510.296885][ T4250] EXT4-fs (loop9): orphan cleanup on readonly fs [ 2510.306342][ T4250] EXT4-fs error (device loop9): ext4_validate_block_bitmap:438: comm syz.9.10654: bg 0: block 248: padding at end of block bitmap is not set [ 2510.322133][ T4250] Quota error (device loop9): write_blk: dquota write failed [ 2510.329663][ T4250] Quota error (device loop9): qtree_write_dquot: Error -117 occurred while creating quota [ 2510.339656][ T4250] EXT4-fs error (device loop9): ext4_acquire_dquot:6789: comm syz.9.10654: Failed to acquire dquot type 1 [ 2510.353273][ T4250] EXT4-fs (loop9): 1 truncate cleaned up [ 2510.360953][ T4250] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 2510.562450][ T28] audit: type=1400 audit(1750433820.621:9017): avc: denied { module_request } for pid=4243 comm="syz.4.10652" kmod="net-pf-0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 2511.229658][ T28] audit: type=1400 audit(1750433821.241:9018): avc: denied { create } for pid=4252 comm="syz.6.10653" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 2511.570342][ T4259] syz.4.10652: attempt to access beyond end of device [ 2511.570342][ T4259] loop4: rw=0, sector=121, nr_sectors = 920 limit=128 [ 2512.734698][ T28] audit: type=1400 audit(1750433821.241:9019): avc: denied { setopt } for pid=4252 comm="syz.6.10653" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 2512.755622][T30014] EXT4-fs (loop9): unmounting filesystem. [ 2512.766027][ T4271] loop5: detected capacity change from 0 to 128 [ 2512.880034][ T4277] loop6: detected capacity change from 0 to 512 [ 2512.889850][ T4277] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 2513.758970][ T4281] syz.5.10656: attempt to access beyond end of device [ 2513.758970][ T4281] loop5: rw=0, sector=121, nr_sectors = 920 limit=128 [ 2513.800020][ T4277] EXT4-fs (loop6): orphan cleanup on readonly fs [ 2513.808846][ T4277] EXT4-fs error (device loop6): ext4_validate_block_bitmap:438: comm syz.6.10659: bg 0: block 248: padding at end of block bitmap is not set [ 2513.824733][ T4277] Quota error (device loop6): write_blk: dquota write failed [ 2513.832384][ T4277] Quota error (device loop6): qtree_write_dquot: Error -117 occurred while creating quota [ 2513.842445][ T4277] EXT4-fs error (device loop6): ext4_acquire_dquot:6789: comm syz.6.10659: Failed to acquire dquot type 1 [ 2513.856286][ T4277] EXT4-fs (loop6): 1 truncate cleaned up [ 2513.862879][ T4277] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 2514.509864][ T4287] loop4: detected capacity change from 0 to 512 [ 2514.558582][ T4287] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 2514.586380][T31743] EXT4-fs (loop6): unmounting filesystem. [ 2514.665457][ T4287] EXT4-fs (loop4): orphan cleanup on readonly fs [ 2514.675025][ T4287] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.10660: bg 0: block 248: padding at end of block bitmap is not set [ 2514.691111][ T4287] Quota error (device loop4): write_blk: dquota write failed [ 2514.698629][ T4287] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 2514.708638][ T4287] EXT4-fs error (device loop4): ext4_acquire_dquot:6789: comm syz.4.10660: Failed to acquire dquot type 1 [ 2514.722419][ T4287] EXT4-fs (loop4): 1 truncate cleaned up [ 2514.729021][ T4287] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 2515.403157][ T4298] loop6: detected capacity change from 0 to 512 [ 2515.426333][ T4298] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 2515.453007][ T4298] EXT4-fs (loop6): orphan cleanup on readonly fs [ 2515.468594][ T4298] EXT4-fs error (device loop6): ext4_validate_block_bitmap:438: comm syz.6.10663: bg 0: block 248: padding at end of block bitmap is not set [ 2515.470317][T29348] EXT4-fs (loop4): unmounting filesystem. [ 2515.502279][ T4298] Quota error (device loop6): write_blk: dquota write failed [ 2515.509829][ T4298] Quota error (device loop6): qtree_write_dquot: Error -117 occurred while creating quota [ 2515.532195][ T4298] EXT4-fs error (device loop6): ext4_acquire_dquot:6789: comm syz.6.10663: Failed to acquire dquot type 1 [ 2515.546820][ T4298] EXT4-fs (loop6): 1 truncate cleaned up [ 2515.552833][ T4298] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 2515.699359][ T4303] loop4: detected capacity change from 0 to 512 [ 2515.711786][ T4303] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 2515.901004][ T4303] EXT4-fs (loop4): orphan cleanup on readonly fs [ 2515.911626][ T4303] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.10664: bg 0: block 248: padding at end of block bitmap is not set [ 2515.934388][ T4303] Quota error (device loop4): write_blk: dquota write failed [ 2515.942106][ T4303] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 2515.952326][ T4303] EXT4-fs error (device loop4): ext4_acquire_dquot:6789: comm syz.4.10664: Failed to acquire dquot type 1 [ 2515.966158][ T4303] EXT4-fs (loop4): 1 truncate cleaned up [ 2515.972765][ T4303] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 2516.767672][ T4310] loop5: detected capacity change from 0 to 512 [ 2516.776899][ T4310] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 2516.832740][T29348] EXT4-fs (loop4): unmounting filesystem. [ 2516.882531][ T4310] EXT4-fs (loop5): orphan cleanup on readonly fs [ 2516.891497][ T4310] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz.5.10666: bg 0: block 248: padding at end of block bitmap is not set [ 2516.906851][ T4310] Quota error (device loop5): write_blk: dquota write failed [ 2516.914425][ T4310] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 2516.924514][ T4310] EXT4-fs error (device loop5): ext4_acquire_dquot:6789: comm syz.5.10666: Failed to acquire dquot type 1 [ 2516.937665][ T4310] EXT4-fs (loop5): 1 truncate cleaned up [ 2516.944145][ T4310] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 2516.998203][T31743] EXT4-fs (loop6): unmounting filesystem. [ 2517.929807][T31476] EXT4-fs (loop5): unmounting filesystem. [ 2520.160690][ T4328] loop5: detected capacity change from 0 to 512 [ 2520.219681][ T4328] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 2520.401396][ T4328] EXT4-fs (loop5): orphan cleanup on readonly fs [ 2520.411330][ T4328] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz.5.10669: bg 0: block 248: padding at end of block bitmap is not set [ 2520.426501][ T4328] Quota error (device loop5): write_blk: dquota write failed [ 2520.434069][ T4328] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 2520.444065][ T4328] EXT4-fs error (device loop5): ext4_acquire_dquot:6789: comm syz.5.10669: Failed to acquire dquot type 1 [ 2520.457769][ T4328] EXT4-fs (loop5): 1 truncate cleaned up [ 2520.465348][ T4328] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 2520.880194][ T28] audit: type=1400 audit(1750433830.941:9020): avc: denied { mount } for pid=4332 comm="syz.6.10672" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 2521.861590][ T28] audit: type=1400 audit(1750433831.041:9021): avc: denied { setopt } for pid=4334 comm="syz.4.10673" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 2521.902425][ T28] audit: type=1326 audit(1750433831.961:9022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4333 comm="syz.9.10671" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f984218e929 code=0x0 [ 2521.926016][T31476] EXT4-fs (loop5): unmounting filesystem. [ 2521.957339][ T28] audit: type=1400 audit(1750433832.011:9023): avc: denied { unmount } for pid=31743 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 2522.384378][ T4350] loop4: detected capacity change from 0 to 512 [ 2522.521506][ T4350] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 2524.149183][ T4361] loop5: detected capacity change from 0 to 512 [ 2524.158631][ T4361] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 2524.186055][ T4350] EXT4-fs (loop4): orphan cleanup on readonly fs [ 2524.195001][ T4350] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.10675: bg 0: block 248: padding at end of block bitmap is not set [ 2524.211406][ T4350] Quota error (device loop4): write_blk: dquota write failed [ 2524.219026][ T4350] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 2524.229058][ T4350] EXT4-fs error (device loop4): ext4_acquire_dquot:6789: comm syz.4.10675: Failed to acquire dquot type 1 [ 2524.242856][ T4350] EXT4-fs (loop4): 1 truncate cleaned up [ 2524.249376][ T4350] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 2524.371001][ T4361] EXT4-fs (loop5): orphan cleanup on readonly fs [ 2524.380790][ T4361] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz.5.10676: bg 0: block 248: padding at end of block bitmap is not set [ 2524.396945][ T4361] Quota error (device loop5): write_blk: dquota write failed [ 2524.404459][ T4361] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 2524.414395][ T4361] EXT4-fs error (device loop5): ext4_acquire_dquot:6789: comm syz.5.10676: Failed to acquire dquot type 1 [ 2524.431749][ T4361] EXT4-fs (loop5): 1 truncate cleaned up [ 2525.319578][T29348] EXT4-fs (loop4): unmounting filesystem. [ 2525.325625][ T4361] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 2525.347901][ T28] audit: type=1400 audit(1750433835.401:9024): avc: denied { create } for pid=4365 comm="syz.6.10680" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 2525.368040][T31476] EXT4-fs (loop5): unmounting filesystem. [ 2525.385273][ T28] audit: type=1400 audit(1750433835.441:9025): avc: denied { append } for pid=4367 comm="syz.4.10679" name="001" dev="devtmpfs" ino=164 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 2525.433002][ T4370] device bridge_slave_0 left promiscuous mode [ 2525.451520][ T4370] bridge0: port 1(bridge_slave_0) entered disabled state [ 2525.459535][ T4370] device bridge_slave_1 left promiscuous mode [ 2525.465975][ T4370] bridge0: port 2(bridge_slave_1) entered disabled state [ 2525.508204][ T4370] device vlan0 entered promiscuous mode [ 2525.517576][ T4370] tipc: Enabling of bearer rejected, failed to enable media [ 2525.538834][ T4376] netlink: 'syz.6.10680': attribute type 4 has an invalid length. [ 2526.002200][ T28] kauditd_printk_skb: 9 callbacks suppressed [ 2526.002246][ T28] audit: type=1400 audit(1750433836.021:9035): avc: denied { read } for pid=4385 comm="syz.8.10688" name="ppp" dev="devtmpfs" ino=158 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 2526.120727][ T3495] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 2526.128414][ T28] audit: type=1400 audit(1750433836.021:9036): avc: denied { open } for pid=4385 comm="syz.8.10688" path="/dev/ppp" dev="devtmpfs" ino=158 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 2526.159383][ T28] audit: type=1400 audit(1750433836.031:9037): avc: denied { ioctl } for pid=4385 comm="syz.8.10688" path="/dev/ppp" dev="devtmpfs" ino=158 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 2526.339200][ T3495] usb 6-1: Using ep0 maxpacket: 8 [ 2526.345389][ T3495] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 2526.367391][ T3495] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2526.387589][ T3495] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 2526.405283][ T28] audit: type=1400 audit(1750433836.461:9038): avc: denied { create } for pid=4393 comm="syz.9.10691" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 2526.431082][ T3495] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 2526.444340][ T3495] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2526.458341][ T3495] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 2526.468958][ T3495] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2526.676128][ T28] audit: type=1400 audit(1750433836.731:9039): avc: denied { connect } for pid=4406 comm="syz.9.10695" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 2526.709248][ T28] audit: type=1400 audit(1750433836.761:9040): avc: denied { shutdown } for pid=4406 comm="syz.9.10695" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 2526.749688][ T4409] tipc: Started in network mode [ 2526.754276][ T28] audit: type=1400 audit(1750433836.791:9041): avc: denied { create } for pid=4403 comm="syz.6.10694" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 2526.754584][ T4409] tipc: Node identity 7f000001, cluster identity 4711 [ 2526.754609][ T4409] tipc: Enabling of bearer rejected, failed to enable media [ 2526.755239][ T4409] tipc: Enabling of bearer rejected, failed to enable media [ 2526.807674][ T28] audit: type=1400 audit(1750433836.811:9042): avc: denied { ioctl } for pid=4410 comm="syz.8.10696" path="socket:[145731]" dev="sockfs" ino=145731 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 2526.909181][ T28] audit: type=1400 audit(1750433836.951:9043): avc: denied { execute } for pid=4412 comm="syz.8.10697" path="/502/cpu.stat" dev="tmpfs" ino=2789 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 2526.997715][ T28] audit: type=1400 audit(1750433837.051:9044): avc: denied { mount } for pid=4421 comm="syz.9.10700" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 2527.164037][ T4428] overlayfs: './file1' not a directory [ 2528.073196][ T3495] usb 7-1: new full-speed USB device number 24 using dummy_hcd [ 2528.081037][ T793] Bluetooth: hci0: sending frame failed (-49) [ 2528.087129][ T833] Bluetooth: hci0: Opcode 0x1003 failed: -49 [ 2528.280282][ T3495] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2528.298084][ T3495] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2528.318327][ T3495] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2528.333274][ T3495] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2528.341901][ T3495] usb 7-1: Product: syz [ 2528.346253][ T3495] usb 7-1: Manufacturer: syz [ 2528.351171][ T3495] usb 7-1: SerialNumber: syz [ 2528.446504][ T4466] device bridge_slave_0 left promiscuous mode [ 2528.454903][ T4466] bridge0: port 1(bridge_slave_0) entered disabled state [ 2528.462679][T10298] usb 6-1: USB disconnect, device number 36 [ 2528.468877][ T4466] device bridge_slave_1 left promiscuous mode [ 2528.498037][ T4466] bridge0: port 2(bridge_slave_1) entered disabled state [ 2528.846244][ T3495] usb 7-1: 0:2 : does not exist [ 2528.859841][ T3495] usb 7-1: USB disconnect, device number 24 [ 2529.589218][ T422] usb 10-1: new high-speed USB device number 30 using dummy_hcd [ 2529.689172][ T3495] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 2529.829167][ T422] usb 10-1: Using ep0 maxpacket: 32 [ 2529.835464][ T422] usb 10-1: config 0 has an invalid interface number: 1 but max is 0 [ 2529.870285][ T3495] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 2529.880253][ T3495] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 2529.890471][ T3495] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 2529.899190][ T422] usb 10-1: config 0 has no interface number 0 [ 2529.902200][ T3495] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 2529.908241][ T422] usb 10-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 2529.923043][ T4500] netlink: 28 bytes leftover after parsing attributes in process `syz.4.10722'. [ 2529.933601][ T422] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2529.934623][ T3495] usb 6-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 2529.942844][ T422] usb 10-1: Product: syz [ 2529.953241][ T3495] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2529.955849][ T422] usb 10-1: Manufacturer: syz [ 2529.968502][ T422] usb 10-1: SerialNumber: syz [ 2529.977350][ T422] usb 10-1: config 0 descriptor?? [ 2529.980712][ T3495] usb 6-1: config 0 descriptor?? [ 2530.345579][ T3495] usb 10-1: USB disconnect, device number 30 [ 2530.394278][ T4516] netlink: 'syz.8.10729': attribute type 4 has an invalid length. [ 2530.404063][ T4516] netlink: 'syz.8.10729': attribute type 4 has an invalid length. [ 2531.315879][ T28] kauditd_printk_skb: 15 callbacks suppressed [ 2531.315894][ T28] audit: type=1400 audit(1750433841.371:9060): avc: denied { ioctl } for pid=4541 comm="syz.8.10738" path="socket:[145119]" dev="sockfs" ino=145119 ioctlcmd=0x7452 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 2531.469180][ T3495] usb 10-1: new high-speed USB device number 31 using dummy_hcd [ 2531.781680][ T3495] usb 10-1: Using ep0 maxpacket: 16 [ 2531.839923][ T4555] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 2532.127571][ T28] audit: type=1400 audit(1750433841.871:9061): avc: denied { mount } for pid=4552 comm="syz.6.10742" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 2532.150321][ T28] audit: type=1400 audit(1750433841.871:9062): avc: denied { mounton } for pid=4552 comm="syz.6.10742" path="/292/file0" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 2532.154340][ T3495] usb 10-1: config 1 has an invalid interface number: 105 but max is 0 [ 2532.181765][ T3495] usb 10-1: config 1 has no interface number 0 [ 2532.187995][ T3495] usb 10-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 2532.198406][ T3495] usb 10-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 2532.208857][ T3495] usb 10-1: config 1 interface 105 has no altsetting 0 [ 2532.218199][ T3495] usb 10-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 2532.227686][ T3495] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2532.236226][ T3495] usb 10-1: Product: syz [ 2532.246890][ T3495] usb 10-1: Manufacturer: syz [ 2532.251871][ T3495] usb 10-1: SerialNumber: syz [ 2532.257348][ T4539] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 2532.264734][ T4539] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 2532.644725][ T422] usb 6-1: USB disconnect, device number 37 [ 2532.743746][ T4539] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 2532.751156][ T28] audit: type=1400 audit(1750433842.801:9063): avc: denied { getopt } for pid=4562 comm="syz.5.10745" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 2532.762386][ T4539] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 2532.831783][ T28] audit: type=1400 audit(1750433842.841:9064): avc: denied { unmount } for pid=31743 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 2532.852501][ T28] audit: type=1400 audit(1750433842.891:9065): avc: denied { getopt } for pid=4564 comm="syz.5.10747" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 2532.883571][ T28] audit: type=1400 audit(1750433842.891:9066): avc: denied { write } for pid=4566 comm="syz.8.10748" name="loop-control" dev="devtmpfs" ino=117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 2532.909177][ T28] audit: type=1400 audit(1750433842.891:9067): avc: denied { open } for pid=4566 comm="syz.8.10748" path="/dev/loop-control" dev="devtmpfs" ino=117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 2532.957674][ T28] audit: type=1400 audit(1750433842.891:9068): avc: denied { ioctl } for pid=4566 comm="syz.8.10748" path="/dev/loop-control" dev="devtmpfs" ino=117 ioctlcmd=0x4c81 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 2533.245414][ T3495] aqc111 10-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -32 [ 2533.429197][ T422] usb 9-1: new high-speed USB device number 59 using dummy_hcd [ 2533.464379][ T3495] aqc111 10-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 2533.478896][ T3495] aqc111 10-1:1.105 eth1: register 'aqc111' at usb-dummy_hcd.9-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter, 20:fc:94:45:3a:41 [ 2533.494599][ T3495] usb 10-1: USB disconnect, device number 31 [ 2533.501320][ T3495] aqc111 10-1:1.105 eth1: unregister 'aqc111' usb-dummy_hcd.9-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter [ 2533.569659][ T3495] aqc111 10-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 2533.579217][ T3495] aqc111 10-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 2533.588667][ T3495] aqc111 10-1:1.105 eth1 (unregistered): Failed to write(0x61) reg index 0x0000: -19 [ 2533.629180][ T422] usb 9-1: Using ep0 maxpacket: 16 [ 2533.635560][ T422] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2533.646751][ T422] usb 9-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 2533.656270][ T422] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2533.665502][ T422] usb 9-1: config 0 descriptor?? [ 2533.805807][ T28] audit: type=1400 audit(1750433843.861:9069): avc: denied { read } for pid=142 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 2534.426751][ T422] appleir 0003:05AC:8241.0011: unknown main item tag 0x0 [ 2534.433859][ T422] appleir 0003:05AC:8241.0011: unknown main item tag 0x0 [ 2534.488485][ T422] appleir 0003:05AC:8241.0011: unknown main item tag 0x0 [ 2534.559832][ T422] appleir 0003:05AC:8241.0011: unknown main item tag 0x0 [ 2534.756688][ T422] appleir 0003:05AC:8241.0011: unknown main item tag 0x0 [ 2534.809529][ T422] appleir 0003:05AC:8241.0011: No inputs registered, leaving [ 2534.818285][ T422] appleir 0003:05AC:8241.0011: hiddev96,hidraw0: USB HID v0.05 Device [HID 05ac:8241] on usb-dummy_hcd.8-1/input0 [ 2534.831894][ T422] usb 9-1: USB disconnect, device number 59 [ 2534.852530][ T4615] fido_id[4615]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.8/usb9/report_descriptor': No such file or directory [ 2535.497754][ T3495] usb 10-1: new high-speed USB device number 32 using dummy_hcd [ 2536.440237][ T3495] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2536.481840][ T3495] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2536.512556][ T3495] usb 10-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 2536.529217][ T3495] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 2536.537341][ T28] kauditd_printk_skb: 2 callbacks suppressed [ 2536.537355][ T28] audit: type=1400 audit(1750433846.591:9072): avc: denied { sys_module } for pid=4648 comm="syz.6.10775" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 2536.574321][ T3495] usb 10-1: SerialNumber: syz [ 2536.580876][ T28] audit: type=1400 audit(1750433846.591:9073): avc: denied { write } for pid=4648 comm="syz.6.10775" name="ppp" dev="devtmpfs" ino=158 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 2536.638712][ T28] audit: type=1400 audit(1750433846.691:9074): avc: denied { execute_no_trans } for pid=4654 comm="syz.6.10778" path="/302/file2" dev="tmpfs" ino=1692 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 2536.664725][ T28] audit: type=1400 audit(1750433846.701:9075): avc: denied { write } for pid=4654 comm="syz.6.10778" name="msr" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 2536.687831][ T28] audit: type=1400 audit(1750433846.701:9076): avc: denied { mounton } for pid=4654 comm="syz.6.10778" path="/proc/1066/cgroup" dev="proc" ino=147508 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 2536.833395][ T3495] usb 10-1: 0:2 : does not exist [ 2536.855616][ T3495] usb 10-1: unit 2 not found! [ 2537.003177][ T4668] overlayfs: unrecognized mount option "/" or missing value [ 2537.039265][ T28] audit: type=1400 audit(1750433847.051:9077): avc: denied { mount } for pid=4659 comm="syz.4.10779" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 2537.098832][ T3495] usb 10-1: USB disconnect, device number 32 [ 2537.319651][T29588] udevd[29588]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 2537.409268][T10176] usb 9-1: new high-speed USB device number 60 using dummy_hcd [ 2537.425979][ T28] audit: type=1400 audit(1750433847.481:9078): avc: denied { name_bind } for pid=4684 comm="syz.9.10788" src=3618 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 2537.459317][ T28] audit: type=1400 audit(1750433847.501:9079): avc: denied { mount } for pid=4686 comm="syz.9.10789" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 2537.539482][ T28] audit: type=1400 audit(1750433847.501:9080): avc: denied { create } for pid=4686 comm="syz.9.10789" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 2537.584019][ T28] audit: type=1400 audit(1750433847.501:9081): avc: denied { setopt } for pid=4686 comm="syz.9.10789" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 2537.642895][T10176] usb 9-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0x68, skipping [ 2537.658035][ T422] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 2537.702577][T10176] usb 9-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2537.727855][T10176] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 2537.737082][T10176] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 2537.745218][T10176] usb 9-1: Product: syz [ 2537.870286][ T4699] overlayfs: unrecognized mount option "/" or missing value [ 2537.886491][ T422] usb 6-1: Using ep0 maxpacket: 32 [ 2537.894909][ T422] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2537.977887][T10176] usb 9-1: Manufacturer: syz [ 2537.982595][T10176] usb 9-1: SerialNumber: syz [ 2537.989209][ T4670] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 2538.012909][ T422] usb 6-1: New USB device found, idVendor=044f, idProduct=b324, bcdDevice= 0.00 [ 2538.031049][ T422] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2538.054570][ T422] usb 6-1: config 0 descriptor?? [ 2538.166955][ T4710] netlink: 48 bytes leftover after parsing attributes in process `syz.6.10798'. [ 2538.214606][ T4714] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 2538.231321][ T4714] pit: kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 2538.240057][ T4714] pit: kvm: requested 12571 ns i8254 timer period limited to 200000 ns [ 2538.248420][ T4714] pit: kvm: requested 12571 ns i8254 timer period limited to 200000 ns [ 2538.257122][ T4714] pit: kvm: requested 85485 ns i8254 timer period limited to 200000 ns [ 2538.265603][ T4714] pit: kvm: requested 93028 ns i8254 timer period limited to 200000 ns [ 2538.274515][ T4714] pit: kvm: requested 7542 ns i8254 timer period limited to 200000 ns [ 2538.283225][ T4714] pit: kvm: requested 10057 ns i8254 timer period limited to 200000 ns [ 2538.480548][ T422] thrustmaster 0003:044F:B324.0012: unknown main item tag 0x0 [ 2538.488143][ T422] thrustmaster 0003:044F:B324.0012: unknown main item tag 0x0 [ 2538.496399][ T422] thrustmaster 0003:044F:B324.0012: unknown main item tag 0x0 [ 2538.504602][ T422] thrustmaster 0003:044F:B324.0012: unknown main item tag 0x0 [ 2538.512434][ T422] thrustmaster 0003:044F:B324.0012: unknown main item tag 0x0 [ 2538.522106][ T422] thrustmaster 0003:044F:B324.0012: hidraw0: USB HID v0.05 Device [HID 044f:b324] on usb-dummy_hcd.5-1/input0 [ 2538.533873][ T422] thrustmaster 0003:044F:B324.0012: no inputs found [ 2538.658150][T31743] cgroup: fork rejected by pids controller in /syz6 [ 2538.705909][ T3495] usb 6-1: USB disconnect, device number 38 [ 2538.983813][ T4779] device pim6reg1 entered promiscuous mode [ 2539.007704][ T4776] bridge0: port 1(bridge_slave_0) entered blocking state [ 2539.014821][ T4776] bridge0: port 1(bridge_slave_0) entered disabled state [ 2539.022353][ T4776] device bridge_slave_0 entered promiscuous mode [ 2539.029196][ T4776] bridge0: port 2(bridge_slave_1) entered blocking state [ 2539.036251][ T4776] bridge0: port 2(bridge_slave_1) entered disabled state [ 2539.043937][ T4776] device bridge_slave_1 entered promiscuous mode [ 2539.113436][ T4776] bridge0: port 2(bridge_slave_1) entered blocking state [ 2539.120497][ T4776] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2539.127725][ T4776] bridge0: port 1(bridge_slave_0) entered blocking state [ 2539.134756][ T4776] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2539.153540][T27372] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2539.161153][T27372] bridge0: port 1(bridge_slave_0) entered disabled state [ 2539.168375][T27372] bridge0: port 2(bridge_slave_1) entered disabled state [ 2539.186593][T27372] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2539.194941][T27372] bridge0: port 1(bridge_slave_0) entered blocking state [ 2539.201997][T27372] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2539.210678][T27372] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2539.219008][T27372] bridge0: port 2(bridge_slave_1) entered blocking state [ 2539.226274][T27372] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2539.244782][T27372] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2539.253074][T27372] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2539.276100][T27372] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2539.285829][T27372] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2539.294616][T27372] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2539.302370][T27372] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2539.320562][ T4776] device veth0_vlan entered promiscuous mode [ 2539.341782][T27372] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2539.352287][ T4776] device veth1_macvtap entered promiscuous mode [ 2539.361774][T27756] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2539.371977][T27756] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2539.492888][T31194] tipc: Left network mode [ 2539.912549][ T4829] device wg2 entered promiscuous mode [ 2540.145041][ T3495] usb 9-1: USB disconnect, device number 60 [ 2540.173839][T31194] device bridge_slave_1 left promiscuous mode [ 2540.182191][T31194] bridge0: port 2(bridge_slave_1) entered disabled state [ 2540.190598][T31194] device bridge_slave_0 left promiscuous mode [ 2540.196794][T31194] bridge0: port 1(bridge_slave_0) entered disabled state [ 2541.060569][ T4942] device wg2 entered promiscuous mode [ 2541.569204][T30777] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 2541.750602][T30777] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2541.766143][T30777] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 2541.786759][T30777] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2541.795858][T30777] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2541.804091][T30777] usb 6-1: Product: syz [ 2541.808255][T30777] usb 6-1: Manufacturer: syz [ 2541.813031][T30777] usb 6-1: SerialNumber: syz [ 2542.030081][ T4982] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 2542.131092][ T5137] device pim6reg1 entered promiscuous mode [ 2542.316817][ T5177] overlayfs: failed to clone upperpath [ 2542.325613][ T5177] overlayfs: './file1' not a directory [ 2542.641670][ T4982] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 2542.944245][T30777] cdc_mbim 6-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 2542.950913][T30777] cdc_mbim 6-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 2542.963396][T30777] cdc_mbim 6-1:1.0: setting rx_max = 2048 [ 2543.118836][T30777] cdc_mbim 6-1:1.0: setting tx_max = 184 [ 2543.185296][ T5250] netlink: 'syz.8.11033': attribute type 4 has an invalid length. [ 2543.587640][T30777] cdc_mbim 6-1:1.0: cdc-wdm0: USB WDM device [ 2543.597516][T30777] cdc_mbim 6-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.5-1, CDC MBIM, 42:42:42:42:42:42 [ 2543.610982][T30777] usb 6-1: USB disconnect, device number 39 [ 2543.618986][ T28] kauditd_printk_skb: 10 callbacks suppressed [ 2543.619000][ T28] audit: type=1400 audit(1750433853.671:9092): avc: denied { search } for pid=142 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2543.647946][T30777] cdc_mbim 6-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.5-1, CDC MBIM [ 2543.662194][ T28] audit: type=1400 audit(1750433853.671:9093): avc: denied { read } for pid=142 comm="dhcpcd" name="n17" dev="tmpfs" ino=68504 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 2543.689273][ T28] audit: type=1400 audit(1750433853.671:9094): avc: denied { open } for pid=142 comm="dhcpcd" path="/run/udev/data/n17" dev="tmpfs" ino=68504 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 2543.768419][ T28] audit: type=1400 audit(1750433853.671:9095): avc: denied { getattr } for pid=142 comm="dhcpcd" path="/run/udev/data/n17" dev="tmpfs" ino=68504 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 2543.811394][ T5281] overlayfs: failed to clone upperpath [ 2543.819819][ T28] audit: type=1400 audit(1750433853.811:9096): avc: denied { read } for pid=5268 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=494 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2543.852410][ T28] audit: type=1400 audit(1750433853.811:9097): avc: denied { open } for pid=5268 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=494 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2543.881055][ T5281] overlayfs: './file1' not a directory [ 2543.894856][ T28] audit: type=1400 audit(1750433853.811:9098): avc: denied { getattr } for pid=5268 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=494 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2543.948128][ T28] audit: type=1400 audit(1750433853.871:9099): avc: denied { write } for pid=5263 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=493 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2543.983772][ T28] audit: type=1400 audit(1750433853.871:9100): avc: denied { add_name } for pid=5263 comm="dhcpcd-run-hook" name="resolv.conf.wwan0.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2544.017791][ T28] audit: type=1400 audit(1750433853.871:9101): avc: denied { create } for pid=5263 comm="dhcpcd-run-hook" name="resolv.conf.wwan0.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 2544.165857][ T5340] netlink: 'syz.6.11062': attribute type 4 has an invalid length. [ 2544.331847][ T5374] netlink: 'syz.6.11078': attribute type 4 has an invalid length. [ 2544.728627][ T5397] netlink: 'syz.9.11091': attribute type 4 has an invalid length. [ 2545.867122][ T5483] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 2545.885722][ T5483] device bridge_slave_0 left promiscuous mode [ 2545.900179][ T5483] bridge0: port 1(bridge_slave_0) entered disabled state [ 2545.928881][ T5483] device bridge_slave_1 left promiscuous mode [ 2545.935195][ T5483] bridge0: port 2(bridge_slave_1) entered disabled state [ 2546.301621][ T5517] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 2547.186412][ T5582] overlayfs: './file1' not a directory [ 2548.030719][ T5687] device wg2 left promiscuous mode [ 2548.044521][ T5687] device wg2 entered promiscuous mode [ 2549.555222][ T5741] device pim6reg1 entered promiscuous mode [ 2549.726241][ T5763] netlink: 'syz.4.11245': attribute type 4 has an invalid length. [ 2550.562081][ T5848] device pim6reg1 entered promiscuous mode [ 2550.705746][ T5874] overlayfs: failed to clone upperpath [ 2551.218565][ T5907] overlayfs: failed to clone upperpath [ 2551.261785][ T5896] bridge0: port 1(bridge_slave_0) entered blocking state [ 2551.278083][ T5896] bridge0: port 1(bridge_slave_0) entered disabled state [ 2551.286449][ T5896] device bridge_slave_0 entered promiscuous mode [ 2551.297633][ T5896] bridge0: port 2(bridge_slave_1) entered blocking state [ 2551.305857][ T5896] bridge0: port 2(bridge_slave_1) entered disabled state [ 2551.313409][ T5896] device bridge_slave_1 entered promiscuous mode [ 2551.372295][ T5940] overlayfs: failed to clone upperpath [ 2551.456862][ T5896] bridge0: port 2(bridge_slave_1) entered blocking state [ 2551.464052][ T5896] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2551.471354][ T5896] bridge0: port 1(bridge_slave_0) entered blocking state [ 2551.478396][ T5896] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2551.517437][T27756] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2551.525735][T27756] bridge0: port 1(bridge_slave_0) entered disabled state [ 2551.527142][ T5966] overlayfs: failed to clone upperpath [ 2551.538624][T27756] bridge0: port 2(bridge_slave_1) entered disabled state [ 2551.561386][T27756] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2551.570194][T27756] bridge0: port 1(bridge_slave_0) entered blocking state [ 2551.577232][T27756] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2551.594839][T27756] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2551.603609][T27756] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2551.612341][T27756] bridge0: port 2(bridge_slave_1) entered blocking state [ 2551.619405][T27756] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2551.667713][T27372] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2551.684093][T27372] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2551.721419][T27372] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2551.736450][T27372] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2551.752388][ T304] device bridge_slave_1 left promiscuous mode [ 2551.776820][ T304] bridge0: port 2(bridge_slave_1) entered disabled state [ 2551.790256][ T304] device bridge_slave_0 left promiscuous mode [ 2551.797050][ T304] bridge0: port 1(bridge_slave_0) entered disabled state [ 2552.318588][T31194] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2552.327098][T31194] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2552.365623][ T5896] device veth0_vlan entered promiscuous mode [ 2552.380362][T31194] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2552.388756][T31194] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2552.405153][T31194] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2552.413030][T31194] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2552.427742][T31194] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2552.436260][T31194] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2552.445676][ T5896] device veth1_macvtap entered promiscuous mode [ 2552.592566][T27372] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2552.750066][ T3309] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2552.762818][ T3309] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2552.787764][ T3309] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2552.805059][ T3309] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2553.016384][ T6102] device veth0_to_bridge entered promiscuous mode [ 2554.308663][ T6287] device wg2 entered promiscuous mode [ 2554.330391][ T6279] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 2555.056563][ T6399] bridge0: port 1(bridge_slave_0) entered blocking state [ 2555.079126][ T6399] bridge0: port 1(bridge_slave_0) entered disabled state [ 2555.092757][ T6399] device bridge_slave_0 entered promiscuous mode [ 2555.107567][ T6399] bridge0: port 2(bridge_slave_1) entered blocking state [ 2555.115069][ T6399] bridge0: port 2(bridge_slave_1) entered disabled state [ 2555.122680][ T6399] device bridge_slave_1 entered promiscuous mode [ 2555.216116][ T6399] bridge0: port 2(bridge_slave_1) entered blocking state [ 2555.223245][ T6399] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2555.230574][ T6399] bridge0: port 1(bridge_slave_0) entered blocking state [ 2555.237958][ T6399] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2555.298338][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2555.308000][ T4237] bridge0: port 1(bridge_slave_0) entered disabled state [ 2555.334716][ T4237] bridge0: port 2(bridge_slave_1) entered disabled state [ 2555.362806][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2555.374009][ T4237] bridge0: port 1(bridge_slave_0) entered blocking state [ 2555.381090][ T4237] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2555.388985][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2555.399380][ T4237] bridge0: port 2(bridge_slave_1) entered blocking state [ 2555.406439][ T4237] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2555.414370][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2555.422428][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2555.443647][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2555.518369][ T6483] netlink: 'syz.5.11571': attribute type 4 has an invalid length. [ 2555.729659][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2555.739790][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2555.748793][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2555.757511][ T6399] device veth0_vlan entered promiscuous mode [ 2555.787594][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2555.815327][ T6399] device veth1_macvtap entered promiscuous mode [ 2555.827341][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2555.847980][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2556.746721][ T6576] overlayfs: failed to clone upperpath [ 2556.756846][ T6575] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 2556.784803][ T6575] device bridge_slave_0 left promiscuous mode [ 2556.791357][ T6575] bridge0: port 1(bridge_slave_0) entered disabled state [ 2556.801296][ T6575] device bridge_slave_1 left promiscuous mode [ 2556.816381][ T6575] bridge0: port 2(bridge_slave_1) entered disabled state [ 2556.956792][ T6602] device wg2 left promiscuous mode [ 2558.616023][ T6748] device wg2 entered promiscuous mode [ 2558.658802][ T6742] bridge0: port 1(bridge_slave_0) entered blocking state [ 2558.671469][ T6742] bridge0: port 1(bridge_slave_0) entered disabled state [ 2558.680115][ T6742] device bridge_slave_0 entered promiscuous mode [ 2558.713729][ T6742] bridge0: port 2(bridge_slave_1) entered blocking state [ 2558.730773][ T6742] bridge0: port 2(bridge_slave_1) entered disabled state [ 2558.739285][ T6742] device bridge_slave_1 entered promiscuous mode [ 2558.896663][ T6742] bridge0: port 2(bridge_slave_1) entered blocking state [ 2558.903734][ T6742] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2558.911038][ T6742] bridge0: port 1(bridge_slave_0) entered blocking state [ 2558.918080][ T6742] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2559.308619][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2559.316651][ T304] bridge0: port 1(bridge_slave_0) entered disabled state [ 2559.328606][ T304] bridge0: port 2(bridge_slave_1) entered disabled state [ 2559.367169][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2559.377936][ T304] bridge0: port 1(bridge_slave_0) entered blocking state [ 2559.385007][ T304] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2559.394163][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2559.404510][ T304] bridge0: port 2(bridge_slave_1) entered blocking state [ 2559.411578][ T304] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2559.431485][T31194] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2559.443040][T31194] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2559.471438][T31194] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2559.488719][T31194] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2559.498773][T31194] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2559.506997][T31194] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2559.536385][ T6742] device veth0_vlan entered promiscuous mode [ 2559.566898][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2559.576665][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2559.592550][ T6742] device veth1_macvtap entered promiscuous mode [ 2559.613273][ T3309] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2559.627151][ T3309] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2559.637842][ T3309] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2559.660327][ T3309] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2559.666425][ T6892] overlayfs: missing 'lowerdir' [ 2559.670204][ T3309] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2559.804011][ T6920] overlayfs: missing 'lowerdir' [ 2559.892617][ T6933] device wg2 entered promiscuous mode [ 2559.984574][ T6952] overlayfs: missing 'lowerdir' [ 2560.142566][ T6987] overlayfs: missing 'lowerdir' [ 2560.159664][ T6991] device wg2 left promiscuous mode [ 2560.172014][ T6991] device wg2 entered promiscuous mode [ 2560.327947][ T7026] overlayfs: missing 'lowerdir' [ 2560.823311][ T7067] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 2560.833771][ T7067] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 2560.914705][ T7082] device wg2 left promiscuous mode [ 2560.924552][ T7082] device wg2 entered promiscuous mode [ 2560.994896][ T7099] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 2561.003755][ T7099] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 2561.314222][ T7116] device wg2 left promiscuous mode [ 2561.323319][ T7116] device wg2 entered promiscuous mode [ 2561.382306][ T7133] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 2561.391450][ T7133] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 2561.492440][ T7137] device bridge_slave_0 left promiscuous mode [ 2561.498688][ T7137] bridge0: port 1(bridge_slave_0) entered disabled state [ 2561.506603][ T7137] device bridge_slave_1 left promiscuous mode [ 2561.513255][ T7137] bridge0: port 2(bridge_slave_1) entered disabled state [ 2661.639068][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 2661.646032][ C1] (detected by 1, t=10002 jiffies, g=192325, q=639 ncpus=2) [ 2661.653402][ C1] rcu: All QSes seen, last rcu_preempt kthread activity 10003 (4295203383-4295193380), jiffies_till_next_fqs=1, root ->qsmask 0x0 [ 2661.666762][ C1] rcu: rcu_preempt kthread starved for 10004 jiffies! g192325 f0x2 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 2661.678030][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 2661.688070][ C1] rcu: RCU grace-period kthread stack dump: [ 2661.693942][ C1] task:rcu_preempt state:R running task stack:28064 pid:14 ppid:2 flags:0x00004000 [ 2661.704717][ C1] Call Trace: [ 2661.707987][ C1] [ 2661.710909][ C1] __schedule+0xb87/0x14e0 [ 2661.715328][ C1] ? release_firmware_map_entry+0x194/0x194 [ 2661.721389][ C1] ? __mod_timer+0x7ae/0xb30 [ 2661.725975][ C1] schedule+0xbd/0x170 [ 2661.730036][ C1] schedule_timeout+0x12c/0x2e0 [ 2661.734889][ C1] ? __cfi_schedule_timeout+0x10/0x10 [ 2661.740267][ C1] ? _raw_spin_lock_irqsave+0xb0/0x110 [ 2661.745733][ C1] ? __cfi_process_timeout+0x10/0x10 [ 2661.751021][ C1] ? prepare_to_swait_event+0x308/0x320 [ 2661.756570][ C1] rcu_gp_fqs_loop+0x2d8/0x10a0 [ 2661.761419][ C1] ? rcu_gp_init+0xf10/0xf10 [ 2661.766012][ C1] rcu_gp_kthread+0x95/0x370 [ 2661.770598][ C1] ? __cfi_rcu_gp_kthread+0x10/0x10 [ 2661.775793][ C1] ? __kasan_check_read+0x11/0x20 [ 2661.780814][ C1] ? __kthread_parkme+0x142/0x180 [ 2661.785835][ C1] kthread+0x281/0x320 [ 2661.789894][ C1] ? __cfi_rcu_gp_kthread+0x10/0x10 [ 2661.795087][ C1] ? __cfi_kthread+0x10/0x10 [ 2661.799666][ C1] ret_from_fork+0x1f/0x30 [ 2661.804084][ C1] [ 2661.807101][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 2661.813409][ C1] Sending NMI from CPU 1 to CPUs 0: [ 2661.818611][ C0] NMI backtrace for cpu 0 [ 2661.818622][ C0] CPU: 0 PID: 7108 Comm: syz.6.11836 Not tainted 6.1.138-syzkaller-00013-gf6c21bc9a693 #0 [ 2661.818640][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 2661.818654][ C0] RIP: 0010:pvclock_clocksource_read+0x1e3/0x710 [ 2661.818682][ C0] Code: b6 04 30 84 c0 0f 85 7c 02 00 00 48 8b 85 68 ff ff ff 42 0f b6 04 30 84 c0 48 8b 55 a8 0f 85 b0 02 00 00 48 8b 45 98 4c 8b 28 <48> 8b 85 70 ff ff ff 42 0f b6 04 30 84 c0 0f 85 e5 02 00 00 0f b6 [ 2661.818695][ C0] RSP: 0018:ffffc90000007d40 EFLAGS: 00000046 [ 2661.818709][ C0] RAX: ffffffff87964010 RBX: ffffc90000007e80 RCX: 0000000000000001 [ 2661.818725][ C0] RDX: 1ffffffff0f2c800 RSI: ffffffff8796401c RDI: ffffffff87964000 [ 2661.818736][ C0] RBP: ffffc90000007e10 R08: ffffffff87964008 R09: ffffffff87964018 [ 2661.818747][ C0] R10: ffffffff87964003 R11: 1ffffffff0f2c800 R12: 00000000e8b64f3a [ 2661.818758][ C0] R13: 0000000014bed6fb R14: dffffc0000000000 R15: 0000026c4b9e37e7 [ 2661.818769][ C0] FS: 00007f562efff6c0(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 2661.818783][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2661.818793][ C0] CR2: 000000110c3172c5 CR3: 000000012034d000 CR4: 00000000003506b0 [ 2661.818807][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 2661.818816][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 2661.818825][ C0] Call Trace: [ 2661.818829][ C0] [ 2661.818839][ C0] kvm_sched_clock_read+0x18/0x40 [ 2661.818858][ C0] sched_clock+0x9/0x10 [ 2661.818874][ C0] sched_clock_cpu+0x6e/0x250 [ 2661.818890][ C0] ? __cfi_sched_clock_cpu+0x10/0x10 [ 2661.818905][ C0] ? _raw_spin_unlock_irqrestore+0x5a/0x80 [ 2661.818926][ C0] irqtime_account_irq+0x75/0x240 [ 2661.818945][ C0] handle_softirqs+0x543/0x600 [ 2661.818962][ C0] __do_softirq+0xb/0xd [ 2661.818977][ C0] do_softirq+0xc6/0x120 [ 2661.818990][ C0] [ 2661.818994][ C0] [ 2661.819000][ C0] ? __cfi_do_softirq+0x10/0x10 [ 2661.819013][ C0] ? __this_cpu_preempt_check+0x13/0x20 [ 2661.819033][ C0] __local_bh_enable_ip+0x75/0x80 [ 2661.819050][ C0] copy_fpstate_to_sigframe+0x403/0xaa0 [ 2661.819069][ C0] ? copy_fpstate_to_sigframe+0x17c/0xaa0 [ 2661.819086][ C0] ? __cfi_copy_fpstate_to_sigframe+0x10/0x10 [ 2661.819103][ C0] ? memcpy+0x56/0x70 [ 2661.819122][ C0] ? _raw_spin_unlock_irq+0x4d/0x70 [ 2661.819140][ C0] ? get_signal+0x124b/0x1520 [ 2661.819161][ C0] ? fpu__alloc_mathframe+0xb3/0x130 [ 2661.819177][ C0] arch_do_signal_or_restart+0x5bd/0x1030 [ 2661.819197][ C0] ? __cfi___x64_sys_rt_sigreturn+0x10/0x10 [ 2661.819215][ C0] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 2661.819236][ C0] exit_to_user_mode_loop+0x7a/0xb0 [ 2661.819250][ C0] exit_to_user_mode_prepare+0x5a/0xa0 [ 2661.819264][ C0] syscall_exit_to_user_mode+0x1a/0x30 [ 2661.819280][ C0] do_syscall_64+0x58/0xa0 [ 2661.819298][ C0] ? clear_bhb_loop+0x15/0x70 [ 2661.819312][ C0] ? clear_bhb_loop+0x15/0x70 [ 2661.819327][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2661.819341][ C0] RIP: 0033:0x7f562f18e929 [ 2661.819353][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2661.819365][ C0] RSP: 002b:00007f562efff0e8 EFLAGS: 00000246 [ 2661.819376][ C0] RAX: fffffffffffffffc RBX: 00007f562f3b6088 RCX: 00007f562f18e929 [ 2661.819387][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f562f3b6088 [ 2661.819396][ C0] RBP: 00007f562f3b6080 R08: 0000000000000000 R09: 0000000000000000 [ 2661.819406][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f562f3b608c [ 2661.819416][ C0] R13: 0000000000000000 R14: 00007ffd289cc600 R15: 00007ffd289cc6e8 [ 2661.819428][ C0] [ 2865.898999][ C0] BUG: workqueue lockup - pool cpus=0 node=0 flags=0x0 nice=0 stuck for 304s! [ 2865.907926][ C0] BUG: workqueue lockup - pool cpus=1 node=0 flags=0x0 nice=0 stuck for 304s! [ 2865.916943][ C0] Showing busy workqueues and worker pools: [ 2865.922834][ C0] workqueue events: flags=0x0 [ 2865.927507][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=4/256 refcnt=5 [ 2865.927547][ C0] in-flight: 6554:cpu_map_kthread_stop, 422:cpu_map_kthread_stop [ 2865.927604][ C0] pending: psi_avgs_work, rht_deferred_worker [ 2865.927642][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=7/256 refcnt=8 [ 2865.927675][ C0] in-flight: 5074:cpu_map_kthread_stop, 10298:fqdir_free_fn [ 2865.927725][ C0] pending: vmstat_shepherd, kfree_rcu_monitor, rht_deferred_worker, rht_deferred_worker, rht_deferred_worker [ 2865.927807][ C0] workqueue events_long: flags=0x0 [ 2865.982081][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=4/256 refcnt=5 [ 2865.982129][ C0] pending: br_multicast_gc_work, br_fdb_cleanup, br_fdb_cleanup, br_fdb_cleanup [ 2865.982211][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=4/256 refcnt=5 [ 2865.982249][ C0] pending: br_multicast_gc_work, br_multicast_gc_work, br_multicast_gc_work, br_fdb_cleanup [ 2865.982335][ C0] workqueue events_unbound: flags=0x2 [ 2866.022787][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=3/512 refcnt=5 [ 2866.022824][ C0] pending: fsnotify_mark_destroy_workfn, toggle_allocation_gate, flush_memcg_stats_dwork [ 2866.022892][ C0] workqueue events_power_efficient: flags=0x80 [ 2866.046369][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=7/256 refcnt=8 [ 2866.046410][ C0] pending: wg_ratelimiter_gc_entries, neigh_managed_work, neigh_managed_work, neigh_periodic_work, neigh_periodic_work, gc_worker, check_lifetime [ 2866.046523][ C0] workqueue rcu_gp: flags=0x8 [ 2866.073926][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 2866.073970][ C0] pending: process_srcu [ 2866.073998][ C0] workqueue netns: flags=0xe000a [ 2866.091031][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/1 refcnt=4 [ 2866.091064][ C0] in-flight: 27756:cleanup_net [ 2866.091096][ C0] inactive: cleanup_net [ 2866.091117][ C0] workqueue mm_percpu_wq: flags=0x8 [ 2866.112923][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 2866.112969][ C0] pending: vmstat_update [ 2866.113001][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 2866.113035][ C0] pending: vmstat_update [ 2866.113077][ C0] workqueue writeback: flags=0x4a [ 2866.142530][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/256 refcnt=3 [ 2866.142576][ C0] pending: wb_workfn [ 2866.142667][ C0] workqueue dm_bufio_cache: flags=0x8 [ 2866.159467][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 2866.159514][ C0] pending: work_fn [ 2866.159547][ C0] workqueue mld: flags=0x40008 [ 2866.176122][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/1 refcnt=9 [ 2866.176170][ C0] pending: mld_dad_work [ 2866.176343][ C0] inactive: mld_dad_work, mld_dad_work, mld_dad_work, mld_dad_work, mld_dad_work, mld_dad_work, mld_dad_work [ 2866.176555][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/1 refcnt=3 [ 2866.176594][ C0] pending: mld_dad_work [ 2866.176623][ C0] inactive: mld_dad_work [ 2866.176649][ C0] workqueue ipv6_addrconf: flags=0x40008 [ 2866.222729][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/1 refcnt=5 [ 2866.222777][ C0] pending: addrconf_verify_work [ 2866.222810][ C0] inactive: addrconf_verify_work, addrconf_verify_work, addrconf_verify_work [ 2866.222877][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/1 refcnt=5 [ 2866.222914][ C0] pending: addrconf_verify_work [ 2866.222942][ C0] inactive: addrconf_verify_work, addrconf_verify_work, addrconf_verify_work [ 2866.223024][ C0] workqueue wg-kex-wg2: flags=0x6 [ 2866.271468][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=2/256 refcnt=4 [ 2866.271507][ C0] pending: wg_packet_handshake_send_worker, wg_packet_handshake_send_worker [ 2866.271576][ C0] workqueue wg-kex-wg2: flags=0x6 [ 2866.292775][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=2/256 refcnt=4 [ 2866.292815][ C0] pending: wg_packet_handshake_send_worker, wg_packet_handshake_send_worker [ 2866.292885][ C0] workqueue wg-kex-wg0: flags=0x6 [ 2866.314121][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/256 refcnt=3 [ 2866.314165][ C0] pending: wg_packet_handshake_send_worker [ 2866.314205][ C0] workqueue wg-crypt-wg0: flags=0x28 [ 2866.332815][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 2866.332859][ C0] pending: wg_packet_encrypt_worker [ 2866.332896][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 2866.332931][ C0] pending: wg_packet_encrypt_worker [ 2866.332965][ C0] workqueue wg-kex-wg1: flags=0x6 [ 2866.364264][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/256 refcnt=3 [ 2866.364305][ C0] pending: wg_packet_handshake_send_worker [ 2866.364342][ C0] workqueue wg-crypt-wg1: flags=0x28 [ 2866.382954][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 2866.383007][ C0] pending: wg_packet_encrypt_worker [ 2866.383046][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 2866.383082][ C0] pending: wg_packet_encrypt_worker [ 2866.383116][ C0] workqueue wg-kex-wg2: flags=0x6 [ 2866.414422][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=2/256 refcnt=4 [ 2866.414463][ C0] pending: wg_packet_handshake_send_worker, wg_packet_handshake_send_worker [ 2866.414527][ C0] workqueue wg-kex-wg0: flags=0x6 [ 2866.435904][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=2/256 refcnt=4 [ 2866.435942][ C0] pending: wg_packet_handshake_send_worker, wg_packet_handshake_send_worker [ 2866.436001][ C0] workqueue wg-crypt-wg0: flags=0x28 [ 2866.457474][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 2866.457521][ C0] pending: wg_packet_encrypt_worker [ 2866.457558][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 2866.457595][ C0] pending: wg_packet_encrypt_worker [ 2866.457627][ C0] workqueue wg-kex-wg1: flags=0x6 [ 2866.489028][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=2/256 refcnt=4 [ 2866.489069][ C0] pending: wg_packet_handshake_send_worker, wg_packet_handshake_send_worker [ 2866.489129][ C0] workqueue wg-crypt-wg1: flags=0x28 [ 2866.510595][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 2866.510637][ C0] pending: wg_packet_encrypt_worker [ 2866.510673][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 2866.510708][ C0] pending: wg_packet_encrypt_worker [ 2866.510742][ C0] workqueue wg-kex-wg2: flags=0x6 [ 2866.542053][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/256 refcnt=3 [ 2866.542095][ C0] pending: wg_packet_handshake_send_worker [ 2866.542130][ C0] workqueue wg-crypt-wg2: flags=0x28 [ 2866.560731][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 2866.560773][ C0] pending: wg_packet_encrypt_worker [ 2866.560809][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 2866.560845][ C0] pending: wg_packet_encrypt_worker [ 2866.560880][ C0] workqueue wg-kex-wg0: flags=0x6 [ 2866.592211][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=2/256 refcnt=4 [ 2866.592257][ C0] pending: wg_packet_handshake_send_worker, wg_packet_handshake_send_worker [ 2866.592318][ C0] workqueue wg-crypt-wg0: flags=0x28 [ 2866.613801][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 2866.613850][ C0] pending: wg_packet_encrypt_worker [ 2866.613887][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 2866.613924][ C0] pending: wg_packet_encrypt_worker [ 2866.613957][ C0] workqueue wg-kex-wg1: flags=0x6 [ 2866.645250][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=2/256 refcnt=4 [ 2866.645292][ C0] pending: wg_packet_handshake_send_worker, wg_packet_handshake_send_worker [ 2866.645351][ C0] workqueue wg-crypt-wg1: flags=0x28 [ 2866.666810][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 2866.666854][ C0] pending: wg_packet_encrypt_worker [ 2866.666888][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 2866.666925][ C0] pending: wg_packet_encrypt_worker [ 2866.666958][ C0] workqueue wg-crypt-wg2: flags=0x28 [ 2866.698608][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 2866.698654][ C0] pending: wg_packet_encrypt_worker [ 2866.698688][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 2866.698724][ C0] pending: wg_packet_encrypt_worker [ 2866.698759][ C0] workqueue wg-kex-wg0: flags=0x6 [ 2866.730227][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/256 refcnt=3 [ 2866.730272][ C0] pending: wg_packet_handshake_send_worker [ 2866.730311][ C0] workqueue wg-crypt-wg0: flags=0x28 [ 2866.749181][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 2866.749223][ C0] pending: wg_packet_encrypt_worker [ 2866.749260][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 2866.749296][ C0] pending: wg_packet_encrypt_worker [ 2866.749329][ C0] workqueue wg-kex-wg1: flags=0x6 [ 2866.780649][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/256 refcnt=3 [ 2866.780691][ C0] pending: wg_packet_handshake_send_worker [ 2866.780728][ C0] workqueue wg-crypt-wg1: flags=0x28 [ 2866.799317][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 2866.799358][ C0] pending: wg_packet_encrypt_worker [ 2866.799393][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 2866.799429][ C0] pending: wg_packet_encrypt_worker [ 2866.799467][ C0] workqueue wg-kex-wg2: flags=0x6 [ 2866.830773][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=2/256 refcnt=4 [ 2866.830811][ C0] pending: wg_packet_handshake_send_worker, wg_packet_handshake_send_worker [ 2866.830870][ C0] workqueue wg-crypt-wg2: flags=0x28 [ 2866.852341][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 2866.852385][ C0] pending: wg_packet_encrypt_worker [ 2866.852422][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 2866.852463][ C0] pending: wg_packet_encrypt_worker [ 2866.852498][ C0] pool 0: cpus=0 node=0 flags=0x0 nice=0 hung=305s workers=4 idle: 423 3495 [ 2866.852544][ C0] pool 2: cpus=1 node=0 flags=0x0 nice=0 hung=305s workers=4 idle: 14740 30777 [ 2866.852590][ C0] pool 4: cpus=0-1 flags=0x4 nice=0 hung=305s workers=3 idle: 31194 27372