last executing test programs: 5.892544515s ago: executing program 0 (id=561): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x41, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x800000000003}, 0x1100, 0x5dd8, 0x0, 0x3, 0x0, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001440)={0x11, 0xb, &(0x7f0000000880)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10000, @void, @value}, 0x94) r2 = socket(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000000c0)='./bus\x00', 0x100010e, &(0x7f0000000200)={[{@errors_remount}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x10000}}, {@jqfmt_vfsold}, {@noload}, {@sysvgroups}, {@init_itable}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6}}]}, 0x1, 0x444, &(0x7f0000000780)="$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") r4 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') lseek(r4, 0x10001, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c0000000014"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r7}, 0x10) r8 = syz_open_dev$sg(&(0x7f0000000340), 0x2463, 0x40000) ioctl$SG_GET_VERSION_NUM(r8, 0x2282, &(0x7f0000000480)) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REG(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000005c0)=ANY=[@ANYBLOB="34307bae2fc1385395116afe1740328e709a5ecddca49517aa2a07f23c821b54fb1f4d74ba726d5e12b99f5a262408f64ad07d1df94df05ce3de1e7a1a488f4bc9413338199603b9abcf2f15e92a6e5f20a695efddc2595c3226d1227b2924bbf8b6d34566fb804e89e239cc66d64164c11a08c8c04e73af534ed586de11f044e14b715d8c3d2fee1a1e82934cda792fb44aa26b8c490afa1a4c783c0485af2508faa22f01ec663b665079", @ANYRES16=r10, @ANYBLOB="010027bd7000000000001a0000000700210061610000180022800400008004000080040000800400008004000080"], 0x34}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=@newqdisc={0x78, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x3, 0x0, 0x7ff, 0x1}, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x1e, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0xfffffffc}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) utime(&(0x7f00000002c0)='./file1\x00', &(0x7f0000000300)={0xffffffffffffff7f}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r11, &(0x7f00000004c0)={'#! ', './file0', [], 0xa, "57b858920fd4"}, 0x11) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x2, 0x82, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0xd}, 0x0, 0xa1, 0x0, 0x0, 0x0, 0xfffffffc, 0xfffe, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0x0, 0xffffffffffffffff, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000700)={&(0x7f00000006c0)='xprtrdma_inline_thresh\x00', r12, 0x0, 0x5}, 0x18) syz_open_dev$hidraw(&(0x7f0000000280), 0x2, 0x4002) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) 5.838185215s ago: executing program 1 (id=563): socket$igmp6(0xa, 0x3, 0x2) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, 0x0, 0x0) syz_emit_ethernet(0xbe, &(0x7f0000000000)=ANY=[@ANYBLOB="aaabaaaaaaaa0180c20000000800450000b00000000000119078000000000000000000004e20009c907801000000000000007b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af584cbf2649a50f2dbc43efa8698dfa870300852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424dbcfd56f1373669caaa2f19935e6996c7096ffe3eea4745a8f762b9649a3bfbc1f39cb307b3472eb9cdb042d2643fcbb2c5a57df67d544af6e8dafe09"], 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000016c0)={0x11, 0xb, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)=ANY=[@ANYBLOB="e40000000201010800000000000000000a000000d00001800c000280050001000000000014000180080001000000000008000200000000002c00018014000300ff01000000000000000000000000000114000400ff01000e0000000000000000000000010c00068005000100000000004700028005000100010000000600034000000000060005"], 0xe4}, 0x1, 0x0, 0x0, 0x2048014}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1, 0x0, 0x4}, 0x18) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000100)={0xa, 0x4e22, 0x5ccc6e75}, 0x1f) listen(r3, 0x3) mount$9p_tcp(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="d30f5a2ad993ddd744b641b71ae7cbba67e5cca99f7bbe951aafbe6de6a2aaf51a9b51c014f1460a91d1cc540f8d82007c11b4bccda47a6153e0890b40a1c81e5b53c7ff1efb049c590fab58a888abcf23e11c0df31c015ba98bfd650a6f14de8de0032b059a4bb6c52d69ac1285dc426dad39b6b51375a273a9402d90b6379530ebe2c7c351e0257dfb51c438dd8ae4109063230d53822bc54e693b4b52e09c2ddedd7e87e986e9696aeab537c6a6aa294becbf864f", @ANYRES64=r1]) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f0000000440)=""/183}, 0x20) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0x800}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x8946, &(0x7f0000000080)) ioctl$TCSETSW2(r4, 0x5453, 0x0) ioctl$KDFONTOP_SET_DEF(r4, 0x4b72, 0x0) r6 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$USBDEVFS_IOCTL(r6, 0xc0105512, &(0x7f0000000200)) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f00000000c0), 0xfc, 0x574, &(0x7f0000001980)="$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") bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000d00000000080000000850000006d00"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd, @void, @value}, 0x94) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) write$cgroup_int(r7, &(0x7f0000000000), 0xfffffd26) ioctl$PERF_EVENT_IOC_PERIOD(r7, 0x401c5820, &(0x7f00000001c0)=0x8) 5.44651918s ago: executing program 0 (id=566): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='kfree\x00', r1}, 0x9) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000500)=0xffffffffffffffff, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x20, 0x8, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, r3, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) perf_event_open(0x0, 0x0, 0xffffffffffffffff, r2, 0x8) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'lo\x00'}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) close(r7) socket$inet_udp(0x2, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x0) writev(r6, &(0x7f0000000040)=[{&(0x7f0000000100)="89e7ee2c78dad9b4b473fec988cafb", 0x240}], 0x1) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0) arch_prctl$ARCH_GET_UNTAG_MASK(0x4001, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) r11 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000005c0)='/sys/power/freeze_filesystems', 0x400e80, 0x20) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r12, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000080050005000200000011000300686173683a69702c706f7274"], 0x4c}, 0x1, 0x0, 0x0, 0x40}, 0x2) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000680)={0x2, 0x4, 0x8, 0x1, 0x80, r0, 0x2, '\x00', 0x0, r11, 0x1, 0x5, 0x2, 0x0, @void, @value, @void, @value}, 0x50) sendmsg$IPSET_CMD_ADD(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070084000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) 4.800395079s ago: executing program 0 (id=577): futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000002080)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000010700b800000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1, 0x0, 0xe}, 0x18) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000900000000000000213f0000c50000000e800000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='mmap_lock_acquire_returned\x00', r2}, 0x10) r4 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r3}, 0x8) write$cgroup_int(r4, &(0x7f00000001c0), 0xfffffdef) syz_clone(0xc0001480, 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x2, 0x0, 0x1, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0xfffffffffffffc9d) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0xcc884c1da9a4b356, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1/file3\x00', 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000001100)='./file1/file3\x00', 0xffffffffffffff9c, &(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x84005, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x1, 0x0, 0x2, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x22000000}, 0x3000c010) bind$rds(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x0) syz_open_procfs$namespace(0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000b00)=ANY=[], 0x48) futex(&(0x7f000000cffc)=0x2, 0x3, 0x801, 0x0, &(0x7f0000000040), 0xfffffffc) mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, 0x0, &(0x7f0000000400)=0xfffffffffffffe02) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) 4.800158879s ago: executing program 1 (id=570): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10000) io_uring_enter(0xffffffffffffffff, 0x6252, 0xc09b, 0x0, 0x0, 0x0) mmap(&(0x7f0000a24000/0x3000)=nil, 0x3000, 0x2000007, 0x6031, 0xffffffffffffffff, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r2, 0x400448cc, &(0x7f0000000080)) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000400)='sched_switch\x00', r3}, 0x18) syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') bpf$MAP_CREATE(0x0, 0x0, 0x48) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x100010, 0xffffffffffffffff, 0x0) sendto$packet(0xffffffffffffffff, &(0x7f0000000180), 0x0, 0x0, 0x0, 0x0) unshare(0x8020000) msgget$private(0x0, 0x0) msgsnd(0x0, &(0x7f0000000180)=ANY=[], 0x2000, 0x0) r4 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x0) r6 = openat$cgroup_subtree(r5, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r6, &(0x7f0000000300)=ANY=[@ANYBLOB='-cpu '], 0x5) write$cgroup_subtree(r6, &(0x7f0000000480)={[{0x2b, 'rdma'}]}, 0x6) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x13, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syz_clone(0x100400, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_dev$usbmon(0x0, 0x5, 0x400) 3.971747639s ago: executing program 1 (id=573): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0xfffffffff7ffffe9}, 0x18) prctl$PR_SET_NAME(0xf, &(0x7f0000000240)='ext4\x00') socket$inet_udplite(0x2, 0x2, 0x88) socket(0x10, 0x80002, 0x0) symlink(0x0, 0x0) syz_io_uring_setup(0x109, 0x0, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) r1 = socket$packet(0x11, 0x3, 0x300) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$packet_int(r1, 0x107, 0xf, 0x0, 0x0) 3.863549631s ago: executing program 2 (id=575): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) r2 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) fchdir(r3) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') pread64(r4, &(0x7f0000001c00)=""/4108, 0x100c, 0x3) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r7, 0x0, 0x0, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) r9 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000a00)=@newqdisc={0x68, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r11, {0x0, 0xa}, {0xffff, 0xffff}, {0x6, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x3c, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x4, 0x2, 0x0, 0x0, 0x7, 0x8}, {0x12, 0x3, 0x0, 0x403, 0x8001, 0x400}, 0xa5, 0x4, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}, @TCA_TBF_PBURST={0x8, 0x7, 0x1e1e}]}}]}, 0x68}}, 0x44080) splice(r8, 0x0, r7, 0x0, 0x10000008ebc, 0x2) sendmsg$NL80211_CMD_SET_TID_CONFIG(r6, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b00)={0x24, r5, 0x10ada85e65c25359, 0x70bd2d, 0x8000000, {{0x6b}, {@void, @void}}, [@NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}]}]}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x6000}, 0x4040804) r12 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/vmcoreinfo', 0x2000, 0x0) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) r14 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r14, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000240)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r13], 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x0) r15 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r15, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000000314010000000000000000000900020073797a2f000000000800410072786500140033007465616d5f736c6176655f30"], 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x8844) r16 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r15) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_INTERFACE(r15, &(0x7f0000000640)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x28, r16, 0x2, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r17}, @val={0xc, 0x99, {0x3, 0x6}}}}, [""]}, 0x28}}, 0xc000) sendmsg$NL80211_CMD_GET_SCAN(r12, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r13, 0x300, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r17}, @void}}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x200080d0}, 0x80) 3.767133742s ago: executing program 2 (id=576): unshare(0x2000400) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x109000, 0x0) fsetxattr$system_posix_acl(r0, 0x0, 0x0, 0x0, 0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0xe, 0x7fffffff}]}) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x68, 0xfd, 0x0, 0x0, 0x0, 0x8, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, @perf_config_ext={0x0, 0x6}, 0x2000, 0x0, 0x3, 0x1, 0x1, 0x2, 0x1, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x4, 0x6}, 0x4) r2 = inotify_init() creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) inotify_add_watch(r2, &(0x7f00000004c0)='./file0\x00', 0x8c7) 3.766265932s ago: executing program 3 (id=578): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0xc104, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYRES16=r1], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x81c0, 0x0) r4 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x2, 0x0) ioctl(r4, 0x5451, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, r1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000008c0)={r2, 0xe0, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, &(0x7f0000000400)=[0x0], &(0x7f00000004c0)=[0x0, 0x0, 0x0], 0x0, 0xdb, &(0x7f0000000800)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000500), &(0x7f0000000600), 0x8, 0xb3, 0x8, 0x8, &(0x7f0000000880)}}, 0x10) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x10, &(0x7f0000000580)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [@call={0x85, 0x0, 0x0, 0x2a}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', r6, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r7}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) semtimedop(0x0, 0x0, 0x0, 0x0) syz_emit_ethernet(0xeb, &(0x7f0000000700)={@broadcast, @random="743e961600", @val={@val={0x88a8, 0x2, 0x0, 0x3}, {0x8100, 0x7, 0x0, 0x4}}, {@x25={0x805, {0x2, 0x1, 0xf3, "a57810e87bf5ef3e799d3c186fd8922649c67e1d9e08da2eea76d83a7512224cebf8a1882951ebe46704f74c8544cf3b63fea0974e483afbac783f012e5c567ddbeb1042884b11c25106663d8f3b26768f858c1ab5b64f43baffc68a9efd59625aae2e0c5c9f698abacb632ef8a16179b9ecab24b5d1e8f094e8a1e595ae6f10c22ad41b9cd02d5b9727616158702cf828bb40f95d343406c7a9df1c9d7762353885c23a5a71b7e9871e73f7b0796bd1cc5e7817a48b6b0d2e72662f7b7a6ae77ca08c373db656093c727da2fe450597a34f"}}}}, 0x0) unshare(0x2c040000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000300)='net_dev_start_xmit\x00', r3, 0x0, 0xffffffff80000002}, 0x18) clock_getres(0x0, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) fcntl$lock(r8, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8}) r9 = creat(&(0x7f0000000080)='./file0\x00', 0x1ac) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xa, 0x11, r9, 0xe7e47000) fcntl$lock(r8, 0x26, &(0x7f0000000080)={0x1, 0x0, 0x2007, 0x7}) fcntl$lock(r8, 0x26, &(0x7f0000000280)={0x1, 0x0, 0x2f, 0x9}) fcntl$lock(r8, 0x26, &(0x7f00000000c0)={0x1, 0x2, 0x9, 0x401}) r10 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x37, 0x7fffffff}]}) close_range(r10, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_FIEMAP(r8, 0xc020660b, &(0x7f0000000140)=ANY=[@ANYBLOB="05000000000000000200000000000000000000080600000001000000000000000500000000000000fe000000000000000700"/88]) 3.744671302s ago: executing program 2 (id=579): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)=ANY=[@ANYRES64, @ANYRES8, @ANYRES16, @ANYRESDEC], 0x50) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYRESOCT=r0], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x1e00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f00000008c0), 0x4) bind$inet6(0xffffffffffffffff, &(0x7f0000000f80)={0xa, 0x4, 0x0, @loopback={0x9d}, 0xa7a}, 0x1c) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) pipe2(&(0x7f0000000080), 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f0000000480), 0x400034f, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1b0000000000000000000000008000000000", @ANYRES32, @ANYBLOB='\x00'/19, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000008fc"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={0x0}, 0x18) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xe, &(0x7f0000000300)={[{@noauto_da_alloc}, {@errors_remount}]}, 0x3, 0x445, &(0x7f0000000b00)="$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") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10) mkdir(&(0x7f0000000140)='./control\x00', 0x5) rmdir(&(0x7f0000000100)='./control\x00') socket$xdp(0x2c, 0x3, 0x0) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) 3.662633003s ago: executing program 0 (id=580): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000fbff000000000000001d8500000007000000850000002a00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000640)='f2fs_direct_IO_enter\x00', r0, 0x0, 0x800000000000000}, 0x18) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x123400, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="03000000000000000000"], &(0x7f0000001b80)='syzkaller\x00', 0xfffffffe, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ffc, @void, @value}, 0xfffffffffffffedc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r3, 0x541c, &(0x7f00000000c0)={0x2, {0x2, 0x0, 0x300, 0x0, 0x8, 0x300}}) r4 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000080), 0x1a3302, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007600000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x3a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='xdp_exception\x00', r5}, 0x10) r6 = socket$inet_tcp(0x2, 0x1, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x6, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000fdffffee0000000000000000850000002c00000095"], &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r7, r8}, 0x40) syz_emit_ethernet(0xfdef, &(0x7f0000001b80)=ANY=[@ANYBLOB="4500001400000000942523fc0c2c43cc6f00"], 0x0) capset(&(0x7f0000000100)={0x20071026}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffffb}) ioctl$PTP_ENABLE_PPS(r4, 0x40043d04, 0x0) r9 = openat$selinux_access(0xffffffffffffff9c, &(0x7f0000000600), 0x2, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000008000000000000020000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='ext4_da_reserve_space\x00', r10, 0x0, 0x1fc5}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000100000000000000", @ANYRES32=0x0, @ANYRES32=r4, @ANYBLOB="19"], 0x48) r11 = socket$l2tp6(0xa, 0x2, 0x73) futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, 0x0, 0x0, 0x0) futex(0x0, 0x1, 0x1000000, 0x0, 0x0, 0x1) getsockopt$IP6T_SO_GET_REVISION_TARGET(r11, 0x29, 0x45, &(0x7f0000000380)={'ipvs\x00'}, &(0x7f00000003c0)=0x1e) write$selinux_access(r9, &(0x7f0000000040)=ANY=[@ANYBLOB="73797374656d5f753a6f626a6563745f723a6c645f736f5f7420704a122f7362696e2f6468636c69656e742030"], 0x41) r12 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) setxattr$security_capability(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480), &(0x7f00000004c0)=@v1={0x1000000, [{0x7fff, 0x8}]}, 0xc, 0x1) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r12) 3.564796644s ago: executing program 3 (id=581): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000bc0000000000000000030000850000007b00000095"], &(0x7f0000000080)='syzkaller\x00', 0x5, 0x0, 0x0, 0x41100, 0x6, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0xffffffe7, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000000)={0x0, &(0x7f00000000c0)}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000a40)='ext4_es_lookup_extent_exit\x00', r2, 0x0, 0x6}, 0x18) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r4, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000002c0), 0x4) r5 = socket$rds(0x15, 0x5, 0x0) inotify_init1(0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x3, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) unshare(0x26000600) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) sendmsg$rds(r5, &(0x7f0000000a00)={&(0x7f0000000300)={0x2, 0x4e23, @multicast2}, 0x10, &(0x7f0000000880)=[{&(0x7f0000000380)=""/214, 0xd6}, {&(0x7f0000000640)=""/107, 0x6b}, {&(0x7f0000000480)=""/29, 0x1d}, {&(0x7f0000000740)=""/26, 0x1a}, {&(0x7f0000000780)=""/13, 0xd}, {&(0x7f00000007c0)=""/156, 0x9c}], 0x6, &(0x7f0000000980)=[@fadd={0x58, 0x114, 0x6, {{0x10000}, &(0x7f0000000340)=0x5, &(0x7f0000000a80)=0x3, 0xff, 0x100000001, 0x8000000000000000, 0x7, 0x21}}], 0x58, 0x4004844}, 0x20000000) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x2, &(0x7f00000000c0)=@gcm_256={{0x304}, "7817765dc5914c3d", "c0a9b92b592a8e91a6934cb6b7b18f7a7a6eaa9cbd8ef3b0fbc326100136e976", "58a190f0", "2a1e833e7af32011"}, 0x38) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x2, &(0x7f0000000280)=@gcm_256={{0x304}, "54164ace389ff5c0", "faad50724acb18aba4e3bc654d684ad9c694f3e96ca4b72643dd3689727968e9", "5cb6d054", "29a78ab9b0a4e8ae"}, 0x38) r6 = add_key$user(&(0x7f0000000080), &(0x7f0000000140)={'syz', 0x0}, &(0x7f0000000180)='5', 0x1, 0xfffffffffffffffd) keyctl$KEYCTL_MOVE(0x1e, r6, 0xfffffffffffffffb, 0xffffffffffffffff, 0x1) pipe(&(0x7f0000000280)={0xffffffffffffffff}) splice(r7, 0x0, r7, 0x0, 0x80, 0x0) ioctl$TIOCSSOFTCAR(r7, 0x541a, &(0x7f0000000240)=0x1) kexec_load(0xd5a, 0x0, 0x0, 0x2) signalfd(0xffffffffffffffff, &(0x7f0000000500)={[0x5]}, 0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='kfree\x00', r0, 0x0, 0x3}, 0x18) socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) 2.727988105s ago: executing program 0 (id=582): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x2c) r1 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r1, &(0x7f00000001c0)=@in6={0x21, 0x4000, 0x2, 0x1c, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x3}}, 0x24) r2 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000240), 0x35c, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = syz_open_procfs(0x0, &(0x7f00000005c0)='net/softnet_stat\x00') readv(r3, &(0x7f0000000280)=[{&(0x7f0000000180)=""/193, 0xc1}], 0x1) preadv(r3, &(0x7f0000000300)=[{&(0x7f0000000040)=""/232, 0xe8}], 0x1, 0x64, 0x4000000) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd63"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b80)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000200000000"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @void, @value}, 0x94) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x1300, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) lseek(r2, 0x224c81f6, 0x3) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="e00000027f0000010000000003"], 0x1c) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xc, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r6}, 0x10) syz_emit_ethernet(0x22, &(0x7f0000001b40)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb0800454e001400670000026c90782b000000ebffffff"], 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) writev(r7, &(0x7f00000003c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) r8 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockname(r8, 0x0, &(0x7f0000002ec0)) writev(r7, &(0x7f0000000140)=[{&(0x7f0000000080)="390000001300034700bb5be1c3fbfeff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) syz_mount_image$vfat(&(0x7f0000000ec0), &(0x7f0000000180)='./file2\x00', 0x420c, &(0x7f0000003240)=ANY=[], 0x6, 0x360, &(0x7f0000000b00)="$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") r9 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x105042, 0x40) mmap$IORING_OFF_SQ_RING(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x100000b, 0x13, r9, 0x0) write$cgroup_subtree(r9, &(0x7f0000000000)=ANY=[], 0x32600) 2.613424926s ago: executing program 1 (id=583): unshare(0x2000400) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x109000, 0x0) fsetxattr$system_posix_acl(r0, 0x0, 0x0, 0x0, 0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0xe, 0x7fffffff}]}) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x68, 0xfd, 0x0, 0x0, 0x0, 0x8, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, @perf_config_ext={0x0, 0x6}, 0x2000, 0x0, 0x3, 0x1, 0x1, 0x2, 0x1, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x4, 0x6}, 0x4) inotify_init() 2.612499937s ago: executing program 3 (id=584): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000280)={'wg2\x00'}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000f0000000000000c00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000200b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000200)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r2}, 0x18) r3 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x141341) r4 = socket$packet(0x11, 0x2, 0x300) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000240)={'syz_tun\x00', 0x0}) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x10f5913a8b50ae3, 0x20000000000000aa, &(0x7f0000000600)=ANY=[@ANYRES8=0x0, @ANYRES32=r5, @ANYRES16=r2], &(0x7f0000000640)='syzkaller\x00', 0x4c, 0x0, 0x0, 0x0, 0x4a, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000140)='kmem_cache_free\x00', r8}, 0x18) r9 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r9, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x4f0, 0x340, 0x25, 0x148, 0x0, 0x60, 0x458, 0x2a8, 0x2a8, 0x458, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'geneve0\x00', {0x44, 0x0, 0x9, 0x0, 0x0, 0xffffffff, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x0, 0x6, './file0\x00'}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x6, 'syz0\x00'}}}, {{@ip={@broadcast, @multicast1, 0x0, 0x0, 'veth1_to_bond\x00', 'veth0\x00', {0xff}}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@unspec=@cgroup0={{0x28}, {0x4}}, @common=@unspec=@statistic={{0x38}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x8000, 'syz0\x00', {0x481c}}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x550) bind$packet(r4, &(0x7f0000000300)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @remote}, 0x14) syz_emit_ethernet(0xbe, &(0x7f0000000480)={@local, @broadcast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0xe000, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x4, "6454f2303777d1be218229f20d5be158a1fd353b256e3779f00c06c8989f1fb4", "7f9d0a5a5c0a0cd4ece9511338660eb6a27dc8edc6d7e9614413bf111e87a0f9552a579cd2f5bc5e8cfc9054b47ab9cb", "567297f2337c0a828927e16de16de5437a561d6864f83290b7b8e2ad", {"b583d34250b04e5cec9f8b868d09f4c6", "cf17606f656b6044e98ad982f2fc8771"}}}}}}}, 0x0) ioctl$USBDEVFS_CONTROL(r3, 0xc0185500, &(0x7f00000000c0)={0x80, 0xf, 0x0, 0x3, 0x0, 0xda, 0x0}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)) r10 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x20040000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000340)=@raw=[@map_val={0x18, 0x2, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x4}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0xa, 0x0, 0x0, 0x0, 0x9}, @map_fd={0x18, 0x6, 0x1, 0x0, r1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @map_fd={0x18, 0x6, 0x1, 0x0, r7}, @func={0x85, 0x0, 0x1, 0x0, 0x2}, @map_fd={0x18, 0x7, 0x1, 0x0, r7}], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000180)='kfree\x00', r11}, 0x10) write$selinux_load(r10, &(0x7f0000000200)={0xf97cff8c, 0x8}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x11, 0x80000000, 0x5, 0x7, 0x34021, 0xffffffffffffffff, 0x101, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x3, 0x2, 0x0, @void, @value, @value}, 0x50) r12 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r12, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r13 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r13, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) socket$nl_netfilter(0x10, 0x3, 0xc) 2.553481487s ago: executing program 1 (id=585): open(&(0x7f0000000740)='./bus\x00', 0x143c62, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x8000, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x2, @perf_config_ext={0xf60, 0x40ffffffff}, 0x1100, 0x5, 0x3a65, 0x5, 0x0, 0x1, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0xf08, &(0x7f0000000780)={0x0, 0x826e, 0x40, 0x3, 0xf0}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000), 0x208e24b) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x2, 0x0, 0x0, 0x286ca06bbee933dc, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x15) remap_file_pages(&(0x7f000051c000/0x400000)=nil, 0x400d00, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000640)=[{0x0}], 0x1) syz_clone3(&(0x7f0000000000)={0x285002400, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x46) io_uring_register$IORING_REGISTER_FILES(r0, 0x1e, &(0x7f0000000000)=[r0], 0x1) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f00002c4000/0x2000)=nil, 0x2000, 0x100000a, 0x10010, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) unlink(0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x601c2, 0x0) ftruncate(r3, 0x8800000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff}) fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x41, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8923, &(0x7f0000000000)={'vlan1\x00', @broadcast}) sendfile(r4, r3, 0x0, 0x578410e9) write$cgroup_int(r3, &(0x7f0000000040)=0x5, 0x12) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 2.467462888s ago: executing program 3 (id=586): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020148100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000008c0)={&(0x7f0000000900)='kfree\x00', r0, 0x0, 0x3}, 0x18) request_key(0x0, 0x0, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000180)="c1c56fbf325b9ed0205a4231413c4cfe6cf2bb937809b1ca42da4448c6d7a707331b4f2985ef05d998f2c8394288475a285669e45eb57bdd7bd4f9982c35f83c3afcb459697bf231ee6929270c2f97e0dba222f84cd37f4cd4ef5d8a87d4dc4b0801ccec86f29cc84942eab159c000473fe27e77603b5c7a1552c16a32dc41bc009d0d0e84f392757049db02361a1597d406bfcabeffd59ebd8a0de5f0c24308c97ddd496fcd", 0xa6) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETFLOWTABLE(r2, 0x0, 0x4000800) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r3 = inotify_init1(0x800) r4 = syz_clone(0x80, 0x0, 0x0, 0x0, 0x0, 0x0) renameat2(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x4) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000c00000009"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3, &(0x7f0000000440)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180), &(0x7f0000000280), 0x84, r5}, 0x38) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r6}, 0x10) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000300)={'syztnl1\x00', &(0x7f0000000280)={'tunl0\x00', 0x0, 0x20, 0x0, 0x7, 0x0, {{0x12, 0x4, 0x2, 0x5, 0x48, 0x65, 0x0, 0xfd, 0x4, 0x0, @local, @rand_addr=0x64010100, {[@rr={0x7, 0x7, 0xcb, [@remote]}, @ssrr={0x89, 0xf, 0x13, [@private=0xa010101, @remote, @multicast2]}, @generic={0x88, 0xc, "2fc972fbf6d76048240f"}, @end, @end, @timestamp_addr={0x44, 0xc, 0xf4, 0x1, 0x4, [{@loopback}]}, @ra={0x94, 0x4, 0x1}]}}}}}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', r7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) fcntl$setown(r3, 0x8, r4) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r8 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$UHID_CREATE2(r8, 0x0, 0x8) capset(0x0, 0x0) 2.439920969s ago: executing program 0 (id=587): ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b708000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r3, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f0000000080)={0x8, 0x0, 0x0, 0xfffffffe, 0x5}) fstat(0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000740)={[{@bsdgroups}, {@nodiscard}, {@noblock_validity}, {@grpjquota}, {@grpjquota}, {@noquota}, {@auto_da_alloc}, {@noload}, {@nodiscard}]}, 0x64, 0x50a, &(0x7f0000000200)="$eJzs3VFrHFsdAPD/bHZr06Y3ueqDXvB6tZW0aHeTxrbBh1pB9Kmg1vcak00I2WRDdtM2oWiKH0AQUcEnffFF8AMIUvDFRxEK+qyoKKKtPvigncvuTtI03U227TabZn8/mMw5Z2b2f86GmZ0zc5gJYGC9FxHXI+JJmqYXImI0K89lU2y1psZ6jx/dm21MSaTpzX8mkWRl25+VZPPT2WYnI+JrX474ZvJ83NrG5tJMpVJey/Kl+vJqqbaxeXFxeWahvFBemZqavDJ9dfry9ERP2nkmIq598a8/+O7PvnTtV5+586dbfz//rUa1RrLlu9vxgvL7LWw1vdD8LnZvsPaSwY6ifLOFmeF2aww9V3L/NdcJAID2Guf4H4yIT0bEhRiNof1PZwEAAIA3UPr5kfhfEpG2d6JDOQAAAPAGyTXHwCa5YjYWYCRyuWKxNYb3w3EqV6nW6p+er66vzLXGyo5FITe/WClPZGOFx6KQNPKTzfTT/KU9+amIeDsivj863MwXZ6uVuX5f/AAAAIABcXpP//8/o63+PwAAAHDMjPW7AgAAAMBrp/8PAAAAx5/+PwAAABxrX7lxozGl2++/nru9sb5UvX1xrlxbKi6vzxZnq2urxYVqdaH5zL7lgz6vUq2ufjZW1u+W6uVavVTb2Ly1XF1fqd9afOYV2AAAAMAhevvjD/6QRMTW54abU8OJ7jbtcjXgqMrvpJJs3ma3/uNbrflfDqlSwKEY6ncFgL7J97sCQN8U+l0BoO+SA5Z3HLzz22z+id7WBwAA6L3xj3a+/5/bd8ut/RcDR56dGAaX+/8wuJr3/7sdyetkAY6VgjMAGHivfP//QGn6QhUCAAB6bqQ5JblidnlvJHK5YjHiTPO1AIVkfrFSnoiItyLi96OFDzTyk80tkwP7DAAAAAAAAAAAAAAAAAAAAAAAAABAS5omkQIAAADHWkTub8mvW8/yHx89N7L3+sCJ5L+jkb0i9M6Pb/7w7ky9vjbZKP/XTnn9R1n5pX5cwQAAAICB8EIv8N/up2/34wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACglx4/uje7PR1m3H98ISLG2sXPx8nm/GQUIuLUv5PI79ouiYihHsQfbvz5SLv4SaNaOyHbxR/uQfyt+/vGj7HsW2gX/3QP4sMge9A4/lxvt//l4r3mvP3+l494Jv+yOh//Yuf4N9Rh/z/TZYx3Hv6i1DH+/Yh38u2PP9vxkw7xz3YZ/xtf39zstCz9ScR429+f5JlYpfryaqm2sXlxcXlmobxQXpmamrwyfXX68vREaX6xUs7+to3xvY/98sl+7T/VIf7YAe0/12X7///w7qMPtZKFdvHPn20T/zc/zdZ4Pn4u++37VJZuLB/fTm+10ru9+/Pfvbtf++c6tP+g///5Ltt/4avf+XOXqwIAh6C2sbk0U6mU145totFLPwLVkDiCiW/39APTNE0b+9QrfE4SR+FraSb6fWQCAAB67elJf79rAgAAAAAAAAAAAAAAAAAAAIPrMB4ntjfm1k4q6cUjtAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeuL9AAAA//+GAdlV") bpf$MAP_CREATE(0x0, 0x0, 0x0) socket$unix(0x1, 0x1, 0x0) syz_open_dev$usbfs(&(0x7f00000000c0), 0xc, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={0xffffffffffffffff, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000002c0)="d2ff03076003008cb89e08f088a8", 0x0, 0xd5b3, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.953072805s ago: executing program 2 (id=588): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/anycast6\x00') close_range(r0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/user\x00') setns(r2, 0x20000000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0x2107, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) eventfd2(0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="300000004900010026bd7000fddbdf250a00", @ANYRES32=0x0, @ANYBLOB="ffffffff130001"], 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x4c0e0) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f0000000000)=0x4) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = openat(0xffffffffffffff9c, 0x0, 0x400, 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r6, 0x0, 0x0) r7 = socket$nl_audit(0x10, 0x3, 0x9) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000036c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x2, '\x00', 0x0, r5, 0x0, 0x3, 0x1, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000003800)={0x18, 0x6, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @cb_func={0x18, 0xa, 0x4, 0x0, 0xfffffffffffffff8}]}, &(0x7f0000000480)='syzkaller\x00', 0x7, 0x70, &(0x7f00000033c0)=""/112, 0x41100, 0x10, '\x00', 0x0, 0x0, r5, 0x8, &(0x7f0000003540)={0x5, 0x2}, 0x8, 0x10, &(0x7f0000003580)={0x5, 0xc, 0x240b, 0x8}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000003740)=[r0, 0xffffffffffffffff, r5, 0xffffffffffffffff, r8, r5, r5], &(0x7f0000003780), 0x10, 0x40, @void, @value}, 0x94) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xb, 0x7, 0x10001, 0x49, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r9, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r11}, 0x10) sendmsg$AUDIT_USER_AVC(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000530464"], 0x14}, 0x1, 0x0, 0x0, 0x24000841}, 0x4008840) ioctl$FS_IOC_ENABLE_VERITY(r3, 0x40806685, 0x0) syz_genetlink_get_family_id$nl80211(0x0, r0) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1, 0x0, 0x0, 0x2) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, 0x0) sendmsg$NL80211_CMD_LEAVE_MESH(r3, 0x0, 0x800) sendmsg$nl_route_sched(r4, 0x0, 0x0) 1.792464307s ago: executing program 3 (id=589): syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000540)='./file0\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="73686f72746e616d653d77696e39352c756e695f786c6174653d312c636865636b3d7374726963742c646f733178666c6f7070792c757466383d312c757466383d312c757466383d302c696f636861727365743d6370313235de26302c696f636861727365743d69736f383835392d342c696f636861727365743d64656661756c742c73686f72746e616d653d6d69786564", @ANYRES8=0x0], 0xff, 0x1c8, &(0x7f0000000840)="$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") mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) syz_open_dev$usbfs(&(0x7f0000000080), 0x1ff, 0x402) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r0}, &(0x7f0000000800), &(0x7f0000000840)=r1}, 0x20) r2 = socket(0x10, 0x3, 0x9) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) socket(0x200000000000011, 0x2, 0x3) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0xc, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x20c006, &(0x7f0000000480)={[{@debug}, {@mblk_io_submit}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@lazytime}, {@discard}, {@grpquota}], [{@seclabel}]}, 0x1, 0x446, &(0x7f0000000d40)="$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") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2000006, 0x31, 0xffffffffffffffff, 0xd0fb6000) r5 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="5c0100001000130427bd7000fbdbdf25fe800000000000000000000000000000ac1414bb000088000000000000000000000000000000000000000000005a3e00", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="02000000"], 0x15c}}, 0x4000080) pwritev2(r5, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x76200}], 0x1, 0x7c00, 0x3000, 0x3) connect$netlink(r2, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc) sendmsg$nl_route_sched(r2, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)=@getqdisc={0x24, 0x26, 0x400, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xfff2, 0xffe0}, {0xe, 0xffe0}, {0x1, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x4040}, 0x40040) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000200)='./file0\x00', 0x800, &(0x7f0000000180)=ANY=[@ANYRES8=0x0, @ANYRES16, @ANYRES64, @ANYRES16=0x0], 0x1, 0x36e, &(0x7f0000000c00)="$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") syz_open_procfs(0x0, &(0x7f0000000640)='stack\x00') r7 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x14) fcntl$setsig(r7, 0xa, 0x13) fcntl$setlease(r4, 0x400, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000006000000040000000000000e0400000000000000060000000000000700000000000000000000000200000000000000000000000a03000000006100002e00"], 0x0, 0x52, 0x0, 0x0, 0x0, 0x10000, @value=r7}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000f9ffffff0000000000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0xfffffffffffffe5a) 1.433454702s ago: executing program 2 (id=590): r0 = socket$inet_sctp(0x2, 0x5, 0x84) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x15, 0x4, &(0x7f0000000180)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x2e}]}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0x14, &(0x7f0000000280)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, @void, @value}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x20, 0x12504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x4, 0x0, @perf_bp={0x0, 0x8}, 0x7602, 0x5, 0x0, 0x0, 0x0, 0x25, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r2, 0x0, 0x4}, 0x18) r3 = syz_clone(0x8151000, &(0x7f00000003c0)="c02bbae2b3649c13c8f48565789ef12b61112993e9a81b12ceba45113d045e9c460a8e75798e9591b4a89c499c0fc8b076f2b0e06aac4ac8d0e41d3f0060e928446ea1111a733f07c3fb7bf577bb8bd09e7aee4d0285fec00addf4ed9b94fcfa2d3a6bed29acd1444cd2b71612cb47deb58335d2ccf1c93de1a36e6b5dc732bb088d2a22d57817a2e2e4fcf46f71cd63ce2a8778567ed00b6b65065ffc786719a04d20f8b252349a5a516e", 0xab, &(0x7f0000000200), &(0x7f0000000340), &(0x7f0000000480)) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x10, 0x4, 0xde, 0xfe, 0x0, 0x2, 0x40, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1ff, 0x2, @perf_bp={&(0x7f00000006c0), 0x8}, 0x0, 0x4, 0x4619374e, 0x6, 0xff, 0x4, 0xffd, 0x0, 0x1, 0x0, 0x5}, r3, 0x4, r2, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000480)={'wg2\x00'}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000580)={&(0x7f00000004c0)=ANY=[@ANYBLOB="9feb010018e6ff0000000000100000001000000006000000040000000000000e0500000001000000002e2e5f3000"], &(0x7f0000000500)=""/110, 0x2e, 0x6e, 0x1, 0x3, 0x10000, @value}, 0x28) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES8, @ANYBLOB="000000000000000000000000000000000000000081f0c6d9ba", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000380), 0x1, r4}, 0x38) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = gettid() r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x2000) read(r7, &(0x7f0000000200)=""/209, 0x128) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r7, 0x4040534e, &(0x7f0000000300)={0x335, @time={0x4, 0x2}, 0xfd, {0x69, 0x5}}) tkill(r6, 0x7) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r7, 0xc08c5334, &(0x7f0000000480)={0x1, 0x3, 0x0, 'queue1\x00', 0x8}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect(0x3, 0x0, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f000001a240)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=r4, @ANYBLOB="00000100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x50) r8 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') pread64(r8, &(0x7f0000001240)=""/102400, 0x200000, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000700)={r5, 0x20, &(0x7f0000000680)={&(0x7f0000000580)=""/128, 0x80, 0x0, &(0x7f0000000600)=""/100, 0x64}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x14, 0xd, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000200000000000000fcffffff1811", @ANYRES32=r4, @ANYBLOB="0000000000000000b7020000000000008500000086000000ff5f030006000000d95af0ffffffffff18110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b70200000000000085000000861000009500000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x9, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @lirc_mode2=0x10, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x3, 0x5}, 0x8, 0x10, &(0x7f0000000480)={0x5, 0x6, 0x4, 0x3}, 0x10, r9, r5, 0x1, &(0x7f0000000a80)=[r8, r4, 0xffffffffffffffff, r8], &(0x7f0000000140)=[{0x3, 0x5, 0xd, 0x2}], 0x10, 0x8, @void, @value}, 0x94) 1.379368712s ago: executing program 4 (id=591): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) getdents64(r0, 0x0, 0x0) 1.288086153s ago: executing program 4 (id=592): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file3\x00', 0x0, &(0x7f00000002c0), 0x1, 0x4be, &(0x7f0000000540)="$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") rename(&(0x7f0000000000)='./file1\x00', &(0x7f0000000080)='./file2\x00') r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000180)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="d80000001c0081064e81f782db44b9040a1d08040000000000000aa1180002000607002603600e12080b0f0000810401a8001605200001400200000803604e0cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee422fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef5d2defd5ccae8d3fb7c27a1059ae31c60e2234d732", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) 916.234438ms ago: executing program 3 (id=593): socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x0, 0x0, 0x0, 0x0, 0x5, 0x41000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x2, @perf_config_ext={0xf60, 0xffffffff}, 0x100, 0x6, 0x3a65, 0x9, 0x0, 0x8, 0x8, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xe, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffc, @void, @value}, 0x94) prctl$PR_SET_IO_FLUSHER(0x39, 0x1) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000480)='cdg\x00', 0x4) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x11) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) r4 = openat$cgroup_type(r3, &(0x7f0000000300), 0x2, 0x0) write$cgroup_type(r4, &(0x7f0000000280), 0x9) r5 = openat$cgroup_procs(r3, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r5, &(0x7f00000003c0), 0x12) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) socket$nl_route(0x10, 0x3, 0x0) r7 = openat$cgroup_ro(r6, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r7, &(0x7f0000000200)=0x1, 0x12) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r9 = openat$cgroup_procs(r8, &(0x7f0000000840)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r9, &(0x7f0000000380), 0x12) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x4, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) 596.515052ms ago: executing program 4 (id=594): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="d80000001c0081064e81f782db44b9040a1d08040000000000000aa1180002000607002603600e12080b0f0000810401a8001605200001400200000803604e0cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee422fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef5d2defd5ccae8d3fb7c27a1059ae31c60e2234d732", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) 413.033025ms ago: executing program 1 (id=595): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0xfffffffff7ffffe9}, 0x18) prctl$PR_SET_NAME(0xf, &(0x7f0000000240)='ext4\x00') socket$inet_udplite(0x2, 0x2, 0x88) socket(0x10, 0x80002, 0x0) symlink(0x0, 0x0) syz_io_uring_setup(0x109, 0x0, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r1) r2 = socket$packet(0x11, 0x3, 0x300) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$packet_int(r2, 0x107, 0xf, 0x0, 0x0) 350.088275ms ago: executing program 4 (id=596): sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) 250.312227ms ago: executing program 4 (id=597): r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000040), 0x0) r1 = socket(0x2a, 0x2, 0x5) sendto(r1, 0x0, 0x0, 0x0, &(0x7f0000000040)=@qipcrtr, 0x80) read$qrtrtun(r0, 0x0, 0xeffd) dup2(r0, r1) 193.783147ms ago: executing program 4 (id=598): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) setsockopt$inet6_IPV6_RTHDR(0xffffffffffffffff, 0x29, 0x39, &(0x7f0000002e40)=ANY=[@ANYBLOB="00020201"], 0x18) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) r0 = dup(0xffffffffffffffff) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) prlimit64(0x0, 0xe, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[], 0x28}}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x8, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={0x0, r2, 0x0, 0x7}, 0x18) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4c000000020601080000000000000000000000400500010006000000050005000200000005000400000000000900020073797a310000000011000300686173683a69702c6d61726b00000000"], 0x4c}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x9, 0x6, 0x201, 0x0, 0x0, {0x7, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x1}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, 0x0, 0x40) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r5 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0x2, 0xbfdffffc}, &(0x7f00000001c0)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r5, 0x0, &(0x7f0000000040)='./file0\x00', 0x64, 0x183000, 0x23456}) r8 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) write$selinux_attr(r8, &(0x7f0000000100)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) io_uring_enter(r5, 0x47f6, 0x0, 0x2, 0x0, 0x0) 0s ago: executing program 2 (id=599): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0a000000020000000900000008"], 0x48) prctl$PR_GET_TAGGED_ADDR_CTRL(0x38) r1 = open(&(0x7f0000000180)='./bus\x00', 0x14957e, 0x0) readahead(r1, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$caif_seqpacket(0x25, 0x5, 0x3) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000680)={0xdc, r3, 0x1, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x26}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x9}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x80000001}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}]}, @TIPC_NLA_NODE={0x14, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xb}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_LINK={0x50, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xa26c}]}]}, @TIPC_NLA_NET={0x18, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xe}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}]}, @TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}, @TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}]}]}, 0xdc}, 0x1, 0x0, 0x0, 0x4000000}, 0x40009) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0b000000080000000c000000ffbfffff01"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000810018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, 0x0, 0x0) sendmsg$NFT_MSG_GETSET(r5, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r6}, 0x10) pipe(0x0) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x9) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x400000009, 0x0) pipe2$9p(&(0x7f00000004c0), 0xc0480) rt_sigtimedwait(&(0x7f0000000040)={[0xffffffff]}, 0x0, 0x0, 0x8) timer_settime(0x0, 0x0, 0x0, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000300)={{0x77359400}, {0x0, 0x989680}}, 0x0) r7 = epoll_create(0x3ff) r8 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r8, &(0x7f0000000240)={0xa0000000}) epoll_ctl$EPOLL_CTL_MOD(r7, 0x3, r8, &(0x7f0000000280)={0x2000000}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000380)='kfree\x00', r2}, 0x18) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000200)={{r0}, &(0x7f0000000040), &(0x7f0000000080)='%pS \x00'}, 0x20) kexec_load(0x4, 0xa, 0x0, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) kernel console output (not intermixed with test programs): over after parsing attributes in process `syz.0.174'. [ 52.902594][ T4080] pim6reg: entered allmulticast mode [ 53.170835][ T4083] pim6reg: left allmulticast mode [ 53.428393][ T4074] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 53.471552][ T4085] loop3: detected capacity change from 0 to 1024 [ 53.495318][ T29] kauditd_printk_skb: 7 callbacks suppressed [ 53.495332][ T29] audit: type=1400 audit(1749037238.225:540): avc: denied { mounton } for pid=4084 comm="syz.3.182" path="/36/file0" dev="tmpfs" ino=216 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 53.551360][ T4085] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 53.599211][ T29] audit: type=1326 audit(1749037238.322:541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4088 comm="syz.1.184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f857132e929 code=0x7ffc0000 [ 53.622556][ T29] audit: type=1326 audit(1749037238.322:542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4088 comm="syz.1.184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f857132e929 code=0x7ffc0000 [ 53.645901][ T29] audit: type=1326 audit(1749037238.322:543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4088 comm="syz.1.184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f857132e929 code=0x7ffc0000 [ 53.669218][ T29] audit: type=1326 audit(1749037238.322:544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4088 comm="syz.1.184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f857132e929 code=0x7ffc0000 [ 53.692568][ T29] audit: type=1326 audit(1749037238.322:545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4088 comm="syz.1.184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f857132e929 code=0x7ffc0000 [ 53.715913][ T29] audit: type=1326 audit(1749037238.322:546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4088 comm="syz.1.184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f857132e929 code=0x7ffc0000 [ 53.739121][ T29] audit: type=1326 audit(1749037238.322:547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4088 comm="syz.1.184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f857132e929 code=0x7ffc0000 [ 53.761502][ T4085] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 53.762348][ T29] audit: type=1326 audit(1749037238.322:548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4088 comm="syz.1.184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f857132e929 code=0x7ffc0000 [ 53.795902][ T29] audit: type=1326 audit(1749037238.322:549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4088 comm="syz.1.184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f857132e929 code=0x7ffc0000 [ 53.840888][ T4068] Process accounting resumed [ 53.845719][ T4085] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c840e02c, mo2=0000] [ 53.924627][ T4085] EXT4-fs error (device loop3): ext4_map_blocks:780: inode #3: block 2: comm syz.3.182: lblock 2 mapped to illegal pblock 2 (length 1) [ 53.946685][ T4085] EXT4-fs (loop3): Remounting filesystem read-only [ 53.962294][ T4085] EXT4-fs (loop3): 1 orphan inode deleted [ 53.968768][ T4085] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 53.984488][ T4100] geneve0: entered allmulticast mode [ 54.024404][ T4105] netlink: 'syz.1.189': attribute type 27 has an invalid length. [ 54.036678][ T4085] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.066573][ T4085] loop3: detected capacity change from 0 to 512 [ 54.081979][ T4110] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=514 sclass=netlink_route_socket pid=4110 comm=syz.4.190 [ 54.094741][ T4085] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.182: Failed to acquire dquot type 1 [ 54.102688][ T4110] __nla_validate_parse: 8 callbacks suppressed [ 54.102749][ T4110] netlink: 32 bytes leftover after parsing attributes in process `syz.4.190'. [ 54.116904][ T4085] EXT4-fs (loop3): 1 truncate cleaned up [ 54.141860][ T4110] netlink: 108 bytes leftover after parsing attributes in process `syz.4.190'. [ 54.145961][ T4085] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 54.165931][ T4085] ext4 filesystem being mounted at /36/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 54.168015][ T4110] netlink: 108 bytes leftover after parsing attributes in process `syz.4.190'. [ 54.178129][ T4085] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.187615][ T4110] netlink: 108 bytes leftover after parsing attributes in process `syz.4.190'. [ 54.271872][ T4105] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.281046][ T4105] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.290051][ T4105] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.298995][ T4105] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.363995][ T4122] loop3: detected capacity change from 0 to 1024 [ 54.366863][ T4120] netlink: 4 bytes leftover after parsing attributes in process `syz.2.193'. [ 54.372199][ T4122] EXT4-fs: inline encryption not supported [ 54.398631][ T4113] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 54.451911][ T4120] netlink: 4 bytes leftover after parsing attributes in process `syz.2.193'. [ 54.464511][ T4120] loop2: detected capacity change from 0 to 512 [ 54.482993][ T4128] loop4: detected capacity change from 0 to 1024 [ 54.499038][ T4120] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 54.508122][ T4122] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 54.508158][ T4120] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 54.513355][ T4120] EXT4-fs (loop2): warning: mounting unchecked fs, running e2fsck is recommended [ 54.527418][ T4122] netlink: 84 bytes leftover after parsing attributes in process `syz.3.192'. [ 54.548377][ T4120] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 54.556612][ T4120] System zones: 0-2, 18-18, 34-35 [ 54.562626][ T4120] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 54.564496][ T4128] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 54.594290][ T4128] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 49 with max blocks 1 with error 28 [ 54.606659][ T4128] EXT4-fs (loop4): This should not happen!! Data will be lost [ 54.606659][ T4128] [ 54.616379][ T4128] EXT4-fs (loop4): Total free blocks count 0 [ 54.622442][ T4128] EXT4-fs (loop4): Free/Dirty block details [ 54.628330][ T4128] EXT4-fs (loop4): free_blocks=0 [ 54.633712][ T4128] EXT4-fs (loop4): dirty_blocks=0 [ 54.638853][ T4128] EXT4-fs (loop4): Block reservation details [ 54.641323][ T4134] netlink: 4 bytes leftover after parsing attributes in process `syz.4.195'. [ 54.645265][ T4128] EXT4-fs (loop4): i_reserved_data_blocks=0 [ 54.664906][ T4122] team_slave_0: left promiscuous mode [ 54.671409][ T4122] team0 (unregistering): Port device team_slave_0 removed [ 54.679267][ T4122] team_slave_1: left promiscuous mode [ 54.685537][ T4122] team0 (unregistering): Port device team_slave_1 removed [ 54.698258][ T3323] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.738012][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.778770][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.849828][ T4143] loop2: detected capacity change from 0 to 512 [ 54.881679][ T4143] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 54.913259][ T4143] EXT4-fs (loop2): 1 truncate cleaned up [ 54.927167][ T4143] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 55.050453][ T4151] netlink: 8 bytes leftover after parsing attributes in process `syz.0.200'. [ 55.285502][ T4159] netlink: 132 bytes leftover after parsing attributes in process `syz.1.202'. [ 55.417541][ T4141] syz.4.197 invoked oom-killer: gfp_mask=0x402d02(GFP_NOIO|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN|__GFP_ACCOUNT), order=0, oom_score_adj=1000 [ 55.432109][ T4141] CPU: 0 UID: 0 PID: 4141 Comm: syz.4.197 Not tainted 6.15.0-syzkaller-11796-g5abc7438f1e9 #0 PREEMPT(voluntary) [ 55.432148][ T4141] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 55.432159][ T4141] Call Trace: [ 55.432164][ T4141] [ 55.432171][ T4141] __dump_stack+0x1d/0x30 [ 55.432194][ T4141] dump_stack_lvl+0xe8/0x140 [ 55.432217][ T4141] dump_stack+0x15/0x1b [ 55.432412][ T4141] dump_header+0x81/0x220 [ 55.432446][ T4141] oom_kill_process+0x334/0x3f0 [ 55.432485][ T4141] out_of_memory+0x979/0xb80 [ 55.432553][ T4141] try_charge_memcg+0x5e6/0x9e0 [ 55.432639][ T4141] obj_cgroup_charge_pages+0xa6/0x150 [ 55.432678][ T4141] __memcg_kmem_charge_page+0x9f/0x170 [ 55.432711][ T4141] __alloc_frozen_pages_noprof+0x188/0x360 [ 55.432813][ T4141] alloc_pages_mpol+0xb3/0x250 [ 55.432849][ T4141] alloc_pages_noprof+0x90/0x130 [ 55.432913][ T4141] __vmalloc_node_range_noprof+0x6f2/0xe00 [ 55.433035][ T4141] __kvmalloc_node_noprof+0x312/0x4f0 [ 55.433152][ T4141] ? ip_set_alloc+0x1f/0x30 [ 55.433182][ T4141] ? ip_set_alloc+0x1f/0x30 [ 55.433231][ T4141] ? __kmalloc_cache_noprof+0x189/0x320 [ 55.433257][ T4141] ip_set_alloc+0x1f/0x30 [ 55.433281][ T4141] hash_netiface_create+0x282/0x740 [ 55.433377][ T4141] ? __pfx_hash_netiface_create+0x10/0x10 [ 55.433476][ T4141] ip_set_create+0x3c9/0x960 [ 55.433515][ T4141] ? __nla_parse+0x40/0x60 [ 55.433607][ T4141] nfnetlink_rcv_msg+0x4c6/0x590 [ 55.433647][ T4141] ? selinux_capable+0x1f9/0x270 [ 55.433671][ T4141] netlink_rcv_skb+0x123/0x220 [ 55.433706][ T4141] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 55.433773][ T4141] nfnetlink_rcv+0x16b/0x1690 [ 55.433798][ T4141] ? __kfree_skb+0x109/0x150 [ 55.433861][ T4141] ? nlmon_xmit+0x4f/0x60 [ 55.433889][ T4141] ? consume_skb+0x49/0x150 [ 55.433932][ T4141] ? nlmon_xmit+0x4f/0x60 [ 55.433956][ T4141] ? dev_hard_start_xmit+0x3b0/0x3e0 [ 55.433985][ T4141] ? __dev_queue_xmit+0x11c0/0x1fb0 [ 55.434010][ T4141] ? __dev_queue_xmit+0x182/0x1fb0 [ 55.434065][ T4141] ? ref_tracker_free+0x37d/0x3e0 [ 55.434107][ T4141] ? __netlink_deliver_tap+0x4dc/0x500 [ 55.434216][ T4141] netlink_unicast+0x59e/0x670 [ 55.434241][ T4141] netlink_sendmsg+0x58b/0x6b0 [ 55.434277][ T4141] ? __pfx_netlink_sendmsg+0x10/0x10 [ 55.434351][ T4141] __sock_sendmsg+0x145/0x180 [ 55.434426][ T4141] ____sys_sendmsg+0x31e/0x4e0 [ 55.434505][ T4141] ___sys_sendmsg+0x17b/0x1d0 [ 55.434557][ T4141] __x64_sys_sendmsg+0xd4/0x160 [ 55.434679][ T4141] x64_sys_call+0x2999/0x2fb0 [ 55.434698][ T4141] do_syscall_64+0xd2/0x200 [ 55.434748][ T4141] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 55.434780][ T4141] ? clear_bhb_loop+0x40/0x90 [ 55.434811][ T4141] ? clear_bhb_loop+0x40/0x90 [ 55.434881][ T4141] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 55.434954][ T4141] RIP: 0033:0x7f0df8dae929 [ 55.434967][ T4141] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 55.434983][ T4141] RSP: 002b:00007f0df7417038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 55.435004][ T4141] RAX: ffffffffffffffda RBX: 00007f0df8fd5fa0 RCX: 00007f0df8dae929 [ 55.435018][ T4141] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000003 [ 55.435033][ T4141] RBP: 00007f0df8e30ab1 R08: 0000000000000000 R09: 0000000000000000 [ 55.435048][ T4141] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 55.435060][ T4141] R13: 0000000000000000 R14: 00007f0df8fd5fa0 R15: 00007ffd3d5d46e8 [ 55.435104][ T4141] [ 55.435111][ T4141] memory: usage 307200kB, limit 307200kB, failcnt 73 [ 55.787851][ T4141] memory+swap: usage 307200kB, limit 9007199254740988kB, failcnt 0 [ 55.787870][ T4141] kmem: usage 306856kB, limit 9007199254740988kB, failcnt 0 [ 55.787884][ T4141] Memory cgroup stats for /syz4: [ 55.790031][ T4141] cache 102400 [ 55.790043][ T4141] rss 163840 [ 55.790052][ T4141] shmem 0 [ 55.790060][ T4141] mapped_file 102400 [ 55.790136][ T4141] dirty 12288 [ 55.790145][ T4141] writeback 28672 [ 55.790154][ T4141] workingset_refault_anon 0 [ 55.790164][ T4141] workingset_refault_file 0 [ 55.790174][ T4141] swap 0 [ 55.790182][ T4141] swapcached 32768 [ 55.790189][ T4141] nr_memmap_boot_pages 29670 [ 55.790196][ T4141] pgpgin 29597 [ 55.790202][ T4141] pglazyfree 39940 [ 55.790209][ T4141] pgfault 4 [ 55.790214][ T4141] a_other 0 [ 55.790221][ T4141] inactive_anon 0 [ 55.790301][ T4141] active_anon 0 [ 55.790308][ T4141] inactive_file 102400 [ 55.790314][ T4141] active_file 0 [ 55.790321][ T4141] hierarchical_memory_limit 314572800 [ 55.790344][ T4141] hierarchical_memsw_limit 9223372036854771712 [ 55.790354][ T4141] total_cache 155648 [ 55.790433][ T4141] total_rss 163840 [ 55.790518][ T4141] total_shmem 0 [ 55.790528][ T4141] total_mapped_file 102400 [ 55.790538][ T4141] total_dirty 12288 [ 55.790547][ T4141] total_writeback 28672 [ 55.790557][ T4141] total_workingset_refault_anon 0 [ 55.790567][ T4141] total_workingset_refault_file 0 [ 55.790666][ T4141] total_swap 0 [ 55.790674][ T4141] total_swapcached 32768 [ 55.790684][ T4141] total_nr_memmap_boot_pages 29683 [ 55.790694][ T4141] total_pgpgin 29597 [ 55.790704][ T4141] total_pglazyfree 39944 [ 55.790713][ T4141] total_pgfault 5 [ 55.790723][ T4141] total_a_other 0 [ 55.790732][ T4141] total_inactive_anon 0 [ 55.790741][ T4141] total_active_anon 0 [ 55.790762][ T4141] total_inactive_file 155648 [ 55.790771][ T4141] total_active_file 0 [ 55.790857][ T4141] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4/syz1,task=syz.4.197,pid=4140,uid=0 [ 55.790959][ T4141] Memory cgroup out of memory: Killed process 4140 (syz.4.197) total-vm:95796kB, anon-rss:936kB, file-rss:22060kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 56.047706][ T4173] netlink: 'syz.3.206': attribute type 39 has an invalid length. [ 56.063231][ T4170] bridge_slave_0: left allmulticast mode [ 56.063249][ T4170] bridge_slave_0: left promiscuous mode [ 56.063320][ T4170] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.064107][ T4170] bridge_slave_1: left allmulticast mode [ 56.064126][ T4170] bridge_slave_1: left promiscuous mode [ 56.064210][ T4170] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.065581][ T4170] bond0: (slave bond_slave_0): Releasing backup interface [ 56.067136][ T4170] bond0: (slave bond_slave_1): Releasing backup interface [ 56.067984][ T4170] team_slave_0: left promiscuous mode [ 56.068627][ T4170] team0: Port device team_slave_0 removed [ 56.068914][ T4170] team_slave_1: left promiscuous mode [ 56.069408][ T4170] team0: Port device team_slave_1 removed [ 56.069709][ T4170] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 56.077257][ T4170] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 56.355386][ T4175] Driver unsupported XDP return value 0 on prog (id 173) dev N/A, expect packet loss! [ 56.991938][ T4184] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 57.000866][ T4184] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 57.053065][ T4143] syz.2.199 (4143) used greatest stack depth: 5904 bytes left [ 57.074663][ T3323] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.087189][ T4191] tipc: New replicast peer: 255.255.255.83 [ 57.093201][ T4191] tipc: Enabled bearer , priority 10 [ 57.145867][ T4196] loop4: detected capacity change from 0 to 2048 [ 57.223057][ T4196] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 57.389332][ T4209] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 57.408073][ T4209] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1670 with error 28 [ 57.420618][ T4209] EXT4-fs (loop4): This should not happen!! Data will be lost [ 57.420618][ T4209] [ 57.430432][ T4209] EXT4-fs (loop4): Total free blocks count 0 [ 57.436447][ T4209] EXT4-fs (loop4): Free/Dirty block details [ 57.442410][ T4209] EXT4-fs (loop4): free_blocks=2415919104 [ 57.448190][ T4209] EXT4-fs (loop4): dirty_blocks=1680 [ 57.453484][ T4209] EXT4-fs (loop4): Block reservation details [ 57.459502][ T4209] EXT4-fs (loop4): i_reserved_data_blocks=105 [ 57.529210][ T4218] loop3: detected capacity change from 0 to 512 [ 57.565738][ T4218] EXT4-fs: Ignoring removed nobh option [ 57.641334][ T4218] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #3: comm syz.3.217: corrupted inode contents [ 57.661559][ T4218] EXT4-fs error (device loop3): ext4_dirty_inode:6459: inode #3: comm syz.3.217: mark_inode_dirty error [ 57.705797][ T4218] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #3: comm syz.3.217: corrupted inode contents [ 57.787810][ T4218] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #3: comm syz.3.217: mark_inode_dirty error [ 57.800130][ T4218] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.217: Failed to acquire dquot type 0 [ 57.815206][ T4218] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #16: comm syz.3.217: corrupted inode contents [ 57.842234][ T4218] EXT4-fs error (device loop3): ext4_dirty_inode:6459: inode #16: comm syz.3.217: mark_inode_dirty error [ 57.863409][ T4218] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #16: comm syz.3.217: corrupted inode contents [ 57.889244][ T4218] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #16: comm syz.3.217: mark_inode_dirty error [ 57.904118][ T4218] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #16: comm syz.3.217: corrupted inode contents [ 57.918008][ T4218] EXT4-fs error (device loop3) in ext4_orphan_del:305: Corrupt filesystem [ 57.927447][ T37] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2 with error 28 [ 57.975820][ T4230] hub 1-0:1.0: USB hub found [ 57.982391][ T4230] hub 1-0:1.0: 8 ports detected [ 57.987691][ T4218] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #16: comm syz.3.217: corrupted inode contents [ 58.025873][ T4218] EXT4-fs error (device loop3): ext4_truncate:4597: inode #16: comm syz.3.217: mark_inode_dirty error [ 58.046161][ T4218] EXT4-fs error (device loop3) in ext4_process_orphan:347: Corrupt filesystem [ 58.055452][ T4218] EXT4-fs (loop3): 1 truncate cleaned up [ 58.061599][ T4218] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 58.074258][ T4218] ext4 filesystem being mounted at /44/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 58.114985][ T4233] loop2: detected capacity change from 0 to 1024 [ 58.137622][ T4233] EXT4-fs: inline encryption not supported [ 58.164292][ T4233] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 58.197053][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.300437][ T29] kauditd_printk_skb: 644 callbacks suppressed [ 58.300455][ T29] audit: type=1400 audit(1749037243.322:1188): avc: denied { ioctl } for pid=4235 comm="syz.4.222" path="socket:[6041]" dev="sockfs" ino=6041 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 58.334570][ T4233] team0 (unregistering): Port device team_slave_0 removed [ 58.347370][ T4233] team0 (unregistering): Port device team_slave_1 removed [ 58.365269][ T4233] team0 (unregistering): Port device geneve1 removed [ 58.453651][ T3323] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.490825][ T4241] hub 8-0:1.0: USB hub found [ 58.506734][ T4241] hub 8-0:1.0: 8 ports detected [ 58.530498][ T29] audit: type=1400 audit(1749037243.622:1189): avc: denied { read } for pid=4239 comm="syz.1.226" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 58.614878][ T4247] loop2: detected capacity change from 0 to 512 [ 58.648378][ T29] audit: type=1400 audit(1749037243.751:1190): avc: denied { bind } for pid=4246 comm="syz.2.227" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 58.968941][ T4255] __nla_validate_parse: 3 callbacks suppressed [ 58.968954][ T4255] netlink: 36 bytes leftover after parsing attributes in process `syz.0.228'. [ 58.984043][ T4255] netlink: 16 bytes leftover after parsing attributes in process `syz.0.228'. [ 58.992985][ T4255] netlink: 36 bytes leftover after parsing attributes in process `syz.0.228'. [ 59.055654][ T4255] netlink: 36 bytes leftover after parsing attributes in process `syz.0.228'. [ 59.090179][ T4256] netlink: 'syz.0.228': attribute type 1 has an invalid length. [ 59.097927][ T4256] netlink: 224 bytes leftover after parsing attributes in process `syz.0.228'. [ 59.266589][ T4261] syzkaller0: entered promiscuous mode [ 59.272254][ T4261] syzkaller0: entered allmulticast mode [ 59.397834][ T4244] +}[@ (4244) used greatest stack depth: 5824 bytes left [ 59.420426][ T29] audit: type=1400 audit(1749037244.588:1191): avc: denied { ioctl } for pid=4264 comm="syz.3.231" path="socket:[6946]" dev="sockfs" ino=6946 ioctlcmd=0x1500 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 59.452275][ T4265] netlink: 'syz.3.231': attribute type 4 has an invalid length. [ 59.531622][ T4280] loop3: detected capacity change from 0 to 1024 [ 59.551680][ T4280] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 59.563832][ T4280] ext4 filesystem being mounted at /47/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 59.576942][ T29] audit: type=1326 audit(1749037244.749:1192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4268 comm="syz.3.232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6da338e929 code=0x7ffc0000 [ 59.600589][ T29] audit: type=1326 audit(1749037244.749:1193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4268 comm="syz.3.232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6da338e929 code=0x7ffc0000 [ 59.623984][ T29] audit: type=1326 audit(1749037244.759:1194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4268 comm="syz.3.232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7f6da338e929 code=0x7ffc0000 [ 59.647240][ T29] audit: type=1326 audit(1749037244.759:1195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4268 comm="syz.3.232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6da338e929 code=0x7ffc0000 [ 59.670571][ T29] audit: type=1326 audit(1749037244.759:1196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4268 comm="syz.3.232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6da338e929 code=0x7ffc0000 [ 59.693558][ T4280] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 59.693871][ T29] audit: type=1326 audit(1749037244.759:1197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4268 comm="syz.3.232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6da338e929 code=0x7ffc0000 [ 59.734744][ T4280] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 52 with error 28 [ 59.747276][ T4280] EXT4-fs (loop3): This should not happen!! Data will be lost [ 59.747276][ T4280] [ 59.757072][ T4280] EXT4-fs (loop3): Total free blocks count 0 [ 59.763237][ T4280] EXT4-fs (loop3): Free/Dirty block details [ 59.769179][ T4280] EXT4-fs (loop3): free_blocks=4293918720 [ 59.774924][ T4280] EXT4-fs (loop3): dirty_blocks=64 [ 59.780043][ T4280] EXT4-fs (loop3): Block reservation details [ 59.786085][ T4280] EXT4-fs (loop3): i_reserved_data_blocks=4 [ 59.864180][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.896270][ T4291] bridge0: entered allmulticast mode [ 59.908988][ T4291] bridge_slave_1: left allmulticast mode [ 59.916192][ T4291] bridge_slave_1: left promiscuous mode [ 59.922776][ T4291] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.953419][ T4291] bridge_slave_0: left allmulticast mode [ 59.960280][ T4291] bridge_slave_0: left promiscuous mode [ 59.967524][ T4291] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.979291][ T3955] usb usb2-port1: attempt power cycle [ 60.142253][ T4303] loop2: detected capacity change from 0 to 512 [ 60.168594][ T4303] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 60.216477][ T4303] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 60.247772][ T4303] ext4 filesystem being mounted at /43/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 60.280916][ T3323] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.311247][ T4317] random: crng reseeded on system resumption [ 60.344770][ T4318] loop3: detected capacity change from 0 to 128 [ 60.350842][ T4317] loop2: detected capacity change from 0 to 512 [ 60.360528][ T4318] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 60.391204][ T4317] EXT4-fs: test_dummy_encryption option not supported [ 60.402870][ T4318] ext4 filesystem being mounted at /50/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 60.460599][ T3319] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 60.527168][ T4325] netlink: 'syz.3.247': attribute type 27 has an invalid length. [ 60.976311][ T4337] loop2: detected capacity change from 0 to 1024 [ 61.026857][ T4337] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 61.044777][ T4337] ext4 filesystem being mounted at /45/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 61.107805][ T4352] geneve0: entered allmulticast mode [ 61.137120][ T4332] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 61.149956][ T4332] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 61.163122][ T4328] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 61.178549][ T4328] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 52 with error 28 [ 61.191215][ T4328] EXT4-fs (loop2): This should not happen!! Data will be lost [ 61.191215][ T4328] [ 61.201271][ T4328] EXT4-fs (loop2): Total free blocks count 0 [ 61.207405][ T4328] EXT4-fs (loop2): Free/Dirty block details [ 61.213575][ T4328] EXT4-fs (loop2): free_blocks=4293918720 [ 61.219511][ T4328] EXT4-fs (loop2): dirty_blocks=64 [ 61.224788][ T4328] EXT4-fs (loop2): Block reservation details [ 61.230994][ T4328] EXT4-fs (loop2): i_reserved_data_blocks=4 [ 61.311450][ T3323] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.711800][ T3955] usb usb2-port1: unable to enumerate USB device [ 61.719589][ T4248] hub 2-0:1.0: USB hub found [ 61.724463][ T4248] hub 2-0:1.0: 8 ports detected [ 61.789158][ T4367] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 61.821572][ T4370] loop4: detected capacity change from 0 to 512 [ 62.357575][ T4381] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 63.614139][ T29] kauditd_printk_skb: 453 callbacks suppressed [ 63.614153][ T29] audit: type=1400 audit(1749037249.072:1651): avc: denied { create } for pid=4395 comm="syz.4.268" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 63.640147][ T29] audit: type=1400 audit(1749037249.072:1652): avc: denied { getopt } for pid=4397 comm="syz.3.266" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 63.659563][ T29] audit: type=1400 audit(1749037249.083:1653): avc: denied { create } for pid=4397 comm="syz.3.266" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 63.680460][ T4399] loop4: detected capacity change from 0 to 128 [ 63.760976][ T4399] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 63.774855][ T4399] ext4 filesystem being mounted at /51/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 63.788180][ T29] audit: type=1400 audit(1749037249.169:1654): avc: denied { execute } for pid=4397 comm="syz.3.266" path="/56/pids.events" dev="tmpfs" ino=326 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 63.899631][ T29] audit: type=1400 audit(1749037249.298:1655): avc: denied { execute } for pid=4393 comm="syz.2.265" path="/selinux/avc/cache_stats" dev="selinuxfs" ino=27 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=file permissive=1 [ 63.923959][ T29] audit: type=1400 audit(1749037249.319:1656): avc: denied { append } for pid=4395 comm="syz.4.268" path="/51/mnt/memory.current" dev="loop4" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 63.947362][ T29] audit: type=1400 audit(1749037249.351:1657): avc: denied { read } for pid=4401 comm="syz.0.269" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 63.972008][ T29] audit: type=1400 audit(1749037249.351:1658): avc: denied { open } for pid=4401 comm="syz.0.269" path="/dev/ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 63.995169][ T29] audit: type=1400 audit(1749037249.362:1659): avc: denied { map } for pid=4395 comm="syz.4.268" path="/51/mnt/memory.current" dev="loop4" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 64.018285][ T29] audit: type=1400 audit(1749037249.362:1660): avc: denied { wake_alarm } for pid=4395 comm="syz.4.268" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 64.125839][ T3316] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 64.333693][ T4416] loop4: detected capacity change from 0 to 512 [ 64.359403][ T4416] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 64.395248][ T4416] EXT4-fs error (device loop4): ext4_orphan_get:1419: comm syz.4.272: bad orphan inode 11 [ 64.422842][ T4416] ext4_test_bit(bit=10, block=4) = 1 [ 64.428194][ T4416] is_bad_inode(inode)=0 [ 64.432429][ T4416] NEXT_ORPHAN(inode)=2080374784 [ 64.438250][ T4416] max_ino=32 [ 64.441461][ T4416] i_nlink=0 [ 64.455189][ T4416] EXT4-fs (loop4): 1 truncate cleaned up [ 64.461247][ T4416] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 64.473315][ T4414] cgroup: fork rejected by pids controller in /syz0 [ 64.498907][ T3955] usb usb2-port1: attempt power cycle [ 64.734767][ T5933] loop3: detected capacity change from 0 to 1024 [ 64.795921][ T5933] journal_path: Non-blockdev passed as './file1' [ 64.802379][ T5933] EXT4-fs: error: could not find journal device path [ 64.894815][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.184026][ T6476] netlink: 4 bytes leftover after parsing attributes in process `syz.4.277'. [ 65.455263][ T6494] loop3: detected capacity change from 0 to 512 [ 65.525401][ T6498] loop2: detected capacity change from 0 to 512 [ 65.532299][ T6498] EXT4-fs: Ignoring removed oldalloc option [ 65.540975][ T6498] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 65.569115][ T6498] EXT4-fs (loop2): orphan cleanup on readonly fs [ 65.586141][ T6498] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.282: Failed to acquire dquot type 1 [ 65.619713][ T6498] EXT4-fs (loop2): 1 truncate cleaned up [ 65.631415][ T6498] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 66.488276][ T6494] sch_fq: defrate 4294967295 ignored. [ 66.683988][ T6511] Invalid ELF header magic: != ELF [ 67.215248][ T6515] hub 1-0:1.0: USB hub found [ 67.225593][ T6515] hub 1-0:1.0: 8 ports detected [ 67.665367][ T6508] Set syz1 is full, maxelem 65536 reached [ 67.962556][ T6531] loop4: detected capacity change from 0 to 8192 [ 68.330980][ T3955] usb usb2-port1: unable to enumerate USB device [ 68.389599][ T6541] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 68.428127][ T6541] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 68.460922][ T3323] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.474779][ T29] kauditd_printk_skb: 383 callbacks suppressed [ 68.474793][ T29] audit: type=1400 audit(1749037254.297:2042): avc: denied { setopt } for pid=6540 comm="ext4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 68.494269][ T6544] loop3: detected capacity change from 0 to 512 [ 68.516549][ T6539] Cannot find map_set index 0 as target [ 68.528122][ T6544] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 68.548700][ T6544] EXT4-fs error (device loop3): ext4_orphan_get:1419: comm syz.3.296: bad orphan inode 15 [ 68.560361][ T6544] ext4_test_bit(bit=14, block=18) = 1 [ 68.565801][ T6544] is_bad_inode(inode)=0 [ 68.570061][ T6544] NEXT_ORPHAN(inode)=1023 [ 68.574474][ T6544] max_ino=32 [ 68.576483][ T6539] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 68.577721][ T6544] i_nlink=0 [ 68.578617][ T6544] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0009-000000000000 r/w without journal. Quota mode: none. [ 68.589072][ T6539] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 68.621210][ T29] audit: type=1400 audit(1749037254.458:2043): avc: denied { write } for pid=6538 comm="syz.0.294" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 68.641892][ T6544] ext2 filesystem being mounted at /63/éq‰Y’3aK supports timestamps until 2038-01-19 (0x7fffffff) [ 68.677667][ T29] audit: type=1400 audit(1749037254.512:2044): avc: denied { bind } for pid=6543 comm="syz.3.296" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 68.697012][ T29] audit: type=1400 audit(1749037254.512:2045): avc: denied { name_bind } for pid=6543 comm="syz.3.296" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 68.718684][ T29] audit: type=1400 audit(1749037254.512:2046): avc: denied { node_bind } for pid=6543 comm="syz.3.296" saddr=::1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 68.790119][ T29] audit: type=1400 audit(1749037254.641:2047): avc: denied { block_suspend } for pid=6543 comm="syz.3.296" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 68.825343][ T29] audit: type=1400 audit(1749037254.673:2048): avc: denied { unmount } for pid=3316 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 68.884934][ T6551] netlink: 4 bytes leftover after parsing attributes in process `syz.2.307'. [ 68.908545][ T6553] loop4: detected capacity change from 0 to 512 [ 68.923319][ T6553] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 68.935068][ T6553] EXT4-fs (loop4): 1 truncate cleaned up [ 68.941055][ T6553] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 68.997055][ T29] audit: type=1400 audit(1749037254.855:2049): avc: denied { setopt } for pid=6556 comm="syz.2.298" lport=6 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 69.017711][ T29] audit: type=1400 audit(1749037254.855:2050): avc: denied { connect } for pid=6556 comm="syz.2.298" lport=6 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 69.038121][ T29] audit: type=1400 audit(1749037254.855:2051): avc: denied { write } for pid=6556 comm="syz.2.298" lport=6 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 69.166673][ T6563] loop2: detected capacity change from 0 to 2048 [ 69.200889][ T6565] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 69.216787][ T6563] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 69.335423][ T2970] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 69.345081][ T2970] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 69.383253][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0009-000000000000. [ 69.670185][ T6579] bridge0: entered allmulticast mode [ 69.911247][ T6576] fido_id[6576]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 70.056666][ T3323] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.112307][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.343324][ T6592] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 70.357049][ T6592] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 70.409342][ T6601] hub 6-0:1.0: USB hub found [ 70.414875][ T6601] hub 6-0:1.0: 8 ports detected [ 71.415931][ T6613] netlink: 3 bytes leftover after parsing attributes in process `syz.1.316'. [ 71.424967][ T6613] 0ªX¹¦À: renamed from caif0 [ 71.431555][ T6613] 0ªX¹¦À: entered allmulticast mode [ 71.437019][ T6613] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 71.823322][ T6613] netlink: 36 bytes leftover after parsing attributes in process `syz.1.316'. [ 72.138609][ T6636] hub 1-0:1.0: USB hub found [ 72.145804][ T6636] hub 1-0:1.0: 8 ports detected [ 72.227609][ T6637] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present! [ 72.249568][ T6640] netlink: 8 bytes leftover after parsing attributes in process `syz.2.322'. [ 72.258546][ T6640] netlink: 44 bytes leftover after parsing attributes in process `syz.2.322'. [ 72.290957][ T6638] loop3: detected capacity change from 0 to 512 [ 72.317735][ T6638] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 72.405115][ T6638] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 72.471879][ T6638] ext4 filesystem being mounted at /66/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 73.264474][ T6697] netlink: 8 bytes leftover after parsing attributes in process `syz.2.327'. [ 73.277594][ T6697] vlan2: entered allmulticast mode [ 73.282763][ T6697] macvtap0: entered allmulticast mode [ 73.294162][ T29] kauditd_printk_skb: 90 callbacks suppressed [ 73.300443][ T29] audit: type=1400 audit(1749037259.437:2142): avc: denied { ioctl } for pid=6691 comm="syz.2.327" path="socket:[7706]" dev="sockfs" ino=7706 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 73.480793][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.786832][ T6700] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 74.284284][ T6705] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.293144][ T6705] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.302349][ T6700] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 74.612151][ T6705] bridge0: entered allmulticast mode [ 74.751533][ T6709] netlink: 40 bytes leftover after parsing attributes in process `syz.3.341'. [ 75.305901][ T6695] Cannot find map_set index 0 as target [ 75.624926][ T6695] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 76.059358][ T6695] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 76.134759][ T6705] bridge_slave_1: left allmulticast mode [ 76.140785][ T6705] bridge_slave_1: left promiscuous mode [ 76.147238][ T6705] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.158950][ T6705] bridge_slave_0: left allmulticast mode [ 76.164616][ T6705] bridge_slave_0: left promiscuous mode [ 76.170521][ T6705] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.238669][ T29] audit: type=1326 audit(1749037262.623:2143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6722 comm="syz.3.332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6da338e929 code=0x7ffc0000 [ 76.262105][ T29] audit: type=1326 audit(1749037262.623:2144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6722 comm="syz.3.332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6da338e929 code=0x7ffc0000 [ 76.285729][ T29] audit: type=1326 audit(1749037262.623:2145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6722 comm="syz.3.332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6da338e929 code=0x7ffc0000 [ 76.329307][ T29] audit: type=1326 audit(1749037262.623:2146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6722 comm="syz.3.332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=136 compat=0 ip=0x7f6da338e929 code=0x7ffc0000 [ 76.352657][ T29] audit: type=1326 audit(1749037262.623:2147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6722 comm="syz.3.332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6da338e929 code=0x7ffc0000 [ 76.376062][ T29] audit: type=1326 audit(1749037262.623:2148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6722 comm="syz.3.332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=51 compat=0 ip=0x7f6da338e929 code=0x7ffc0000 [ 76.399808][ T29] audit: type=1326 audit(1749037262.623:2149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6722 comm="syz.3.332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6da338e929 code=0x7ffc0000 [ 76.423201][ T29] audit: type=1326 audit(1749037262.634:2150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6722 comm="syz.3.332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6da338e929 code=0x7ffc0000 [ 76.447137][ T29] audit: type=1400 audit(1749037262.806:2151): avc: denied { bind } for pid=6741 comm="syz.3.336" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 76.535367][ T6745] 9pnet: Could not find request transport: f [ 76.601464][ T6754] lo speed is unknown, defaulting to 1000 [ 76.611360][ T6754] lo speed is unknown, defaulting to 1000 [ 76.618236][ T6739] netlink: 180 bytes leftover after parsing attributes in process `syz.4.335'. [ 76.622055][ T6754] lo speed is unknown, defaulting to 1000 [ 76.642775][ T6739] loop4: detected capacity change from 0 to 512 [ 76.654740][ T6754] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 76.680963][ T6754] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 76.696055][ T6739] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 76.752658][ T6739] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 76.773743][ T6739] ext4 filesystem being mounted at /62/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 76.795562][ T6754] lo speed is unknown, defaulting to 1000 [ 76.811979][ T6754] lo speed is unknown, defaulting to 1000 [ 76.829040][ T6754] lo speed is unknown, defaulting to 1000 [ 76.842732][ T6754] lo speed is unknown, defaulting to 1000 [ 76.854235][ T6754] lo speed is unknown, defaulting to 1000 [ 76.930113][ T6775] netlink: 'syz.3.340': attribute type 5 has an invalid length. [ 76.938014][ T6775] netlink: 152 bytes leftover after parsing attributes in process `syz.3.340'. [ 76.948808][ T6775] : renamed from bond0 [ 76.986416][ T6777] xt_hashlimit: max too large, truncated to 1048576 [ 77.068555][ T6781] loop2: detected capacity change from 0 to 128 [ 77.216523][ T6783] lo speed is unknown, defaulting to 1000 [ 77.270248][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.471898][ T6785] loop2: detected capacity change from 0 to 8192 [ 77.543943][ T6789] GUP no longer grows the stack in syz.4.346 (6789): 200000004000-200000008000 (200000002000) [ 77.543966][ T6789] CPU: 1 UID: 0 PID: 6789 Comm: syz.4.346 Not tainted 6.15.0-syzkaller-11796-g5abc7438f1e9 #0 PREEMPT(voluntary) [ 77.543993][ T6789] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 77.544007][ T6789] Call Trace: [ 77.544014][ T6789] [ 77.544100][ T6789] __dump_stack+0x1d/0x30 [ 77.544134][ T6789] dump_stack_lvl+0xe8/0x140 [ 77.544158][ T6789] dump_stack+0x15/0x1b [ 77.544176][ T6789] __get_user_pages+0x199d/0x1fb0 [ 77.544210][ T6789] ? __rcu_read_unlock+0x4f/0x70 [ 77.544248][ T6789] get_user_pages_remote+0x1dc/0x7a0 [ 77.544278][ T6789] __access_remote_vm+0x156/0x560 [ 77.544303][ T6789] access_remote_vm+0x32/0x40 [ 77.544398][ T6789] proc_pid_cmdline_read+0x30f/0x6a0 [ 77.544478][ T6789] ? __pfx_proc_pid_cmdline_read+0x10/0x10 [ 77.544501][ T6789] vfs_readv+0x3fb/0x690 [ 77.544591][ T6789] __x64_sys_preadv+0xfd/0x1c0 [ 77.544685][ T6789] x64_sys_call+0x1503/0x2fb0 [ 77.544709][ T6789] do_syscall_64+0xd2/0x200 [ 77.544735][ T6789] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 77.544757][ T6789] ? clear_bhb_loop+0x40/0x90 [ 77.544863][ T6789] ? clear_bhb_loop+0x40/0x90 [ 77.544889][ T6789] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 77.544939][ T6789] RIP: 0033:0x7f0df8dae929 [ 77.544951][ T6789] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 77.544967][ T6789] RSP: 002b:00007f0df7417038 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 77.545068][ T6789] RAX: ffffffffffffffda RBX: 00007f0df8fd5fa0 RCX: 00007f0df8dae929 [ 77.545083][ T6789] RDX: 0000000000000001 RSI: 0000200000000d00 RDI: 0000000000000009 [ 77.545099][ T6789] RBP: 00007f0df8e30ab1 R08: 0000000000000200 R09: 0000000000000000 [ 77.545114][ T6789] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 77.545129][ T6789] R13: 0000000000000000 R14: 00007f0df8fd5fa0 R15: 00007ffd3d5d46e8 [ 77.545151][ T6789] [ 77.661526][ T6783] FAT-fs (loop2): error, corrupted directory (invalid entries) [ 77.661586][ T6783] FAT-fs (loop2): Filesystem has been set read-only [ 77.797536][ T6793] loop2: detected capacity change from 0 to 512 [ 77.798425][ T6793] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 77.852481][ T6793] EXT4-fs (loop2): 1 truncate cleaned up [ 77.852870][ T6793] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 78.194040][ T29] kauditd_printk_skb: 56 callbacks suppressed [ 78.194066][ T29] audit: type=1400 audit(1749037264.726:2208): avc: denied { read } for pid=6792 comm="syz.2.347" dev="nsfs" ino=4026532544 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 78.194091][ T29] audit: type=1400 audit(1749037264.726:2209): avc: denied { open } for pid=6792 comm="syz.2.347" path="net:[4026532544]" dev="nsfs" ino=4026532544 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 78.194855][ T29] audit: type=1400 audit(1749037264.726:2210): avc: denied { create } for pid=6792 comm="syz.2.347" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 78.196236][ T29] audit: type=1400 audit(1749037264.726:2211): avc: denied { listen } for pid=6792 comm="syz.2.347" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 78.197412][ T29] audit: type=1326 audit(1749037264.726:2212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6792 comm="syz.2.347" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f984413e929 code=0x7ffc0000 [ 78.197687][ T29] audit: type=1326 audit(1749037264.726:2213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6792 comm="syz.2.347" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f984413e929 code=0x7ffc0000 [ 78.198787][ T29] audit: type=1326 audit(1749037264.726:2214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6792 comm="syz.2.347" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f984413e929 code=0x7ffc0000 [ 78.198875][ T29] audit: type=1326 audit(1749037264.726:2215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6792 comm="syz.2.347" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f984413e929 code=0x7ffc0000 [ 78.199112][ T29] audit: type=1326 audit(1749037264.726:2216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6792 comm="syz.2.347" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f984413e929 code=0x7ffc0000 [ 78.201915][ T29] audit: type=1326 audit(1749037264.737:2217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6792 comm="syz.2.347" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f984413e929 code=0x7ffc0000 [ 78.397164][ T3323] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.631494][ T6799] pim6reg1: entered promiscuous mode [ 78.755089][ T6801] lo speed is unknown, defaulting to 1000 [ 79.120111][ T6805] tipc: Enabling of bearer rejected, failed to enable media [ 79.256398][ T6807] loop4: detected capacity change from 0 to 1024 [ 79.303791][ T6813] netlink: 'syz.2.354': attribute type 5 has an invalid length. [ 79.311516][ T6813] netlink: 152 bytes leftover after parsing attributes in process `syz.2.354'. [ 79.332300][ T6813] : renamed from bond0 [ 79.420630][ T6820] vhci_hcd: invalid port number 66 [ 79.425814][ T6820] vhci_hcd: default hub control req: 2030 v00ff i0042 l205 [ 79.697336][ T6827] lo speed is unknown, defaulting to 1000 [ 79.727202][ T6827] loop2: detected capacity change from 0 to 512 [ 79.733912][ T6827] EXT4-fs: Ignoring removed mblk_io_submit option [ 79.740416][ T6827] EXT4-fs: Ignoring removed bh option [ 79.748089][ T6827] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 79.768264][ T6827] EXT4-fs (loop2): 1 truncate cleaned up [ 79.774907][ T6827] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 79.862310][ T6828] loop4: detected capacity change from 0 to 164 [ 79.892116][ T6828] ISOFS: unable to read i-node block [ 79.897489][ T6828] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 80.214281][ T6833] loop3: detected capacity change from 0 to 1024 [ 80.288206][ T6833] EXT4-fs: Ignoring removed bh option [ 80.293627][ T6833] EXT4-fs: Ignoring removed nomblk_io_submit option [ 80.310246][ T3323] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.358967][ T6834] netdevsim netdevsim0: Direct firmware load for ./file0 failed with error -2 [ 80.384710][ T6833] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 80.403009][ T6836] loop4: detected capacity change from 0 to 1024 [ 80.410011][ T6836] journal_path: Non-blockdev passed as './file1' [ 80.416421][ T6836] EXT4-fs: error: could not find journal device path [ 80.424824][ T6839] netlink: 28 bytes leftover after parsing attributes in process `syz.2.359'. [ 80.439229][ T6839] blktrace: Concurrent blktraces are not allowed on loop5 [ 80.499157][ T6839] smc: net device bond0 applied user defined pnetid SYZ2 [ 80.728615][ T6844] Cannot find add_set index 3 as target [ 80.784178][ T6844] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 81.154036][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.221122][ T6850] siw: device registration error -23 [ 81.228657][ T6854] random: crng reseeded on system resumption [ 81.232453][ T6853] loop3: detected capacity change from 0 to 2048 [ 81.258548][ T6853] EXT4-fs (loop3): failed to initialize system zone (-117) [ 81.266213][ T6853] EXT4-fs (loop3): mount failed [ 81.286034][ T6854] loop4: detected capacity change from 0 to 512 [ 81.307642][ T6853] loop3: detected capacity change from 0 to 164 [ 81.324530][ T6854] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.366: bg 0: block 248: padding at end of block bitmap is not set [ 81.392620][ T6853] SELinux: failed to load policy [ 81.447805][ T6854] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.366: Failed to acquire dquot type 1 [ 81.483859][ T6865] veth0: entered promiscuous mode [ 81.489366][ T6865] netlink: 4 bytes leftover after parsing attributes in process `syz.3.368'. [ 81.506235][ T6865] veth0 (unregistering): left promiscuous mode [ 81.519177][ T6854] EXT4-fs (loop4): 1 truncate cleaned up [ 81.529351][ T6854] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 81.570239][ T6854] ext4 filesystem being mounted at /67/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 81.611403][ T6854] dummy0: left promiscuous mode [ 81.618730][ T6854] team0: Port device dummy0 removed [ 81.624825][ T6854] batman_adv: batadv0: Adding interface: dummy0 [ 81.631172][ T6854] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.656411][ T6854] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 81.709835][ T6864] lo speed is unknown, defaulting to 1000 [ 81.796301][ T3454] Process accounting resumed [ 81.854860][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.980114][ T6879] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=6879 comm=syz.3.372 [ 82.442284][ T6890] netlink: 12 bytes leftover after parsing attributes in process `syz.0.374'. [ 82.471313][ T6890] capability: warning: `syz.0.374' uses 32-bit capabilities (legacy support in use) [ 82.514129][ T6890] loop0: detected capacity change from 0 to 128 [ 82.523628][ T6890] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 82.523976][ T6890] ext4 filesystem being mounted at /77/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 82.719723][ T3317] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 82.754209][ T6899] loop0: detected capacity change from 0 to 1024 [ 82.777376][ T6899] EXT4-fs: Ignoring removed bh option [ 82.783005][ T6899] EXT4-fs: Ignoring removed nomblk_io_submit option [ 82.920289][ T6899] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 82.942466][ T6902] siw: device registration error -23 [ 83.017909][ T6906] loop3: detected capacity change from 0 to 512 [ 83.066038][ T6906] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 83.108257][ T6906] EXT4-fs (loop3): 1 truncate cleaned up [ 83.116158][ T6906] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 83.169326][ T6906] lo speed is unknown, defaulting to 1000 [ 83.847999][ T6913] loop4: detected capacity change from 0 to 512 [ 83.859039][ T29] kauditd_printk_skb: 528 callbacks suppressed [ 83.859051][ T29] audit: type=1400 audit(1749037270.810:2744): avc: denied { append } for pid=6914 comm="syz.1.380" name="loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 83.925747][ T6913] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 83.948825][ T6917] 9pnet: p9_errstr2errno: server reported unknown error 1844674407370 [ 84.015201][ T6913] EXT4-fs (loop4): 1 truncate cleaned up [ 84.038619][ T29] audit: type=1400 audit(1749037270.842:2745): avc: denied { module_request } for pid=6914 comm="syz.1.380" kmod="netdev-team0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 84.060521][ T29] audit: type=1400 audit(1749037270.981:2746): avc: denied { sys_module } for pid=6914 comm="syz.1.380" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 84.081652][ T29] audit: type=1400 audit(1749037270.981:2747): avc: denied { read } for pid=6918 comm="ext4" name="event0" dev="devtmpfs" ino=242 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 84.104469][ T29] audit: type=1400 audit(1749037270.981:2748): avc: denied { open } for pid=6918 comm="ext4" path="/dev/input/event0" dev="devtmpfs" ino=242 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 84.138021][ T6913] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 84.196407][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.225469][ T6919] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 84.330846][ T6919] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 84.496379][ T29] audit: type=1400 audit(1749037271.196:2749): avc: denied { ioctl } for pid=6918 comm="ext4" path="/dev/raw-gadget" dev="devtmpfs" ino=142 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 84.496434][ T29] audit: type=1400 audit(1749037271.271:2750): avc: denied { getopt } for pid=6925 comm="syz.0.381" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 84.496459][ T29] audit: type=1400 audit(1749037271.271:2751): avc: denied { ioctl } for pid=6923 comm="syz.1.382" path="/dev/sg0" dev="devtmpfs" ino=137 ioctlcmd=0x2275 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 84.496508][ T29] audit: type=1400 audit(1749037271.335:2752): avc: denied { read } for pid=6925 comm="syz.0.381" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 84.496562][ T29] audit: type=1400 audit(1749037271.335:2753): avc: denied { open } for pid=6925 comm="syz.0.381" path="/dev/autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 84.605083][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.671010][ T6932] Invalid ELF header magic: != ELF [ 84.877175][ T6935] sd 0:0:1:0: device reset [ 84.987805][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.098636][ T6945] serio: Serial port ptm0 [ 85.311691][ T6949] netlink: 12 bytes leftover after parsing attributes in process `syz.1.387'. [ 85.455051][ T6952] futex_wake_op: syz.1.387 tries to shift op by 32; fix this program [ 85.468185][ T6946] batman_adv: batadv0: Adding interface: dummy0 [ 85.474624][ T6946] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.499884][ T6946] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 85.765274][ T6962] netlink: 36 bytes leftover after parsing attributes in process `syz.2.392'. [ 85.774300][ T6962] netlink: 16 bytes leftover after parsing attributes in process `syz.2.392'. [ 85.777883][ T6960] siw: device registration error -23 [ 85.783331][ T6962] netlink: 36 bytes leftover after parsing attributes in process `syz.2.392'. [ 85.785952][ T6962] netlink: 36 bytes leftover after parsing attributes in process `syz.2.392'. [ 85.810312][ T6962] loop2: detected capacity change from 0 to 512 [ 85.822021][ T6962] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 85.831145][ T6962] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 85.840323][ T6962] EXT4-fs (loop2): warning: checktime reached, running e2fsck is recommended [ 85.849392][ T6962] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 85.857520][ T6962] System zones: 0-2, 18-18, 34-34 [ 85.866085][ T6962] EXT4-fs error (device loop2): ext4_orphan_get:1393: inode #15: comm syz.2.392: iget: bad i_size value: 360287970189639680 [ 85.880297][ T6962] EXT4-fs error (device loop2): ext4_orphan_get:1398: comm syz.2.392: couldn't read orphan inode 15 (err -117) [ 85.897534][ T6962] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 85.922841][ T6962] EXT4-fs error (device loop2): ext4_lookup:1787: inode #15: comm syz.2.392: iget: bad i_size value: 360287970189639680 [ 85.966733][ T6967] netlink: 'syz.0.393': attribute type 4 has an invalid length. [ 85.974949][ T3323] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.143673][ T6976] loop3: detected capacity change from 0 to 512 [ 86.159430][ T6976] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 86.190403][ T6980] loop0: detected capacity change from 0 to 512 [ 86.197193][ T6980] EXT4-fs: Ignoring removed bh option [ 86.206694][ T6980] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 86.236670][ T6980] EXT4-fs (loop0): 1 truncate cleaned up [ 86.243251][ T6980] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 86.268746][ T6976] EXT4-fs (loop3): 1 truncate cleaned up [ 86.400229][ T6976] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 86.419897][ T6974] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 86.447081][ T6974] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 86.499640][ T6983] loop2: detected capacity change from 0 to 512 [ 86.531538][ T6983] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 86.585711][ T6983] EXT4-fs (loop2): 1 truncate cleaned up [ 86.592034][ T6983] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 86.621123][ T6983] lo speed is unknown, defaulting to 1000 [ 87.244476][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.330200][ T6988] netlink: 'syz.4.398': attribute type 13 has an invalid length. [ 87.338267][ T6988] netlink: 4 bytes leftover after parsing attributes in process `syz.4.398'. [ 87.397202][ T6987] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 87.446091][ T6987] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 87.546557][ T6987] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.555540][ T6987] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.564549][ T6987] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.573590][ T6987] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.777475][ T6990] infiniband syz!: set down [ 87.782189][ T6990] infiniband syz!: added team_slave_0 [ 87.832385][ T7000] serio: Serial port ptm0 [ 87.947079][ T6990] RDS/IB: syz!: added [ 87.951511][ T6990] smc: adding ib device syz! with port count 1 [ 87.963429][ T6990] smc: ib device syz! port 1 has pnetid [ 88.143059][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.204457][ T7005] loop4: detected capacity change from 0 to 1024 [ 88.229497][ T7005] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (12806!=20869) [ 88.257927][ T7005] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a842c018, mo2=0002] [ 88.275368][ T7005] System zones: 0-1, 3-36 [ 88.285505][ T7005] EXT4-fs (loop4): orphan cleanup on readonly fs [ 88.299495][ T7005] EXT4-fs (loop4): 1 orphan inode deleted [ 88.338840][ T7005] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 88.366724][ T3323] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.404807][ T7011] netlink: 'syz.4.404': attribute type 10 has an invalid length. [ 88.415336][ T7011] team_slave_0: left promiscuous mode [ 88.422383][ T7011] team0 (unregistering): Port device team_slave_0 removed [ 88.430081][ T7011] team_slave_1: left promiscuous mode [ 88.437190][ T7011] team0 (unregistering): Port device team_slave_1 removed [ 88.457723][ T7015] loop0: detected capacity change from 0 to 164 [ 88.497919][ T7017] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=7017 comm=syz.2.405 [ 88.522093][ T7015] Unable to read rock-ridge attributes [ 88.554406][ T29] kauditd_printk_skb: 70 callbacks suppressed [ 88.554418][ T29] audit: type=1400 audit(1749037275.831:2824): avc: denied { write } for pid=7002 comm="syz.1.403" path="socket:[9168]" dev="sockfs" ino=9168 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 88.586485][ T2970] IPVS: starting estimator thread 0... [ 88.624499][ T7003] netlink: 76 bytes leftover after parsing attributes in process `syz.1.403'. [ 88.635750][ T7015] netlink: 14601 bytes leftover after parsing attributes in process `syz.0.406'. [ 88.648368][ T7017] bridge_slave_0: left allmulticast mode [ 88.654036][ T7017] bridge_slave_0: left promiscuous mode [ 88.659932][ T7017] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.672978][ T7017] bridge_slave_1: left allmulticast mode [ 88.678755][ T7017] bridge_slave_1: left promiscuous mode [ 88.684434][ T7017] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.701334][ T7017] : (slave bond_slave_0): Releasing backup interface [ 88.713009][ T7017] : (slave bond_slave_1): Releasing backup interface [ 88.721649][ T7017] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 88.732664][ T7017] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 88.741644][ T7018] IPVS: using max 2496 ests per chain, 124800 per kthread [ 88.791587][ T7003] vcan0: entered promiscuous mode [ 88.796813][ T7003] vcan0: entered allmulticast mode [ 89.325335][ T7028] loop2: detected capacity change from 0 to 1024 [ 89.352976][ T7028] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (12806!=20869) [ 89.435919][ T7028] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a842c018, mo2=0002] [ 89.435956][ T7028] System zones: 0-1, 3-36 [ 89.436084][ T7028] EXT4-fs (loop2): orphan cleanup on readonly fs [ 89.450637][ T7028] EXT4-fs (loop2): 1 orphan inode deleted [ 89.457676][ T7028] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 89.471610][ T29] audit: type=1400 audit(1749037276.829:2825): avc: denied { bind } for pid=7033 comm="syz.1.411" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 89.512193][ T7037] netlink: 'syz.2.409': attribute type 10 has an invalid length. [ 89.559562][ T3323] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.612664][ T7042] lo speed is unknown, defaulting to 1000 [ 89.705158][ T29] audit: type=1400 audit(1749037277.075:2826): avc: denied { read } for pid=7039 comm=2B7D5B70B3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 89.706828][ T29] audit: type=1400 audit(1749037277.075:2827): avc: denied { mac_admin } for pid=7039 comm=2B7D5B70B3 capability=33 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 89.747434][ T7046] SELinux: Context system_u:object_r:net_conf_t:s0 is not valid (left unmapped). [ 89.764394][ T29] audit: type=1400 audit(1749037277.140:2828): avc: denied { relabelto } for pid=7039 comm=2B7D5B70B3 name="cgroup.procs" dev="cgroup" ino=151 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:net_conf_t:s0" [ 89.791347][ T29] audit: type=1400 audit(1749037277.140:2829): avc: denied { associate } for pid=7039 comm=2B7D5B70B3 name="cgroup.procs" dev="cgroup" ino=151 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 srawcon="system_u:object_r:net_conf_t:s0" [ 89.841232][ T29] audit: type=1326 audit(1749037277.204:2830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7039 comm="syz.1.413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f857132e929 code=0x7fc00000 [ 89.867931][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.943138][ T7054] random: crng reseeded on system resumption [ 89.957440][ T7054] loop0: detected capacity change from 0 to 512 [ 89.959398][ T7052] loop4: detected capacity change from 0 to 1024 [ 89.963368][ T7055] serio: Serial port ptm0 [ 90.022907][ T7052] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 90.030260][ T7054] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.417: bg 0: block 248: padding at end of block bitmap is not set [ 90.073414][ T7054] Quota error (device loop0): write_blk: dquota write failed [ 90.073450][ T7054] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 90.073482][ T7054] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.417: Failed to acquire dquot type 1 [ 90.074271][ T7054] EXT4-fs (loop0): 1 truncate cleaned up [ 90.074687][ T7054] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 90.074854][ T7054] ext4 filesystem being mounted at /88/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 90.229245][ T7054] batman_adv: batadv0: Adding interface: dummy0 [ 90.235603][ T7054] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.235723][ T7054] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 90.477145][ T29] audit: type=1326 audit(1749037277.773:2831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7039 comm="syz.1.413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f85712cab19 code=0x7fc00000 [ 90.599284][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.708210][ T7067] netlink: 12 bytes leftover after parsing attributes in process `syz.1.419'. [ 90.787296][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.333520][ T7082] loop4: detected capacity change from 0 to 1024 [ 91.341422][ T7082] EXT4-fs: Ignoring removed bh option [ 91.346973][ T7082] EXT4-fs: Ignoring removed nomblk_io_submit option [ 91.421408][ T7082] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 91.548023][ T7078] ÿÿÿÿÿÿ: renamed from vlan1 [ 91.577658][ T7091] netlink: 4 bytes leftover after parsing attributes in process `syz.1.425'. [ 91.598625][ T7091] tipc: Enabling of bearer rejected, failed to enable media [ 91.669077][ T7095] lo speed is unknown, defaulting to 1000 [ 92.455713][ T7102] netlink: 8 bytes leftover after parsing attributes in process `syz.2.426'. [ 92.575782][ T7105] tipc: Started in network mode [ 92.580672][ T7105] tipc: Node identity 68a, cluster identity 3 [ 92.586897][ T7105] tipc: Node number set to 1674 [ 92.610285][ T7105] tipc: Cannot configure node identity twice [ 92.700787][ T7105] SELinux: failed to load policy [ 92.732395][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.760163][ T7109] netlink: 8 bytes leftover after parsing attributes in process `syz.1.427'. [ 93.120639][ T7114] loop2: detected capacity change from 0 to 2048 [ 93.137533][ T7116] netlink: 16 bytes leftover after parsing attributes in process `syz.4.430'. [ 93.203109][ T7120] loop3: detected capacity change from 0 to 512 [ 93.234383][ T7122] lo speed is unknown, defaulting to 1000 [ 93.333506][ T7122] loop0: detected capacity change from 0 to 512 [ 93.340137][ T7122] EXT4-fs: Ignoring removed mblk_io_submit option [ 93.346635][ T7122] EXT4-fs: Ignoring removed bh option [ 93.354193][ T7122] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 93.410548][ T29] kauditd_printk_skb: 69 callbacks suppressed [ 93.410644][ T29] audit: type=1326 audit(1749037281.013:2901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7108 comm="syz.2.431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f98441358e7 code=0x7ffc0000 [ 93.440059][ T29] audit: type=1326 audit(1749037281.013:2902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7108 comm="syz.2.431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f98440dab19 code=0x7ffc0000 [ 93.463290][ T29] audit: type=1326 audit(1749037281.013:2903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7108 comm="syz.2.431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=449 compat=0 ip=0x7f984413e929 code=0x7ffc0000 [ 93.486741][ T29] audit: type=1326 audit(1749037281.013:2904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7108 comm="syz.2.431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f98441358e7 code=0x7ffc0000 [ 93.509987][ T29] audit: type=1326 audit(1749037281.013:2905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7108 comm="syz.2.431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f98440dab19 code=0x7ffc0000 [ 93.533371][ T29] audit: type=1326 audit(1749037281.013:2906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7108 comm="syz.2.431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=449 compat=0 ip=0x7f984413e929 code=0x7ffc0000 [ 93.556786][ T29] audit: type=1326 audit(1749037281.024:2907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7108 comm="syz.2.431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f98441358e7 code=0x7ffc0000 [ 93.580012][ T29] audit: type=1326 audit(1749037281.024:2908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7108 comm="syz.2.431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f98440dab19 code=0x7ffc0000 [ 93.603317][ T29] audit: type=1326 audit(1749037281.024:2909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7108 comm="syz.2.431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=449 compat=0 ip=0x7f984413e929 code=0x7ffc0000 [ 93.626673][ T29] audit: type=1326 audit(1749037281.035:2910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7108 comm="syz.2.431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f98441358e7 code=0x7ffc0000 [ 93.652640][ T7120] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 93.695810][ T7122] EXT4-fs (loop0): 1 truncate cleaned up [ 93.702050][ T7122] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 93.744959][ T7120] EXT4-fs (loop3): 1 truncate cleaned up [ 93.753911][ T7120] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 93.788523][ T7127] infiniband srz1: RDMA CMA: cma_listen_on_dev, error -98 [ 93.809811][ T7120] IPv6: NLM_F_CREATE should be specified when creating new route [ 93.841342][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.850751][ T7131] loop4: detected capacity change from 0 to 1024 [ 93.934919][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.952380][ T7136] loop1: detected capacity change from 0 to 8192 [ 93.959089][ T7136] vfat: Unknown parameter '\\@[*#)' [ 93.965959][ T7142] netlink: 4 bytes leftover after parsing attributes in process `syz.3.435'. [ 93.988066][ T7131] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 94.014483][ T7142] batman_adv: batadv0: Removing interface: dummy0 [ 94.055771][ T7142] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 94.075797][ T7146] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 94.111441][ T7142] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 94.135685][ T7144] SELinux: failed to load policy [ 94.140854][ T7146] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(12) [ 94.147455][ T7146] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 94.155020][ T7146] vhci_hcd vhci_hcd.0: Device attached [ 94.166354][ T7147] vhci_hcd: connection closed [ 94.167052][ T1707] vhci_hcd: stop threads [ 94.176135][ T1707] vhci_hcd: release socket [ 94.180552][ T1707] vhci_hcd: disconnect device [ 94.205826][ T7144] siw: device registration error -23 [ 94.299811][ T7153] SELinux: failed to load policy [ 94.323131][ T7155] loop1: detected capacity change from 0 to 1024 [ 94.331158][ T7157] netlink: 24 bytes leftover after parsing attributes in process `syz.2.441'. [ 94.352857][ T7155] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 94.458590][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.508009][ T7164] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(15) [ 94.514604][ T7164] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 94.523295][ T7164] vhci_hcd vhci_hcd.0: Device attached [ 94.529553][ T7165] vhci_hcd: connection closed [ 94.529708][ T12] vhci_hcd: stop threads [ 94.538833][ T12] vhci_hcd: release socket [ 94.543268][ T12] vhci_hcd: disconnect device [ 94.607316][ T7161] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 94.617358][ T7161] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 94.769935][ T7169] loop3: detected capacity change from 0 to 164 [ 94.796164][ T7171] syz!: rxe_newlink: already configured on team_slave_0 [ 94.810751][ T7169] iso9660: Unknown parameter 'GPL' [ 94.944057][ T7173] loop0: detected capacity change from 0 to 2048 [ 95.004928][ T3308] Alternate GPT is invalid, using primary GPT. [ 95.011312][ T3308] loop0: p1 p2 p3 [ 95.026853][ T7175] netlink: 36 bytes leftover after parsing attributes in process `syz.3.445'. [ 95.035844][ T7175] netlink: 16 bytes leftover after parsing attributes in process `syz.3.445'. [ 95.044858][ T7175] netlink: 36 bytes leftover after parsing attributes in process `syz.3.445'. [ 95.057288][ T7173] Alternate GPT is invalid, using primary GPT. [ 95.063692][ T7173] loop0: p1 p2 p3 [ 95.141180][ T7179] loop4: detected capacity change from 0 to 1024 [ 95.150912][ T7175] netlink: 36 bytes leftover after parsing attributes in process `syz.3.445'. [ 95.165120][ T3329] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.184947][ T7179] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 95.225414][ T7179] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.325477][ T7181] infiniband syz2: set down [ 95.330041][ T7181] infiniband syz2: added veth0_to_bond [ 95.352408][ T7181] RDS/IB: syz2: added [ 95.356514][ T7181] smc: adding ib device syz2 with port count 1 [ 95.362810][ T7181] smc: ib device syz2 port 1 has pnetid SYZ2 (user defined) [ 95.383664][ T7179] Process accounting resumed [ 95.535303][ T7196] loop1: detected capacity change from 0 to 512 [ 95.542373][ T7196] EXT4-fs: Ignoring removed mblk_io_submit option [ 95.548905][ T7196] EXT4-fs: Ignoring removed bh option [ 95.631913][ T7196] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 95.789163][ T7202] netlink: 'syz.3.452': attribute type 1 has an invalid length. [ 95.796938][ T7202] netlink: 224 bytes leftover after parsing attributes in process `syz.3.452'. [ 95.848143][ T7204] loop0: detected capacity change from 0 to 128 [ 95.867769][ T7195] loop4: detected capacity change from 0 to 8192 [ 95.911903][ T7196] EXT4-fs (loop1): 1 truncate cleaned up [ 95.918394][ T7196] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 95.942751][ T7204] FAT-fs (loop0): bogus number of FAT structure [ 95.949064][ T7204] FAT-fs (loop0): This doesn't look like a DOS 1.x volume; no bootstrapping code [ 95.958381][ T7204] FAT-fs (loop0): Can't find a valid FAT filesystem [ 95.958371][ T7195] vfat: Unknown parameter '\\@[*#)' [ 96.004595][ T7204] RDS: rds_bind could not find a transport for ::ffff:172.20.20.187, load rds_tcp or rds_rdma? [ 96.020864][ T7204] capability: warning: `syz.0.453' uses deprecated v2 capabilities in a way that may be insecure [ 96.174505][ T7191] siw: device registration error -23 [ 96.181310][ T7194] lo speed is unknown, defaulting to 1000 [ 96.286915][ T3329] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.335308][ T7214] loop4: detected capacity change from 0 to 512 [ 96.355882][ T7215] loop3: detected capacity change from 0 to 512 [ 96.362598][ T7215] EXT4-fs: Ignoring removed bh option [ 96.386553][ T7215] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 96.441200][ T7214] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 96.459841][ T7215] EXT4-fs (loop3): 1 truncate cleaned up [ 96.466239][ T7215] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 96.697425][ T7214] EXT4-fs warning (device loop4): dx_probe:837: inode #2: comm syz.4.457: Unimplemented hash flags: 0x0001 [ 96.708925][ T7214] EXT4-fs warning (device loop4): dx_probe:934: inode #2: comm syz.4.457: Corrupt directory, running e2fsck is recommended [ 96.730620][ T7214] EXT4-fs warning (device loop4): dx_probe:837: inode #2: comm syz.4.457: Unimplemented hash flags: 0x0001 [ 96.742181][ T7214] EXT4-fs warning (device loop4): dx_probe:934: inode #2: comm syz.4.457: Corrupt directory, running e2fsck is recommended [ 96.759477][ T7219] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 96.774430][ T7219] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 96.814007][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.830512][ T7221] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 96.841308][ T7221] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 96.980019][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.074466][ T7232] netlink: 'syz.3.461': attribute type 1 has an invalid length. [ 97.089383][ T7232] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.126884][ T7230] __nla_validate_parse: 1 callbacks suppressed [ 97.126915][ T7230] netlink: 88 bytes leftover after parsing attributes in process `syz.3.461'. [ 97.165078][ T7235] x_tables: ip6_tables: tcpmss match: only valid for protocol 6 [ 97.229989][ T7235] netlink: 96 bytes leftover after parsing attributes in process `syz.3.462'. [ 97.266658][ T7238] rdma_rxe: rxe_newlink: failed to add veth0_to_bond [ 97.300500][ T7240] loop3: detected capacity change from 0 to 1024 [ 97.321195][ T7240] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 97.368665][ T7240] netlink: 8 bytes leftover after parsing attributes in process `syz.3.464'. [ 97.377517][ T7240] netlink: 32 bytes leftover after parsing attributes in process `syz.3.464'. [ 97.414749][ T7245] loop2: detected capacity change from 0 to 1024 [ 97.429939][ T7245] EXT4-fs: Ignoring removed orlov option [ 97.445340][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.456651][ T7245] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 97.483414][ T7245] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000. [ 97.528225][ T3323] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.552941][ T7254] SELinux: failed to load policy [ 97.593934][ T7260] random: crng reseeded on system resumption [ 97.654062][ T7262] loop2: detected capacity change from 0 to 2048 [ 97.698616][ T3308] Alternate GPT is invalid, using primary GPT. [ 97.705065][ T3308] loop2: p1 p2 p3 [ 97.716017][ T7262] Alternate GPT is invalid, using primary GPT. [ 97.722496][ T7262] loop2: p1 p2 p3 [ 97.726954][ T7265] loop3: detected capacity change from 0 to 512 [ 97.747357][ T7265] EXT4-fs error (device loop3): ext4_orphan_get:1419: comm syz.3.470: bad orphan inode 11 [ 97.788118][ T7265] ext4_test_bit(bit=10, block=4) = 1 [ 97.793505][ T7265] is_bad_inode(inode)=0 [ 97.797678][ T7265] NEXT_ORPHAN(inode)=2080374784 [ 97.802626][ T7265] max_ino=32 [ 97.805833][ T7265] i_nlink=0 [ 97.810587][ T7265] EXT4-fs (loop3): 1 truncate cleaned up [ 97.817217][ T7265] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 97.817835][ T7267] SELinux: Context system_u:object_r:tty_device_t:s0 is not valid (left unmapped). [ 97.851359][ T3310] udevd[3310]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 97.851952][ T3642] udevd[3642]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 97.863058][ T3308] udevd[3308]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 97.885309][ T7264] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 97.895928][ T7264] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 97.914490][ T3310] udevd[3310]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 97.916383][ T3642] udevd[3642]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 97.926203][ T3308] udevd[3308]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 98.269652][ T7276] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 98.278737][ T7276] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 98.380799][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.415095][ T7280] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(14) [ 98.421769][ T7280] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 98.429341][ T7280] vhci_hcd vhci_hcd.0: Device attached [ 98.432643][ T7284] loop3: detected capacity change from 0 to 128 [ 98.441921][ T7278] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 98.451160][ T7278] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 98.459473][ T7280] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(16) [ 98.466109][ T7280] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 98.473634][ T7280] vhci_hcd vhci_hcd.0: Device attached [ 98.480787][ T7280] vhci_hcd vhci_hcd.0: pdev(1) rhport(2) sockfd(18) [ 98.481562][ T7284] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 98.487506][ T7280] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 98.487573][ T7280] vhci_hcd vhci_hcd.0: Device attached [ 98.512460][ T7284] ext4 filesystem being mounted at /100/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 98.514776][ T7280] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 98.532984][ T7280] vhci_hcd vhci_hcd.0: pdev(1) rhport(4) sockfd(22) [ 98.539648][ T7280] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 98.547307][ T7280] vhci_hcd vhci_hcd.0: Device attached [ 98.548362][ T7284] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 98.553843][ T29] kauditd_printk_skb: 208 callbacks suppressed [ 98.553921][ T29] audit: type=1400 audit(1749037286.549:3119): avc: denied { map } for pid=7283 comm="syz.3.477" path="/100/mnt/cgroup.controllers" dev="loop3" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 98.566353][ T7284] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 98.569504][ T7280] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(24) [ 98.605185][ T7280] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 98.613006][ T7280] vhci_hcd vhci_hcd.0: Device attached [ 98.623208][ T7294] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 98.634509][ T7280] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 98.643493][ T7280] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 98.653027][ T7280] vhci_hcd vhci_hcd.0: port 0 already used [ 98.663697][ T29] audit: type=1400 audit(1749037286.689:3120): avc: denied { execute } for pid=7279 comm="syz.1.478" path="/97/cpu.stat" dev="tmpfs" ino=544 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 98.687194][ T7290] vhci_hcd: connection closed [ 98.687417][ T7292] vhci_hcd: connection closed [ 98.687464][ T7281] vhci_hcd: connection closed [ 98.692296][ T7285] vhci_hcd: connection closed [ 98.697086][ T23] usb 3-1: new low-speed USB device number 3 using vhci_hcd [ 98.702187][ T7288] vhci_hcd: connection closed [ 98.707382][ T1789] vhci_hcd: stop threads [ 98.713945][ T7282] vhci_hcd: sendmsg failed!, ret=-32 for 48 [ 98.718281][ T1789] vhci_hcd: release socket [ 98.733024][ T1789] vhci_hcd: disconnect device [ 98.740209][ T1789] vhci_hcd: stop threads [ 98.744521][ T1789] vhci_hcd: release socket [ 98.748936][ T1789] vhci_hcd: disconnect device [ 98.754153][ T1789] vhci_hcd: stop threads [ 98.758460][ T1789] vhci_hcd: release socket [ 98.762929][ T1789] vhci_hcd: disconnect device [ 98.768507][ T1789] vhci_hcd: stop threads [ 98.772832][ T1789] vhci_hcd: release socket [ 98.777247][ T1789] vhci_hcd: disconnect device [ 98.783153][ T1789] vhci_hcd: stop threads [ 98.787387][ T1789] vhci_hcd: release socket [ 98.791833][ T1789] vhci_hcd: disconnect device [ 98.863520][ T29] audit: type=1400 audit(1749037286.882:3121): avc: denied { connect } for pid=7297 comm="syz.4.480" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 98.883053][ T29] audit: type=1400 audit(1749037286.882:3122): avc: denied { setopt } for pid=7297 comm="syz.4.480" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 98.898997][ T7300] loop2: detected capacity change from 0 to 1764 [ 98.911712][ T29] audit: type=1400 audit(1749037286.957:3123): avc: denied { mounton } for pid=7299 comm="syz.2.479" path="/94/file0" dev="tmpfs" ino=533 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 98.935724][ T7301] sctp: [Deprecated]: syz.4.480 (pid 7301) Use of int in maxseg socket option. [ 98.935724][ T7301] Use struct sctp_assoc_value instead [ 98.950915][ T29] audit: type=1400 audit(1749037286.978:3124): avc: denied { write } for pid=7297 comm="syz.4.480" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 99.010991][ T29] audit: type=1400 audit(1749037287.054:3125): avc: denied { connect } for pid=7299 comm="syz.2.479" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 99.035332][ T7300] loop2: detected capacity change from 0 to 1024 [ 99.049746][ T7300] EXT4-fs (loop2): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 99.079082][ T7300] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 99.109549][ T7304] SELinux: failed to load policy [ 99.116264][ T3323] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.153008][ T29] audit: type=1400 audit(1749037287.215:3126): avc: denied { write } for pid=7309 comm="syz.2.483" name="ptp0" dev="devtmpfs" ino=245 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 99.181167][ T3319] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 99.414379][ T29] audit: type=1326 audit(1749037287.461:3127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7321 comm="syz.1.487" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f857132e929 code=0x7ffc0000 [ 99.437953][ T29] audit: type=1326 audit(1749037287.461:3128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7321 comm="syz.1.487" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f857132e929 code=0x7ffc0000 [ 99.643658][ T7331] loop4: detected capacity change from 0 to 1024 [ 99.681778][ T7333] netlink: 12 bytes leftover after parsing attributes in process `syz.3.490'. [ 99.693688][ T7331] ext4: Unknown parameter 'obj_role' [ 99.839841][ T3957] hid-generic 0000:0004:0000.0002: unknown main item tag 0x0 [ 99.847388][ T3957] hid-generic 0000:0004:0000.0002: unknown main item tag 0x0 [ 99.854909][ T3957] hid-generic 0000:0004:0000.0002: unknown main item tag 0x0 [ 100.196776][ T7340] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 100.205461][ T7340] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 100.209290][ T3957] hid-generic 0000:0004:0000.0002: hidraw0: HID v0.00 Device [syz0] on syz1 [ 100.266977][ T7341] fido_id[7341]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 100.409704][ T7346] loop3: detected capacity change from 0 to 1024 [ 100.419912][ T7347] tipc: Started in network mode [ 100.424804][ T7347] tipc: Node identity ac14140f, cluster identity 4711 [ 100.439449][ T7346] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 100.454946][ T7347] tipc: New replicast peer: 255.255.255.83 [ 100.460945][ T7347] tipc: Enabled bearer , priority 10 [ 100.610126][ T7343] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 100.627453][ T7343] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 101.170865][ T7358] netlink: 4 bytes leftover after parsing attributes in process `syz.0.496'. [ 101.183899][ T7353] SELinux: failed to load policy [ 101.214578][ T7360] __vm_enough_memory: pid: 7360, comm: syz.4.497, bytes: 21200165396480 not enough memory for the allocation [ 101.258900][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.272515][ T7360] loop4: detected capacity change from 0 to 512 [ 101.291340][ T7360] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 101.306787][ T7360] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c0a8, mo2=0002] [ 101.315518][ T7360] System zones: 1-12 [ 101.329830][ T7360] EXT4-fs error (device loop4): ext4_xattr_inode_iget:437: inode #11: comm syz.4.497: missing EA_INODE flag [ 101.343121][ T7360] EXT4-fs (loop4): Remounting filesystem read-only [ 101.350903][ T7360] EXT4-fs (loop4): 1 orphan inode deleted [ 101.362347][ T7366] loop3: detected capacity change from 0 to 128 [ 101.371514][ T7366] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 101.396977][ T7366] FAT-fs (loop3): FAT read failed (blocknr 128) [ 101.407655][ T7360] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 101.422919][ T7360] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.483453][ T3957] hid-generic FFFC:0003:0000.0003: unknown main item tag 0x0 [ 101.490877][ T3957] hid-generic FFFC:0003:0000.0003: unknown main item tag 0x0 [ 101.498416][ T3957] hid-generic FFFC:0003:0000.0003: unknown main item tag 0x0 [ 101.505861][ T3957] hid-generic FFFC:0003:0000.0003: unknown main item tag 0x0 [ 101.505887][ T3957] hid-generic FFFC:0003:0000.0003: unknown main item tag 0x0 [ 101.505907][ T3957] hid-generic FFFC:0003:0000.0003: unknown main item tag 0x0 [ 101.528210][ T3454] tipc: Node number set to 2886997007 [ 101.537231][ T7370] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 101.556619][ T3957] hid-generic FFFC:0003:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 101.700577][ T7380] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=7380 comm=syz.3.501 [ 101.787631][ T7381] loop2: detected capacity change from 0 to 512 [ 102.048117][ T7380] : (slave bond_slave_0): Releasing backup interface [ 102.057055][ T7380] : (slave bond_slave_1): Releasing backup interface [ 102.080542][ T7381] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 102.104087][ T7381] EXT4-fs (loop2): orphan cleanup on readonly fs [ 102.117072][ T7381] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.500: bg 0: block 248: padding at end of block bitmap is not set [ 102.138217][ T7381] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.500: Failed to acquire dquot type 1 [ 102.152300][ T7381] EXT4-fs (loop2): 1 truncate cleaned up [ 102.160726][ T7381] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 102.542679][ T7387] random: crng reseeded on system resumption [ 102.557308][ T7387] loop4: detected capacity change from 0 to 256 [ 102.564295][ T7387] msdos: Unknown parameter 'q' [ 103.011777][ T7389] hub 9-0:1.0: USB hub found [ 103.064042][ T7389] hub 9-0:1.0: 8 ports detected [ 103.435915][ T29] kauditd_printk_skb: 159 callbacks suppressed [ 103.435932][ T29] audit: type=1400 audit(1749037291.807:3274): avc: denied { mounton } for pid=7388 comm="syz.3.503" path="/106/file0" dev="tmpfs" ino=603 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 103.709211][ T29] audit: type=1400 audit(1749037291.978:3275): avc: denied { unlink } for pid=3319 comm="syz-executor" name="file0" dev="tmpfs" ino=603 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 103.731971][ T29] audit: type=1326 audit(1749037292.053:3276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7398 comm="syz.3.507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6da338e929 code=0x7ffc0000 [ 103.755326][ T29] audit: type=1326 audit(1749037292.053:3277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7398 comm="syz.3.507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6da338e929 code=0x7ffc0000 [ 103.778786][ T29] audit: type=1326 audit(1749037292.064:3279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7398 comm="syz.3.507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f6da338e929 code=0x7ffc0000 [ 103.802334][ T29] audit: type=1326 audit(1749037292.064:3280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7398 comm="syz.3.507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6da338e929 code=0x7ffc0000 [ 103.825678][ T29] audit: type=1326 audit(1749037292.064:3281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7398 comm="syz.3.507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6da338e929 code=0x7ffc0000 [ 103.848983][ T29] audit: type=1326 audit(1749037292.064:3282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7398 comm="syz.3.507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=241 compat=0 ip=0x7f6da338e929 code=0x7ffc0000 [ 103.872383][ T29] audit: type=1326 audit(1749037292.064:3283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7398 comm="syz.3.507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6da338e929 code=0x7ffc0000 [ 103.895841][ T29] audit: type=1326 audit(1749037292.064:3284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7398 comm="syz.3.507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f6da338e929 code=0x7ffc0000 [ 103.932036][ T7399] loop3: detected capacity change from 0 to 512 [ 103.947440][ T23] usb 3-1: enqueue for inactive port 0 [ 103.953075][ T23] usb 3-1: enqueue for inactive port 0 [ 103.993227][ T7399] EXT4-fs: Ignoring removed oldalloc option [ 104.017476][ T23] vhci_hcd: vhci_device speed not set [ 104.352311][ T7399] EXT4-fs error (device loop3): ext4_xattr_inode_iget:433: comm syz.3.507: Parent and EA inode have the same ino 15 [ 104.397936][ T7399] EXT4-fs error (device loop3): ext4_xattr_inode_iget:433: comm syz.3.507: Parent and EA inode have the same ino 15 [ 104.424930][ T7399] EXT4-fs (loop3): 1 orphan inode deleted [ 104.445122][ T7399] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 104.626147][ T7417] loop4: detected capacity change from 0 to 2048 [ 104.661265][ T3308] Alternate GPT is invalid, using primary GPT. [ 104.667656][ T3308] loop4: p1 p2 p3 [ 104.765677][ T7414] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 104.775953][ T7414] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 105.065626][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.067274][ T7417] Alternate GPT is invalid, using primary GPT. [ 105.081409][ T7417] loop4: p1 p2 p3 [ 105.108584][ T3310] udevd[3310]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 105.109289][ T3308] udevd[3308]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 105.120964][ T3642] udevd[3642]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 105.142176][ T3310] udevd[3310]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 105.149721][ T3308] udevd[3308]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 105.153148][ T3642] udevd[3642]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 105.474853][ T7432] loop1: detected capacity change from 0 to 2048 [ 105.497015][ T7434] netlink: 4 bytes leftover after parsing attributes in process `syz.4.516'. [ 105.517726][ T7434] loop4: detected capacity change from 0 to 128 [ 105.519124][ T7432] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 105.524640][ T7434] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 105.560677][ T7434] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 105.574305][ T7430] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 105.589369][ T7430] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 31 with max blocks 33 with error 28 [ 105.601797][ T7430] EXT4-fs (loop1): This should not happen!! Data will be lost [ 105.601797][ T7430] [ 105.611495][ T7430] EXT4-fs (loop1): Total free blocks count 0 [ 105.617495][ T7430] EXT4-fs (loop1): Free/Dirty block details [ 105.623493][ T7430] EXT4-fs (loop1): free_blocks=2415919504 [ 105.629224][ T7430] EXT4-fs (loop1): dirty_blocks=64 [ 105.634355][ T7430] EXT4-fs (loop1): Block reservation details [ 105.640375][ T7430] EXT4-fs (loop1): i_reserved_data_blocks=4 [ 105.647117][ T3497] usb usb2-port1: attempt power cycle [ 105.719046][ T3508] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 2 with error 28 [ 105.765215][ T7440] random: crng reseeded on system resumption [ 105.871771][ T7441] loop1: detected capacity change from 0 to 512 [ 105.883023][ T7441] EXT4-fs error (device loop1): ext4_orphan_get:1419: comm syz.1.517: bad orphan inode 11 [ 105.893999][ T7441] ext4_test_bit(bit=10, block=4) = 1 [ 105.899309][ T7441] is_bad_inode(inode)=0 [ 105.903593][ T7441] NEXT_ORPHAN(inode)=2080374784 [ 105.908458][ T7441] max_ino=32 [ 105.911690][ T7441] i_nlink=0 [ 105.915296][ T7441] EXT4-fs (loop1): 1 truncate cleaned up [ 105.928511][ T7441] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 105.974808][ T7444] netlink: 12 bytes leftover after parsing attributes in process `syz.3.518'. [ 106.386280][ T7457] rdma_rxe: rxe_newlink: failed to add ipvlan1 [ 106.415023][ T3508] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 106.557790][ T3329] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.674457][ T7461] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 106.683581][ T7461] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 106.803947][ T7467] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 106.813697][ T7467] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 107.345115][ T3497] usb usb2-port1: unable to enumerate USB device [ 107.384887][ T3323] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.501103][ T7478] lo speed is unknown, defaulting to 1000 [ 107.766136][ T7480] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 107.792990][ T7480] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 107.907470][ T7483] netlink: 'syz.2.529': attribute type 21 has an invalid length. [ 107.915339][ T7483] IPv6: NLM_F_CREATE should be specified when creating new route [ 107.972972][ T7475] rdma_rxe: rxe_newlink: failed to add veth0_to_bond [ 108.236651][ T29] kauditd_printk_skb: 297 callbacks suppressed [ 108.236665][ T29] audit: type=1326 audit(1749037296.957:3581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7474 comm="syz.4.528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0df8dae929 code=0x7ffc0000 [ 108.266206][ T29] audit: type=1326 audit(1749037296.957:3582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7474 comm="syz.4.528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0df8dae929 code=0x7ffc0000 [ 108.352229][ T7489] netlink: 14 bytes leftover after parsing attributes in process `syz.4.530'. [ 108.421335][ T7489] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 108.455494][ T7489] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 108.509112][ T7489] bond0 (unregistering): Released all slaves [ 108.541083][ T7491] loop4: detected capacity change from 0 to 1024 [ 108.567823][ T7491] loop4: detected capacity change from 0 to 512 [ 108.637964][ T7491] EXT4-fs (loop4): 1 orphan inode deleted [ 108.649502][ T31] Quota error (device loop4): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 108.659366][ T31] EXT4-fs error (device loop4): ext4_release_dquot:6969: comm kworker/u8:1: Failed to release dquot type 1 [ 108.747768][ T7491] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 108.811508][ T7491] ext4 filesystem being mounted at /102/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 108.834065][ T7489] EXT4-fs error (device loop4): ext4_lookup:1787: inode #15: comm syz.4.530: iget: bad i_size value: 360287970189639690 [ 108.847527][ T7495] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 108.889686][ T7489] EXT4-fs error (device loop4): ext4_lookup:1787: inode #15: comm syz.4.530: iget: bad i_size value: 360287970189639690 [ 108.918291][ T7495] lo speed is unknown, defaulting to 1000 [ 108.949832][ T7499] dvmrp1: entered allmulticast mode [ 108.958184][ T7491] EXT4-fs error (device loop4): ext4_lookup:1787: inode #15: comm syz.4.530: iget: bad i_size value: 360287970189639690 [ 109.041563][ T7502] xt_CT: You must specify a L4 protocol and not use inversions on it [ 109.069376][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.163313][ T7513] random: crng reseeded on system resumption [ 109.196644][ T29] audit: type=1326 audit(1749037297.987:3583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7511 comm="syz.0.535" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd67850e929 code=0x0 [ 109.205414][ T7499] netlink: 24 bytes leftover after parsing attributes in process `syz.1.532'. [ 109.275791][ T7521] loop2: detected capacity change from 0 to 1024 [ 109.315355][ T7521] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 109.326304][ T7521] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 109.339593][ T7525] rdma_rxe: rxe_newlink: failed to add ipvlan1 [ 109.375658][ T7521] JBD2: no valid journal superblock found [ 109.381716][ T7521] EXT4-fs (loop2): Could not load journal inode [ 109.425679][ T29] audit: type=1400 audit(1749037298.233:3584): avc: denied { write } for pid=7520 comm="syz.2.536" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 109.473684][ T7536] Cannot find add_set index 0 as target [ 109.498766][ T7536] SELinux: security_context_str_to_sid (ùÿ) failed with errno=-22 [ 109.511390][ T29] audit: type=1400 audit(1749037298.298:3585): avc: denied { unmount } for pid=3319 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 109.531406][ T29] audit: type=1400 audit(1749037298.298:3586): avc: denied { unmount } for pid=3319 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 109.668687][ T29] audit: type=1404 audit(1749037298.491:3587): enforcing=1 old_enforcing=0 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 109.703351][ T29] audit: type=1404 audit(1749037298.523:3588): enforcing=0 old_enforcing=1 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 109.718484][ T29] audit: type=1400 audit(1749037298.523:3589): avc: denied { create } for pid=7538 comm="syz.4.540" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 109.829663][ T7539] lo speed is unknown, defaulting to 1000 [ 110.544247][ T7561] lo speed is unknown, defaulting to 1000 [ 110.748420][ T7562] veth1_to_bond: entered promiscuous mode [ 110.915216][ T7568] wireguard0: entered promiscuous mode [ 110.915235][ T7568] wireguard0: entered allmulticast mode [ 110.976066][ T7573] __vm_enough_memory: pid: 7573, comm: syz.2.548, bytes: 21200477609984 not enough memory for the allocation [ 111.038185][ T7574] lo speed is unknown, defaulting to 1000 [ 111.193114][ T7581] smc: net device bond0 erased user defined pnetid SYZ2 [ 111.200138][ T7581] smc: ib device syz2 ibport 1 erased user defined pnetid SYZ2 [ 111.227505][ T7559] veth1_to_bond: left promiscuous mode [ 111.729534][ T7583] lo speed is unknown, defaulting to 1000 [ 111.782223][ T7573] loop2: detected capacity change from 0 to 512 [ 112.019867][ T7573] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 112.098703][ T7573] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c0a8, mo2=0002] [ 112.119372][ T7589] random: crng reseeded on system resumption [ 112.146355][ T7573] System zones: 1-12 [ 112.165960][ T7573] EXT4-fs error (device loop2): ext4_xattr_inode_iget:437: inode #11: comm syz.2.548: missing EA_INODE flag [ 112.209986][ T7573] EXT4-fs (loop2): Remounting filesystem read-only [ 112.217810][ T7573] EXT4-fs (loop2): 1 orphan inode deleted [ 112.278766][ T7594] loop4: detected capacity change from 0 to 512 [ 112.290036][ T7573] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 112.315879][ T7594] EXT4-fs error (device loop4): ext4_orphan_get:1419: comm syz.4.552: bad orphan inode 11 [ 112.408767][ T7594] ext4_test_bit(bit=10, block=4) = 1 [ 112.414174][ T7594] is_bad_inode(inode)=0 [ 112.418451][ T7594] NEXT_ORPHAN(inode)=2080374784 [ 112.423338][ T7594] max_ino=32 [ 112.426568][ T7594] i_nlink=0 [ 112.443242][ T7594] EXT4-fs (loop4): 1 truncate cleaned up [ 112.461038][ T7594] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 112.467152][ T7573] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.739475][ T7603] loop2: detected capacity change from 0 to 1024 [ 112.746243][ T7603] ext4: Unknown parameter 'obj_role' [ 112.849550][ T2970] hid-generic 0000:0004:0000.0004: unknown main item tag 0x0 [ 112.857133][ T2970] hid-generic 0000:0004:0000.0004: unknown main item tag 0x0 [ 112.864551][ T2970] hid-generic 0000:0004:0000.0004: unknown main item tag 0x0 [ 112.881387][ T2970] hid-generic 0000:0004:0000.0004: hidraw0: HID v0.00 Device [syz0] on syz1 [ 112.885232][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.925852][ T7606] fido_id[7606]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 112.932316][ T7609] netlink: 20 bytes leftover after parsing attributes in process `syz.4.556'. [ 112.953031][ T29] kauditd_printk_skb: 447 callbacks suppressed [ 112.953042][ T29] audit: type=1400 audit(1749037302.010:4037): avc: denied { ioctl } for pid=7608 comm="syz.4.556" path="user:[4026531837]" dev="nsfs" ino=4026531837 ioctlcmd=0x5519 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 112.992155][ T29] audit: type=1400 audit(1749037302.053:4038): avc: denied { audit_write } for pid=7608 comm="syz.4.556" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 113.013284][ T29] audit: type=1107 audit(1749037302.053:4039): pid=7608 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 113.075685][ T29] audit: type=1400 audit(1749037302.150:4040): avc: denied { mount } for pid=7612 comm="syz.3.558" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 113.133240][ T7617] ipvlan2: entered promiscuous mode [ 113.138844][ T7617] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 113.147151][ T7617] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 113.183541][ T7619] loop3: detected capacity change from 0 to 512 [ 113.191209][ T7619] EXT4-fs: Ignoring removed orlov option [ 113.197404][ T7619] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 113.206367][ T7619] EXT4-fs (loop3): orphan cleanup on readonly fs [ 113.213486][ T7619] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.560: bg 0: block 248: padding at end of block bitmap is not set [ 113.228101][ T7619] Quota error (device loop3): write_blk: dquota write failed [ 113.235505][ T7619] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 113.245411][ T7619] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.560: Failed to acquire dquot type 1 [ 113.257733][ T7619] EXT4-fs (loop3): 1 truncate cleaned up [ 113.266017][ T7619] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 113.310200][ T7621] loop4: detected capacity change from 0 to 512 [ 113.317152][ T7621] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 113.328961][ T7621] EXT4-fs (loop4): 1 truncate cleaned up [ 113.335469][ T7621] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 113.379459][ T7621] lo speed is unknown, defaulting to 1000 [ 113.661684][ T29] audit: type=1400 audit(1749037302.450:4041): avc: denied { add_name } for pid=7614 comm="syz.4.559" name="control" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 113.682710][ T29] audit: type=1400 audit(1749037302.450:4042): avc: denied { create } for pid=7614 comm="syz.4.559" name="control" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 113.703088][ T29] audit: type=1400 audit(1749037302.461:4043): avc: denied { remove_name } for pid=7614 comm="syz.4.559" name="control" dev="loop4" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 113.725845][ T29] audit: type=1400 audit(1749037302.461:4044): avc: denied { rmdir } for pid=7614 comm="syz.4.559" name="control" dev="loop4" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 113.796337][ T7617] netlink: 20 bytes leftover after parsing attributes in process `syz.3.560'. [ 114.097990][ T7629] netlink: 44 bytes leftover after parsing attributes in process `syz.1.563'. [ 114.107066][ T7629] netlink: 43 bytes leftover after parsing attributes in process `syz.1.563'. [ 114.116020][ T7629] netlink: 'syz.1.563': attribute type 5 has an invalid length. [ 114.123723][ T7629] netlink: 43 bytes leftover after parsing attributes in process `syz.1.563'. [ 114.154730][ T7629] 9pnet_virtio: no channels available for device 127.0.0.1 [ 114.419905][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.549731][ T7641] tipc: Started in network mode [ 114.554649][ T7641] tipc: Node identity 0671502e8bbb, cluster identity 4711 [ 114.561846][ T7641] tipc: Enabled bearer , priority 0 [ 114.789678][ T7640] tipc: Resetting bearer [ 114.811355][ T7640] tipc: Disabling bearer [ 115.127980][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.178161][ T7654] random: crng reseeded on system resumption [ 115.303992][ T7662] loop2: detected capacity change from 0 to 512 [ 115.330417][ T7663] lo speed is unknown, defaulting to 1000 [ 115.354160][ T7662] EXT4-fs error (device loop2): ext4_orphan_get:1419: comm syz.2.567: bad orphan inode 11 [ 115.421369][ T7662] ext4_test_bit(bit=10, block=4) = 1 [ 115.426734][ T7662] is_bad_inode(inode)=0 [ 115.430898][ T7662] NEXT_ORPHAN(inode)=2080374784 [ 115.435832][ T7662] max_ino=32 [ 115.439105][ T7662] i_nlink=0 [ 115.498348][ T7662] EXT4-fs (loop2): 1 truncate cleaned up [ 115.531354][ T7662] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 115.976196][ T3323] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.001376][ T7672] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=15 sclass=netlink_route_socket pid=7672 comm=syz.3.574 [ 116.118678][ T7677] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 116.453514][ T7697] lo speed is unknown, defaulting to 1000 [ 117.277939][ T7703] netlink: 'syz.0.582': attribute type 4 has an invalid length. [ 117.301143][ T7703] netlink: 'syz.0.582': attribute type 4 has an invalid length. [ 118.092211][ T7725] netlink: 20 bytes leftover after parsing attributes in process `syz.2.588'. [ 118.552015][ T7730] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=38 sclass=netlink_audit_socket pid=7730 comm=syz.3.589 [ 118.600527][ T29] kauditd_printk_skb: 164 callbacks suppressed [ 118.600544][ T29] audit: type=1400 audit(1749037308.072:4203): avc: denied { ioctl } for pid=7733 comm="syz.2.590" path="socket:[12338]" dev="sockfs" ino=12338 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 118.683740][ T7739] loop4: detected capacity change from 0 to 512 [ 118.716482][ T7739] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 118.741862][ T7739] ext4 filesystem being mounted at /112/file3 supports timestamps until 2038-01-19 (0x7fffffff) [ 118.795277][ T7739] EXT4-fs error (device loop4): ext4_xattr_block_get:593: inode #15: comm syz.4.592: corrupted xattr block 32: bad e_name length [ 118.885131][ T7747] netlink: 132 bytes leftover after parsing attributes in process `syz.4.592'. [ 118.935289][ T7739] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=15 [ 118.953641][ T7711] ÿÿÿÿÿÿ: renamed from vlan1 [ 118.991514][ T7739] EXT4-fs error (device loop4): ext4_xattr_block_get:593: inode #15: comm syz.4.592: corrupted xattr block 32: bad e_name length [ 119.077900][ T7739] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=15 [ 119.148217][ T29] audit: type=1400 audit(1749037308.662:4204): avc: denied { rename } for pid=7737 comm="syz.4.592" name="file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 119.170563][ T29] audit: type=1400 audit(1749037308.662:4205): avc: denied { unlink } for pid=7737 comm="syz.4.592" name="file2" dev="loop4" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 119.354284][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.570193][ T7759] netlink: 132 bytes leftover after parsing attributes in process `syz.4.594'. [ 119.596801][ T29] audit: type=1400 audit(1749037309.134:4206): avc: denied { read } for pid=7756 comm="ext4" name="event0" dev="devtmpfs" ino=242 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 119.619535][ T29] audit: type=1400 audit(1749037309.134:4207): avc: denied { open } for pid=7756 comm="ext4" path="/dev/input/event0" dev="devtmpfs" ino=242 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 119.660996][ T29] audit: type=1400 audit(1749037309.220:4208): avc: denied { create } for pid=7763 comm="syz.4.597" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 119.695210][ T29] audit: type=1400 audit(1749037309.241:4209): avc: denied { write } for pid=7763 comm="syz.4.597" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 119.766419][ T29] audit: type=1326 audit(1749037309.327:4210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7767 comm="syz.4.598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0df8dae929 code=0x7ffc0000 [ 119.796511][ T3454] usb usb2-port1: attempt power cycle [ 119.815385][ T29] audit: type=1326 audit(1749037309.327:4211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7767 comm="syz.4.598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0df8dae929 code=0x7ffc0000 [ 119.838790][ T29] audit: type=1326 audit(1749037309.327:4212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7767 comm="syz.4.598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0df8dae929 code=0x7ffc0000 [ 119.954381][ T7772] ================================================================== [ 119.962501][ T7772] BUG: KCSAN: data-race in selinux_inode_permission / selinux_inode_permission [ 119.971450][ T7772] [ 119.973773][ T7772] write to 0xffff888138afc420 of 4 bytes by task 7771 on cpu 1: [ 119.981421][ T7772] selinux_inode_permission+0x31b/0x620 [ 119.986975][ T7772] security_inode_permission+0x6d/0xb0 [ 119.992443][ T7772] inode_permission+0x106/0x310 [ 119.997318][ T7772] link_path_walk+0x162/0x900 [ 120.002035][ T7772] path_openat+0x1de/0x2170 [ 120.006564][ T7772] do_filp_open+0x109/0x230 [ 120.011097][ T7772] io_openat2+0x272/0x390 [ 120.015449][ T7772] io_openat+0x1b/0x30 [ 120.019542][ T7772] __io_issue_sqe+0xfb/0x2e0 [ 120.024176][ T7772] io_issue_sqe+0x53/0x970 [ 120.028616][ T7772] io_submit_sqes+0x667/0xfd0 [ 120.033324][ T7772] __se_sys_io_uring_enter+0x1c1/0x1b70 [ 120.038900][ T7772] __x64_sys_io_uring_enter+0x78/0x90 [ 120.044296][ T7772] x64_sys_call+0x28c8/0x2fb0 [ 120.048991][ T7772] do_syscall_64+0xd2/0x200 [ 120.053514][ T7772] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.059422][ T7772] [ 120.061750][ T7772] write to 0xffff888138afc420 of 4 bytes by task 7772 on cpu 0: [ 120.069384][ T7772] selinux_inode_permission+0x31b/0x620 [ 120.074937][ T7772] security_inode_permission+0x6d/0xb0 [ 120.080414][ T7772] inode_permission+0x106/0x310 [ 120.085291][ T7772] link_path_walk+0x162/0x900 [ 120.089983][ T7772] path_openat+0x1de/0x2170 [ 120.094507][ T7772] do_filp_open+0x109/0x230 [ 120.099029][ T7772] io_openat2+0x272/0x390 [ 120.103360][ T7772] io_openat+0x1b/0x30 [ 120.107451][ T7772] __io_issue_sqe+0xfb/0x2e0 [ 120.112064][ T7772] io_issue_sqe+0x53/0x970 [ 120.116500][ T7772] io_wq_submit_work+0x3f7/0x5f0 [ 120.121470][ T7772] io_worker_handle_work+0x44e/0x9b0 [ 120.126786][ T7772] io_wq_worker+0x22e/0x870 [ 120.131302][ T7772] ret_from_fork+0xda/0x150 [ 120.135821][ T7772] ret_from_fork_asm+0x1a/0x30 [ 120.140612][ T7772] [ 120.142949][ T7772] value changed: 0x00000001 -> 0x00000000 [ 120.148679][ T7772] [ 120.151015][ T7772] Reported by Kernel Concurrency Sanitizer on: [ 120.157187][ T7772] CPU: 0 UID: 0 PID: 7772 Comm: iou-wrk-7771 Not tainted 6.15.0-syzkaller-11796-g5abc7438f1e9 #0 PREEMPT(voluntary) [ 120.169431][ T7772] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 120.179489][ T7772] ================================================================== [ 121.661141][ T3454] usb usb2-port1: unable to enumerate USB device