last executing test programs: 6m20.300995988s ago: executing program 0 (id=9997): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001180)={&(0x7f00000011c0)='mm_page_free\x00', r1}, 0x18) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000012c0), 0xfe, 0x244, &(0x7f0000000400)="$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") 6m20.189115213s ago: executing program 0 (id=10000): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) setsockopt$inet6_IPV6_PKTINFO(r2, 0x29, 0x32, &(0x7f0000002240)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, 0x14) tee(r1, r3, 0xfffffffffffffc01, 0x0) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000740)=@bpf_lsm={0x1d, 0x1a, &(0x7f0000000800)=ANY=[@ANYBLOB="185100000b0000000000000000000000180000000000000000000000fcffffff18290000", @ANYRES32=r0, @ANYBLOB="000000004fffffff18320000050000000000000000000000950000000000000018120000", @ANYRES32=r0, @ANYBLOB="000000000000000095000000000000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000009000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000018510000000000800000000000000000b875966ca2b2cead9d22ff54700d76a6480e116eed4ae241577933d3247239c3278f25db2e5dfb8cad9b5025567641801c524205b461023e64abab15619fe2ad0029a86504a5615311ded6dd18766d9b6e12bd5d2b9f54d5a4f348edc7ba7e864a0dcf6b988487a5f7cc0dc29fbede1d8d480f7b331cc0c22ec44960b04a3f1b49c1e99ffb208f79d130af46d3ffb259545fba06526fd93d1ee4aa98dcfca7cd43bdc896d12bf246b8f4fb8c80de98c00c644ecb61b60df765c8de268397a6427b101bf447dc889171c780a39292024b4365450632335f4e13a087aad7074a3204629391774fb5b15110"], &(0x7f00000004c0)='syzkaller\x00', 0x4, 0xbb, &(0x7f0000000680)=""/187, 0x40f00, 0x12, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000080)={0x7, 0x1}, 0x8, 0x10, &(0x7f0000000180)={0x5, 0xb, 0xf, 0x7}, 0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x10, 0x191}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4a, '\x00', 0x0, @sk_msg=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r5}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000180)=ANY=[], 0x78) sendfile(r6, 0xffffffffffffffff, &(0x7f00000001c0), 0x8) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$MAP_CREATE(0x0, 0x0, 0x48) socket$inet6_udplite(0xa, 0x2, 0x88) r7 = gettid() timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r7}, &(0x7f0000bbdffc)=0x0) timer_settime(r8, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) recvmmsg$unix(r6, &(0x7f0000007f80)=[{{&(0x7f0000000300), 0x6e, &(0x7f00000003c0)=[{&(0x7f00000009c0)=""/141, 0x8d}, {&(0x7f0000000a80)=""/200, 0xc8}, {&(0x7f0000000cc0)=""/246, 0xf6}], 0x3, &(0x7f0000000dc0)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x130}}, {{&(0x7f0000000b80), 0x6e, &(0x7f0000008180)=[{&(0x7f0000000400)=""/2, 0x2}, {&(0x7f0000000f00)=""/112, 0x70}, {&(0x7f0000000f80)=""/194, 0xc2}, {&(0x7f0000001080)=""/174, 0xae}, {&(0x7f0000001140)=""/91, 0x5b}, {&(0x7f00000011c0)=""/4096, 0x1000}, {&(0x7f00000021c0)=""/108, 0x6c}, {&(0x7f0000000580)=""/2, 0x2}, {&(0x7f0000000c40)=""/19, 0x13}], 0x9}}, {{&(0x7f0000002300), 0x6e, &(0x7f0000002780)=[{&(0x7f0000002380)=""/180, 0xb4}, {&(0x7f0000002440)=""/236, 0xec}, {&(0x7f0000002540)=""/125, 0x7d}, {&(0x7f00000025c0)=""/205, 0xcd}, {&(0x7f00000026c0)=""/133, 0x85}, {&(0x7f00000032c0)=""/4096, 0x1000}], 0x6, &(0x7f0000002800)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x98}}, {{&(0x7f00000028c0)=@abs, 0x6e, &(0x7f0000002a40)=[{&(0x7f0000002940)=""/215, 0xd7}], 0x1, &(0x7f0000002a80)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0xa0}}, {{&(0x7f0000002b40)=@abs, 0x6e, &(0x7f0000006400)=[{&(0x7f0000002bc0)=""/204, 0xcc}, {&(0x7f00000042c0)=""/74, 0x4a}, {&(0x7f0000004340)=""/153, 0x99}, {&(0x7f0000004400)=""/4096, 0x1000}, {&(0x7f0000005400)=""/4096, 0x1000}], 0x5, &(0x7f0000006480)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x60}}, {{&(0x7f0000006500), 0x6e, &(0x7f00000067c0)=[{&(0x7f0000002cc0)=""/43, 0x2b}, {&(0x7f0000006580)=""/142, 0x8e}, {&(0x7f0000006640)=""/42, 0x2a}, {&(0x7f0000006680)=""/179, 0xb3}, {&(0x7f0000006740)=""/115, 0x73}], 0x5, &(0x7f0000006840)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x28}}, {{&(0x7f0000006880), 0x6e, &(0x7f0000007e80)=[{&(0x7f0000006900)=""/223, 0xdf}, {&(0x7f0000006a00)=""/234, 0xea}, {&(0x7f0000006b00)=""/61, 0x3d}, {&(0x7f0000006b40)=""/213, 0xd5}, {&(0x7f0000006c40)=""/25, 0x19}, {&(0x7f0000006c80)=""/76, 0x4c}, {&(0x7f0000006d00)=""/239, 0xef}, {&(0x7f0000006e00)=""/4096, 0x1000}, {&(0x7f0000007e00)=""/30, 0x1e}, {&(0x7f0000007e40)=""/37, 0x25}], 0xa, &(0x7f0000007f40)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}}], 0x7, 0x10000, &(0x7f0000008140)) 6m19.222255285s ago: executing program 0 (id=10006): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) lsm_get_self_attr(0x65, 0x0, &(0x7f00000010c0)=0x20, 0x0) 6m19.151739018s ago: executing program 0 (id=10010): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0e000000040000000400000002"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000010000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000000000000b70400000000000085000000330000008500000007"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc641}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) chroot(&(0x7f0000000a40)='./file0\x00') mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000180)='ramfs\x00', 0x2014050, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='freezer.self_freezing\x00', 0x275a, 0x0) sync_file_range(r1, 0x6, 0x9fd, 0x3) clock_gettime(0x0, &(0x7f00000002c0)={0x0, 0x0}) utimensat(r1, &(0x7f0000000000)='./file0\x00', &(0x7f0000000300)={{r2, r3/1000+10000}, {0x0, 0x2710}}, 0x0) r4 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r4) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x1014}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0xd, 0x4, 0x4, 0x7, 0x0, r5, 0x10000}, 0x50) syz_open_dev$tty1(0xc, 0x4, 0x1) 6m19.059280791s ago: executing program 0 (id=10013): bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r0}, 0x10) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000100)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) r3 = socket$netlink(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r4, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x6048800) r5 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000840)={0x58, r5, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [{{0x8, 0x1, r6}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfffbfff9}}}]}}]}, 0x58}, 0x1, 0x1000000, 0x0, 0x24004000}, 0x200448c0) 6m16.607546976s ago: executing program 0 (id=10058): ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(0xffffffffffffffff, 0x942e, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$l2tp(0x2, 0x2, 0x73) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e22, 0x8, @loopback}, 0x1c) listen(r1, 0x5) accept4(r1, 0x0, 0x0, 0x80800) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x24040014, &(0x7f0000000000)={0xa, 0x4e22, 0x7, @empty, 0xfffffffe}, 0x1c) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="01000000040000000800", @ANYRES32, @ANYBLOB="9b14000000000000000000000000000000efff00", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/13], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1c, 0xc, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYRESDEC=r2], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r5}, 0x18) set_mempolicy(0x8000, &(0x7f0000000040)=0x9, 0x2) syz_clone3(0x0, 0x0) r6 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) write$P9_RREADLINK(r6, &(0x7f0000000000)={0xffffffffffffff23, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0x1c0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(0xffffffffffffffff, 0x4058534c, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x103, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) 6m16.607137057s ago: executing program 32 (id=10058): ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(0xffffffffffffffff, 0x942e, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$l2tp(0x2, 0x2, 0x73) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e22, 0x8, @loopback}, 0x1c) listen(r1, 0x5) accept4(r1, 0x0, 0x0, 0x80800) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x24040014, &(0x7f0000000000)={0xa, 0x4e22, 0x7, @empty, 0xfffffffe}, 0x1c) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="01000000040000000800", @ANYRES32, @ANYBLOB="9b14000000000000000000000000000000efff00", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/13], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1c, 0xc, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYRESDEC=r2], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r5}, 0x18) set_mempolicy(0x8000, &(0x7f0000000040)=0x9, 0x2) syz_clone3(0x0, 0x0) r6 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) write$P9_RREADLINK(r6, &(0x7f0000000000)={0xffffffffffffff23, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0x1c0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(0xffffffffffffffff, 0x4058534c, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x103, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) 4.541152877s ago: executing program 1 (id=14150): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000012c0), 0xfe, 0x244, &(0x7f0000000400)="$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") r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7020000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r2, &(0x7f0000000080)={0x1f, 0x0, @none, 0x0, 0x1}, 0xe) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r1, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001480), 0x42002, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x20000023892) open(0x0, 0x66842, 0x90) syslog(0x4, &(0x7f0000000000)=""/19, 0xb12288e90d7c8384) 3.770603479s ago: executing program 4 (id=14155): bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000180)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0x8, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8c, &(0x7f0000000280)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f00000002c0), &(0x7f0000000300), 0x8, 0x9, 0x8, 0x8, &(0x7f0000000380)}}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x8, 0x8, &(0x7f0000000700)=ANY=[@ANYRES16, @ANYRESDEC=r0, @ANYRESDEC=r0, @ANYBLOB="6cca48f9c1e8dc7fc11a2c9361cbc5f8a59b02cc454fd954051745052af99296c0ee3e"], &(0x7f0000000100)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=ANY=[@ANYBLOB="2c000000490008002dbd7000fbdbdf250a007800", @ANYRES32=0x0, @ANYBLOB="0200000008008ab19f79db9c206602006a650000"], 0x2c}, 0x1, 0x0, 0x0, 0x48890}, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000100)=ANY=[@ANYBLOB="ffffffffffff0180c200"], 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r3, &(0x7f0000000100)="0557a8ea7bc273dfaeab96850806", 0xe, 0x0, &(0x7f0000000200)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @link_local}, 0x14) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002180)='blkio.bfq.io_merged\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r6, 0x0) ftruncate(r6, 0xc17a) r7 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r7) syz_usb_connect$cdc_ncm(0x2, 0xa0, &(0x7f0000000380)=ANY=[], 0x0) ioctl$EVIOCRMFF(r7, 0x5509, &(0x7f0000000500)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000800000000000070000000900010073797a30000000007c000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d38001280140001800c000100636f756e7465720004000280200001800e000100636f6e6e6c696d69740000000c000280080001400000000808000340000001"], 0xc4}}, 0x20050890) 3.726300522s ago: executing program 1 (id=14156): bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000002c0)='./file2\x00', 0x300c056, &(0x7f0000000200)={[{@noload}, {@data_err_abort}, {@data_err_abort}, {@dioread_lock}, {@errors_remount}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@data_err_ignore}, {@nojournal_checksum}, {@nobh}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x560, &(0x7f0000000a00)="$eJzs3d9rW+UbAPDnpO1+f7/rYAwVkcIunMyla+uPCV7MS9HhQO9naM/KaLqMJh1rHbhduBtvZAgiDsR7vfdy+A/4Vwx0MGQUvfCmctKTLluTNOuypJrPB05533NO+p4n57xvnpM3IQEMrYnsTyHixYj4Kok4HBFJvm008o0TG/utPbw+my1JrK9//EdS3y+rN/5X43EH88oLEfHLFxEnC1vbra6sLpTK5XQpr0/WFq9MVldWT11aLM2n8+nl6ZmZM2/OTL/z9ls9i/W18399+9Hd9898eXztm5/uH7mdxNk4lG9rjuMZ3GiuTMRE/pyMxdkndpzqQWO7STLoA2BHRvJ+PhbZGHA4RvJeD/z3fR4R68CQSvR/GFKNPKBxb9/5Pvj/fcpK+ufBexs3QFvjH914byT21e+NDqwlj90ZZfe74z1oP2vj59/v3M6W6N37EADbunEzIk6Pjm4d/5J8/Nu5061X72uuPNmG8Q/6526W/7zeKv8pbOY/0SL/Odii7+7E9v2/cL8HzbSV5X/vtsx/Nyetxkfy2v/qOd9YcvFSOT2dZ8MnYmxvVu80n3Nm7d56u23N+V+2ZO03csH8OO6P7n38MXOlWulZYm724GbESy3z32Tz/Cctzn/2fJzvso1j6Z1X2m3bPv7na/2HiFdbnv9HM1pJ5/nJyfr1MNm4Krb689axX9u1P+j4s/N/oHP840nzfG316dv4ft/fabttj8Uf3V//e5JP6uU9+bprpVptaSpiT/Lh1vXTjx7bqDf2z+I/cbzz+Nfq+t8fEZ92Gf+toz++3FX8Azr/c091/p++cO+Dz75r1353498b9dKJfE0341+3B/gszx0AAAAAAADsNoWIOBRJobhZLhSKxY3PdxyNA4VypVo7ebGyfHku6t+VHY+xQmOm+3DT5yGm8s/DNurTT9RnIuJIRHw9sr9eL85WynODDh4AAAAAAAAAAAAAAAAAAAB2iYNtvv+f+W1k0EcHPHd+8huG17b9vxe/9ATsSl7/YXjp/zC89H8YXvo/DC/9H4ZXx/5f6N9xAP3n9R+Gl/4PAAAAAAAAAAAAAAAAAAAAAAAAAAAAPXX+3LlsWV97eH02q89dXVleqFw9NZdWF4qLy7PF2crSleJ8pTJfTouzlcXt/l+5UrkyNR3L1yZrabU2WV1ZvbBYWb5cu3BpsTSfXkjH+hIVAAAAAAAAAAAAAAAAAAAA/LtUV1YXSuVyuqSgsKPC6O44DIUeFwY9MgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAI/8EAAD//8S5N8k=") r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x9, 0x690bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x1) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x5, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) ioctl$TUNSETSNDBUF(r2, 0x400454d4, &(0x7f0000000180)=0x80000001) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r3 = syz_io_uring_setup(0x1104, &(0x7f00000004c0)={0x0, 0xffffffff, 0x0, 0x2, 0x160}, 0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, r4, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x4007, 0x0, 0x0, 0x1fc}) io_uring_enter(r3, 0x47fa, 0xfd5d, 0x200000000000000, 0x0, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000001680)=ANY=[@ANYBLOB="1800000000030000000000000000000095"], &(0x7f0000001700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x20}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='contention_end\x00', r5}, 0x18) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000480)={&(0x7f00000001c0)=ANY=[@ANYBLOB="d01ef589789260114d33eaca2c0000", @ANYRES16=0x0, @ANYBLOB="00012abd7000fedbdf250300000008000b000000000008003b0004000000050030"], 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x20000010) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r7, 0x0, r9, 0x0, 0x8000f28, 0x0) splice(r8, 0x0, r7, 0x0, 0x7f, 0xe) write(r6, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1000002, 0x4012831, 0xffffffffffffffff, 0x0) r10 = syz_open_procfs(0x0, &(0x7f0000000580)='smaps_rollup\x00') mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) lseek(r10, 0x2004, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000100)=ANY=[], 0x0) socket$netlink(0x10, 0x3, 0xf) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="3800000039000900000000000000000001000000040000000c0001800600000005470000080002"], 0x38}}, 0x0) r12 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x22) pwrite64(r12, &(0x7f0000000140)='2', 0xfdef, 0xfecc) 3.155943396s ago: executing program 1 (id=14161): r0 = io_uring_setup(0x6858, &(0x7f0000000100)={0x0, 0xf0ce, 0x3480, 0x1, 0x14}) io_uring_enter(r0, 0x0, 0xcb, 0xf, 0x0, 0x0) openat$uhid(0xffffffffffffff9c, 0x0, 0x2, 0x0) pipe(&(0x7f0000000600)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000000)={0x5, &(0x7f0000000b40)=[{0x6, 0x2, 0x0, 0x7fff0000}, {0x2, 0x1, 0x9, 0x6}, {0x79f0, 0x4d, 0x9, 0x9}, {0x0, 0x9, 0x4, 0x19}, {0x0, 0xf7, 0x2, 0x5}]}) io_destroy(0x0) socket(0x1d, 0x2, 0x6) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000300), 0x111, 0x3}}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000e80)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x80, 0x0, 0x0, 0x40f00, 0xf6, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000ac0)='qgroup_meta_convert\x00', r3, 0x0, 0x7ffffffffc}, 0x18) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x3b888d2, &(0x7f00000004c0)=ANY=[@ANYRES8=r0, @ANYRESHEX=r2], 0x0, 0x23e, &(0x7f0000000bc0)="$eJzs3c9qE1EUB+AzSdqmukgWrkRwQBeuStsnSJEKYldKFupCi21BklCwEGgVQ1c+gU/ic7jxDXwAoTtdFEYmSZsWUm0wf0r9vk0uzP3NOTe5Iau5eX2n1dja3ds5/PA9yuUkCrWoJUcR1ShEbiEAgOvmV5bFUdYzWrJUmFRPAMBkXfL3f3GKLQEAE/bs+Ysnaxsb60/TtBzR+tSuJ9F77V1f24m30YztWI5KHEdkp3rjR4831qOU5qpxv9Vp1/Nk69XX/v3XfkR08ytRierw/Eracybfadfn4ka/fi3Pr0Ylbg3Prw7JR30+Htw70/9SVOLbm9iNZmxFnh3kP66k6cPs88/3L/OO83zSadcXuvMGsuLUPxwAAAAAAAAAAAAAAAAAAAAAAK6tpTRN0yz7kmVZ1jl3/k7xuHt9KT1RPX8+Ty9/0flAnTPn6yznJZLe/EG+FLdLUZrl2gEAAAAAAAAAAAAAAAAAAOCq2Ns/aGw2m9vvxjo4eax//Hf+10EU+601k4gr0E93sJj3M51ad2PEWrURS0Rh/6Bxsrsam0n8JVWe0CbJhmy/4oWp+TFVn7853lUkETF3+mb+aXIh5sb8TQEAAAAAAAAAAAAAAAAAAKZs8NDvkIuHM2gIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGZg8P//Iww6/fAlUzNeIgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP+B3wEAAP//bkR7Lg==") mprotect(&(0x7f000078a000/0x1000)=nil, 0x1000, 0x9) syz_mount_image$ext4(&(0x7f0000000500)='ext4\x00', &(0x7f0000000540)='./file0\x00', 0x0, &(0x7f0000000580), 0x1, 0x4e8, &(0x7f00000005c0)="$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") r4 = socket$inet6(0xa, 0x2, 0x0) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @broadcast}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000740)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x4000004}, 0x14004040) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r4, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2, 0x0) read(r4, &(0x7f0000000300)=""/212, 0xd4) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) close_range(r6, 0xffffffffffffffff, 0x0) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0xa02000000000000, 0x60, &(0x7f0000000000)={'filter\x00', 0xb001, 0x4, 0x3e8, 0x218, 0x218, 0x0, 0x300, 0x300, 0x300, 0x7fffffe, 0x0, {[{{@arp={@local, @empty, 0x0, 0x0, 0x0, 0x0, {@empty, {[0x0, 0x0, 0xff]}}, {@mac=@local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'pimreg\x00', 'pimreg1\x00'}, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f67b23ffdfa27f907a03732da3acbc6518e62a77ca06f258762e88c0d9f9d2f413b94a105f4bdf01425ce81c5d000000000000000500ffffffff00"}}}, {{@arp={@multicast2, @empty, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_to_team\x00', 'ip6tnl0\x00'}, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e14fe02000000000e0001000000000002900000121f", 0x2e}], 0x1}, 0x40) 2.954327644s ago: executing program 4 (id=14163): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) pipe2(&(0x7f0000000080), 0x0) setsockopt$inet6_IPV6_PKTINFO(r1, 0x29, 0x32, &(0x7f0000002240)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, 0x14) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000740)=@bpf_lsm={0x1d, 0x1a, &(0x7f0000000800)=ANY=[], 0x0, 0x4, 0xbb, &(0x7f0000000680)=""/187, 0x40f00, 0x12, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000080)={0x7, 0x1}, 0x8, 0x10, &(0x7f0000000180)={0x5, 0xb, 0xf, 0x7}, 0x10, 0xffffffffffffffff, 0x0, 0x1, 0x0, &(0x7f00000002c0)=[{0x3, 0x5, 0xf, 0x6}], 0x10, 0x191}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4a, '\x00', 0x0, @sk_msg=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, 0x0, &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r3}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000180)=ANY=[], 0x78) sendfile(r4, 0xffffffffffffffff, &(0x7f00000001c0), 0x8) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000640)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$MAP_CREATE(0x0, 0x0, 0x48) socket$inet6_udplite(0xa, 0x2, 0x88) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000c80)='./file1\x00', 0x210000, &(0x7f0000000180)={[{@dioread_lock}, {@resgid}, {@mblk_io_submit}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@resgid}, {@errors_remount}, {@grpid}, {@jqfmt_vfsv0}]}, 0xfc, 0x58f, &(0x7f0000002d00)="$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") creat(&(0x7f0000000500)='./file1\x00', 0x90e8efbee0a921fa) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) fallocate(r5, 0x10, 0x6, 0x9) r6 = gettid() timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)=0x0) timer_settime(r7, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) recvmmsg$unix(r4, &(0x7f0000007f80)=[{{&(0x7f0000000300), 0x6e, &(0x7f00000003c0)=[{&(0x7f00000009c0)=""/141, 0x8d}, {&(0x7f0000000a80)=""/200, 0xc8}, {&(0x7f0000000cc0)=""/246, 0xf6}], 0x3, &(0x7f0000000dc0)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x130}}, {{&(0x7f0000000b80), 0x6e, &(0x7f0000008180)=[{&(0x7f0000000400)=""/2, 0x2}, {&(0x7f0000000f00)=""/112, 0x70}, {&(0x7f0000000f80)=""/194, 0xc2}, {&(0x7f0000001080)=""/174, 0xae}, {&(0x7f0000001140)=""/91, 0x5b}, {&(0x7f00000011c0)=""/4096, 0x1000}, {&(0x7f00000021c0)=""/108, 0x6c}, {&(0x7f0000000580)=""/2, 0x2}, {&(0x7f0000000c40)=""/19, 0x13}], 0x9}}, {{&(0x7f0000002300), 0x6e, &(0x7f0000002780)=[{&(0x7f0000002380)=""/180, 0xb4}, {&(0x7f0000002440)=""/236, 0xec}, {&(0x7f0000002540)=""/125, 0x7d}, {&(0x7f00000025c0)=""/205, 0xcd}, {&(0x7f00000026c0)=""/133, 0x85}, {&(0x7f00000032c0)=""/4096, 0x1000}], 0x6, &(0x7f0000002800)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x98}}, {{&(0x7f00000028c0)=@abs, 0x6e, &(0x7f0000002a40)=[{&(0x7f0000002940)=""/215, 0xd7}], 0x1, &(0x7f0000002a80)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0xa0}}, {{&(0x7f0000002b40)=@abs, 0x6e, &(0x7f0000006400)=[{&(0x7f0000002bc0)=""/204, 0xcc}, {&(0x7f00000042c0)=""/74, 0x4a}, {0x0}, {&(0x7f0000004400)=""/4096, 0x1000}, {&(0x7f0000005400)=""/4096, 0x1000}], 0x5, &(0x7f0000006480)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x60}}, {{&(0x7f0000006500), 0x6e, &(0x7f00000067c0)=[{&(0x7f0000002cc0)=""/43, 0x2b}, {&(0x7f0000006580)=""/142, 0x8e}, {&(0x7f0000006640)=""/42, 0x2a}, {&(0x7f0000006680)=""/179, 0xb3}, {&(0x7f0000006740)=""/115, 0x73}], 0x5, &(0x7f0000006840)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x28}}, {{&(0x7f0000006880), 0x6e, &(0x7f0000007e80)=[{&(0x7f0000006900)=""/223, 0xdf}, {&(0x7f0000006a00)=""/234, 0xea}, {&(0x7f0000006b00)=""/61, 0x3d}, {&(0x7f0000006b40)=""/213, 0xd5}, {&(0x7f0000006c40)=""/25, 0x19}, {&(0x7f0000006c80)=""/76, 0x4c}, {&(0x7f0000006d00)=""/239, 0xef}, {&(0x7f0000006e00)=""/4096, 0x1000}, {&(0x7f0000007e00)=""/30, 0x1e}, {&(0x7f0000007e40)=""/37, 0x25}], 0xa, &(0x7f0000007f40)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}}], 0x7, 0x10000, &(0x7f0000008140)) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) tee(r8, r9, 0x53, 0x0) lsetxattr$security_selinux(&(0x7f0000000900)='./cgroup.cpu/cgroup.procs\x00', &(0x7f0000000000), &(0x7f0000000040)='system_u:object_r:netutils_exec_t:s0\x00', 0x25, 0x0) 2.482273514s ago: executing program 3 (id=14169): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) setsockopt$inet6_IPV6_PKTINFO(r2, 0x29, 0x32, &(0x7f0000002240)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, 0x14) tee(r1, r3, 0xfffffffffffffc01, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000740)=@bpf_lsm={0x1d, 0x1a, &(0x7f0000000800)=ANY=[@ANYBLOB="185100000b0000000000000000000000180000000000000000000000fcffffff18290000", @ANYRES32=r0, @ANYBLOB="000000004fffffff18320000050000000000000000000000950000000000000018120000", @ANYRES32=r0, @ANYBLOB="000000000000000095000000000000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000009000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000018510000000000800000000000000000b875966ca2b2cead9d22ff54700d76a6480e116eed4ae241577933d3247239c3278f25db2e5dfb8cad9b5025567641801c524205b461023e64abab15619fe2ad0029a86504a5615311ded6dd18766d9b6e12bd5d2b9f54d5a4f348edc7ba7e864a0dcf6b988487a5f7cc0dc29fbede1d8d480f7b331cc0c22ec44960b04a3f1b49c1e99ffb208f79d130af46d3ffb259545fba06526fd93d1ee4aa98dcfca7cd43bdc896d12b"], &(0x7f00000004c0)='syzkaller\x00', 0x4, 0xbb, &(0x7f0000000680)=""/187, 0x40f00, 0x12, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000080)={0x7, 0x1}, 0x8, 0x10, &(0x7f0000000180)={0x5, 0xb, 0xf, 0x7}, 0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000002c0), 0x10, 0x191}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r4}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000180)=ANY=[], 0x78) sendfile(r5, 0xffffffffffffffff, &(0x7f00000001c0), 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000640)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$MAP_CREATE(0x0, 0x0, 0x48) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r6 = gettid() timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)=0x0) timer_settime(r7, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) tee(r8, r9, 0x53, 0x0) 2.293278802s ago: executing program 1 (id=14170): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) setsockopt$inet6_IPV6_PKTINFO(r2, 0x29, 0x32, &(0x7f0000002240)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, 0x14) tee(r1, r3, 0xfffffffffffffc01, 0x0) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000740)=@bpf_lsm={0x1d, 0x1a, &(0x7f0000000800)=ANY=[@ANYBLOB="185100000b0000000000000000000000180000000000000000000000fcffffff18290000", @ANYRES32=r0, @ANYBLOB="000000004fffffff18320000050000000000000000000000950000000000000018120000", @ANYRES32=r0, @ANYBLOB="000000000000000095000000000000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000009000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="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"], &(0x7f00000004c0)='syzkaller\x00', 0x4, 0xbb, &(0x7f0000000680)=""/187, 0x40f00, 0x12, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000080)={0x7, 0x1}, 0x8, 0x10, &(0x7f0000000180)={0x5, 0xb, 0xf, 0x7}, 0x10, 0xffffffffffffffff, 0x0, 0x1, 0x0, &(0x7f00000002c0)=[{0x3, 0x5, 0xf, 0x6}], 0x10, 0x191}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4a, '\x00', 0x0, @sk_msg=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r5}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000180)=ANY=[], 0x78) sendfile(r6, 0xffffffffffffffff, &(0x7f00000001c0), 0x8) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$MAP_CREATE(0x0, 0x0, 0x48) socket$inet6_udplite(0xa, 0x2, 0x88) r7 = gettid() timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r7}, &(0x7f0000bbdffc)=0x0) timer_settime(r8, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) recvmmsg$unix(r6, &(0x7f0000007f80)=[{{&(0x7f0000000300), 0x6e, &(0x7f00000003c0)=[{&(0x7f00000009c0)=""/141, 0x8d}, {&(0x7f0000000a80)=""/200, 0xc8}, {&(0x7f0000000cc0)=""/246, 0xf6}], 0x3, &(0x7f0000000dc0)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x130}}, {{&(0x7f0000000b80), 0x6e, &(0x7f0000008180)=[{&(0x7f0000000400)=""/2, 0x2}, {&(0x7f0000000f00)=""/112, 0x70}, {&(0x7f0000000f80)=""/194, 0xc2}, {&(0x7f0000001080)=""/174, 0xae}, {&(0x7f0000001140)=""/91, 0x5b}, {&(0x7f00000011c0)=""/4096, 0x1000}, {&(0x7f00000021c0)=""/108, 0x6c}, {&(0x7f0000000580)=""/2, 0x2}, {&(0x7f0000000c40)=""/19, 0x13}], 0x9}}, {{&(0x7f0000002300), 0x6e, &(0x7f0000002780)=[{&(0x7f0000002380)=""/180, 0xb4}, {&(0x7f0000002440)=""/236, 0xec}, {&(0x7f0000002540)=""/125, 0x7d}, {&(0x7f00000025c0)=""/205, 0xcd}, {&(0x7f00000026c0)=""/133, 0x85}, {&(0x7f00000032c0)=""/4096, 0x1000}], 0x6, &(0x7f0000002800)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x98}}, {{&(0x7f00000028c0)=@abs, 0x6e, &(0x7f0000002a40)=[{&(0x7f0000002940)=""/215, 0xd7}], 0x1, &(0x7f0000002a80)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0xa0}}, {{&(0x7f0000002b40)=@abs, 0x6e, &(0x7f0000006400)=[{&(0x7f0000002bc0)=""/204, 0xcc}, {&(0x7f00000042c0)=""/74, 0x4a}, {&(0x7f0000004340)=""/153, 0x99}, {&(0x7f0000004400)=""/4096, 0x1000}, {&(0x7f0000005400)=""/4096, 0x1000}], 0x5, &(0x7f0000006480)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x60}}, {{&(0x7f0000006500), 0x6e, &(0x7f00000067c0)=[{&(0x7f0000002cc0)=""/43, 0x2b}, {&(0x7f0000006580)=""/142, 0x8e}, {&(0x7f0000006640)=""/42, 0x2a}, {&(0x7f0000006680)=""/179, 0xb3}, {&(0x7f0000006740)=""/115, 0x73}], 0x5, &(0x7f0000006840)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x28}}, {{&(0x7f0000006880), 0x6e, &(0x7f0000007e80)=[{&(0x7f0000006900)=""/223, 0xdf}, {&(0x7f0000006a00)=""/234, 0xea}, {&(0x7f0000006b00)=""/61, 0x3d}, {&(0x7f0000006b40)=""/213, 0xd5}, {0x0}, {&(0x7f0000006c80)=""/76, 0x4c}, {&(0x7f0000006d00)=""/239, 0xef}, {&(0x7f0000006e00)=""/4096, 0x1000}, {&(0x7f0000007e00)=""/30, 0x1e}, {&(0x7f0000007e40)=""/37, 0x25}], 0xa, &(0x7f0000007f40)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}}], 0x7, 0x10000, &(0x7f0000008140)) 2.090161411s ago: executing program 4 (id=14171): bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000002c0)='./file2\x00', 0x300c056, &(0x7f0000000200)={[{@noload}, {@data_err_abort}, {@data_err_abort}, {@dioread_lock}, {@errors_remount}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@data_err_ignore}, {@nojournal_checksum}, {@nobh}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x560, &(0x7f0000000a00)="$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") r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x9, 0x690bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x1) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x5, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) ioctl$TUNSETSNDBUF(r2, 0x400454d4, &(0x7f0000000180)=0x80000001) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r3 = syz_io_uring_setup(0x1104, &(0x7f00000004c0)={0x0, 0xffffffff, 0x0, 0x2, 0x160}, 0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, r4, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x4007, 0x0, 0x0, 0x1fc}) io_uring_enter(r3, 0x47fa, 0xfd5d, 0x200000000000000, 0x0, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000001680)=ANY=[@ANYBLOB="1800000000030000000000000000000095"], &(0x7f0000001700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x20}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='contention_end\x00', r5}, 0x18) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000480)={&(0x7f00000001c0)=ANY=[@ANYBLOB="d01ef589789260114d33eaca2c0000", @ANYRES16=0x0, @ANYBLOB="00012abd7000fedbdf250300000008000b000000000008003b0004000000050030"], 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x20000010) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r7, 0x0, r9, 0x0, 0x8000f28, 0x0) splice(r8, 0x0, r7, 0x0, 0x7f, 0xe) write(r6, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1000002, 0x4012831, 0xffffffffffffffff, 0x0) r10 = syz_open_procfs(0x0, &(0x7f0000000580)='smaps_rollup\x00') mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) lseek(r10, 0x2004, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000100)=ANY=[], 0x0) socket$netlink(0x10, 0x3, 0xf) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="3800000039000900000000000000000001000000040000000c0001800600000005470000080002"], 0x38}}, 0x0) r12 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x22) pwrite64(r12, &(0x7f0000000140)='2', 0xfdef, 0xfecc) 1.859250681s ago: executing program 5 (id=14173): bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000180)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0x8, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8c, &(0x7f0000000280)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f00000002c0), &(0x7f0000000300), 0x8, 0x9, 0x8, 0x8, &(0x7f0000000380)}}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x8, 0x8, &(0x7f0000000700)=ANY=[@ANYRES16, @ANYRESDEC=r0, @ANYRESDEC=r0, @ANYBLOB="6cca48f9c1e8dc7fc11a2c9361cbc5f8a59b02cc454fd954051745052af99296c0ee3e"], &(0x7f0000000100)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=ANY=[@ANYBLOB="2c000000490008002dbd7000fbdbdf250a007800", @ANYRES32=0x0, @ANYBLOB="0200000008008ab19f79db9c206602006a650000"], 0x2c}, 0x1, 0x0, 0x0, 0x48890}, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000100)=ANY=[@ANYBLOB="ffffffffffff0180c200"], 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r3, &(0x7f0000000100)="0557a8ea7bc273dfaeab96850806", 0xe, 0x0, &(0x7f0000000200)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @link_local}, 0x14) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002180)='blkio.bfq.io_merged\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r6, 0x0) ftruncate(r6, 0xc17a) r7 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r7) syz_usb_connect$cdc_ncm(0x2, 0xa0, &(0x7f0000000380)=ANY=[], 0x0) ioctl$EVIOCRMFF(r7, 0x5509, &(0x7f0000000500)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000800000000000070000000900010073797a30000000007c000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d38001280140001800c000100636f756e7465720004000280200001800e000100636f6e6e6c696d69740000000c000280080001400000000808000340000001"], 0xc4}}, 0x20050890) 1.781370104s ago: executing program 2 (id=14174): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x13, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs$pagemap(0x0, &(0x7f0000000080)) ioctl$PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f00000006c0)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x76, 0x0, 0x0, 0x8, 0x4, 0x14, 0x68, 0xd}) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r1, 0x40045402, &(0x7f0000000080)=0x1) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000300000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000900850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kfree\x00', r3}, 0x10) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000000)={'ip6_vti0\x00', &(0x7f0000000140)={'syztnl1\x00', 0x0, 0x29, 0x9, 0x0, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2f}}, @loopback={0x30000, 0xffff888101827518}, 0x20, 0x0, 0x38dc586a}}) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000600)='./file0\x00', 0xc8d0, &(0x7f0000000140)=ANY=[@ANYRES8=0x0], 0x1, 0x30e, &(0x7f0000000f00)="$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") openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) 1.727747736s ago: executing program 2 (id=14175): r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r1 = socket$unix(0x1, 0x2, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000040)=0x7, 0x4) r2 = inotify_init1(0x80000) inotify_add_watch(r2, &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x8) connect$unix(r1, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) writev(r1, &(0x7f00000008c0)=[{&(0x7f0000000580)='`', 0x1}], 0x1) r3 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r3, 0x84, 0x1e, 0x0, &(0x7f0000000080)) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc2, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x18, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r5}, 0x10) r6 = syz_clone3(&(0x7f0000001880)={0x100000200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) tgkill(r6, r6, 0x21) wait4(r6, 0x0, 0x40000000, 0x0) r7 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000002c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd"], 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r8, 0x0, 0x64, 0xe80, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r9 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x8042, 0x0) fcntl$setlease(r9, 0x400, 0x1) bind$bt_sco(r9, &(0x7f0000000200)={0x1f, @none}, 0x8) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r7, 0x89f5, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000400)={@dev={0xac, 0x14, 0x14, 0x17}, 0x1}}) setsockopt$inet_tcp_int(r7, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7c, 0xe) bind$inet(r7, &(0x7f0000001c00)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r7, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0xb) sendto(r7, &(0x7f0000000740)='P', 0x1, 0x0, 0x0, 0x0) 1.65497784s ago: executing program 2 (id=14176): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) pipe2(0x0, 0x800) pipe2(&(0x7f0000000080), 0x0) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000002240)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, 0x14) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4a, '\x00', 0x0, @sk_msg=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r2}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000180)=ANY=[], 0x78) sendfile(r3, 0xffffffffffffffff, &(0x7f00000001c0), 0x8) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$MAP_CREATE(0x0, 0x0, 0x48) socket$inet6_udplite(0xa, 0x2, 0x88) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000c80)='./file1\x00', 0x210000, &(0x7f0000000180)={[{@dioread_lock}, {@resgid}, {@mblk_io_submit}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@resgid}, {@errors_remount}, {@grpid}, {@jqfmt_vfsv0}]}, 0xfc, 0x58f, &(0x7f0000002d00)="$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") openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r4 = gettid() timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)=0x0) timer_settime(r5, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) recvmmsg$unix(r3, &(0x7f0000007f80)=[{{&(0x7f0000000300), 0x6e, &(0x7f00000003c0)=[{&(0x7f00000009c0)=""/141, 0x8d}, {&(0x7f0000000a80)=""/200, 0xc8}, {&(0x7f0000000cc0)=""/246, 0xf6}], 0x3, &(0x7f0000000dc0)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x130}}, {{&(0x7f0000000b80), 0x6e, &(0x7f0000008180)=[{&(0x7f0000000400)=""/2, 0x2}, {&(0x7f0000000f00)=""/112, 0x70}, {&(0x7f0000000f80)=""/194, 0xc2}, {&(0x7f0000001080)=""/174, 0xae}, {&(0x7f0000001140)=""/91, 0x5b}, {&(0x7f00000011c0)=""/4096, 0x1000}, {&(0x7f00000021c0)=""/108, 0x6c}, {&(0x7f0000000580)=""/2, 0x2}, {&(0x7f0000000c40)=""/19, 0x13}], 0x9}}, {{&(0x7f0000002300), 0x6e, &(0x7f0000002780)=[{&(0x7f0000002380)=""/180, 0xb4}, {&(0x7f0000002440)=""/236, 0xec}, {&(0x7f0000002540)=""/125, 0x7d}, {&(0x7f00000025c0)=""/205, 0xcd}, {&(0x7f00000026c0)=""/133, 0x85}, {&(0x7f00000032c0)=""/4096, 0x1000}], 0x6, &(0x7f0000002800)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x98}}, {{&(0x7f00000028c0)=@abs, 0x6e, &(0x7f0000002a40)=[{&(0x7f0000002940)=""/215, 0xd7}], 0x1, &(0x7f0000002a80)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0xa0}}, {{&(0x7f0000002b40)=@abs, 0x6e, &(0x7f0000006400)=[{&(0x7f0000002bc0)=""/204, 0xcc}, {&(0x7f00000042c0)=""/74, 0x4a}, {&(0x7f0000004340)=""/153, 0x99}, {&(0x7f0000004400)=""/4096, 0x1000}, {&(0x7f0000005400)=""/4096, 0x1000}], 0x5}}, {{&(0x7f0000006500), 0x6e, &(0x7f00000067c0)=[{&(0x7f0000002cc0)=""/43, 0x2b}, {&(0x7f0000006580)=""/142, 0x8e}, {&(0x7f0000006640)=""/42, 0x2a}, {&(0x7f0000006680)=""/179, 0xb3}, {&(0x7f0000006740)=""/115, 0x73}], 0x5, &(0x7f0000006840)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x28}}, {{&(0x7f0000006880), 0x6e, &(0x7f0000007e80)=[{&(0x7f0000006900)=""/223, 0xdf}, {&(0x7f0000006a00)=""/234, 0xea}, {&(0x7f0000006b00)=""/61, 0x3d}, {&(0x7f0000006b40)=""/213, 0xd5}, {&(0x7f0000006c40)=""/25, 0x19}, {&(0x7f0000006c80)=""/76, 0x4c}, {&(0x7f0000006d00)=""/239, 0xef}, {&(0x7f0000006e00)=""/4096, 0x1000}, {&(0x7f0000007e00)=""/30, 0x1e}, {&(0x7f0000007e40)=""/37, 0x25}], 0xa, &(0x7f0000007f40)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}}], 0x7, 0x10000, &(0x7f0000008140)) 1.592190022s ago: executing program 3 (id=14177): r0 = open$dir(&(0x7f0000000100)='.\x00', 0x18100, 0x0) fcntl$notify(r0, 0x402, 0x80000023) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x40000, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) getdents64(r1, &(0x7f0000001000)=""/164, 0xa4) 1.548375934s ago: executing program 3 (id=14178): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) pipe(&(0x7f0000000600)) socket(0x1d, 0x2, 0x6) epoll_create(0x3) write$UHID_CREATE2(r0, 0x0, 0x119) socket$nl_route(0x10, 0x3, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='fdinfo/3\x00') syz_open_procfs(0x0, &(0x7f0000000000)='net/vlan/vlan0\x00') r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000001000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) epoll_create1(0x0) epoll_create1(0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000300), 0x111, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0xfffc, 0x2, @empty, 0xa09c}, {0xa, 0x2, 0xfffffffe, @dev={0xfe, 0x80, '\x00', 0x39}}, 0xffffffffffffffff, 0x40099d}}, 0x37) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000300)) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0xff7fffff}, 0x8) writev(r2, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 1.507413306s ago: executing program 4 (id=14179): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000b8ffffffb702000004000000b7030000000000de8500000004000000"], &(0x7f0000000680)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) getdents64(0xffffffffffffffff, 0x0, 0x0) 1.486472187s ago: executing program 3 (id=14180): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000080200000e"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7030000ec000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r1}, 0x18) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000100), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c020000", @ANYRES16=r2, @ANYBLOB="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"], 0x21c}, 0x1, 0x0, 0x0, 0x20040010}, 0x4008804) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f00000000c0)={@mcast2, 0x0}, &(0x7f0000000100)=0x14) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x30, r2, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [@WGDEVICE_A_IFINDEX={0x8, 0x1, r4}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="050000000c0000000800000040"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000080), 0x1003, r5}, 0x38) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000140)={r5, &(0x7f0000000080), &(0x7f0000000180)=""/40}, 0x20) 1.463525978s ago: executing program 4 (id=14181): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="05000000040000000800"], 0x48) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) setsockopt$inet6_IPV6_PKTINFO(r2, 0x29, 0x32, &(0x7f0000002240)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, 0x14) tee(r1, r3, 0xfffffffffffffc01, 0x0) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000740)=@bpf_lsm={0x1d, 0x1a, &(0x7f0000000800)=ANY=[@ANYBLOB="185100000b0000000000000000000000180000000000000000000000fcffffff18290000", @ANYRES32=r0, @ANYBLOB="000000004fffffff18320000050000000000000000000000950000000000000018120000", @ANYRES32=r0, @ANYBLOB="000000000000000095000000000000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000009000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000018510000000000800000000000000000b875966ca2b2cead9d22ff54700d76a6480e116eed4ae241577933d3247239c3278f25db2e5dfb8cad9b5025567641801c524205b461023e64abab15619fe2ad0029a86504a5615311ded6dd18766d9b6e12bd5d2b9f54d5a4f348edc7ba7e864a0dcf6b988487a5f7cc0dc29fbede1d8d480f7b331cc0c22ec44960b04a3f1b49c1e99ffb208f79d130af46d3ffb259545fba06526fd93d1ee4aa98dcfca7cd43bdc896d12b"], &(0x7f00000004c0)='syzkaller\x00', 0x4, 0xbb, &(0x7f0000000680)=""/187, 0x40f00, 0x12, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000080)={0x7, 0x1}, 0x8, 0x10, &(0x7f0000000180)={0x5, 0xb, 0xf, 0x7}, 0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000002c0), 0x10, 0x191}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4a, '\x00', 0x0, @sk_msg=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r5}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000180)=ANY=[], 0x78) sendfile(r6, 0xffffffffffffffff, &(0x7f00000001c0), 0x8) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000640)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$MAP_CREATE(0x0, 0x0, 0x48) socket$inet6_udplite(0xa, 0x2, 0x88) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000c80)='./file1\x00', 0x210000, &(0x7f0000000180)={[{@dioread_lock}, {@resgid}, {@mblk_io_submit}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@resgid}, {@errors_remount}, {@grpid}, {@jqfmt_vfsv0}]}, 0xfc, 0x58f, &(0x7f0000002d00)="$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") creat(&(0x7f0000000500)='./file1\x00', 0x90e8efbee0a921fa) r7 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) fallocate(r7, 0x10, 0x6, 0x9) gettid() recvmmsg$unix(r6, &(0x7f0000007f80)=[{{&(0x7f0000000300), 0x6e, &(0x7f00000003c0)=[{&(0x7f00000009c0)=""/141, 0x8d}, {&(0x7f0000000a80)=""/200, 0xc8}, {&(0x7f0000000cc0)=""/246, 0xf6}], 0x3, &(0x7f0000000dc0)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x130}}, {{&(0x7f0000000b80), 0x6e, &(0x7f0000008180)=[{&(0x7f0000000400)=""/2, 0x2}, {&(0x7f0000000f00)=""/112, 0x70}, {&(0x7f0000000f80)=""/194, 0xc2}, {&(0x7f0000001080)=""/174, 0xae}, {&(0x7f0000001140)=""/91, 0x5b}, {&(0x7f00000011c0)=""/4096, 0x1000}, {&(0x7f00000021c0)=""/108, 0x6c}, {&(0x7f0000000580)=""/2, 0x2}, {&(0x7f0000000c40)=""/19, 0x13}], 0x9}}, {{&(0x7f0000002300), 0x6e, &(0x7f0000002780)=[{&(0x7f0000002380)=""/180, 0xb4}, {&(0x7f0000002440)=""/236, 0xec}, {&(0x7f0000002540)=""/125, 0x7d}, {&(0x7f00000025c0)=""/205, 0xcd}, {&(0x7f00000026c0)=""/133, 0x85}, {&(0x7f00000032c0)=""/4096, 0x1000}], 0x6, &(0x7f0000002800)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x98}}, {{&(0x7f00000028c0)=@abs, 0x6e, &(0x7f0000002a40)=[{&(0x7f0000002940)=""/215, 0xd7}], 0x1, &(0x7f0000002a80)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0xa0}}, {{&(0x7f0000002b40)=@abs, 0x6e, &(0x7f0000006400)=[{&(0x7f0000002bc0)=""/204, 0xcc}, {&(0x7f00000042c0)=""/74, 0x4a}, {&(0x7f0000004340)=""/153, 0x99}, {&(0x7f0000004400)=""/4096, 0x1000}, {&(0x7f0000005400)=""/4096, 0x1000}], 0x5, &(0x7f0000006480)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x60}}, {{&(0x7f0000006500), 0x6e, &(0x7f00000067c0)=[{&(0x7f0000002cc0)=""/43, 0x2b}, {&(0x7f0000006580)=""/142, 0x8e}, {&(0x7f0000006640)=""/42, 0x2a}, {&(0x7f0000006680)=""/179, 0xb3}, {&(0x7f0000006740)=""/115, 0x73}], 0x5, &(0x7f0000006840)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x28}}, {{&(0x7f0000006880), 0x6e, &(0x7f0000007e80)=[{&(0x7f0000006900)=""/223, 0xdf}, {&(0x7f0000006a00)=""/234, 0xea}, {&(0x7f0000006b00)=""/61, 0x3d}, {&(0x7f0000006b40)=""/213, 0xd5}, {&(0x7f0000006c40)=""/25, 0x19}, {&(0x7f0000006c80)=""/76, 0x4c}, {&(0x7f0000006d00)=""/239, 0xef}, {&(0x7f0000006e00)=""/4096, 0x1000}, {&(0x7f0000007e00)=""/30, 0x1e}, {&(0x7f0000007e40)=""/37, 0x25}], 0xa, &(0x7f0000007f40)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}}], 0x7, 0x10000, &(0x7f0000008140)) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) tee(r8, 0xffffffffffffffff, 0x53, 0x0) lsetxattr$security_selinux(&(0x7f0000000900)='./cgroup.cpu/cgroup.procs\x00', &(0x7f0000000000), &(0x7f0000000040)='system_u:object_r:netutils_exec_t:s0\x00', 0x25, 0x0) 1.400649571s ago: executing program 3 (id=14182): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d00)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) syz_open_dev$tty1(0xc, 0x4, 0x2) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000010100008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x2d) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) r5 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) writev(r5, &(0x7f00000025c0)=[{&(0x7f0000000240)='4', 0x1}, {0x0, 0x900}], 0x2) 1.39983265s ago: executing program 1 (id=14183): timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x77359400}, {0x0, 0x989680}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000180)={{}, {0x0, 0x3938700}}, &(0x7f00000001c0)) openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) pipe(&(0x7f0000000600)) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000004000000b703000008000040850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = syz_io_uring_setup(0x10b, &(0x7f00000004c0)={0x0, 0x8b7e, 0x800, 0x1, 0x22}, &(0x7f0000000940)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0xa, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r1, 0x47f9, 0x0, 0x0, 0x0, 0x0) clock_nanosleep(0x9, 0x0, &(0x7f0000000080)={0x77359400}, 0x0) 1.051464015s ago: executing program 5 (id=14184): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000", @ANYRES32, @ANYBLOB="0000000000000000b70500001000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="07000000040000008000000004"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x8, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000700000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000300)='kmem_cache_free\x00', r1}, 0x18) socketpair(0x1, 0x1, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) fchown(r2, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x702, 0x0, 0x0, &(0x7f0000000540), 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x783}, 0x50) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000200)='cpuset.mem_hardwall\x00', 0x2, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x210}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) fgetxattr(0xffffffffffffffff, 0x0, 0x0, 0x0) connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = getpid() r6 = syz_pidfd_open(r5, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='sched_switch\x00', r7}, 0x10) syz_io_uring_setup(0x10f, &(0x7f00000000c0)={0x0, 0x211a, 0x80, 0x4, 0x306}, &(0x7f0000000340), &(0x7f0000000280)) setns(r6, 0x24020000) syz_clone(0xf5982500, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) 768.528487ms ago: executing program 2 (id=14185): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000080)=ANY=[@ANYBLOB="1800"/14, @ANYRES32], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000"], 0x50) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$inet_icmp(0x2, 0x2, 0x1) sendmmsg$inet(r3, &(0x7f0000000340)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000400)='\b\x00\x00', 0x3}], 0x1}}], 0x1, 0x4000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2, 0x0, 0x2}, 0x18) r4 = syz_open_dev$tty20(0xc, 0x4, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x111, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000007c0)={@cgroup, 0x16, 0x0, 0x80000000, &(0x7f0000000380)=[0x0], 0x1, 0x0, &(0x7f00000003c0), &(0x7f0000000280), 0x0}, 0x40) ioctl$VT_DISALLOCATE(r4, 0x5608) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x400a, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x5421000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) syslog(0x9, 0x0, 0x0) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000580), r0) sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000004c0)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01002abd7000ffdbdf25090000006400038008000100010000000800030004000000140002007665744e315f6d6163767461700000000600"], 0x78}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/13, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c30000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_PORTS(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)={0x1c, r6, 0x1, 0x78bd29, 0x25dfdbfe}, 0x1c}, 0x1, 0x0, 0x0, 0x880}, 0x50) syz_emit_ethernet(0xd81, &(0x7f0000000800)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaa1d080045000d73000000020011907800000000000000004e224e220d5f90782695372adb326008704fdb7741565f1ce4394a3517532f606ad7b321b7cadde9fd24b18802010c94bd420b1f6d14364f870e9cc8bd414943c9c1f678313c44e94639b22790c5c57e9dfb0d998c0dac2948c4ed5c2a8b4dc57bcaa8684bbecd6704a8c75bfcfa4ada223db77891fa0f8d2463d74124c2bec3d76d4da77090b678f5c18d8662e0e70bd009ee1b48fe0792f4a6e73b8152f6b91ab0d7d233f5554b303189ed182bfe2998bae694f98296845c197e4810f10a1a30ed5db7562848db98a2d79ed8aeb9e8e2448211c482e10945ec008706f3f6de0093344846959c19308575909181a944e73f54c271e2c912852f67558ff6b47714cb8f0e937de4b8d4d83c0d11a9a91b1489213376381c3ee6e03928342ccb193cbd846d4b08ef0afb8118c659ca54a34a4e7b31a89fec0c895d1ca6070178e09f45d7f7847d8159c100e612a9fcb022c693fa2cb8fc54e4241900996c722998ed46f4d8f0724349b4900f8796d9658691443bfce62921d5f46bdf318e64e473261ac111976fc550d5af0b15e68322b256cb96a7dc427e92a29e31a1b567f9e3eadacf3a7ce54f21d550818523a388d970a7053a6f1f6cb6b231061829375faf860f666a65ae2e3aaf73b94b154703448b045d5c8f40225cd3b78077cd70b583511ed603181d3128dc649e47526e561f240f369ed23577e42e6fa4e6d0d6cb52caa3f3a320bd9bcd571ab05a2212647f7742908de4b3c65802be61b4c640a86f904f9218cef31188f9966f153841814e371975ab6832f63a4754038c5a5da35968117585d059fc5fc129bb86595058bdc345447859005a5b634a8ea73526538c9af9acb00e385d7a7a5b44dccccc7a9ae7c9be352e4f8f2782fec626dbc639cf5e4565f2c7c4131ffaa5f3e2339af9a1b531392f25cdbf4d5e7177c95730c7eb744c44c8e3212bc4cb55c6c2677ae596def7745c48290f97e6c2adab11706904a4190f50f93c86705f798c0212741181ec3e88f764743b539e87b5dd0dd40adab1d9abceed46b9171d613ee257b57c868c3f3a1f011fb025cfc39f1f99482771d0fbe26a932781a815b85cbd12ce00640cb037ed25b642f7e7d563c14c2c2c956dd4f9e6b62d8f5efad95c3a6280298ab41361579baffd5775fa1e75092f1f82e16b62bc40044c26c0bde5950e04a28b99bcd4e768996b828e297f4a7c0dc76d885254d7f63db82e34a057a051df426816bc2d23e92b77445ab483780997e6b7576c360a3e1e598aa99bc520f12f69831eda760e92b3d19d7c164cfbe4ab7b98e78c28beaca727804d448420c508528d7e6e79fcc5370550deccef32349012d2ddd2cf64cf8c72c428f54a438476f6fa49df16f67a1a127adb3fab1b67f6e7379cad4f1f6729c41102a99d9b612f8761a5488088116bd95cb64f02f349509866615c7ab705514185765049c3c222229818d5365189ffde34da1bd086f4727e8774721b9c9b54f1f26aa02079084f70b89acb318927d88963167a502aaa18037aa98a167974ccd8d9bc134170e35f4e4491170a34f2b8e97b9564a3b56cda566d2e8d5ff4a50367c39d3f84a15de18d3eaf19e0398bbc96baec96541ee1f94ed2b8a8d4fc16fbb370dacac9bcb98ae51dd0cd179e3c3458a1dfad27207d9489d195946047688f1392c6379da54b3c693ede2b0482be06038bcbdcebba471994ed872b1f883522b17fab22a9bbffaf2afa9b9b08feb35eb4f5c3ef1c2509be45553faed2debb8d390c20ce21dfb660989c69d5dd75ed267623827a72f5cb281bfbaee91164a93c2fa4b27c12696e2ee6765ed5b8c2e014e9274823fc5a332b26c7b12825308e10703dad661de3fb06f46ac5fc6a8011d7a78f791f7e2d4d132a229245991ed0e0efa7c5545da7df279e90bae4aa189925f2a79c5c32dbb90bd11e3f74829d5c7360fe33f221b6846d3e631d657a85abe7fb4e980000d0cd8976fb13a9ff96661b1b919449d0b79e0b8302e619ff70ab1452296af840d2ebd90dc689338958a3885b195ec44235242020228e6a7bc8e1d411a2bc45821ab312aaf2913202fac07734372b237c3d998982aaa9b44e08b3ac670c332f9bb253e5678266d2a5461c0de95d90880f0e557242642fb6bd64918c2ab6236cca058a32f97f299294891d15a7c467069b38fd1eb69a6a27e6d69baf8d0e71a1af47fa8101c3492d39874f53d9111d926781d02a266fa6c81fa04ba18b4c7c598285dae33d9018151cd1a9d5e8aa3917bbdf5dd575cf6b13ceaa89a93ca6f7c748a7f7778d00ed349baf69daab69f8e51ff5fddba4e9f476c50c9d3aa73a190379162803f4b3d6390215d99cd965efb97909203e4210c64433276eef7e310ce5737acfa1852d8dfd93743c84ed0e3cac6924323a1d9ede93687c108c03f17e027aae0f7b8d4eb0ee5e20cc4897afe140e7dffb40515a0b716c8eb7573121cd7f415d36e85c3b537eb16503671d41d6fdec553c3802374f7e71e17b75aec80ab7a88da3de44d7f88ffe25f3a51ff1eec1121542f470d8aa2d14528f20a072a053c0e352910c3dc689af1bf94d2f39301a5daef6257b9c5f522cede503489c013ab7703f167f661e78a6da2d84aeab1b9e3938e67280a765f58b0af720f86b25ac0c860878d023b97d7778e7b94eef220931b6d5deeeebd5a5f77cc45301f38df440522124a256121aa6541c0e7855a137e7741c1c6dbaaf40b913ed812b53856de6c71c4a61d556606304075d974486698c53a16d32401137152c9a2f2b8a6a6f87222f03595d126131c4ef718b36e3a0b9ff1c4edeabb42a740a08c79730afe211b469723c65040b07d2a9d3e8c66a9d36e068baea425553ee5d795690883a16d0d82e4aff8b6bd9d6156ad68e0d8c4dedcdadc301d2417458dffa0547db3770dbc528ede6020aad28d5cac457cb961c905a6cd53cb5f2159263c860596368cbccb0935da7e26e049848face61d92510480de3817baf1ddcdd3867583bd218e5a4c36bdff2a939fa7fa81f9ee56071c0e509a5be133a4ba053122775c7bf90d1502c37d7a238190f2d47cf9d651f86f475117d4894491e31baf1f5a85af4af24bdc1585aad86d0cc1163e9d52b656b404d449c911acce8240becae44038e0bce1084cb2f6d1f75ade77f06459823708a6485fed3ed4ed4d86dceff97aca53a5db6e1021102b4e4b7404da6e22d86e929eb32f3ac8303a9383375c22805f4abdefcff82eee8783fe8c82be16765cd34a33b02124ce8de1ed356e7a26dc70c1007fcfd493a11b1c1a094242891b4281c1e4fd7067947f273763ce02cfbe6254bd87ac742c8109034a37a96cae5a13060542109e99595f760dfe614bda9976b90cd9debeb2859733e1b02d1dd864a2a932bfae6b8dcb89dd64e4d0ec9bf1185b432a3379bb1fbd9c4fbbc4c5f56aef8d9ee804751b373018a45fc134a183966593e65b528fdaeb3c2c40be876a4547593e85da334d801137c5cd60984e240501177c755bd6db5d44a609cf3a6fc3426973d85e663ba1b43c56d29abd208392518b0dc86aaa129ff687b2d8add77ed4edd21d2d2fe70cbb2f59eca2dcfd235b2f3d0f1087d5481d9630c3c3ad3596c8b5e3831ba74b42ff9b05414625b0df2d03cbcc66a066caafb404f9745592da4abacc906184c27e6c6dc35aa9decbfc2640a2ed3b94a43de4bfe7b49e6b314c251c382b8e3822d0a65e32300f4ec5b6ddc47302c5053e92001d137f550ea4cb724b97e9b4bafedfa9be797fbfcd62462819a6ff022d49edec34bff2317d3218ba8a2458c100cd866eeef575e84acb9b916c4a69e13a5f995e206238ef7e2abf15e77a14b4936a3accc8f9ffd7340b2766c5a37acc88326813b0dfb05f5a76942b211f6816c13d0a800749d73c4686ebbc4f8e76abdbd06f23552f2b4f9483828bf1a8dc15ace3fea4830236d2333376b9c729ae32a2cacf79c7e0601b403fa37a1f341148e9a97216afe6ff9ea7fd7e7785a6fbcfde9e2d4a4a797d41ba7f330625aa142c43ef3ba7fd4ae1e96dd05d2df0862ab08294edcca7d1c83517f1945ab8df660c665cd46888431f10b0fb8096d2fdb883bd26aa54a4eac4fe15c5228a28082333f9c3cc73fd4271f97beb158c72bb57be485c19ebc3c7cbb238e8b4d7ea0ea47f79c1b91523a87df5012b946d6801d0cced81d689b916aed29694ee91a6be5af88a93bf1f6c2ec374ba17917822c148d36719017ebe89170daf98bdc0a97541e64a43bc458895a0aceb5b9eff7e5b52e1d1d0faa6cfb30ead31a166795b3782ebb7031087d7a4f05ff11829e81fd7f43ea577df3ac0d3c0ce3c787acfe85cf3d17022ebf73f8540f8596444b4919ba96d1fb4f6b6bca9b62a0e6b3fe7fb6e05520b705259912d042a724e11949133727ec6568f322fa0239fb0ecb53af01da35aa78f500d16848495223b5cc397b7ffedd1ae6a7a995c06cc5647b4468a56195fcef0164569f620eaaee4e22645e47ed39ab4737088e6c6d78c4635c059031cdc80c6b877af1e719a7e250ef58ac73a3913a7b678fce836d9264d50a095839008ffce3824cbf925eda84d72b304b98350271c93cc22eb73c2298589dd000c85f3c236b2bfe82e38e47ff5c0c77798877f20382fe0f57ad71ddef4061913c71c53af584fe99c35ab4978cd42d2b3b518bd3b506130ea00947e7ab03e1152248c87a8d044a834c0ab04d963df406363297c13d8469cc6ffd4ab7efd9f65c3f9a26aaa2a350e0093e5fca0fa278f666209d1326a93a788cc7ca8bdf4ca033d6d591f62c50b1244667256c327968c54ae40561567091"], 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) writev(r7, &(0x7f00000003c0), 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 530.137358ms ago: executing program 4 (id=14186): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000300)='kmem_cache_free\x00', r0}, 0x18) fgetxattr(0xffffffffffffffff, 0x0, 0x0, 0x0) 413.019013ms ago: executing program 1 (id=14187): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x21081e, &(0x7f00000002c0), 0x1, 0x4f2, &(0x7f0000000600)="$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") 386.701834ms ago: executing program 3 (id=14188): pipe2(0x0, 0x800) pipe2(0x0, 0x0) tee(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffc01, 0x0) r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000740)=@bpf_lsm={0x1d, 0x1a, &(0x7f0000000800)=ANY=[@ANYBLOB="185100000b0000000000000000000000180000000000000000000000fcffffff18290000", @ANYRES32, @ANYBLOB="000000004fffffff18320000050000000000000000000000950000000000000018120000", @ANYRES32, @ANYBLOB="000000000000000095000000000000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000009000000850000000600000018110000"], &(0x7f00000004c0)='syzkaller\x00', 0x4, 0xbb, &(0x7f0000000680)=""/187, 0x40f00, 0x12, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000080)={0x7, 0x1}, 0x8, 0x10, &(0x7f0000000180)={0x5, 0xb, 0xf, 0x7}, 0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000002c0), 0x10, 0x191}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4a, '\x00', 0x0, @sk_msg=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000180)=ANY=[], 0x78) sendfile(r2, 0xffffffffffffffff, &(0x7f00000001c0), 0x8) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000640)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$MAP_CREATE(0x0, 0x0, 0x48) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r3 = gettid() timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)=0x0) timer_settime(r4, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) tee(r5, r6, 0x53, 0x0) 266.720489ms ago: executing program 2 (id=14189): r0 = open$dir(&(0x7f0000000100)='.\x00', 0x18100, 0x0) fcntl$notify(r0, 0x402, 0x80000023) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x40000, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) getdents64(r1, &(0x7f0000001000)=""/164, 0xa4) 227.377131ms ago: executing program 2 (id=14190): socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x94) syz_emit_ethernet(0x7a, &(0x7f00000000c0)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaabb86dd60fc104600442f00fc000000000000000000000000000000ff020000000000000000000000000001242088a80000000300000800000086dd080088be86dd"], 0x0) r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1d459d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x8}, 0x20a8, 0x4005, 0x8000000b, 0x0, 0x3, 0x1, 0xb, 0x0, 0x0, 0x0, 0x40000000000006}, 0x0, 0xfffffffffeffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0x82, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x9, 0x1}, 0x11112, 0x100000001, 0x0, 0x6, 0x0, 0xc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000700000000000000000000850000002300000095"], &(0x7f0000000540)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8001}, 0xffffffffffffff86) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kmem_cache_free\x00', r2, 0x0, 0x9}, 0x18) socket$key(0xf, 0x3, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r6, 0x0, 0xf3a, 0x8) close(r5) write(r3, 0x0, 0x0) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCSPASS(r7, 0x40107447, &(0x7f0000000100)={0x0, 0x0}) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x100000d, 0x6031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x1, 0x3, &(0x7f0000000140)=ANY=[], &(0x7f00000005c0)='GPL\x00', 0x5, 0xd1, &(0x7f00000002c0)=""/209}, 0x94) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000240)='4', 0x1}], 0x1) 169.425893ms ago: executing program 5 (id=14191): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000b8ffffffb702000004000000b7030000000000de850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) getdents64(0xffffffffffffffff, 0x0, 0x0) 129.774465ms ago: executing program 5 (id=14192): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000080200000e"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7030000ec000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r1}, 0x18) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000100), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c020000", @ANYRES16=r2, @ANYBLOB="01000000000000000000010000001400020077673100000000000000000000000000f40108807000008048000980282000f8060001000a00000014000200fe8000000000000000000000000000aa05000300000000001c000080060001000200000908000200e0000001050003000000000024000100000000000000000000000000000000000000000000000000000000000000000080010080200004000a004e2000000005200100000000000000000000000000000800000006000500b01f00000800030006000000060005000500000008000a000100000024000100dbffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff200004000a034e200000040100000000000000000000ffffac14142a06000000240001000000000000000000000000000000000000000000000000000000000000000000d4000980"], 0x21c}, 0x1, 0x0, 0x0, 0x20040010}, 0x4008804) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f00000000c0)={@mcast2}, &(0x7f0000000100)=0x14) socket$packet(0x11, 0x3, 0x300) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="050000000c0000000800000040"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000080), 0x1003, r4}, 0x38) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000140)={r4, &(0x7f0000000080), &(0x7f0000000180)=""/40}, 0x20) 27.700979ms ago: executing program 5 (id=14193): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pselect6(0x4b, &(0x7f0000000040), &(0x7f00000000c0)={0x9}, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00', r2}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_DELFLOWTABLE={0x3c, 0x18, 0xa, 0x801, 0xb00, 0x0, {0x1}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x10, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x4}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x4}]}]}], {0x14, 0x10}}, 0xc4}}, 0x4040004) ioctl$SIOCSIFHWADDR(r3, 0x8924, &(0x7f0000000000)={'bridge_slave_0\x00', @random="010000201000"}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_DEL(r5, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000700)={0x20, 0x3, 0x7, 0x301, 0x0, 0x0, {0x5, 0x0, 0x1}, [@NFACCT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}}, 0x4040000) 0s ago: executing program 5 (id=14194): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) pipe(&(0x7f0000000600)) socket(0x1d, 0x2, 0x6) epoll_create(0x3) write$UHID_CREATE2(r0, 0x0, 0x119) socket$nl_route(0x10, 0x3, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='fdinfo/3\x00') syz_open_procfs(0x0, &(0x7f0000000000)='net/vlan/vlan0\x00') r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000001000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) epoll_create1(0x0) epoll_create1(0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000300), 0x111, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0xfffc, 0x2, @empty, 0xa09c}, {0xa, 0x2, 0xfffffffe, @dev={0xfe, 0x80, '\x00', 0x39}}, 0xffffffffffffffff, 0x40099d}}, 0x37) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000300)) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0xff7fffff}, 0x8) writev(r2, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) kernel console output (not intermixed with test programs): 00 [ 1061.683083][ T9842] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 1061.738801][ T4983] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1061.764041][ T9845] loop2: detected capacity change from 0 to 1024 [ 1061.772276][ T9845] EXT4-fs: Ignoring removed mblk_io_submit option [ 1061.878469][ T9850] lo speed is unknown, defaulting to 1000 [ 1062.193947][ T9845] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1062.403043][ T8414] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1062.415505][ T8414] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1062.455590][ T8414] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1062.464805][ T8414] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1062.498651][ T9877] loop4: detected capacity change from 0 to 1024 [ 1062.506722][ T9877] EXT4-fs: Ignoring removed mblk_io_submit option [ 1062.533291][ T9877] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1062.590641][ T5143] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1062.903271][ T9892] lo speed is unknown, defaulting to 1000 [ 1063.726070][ T9899] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 1063.834217][ T4841] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1063.995279][ T9914] loop1: detected capacity change from 0 to 1024 [ 1064.003658][ T9914] EXT4-fs: Ignoring removed nobh option [ 1064.003688][ T9914] EXT4-fs: Ignoring removed bh option [ 1064.033653][ T9914] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1064.046511][ T9916] loop4: detected capacity change from 0 to 2048 [ 1064.086476][ T9916] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1064.148926][ T4841] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1064.357618][ T9924] netlink: 52 bytes leftover after parsing attributes in process `syz.5.13425'. [ 1064.377090][ T9924] IPVS: Unknown mcast interface: vetN1_macvtap [ 1064.531797][ T9933] lo speed is unknown, defaulting to 1000 [ 1064.836720][ T29] kauditd_printk_skb: 1478 callbacks suppressed [ 1064.836740][ T29] audit: type=1400 audit(1763896505.055:338565): avc: denied { prog_load } for pid=9921 comm="syz.2.13426" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1064.862463][ T29] audit: type=1400 audit(1763896505.055:338566): avc: denied { bpf } for pid=9921 comm="syz.2.13426" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1064.883413][ T29] audit: type=1400 audit(1763896505.055:338567): avc: denied { perfmon } for pid=9921 comm="syz.2.13426" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1064.904801][ T29] audit: type=1400 audit(1763896505.055:338568): avc: denied { prog_run } for pid=9921 comm="syz.2.13426" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1064.924189][ T29] audit: type=1400 audit(1763896505.055:338569): avc: denied { create } for pid=9921 comm="syz.2.13426" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 1064.944618][ T29] audit: type=1400 audit(1763896505.065:338570): avc: denied { sys_admin } for pid=9921 comm="syz.2.13426" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 1064.966127][ T29] audit: type=1400 audit(1763896505.375:338571): avc: denied { prog_load } for pid=9929 comm="syz.4.13428" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1064.985491][ T29] audit: type=1400 audit(1763896505.375:338572): avc: denied { bpf } for pid=9929 comm="syz.4.13428" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1065.006653][ T29] audit: type=1400 audit(1763896505.385:338573): avc: denied { map_create } for pid=9929 comm="syz.4.13428" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1065.026224][ T29] audit: type=1400 audit(1763896505.385:338574): avc: denied { map_read map_write } for pid=9929 comm="syz.4.13428" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1065.625026][ T9953] lo speed is unknown, defaulting to 1000 [ 1065.905131][ T4983] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1066.103689][ T9962] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0xf [ 1066.275205][ T9971] loop2: detected capacity change from 0 to 512 [ 1066.299378][ T9971] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1066.332940][ T9971] ext4 filesystem being mounted at /285/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1066.435839][ T9985] netlink: 12 bytes leftover after parsing attributes in process `syz.4.13447'. [ 1066.488445][ T5143] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1066.510836][ T9989] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0xf [ 1066.548682][ T9991] loop2: detected capacity change from 0 to 1024 [ 1066.556213][ T9991] EXT4-fs: Ignoring removed mblk_io_submit option [ 1066.572377][ T9991] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1066.977056][T10010] lo speed is unknown, defaulting to 1000 [ 1067.367759][T10019] loop1: detected capacity change from 0 to 128 [ 1067.383330][T10019] FAT-fs (loop1): error, invalid access to FAT (entry 0x0fff0000) [ 1067.391326][T10019] FAT-fs (loop1): Filesystem has been set read-only [ 1067.415749][ T5143] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1067.459295][T10025] loop2: detected capacity change from 0 to 128 [ 1067.473375][T10025] FAT-fs (loop2): error, invalid access to FAT (entry 0x0fff0000) [ 1067.482038][T10025] FAT-fs (loop2): Filesystem has been set read-only [ 1068.085900][T10040] lo speed is unknown, defaulting to 1000 [ 1068.749436][T10043] lo speed is unknown, defaulting to 1000 [ 1068.899164][T10028] netlink: 52 bytes leftover after parsing attributes in process `syz.2.13463'. [ 1068.918254][T10028] IPVS: Unknown mcast interface: vetN1_macvtap [ 1069.528753][T10047] loop5: detected capacity change from 0 to 1024 [ 1069.833695][T10061] loop1: detected capacity change from 0 to 512 [ 1069.840206][ T29] kauditd_printk_skb: 1472 callbacks suppressed [ 1069.840225][ T29] audit: type=1400 audit(1763896510.325:340047): avc: denied { execmem } for pid=10057 comm="syz.3.13469" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 1069.866327][ T29] audit: type=1400 audit(1763896510.385:340048): avc: denied { read write } for pid=10059 comm="syz.1.13472" name="loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1069.890733][ T29] audit: type=1400 audit(1763896510.385:340049): avc: denied { read write open } for pid=10059 comm="syz.1.13472" path="/dev/loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1069.916398][ T29] audit: type=1400 audit(1763896510.385:340050): avc: denied { ioctl } for pid=10059 comm="syz.1.13472" path="/dev/loop1" dev="devtmpfs" ino=101 ioctlcmd=0x4c00 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1069.959541][T10055] loop2: detected capacity change from 0 to 1024 [ 1069.966920][ T29] audit: type=1400 audit(1763896510.425:340051): avc: denied { perfmon } for pid=10059 comm="syz.1.13472" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1069.988332][ T29] audit: type=1400 audit(1763896510.425:340052): avc: denied { bpf } for pid=10059 comm="syz.1.13472" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1070.009529][ T29] audit: type=1326 audit(1763896510.445:340053): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10054 comm="syz.2.13471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7fc0a55ef7d7 code=0x7ffc0000 [ 1070.033318][ T29] audit: type=1400 audit(1763896510.505:340054): avc: denied { mounton } for pid=10059 comm="syz.1.13472" path="/272/file1" dev="tmpfs" ino=1472 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 1070.056440][ T29] audit: type=1326 audit(1763896510.515:340055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10054 comm="syz.2.13471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc0a55edf90 code=0x7ffc0000 [ 1070.080434][ T29] audit: type=1400 audit(1763896510.515:340056): avc: denied { read write } for pid=10054 comm="syz.2.13471" name="loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1070.105707][T10055] EXT4-fs: Ignoring removed mblk_io_submit option [ 1070.122141][T10062] lo speed is unknown, defaulting to 1000 [ 1070.170068][T10055] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1070.189750][T10061] EXT4-fs (loop1): 1 orphan inode deleted [ 1070.208449][T22634] EXT4-fs error (device loop1): ext4_release_dquot:6981: comm kworker/u8:1: Failed to release dquot type 1 [ 1070.208683][T10061] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1070.242423][T10061] ext4 filesystem being mounted at /272/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1070.300592][ T4983] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1070.369105][T10074] loop4: detected capacity change from 0 to 1024 [ 1070.387913][T10074] EXT4-fs: Ignoring removed mblk_io_submit option [ 1070.400920][T10074] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1070.531279][ T5143] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1070.678534][T10092] netlink: 'syz.1.13479': attribute type 1 has an invalid length. [ 1070.693987][T10092] bond4: entered promiscuous mode [ 1070.699151][T10092] bond4: entered allmulticast mode [ 1070.704903][T10092] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1070.830170][T10089] netlink: 52 bytes leftover after parsing attributes in process `syz.3.13478'. [ 1070.839417][T10089] IPVS: Unknown mcast interface: vetN1_macvtap [ 1070.942438][T10092] netlink: 1 bytes leftover after parsing attributes in process `syz.1.13479'. [ 1070.956174][T10099] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0xf [ 1071.072417][T10103] loop1: detected capacity change from 0 to 128 [ 1071.082095][T10103] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1071.094871][T10103] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1071.130788][T10100] netlink: 12 bytes leftover after parsing attributes in process `syz.3.13480'. [ 1071.158221][T10100] openvswitch: netlink: Key 0 has unexpected len 2 expected 0 [ 1071.205630][ T4841] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1071.376495][T10113] loop4: detected capacity change from 0 to 512 [ 1071.402935][T10113] EXT4-fs (loop4): 1 orphan inode deleted [ 1071.418653][T10113] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1071.431524][ T8414] EXT4-fs error (device loop4): ext4_release_dquot:6981: comm kworker/u8:11: Failed to release dquot type 1 [ 1071.444314][T10113] ext4 filesystem being mounted at /306/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1071.472845][ T4841] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1071.762548][T10131] lo speed is unknown, defaulting to 1000 [ 1072.583052][T10160] lo speed is unknown, defaulting to 1000 [ 1073.610173][T10168] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 1073.809285][T10163] lo speed is unknown, defaulting to 1000 [ 1074.615351][T10171] bridge0: entered promiscuous mode [ 1074.630244][T10171] macvtap1: entered allmulticast mode [ 1074.635766][T10171] bridge0: entered allmulticast mode [ 1074.688423][T10171] bridge0: left allmulticast mode [ 1074.693653][T10171] bridge0: left promiscuous mode [ 1074.849394][ T29] kauditd_printk_skb: 1394 callbacks suppressed [ 1074.849411][ T29] audit: type=1400 audit(1763896515.405:341449): avc: denied { perfmon } for pid=10175 comm="syz.3.13499" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1074.877170][ T29] audit: type=1400 audit(1763896515.405:341450): avc: denied { kernel } for pid=10175 comm="syz.3.13499" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 1074.896969][ T29] audit: type=1326 audit(1763896515.405:341451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10172 comm="syz.1.13496" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fd9016765e7 code=0x7ffc0000 [ 1074.920843][ T29] audit: type=1326 audit(1763896515.405:341452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10172 comm="syz.1.13496" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd90161b829 code=0x7ffc0000 [ 1074.944798][ T29] audit: type=1326 audit(1763896515.405:341453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10172 comm="syz.1.13496" exe="/root/syz-executor" sig=0 arch=c000003e syscall=276 compat=0 ip=0x7fd90167f749 code=0x7ffc0000 [ 1074.969177][ T29] audit: type=1326 audit(1763896515.425:341454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10172 comm="syz.1.13496" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fd9016765e7 code=0x7ffc0000 [ 1074.992992][ T29] audit: type=1326 audit(1763896515.425:341455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10172 comm="syz.1.13496" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd90161b829 code=0x7ffc0000 [ 1075.016787][ T29] audit: type=1326 audit(1763896515.425:341456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10172 comm="syz.1.13496" exe="/root/syz-executor" sig=0 arch=c000003e syscall=276 compat=0 ip=0x7fd90167f749 code=0x7ffc0000 [ 1075.040854][ T29] audit: type=1326 audit(1763896515.445:341457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10172 comm="syz.1.13496" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fd9016765e7 code=0x7ffc0000 [ 1075.064699][ T29] audit: type=1326 audit(1763896515.445:341458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10172 comm="syz.1.13496" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd90161b829 code=0x7ffc0000 [ 1075.269808][T10184] netlink: 12 bytes leftover after parsing attributes in process `syz.3.13499'. [ 1075.280084][T10184] openvswitch: netlink: Key 0 has unexpected len 2 expected 0 [ 1075.647749][T10204] loop4: detected capacity change from 0 to 1024 [ 1075.663215][T10207] loop5: detected capacity change from 0 to 1024 [ 1075.667073][T10204] EXT4-fs: Ignoring removed mblk_io_submit option [ 1075.670794][T10207] EXT4-fs: Ignoring removed mblk_io_submit option [ 1075.696955][T10209] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 1075.702667][T10204] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1075.719937][T10207] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1075.884734][T10225] loop2: detected capacity change from 0 to 2048 [ 1075.900249][T10225] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1075.931638][ T5143] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1076.199954][T10229] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1076.209101][T10229] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1076.486986][ T4841] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1076.515213][ T8240] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1076.546645][T10243] netlink: 12 bytes leftover after parsing attributes in process `syz.3.13521'. [ 1076.572148][T10245] loop5: detected capacity change from 0 to 512 [ 1076.601986][T10245] EXT4-fs (loop5): 1 orphan inode deleted [ 1076.613868][T10245] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1076.626803][ T37] EXT4-fs error (device loop5): ext4_release_dquot:6981: comm kworker/u8:2: Failed to release dquot type 1 [ 1076.638927][T10245] ext4 filesystem being mounted at /109/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1076.667270][ T8240] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1076.695257][T10255] loop4: detected capacity change from 0 to 128 [ 1076.842544][T10258] lo speed is unknown, defaulting to 1000 [ 1076.919946][T10268] loop2: detected capacity change from 0 to 128 [ 1076.939992][T10268] FAT-fs (loop2): error, invalid access to FAT (entry 0x0fff0000) [ 1076.947979][T10268] FAT-fs (loop2): Filesystem has been set read-only [ 1077.106050][T10272] loop2: detected capacity change from 0 to 1024 [ 1077.127847][T10272] EXT4-fs: Ignoring removed mblk_io_submit option [ 1077.142601][T10272] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1077.310283][T10280] netlink: 12 bytes leftover after parsing attributes in process `syz.5.13532'. [ 1077.380272][T10286] loop1: detected capacity change from 0 to 512 [ 1077.401715][T10286] EXT4-fs (loop1): 1 orphan inode deleted [ 1077.409441][T10286] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1077.413159][T10290] netlink: 'syz.5.13537': attribute type 1 has an invalid length. [ 1077.428627][T10286] ext4 filesystem being mounted at /282/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1077.440120][T10290] bond1: entered promiscuous mode [ 1077.441018][ T8414] EXT4-fs error (device loop1): ext4_release_dquot:6981: comm kworker/u8:11: Failed to release dquot type 1 [ 1077.445814][T10290] bond1: entered allmulticast mode [ 1077.446214][T10290] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1077.485372][ T4983] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1077.540050][T10296] netlink: 'syz.1.13538': attribute type 1 has an invalid length. [ 1077.560542][T10296] bond5: entered promiscuous mode [ 1077.565647][T10296] bond5: entered allmulticast mode [ 1077.571184][T10296] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1077.674045][T10300] loop4: detected capacity change from 0 to 128 [ 1077.701176][T10300] FAT-fs (loop4): error, invalid access to FAT (entry 0x0fff0000) [ 1077.709283][T10300] FAT-fs (loop4): Filesystem has been set read-only [ 1077.742366][T10292] netlink: 1 bytes leftover after parsing attributes in process `syz.5.13537'. [ 1077.783508][T10304] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1077.792076][T10304] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1077.853808][T10296] netlink: 1 bytes leftover after parsing attributes in process `syz.1.13538'. [ 1077.874147][T10305] loop5: detected capacity change from 0 to 128 [ 1077.881704][T10305] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1077.894160][T10305] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1077.922210][ T5143] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1077.951412][T10311] loop2: detected capacity change from 0 to 1024 [ 1078.003371][T10304] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1078.013392][T10304] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1078.022770][T10304] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1078.031693][T10304] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1078.040652][T10312] loop1: detected capacity change from 0 to 128 [ 1078.048791][T10312] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1078.063843][T10312] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1078.328827][T10317] netlink: 'syz.5.13545': attribute type 12 has an invalid length. [ 1078.336825][T10317] netlink: 'syz.5.13545': attribute type 29 has an invalid length. [ 1078.344927][T10317] netlink: 148 bytes leftover after parsing attributes in process `syz.5.13545'. [ 1078.354241][T10317] netlink: 'syz.5.13545': attribute type 1 has an invalid length. [ 1078.399193][T10317] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1078.471419][T10317] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1078.513062][T10323] loop1: detected capacity change from 0 to 1024 [ 1078.521401][T10317] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1078.528799][T10323] EXT4-fs: Ignoring removed nobh option [ 1078.536846][T10323] EXT4-fs: Ignoring removed bh option [ 1078.556584][T10323] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1078.600610][T10317] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1078.612991][T10331] loop2: detected capacity change from 0 to 512 [ 1078.631589][T10331] EXT4-fs (loop2): 1 orphan inode deleted [ 1078.638151][T10331] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1078.650964][ T37] EXT4-fs error (device loop2): ext4_release_dquot:6981: comm kworker/u8:2: Failed to release dquot type 1 [ 1078.655922][T10331] ext4 filesystem being mounted at /308/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1078.682766][ T37] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1078.702857][ T5143] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1078.712942][ T37] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1078.721610][ T37] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1078.730927][ T37] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1078.863120][T10339] tipc: MTU too low for tipc bearer [ 1079.033771][T10344] loop5: detected capacity change from 0 to 2048 [ 1079.102595][T10344] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1079.352352][ T4983] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1079.362066][ T8240] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1079.407827][T10354] loop5: detected capacity change from 0 to 1024 [ 1079.416568][T10354] EXT4-fs: Ignoring removed mblk_io_submit option [ 1079.430941][T10354] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1079.558574][T10365] loop4: detected capacity change from 0 to 1024 [ 1079.676376][T10368] loop2: detected capacity change from 0 to 1024 [ 1079.684561][T10368] EXT4-fs: Ignoring removed mblk_io_submit option [ 1079.701500][T10368] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1079.859736][ T29] kauditd_printk_skb: 3080 callbacks suppressed [ 1079.859754][ T29] audit: type=1326 audit(1763896520.415:344536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10367 comm="syz.2.13561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fc0a55e65e7 code=0x7ffc0000 [ 1079.908498][ T29] audit: type=1326 audit(1763896520.455:344537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10367 comm="syz.2.13561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc0a558b829 code=0x7ffc0000 [ 1079.932682][ T29] audit: type=1326 audit(1763896520.455:344538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10367 comm="syz.2.13561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fc0a55e65e7 code=0x7ffc0000 [ 1079.957411][ T29] audit: type=1326 audit(1763896520.455:344539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10367 comm="syz.2.13561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc0a558b829 code=0x7ffc0000 [ 1079.981474][ T29] audit: type=1326 audit(1763896520.455:344540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10367 comm="syz.2.13561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7fc0a55ef749 code=0x7ffc0000 [ 1080.005428][ T29] audit: type=1326 audit(1763896520.455:344541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10351 comm="syz.5.13557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f60c2de65e7 code=0x7ffc0000 [ 1080.029377][ T29] audit: type=1326 audit(1763896520.455:344542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10351 comm="syz.5.13557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f60c2d8b829 code=0x7ffc0000 [ 1080.053187][ T29] audit: type=1326 audit(1763896520.455:344543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10351 comm="syz.5.13557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7f60c2def749 code=0x7ffc0000 [ 1080.077213][ T29] audit: type=1326 audit(1763896520.455:344544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10367 comm="syz.2.13561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fc0a55e65e7 code=0x7ffc0000 [ 1080.101049][ T29] audit: type=1326 audit(1763896520.455:344545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10367 comm="syz.2.13561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc0a558b829 code=0x7ffc0000 [ 1080.257653][ T8240] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1080.298996][T10375] loop1: detected capacity change from 0 to 1024 [ 1080.312926][T10377] loop5: detected capacity change from 0 to 1024 [ 1080.317076][T10375] EXT4-fs: Ignoring removed mblk_io_submit option [ 1080.326243][T10377] EXT4-fs: Ignoring removed mblk_io_submit option [ 1080.345747][T10375] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1080.359346][T10377] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1080.381440][ T4983] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1080.509003][ T5143] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1080.547658][T10390] loop2: detected capacity change from 0 to 512 [ 1080.555320][T10390] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1080.562292][T10390] EXT4-fs: quotafile must be on filesystem root [ 1080.596486][T10383] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1080.605182][T10383] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1080.870145][T10398] netlink: 52 bytes leftover after parsing attributes in process `syz.3.13570'. [ 1080.879491][T10398] IPVS: Unknown mcast interface: vetN1_macvtap [ 1081.119773][T10405] lo speed is unknown, defaulting to 1000 [ 1081.180010][ T8240] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1081.273944][T10413] loop5: detected capacity change from 0 to 1024 [ 1081.285226][T10413] EXT4-fs: Ignoring removed mblk_io_submit option [ 1081.401412][T10423] loop4: detected capacity change from 0 to 1024 [ 1081.631497][T10430] lo speed is unknown, defaulting to 1000 [ 1082.117203][ T8240] EXT4-fs unmount: 1 callbacks suppressed [ 1082.117222][ T8240] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1082.330091][T10436] loop1: detected capacity change from 0 to 1024 [ 1082.338450][T10436] EXT4-fs: Ignoring removed mblk_io_submit option [ 1082.364189][T10438] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0xf [ 1082.370241][T10436] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1082.755500][T10453] netlink: 1 bytes leftover after parsing attributes in process `syz.4.13584'. [ 1082.792792][T10437] netlink: 52 bytes leftover after parsing attributes in process `syz.3.13582'. [ 1082.802328][T10437] IPVS: Unknown mcast interface: vetN1_macvtap [ 1082.826292][T10453] netlink: 12 bytes leftover after parsing attributes in process `syz.4.13584'. [ 1083.171964][ T4983] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1083.314926][T10467] netlink: 52 bytes leftover after parsing attributes in process `syz.4.13590'. [ 1083.324160][T10467] IPVS: Unknown mcast interface: vetN1_macvtap [ 1083.747416][T10484] loop2: detected capacity change from 0 to 1024 [ 1083.993874][T10493] 8021q: VLANs not supported on wg2 [ 1084.000345][T10492] 8021q: VLANs not supported on wg2 [ 1084.101647][T10500] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 1084.648990][T10519] loop1: detected capacity change from 0 to 256 [ 1084.661765][T10519] loop1: detected capacity change from 0 to 512 [ 1084.682915][T10519] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1084.800946][ T4983] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1084.873681][ T29] kauditd_printk_skb: 2487 callbacks suppressed [ 1084.873700][ T29] audit: type=1326 audit(1763896525.425:347033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10514 comm="syz.2.13608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fc0a55e65e7 code=0x7ffc0000 [ 1084.904758][ T29] audit: type=1326 audit(1763896525.465:347034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10514 comm="syz.2.13608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc0a558b829 code=0x7ffc0000 [ 1084.929162][ T29] audit: type=1326 audit(1763896525.465:347035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10514 comm="syz.2.13608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fc0a55e65e7 code=0x7ffc0000 [ 1084.953038][ T29] audit: type=1326 audit(1763896525.465:347036): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10514 comm="syz.2.13608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc0a558b829 code=0x7ffc0000 [ 1084.976717][ T29] audit: type=1326 audit(1763896525.465:347037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10514 comm="syz.2.13608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7fc0a55ef749 code=0x7ffc0000 [ 1085.000874][ T29] audit: type=1326 audit(1763896525.535:347038): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10514 comm="syz.2.13608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fc0a55e65e7 code=0x7ffc0000 [ 1085.024777][ T29] audit: type=1326 audit(1763896525.535:347039): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10514 comm="syz.2.13608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc0a558b829 code=0x7ffc0000 [ 1085.048742][ T29] audit: type=1326 audit(1763896525.535:347040): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10514 comm="syz.2.13608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7fc0a55ef749 code=0x7ffc0000 [ 1085.072754][ T29] audit: type=1326 audit(1763896525.535:347041): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10514 comm="syz.2.13608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fc0a55e65e7 code=0x7ffc0000 [ 1085.096621][ T29] audit: type=1326 audit(1763896525.535:347042): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10514 comm="syz.2.13608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc0a558b829 code=0x7ffc0000 [ 1085.326503][T10545] loop2: detected capacity change from 0 to 1024 [ 1085.405190][T10546] lo speed is unknown, defaulting to 1000 [ 1086.156840][T10572] netlink: 12 bytes leftover after parsing attributes in process `syz.4.13622'. [ 1086.261743][T10579] loop1: detected capacity change from 0 to 1024 [ 1086.279259][T10579] EXT4-fs: Ignoring removed nobh option [ 1086.285062][T10579] EXT4-fs: Ignoring removed bh option [ 1086.320779][T10579] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1086.425180][T10587] loop4: detected capacity change from 0 to 256 [ 1086.436693][T10587] loop4: detected capacity change from 0 to 512 [ 1086.531076][T10587] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1086.563483][T10592] loop2: detected capacity change from 0 to 1024 [ 1086.571409][T10592] EXT4-fs: Ignoring removed mblk_io_submit option [ 1086.652706][T10595] lo speed is unknown, defaulting to 1000 [ 1086.940044][T10592] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1087.324174][ T4841] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1087.412802][ T5143] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1087.455418][ T4983] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1087.642345][T10609] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0xf [ 1087.646571][T10612] loop1: detected capacity change from 0 to 128 [ 1087.676066][T10612] FAT-fs (loop1): error, invalid access to FAT (entry 0x0fff0000) [ 1087.684015][T10612] FAT-fs (loop1): Filesystem has been set read-only [ 1087.731125][T10618] netlink: 12 bytes leftover after parsing attributes in process `syz.2.13635'. [ 1087.734864][T10617] loop1: detected capacity change from 0 to 1024 [ 1087.785744][T10622] loop5: detected capacity change from 0 to 2048 [ 1087.800899][T10622] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1087.831175][ T8240] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1087.865563][T10628] loop5: detected capacity change from 0 to 512 [ 1087.883441][T10628] EXT4-fs (loop5): 1 orphan inode deleted [ 1087.894337][T10628] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1087.918186][ T8414] EXT4-fs error (device loop5): ext4_release_dquot:6981: comm kworker/u8:11: Failed to release dquot type 1 [ 1087.938871][T10628] ext4 filesystem being mounted at /132/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1087.968427][ T8240] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1088.348090][T10645] lo speed is unknown, defaulting to 1000 [ 1088.436302][T10641] lo speed is unknown, defaulting to 1000 [ 1088.814571][T10658] xt_connbytes: Forcing CT accounting to be enabled [ 1088.822324][T10658] Cannot find set identified by id 0 to match [ 1088.999222][T10661] netlink: 12 bytes leftover after parsing attributes in process `syz.3.13642'. [ 1089.073892][T10661] openvswitch: netlink: Key 0 has unexpected len 2 expected 0 [ 1089.162100][T10674] loop5: detected capacity change from 0 to 512 [ 1089.198371][T10674] EXT4-fs (loop5): 1 orphan inode deleted [ 1089.198827][T10674] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1089.203968][T10674] ext4 filesystem being mounted at /137/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1089.218417][T22634] EXT4-fs error (device loop5): ext4_release_dquot:6981: comm kworker/u8:1: Failed to release dquot type 1 [ 1089.260778][ T8240] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1089.265178][T10681] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0xf [ 1089.274303][T10672] loop4: detected capacity change from 0 to 2048 [ 1089.339418][T10672] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1089.371463][ T4841] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1089.406362][T10690] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0xf [ 1089.491559][T10676] bridge_slave_0: left allmulticast mode [ 1089.497272][T10676] bridge_slave_0: left promiscuous mode [ 1089.503118][T10676] bridge0: port 1(bridge_slave_0) entered disabled state [ 1089.535245][T10676] bridge_slave_1: left allmulticast mode [ 1089.541119][T10676] bridge_slave_1: left promiscuous mode [ 1089.546826][T10676] bridge0: port 2(bridge_slave_1) entered disabled state [ 1089.620189][T10676] team0: Port device team_slave_0 removed [ 1089.639680][T10676] team0: Port device team_slave_1 removed [ 1089.654060][T10676] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1089.838067][T10705] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 1089.878926][ T29] kauditd_printk_skb: 1472 callbacks suppressed [ 1089.878946][ T29] audit: type=1326 audit(1763896530.435:348468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10684 comm="syz.5.13652" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f60c2de65e7 code=0x7ffc0000 [ 1089.940441][ T29] audit: type=1326 audit(1763896530.435:348469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10684 comm="syz.5.13652" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f60c2d8b829 code=0x7ffc0000 [ 1089.964246][ T29] audit: type=1326 audit(1763896530.435:348470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10684 comm="syz.5.13652" exe="/root/syz-executor" sig=0 arch=c000003e syscall=276 compat=0 ip=0x7f60c2def749 code=0x7ffc0000 [ 1089.988206][ T29] audit: type=1326 audit(1763896530.445:348471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10684 comm="syz.5.13652" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f60c2de65e7 code=0x7ffc0000 [ 1090.012104][ T29] audit: type=1326 audit(1763896530.445:348472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10684 comm="syz.5.13652" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f60c2d8b829 code=0x7ffc0000 [ 1090.036301][ T29] audit: type=1326 audit(1763896530.445:348473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10684 comm="syz.5.13652" exe="/root/syz-executor" sig=0 arch=c000003e syscall=276 compat=0 ip=0x7f60c2def749 code=0x7ffc0000 [ 1090.060460][ T29] audit: type=1326 audit(1763896530.455:348474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10684 comm="syz.5.13652" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f60c2de65e7 code=0x7ffc0000 [ 1090.084348][ T29] audit: type=1326 audit(1763896530.455:348475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10684 comm="syz.5.13652" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f60c2d8b829 code=0x7ffc0000 [ 1090.108194][ T29] audit: type=1326 audit(1763896530.455:348476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10684 comm="syz.5.13652" exe="/root/syz-executor" sig=0 arch=c000003e syscall=276 compat=0 ip=0x7f60c2def749 code=0x7ffc0000 [ 1090.132339][ T29] audit: type=1400 audit(1763896530.455:348477): avc: denied { prog_load } for pid=10708 comm="syz.4.13661" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1090.263178][T10716] lo speed is unknown, defaulting to 1000 [ 1090.423534][T10713] netlink: 52 bytes leftover after parsing attributes in process `syz.3.13657'. [ 1090.442881][T10713] IPVS: Unknown mcast interface: vetN1_macvtap [ 1090.551614][T10711] netlink: 52 bytes leftover after parsing attributes in process `syz.2.13662'. [ 1090.560888][T10711] IPVS: Unknown mcast interface: vetN1_macvtap [ 1090.655503][T10704] lo speed is unknown, defaulting to 1000 [ 1091.185278][T10729] loop5: detected capacity change from 0 to 2048 [ 1091.254224][T10728] lo speed is unknown, defaulting to 1000 [ 1091.571007][T10726] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1091.585632][T10729] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1091.612693][T10726] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1091.746276][ T8240] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1091.892011][T10745] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 1092.358648][T10764] loop4: detected capacity change from 0 to 128 [ 1092.385739][T10764] FAT-fs (loop4): error, invalid access to FAT (entry 0x0fff0000) [ 1092.393889][T10764] FAT-fs (loop4): Filesystem has been set read-only [ 1092.502982][T10777] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 1092.615925][T10781] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0xf [ 1092.627377][T10753] netlink: 52 bytes leftover after parsing attributes in process `syz.3.13676'. [ 1092.640360][T10753] IPVS: Unknown mcast interface: vetN1_macvtap [ 1092.771465][T10774] lo speed is unknown, defaulting to 1000 [ 1092.943633][T10792] lo speed is unknown, defaulting to 1000 [ 1093.425683][T10803] loop2: detected capacity change from 0 to 128 [ 1093.441558][T10803] FAT-fs (loop2): error, invalid access to FAT (entry 0x0fff0000) [ 1093.449665][T10803] FAT-fs (loop2): Filesystem has been set read-only [ 1093.678346][T10809] lo speed is unknown, defaulting to 1000 [ 1093.851515][T10820] netlink: 'syz.4.13700': attribute type 1 has an invalid length. [ 1094.610462][T10820] bond6: entered promiscuous mode [ 1094.615665][T10820] bond6: entered allmulticast mode [ 1094.621132][T10820] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1094.699227][T10826] lo speed is unknown, defaulting to 1000 [ 1094.732433][T10833] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0xf [ 1094.927737][ T29] kauditd_printk_skb: 943 callbacks suppressed [ 1094.927755][ T29] audit: type=1400 audit(1763896535.475:349421): avc: denied { read write } for pid=4983 comm="syz-executor" name="loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1094.958503][ T29] audit: type=1400 audit(1763896535.475:349422): avc: denied { read write open } for pid=4983 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1095.109958][ T29] audit: type=1400 audit(1763896535.475:349423): avc: denied { create } for pid=10831 comm="syz.5.13704" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 1095.129957][ T29] audit: type=1400 audit(1763896535.515:349424): avc: denied { ioctl } for pid=5143 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=102 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1095.142423][T10836] netlink: 12 bytes leftover after parsing attributes in process `syz.3.13701'. [ 1095.155820][ T29] audit: type=1400 audit(1763896535.545:349425): avc: denied { create } for pid=10839 comm="syz.1.13706" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1095.185814][ T29] audit: type=1400 audit(1763896535.545:349426): avc: denied { prog_load } for pid=10839 comm="syz.1.13706" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1095.205256][ T29] audit: type=1400 audit(1763896535.545:349427): avc: denied { bpf } for pid=10839 comm="syz.1.13706" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1095.226211][ T29] audit: type=1400 audit(1763896535.545:349428): avc: denied { perfmon } for pid=10839 comm="syz.1.13706" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1095.247530][ T29] audit: type=1400 audit(1763896535.545:349429): avc: denied { prog_run } for pid=10839 comm="syz.1.13706" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1095.266969][ T29] audit: type=1400 audit(1763896535.555:349430): avc: denied { map_create } for pid=10839 comm="syz.1.13706" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1095.292626][T10845] loop4: detected capacity change from 0 to 128 [ 1095.301258][T10845] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1095.313837][T10845] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1095.358691][T10848] lo speed is unknown, defaulting to 1000 [ 1095.688212][T10836] openvswitch: netlink: Key 0 has unexpected len 2 expected 0 [ 1095.979704][T10866] netlink: 'syz.5.13714': attribute type 1 has an invalid length. [ 1096.018611][T10866] bond2: entered promiscuous mode [ 1096.023726][T10866] bond2: entered allmulticast mode [ 1096.029279][T10866] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1096.141361][T10870] netlink: 1 bytes leftover after parsing attributes in process `syz.5.13714'. [ 1096.712681][T10884] loop2: detected capacity change from 0 to 512 [ 1096.724631][T10866] loop5: detected capacity change from 0 to 128 [ 1096.734917][T10866] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1096.756549][T10884] EXT4-fs (loop2): 1 orphan inode deleted [ 1096.763438][T10884] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1096.766574][T10866] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1096.782252][ T7537] EXT4-fs error (device loop2): ext4_release_dquot:6981: comm kworker/u8:10: Failed to release dquot type 1 [ 1096.789287][T10884] ext4 filesystem being mounted at /346/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1096.833069][ T5143] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1097.291238][T10900] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1097.299987][T10900] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1097.321061][T10919] netlink: 'syz.3.13731': attribute type 12 has an invalid length. [ 1097.329065][T10919] netlink: 'syz.3.13731': attribute type 29 has an invalid length. [ 1097.336977][T10919] netlink: 148 bytes leftover after parsing attributes in process `syz.3.13731'. [ 1097.346252][T10919] netlink: 'syz.3.13731': attribute type 1 has an invalid length. [ 1097.372826][T10919] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1097.409922][T10919] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1097.450213][T10919] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1097.490100][T10919] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1097.546686][ T7537] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1097.558962][ T12] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1097.570765][ T12] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1097.583019][ T12] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1098.107668][T10937] lo speed is unknown, defaulting to 1000 [ 1099.425238][T10969] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0xf [ 1099.543864][T10980] loop1: detected capacity change from 0 to 1024 [ 1099.900949][T10996] loop4: detected capacity change from 0 to 2048 [ 1099.930143][ T29] kauditd_printk_skb: 1238 callbacks suppressed [ 1099.930160][ T29] audit: type=1400 audit(1763896540.485:350668): avc: denied { read write } for pid=10997 comm="syz.2.13756" name="uhid" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 1099.951707][T10996] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1099.960776][ T29] audit: type=1400 audit(1763896540.485:350669): avc: denied { read write open } for pid=10997 comm="syz.2.13756" path="/dev/uhid" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 1099.997617][ T29] audit: type=1400 audit(1763896540.485:350670): avc: denied { create } for pid=10997 comm="syz.2.13756" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1100.017725][ T29] audit: type=1400 audit(1763896540.485:350671): avc: denied { write } for pid=10997 comm="syz.2.13756" name="vlan0" dev="proc" ino=4026534187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 1100.019175][T11001] loop2: detected capacity change from 0 to 2048 [ 1100.040854][ T29] audit: type=1400 audit(1763896540.485:350672): avc: denied { prog_load } for pid=10997 comm="syz.2.13756" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1100.040894][ T29] audit: type=1400 audit(1763896540.485:350673): avc: denied { bpf } for pid=10997 comm="syz.2.13756" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1100.088049][ T29] audit: type=1400 audit(1763896540.485:350674): avc: denied { perfmon } for pid=10997 comm="syz.2.13756" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1100.109924][ T29] audit: type=1400 audit(1763896540.485:350675): avc: denied { prog_run } for pid=10997 comm="syz.2.13756" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1100.129802][ T29] audit: type=1326 audit(1763896540.485:350676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10997 comm="syz.2.13756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0a55ef749 code=0x7ffc0000 [ 1100.154203][ T29] audit: type=1326 audit(1763896540.485:350677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10997 comm="syz.2.13756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc0a55ef749 code=0x7ffc0000 [ 1100.182731][T11001] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1100.427754][T11006] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1100.437088][T11006] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1100.684825][T11017] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0xf [ 1100.702840][ T4841] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1100.716948][T11019] loop1: detected capacity change from 0 to 1024 [ 1100.810401][ T5143] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1101.040152][T11038] loop1: detected capacity change from 0 to 1024 [ 1101.047589][T11038] EXT4-fs: Ignoring removed mblk_io_submit option [ 1101.060547][T11038] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1101.086366][T11044] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 1101.130762][T11046] loop5: detected capacity change from 0 to 1024 [ 1101.139627][T11046] EXT4-fs: Ignoring removed mblk_io_submit option [ 1101.150740][T11046] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1101.645761][T11052] netlink: 'syz.4.13773': attribute type 12 has an invalid length. [ 1101.653769][T11052] netlink: 'syz.4.13773': attribute type 29 has an invalid length. [ 1101.661778][T11052] netlink: 148 bytes leftover after parsing attributes in process `syz.4.13773'. [ 1101.671268][T11052] netlink: 'syz.4.13773': attribute type 1 has an invalid length. [ 1101.691289][T11052] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1101.739877][T11052] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1101.763831][T11054] loop2: detected capacity change from 0 to 2048 [ 1101.781507][T11054] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1101.795090][T11052] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1101.822903][ T5143] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1101.840033][T11052] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1101.915508][ T4983] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1101.938864][T31975] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1101.969821][T31975] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1101.990700][ T8240] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1101.991586][T31975] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1102.024392][T11064] FAULT_INJECTION: forcing a failure. [ 1102.024392][T11064] name failslab, interval 1, probability 0, space 0, times 0 [ 1102.028333][T31975] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1102.037175][T11064] CPU: 1 UID: 0 PID: 11064 Comm: syz.2.13778 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 1102.037274][T11064] Tainted: [W]=WARN [ 1102.037284][T11064] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1102.037301][T11064] Call Trace: [ 1102.037308][T11064] [ 1102.037318][T11064] __dump_stack+0x1d/0x30 [ 1102.037349][T11064] dump_stack_lvl+0xe8/0x140 [ 1102.037378][T11064] dump_stack+0x15/0x1b [ 1102.037403][T11064] should_fail_ex+0x265/0x280 [ 1102.037578][T11064] should_failslab+0x8c/0xb0 [ 1102.037619][T11064] kmem_cache_alloc_node_noprof+0x57/0x4a0 [ 1102.037719][T11064] ? __alloc_skb+0x101/0x320 [ 1102.037763][T11064] __alloc_skb+0x101/0x320 [ 1102.037845][T11064] ? audit_log_start+0x342/0x720 [ 1102.037876][T11064] audit_log_start+0x3a0/0x720 [ 1102.037905][T11064] ? kstrtouint+0x76/0xc0 [ 1102.037948][T11064] audit_seccomp+0x48/0x100 [ 1102.038006][T11064] ? __seccomp_filter+0x82d/0x1250 [ 1102.038044][T11064] __seccomp_filter+0x83e/0x1250 [ 1102.038084][T11064] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1102.038185][T11064] ? vfs_write+0x7e8/0x960 [ 1102.038220][T11064] ? __rcu_read_unlock+0x4f/0x70 [ 1102.038282][T11064] ? __fget_files+0x184/0x1c0 [ 1102.038321][T11064] __secure_computing+0x82/0x150 [ 1102.038399][T11064] syscall_trace_enter+0xcf/0x1e0 [ 1102.038439][T11064] do_syscall_64+0xac/0x200 [ 1102.038523][T11064] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 1102.038565][T11064] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 1102.038621][T11064] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1102.038653][T11064] RIP: 0033:0x7fc0a55ef749 [ 1102.038677][T11064] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1102.038733][T11064] RSP: 002b:00007fc0a4057038 EFLAGS: 00000246 ORIG_RAX: 00000000000000f6 [ 1102.038760][T11064] RAX: ffffffffffffffda RBX: 00007fc0a5845fa0 RCX: 00007fc0a55ef749 [ 1102.038778][T11064] RDX: 0000200000000140 RSI: 0000000000000001 RDI: 0000000000000000 [ 1102.038796][T11064] RBP: 00007fc0a4057090 R08: 0000000000000000 R09: 0000000000000000 [ 1102.038843][T11064] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1102.038859][T11064] R13: 00007fc0a5846038 R14: 00007fc0a5845fa0 R15: 00007ffca0e59d78 [ 1102.038886][T11064] [ 1102.379287][T11073] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1102.408425][T11073] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1102.421770][T11078] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 1102.957670][T11086] loop4: detected capacity change from 0 to 1024 [ 1102.966281][T11086] EXT4-fs: Ignoring removed nobh option [ 1102.972617][T11086] EXT4-fs: Ignoring removed bh option [ 1102.994440][T11086] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1103.291761][T11091] netlink: 12 bytes leftover after parsing attributes in process `syz.4.13786'. [ 1103.310693][T11099] loop5: detected capacity change from 0 to 1024 [ 1103.311517][T11091] openvswitch: netlink: Key 0 has unexpected len 2 expected 0 [ 1103.319070][T11099] EXT4-fs: Ignoring removed mblk_io_submit option [ 1103.343018][T11099] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1103.654676][T11111] netlink: 12 bytes leftover after parsing attributes in process `syz.1.13794'. [ 1103.783052][T11117] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 1103.810477][ T4841] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1104.198194][T11131] lo speed is unknown, defaulting to 1000 [ 1104.446063][T11126] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1104.455369][T11126] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1104.494095][ T8240] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1104.798450][T11136] netlink: 12 bytes leftover after parsing attributes in process `syz.4.13805'. [ 1104.925869][T11141] FAULT_INJECTION: forcing a failure. [ 1104.925869][T11141] name failslab, interval 1, probability 0, space 0, times 0 [ 1104.938785][T11141] CPU: 0 UID: 0 PID: 11141 Comm: syz.2.13807 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 1104.938825][T11141] Tainted: [W]=WARN [ 1104.938845][T11141] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1104.938860][T11141] Call Trace: [ 1104.938868][T11141] [ 1104.938876][T11141] __dump_stack+0x1d/0x30 [ 1104.938941][T11141] dump_stack_lvl+0xe8/0x140 [ 1104.939088][T11141] dump_stack+0x15/0x1b [ 1104.939106][T11141] should_fail_ex+0x265/0x280 [ 1104.939140][T11141] should_failslab+0x8c/0xb0 [ 1104.939168][T11141] kmem_cache_alloc_node_noprof+0x57/0x4a0 [ 1104.939302][T11141] ? __alloc_skb+0x101/0x320 [ 1104.939342][T11141] __alloc_skb+0x101/0x320 [ 1104.939380][T11141] mptcp_event+0xc4/0x5f0 [ 1104.939418][T11141] mptcp_pm_connection_closed+0x46/0x60 [ 1104.939458][T11141] mptcp_disconnect+0x1b0/0x3c0 [ 1104.939484][T11141] __inet_stream_connect+0x206/0x7d0 [ 1104.939513][T11141] ? _raw_spin_unlock_bh+0x36/0x40 [ 1104.939624][T11141] ? release_sock+0x116/0x150 [ 1104.939700][T11141] ? _raw_spin_unlock_bh+0x36/0x40 [ 1104.939727][T11141] ? lock_sock_nested+0x112/0x140 [ 1104.939756][T11141] ? selinux_netlbl_socket_connect+0x115/0x130 [ 1104.939795][T11141] inet_stream_connect+0x44/0x70 [ 1104.939902][T11141] ? __pfx_inet_stream_connect+0x10/0x10 [ 1104.939932][T11141] __sys_connect+0x1f2/0x2b0 [ 1104.939972][T11141] __x64_sys_connect+0x3f/0x50 [ 1104.940000][T11141] x64_sys_call+0x2c0c/0x3000 [ 1104.940092][T11141] do_syscall_64+0xd2/0x200 [ 1104.940111][T11141] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 1104.940209][T11141] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 1104.940246][T11141] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1104.940272][T11141] RIP: 0033:0x7fc0a55ef749 [ 1104.940289][T11141] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1104.940339][T11141] RSP: 002b:00007fc0a4057038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 1104.940362][T11141] RAX: ffffffffffffffda RBX: 00007fc0a5845fa0 RCX: 00007fc0a55ef749 [ 1104.940377][T11141] RDX: 000000000000006e RSI: 000020000057eff8 RDI: 0000000000000006 [ 1104.940392][T11141] RBP: 00007fc0a4057090 R08: 0000000000000000 R09: 0000000000000000 [ 1104.940407][T11141] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1104.940421][T11141] R13: 00007fc0a5846038 R14: 00007fc0a5845fa0 R15: 00007ffca0e59d78 [ 1104.940455][T11141] [ 1105.199805][ T29] kauditd_printk_skb: 2059 callbacks suppressed [ 1105.199822][ T29] audit: type=1400 audit(1763896545.745:352735): avc: denied { read write } for pid=8240 comm="syz-executor" name="loop5" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1105.230580][ T29] audit: type=1400 audit(1763896545.745:352736): avc: denied { open } for pid=8240 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1105.254914][ T29] audit: type=1400 audit(1763896545.745:352737): avc: denied { ioctl } for pid=8240 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=105 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1105.281203][ T29] audit: type=1400 audit(1763896545.755:352738): avc: denied { read write } for pid=11137 comm="syz.3.13806" name="rdma_cm" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 1105.306239][ T29] audit: type=1400 audit(1763896545.755:352739): avc: denied { read write open } for pid=11137 comm="syz.3.13806" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 1105.332726][ T29] audit: type=1400 audit(1763896545.755:352740): avc: denied { mounton } for pid=11144 comm="syz.5.13803" path="/syzcgroup/unified/syz5" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 1105.356508][ T29] audit: type=1400 audit(1763896545.755:352741): avc: denied { mount } for pid=11144 comm="syz.5.13803" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 1105.378812][ T29] audit: type=1400 audit(1763896545.755:352742): avc: denied { prog_load } for pid=11144 comm="syz.5.13803" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1105.398248][ T29] audit: type=1400 audit(1763896545.755:352743): avc: denied { bpf } for pid=11144 comm="syz.5.13803" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1105.419536][ T29] audit: type=1400 audit(1763896545.755:352744): avc: denied { perfmon } for pid=11144 comm="syz.5.13803" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1105.600684][T11156] loop1: detected capacity change from 0 to 1024 [ 1105.618344][T11156] EXT4-fs: Ignoring removed nobh option [ 1105.623995][T11156] EXT4-fs: Ignoring removed bh option [ 1105.635466][T11163] netlink: 'syz.3.13815': attribute type 1 has an invalid length. [ 1105.655222][T11163] bond12: entered promiscuous mode [ 1105.660445][T11163] bond12: entered allmulticast mode [ 1105.666277][T11163] 8021q: adding VLAN 0 to HW filter on device bond12 [ 1105.791722][T11156] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1105.837346][T11163] netlink: 1 bytes leftover after parsing attributes in process `syz.3.13815'. [ 1105.854817][T11173] loop4: detected capacity change from 0 to 1024 [ 1105.863215][T11173] EXT4-fs: Ignoring removed mblk_io_submit option [ 1105.881155][T11173] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1105.908910][ T4841] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1105.940305][T11179] netlink: 12 bytes leftover after parsing attributes in process `syz.4.13818'. [ 1106.135702][T11181] netlink: 12 bytes leftover after parsing attributes in process `syz.1.13813'. [ 1106.144978][T11181] openvswitch: netlink: Key 0 has unexpected len 2 expected 0 [ 1106.324522][ T4983] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1106.617964][T11201] loop1: detected capacity change from 0 to 1024 [ 1106.625887][T11201] EXT4-fs: Ignoring removed mblk_io_submit option [ 1106.641167][T11201] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1106.802154][T11210] netlink: 12 bytes leftover after parsing attributes in process `syz.3.13829'. [ 1107.007142][T11212] netlink: 52 bytes leftover after parsing attributes in process `syz.3.13830'. [ 1107.016765][T11212] IPVS: Unknown mcast interface: vetN1_macvtap [ 1107.225287][T11230] loop2: detected capacity change from 0 to 1024 [ 1107.233267][T11230] EXT4-fs: Ignoring removed nobh option [ 1107.238912][T11230] EXT4-fs: Ignoring removed bh option [ 1107.251516][T11230] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1107.445170][ T4983] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1107.724636][ T5143] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1107.755676][T11246] loop2: detected capacity change from 0 to 128 [ 1107.767347][T11246] FAT-fs (loop2): error, invalid access to FAT (entry 0x0fff0000) [ 1107.775288][T11246] FAT-fs (loop2): Filesystem has been set read-only [ 1107.978410][T11249] lo speed is unknown, defaulting to 1000 [ 1108.924732][T11272] loop5: detected capacity change from 0 to 1024 [ 1108.932695][T11272] EXT4-fs: Ignoring removed nobh option [ 1108.938661][T11272] EXT4-fs: Ignoring removed bh option [ 1108.949005][T11271] loop4: detected capacity change from 0 to 1024 [ 1109.039812][T11278] lo speed is unknown, defaulting to 1000 [ 1109.330212][T11272] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1109.346049][T11271] EXT4-fs: Ignoring removed mblk_io_submit option [ 1109.557750][T11283] sg_write: data in/out 475/14 bytes for SCSI command 0x0-- guessing data in; [ 1109.557750][T11283] program syz.3.13851 not setting count and/or reply_len properly [ 1109.954929][T11271] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1110.210016][ T29] kauditd_printk_skb: 1798 callbacks suppressed [ 1110.210042][ T29] audit: type=1326 audit(1763896550.765:354543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11266 comm="syz.4.13847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f9c970b65e7 code=0x7ffc0000 [ 1110.240073][ T29] audit: type=1326 audit(1763896550.765:354544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11266 comm="syz.4.13847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f9c9705b829 code=0x7ffc0000 [ 1110.263852][ T29] audit: type=1326 audit(1763896550.765:354545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11266 comm="syz.4.13847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7f9c970bf749 code=0x7ffc0000 [ 1110.293963][ T29] audit: type=1400 audit(1763896550.845:354546): avc: denied { read write } for pid=4983 comm="syz-executor" name="loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1110.318529][ T29] audit: type=1400 audit(1763896550.845:354547): avc: denied { open } for pid=4983 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1110.350110][ T29] audit: type=1400 audit(1763896550.895:354548): avc: denied { unmount } for pid=4841 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 1110.371107][ T29] audit: type=1400 audit(1763896550.895:354549): avc: denied { ioctl } for pid=4983 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=101 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1110.429146][ T4841] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1110.452354][ T29] audit: type=1400 audit(1763896550.935:354550): avc: denied { wake_alarm } for pid=11303 comm="syz.1.13857" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1110.473982][ T29] audit: type=1400 audit(1763896550.935:354551): avc: denied { map_create } for pid=11303 comm="syz.1.13857" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1110.493579][ T29] audit: type=1400 audit(1763896550.935:354552): avc: denied { bpf } for pid=11303 comm="syz.1.13857" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1110.632952][T11316] loop2: detected capacity change from 0 to 128 [ 1110.643967][T11316] FAT-fs (loop2): error, invalid access to FAT (entry 0x0fff0000) [ 1110.651910][T11316] FAT-fs (loop2): Filesystem has been set read-only [ 1110.749434][T11323] loop4: detected capacity change from 0 to 512 [ 1110.777396][T11320] loop2: detected capacity change from 0 to 2048 [ 1110.789411][T11323] EXT4-fs (loop4): 1 orphan inode deleted [ 1110.796958][T11323] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1110.810045][ T12] EXT4-fs error (device loop4): ext4_release_dquot:6981: comm kworker/u8:0: Failed to release dquot type 1 [ 1110.812117][T11323] ext4 filesystem being mounted at /374/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1110.824674][ T8240] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1110.843010][T11320] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1110.860225][ T4841] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1110.904297][ T5143] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1110.966095][T11333] loop5: detected capacity change from 0 to 1024 [ 1110.966976][T11333] EXT4-fs: Ignoring removed mblk_io_submit option [ 1110.992210][T11333] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1111.086597][T11342] loop2: detected capacity change from 0 to 128 [ 1111.097141][T11342] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1111.110113][T11342] ext4 filesystem being mounted at /373/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1111.154318][T11342] FAULT_INJECTION: forcing a failure. [ 1111.154318][T11342] name failslab, interval 1, probability 0, space 0, times 0 [ 1111.167009][T11342] CPU: 0 UID: 0 PID: 11342 Comm: syz.2.13870 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 1111.167048][T11342] Tainted: [W]=WARN [ 1111.167073][T11342] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1111.167087][T11342] Call Trace: [ 1111.167095][T11342] [ 1111.167104][T11342] __dump_stack+0x1d/0x30 [ 1111.167130][T11342] dump_stack_lvl+0xe8/0x140 [ 1111.167153][T11342] dump_stack+0x15/0x1b [ 1111.167244][T11342] should_fail_ex+0x265/0x280 [ 1111.167281][T11342] should_failslab+0x8c/0xb0 [ 1111.167312][T11342] __kmalloc_noprof+0xa5/0x570 [ 1111.167356][T11342] ? alloc_pipe_info+0x1c9/0x350 [ 1111.167387][T11342] alloc_pipe_info+0x1c9/0x350 [ 1111.167415][T11342] splice_direct_to_actor+0x592/0x680 [ 1111.167492][T11342] ? kstrtouint_from_user+0x9f/0xf0 [ 1111.167514][T11342] ? __pfx_direct_splice_actor+0x10/0x10 [ 1111.167539][T11342] ? __rcu_read_unlock+0x4f/0x70 [ 1111.167567][T11342] ? get_pid_task+0x96/0xd0 [ 1111.167648][T11342] ? avc_policy_seqno+0x15/0x30 [ 1111.167672][T11342] ? selinux_file_permission+0x1e4/0x320 [ 1111.167716][T11342] do_splice_direct+0xda/0x150 [ 1111.167741][T11342] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 1111.167804][T11342] do_sendfile+0x380/0x650 [ 1111.167843][T11342] __x64_sys_sendfile64+0x105/0x150 [ 1111.167878][T11342] x64_sys_call+0x2bb4/0x3000 [ 1111.167965][T11342] do_syscall_64+0xd2/0x200 [ 1111.167988][T11342] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 1111.168018][T11342] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 1111.168053][T11342] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1111.168119][T11342] RIP: 0033:0x7fc0a55ef749 [ 1111.168142][T11342] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1111.168162][T11342] RSP: 002b:00007fc0a4057038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1111.168185][T11342] RAX: ffffffffffffffda RBX: 00007fc0a5845fa0 RCX: 00007fc0a55ef749 [ 1111.168201][T11342] RDX: 0000000000000000 RSI: 000000000000000a RDI: 0000000000000007 [ 1111.168216][T11342] RBP: 00007fc0a4057090 R08: 0000000000000000 R09: 0000000000000000 [ 1111.168229][T11342] R10: 0000020000023892 R11: 0000000000000246 R12: 0000000000000001 [ 1111.168308][T11342] R13: 00007fc0a5846038 R14: 00007fc0a5845fa0 R15: 00007ffca0e59d78 [ 1111.168330][T11342] [ 1111.704408][T11358] lo speed is unknown, defaulting to 1000 [ 1112.071482][ T5143] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1112.071751][ T8240] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1112.248839][T11378] loop5: detected capacity change from 0 to 2048 [ 1112.258038][T11379] loop2: detected capacity change from 0 to 512 [ 1112.271152][T11378] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1112.275390][T11379] EXT4-fs (loop2): 1 orphan inode deleted [ 1112.289653][T11379] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1112.302314][ T37] EXT4-fs error (device loop2): ext4_release_dquot:6981: comm kworker/u8:2: Failed to release dquot type 1 [ 1112.413575][T11384] lo speed is unknown, defaulting to 1000 [ 1112.478536][T11379] ext4 filesystem being mounted at /374/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1112.783323][ T8240] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1112.793568][ T5143] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1113.027260][T11397] lo speed is unknown, defaulting to 1000 [ 1113.044233][T11408] netlink: 'syz.3.13884': attribute type 1 has an invalid length. [ 1113.106952][T11408] bond13: entered promiscuous mode [ 1113.113289][T11408] bond13: entered allmulticast mode [ 1113.119131][T11408] 8021q: adding VLAN 0 to HW filter on device bond13 [ 1113.218281][T11408] netlink: 1 bytes leftover after parsing attributes in process `syz.3.13884'. [ 1113.426863][T11432] loop1: detected capacity change from 0 to 2048 [ 1113.465125][T11432] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1113.537943][ T4983] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1113.598869][T11441] loop4: detected capacity change from 0 to 512 [ 1113.698080][T11426] netlink: 52 bytes leftover after parsing attributes in process `syz.5.13887'. [ 1113.707618][T11426] IPVS: Unknown mcast interface: vetN1_macvtap [ 1113.744593][T11441] EXT4-fs (loop4): 1 orphan inode deleted [ 1113.758485][ T3484] EXT4-fs error (device loop4): ext4_release_dquot:6981: comm kworker/u8:7: Failed to release dquot type 1 [ 1113.772226][T11441] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1113.799774][T11441] ext4 filesystem being mounted at /378/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1113.902810][ T4841] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1114.046814][T11460] loop4: detected capacity change from 0 to 1024 [ 1114.055642][T11460] EXT4-fs: Ignoring removed mblk_io_submit option [ 1114.097964][T11460] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1114.121867][T11466] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 1114.172289][T11461] lo speed is unknown, defaulting to 1000 [ 1114.201238][T11469] loop2: detected capacity change from 0 to 1024 [ 1114.274660][T11469] EXT4-fs: Ignoring removed nobh option [ 1114.280450][T11469] EXT4-fs: Ignoring removed bh option [ 1114.327531][T11469] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1114.668014][T11477] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1114.689454][T11477] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1114.931114][ T4841] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1114.993456][T11484] netlink: 'syz.1.13905': attribute type 12 has an invalid length. [ 1115.001570][T11484] netlink: 'syz.1.13905': attribute type 29 has an invalid length. [ 1115.009512][T11484] netlink: 148 bytes leftover after parsing attributes in process `syz.1.13905'. [ 1115.018872][T11484] netlink: 'syz.1.13905': attribute type 1 has an invalid length. [ 1115.042314][T11486] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0xf [ 1115.085842][T11484] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1115.116806][T11490] netlink: 'syz.4.13906': attribute type 1 has an invalid length. [ 1115.133560][T11490] bond7: entered promiscuous mode [ 1115.138694][T11490] bond7: entered allmulticast mode [ 1115.144813][T11490] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1115.161570][T11484] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1115.212740][ T5143] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1115.225673][ T29] kauditd_printk_skb: 1917 callbacks suppressed [ 1115.225690][ T29] audit: type=1400 audit(1763896555.775:356410): avc: denied { read write } for pid=11485 comm="syz.3.13907" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 1115.228733][T11484] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1115.267733][ T29] audit: type=1400 audit(1763896555.775:356411): avc: denied { open } for pid=11485 comm="syz.3.13907" path="/dev/ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 1115.291363][ T29] audit: type=1400 audit(1763896555.825:356412): avc: denied { ioctl } for pid=11485 comm="syz.3.13907" path="/dev/ppp" dev="devtmpfs" ino=140 ioctlcmd=0x7447 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 1115.360594][T11484] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1115.363859][ T29] audit: type=1400 audit(1763896555.825:356413): avc: denied { execmem } for pid=11485 comm="syz.3.13907" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 1115.390394][ T29] audit: type=1400 audit(1763896555.875:356414): avc: denied { read write } for pid=8240 comm="syz-executor" name="loop5" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1115.415124][ T29] audit: type=1400 audit(1763896555.875:356415): avc: denied { open } for pid=8240 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1115.439598][ T29] audit: type=1400 audit(1763896555.875:356416): avc: denied { ioctl } for pid=8240 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=105 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1115.465444][ T29] audit: type=1400 audit(1763896555.905:356417): avc: denied { mounton } for pid=11494 comm="syz.2.13908" path="/syzcgroup/unified/syz2" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 1115.489259][ T29] audit: type=1400 audit(1763896555.915:356418): avc: denied { map_create } for pid=11493 comm="syz.5.13909" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1115.509159][ T29] audit: type=1400 audit(1763896555.915:356419): avc: denied { map_read map_write } for pid=11493 comm="syz.5.13909" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1115.564018][T11490] netlink: 1 bytes leftover after parsing attributes in process `syz.4.13906'. [ 1115.617622][T22634] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1115.630509][T22634] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1115.650426][T22634] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1115.659018][T22634] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1115.767717][T11504] loop4: detected capacity change from 0 to 128 [ 1115.778673][T11504] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1115.841252][T11505] lo speed is unknown, defaulting to 1000 [ 1116.173124][T11504] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1116.321283][T11516] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=11516 comm=syz.3.13913 [ 1116.548878][T11533] loop1: detected capacity change from 0 to 512 [ 1116.568306][T11533] EXT4-fs (loop1): 1 orphan inode deleted [ 1116.576688][T11533] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1116.591388][T11533] ext4 filesystem being mounted at /369/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1116.602503][T22634] EXT4-fs error (device loop1): ext4_release_dquot:6981: comm kworker/u8:1: Failed to release dquot type 1 [ 1116.629192][ T4983] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1116.674869][T11540] loop4: detected capacity change from 0 to 128 [ 1117.021726][T11545] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1117.031435][T11545] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1117.295381][T11553] siw: device registration error -23 [ 1117.482986][T11557] lo speed is unknown, defaulting to 1000 [ 1117.712905][T11567] lo speed is unknown, defaulting to 1000 [ 1118.151187][T11582] loop1: detected capacity change from 0 to 1024 [ 1118.162686][T11582] EXT4-fs: Ignoring removed mblk_io_submit option [ 1118.207229][T11582] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1118.346446][T11593] loop4: detected capacity change from 0 to 2048 [ 1118.376475][T11593] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1118.417372][ T4841] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1118.460419][T11605] loop4: detected capacity change from 0 to 1024 [ 1118.461851][T11605] EXT4-fs: Ignoring removed nobh option [ 1118.461896][T11605] EXT4-fs: Ignoring removed bh option [ 1118.471163][T11605] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1118.657514][T11603] netlink: 52 bytes leftover after parsing attributes in process `syz.2.13939'. [ 1118.668267][T11603] IPVS: Unknown mcast interface: vetN1_macvtap [ 1118.860616][T11613] lo speed is unknown, defaulting to 1000 [ 1118.974148][ T4983] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1119.032650][ T4841] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1119.354254][T11625] lo speed is unknown, defaulting to 1000 [ 1119.675974][T11632] netlink: 52 bytes leftover after parsing attributes in process `syz.3.13946'. [ 1119.685957][T11632] IPVS: Unknown mcast interface: vetN1_macvtap [ 1119.825442][T11634] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 1119.876179][T11637] openvswitch: netlink: Missing key (keys=40, expected=80) [ 1119.966021][T11637] netlink: 76 bytes leftover after parsing attributes in process `syz.3.13948'. [ 1120.209891][T11644] loop1: detected capacity change from 0 to 128 [ 1120.247869][ T29] kauditd_printk_skb: 2131 callbacks suppressed [ 1120.247886][ T29] audit: type=1400 audit(1763896560.795:358550): avc: denied { ioctl } for pid=8240 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=105 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1120.320859][ T29] audit: type=1400 audit(1763896560.795:358551): avc: denied { mounton } for pid=11642 comm="syz.1.13951" path="/376/file0" dev="tmpfs" ino=2038 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 1120.320934][ T29] audit: type=1400 audit(1763896560.815:358552): avc: denied { prog_load } for pid=11651 comm="syz.2.13953" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1120.320970][ T29] audit: type=1400 audit(1763896560.815:358553): avc: denied { bpf } for pid=11651 comm="syz.2.13953" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1120.321000][ T29] audit: type=1400 audit(1763896560.815:358554): avc: denied { perfmon } for pid=11651 comm="syz.2.13953" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1120.321029][ T29] audit: type=1326 audit(1763896560.815:358555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11651 comm="syz.2.13953" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0a55ef749 code=0x7ffc0000 [ 1120.321086][ T29] audit: type=1326 audit(1763896560.815:358556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11651 comm="syz.2.13953" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0a55ef749 code=0x7ffc0000 [ 1120.321118][ T29] audit: type=1326 audit(1763896560.815:358557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11651 comm="syz.2.13953" exe="/root/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7fc0a55ef749 code=0x7ffc0000 [ 1120.321152][ T29] audit: type=1326 audit(1763896560.815:358558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11651 comm="syz.2.13953" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0a55ef749 code=0x7ffc0000 [ 1120.321188][ T29] audit: type=1400 audit(1763896560.865:358559): avc: denied { mount } for pid=11642 comm="syz.1.13951" name="/" dev="loop1" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 1120.471157][T11660] siw: device registration error -23 [ 1120.667737][T11668] netlink: 12 bytes leftover after parsing attributes in process `syz.5.13957'. [ 1120.762108][T11677] loop5: detected capacity change from 0 to 1024 [ 1120.770832][T11677] EXT4-fs: Ignoring removed mblk_io_submit option [ 1120.787067][T11683] netlink: 'syz.3.13965': attribute type 12 has an invalid length. [ 1120.795096][T11683] netlink: 'syz.3.13965': attribute type 29 has an invalid length. [ 1120.803062][T11683] netlink: 148 bytes leftover after parsing attributes in process `syz.3.13965'. [ 1120.812313][T11683] netlink: 'syz.3.13965': attribute type 1 has an invalid length. [ 1120.826541][T11677] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1120.842038][T11685] loop4: detected capacity change from 0 to 1024 [ 1120.852209][T11685] EXT4-fs: Ignoring removed mblk_io_submit option [ 1120.860115][T11683] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1120.880902][T11685] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1120.910879][T11683] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1120.960646][T11683] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1121.010236][T11683] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1121.076094][ T7537] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1121.088673][ T7537] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1121.101271][ T7537] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1121.114907][ T7537] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1121.576092][ T8240] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1121.591471][T11702] siw: device registration error -23 [ 1121.650232][T11705] loop1: detected capacity change from 0 to 1024 [ 1121.713283][T11708] netlink: 12 bytes leftover after parsing attributes in process `syz.3.13972'. [ 1121.828911][ T4841] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1122.052474][T11726] siw: device registration error -23 [ 1122.060743][T11722] loop4: detected capacity change from 0 to 128 [ 1122.110604][T11729] loop1: detected capacity change from 0 to 1024 [ 1122.119532][T11729] EXT4-fs: Ignoring removed mblk_io_submit option [ 1122.132847][T11729] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1122.855478][T11741] lo speed is unknown, defaulting to 1000 [ 1123.141313][ T4983] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1123.313852][T11752] loop5: detected capacity change from 0 to 512 [ 1123.351622][T11752] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1123.371961][T11752] ext4 filesystem being mounted at /203/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1123.604644][ T8240] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1123.648230][T11761] siw: device registration error -23 [ 1124.219349][T11797] loop1: detected capacity change from 0 to 1024 [ 1124.316574][T11802] netlink: 12 bytes leftover after parsing attributes in process `syz.2.14008'. [ 1124.430109][T11808] netlink: 'syz.2.14012': attribute type 1 has an invalid length. [ 1124.446070][T11808] bond1: entered promiscuous mode [ 1124.451304][T11808] bond1: entered allmulticast mode [ 1124.457289][T11808] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1124.475275][T11811] FAULT_INJECTION: forcing a failure. [ 1124.475275][T11811] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1124.488535][T11811] CPU: 0 UID: 0 PID: 11811 Comm: syz.1.14011 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 1124.488639][T11811] Tainted: [W]=WARN [ 1124.488649][T11811] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1124.488666][T11811] Call Trace: [ 1124.488676][T11811] [ 1124.488686][T11811] __dump_stack+0x1d/0x30 [ 1124.488713][T11811] dump_stack_lvl+0xe8/0x140 [ 1124.488757][T11811] dump_stack+0x15/0x1b [ 1124.488779][T11811] should_fail_ex+0x265/0x280 [ 1124.488888][T11811] should_fail+0xb/0x20 [ 1124.488909][T11811] should_fail_usercopy+0x1a/0x20 [ 1124.488952][T11811] _copy_from_iter+0xd2/0xe80 [ 1124.489127][T11811] ? __build_skb_around+0x1ab/0x200 [ 1124.489168][T11811] ? tcp_chrono_start+0xe9/0x110 [ 1124.489273][T11811] ? skb_page_frag_refill+0x16b/0x300 [ 1124.489297][T11811] tcp_sendmsg_locked+0x16be/0x2c00 [ 1124.489358][T11811] ? __pfx_tcp_sendmsg+0x10/0x10 [ 1124.489419][T11811] tcp_sendmsg+0x2f/0x50 [ 1124.489445][T11811] inet_sendmsg+0x76/0xd0 [ 1124.489468][T11811] __sock_sendmsg+0x102/0x180 [ 1124.489533][T11811] __sys_sendto+0x268/0x330 [ 1124.489589][T11811] __x64_sys_sendto+0x76/0x90 [ 1124.489620][T11811] x64_sys_call+0x2d14/0x3000 [ 1124.489642][T11811] do_syscall_64+0xd2/0x200 [ 1124.489669][T11811] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 1124.489713][T11811] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 1124.489762][T11811] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1124.489794][T11811] RIP: 0033:0x7fd90167f749 [ 1124.489810][T11811] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1124.489828][T11811] RSP: 002b:00007fd9000e7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1124.489851][T11811] RAX: ffffffffffffffda RBX: 00007fd9018d5fa0 RCX: 00007fd90167f749 [ 1124.489864][T11811] RDX: 0000000000000005 RSI: 00002000000002c0 RDI: 0000000000000003 [ 1124.489899][T11811] RBP: 00007fd9000e7090 R08: 0000000000000000 R09: 0000000000000000 [ 1124.489930][T11811] R10: 0000000000000052 R11: 0000000000000246 R12: 0000000000000001 [ 1124.489949][T11811] R13: 00007fd9018d6038 R14: 00007fd9018d5fa0 R15: 00007fffb6ff8c08 [ 1124.490002][T11811] [ 1124.812699][T11808] sit0: entered promiscuous mode [ 1124.821360][T11808] netlink: 1 bytes leftover after parsing attributes in process `syz.2.14012'. [ 1124.970752][T11821] loop2: detected capacity change from 0 to 128 [ 1124.979059][T11821] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1125.002570][T11821] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1125.049850][T11825] xt_connbytes: Forcing CT accounting to be enabled [ 1125.057496][T11825] set match dimension is over the limit! [ 1125.256407][ T29] kauditd_printk_skb: 1917 callbacks suppressed [ 1125.256424][ T29] audit: type=1400 audit(1763896565.805:360477): avc: denied { read write } for pid=8240 comm="syz-executor" name="loop5" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1125.289388][ T29] audit: type=1400 audit(1763896565.805:360478): avc: denied { read write open } for pid=8240 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1125.315041][ T29] audit: type=1400 audit(1763896565.805:360479): avc: denied { ioctl } for pid=8240 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=105 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1125.341131][ T29] audit: type=1326 audit(1763896565.825:360480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11833 comm="syz.5.14020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60c2def749 code=0x7ffc0000 [ 1125.364903][ T29] audit: type=1326 audit(1763896565.825:360481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11833 comm="syz.5.14020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60c2def749 code=0x7ffc0000 [ 1125.388823][ T29] audit: type=1326 audit(1763896565.825:360482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11833 comm="syz.5.14020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60c2def749 code=0x7ffc0000 [ 1125.412695][ T29] audit: type=1326 audit(1763896565.825:360483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11833 comm="syz.5.14020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60c2def749 code=0x7ffc0000 [ 1125.436779][ T29] audit: type=1326 audit(1763896565.825:360484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11833 comm="syz.5.14020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60c2def749 code=0x7ffc0000 [ 1125.460588][ T29] audit: type=1326 audit(1763896565.825:360485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11833 comm="syz.5.14020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f60c2def749 code=0x7ffc0000 [ 1125.485256][ T29] audit: type=1400 audit(1763896565.825:360486): avc: denied { prog_load } for pid=11833 comm="syz.5.14020" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1125.691950][T11841] loop2: detected capacity change from 0 to 1024 [ 1125.700741][T11841] EXT4-fs: Ignoring removed orlov option [ 1125.704339][T11838] lo speed is unknown, defaulting to 1000 [ 1125.707234][T11841] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 1125.763978][T11841] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c840e018, mo2=0000] [ 1125.779084][T11841] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #3: block 2: comm syz.2.14023: lblock 2 mapped to illegal pblock 2 (length 1) [ 1125.813113][T11841] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #3: block 48: comm syz.2.14023: lblock 0 mapped to illegal pblock 48 (length 1) [ 1125.841735][T11841] EXT4-fs error (device loop2): ext4_acquire_dquot:6945: comm syz.2.14023: Failed to acquire dquot type 0 [ 1125.873160][T11841] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 1125.891461][T11841] EXT4-fs error (device loop2): ext4_evict_inode:254: inode #11: comm syz.2.14023: mark_inode_dirty error [ 1125.906401][T11841] EXT4-fs warning (device loop2): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 1125.906484][T11841] EXT4-fs (loop2): 1 orphan inode deleted [ 1125.906877][T11841] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1125.918889][ T8414] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:11: lblock 1 mapped to illegal pblock 1 (length 1) [ 1125.919111][ T8414] EXT4-fs error (device loop2): ext4_release_dquot:6981: comm kworker/u8:11: Failed to release dquot type 0 [ 1125.943384][ T5143] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1125.944029][ T5143] EXT4-fs error (device loop2): __ext4_get_inode_loc:4832: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 1125.944152][ T5143] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 1125.944230][ T5143] EXT4-fs error (device loop2): ext4_quota_off:7229: inode #3: comm syz-executor: mark_inode_dirty error [ 1126.212381][T11862] loop5: detected capacity change from 0 to 256 [ 1126.225135][T11862] loop5: detected capacity change from 0 to 512 [ 1126.230883][T11862] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1126.614673][T11870] loop1: detected capacity change from 0 to 1024 [ 1126.651337][T11870] EXT4-fs: Ignoring removed mblk_io_submit option [ 1126.664967][T11872] netlink: 'syz.3.14033': attribute type 1 has an invalid length. [ 1126.684375][T11872] bond14: entered promiscuous mode [ 1126.689587][T11872] bond14: entered allmulticast mode [ 1126.695323][T11872] 8021q: adding VLAN 0 to HW filter on device bond14 [ 1126.703041][T11870] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1126.861003][T11872] netlink: 1 bytes leftover after parsing attributes in process `syz.3.14033'. [ 1127.023383][ T8240] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1127.123280][T11890] netlink: 'syz.5.14038': attribute type 1 has an invalid length. [ 1127.138561][T11890] bond3: entered promiscuous mode [ 1127.143745][T11890] bond3: entered allmulticast mode [ 1127.149217][T11890] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1127.332138][T11890] netlink: 1 bytes leftover after parsing attributes in process `syz.5.14038'. [ 1127.435294][T11893] netlink: 52 bytes leftover after parsing attributes in process `syz.4.14039'. [ 1127.444566][T11893] IPVS: Unknown mcast interface: vetN1_macvtap [ 1127.452828][ T4983] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1127.466473][T11897] loop5: detected capacity change from 0 to 128 [ 1127.481289][T11897] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1127.497845][T11897] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1127.569576][T11904] loop1: detected capacity change from 0 to 2048 [ 1127.590963][T11904] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1127.597607][T11909] loop4: detected capacity change from 0 to 128 [ 1127.615449][T11909] FAT-fs (loop4): error, invalid access to FAT (entry 0x0fff0000) [ 1127.623472][T11909] FAT-fs (loop4): Filesystem has been set read-only [ 1127.631298][ T4983] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1127.689490][T11912] loop1: detected capacity change from 0 to 1024 [ 1127.700786][T11912] EXT4-fs: Ignoring removed mblk_io_submit option [ 1127.721229][T11912] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1128.508295][ T4983] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1128.579336][T11934] netlink: 'syz.2.14052': attribute type 1 has an invalid length. [ 1128.596334][T11934] bond2: entered promiscuous mode [ 1128.601580][T11934] bond2: entered allmulticast mode [ 1128.608190][T11934] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1128.766651][T11934] netlink: 1 bytes leftover after parsing attributes in process `syz.2.14052'. [ 1128.793986][T11941] lo speed is unknown, defaulting to 1000 [ 1128.894128][T11947] loop2: detected capacity change from 0 to 128 [ 1128.903899][T11947] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1128.918359][T11947] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1129.082113][T11949] lo speed is unknown, defaulting to 1000 [ 1129.800401][T11964] loop1: detected capacity change from 0 to 128 [ 1129.811208][T11966] siw: device registration error -23 [ 1129.907598][T11968] loop1: detected capacity change from 0 to 512 [ 1129.946329][T11968] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1130.177747][T11979] lo speed is unknown, defaulting to 1000 [ 1130.226049][T11984] lo speed is unknown, defaulting to 1000 [ 1130.266845][ T29] kauditd_printk_skb: 2053 callbacks suppressed [ 1130.266914][ T29] audit: type=1326 audit(1763896570.815:362318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11957 comm="syz.3.14060" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f40040d65e7 code=0x7ffc0000 [ 1130.297266][ T29] audit: type=1326 audit(1763896570.815:362319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11957 comm="syz.3.14060" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f400407b829 code=0x7ffc0000 [ 1130.321085][ T29] audit: type=1326 audit(1763896570.815:362320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11957 comm="syz.3.14060" exe="/root/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7f40040df749 code=0x7ffc0000 [ 1130.345050][ T29] audit: type=1400 audit(1763896570.815:362321): avc: denied { mounton } for pid=11987 comm="syz.2.14070" path="/syzcgroup/unified/syz2" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 1130.425921][ T29] audit: type=1400 audit(1763896570.825:362322): avc: denied { prog_load } for pid=11987 comm="syz.2.14070" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1130.445523][ T29] audit: type=1400 audit(1763896570.825:362323): avc: denied { bpf } for pid=11987 comm="syz.2.14070" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1130.466756][ T29] audit: type=1400 audit(1763896570.825:362324): avc: denied { perfmon } for pid=11987 comm="syz.2.14070" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1130.488204][ T29] audit: type=1400 audit(1763896570.825:362325): avc: denied { create } for pid=11987 comm="syz.2.14070" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1130.508481][ T29] audit: type=1400 audit(1763896570.825:362326): avc: denied { map_create } for pid=11987 comm="syz.2.14070" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1130.528469][ T29] audit: type=1400 audit(1763896570.825:362327): avc: denied { map_read map_write } for pid=11987 comm="syz.2.14070" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1130.762562][ T4983] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1130.998453][T12010] siw: device registration error -23 [ 1131.137605][T12017] lo speed is unknown, defaulting to 1000 [ 1131.475480][T12016] loop5: detected capacity change from 0 to 2048 [ 1131.519989][T12016] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1131.554892][ T8240] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1131.819704][T12041] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0xf [ 1131.884593][T12047] loop2: detected capacity change from 0 to 512 [ 1131.918374][T12047] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1132.247841][T12062] loop5: detected capacity change from 0 to 128 [ 1132.324296][T12064] loop5: detected capacity change from 0 to 1024 [ 1132.334192][T12064] EXT4-fs: Ignoring removed mblk_io_submit option [ 1132.351183][T12064] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1132.721979][ T5143] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1132.975167][T12088] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0xf [ 1133.214227][ T8240] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1133.339109][T12101] loop5: detected capacity change from 0 to 2048 [ 1133.371720][T12101] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1133.423092][ T8240] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1133.543046][T12093] netlink: 52 bytes leftover after parsing attributes in process `syz.1.14101'. [ 1133.544533][T12111] loop2: detected capacity change from 0 to 512 [ 1133.560960][T12093] IPVS: Unknown mcast interface: vetN1_macvtap [ 1133.569366][T12110] loop5: detected capacity change from 0 to 512 [ 1133.576999][T12113] loop4: detected capacity change from 0 to 128 [ 1133.582688][T12111] EXT4-fs (loop2): 1 orphan inode deleted [ 1133.589598][T22634] EXT4-fs error (device loop2): ext4_release_dquot:6981: comm kworker/u8:1: Failed to release dquot type 1 [ 1133.591875][T12111] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1133.614307][T12111] ext4 filesystem being mounted at /418/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1133.626147][T12110] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1133.658463][ T5143] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1133.770945][T12130] netlink: 'syz.1.14112': attribute type 12 has an invalid length. [ 1133.779070][T12130] netlink: 'syz.1.14112': attribute type 29 has an invalid length. [ 1133.787186][T12130] netlink: 148 bytes leftover after parsing attributes in process `syz.1.14112'. [ 1133.797593][T12130] netlink: 'syz.1.14112': attribute type 1 has an invalid length. [ 1133.819971][T12130] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1133.879952][T12130] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1133.940150][T12130] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1133.979873][T12130] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1134.035410][ T37] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1134.048481][ T37] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1134.061333][ T37] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1134.073781][ T37] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1134.132414][T12135] loop1: detected capacity change from 0 to 128 [ 1134.349625][T12141] lo speed is unknown, defaulting to 1000 [ 1134.360736][ T8240] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1134.629119][T12147] lo speed is unknown, defaulting to 1000 [ 1134.882042][T12152] loop4: detected capacity change from 0 to 128 [ 1135.228434][T12162] lo speed is unknown, defaulting to 1000 [ 1135.570655][ T29] kauditd_printk_skb: 1232 callbacks suppressed [ 1135.570675][ T29] audit: type=1400 audit(1763896575.735:363559): avc: denied { prog_load } for pid=12160 comm="syz.3.14123" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1135.596758][ T29] audit: type=1400 audit(1763896575.735:363560): avc: denied { bpf } for pid=12160 comm="syz.3.14123" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1135.617871][ T29] audit: type=1400 audit(1763896575.735:363561): avc: denied { perfmon } for pid=12160 comm="syz.3.14123" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1135.639247][ T29] audit: type=1400 audit(1763896575.745:363562): avc: denied { prog_load } for pid=12153 comm="syz.2.14120" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1135.658898][ T29] audit: type=1400 audit(1763896575.745:363563): avc: denied { bpf } for pid=12153 comm="syz.2.14120" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1135.680254][ T29] audit: type=1400 audit(1763896575.745:363564): avc: denied { prog_run } for pid=12153 comm="syz.2.14120" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1135.699694][ T29] audit: type=1400 audit(1763896575.745:363565): avc: denied { allowed } for pid=12153 comm="syz.2.14120" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 1135.719608][ T29] audit: type=1400 audit(1763896575.745:363566): avc: denied { create } for pid=12153 comm="syz.2.14120" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1135.741319][ T29] audit: type=1400 audit(1763896575.745:363567): avc: denied { map } for pid=12153 comm="syz.2.14120" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=230817 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1135.766276][ T29] audit: type=1400 audit(1763896575.745:363568): avc: denied { read write } for pid=12153 comm="syz.2.14120" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=230817 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1135.856270][T12157] loop4: detected capacity change from 0 to 1024 [ 1135.885289][T12157] EXT4-fs: Ignoring removed mblk_io_submit option [ 1136.158498][T12157] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1136.191516][T12165] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1136.238870][T12173] loop1: detected capacity change from 0 to 1024 [ 1136.267340][T12173] EXT4-fs: Ignoring removed nobh option [ 1136.273346][T12173] EXT4-fs: Ignoring removed bh option [ 1136.291619][T12165] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1136.356769][T12165] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1136.375303][T12173] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1136.439245][T12175] loop5: detected capacity change from 0 to 1024 [ 1136.452406][T12165] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1136.469971][T12175] EXT4-fs: Ignoring removed mblk_io_submit option [ 1136.490478][T12175] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1136.547381][ T37] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1136.561908][T31975] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1136.574505][T31975] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1136.586850][T31975] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1136.650530][ T4841] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1136.754693][T12193] loop2: detected capacity change from 0 to 1024 [ 1136.772996][T12193] EXT4-fs: Ignoring removed mblk_io_submit option [ 1136.792002][T12193] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1136.957785][ T4983] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1136.989049][T12202] lo speed is unknown, defaulting to 1000 [ 1137.052820][T12209] loop1: detected capacity change from 0 to 256 [ 1137.064934][T12209] loop1: detected capacity change from 0 to 512 [ 1137.147020][T12209] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1137.212821][ T8240] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1137.487271][T12220] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1137.496990][T12220] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1137.584871][ T5143] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1137.682998][T12223] loop4: detected capacity change from 0 to 512 [ 1137.701604][T12223] EXT4-fs (loop4): 1 orphan inode deleted [ 1137.707815][T12223] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1137.721398][T12223] ext4 filesystem being mounted at /426/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1137.837923][ T37] EXT4-fs error (device loop4): ext4_release_dquot:6981: comm kworker/u8:2: Failed to release dquot type 1 [ 1137.852683][ T4841] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1137.892219][ T4983] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1137.916216][T12229] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1137.991222][T12229] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1138.009842][T12235] loop4: detected capacity change from 0 to 1024 [ 1138.024493][T12235] EXT4-fs: Ignoring removed nobh option [ 1138.030261][T12235] EXT4-fs: Ignoring removed bh option [ 1138.045070][T12238] loop1: detected capacity change from 0 to 1024 [ 1138.063891][T12238] EXT4-fs: Ignoring removed nobh option [ 1138.069603][T12238] EXT4-fs: Ignoring removed bh option [ 1138.070002][T12229] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1138.100172][T12236] lo speed is unknown, defaulting to 1000 [ 1138.151239][T12229] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1138.375710][T12249] netlink: 12 bytes leftover after parsing attributes in process `syz.1.14142'. [ 1138.412183][T12249] openvswitch: netlink: Key 0 has unexpected len 2 expected 0 [ 1138.811272][T12264] loop1: detected capacity change from 0 to 128 [ 1138.821480][T12264] ext4 filesystem being mounted at /415/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1139.150580][T12270] FAULT_INJECTION: forcing a failure. [ 1139.150580][T12270] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1139.164338][T12270] CPU: 0 UID: 0 PID: 12270 Comm: syz.3.14151 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 1139.164382][T12270] Tainted: [W]=WARN [ 1139.164391][T12270] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1139.164407][T12270] Call Trace: [ 1139.164416][T12270] [ 1139.164426][T12270] __dump_stack+0x1d/0x30 [ 1139.164507][T12270] dump_stack_lvl+0xe8/0x140 [ 1139.164527][T12270] dump_stack+0x15/0x1b [ 1139.164543][T12270] should_fail_ex+0x265/0x280 [ 1139.164580][T12270] should_fail+0xb/0x20 [ 1139.164595][T12270] should_fail_usercopy+0x1a/0x20 [ 1139.164683][T12270] _copy_from_user+0x1c/0xb0 [ 1139.164717][T12270] memdup_user+0x5e/0xd0 [ 1139.164749][T12270] strndup_user+0x68/0xb0 [ 1139.164778][T12270] __se_sys_add_key+0x128/0x350 [ 1139.164887][T12270] __x64_sys_add_key+0x67/0x80 [ 1139.164919][T12270] x64_sys_call+0x28c8/0x3000 [ 1139.164946][T12270] do_syscall_64+0xd2/0x200 [ 1139.165048][T12270] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 1139.165075][T12270] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 1139.165145][T12270] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1139.165170][T12270] RIP: 0033:0x7f40040df749 [ 1139.165192][T12270] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1139.165210][T12270] RSP: 002b:00007f4002afd038 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 1139.165230][T12270] RAX: ffffffffffffffda RBX: 00007f4004336180 RCX: 00007f40040df749 [ 1139.165246][T12270] RDX: 0000200000000500 RSI: 0000200000000440 RDI: 00002000000003c0 [ 1139.165301][T12270] RBP: 00007f4002afd090 R08: fffffffffffffffd R09: 0000000000000000 [ 1139.165313][T12270] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000001 [ 1139.165328][T12270] R13: 00007f4004336218 R14: 00007f4004336180 R15: 00007ffd9eb07c28 [ 1139.165353][T12270] [ 1139.635903][T12280] loop1: detected capacity change from 0 to 1024 [ 1139.643946][T12280] EXT4-fs: Ignoring removed nobh option [ 1139.649868][T12280] EXT4-fs: Ignoring removed bh option [ 1139.694116][T12286] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0xf [ 1139.789567][T12278] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1139.799975][T12278] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1140.034672][T12293] lo speed is unknown, defaulting to 1000 [ 1140.089072][T12297] loop5: detected capacity change from 0 to 1024 [ 1140.212972][T12300] loop1: detected capacity change from 0 to 256 [ 1140.231653][T12300] loop1: detected capacity change from 0 to 512 [ 1140.341870][T12305] netlink: 24 bytes leftover after parsing attributes in process `syz.5.14162'. [ 1140.399586][T12305] loop5: detected capacity change from 0 to 512 [ 1140.412871][T12310] loop4: detected capacity change from 0 to 1024 [ 1140.421718][T12310] EXT4-fs: Ignoring removed mblk_io_submit option [ 1140.426899][T12305] EXT4-fs (loop5): too many log groups per flexible block group [ 1140.438294][T12305] EXT4-fs (loop5): failed to initialize mballoc (-12) [ 1140.445507][T12305] EXT4-fs (loop5): mount failed [ 1140.578935][ T29] kauditd_printk_skb: 1787 callbacks suppressed [ 1140.578956][ T29] audit: type=1326 audit(1763896581.125:365163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12309 comm="syz.4.14163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f9c970b65e7 code=0x7ffc0000 [ 1140.611816][ T29] audit: type=1326 audit(1763896581.125:365164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12309 comm="syz.4.14163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f9c9705b829 code=0x7ffc0000 [ 1140.636173][ T29] audit: type=1326 audit(1763896581.125:365165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12309 comm="syz.4.14163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7f9c970bf749 code=0x7ffc0000 [ 1140.662012][ T29] audit: type=1326 audit(1763896581.215:365166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12309 comm="syz.4.14163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f9c970b65e7 code=0x7ffc0000 [ 1140.686258][ T29] audit: type=1326 audit(1763896581.215:365167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12309 comm="syz.4.14163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f9c9705b829 code=0x7ffc0000 [ 1140.710959][ T29] audit: type=1326 audit(1763896581.215:365168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12309 comm="syz.4.14163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7f9c970bf749 code=0x7ffc0000 [ 1140.744098][ T29] audit: type=1326 audit(1763896581.245:365169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12309 comm="syz.4.14163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f9c970b65e7 code=0x7ffc0000 [ 1140.768694][ T29] audit: type=1326 audit(1763896581.245:365170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12309 comm="syz.4.14163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f9c9705b829 code=0x7ffc0000 [ 1140.792615][ T29] audit: type=1326 audit(1763896581.245:365171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12309 comm="syz.4.14163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7f9c970bf749 code=0x7ffc0000 [ 1140.817082][ T29] audit: type=1326 audit(1763896581.245:365172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12309 comm="syz.4.14163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f9c970b65e7 code=0x7ffc0000 [ 1141.270253][T12333] loop4: detected capacity change from 0 to 1024 [ 1141.279027][T12333] EXT4-fs: Ignoring removed nobh option [ 1141.284705][T12333] EXT4-fs: Ignoring removed bh option [ 1141.492683][ T37] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1141.513220][ T37] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1141.521669][ T37] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1141.533390][ T37] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1141.581042][T12343] loop2: detected capacity change from 0 to 128 [ 1141.717321][T12341] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1141.731672][T12349] loop2: detected capacity change from 0 to 1024 [ 1141.741896][T12341] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1141.750938][T12349] EXT4-fs: Ignoring removed mblk_io_submit option [ 1141.920029][T12362] loop4: detected capacity change from 0 to 1024 [ 1141.940256][T12362] EXT4-fs: Ignoring removed mblk_io_submit option [ 1142.495067][T12375] lo speed is unknown, defaulting to 1000 [ 1142.568814][ T5143] EXT4-fs unmount: 16 callbacks suppressed [ 1142.568831][ T5143] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1142.792971][ T4841] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1142.884662][T12380] netlink: 52 bytes leftover after parsing attributes in process `syz.2.14185'. [ 1142.926863][T12380] IPVS: Unknown mcast interface: vetN1_macvtap [ 1142.995972][T12384] loop1: detected capacity change from 0 to 512 [ 1143.033257][T12384] EXT4-fs (loop1): too many log groups per flexible block group [ 1143.053809][T12384] EXT4-fs (loop1): failed to initialize mballoc (-12) [ 1143.077994][T12384] EXT4-fs (loop1): mount failed [ 1143.130216][T12391] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0xf [ 1143.286521][T12398] netlink: 'syz.5.14193': attribute type 2 has an invalid length. [ 1143.426704][T11986] ================================================================== [ 1143.434938][T11986] BUG: KCSAN: data-race in __filemap_remove_folio / nr_blockdev_pages [ 1143.443303][T11986] [ 1143.445652][T11986] read-write to 0xffff888100481838 of 8 bytes by task 4841 on cpu 1: [ 1143.453867][T11986] __filemap_remove_folio+0x1bc/0x2a0 [ 1143.459365][T11986] __remove_mapping+0x390/0x4c0 [ 1143.464253][T11986] remove_mapping+0x22/0x90 [ 1143.468784][T11986] mapping_try_invalidate+0x26a/0x3f0 [ 1143.474390][T11986] invalidate_mapping_pages+0x27/0x40 [ 1143.479884][T11986] invalidate_bdev+0x58/0x70 [ 1143.484679][T11986] ext4_put_super+0x624/0x7d0 [ 1143.489412][T11986] generic_shutdown_super+0xe6/0x210 [ 1143.494724][T11986] kill_block_super+0x2a/0x70 [ 1143.499430][T11986] ext4_kill_sb+0x42/0x80 [ 1143.503794][T11986] deactivate_locked_super+0x75/0x1c0 [ 1143.509181][T11986] deactivate_super+0x97/0xa0 [ 1143.513878][T11986] cleanup_mnt+0x269/0x2e0 [ 1143.518413][T11986] __cleanup_mnt+0x19/0x20 [ 1143.522847][T11986] task_work_run+0x131/0x1a0 [ 1143.527459][T11986] exit_to_user_mode_loop+0xed/0x110 [ 1143.532791][T11986] do_syscall_64+0x1d6/0x200 [ 1143.537480][T11986] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1143.543417][T11986] [ 1143.545747][T11986] read to 0xffff888100481838 of 8 bytes by task 11986 on cpu 0: [ 1143.553484][T11986] nr_blockdev_pages+0x7e/0xd0 [ 1143.558313][T11986] si_meminfo+0x87/0xd0 [ 1143.562506][T11986] update_defense_level+0x47/0x5c0 [ 1143.567630][T11986] defense_work_handler+0x1f/0x80 [ 1143.572675][T11986] process_scheduled_works+0x4ce/0x9d0 [ 1143.578160][T11986] worker_thread+0x582/0x770 [ 1143.582764][T11986] kthread+0x489/0x510 [ 1143.586866][T11986] ret_from_fork+0x122/0x1b0 [ 1143.591491][T11986] ret_from_fork_asm+0x1a/0x30 [ 1143.596276][T11986] [ 1143.598600][T11986] value changed: 0x0000000000000008 -> 0x0000000000000006 [ 1143.605810][T11986] [ 1143.608169][T11986] Reported by Kernel Concurrency Sanitizer on: [ 1143.614322][T11986] CPU: 0 UID: 0 PID: 11986 Comm: kworker/0:4 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 1143.625948][T11986] Tainted: [W]=WARN [ 1143.629841][T11986] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1143.640096][T11986] Workqueue: events_long defense_work_handler [ 1143.646275][T11986] ==================================================================