last executing test programs: 6.153044917s ago: executing program 3 (id=222): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000008850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sys_enter\x00', r0}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000031c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="c8010000", @ANYRES16=r3, @ANYBLOB="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"], 0x1c8}}, 0x0) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x2fd, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x90) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r4, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r5}, 0x10) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000400)='./bus\x00', 0x800, &(0x7f0000000840)=ANY=[], 0x1, 0x36e, &(0x7f0000000c00)="$eJzs3c9rI2UYwPEnaZpMumyTgygK0ge96GVoq2c1yC6IAZfuRtwVhNntREPGpMyESERsPXkVb/4DgsseFzwsqP9AL97WixdP9iIIuog4Mr/SJJ00aTZL0/b7gTZP8r7PzPvmF88byJuD9776uFn3zLrVkayhkhEReSRSlqwkMtFFXlLsycuX/nz4/PWbt96uVKtXtlSvVm68sqmqq2s/fPJZMe72oCD75Q8OxPht/+n9Zw/+u/FRw9OGp612Ry293f61Y912bN1ueE1T9ZpjW56tjZZnu1F7O2qvO+2dnZ5are3LKzuu7XlqtXratHvaaWvH7an1odVoqWmaenklbbjnmDFDTu3u1pZVmfGEd2bMw7z94/v+Mc2uW7GWRMzikZba3Sc6LgAAsJBG6v9vkhqhLNl+QZmJ1wL5MB5eBgT1fxKH9X+wWDis/++98FPn0rv3V+P6/0E+rf5/9Zcof6j+D84+9/r/u5HrRyuiM2/3JJ0fq/7HYlgbfkX+frhijwX1f/Bq6K/ov3j/3noYUP8DAAAAAAAAAAAAAAAAAAAAAHAWPPL9ku/7peQy+Tv8CkF8Pbl23BeNceaMe/wL8Y4C/ecDzqXrN2+JEX5xL7cq4nzZrXVr0WXcnnRcl5L8Gz4fYtGGE3thowbK8qOz260txwlL4f+KiIojtmxIScpD+WF89a3qlQ2NRPnh+Xe7tUxuJcivSyPM35SSPJWev5man5eXXhzIN6UkP9+RtjiyHb+PJfmfb6i++U51JL8Y9kvz+pN9SAAAAAAAmDtT1YiXz+Xh9W+0fjdN1bT2YC0vg+vzo58P9NfX66nr81zpudzpzh0AAAAAgIvCy3/atBzHdr3e2KAok/oU4qONNOVkwpGDIDdFn6HgYRgsH9dnaWCG0x45H/+CxrTDcL2eTD3mJPirIKl3ZrKF61CTkX6vThkk85+is3HSh8D1siefu+16a8F4dKbpDATJx0bj+si1WY88Lkh2zp3U+Zmvv/17tlNk4l17B5teu29MmGkYZEZu2ZvwpP3D9yeOZzn93eL7WX5kBgAAAMCCSIr+opfc8sbpDggAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgAtortukjQlOe44AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAovg/AAD//5h69bA=") r6 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r7 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) fallocate(r6, 0x0, 0x0, 0x1000f4) io_setup(0x7, &(0x7f00000000c0)=0x0) io_submit(r8, 0x2, &(0x7f0000001d00)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, r7, &(0x7f0000000000)="96", 0xfe00}, &(0x7f0000000040)={0x0, 0x0, 0x41, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, 0x0, 0x10000882) umount2(&(0x7f0000000000)='./file0\x00', 0x0) 5.88248032s ago: executing program 3 (id=225): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c3"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) fsmount(0xffffffffffffffff, 0x0, 0x0) 5.87121532s ago: executing program 0 (id=227): inotify_init1(0x80000) r0 = epoll_create1(0x0) r1 = socket$unix(0x1, 0x1, 0x0) close(r1) socket(0x2, 0x3, 0x100000001) setsockopt$sock_int(r1, 0x1, 0x2e, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)={0xa0028000}) open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) pwritev2(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x1f, 0xb, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x17, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = socket$key(0xf, 0x3, 0x2) bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) sendmsg$key(r2, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000280), 0x4) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r6 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) writev(r6, &(0x7f0000000100)=[{&(0x7f0000000080)="82", 0x1}], 0x1) ioctl$SNAPSHOT_CREATE_IMAGE(r6, 0x40043311, 0x0) close(r6) ioctl$LOOP_SET_STATUS64(r5, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x5, 0x1718, 0x0, 0x0, 0x0, 0x0, "ef359f413bb93852f7d6d1ce5d29c3ee5e5ca9000f7c41499dc2aac63a4b78c660e677df701908b9aaa3f6a00400", "036c47c6780820d1cbf7896de1fdcf335263bdbcef549ba197fce47ddfdd753abd9501ce721b6ae9b49600002a00", "b7326736181c208220000000b9000000000000000000f0fffffffff2ff00", [0x0, 0x2f]}) ioctl$FS_IOC_RESVSP(r4, 0x40305829, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x80000003}) 5.837083813s ago: executing program 2 (id=228): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000008000000080000000800000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000100000000000000001800"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c200000ffffffff01"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x8, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = getpid() r3 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3804402, &(0x7f0000000600)={[{@user_xattr}, {@data_err_abort}, {@resuid}, {@errors_remount}, {@norecovery}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7b1}}, {@stripe={'stripe', 0x3d, 0x5}}, {@noinit_itable}, {@nomblk_io_submit}, {@grpquota}, {@nogrpid}]}, 0x1, 0x54f, &(0x7f0000001080)="$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") r4 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x80044940, &(0x7f00000030c0)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000100)='.\x00', 0x1a4203c, &(0x7f00000003c0)=ANY=[@ANYRES64=r5, @ANYRES8, @ANYRESHEX=r6, @ANYRESDEC, @ANYRES32=r3, @ANYRESDEC=r5, @ANYRESDEC=r8, @ANYRES8=0x0, @ANYRES8, @ANYRES64=r7], 0x0, 0x0, &(0x7f0000000000)) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000000b80)={{r5, 0x3, 0x3, 0x1, 0xb97b, 0x9, 0x10000, 0x9, 0x4e4a, 0x3, 0x6, 0x4, 0xf1, 0x6, 0x3}}) setreuid(0xee00, 0x0) r9 = syz_pidfd_open(r2, 0x0) setns(r9, 0x24020000) syz_clone3(&(0x7f00000008c0)={0x14840000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000880)=[0x0], 0x1}, 0x58) open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r11 = socket$key(0xf, 0x3, 0x2) r12 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r11, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0207a20802"], 0x10}}, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) close(r12) syz_usb_connect$cdc_ncm(0x0, 0x0, 0x0, 0x0) r13 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001800)={&(0x7f0000000580)='kfree\x00', r13}, 0x9) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000180)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[], [{@rootcontext={'rootcontext', 0x3d, 'staff_u'}}], 0x6b}}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 5.108043886s ago: executing program 4 (id=230): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000002000000ff06000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000000)='sys_enter\x00', r1}, 0x10) utimes(0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) splice(r2, 0x0, 0xffffffffffffffff, 0x0, 0x6, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f0000000500)=""/180, 0xfffffe47}], 0x1, 0x0, 0x0) r3 = fsopen(&(0x7f0000000200)='securityfs\x00', 0x0) fsmount(r3, 0x0, 0x0) fsconfig$FSCONFIG_SET_FLAG(r3, 0x0, &(0x7f0000000280)='sync\x00', 0x0, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010126bd7000fbdbdf252e00010008200300", @ANYRES32=0x0, @ANYBLOB="0800350000000000040093000a000600455f3dddebf700000400e200040005010a00060050505050505000000800c9006c090000"], 0x50}, 0x1, 0x0, 0x0, 0x20008080}, 0x8) personality(0x400000) openat$dir(0xffffff9c, &(0x7f0000000340)='./cgroup.cpu/cgroup.procs\x00', 0x2c0140, 0x80) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000100)=0x3ff) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x7c00) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r5, 0x29, 0x4b, &(0x7f0000000100)=0x4, 0x4) bind$inet6(r5, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @local, 0x2}, 0x1c) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="4000000010000104000000000000000000ff0000", @ANYRES32=0x0, @ANYBLOB="2b03000000000000200012800b00010067656e657665000010000280060005004e200000040006"], 0x40}}, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mount$9p_tcp(0x0, &(0x7f0000000300)='./cgroup.cpu/cgroup.procs\x00', &(0x7f00000004c0), 0x8, &(0x7f0000000880)=ANY=[@ANYBLOB='trans=tcp']) 4.682605781s ago: executing program 4 (id=231): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x20, 0x12504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x7602}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_type(r0, &(0x7f00000001c0), 0x2, 0x0) write$cgroup_type(r1, &(0x7f0000000280), 0x9) r2 = openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000c40), 0x12) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) ustat(0xb, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1800403, &(0x7f0000000940), 0x0, 0x5ae, &(0x7f0000000180)="$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") sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYRES16=0x0], 0x28}}, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) r6 = openat$cgroup_ro(r3, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r6, &(0x7f0000000200)=0x1, 0x12) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_procs(r7, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r8, &(0x7f0000000080), 0x12) 4.162631066s ago: executing program 1 (id=232): socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x10, 0x0, 0x0, 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x8, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280), 0x0, 0x10, 0x6, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r5}, 0x10) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) 3.270750142s ago: executing program 1 (id=233): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = socket$tipc(0x1e, 0x5, 0x0) r2 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') sendmsg$tipc(r1, &(0x7f0000000280)={&(0x7f0000000040), 0x10, 0x0}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000001c0), 0x4201, 0x0) r5 = io_uring_setup(0x3538, &(0x7f0000000300)) close(r5) clock_nanosleep(0x8, 0x0, &(0x7f0000000000)={0x77359400}, 0xfffffffffffffffe) sendmsg$NFT_MSG_GETSET(r4, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000400)={&(0x7f00000005c0)=ANY=[@ANYBLOB="280000000a0a010300000000000000000000000a0900010073797a300000000008000640ffffff002c47316a647504eef2c2173811e129abf161424f8de2a76327ea"], 0x28}, 0x1, 0x0, 0x0, 0x40004}, 0x4000100) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r7, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000340)={0x2c, r6, 0x10ada85e65c25359, 0x0, 0x8000000, {{0x6b}, {@val={0x8}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5}]}]}]}, 0x2c}}, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(r4, &(0x7f0000000680)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000540)={&(0x7f00000006c0)={0xb0, r6, 0x20, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x5b}, @val={0x8}, @void}}, [@mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "9217979b0e7e8b9c954a27a42e3067304406cf16f2446de3"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "cc9fc6eeb6291ce3181dc09a26f7f52c7d130d138673f871"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "22f76e6c06573b6d4580d4277c03e53fd1d65eea95c1a01a"}, @NL80211_ATTR_MNTR_FLAGS={0x1c, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x10, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}]}], @NL80211_ATTR_MESH_ID={0xa}]}, 0xb0}, 0x1, 0x0, 0x0, 0x2014}, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x14, r9, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@void, @void}}}, 0x14}}, 0x4000054) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000400)={&(0x7f0000000500)=ANY=[@ANYRES16=r9, @ANYBLOB="01002cbd7000ffdbdf251500000008000300", @ANYRES32=r10], 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x20000800) 3.202213348s ago: executing program 1 (id=234): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(0x0, 0x0, 0xdfefffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$ITER_CREATE(0xb, 0x0, 0x0) write$cgroup_int(r1, 0x0, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sched_switch\x00', r3}, 0x10) socketpair(0x1, 0x1, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) bpf$MAP_LOOKUP_BATCH(0x19, 0x0, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, 0x0, 0x0) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}}, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r6, 0x0, 0x0) syz_clone(0x80, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0) syz_io_uring_setup(0x4b5, 0x0, 0x0, 0x0) 3.17271704s ago: executing program 0 (id=235): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={0x0, r0, 0x0, 0x4}, 0x18) r1 = socket$kcm(0x2a, 0x2, 0x0) sendmsg$kcm(r1, 0x0, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x1) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000380)='\x00', 0x89901) fchdir(r2) close(r2) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='iso9660\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) process_vm_readv(r3, &(0x7f0000001800)=[{0x0}, {&(0x7f00000005c0)=""/176, 0xb0}, {0x0}], 0x3, 0x0, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c41, 0x10) flock(r4, 0x5) r5 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) flock(r5, 0x2) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) flock(r6, 0x2) sendmsg$kcm(r1, &(0x7f0000000740)={&(0x7f0000000040)=@qipcrtr={0x2a, 0xffffffff, 0x1}, 0x80, 0x0}, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) utime(&(0x7f0000000640)='./file0\x00', 0x0) 2.690939501s ago: executing program 2 (id=236): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY(r0, 0x0, 0x1, &(0x7f00000002c0)=0x2, 0x4) sendmsg$802154_dgram(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x24, @short}, 0x14, &(0x7f0000000080)={0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000900)=ANY=[@ANYBLOB="b400000002000000de0a0000000000006201a4000000000095000000000000006681fabfa7afdea451352385fd277a26b1928972a90713774dee000000008abeded0f241d9e16380276de7f845fb77f3942b1b2f835d2704d284651cec42865a01e610e1d8ebed3bca771dd8dfc94bf8454e0ba5feb0a8fb9c709340a7"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xb5, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r1 = bpf$ITER_CREATE(0x21, &(0x7f00000010c0), 0x8) pipe(&(0x7f0000000140)={0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x2000480, &(0x7f0000000280), 0x1, 0x76a, &(0x7f0000001b00)="$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") r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000001140)=ANY=[@ANYBLOB="0500007a99e0636200042720c7b029889cd2696900000000000000248735e313c97100", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x10) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xc3, 0x0, 0x0, 0x0, 0x0, 0x100000200, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141042, 0x0) pwritev2(r7, &(0x7f0000000000)=[{&(0x7f00000002c0)="ca82c66ce754b52c27d8c3045e05174fb2cd83904c6405f3cefa1ee46ab4af638eade922030a3c34a0fff79be39adb32c6f5f8151cead882c6b9962d1de6a8c4", 0x40}], 0x1, 0x1, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r4, 0x40305829, &(0x7f00000000c0)={0x17c04, 0xffffffffffffffff, 0x0, 0x100000001}) close(r3) splice(r2, 0x0, r3, 0x0, 0x80000001, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000000c0)=0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r9}, 0x10) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002ac0)=@newtaction={0x88c, 0x30, 0xffff, 0x0, 0x0, {}, [{0x878, 0x1, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xcfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x40, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x0, 0x0, 0x8, 0x10000, 0x0, 0x0, 0x0, 0x6, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x3, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x20000000, 0x0, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0xe53c0000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x5, 0x0, 0x0, 0x0, {0x3, 0x0, 0x0, 0x0, 0x0, 0x5}, {0x4, 0x2, 0x0, 0x0, 0x0, 0xff}}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x88c}}, 0x0) sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16, @ANYBLOB="010000000000000000000200000008000100"], 0x1c}}, 0x0) connect$nfc_raw(r1, &(0x7f0000001100)={0x27, r8, 0x1, 0x4}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@newtaction={0xeb4, 0x30, 0x1, 0x0, 0x0, {}, [{0xea0, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{}, 0x4}}]}, {0x4}, {0xc}, {0xc}}}, @m_pedit={0xe50, 0x2, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x0, 0x0, 0x20000000}, 0x8}, [{}, {0x1}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0xfffffffe}, {}, {}, {}, {}, {0x0, 0x0, 0x2}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {0x0, 0x0, 0x23d5, 0x8}, {}, {}, {}, {}, {}, {}, {}, {}, {0x400}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x3}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xeb4}}, 0x0) 2.662460163s ago: executing program 3 (id=226): r0 = epoll_create1(0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000640)={{{@in=@loopback, @in=@local, 0x0, 0x0, 0x0, 0x8001, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@remote, 0x0, 0x32}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @broadcast}}}, 0xe8) sendmmsg$inet6(r1, &(0x7f0000000300)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x0, @dev}, 0x1c, 0x0}}], 0x1, 0x0) r2 = syz_io_uring_setup(0x5169, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000240)=0x0) syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd=r0}) io_uring_enter(r2, 0x9f7, 0x0, 0x0, 0x0, 0x0) r5 = syz_io_uring_setup(0x320e, &(0x7f0000000280)={0x0, 0x0, 0x10100}, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) r8 = io_uring_setup(0x668f, &(0x7f0000002000)) r9 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r9, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r9, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000080)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x64}, {0x6}]}, 0x10) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a40)=ANY=[], 0x38}}, 0x0) r11 = io_uring_register$IORING_REGISTER_PERSONALITY(r8, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r8, 0x11, 0x20000000, r11) syz_io_uring_submit(r6, r7, &(0x7f0000000480)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000440)='./file0\x00'}) io_uring_enter(r5, 0xb15, 0x0, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r5, &(0x7f0000000400)={0x20000004}) r12 = socket$inet6(0xa, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r12, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00', 0x800, 0x0, 0x103, 0x1}, 0x20) sendmsg$inet6(r12, &(0x7f0000000100)={&(0x7f0000000040)={0xa, 0x4e24, 0x0, @dev}, 0x1c, 0x0, 0x0, &(0x7f0000000200)=[@hopopts_2292={{0x60, 0x29, 0xb, {0x0, 0x8, '\x00', [@hao={0xc9, 0x10, @private2}, @hao={0xc9, 0x10, @loopback}, @calipso={0x7, 0x20, {0x0, 0x6, 0x0, 0x0, [0x0, 0x0, 0x0]}}]}}}, @dstopts_2292={{0x18}}, @hopopts={{0x18}}], 0x90}, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000000740)="e4a313165a846611407d3ba2690ca8295ee545820bda55217ef16c767951a0b139388b72c93e0997e47c856801abc4c9fae1a62b9e15ecd7a4b9ce2bd3658af31c287414aacc33a706bc8bd5b70f153a2c6d1387f5decf1ecd5639d90d369e76311807e032864d381df62d3c38d7b148f04994918b3c70a43af455cc27e1a8d646a9436957321a9f6c45a84746b672037d43", 0x92, 0x0, &(0x7f0000000140)={0x2, 0x4e23, @remote}, 0x10) socket$key(0xf, 0x3, 0x2) r13 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r13, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={0x2, 0xf, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @broadcast}}, @sadb_x_policy={0x8, 0x12, 0x0, 0x1, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@empty, @in6=@private2}}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x80}}, 0x0) 2.532950844s ago: executing program 2 (id=237): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000027c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa566e86f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2ed0300000000000000af99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7580400b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14008c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000006da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3ab60fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c0ef815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaad1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4978ea8e4aa37014191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69922050000f5f76015e6009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762e122428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff2a49c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6eba3bd4c440e6e2172e3fcc01b8babb757b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302be7ff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa165099c5ed032b48ea12d8e0588dc52702e40840600000068d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd231088e570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c65070041e69dd1bc55258789b24052137e9637f3efbab71720f88cf573fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3e01000080ca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb423c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50261a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953e88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf94a1b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a72e1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e48701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9d3fded31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb9e0c75769f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867857ed13a4fa4ae033a09673866cd77f4bcdaaa05207166b19a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d9a0e06da200481cde8bf475bc3e1fe9c0b4a4a268921738938aa9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9ea81232fbef665f6212f875b2a000000000000000000000000000000000000000000000000000000bb60bc1f1635caf0ca9eabf804adc94e0a73923976299c7ac285542e5de1dd14183f1bb171eabe19fe98f551e1b635300d8e38f07eda29341535e532a6d64ed36fac9c77827bf85ac369eac8879e515b58a03438561c5e78157649c6d45e7e621b79d724e277f1ee49e5b63e81180626a73510be26082a097de42b016336707866d422a93e01c1cbe0cefd4a89dc24b0d7f549908b8620ffd7d900a0a96a381fdd763b39f0bc0af5faf593c5d39fdf43430e4b7c23b5cf691792248cfb9ec9f882dd19a9f6e9426b4f88fe14487942bb34e585083f7b98900682e2683922a94e2f0baecc00f74071d025220bcdbc7f5575ce72981e918681b5a0b1ee9af749885fd8cefb9e182b326eaebad4616647fe1c8c16e42e123c9651f634e962219f861bfa739629a05857d944789f930fc518b0df71bb3cd5c429e2d31ee164d109668bce450d30e4b65ce26dffdbce33e9a3fd696010ac110b57784a8250cd02537d53cc088fa8c7012aaff8be7b147972b8da1a0e8cd3777bed99e0e1d6c6327b993e87546cbaae485b8fc28d6d3b69be50eec7412840f3db9e38f16275e7fb92f7e4b98512746384d2906f71fdedb57154d79c61c6cab887a37c57efc6c86f3f755b334131afb9"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r1}, 0x10) rt_sigprocmask(0x0, &(0x7f0000000480)={[0xfffffffffffffffd]}, 0x0, 0x8) r2 = socket$nl_route(0x10, 0x3, 0x0) connect$netlink(r2, &(0x7f0000000280)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc) sendmsg$nl_route(r2, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x500}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c00000021000f0000f901000000000002"], 0x1c}}, 0x0) socket(0x23, 0x2, 0x9) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x1) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000000)={'wlan1\x00', {0x2, 0x0, @local}}) pipe2(&(0x7f0000001cc0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r7}, 0x10) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r5, @ANYBLOB=',uname=']) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x891c, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r8 = openat$sysfs(0xffffff9c, &(0x7f0000000040)='/sys/kernel/notes', 0x0, 0x0) fsetxattr$security_capability(r8, &(0x7f00000001c0), 0x0, 0x0, 0x1) 2.516000066s ago: executing program 3 (id=238): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x76, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) mount(0x0, 0x0, 0x0, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) symlink(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)='./file1\x00') open(&(0x7f0000000240)='./file1\x00', 0x103800, 0x38) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x2010810, &(0x7f0000000f80)={[], [{@seclabel}, {@appraise_type}, {@dont_appraise}, {@appraise_type}, {@smackfshat={'smackfshat', 0x3d, '+\x04\x00'}}, {@fsuuid={'fsuuid', 0x3d, {[0x65, 0x31, 0x33, 0x61, 0x65, 0x64, 0x62, 0x33], 0x2d, [0x56, 0x33, 0x6a, 0x63], 0x2d, [0x64, 0x61, 0x31, 0x38], 0x2d, [0x55, 0x31, 0x34, 0x33], 0x2d, [0x32, 0x59, 0x61, 0x34, 0x36, 0x66, 0x5, 0x31]}}}, {@func={'func', 0x3d, 'KEXEC_KERNEL_CHECK'}}, {@defcontext={'defcontext', 0x3d, 'system_u'}}, {@obj_type={'obj_type', 0x3d, '\x0f#^'}}, {@obj_type={'obj_type', 0x3d, ')[*]\'\\!'}}, {@smackfstransmute={'smackfstransmute', 0x3d, ' \xd0\x94\xeaD\xce\xcd\x99\xed\x9d\x9e\xbcx*2+\x060\x1d\x11\xcf\xa3(\xd0\xa7Q\xf0\xc0\x84X\x9ek\xd0\x10\xb5\xa9\x9c\xcd\xf08`\xb1\x7f\xf8\x9c\xe9f\xcdaR+\x18\x0e1d\x197\x84\xf8\xb3mP\x81/\xb9\xb2J\xda\\\xa4d\xbf]R\xebC\xae9\xe0\xdeaIeu\xa5m\x1d\x16\x9e\xa9\f\x85\x8a\tn#\x82\xd1\xd9_\x95\xcd\b\x80\xfa@DD6\xc5\x03_\x00'}}, {@euid_eq}]}, 0x0, 0x524, &(0x7f00000014c0)="$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") r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) r2 = syz_open_procfs$pagemap(0x0, &(0x7f0000000040)) ioctl$PAGEMAP_SCAN(r2, 0xc0606610, &(0x7f00000004c0)={0x60, 0x0, &(0x7f0000036000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, &(0x7f0000000280)=[{0x0, 0xffffffffffffffff}], 0x1, 0x4, 0x0, 0x0, 0x26}) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000100)=0x8, 0x12) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r3}, 0x10) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r5, 0x0, 0xf3a, 0x0) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x208, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x8000000}, 0x0, 0xafffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$pppl2tp(0x18, 0x1, 0x1) r7 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r6, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r7, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, 0x32) writev(r6, &(0x7f00000002c0)=[{&(0x7f0000000200)}], 0x47) 2.301433494s ago: executing program 0 (id=239): syz_mount_image$vfat(&(0x7f0000000240), &(0x7f00000000c0)='./file0\x00', 0x1400, &(0x7f0000000580)={[{}, {@numtail}, {@fat=@usefree}, {@shortname_winnt}, {@utf8}, {@uni_xlateno}, {@shortname_mixed}, {@shortname_win95}, {@uni_xlateno}]}, 0x0, 0x288, &(0x7f0000000800)="$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") r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) listxattr(0x0, 0x0, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x8, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f00000003c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) ioctl$AUTOFS_IOC_FAIL(r0, 0x4c80, 0x7000000) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r5) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r6 = inotify_init1(0x0) fcntl$setown(r6, 0x8, 0xffffffffffffffff) fcntl$getownex(r6, 0x10, &(0x7f0000000140)={0x0, 0x0}) r8 = syz_open_procfs(r7, &(0x7f0000000600)='fd/4\x00') open_by_handle_at(r8, &(0x7f0000000380)=ANY=[@ANYBLOB="5000000002000000c801"], 0x410902) 1.983224561s ago: executing program 2 (id=240): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xcc0984f9ead32b32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000060000000000000000181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) mkdir(&(0x7f0000000000)='./file0\x00', 0x10) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180)='rpc_pipefs\x00', 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x20000002) umount2(&(0x7f0000000000)='./file0\x00', 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r1}, 0x10) capset(0x0, 0x0) munlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102361, 0x18fd9}], 0x1, 0x4, 0x5) unshare(0x6a040000) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000300)={0x0, @in={{0x2, 0x4e22, @empty}}}, 0x0) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f0000000280)={r3, 0x7, 0x6}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_io_uring_setup(0x4b6, &(0x7f00000003c0)={0x0, 0x0, 0x400, 0x1}, &(0x7f0000ff0000), &(0x7f0000000000)) 1.854729052s ago: executing program 1 (id=241): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r1, 0x0, 0xf3a, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000002600)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r6}, 0x10) socket$netlink(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000003c0)={'ip_vti0\x00', &(0x7f00000002c0)={'gre0\x00', 0x0, 0x0, 0x0, 0xfffffff8, 0x401, {{0x1f, 0x4, 0x0, 0x0, 0x7c, 0x65, 0x0, 0x6f, 0x2f, 0x0, @multicast1, @local, {[@timestamp={0x44, 0xc, 0x8b, 0x0, 0x5, [0x0, 0xffff]}, @cipso={0x86, 0x5b, 0x2, [{0x6, 0x2}, {0x5, 0x11, "7e114c0976b193497da8ba1d037381"}, {0x7, 0x3, "d9"}, {0x1, 0x9, "54de7c8af5c63c"}, {0x0, 0x3, "b9"}, {0x3a3b9bb582dcac88, 0x10, "233a1587b0abdb6c42d231379869"}, {0x6, 0xe, "8d5d4a84d5c76356bebc4c3f"}, {0x6, 0x4, "1646"}, {0x1, 0x4, "5bb3"}, {0x7, 0xd, "13286c2021182f33d3e577"}]}]}}}}}) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) r8 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r7, &(0x7f0000000100)) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x0, 0x0, 0x0, 0x41000004, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x13}, &(0x7f0000000240)=0x0) timer_settime(r9, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) futex(&(0x7f000000cffc), 0x800000000006, 0x0, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000500)={'team0\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r5, 0x890c, &(0x7f0000000600)={@private0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @empty, 0x15f, 0x11, 0x45, 0x400, 0x9523, 0x10200, r10}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) recvmmsg(r5, &(0x7f000000a800), 0x0, 0x0, 0x0) tee(r0, r4, 0xaf5, 0x0) write$binfmt_elf64(r2, &(0x7f0000003380)=ANY=[], 0x18c6) 1.623159252s ago: executing program 3 (id=242): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x0, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) write$cgroup_type(r0, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xe, 0x4, 0x4, 0x9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) socketpair(0x1, 0x2, 0x0, &(0x7f00000002c0)) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=@bloom_filter={0x1e, 0x7, 0x7, 0xfa2, 0x3014, r1, 0x3, '\x00', 0x0, r0, 0x3, 0x4, 0x0, 0x3, @void, @value, @void, @value}, 0x48) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000d80)=@o_path={&(0x7f0000000a80)='./file0\x00', 0x0, 0x8, r3}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) sendmsg$inet(r0, &(0x7f0000000980)={&(0x7f00000005c0)={0x2, 0x4e22, @local}, 0x10, &(0x7f0000000940)=[{0x0}], 0x1}, 0x48810) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000009c0), 0x6}, 0x0, 0x0, 0x7, 0x0, 0x58c5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = syz_clone(0x10000000, 0x0, 0x0, &(0x7f00000001c0), &(0x7f0000000280), &(0x7f0000000300)) syz_open_procfs$namespace(r5, &(0x7f0000000380)='ns/user\x00') socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x89a0, &(0x7f0000000080)) 1.618212122s ago: executing program 4 (id=243): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x7, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="160a0000000000006110ac000000000095000f00000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001a80)=@base={0xe, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000100000007b8af8ff00000000bfa200000000000007020000faffffffb703000008400000b70600000000feff850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) io_setup(0xeb0, &(0x7f0000000140)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x1c, r4, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$xdp(0x2c, 0x3, 0x0) r5 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x80140, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x0, 0x0, 0x0, 0x4, 0xffffffffffffffff, 0x0, 0x400}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x14}, 0x14}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r8, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x3c}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket(0x1, 0x803, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001ac0)=@newlink={0x44, 0x10, 0x609, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88a8ffa7}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r11}]}, 0x44}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r0) 1.596098354s ago: executing program 2 (id=244): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000500)={0xa, 0x2, 0x0, @empty}, 0x1c) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) listen(r0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r2, &(0x7f00000001c0)={0x2, 0x2, @local}, 0x10) r3 = accept(r0, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r3) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0a00000004000000ff0f00000700000000000000", @ANYRES32, @ANYBLOB="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", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0xa, 0xc, &(0x7f0000000340)=ANY=[@ANYRESHEX=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f1, @void, @value}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='hugetlbfs\x00', 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r5) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r6 = inotify_init1(0x0) fcntl$setown(r6, 0x8, 0xffffffffffffffff) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7020000000000a785000000860000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f00000005c0)='kmem_cache_free\x00', r8}, 0x10) fcntl$getownex(r6, 0x10, &(0x7f0000000140)={0x0, 0x0}) r10 = syz_open_procfs(r9, &(0x7f0000000600)='fd/4\x00') open_by_handle_at(r10, &(0x7f0000000200)=ANY=[@ANYBLOB="0c0000000100000030"], 0x9e4b) 1.569567636s ago: executing program 3 (id=245): perf_event_open(&(0x7f0000000400)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000, 0x1a200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffffffffffffffff, 0x8}, 0x20, 0x1ff}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x19a3, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) socket(0x840000000002, 0x3, 0xfa) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x2000000, &(0x7f0000000580)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@dfltgid}], [], 0x6b}}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'vlan0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7040000000000008500000057"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x3, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r7}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000100)='net_dev_xmit\x00', r8}, 0x10) socket$netlink(0x10, 0x3, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r9}, 0x10) r10 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000001440)=@newqdisc={0x45c, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r11, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x1010000, 0x6, 0x1, 0xa2e5, 0x3, 0x3ff, 0x7, 0x3, 0x4, 0x2, 0x9, 0xe0, 0x1, 0x9d9, 0xffffffff, 0x1, 0x100, 0x5, 0x80, 0x8, 0x3, 0x0, 0xc, 0x80000000, 0x7f, 0x1, 0x1, 0x4, 0xc0000000, 0x3, 0xc4d, 0x6, 0x1, 0x5, 0xfff, 0x1, 0x3, 0xde71, 0x7fffffff, 0x5, 0x1, 0x5, 0x1, 0x0, 0x3, 0x40, 0xe, 0xfffffffd, 0x6, 0x0, 0x9, 0x8, 0x51, 0x6, 0x9, 0xd, 0x0, 0x5, 0x81f, 0x9, 0xa20b, 0x1ff, 0x2, 0x9, 0x401, 0x0, 0x4, 0xfffffff6, 0x7, 0xd, 0x6, 0x9, 0x2800, 0x80000001, 0x1, 0x1d48, 0x200, 0x7, 0xfffffffc, 0x8, 0xffff, 0xa, 0x5, 0x3, 0x3, 0x0, 0x4, 0x2, 0x6, 0x6fa, 0xf57, 0x1, 0x26, 0x6, 0x8000, 0x4, 0xfffffffc, 0x1000, 0x3, 0x6, 0x49, 0x3, 0x5, 0x80000000, 0x9, 0x41, 0x6, 0x3, 0x5, 0xfffffff8, 0x2dd, 0x0, 0x1, 0x0, 0x387, 0xa7e, 0xffffffff, 0x80, 0x101, 0x40, 0x9, 0xd74e, 0x5, 0x0, 0x400, 0xc9, 0x4, 0x3, 0x7cb, 0x2, 0x19, 0xcb, 0x7, 0x5, 0x81, 0x2, 0x3ff, 0x8, 0x3, 0x7, 0x9, 0x7fffffff, 0x1000, 0xf42c, 0x1, 0x0, 0x289, 0x7, 0xf, 0x4, 0x7, 0xfffff001, 0x800, 0x0, 0x3, 0xfffffffd, 0x4, 0x6, 0x3, 0x8, 0x3, 0x1, 0x1, 0x8, 0xfffffff7, 0x1, 0xfffffffb, 0x9, 0x8, 0x7, 0x3, 0x686, 0x2, 0xf, 0x2, 0x8, 0x0, 0xfffffffb, 0x7c, 0x7, 0x2, 0xfff, 0x5, 0xffffff01, 0x6, 0x6, 0xffffff80, 0x6, 0x0, 0x401, 0x23, 0xb, 0x6, 0x6, 0x5, 0x7, 0x8, 0x9, 0x7, 0x7f, 0xc, 0x4a1, 0x40, 0xa63, 0x550048ac, 0x5, 0x5, 0x9, 0x6, 0x0, 0x4, 0x2, 0xf7db, 0x7, 0x4, 0x8, 0x7, 0x3, 0x0, 0x71b, 0x90f9, 0x7fff, 0x4, 0x0, 0x5, 0x862, 0x0, 0x7, 0x7, 0x4, 0x21e6, 0x2, 0xffffffff, 0xfb, 0x4, 0x4, 0x9, 0x8, 0x4, 0x9, 0x8, 0x9, 0x883aba1e, 0x22, 0x5c2e, 0x3, 0x0, 0x80, 0x336, 0x9, 0x3ff, 0x8, 0x2, 0xc8, 0x4, 0x7b]}, @TCA_TBF_PARMS={0x28, 0x1, {{0x6, 0x0, 0x1, 0x1, 0xf000, 0x2a112000}, {0x3, 0x0, 0xcd86, 0x10, 0x1, 0x6}, 0x5, 0x80000001, 0x40f}}]}}]}, 0x45c}, 0x1, 0x0, 0x0, 0x44040021}, 0x0) bind$packet(r3, &(0x7f0000000040)={0x11, 0x0, r4, 0x1, 0x4, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x15}}, 0x14) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r3, 0x8982, &(0x7f0000000040)={0x1, 'vlan0\x00', {}, 0x6}) 1.416888039s ago: executing program 0 (id=246): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000001c0)={{{@in=@local, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in=@remote}}, &(0x7f0000000040)=0xe8) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000004c0)={{{@in, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6=@mcast2}}, &(0x7f0000000080)=0xe8) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x2810000, &(0x7f00000004c0)={[{@noinit_itable}, {@noquota}, {@barrier_val={'barrier', 0x3d, 0x2}}, {}, {@block_validity}, {@dioread_nolock}, {@noquota}, {@errors_continue}, {@delalloc}, {@user_xattr}, {@quota}]}, 0x4, 0x54f, &(0x7f0000000b00)="$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") write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, 0x0, 0x0) lchown(&(0x7f00000044c0)='./file0\x00', 0x0, 0xffffffffffffffff) getresuid(&(0x7f00000000c0), &(0x7f0000000140), &(0x7f00000002c0)=0x0) syz_open_procfs(0x0, &(0x7f00000002c0)='mounts\x00') r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x1, 0x40, 0x40, 0x41, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000180), 0x1003, r4}, 0x38) bpf$MAP_LOOKUP_ELEM(0x4, &(0x7f0000000b80)={r4, &(0x7f00000014c0)='o', &(0x7f0000000b40)=""/31}, 0x20) r5 = getegid() r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x40, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x400) getresgid(&(0x7f0000000140)=0x0, 0x0, &(0x7f0000000200)) fchown(r6, r7, r8) r9 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(0xffffffffffffffff, r10) getresgid(&(0x7f0000000300)=0x0, &(0x7f0000000340), &(0x7f00000005c0)) getgroups(0x1, &(0x7f0000000600)=[0xee00]) lstat(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fsetxattr$system_posix_acl(r0, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000800)={{}, {0x1, 0x4}, [{0x2, 0x0, r1}, {0x2, 0x1, r2}, {0x2, 0x7, r3}], {0x4, 0x6}, [{0x8, 0x3, r5}, {0x8, 0x0, r8}, {0x8, 0x1, r10}, {0x8, 0x3}, {0x8, 0x2, r11}, {0x8, 0x5, r12}, {0x8, 0x0, r13}, {0x8, 0x7, r14}, {0x8, 0x2, r15}], {0x10, 0x1}, {0x20, 0x4}}, 0x84, 0x0) ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x8108551b, &(0x7f0000000380)={0x0, 0x0, "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"}) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f0000000180)) 1.41631679s ago: executing program 4 (id=247): bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000300000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000000)={'netdevsim0\x00', &(0x7f0000000400)=@ethtool_flash={0x33, 0x0, '.\x00'}}) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, &(0x7f0000000340)={0x2, {0x2, 0x1, 0x0, 0x6, 0x8001, 0x2}}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000001c0)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r7 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r7, 0x4c80, 0xb) ioctl$LOOP_CTL_REMOVE(r7, 0x4c81, 0xb) sendto$inet6(r6, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) 1.312180298s ago: executing program 0 (id=248): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) preadv(0xffffffffffffffff, &(0x7f0000002600)=[{&(0x7f0000000200)=""/4096, 0x1000}, {&(0x7f0000002680)=""/158, 0x9e}, {&(0x7f0000001200)=""/217, 0xd9}, {&(0x7f0000001300)=""/211, 0xd3}, {&(0x7f0000001400)=""/219, 0xdb}, {&(0x7f0000001500)=""/220, 0xdc}, {&(0x7f0000001600)=""/4096, 0x1000}, {&(0x7f0000000180)}], 0x8, 0x1, 0x9) r0 = syz_open_dev$evdev(&(0x7f0000000200), 0x200, 0x0) ioctl$EVIOCSCLOCKID(r0, 0x40084503, &(0x7f0000ffcffc)) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x1208002, &(0x7f0000000400)={[{@grpquota}, {@delalloc}, {@init_itable_val={'init_itable', 0x3d, 0xf}}, {@debug}, {@dioread_nolock}, {}, {@nomblk_io_submit}, {@nouid32}]}, 0x1, 0x5f5, &(0x7f0000000bc0)="$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") lchown(&(0x7f00000006c0)='./file0\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x0, &(0x7f0000000c00), 0x1, 0xb80, &(0x7f0000000c40)="$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") r3 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) r4 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) write$selinux_attr(r3, &(0x7f0000000100)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=@base={0x12, 0x4, 0x8, 0xb, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) rmdir(&(0x7f00000001c0)='./cgroup/../file0\x00') 962.870248ms ago: executing program 1 (id=249): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd608a37f200142c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa06000003"], 0x0) syz_extract_tcp_res$synack(0x0, 0x1, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000000240)={&(0x7f0000000040)=@in6={0xa, 0x4e22, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xac2}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000100)="8a67ad1e0ee25b0170d39a4ad23601c873092e50225dab8bfbec7cff8cd7cffc7c0e52fb20fc2d", 0x27}, {&(0x7f0000000440)="fa89c2a50cad30356c7f40680fe6543a1e8a95e2fd29c95c737d3cb969680205b9f76f0a40485de5819cf4e1e73afd1350bf851a3d2eb589ae96e3370c4fc1f8c01fcf8ae7864b79309496b0363c8fa3fa8040be53166d15823e96dd294b8c8916b36d011adaa954e6b18ee6abfceef3aba60a146908aec507365c3bbc32a97ca91cc8b1028b36fb2be27fae2c8758ccae37a08ea53c26c1d2f7dad85dffea1e57b36a1beb93965738980c31f8bffa35d3be", 0xb2}, {&(0x7f0000000780)="75e878a1764dbf5334cfd4a904a1b01f598d11e6cc06aa95abe48483965011cd915596a71fba1bdb506779412d71521af92455d38d5dc7931bdb70da9c2e932c31e86f77553e4185d8322d50c6beaebc1df3b538dcec60567666748d40e7afaa394186fbe4e10bde14398c3f31c7e5f5fa71c8e0e5d9dc42857975658a1f499344c08e78b541338e428e9dd1cc09665bc404bee20dcb304a8443bd532288dfc51fa73f3dd92cdbe02adc34ff973dbdee35b2cd330a86e8e72e3a434c1741099f9547372b1041026f18c68f2720f7632db763661d74e1cfb1776bcdb2ede2199364261d5051bdaaad3a42fe18d6e76e38de4f7b69c3", 0xf5}, {&(0x7f0000000880)="48368497fd2fd7d0274b26da969546be0523bb535a4bc5212a9a2b2ae8ead461971b71ec1aa03ce88ad8442fe186208bcf40344f293458f597a152667810a213d8eea1f30c8697b13ab7ebb5275ecde7529bdbe0e258e10e62d94e285e89f28fcd6c34a34c6cbfdb860eaa4cf6b734d4e62fa405ce42f0fe0338d8ede2a2b3dd7e2dae691d480c80621ee6efc735ddb35814bf37c12011064eefde9a12edbe892e0a9d5da4d962d8d356b90209f9cefe373d4715c7958cf65514be7e413bc23564fbbe94793ae6b791254b6fc3f050e934f43bbc", 0xd4}], 0x4, &(0x7f0000000200)=[@prinfo={0x18, 0x84, 0x5, {0x0, 0x31f8}}], 0x18, 0x40000000}, 0x800) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040), 0x208e24b) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r2, &(0x7f00000001c0)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x1b, 0x2, 0x1, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) getpid() r4 = epoll_create1(0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/wakeup_count', 0x0, 0x0) preadv(r5, &(0x7f0000000080)=[{&(0x7f0000000300)=""/229, 0xe5}], 0x1, 0x0, 0x0) epoll_pwait(r4, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) ioctl$SIOCSIFHWADDR(r3, 0x8924, &(0x7f0000000100)={'veth1_virt_wifi\x00', @broadcast}) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b70500000000000061107b00000000000700000000000000"], &(0x7f00000002c0)='GPL\x00', 0x5, 0xbc, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080), 0x67, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x20c092, &(0x7f0000000080)={[{@data_err_abort}]}, 0x8, 0x513, &(0x7f0000000c00)="$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") lsetxattr$system_posix_acl(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000000)='system.posix_acl_access\x00', 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) sendmsg$unix(0xffffffffffffffff, &(0x7f0000002400)={&(0x7f00000001c0)=@file={0x0, './file0\x00'}, 0x6e, 0x0}, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x8914, &(0x7f0000000080)) 883.592855ms ago: executing program 0 (id=250): perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x34, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sync() socket$nl_netfilter(0x10, 0x3, 0xc) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f00000002c0)='cdg\x00', 0x4) listen(r2, 0x0) close(r2) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10) r4 = perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x14801}, 0x0, 0x0, 0xffffffffffffffff, 0xd) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x40082406, &(0x7f0000000540)='cpu&00\t||') fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46800) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000580)={{{@in6, @in6=@ipv4={""/10, ""/2, @multicast1}}}, {{@in6=@mcast1}, 0x0, @in=@dev}}, &(0x7f0000000200)=0xe8) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex_waitv(&(0x7f0000001080)=[{0x3, &(0x7f0000001040)=0x3, 0x82}], 0x1, 0x0, 0x0, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x2, 0xc, 0x0, 0x0, 0x49, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 677.411252ms ago: executing program 2 (id=251): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000005c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) bind$unix(r4, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r4, 0x0) accept4$unix(r4, &(0x7f0000000080), &(0x7f0000000000)=0x6e, 0x80800) connect$unix(r3, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000280)={0x7, 0x0}, 0x8) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000340)=r5, 0x4) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000000000533e61af00"], 0x48) r7 = open_tree(0xffffffffffffff9c, 0x0, 0x0) openat(r7, &(0x7f00000000c0)='./file0\x00', 0x6a1c2, 0x50) socket$nl_netfilter(0x10, 0x3, 0xc) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r8}, 0x10) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x67, 0x0, 0x0, 0x0, 0x0, 0x6187, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x42000000) r9 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r9, &(0x7f0000000140)='asymmetric\x00', &(0x7f0000000440)=@secondary) 538.777954ms ago: executing program 4 (id=252): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=ANY=[@ANYRESDEC=0x0, @ANYRES32, @ANYRESOCT, @ANYRES32=0x0, @ANYBLOB="b6e7c5b7e23456e16e0459036f069d7c432c8d82a450cb3110e4c3f857639a1dbc3c7424612a55a20713ef8e105f1df38733f8f378fa27b9e420bbc3e5845ed5b46bf446c28cc90ba3471af1a91ee8aac178368bf1a6ec42ba6cdf4187c202905fafd004308c5d756dd101b960695b046de6211d535f6c75ec82ef09df2bb7ab8fa17fa31797344969ee09908a1672b942f9287bb17ea605b26cd8cfe78736379bc1102ce336c45684c119490c47187093", @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x1e, 0x0, 0x4, 0xff, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000500)={0xa, 0x2, 0x0, @empty}, 0x1c) listen(r3, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000080)={@random="f60db9be9ce2", @multicast, @val={@void}, {@arp={0x806, @ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0x3, @broadcast, @dev={0xfe, 0x80, '\x00', 0x1a}, @broadcast, @private1}}}}, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0xb, 0x1, 0x10001, 0x9, 0x985, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r5, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095", @ANYRES32=r5, @ANYRES8=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000008c0)='sys_enter\x00', r6}, 0x10) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480), 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x5400, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000540)='inet_sock_set_state\x00', r7}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet(r4, &(0x7f00000001c0)={0x2, 0x2, @local}, 0x10) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r8, 0xffffffffffffffff, 0x0) 471.77282ms ago: executing program 4 (id=253): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x20, 0x12504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x7602}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_type(r0, &(0x7f00000001c0), 0x2, 0x0) write$cgroup_type(r1, &(0x7f0000000280), 0x9) r2 = openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000c40), 0x12) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) ustat(0xb, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1800403, &(0x7f0000000940), 0x0, 0x5ae, &(0x7f0000000180)="$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") sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYRES16=0x0], 0x28}}, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) r6 = openat$cgroup_ro(r3, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r6, &(0x7f0000000200)=0x1, 0x12) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_procs(r7, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r8, &(0x7f0000000080), 0x12) 0s ago: executing program 1 (id=254): bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0xb, 0x7, 0xc9d7, 0x9, 0x1, 0xffffffffffffffff, 0x1000000, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000100)=0xcf5) ppoll(&(0x7f0000000140)=[{r0}], 0x1, 0x0, 0x0, 0x0) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000180)=0x11) ioctl$TCSETSW2(r2, 0x5437, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) rt_sigpending(0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000084000000010000000000", @ANYBLOB="000000000000000000000000d900", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r3}, 0x10) ioctl$HCIINQUIRY(r2, 0x800448f0, &(0x7f0000000080)={0xffffffffffffffff, 0x2, "ac3485", 0x1, 0x8}) r4 = syz_open_dev$usbfs(&(0x7f0000000100), 0x206, 0x8401) ioctl$USBDEVFS_ALLOW_SUSPEND(r4, 0x5522) ioctl$USBDEVFS_BULK(r4, 0x5523, 0x0) ioctl$USBDEVFS_FORBID_SUSPEND(r4, 0x5521) bpf$PROG_LOAD(0x5, 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000380)=[{&(0x7f0000000000)="aefdda9d240300005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d76641cb010052f436dd2a", 0x2a}, {&(0x7f0000000040)="aa1d484e243103000000f7c08bfcd111fbdf23ea32db0e8f21d5bc", 0x1b}, {&(0x7f00000002c0)}], 0x3) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000072000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) kernel console output (not intermixed with test programs): 1 - 0 [ 26.210473][ T3267] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.243097][ T3272] veth0_vlan: entered promiscuous mode [ 26.253740][ T29] kauditd_printk_skb: 18 callbacks suppressed [ 26.253751][ T29] audit: type=1400 audit(1728990996.046:110): avc: denied { mounton } for pid=3267 comm="syz-executor" path="/root/syzkaller.RK1PSF/syz-tmp" dev="sda1" ino=1944 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 26.272517][ T3272] veth1_vlan: entered promiscuous mode [ 26.292748][ T3266] veth0_macvtap: entered promiscuous mode [ 26.299745][ T3269] veth0_vlan: entered promiscuous mode [ 26.305793][ T29] audit: type=1400 audit(1728990996.046:111): avc: denied { mount } for pid=3267 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 26.310567][ T3275] veth0_vlan: entered promiscuous mode [ 26.327848][ T29] audit: type=1400 audit(1728990996.046:112): avc: denied { mounton } for pid=3267 comm="syz-executor" path="/root/syzkaller.RK1PSF/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 26.336359][ T3275] veth1_vlan: entered promiscuous mode [ 26.358437][ T29] audit: type=1400 audit(1728990996.046:113): avc: denied { mount } for pid=3267 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 26.371119][ T3275] veth0_macvtap: entered promiscuous mode [ 26.385680][ T29] audit: type=1400 audit(1728990996.046:114): avc: denied { mounton } for pid=3267 comm="syz-executor" path="/root/syzkaller.RK1PSF/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 26.417994][ T29] audit: type=1400 audit(1728990996.046:115): avc: denied { mounton } for pid=3267 comm="syz-executor" path="/root/syzkaller.RK1PSF/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=3584 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 26.431444][ T3272] veth0_macvtap: entered promiscuous mode [ 26.445467][ T29] audit: type=1400 audit(1728990996.046:116): avc: denied { unmount } for pid=3267 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 26.454808][ T3266] veth1_macvtap: entered promiscuous mode [ 26.470634][ T29] audit: type=1400 audit(1728990996.076:117): avc: denied { mounton } for pid=3267 comm="syz-executor" path="/dev/binderfs" dev="devtmpfs" ino=454 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 26.488241][ T3275] veth1_macvtap: entered promiscuous mode [ 26.507420][ T3267] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 26.508893][ T3272] veth1_macvtap: entered promiscuous mode [ 26.534491][ T3266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 26.544920][ T3266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 26.555971][ T3266] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 26.565784][ T3275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 26.576306][ T3275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 26.586213][ T3275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 26.596677][ T3275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 26.607223][ T29] audit: type=1400 audit(1728990996.356:118): avc: denied { read write } for pid=3267 comm="syz-executor" name="loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 26.631412][ T29] audit: type=1400 audit(1728990996.356:119): avc: denied { open } for pid=3267 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 26.659912][ T3275] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 26.671274][ T3266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 26.681792][ T3266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 26.692330][ T3266] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 26.703072][ T3272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 26.713537][ T3272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 26.723444][ T3272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 26.727230][ T3406] loop1: detected capacity change from 0 to 512 [ 26.733884][ T3272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 26.733896][ T3272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 26.760331][ T3272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 26.771836][ T3272] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 26.777664][ T3406] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 26.780791][ T3269] veth1_vlan: entered promiscuous mode [ 26.792075][ T3406] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 26.798677][ T3275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 26.817801][ T3275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 26.827674][ T3275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 26.838175][ T3275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 26.848929][ T3275] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 26.860294][ T3406] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2863: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 26.874159][ T3406] EXT4-fs (loop1): 1 truncate cleaned up [ 26.874528][ T3266] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.880148][ T3406] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 26.888511][ T3266] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.888540][ T3266] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.918311][ T3266] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.929143][ T3272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 26.939591][ T3272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 26.949410][ T3272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 26.959878][ T3272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 26.969738][ T3272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 26.980448][ T3272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 26.991943][ T3272] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 27.007063][ T3275] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.015855][ T3275] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.024689][ T3275] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.033374][ T3275] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.044295][ T3272] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.053021][ T3272] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.061753][ T3272] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.070567][ T3272] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.091348][ T3269] veth0_macvtap: entered promiscuous mode [ 27.098923][ T3269] veth1_macvtap: entered promiscuous mode [ 27.111553][ T3267] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 27.148936][ T3411] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 27.161691][ T3269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 27.172133][ T3269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 27.181956][ T3269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 27.192430][ T3269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 27.202282][ T3269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 27.212732][ T3269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 27.222563][ T3269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 27.232986][ T3269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 27.247357][ T3269] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 27.261249][ T3269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 27.271783][ T3269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 27.281647][ T3269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 27.292084][ T3269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 27.302208][ T3269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 27.312652][ T3269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 27.322787][ T3269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 27.333309][ T3269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 27.345924][ T3417] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6'. [ 27.346367][ T3269] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 27.368268][ T3418] xt_hashlimit: max too large, truncated to 1048576 [ 27.382244][ T3415] hub 8-0:1.0: USB hub found [ 27.389616][ T3415] hub 8-0:1.0: 8 ports detected [ 27.402599][ T3269] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.411455][ T3269] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.420166][ T3269] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.428884][ T3269] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.471534][ T3428] loop2: detected capacity change from 0 to 1024 [ 27.486639][ T3428] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 27.505885][ T3428] JBD2: no valid journal superblock found [ 27.511730][ T3428] EXT4-fs (loop2): Could not load journal inode [ 27.540086][ T3428] x_tables: ip6_tables: sctp match: only valid for protocol 132 [ 27.620599][ T3440] loop3: detected capacity change from 0 to 512 [ 27.637318][ T3440] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 27.650095][ T3440] ext4 filesystem being mounted at /1/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 27.662752][ T3440] EXT4-fs error (device loop3): ext4_do_update_inode:5121: inode #2: comm syz.3.8: corrupted inode contents [ 27.682081][ T3440] EXT4-fs error (device loop3): ext4_dirty_inode:5984: inode #2: comm syz.3.8: mark_inode_dirty error [ 27.697503][ T3446] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=3446 comm=syz.2.9 [ 27.710988][ T3440] EXT4-fs error (device loop3): ext4_do_update_inode:5121: inode #2: comm syz.3.8: corrupted inode contents [ 27.723073][ T3440] EXT4-fs error (device loop3): __ext4_ext_dirty:207: inode #2: comm syz.3.8: mark_inode_dirty error [ 27.740030][ T3446] syzkaller0: entered allmulticast mode [ 27.747761][ T3446] syzkaller0 (unregistering): left allmulticast mode [ 27.858147][ T3450] netlink: 3 bytes leftover after parsing attributes in process `syz.2.10'. [ 27.867048][ T3450] 0ªX¹¦À: renamed from caif0 [ 27.873169][ T3450] 0ªX¹¦À: entered allmulticast mode [ 27.878436][ T3450] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 27.998778][ T3452] process 'syz.1.11' launched './file0' with NULL argv: empty string added [ 28.018053][ T3452] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11'. [ 28.026952][ T3452] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11'. [ 28.069756][ T3454] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 28.078641][ T3454] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 28.087401][ T3454] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 28.096134][ T3454] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 28.128158][ T3456] SELinux: Context Ü is not valid (left unmapped). [ 28.147485][ T3454] vxlan0: entered promiscuous mode [ 28.152630][ T3454] vxlan0: entered allmulticast mode [ 28.176374][ T3457] pim6reg: entered allmulticast mode [ 28.215266][ T3453] pim6reg: left allmulticast mode [ 28.269526][ T3460] batadv0: entered promiscuous mode [ 28.280557][ T3460] batadv_slave_0: entered promiscuous mode [ 28.286456][ T3460] batadv_slave_0: left promiscuous mode [ 28.310529][ T3460] batadv0: left promiscuous mode [ 28.353581][ C0] hrtimer: interrupt took 17736 ns [ 28.405232][ T3269] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 28.418293][ T3471] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 28.515278][ T3467] loop2: detected capacity change from 0 to 2048 [ 28.578770][ T3482] netlink: 4 bytes leftover after parsing attributes in process `syz.3.22'. [ 28.581622][ T3467] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 28.642017][ T3467] EXT4-fs error (device loop2): ext4_read_inline_dir:1566: inode #12: block 9: comm syz.2.17: path /5/file0/file0: bad entry in directory: rec_len is smaller than minimal - offset=45, inode=4195584, rec_len=0, size=80 fake=0 [ 28.668847][ T3482] syz.3.22 (3482) used greatest stack depth: 8800 bytes left [ 28.689039][ T3272] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 28.696751][ T3486] syz.3.24[3486] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 28.698309][ T3486] syz.3.24[3486] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 28.709969][ T3486] syz.3.24[3486] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 28.737832][ T3488] netlink: 8 bytes leftover after parsing attributes in process `syz.0.25'. [ 28.765755][ T3488] netlink: 8 bytes leftover after parsing attributes in process `syz.0.25'. [ 28.789552][ T3488] netlink: 8 bytes leftover after parsing attributes in process `syz.0.25'. [ 28.858140][ T3498] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 28.867116][ T3498] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 28.915340][ T3486] netlink: 12 bytes leftover after parsing attributes in process `syz.3.24'. [ 28.941414][ T3504] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 28.965513][ T3506] loop2: detected capacity change from 0 to 128 [ 29.007806][ T3507] mmap: syz.3.28 (3507) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 29.026643][ T3507] loop3: detected capacity change from 0 to 512 [ 29.041540][ T3508] Process accounting resumed [ 29.242920][ T3511] loop4: detected capacity change from 0 to 256 [ 29.249537][ T3511] vfat: Unknown parameter '00000000000000000000003' [ 29.261075][ T3511] loop4: detected capacity change from 0 to 512 [ 29.268953][ T3511] ======================================================= [ 29.268953][ T3511] WARNING: The mand mount option has been deprecated and [ 29.268953][ T3511] and is ignored by this kernel. Remove the mand [ 29.268953][ T3511] option from the mount to silence this warning. [ 29.268953][ T3511] ======================================================= [ 29.315811][ T3511] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 29.328273][ T3511] ext4 filesystem being mounted at /3/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 29.343384][ T3511] syz.4.30 uses obsolete (PF_INET,SOCK_PACKET) [ 29.357013][ T3275] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 29.482242][ T3519] loop0: detected capacity change from 0 to 512 [ 29.489318][ T3519] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 29.517222][ T3519] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 29.531631][ T3519] ext4 filesystem being mounted at /6/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 29.635495][ T3524] loop4: detected capacity change from 0 to 512 [ 29.642280][ T3524] EXT4-fs: Ignoring removed mblk_io_submit option [ 29.650926][ T3524] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 29.717148][ T3524] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 29.725283][ T3524] EXT4-fs (loop4): orphan cleanup on readonly fs [ 29.733039][ T3524] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:483: comm syz.4.31: Invalid block bitmap block 0 in block_group 0 [ 29.750850][ T3524] EXT4-fs (loop4): Remounting filesystem read-only [ 29.757641][ T3524] EXT4-fs (loop4): 1 orphan inode deleted [ 29.766388][ T3524] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 29.778954][ T3524] SELinux: (dev loop4, type ext4) getxattr errno 5 [ 29.785809][ T3524] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 29.825625][ T3471] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 29.859998][ T3529] capability: warning: `syz.2.33' uses deprecated v2 capabilities in a way that may be insecure [ 29.872877][ T3528] vlan2: entered allmulticast mode [ 29.888254][ T3471] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 29.912681][ T3533] loop3: detected capacity change from 0 to 512 [ 29.936975][ T3533] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 29.949764][ T3533] ext4 filesystem being mounted at /6/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 29.965331][ T3471] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 29.999227][ T3528] EXT4-fs error (device loop3): ext4_xattr_block_get:596: inode #15: comm syz.3.34: corrupted xattr block 33: invalid header [ 30.013293][ T3528] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 30.023229][ T3528] EXT4-fs error (device loop3): ext4_xattr_block_get:596: inode #15: comm syz.3.34: corrupted xattr block 33: invalid header [ 30.036535][ T3528] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 30.045764][ T3528] EXT4-fs error (device loop3): ext4_xattr_block_get:596: inode #15: comm syz.3.34: corrupted xattr block 33: invalid header [ 30.053932][ T3471] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.059354][ T3533] SELinux: failed to load policy [ 30.067898][ T3528] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 30.091089][ T3471] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.102630][ T3471] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.113720][ T3471] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.137019][ T3542] loop1: detected capacity change from 0 to 128 [ 30.144822][ T3542] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 30.156830][ T3531] loop2: detected capacity change from 0 to 512 [ 30.166859][ T3531] EXT4-fs: test_dummy_encryption option not supported [ 30.257821][ T3544] loop2: detected capacity change from 0 to 512 [ 30.279594][ T3546] netlink: 'syz.4.38': attribute type 10 has an invalid length. [ 30.283733][ T3544] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 30.287271][ T3546] netlink: 40 bytes leftover after parsing attributes in process `syz.4.38'. [ 30.290417][ T3546] vlan0: entered promiscuous mode [ 30.301870][ T3269] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 30.308733][ T3546] vlan0: entered allmulticast mode [ 30.315722][ T3544] ext4 filesystem being mounted at /11/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 30.322498][ T3546] veth0_vlan: entered allmulticast mode [ 30.347342][ T3266] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 30.353755][ T3546] bridge0: port 3(vlan0) entered blocking state [ 30.362659][ T3546] bridge0: port 3(vlan0) entered disabled state [ 30.372983][ T3546] bridge0: port 3(vlan0) entered blocking state [ 30.379311][ T3546] bridge0: port 3(vlan0) entered forwarding state [ 30.389245][ T3544] SELinux: Context system_u:object_r:systemd_passwd_agent_exec_t:s0 is not valid (left unmapped). [ 30.409137][ T3549] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 30.417856][ T3553] lo speed is unknown, defaulting to 1000 [ 30.426622][ T3553] lo speed is unknown, defaulting to 1000 [ 30.427561][ T3272] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 30.432892][ T3553] lo speed is unknown, defaulting to 1000 [ 30.469335][ T3557] loop4: detected capacity change from 0 to 512 [ 30.488101][ T3553] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 30.488695][ T3553] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 30.524628][ T3553] lo speed is unknown, defaulting to 1000 [ 30.524881][ T3553] lo speed is unknown, defaulting to 1000 [ 30.525078][ T3553] lo speed is unknown, defaulting to 1000 [ 30.525379][ T3553] lo speed is unknown, defaulting to 1000 [ 30.525692][ T3553] lo speed is unknown, defaulting to 1000 [ 30.536747][ T3564] loop2: detected capacity change from 0 to 256 [ 30.587026][ T3564] FAT-fs (loop2): Directory bread(block 64) failed [ 30.593655][ T3564] FAT-fs (loop2): Directory bread(block 65) failed [ 30.600172][ T3564] FAT-fs (loop2): Directory bread(block 66) failed [ 30.608268][ T3564] FAT-fs (loop2): Directory bread(block 67) failed [ 30.616743][ T3564] FAT-fs (loop2): Directory bread(block 68) failed [ 30.623907][ T3564] FAT-fs (loop2): Directory bread(block 69) failed [ 30.630691][ T3564] FAT-fs (loop2): Directory bread(block 70) failed [ 30.637855][ T3564] FAT-fs (loop2): Directory bread(block 71) failed [ 30.638889][ T3568] loop4: detected capacity change from 0 to 2048 [ 30.644900][ T3564] FAT-fs (loop2): Directory bread(block 72) failed [ 30.657391][ T3564] FAT-fs (loop2): Directory bread(block 73) failed [ 30.896269][ T3587] loop2: detected capacity change from 0 to 128 [ 30.904771][ T3587] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 30.953460][ T3272] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 31.010972][ T3590] loop0: detected capacity change from 0 to 512 [ 31.075185][ T1587] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 31.128851][ T3590] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 31.156336][ T3593] syz.2.49[3593] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 31.156568][ T3593] syz.2.49[3593] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 31.171204][ T3593] syz.2.49[3593] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 31.273830][ T29] kauditd_printk_skb: 752 callbacks suppressed [ 31.273841][ T29] audit: type=1400 audit(31.269:870): avc: denied { block_suspend } for pid=3594 comm="syz.1.50" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 31.404897][ T29] audit: type=1326 audit(31.319:871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3589 comm="syz.2.49" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73639fdff9 code=0x7ffc0000 [ 31.427487][ T29] audit: type=1326 audit(31.319:872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3589 comm="syz.2.49" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73639fdff9 code=0x7ffc0000 [ 31.449981][ T29] audit: type=1326 audit(31.319:873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3589 comm="syz.2.49" exe="/root/syz-executor" sig=0 arch=c000003e syscall=88 compat=0 ip=0x7f73639fdff9 code=0x7ffc0000 [ 31.472805][ T29] audit: type=1326 audit(31.319:874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3589 comm="syz.2.49" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73639fdff9 code=0x7ffc0000 [ 31.495271][ T29] audit: type=1326 audit(31.319:875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3589 comm="syz.2.49" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73639fdff9 code=0x7ffc0000 [ 31.517801][ T29] audit: type=1326 audit(31.319:876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3589 comm="syz.2.49" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f73639fdff9 code=0x7ffc0000 [ 31.540275][ T29] audit: type=1326 audit(31.319:877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3589 comm="syz.2.49" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73639fdff9 code=0x7ffc0000 [ 31.562781][ T29] audit: type=1326 audit(31.319:878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3589 comm="syz.2.49" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73639fdff9 code=0x7ffc0000 [ 31.585553][ T29] audit: type=1326 audit(31.319:879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3589 comm="syz.2.49" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f73639fdff9 code=0x7ffc0000 [ 31.677952][ T3601] loop3: detected capacity change from 0 to 1764 [ 31.707260][ T3603] batadv_slave_0: entered promiscuous mode [ 31.713239][ T3266] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 31.734783][ T3603] batadv_slave_0: left promiscuous mode [ 31.748616][ T3601] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 31.757947][ T3601] batadv_slave_0: entered promiscuous mode [ 31.767084][ T3606] loop0: detected capacity change from 0 to 512 [ 31.785306][ T3606] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 31.799981][ T3606] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 31.851994][ T3612] loop4: detected capacity change from 0 to 128 [ 31.866254][ T3606] EXT4-fs (loop0): 1 truncate cleaned up [ 31.878505][ T3606] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 31.897719][ T3612] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 31.952044][ T3612] bridge0: port 3(vlan0) entered disabled state [ 31.958416][ T3612] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.965568][ T3612] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.988585][ T3612] bridge0: port 3(vlan0) entered disabled state [ 32.004343][ T3612] bridge_slave_1: left allmulticast mode [ 32.010006][ T3612] bridge_slave_1: left promiscuous mode [ 32.016196][ T3612] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.032795][ T3612] bridge_slave_0: left allmulticast mode [ 32.038507][ T3612] bridge_slave_0: left promiscuous mode [ 32.044294][ T3612] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.079037][ T3625] loop3: detected capacity change from 0 to 512 [ 32.105831][ T3625] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 32.127077][ T3625] EXT4-fs error (device loop3): ext4_orphan_get:1388: inode #17: comm syz.3.54: iget: bad i_size value: -6917529027641081756 [ 32.149527][ T3625] EXT4-fs error (device loop3): ext4_orphan_get:1393: comm syz.3.54: couldn't read orphan inode 17 (err -117) [ 32.160549][ T3618] lo speed is unknown, defaulting to 1000 [ 32.171842][ T3625] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 32.208332][ T3610] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.54: bg 0: block 65: padding at end of block bitmap is not set [ 32.223160][ T3275] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 32.233275][ T3610] EXT4-fs error (device loop3): ext4_acquire_dquot:6879: comm syz.3.54: Failed to acquire dquot type 0 [ 32.323979][ T3617] syzkaller0: entered promiscuous mode [ 32.329494][ T3617] syzkaller0: entered allmulticast mode [ 32.386640][ T3646] loop4: detected capacity change from 0 to 512 [ 32.402921][ T3648] loop1: detected capacity change from 0 to 1024 [ 32.434619][ T3646] EXT4-fs error (device loop4): ext4_clear_blocks:876: inode #13: comm syz.4.56: attempt to clear invalid blocks 2 len 1 [ 32.461025][ T3646] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 32.475964][ T3646] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.56: invalid indirect mapped block 1819239214 (level 0) [ 32.500085][ T3659] netlink: 'syz.2.58': attribute type 21 has an invalid length. [ 32.507870][ T3659] IPv6: NLM_F_CREATE should be specified when creating new route [ 32.515830][ T3659] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 32.523024][ T3659] IPv6: NLM_F_CREATE should be set when creating new route [ 32.526208][ T3646] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.56: invalid indirect mapped block 1819239214 (level 1) [ 32.530211][ T3659] IPv6: NLM_F_CREATE should be set when creating new route [ 32.548224][ T3648] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 32.551094][ T3659] IPv6: NLM_F_CREATE should be set when creating new route [ 32.586233][ T3646] EXT4-fs (loop4): 1 truncate cleaned up [ 32.592211][ T3646] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 32.639343][ T3659] loop2: detected capacity change from 0 to 164 [ 32.639964][ T3637] EXT4-fs warning (device loop4): dx_probe:833: inode #2: comm syz.4.56: Unrecognised inode hash code 20 [ 32.647867][ T3266] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.656960][ T3637] EXT4-fs warning (device loop4): dx_probe:966: inode #2: comm syz.4.56: Corrupt directory, running e2fsck is recommended [ 32.679866][ T3637] EXT4-fs warning (device loop4): dx_probe:833: inode #2: comm syz.4.56: Unrecognised inode hash code 20 [ 32.684217][ T3267] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.691140][ T3637] EXT4-fs warning (device loop4): dx_probe:966: inode #2: comm syz.4.56: Corrupt directory, running e2fsck is recommended [ 32.704592][ T3659] rock: corrupted directory entry. extent=28, offset=0, size=16777216 [ 32.712928][ T3637] EXT4-fs error (device loop4): ext4_find_dest_de:2069: inode #2: block 13: comm syz.4.56: bad entry in directory: rec_len % 4 != 0 - offset=108, inode=4294901777, rec_len=65535, size=1024 fake=0 [ 32.769395][ T3659] rock: corrupted directory entry. extent=28, offset=0, size=16777216 [ 32.778269][ T3646] EXT4-fs error (device loop4): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz.4.56: bad entry in directory: rec_len % 4 != 0 - offset=108, inode=4294901777, rec_len=65535, size=1024 fake=0 [ 32.799509][ T3669] netlink: 'syz.4.56': attribute type 10 has an invalid length. [ 32.825906][ T3664] netlink: 'syz.0.59': attribute type 10 has an invalid length. [ 32.853042][ T3664] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.863421][ T3275] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.864604][ T3269] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.885909][ T3664] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 32.897603][ T3671] loop2: detected capacity change from 0 to 512 [ 32.904937][ T3673] netlink: 'syz.1.60': attribute type 8 has an invalid length. [ 32.908014][ T3671] ext4: Unknown parameter 'dont_measure' [ 32.913604][ T3673] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 32.990244][ T3679] loop4: detected capacity change from 0 to 1024 [ 33.037726][ T3679] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (29950!=20869) [ 33.049376][ T3679] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 33.060375][ T3679] EXT4-fs (loop4): invalid journal inode [ 33.069039][ T3679] EXT4-fs (loop4): can't get journal size [ 33.085749][ T3683] loop1: detected capacity change from 0 to 1024 [ 33.100676][ T3683] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 33.124775][ T3679] EXT4-fs error (device loop4): ext4_protect_reserved_inode:182: inode #2: comm syz.4.63: blocks 48-48 from inode overlap system zone [ 33.266757][ T3679] EXT4-fs (loop4): failed to initialize system zone (-117) [ 33.266815][ T3679] EXT4-fs (loop4): mount failed [ 33.287160][ T3690] lo speed is unknown, defaulting to 1000 [ 34.034139][ T3692] lo speed is unknown, defaulting to 1000 [ 34.096186][ T3696] loop0: detected capacity change from 0 to 164 [ 34.114977][ T8] IPVS: starting estimator thread 0... [ 34.156071][ T3696] Unable to read rock-ridge attributes [ 34.238885][ T3703] loop0: detected capacity change from 0 to 512 [ 34.246686][ T3697] IPVS: using max 2688 ests per chain, 134400 per kthread [ 34.258995][ T3267] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.298896][ T3703] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 34.490637][ T3709] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 34.505448][ T3714] syz.4.71[3714] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 34.505529][ T3714] syz.4.71[3714] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 34.516803][ T3714] syz.4.71[3714] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 34.574064][ T3710] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 34.781409][ T3729] loop3: detected capacity change from 0 to 512 [ 34.793167][ T3266] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.806760][ T3735] __nla_validate_parse: 6 callbacks suppressed [ 34.806775][ T3735] netlink: 56 bytes leftover after parsing attributes in process `syz.2.72'. [ 34.846221][ T3709] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 34.858157][ T3729] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 34.876721][ T3729] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.73: bg 0: block 248: padding at end of block bitmap is not set [ 34.898441][ T3729] EXT4-fs error (device loop3): ext4_acquire_dquot:6879: comm syz.3.73: Failed to acquire dquot type 1 [ 34.994874][ T3729] EXT4-fs (loop3): 1 truncate cleaned up [ 35.040779][ T3729] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 35.186343][ T3709] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.199880][ T3729] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 35.243189][ T3709] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.392820][ T3743] loop0: detected capacity change from 0 to 512 [ 35.407218][ T3743] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 35.409350][ T3551] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 35.424519][ T3551] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 35.431906][ T3551] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 35.439330][ T3551] hid-generic 0000:0000:0000.0001: unknown main item tag 0x4 [ 35.446747][ T3551] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 35.454151][ T3551] hid-generic 0000:0000:0000.0001: unknown main item tag 0x2 [ 35.454450][ T3743] EXT4-fs (loop0): 1 truncate cleaned up [ 35.461532][ T3551] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 35.474607][ T3551] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 35.481987][ T3551] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 35.489397][ T3551] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 35.496804][ T3551] hid-generic 0000:0000:0000.0001: unknown main item tag 0x4 [ 35.498728][ T3743] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 35.504214][ T3551] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 35.504235][ T3551] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 35.504254][ T3551] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 35.504273][ T3551] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 35.545828][ T3551] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 35.553206][ T3551] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 35.560677][ T3551] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 35.568143][ T3551] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 35.569637][ T3746] hub 9-0:1.0: USB hub found [ 35.575533][ T3551] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 35.575557][ T3551] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 35.581535][ T3746] hub 9-0:1.0: 8 ports detected [ 35.587513][ T3551] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 35.607132][ T3551] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 35.614626][ T3551] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 35.622019][ T3551] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 35.629420][ T3551] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 35.636835][ T3551] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 35.644316][ T3551] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 35.651697][ T3551] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 35.659097][ T3551] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 35.666511][ T3551] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 35.673898][ T3551] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 35.681273][ T3551] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 35.688722][ T3551] hid-generic 0000:0000:0000.0001: unknown main item tag 0x1 [ 35.697446][ T3551] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz0] on syz0 [ 35.707550][ T3750] geneve0: entered allmulticast mode [ 35.776591][ T3269] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.811358][ T3762] loop4: detected capacity change from 0 to 1024 [ 35.834174][ T3752] block device autoloading is deprecated and will be removed. [ 35.841670][ T3752] syz.0.84: attempt to access beyond end of device [ 35.841670][ T3752] loop128: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 35.855002][ T3762] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 35.986493][ T3709] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.998797][ T3709] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.011797][ T3709] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.025704][ T3709] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.106620][ T3769] lo speed is unknown, defaulting to 1000 [ 36.351602][ T3772] loop1: detected capacity change from 0 to 512 [ 36.374306][ T3772] EXT4-fs (loop1): filesystem is read-only [ 36.435256][ T29] kauditd_printk_skb: 426 callbacks suppressed [ 36.435314][ T29] audit: type=1400 audit(36.409:1302): avc: denied { setcheckreqprot } for pid=3771 comm="+}[@" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 36.455108][ T3772] loop1: detected capacity change from 0 to 1024 [ 36.495205][ T3772] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a040c118, mo2=0002] [ 36.503334][ T3772] System zones: 0-1, 3-12 [ 36.508271][ T3772] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 36.522294][ T29] audit: type=1326 audit(36.509:1303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3771 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53ddc7dff9 code=0x7ffc0000 [ 36.544514][ T29] audit: type=1326 audit(36.509:1304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3771 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53ddc7dff9 code=0x7ffc0000 [ 36.566807][ T29] audit: type=1326 audit(36.509:1305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3771 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=87 compat=0 ip=0x7f53ddc7dff9 code=0x7ffc0000 [ 36.588976][ T29] audit: type=1326 audit(36.509:1306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3771 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53ddc7dff9 code=0x7ffc0000 [ 36.611216][ T29] audit: type=1326 audit(36.509:1307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3771 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f53ddc7dff9 code=0x7ffc0000 [ 36.633451][ T29] audit: type=1326 audit(36.509:1308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3771 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53ddc7dff9 code=0x7ffc0000 [ 36.655643][ T29] audit: type=1326 audit(36.509:1309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3771 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f53ddc7dff9 code=0x7ffc0000 [ 36.677834][ T29] audit: type=1326 audit(36.509:1310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3771 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53ddc7dff9 code=0x7ffc0000 [ 36.687124][ T3779] hub 8-0:1.0: USB hub found [ 36.700034][ T29] audit: type=1326 audit(36.509:1311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3771 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f53ddc7dff9 code=0x7ffc0000 [ 36.728124][ T3267] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.776896][ T3275] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.786756][ T3266] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.791239][ T3779] hub 8-0:1.0: 8 ports detected [ 36.803203][ T3781] syz.1.82[3781] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 36.803296][ T3781] syz.1.82[3781] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 36.815400][ T3781] syz.1.82[3781] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 36.873324][ T3785] geneve2: entered promiscuous mode [ 36.889719][ T3785] geneve2: entered allmulticast mode [ 36.921762][ T3791] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 36.931360][ T3791] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 36.944741][ T3783] loop0: detected capacity change from 0 to 512 [ 36.945365][ T3792] 9pnet: Could not find request transport: tcp n n n n n n y y n n [ 36.945365][ T3792] TIPC 1024 0 -1 NI 0 yes kernel n n n n n n n n n n n n n n n n n n [ 36.945365][ T3792] RDS 1096 0 -1 NI 0 yes kernel n n n n n n n n n n n n n n n n n n [ 36.945365][ T3792] SCTPv6 1560 1 0 no 0 yes kernel y n y y y y y y y y y y y y y y n y [ 36.945365][ T3792] SCTP 1400 0 0 no 0 yes kernel y [ 36.951454][ T3783] EXT4-fs: test_dummy_encryption option not supported [ 37.062832][ T3798] loop4: detected capacity change from 0 to 512 [ 37.070822][ T3798] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 37.085208][ T3798] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.90: bg 0: block 248: padding at end of block bitmap is not set [ 37.099994][ T3798] EXT4-fs error (device loop4): ext4_acquire_dquot:6879: comm syz.4.90: Failed to acquire dquot type 1 [ 37.112145][ T3798] EXT4-fs (loop4): 1 truncate cleaned up [ 37.119308][ T3798] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 37.141773][ T3798] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 37.262131][ T8] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 37.269661][ T8] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 37.277064][ T8] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 37.284548][ T8] hid-generic 0000:0000:0000.0002: unknown main item tag 0x4 [ 37.291933][ T8] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 37.299369][ T8] hid-generic 0000:0000:0000.0002: unknown main item tag 0x2 [ 37.306797][ T8] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 37.314224][ T8] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 37.317735][ T3807] ªªªªªª: renamed from vlan0 (while UP) [ 37.321591][ T8] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 37.321615][ T8] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 37.341894][ T8] hid-generic 0000:0000:0000.0002: unknown main item tag 0x4 [ 37.349313][ T8] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 37.356707][ T8] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 37.364110][ T8] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 37.371498][ T8] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 37.379223][ T8] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 37.386626][ T8] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 37.394019][ T8] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 37.401390][ T8] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 37.408793][ T8] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 37.416251][ T8] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 37.423644][ T8] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 37.429233][ T3809] loop0: detected capacity change from 0 to 256 [ 37.431006][ T8] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 37.444805][ T8] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 37.452185][ T8] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 37.459602][ T8] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 37.467100][ T8] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 37.474517][ T8] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 37.481965][ T8] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 37.489372][ T8] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 37.496772][ T8] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 37.504252][ T8] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 37.511624][ T8] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 37.519008][ T8] hid-generic 0000:0000:0000.0002: unknown main item tag 0x1 [ 37.537168][ T8] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz0] on syz0 [ 37.557952][ T3813] loop3: detected capacity change from 0 to 512 [ 37.565864][ T3813] EXT4-fs (loop3): filesystem is read-only [ 37.585693][ T3812] netlink: 8 bytes leftover after parsing attributes in process `syz.0.94'. [ 37.596362][ T3813] loop3: detected capacity change from 0 to 1024 [ 37.614532][ T3813] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a040c118, mo2=0002] [ 37.623551][ T3813] System zones: 0-1, 3-12 [ 37.628509][ T3813] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 37.668864][ T3275] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.679731][ T3269] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.710327][ T3822] loop3: detected capacity change from 0 to 1024 [ 37.740049][ T3822] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.137896][ T3830] lo speed is unknown, defaulting to 1000 [ 38.583192][ T3837] syz.0.100[3837] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 38.583286][ T3837] syz.0.100[3837] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 38.601058][ T3269] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.607260][ T3837] syz.0.100[3837] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 38.631949][ T3841] netlink: 4 bytes leftover after parsing attributes in process `syz.4.103'. [ 38.708118][ T3845] loop4: detected capacity change from 0 to 128 [ 38.745410][ T3853] loop3: detected capacity change from 0 to 512 [ 38.752247][ T3853] EXT4-fs (loop3): filesystem is read-only [ 38.874501][ T3859] loop0: detected capacity change from 0 to 764 [ 38.892390][ T3859] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 38.943623][ T3845] loop4: detected capacity change from 128 to 0 [ 38.943806][ T3855] syz.4.104: attempt to access beyond end of device [ 38.943806][ T3855] loop4: rw=524288, sector=34, nr_sectors = 1 limit=0 [ 38.943830][ T3855] syz.4.104: attempt to access beyond end of device [ 38.943830][ T3855] loop4: rw=524288, sector=35, nr_sectors = 1 limit=0 [ 38.943872][ T3855] syz.4.104: attempt to access beyond end of device [ 38.943872][ T3855] loop4: rw=524288, sector=36, nr_sectors = 1 limit=0 [ 38.943951][ T3855] syz.4.104: attempt to access beyond end of device [ 38.943951][ T3855] loop4: rw=524288, sector=37, nr_sectors = 1 limit=0 [ 38.944060][ T3855] syz.4.104: attempt to access beyond end of device [ 38.944060][ T3855] loop4: rw=524288, sector=38, nr_sectors = 1 limit=0 [ 38.944082][ T3855] syz.4.104: attempt to access beyond end of device [ 38.944082][ T3855] loop4: rw=524288, sector=39, nr_sectors = 1 limit=0 [ 38.944133][ T3855] syz.4.104: attempt to access beyond end of device [ 38.944133][ T3855] loop4: rw=524288, sector=40, nr_sectors = 1 limit=0 [ 38.944191][ T3855] syz.4.104: attempt to access beyond end of device [ 38.944191][ T3855] loop4: rw=0, sector=34, nr_sectors = 1 limit=0 [ 38.944221][ T3855] FAT-fs (loop4): Directory bread(block 34) failed [ 38.944256][ T3855] syz.4.104: attempt to access beyond end of device [ 38.944256][ T3855] loop4: rw=0, sector=35, nr_sectors = 1 limit=0 [ 38.944411][ T3855] FAT-fs (loop4): Directory bread(block 35) failed [ 38.944510][ T3855] FAT-fs (loop4): Directory bread(block 36) failed [ 38.944526][ T3855] FAT-fs (loop4): Directory bread(block 37) failed [ 38.944540][ T3855] FAT-fs (loop4): Directory bread(block 38) failed [ 38.944584][ T3855] FAT-fs (loop4): Directory bread(block 39) failed [ 38.944614][ T3855] FAT-fs (loop4): Directory bread(block 40) failed [ 38.987918][ T3275] FAT-fs (loop4): Directory bread(block 34) failed [ 38.988033][ T3275] FAT-fs (loop4): Directory bread(block 35) failed [ 38.988061][ T3275] FAT-fs (loop4): Directory bread(block 36) failed [ 39.006015][ T3275] FAT-fs (loop4): unable to read boot sector to mark fs as dirty [ 39.163042][ T143] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.226046][ T3853] loop3: detected capacity change from 0 to 1024 [ 39.365735][ T143] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.380567][ T3853] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a040c118, mo2=0002] [ 39.397905][ T3853] System zones: 0-1, 3-12 [ 39.402848][ T3853] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 39.432965][ T3269] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.446175][ T143] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.557570][ T3865] lo speed is unknown, defaulting to 1000 [ 39.625810][ T3865] chnl_net:caif_netlink_parms(): no params data found [ 39.662003][ T143] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.848878][ T3884] lo speed is unknown, defaulting to 1000 [ 40.180791][ T143] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 40.216764][ T143] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 40.233838][ T3889] loop3: detected capacity change from 0 to 512 [ 40.241557][ T143] bond0 (unregistering): Released all slaves [ 40.262953][ T3865] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.270020][ T3865] bridge0: port 1(bridge_slave_0) entered disabled state [ 40.278477][ T3889] EXT4-fs error (device loop3): ext4_expand_extra_isize_ea:2813: inode #11: comm syz.3.112: corrupted xattr block 95: invalid header [ 40.293215][ T3865] bridge_slave_0: entered allmulticast mode [ 40.310721][ T3865] bridge_slave_0: entered promiscuous mode [ 40.327669][ T3861] syz.0.108 (3861) used greatest stack depth: 7288 bytes left [ 40.336451][ T3865] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.343517][ T3865] bridge0: port 2(bridge_slave_1) entered disabled state [ 40.362087][ T3889] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm syz.3.112: bg 0: block 7: invalid block bitmap [ 40.389631][ T3889] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 40.400434][ T3865] bridge_slave_1: entered allmulticast mode [ 40.408097][ T3865] bridge_slave_1: entered promiscuous mode [ 40.429678][ T3889] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2977: inode #11: comm syz.3.112: corrupted xattr block 95: invalid header [ 40.445360][ T3865] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 40.460460][ T143] hsr_slave_0: left promiscuous mode [ 40.466518][ T143] hsr_slave_1: left promiscuous mode [ 40.472309][ T143] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 40.479790][ T143] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 40.511437][ T143] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 40.518926][ T143] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 40.537370][ T3889] EXT4-fs warning (device loop3): ext4_evict_inode:276: xattr delete (err -117) [ 40.557421][ T143] veth1_macvtap: left promiscuous mode [ 40.562921][ T143] veth0_macvtap: left promiscuous mode [ 40.568472][ T143] veth1_vlan: left promiscuous mode [ 40.573903][ T3889] EXT4-fs (loop3): 1 orphan inode deleted [ 40.575905][ T143] veth0_vlan: left allmulticast mode [ 40.585076][ T143] veth0_vlan: left promiscuous mode [ 40.590260][ T3889] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 40.745139][ T143] team0 (unregistering): Port device team_slave_1 removed [ 40.757204][ T143] team0 (unregistering): Port device team_slave_0 removed [ 40.802998][ T3865] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 40.858827][ T3269] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.869858][ T3865] team0: Port device team_slave_0 added [ 40.895163][ T3865] team0: Port device team_slave_1 added [ 40.928870][ T3865] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 40.935989][ T3865] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 40.961965][ T3865] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 40.976814][ T3923] loop3: detected capacity change from 0 to 1024 [ 40.987966][ T3865] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 40.994972][ T3865] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 41.020949][ T3865] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 41.043637][ T3923] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 41.054608][ T3923] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 41.065263][ T3923] JBD2: no valid journal superblock found [ 41.070987][ T3923] EXT4-fs (loop3): Could not load journal inode [ 41.098108][ T3865] hsr_slave_0: entered promiscuous mode [ 41.104391][ T3865] hsr_slave_1: entered promiscuous mode [ 41.110396][ T3865] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 41.119211][ T3865] Cannot create hsr debugfs directory [ 41.440348][ T3865] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 41.448949][ T3865] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 41.458623][ T3865] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 41.467035][ T3865] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 41.508467][ T3865] 8021q: adding VLAN 0 to HW filter on device bond0 [ 41.522093][ T3865] 8021q: adding VLAN 0 to HW filter on device team0 [ 41.532567][ T3374] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.539634][ T3374] bridge0: port 1(bridge_slave_0) entered forwarding state [ 41.550104][ T143] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.557185][ T143] bridge0: port 2(bridge_slave_1) entered forwarding state [ 41.627939][ T3865] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 41.729359][ T4026] loop0: detected capacity change from 0 to 512 [ 41.741265][ T4026] EXT4-fs (loop0): filesystem is read-only [ 41.792372][ T4026] loop0: detected capacity change from 0 to 1024 [ 41.845164][ T29] kauditd_printk_skb: 707 callbacks suppressed [ 41.845175][ T29] audit: type=1400 audit(41.839:2017): avc: denied { create } for pid=4043 comm="syz.2.123" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 41.845873][ T3865] veth0_vlan: entered promiscuous mode [ 41.865181][ T29] audit: type=1400 audit(41.859:2018): avc: denied { ioctl } for pid=4043 comm="syz.2.123" path="socket:[4952]" dev="sockfs" ino=4952 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 41.900613][ T4026] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a040c118, mo2=0002] [ 41.905151][ T3865] veth1_vlan: entered promiscuous mode [ 41.925283][ T4026] System zones: 0-1, 3-12 [ 41.927675][ T4049] lo speed is unknown, defaulting to 1000 [ 41.930173][ T4026] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 41.938774][ T3865] veth0_macvtap: entered promiscuous mode [ 41.954964][ T3865] veth1_macvtap: entered promiscuous mode [ 41.964493][ T3865] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 41.975026][ T3865] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.984966][ T3865] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 41.995501][ T3865] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.005354][ T3865] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 42.015858][ T3865] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.026811][ T3865] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 42.031050][ T29] audit: type=1326 audit(42.019:2019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4024 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf09bfdff9 code=0x7ffc0000 [ 42.056268][ T29] audit: type=1326 audit(42.019:2020): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4024 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=87 compat=0 ip=0x7fcf09bfdff9 code=0x7ffc0000 [ 42.078358][ T29] audit: type=1326 audit(42.019:2021): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4024 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf09bfdff9 code=0x7ffc0000 [ 42.078377][ T29] audit: type=1326 audit(42.019:2022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4024 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcf09bfdff9 code=0x7ffc0000 [ 42.078395][ T29] audit: type=1326 audit(42.019:2023): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4024 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf09bfdff9 code=0x7ffc0000 [ 42.103534][ T3865] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 42.122968][ T29] audit: type=1326 audit(42.019:2024): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4024 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcf09bfdff9 code=0x7ffc0000 [ 42.122992][ T29] audit: type=1326 audit(42.019:2025): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4024 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf09bfdff9 code=0x7ffc0000 [ 42.145195][ T3865] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.145205][ T3865] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 42.145217][ T3865] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.145246][ T3865] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 42.145259][ T3865] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.145267][ T3865] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 42.155722][ T29] audit: type=1326 audit(42.019:2026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4024 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fcf09bfdff9 code=0x7ffc0000 [ 42.177781][ T3865] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.191901][ T3865] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 42.300791][ T3266] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.319590][ T4061] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 42.333157][ T3865] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.342004][ T3865] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.350718][ T4055] loop1: detected capacity change from 0 to 512 [ 42.357138][ T3865] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.365972][ T3865] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.385430][ T4063] loop0: detected capacity change from 0 to 1024 [ 42.399360][ T4066] netlink: 4 bytes leftover after parsing attributes in process `syz.1.126'. [ 42.466635][ T4063] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.509740][ T4075] geneve2: entered promiscuous mode [ 42.509759][ T4075] geneve2: entered allmulticast mode [ 42.589801][ T4075] 9pnet: Could not find request transport: tcp n n n n n n y y n n [ 42.589801][ T4075] TIPC 1024 0 -1 NI 0 yes kernel n n n n n n n n n n n n n n n n n n [ 42.589801][ T4075] RDS 1096 0 -1 NI 0 yes kernel n n n n n n n n n n n n n n n n n n [ 42.589801][ T4075] SCTPv6 1560 1 0 no 0 yes kernel y n y y y y y y y y y y y y y y n y [ 42.589801][ T4075] SCTP 1400 0 0 no 0 yes kernel y [ 42.777383][ T4107] lo speed is unknown, defaulting to 1000 [ 42.948350][ T4111] loop3: detected capacity change from 0 to 128 [ 43.266143][ T3266] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.311233][ T4126] syz.0.134[4126] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 43.311311][ T4126] syz.0.134[4126] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 43.325018][ T4126] syz.0.134[4126] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 43.362208][ T4127] ebtables: ebtables: counters copy to user failed while replacing table [ 43.369808][ T4130] loop1: detected capacity change from 0 to 1024 [ 43.407409][ T4130] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 43.424079][ T4130] JBD2: no valid journal superblock found [ 43.429804][ T4130] EXT4-fs (loop1): Could not load journal inode [ 43.445844][ T4130] x_tables: ip6_tables: sctp match: only valid for protocol 132 [ 43.498114][ T4132] loop4: detected capacity change from 0 to 512 [ 43.507627][ T4132] EXT4-fs: test_dummy_encryption option not supported [ 43.518542][ T4141] loop3: detected capacity change from 0 to 1024 [ 43.522162][ T4132] ieee802154 phy0 wpan0: encryption failed: -22 [ 43.529724][ T4141] EXT4-fs: Ignoring removed orlov option [ 43.537026][ T4141] EXT4-fs: Ignoring removed nomblk_io_submit option [ 43.571532][ T4141] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 43.724878][ T3269] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.865654][ T4153] loop3: detected capacity change from 0 to 512 [ 43.966191][ T4153] netlink: 20 bytes leftover after parsing attributes in process `syz.3.143'. [ 44.059307][ T4153] lo speed is unknown, defaulting to 1000 [ 44.155738][ T4162] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present! [ 44.317751][ T4171] loop3: detected capacity change from 0 to 1024 [ 44.347662][ T4171] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.385213][ T4177] loop1: detected capacity change from 0 to 128 [ 44.503476][ T4181] loop4: detected capacity change from 0 to 128 [ 44.605110][ T4192] loop4: detected capacity change from 0 to 512 [ 44.697027][ T4201] lo speed is unknown, defaulting to 1000 [ 44.803904][ T4177] loop1: detected capacity change from 128 to 0 [ 44.826034][ T4192] EXT4-fs error (device loop4): ext4_orphan_get:1388: inode #15: comm syz.4.149: casefold flag without casefold feature [ 44.867768][ T4207] bio_check_eod: 13 callbacks suppressed [ 44.867784][ T4207] syz.1.147: attempt to access beyond end of device [ 44.867784][ T4207] loop1: rw=524288, sector=33, nr_sectors = 1 limit=0 [ 44.918286][ T4192] EXT4-fs error (device loop4): ext4_orphan_get:1393: comm syz.4.149: couldn't read orphan inode 15 (err -117) [ 44.969150][ T4192] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.990540][ T4209] loop0: detected capacity change from 0 to 2048 [ 45.042604][ T4207] syz.1.147: attempt to access beyond end of device [ 45.042604][ T4207] loop1: rw=524288, sector=34, nr_sectors = 1 limit=0 [ 45.057884][ T4209] EXT4-fs: Ignoring removed nomblk_io_submit option [ 45.058699][ T4207] syz.1.147: attempt to access beyond end of device [ 45.058699][ T4207] loop1: rw=524288, sector=35, nr_sectors = 1 limit=0 [ 45.064660][ T4209] ext4: Unknown parameter 'nouser_xattr' [ 45.078437][ T4207] syz.1.147: attempt to access beyond end of device [ 45.078437][ T4207] loop1: rw=524288, sector=36, nr_sectors = 1 limit=0 [ 45.130205][ T4209] loop0: detected capacity change from 0 to 256 [ 45.143341][ T4209] FAT-fs (loop0): bogus number of FAT sectors [ 45.145494][ T4207] syz.1.147: attempt to access beyond end of device [ 45.145494][ T4207] loop1: rw=524288, sector=37, nr_sectors = 1 limit=0 [ 45.149472][ T4209] FAT-fs (loop0): Can't find a valid FAT filesystem [ 45.169793][ T4192] loop4: detected capacity change from 512 to 64 [ 45.193930][ T4207] syz.1.147: attempt to access beyond end of device [ 45.193930][ T4207] loop1: rw=524288, sector=38, nr_sectors = 1 limit=0 [ 45.218523][ T4217] syz.4.149: attempt to access beyond end of device [ 45.218523][ T4217] loop4: rw=3, sector=500, nr_sectors = 4 limit=64 [ 45.232813][ T4207] syz.1.147: attempt to access beyond end of device [ 45.232813][ T4207] loop1: rw=524288, sector=39, nr_sectors = 1 limit=0 [ 45.234677][ T4217] syz.4.149: attempt to access beyond end of device [ 45.234677][ T4217] loop4: rw=2051, sector=504, nr_sectors = 2 limit=64 [ 45.247026][ T4207] syz.1.147: attempt to access beyond end of device [ 45.247026][ T4207] loop1: rw=524288, sector=40, nr_sectors = 1 limit=0 [ 45.259388][ T4217] EXT4-fs (loop4): discard request in group:0 block:249 count:3 failed with -5 [ 45.288931][ T4217] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6550: IO failure [ 45.303989][ T3269] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.307941][ T4207] FAT-fs (loop1): Directory bread(block 33) failed [ 45.319825][ T4217] EXT4-fs (loop4): discard request in group:0 block:40 count:1 failed with -5 [ 45.328876][ T4207] FAT-fs (loop1): Directory bread(block 34) failed [ 45.346977][ T4209] netlink: 16 bytes leftover after parsing attributes in process `syz.0.150'. [ 45.364188][ T4207] FAT-fs (loop1): Directory bread(block 35) failed [ 45.370795][ T4207] FAT-fs (loop1): Directory bread(block 36) failed [ 45.378373][ T4207] FAT-fs (loop1): Directory bread(block 37) failed [ 45.385291][ T4217] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6550: IO failure [ 45.412159][ T4217] EXT4-fs warning (device loop4): ext4_end_bio:346: I/O error 10 writing to inode 19 starting block 255) [ 45.423458][ T4217] Buffer I/O error on device loop4, logical block 255 [ 45.440414][ T4217] EXT4-fs warning (device loop4): ext4_end_bio:346: I/O error 10 writing to inode 19 starting block 253) [ 45.451676][ T4217] Buffer I/O error on device loop4, logical block 253 [ 45.457573][ T4236] loop0: detected capacity change from 0 to 512 [ 45.458416][ T4217] Buffer I/O error on device loop4, logical block 254 [ 45.473193][ T4217] EXT4-fs warning (device loop4): ext4_end_bio:346: I/O error 10 writing to inode 19 starting block 37) [ 45.484467][ T4217] Buffer I/O error on device loop4, logical block 37 [ 45.491148][ T4217] Buffer I/O error on device loop4, logical block 38 [ 45.497815][ T4217] Buffer I/O error on device loop4, logical block 39 [ 45.504475][ T4217] Buffer I/O error on device loop4, logical block 40 [ 45.511726][ T4207] FAT-fs (loop1): Directory bread(block 38) failed [ 45.516658][ T4217] EXT4-fs warning (device loop4): ext4_end_bio:346: I/O error 10 writing to inode 19 starting block 249) [ 45.529503][ T4217] Buffer I/O error on device loop4, logical block 249 [ 45.536332][ T4217] Buffer I/O error on device loop4, logical block 250 [ 45.543090][ T4217] Buffer I/O error on device loop4, logical block 251 [ 45.546318][ T4236] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.556102][ T4217] EXT4-fs warning (device loop4): ext4_end_bio:346: I/O error 10 writing to inode 19 starting block 41) [ 45.573825][ T4207] FAT-fs (loop1): Directory bread(block 39) failed [ 45.580343][ T4207] FAT-fs (loop1): Directory bread(block 40) failed [ 45.588699][ T3865] EXT4-fs warning (device loop4): htree_dirblock_to_tree:1083: inode #2: lblock 0: comm syz-executor: error -12 reading directory block [ 45.619269][ T4236] ext4 filesystem being mounted at /32/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 45.630786][ T4137] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.632541][ T3267] FAT-fs (loop1): Directory bread(block 33) failed [ 45.662029][ T4236] EXT4-fs error (device loop0): ext4_do_update_inode:5121: inode #2: comm syz.0.152: corrupted inode contents [ 45.683897][ T3267] FAT-fs (loop1): Directory bread(block 34) failed [ 45.690631][ T4236] EXT4-fs error (device loop0): ext4_dirty_inode:5984: inode #2: comm syz.0.152: mark_inode_dirty error [ 45.714856][ T4236] EXT4-fs error (device loop0): ext4_do_update_inode:5121: inode #2: comm syz.0.152: corrupted inode contents [ 45.735018][ T3267] FAT-fs (loop1): unable to read boot sector to mark fs as dirty [ 45.743012][ T4236] EXT4-fs error (device loop0): __ext4_ext_dirty:207: inode #2: comm syz.0.152: mark_inode_dirty error [ 45.767535][ T40] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.805934][ T40] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.865511][ T40] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.925972][ T40] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.030718][ T40] bridge_slave_1: left allmulticast mode [ 46.036458][ T40] bridge_slave_1: left promiscuous mode [ 46.042078][ T40] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.051050][ T40] bridge_slave_0: left allmulticast mode [ 46.056798][ T40] bridge_slave_0: left promiscuous mode [ 46.062439][ T40] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.168682][ T40] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 46.179076][ T40] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 46.188860][ T40] bond0 (unregistering): Released all slaves [ 46.196807][ T4275] lo speed is unknown, defaulting to 1000 [ 46.219962][ T4299] netlink: 20 bytes leftover after parsing attributes in process `syz.2.157'. [ 46.237240][ T3266] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.275035][ T40] hsr_slave_0: left promiscuous mode [ 46.281340][ T4301] loop3: detected capacity change from 0 to 1024 [ 46.288729][ T40] hsr_slave_1: left promiscuous mode [ 46.295156][ T4301] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 46.306145][ T4301] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 46.317442][ T40] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 46.324901][ T40] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 46.325339][ T4301] JBD2: no valid journal superblock found [ 46.337796][ T4301] EXT4-fs (loop3): Could not load journal inode [ 46.347523][ T40] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 46.354939][ T40] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 46.374459][ T40] veth1_macvtap: left promiscuous mode [ 46.379953][ T40] veth0_macvtap: left promiscuous mode [ 46.385558][ T40] veth1_vlan: left promiscuous mode [ 46.390852][ T40] veth0_vlan: left promiscuous mode [ 46.492550][ T40] team0 (unregistering): Port device team_slave_1 removed [ 46.502745][ T40] team0 (unregistering): Port device team_slave_0 removed [ 46.544058][ T4299] lo speed is unknown, defaulting to 1000 [ 46.586484][ T4275] chnl_net:caif_netlink_parms(): no params data found [ 46.639818][ T4275] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.647006][ T4275] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.655599][ T4275] bridge_slave_0: entered allmulticast mode [ 46.661912][ T4275] bridge_slave_0: entered promiscuous mode [ 46.669080][ T4275] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.676311][ T4275] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.684019][ T4275] bridge_slave_1: entered allmulticast mode [ 46.690693][ T4275] bridge_slave_1: entered promiscuous mode [ 46.710001][ T4275] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 46.721145][ T4275] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 46.740834][ T4275] team0: Port device team_slave_0 added [ 46.747310][ T4275] team0: Port device team_slave_1 added [ 46.762352][ T4275] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 46.769321][ T4275] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.795238][ T4275] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 46.806431][ T4275] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 46.813368][ T4275] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.839312][ T4275] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 46.867825][ T4275] hsr_slave_0: entered promiscuous mode [ 46.875865][ T4275] hsr_slave_1: entered promiscuous mode [ 47.123946][ T29] kauditd_printk_skb: 438 callbacks suppressed [ 47.123958][ T29] audit: type=1400 audit(2000000001.759:2465): avc: denied { name_bind } for pid=4385 comm="syz.0.161" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 47.127764][ T4386] sg_write: data in/out 18/14 bytes for SCSI command 0x4-- guessing data in; [ 47.127764][ T4386] program syz.0.161 not setting count and/or reply_len properly [ 47.130221][ T29] audit: type=1400 audit(2000000001.759:2466): avc: denied { node_bind } for pid=4385 comm="syz.0.161" saddr=172.20.20.170 src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 47.162009][ T4386] bond1: entered promiscuous mode [ 47.195851][ T4386] bond1: entered allmulticast mode [ 47.202402][ T4386] 8021q: adding VLAN 0 to HW filter on device bond1 [ 47.218229][ T29] audit: type=1400 audit(2000000001.759:2467): avc: denied { read write } for pid=4385 comm="syz.0.161" name="sg0" dev="devtmpfs" ino=111 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 47.242276][ T29] audit: type=1400 audit(2000000001.759:2468): avc: denied { open } for pid=4385 comm="syz.0.161" path="/dev/sg0" dev="devtmpfs" ino=111 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 47.267883][ T4386] bond1 (unregistering): Released all slaves [ 47.280625][ T11] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 47.312622][ T4275] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 47.324338][ T4275] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 47.337154][ T4275] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 47.349704][ T4275] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 47.369480][ T11] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 47.396543][ T29] audit: type=1400 audit(2000000002.029:2469): avc: denied { create } for pid=4404 comm="syz.0.164" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 47.420091][ T4391] lo speed is unknown, defaulting to 1000 [ 47.427188][ T29] audit: type=1400 audit(2000000002.049:2470): avc: denied { ioctl } for pid=4404 comm="syz.0.164" path="socket:[6589]" dev="sockfs" ino=6589 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 47.428647][ T4406] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:17 to non-existent VLAN 1280 [ 47.478299][ T11] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 47.489373][ T29] audit: type=1400 audit(2000000002.059:2471): avc: denied { write } for pid=4404 comm="syz.0.164" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 47.508901][ T29] audit: type=1326 audit(2000000002.109:2472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4413 comm="syz.2.165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73639fdff9 code=0x7ffc0000 [ 47.532304][ T29] audit: type=1326 audit(2000000002.109:2473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4413 comm="syz.2.165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73639fdff9 code=0x7ffc0000 [ 47.555608][ T29] audit: type=1326 audit(2000000002.109:2474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4413 comm="syz.2.165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f73639fdff9 code=0x7ffc0000 [ 47.614856][ T4421] lo speed is unknown, defaulting to 1000 [ 47.637908][ T11] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 47.654007][ T4275] 8021q: adding VLAN 0 to HW filter on device bond0 [ 47.686163][ T4427] netlink: 152 bytes leftover after parsing attributes in process `syz.0.166'. [ 47.719924][ T11] bridge_slave_1: left allmulticast mode [ 47.725598][ T11] bridge_slave_1: left promiscuous mode [ 47.731335][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.744230][ T11] bridge_slave_0: left allmulticast mode [ 47.749870][ T11] bridge_slave_0: left promiscuous mode [ 47.755625][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.865683][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 47.885421][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 47.895925][ T11] bond0 (unregistering): Released all slaves [ 47.918905][ T4391] chnl_net:caif_netlink_parms(): no params data found [ 47.966178][ T4275] 8021q: adding VLAN 0 to HW filter on device team0 [ 47.983038][ T4275] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 47.993441][ T4275] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 48.011865][ T1587] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.019011][ T1587] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.027738][ T1587] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.034855][ T1587] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.055450][ T4471] atomic_op ffff8881020cc928 conn xmit_atomic 0000000000000000 [ 48.086071][ T11] hsr_slave_0: left promiscuous mode [ 48.091724][ T11] hsr_slave_1: left promiscuous mode [ 48.097539][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 48.104945][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 48.112732][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 48.120154][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 48.132383][ T11] veth1_macvtap: left promiscuous mode [ 48.138077][ T11] veth0_macvtap: left promiscuous mode [ 48.143270][ T4480] loop0: detected capacity change from 0 to 2048 [ 48.143804][ T11] veth1_vlan: left promiscuous mode [ 48.155192][ T11] veth0_vlan: left promiscuous mode [ 48.164915][ T4480] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 48.195864][ T4480] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 48.210938][ T4480] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 48.223178][ T4480] EXT4-fs (loop0): This should not happen!! Data will be lost [ 48.223178][ T4480] [ 48.232892][ T4480] EXT4-fs (loop0): Total free blocks count 0 [ 48.238867][ T4480] EXT4-fs (loop0): Free/Dirty block details [ 48.244758][ T4480] EXT4-fs (loop0): free_blocks=2415919104 [ 48.250526][ T4480] EXT4-fs (loop0): dirty_blocks=16 [ 48.255676][ T4480] EXT4-fs (loop0): Block reservation details [ 48.261656][ T4480] EXT4-fs (loop0): i_reserved_data_blocks=1 [ 48.291607][ T11] team0 (unregistering): Port device team_slave_1 removed [ 48.301338][ T11] team0 (unregistering): Port device team_slave_0 removed [ 48.348262][ T4391] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.355351][ T4391] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.362964][ T4391] bridge_slave_0: entered allmulticast mode [ 48.370478][ T3266] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.373807][ T4391] bridge_slave_0: entered promiscuous mode [ 48.389269][ T4391] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.396381][ T4391] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.419922][ T4391] bridge_slave_1: entered allmulticast mode [ 48.427102][ T4391] bridge_slave_1: entered promiscuous mode [ 48.435443][ T4275] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.461713][ T4391] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 48.483856][ T4391] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 48.520481][ T4391] team0: Port device team_slave_0 added [ 48.534407][ T4391] team0: Port device team_slave_1 added [ 48.556248][ T4391] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 48.563209][ T4391] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 48.589126][ T4391] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 48.611207][ T4391] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 48.618242][ T4391] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 48.644223][ T4391] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 48.693316][ T4391] hsr_slave_0: entered promiscuous mode [ 48.699611][ T4391] hsr_slave_1: entered promiscuous mode [ 48.706862][ T4391] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 48.714451][ T4391] Cannot create hsr debugfs directory [ 48.733031][ T4508] loop0: detected capacity change from 0 to 2048 [ 48.747739][ T4275] veth0_vlan: entered promiscuous mode [ 48.764727][ T4275] veth1_vlan: entered promiscuous mode [ 48.801832][ T4275] veth0_macvtap: entered promiscuous mode [ 48.819629][ T4275] veth1_macvtap: entered promiscuous mode [ 48.851836][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 48.862353][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.872175][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 48.882604][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.898447][ T4508] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 48.921484][ T4275] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.944387][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 48.955008][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.964830][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 48.975416][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.985313][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 48.995738][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.039498][ T4275] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.062185][ T4492] 9pnet_fd: Insufficient options for proto=fd [ 49.070838][ T4275] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.079644][ T4275] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.088364][ T4275] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.097235][ T4275] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.167496][ T4534] loop1: detected capacity change from 0 to 128 [ 49.264344][ T4391] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 49.290912][ T4391] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 49.305701][ T4545] loop1: detected capacity change from 0 to 1024 [ 49.320152][ T4545] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 49.325056][ T4391] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 49.354371][ T4391] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 49.369992][ T3266] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.393617][ T4553] dvmrp0: entered allmulticast mode [ 49.420198][ T4554] loop3: detected capacity change from 0 to 512 [ 49.457541][ T4391] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.471460][ T4391] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.483530][ T40] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.490626][ T40] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.505039][ T143] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.512226][ T143] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.530442][ T4568] dvmrp0: left allmulticast mode [ 49.613406][ T4391] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.649179][ T4553] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 49.657387][ T4553] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 49.689775][ T4553] loop1: detected capacity change from 0 to 512 [ 49.709336][ T4553] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 49.729791][ T4553] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.762949][ T4553] ext4 filesystem being mounted at /2/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 49.867062][ T4275] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.901404][ T4391] veth0_vlan: entered promiscuous mode [ 49.920014][ T4391] veth1_vlan: entered promiscuous mode [ 49.937107][ T4391] veth0_macvtap: entered promiscuous mode [ 49.945013][ T4391] veth1_macvtap: entered promiscuous mode [ 49.961053][ T4391] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 49.971586][ T4391] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.981439][ T4391] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 49.991868][ T4391] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.001772][ T4391] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 50.012248][ T4391] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.024319][ T4391] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 50.036968][ T4391] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 50.047465][ T4391] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.047474][ T4391] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 50.067760][ T4391] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.077600][ T4391] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 50.088034][ T4391] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.097936][ T4391] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 50.108395][ T4391] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.119838][ T4391] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 50.122918][ T4391] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.122957][ T4391] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.122986][ T4391] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.123055][ T4391] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.248552][ T4628] loop3: detected capacity change from 0 to 512 [ 50.251049][ T4626] loop1: detected capacity change from 0 to 1024 [ 50.273008][ T4624] loop4: detected capacity change from 0 to 1024 [ 50.279897][ T4624] EXT4-fs: Ignoring removed orlov option [ 50.285594][ T4624] EXT4-fs: Ignoring removed nomblk_io_submit option [ 50.297174][ T4626] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 50.307039][ T4626] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 50.317128][ T4626] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 50.317972][ T4628] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.342051][ T4626] EXT4-fs error (device loop1): ext4_get_journal_inode:5762: inode #5: comm syz.1.179: unexpected bad inode w/o EXT4_IGET_BAD [ 50.343145][ T4628] ext4 filesystem being mounted at /37/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 50.373154][ T4626] EXT4-fs (loop1): no journal found [ 50.378399][ T4626] EXT4-fs (loop1): can't get journal size [ 50.386497][ T4624] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 50.399571][ T4626] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 50.431104][ T4628] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 50.442291][ T4624] netlink: 'syz.4.163': attribute type 10 has an invalid length. [ 50.450115][ T4624] netlink: 40 bytes leftover after parsing attributes in process `syz.4.163'. [ 50.469805][ T4626] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.179: bg 0: block 32: padding at end of block bitmap is not set [ 50.494068][ T4624] hsr0: entered promiscuous mode [ 50.499035][ T4624] hsr0: entered allmulticast mode [ 50.504157][ T4624] hsr_slave_0: entered allmulticast mode [ 50.509836][ T4624] hsr_slave_1: entered allmulticast mode [ 50.518220][ T4628] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 50.535994][ T4624] bridge0: port 3(hsr0) entered blocking state [ 50.542263][ T4624] bridge0: port 3(hsr0) entered disabled state [ 50.556792][ T4624] bridge0: port 3(hsr0) entered blocking state [ 50.563016][ T4624] bridge0: port 3(hsr0) entered forwarding state [ 50.571548][ T3269] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.580914][ T4626] batadv_slave_0: entered promiscuous mode [ 50.589594][ T4626] batadv_slave_0: left promiscuous mode [ 50.647005][ T4275] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.677563][ T4391] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.703393][ T4645] loop0: detected capacity change from 0 to 128 [ 50.716294][ T4645] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 50.718957][ T4644] netlink: 'syz.1.182': attribute type 10 has an invalid length. [ 50.739039][ T4645] ext4 filesystem being mounted at /42/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 50.778066][ T4644] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 50.787709][ T4644] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 50.814593][ T4648] geneve2: entered promiscuous mode [ 50.819819][ T4648] geneve2: entered allmulticast mode [ 50.839463][ T4645] netlink: 4 bytes leftover after parsing attributes in process `syz.0.183'. [ 50.920018][ T4662] loop4: detected capacity change from 0 to 1024 [ 50.987788][ T4662] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.020932][ T4674] geneve2: entered promiscuous mode [ 51.026170][ T4674] geneve2: entered allmulticast mode [ 51.044992][ T3266] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 51.071670][ T4662] vhci_hcd: default hub control req: 010b v0000 i0000 l0 [ 51.122371][ T4391] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.123233][ T4681] loop0: detected capacity change from 0 to 1024 [ 51.141688][ T4681] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 51.152605][ T4681] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 51.162376][ T4676] loop1: detected capacity change from 0 to 512 [ 51.164525][ T4681] JBD2: no valid journal superblock found [ 51.174397][ T4681] EXT4-fs (loop0): Could not load journal inode [ 51.188724][ T4676] EXT4-fs: test_dummy_encryption option not supported [ 51.212864][ T4676] ieee802154 phy0 wpan0: encryption failed: -22 [ 51.226101][ T4684] loop4: detected capacity change from 0 to 512 [ 51.259571][ T4684] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.275876][ T4690] loop1: detected capacity change from 0 to 1024 [ 51.283697][ T4684] ext4 filesystem being mounted at /3/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 51.301908][ T4691] loop3: detected capacity change from 0 to 1024 [ 51.308707][ T4690] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 51.319614][ T4690] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 51.330339][ T4691] EXT4-fs: Ignoring removed orlov option [ 51.336135][ T4691] EXT4-fs: Ignoring removed nomblk_io_submit option [ 51.343823][ T4690] JBD2: no valid journal superblock found [ 51.349575][ T4690] EXT4-fs (loop1): Could not load journal inode [ 51.356765][ T4684] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 51.368941][ T4691] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 51.385017][ T4684] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 51.402979][ T4686] netlink: 'syz.3.195': attribute type 10 has an invalid length. [ 51.410755][ T4686] netlink: 40 bytes leftover after parsing attributes in process `syz.3.195'. [ 51.429246][ T4686] hsr0: entered promiscuous mode [ 51.434261][ T4686] hsr0: entered allmulticast mode [ 51.439302][ T4686] hsr_slave_0: entered allmulticast mode [ 51.444991][ T4686] hsr_slave_1: entered allmulticast mode [ 51.452839][ T4391] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.465281][ T4686] bridge0: port 3(hsr0) entered blocking state [ 51.471493][ T4686] bridge0: port 3(hsr0) entered disabled state [ 51.478578][ T4686] bridge0: port 3(hsr0) entered blocking state [ 51.484803][ T4686] bridge0: port 3(hsr0) entered forwarding state [ 51.600386][ T3269] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.619898][ T4699] syz.3.197[4699] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 51.620017][ T4699] syz.3.197[4699] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 51.631457][ T4699] syz.3.197[4699] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 51.631481][ T4697] geneve2: entered promiscuous mode [ 51.659099][ T4697] geneve2: entered allmulticast mode [ 51.794745][ T4706] netlink: 3 bytes leftover after parsing attributes in process `syz.2.199'. [ 51.818445][ T4706] 1ªX¹¦À: renamed from 60ªX¹¦À [ 51.825460][ T4706] A link change request failed with some changes committed already. Interface 61ªX¹¦À may have been left with an inconsistent configuration, please check. [ 52.540069][ T29] kauditd_printk_skb: 368 callbacks suppressed [ 52.540081][ T29] audit: type=1400 audit(2000000007.169:2843): avc: denied { unmount } for pid=3269 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 52.786559][ T4725] netlink: 20 bytes leftover after parsing attributes in process `syz.4.204'. [ 52.790019][ T4724] loop0: detected capacity change from 0 to 1024 [ 52.810451][ T4725] lo speed is unknown, defaulting to 1000 [ 52.834301][ T4724] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 52.845238][ T4724] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 52.881627][ T4724] JBD2: no valid journal superblock found [ 52.887426][ T4724] EXT4-fs (loop0): Could not load journal inode [ 52.939960][ T29] audit: type=1400 audit(2000000007.559:2844): avc: denied { unmount } for pid=4391 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 53.030471][ T4736] loop3: detected capacity change from 0 to 1024 [ 53.071731][ T4736] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 53.319586][ T29] audit: type=1400 audit(2000000007.719:2845): avc: denied { mounton } for pid=4726 comm="syz.3.203" path="/44/file1/file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 53.360569][ T4741] geneve2: entered promiscuous mode [ 53.365887][ T4741] geneve2: entered allmulticast mode [ 53.439861][ T4745] geneve2: entered promiscuous mode [ 53.445134][ T4745] geneve2: entered allmulticast mode [ 53.462285][ T4747] IPv6: NLM_F_CREATE should be specified when creating new route [ 53.475128][ T4745] 9pnet: Could not find request transport: tcp n n n n n n y y n n [ 53.475128][ T4745] TIPC 1024 0 -1 NI 0 yes kernel n n n n n n n n n n n n n n n n n n [ 53.475128][ T4745] RDS 1096 0 -1 NI 0 yes kernel n n n n n n n n n n n n n n n n n n [ 53.475128][ T4745] SCTPv6 1560 1 0 no 0 yes kernel y n y y y y y y y y y y y y y y n y [ 53.475128][ T4745] SCTP 1400 0 0 no 0 yes kernel y [ 53.580628][ T4749] usb usb6: usbfs: process 4749 (syz.4.208) did not claim interface 0 before use [ 53.680178][ T29] audit: type=1400 audit(2000000008.299:2846): avc: denied { block_suspend } for pid=4752 comm="syz.0.210" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 53.702187][ T29] audit: type=1400 audit(2000000008.309:2847): avc: denied { create } for pid=4755 comm="syz.2.211" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 53.721532][ T29] audit: type=1400 audit(2000000008.309:2848): avc: denied { write } for pid=4755 comm="syz.2.211" path="socket:[8462]" dev="sockfs" ino=8462 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 53.744755][ T29] audit: type=1400 audit(2000000008.309:2849): avc: denied { read } for pid=4755 comm="syz.2.211" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 53.763964][ T29] audit: type=1400 audit(2000000008.309:2850): avc: denied { remove_name } for pid=3269 comm="syz-executor" name="lost+found" dev="loop3" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 53.787265][ T29] audit: type=1400 audit(2000000008.309:2851): avc: denied { rmdir } for pid=3269 comm="syz-executor" name="lost+found" dev="loop3" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 53.809962][ T29] audit: type=1400 audit(2000000008.309:2852): avc: denied { unlink } for pid=3269 comm="syz-executor" name="file0" dev="loop3" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 53.833438][ T3269] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.872433][ T4763] atomic_op ffff888130f67928 conn xmit_atomic 0000000000000000 [ 53.874541][ T4765] loop4: detected capacity change from 0 to 128 [ 53.899534][ T4765] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 53.912839][ T4765] ext4 filesystem being mounted at /10/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 53.980585][ T4771] loop3: detected capacity change from 0 to 1024 [ 53.987789][ T4771] EXT4-fs: Ignoring removed nomblk_io_submit option [ 54.017077][ T4771] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 54.124404][ T3269] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.147095][ T4391] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 54.172091][ T4778] geneve2: entered promiscuous mode [ 54.177545][ T4778] geneve2: entered allmulticast mode [ 54.179248][ T4780] loop3: detected capacity change from 0 to 512 [ 54.206720][ T4780] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 54.219353][ T4780] ext4 filesystem being mounted at /48/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 54.246879][ T4785] netlink: 'syz.4.219': attribute type 10 has an invalid length. [ 54.254767][ T4785] netlink: 40 bytes leftover after parsing attributes in process `syz.4.219'. [ 54.263921][ T4785] team0: entered promiscuous mode [ 54.268947][ T4785] team_slave_0: entered promiscuous mode [ 54.274816][ T4785] team_slave_1: entered promiscuous mode [ 54.280618][ T4785] team0: entered allmulticast mode [ 54.285757][ T4785] team_slave_0: entered allmulticast mode [ 54.291473][ T4785] team_slave_1: entered allmulticast mode [ 54.307109][ T4785] bridge0: port 4(team0) entered blocking state [ 54.313447][ T4785] bridge0: port 4(team0) entered disabled state [ 54.313597][ T4787] loop4: detected capacity change from 0 to 512 [ 54.322937][ T4785] bridge0: port 4(team0) entered blocking state [ 54.332207][ T4785] bridge0: port 4(team0) entered forwarding state [ 54.332241][ T4787] EXT4-fs (loop4): fragment/cluster size (1024) != block size (2048) [ 54.339918][ T4780] lo speed is unknown, defaulting to 1000 [ 54.356012][ T4786] infiniband Syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 54.415479][ T4794] block device autoloading is deprecated and will be removed. [ 54.433738][ T4795] netlink: 52 bytes leftover after parsing attributes in process `syz.1.220'. [ 54.442601][ T4795] netlink: 68 bytes leftover after parsing attributes in process `syz.1.220'. [ 54.555086][ T4798] loop0: detected capacity change from 0 to 2048 [ 54.609842][ T4801] netlink: 8 bytes leftover after parsing attributes in process `syz.2.224'. [ 54.625760][ T4798] loop0: p1 < > p4 [ 54.630194][ T4798] loop0: p4 size 8388608 extends beyond EOD, truncated [ 54.649715][ T4791] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.652946][ T4798] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.662254][ T4802] SELinux: Context system_u:object_r:dhcp_state_t:s0 is not valid (left unmapped). [ 54.679966][ T2969] loop0: p1 < > p4 [ 54.689416][ T2969] loop0: p4 size 8388608 extends beyond EOD, truncated [ 54.775766][ T1587] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.814165][ T4805] random: crng reseeded on system resumption [ 54.837446][ T1587] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.897436][ T4807] lo speed is unknown, defaulting to 1000 [ 54.927799][ T1587] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.027776][ T4836] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 55.110219][ T1587] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.129037][ T4838] loop4: detected capacity change from 0 to 512 [ 55.139985][ T4838] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 55.195622][ T4838] EXT4-fs (loop4): 1 truncate cleaned up [ 55.198487][ T1587] bridge0: port 3(hsr0) entered disabled state [ 55.201742][ T4838] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 55.220968][ T1587] bridge_slave_1: left allmulticast mode [ 55.226671][ T1587] bridge_slave_1: left promiscuous mode [ 55.232330][ T1587] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.248932][ T1587] bridge_slave_0: left allmulticast mode [ 55.254678][ T1587] bridge_slave_0: left promiscuous mode [ 55.260371][ T1587] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.395715][ T1587] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 55.405895][ T1587] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 55.418283][ T1587] bond0 (unregistering): Released all slaves [ 55.429107][ T4807] chnl_net:caif_netlink_parms(): no params data found [ 55.491946][ T1587] hsr_slave_0: left promiscuous mode [ 55.509713][ T4391] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.522079][ T1587] hsr_slave_1: left promiscuous mode [ 55.534525][ T1587] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 55.544020][ T1587] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 55.551451][ T1587] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 55.563893][ T1587] veth1_macvtap: left promiscuous mode [ 55.569371][ T1587] veth0_macvtap: left promiscuous mode [ 55.574943][ T1587] veth1_vlan: left promiscuous mode [ 55.580167][ T1587] veth0_vlan: left promiscuous mode [ 55.710583][ T1587] team0 (unregistering): Port device team_slave_1 removed [ 55.730893][ T1587] team0 (unregistering): Port device team_slave_0 removed [ 55.797952][ T4807] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.805184][ T4807] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.824744][ T4807] bridge_slave_0: entered allmulticast mode [ 55.842776][ T4807] bridge_slave_0: entered promiscuous mode [ 55.861759][ T4899] geneve2: entered promiscuous mode [ 55.867017][ T4899] geneve2: entered allmulticast mode [ 55.879614][ T3342] lo speed is unknown, defaulting to 1000 [ 55.887924][ T4807] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.895005][ T4807] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.915315][ T4807] bridge_slave_1: entered allmulticast mode [ 55.944144][ T4807] bridge_slave_1: entered promiscuous mode [ 55.969360][ T4943] loop4: detected capacity change from 0 to 1024 [ 55.979148][ T4807] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 56.000568][ T4943] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 56.005173][ T4807] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 56.011452][ T4943] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 56.040371][ T4943] JBD2: no valid journal superblock found [ 56.046153][ T4943] EXT4-fs (loop4): Could not load journal inode [ 56.095880][ T4807] team0: Port device team_slave_0 added [ 56.113193][ T4807] team0: Port device team_slave_1 added [ 56.168743][ T4807] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 56.175846][ T4807] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.201827][ T4807] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 56.223198][ T4807] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 56.230233][ T4807] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.256262][ T4807] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 56.321156][ T4807] hsr_slave_0: entered promiscuous mode [ 56.328520][ T4807] hsr_slave_1: entered promiscuous mode [ 56.334467][ T4807] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 56.342082][ T4807] Cannot create hsr debugfs directory [ 56.873360][ T4807] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 56.913523][ T4807] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 56.971178][ T4807] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 57.016356][ T4807] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 57.103152][ T4807] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.115610][ T4807] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.126976][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.134086][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.149736][ T40] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.156805][ T40] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.241946][ T4807] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.335401][ T4807] veth0_vlan: entered promiscuous mode [ 57.354774][ T4807] veth1_vlan: entered promiscuous mode [ 57.377492][ T5101] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 57.392550][ T4807] veth0_macvtap: entered promiscuous mode [ 57.421463][ T4807] veth1_macvtap: entered promiscuous mode [ 57.449534][ T4807] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.460006][ T4807] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.469863][ T4807] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.480319][ T4807] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.490185][ T4807] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.500836][ T4807] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.510755][ T4807] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.521210][ T4807] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.531782][ T5112] No source specified [ 57.547743][ T4807] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 57.565823][ T4807] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.576304][ T4807] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.586129][ T4807] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.596555][ T4807] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.606388][ T4807] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.618032][ T4807] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.627903][ T4807] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.638397][ T4807] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.651868][ T4807] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.660287][ T4807] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.669076][ T4807] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.677776][ T4807] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.686557][ T4807] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.755283][ T29] kauditd_printk_skb: 286 callbacks suppressed [ 57.755296][ T29] audit: type=1400 audit(2000000012.389:3139): avc: denied { mounton } for pid=4807 comm="syz-executor" path="/root/syzkaller.9Jk3cS/syz-tmp" dev="sda1" ino=1956 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 57.791384][ T29] audit: type=1400 audit(2000000012.419:3140): avc: denied { mount } for pid=4807 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 57.813608][ T29] audit: type=1400 audit(2000000012.419:3141): avc: denied { mount } for pid=4807 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 57.835582][ T29] audit: type=1400 audit(2000000012.419:3142): avc: denied { mounton } for pid=4807 comm="syz-executor" path="/root/syzkaller.9Jk3cS/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 57.862483][ T29] audit: type=1400 audit(2000000012.419:3143): avc: denied { mounton } for pid=4807 comm="syz-executor" path="/root/syzkaller.9Jk3cS/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=9412 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 57.890073][ T29] audit: type=1400 audit(2000000012.419:3144): avc: denied { mounton } for pid=4807 comm="syz-executor" path="/dev/binderfs" dev="devtmpfs" ino=454 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 57.928908][ T29] audit: type=1400 audit(2000000012.559:3145): avc: denied { create } for pid=5142 comm="syz.2.236" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 57.975344][ T29] audit: type=1400 audit(2000000012.559:3146): avc: denied { setopt } for pid=5142 comm="syz.2.236" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 57.995303][ T29] audit: type=1400 audit(2000000012.559:3147): avc: denied { write } for pid=5142 comm="syz.2.236" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 58.022863][ T29] audit: type=1400 audit(2000000012.649:3148): avc: denied { setopt } for pid=5146 comm="syz.3.226" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 58.190450][ T5161] loop3: detected capacity change from 0 to 512 [ 58.321884][ T5170] loop0: detected capacity change from 0 to 128 [ 59.034683][ T5188] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 59.046239][ T5188] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5188 comm=syz.4.243 [ 59.061377][ T5188] netlink: 'syz.4.243': attribute type 1 has an invalid length. [ 59.083349][ T5192] sch_tbf: peakrate 6 is lower than or equals to rate 705765376 ! [ 59.213158][ T5199] loop0: detected capacity change from 0 to 1024 [ 59.244904][ T5199] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 59.286529][ T5199] vhci_hcd: default hub control req: 010b v0000 i0000 l0 [ 59.302076][ T3266] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.327524][ T5205] loop0: detected capacity change from 0 to 1024 [ 59.334239][ T5205] EXT4-fs: Ignoring removed nomblk_io_submit option [ 59.342905][ T5205] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e854e01c, mo2=0003] [ 59.351388][ T5205] System zones: 0-1, 3-36 [ 59.361435][ T5205] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 59.404467][ T5207] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 59.412656][ T5207] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 59.828562][ T5214] loop1: detected capacity change from 0 to 512 [ 59.839896][ T5214] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 59.855058][ T5214] EXT4-fs error (device loop1): ext4_orphan_get:1388: inode #17: comm syz.1.249: iget: bad i_size value: -6917529027641081756 [ 59.868419][ T5214] EXT4-fs error (device loop1): ext4_orphan_get:1393: comm syz.1.249: couldn't read orphan inode 17 (err -117) [ 59.910216][ T5209] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.249: bg 0: block 65: padding at end of block bitmap is not set [ 59.925314][ T5209] EXT4-fs error (device loop1): ext4_acquire_dquot:6879: comm syz.1.249: Failed to acquire dquot type 0 [ 59.960254][ T5209] syzkaller0: entered promiscuous mode [ 59.965835][ T5209] syzkaller0: entered allmulticast mode [ 60.105861][ C1] TCP: request_sock_TCP: Possible SYN flooding on port [::]:2. Sending cookies. [ 60.530110][ T5230] loop4: detected capacity change from 0 to 1024 [ 60.539680][ T5230] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 60.550609][ T5230] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 60.560665][ T5230] JBD2: no valid journal superblock found [ 60.566420][ T5230] EXT4-fs (loop4): Could not load journal inode [ 60.656734][ T2969] ================================================================== [ 60.664832][ T2969] BUG: KCSAN: data-race in d_delete / step_into [ 60.671073][ T2969] [ 60.673382][ T2969] read-write to 0xffff88810680f780 of 4 bytes by task 3257 on cpu 0: [ 60.681433][ T2969] d_delete+0x73/0x100 [ 60.685496][ T2969] d_delete_notify+0x34/0x100 [ 60.690172][ T2969] vfs_unlink+0x320/0x430 [ 60.694497][ T2969] do_unlinkat+0x236/0x4c0 [ 60.698916][ T2969] __x64_sys_unlink+0x2e/0x40 [ 60.703592][ T2969] x64_sys_call+0x280f/0x2d60 [ 60.708269][ T2969] do_syscall_64+0xc9/0x1c0 [ 60.712765][ T2969] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 60.718657][ T2969] [ 60.720967][ T2969] read to 0xffff88810680f780 of 4 bytes by task 2969 on cpu 1: [ 60.728499][ T2969] step_into+0xe7/0x810 [ 60.732643][ T2969] walk_component+0x169/0x230 [ 60.737314][ T2969] path_lookupat+0x10a/0x2b0 [ 60.741897][ T2969] filename_lookup+0x127/0x300 [ 60.746657][ T2969] do_readlinkat+0x89/0x210 [ 60.751158][ T2969] __x64_sys_readlink+0x47/0x60 [ 60.756003][ T2969] x64_sys_call+0x13c3/0x2d60 [ 60.760674][ T2969] do_syscall_64+0xc9/0x1c0 [ 60.765170][ T2969] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 60.771060][ T2969] [ 60.773368][ T2969] value changed: 0x00600108 -> 0x00008008 [ 60.779074][ T2969] [ 60.781381][ T2969] Reported by Kernel Concurrency Sanitizer on: [ 60.787524][ T2969] CPU: 1 UID: 0 PID: 2969 Comm: udevd Not tainted 6.12.0-rc3-syzkaller-00013-geca631b8fe80 #0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 60.797753][ T2969] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 60.807805][ T2969] ================================================================== [ 61.147868][ T11] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.195723][ T11] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.236644][ T11] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.286138][ T11] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.351269][ T11] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.406116][ T11] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.456009][ T11] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.506051][ T11] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.559432][ T11] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.606337][ T11] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.656120][ T11] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.746509][ T11] bridge_slave_1: left allmulticast mode [ 61.752158][ T11] bridge_slave_1: left promiscuous mode [ 61.757874][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.765505][ T11] bridge_slave_0: left allmulticast mode [ 61.771146][ T11] bridge_slave_0: left promiscuous mode [ 61.776783][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.785228][ T11] bridge0: port 4(team0) entered disabled state [ 61.792070][ T11] bridge0: port 3(hsr0) entered disabled state [ 61.798662][ T11] bridge_slave_1: left allmulticast mode [ 61.804302][ T11] bridge_slave_1: left promiscuous mode [ 61.809961][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.817722][ T11] bridge_slave_0: left allmulticast mode [ 61.823368][ T11] bridge_slave_0: left promiscuous mode [ 61.828966][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.837092][ T11] bridge_slave_1: left allmulticast mode [ 61.842712][ T11] bridge_slave_1: left promiscuous mode [ 61.848388][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.856018][ T11] bridge_slave_0: left allmulticast mode [ 61.861650][ T11] bridge_slave_0: left promiscuous mode [ 61.867342][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.095607][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 62.105598][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 62.115442][ T11] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 62.126468][ T11] bond0 (unregistering): Released all slaves [ 62.135035][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 62.144969][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 62.154706][ T11] bond0 (unregistering): Released all slaves [ 62.163076][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 62.173230][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 62.183285][ T11] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 62.194308][ T11] bond0 (unregistering): Released all slaves [ 62.239580][ T11] hsr_slave_0: left promiscuous mode [ 62.245303][ T11] hsr_slave_1: left promiscuous mode [ 62.250923][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 62.258356][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 62.266591][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 62.274043][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 62.283206][ T11] hsr_slave_0: left promiscuous mode [ 62.290148][ T11] hsr_slave_1: left promiscuous mode [ 62.295825][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 62.303223][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 62.310868][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 62.318273][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 62.326748][ T11] hsr_slave_0: left promiscuous mode [ 62.332387][ T11] hsr_slave_1: left promiscuous mode [ 62.338400][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 62.345848][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 62.353225][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 62.360775][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 62.371244][ T11] veth1_macvtap: left promiscuous mode [ 62.376710][ T11] veth0_macvtap: left promiscuous mode [ 62.382173][ T11] veth1_vlan: left promiscuous mode [ 62.387487][ T11] veth0_vlan: left promiscuous mode [ 62.393248][ T11] veth1_macvtap: left promiscuous mode [ 62.398745][ T11] veth0_macvtap: left promiscuous mode [ 62.404354][ T11] veth1_vlan: left promiscuous mode [ 62.409595][ T11] veth0_vlan: left promiscuous mode [ 62.415751][ T11] veth1_vlan: left promiscuous mode [ 62.420973][ T11] veth0_vlan: left promiscuous mode [ 62.562435][ T11] team0 (unregistering): Port device team_slave_1 removed [ 62.572251][ T11] team0 (unregistering): Port device team_slave_0 removed [ 62.626220][ T11] team_slave_1 (unregistering): left promiscuous mode [ 62.632976][ T11] team_slave_1 (unregistering): left allmulticast mode [ 62.640419][ T11] team0 (unregistering): Port device team_slave_1 removed [ 62.649813][ T11] team_slave_0 (unregistering): left promiscuous mode [ 62.656613][ T11] team_slave_0 (unregistering): left allmulticast mode [ 62.663906][ T11] team0 (unregistering): Port device team_slave_0 removed [ 62.712148][ T11] team0 (unregistering): Port device team_slave_1 removed [ 62.721701][ T11] team0 (unregistering): Port device team_slave_0 removed [ 63.318114][ T11] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.346711][ T11] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.407233][ T11] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.467054][ T11] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.535888][ T11] bridge_slave_1: left allmulticast mode [ 63.541549][ T11] bridge_slave_1: left promiscuous mode [ 63.547218][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.555278][ T11] bridge_slave_0: left allmulticast mode [ 63.560928][ T11] bridge_slave_0: left promiscuous mode [ 63.566738][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.695984][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 63.705815][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 63.715248][ T11] bond0 (unregistering): Released all slaves [ 63.756152][ T11] hsr_slave_0: left promiscuous mode [ 63.761848][ T11] hsr_slave_1: left promiscuous mode [ 63.767943][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 63.775379][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 63.783231][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 63.790654][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 63.799626][ T11] veth1_macvtap: left promiscuous mode [ 63.805244][ T11] veth0_macvtap: left promiscuous mode [ 63.810791][ T11] veth1_vlan: left promiscuous mode [ 63.816033][ T11] veth0_vlan: left promiscuous mode [ 63.875092][ T11] team0 (unregistering): Port device team_slave_1 removed [ 63.885213][ T11] team0 (unregistering): Port device team_slave_0 removed [ 64.671079][ T29] kauditd_printk_skb: 609 callbacks suppressed [ 64.671091][ T29] audit: type=1400 audit(2000000019.299:3756): avc: denied { sys_chroot } for pid=5570 comm="dhcpcd" capability=18 scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=capability permissive=1 [ 64.698748][ T29] audit: type=1400 audit(2000000019.299:3757): avc: denied { setgid } for pid=5570 comm="dhcpcd" capability=6 scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=capability permissive=1 [ 64.719611][ T29] audit: type=1400 audit(2000000019.299:3758): avc: denied { setuid } for pid=5570 comm="dhcpcd" capability=7 scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=capability permissive=1 [ 64.740418][ T29] audit: type=1400 audit(2000000019.299:3759): avc: denied { setrlimit } for pid=5570 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=process permissive=1