last executing test programs: 8.955024499s ago: executing program 1 (id=711): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x7, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000fecd230fc0002000080000000000000070000005d0000000000952d62bb00080f8f6a7b9404d7156d247f3e66fde658dbe17d9d78090cf4a5b1a8e35cedee4be5e9dfaf36f7d07e7e06525223d7bd463f9c84d522ef51cefda38bcf5fdae77681be4fd083f06c106503"], &(0x7f0000000100)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000080000000c"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001700)={0x5, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="185200000f000000000000000000000018450000ffffffff000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000c00163f5c000d64a5d2fc4d22130000b700000000000009918af0ffffffffff182b0000", @ANYRES32=r1, @ANYBLOB="00000000020000008520000003000000487b4000f0ffffff"], &(0x7f0000000200)='GPL\x00', 0xa, 0x5d, &(0x7f0000001500)=""/93, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000003c0)={0x4, 0x10, 0x80, 0x2e0}, 0x10, 0xffffffffffffffff, r0, 0x1, 0x0, &(0x7f0000001580)=[{0x2, 0x1, 0xd, 0x8}], 0x10, 0x6}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0xd, &(0x7f00000029c0)=ANY=[@ANYRES64=r1, @ANYBLOB="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", @ANYBLOB, @ANYRES64=r0, @ANYRESOCT=r2], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x14, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70200001400ffd9b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000002c0)='mem_connect\x00', r5}, 0x18) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000007940)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x33f}, 0x1, 0x0, 0x0, 0xc0d0}, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) r7 = socket$pppl2tp(0x18, 0x1, 0x1) socket(0x200000000000011, 0x2, 0x0) unshare(0x6a040000) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r8 = gettid() r9 = eventfd2(0x0, 0x0) write$eventfd(r9, &(0x7f0000000140)=0xfffffffffffffff8, 0x8) write$eventfd(r9, &(0x7f0000000040)=0x8, 0x8) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r8}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r10 = socket$inet6(0xa, 0x1, 0x8010000000000084) sendmmsg$inet6(r10, &(0x7f0000004cc0)=[{{&(0x7f0000000040)={0xa, 0x4e22, 0x1ff, @private0, 0x2}, 0x1c, &(0x7f00000001c0)}}], 0x1, 0x8081) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) connect$pppl2tp(r7, &(0x7f0000000440)=@pppol2tp={0x18, 0x1, {0x0, r6, {0x2, 0x1, @remote}, 0xa}}, 0x26) sendmmsg$inet(r7, &(0x7f0000005f80)=[{{0x0, 0x0, &(0x7f0000005dc0)=[{&(0x7f00000010c0)="7d5107673289eeae3f806c5c62db497a0299399ab6101c3b", 0x1}], 0x1}}], 0x4000000000001ce, 0x8040) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) r11 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), r11) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32=r3, @ANYRES16=r3], &(0x7f0000000240)='GPL\x00', 0xfffffa0b, 0x0, 0x0, 0x61980, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r12, 0x0, 0x5}, 0x18) 7.006281395s ago: executing program 1 (id=722): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_elf64(r3, &(0x7f0000000980)=ANY=[@ANYBLOB="7f454c4600000006010000000000000003003e000000000003000000000000004000000000000000980100000000000002000000000038000200000002000000000000600300000008000000000000000d00000000000000ed08000000000000f0ffffffffffffff0000000000000000080000000000000003000000cff5ffff800300000000000001000000000000000500000000000000ff"], 0x5b0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r5, &(0x7f0000000100)={0x0, 0x2844, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r6, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) 6.961606519s ago: executing program 1 (id=723): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='netlink_extack\x00', r0}, 0x10) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'gre0\x00', 0x0}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) r4 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r4, 0x541b, &(0x7f00000001c0)) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000200)={'batadv_slave_1\x00'}) r5 = memfd_create(&(0x7f0000000000)='\xf3e\t\x9f\x918\xc0y\x01c\x1fnux\x00sV\ad\xb0l \xfd\xd7\x8e\x7f\x89\xb8\xc5;~\x04\x03~K\xfbP\x84=\xfa\x81\f\x1et\x10\x0e\xcf^9\xbe\\', 0x0) pwrite64(r5, &(0x7f00000008c0)='/', 0x1, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r5, 0x0) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f00000000c0)='./file0\x00') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={0x0}, 0x18) socket$key(0xf, 0x3, 0x2) io_uring_setup(0x25f1, &(0x7f0000000300)={0x0, 0x2603, 0x40, 0x3, 0x3d7}) r6 = socket$nl_rdma(0x10, 0x3, 0x14) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = syz_open_dev$usbfs(&(0x7f0000002000), 0xd, 0x20041) ioctl$USBDEVFS_SUBMITURB(r7, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x80, 0x0, 0x0, 0x0, 0x2}, 0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$USBDEVFS_REAPURBNDELAY(r7, 0x4004550d, 0x0) symlink(&(0x7f0000001780)='./file0/../file0\x00', &(0x7f00000017c0)='./file0\x00') r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r8}, 0x10) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f00000005c0)={[{@nolazytime}, {@jqfmt_vfsold}, {@journal_path={'journal_path', 0x3d, './file0/../file0'}}, {@noquota}, {@nodioread_nolock}, {@journal_checksum}, {@data_err_abort}], [{@seclabel}]}, 0x3, 0x473, &(0x7f0000000640)="$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") ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r7, 0x8010671f, &(0x7f0000000440)={&(0x7f00000003c0)=""/7, 0x7}) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x38, 0x1403, 0x1, 0x70bd29, 0x25dfdbff, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth0_to_bridge\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8081}, 0x20000010) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newqdisc={0x2c, 0x24, 0x3fe3aa0262d8c583, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x10, 0xe}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x7}]}, 0x2c}}, 0x4048000) 6.653671894s ago: executing program 1 (id=726): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x7, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000fecd230fc0002000080000000000000070000005d0000000000952d62bb00080f8f6a7b9404d7156d247f3e66fde658dbe17d9d78090cf4a5b1a8e35cedee4be5e9dfaf36f7d07e7e06525223d7bd463f9c84d522ef51cefda38bcf5fdae77681be4fd083f06c106503"], &(0x7f0000000100)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000080000000c"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001700)={0x5, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="185200000f000000000000000000000018450000ffffffff000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000c00163f5c000d64a5d2fc4d22130000b700000000000009918af0ffffffffff182b0000", @ANYRES32=r1, @ANYBLOB="00000000020000008520000003000000487b4000f0ffffff"], &(0x7f0000000200)='GPL\x00', 0xa, 0x5d, &(0x7f0000001500)=""/93, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000003c0)={0x4, 0x10, 0x80, 0x2e0}, 0x10, 0xffffffffffffffff, r0, 0x0, 0x0, &(0x7f0000001580), 0x10, 0x6}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0xd, &(0x7f00000029c0)=ANY=[@ANYRES64=r1, @ANYBLOB="157d9704e6aa0d8ac14d58ee7b3ad6d43c72f49871649d3221a5ffbce54492cffdfd9bd3f2aa3ef41f0bc417b563764259f67398d3c167ace94e7547b7e1d43b1e419736ed0124e164e7211bf7834f929fe369be63a742f47168b23bd7e64209ea166373fb7a0d129415241c62f40c8e0243edd912b22e971e00cd4827076a9a2412d053f4a1f22d127b824d5b904450c0af456f2ba2b9fc5a1d368c88674f238afc625577a4b10dd2cdcd5ee5223aa381089087afb3f4e7c7e3081ed5e4e20e282e27f70c71b093e9a1eaf419ee0546da8c07dee2405deadbd1ee0772f67b1ee1db0609b64a14c44bb3f8fb9e73ba3b41665161359f5b056726395c73133238b7364fda079007646c2ae59d5857ac8956a88cb1f35186a805d2cb91990d4c5397e7fe5f90188c71191b44efd697c1bd26dd27e1a65ce3f7e9fb4dcc364ca41bf3ce31d5f51c2d646f11fd7cfbfcd89c8158f052361f7b5d19a39c8a13b822337ea9a6551669d6b78b1e807f4f56238791e0eda615c4ebe8bff6e871653f6b1bd396f763cf65cddd32f203a7109ee53b1c057a233596baec8eaabf32b665fdd4cce76805361c3944e4b61a12ad9fb0827477cee367338b4520ebe378364238c5570ba33c2d4512b0e47ed2d0f1482328285621188095d455dbf1f16e0e391b735f355cb8272def6959492eb127be0c1c71192571562d0df5bf799c1e6e537b96690d15fd458efcc378802407d25ddac0591b3096d88ffb0bd65737defded895434479c812af44da85f1673438eb19cd53662f1654b27009fb973ca7e5dc081505140d32bb8d5a11be07870bd729fa400835755038d890568ddfd0451203bd0ed19185cd7fd43aa3cab719217c5e98d5ea6734117b9b49bf75c8adb66c3e12620842cb4df5053b90bf4840d9ed4db81c412472ecb253611b72ba73aba89e5d9037db33b672559771fd3b0c5b7b606f79cb736a5cbac7910aaad96f2f2f8efa89a99d7ebca5d74451f5a4408456d42d03b0845e4b5ef5cdd31b0b1c7fad85ce3483bf9a915ba72c3e6d05d3f4cfe5389db23a5a4885ae12a49868fd5b71876e19718d36e9d16083ae0c38dd88241a9f7fd9efa94c4b03975c3a6819ef9ebb56c02ee80123d088922e4adc04c50cd033364e13b267fc288de297a4e1de6390ad07db13d6ca7b060ec4b53b26f69f118fcc3b6a3a109ca14da094219d4e4d0a5d75c36d3315d9395ed7292c29b5da8ccc42696a6ca4f2984ebaf0e76022c25123d2446a4d2d12f4625b513a07ab2fd859f4cfdac0e5a3b344ba307415044ea79f77593431c24e8539b81c9292435b762815b5c6e067287a0b790c3703bd970d83976455d8bbc3483309cc92d1541481c773a7b877d008e495c051643b66e85d95ea3d200a9b41abc390f23b459d799bd98ff4db51ddfab755f52909090f6b2fc2755c38babdba493250e00a1a18356c8f9550fe7b6d5d0a14d5acba6050ec4796e4e084137c20ac2e95a42795190420ede9558109992d2dcdefed69e2e5a8ae87693993df34eacb1f23772a8ff45a546264196d6afc3d4be56abc4f0d0debd6dae66d0cca0e797c7d8538a6621a641aa653077676a0aec8fa0c3c9caa1994a3221f86e3328f543772c4bc582ba91dec2e7738737091ef930e5df29de1fd8727fd6f08cd0d7c62fdd4f2b1b77ffc3e38f7a7acde846aaadeebb787fcd7a457087509a73b84503b631dd6202558800c3fd37dfe987754570d07a8c26a593d9226e3cfb672f66ce544855508a23e18b4a079d70ea01cbceeb2c7365b75d6ee3bc73c015b2891d423823943303564747fcaa99df8b68575854b53ed2a5f2939a73ff63922dfbb1144a16c1a89fd3ec735195b57794edf7261fe8f39a0c097329ec2557198f0225530596c2af5c15eb2dae13c49a393ec54e2fd6fb79c7486018bb86de3f140573c5cb0f9e19389d721187b46b4d60659151210c8a7fd4295f0d5baead54b18aa472930f734d83151b6e9c7d97033495b2ea7d22a0a69ae369f39bae3f98b1f3deba7ee57b3891994810f16e438d942ed9a2db0ae79245f05ccf68baebb14eff46da3f9a604e3a1a2b231235aee6413e086f87a2e0ecd90581ad1200227d84bb59a58b96868d2da157905fc2ba39a87589a2029feb5c92db68cb04417c31b40725b32286ae3c8fdc9325453ece1d83b9fca4e3f0b458a33e30b71f3620de3d17258cdb855108ffbb34dbb6ea39df19aafb405da71cd7eb5541714cb03887773da112e259f7174e65e10de68524a4ceace1d1c864e9533fec0b9d2ad5698725e4196ae255e5fb1a69cbb6e1b5dced27cbdb4467196a69c03eab378bf603738f98289b140a67cdf826b9a21c394406644a1c774f720d49ecb270a5571311304127e35e9c6f5a134f99280e3ac2efd66f60b7b378d49140296277057ea0d4135934167169b35e71f866969e7aceeb6318b9093269e05e2918dcb37556342e1d1a69334ce6b4eea56f93965f6ffa74a9b58eda52d57175b06b4c79c91035b3470a7f3cb97f52ca06d4919f4b5b7ebc4a1afbb2d2a2ddfe2d0a092104ac96d942d6c9bdb3d6c052b6ad2b3ff3b457160966b25c955c551278ae93945749f2e6a10e80795089b3f8a7fbcce08c78ea212388430c8c3e56beaf74bd499e80a79ad72eecef1af55d97edaa86330848c3b5f5f07d3c6e2021278aeead033eb645470ae8d9e0255b28c2093dacb1fdcc416d986086be478308a573d76c50a6c77353d3088a9e220d1221695fd7e01fb91bad4a6f0775133597e8215bafb2e495180204dbe32682c216eecadd9c74ffbae9ed3579eb85377ef432339a5874f24c27229cedbc2b9d41dd2de23f344a50f3ed3762b2cc53b06f875a8889d887320eaf93259d9448583851a9064ab35d6a3853c34775e42117c466e410f630610706472f0a4960d5f26d022b3947352d34395b7c1a80de384455b6ac2bbb2fd952f3d6d49ac5bf58e72ce3e33f190523f419042c8e1697227cef740f8a826398e5cdf51bd52baef72e13ec934e8b07e28fdc4ec51e912b90d20aa9b63a2bda3d533e69a2f20c150917f4722a27462288ba29ef2461b4e4193ecd7800ad5f7f1dfdad05c9e5d50299a0a07b1ff4d9b979372bec182280ea5c6786f76561566b750af523a3d32f897158681b93028b27669499720629d0b7288d9c2c80ae0989d3fff5be5d7dcda1879942e5c12b5954fb902c912d86e70a337b0f4f271994b0d9a263041e798a962bef20c99aaa22b1e6c1f5fd8503865447c02dca91d368c1b9dc0b0d671d7b8b558bcb22d8dd768dcedbd6f2aa48c453933fd2cc2c4416fbab836968789783b32b1ff9445c1cbf528f494d68808a299f122e58a1934e8c93cf342acc4b360e5251a2ceba7be31c21aff364893f36d0dd81990c111a9d57ad0c8f25b5909be74edf66935d5f63666bcdf2ab557208a569ab666d06ead8bada79d2ad0f9132e22e35a2f1c51ffc7a3f0b96e8ce295129e28ed7f75f2a94b12357fadfc6c4470e6f0551c41ee410e88974bdcdaa1893516bf8927990a682b08f651cd9e17cef02b0dc84b65e36bd5abb86a0406356bd048be80aa1e7599998aafbc20380653611852c418d31b886f175d093be114f8d80ffaa618708ebf55ad4967cd9f70261e7acd70ad71c946e6fdcc174c5f943e00800c2d37ffe567336eb801b03f88e9804eff0d51c00ae6c78604b9e70a0ca2b63d6649ba654cce6f446859df8e18e1e1e71f84a7f02a8dd02e9fe0887ed13c01b306a1509b3cb71137e29b63b94948997a6cfee9b374b61d385e145eaa2cf11791f93351d40881b933fbdc1c97fef38c7fd51d749504604dddecf92d6da9da7ca04aa25170050a2601225d98b03a454002011a1c48aadb69c93b23448a4e455729e420ffa7a5910ea26ddb2266f9c25a95a83ec04a3b7eca438498e0cfd4331d41ceeaafcb70b953d78b934a509492cbf9d2c8986c0dc335212e127af1ca2e5216decb238f3920ef2667fc5b661e57e16f157137c1a0b761dc06830eee021d2180f3a743657ca9ef742dcb732227611818f9a04b8412aafc7317badac317f76a2376bff24431a431c5203afa38e1a54c28fc6846440feee97db077a9b7ee414736532261410d5109fbcc50915ee0a8e4c70bb3638e19142ffe25affa8e5dc58dc2ae5a2bbc87b615d7f084aad633953c5a53e8c797a5c476e23880b294a0918d7d92ba979dd9fd297ac12f95f2110acfa1ca679df92e46dc40f068962cb3a753181ba1db3de280563a823d7ead93fcca35105d56c5adebf7bb81888089978428e55c0f0f3ee7b72c71e0bf79e9d30255f09bfe06f1cb386d5490fa102cf5b720f4e7524e9b1558d56aa0cc0ed7363b05526beb1d11c037b9866244d6fcff536ea0e83d1a3239cbb0682dd42116acf2482f593f1d26c1525597ee31d1b89e07a9d6a9a3bec12dac359c2f47f2d116890fcce78f930dcca0bb8ece5c1c1f31b9a546cf04d8d503659c32e57e1729ddfcbc14a6f0942a87e45ed61308b0259cf128f0f433b358e55c72d80fd5df8377de048cc0002a26934f4c2a91e78eb788f9d292940e5e04660508ef3c081ecb768288ad024abac21bba2bc96b49ae772e22bdc6532b02cab04f8ebedc6411df754d11b00705655ff40fc8a45ee0e7abaeab9ec36862315f57672ff3979e208f7d14040df2d0a4039f3585096b1e1d13c45fb2a0a2ed7e1bfbf1398fa229aa5a7235c9320f03aae9667f12108de5564d2c8d64f9736b92c2a2ceea176194bbd0cf49f916dfb88745b0f41f44f11e940559ca441719f90a8de02529d12b2892764b5a018caf320fcc8452dd53be9a39bd0f789fee981b1ecc3ebbc7238b29b22a671328cac7f6d6798c753192c5e45c1936ff7dbfcbfa6600d467688c91863ae796a50a12a14fc7c5f3e1cf9a82ea98f77ae2018b4cb2445bcad5146c559c10705cc512cefaea525df34f82b956d5bffd1ccdb8dbcf738bb82325a5e829fca88f1012f9c979c6a91beed04da45ed6f27fa5030fc01a22b1ed1609d7b92909b71b30daf5e2ac2009e713de4958844a32c1210a9196c89a7e7df0c8a0562901003e2e83f18d1830e69c52d83239f848566df1c54dd4d3da419d79ccb9944e0c92ea49e6c28556ca2140be9a8a7bafe21e5354e83f4525dee76efcdd660ff46af87717afbad00520ead5b64d79bacb4b55883d6c4ee8deedcd251569bd7e2fbd717ff804cb0bd9a52cef03e83239685226b18dd5b41107d23900454cdd6f76f70b091b8f2ed6fed91137532a0f46be633ec8ff407bb3b65010e572298dfed285cbbf708aaee91adfc0110c8663d2b861ab423a021bd1c3c3cf65b38f8268277e0f9df9d8e26fdc639e13ac71fbc8f0ea2235804913edfd2d1f9e6851a84d7a3e5a7a5db99fcfc03459552c52347990b7b14005036d99f0fa346fec1cbd75609305b953a9a7a3e1736c8a381c921b9fd7783e60ec4a54a81b0b96ebd1870e9e0a27cbab038554da393a359d3261087525a83185d8aa2af7981988b7de9e1219c0718b7758f62225c9e2869481d6d11e118eccc6da406dbd733ce6c6efdd1bd47595c7bdf69e5dfc89d73394377a4b63760a9dfd5d0e4e677c77cfadfe0f93ce2432e5fb76ec93c98f17ea046481de8e0afc54c35f9648cff956f15c8d0b3a6f40e97a12f0cd2af5c62c95484f8d3c991c42cb380069370429ac0eccc3a9ff0c7a9c126552ccd3d8aa4d4beae522585c8387368d7788ae5a3274728b04fe8d4f2bc1b8ea9a5", @ANYBLOB="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", @ANYRES64=r0, @ANYRESOCT=r2], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x14, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70200001400ffd9b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000002c0)='mem_connect\x00', r5}, 0x18) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000007940)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x33f}, 0x1, 0x0, 0x0, 0xc0d0}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r6 = socket$pppl2tp(0x18, 0x1, 0x1) socket(0x200000000000011, 0x2, 0x0) unshare(0x6a040000) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r7 = gettid() r8 = eventfd2(0x0, 0x0) write$eventfd(r8, &(0x7f0000000140)=0xfffffffffffffff8, 0x8) write$eventfd(r8, &(0x7f0000000040)=0x8, 0x8) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r7}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r9 = socket$inet6(0xa, 0x1, 0x8010000000000084) sendmmsg$inet6(r9, &(0x7f0000004cc0)=[{{&(0x7f0000000040)={0xa, 0x4e22, 0x1ff, @private0, 0x2}, 0x1c, &(0x7f00000001c0)}}], 0x1, 0x8081) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmmsg$inet(r6, &(0x7f0000005f80)=[{{0x0, 0x0, &(0x7f0000005dc0)=[{&(0x7f00000010c0)="7d5107673289eeae3f806c5c62db497a0299399ab6101c3b", 0x1}], 0x1}}], 0x4000000000001ce, 0x8040) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) r10 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), r10) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32=r3, @ANYRES16=r3], &(0x7f0000000240)='GPL\x00', 0xfffffa0b, 0x0, 0x0, 0x61980, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r11, 0x0, 0x5}, 0x18) 5.767656855s ago: executing program 1 (id=735): bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c00000000"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_SET_FORCE_PACK_ID(r2, 0x227b, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) readv(r3, &(0x7f0000000840)=[{&(0x7f0000000200)=""/243, 0xf3}], 0x1) write$sndseq(r3, &(0x7f0000000180)=[{0xff, 0x0, 0x0, 0x0, @tick=0x8, {0x1}, {0x0, 0x4}, @ext={0x0, 0x0}}, {0x33, 0x0, 0xff, 0x3, @time={0xe, 0x5}, {0x0, 0x31}, {0x8, 0xfc}, @result={0x0, 0x4}}], 0x38) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) syz_usbip_server_init(0x5) creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}], [], 0x6b}}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000c80)={'lo\x00'}) 4.864098568s ago: executing program 3 (id=748): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r1], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_elf64(r4, &(0x7f0000000980)=ANY=[@ANYBLOB="7f454c4600000006010000000000000003003e000000000003000000000000004000000000000000980100000000000002000000000038000200000002000000000000600300000008000000000000000d00000000000000ed08000000000000f0ffffffffffffff0000000000000000080000000000000003000000cff5ffff800300000000000001000000000000000500000000000000ff"], 0x5b0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r5}, 0x10) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r6, &(0x7f0000000100)={0x0, 0x2844, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r7, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) 4.832338251s ago: executing program 3 (id=749): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b000000050000000004000009006a0001"], 0x48) syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x0, &(0x7f0000000480), 0x1, 0x3f7, &(0x7f00000004c0)="$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") getdents(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x10000, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x11, 0x27, &(0x7f0000000b80)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x800}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@alu={0x4, 0x0, 0xd, 0x3, 0x8, 0x18, 0x8}, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0x10}, @map_val={0x18, 0x4, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x8}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x93}, @map_val={0x18, 0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x4}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @call={0x85, 0x0, 0x0, 0x7c}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000008c0)='GPL\x00', 0x6, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f0000000900)={0x1, 0x1}, 0x8, 0x10, &(0x7f0000000940)={0x3, 0xe, 0xe2b, 0x1}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000cc0)=[r1, r1, r0], &(0x7f0000000d00)=[{0x1, 0x2, 0xb, 0x1}, {0x5, 0x4, 0x9, 0x6}, {0x1, 0x2, 0xb, 0xb}, {0x0, 0x3, 0x6, 0xc}, {0x3, 0x1, 0xd, 0x4}], 0x10, 0x5}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r2}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB], &(0x7f0000000100)='syzkaller\x00', 0x9, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8001}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$AUDIT_MAKE_EQUIV(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x8800) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x7, 0x4, 0x208, 0x1}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000021000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x1, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=@newsa={0x1a0, 0x10, 0x1, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64}, {@in, 0x0, 0x32}, @in6=@dev={0xfe, 0x80, '\x00', 0x2c}, {}, {0x0, 0x0, 0x8000000, 0x200}, {0x0, 0x0, 0x2}, 0x0, 0x0, 0xa, 0x0, 0x0, 0xcd}, [@algo_crypt={0x48, 0x2, {{'cbc(aes)\x00'}}}, @replay_esn_val={0x1c, 0x17, {0x0, 0x0, 0x0, 0x0, 0x70bd28}}, @algo_auth_trunc={0x4c, 0x14, {{'cmac(aes)\x00'}, 0x0, 0x18}}]}, 0x1a0}}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x1c5042, 0x12) write(r6, &(0x7f0000000740)="cc", 0x1) sendfile(r6, r5, 0x0, 0x3ffff) sendfile(r6, r5, 0x0, 0x7fffeffd) 3.865920369s ago: executing program 3 (id=757): bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x50) socket$xdp(0x2c, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x8000, &(0x7f0000000100), 0x1, 0x4c4, &(0x7f0000000f40)="$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") prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x9) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080", @ANYRES32=0x0], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYRES32=r3, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x0, &(0x7f0000000c00), 0x1, 0xb7e, &(0x7f0000000c40)="$eJzs3M1rVFcbAPDn3nwYNb6JL/LyWkoNtGChOBrFSl2py9ZFof0DDHEiIdcPkhRMcBHbhXRVC910UWgXpX9AoetstNBV6aaVFrqXShHdp9zJnWQwM0mqMx4/fj84c8/HZM7z5JK555C5E8BLa6x8yCP2R8S5LGKk6s8jYrBRG4pYWn3eg/vXJh/evzaZxcrKB39nkVV9zdfKquPuqjEUEb+cyeK/n2ycd25hcWaiKOqzVfvw/MUrh+cWFg9NX5y4UL9QvzR+YvzY8RPHjr99pGu5vrv35tmvxk/t+f7Mrauv3fj9yyxOxXA11ppHt4zFWKxUWvv7I2Ki25Ml0lflk7X0Zf0JAwIAYFN5yxrufzESfbG+eBuJW78mDQ4AAADoipW+WPsfFQAAAPCiyuz/AQAA4AXX/BzAg/vXJpsl7ScSnq57pyNitF3+/bHUOA7FQETsepBF622t2eqPPbGxiNj30+iPZYke3Ye8maXrEfH/dvlnjfxHG3dxb8w/j4hu3Jk99kj7ecr/VBfmT50/AC+n5dOrF7KN1798bf0Tba5//W2uXY8j9fWv8/pvPf++Duu/97c5R/3Ap593Gmtd/xXfvnq7nL88PlFS/8K96xGv9Hde/5T5Zx3yP7fNOQb++PmHTmNl/mW+zfK081/5JuJg2/3P+jfaZJt/P9HhqemiXj22nePG7e/2dZq/9fyXpZy/uRd4Gsrzv6tD/lud/yvbnGP5r4N/dhrbOv/87mD2YaM2WPVcnZifnx2PGMzObuw/unkszec0X6PM/83XN//7b5d/+Z6wVP0eyr3A9epYtj9+ZM5D773zxuPn31tl/ucf8/zf3OYcX382e7fTWOr8AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHg+5BExHFleW6vnea0WsTsi9sWuvLg8N//W1OWPLp0vxyJGYyCfmi7qRyJiZLWdle3xRn29ffSR9rGI2BsRX4zsbLRrk5eL86mTBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYM3uiBiOLK9FRB4RD0fyvFZLHRUAAADQdaOpAwAAAAB6zv4fAAAAXnz2/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPTY3gPLd7KIWDq5s1FKg9XYQNLIgF7LUwcAJNOXOgAgmf7UAQDJ2OMD2RbjQx1HdnQ9FgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACeXQf3L9/JImLp5M5GKQ1WYwNJIwN6LU8dAJBMX+oAgGT6UwcAJGOPD2RbjA91HNnR9VgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeHYNN0qW1yIib9TzvFaL2BMRozGQTU0X9SMR8Z+I+G1kYEfZHk8dNAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAF03t7A4M1EU9VkVFRWVtUrqdyYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFKYW1icmSiK+uxc6kgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA1OYWFmcmiqI+28NK6hwBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEjnnwAAAP///JMJmQ==") 3.039217715s ago: executing program 4 (id=759): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r1], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_elf64(r4, &(0x7f0000000980)=ANY=[@ANYBLOB="7f454c4600000006010000000000000003003e000000000003000000000000004000000000000000980100000000000002000000000038000200000002000000000000600300000008000000000000000d00000000000000ed08000000000000f0ffffffffffffff0000000000000000080000000000000003000000cff5ffff800300000000000001000000000000000500000000000000ff"], 0x5b0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r5}, 0x10) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r6, &(0x7f0000000100)={0x0, 0x2844, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r7, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) 2.454183603s ago: executing program 0 (id=760): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b000000050000000004000009006a0001"], 0x48) syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x0, &(0x7f0000000480), 0x1, 0x3f7, &(0x7f00000004c0)="$eJzs281rXFUbAPDn3nyUt2nfxFq/2qrTBjGgJk2iQsBNRUVBcKE7FxKaaSlOmtKM2BYXKoKr4saVrlzpH+DGhSDuXQmudC+FIMW1jNyZe5txMhMzyYyjvb8fTHLO3DOc88yZZ+bcc2cCKK1K9ieJOBIRP0fEdKv61waV1r/fb793Prsl0Wi8/lvSbJfVi6bF46byylwakX6UxMku/W5ev/H2aq1WvZrXF+rrVxY2r9946tL66sXqxerl5ZVnzi4trzy7sjywWG/ePvXTxuev/fHJmV+mnr/51gvZeI/kx9rjGJRKVKKR6zz22KA7G7GjbeVkfIQDoS9jEZFN10Qz/6djLLYnbzpe/HCkgwOGKvtsOtT78PsN4C6WxKhHAIxG8UFfnNsP4zz432zrXOsEaGf845HmbSY6zm8HKTvbuvbmx99mtxjSPgQAQLvvsvXPk93WP2nc39bu//m1oZmIuCcijkXEvRFxPCLui2i2fSAiHuyz/0pHfef6J721r8D2KFv/Pdd1/Vus/mJmLK8dbcY/kVy4VKuezZ+TuZg4lNUXd+njx1e++rLXsUrb+i+7Zf0Xa8F8HLfGOzbo1lbrqweJud3WBxEnuq5/kztXApKIeCgiTuyzj2/ONT7rdezv4x+uxhcRj3ed/+2roMnu1ycXmq+HheJVsdOpd6+s9ep/1PFn83949/hnkvbrtZv99/H1zOmtXsf2+/qfTN5olifz+66t1utXFyMmk1d33r+0/diiXrTP4p+b7Z7/x2L7mTiZzWNEPBwRj0TEo/nYT0fEmYiY3SX+l2Zfru4//uHK4l/ra/77L6wvff9Dr/73Nv9PN0tz+T17ef/b6wAP8twBAADAf0Xa/A58ks7fKafp/HzrO/zH43Ba29isP3Fh453La63vys/ERFrsdE237Ycu5nvDRX2po76c7xt/Ova/Zn3+/Eat56YY8I+Y6pH/mV/HRj06YOj8XgvKS/5Decl/KC/5D+Ul/6G85D+Ul/yH8pL/UF7yH8pL/kMpHeR3/QoKCndrYdTvTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIPxZwAAAP//jYTnFQ==") getdents(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x10000, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x11, 0x27, &(0x7f0000000b80)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x800}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@alu={0x4, 0x0, 0xd, 0x3, 0x8, 0x18, 0x8}, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0x10}, @map_val={0x18, 0x4, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x8}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x93}, @map_val={0x18, 0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x4}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @call={0x85, 0x0, 0x0, 0x7c}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000008c0)='GPL\x00', 0x6, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f0000000900)={0x1, 0x1}, 0x8, 0x10, &(0x7f0000000940)={0x3, 0xe, 0xe2b, 0x1}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000cc0)=[r1, r1, r0], &(0x7f0000000d00)=[{0x1, 0x2, 0xb, 0x1}, {0x5, 0x4, 0x9, 0x6}, {0x1, 0x2, 0xb, 0xb}, {0x0, 0x3, 0x6, 0xc}, {0x3, 0x1, 0xd, 0x4}], 0x10, 0x5}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r2}, 0x18) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x7, 0x4, 0x208, 0x1}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000021000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18) r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x1c5042, 0x12) write(r6, &(0x7f0000000740)="cc", 0x1) sendfile(r6, r5, 0x0, 0x3ffff) sendfile(r6, r5, 0x0, 0x7fffeffd) 2.268516348s ago: executing program 4 (id=761): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x7, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000fecd230fc0002000080000000000000070000005d0000000000952d62bb00080f8f6a7b9404d7156d247f3e66fde658dbe17d9d78090cf4a5b1a8e35cedee4be5e9dfaf36f7d07e7e06525223d7bd463f9c84d522ef51cefda38bcf5fdae77681be4fd083f06c106503"], &(0x7f0000000100)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000080000000c"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001700)={0x5, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="185200000f000000000000000000000018450000ffffffff000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000c00163f5c000d64a5d2fc4d22130000b700000000000009918af0ffffffffff182b0000", @ANYRES32=r1, @ANYBLOB="00000000020000008520000003000000487b4000f0ffffff"], &(0x7f0000000200)='GPL\x00', 0xa, 0x5d, &(0x7f0000001500)=""/93, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000003c0)={0x4, 0x10, 0x80, 0x2e0}, 0x10, 0xffffffffffffffff, r0, 0x1, 0x0, &(0x7f0000001580)=[{0x2, 0x1, 0xd, 0x8}], 0x10, 0x6}, 0x94) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70200001400ffd9b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000002c0)='mem_connect\x00', r4}, 0x18) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000007940)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x33f}, 0x1, 0x0, 0x0, 0xc0d0}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r5 = socket$pppl2tp(0x18, 0x1, 0x1) socket(0x200000000000011, 0x2, 0x0) unshare(0x6a040000) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r6 = gettid() r7 = eventfd2(0x0, 0x0) write$eventfd(r7, &(0x7f0000000140)=0xfffffffffffffff8, 0x8) write$eventfd(r7, &(0x7f0000000040)=0x8, 0x8) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r8 = socket$inet6(0xa, 0x1, 0x8010000000000084) sendmmsg$inet6(r8, &(0x7f0000004cc0)=[{{&(0x7f0000000040)={0xa, 0x4e22, 0x1ff, @private0, 0x2}, 0x1c, &(0x7f00000001c0)}}], 0x1, 0x8081) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmmsg$inet(r5, &(0x7f0000005f80)=[{{0x0, 0x0, &(0x7f0000005dc0)=[{&(0x7f00000010c0)="7d5107673289eeae3f806c5c62db497a0299399ab6101c3b", 0x1}], 0x1}}], 0x4000000000001ce, 0x8040) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) r9 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), r9) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32=r2, @ANYRES16=r2], &(0x7f0000000240)='GPL\x00', 0xfffffa0b, 0x0, 0x0, 0x61980, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r10, 0x0, 0x5}, 0x18) 2.018820408s ago: executing program 3 (id=763): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x7, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000fecd230fc0002000080000000000000070000005d0000000000952d62bb00080f8f6a7b9404d7156d247f3e66fde658dbe17d9d78090cf4a5b1a8e35cedee4be5e9dfaf36f7d07e7e06525223d7bd463f9c84d522ef51cefda38bcf5fdae77681be4fd083f06c106503"], &(0x7f0000000100)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000080000000c"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001700)={0x5, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="185200000f000000000000000000000018450000ffffffff000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000c00163f5c000d64a5d2fc4d22130000b700000000000009918af0ffffffffff182b0000", @ANYRES32=r1, @ANYBLOB="00000000020000008520000003000000487b4000f0ffffff"], &(0x7f0000000200)='GPL\x00', 0xa, 0x5d, &(0x7f0000001500)=""/93, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000003c0)={0x4, 0x10, 0x80, 0x2e0}, 0x10, 0xffffffffffffffff, r0, 0x1, 0x0, &(0x7f0000001580)=[{0x2, 0x1, 0xd, 0x8}], 0x10, 0x6}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0xd, &(0x7f00000029c0)=ANY=[@ANYRES64=r1, @ANYBLOB="157d9704e6aa0d8ac14d58ee7b3ad6d43c72f49871649d3221a5ffbce54492cffdfd9bd3f2aa3ef41f0bc417b563764259f67398d3c167ace94e7547b7e1d43b1e419736ed0124e164e7211bf7834f929fe369be63a742f47168b23bd7e64209ea166373fb7a0d129415241c62f40c8e0243edd912b22e971e00cd4827076a9a2412d053f4a1f22d127b824d5b904450c0af456f2ba2b9fc5a1d368c88674f238afc625577a4b10dd2cdcd5ee5223aa381089087afb3f4e7c7e3081ed5e4e20e282e27f70c71b093e9a1eaf419ee0546da8c07dee2405deadbd1ee0772f67b1ee1db0609b64a14c44bb3f8fb9e73ba3b41665161359f5b056726395c73133238b7364fda079007646c2ae59d5857ac8956a88cb1f35186a805d2cb91990d4c5397e7fe5f90188c71191b44efd697c1bd26dd27e1a65ce3f7e9fb4dcc364ca41bf3ce31d5f51c2d646f11fd7cfbfcd89c8158f052361f7b5d19a39c8a13b822337ea9a6551669d6b78b1e807f4f56238791e0eda615c4ebe8bff6e871653f6b1bd396f763cf65cddd32f203a7109ee53b1c057a233596baec8eaabf32b665fdd4cce76805361c3944e4b61a12ad9fb0827477cee367338b4520ebe378364238c5570ba33c2d4512b0e47ed2d0f1482328285621188095d455dbf1f16e0e391b735f355cb8272def6959492eb127be0c1c71192571562d0df5bf799c1e6e537b96690d15fd458efcc378802407d25ddac0591b3096d88ffb0bd65737defded895434479c812af44da85f1673438eb19cd53662f1654b27009fb973ca7e5dc081505140d32bb8d5a11be07870bd729fa400835755038d890568ddfd0451203bd0ed19185cd7fd43aa3cab719217c5e98d5ea6734117b9b49bf75c8adb66c3e12620842cb4df5053b90bf4840d9ed4db81c412472ecb253611b72ba73aba89e5d9037db33b672559771fd3b0c5b7b606f79cb736a5cbac7910aaad96f2f2f8efa89a99d7ebca5d74451f5a4408456d42d03b0845e4b5ef5cdd31b0b1c7fad85ce3483bf9a915ba72c3e6d05d3f4cfe5389db23a5a4885ae12a49868fd5b71876e19718d36e9d16083ae0c38dd88241a9f7fd9efa94c4b03975c3a6819ef9ebb56c02ee80123d088922e4adc04c50cd033364e13b267fc288de297a4e1de6390ad07db13d6ca7b060ec4b53b26f69f118fcc3b6a3a109ca14da094219d4e4d0a5d75c36d3315d9395ed7292c29b5da8ccc42696a6ca4f2984ebaf0e76022c25123d2446a4d2d12f4625b513a07ab2fd859f4cfdac0e5a3b344ba307415044ea79f77593431c24e8539b81c9292435b762815b5c6e067287a0b790c3703bd970d83976455d8bbc3483309cc92d1541481c773a7b877d008e495c051643b66e85d95ea3d200a9b41abc390f23b459d799bd98ff4db51ddfab755f52909090f6b2fc2755c38babdba493250e00a1a18356c8f9550fe7b6d5d0a14d5acba6050ec4796e4e084137c20ac2e95a42795190420ede9558109992d2dcdefed69e2e5a8ae87693993df34eacb1f23772a8ff45a546264196d6afc3d4be56abc4f0d0debd6dae66d0cca0e797c7d8538a6621a641aa653077676a0aec8fa0c3c9caa1994a3221f86e3328f543772c4bc582ba91dec2e7738737091ef930e5df29de1fd8727fd6f08cd0d7c62fdd4f2b1b77ffc3e38f7a7acde846aaadeebb787fcd7a457087509a73b84503b631dd6202558800c3fd37dfe987754570d07a8c26a593d9226e3cfb672f66ce544855508a23e18b4a079d70ea01cbceeb2c7365b75d6ee3bc73c015b2891d423823943303564747fcaa99df8b68575854b53ed2a5f2939a73ff63922dfbb1144a16c1a89fd3ec735195b57794edf7261fe8f39a0c097329ec2557198f0225530596c2af5c15eb2dae13c49a393ec54e2fd6fb79c7486018bb86de3f140573c5cb0f9e19389d721187b46b4d60659151210c8a7fd4295f0d5baead54b18aa472930f734d83151b6e9c7d97033495b2ea7d22a0a69ae369f39bae3f98b1f3deba7ee57b3891994810f16e438d942ed9a2db0ae79245f05ccf68baebb14eff46da3f9a604e3a1a2b231235aee6413e086f87a2e0ecd90581ad1200227d84bb59a58b96868d2da157905fc2ba39a87589a2029feb5c92db68cb04417c31b40725b32286ae3c8fdc9325453ece1d83b9fca4e3f0b458a33e30b71f3620de3d17258cdb855108ffbb34dbb6ea39df19aafb405da71cd7eb5541714cb03887773da112e259f7174e65e10de68524a4ceace1d1c864e9533fec0b9d2ad5698725e4196ae255e5fb1a69cbb6e1b5dced27cbdb4467196a69c03eab378bf603738f98289b140a67cdf826b9a21c394406644a1c774f720d49ecb270a5571311304127e35e9c6f5a134f99280e3ac2efd66f60b7b378d49140296277057ea0d4135934167169b35e71f866969e7aceeb6318b9093269e05e2918dcb37556342e1d1a69334ce6b4eea56f93965f6ffa74a9b58eda52d57175b06b4c79c91035b3470a7f3cb97f52ca06d4919f4b5b7ebc4a1afbb2d2a2ddfe2d0a092104ac96d942d6c9bdb3d6c052b6ad2b3ff3b457160966b25c955c551278ae93945749f2e6a10e80795089b3f8a7fbcce08c78ea212388430c8c3e56beaf74bd499e80a79ad72eecef1af55d97edaa86330848c3b5f5f07d3c6e2021278aeead033eb645470ae8d9e0255b28c2093dacb1fdcc416d986086be478308a573d76c50a6c77353d3088a9e220d1221695fd7e01fb91bad4a6f0775133597e8215bafb2e495180204dbe32682c216eecadd9c74ffbae9ed3579eb85377ef432339a5874f24c27229cedbc2b9d41dd2de23f344a50f3ed3762b2cc53b06f875a8889d887320eaf93259d9448583851a9064ab35d6a3853c34775e42117c466e410f630610706472f0a4960d5f26d022b3947352d34395b7c1a80de384455b6ac2bbb2fd952f3d6d49ac5bf58e72ce3e33f190523f419042c8e1697227cef740f8a826398e5cdf51bd52baef72e13ec934e8b07e28fdc4ec51e912b90d20aa9b63a2bda3d533e69a2f20c150917f4722a27462288ba29ef2461b4e4193ecd7800ad5f7f1dfdad05c9e5d50299a0a07b1ff4d9b979372bec182280ea5c6786f76561566b750af523a3d32f897158681b93028b27669499720629d0b7288d9c2c80ae0989d3fff5be5d7dcda1879942e5c12b5954fb902c912d86e70a337b0f4f271994b0d9a263041e798a962bef20c99aaa22b1e6c1f5fd8503865447c02dca91d368c1b9dc0b0d671d7b8b558bcb22d8dd768dcedbd6f2aa48c453933fd2cc2c4416fbab836968789783b32b1ff9445c1cbf528f494d68808a299f122e58a1934e8c93cf342acc4b360e5251a2ceba7be31c21aff364893f36d0dd81990c111a9d57ad0c8f25b5909be74edf66935d5f63666bcdf2ab557208a569ab666d06ead8bada79d2ad0f9132e22e35a2f1c51ffc7a3f0b96e8ce295129e28ed7f75f2a94b12357fadfc6c4470e6f0551c41ee410e88974bdcdaa1893516bf8927990a682b08f651cd9e17cef02b0dc84b65e36bd5abb86a0406356bd048be80aa1e7599998aafbc20380653611852c418d31b886f175d093be114f8d80ffaa618708ebf55ad4967cd9f70261e7acd70ad71c946e6fdcc174c5f943e00800c2d37ffe567336eb801b03f88e9804eff0d51c00ae6c78604b9e70a0ca2b63d6649ba654cce6f446859df8e18e1e1e71f84a7f02a8dd02e9fe0887ed13c01b306a1509b3cb71137e29b63b94948997a6cfee9b374b61d385e145eaa2cf11791f93351d40881b933fbdc1c97fef38c7fd51d749504604dddecf92d6da9da7ca04aa25170050a2601225d98b03a454002011a1c48aadb69c93b23448a4e455729e420ffa7a5910ea26ddb2266f9c25a95a83ec04a3b7eca438498e0cfd4331d41ceeaafcb70b953d78b934a509492cbf9d2c8986c0dc335212e127af1ca2e5216decb238f3920ef2667fc5b661e57e16f157137c1a0b761dc06830eee021d2180f3a743657ca9ef742dcb732227611818f9a04b8412aafc7317badac317f76a2376bff24431a431c5203afa38e1a54c28fc6846440feee97db077a9b7ee414736532261410d5109fbcc50915ee0a8e4c70bb3638e19142ffe25affa8e5dc58dc2ae5a2bbc87b615d7f084aad633953c5a53e8c797a5c476e23880b294a0918d7d92ba979dd9fd297ac12f95f2110acfa1ca679df92e46dc40f068962cb3a753181ba1db3de280563a823d7ead93fcca35105d56c5adebf7bb81888089978428e55c0f0f3ee7b72c71e0bf79e9d30255f09bfe06f1cb386d5490fa102cf5b720f4e7524e9b1558d56aa0cc0ed7363b05526beb1d11c037b9866244d6fcff536ea0e83d1a3239cbb0682dd42116acf2482f593f1d26c1525597ee31d1b89e07a9d6a9a3bec12dac359c2f47f2d116890fcce78f930dcca0bb8ece5c1c1f31b9a546cf04d8d503659c32e57e1729ddfcbc14a6f0942a87e45ed61308b0259cf128f0f433b358e55c72d80fd5df8377de048cc0002a26934f4c2a91e78eb788f9d292940e5e04660508ef3c081ecb768288ad024abac21bba2bc96b49ae772e22bdc6532b02cab04f8ebedc6411df754d11b00705655ff40fc8a45ee0e7abaeab9ec36862315f57672ff3979e208f7d14040df2d0a4039f3585096b1e1d13c45fb2a0a2ed7e1bfbf1398fa229aa5a7235c9320f03aae9667f12108de5564d2c8d64f9736b92c2a2ceea176194bbd0cf49f916dfb88745b0f41f44f11e940559ca441719f90a8de02529d12b2892764b5a018caf320fcc8452dd53be9a39bd0f789fee981b1ecc3ebbc7238b29b22a671328cac7f6d6798c753192c5e45c1936ff7dbfcbfa6600d467688c91863ae796a50a12a14fc7c5f3e1cf9a82ea98f77ae2018b4cb2445bcad5146c559c10705cc512cefaea525df34f82b956d5bffd1ccdb8dbcf738bb82325a5e829fca88f1012f9c979c6a91beed04da45ed6f27fa5030fc01a22b1ed1609d7b92909b71b30daf5e2ac2009e713de4958844a32c1210a9196c89a7e7df0c8a0562901003e2e83f18d1830e69c52d83239f848566df1c54dd4d3da419d79ccb9944e0c92ea49e6c28556ca2140be9a8a7bafe21e5354e83f4525dee76efcdd660ff46af87717afbad00520ead5b64d79bacb4b55883d6c4ee8deedcd251569bd7e2fbd717ff804cb0bd9a52cef03e83239685226b18dd5b41107d23900454cdd6f76f70b091b8f2ed6fed91137532a0f46be633ec8ff407bb3b65010e572298dfed285cbbf708aaee91adfc0110c8663d2b861ab423a021bd1c3c3cf65b38f8268277e0f9df9d8e26fdc639e13ac71fbc8f0ea2235804913edfd2d1f9e6851a84d7a3e5a7a5db99fcfc03459552c52347990b7b14005036d99f0fa346fec1cbd75609305b953a9a7a3e1736c8a381c921b9fd7783e60ec4a54a81b0b96ebd1870e9e0a27cbab038554da393a359d3261087525a83185d8aa2af7981988b7de9e1219c0718b7758f62225c9e2869481d6d11e118eccc6da406dbd733ce6c6efdd1bd47595c7bdf69e5dfc89d73394377a4b63760a9dfd5d0e4e677c77cfadfe0f93ce2432e5fb76ec93c98f17ea046481de8e0afc54c35f9648cff956f15c8d0b3a6f40e97a12f0cd2af5c62c95484f8d3c991c42cb380069370429ac0eccc3a9ff0c7a9c126552ccd3d8aa4d4beae522585c8387368d7788ae5a3274728b04fe8d4f2bc1b8ea9a5", @ANYBLOB="0000000000000000b7080000001100007b8af8ff00000000bfa200000000000007020000f8ffffffb703000009c451f5b704000000000000850000000100000095d8f5cc52eaf47637f33b8ab10c111338c868b2ec545b5c6326858ead8c287b97214ce5f7470dc9deb8cdcb4875d0c574d7ed9d18c0e39ef70e7da7ec230250041f5f8805acb4a1681c8d4f2f2fa0616f60e55e1290451c96f4f9c46c41eb7472b49b7dcf381168c416d9915ddbfe2f99992d9f48c11a379fce7cc9caa59c8b8e1fb551ca37ef0c59", @ANYRES64=r0, @ANYRESOCT=r2], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x14, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70200001400ffd9b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000002c0)='mem_connect\x00', r5}, 0x18) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000007940)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x33f}, 0x1, 0x0, 0x0, 0xc0d0}, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) r7 = socket$pppl2tp(0x18, 0x1, 0x1) socket(0x200000000000011, 0x2, 0x0) unshare(0x6a040000) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r8 = gettid() r9 = eventfd2(0x0, 0x0) write$eventfd(r9, &(0x7f0000000140)=0xfffffffffffffff8, 0x8) write$eventfd(r9, &(0x7f0000000040)=0x8, 0x8) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r8}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r10 = socket$inet6(0xa, 0x1, 0x8010000000000084) sendmmsg$inet6(r10, &(0x7f0000004cc0)=[{{&(0x7f0000000040)={0xa, 0x4e22, 0x1ff, @private0, 0x2}, 0x1c, &(0x7f00000001c0)}}], 0x1, 0x8081) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) connect$pppl2tp(r7, &(0x7f0000000440)=@pppol2tp={0x18, 0x1, {0x0, r6, {0x2, 0x1, @remote}, 0xa}}, 0x26) sendmmsg$inet(r7, &(0x7f0000005f80)=[{{0x0, 0x0, &(0x7f0000005dc0)=[{&(0x7f00000010c0)="7d5107673289eeae3f806c5c62db497a0299399ab6101c3b", 0x1}], 0x1}}], 0x4000000000001ce, 0x8040) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) r11 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), r11) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0x5}, 0x18) 1.409831577s ago: executing program 4 (id=766): r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x62, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0xa}}, 0x0, 0x0, 0xffffffffffffffff, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x28011, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0900000004000000060000000a00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x50) close(0x3) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000004888b7000000", @ANYRES16=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2, 0x0, 0xfffffffffffffffd}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r1}, &(0x7f0000000380), &(0x7f00000003c0)=r2}, 0x20) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) recvfrom$inet_nvme(0xffffffffffffffff, &(0x7f0000000740)=""/227, 0xe3, 0x10, &(0x7f0000000100)=@l2tp={0x2, 0x0, @rand_addr=0x64010101, 0x4}, 0x80) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40810) getpid() ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x3) r4 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={0x0, 0x38}, 0x1, 0x0, 0x0, 0x4040000}, 0x100) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) open_tree(0xffffffffffffffff, 0x0, 0x80800) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000540)={[], [{@fscontext={'fscontext', 0x3d, 'root'}}, {@fowner_gt}, {@hash}, {@smackfstransmute={'smackfstransmute', 0x3d, 'syzkaller0\x00'}}]}, 0x1, 0x553, &(0x7f0000001080)="$eJzs3d9rW1UcAPDvTdv91nUwhopIYQ9O5tK19ccEH+aj6HCg7zO0d2U0WUaTjrUO3B7ciy8yBBEH4ru++zj8B/wrBjoYMoo++BK56U2XrUmbddnSmc8Hbjkn9ybnfnPv9/TcnBsSwNCayP4UIl6OiG+SiIMRkeTrRiNfObG23er9q7PZkkSj8elfSXO7rN56rdbz9ueVlyLit68ijhc2tltbXlkolcvpYl6frFcuTdaWV05cqJTm0/n04vTMzKm3Z6bfe/edvsX6xtl/vv/k9oenvj66+t0vdw/dTOJ0HMjXtcfxBK61VyZiIn9PxuL0IxtO9aGxnSQZ9A6wLSN5no9F1gccjJE864H/vy8jogEMqUT+w5BqjQNa1/Z9ug5+btz7YO0CaGP8o2ufjcSe5rXRvtXkoSuj7Hp3vA/tZ238+uetm9kS/fscAmBL165HxMnR0Y39X5L3f9t3sodtHm1D/wfPzu1s/PNmp/FPYX38Ex3GP/s75O52bJ3/hbt9aKarbPz3fsfx7/qk1fhIXnuhOeYbS85fKKdZ3/ZiRByLsd1ZfbP5nFOrdxrd1rWP/7Ila781Fsz34+7o7oefM1eql54k5nb3rke80nH8m6wf/6TD8c/ej7M9tnEkvfVat3Vbx/90NX6KeL3j8X8wo5VsPj852TwfJltnxUZ/3zjye7f2Bx1/dvz3bR7/eNI+X1t7/DZ+3PNv2m3dQ/FH7+f/ruSzZnlX/tiVUr2+OBWxK/l44+PTD57bqre2z+I/dnTz/q/T+b83Ij7vMf4bh39+taf4B3T85x7r+D9+4c5HX/zQrf3e+r+3mqVj+SO99H+97uCTvHcAAAAAAACw0xQi4kAkheJ6uVAoFtfu7zgc+wrlaq1+/Hx16eJcNL8rOx5jhdZM98G2+yGm8vthW/XpR+ozEXEoIr4d2dusF2er5blBBw8AAAAAAAAAAAAAAAAAAAA7xP4u3//P/DEy6L0Dnjo/+Q3Da8v878cvPQE7kv//MLzkPwwv+Q/DS/7D8JL/MLzkPwwv+Q/DS/4DAAAAAAAAAAAAAAAAAAAAAAAAAABAX509cyZbGqv3r85m9bnLy0sL1csn5tLaQrGyNFucrS5eKs5Xq/PltDhbrWz1euVq9dLUdCxdmayntfpkbXnlXKW6dLF+7kKlNJ+eS8eeSVQAAAAAAAAAAAAAAAAAAADwfKktryyUyuV0UUFhW4XRnbEbCn0uDLpnAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAH/gsAAP//6AY3sQ==") r5 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) ftruncate(r5, 0x2007ffc) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000032c0), 0x0, 0x0) syz_open_dev$sg(&(0x7f00000003c0), 0x7, 0x5e1005) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, &(0x7f0000000340)='syzkaller\x00'}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{}, &(0x7f0000000000), &(0x7f00000005c0)}, 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) 1.271311058s ago: executing program 0 (id=767): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0000}]}) close_range(r0, 0xffffffffffffffff, 0x0) 1.187756325s ago: executing program 0 (id=768): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[], 0x48) r2 = msgget$private(0x0, 0xfffffffffffffffd) getresgid(&(0x7f0000000400)=0x0, &(0x7f00000005c0), &(0x7f00000007c0)) getresgid(&(0x7f0000000800)=0x0, 0x0, &(0x7f0000000880)) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f00000008c0)=@filter={'filter\x00', 0xe, 0x6, 0x91c, [0x0, 0x200000002700, 0x200000002a84, 0x200000002d78], 0x0, 0x0, &(0x7f0000002700)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x2, [{0x3, 0x62265f716228eb5c, 0x10, 'xfrm0\x00', 'caif0\x00', 'veth1_to_batadv\x00', 'veth0_to_hsr\x00', @random="3cb81e8a856c", [0xff, 0xff, 0x0, 0x0, 0xff], @empty, [0x0, 0x0, 0xff, 0x0, 0x0, 0xff], 0x9e, 0x9e, 0x1ce, [@m802_3={{'802_3\x00', 0x0, 0x8}, {{0x8e, 0x6f, 0x0, 0x1}}}], [], @common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x1, 'system_u:object_r:insmod_exec_t:s0\x00'}}}}, {0x3, 0x4, 0x9, 'veth1_vlan\x00', 'netdevsim0\x00', 'netpci0\x00', 'veth0_to_batadv\x00', @empty, [0x0, 0xff, 0x0, 0x101, 0x0, 0xff], @empty, [0x0, 0x0, 0x0, 0x0, 0xff, 0xff], 0xd6, 0x11e, 0x14e, [@cluster={{'cluster\x00', 0x0, 0x10}, {{0x80000001, 0x5c, 0x4, 0x1}}}, @cgroup0={{'cgroup\x00', 0x0, 0x8}, {{0xfffffff8}}}], [@common=@ERROR={'ERROR\x00', 0x20, {"11f2d39a4ef7534af99f33e7fda766b51340533be7b53938127a5f6f7ff6"}}], @common=@STANDARD={'\x00', 0x8, {0xfffffffffffffffe}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x2, [{0x9, 0x40, 0x0, 'veth0_virt_wifi\x00', 'batadv_slave_0\x00', 'bridge_slave_0\x00', 'wg1\x00', @local, [0x0, 0x0, 0x0, 0xff, 0x0, 0xff], @empty, [0xff, 0xff, 0xff, 0xff, 0x0, 0xff], 0x6e, 0x6e, 0x19e, [], [], @common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x4, 'system_u:object_r:hostname_exec_t:s0\x00'}}}}, {0x11, 0x2a, 0x22eb, 'veth0_to_bridge\x00', 'batadv_slave_0\x00', 'vlan0\x00', 'bridge_slave_0\x00', @multicast, [0xff, 0x0, 0xff, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, [0x0, 0x0, 0x0, 0xff], 0xf6, 0xf6, 0x126, [@nfacct={{'nfacct\x00', 0x0, 0x28}, {{'syz0\x00', 0x100000001}}}, @realm={{'realm\x00', 0x0, 0x10}, {{0x7, 0x7, 0x1}}}], [], @common=@NFQUEUE0={'NFQUEUE\x00', 0x8, {{0x6}}}}]}, {0x0, '\x00', 0x4, 0xfffffffffffffffc, 0x2, [{0x5, 0x40, 0x8884, 'tunl0\x00', 'pimreg\x00', 'veth0_macvtap\x00', 'ip6gre0\x00', @local, [0x0, 0xff, 0x0, 0xff, 0xff], @remote, [0x0, 0xff, 0x0, 0xff, 0xff], 0x6e, 0xbe, 0xee, [], [@common=@LED={'LED\x00', 0x28, {{'syz1\x00', 0x0, 0x2, {0x10000}}}}], @common=@AUDIT={'AUDIT\x00', 0x8, {{0x2}}}}, {0x5, 0x31, 0x88be, 'veth0_to_bridge\x00', 'bridge_slave_1\x00', 'team_slave_1\x00', 'bond0\x00', @remote, [0x0, 0xff, 0xff, 0x0, 0x0, 0xff], @remote, [0xff, 0x0, 0xff, 0xd5eef8dd195adb80, 0x0, 0xff], 0x11e, 0x16e, 0x1be, [@stp={{'stp\x00', 0x0, 0x48}, {{0x5, {0xe4, 0x81, 0x4, @empty, [0xff, 0xff, 0xff, 0xff, 0xff, 0xff], 0xc7a, 0x1b70, 0x129, 0x3, @local, [0xff, 0xff, 0x0, 0xff, 0x0, 0xff], 0x4e21, 0x4e23, 0xfffb, 0x6, 0xffff, 0xc, 0xf0, 0x5, 0x0, 0x81}, 0x5c3, 0xc0}}}, @owner={{'owner\x00', 0x0, 0x18}, {{0x0, 0x0, r3, r4, 0x1, 0x4}}}], [@common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x3, 'syz0\x00', {0x5}}}}], @common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x54, 'syz1\x00', {0x5}}}}}]}]}, 0x994) setgroups(0x1, &(0x7f0000000740)=[r3]) msgrcv(r2, 0x0, 0x0, 0x1, 0x3000) msgrcv(r2, 0x0, 0x0, 0x1, 0x0) msgsnd(r2, &(0x7f0000000400)={0x1}, 0x8, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000002c0)={0x1b, 0x0, 0x0, 0x40, 0x0, r1, 0x9, '\x00', 0x0, r0, 0x0, 0x2, 0x1}, 0x50) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0xe501, 0x3, 0x2a8, 0x138, 0x6affffff, 0x3403000b, 0x0, 0x7, 0x210, 0x230, 0x230, 0x210, 0x223, 0x3, 0x0, {[{{@ip={@remote, @local, 0x0, 0x0, 'veth1_macvtap\x00', 'veth1_to_team\x00'}, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@unspec=@limit={{0x48}, {0x7f510100, 0x4, 0x0, 0x0, 0x0, 0x2}}, @common=@unspec=@time={{0x38}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'syz0\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x308) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000e80)={0xffffffffffffffff}, 0x2, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r6, &(0x7f00000000c0)={0x13, 0x10, 0x8, {0x0, r7, 0x1}}, 0x18) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f00000003c0)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000200)=0x3, r7, 0x0, 0x0, 0x1}}, 0x20) accept4$packet(r5, &(0x7f0000000180)={0x11, 0x0, 0x0}, &(0x7f00000001c0)=0x14, 0xc0c00) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xd, &(0x7f0000000940)=ANY=[@ANYBLOB="18000000000000000c00850000006d00000c00110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b70400000000000085"], &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r8, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000300)=@generic={0x0, r10}, 0x18) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REG(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="010028bd7010fddbdf251a0000000c0022800400008004b92a80070021"], 0x30}, 0x1, 0x0, 0x0, 0x20000054}, 0x44) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r9, 0x0, 0x3}, 0x18) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) 1.169093746s ago: executing program 4 (id=769): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x7, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000fecd230fc0002000080000000000000070000005d0000000000952d62bb00080f8f6a7b9404d7156d247f3e66fde658dbe17d9d78090cf4a5b1a8e35cedee4be5e9dfaf36f7d07e7e06525223d7bd463f9c84d522ef51cefda38bcf5fdae77681be4fd083f06c106503"], &(0x7f0000000100)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000080000000c"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001700)={0x5, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="185200000f000000000000000000000018450000ffffffff000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000c00163f5c000d64a5d2fc4d22130000b700000000000009918af0ffffffffff182b0000", @ANYRES32=r1, @ANYBLOB="00000000020000008520000003000000487b4000f0ffffff"], &(0x7f0000000200)='GPL\x00', 0xa, 0x5d, &(0x7f0000001500)=""/93, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000003c0)={0x4, 0x10, 0x80, 0x2e0}, 0x10, 0xffffffffffffffff, r0, 0x1, 0x0, &(0x7f0000001580)=[{0x2, 0x1, 0xd, 0x8}], 0x10, 0x6}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0xd, &(0x7f00000029c0)=ANY=[@ANYRES64=r1, @ANYBLOB="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", @ANYBLOB="0000000000000000b7080000001100007b8af8ff00000000bfa200000000000007020000f8ffffffb703000009c451f5b704000000000000850000000100000095d8f5cc52eaf47637f33b8ab10c111338c868b2ec545b5c6326858ead8c287b97214ce5f7470dc9deb8cdcb4875d0c574d7ed9d18c0e39ef70e7da7ec230250041f5f8805ac", @ANYRES64=r0, @ANYRESOCT=r2], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x14, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70200001400ffd9b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000002c0)='mem_connect\x00', r5}, 0x18) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000007940)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x33f}, 0x1, 0x0, 0x0, 0xc0d0}, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) r7 = socket$pppl2tp(0x18, 0x1, 0x1) socket(0x200000000000011, 0x2, 0x0) unshare(0x6a040000) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r8 = gettid() r9 = eventfd2(0x0, 0x0) write$eventfd(r9, &(0x7f0000000140)=0xfffffffffffffff8, 0x8) write$eventfd(r9, &(0x7f0000000040)=0x8, 0x8) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r8}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r10 = socket$inet6(0xa, 0x1, 0x8010000000000084) sendmmsg$inet6(r10, &(0x7f0000004cc0)=[{{&(0x7f0000000040)={0xa, 0x4e22, 0x1ff, @private0, 0x2}, 0x1c, &(0x7f00000001c0)}}], 0x1, 0x8081) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) connect$pppl2tp(r7, &(0x7f0000000440)=@pppol2tp={0x18, 0x1, {0x0, r6, {0x2, 0x1, @remote}, 0xa}}, 0x26) sendmmsg$inet(r7, &(0x7f0000005f80)=[{{0x0, 0x0, &(0x7f0000005dc0)=[{&(0x7f00000010c0)="7d5107673289eeae3f806c5c62db497a0299399ab6101c3b", 0x1}], 0x1}}], 0x4000000000001ce, 0x8040) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) r11 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), r11) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32=r3, @ANYRES16=r3], &(0x7f0000000240)='GPL\x00', 0xfffffa0b, 0x0, 0x0, 0x61980, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r12, 0x0, 0x5}, 0x18) 1.090201953s ago: executing program 3 (id=770): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b000000050000000004000009006a0001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x10000, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x11, 0x27, &(0x7f0000000b80)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x800}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@alu={0x4, 0x0, 0xd, 0x3, 0x8, 0x18, 0x8}, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0x10}, @map_val={0x18, 0x4, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x8}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x93}, @map_val={0x18, 0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x4}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @call={0x85, 0x0, 0x0, 0x7c}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000008c0)='GPL\x00', 0x6, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f0000000900)={0x1, 0x1}, 0x8, 0x10, &(0x7f0000000940)={0x3, 0xe, 0xe2b, 0x1}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000cc0)=[r1, r1, r0], &(0x7f0000000d00)=[{0x1, 0x2, 0xb, 0x1}, {0x5, 0x4, 0x9, 0x6}, {0x1, 0x2, 0xb, 0xb}, {0x0, 0x3, 0x6, 0xc}, {0x3, 0x1, 0xd, 0x4}], 0x10, 0x5}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB], &(0x7f0000000100)='syzkaller\x00', 0x9, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8001}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$AUDIT_MAKE_EQUIV(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x8800) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000021000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x18) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x1c5042, 0x12) write(r4, &(0x7f0000000740)="cc", 0x1) sendfile(r4, r3, 0x0, 0x7fffeffd) 832.181593ms ago: executing program 2 (id=772): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1, 0x0, 0x3}, 0x18) r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) writev(r2, &(0x7f00000025c0)=[{&(0x7f0000000240)='4', 0x1}], 0x1) 771.504668ms ago: executing program 2 (id=773): socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0a000000020000000900000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000000)='kfree\x00', r1}, 0x18) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x37, 0x1, 0x0, 0x0, 0x0, 0x7, 0xc10, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x5, 0x9}, 0x4c58, 0x10000, 0x0, 0x1, 0x8, 0x20002, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$nl_generic(0x10, 0x3, 0x10) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) ioctl$KDSIGACCEPT(r4, 0x4b4e, 0x7) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newsa={0x19c, 0x10, 0x713, 0x0, 0x0, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@remote}, {@in6=@remote, 0x4d3, 0x32}, @in=@broadcast, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'cbc(aes)\x00'}}}, @algo_auth_trunc={0x64, 0x14, {{'cmac(aes)\x00'}, 0xc0, 0x0, "e80c857b65087dea03da4c290569c738c39dac5defb806ba"}}]}, 0x19c}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) add_key(&(0x7f0000000040)='ceph\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, 0x0, 0x0) r7 = syz_io_uring_setup(0xd1, &(0x7f0000000480)={0x0, 0x0, 0x400, 0x0, 0x338}, &(0x7f0000000080)=0x0, &(0x7f00000001c0)=0x0) r10 = socket(0x1d, 0x6, 0x80000004) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) sendmsg$nl_route_sched(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000740)=@gettaction={0xd8, 0x32, 0x400, 0x70bd2a, 0x25dfdbfd, {}, [@action_gd=@TCA_ACT_TAB={0x94, 0x1, [{0x14, 0x2, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0xc, 0x1, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8001}}, {0xc, 0xb, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0x10, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0xb, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xb6f}}, {0xc, 0x7, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0x10, 0x13, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0x10, 0x1f, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}]}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x3}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x0, 0x1}}, @action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xb}}, {0xc, 0x12, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}]}]}, 0xd8}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x8, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r7, 0x47ba, 0x98f1, 0x2a, 0x0, 0x0) 400.277308ms ago: executing program 2 (id=774): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) r3 = inotify_init1(0x0) inotify_add_watch(r3, &(0x7f0000000040)='./file1\x00', 0x2000775) write$binfmt_elf64(r2, &(0x7f0000000180)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x4, 0x0, 0x0, 0x87fff, 0x2, 0x3e, 0xffffffec, 0x398, 0x40, 0x56, 0x0, 0x0, 0x38, 0x1, 0x0, 0x2}, [{0x3, 0x5, 0x4, 0x40000000200d, 0x1c8, 0x1b8, 0x4, 0x2}], "77181e8c2a1ff9f127ae60622f278e51fd21328c68ea91776e8726ae8e9a9bb73d3aae49a482e41d94863908fd34507752945b3bbe462b479c2ef6516e0965aa20ef0e467e0472cbd6b2565e116d82a96c494f665db8b92c0aba7c12f7dfc6f48e93279edaee5daf5f7ad92722071579b4ecd715d01b56c43edf2cee5c16b910fb6cef7d9affbbe096f3aba4c4d8130950019b4660588bec12c1bb627882de3851dc6e8ab3ef0d28621bbc27841916800256bc064e0000"}, 0x12f) close(r2) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) 353.737442ms ago: executing program 0 (id=775): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000007940)={0x0, 0x0, &(0x7f0000007900)={&(0x7f0000000680)=@newtaction={0x168, 0x30, 0x216822a75a8bdd29, 0xffe4, 0x0, {}, [{0x154, 0x1, [@m_connmark={0x50, 0x2, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3, 0xd, 0x5, 0x0, 0x3}, 0x8}}]}, {0x4}, {0xc}, {0xc}}}, @m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0xbc, 0x3, 0x0, 0x0, {{0x9}, {0x40, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x0, 0x1d28}}, @TCA_GACT_PARMS={0x18, 0x2, {0xb66, 0xb3, 0x10000000, 0x34e, 0xffff}}, @TCA_GACT_PARMS={0x18, 0x2, {0x7ff, 0xd8, 0x0, 0x9, 0x100000e0}}]}, {0x52, 0x6, "a06b1d1931f3579c6d7c5159238a286074602c3726c701f3c0d5382de62a6e8c4fb714fcd674c66cd306a4f78d3d05530609c9b04b7483bd084d70df8e77e6fbd503917aa0a6c737cef0ed021b60"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0x168}}, 0x0) 302.948056ms ago: executing program 1 (id=776): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x7, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000fecd230fc0002000080000000000000070000005d0000000000952d62bb00080f8f6a7b9404d7156d247f3e66fde658dbe17d9d78090cf4a5b1a8e35cedee4be5e9dfaf36f7d07e7e06525223d7bd463f9c84d522ef51cefda38bcf5fdae77681be4fd083f06c106503"], &(0x7f0000000100)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000080000000c"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001700)={0x5, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="185200000f000000000000000000000018450000ffffffff000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000c00163f5c000d64a5d2fc4d22130000b700000000000009918af0ffffffffff182b0000", @ANYRES32=r1, @ANYBLOB="00000000020000008520000003000000487b4000f0ffffff"], &(0x7f0000000200)='GPL\x00', 0xa, 0x5d, &(0x7f0000001500)=""/93, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000003c0)={0x4, 0x10, 0x80, 0x2e0}, 0x10, 0xffffffffffffffff, r0, 0x1, 0x0, &(0x7f0000001580)=[{0x2, 0x1, 0xd, 0x8}], 0x10, 0x6}, 0x94) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70200001400ffd9b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000002c0)='mem_connect\x00', r4}, 0x18) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000007940)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x33f}, 0x1, 0x0, 0x0, 0xc0d0}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r5 = socket$pppl2tp(0x18, 0x1, 0x1) socket(0x200000000000011, 0x2, 0x0) unshare(0x6a040000) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r6 = gettid() r7 = eventfd2(0x0, 0x0) write$eventfd(r7, &(0x7f0000000140)=0xfffffffffffffff8, 0x8) write$eventfd(r7, &(0x7f0000000040)=0x8, 0x8) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r8 = socket$inet6(0xa, 0x1, 0x8010000000000084) sendmmsg$inet6(r8, &(0x7f0000004cc0)=[{{&(0x7f0000000040)={0xa, 0x4e22, 0x1ff, @private0, 0x2}, 0x1c, &(0x7f00000001c0)}}], 0x1, 0x8081) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmmsg$inet(r5, &(0x7f0000005f80)=[{{0x0, 0x0, &(0x7f0000005dc0)=[{&(0x7f00000010c0)="7d5107673289eeae3f806c5c62db497a0299399ab6101c3b", 0x1}], 0x1}}], 0x4000000000001ce, 0x8040) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) r9 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), r9) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32=r2, @ANYRES16=r2], &(0x7f0000000240)='GPL\x00', 0xfffffa0b, 0x0, 0x0, 0x61980, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r10, 0x0, 0x5}, 0x18) 302.320436ms ago: executing program 4 (id=777): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='netlink_extack\x00', r0}, 0x10) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'gre0\x00', 0x0}) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) r3 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r3, 0x541b, &(0x7f00000001c0)) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'batadv_slave_1\x00'}) r4 = memfd_create(&(0x7f0000000000)='\xf3e\t\x9f\x918\xc0y\x01c\x1fnux\x00sV\ad\xb0l \xfd\xd7\x8e\x7f\x89\xb8\xc5;~\x04\x03~K\xfbP\x84=\xfa\x81\f\x1et\x10\x0e\xcf^9\xbe\\', 0x0) pwrite64(r4, &(0x7f00000008c0)='/', 0x1, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r4, 0x0) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f00000000c0)='./file0\x00') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={0x0}, 0x18) socket$key(0xf, 0x3, 0x2) io_uring_setup(0x25f1, &(0x7f0000000300)={0x0, 0x2603, 0x40, 0x3, 0x3d7}) r5 = socket$nl_rdma(0x10, 0x3, 0x14) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = syz_open_dev$usbfs(&(0x7f0000002000), 0xd, 0x20041) ioctl$USBDEVFS_SUBMITURB(r6, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x80, 0x0, 0x0, 0x0, 0x2}, 0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$USBDEVFS_REAPURBNDELAY(r6, 0x4004550d, 0x0) symlink(&(0x7f0000001780)='./file0/../file0\x00', &(0x7f00000017c0)='./file0\x00') r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r7}, 0x10) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r6, 0x8010671f, &(0x7f0000000440)={&(0x7f00000003c0)=""/7, 0x7}) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x38, 0x1403, 0x1, 0x70bd29, 0x25dfdbff, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth0_to_bridge\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8081}, 0x20000010) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newqdisc={0x2c, 0x24, 0x3fe3aa0262d8c583, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x10, 0xe}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x7}]}, 0x2c}}, 0x4048000) 301.881406ms ago: executing program 0 (id=778): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0000}]}) close_range(r0, 0xffffffffffffffff, 0x0) 272.690078ms ago: executing program 2 (id=779): r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x62, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0xa}}, 0x0, 0x0, 0xffffffffffffffff, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x28011, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0900000004000000060000000a00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x50) close(0x3) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000004888b7000000", @ANYRES16=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2, 0x0, 0xfffffffffffffffd}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r1}, &(0x7f0000000380), &(0x7f00000003c0)=r2}, 0x20) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) recvfrom$inet_nvme(0xffffffffffffffff, &(0x7f0000000740)=""/227, 0xe3, 0x10, &(0x7f0000000100)=@l2tp={0x2, 0x0, @rand_addr=0x64010101, 0x4}, 0x80) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40810) getpid() ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x3) r4 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={0x0, 0x38}, 0x1, 0x0, 0x0, 0x4040000}, 0x100) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) open_tree(0xffffffffffffffff, 0x0, 0x80800) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000540)={[], [{@fscontext={'fscontext', 0x3d, 'root'}}, {@fowner_gt}, {@hash}, {@smackfstransmute={'smackfstransmute', 0x3d, 'syzkaller0\x00'}}]}, 0x1, 0x553, &(0x7f0000001080)="$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") r5 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) ftruncate(r5, 0x2007ffc) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000032c0), 0x0, 0x0) syz_open_dev$sg(&(0x7f00000003c0), 0x7, 0x5e1005) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, &(0x7f0000000340)='syzkaller\x00'}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{}, &(0x7f0000000000), &(0x7f00000005c0)}, 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) 257.99052ms ago: executing program 4 (id=780): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x7, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000fecd230fc0002000080000000000000070000005d0000000000952d62bb00080f8f6a7b9404d7156d247f3e66fde658dbe17d9d78090cf4a5b1a8e35cedee4be5e9dfaf36f7d07e7e06525223d7bd463f9c84d522ef51cefda38bcf5fdae77681be4fd083f06c106503"], &(0x7f0000000100)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000080000000c"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001700)={0x5, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="185200000f000000000000000000000018450000ffffffff000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000c00163f5c000d64a5d2fc4d22130000b700000000000009918af0ffffffffff182b0000", @ANYRES32=r1, @ANYBLOB="00000000020000008520000003000000487b4000f0ffffff"], &(0x7f0000000200)='GPL\x00', 0xa, 0x5d, &(0x7f0000001500)=""/93, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000003c0)={0x4, 0x10, 0x80, 0x2e0}, 0x10, 0xffffffffffffffff, r0, 0x1, 0x0, &(0x7f0000001580)=[{0x2, 0x1, 0xd, 0x8}], 0x10, 0x6}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0xd, &(0x7f00000029c0)=ANY=[@ANYRES64=r1, @ANYBLOB="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", @ANYBLOB="0000000000000000b7080000001100007b8af8ff00000000bfa200000000000007020000f8ffffffb703000009c451f5b704000000000000850000000100000095d8f5cc52eaf47637f33b8ab10c111338c868b2ec545b5c6326858ead8c287b97214ce5f7470dc9deb8cdcb4875d0c574d7ed9d18c0e39ef70e7da7ec230250041f5f8805acb4a1681c8d4f2f2fa0616f60e55e1290451c96f4f9c46c41eb7472b49b7dcf381168c416d9915ddbfe2f99992d9f48c11a379fce7cc9caa59c8b8e1fb551ca37ef0c59", @ANYRES64=r0, @ANYRESOCT=r2], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x14, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70200001400ffd9b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000002c0)='mem_connect\x00', r5}, 0x18) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000007940)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x33f}, 0x1, 0x0, 0x0, 0xc0d0}, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) r7 = socket$pppl2tp(0x18, 0x1, 0x1) socket(0x200000000000011, 0x2, 0x0) unshare(0x6a040000) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r8 = gettid() r9 = eventfd2(0x0, 0x0) write$eventfd(r9, &(0x7f0000000140)=0xfffffffffffffff8, 0x8) write$eventfd(r9, &(0x7f0000000040)=0x8, 0x8) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r8}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r10 = socket$inet6(0xa, 0x1, 0x8010000000000084) sendmmsg$inet6(r10, &(0x7f0000004cc0)=[{{&(0x7f0000000040)={0xa, 0x4e22, 0x1ff, @private0, 0x2}, 0x1c, &(0x7f00000001c0)}}], 0x1, 0x8081) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) connect$pppl2tp(r7, &(0x7f0000000440)=@pppol2tp={0x18, 0x1, {0x0, r6, {0x2, 0x1, @remote}, 0xa}}, 0x26) sendmmsg$inet(r7, &(0x7f0000005f80)=[{{0x0, 0x0, &(0x7f0000005dc0)=[{&(0x7f00000010c0)="7d5107673289eeae3f806c5c62db497a0299399ab6101c3b", 0x1}], 0x1}}], 0x4000000000001ce, 0x8040) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) r11 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), r11) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0x5}, 0x18) 245.916661ms ago: executing program 0 (id=781): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x7, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000fecd230fc0002000080000000000000070000005d0000000000952d62bb00080f8f6a7b9404d7156d247f3e66fde658dbe17d9d78090cf4a5b1a8e35cedee4be5e9dfaf36f7d07e7e06525223d7bd463f9c84d522ef51cefda38bcf5fdae77681be4fd083f06c106503"], &(0x7f0000000100)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000080000000c"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001700)={0x5, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000c00163f5c000d64a5d2fc4d22130000b700000000000009918af0ffffffffff182b0000", @ANYRES32=r1, @ANYBLOB="00000000020000008520000003000000487b4000f0ffffff"], &(0x7f0000000200)='GPL\x00', 0xa, 0x5d, &(0x7f0000001500)=""/93, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000003c0)={0x4, 0x10, 0x80, 0x2e0}, 0x10, 0xffffffffffffffff, r0, 0x1, 0x0, &(0x7f0000001580)=[{0x2, 0x1, 0xd, 0x8}], 0x10, 0x6}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0xd, &(0x7f00000029c0)=ANY=[@ANYRES64=r1, @ANYBLOB="157d9704e6aa0d8ac14d58ee7b3ad6d43c72f49871649d3221a5ffbce54492cffdfd9bd3f2aa3ef41f0bc417b563764259f67398d3c167ace94e7547b7e1d43b1e419736ed0124e164e7211bf7834f929fe369be63a742f47168b23bd7e64209ea166373fb7a0d129415241c62f40c8e0243edd912b22e971e00cd4827076a9a2412d053f4a1f22d127b824d5b904450c0af456f2ba2b9fc5a1d368c88674f238afc625577a4b10dd2cdcd5ee5223aa381089087afb3f4e7c7e3081ed5e4e20e282e27f70c71b093e9a1eaf419ee0546da8c07dee2405deadbd1ee0772f67b1ee1db0609b64a14c44bb3f8fb9e73ba3b41665161359f5b056726395c73133238b7364fda079007646c2ae59d5857ac8956a88cb1f35186a805d2cb91990d4c5397e7fe5f90188c71191b44efd697c1bd26dd27e1a65ce3f7e9fb4dcc364ca41bf3ce31d5f51c2d646f11fd7cfbfcd89c8158f052361f7b5d19a39c8a13b822337ea9a6551669d6b78b1e807f4f56238791e0eda615c4ebe8bff6e871653f6b1bd396f763cf65cddd32f203a7109ee53b1c057a233596baec8eaabf32b665fdd4cce76805361c3944e4b61a12ad9fb0827477cee367338b4520ebe378364238c5570ba33c2d4512b0e47ed2d0f1482328285621188095d455dbf1f16e0e391b735f355cb8272def6959492eb127be0c1c71192571562d0df5bf799c1e6e537b96690d15fd458efcc378802407d25ddac0591b3096d88ffb0bd65737defded895434479c812af44da85f1673438eb19cd53662f1654b27009fb973ca7e5dc081505140d32bb8d5a11be07870bd729fa400835755038d890568ddfd0451203bd0ed19185cd7fd43aa3cab719217c5e98d5ea6734117b9b49bf75c8adb66c3e12620842cb4df5053b90bf4840d9ed4db81c412472ecb253611b72ba73aba89e5d9037db33b672559771fd3b0c5b7b606f79cb736a5cbac7910aaad96f2f2f8efa89a99d7ebca5d74451f5a4408456d42d03b0845e4b5ef5cdd31b0b1c7fad85ce3483bf9a915ba72c3e6d05d3f4cfe5389db23a5a4885ae12a49868fd5b71876e19718d36e9d16083ae0c38dd88241a9f7fd9efa94c4b03975c3a6819ef9ebb56c02ee80123d088922e4adc04c50cd033364e13b267fc288de297a4e1de6390ad07db13d6ca7b060ec4b53b26f69f118fcc3b6a3a109ca14da094219d4e4d0a5d75c36d3315d9395ed7292c29b5da8ccc42696a6ca4f2984ebaf0e76022c25123d2446a4d2d12f4625b513a07ab2fd859f4cfdac0e5a3b344ba307415044ea79f77593431c24e8539b81c9292435b762815b5c6e067287a0b790c3703bd970d83976455d8bbc3483309cc92d1541481c773a7b877d008e495c051643b66e85d95ea3d200a9b41abc390f23b459d799bd98ff4db51ddfab755f52909090f6b2fc2755c38babdba493250e00a1a18356c8f9550fe7b6d5d0a14d5acba6050ec4796e4e084137c20ac2e95a42795190420ede9558109992d2dcdefed69e2e5a8ae87693993df34eacb1f23772a8ff45a546264196d6afc3d4be56abc4f0d0debd6dae66d0cca0e797c7d8538a6621a641aa653077676a0aec8fa0c3c9caa1994a3221f86e3328f543772c4bc582ba91dec2e7738737091ef930e5df29de1fd8727fd6f08cd0d7c62fdd4f2b1b77ffc3e38f7a7acde846aaadeebb787fcd7a457087509a73b84503b631dd6202558800c3fd37dfe987754570d07a8c26a593d9226e3cfb672f66ce544855508a23e18b4a079d70ea01cbceeb2c7365b75d6ee3bc73c015b2891d423823943303564747fcaa99df8b68575854b53ed2a5f2939a73ff63922dfbb1144a16c1a89fd3ec735195b57794edf7261fe8f39a0c097329ec2557198f0225530596c2af5c15eb2dae13c49a393ec54e2fd6fb79c7486018bb86de3f140573c5cb0f9e19389d721187b46b4d60659151210c8a7fd4295f0d5baead54b18aa472930f734d83151b6e9c7d97033495b2ea7d22a0a69ae369f39bae3f98b1f3deba7ee57b3891994810f16e438d942ed9a2db0ae79245f05ccf68baebb14eff46da3f9a604e3a1a2b231235aee6413e086f87a2e0ecd90581ad1200227d84bb59a58b96868d2da157905fc2ba39a87589a2029feb5c92db68cb04417c31b40725b32286ae3c8fdc9325453ece1d83b9fca4e3f0b458a33e30b71f3620de3d17258cdb855108ffbb34dbb6ea39df19aafb405da71cd7eb5541714cb03887773da112e259f7174e65e10de68524a4ceace1d1c864e9533fec0b9d2ad5698725e4196ae255e5fb1a69cbb6e1b5dced27cbdb4467196a69c03eab378bf603738f98289b140a67cdf826b9a21c394406644a1c774f720d49ecb270a5571311304127e35e9c6f5a134f99280e3ac2efd66f60b7b378d49140296277057ea0d4135934167169b35e71f866969e7aceeb6318b9093269e05e2918dcb37556342e1d1a69334ce6b4eea56f93965f6ffa74a9b58eda52d57175b06b4c79c91035b3470a7f3cb97f52ca06d4919f4b5b7ebc4a1afbb2d2a2ddfe2d0a092104ac96d942d6c9bdb3d6c052b6ad2b3ff3b457160966b25c955c551278ae93945749f2e6a10e80795089b3f8a7fbcce08c78ea212388430c8c3e56beaf74bd499e80a79ad72eecef1af55d97edaa86330848c3b5f5f07d3c6e2021278aeead033eb645470ae8d9e0255b28c2093dacb1fdcc416d986086be478308a573d76c50a6c77353d3088a9e220d1221695fd7e01fb91bad4a6f0775133597e8215bafb2e495180204dbe32682c216eecadd9c74ffbae9ed3579eb85377ef432339a5874f24c27229cedbc2b9d41dd2de23f344a50f3ed3762b2cc53b06f875a8889d887320eaf93259d9448583851a9064ab35d6a3853c34775e42117c466e410f630610706472f0a4960d5f26d022b3947352d34395b7c1a80de384455b6ac2bbb2fd952f3d6d49ac5bf58e72ce3e33f190523f419042c8e1697227cef740f8a826398e5cdf51bd52baef72e13ec934e8b07e28fdc4ec51e912b90d20aa9b63a2bda3d533e69a2f20c150917f4722a27462288ba29ef2461b4e4193ecd7800ad5f7f1dfdad05c9e5d50299a0a07b1ff4d9b979372bec182280ea5c6786f76561566b750af523a3d32f897158681b93028b27669499720629d0b7288d9c2c80ae0989d3fff5be5d7dcda1879942e5c12b5954fb902c912d86e70a337b0f4f271994b0d9a263041e798a962bef20c99aaa22b1e6c1f5fd8503865447c02dca91d368c1b9dc0b0d671d7b8b558bcb22d8dd768dcedbd6f2aa48c453933fd2cc2c4416fbab836968789783b32b1ff9445c1cbf528f494d68808a299f122e58a1934e8c93cf342acc4b360e5251a2ceba7be31c21aff364893f36d0dd81990c111a9d57ad0c8f25b5909be74edf66935d5f63666bcdf2ab557208a569ab666d06ead8bada79d2ad0f9132e22e35a2f1c51ffc7a3f0b96e8ce295129e28ed7f75f2a94b12357fadfc6c4470e6f0551c41ee410e88974bdcdaa1893516bf8927990a682b08f651cd9e17cef02b0dc84b65e36bd5abb86a0406356bd048be80aa1e7599998aafbc20380653611852c418d31b886f175d093be114f8d80ffaa618708ebf55ad4967cd9f70261e7acd70ad71c946e6fdcc174c5f943e00800c2d37ffe567336eb801b03f88e9804eff0d51c00ae6c78604b9e70a0ca2b63d6649ba654cce6f446859df8e18e1e1e71f84a7f02a8dd02e9fe0887ed13c01b306a1509b3cb71137e29b63b94948997a6cfee9b374b61d385e145eaa2cf11791f93351d40881b933fbdc1c97fef38c7fd51d749504604dddecf92d6da9da7ca04aa25170050a2601225d98b03a454002011a1c48aadb69c93b23448a4e455729e420ffa7a5910ea26ddb2266f9c25a95a83ec04a3b7eca438498e0cfd4331d41ceeaafcb70b953d78b934a509492cbf9d2c8986c0dc335212e127af1ca2e5216decb238f3920ef2667fc5b661e57e16f157137c1a0b761dc06830eee021d2180f3a743657ca9ef742dcb732227611818f9a04b8412aafc7317badac317f76a2376bff24431a431c5203afa38e1a54c28fc6846440feee97db077a9b7ee414736532261410d5109fbcc50915ee0a8e4c70bb3638e19142ffe25affa8e5dc58dc2ae5a2bbc87b615d7f084aad633953c5a53e8c797a5c476e23880b294a0918d7d92ba979dd9fd297ac12f95f2110acfa1ca679df92e46dc40f068962cb3a753181ba1db3de280563a823d7ead93fcca35105d56c5adebf7bb81888089978428e55c0f0f3ee7b72c71e0bf79e9d30255f09bfe06f1cb386d5490fa102cf5b720f4e7524e9b1558d56aa0cc0ed7363b05526beb1d11c037b9866244d6fcff536ea0e83d1a3239cbb0682dd42116acf2482f593f1d26c1525597ee31d1b89e07a9d6a9a3bec12dac359c2f47f2d116890fcce78f930dcca0bb8ece5c1c1f31b9a546cf04d8d503659c32e57e1729ddfcbc14a6f0942a87e45ed61308b0259cf128f0f433b358e55c72d80fd5df8377de048cc0002a26934f4c2a91e78eb788f9d292940e5e04660508ef3c081ecb768288ad024abac21bba2bc96b49ae772e22bdc6532b02cab04f8ebedc6411df754d11b00705655ff40fc8a45ee0e7abaeab9ec36862315f57672ff3979e208f7d14040df2d0a4039f3585096b1e1d13c45fb2a0a2ed7e1bfbf1398fa229aa5a7235c9320f03aae9667f12108de5564d2c8d64f9736b92c2a2ceea176194bbd0cf49f916dfb88745b0f41f44f11e940559ca441719f90a8de02529d12b2892764b5a018caf320fcc8452dd53be9a39bd0f789fee981b1ecc3ebbc7238b29b22a671328cac7f6d6798c753192c5e45c1936ff7dbfcbfa6600d467688c91863ae796a50a12a14fc7c5f3e1cf9a82ea98f77ae2018b4cb2445bcad5146c559c10705cc512cefaea525df34f82b956d5bffd1ccdb8dbcf738bb82325a5e829fca88f1012f9c979c6a91beed04da45ed6f27fa5030fc01a22b1ed1609d7b92909b71b30daf5e2ac2009e713de4958844a32c1210a9196c89a7e7df0c8a0562901003e2e83f18d1830e69c52d83239f848566df1c54dd4d3da419d79ccb9944e0c92ea49e6c28556ca2140be9a8a7bafe21e5354e83f4525dee76efcdd660ff46af87717afbad00520ead5b64d79bacb4b55883d6c4ee8deedcd251569bd7e2fbd717ff804cb0bd9a52cef03e83239685226b18dd5b41107d23900454cdd6f76f70b091b8f2ed6fed91137532a0f46be633ec8ff407bb3b65010e572298dfed285cbbf708aaee91adfc0110c8663d2b861ab423a021bd1c3c3cf65b38f8268277e0f9df9d8e26fdc639e13ac71fbc8f0ea2235804913edfd2d1f9e6851a84d7a3e5a7a5db99fcfc03459552c52347990b7b14005036d99f0fa346fec1cbd75609305b953a9a7a3e1736c8a381c921b9fd7783e60ec4a54a81b0b96ebd1870e9e0a27cbab038554da393a359d3261087525a83185d8aa2af7981988b7de9e1219c0718b7758f62225c9e2869481d6d11e118eccc6da406dbd733ce6c6efdd1bd47595c7bdf69e5dfc89d73394377a4b63760a9dfd5d0e4e677c77cfadfe0f93ce2432e5fb76ec93c98f17ea046481de8e0afc54c35f9648cff956f15c8d0b3a6f40e97a12f0cd2af5c62c95484f8d3c991c42cb380069370429ac0eccc3a9ff0c7a9c126552ccd3d8aa4d4beae522585c8387368d7788ae5a3274728b04fe8d4f2bc1b8ea9a5", @ANYBLOB="0000000000000000b7080000001100007b8af8ff00000000bfa200000000000007020000f8ffffffb703000009c451f5b704000000000000850000000100000095d8f5cc52eaf47637f33b8ab10c111338c868b2ec545b5c6326858ead8c287b97214ce5f7470dc9deb8cdcb4875d0c574d7ed9d18c0e39ef70e7da7ec230250041f5f8805acb4a1681c8d4f2f2fa0616f60e55e1290451c96f4f9c46c41eb7472b49b7dcf381168c416d9915ddbfe2f99992d9f48c11a379fce7cc9caa59c8b8e1fb551ca37ef0c59481420afc7d2de139d8e088eaf79452df330680fce787f51c0b813de1b669c2bae3116b5e2162c65e1e62e041e4b7259cea0da74b4070cc34170155586af433f4bed", @ANYRES64=r0, @ANYRESOCT=r2], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x14, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70200001400ffd9b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000002c0)='mem_connect\x00', r5}, 0x18) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000007940)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x33f}, 0x1, 0x0, 0x0, 0xc0d0}, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) r7 = socket$pppl2tp(0x18, 0x1, 0x1) socket(0x200000000000011, 0x2, 0x0) unshare(0x6a040000) r8 = gettid() r9 = eventfd2(0x0, 0x0) write$eventfd(r9, &(0x7f0000000140)=0xfffffffffffffff8, 0x8) write$eventfd(r9, &(0x7f0000000040)=0x8, 0x8) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r8}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r10 = socket$inet6(0xa, 0x1, 0x8010000000000084) sendmmsg$inet6(r10, &(0x7f0000004cc0)=[{{&(0x7f0000000040)={0xa, 0x4e22, 0x1ff, @private0, 0x2}, 0x1c, &(0x7f00000001c0)}}], 0x1, 0x8081) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) connect$pppl2tp(r7, &(0x7f0000000440)=@pppol2tp={0x18, 0x1, {0x0, r6, {0x2, 0x1, @remote}, 0xa}}, 0x26) sendmmsg$inet(r7, &(0x7f0000005f80)=[{{0x0, 0x0, &(0x7f0000005dc0)=[{&(0x7f00000010c0)="7d5107673289eeae3f806c5c62db497a0299399ab6101c3b", 0x1}], 0x1}}], 0x4000000000001ce, 0x8040) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) r11 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), r11) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32=r3, @ANYRES16=r3], &(0x7f0000000240)='GPL\x00', 0xfffffa0b, 0x0, 0x0, 0x61980, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r12, 0x0, 0x5}, 0x18) 110.006981ms ago: executing program 3 (id=782): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x48) syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x0, &(0x7f0000000480), 0x1, 0x3f7, &(0x7f00000004c0)="$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") getdents(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x11, 0x27, &(0x7f0000000b80)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x800}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@alu={0x4, 0x0, 0xd, 0x3, 0x8, 0x18, 0x8}, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0x10}, @map_val={0x18, 0x4, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x8}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x93}, @map_val={0x18, 0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x4}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @call={0x85, 0x0, 0x0, 0x7c}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000008c0)='GPL\x00', 0x6, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000900)={0x1, 0x1}, 0x8, 0x10, &(0x7f0000000940)={0x3, 0xe, 0xe2b, 0x1}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000cc0)=[0xffffffffffffffff, 0xffffffffffffffff, r0], &(0x7f0000000d00)=[{0x1, 0x2, 0xb, 0x1}, {0x5, 0x4, 0x9, 0x6}, {0x1, 0x2, 0xb, 0xb}, {0x0, 0x3, 0x6, 0xc}, {0x3, 0x1, 0xd, 0x4}], 0x10, 0x5}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r1}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB], &(0x7f0000000100)='syzkaller\x00', 0x9, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8001}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x7, 0x4, 0x208, 0x1}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000021000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x1, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=@newsa={0x1a0, 0x10, 0x1, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64}, {@in, 0x0, 0x32}, @in6=@dev={0xfe, 0x80, '\x00', 0x2c}, {}, {0x0, 0x0, 0x8000000, 0x200}, {0x0, 0x0, 0x2}, 0x0, 0x0, 0xa, 0x0, 0x0, 0xcd}, [@algo_crypt={0x48, 0x2, {{'cbc(aes)\x00'}}}, @replay_esn_val={0x1c, 0x17, {0x0, 0x0, 0x0, 0x0, 0x70bd28}}, @algo_auth_trunc={0x4c, 0x14, {{'cmac(aes)\x00'}, 0x0, 0x18}}]}, 0x1a0}}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x1c5042, 0x12) write(r5, &(0x7f0000000740)="cc", 0x1) sendfile(r5, r4, 0x0, 0x3ffff) sendfile(r5, r4, 0x0, 0x7fffeffd) 66.698525ms ago: executing program 2 (id=783): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'gre0\x00', 0x0}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) r3 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r3, 0x541b, &(0x7f00000001c0)) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000200)={'batadv_slave_1\x00'}) r4 = memfd_create(&(0x7f0000000000)='\xf3e\t\x9f\x918\xc0y\x01c\x1fnux\x00sV\ad\xb0l \xfd\xd7\x8e\x7f\x89\xb8\xc5;~\x04\x03~K\xfbP\x84=\xfa\x81\f\x1et\x10\x0e\xcf^9\xbe\\', 0x0) pwrite64(r4, &(0x7f00000008c0)='/', 0x1, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r4, 0x0) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f00000000c0)='./file0\x00') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={0x0}, 0x18) socket$key(0xf, 0x3, 0x2) io_uring_setup(0x25f1, &(0x7f0000000300)={0x0, 0x2603, 0x40, 0x3, 0x3d7}) r5 = socket$nl_rdma(0x10, 0x3, 0x14) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = syz_open_dev$usbfs(&(0x7f0000002000), 0xd, 0x20041) ioctl$USBDEVFS_SUBMITURB(r6, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x80, 0x0, 0x0, 0x0, 0x2}, 0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$USBDEVFS_REAPURBNDELAY(r6, 0x4004550d, 0x0) symlink(&(0x7f0000001780)='./file0/../file0\x00', &(0x7f00000017c0)='./file0\x00') r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r7}, 0x10) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f00000005c0)={[{@nolazytime}, {@jqfmt_vfsold}, {@journal_path={'journal_path', 0x3d, './file0/../file0'}}, {@noquota}, {@nodioread_nolock}, {@journal_checksum}, {@data_err_abort}], [{@seclabel}]}, 0x3, 0x473, &(0x7f0000000640)="$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") ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r6, 0x8010671f, &(0x7f0000000440)={&(0x7f00000003c0)=""/7, 0x7}) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x38, 0x1403, 0x1, 0x70bd29, 0x25dfdbff, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth0_to_bridge\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8081}, 0x20000010) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newqdisc={0x2c, 0x24, 0x3fe3aa0262d8c583, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x10, 0xe}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x7}]}, 0x2c}}, 0x4048000) 0s ago: executing program 2 (id=784): readv(0xffffffffffffffff, &(0x7f0000000540)=[{&(0x7f0000000640)=""/90, 0x5a}, {&(0x7f0000000140)=""/11, 0xb}], 0x2) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={0x0}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x3, 0xc, &(0x7f0000000640)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000000c80)="e8", 0x6200, 0x12000000, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) syz_usb_connect$uac1(0x2, 0xa8, 0x0, 0x0) r0 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000004c0)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1, 0x8000000000000003, {}, 0xfd}, 0x18) sendmsg$nl_route_sched(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000004740)=@newtaction={0x14, 0x30, 0x200, 0xf0bd29, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4004845}, 0x480c5) close(r0) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB='1q'], 0x118) kernel console output (not intermixed with test programs): 721352][ T4133] siw: device registration error -23 [ 56.775238][ T4137] tipc: Started in network mode [ 56.780275][ T4137] tipc: Node identity ac14140f, cluster identity 4711 [ 56.788328][ T4137] tipc: New replicast peer: 255.255.255.255 [ 56.794886][ T4137] tipc: Enabled bearer , priority 10 [ 56.872279][ T4144] loop4: detected capacity change from 0 to 512 [ 56.941941][ T3405] usb 4-1: device descriptor read/8, error -110 [ 56.968722][ T4144] EXT4-fs error (device loop4): ext4_ext_check_inode:523: inode #3: comm syz.4.217: pblk 24 bad header/extent: invalid extent entries - magic f30a, entries 3, max 4(4), depth 0(0) [ 57.020930][ T4144] EXT4-fs error (device loop4): ext4_quota_enable:7127: comm syz.4.217: Bad quota inode: 3, type: 0 [ 57.051192][ T3405] usb 4-1: new SuperSpeed USB device number 2 using vhci_hcd [ 57.070994][ T4144] EXT4-fs warning (device loop4): ext4_enable_quotas:7168: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 57.101917][ T3405] usb 4-1: enqueue for inactive port 0 [ 57.128934][ T3405] usb 4-1: enqueue for inactive port 0 [ 57.149098][ T4144] EXT4-fs (loop4): mount failed [ 57.157684][ T3405] usb 4-1: enqueue for inactive port 0 [ 57.468743][ T4166] loop4: detected capacity change from 0 to 4096 [ 57.482570][ T4166] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 57.552500][ T4166] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 57.852003][ T4176] loop0: detected capacity change from 0 to 512 [ 57.909433][ T4176] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 57.924128][ T10] tipc: Node number set to 2886997007 [ 57.951283][ T4180] tipc: Enabling of bearer rejected, already enabled [ 58.063531][ T3297] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.240723][ T3405] usb usb4-port1: attempt power cycle [ 58.293906][ T4188] loop2: detected capacity change from 0 to 1024 [ 58.314949][ T4185] infiniband syz2: set down [ 58.319597][ T4185] infiniband syz2: added syzkaller0 [ 58.369340][ T4188] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 58.475444][ T4185] RDS/IB: syz2: added [ 58.508548][ T4185] smc: adding ib device syz2 with port count 1 [ 58.537557][ T4185] smc: ib device syz2 port 1 has pnetid [ 58.680900][ T4198] loop3: detected capacity change from 0 to 512 [ 58.740739][ T3385] usb usb2-port1: unable to enumerate USB device [ 58.749179][ T4198] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 59.076228][ T4203] loop4: detected capacity change from 0 to 512 [ 59.102453][ T4203] EXT4-fs error (device loop4): ext4_ext_check_inode:523: inode #3: comm syz.4.235: pblk 24 bad header/extent: invalid extent entries - magic f30a, entries 3, max 4(4), depth 0(0) [ 59.143126][ T4203] EXT4-fs error (device loop4): ext4_quota_enable:7127: comm syz.4.235: Bad quota inode: 3, type: 0 [ 59.161412][ T4203] EXT4-fs warning (device loop4): ext4_enable_quotas:7168: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 59.188633][ T4203] EXT4-fs (loop4): mount failed [ 59.190870][ T111] smc: removing ib device syz2 [ 59.713404][ T4217] loop4: detected capacity change from 0 to 4096 [ 59.777595][ T4219] loop3: detected capacity change from 0 to 1024 [ 59.800555][ T4217] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 59.820912][ T4219] EXT4-fs: Ignoring removed nobh option [ 59.826614][ T4219] EXT4-fs: Ignoring removed bh option [ 60.159138][ T4228] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8) [ 60.165712][ T4228] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 60.173751][ T4228] vhci_hcd vhci_hcd.0: Device attached [ 60.203087][ T4227] infiniband syz2: set down [ 60.207650][ T4227] infiniband syz2: added syzkaller0 [ 60.213105][ T4230] loop0: detected capacity change from 0 to 512 [ 60.253524][ T4234] loop2: detected capacity change from 0 to 1024 [ 60.261044][ T4234] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 60.284546][ T4227] RDS/IB: syz2: added [ 60.290913][ T3405] usb usb4-port1: unable to enumerate USB device [ 60.297458][ T4232] vhci_hcd: connection closed [ 60.298198][ T3665] vhci_hcd: stop threads [ 60.307336][ T3665] vhci_hcd: release socket [ 60.311818][ T3665] vhci_hcd: disconnect device [ 60.316935][ T4227] smc: adding ib device syz2 with port count 1 [ 60.350089][ T4227] smc: ib device syz2 port 1 has pnetid [ 60.850158][ T29] kauditd_printk_skb: 177 callbacks suppressed [ 60.850178][ T29] audit: type=1400 audit(1753838013.965:908): avc: denied { name_bind } for pid=4244 comm="syz.3.246" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 60.908804][ T29] audit: type=1400 audit(1753838013.965:909): avc: denied { node_bind } for pid=4244 comm="syz.3.246" saddr=172.20.20.170 src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 60.931332][ T29] audit: type=1400 audit(1753838013.965:910): avc: denied { create } for pid=4244 comm="syz.3.246" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 60.950704][ T29] audit: type=1400 audit(1753838013.965:911): avc: denied { create } for pid=4244 comm="syz.3.246" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 60.970006][ T29] audit: type=1400 audit(1753838013.975:912): avc: denied { write } for pid=4244 comm="syz.3.246" name="001" dev="devtmpfs" ino=153 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 61.050651][ T4245] siw: device registration error -23 [ 61.050691][ T3665] smc: removing ib device syz2 [ 61.126332][ T29] audit: type=1326 audit(1753838014.245:913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4249 comm="syz.0.247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb62cd7e9a9 code=0x7ffc0000 [ 61.149731][ T29] audit: type=1326 audit(1753838014.245:914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4249 comm="syz.0.247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7fb62cd7e9a9 code=0x7ffc0000 [ 61.173002][ T29] audit: type=1400 audit(1753838014.245:915): avc: denied { bind } for pid=4249 comm="syz.0.247" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 61.192857][ T29] audit: type=1326 audit(1753838014.245:916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4249 comm="syz.0.247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb62cd7e9a9 code=0x7ffc0000 [ 61.216203][ T29] audit: type=1326 audit(1753838014.245:917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4249 comm="syz.0.247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7fb62cd7e9a9 code=0x7ffc0000 [ 61.298798][ T4254] loop1: detected capacity change from 0 to 512 [ 61.335127][ T4254] journal_path: Lookup failure for './file0/../file0' [ 61.342102][ T4254] EXT4-fs: error: could not find journal device path [ 61.378704][ T4254] siw: device registration error -23 [ 61.434511][ T4264] loop1: detected capacity change from 0 to 1024 [ 61.440486][ T4258] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 61.447493][ T4258] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 61.450913][ T4264] EXT4-fs: Ignoring removed nobh option [ 61.455371][ T4258] vhci_hcd vhci_hcd.0: Device attached [ 61.460914][ T4264] EXT4-fs: Ignoring removed bh option [ 61.629369][ T4275] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(8) [ 61.635993][ T4275] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 61.643728][ T4275] vhci_hcd vhci_hcd.0: Device attached [ 61.676048][ T4279] loop1: detected capacity change from 0 to 512 [ 61.717687][ T4276] vhci_hcd: connection closed [ 61.717892][ T111] vhci_hcd: stop threads [ 61.726997][ T111] vhci_hcd: release socket [ 61.731510][ T111] vhci_hcd: disconnect device [ 61.736228][ T3405] usb 2-1: SetAddress Request (6) to port 0 [ 61.773170][ T3405] usb 2-1: new SuperSpeed USB device number 6 using vhci_hcd [ 62.126834][ T4287] netlink: 8 bytes leftover after parsing attributes in process `syz.1.259'. [ 62.162887][ T4262] vhci_hcd: connection reset by peer [ 62.168627][ T51] vhci_hcd: stop threads [ 62.172929][ T51] vhci_hcd: release socket [ 62.177371][ T51] vhci_hcd: disconnect device [ 62.952095][ T4300] tipc: Enabling of bearer rejected, already enabled [ 63.050688][ T4301] infiniband syz2: set down [ 63.055338][ T4301] infiniband syz2: added syzkaller0 [ 63.069440][ T4304] loop1: detected capacity change from 0 to 1024 [ 63.120994][ T4304] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 63.132330][ T4307] loop4: detected capacity change from 0 to 512 [ 63.189737][ T4307] Cannot find set identified by id 0 to match [ 63.209023][ T4301] RDS/IB: syz2: added [ 63.241008][ T4301] smc: adding ib device syz2 with port count 1 [ 63.265881][ T4310] loop0: detected capacity change from 0 to 1024 [ 63.294891][ T4310] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 63.305590][ T4301] smc: ib device syz2 port 1 has pnetid [ 63.438671][ T4316] loop0: detected capacity change from 0 to 512 [ 63.476713][ T4314] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(8) [ 63.483282][ T4314] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 63.491049][ T4314] vhci_hcd vhci_hcd.0: Device attached [ 63.600467][ T4322] vhci_hcd: connection closed [ 63.601024][ T51] vhci_hcd: stop threads [ 63.610031][ T51] vhci_hcd: release socket [ 63.614519][ T51] vhci_hcd: disconnect device [ 63.688520][ T4328] netlink: 8 bytes leftover after parsing attributes in process `syz.2.274'. [ 63.817155][ T51] smc: removing ib device syz2 [ 64.229866][ T4339] loop1: detected capacity change from 0 to 512 [ 64.245407][ T4339] journal_path: Lookup failure for './file0/../file0' [ 64.252378][ T4339] EXT4-fs: error: could not find journal device path [ 64.262044][ T4339] siw: device registration error -23 [ 64.292169][ T4341] netlink: 4 bytes leftover after parsing attributes in process `syz.4.278'. [ 64.427894][ T4354] loop4: detected capacity change from 0 to 1024 [ 64.434697][ T4354] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 64.464628][ T4356] loop2: detected capacity change from 0 to 1024 [ 64.483910][ T4356] EXT4-fs: Ignoring removed nobh option [ 64.489567][ T4356] EXT4-fs: Ignoring removed bh option [ 64.529785][ T4358] loop3: detected capacity change from 0 to 512 [ 64.587371][ T4360] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(8) [ 64.594021][ T4360] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 64.601807][ T4360] vhci_hcd vhci_hcd.0: Device attached [ 64.663859][ T4368] vhci_hcd: connection closed [ 64.664323][ T111] vhci_hcd: stop threads [ 64.673498][ T111] vhci_hcd: release socket [ 64.676822][ T4362] infiniband syz2: set down [ 64.677917][ T111] vhci_hcd: disconnect device [ 64.687291][ T4362] infiniband syz2: added syzkaller0 [ 64.694479][ T4372] loop0: detected capacity change from 0 to 1024 [ 64.706239][ T4362] RDS/IB: syz2: added [ 64.710338][ T4362] smc: adding ib device syz2 with port count 1 [ 64.712077][ T4372] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 64.722598][ T4362] smc: ib device syz2 port 1 has pnetid [ 64.860217][ T4382] loop3: detected capacity change from 0 to 512 [ 64.869350][ T4382] journal_path: Lookup failure for './file0/../file0' [ 64.876317][ T4382] EXT4-fs: error: could not find journal device path [ 65.049643][ T4382] siw: device registration error -23 [ 65.066669][ T51] smc: removing ib device syz2 [ 65.093167][ T4385] siw: device registration error -23 [ 65.131730][ T4387] netlink: 4 bytes leftover after parsing attributes in process `syz.3.293'. [ 65.140811][ T4387] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 65.148344][ T4387] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 65.169570][ T4387] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 65.177101][ T4387] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 65.213251][ T4390] loop1: detected capacity change from 0 to 512 [ 65.540912][ T4399] tipc: Enabling of bearer rejected, already enabled [ 65.569745][ T4401] loop3: detected capacity change from 0 to 1024 [ 65.584878][ T4401] EXT4-fs: Ignoring removed nobh option [ 65.590586][ T4401] EXT4-fs: Ignoring removed bh option [ 65.663032][ T4403] netlink: 28 bytes leftover after parsing attributes in process `syz.2.299'. [ 65.672697][ T4403] netlink: 108 bytes leftover after parsing attributes in process `syz.2.299'. [ 65.686359][ T4403] netlink: 28 bytes leftover after parsing attributes in process `syz.2.299'. [ 65.696350][ T4403] netlink: 108 bytes leftover after parsing attributes in process `syz.2.299'. [ 65.705573][ T4403] netlink: 84 bytes leftover after parsing attributes in process `syz.2.299'. [ 65.914794][ T4411] infiniband syz2: set down [ 65.919718][ T4411] infiniband syz2: added syzkaller0 [ 65.936981][ T4415] loop3: detected capacity change from 0 to 512 [ 65.944041][ T4415] journal_path: Lookup failure for './file0/../file0' [ 65.951051][ T4415] EXT4-fs: error: could not find journal device path [ 66.075229][ T4413] loop2: detected capacity change from 0 to 1024 [ 66.078884][ T4411] RDS/IB: syz2: added [ 66.082045][ T4413] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 66.108345][ T4411] smc: adding ib device syz2 with port count 1 [ 66.143661][ T4411] smc: ib device syz2 port 1 has pnetid [ 66.172915][ T29] kauditd_printk_skb: 237 callbacks suppressed [ 66.172930][ T29] audit: type=1400 audit(1753838019.295:1155): avc: denied { watch watch_reads } for pid=4419 comm="syz.4.304" path="/59/file1" dev="tmpfs" ino=339 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 66.240669][ T4422] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8) [ 66.247329][ T4422] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 66.255104][ T4422] vhci_hcd vhci_hcd.0: Device attached [ 66.427617][ T4415] siw: device registration error -23 [ 66.434686][ T51] smc: removing ib device syz2 [ 66.435517][ T29] audit: type=1400 audit(1753838019.325:1156): avc: denied { execute_no_trans } for pid=4419 comm="syz.4.304" path="/59/file1" dev="tmpfs" ino=339 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 66.463030][ T29] audit: type=1326 audit(1753838019.475:1157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4426 comm="syz.4.306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfe893e9a9 code=0x7ffc0000 [ 66.486861][ T29] audit: type=1326 audit(1753838019.475:1158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4426 comm="syz.4.306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7fdfe893e9a9 code=0x7ffc0000 [ 66.510192][ T29] audit: type=1400 audit(1753838019.475:1159): avc: denied { bind } for pid=4426 comm="syz.4.306" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 66.530014][ T29] audit: type=1326 audit(1753838019.475:1160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4426 comm="syz.4.306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfe893e9a9 code=0x7ffc0000 [ 66.530567][ T2952] usb 4-1: SetAddress Request (6) to port 0 [ 66.553419][ T29] audit: type=1326 audit(1753838019.475:1161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4426 comm="syz.4.306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7fdfe893e9a9 code=0x7ffc0000 [ 66.583264][ T29] audit: type=1326 audit(1753838019.475:1162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4426 comm="syz.4.306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfe893e9a9 code=0x7ffc0000 [ 66.585721][ T2952] usb 4-1: new SuperSpeed USB device number 6 using vhci_hcd [ 66.607323][ T29] audit: type=1326 audit(1753838019.475:1163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4426 comm="syz.4.306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fdfe893e9a9 code=0x7ffc0000 [ 66.637544][ T29] audit: type=1400 audit(1753838019.475:1164): avc: denied { setopt } for pid=4426 comm="syz.4.306" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 66.697419][ T4424] vhci_hcd: connection closed [ 66.697806][ T4094] vhci_hcd: stop threads [ 66.707090][ T4094] vhci_hcd: release socket [ 66.711577][ T4094] vhci_hcd: disconnect device [ 66.736878][ T2952] usb 4-1: enqueue for inactive port 0 [ 66.771016][ T2952] usb 4-1: enqueue for inactive port 0 [ 66.788884][ T2952] usb 4-1: enqueue for inactive port 0 [ 66.802023][ T4432] rdma_rxe: rxe_newlink: failed to add syzkaller0 [ 66.813530][ T4432] loop3: detected capacity change from 0 to 1024 [ 66.820863][ T4432] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 66.840749][ T4435] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(9) [ 66.847404][ T4435] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 66.855224][ T4435] vhci_hcd vhci_hcd.0: Device attached [ 66.902023][ T2952] usb 4-1: new SuperSpeed USB device number 6 using vhci_hcd [ 66.922771][ T2952] usb 4-1: enqueue for inactive port 0 [ 66.943200][ T2952] usb 4-1: enqueue for inactive port 0 [ 66.954262][ T2952] usb 4-1: enqueue for inactive port 0 [ 67.088845][ T4442] loop2: detected capacity change from 0 to 1024 [ 67.096330][ T4442] EXT4-fs: Ignoring removed nobh option [ 67.102063][ T4442] EXT4-fs: Ignoring removed bh option [ 67.419332][ T4452] loop2: detected capacity change from 0 to 512 [ 67.431047][ T4452] journal_path: Lookup failure for './file0/../file0' [ 67.437944][ T4452] EXT4-fs: error: could not find journal device path [ 67.465073][ T4451] loop1: detected capacity change from 0 to 2048 [ 67.486044][ T4452] siw: device registration error -23 [ 67.521972][ T4449] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 67.555013][ T4449] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 34 with error 28 [ 67.567650][ T4449] EXT4-fs (loop1): This should not happen!! Data will be lost [ 67.567650][ T4449] [ 67.577385][ T4449] EXT4-fs (loop1): Total free blocks count 0 [ 67.583467][ T4449] EXT4-fs (loop1): Free/Dirty block details [ 67.589455][ T4449] EXT4-fs (loop1): free_blocks=2415919504 [ 67.595992][ T4449] EXT4-fs (loop1): dirty_blocks=48 [ 67.601724][ T4449] EXT4-fs (loop1): Block reservation details [ 67.608103][ T4449] EXT4-fs (loop1): i_reserved_data_blocks=3 [ 67.626559][ T4436] vhci_hcd: connection reset by peer [ 67.633122][ T51] vhci_hcd: stop threads [ 67.637511][ T51] vhci_hcd: release socket [ 67.642006][ T51] vhci_hcd: disconnect device [ 67.642014][ T3405] usb 2-1: device descriptor read/8, error -110 [ 67.649891][ T4456] netlink: 28 bytes leftover after parsing attributes in process `syz.2.315'. [ 67.662098][ T4456] netlink: 108 bytes leftover after parsing attributes in process `syz.2.315'. [ 67.675591][ T4456] netlink: 28 bytes leftover after parsing attributes in process `syz.2.315'. [ 67.685057][ T4456] netlink: 108 bytes leftover after parsing attributes in process `syz.2.315'. [ 67.694111][ T4456] netlink: 84 bytes leftover after parsing attributes in process `syz.2.315'. [ 67.751986][ T4458] loop2: detected capacity change from 0 to 512 [ 67.770834][ T3405] usb 2-1: new SuperSpeed USB device number 6 using vhci_hcd [ 67.790699][ T3405] usb 2-1: enqueue for inactive port 0 [ 67.802384][ T3405] usb 2-1: enqueue for inactive port 0 [ 67.813668][ T3405] usb 2-1: enqueue for inactive port 0 [ 67.977346][ T4468] loop3: detected capacity change from 0 to 512 [ 67.994375][ T4468] journal_path: Lookup failure for './file0/../file0' [ 68.001307][ T4468] EXT4-fs: error: could not find journal device path [ 68.032028][ T4468] siw: device registration error -23 [ 68.055471][ T2952] usb usb4-port1: attempt power cycle [ 68.400094][ T4477] netlink: 8 bytes leftover after parsing attributes in process `syz.3.321'. [ 68.482125][ T4476] sg_write: data in/out 65/14 bytes for SCSI command 0x5-- guessing data in; [ 68.482125][ T4476] program syz.4.322 not setting count and/or reply_len properly [ 68.531422][ T4478] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(8) [ 68.538003][ T4478] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 68.546044][ T4478] vhci_hcd vhci_hcd.0: Device attached [ 68.603743][ T3303] EXT4-fs unmount: 29 callbacks suppressed [ 68.603763][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.767027][ T4486] infiniband syz2: set down [ 68.771662][ T4486] infiniband syz2: added syzkaller0 [ 68.793522][ T4486] RDS/IB: syz2: added [ 68.798155][ T4486] smc: adding ib device syz2 with port count 1 [ 68.811111][ T4486] smc: ib device syz2 port 1 has pnetid [ 68.817191][ T4487] loop2: detected capacity change from 0 to 1024 [ 68.823920][ T36] usb 10-1: SetAddress Request (3) to port 0 [ 68.829959][ T36] usb 10-1: new SuperSpeed USB device number 3 using vhci_hcd [ 68.840698][ T4487] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 68.840963][ T3405] usb usb2-port1: attempt power cycle [ 69.104151][ T4482] vhci_hcd: connection reset by peer [ 69.109955][ T4094] vhci_hcd: stop threads [ 69.114335][ T4094] vhci_hcd: release socket [ 69.118910][ T4094] vhci_hcd: disconnect device [ 69.149239][ T51] smc: removing ib device syz2 [ 69.507981][ T4512] netlink: 4 bytes leftover after parsing attributes in process `syz.2.335'. [ 69.521924][ T4512] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 69.529914][ T4512] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 69.539867][ T4512] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 69.547702][ T4512] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 69.795706][ T4521] netlink: 8 bytes leftover after parsing attributes in process `syz.2.338'. [ 69.959969][ T4533] netlink: 'syz.0.341': attribute type 10 has an invalid length. [ 70.025500][ T2952] usb usb4-port1: unable to enumerate USB device [ 70.168252][ T4541] tipc: Enabling of bearer rejected, already enabled [ 70.183224][ T4542] loop3: detected capacity change from 0 to 512 [ 70.205778][ T4542] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 70.270137][ T4545] netlink: 28 bytes leftover after parsing attributes in process `syz.0.346'. [ 70.279229][ T4545] netlink: 108 bytes leftover after parsing attributes in process `syz.0.346'. [ 70.332499][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.437808][ T4547] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 70.444402][ T4547] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 70.452166][ T4547] vhci_hcd vhci_hcd.0: Device attached [ 70.688080][ T3405] usb 2-1: SetAddress Request (9) to port 0 [ 70.711156][ T3405] usb 2-1: new SuperSpeed USB device number 9 using vhci_hcd [ 70.751722][ T4558] infiniband syz2: set down [ 70.756390][ T4558] infiniband syz2: added syzkaller0 [ 70.776286][ T4559] loop3: detected capacity change from 0 to 1024 [ 70.789560][ T4559] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 70.845261][ T4558] RDS/IB: syz2: added [ 70.851783][ T4558] smc: adding ib device syz2 with port count 1 [ 70.858156][ T4558] smc: ib device syz2 port 1 has pnetid [ 71.044902][ T4569] loop2: detected capacity change from 0 to 1024 [ 71.051823][ T4569] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 71.200436][ T4551] vhci_hcd: connection reset by peer [ 71.206060][ T111] vhci_hcd: stop threads [ 71.210615][ T111] vhci_hcd: release socket [ 71.215122][ T111] vhci_hcd: disconnect device [ 71.341769][ T4568] rdma_rxe: rxe_newlink: failed to add syzkaller0 [ 71.361359][ T328] smc: removing ib device syz2 [ 71.603827][ T29] kauditd_printk_skb: 191 callbacks suppressed [ 71.603862][ T29] audit: type=1400 audit(1753838024.725:1356): avc: denied { create } for pid=4570 comm="syz.2.355" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 71.652322][ T4574] loop4: detected capacity change from 0 to 512 [ 71.691703][ T29] audit: type=1400 audit(1753838024.765:1357): avc: denied { write } for pid=4570 comm="syz.2.355" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 71.712783][ T29] audit: type=1400 audit(1753838024.765:1358): avc: denied { create } for pid=4572 comm="syz.4.356" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 71.743420][ T4577] loop2: detected capacity change from 0 to 2048 [ 71.761174][ T4574] EXT4-fs error (device loop4): ext4_ext_check_inode:523: inode #3: comm syz.4.356: pblk 24 bad header/extent: invalid extent entries - magic f30a, entries 3, max 4(4), depth 0(0) [ 71.789186][ T4579] tipc: Enabling of bearer rejected, already enabled [ 71.813806][ T4574] EXT4-fs error (device loop4): ext4_quota_enable:7127: comm syz.4.356: Bad quota inode: 3, type: 0 [ 71.829961][ T4577] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 71.861872][ T4574] EXT4-fs warning (device loop4): ext4_enable_quotas:7168: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 71.887275][ T29] audit: type=1400 audit(1753838025.005:1359): avc: denied { mount } for pid=4570 comm="syz.2.355" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 71.903973][ T4573] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 71.925406][ T4574] EXT4-fs (loop4): mount failed [ 71.928273][ T4573] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 34 with error 28 [ 71.942700][ T4573] EXT4-fs (loop2): This should not happen!! Data will be lost [ 71.942700][ T4573] [ 71.952496][ T4573] EXT4-fs (loop2): Total free blocks count 0 [ 71.958498][ T4573] EXT4-fs (loop2): Free/Dirty block details [ 71.964487][ T4573] EXT4-fs (loop2): free_blocks=2415919504 [ 71.970233][ T4573] EXT4-fs (loop2): dirty_blocks=48 [ 71.970488][ T29] audit: type=1400 audit(1753838025.005:1360): avc: denied { add_name } for pid=4570 comm="syz.2.355" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 71.975441][ T4573] EXT4-fs (loop2): Block reservation details [ 71.996068][ T29] audit: type=1400 audit(1753838025.005:1361): avc: denied { create } for pid=4570 comm="syz.2.355" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 72.002994][ T4573] EXT4-fs (loop2): i_reserved_data_blocks=3 [ 72.022404][ T29] audit: type=1400 audit(1753838025.005:1362): avc: denied { write } for pid=4570 comm="syz.2.355" name="file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 72.022438][ T29] audit: type=1400 audit(1753838025.005:1363): avc: denied { open } for pid=4570 comm="syz.2.355" path="/69/file1/file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 72.174770][ T4585] loop3: detected capacity change from 0 to 512 [ 72.211426][ T4585] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 72.253576][ T29] audit: type=1400 audit(1753838025.225:1364): avc: denied { execmem } for pid=4572 comm="syz.4.356" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 72.273555][ T29] audit: type=1400 audit(1753838025.375:1365): avc: denied { read write open } for pid=4584 comm="syz.3.359" path="/81/file0/bus" dev="loop3" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 72.306972][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.440489][ T4588] loop4: detected capacity change from 0 to 4096 [ 72.450840][ T4588] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 72.588050][ T4588] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 72.762448][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.164270][ T4599] __nla_validate_parse: 9 callbacks suppressed [ 73.164294][ T4599] netlink: 8 bytes leftover after parsing attributes in process `syz.2.361'. [ 73.855665][ T3299] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.903444][ T36] usb 10-1: device descriptor read/8, error -110 [ 74.004645][ T4614] netlink: 8 bytes leftover after parsing attributes in process `syz.3.366'. [ 74.010677][ T36] usb 10-1: new SuperSpeed USB device number 3 using vhci_hcd [ 74.042285][ T36] usb 10-1: enqueue for inactive port 0 [ 74.060657][ T36] usb 10-1: enqueue for inactive port 0 [ 74.073591][ T4623] loop2: detected capacity change from 0 to 512 [ 74.080641][ T36] usb 10-1: enqueue for inactive port 0 [ 74.114706][ T4623] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 74.317552][ T4633] loop4: detected capacity change from 0 to 2048 [ 74.352773][ T4633] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 74.377134][ T4631] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 74.396281][ T4631] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 34 with error 28 [ 74.408764][ T4631] EXT4-fs (loop4): This should not happen!! Data will be lost [ 74.408764][ T4631] [ 74.418469][ T4631] EXT4-fs (loop4): Total free blocks count 0 [ 74.424500][ T4631] EXT4-fs (loop4): Free/Dirty block details [ 74.430536][ T4631] EXT4-fs (loop4): free_blocks=2415919504 [ 74.436314][ T4631] EXT4-fs (loop4): dirty_blocks=48 [ 74.441616][ T4631] EXT4-fs (loop4): Block reservation details [ 74.447634][ T4631] EXT4-fs (loop4): i_reserved_data_blocks=3 [ 74.800994][ T4639] loop3: detected capacity change from 0 to 512 [ 74.833257][ T4639] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 74.921904][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.053406][ T4648] loop1: detected capacity change from 0 to 512 [ 75.063153][ T3299] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.101146][ T36] usb usb10-port1: attempt power cycle [ 75.124305][ T4648] EXT4-fs error (device loop1): ext4_ext_check_inode:523: inode #3: comm syz.1.379: pblk 24 bad header/extent: invalid extent entries - magic f30a, entries 3, max 4(4), depth 0(0) [ 75.148556][ T4647] netlink: 8 bytes leftover after parsing attributes in process `syz.0.377'. [ 75.158818][ T4648] EXT4-fs error (device loop1): ext4_quota_enable:7127: comm syz.1.379: Bad quota inode: 3, type: 0 [ 75.171790][ T4648] EXT4-fs warning (device loop1): ext4_enable_quotas:7168: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 75.187300][ T4648] EXT4-fs (loop1): mount failed [ 75.577864][ T4665] loop1: detected capacity change from 0 to 4096 [ 75.589255][ T4665] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 75.605715][ T4665] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 75.833087][ T3405] usb 2-1: device descriptor read/8, error -110 [ 75.949700][ T3405] usb 2-1: new SuperSpeed USB device number 9 using vhci_hcd [ 75.998181][ T3405] usb 2-1: enqueue for inactive port 0 [ 76.050708][ T3405] usb 2-1: enqueue for inactive port 0 [ 76.086804][ T3405] usb 2-1: enqueue for inactive port 0 [ 76.191161][ T4675] netlink: 8 bytes leftover after parsing attributes in process `syz.0.384'. [ 76.236290][ T4678] loop2: detected capacity change from 0 to 512 [ 76.271067][ T4678] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 76.450869][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.660710][ T4683] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8) [ 76.667322][ T4683] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 76.675256][ T4683] vhci_hcd vhci_hcd.0: Device attached [ 76.749766][ T29] kauditd_printk_skb: 95 callbacks suppressed [ 76.749791][ T29] audit: type=1400 audit(1753838029.865:1461): avc: denied { mounton } for pid=4682 comm="syz.3.387" path="/90/file0" dev="tmpfs" ino=504 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 76.864450][ T29] audit: type=1326 audit(1753838029.925:1462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4682 comm="syz.3.387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8134f6e9a9 code=0x7ffc0000 [ 76.888091][ T29] audit: type=1326 audit(1753838029.925:1463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4682 comm="syz.3.387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8134f6e9a9 code=0x7ffc0000 [ 76.970845][ T3405] usb 8-1: SetAddress Request (3) to port 0 [ 76.977069][ T3405] usb 8-1: new SuperSpeed USB device number 3 using vhci_hcd [ 77.066368][ T4695] loop0: detected capacity change from 0 to 512 [ 77.121187][ T4695] EXT4-fs error (device loop0): ext4_ext_check_inode:523: inode #3: comm syz.0.388: pblk 24 bad header/extent: invalid extent entries - magic f30a, entries 3, max 4(4), depth 0(0) [ 77.203821][ T4695] EXT4-fs error (device loop0): ext4_quota_enable:7127: comm syz.0.388: Bad quota inode: 3, type: 0 [ 77.231017][ T4695] EXT4-fs warning (device loop0): ext4_enable_quotas:7168: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 77.231647][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.248053][ T4695] EXT4-fs (loop0): mount failed [ 77.335216][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.418487][ T29] audit: type=1400 audit(1753838030.535:1464): avc: denied { create } for pid=4698 comm="syz.2.390" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 77.482315][ T4686] vhci_hcd: connection reset by peer [ 77.512368][ T111] vhci_hcd: stop threads [ 77.516694][ T111] vhci_hcd: release socket [ 77.521291][ T111] vhci_hcd: disconnect device [ 77.536153][ T29] audit: type=1400 audit(1753838030.625:1465): avc: denied { tracepoint } for pid=4699 comm="syz.1.389" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 77.556048][ T29] audit: type=1400 audit(1753838030.635:1466): avc: denied { create } for pid=4699 comm="syz.1.389" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 77.576906][ T29] audit: type=1400 audit(1753838030.635:1467): avc: denied { write } for pid=4699 comm="syz.1.389" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 77.635034][ T4704] loop1: detected capacity change from 0 to 2048 [ 77.691913][ T4704] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 77.710438][ T29] audit: type=1400 audit(1753838030.675:1468): avc: denied { create } for pid=4698 comm="syz.2.390" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 77.729889][ T29] audit: type=1400 audit(1753838030.675:1469): avc: denied { write } for pid=4698 comm="syz.2.390" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 77.747628][ T4702] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 77.749304][ T29] audit: type=1400 audit(1753838030.675:1470): avc: denied { write } for pid=4698 comm="syz.2.390" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 77.783763][ T4702] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 34 with error 28 [ 77.796148][ T4702] EXT4-fs (loop1): This should not happen!! Data will be lost [ 77.796148][ T4702] [ 77.805984][ T4702] EXT4-fs (loop1): Total free blocks count 0 [ 77.812049][ T4702] EXT4-fs (loop1): Free/Dirty block details [ 77.818073][ T4702] EXT4-fs (loop1): free_blocks=2415919504 [ 77.824045][ T4702] EXT4-fs (loop1): dirty_blocks=48 [ 77.829193][ T4702] EXT4-fs (loop1): Block reservation details [ 77.835301][ T4702] EXT4-fs (loop1): i_reserved_data_blocks=3 [ 77.983818][ T4709] loop0: detected capacity change from 0 to 4096 [ 77.991696][ T4709] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 78.053183][ T4709] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 78.367976][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.624553][ T4714] loop2: detected capacity change from 0 to 512 [ 78.663331][ T4714] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 78.851995][ T36] usb usb10-port1: unable to enumerate USB device [ 79.212053][ T4721] netlink: 8 bytes leftover after parsing attributes in process `syz.1.394'. [ 79.307073][ T3297] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.428296][ T4724] siw: device registration error -23 [ 79.561884][ T4728] loop0: detected capacity change from 0 to 512 [ 79.581038][ T4728] journal_path: Lookup failure for './file0/../file0' [ 79.587925][ T4728] EXT4-fs: error: could not find journal device path [ 79.616026][ T4728] siw: device registration error -23 [ 79.703132][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.769844][ T4732] loop2: detected capacity change from 0 to 512 [ 79.809753][ T4734] loop0: detected capacity change from 0 to 512 [ 79.853248][ T4732] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 79.891082][ T4734] EXT4-fs error (device loop0): ext4_ext_check_inode:523: inode #3: comm syz.0.400: pblk 24 bad header/extent: invalid extent entries - magic f30a, entries 3, max 4(4), depth 0(0) [ 79.941689][ T4732] ext4 filesystem being mounted at /81/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 80.011047][ T4734] EXT4-fs error (device loop0): ext4_quota_enable:7127: comm syz.0.400: Bad quota inode: 3, type: 0 [ 80.039937][ T4734] EXT4-fs warning (device loop0): ext4_enable_quotas:7168: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 80.070498][ T4734] EXT4-fs (loop0): mount failed [ 80.359345][ T4745] loop0: detected capacity change from 0 to 4096 [ 80.413149][ T4745] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 80.443465][ T4745] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 80.759944][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.040333][ T4753] loop1: detected capacity change from 0 to 512 [ 81.078986][ T4753] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 81.163628][ T4753] set match dimension is over the limit! [ 81.599201][ T4760] loop2: detected capacity change from 0 to 512 [ 81.676492][ T4760] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 81.751986][ T3297] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.840078][ T29] kauditd_printk_skb: 66 callbacks suppressed [ 81.840111][ T29] audit: type=1400 audit(1753838034.955:1537): avc: denied { create } for pid=4762 comm=77DEA305FF07 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 81.884191][ T29] audit: type=1400 audit(1753838034.995:1538): avc: denied { name_bind } for pid=4763 comm="syz.4.408" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 81.906121][ T29] audit: type=1400 audit(1753838034.995:1539): avc: denied { node_bind } for pid=4763 comm="syz.4.408" saddr=172.20.20.170 src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 81.943056][ T29] audit: type=1400 audit(1753838035.055:1540): avc: denied { create } for pid=4763 comm="syz.4.408" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 81.962601][ T29] audit: type=1400 audit(1753838035.055:1541): avc: denied { create } for pid=4763 comm="syz.4.408" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 81.982061][ T29] audit: type=1400 audit(1753838035.055:1542): avc: denied { allowed } for pid=4763 comm="syz.4.408" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 82.001317][ T29] audit: type=1400 audit(1753838035.055:1543): avc: denied { create } for pid=4763 comm="syz.4.408" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 82.022605][ T29] audit: type=1400 audit(1753838035.055:1544): avc: denied { write } for pid=4762 comm=77DEA305FF07 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 82.043047][ T29] audit: type=1400 audit(1753838035.055:1545): avc: denied { read } for pid=4762 comm=77DEA305FF07 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 82.063541][ T29] audit: type=1400 audit(1753838035.055:1546): avc: denied { create } for pid=4763 comm="syz.4.408" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 82.106676][ T4765] loop4: detected capacity change from 0 to 512 [ 82.121231][ T3405] usb 8-1: device descriptor read/8, error -110 [ 82.136486][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.142498][ T4765] journal_path: Lookup failure for './file0/../file0' [ 82.152569][ T4765] EXT4-fs: error: could not find journal device path [ 82.252434][ T3405] usb 8-1: new SuperSpeed USB device number 3 using vhci_hcd [ 82.270635][ T3405] usb 8-1: enqueue for inactive port 0 [ 82.276263][ T3405] usb 8-1: enqueue for inactive port 0 [ 82.282376][ T3405] usb 8-1: enqueue for inactive port 0 [ 82.424140][ T4776] loop0: detected capacity change from 0 to 2048 [ 82.441794][ T4777] loop1: detected capacity change from 0 to 1024 [ 82.464394][ T4777] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 82.471814][ T4776] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 82.509925][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.516814][ T4773] infiniband syz2: set down [ 82.523795][ T4773] infiniband syz2: added syzkaller0 [ 82.545302][ T4773] RDS/IB: syz2: added [ 82.556701][ T4773] smc: adding ib device syz2 with port count 1 [ 82.579536][ T4773] smc: ib device syz2 port 1 has pnetid [ 82.590518][ T4784] loop2: detected capacity change from 0 to 512 [ 82.755248][ T4772] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 82.795689][ T4772] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 34 with error 28 [ 82.808185][ T4772] EXT4-fs (loop0): This should not happen!! Data will be lost [ 82.808185][ T4772] [ 82.818042][ T4772] EXT4-fs (loop0): Total free blocks count 0 [ 82.824129][ T4772] EXT4-fs (loop0): Free/Dirty block details [ 82.830229][ T4772] EXT4-fs (loop0): free_blocks=2415919504 [ 82.836114][ T4772] EXT4-fs (loop0): dirty_blocks=48 [ 82.841332][ T4772] EXT4-fs (loop0): Block reservation details [ 82.847399][ T4772] EXT4-fs (loop0): i_reserved_data_blocks=3 [ 82.863775][ T3665] smc: removing ib device syz2 [ 82.872934][ T4784] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 83.109578][ T3297] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.286222][ T4791] netlink: 4 bytes leftover after parsing attributes in process `syz.0.416'. [ 83.309270][ T4791] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 83.317004][ T4791] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 83.336841][ T4791] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 83.344443][ T4791] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 83.393818][ T4797] loop4: detected capacity change from 0 to 1024 [ 83.401430][ T4797] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 83.455231][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.471042][ T3405] usb usb8-port1: attempt power cycle [ 83.676413][ T4816] loop2: detected capacity change from 0 to 512 [ 83.696569][ T4816] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 83.808629][ T4822] loop0: detected capacity change from 0 to 2048 [ 83.923682][ T4822] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 83.943737][ T4819] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 83.959222][ T4819] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 34 with error 28 [ 83.971868][ T4819] EXT4-fs (loop0): This should not happen!! Data will be lost [ 83.971868][ T4819] [ 83.981554][ T4819] EXT4-fs (loop0): Total free blocks count 0 [ 83.987673][ T4819] EXT4-fs (loop0): Free/Dirty block details [ 83.993647][ T4819] EXT4-fs (loop0): free_blocks=2415919504 [ 83.999488][ T4819] EXT4-fs (loop0): dirty_blocks=48 [ 84.004658][ T4819] EXT4-fs (loop0): Block reservation details [ 84.010714][ T4819] EXT4-fs (loop0): i_reserved_data_blocks=3 [ 84.560306][ T3297] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.629319][ T4830] siw: device registration error -23 [ 84.646396][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.720076][ T4835] loop4: detected capacity change from 0 to 1024 [ 84.775024][ T4835] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 84.786942][ T4838] rdma_rxe: rxe_newlink: failed to add syzkaller0 [ 84.798131][ T4842] loop0: detected capacity change from 0 to 512 [ 84.805918][ T4826] infiniband syz2: set down [ 84.810626][ T4826] infiniband syz2: added syzkaller0 [ 84.816285][ T4842] journal_path: Lookup failure for './file0/../file0' [ 84.823325][ T4842] EXT4-fs: error: could not find journal device path [ 84.833079][ T4838] loop1: detected capacity change from 0 to 1024 [ 84.869450][ T4826] RDS/IB: syz2: added [ 84.874080][ T4826] smc: adding ib device syz2 with port count 1 [ 84.899509][ T4826] smc: ib device syz2 port 1 has pnetid [ 84.910898][ T4838] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 84.981718][ T4849] loop2: detected capacity change from 0 to 512 [ 85.009886][ T4849] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 85.304022][ T4842] siw: device registration error -23 [ 85.330942][ T3405] usb usb8-port1: unable to enumerate USB device [ 85.344739][ T4094] smc: removing ib device syz2 [ 85.829498][ T4860] loop4: detected capacity change from 0 to 512 [ 85.859469][ T4860] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 86.106952][ T4866] loop1: detected capacity change from 0 to 2048 [ 86.174494][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.198209][ T4866] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 86.273212][ T4870] loop0: detected capacity change from 0 to 512 [ 86.284540][ T4865] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 86.302417][ T4872] loop2: detected capacity change from 0 to 512 [ 86.312940][ T4865] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 34 with error 28 [ 86.325557][ T4865] EXT4-fs (loop1): This should not happen!! Data will be lost [ 86.325557][ T4865] [ 86.335267][ T4865] EXT4-fs (loop1): Total free blocks count 0 [ 86.341289][ T4865] EXT4-fs (loop1): Free/Dirty block details [ 86.347207][ T4865] EXT4-fs (loop1): free_blocks=2415919504 [ 86.353044][ T4865] EXT4-fs (loop1): dirty_blocks=48 [ 86.358193][ T4865] EXT4-fs (loop1): Block reservation details [ 86.364331][ T4865] EXT4-fs (loop1): i_reserved_data_blocks=3 [ 86.374631][ T4870] EXT4-fs error (device loop0): ext4_ext_check_inode:523: inode #3: comm syz.0.443: pblk 24 bad header/extent: invalid extent entries - magic f30a, entries 3, max 4(4), depth 0(0) [ 86.381461][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 86.401540][ T4872] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 86.415525][ T4870] EXT4-fs error (device loop0): ext4_quota_enable:7127: comm syz.0.443: Bad quota inode: 3, type: 0 [ 86.457766][ T4870] EXT4-fs warning (device loop0): ext4_enable_quotas:7168: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 86.501166][ T4870] EXT4-fs (loop0): mount failed [ 86.869062][ T4878] loop0: detected capacity change from 0 to 4096 [ 87.639349][ T3299] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.648837][ T4878] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 87.663381][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.681716][ T4878] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 87.761665][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.947894][ T4894] netlink: 28 bytes leftover after parsing attributes in process `syz.4.450'. [ 87.957034][ T4894] netlink: 108 bytes leftover after parsing attributes in process `syz.4.450'. [ 88.006358][ T4897] loop3: detected capacity change from 0 to 1024 [ 88.013628][ T4894] netlink: 28 bytes leftover after parsing attributes in process `syz.4.450'. [ 88.028372][ T4894] netlink: 108 bytes leftover after parsing attributes in process `syz.4.450'. [ 88.037520][ T4894] netlink: 84 bytes leftover after parsing attributes in process `syz.4.450'. [ 88.057205][ T4897] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 88.123525][ T4881] infiniband syz2: set down [ 88.128144][ T4881] infiniband syz2: added syzkaller0 [ 88.169407][ T29] kauditd_printk_skb: 22 callbacks suppressed [ 88.169425][ T29] audit: type=1400 audit(1753838041.285:1569): avc: denied { read } for pid=4901 comm="syz.2.452" dev="nsfs" ino=4026532781 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 88.196977][ T29] audit: type=1400 audit(1753838041.285:1570): avc: denied { open } for pid=4901 comm="syz.2.452" path="net:[4026532781]" dev="nsfs" ino=4026532781 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 88.266456][ T4902] loop2: detected capacity change from 0 to 1024 [ 88.293675][ T4881] RDS/IB: syz2: added [ 88.310923][ T4902] EXT4-fs: Ignoring removed nobh option [ 88.316662][ T4902] EXT4-fs: Ignoring removed bh option [ 88.323059][ T4881] smc: adding ib device syz2 with port count 1 [ 88.343445][ T4907] netlink: 4 bytes leftover after parsing attributes in process `syz.4.453'. [ 88.362621][ T4881] smc: ib device syz2 port 1 has pnetid [ 88.398277][ T4902] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 88.433877][ T29] audit: type=1400 audit(1753838041.345:1571): avc: denied { create } for pid=4901 comm="syz.2.452" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 88.453919][ T29] audit: type=1400 audit(1753838041.355:1572): avc: denied { ioctl } for pid=4900 comm="syz.4.453" path="socket:[9449]" dev="sockfs" ino=9449 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 88.478710][ T29] audit: type=1326 audit(1753838041.365:1573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4901 comm="syz.2.452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7af4cfe9a9 code=0x7ffc0000 [ 88.502133][ T29] audit: type=1326 audit(1753838041.365:1574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4901 comm="syz.2.452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7af4cfe9a9 code=0x7ffc0000 [ 88.525550][ T29] audit: type=1326 audit(1753838041.365:1575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4901 comm="syz.2.452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f7af4cfe9a9 code=0x7ffc0000 [ 88.548976][ T29] audit: type=1326 audit(1753838041.365:1576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4901 comm="syz.2.452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f7af4cfe9e3 code=0x7ffc0000 [ 88.572301][ T29] audit: type=1326 audit(1753838041.365:1577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4901 comm="syz.2.452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f7af4cfd45f code=0x7ffc0000 [ 88.595602][ T29] audit: type=1326 audit(1753838041.385:1578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4901 comm="syz.2.452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f7af4cfea37 code=0x7ffc0000 [ 88.630781][ T3297] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.677739][ T4912] loop4: detected capacity change from 0 to 1024 [ 88.684715][ T4912] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 88.709488][ T4914] loop0: detected capacity change from 0 to 512 [ 88.717527][ T4914] journal_path: Lookup failure for './file0/../file0' [ 88.718547][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.724635][ T4914] EXT4-fs: error: could not find journal device path [ 88.809268][ T4916] loop4: detected capacity change from 0 to 1024 [ 88.820081][ T4916] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 88.832030][ T12] smc: removing ib device syz2 [ 88.842213][ T4914] siw: device registration error -23 [ 88.975878][ T4932] loop1: detected capacity change from 0 to 512 [ 89.019333][ T4935] pimreg: entered allmulticast mode [ 89.031411][ T4932] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 89.064256][ T4935] netlink: 'syz.4.465': attribute type 10 has an invalid length. [ 89.078881][ T4935] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 89.127310][ T4943] pimreg: entered allmulticast mode [ 89.148899][ T4934] pimreg: left allmulticast mode [ 89.154873][ T4943] netlink: 'syz.2.468': attribute type 10 has an invalid length. [ 89.178013][ T4943] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 89.234921][ T4942] pimreg: left allmulticast mode [ 89.268292][ T4947] loop0: detected capacity change from 0 to 1024 [ 89.309199][ T4947] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 89.368097][ T4954] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(9) [ 89.374945][ T4954] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 89.382770][ T4954] vhci_hcd vhci_hcd.0: Device attached [ 89.404375][ T4941] infiniband syz2: set down [ 89.408994][ T4941] infiniband syz2: added syzkaller0 [ 89.436420][ T4941] RDS/IB: syz2: added [ 89.441408][ T4941] smc: adding ib device syz2 with port count 1 [ 89.448495][ T4941] smc: ib device syz2 port 1 has pnetid [ 89.527119][ T4963] loop2: detected capacity change from 0 to 2048 [ 89.579790][ T4963] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 89.606465][ T4962] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 89.621380][ T4962] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 34 with error 28 [ 89.633921][ T4962] EXT4-fs (loop2): This should not happen!! Data will be lost [ 89.633921][ T4962] [ 89.643802][ T4962] EXT4-fs (loop2): Total free blocks count 0 [ 89.650017][ T4962] EXT4-fs (loop2): Free/Dirty block details [ 89.656051][ T4962] EXT4-fs (loop2): free_blocks=2415919504 [ 89.662092][ T4962] EXT4-fs (loop2): dirty_blocks=48 [ 89.667273][ T4962] EXT4-fs (loop2): Block reservation details [ 89.673401][ T4962] EXT4-fs (loop2): i_reserved_data_blocks=3 [ 89.820500][ T36] usb 10-1: SetAddress Request (7) to port 0 [ 89.827069][ T36] usb 10-1: new SuperSpeed USB device number 7 using vhci_hcd [ 89.865846][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.930880][ T31] smc: removing ib device syz2 [ 90.141875][ T4972] loop3: detected capacity change from 0 to 1024 [ 90.149198][ T4972] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 90.187359][ T4958] vhci_hcd: connection reset by peer [ 90.200298][ T3665] vhci_hcd: stop threads [ 90.204744][ T3665] vhci_hcd: release socket [ 90.209331][ T3665] vhci_hcd: disconnect device [ 90.250984][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.271494][ T4976] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(9) [ 90.278115][ T4976] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 90.285917][ T4976] vhci_hcd vhci_hcd.0: Device attached [ 90.339194][ T4981] rdma_rxe: rxe_newlink: failed to add syzkaller0 [ 90.351280][ T4981] loop3: detected capacity change from 0 to 1024 [ 90.358083][ T4981] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 90.505571][ T4985] siw: device registration error -23 [ 90.701181][ T3405] usb 4-1: SetAddress Request (10) to port 0 [ 90.707345][ T3405] usb 4-1: new SuperSpeed USB device number 10 using vhci_hcd [ 90.734525][ T4996] loop2: detected capacity change from 0 to 1024 [ 90.772556][ T4996] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 90.780668][ T4995] netlink: 8 bytes leftover after parsing attributes in process `syz.0.483'. [ 90.793477][ T4991] infiniband syz2: set down [ 90.798125][ T4991] infiniband syz2: added syzkaller0 [ 90.813929][ T4999] loop3: detected capacity change from 0 to 2048 [ 90.846360][ T4999] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 90.873173][ T4997] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 90.921203][ T4991] RDS/IB: syz2: added [ 90.930589][ T4997] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 34 with error 28 [ 90.943064][ T4997] EXT4-fs (loop3): This should not happen!! Data will be lost [ 90.943064][ T4997] [ 90.952787][ T4997] EXT4-fs (loop3): Total free blocks count 0 [ 90.958900][ T4997] EXT4-fs (loop3): Free/Dirty block details [ 90.964962][ T4997] EXT4-fs (loop3): free_blocks=2415919504 [ 90.970805][ T4997] EXT4-fs (loop3): dirty_blocks=48 [ 90.975977][ T4997] EXT4-fs (loop3): Block reservation details [ 90.982098][ T4997] EXT4-fs (loop3): i_reserved_data_blocks=3 [ 90.991115][ T4991] smc: adding ib device syz2 with port count 1 [ 91.007850][ T4991] smc: ib device syz2 port 1 has pnetid [ 91.061765][ T4978] vhci_hcd: connection reset by peer [ 91.069464][ T51] vhci_hcd: stop threads [ 91.073800][ T51] vhci_hcd: release socket [ 91.078301][ T51] vhci_hcd: disconnect device [ 91.321797][ T51] smc: removing ib device syz2 [ 91.568857][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.592568][ T5015] loop0: detected capacity change from 0 to 1024 [ 91.599421][ T5015] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 91.707788][ T5017] infiniband syz2: set down [ 91.712521][ T5017] infiniband syz2: added syzkaller0 [ 91.738705][ T5023] loop2: detected capacity change from 0 to 1024 [ 91.755624][ T5017] RDS/IB: syz2: added [ 91.768781][ T5023] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 91.787067][ T5017] smc: adding ib device syz2 with port count 1 [ 91.808835][ T5017] smc: ib device syz2 port 1 has pnetid [ 91.967116][ T5035] loop3: detected capacity change from 0 to 512 [ 92.000676][ T5035] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 92.059020][ T5033] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(9) [ 92.065608][ T5033] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 92.073408][ T5033] vhci_hcd vhci_hcd.0: Device attached [ 92.181213][ T5045] netlink: 'syz.4.499': attribute type 10 has an invalid length. [ 92.340507][ T3385] usb 2-1: SetAddress Request (10) to port 0 [ 92.349697][ T3385] usb 2-1: new SuperSpeed USB device number 10 using vhci_hcd [ 92.400520][ T4094] smc: removing ib device syz2 [ 92.579151][ T5057] netlink: 'syz.4.500': attribute type 10 has an invalid length. [ 92.849133][ T5040] vhci_hcd: connection reset by peer [ 92.858504][ T51] vhci_hcd: stop threads [ 92.862853][ T51] vhci_hcd: release socket [ 92.867357][ T51] vhci_hcd: disconnect device [ 92.924448][ T5070] loop4: detected capacity change from 0 to 1024 [ 92.931442][ T5070] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 93.046811][ T5073] loop1: detected capacity change from 0 to 1024 [ 93.059784][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.081903][ T5078] loop4: detected capacity change from 0 to 512 [ 93.085269][ T5072] infiniband syz2: set down [ 93.092767][ T5072] infiniband syz2: added syzkaller0 [ 93.101879][ T5078] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 93.134679][ T5073] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 93.264169][ T5072] RDS/IB: syz2: added [ 93.297393][ T5072] smc: adding ib device syz2 with port count 1 [ 93.326879][ T5072] smc: ib device syz2 port 1 has pnetid [ 93.686058][ T5091] loop3: detected capacity change from 0 to 1024 [ 93.692983][ T5091] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 93.802808][ T5090] rdma_rxe: rxe_newlink: failed to add syzkaller0 [ 93.836533][ T3665] smc: removing ib device syz2 [ 94.069416][ T5095] loop3: detected capacity change from 0 to 512 [ 94.083200][ T5095] journal_path: Lookup failure for './file0/../file0' [ 94.090199][ T5095] EXT4-fs: error: could not find journal device path [ 94.098658][ T3299] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.110056][ T5095] siw: device registration error -23 [ 94.237522][ T5103] loop3: detected capacity change from 0 to 512 [ 94.317727][ T5101] infiniband syz2: set down [ 94.322463][ T5101] infiniband syz2: added syzkaller0 [ 94.337519][ T5109] loop1: detected capacity change from 0 to 1024 [ 94.344730][ T5109] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 94.355913][ T5103] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 94.407566][ T5112] loop2: detected capacity change from 0 to 1024 [ 94.461973][ T5115] loop1: detected capacity change from 0 to 512 [ 94.478705][ T5112] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 94.541518][ T5101] RDS/IB: syz2: added [ 94.545620][ T5101] smc: adding ib device syz2 with port count 1 [ 94.588761][ T5121] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(9) [ 94.595446][ T5121] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 94.603315][ T5121] vhci_hcd vhci_hcd.0: Device attached [ 94.605557][ T5101] smc: ib device syz2 port 1 has pnetid [ 94.628200][ T5127] loop4: detected capacity change from 0 to 512 [ 94.695629][ T29] kauditd_printk_skb: 47 callbacks suppressed [ 94.695687][ T29] audit: type=1326 audit(1753838047.815:1626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5120 comm="syz.1.523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41474be9a9 code=0x7ffc0000 [ 94.733004][ T29] audit: type=1326 audit(1753838047.845:1627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5120 comm="syz.1.523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f41474be9a9 code=0x7ffc0000 [ 94.860646][ T36] usb 10-1: device descriptor read/8, error -110 [ 94.970881][ T36] usb 10-1: new SuperSpeed USB device number 7 using vhci_hcd [ 94.990500][ T36] usb 10-1: enqueue for inactive port 0 [ 95.001394][ T36] usb 10-1: enqueue for inactive port 0 [ 95.010243][ T36] usb 10-1: enqueue for inactive port 0 [ 95.417354][ T5124] vhci_hcd: connection closed [ 95.417854][ T3665] vhci_hcd: stop threads [ 95.427144][ T3665] vhci_hcd: release socket [ 95.431634][ T3665] vhci_hcd: disconnect device [ 95.547671][ T51] smc: removing ib device syz2 [ 95.706922][ T5137] rdma_rxe: rxe_newlink: failed to add syzkaller0 [ 95.719268][ T5137] loop3: detected capacity change from 0 to 1024 [ 95.727999][ T5137] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 95.830483][ T3405] usb 4-1: device descriptor read/8, error -110 [ 95.948323][ T3405] usb 4-1: new SuperSpeed USB device number 10 using vhci_hcd [ 95.968471][ T5147] loop3: detected capacity change from 0 to 512 [ 95.984598][ T3405] usb 4-1: enqueue for inactive port 0 [ 95.990219][ T3405] usb 4-1: enqueue for inactive port 0 [ 96.010567][ T3405] usb 4-1: enqueue for inactive port 0 [ 96.036076][ T5147] ext4 filesystem being mounted at /111/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 96.113978][ T36] usb usb10-port1: attempt power cycle [ 96.131078][ T5153] loop4: detected capacity change from 0 to 512 [ 96.178633][ T5153] EXT4-fs error (device loop4): ext4_ext_check_inode:523: inode #3: comm syz.4.534: pblk 24 bad header/extent: invalid extent entries - magic f30a, entries 3, max 4(4), depth 0(0) [ 96.211451][ T5153] EXT4-fs error (device loop4): ext4_quota_enable:7127: comm syz.4.534: Bad quota inode: 3, type: 0 [ 96.230653][ T5153] EXT4-fs warning (device loop4): ext4_enable_quotas:7168: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 96.266335][ T5153] EXT4-fs (loop4): mount failed [ 96.272928][ T29] audit: type=1400 audit(1753838049.395:1628): avc: denied { read } for pid=5146 comm="syz.3.532" name="file2" dev="loop3" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 96.514505][ T5160] netlink: 8 bytes leftover after parsing attributes in process `syz.2.535'. [ 96.588416][ T5153] loop4: detected capacity change from 0 to 4096 [ 96.616262][ T5153] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 96.769343][ T5165] loop0: detected capacity change from 0 to 512 [ 96.908792][ T5173] siw: device registration error -23 [ 97.040843][ T3405] usb usb4-port1: attempt power cycle [ 97.127564][ T5184] tipc: Enabling of bearer rejected, already enabled [ 97.142044][ T5186] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5186 comm=syz.0.545 [ 97.179104][ T5188] loop4: detected capacity change from 0 to 512 [ 97.201993][ T5188] EXT4-fs error (device loop4): ext4_ext_check_inode:523: inode #3: comm syz.4.546: pblk 24 bad header/extent: invalid extent entries - magic f30a, entries 3, max 4(4), depth 0(0) [ 97.224335][ T5188] EXT4-fs error (device loop4): ext4_quota_enable:7127: comm syz.4.546: Bad quota inode: 3, type: 0 [ 97.251668][ T5188] EXT4-fs warning (device loop4): ext4_enable_quotas:7168: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 97.275334][ T5194] loop2: detected capacity change from 0 to 512 [ 97.286184][ T5192] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(9) [ 97.288918][ T5188] EXT4-fs (loop4): mount failed [ 97.292822][ T5192] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 97.292945][ T5192] vhci_hcd vhci_hcd.0: Device attached [ 97.302782][ T5200] loop0: detected capacity change from 0 to 512 [ 97.368955][ T5200] ext4 filesystem being mounted at /113/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 97.428796][ T3385] usb 2-1: device descriptor read/8, error -110 [ 97.447081][ T3405] usb 4-1: SetAddress Request (12) to port 0 [ 97.453381][ T3405] usb 4-1: new SuperSpeed USB device number 12 using vhci_hcd [ 97.470663][ T29] audit: type=1326 audit(1753838050.585:1629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5191 comm="syz.1.547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41474be9a9 code=0x7ffc0000 [ 97.494260][ T29] audit: type=1326 audit(1753838050.585:1630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5191 comm="syz.1.547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f41474be9a9 code=0x7ffc0000 [ 97.540509][ T3385] usb 2-1: new SuperSpeed USB device number 10 using vhci_hcd [ 97.560564][ T3385] usb 2-1: enqueue for inactive port 0 [ 97.566155][ T3385] usb 2-1: enqueue for inactive port 0 [ 97.666801][ T5207] loop4: detected capacity change from 0 to 4096 [ 97.679659][ T5207] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 97.835153][ T5210] loop3: detected capacity change from 0 to 512 [ 98.284641][ T5196] vhci_hcd: connection reset by peer [ 98.290578][ T4094] vhci_hcd: stop threads [ 98.294905][ T4094] vhci_hcd: release socket [ 98.299425][ T4094] vhci_hcd: disconnect device [ 98.361727][ T5213] siw: device registration error -23 [ 98.525413][ T3385] usb 2-1: enqueue for inactive port 0 [ 98.585752][ T5225] tipc: Enabling of bearer rejected, already enabled [ 98.665536][ T5227] loop2: detected capacity change from 0 to 512 [ 98.707831][ T5227] journal_path: Lookup failure for './file0/../file0' [ 98.714795][ T5227] EXT4-fs: error: could not find journal device path [ 98.728191][ T5229] loop3: detected capacity change from 0 to 1024 [ 98.730876][ T36] usb usb10-port1: unable to enumerate USB device [ 98.763401][ T5231] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5231 comm=syz.0.559 [ 98.778441][ T5229] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 98.820557][ T5227] siw: device registration error -23 [ 98.952944][ T5235] loop3: detected capacity change from 0 to 512 [ 99.027213][ T5235] EXT4-fs mount: 18 callbacks suppressed [ 99.027230][ T5235] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 99.091264][ T5235] ext4 filesystem being mounted at /118/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 99.486957][ T3299] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.528745][ T5248] loop4: detected capacity change from 0 to 512 [ 99.541589][ T5248] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 99.573307][ T3299] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.800138][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.867710][ T5262] loop4: detected capacity change from 0 to 1024 [ 99.875366][ T5270] loop0: detected capacity change from 0 to 512 [ 99.882915][ T5262] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 99.894824][ T5266] tipc: Enabling of bearer rejected, already enabled [ 99.902735][ T5268] loop2: detected capacity change from 0 to 1024 [ 99.903224][ T5268] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 99.932658][ T5270] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 99.979737][ T5274] loop4: detected capacity change from 0 to 512 [ 100.011727][ T3297] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.072493][ T5274] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 100.091881][ T5286] netlink: 28 bytes leftover after parsing attributes in process `syz.0.576'. [ 100.100855][ T5286] netlink: 108 bytes leftover after parsing attributes in process `syz.0.576'. [ 100.107652][ T5275] infiniband syz2: set down [ 100.114555][ T5275] infiniband syz2: added syzkaller0 [ 100.124917][ T5286] netlink: 28 bytes leftover after parsing attributes in process `syz.0.576'. [ 100.131296][ T3385] usb usb2-port1: attempt power cycle [ 100.134013][ T5286] netlink: 108 bytes leftover after parsing attributes in process `syz.0.576'. [ 100.148402][ T5286] netlink: 84 bytes leftover after parsing attributes in process `syz.0.576'. [ 100.164598][ T5290] loop2: detected capacity change from 0 to 512 [ 100.182205][ T5290] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 100.196006][ T5288] loop1: detected capacity change from 0 to 1024 [ 100.203091][ T5288] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 100.221264][ T3299] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.231116][ T5290] ext4 filesystem being mounted at /112/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 100.231924][ T5275] RDS/IB: syz2: added [ 100.293326][ T5275] smc: adding ib device syz2 with port count 1 [ 100.301608][ T5275] smc: ib device syz2 port 1 has pnetid [ 100.314544][ T5297] netlink: 28 bytes leftover after parsing attributes in process `syz.0.582'. [ 100.323571][ T5297] netlink: 108 bytes leftover after parsing attributes in process `syz.0.582'. [ 100.333154][ T5297] netlink: 28 bytes leftover after parsing attributes in process `syz.0.582'. [ 100.342214][ T5297] netlink: 108 bytes leftover after parsing attributes in process `syz.0.582'. [ 100.388705][ T5295] loop3: detected capacity change from 0 to 1024 [ 100.396523][ T5295] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 100.605476][ T5294] rdma_rxe: rxe_newlink: failed to add syzkaller0 [ 100.644756][ T111] smc: removing ib device syz2 [ 100.741646][ T5311] loop3: detected capacity change from 0 to 512 [ 100.748444][ T5311] journal_path: Lookup failure for './file0/../file0' [ 100.755315][ T5311] EXT4-fs: error: could not find journal device path [ 100.768900][ T5311] siw: device registration error -23 [ 100.807315][ T5313] tipc: Enabling of bearer rejected, already enabled [ 100.872873][ T5317] loop3: detected capacity change from 0 to 512 [ 100.883324][ T5317] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 100.961491][ T5275] syz.1.573 (5275) used greatest stack depth: 9664 bytes left [ 101.003323][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.031277][ T5322] loop1: detected capacity change from 0 to 512 [ 101.038245][ T5322] journal_path: Lookup failure for './file0/../file0' [ 101.045221][ T5322] EXT4-fs: error: could not find journal device path [ 101.057278][ T5322] siw: device registration error -23 [ 101.101044][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 101.197465][ T5330] loop2: detected capacity change from 0 to 512 [ 101.214704][ T5330] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 101.255102][ T5334] loop4: detected capacity change from 0 to 512 [ 101.289397][ T5334] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 101.320319][ T5337] loop0: detected capacity change from 0 to 512 [ 101.333042][ T3299] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.332977][ T5337] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 101.447190][ T5341] loop4: detected capacity change from 0 to 512 [ 101.470052][ T5341] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 101.769025][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.883116][ T5346] loop3: detected capacity change from 0 to 512 [ 101.889993][ T5346] journal_path: Lookup failure for './file0/../file0' [ 101.896932][ T5346] EXT4-fs: error: could not find journal device path [ 101.907409][ T5346] siw: device registration error -23 [ 101.981109][ T3385] usb usb2-port1: unable to enumerate USB device [ 102.105174][ T5351] loop3: detected capacity change from 0 to 1024 [ 102.197910][ T5348] infiniband syz2: set down [ 102.202563][ T5348] infiniband syz2: added syzkaller0 [ 102.209230][ T5351] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 102.239409][ T5354] loop1: detected capacity change from 0 to 512 [ 102.261787][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.271866][ T5348] RDS/IB: syz2: added [ 102.276054][ T5348] smc: adding ib device syz2 with port count 1 [ 102.294649][ T5348] smc: ib device syz2 port 1 has pnetid [ 102.300794][ T5354] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 102.317031][ T5358] loop2: detected capacity change from 0 to 512 [ 102.327330][ T5354] ext4 filesystem being mounted at /107/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 102.382791][ T5358] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 102.444787][ T3299] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.472584][ T3297] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.540705][ T3405] usb 4-1: device descriptor read/8, error -110 [ 102.660494][ T3405] usb 4-1: new SuperSpeed USB device number 12 using vhci_hcd [ 102.681260][ T3405] usb 4-1: enqueue for inactive port 0 [ 102.689245][ T3405] usb 4-1: enqueue for inactive port 0 [ 102.698385][ T3405] usb 4-1: enqueue for inactive port 0 [ 102.841381][ T12] smc: removing ib device syz2 [ 103.081000][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.143362][ T29] audit: type=1400 audit(1753838056.265:1631): avc: denied { ioctl } for pid=5381 comm="syz.3.608" path="socket:[10692]" dev="sockfs" ino=10692 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 103.168411][ T29] audit: type=1400 audit(1753838056.265:1632): avc: denied { bind } for pid=5381 comm="syz.3.608" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 103.187766][ T29] audit: type=1400 audit(1753838056.265:1633): avc: denied { write } for pid=5381 comm="syz.3.608" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 103.208262][ T5380] __nla_validate_parse: 6 callbacks suppressed [ 103.208281][ T5380] netlink: 4 bytes leftover after parsing attributes in process `syz.1.607'. [ 103.257538][ T5389] loop1: detected capacity change from 0 to 512 [ 103.264589][ T5389] journal_path: Lookup failure for './file0/../file0' [ 103.271524][ T5389] EXT4-fs: error: could not find journal device path [ 103.278940][ T5389] siw: device registration error -23 [ 103.320073][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.424635][ T5395] infiniband syz2: set down [ 103.429307][ T5395] infiniband syz2: added syzkaller0 [ 103.442635][ T5395] RDS/IB: syz2: added [ 103.451846][ T5395] smc: adding ib device syz2 with port count 1 [ 103.463541][ T5399] loop1: detected capacity change from 0 to 1024 [ 103.470323][ T5396] netlink: 8 bytes leftover after parsing attributes in process `syz.2.610'. [ 103.470358][ T5399] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 103.474308][ T5395] smc: ib device syz2 port 1 has pnetid [ 103.517564][ T5401] loop4: detected capacity change from 0 to 512 [ 103.524661][ T5401] journal_path: Lookup failure for './file0/../file0' [ 103.531553][ T5401] EXT4-fs: error: could not find journal device path [ 103.624987][ T5409] loop4: detected capacity change from 0 to 512 [ 103.642341][ T5409] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 103.658174][ T5409] ext4 filesystem being mounted at /129/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 103.730831][ T3405] usb usb4-port1: unable to enumerate USB device [ 103.866174][ T51] smc: removing ib device syz2 [ 104.084057][ T5417] loop1: detected capacity change from 0 to 512 [ 104.101420][ T5417] EXT4-fs error (device loop1): ext4_ext_check_inode:523: inode #3: comm syz.1.618: pblk 24 bad header/extent: invalid extent entries - magic f30a, entries 3, max 4(4), depth 0(0) [ 104.119549][ T5417] EXT4-fs error (device loop1): ext4_quota_enable:7127: comm syz.1.618: Bad quota inode: 3, type: 0 [ 104.130792][ T5417] EXT4-fs warning (device loop1): ext4_enable_quotas:7168: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 104.146061][ T5417] EXT4-fs (loop1): mount failed [ 104.328516][ T5424] loop2: detected capacity change from 0 to 2048 [ 104.420097][ T5426] loop1: detected capacity change from 0 to 4096 [ 104.429730][ T5426] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 104.535042][ T5426] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 104.572252][ T5424] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 104.635968][ T3299] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.765334][ T5430] siw: device registration error -23 [ 104.782490][ T5423] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 104.855090][ T5423] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 34 with error 28 [ 104.867567][ T5423] EXT4-fs (loop2): This should not happen!! Data will be lost [ 104.867567][ T5423] [ 104.877400][ T5423] EXT4-fs (loop2): Total free blocks count 0 [ 104.883463][ T5423] EXT4-fs (loop2): Free/Dirty block details [ 104.889392][ T5423] EXT4-fs (loop2): free_blocks=2415919504 [ 104.895159][ T5423] EXT4-fs (loop2): dirty_blocks=48 [ 104.900345][ T5423] EXT4-fs (loop2): Block reservation details [ 104.906376][ T5423] EXT4-fs (loop2): i_reserved_data_blocks=3 [ 105.112908][ T5434] loop0: detected capacity change from 0 to 512 [ 105.151457][ T5434] EXT4-fs error (device loop0): ext4_ext_check_inode:523: inode #3: comm syz.0.623: pblk 24 bad header/extent: invalid extent entries - magic f30a, entries 3, max 4(4), depth 0(0) [ 105.174433][ T5434] EXT4-fs error (device loop0): ext4_quota_enable:7127: comm syz.0.623: Bad quota inode: 3, type: 0 [ 105.195166][ T5439] loop3: detected capacity change from 0 to 2048 [ 105.223392][ T5439] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 105.238584][ T5434] EXT4-fs warning (device loop0): ext4_enable_quotas:7168: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 105.261155][ T5435] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 105.277099][ T5434] EXT4-fs (loop0): mount failed [ 105.293873][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.330590][ T5435] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 34 with error 28 [ 105.343081][ T5435] EXT4-fs (loop3): This should not happen!! Data will be lost [ 105.343081][ T5435] [ 105.352804][ T5435] EXT4-fs (loop3): Total free blocks count 0 [ 105.358845][ T5435] EXT4-fs (loop3): Free/Dirty block details [ 105.364919][ T5435] EXT4-fs (loop3): free_blocks=2415919504 [ 105.370897][ T5435] EXT4-fs (loop3): dirty_blocks=48 [ 105.376040][ T5435] EXT4-fs (loop3): Block reservation details [ 105.382154][ T5435] EXT4-fs (loop3): i_reserved_data_blocks=3 [ 105.959133][ T5446] loop0: detected capacity change from 0 to 4096 [ 105.984773][ T5446] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 105.998000][ T5446] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 106.071182][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.091414][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.298357][ T5448] netlink: 'syz.2.624': attribute type 10 has an invalid length. [ 106.312716][ T5443] loop4: detected capacity change from 0 to 1024 [ 106.329045][ T5443] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 106.458804][ T5455] loop1: detected capacity change from 0 to 512 [ 106.494076][ T5457] loop2: detected capacity change from 0 to 512 [ 106.508848][ T5455] journal_path: Lookup failure for './file0/../file0' [ 106.515799][ T5455] EXT4-fs: error: could not find journal device path [ 106.545846][ T5457] EXT4-fs error (device loop2): ext4_ext_check_inode:523: inode #3: comm syz.2.627: pblk 24 bad header/extent: invalid extent entries - magic f30a, entries 3, max 4(4), depth 0(0) [ 106.594682][ T5463] loop4: detected capacity change from 0 to 512 [ 106.613417][ T5455] siw: device registration error -23 [ 106.634931][ T5457] EXT4-fs error (device loop2): ext4_quota_enable:7127: comm syz.2.627: Bad quota inode: 3, type: 0 [ 106.669374][ T5463] EXT4-fs error (device loop4): ext4_ext_check_inode:523: inode #3: comm syz.4.628: pblk 24 bad header/extent: invalid extent entries - magic f30a, entries 3, max 4(4), depth 0(0) [ 106.706953][ T5457] EXT4-fs warning (device loop2): ext4_enable_quotas:7168: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 106.744806][ T5463] EXT4-fs error (device loop4): ext4_quota_enable:7127: comm syz.4.628: Bad quota inode: 3, type: 0 [ 106.757727][ T5457] EXT4-fs (loop2): mount failed [ 106.763299][ T5463] EXT4-fs warning (device loop4): ext4_enable_quotas:7168: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 106.930687][ T5463] EXT4-fs (loop4): mount failed [ 107.511077][ T5473] loop4: detected capacity change from 0 to 4096 [ 107.537477][ T5470] loop2: detected capacity change from 0 to 4096 [ 107.921424][ T3297] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.450634][ T5473] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 108.461392][ T5470] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 108.947379][ T5476] loop3: detected capacity change from 0 to 512 [ 109.431559][ T5473] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 109.471450][ T5476] journal_path: Lookup failure for './file0/../file0' [ 109.478282][ T5476] EXT4-fs: error: could not find journal device path [ 109.956576][ T5476] siw: device registration error -23 [ 110.723404][ T5470] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 110.776076][ T5486] loop1: detected capacity change from 0 to 512 [ 110.786693][ T5487] loop0: detected capacity change from 0 to 512 [ 110.800436][ T3299] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.810076][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.837843][ T5486] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 110.861034][ T5487] EXT4-fs error (device loop0): ext4_ext_check_inode:523: inode #3: comm syz.0.634: pblk 24 bad header/extent: invalid extent entries - magic f30a, entries 3, max 4(4), depth 0(0) [ 110.886092][ T5492] siw: device registration error -23 [ 110.900995][ T5487] EXT4-fs error (device loop0): ext4_quota_enable:7127: comm syz.0.634: Bad quota inode: 3, type: 0 [ 110.919465][ T5487] EXT4-fs warning (device loop0): ext4_enable_quotas:7168: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 110.934316][ T5498] loop4: detected capacity change from 0 to 512 [ 110.934801][ T5487] EXT4-fs (loop0): mount failed [ 110.958633][ T5496] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(9) [ 110.965226][ T5496] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 110.973125][ T5496] vhci_hcd vhci_hcd.0: Device attached [ 111.032834][ T5498] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 111.159952][ T29] audit: type=1326 audit(1753838064.275:1634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5495 comm="syz.2.637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7af4cfe9a9 code=0x7ffc0000 [ 111.194089][ T29] audit: type=1326 audit(1753838064.275:1635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5495 comm="syz.2.637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7af4cfe9a9 code=0x7ffc0000 [ 111.260443][ T3405] usb 6-1: SetAddress Request (6) to port 0 [ 111.266823][ T3405] usb 6-1: new SuperSpeed USB device number 6 using vhci_hcd [ 111.421806][ T5508] loop0: detected capacity change from 0 to 4096 [ 111.429360][ T5508] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 111.443242][ T5508] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 111.686582][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.773853][ T3299] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.843452][ T5500] vhci_hcd: connection reset by peer [ 111.850863][ T51] vhci_hcd: stop threads [ 111.855207][ T51] vhci_hcd: release socket [ 111.859752][ T51] vhci_hcd: disconnect device [ 111.978765][ T5518] loop4: detected capacity change from 0 to 1024 [ 111.993389][ T5513] infiniband syz2: set down [ 111.997983][ T5513] infiniband syz2: added syzkaller0 [ 112.009945][ T5518] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 112.082617][ T5513] RDS/IB: syz2: added [ 112.096617][ T5513] smc: adding ib device syz2 with port count 1 [ 112.114942][ T5513] smc: ib device syz2 port 1 has pnetid [ 112.647154][ T51] smc: removing ib device syz2 [ 112.690327][ T5523] netlink: 4 bytes leftover after parsing attributes in process `syz.1.643'. [ 112.802958][ T5532] loop3: detected capacity change from 0 to 512 [ 112.826534][ T5532] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 112.922598][ T5536] loop1: detected capacity change from 0 to 2048 [ 112.974635][ T5536] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 113.003382][ T5536] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 113.021697][ T5536] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 34 with error 28 [ 113.034149][ T5536] EXT4-fs (loop1): This should not happen!! Data will be lost [ 113.034149][ T5536] [ 113.043901][ T5536] EXT4-fs (loop1): Total free blocks count 0 [ 113.050000][ T5536] EXT4-fs (loop1): Free/Dirty block details [ 113.056015][ T5536] EXT4-fs (loop1): free_blocks=2415919504 [ 113.061809][ T5536] EXT4-fs (loop1): dirty_blocks=48 [ 113.067029][ T5536] EXT4-fs (loop1): Block reservation details [ 113.073158][ T5536] EXT4-fs (loop1): i_reserved_data_blocks=3 [ 113.661109][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.912501][ T5548] netlink: 'syz.1.649': attribute type 10 has an invalid length. [ 114.014178][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.122035][ T5553] rdma_rxe: rxe_newlink: failed to add syzkaller0 [ 114.134498][ T5553] loop3: detected capacity change from 0 to 1024 [ 114.146697][ T5556] loop1: detected capacity change from 0 to 1024 [ 114.153834][ T5553] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 114.173885][ T5556] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 114.217708][ T5551] infiniband syz2: set down [ 114.222373][ T5551] infiniband syz2: added syzkaller0 [ 114.252114][ T3297] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.295359][ T5563] netlink: 'syz.0.654': attribute type 10 has an invalid length. [ 114.320077][ T5551] RDS/IB: syz2: added [ 114.330959][ T5560] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7) [ 114.337534][ T5560] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 114.345409][ T5560] vhci_hcd vhci_hcd.0: Device attached [ 114.366076][ T5551] smc: adding ib device syz2 with port count 1 [ 114.377973][ T5551] smc: ib device syz2 port 1 has pnetid [ 114.424053][ T5569] tipc: Enabling of bearer rejected, already enabled [ 114.520540][ T29] audit: type=1326 audit(1753838067.565:1636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5558 comm="syz.3.653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8134f6e9a9 code=0x7ffc0000 [ 114.544098][ T29] audit: type=1326 audit(1753838067.565:1637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5558 comm="syz.3.653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8134f6e9a9 code=0x7ffc0000 [ 114.567471][ T29] audit: type=1326 audit(1753838067.565:1638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5558 comm="syz.3.653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8134f6e9a9 code=0x7ffc0000 [ 114.623149][ T5572] loop0: detected capacity change from 0 to 512 [ 114.650448][ T1037] usb 8-1: SetAddress Request (7) to port 0 [ 114.656458][ T1037] usb 8-1: new SuperSpeed USB device number 7 using vhci_hcd [ 114.665233][ T5572] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 114.736037][ T5572] set match dimension is over the limit! [ 115.211581][ T5578] loop4: detected capacity change from 0 to 1024 [ 115.218630][ T5578] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 115.231896][ T37] smc: removing ib device syz2 [ 115.241137][ T5566] vhci_hcd: connection reset by peer [ 115.247313][ T3665] vhci_hcd: stop threads [ 115.251696][ T3665] vhci_hcd: release socket [ 115.256140][ T3665] vhci_hcd: disconnect device [ 115.541365][ T5580] netlink: 4 bytes leftover after parsing attributes in process `syz.4.658'. [ 115.603652][ T3297] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.706443][ T5585] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(7) [ 115.713123][ T5585] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 115.720868][ T5585] vhci_hcd vhci_hcd.0: Device attached [ 115.807504][ T29] audit: type=1326 audit(1753838068.925:1639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5584 comm="syz.4.659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfe893e9a9 code=0x7ffc0000 [ 115.830917][ T29] audit: type=1326 audit(1753838068.925:1640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5584 comm="syz.4.659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdfe893e9a9 code=0x7ffc0000 [ 115.926559][ T5594] loop1: detected capacity change from 0 to 512 [ 115.941624][ T5594] journal_path: Lookup failure for './file0/../file0' [ 115.948476][ T5594] EXT4-fs: error: could not find journal device path [ 115.983469][ T5594] siw: device registration error -23 [ 115.990491][ T3385] usb 10-1: SetAddress Request (11) to port 0 [ 115.999352][ T3385] usb 10-1: new SuperSpeed USB device number 11 using vhci_hcd [ 116.168215][ T5598] infiniband syz2: set down [ 116.172940][ T5598] infiniband syz2: added syzkaller0 [ 116.173057][ T5600] loop1: detected capacity change from 0 to 1024 [ 116.204396][ T5600] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 116.253560][ T5598] RDS/IB: syz2: added [ 116.275332][ T5598] smc: adding ib device syz2 with port count 1 [ 116.296814][ T5598] smc: ib device syz2 port 1 has pnetid [ 116.310420][ T3405] usb 6-1: device descriptor read/8, error -110 [ 116.420449][ T3405] usb 6-1: new SuperSpeed USB device number 6 using vhci_hcd [ 116.450424][ T3405] usb 6-1: enqueue for inactive port 0 [ 116.456108][ T3405] usb 6-1: enqueue for inactive port 0 [ 116.475798][ T3405] usb 6-1: enqueue for inactive port 0 [ 116.496108][ T5589] vhci_hcd: connection reset by peer [ 116.504192][ T37] vhci_hcd: stop threads [ 116.508504][ T37] vhci_hcd: release socket [ 116.513037][ T37] vhci_hcd: disconnect device [ 116.687740][ T5603] siw: device registration error -23 [ 116.711608][ T5606] loop3: detected capacity change from 0 to 512 [ 116.728691][ T5606] journal_path: Lookup failure for './file0/../file0' [ 116.735675][ T5606] EXT4-fs: error: could not find journal device path [ 116.750913][ T5606] siw: device registration error -23 [ 116.773201][ T4094] smc: removing ib device syz2 [ 116.887799][ T5615] loop0: detected capacity change from 0 to 512 [ 116.930793][ T5615] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 116.948890][ T5614] netlink: 28 bytes leftover after parsing attributes in process `syz.2.669'. [ 116.957931][ T5614] netlink: 108 bytes leftover after parsing attributes in process `syz.2.669'. [ 117.048013][ T5614] netlink: 28 bytes leftover after parsing attributes in process `syz.2.669'. [ 117.069536][ T5614] netlink: 108 bytes leftover after parsing attributes in process `syz.2.669'. [ 117.078595][ T5614] netlink: 84 bytes leftover after parsing attributes in process `syz.2.669'. [ 117.269075][ T5624] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5624 comm=syz.2.671 [ 117.364905][ T5626] loop1: detected capacity change from 0 to 512 [ 117.382195][ T5626] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 117.510902][ T3405] usb usb6-port1: attempt power cycle [ 117.710901][ T5633] loop3: detected capacity change from 0 to 1024 [ 117.717589][ T5633] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 117.933008][ T5635] netlink: 28 bytes leftover after parsing attributes in process `syz.3.675'. [ 117.942044][ T5635] netlink: 108 bytes leftover after parsing attributes in process `syz.3.675'. [ 117.951924][ T5635] netlink: 28 bytes leftover after parsing attributes in process `syz.3.675'. [ 117.961109][ T5635] netlink: 108 bytes leftover after parsing attributes in process `syz.3.675'. [ 117.970144][ T5635] netlink: 84 bytes leftover after parsing attributes in process `syz.3.675'. [ 118.036824][ T3297] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.133568][ T5643] loop0: detected capacity change from 0 to 512 [ 118.140354][ T5643] journal_path: Lookup failure for './file0/../file0' [ 118.147508][ T5643] EXT4-fs: error: could not find journal device path [ 118.155113][ T5643] siw: device registration error -23 [ 118.325183][ T5647] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 118.331772][ T5647] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 118.339637][ T5647] vhci_hcd vhci_hcd.0: Device attached [ 118.374635][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.408952][ T5653] loop2: detected capacity change from 0 to 512 [ 118.425380][ T5653] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 118.439286][ T29] audit: type=1326 audit(1753838071.555:1641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5646 comm="syz.0.680" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb62cd7e9a9 code=0x7ffc0000 [ 118.462747][ T29] audit: type=1326 audit(1753838071.555:1642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5646 comm="syz.0.680" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb62cd7e9a9 code=0x7ffc0000 [ 118.486190][ T29] audit: type=1326 audit(1753838071.555:1643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5646 comm="syz.0.680" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb62cd7e9a9 code=0x7ffc0000 [ 118.510546][ T29] audit: type=1326 audit(1753838071.555:1644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5646 comm="syz.0.680" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb62cd7e9a9 code=0x7ffc0000 [ 118.513576][ T5655] loop1: detected capacity change from 0 to 1024 [ 118.533826][ T29] audit: type=1326 audit(1753838071.555:1645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5646 comm="syz.0.680" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb62cd7e9a9 code=0x7ffc0000 [ 118.563651][ T29] audit: type=1326 audit(1753838071.555:1646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5646 comm="syz.0.680" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb62cd7e9a9 code=0x7ffc0000 [ 118.587148][ T5650] vhci_hcd: connection closed [ 118.596357][ T5655] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 118.598530][ T37] vhci_hcd: stop threads [ 118.613493][ T37] vhci_hcd: release socket [ 118.618029][ T37] vhci_hcd: disconnect device [ 118.622843][ T2952] usb 2-1: enqueue for inactive port 0 [ 118.830834][ T2952] usb 2-1: enqueue for inactive port 0 [ 119.179607][ T5667] loop0: detected capacity change from 0 to 512 [ 119.198701][ T5669] tipc: Enabling of bearer rejected, already enabled [ 119.225759][ T5667] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 119.260999][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.302433][ T5674] loop3: detected capacity change from 0 to 512 [ 119.309166][ T5674] journal_path: Lookup failure for './file0/../file0' [ 119.316021][ T5674] EXT4-fs: error: could not find journal device path [ 119.341277][ T3297] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.365715][ T5676] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5676 comm=syz.2.689 [ 119.386636][ T5674] siw: device registration error -23 [ 119.420613][ T3405] usb usb6-port1: unable to enumerate USB device [ 119.435368][ T5680] loop0: detected capacity change from 0 to 512 [ 119.454488][ T29] audit: type=1400 audit(1753838072.575:1647): avc: denied { mounton } for pid=5677 comm="syz.0.691" path="/141/file0" dev="tmpfs" ino=787 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 119.483350][ T5682] loop3: detected capacity change from 0 to 512 [ 119.490645][ T29] audit: type=1400 audit(1753838072.585:1648): avc: denied { read write } for pid=3305 comm="syz-executor" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 119.514984][ T29] audit: type=1400 audit(1753838072.585:1649): avc: denied { open } for pid=3305 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 119.539137][ T29] audit: type=1400 audit(1753838072.585:1650): avc: denied { ioctl } for pid=3305 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=103 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 119.566631][ T5680] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 119.583673][ T5682] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 119.599837][ T5680] set match dimension is over the limit! [ 119.602088][ T5682] ext4 filesystem being mounted at /154/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 119.750499][ T1037] usb 8-1: device descriptor read/8, error -110 [ 119.870785][ T1037] usb 8-1: new SuperSpeed USB device number 7 using vhci_hcd [ 119.890646][ T1037] usb 8-1: enqueue for inactive port 0 [ 119.897059][ T1037] usb 8-1: enqueue for inactive port 0 [ 119.904408][ T1037] usb 8-1: enqueue for inactive port 0 [ 119.950895][ T2952] usb usb2-port1: attempt power cycle [ 120.325099][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.383115][ T5697] loop3: detected capacity change from 0 to 512 [ 120.411996][ T5697] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 120.448798][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.468001][ T5700] tipc: Enabling of bearer rejected, already enabled [ 120.525576][ T5702] netlink: 28 bytes leftover after parsing attributes in process `syz.3.697'. [ 120.528359][ T5706] loop2: detected capacity change from 0 to 512 [ 120.534612][ T5702] netlink: 108 bytes leftover after parsing attributes in process `syz.3.697'. [ 120.579528][ T5702] netlink: 28 bytes leftover after parsing attributes in process `syz.3.697'. [ 120.589214][ T5702] netlink: 108 bytes leftover after parsing attributes in process `syz.3.697'. [ 120.598273][ T5702] netlink: 84 bytes leftover after parsing attributes in process `syz.3.697'. [ 120.618511][ T5708] loop4: detected capacity change from 0 to 1024 [ 120.630939][ T5708] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 120.641756][ T5717] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5717 comm=syz.3.704 [ 120.651891][ T5710] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(9) [ 120.660774][ T5710] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 120.668575][ T5710] vhci_hcd vhci_hcd.0: Device attached [ 120.740494][ T2952] usb 2-1: SetAddress Request (16) to port 0 [ 120.746657][ T2952] usb 2-1: new SuperSpeed USB device number 16 using vhci_hcd [ 120.803518][ T5725] loop3: detected capacity change from 0 to 512 [ 120.952028][ T1037] usb usb8-port1: attempt power cycle [ 120.967726][ T5731] loop3: detected capacity change from 0 to 512 [ 120.999873][ T5731] EXT4-fs error (device loop3): ext4_ext_check_inode:523: inode #3: comm syz.3.708: pblk 24 bad header/extent: invalid extent entries - magic f30a, entries 3, max 4(4), depth 0(0) [ 121.019382][ T5731] EXT4-fs error (device loop3): ext4_quota_enable:7127: comm syz.3.708: Bad quota inode: 3, type: 0 [ 121.035908][ T5731] EXT4-fs warning (device loop3): ext4_enable_quotas:7168: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 121.102795][ T3385] usb 10-1: device descriptor read/8, error -110 [ 121.121470][ T5736] loop4: detected capacity change from 0 to 1024 [ 121.131680][ T5731] EXT4-fs (loop3): mount failed [ 121.143381][ T5733] infiniband syz2: set down [ 121.147960][ T5733] infiniband syz2: added syzkaller0 [ 121.190888][ T5736] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 121.302559][ T3385] usb 10-1: new SuperSpeed USB device number 11 using vhci_hcd [ 121.320473][ T3385] usb 10-1: enqueue for inactive port 0 [ 121.326144][ T3385] usb 10-1: enqueue for inactive port 0 [ 121.331783][ T3385] usb 10-1: enqueue for inactive port 0 [ 121.366130][ T5733] RDS/IB: syz2: added [ 121.382567][ T5733] smc: adding ib device syz2 with port count 1 [ 121.437307][ T5733] smc: ib device syz2 port 1 has pnetid [ 121.489093][ T5739] loop3: detected capacity change from 0 to 4096 [ 121.900599][ T5716] vhci_hcd: connection reset by peer [ 122.349286][ T3448] vhci_hcd: stop threads [ 122.353622][ T3448] vhci_hcd: release socket [ 122.358185][ T3448] vhci_hcd: disconnect device [ 122.369000][ T5739] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 122.670778][ T3385] usb usb10-port1: attempt power cycle [ 123.323350][ T5754] loop3: detected capacity change from 0 to 1024 [ 123.330742][ T5754] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 123.398993][ T111] smc: removing ib device syz2 [ 123.618320][ T5762] loop2: detected capacity change from 0 to 1024 [ 123.640868][ T5762] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 123.648973][ T29] kauditd_printk_skb: 47 callbacks suppressed [ 123.648990][ T29] audit: type=1400 audit(1753838076.765:1698): avc: denied { read write } for pid=5759 comm="syz.3.716" name="rdma_cm" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 123.649210][ T5763] netlink: 8 bytes leftover after parsing attributes in process `syz.3.716'. [ 123.655160][ T29] audit: type=1400 audit(1753838076.765:1699): avc: denied { open } for pid=5759 comm="syz.3.716" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 123.971689][ T5771] tipc: Enabling of bearer rejected, already enabled [ 124.007893][ T29] audit: type=1400 audit(1753838077.125:1700): avc: denied { name_bind } for pid=5769 comm="syz.4.721" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 124.029886][ T29] audit: type=1400 audit(1753838077.125:1701): avc: denied { node_bind } for pid=5769 comm="syz.4.721" saddr=172.20.20.170 src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 124.067661][ T29] audit: type=1400 audit(1753838077.175:1702): avc: denied { create } for pid=5775 comm="syz.1.723" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 124.087093][ T29] audit: type=1400 audit(1753838077.175:1703): avc: denied { create } for pid=5775 comm="syz.1.723" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 124.106641][ T29] audit: type=1400 audit(1753838077.185:1704): avc: denied { write } for pid=5769 comm="syz.4.721" name="001" dev="devtmpfs" ino=153 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 124.133084][ T5776] loop1: detected capacity change from 0 to 512 [ 124.145393][ T5776] journal_path: Lookup failure for './file0/../file0' [ 124.152341][ T5776] EXT4-fs: error: could not find journal device path [ 124.163854][ T29] audit: type=1400 audit(1753838077.285:1705): avc: denied { write } for pid=5775 comm="syz.1.723" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 124.164636][ T5776] siw: device registration error -23 [ 124.210082][ T29] audit: type=1400 audit(1753838077.325:1706): avc: denied { read write } for pid=3299 comm="syz-executor" name="loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 124.234423][ T29] audit: type=1400 audit(1753838077.325:1707): avc: denied { open } for pid=3299 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 124.313055][ T5782] loop4: detected capacity change from 0 to 1024 [ 124.319898][ T5782] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 124.410624][ T1037] usb usb8-port1: unable to enumerate USB device [ 124.570646][ T3385] usb usb10-port1: unable to enumerate USB device [ 124.705532][ T5804] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(8) [ 124.712229][ T5804] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 124.720433][ T5804] vhci_hcd vhci_hcd.0: Device attached [ 124.785376][ T5805] vhci_hcd: connection closed [ 124.786348][ T51] vhci_hcd: stop threads [ 124.795388][ T51] vhci_hcd: release socket [ 124.799813][ T51] vhci_hcd: disconnect device [ 125.195440][ T5811] tipc: Enabling of bearer rejected, already enabled [ 125.238470][ T5817] loop0: detected capacity change from 0 to 512 [ 125.270915][ T5813] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8) [ 125.277496][ T5813] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 125.285296][ T5813] vhci_hcd vhci_hcd.0: Device attached [ 125.294133][ T5813] 9pnet_fd: Insufficient options for proto=fd [ 125.339789][ T5825] loop0: detected capacity change from 0 to 1024 [ 125.346809][ T5825] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 125.347111][ T5828] netlink: 8 bytes leftover after parsing attributes in process `syz.3.737'. [ 125.454463][ T5831] netlink: 4 bytes leftover after parsing attributes in process `syz.4.740'. [ 125.561509][ T1037] usb 4-1: SetAddress Request (14) to port 0 [ 125.573387][ T1037] usb 4-1: new SuperSpeed USB device number 14 using vhci_hcd [ 125.621848][ T5842] netlink: 4 bytes leftover after parsing attributes in process `syz.0.744'. [ 125.684589][ T5848] loop0: detected capacity change from 0 to 1024 [ 125.693272][ T5848] EXT4-fs: Ignoring removed nobh option [ 125.698976][ T5848] EXT4-fs: Ignoring removed bh option [ 125.900450][ T2952] usb 2-1: device descriptor read/8, error -110 [ 126.010455][ T2952] usb 2-1: new SuperSpeed USB device number 16 using vhci_hcd [ 126.030437][ T2952] usb 2-1: enqueue for inactive port 0 [ 126.036050][ T2952] usb 2-1: enqueue for inactive port 0 [ 126.042159][ T2952] usb 2-1: enqueue for inactive port 0 [ 126.055144][ T5821] vhci_hcd: connection reset by peer [ 126.062378][ T111] vhci_hcd: stop threads [ 126.066646][ T111] vhci_hcd: release socket [ 126.071099][ T111] vhci_hcd: disconnect device [ 126.099503][ T5858] tipc: Enabling of bearer rejected, already enabled [ 126.129833][ T5860] loop3: detected capacity change from 0 to 512 [ 126.450775][ T5864] loop4: detected capacity change from 0 to 1024 [ 126.457613][ T5864] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 126.675385][ T5869] loop4: detected capacity change from 0 to 1024 [ 126.690775][ T5869] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 126.712403][ T5870] loop2: detected capacity change from 0 to 1024 [ 126.720581][ T5870] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 126.821488][ T5874] loop0: detected capacity change from 0 to 512 [ 127.090700][ T2952] usb usb2-port1: unable to enumerate USB device [ 127.109156][ T5881] loop4: detected capacity change from 0 to 2048 [ 127.136654][ T5881] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 127.152073][ T5884] loop3: detected capacity change from 0 to 512 [ 127.170201][ T5881] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 34 with error 28 [ 127.182616][ T5881] EXT4-fs (loop4): This should not happen!! Data will be lost [ 127.182616][ T5881] [ 127.192367][ T5881] EXT4-fs (loop4): Total free blocks count 0 [ 127.198362][ T5881] EXT4-fs (loop4): Free/Dirty block details [ 127.204358][ T5881] EXT4-fs (loop4): free_blocks=2415919504 [ 127.210175][ T5881] EXT4-fs (loop4): dirty_blocks=48 [ 127.215531][ T5881] EXT4-fs (loop4): Block reservation details [ 127.221592][ T5881] EXT4-fs (loop4): i_reserved_data_blocks=3 [ 127.230058][ T5884] EXT4-fs error (device loop3): ext4_ext_check_inode:523: inode #3: comm syz.3.757: pblk 24 bad header/extent: invalid extent entries - magic f30a, entries 3, max 4(4), depth 0(0) [ 127.248649][ T5884] EXT4-fs error (device loop3): ext4_quota_enable:7127: comm syz.3.757: Bad quota inode: 3, type: 0 [ 127.266412][ T5884] EXT4-fs warning (device loop3): ext4_enable_quotas:7168: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 127.281482][ T5884] EXT4-fs (loop3): mount failed [ 127.534067][ T5891] loop3: detected capacity change from 0 to 4096 [ 127.943834][ T5894] netlink: 8 bytes leftover after parsing attributes in process `syz.2.758'. [ 128.400200][ T5891] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 128.575307][ T5898] tipc: Enabling of bearer rejected, already enabled [ 128.617911][ T5900] loop0: detected capacity change from 0 to 512 [ 128.869286][ T5905] loop2: detected capacity change from 0 to 1024 [ 128.909945][ T5905] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 129.203706][ T5916] loop2: detected capacity change from 0 to 2048 [ 129.245288][ T5916] EXT4-fs mount: 20 callbacks suppressed [ 129.245309][ T5916] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 129.269556][ T5916] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 129.292504][ T5916] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 34 with error 28 [ 129.304837][ T5916] EXT4-fs (loop2): This should not happen!! Data will be lost [ 129.304837][ T5916] [ 129.314531][ T5916] EXT4-fs (loop2): Total free blocks count 0 [ 129.320555][ T5916] EXT4-fs (loop2): Free/Dirty block details [ 129.326470][ T5916] EXT4-fs (loop2): free_blocks=2415919504 [ 129.332287][ T5916] EXT4-fs (loop2): dirty_blocks=48 [ 129.337413][ T5916] EXT4-fs (loop2): Block reservation details [ 129.343503][ T5916] EXT4-fs (loop2): i_reserved_data_blocks=3 [ 129.610204][ T5921] loop4: detected capacity change from 0 to 1024 [ 129.641942][ T5921] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 129.679357][ T3297] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.840586][ T5926] netlink: 8 bytes leftover after parsing attributes in process `syz.0.768'. [ 130.024876][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.088420][ T5934] tipc: Enabling of bearer rejected, already enabled [ 130.182854][ T29] kauditd_printk_skb: 59 callbacks suppressed [ 130.182888][ T29] audit: type=1400 audit(1753838083.305:1767): avc: denied { read write } for pid=3303 comm="syz-executor" name="loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 130.213341][ T29] audit: type=1400 audit(1753838083.305:1768): avc: denied { open } for pid=3303 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 130.301556][ T29] audit: type=1400 audit(1753838083.405:1769): avc: denied { ioctl } for pid=3303 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=102 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 130.348934][ T29] audit: type=1400 audit(1753838083.455:1770): avc: denied { create } for pid=5937 comm="syz.2.773" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 130.369478][ T29] audit: type=1400 audit(1753838083.455:1771): avc: denied { map_create } for pid=5937 comm="syz.2.773" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 130.388589][ T29] audit: type=1400 audit(1753838083.455:1772): avc: denied { bpf } for pid=5937 comm="syz.2.773" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 130.409122][ T29] audit: type=1400 audit(1753838083.455:1773): avc: denied { map_read map_write } for pid=5937 comm="syz.2.773" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 130.428943][ T29] audit: type=1400 audit(1753838083.455:1774): avc: denied { prog_load } for pid=5937 comm="syz.2.773" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 130.448012][ T29] audit: type=1400 audit(1753838083.455:1775): avc: denied { perfmon } for pid=5937 comm="syz.2.773" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 130.468938][ T29] audit: type=1400 audit(1753838083.455:1776): avc: denied { prog_run } for pid=5937 comm="syz.2.773" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 130.620618][ T1037] usb 4-1: device descriptor read/8, error -110 [ 130.740838][ T1037] usb 4-1: new SuperSpeed USB device number 14 using vhci_hcd [ 130.764988][ T5951] loop2: detected capacity change from 0 to 1024 [ 130.771884][ T1037] usb 4-1: enqueue for inactive port 0 [ 130.777396][ T1037] usb 4-1: enqueue for inactive port 0 [ 130.790934][ T5951] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 130.799531][ T1037] usb 4-1: enqueue for inactive port 0 [ 130.863053][ T5962] loop3: detected capacity change from 0 to 512 [ 130.887647][ T5962] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 130.906983][ T5966] loop2: detected capacity change from 0 to 512 [ 130.917956][ T5966] journal_path: Lookup failure for './file0/../file0' [ 130.924800][ T5966] EXT4-fs: error: could not find journal device path [ 130.932898][ T5966] siw: device registration error -23 [ 131.375871][ T5962] ================================================================== [ 131.384013][ T5962] BUG: KCSAN: data-race in __writeback_single_inode / xas_set_mark [ 131.391925][ T5962] [ 131.394253][ T5962] write to 0xffff8881006276ac of 4 bytes by task 5969 on cpu 0: [ 131.401896][ T5962] xas_set_mark+0x12b/0x140 [ 131.406416][ T5962] __folio_start_writeback+0x1dd/0x440 [ 131.411972][ T5962] ext4_bio_write_folio+0x5ad/0x9f0 [ 131.417279][ T5962] mpage_submit_folio+0xe4/0x170 [ 131.422272][ T5962] mpage_process_page_bufs+0x39b/0x4a0 [ 131.427762][ T5962] mpage_prepare_extent_to_map+0x741/0xaa0 [ 131.433591][ T5962] ext4_do_writepages+0xa1a/0x21c0 [ 131.438717][ T5962] ext4_writepages+0x176/0x300 [ 131.443505][ T5962] do_writepages+0x1c3/0x310 [ 131.448109][ T5962] file_write_and_wait_range+0x156/0x2c0 [ 131.453753][ T5962] generic_buffers_fsync_noflush+0x45/0x120 [ 131.459661][ T5962] ext4_sync_file+0x1ab/0x690 [ 131.464345][ T5962] vfs_fsync_range+0x10a/0x130 [ 131.469123][ T5962] ext4_buffered_write_iter+0x34f/0x3c0 [ 131.474678][ T5962] ext4_file_write_iter+0xdbf/0xf00 [ 131.479886][ T5962] iter_file_splice_write+0x5ef/0x970 [ 131.485268][ T5962] direct_splice_actor+0x153/0x2a0 [ 131.490417][ T5962] splice_direct_to_actor+0x30f/0x680 [ 131.495810][ T5962] do_splice_direct+0xda/0x150 [ 131.500584][ T5962] do_sendfile+0x380/0x650 [ 131.505028][ T5962] __x64_sys_sendfile64+0x105/0x150 [ 131.510226][ T5962] x64_sys_call+0x2bb0/0x2ff0 [ 131.514936][ T5962] do_syscall_64+0xd2/0x200 [ 131.519483][ T5962] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.525387][ T5962] [ 131.527705][ T5962] read to 0xffff8881006276ac of 4 bytes by task 5962 on cpu 1: [ 131.535267][ T5962] __writeback_single_inode+0x1f9/0x7c0 [ 131.540832][ T5962] writeback_single_inode+0x167/0x3e0 [ 131.546406][ T5962] sync_inode_metadata+0x5b/0x90 [ 131.551355][ T5962] generic_buffers_fsync_noflush+0xd9/0x120 [ 131.557271][ T5962] ext4_sync_file+0x1ab/0x690 [ 131.561965][ T5962] vfs_fsync_range+0x10a/0x130 [ 131.566754][ T5962] ext4_buffered_write_iter+0x34f/0x3c0 [ 131.572310][ T5962] ext4_file_write_iter+0xdbf/0xf00 [ 131.577518][ T5962] iter_file_splice_write+0x5ef/0x970 [ 131.582906][ T5962] direct_splice_actor+0x153/0x2a0 [ 131.588044][ T5962] splice_direct_to_actor+0x30f/0x680 [ 131.593428][ T5962] do_splice_direct+0xda/0x150 [ 131.598208][ T5962] do_sendfile+0x380/0x650 [ 131.602631][ T5962] __x64_sys_sendfile64+0x105/0x150 [ 131.607882][ T5962] x64_sys_call+0x2bb0/0x2ff0 [ 131.612567][ T5962] do_syscall_64+0xd2/0x200 [ 131.617080][ T5962] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.622981][ T5962] [ 131.625307][ T5962] value changed: 0x0a000021 -> 0x04000021 [ 131.631025][ T5962] [ 131.633354][ T5962] Reported by Kernel Concurrency Sanitizer on: [ 131.639565][ T5962] CPU: 1 UID: 0 PID: 5962 Comm: syz.3.782 Not tainted 6.16.0-syzkaller-03556-g0919a5b3b11c #0 PREEMPT(voluntary) [ 131.651642][ T5962] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 131.661824][ T5962] ================================================================== [ 131.731340][ T5962] syz.3.782 (5962) used greatest stack depth: 9648 bytes left [ 131.740049][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.100627][ T1037] usb usb4-port1: attempt power cycle [ 133.930582][ T1037] usb usb4-port1: unable to enumerate USB device