last executing test programs: 4.04042886s ago: executing program 4 (id=426): r0 = openat$snapshot(0xffffffffffffff9c, 0x0, 0x8000, 0x0) ioctl$SNAPSHOT_ATOMIC_RESTORE(r0, 0x3304) 3.991611691s ago: executing program 4 (id=428): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r1 = dup(r0) listen(r1, 0x100) ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f0000000380)={'geneve1\x00', @broadcast}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1a, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000003c0)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="0400000000200000246360e2086c289c480883378c3db8fca09769b8159aa5b1c00f8d9f27477ca33fcd64e0b8d71a66807e248928bec8c5ab4b1dc1668c28edab9de0b4a51f923c12ea723b8f94c756cc70f911c24565362d35a69ab8b0d904dbadf306b51336d224a175574ed28584563f1650304ef359cd6dcc66c3b1fe0e133f0a6b496259b0aa68d6ed623a43651fd5e713d282cb52c81f2324d60148c59086ce4118b993ad0000000000000000", @ANYRES32, @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) futex(0x0, 0x86, 0x0, &(0x7f0000000100)={0x77359400}, 0x0, 0x1) write$binfmt_script(r2, &(0x7f0000000040), 0x208e24b) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000900850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000280)={[{@errors_remount}, {@nobarrier}, {@nodiscard}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@errors_continue}, {@dioread_lock}]}, 0x1, 0x439, &(0x7f0000000680)="$eJzs3MtvG0UYAPBv105LXyRU5dEHECiIikfSpKX0wAUEEgeQkOBQjiFJq1K3QU2QaFVBQKgcUSXuiCMSfwEnuCDghMQV7qhShXJp4WS09m5iO3aauE5c8O8nrTuzO9bM592xZ3a6CWBgjWYvScTuiPg9Iobr2eYCo/V/bi1dmf576cp0EtXqW38ltXI3l65MF0WL9+0qMuWI9LMkDrapd/7S5XNTlcrsxTw/vnD+/fH5S5efO3t+6szsmdkLkydPHj828cKJyed7EmcW180DH80d2v/aO9femD517d2fv02K+Fvi6JHRtQ4+Wa32uLr+2tOQTsp9bAgbUqp30xiq9f/hKMXKyRuOVz/ta+OATVWtVqsPdD68WAX+x5LodwuA/ih+6LP5b7Ft0dDjrnDjpfoEKIv7Vr7Vj5QjzcsMtcxve2k0Ik4t/vNVtsXm3IcAAGjyfTb+ebbd+C+NxvtC9+ZrKCMRcV9E7I2IExGxLyLuj6iVfTAiHtpg/a2LJKvHP+n1rgJbp2z892K+ttU8/itGfzFSynN7avEPJafPVmaP5p/JkRjanuUn1qjjh1d++6LTscbxX7Zl9Rdjwbwd18vbm98zM7UwdScxN7rxScSBcrv4k+WVgCQi9kfEgS7rOPv0N4c6Hbt9/GvowTpT9euIp+rnfzFa4i8ka69Pjt8Tldmj48VVsdovv159s1P9dxR/D2Tnf2fb6385/pGkcb12fuN1XP3j845zmm6v/23J2037PpxaWLg4EbEteb3e6JX9pYuTLeUmV8pn8R853L7/742VT+JgRGQX8cMR8UhEPJq3/bGIeDwiDq8R/08vP/Fe9/Fvriz+mQ2d/5XEtmjd0z5ROvfjd02Vjmwk/uz8H6+ljuR71vP9t552dXc1AwAAwH9PGhG7I0nHltNpOjZW/z/8+2JnWpmbX3jm9NwHF2bqzwiMxFBa3OkabrgfOpFP64v8ZEv+WH7f+MvSjlp+bHquMtPv4GHA7erQ/zN/lvrdOmDTdbeOlva8HcDW87wmDC79HwaX/g+Dq03/39GPdgBbr93v/8d9aAew9coNr/nfBAMGhPk/DC79HwaX/g8DaX5H3P4heQmJVYlI74pmSGxSot/fTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAL3xbwAAAP//1Xjmag==") r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) close_range(r6, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x4042, 0x0) ioctl$FS_IOC_FIEMAP(r6, 0xc020660b, &(0x7f0000000300)={0x0, 0x8, 0x5, 0x1000, 0x1, 0x0, [{0x8e2a, 0x8000000000000000, 0x0, '\x00', 0x1202}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kfree\x00', r5}, 0x10) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05000000000000000000070000010900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000025940000000c0a01030000000000000000070000080900020073797a31000000000900010073797a30000000006800038064000080080003400000000258000b802c0001800a0001006c696d69740000001c0002800c00014000000000000000030c0002400000000000000010140001800c000100636f756e746572000400028014"], 0x118}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01080000000000000000020000000900020073797a2a0000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[], 0x74}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) 3.338402949s ago: executing program 4 (id=442): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) close(0xffffffffffffffff) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r2, 0x0, 0xffffffffffffffff}, 0x18) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) sendmsg$NFNL_MSG_CTHELPER_GET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000240)={0x2c, 0x1, 0x9, 0x3, 0x0, 0x0, {0x5, 0x0, 0x7}, [@NFCTH_TUPLE={0x18, 0x2, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @remote}}}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20068080}, 0x20040000) 2.889086044s ago: executing program 0 (id=460): r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000004000000000000008100d00850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r3}, 0x10) nanosleep(0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r4, 0x0, 0x400000000000002}, 0x18) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a0b040000000000000000020000000900010073797a30000000000900020073797a32000000001400000011"], 0x54}}, 0x80) sendmsg$NFT_BATCH(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000002580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000080a01010000000000000000020000000900010073797a300000000038000000060a17d50000000000000000020000000900020073797a32000000000900010073797a30000000000c0003400000000000000002"], 0xcdc}, 0x1, 0x0, 0x0, 0x1}, 0x0) r6 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDGKBDIACR(r6, 0x4b4a, &(0x7f00000003c0)=""/165) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r1}, 0x10) io_cancel(0x0, 0x0, 0x0) r7 = socket(0x23, 0x5, 0x2) write(r7, 0x0, 0x0) connect$netlink(r7, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) r8 = openat$selinux_policy(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[@ANYRESOCT=r8], 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000001340)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r9, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000180)='kfree\x00', r10}, 0x18) r11 = socket$inet_sctp(0x2, 0x5, 0x84) bind$inet(r11, &(0x7f0000000140)={0x2, 0x6e20, @rand_addr=0x64010100}, 0x27) listen(r11, 0x1ff) r12 = socket$inet_sctp(0x2, 0x5, 0x84) sendto$inet(r12, &(0x7f0000000500)="ab", 0x1, 0x40840, &(0x7f0000000000)={0x2, 0x4e22, @loopback}, 0x10) write$selinux_load(r0, &(0x7f0000000000)=ANY=[], 0xffa8) 2.706946977s ago: executing program 4 (id=467): r0 = socket$inet_tcp(0x2, 0x1, 0x0) (async) prlimit64(0x0, 0xe, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000001200), &(0x7f0000000380)='./bus\x00', 0x400, &(0x7f0000002480)=ANY=[], 0x1, 0x11fe, &(0x7f0000002480)="$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") setrlimit(0x1, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r1 = open(0x0, 0xca942, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) fcntl$getownex(r1, 0x10, &(0x7f0000000080)) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) syz_clone3(&(0x7f00000000c0)={0x200000400, 0x0, 0x0, 0x0, {0x1}, 0x0, 0x0, 0x0, 0x0}, 0x58) (async) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10) (async) timer_create(0x7, &(0x7f0000000040)={0x0, 0x14, 0x0, @thr={&(0x7f0000000500)="550872c5eb64ac7cce1cffba40627c96b6613396654c0a9dd80e15705d9e6d2426f76582f5aea74b18224382019dc1631a4d50153697b85c4d2ebee0eb33a987c7cdcf583c09a5807a5bc15e9e33165441010dbd1bfba4b357c315be899125708e0b24e2966041c00aea2598742b90725d4682f720d8932d23cd8fbf2ee3ffb6c308ab284018320801cef818118e22b7b6b0411b631324e095a13cccabc1bd0308c0b5eea136eb46b1c32cfd7b9c1b608113b5f6bd6b6c8a6cbb395b09350fbcc99489c50a9793e8fbc2bef3daf170", &(0x7f0000000300)="96e7235c48ae2046398f0eb3e3bce9e252f16fc46c10ee34dd590a72275b484284377b5f02ce51845fa87fe264d1801134a220fc8189c60f480e59921dfee5c09eaace"}}, &(0x7f0000000180)) r3 = syz_open_procfs(0x0, &(0x7f0000001240)='net/igmp6\x00') preadv(r3, &(0x7f0000001180)=[{&(0x7f0000000000)=""/4096, 0x1000}], 0x1, 0x163, 0x0) openat$cgroup_type(r3, &(0x7f00000003c0), 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r5}, 0x10) sched_setscheduler(0x0, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) (async) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_type(r6, &(0x7f0000000100), 0x2, 0x0) mkdirat$cgroup(r6, &(0x7f00000000c0)='syz0\x00', 0x1ff) write$cgroup_type(r7, &(0x7f0000000280), 0x9) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendto$inet(r0, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) recvfrom(r0, &(0x7f0000000480)=""/110, 0x168f6f3d, 0x734, 0x0, 0xfffffffffffffecb) 2.677282707s ago: executing program 0 (id=468): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x1100, 0x5dd9, 0x0, 0x5, 0x0, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000400)='/proc/thread-self/attr/keycreate\x00', 0x2, 0x0) r1 = fsopen(&(0x7f0000000040)='devpts\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r1, 0x7, 0x0, 0x0, 0x0) write$selinux_attr(r0, &(0x7f0000000100)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) request_key(&(0x7f0000000340)='id_legacy\x00', &(0x7f0000000380)={'syz', 0x0}, 0x0, 0xfffffffffffffffe) syz_emit_ethernet(0xe9, &(0x7f0000000680)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff0004aa249bd72e0a00c56f777375e8e9be7fe4f5dbb7103df95b1b08818bf62b7c0e58c7c2f676a567473ffde644156971fe8295d1af3981e15248cda37bff5781e2f1355e49e5a2b873ad927b99f13224637106d8ff455c78aaeafdae147a417eb23434761c7c7e2242eb4cd7ad2837d91468990ad5978c7c7167bfea1b2ba67452d9d48b53f16e5951b8c610de774572f6d66729447aa215f03618b219f1ccc989a61d14398265e34ad27e3bc4b7e8f2c44cc54c1252144a77257a3281855151d3da785237a060f27a3e9d8eb8fd4bb73d05bcb7db08f72b804e408a64bb0000"], &(0x7f0000000640)={0x0, 0x3, [0x810, 0x1e3, 0x97d, 0x4ac]}) socket$nl_netfilter(0x10, 0x3, 0xc) io_setup(0x2, &(0x7f0000000080)) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018040000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x67) r3 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$VT_RESIZEX(r3, 0x8008b705, &(0x7f0000000540)={0x40, 0xfffc, 0x8, 0x7, 0x4, 0x1000}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x5c22996213de4759) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) lsm_list_modules(0x0, &(0x7f0000000500), 0x0) 2.602681908s ago: executing program 2 (id=469): r0 = fsopen(&(0x7f0000000580)='securityfs\x00', 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ec0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000a3850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000240)='cachefiles_ref\x00', r1, 0x0, 0x3}, 0x16) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000001400)='./file1\x00', 0x21081e, &(0x7f00000012c0), 0x1, 0x4fa, &(0x7f00000005c0)="$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") r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='pids.current\x00', 0x275a, 0x0) r3 = creat(&(0x7f00000000c0)='./bus\x00', 0x182) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r4}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000e00000fdffffff03000000400001802c0004001400010002000000ac14140f000000000000000014000200020000000a01010200000000000000000d0001007564703a73"], 0x54}}, 0x0) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000001440)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000040)={&(0x7f0000001300)={0xdc, r6, 0x4, 0x70bd26, 0x25dfdbfd, {}, [@TIPC_NLA_LINK={0x48, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x40}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x401}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xa}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}]}]}, @TIPC_NLA_MEDIA={0x38, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2224}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}]}]}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xe9e6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}]}, @TIPC_NLA_MEDIA={0x1c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}]}, 0xdc}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) write$UHID_INPUT(r2, &(0x7f0000000280)={0x8, {"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", 0x1000}}, 0x1006) fallocate(r3, 0x0, 0x3, 0x2000402) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000140)={0xc, r3}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xb, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000180)='kfree\x00', r9, 0x0, 0x2ab}, 0x18) sendmsg$NFT_BATCH(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000050000000000000000000000000a20000000000a01030000000000000000010000000900010073797a310000000040000000030a01020000000000000000010000000900030073797a320000000014000480080002400000000008000140000000050900010073797a31000000004c000000050a01020000100000000000010020000c00024000000000000000010900010073797a310000000020000480140003006e657464657673696d300000000000000800014000000005"], 0xd4}}, 0x0) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r7, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000740)={0x2c, r10, 0x1, 0x1000000, 0x20000000, {0x3}, [@TIPC_NLA_BEARER={0x18, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xf, 0x1, @l2={'ib', 0x3a, 'geneve1\x00'}}, @TIPC_NLA_BEARER_PROP={0x4}]}]}, 0x2c}}, 0x0) 2.40621628s ago: executing program 0 (id=471): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18010000007b00000000000000000000850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x55) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000004c0)='kmem_cache_free\x00', r0}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x1, 0x0, 0x7ffc1ffb}]}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000001c0)={{r1}, &(0x7f00000004c0), &(0x7f0000000500)='%pK \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x18) getcwd(&(0x7f0000000040)=""/39, 0x27) bpf$MAP_CREATE(0x1900000000000000, 0x0, 0x48) r3 = socket$tipc(0x1e, 0x5, 0x0) gettid() bind$tipc(r3, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) r4 = socket$tipc(0x1e, 0x5, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec8500000050000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x23, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r5}, 0x10) r6 = socket$pppl2tp(0x18, 0x1, 0x1) r7 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r6, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, r7, {0x2, 0x0, @multicast2}, 0x2}}, 0x2e) r8 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r8, &(0x7f00000000c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}, 0x2, 0x2}}, 0x26) close_range(r7, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='rxrpc_tx_fail\x00', r0, 0x0, 0x1}, 0x18) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x3, 0x3, 0x3}, 0x10) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) sendmsg$tipc(r3, &(0x7f0000000280)={&(0x7f0000000040), 0x10, 0x0}, 0x0) 2.323642802s ago: executing program 0 (id=473): socket$igmp6(0xa, 0x3, 0x2) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) socket(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0xc0ed0006, &(0x7f0000000940)={[{@jqfmt_vfsv1}, {@dioread_nolock}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0xc78c}}, {@noload}, {@errors_remount}, {@usrjquota}]}, 0x0, 0x45d, &(0x7f00000004c0)="$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") r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000000380), 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) syz_open_procfs(0xffffffffffffffff, 0x0) unshare(0x22020600) timerfd_create(0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x80000e, &(0x7f0000000340)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x1}}, {@resuid={'resuid', 0x3d, 0xee01}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@quota}, {@errors_remount}, {@barrier}]}, 0x3, 0x44a, &(0x7f0000000bc0)="$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") ioctl$TCSETS2(r0, 0x402c542b, 0x0) ioctl$KDGKBDIACR(r0, 0x4b4a, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000940)=ANY=[], 0x48) 2.257575022s ago: executing program 2 (id=474): set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000007b3a6d7b850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000000c0)='mm_page_alloc\x00', r0}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000940)=ANY=[@ANYBLOB="117db89be4cb5321c9", @ANYRESDEC=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x2, 0x0, 0x7ffc1ffb}]}) arch_prctl$ARCH_GET_XCOMP_PERM(0x1022, &(0x7f00000002c0)) mlockall(0x5) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) r3 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) getgroups(0x2, &(0x7f0000001080)=[0xee01, 0xffffffffffffffff]) keyctl$chown(0x4, r3, 0xee01, r5) syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000900)='./file0\x00', 0x810082, &(0x7f0000000b00)=ANY=[@ANYRES8=r5], 0x0, 0x2b9, &(0x7f0000000280)="$eJzs3T9rc1UYAPDnpmkSdUgGJxG8oIPTy9t3dUmVFqqZlAzqoMW2IE0QWij4B9NOri6OfgJBcHP1A7j4DQRXwc0OhSv35t4kbdPYaNP65/db+vTc85zznNPTlA45ef/54eFeGgdnn/0crVYStW504zyJTtSichqXdL8MAODf7DzL4rdsbJm8JCJaqysLAFihpf/+f7fykgCAFXvr7Xfe2Oz1tt5M01ZsD7846ef/2edfx883D+LDGMR+PI52XERkE+N4O8uyUT3NdeKl4eikn2cO3/uxHH/z14gifyPa0SmaLufv9LY20rGZ/FFex9Pl/N08/0m049k58+/0tp7MyY9+I15+cab+R9GOnz6Ij2IQe0UR0/zPN9L0teyr3z99Ny8vz09GJ/1m0W8qW7vnHw0AAAAAAAAAAAAAAAAAAAAAAP9hj8q7c5pR3N+TN5X376xd5N+sR1rpXL6fZ5yfVANduR9olMXX1f06j9M0zcqO0/x6PFeP+sOsGgAAAAAAAAAAAAAAAAAAAP5Zjj/+5HB3MNg/KoLXszKYtCwXVLcBVG/r/6vjdCct9aMXYnHn5nSuWhkuGDnWqj5JxMIy8kX8vd24dfDUTTV/8+2yA7b+vM/6dK7olJtxx+uqTtfhbjJ/D5tRtbSqQ/L9bJ9G3HKuxk2PsqWOX2Puo/bSa288UwSjBX0iWVTYK7+Md65sKX+hTid9GsWuzk1fL4OZ9CtnY6nzfP21Iknu/OUHAAAAAAAAAAAAAAAAAACYMX3T75yHZwtTa1lzZWUBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwL2afv7/JKhfa7kajMrkccsPry7o3Iij4wdeIgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP8DfwQAAP//4wFdTQ==") mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) setgroups(0x1, &(0x7f0000000080)=[r4]) keyctl$setperm(0x5, r3, 0x2121052f) keyctl$KEYCTL_MOVE(0x3, r3, r3, r3, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000680)='contention_end\x00', r7, 0x0, 0x2000003}, 0x18) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000700)='svcrdma_no_rwctx_err\x00', r8}, 0x18) 1.876112937s ago: executing program 1 (id=479): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r0}, 0x18) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x275a, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b704000001000000850000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r4}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f00000001c0)={0x1, &(0x7f0000000040)=[{0x6, 0xfc, 0x0, 0x6}]}, 0x10) ioctl$NS_GET_OWNER_UID(r1, 0xb704, &(0x7f0000000300)) mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x0) syz_clone(0x40200, 0x0, 0x49, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x9f, 0x0, 0x0, 0x0, 0xfffffffc, 0xfffe, 0x0, 0x0, 0x0, 0x10001}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 1.63054822s ago: executing program 1 (id=480): bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) r0 = perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x600e7180, 0x0, 0x0, 0x0, 0x0, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000100)='cgroup.max.descendants\x00', 0x2, 0x0) sendfile(r3, r3, 0x0, 0x7ff) fcntl$setlease(r1, 0x400, 0x0) fremovexattr(r1, &(0x7f00000000c0)=@known='trusted.overlay.redirect\x00') r4 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r5) setsockopt$sock_attach_bpf(r4, 0x84, 0x22, &(0x7f0000000000), 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r0, @ANYRES16=r0], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x10) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) bpf$MAP_CREATE(0x0, &(0x7f0000001d40)=ANY=[@ANYBLOB="12000000040000000400000002"], 0x50) lchown(0x0, 0x0, 0xee01) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r7 = getpid() syz_clone3(0x0, 0xffffffffffffff45) sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000759000/0x1000)=nil, 0x1000, 0xb635773f06ebbee7, 0x100010, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r9, &(0x7f0000000000), 0x651, 0x0) 1.102396246s ago: executing program 3 (id=481): pipe(&(0x7f00000001c0)) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff5000/0x3000)=nil) msync(&(0x7f0000ff7000/0x1000)=nil, 0x1000, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r1 = io_uring_setup(0xaab, &(0x7f00000003c0)={0x0, 0x2c97, 0x8}) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) recvmsg(r2, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='kfree\x00', r3, 0x0, 0x6}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r5}, 0x10) 825.38479ms ago: executing program 1 (id=482): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x200003f, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) (fail_nth: 9) 823.99697ms ago: executing program 2 (id=483): stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r2, 0x4b72, &(0x7f00000004c0)={0x0, 0x0, 0x6, 0x20, 0x7, &(0x7f00000000c0)="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"}) ioctl$KDSKBENT(r2, 0x4b47, &(0x7f0000000500)={0x8, 0x8c, 0x6}) rename(&(0x7f0000000540)='./file1\x00', &(0x7f0000000580)='./file0\x00') r3 = accept4$tipc(0xffffffffffffffff, &(0x7f00000005c0), &(0x7f0000000600)=0x10, 0x80000) getsockopt$TIPC_IMPORTANCE(r3, 0x10f, 0x7f, &(0x7f0000000640), &(0x7f0000000680)=0x4) getresuid(&(0x7f0000000740)=0x0, &(0x7f0000000780), &(0x7f00000007c0)) lsetxattr$system_posix_acl(&(0x7f00000006c0)='./file0\x00', &(0x7f0000000700)='system.posix_acl_default\x00', &(0x7f0000000800)={{}, {0x1, 0x4}, [{0x2, 0x5, r0}, {0x2, 0x7, r0}, {0x2, 0x2, r0}, {0x2, 0x0, r0}, {0x2, 0x1, r4}, {0x2, 0x1, r0}], {}, [{0x8, 0x6, r1}, {0x8, 0x2, r1}, {0x8, 0x4, r1}, {0x8, 0x5, r1}], {0x10, 0x1}, {0x20, 0x9}}, 0x74, 0x1) setxattr$trusted_overlay_opaque(&(0x7f0000000880)='./file0\x00', &(0x7f00000008c0), &(0x7f0000000900), 0x2, 0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000940)={'batadv_slave_0\x00', 0x0}) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000a80)={@fallback=r3, 0x16, 0x0, 0x7, &(0x7f0000000980)=[0x0], 0x1, 0x0, &(0x7f00000009c0)=[0x0, 0x0], &(0x7f0000000a00)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000a40)=[0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) r8 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000b00)={0xffffffffffffffff}, 0x4) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000ac0)={0xffffffffffffffff, r5, 0x25, 0x6, @val=@tcx={@void, @value=r8, @void, @void, r7}}, 0x1c) acct(&(0x7f0000000b40)='./file1/file0\x00') r9 = fcntl$getown(r6, 0x9) ioctl$BLKTRACESETUP(r6, 0xc0481273, &(0x7f0000000b80)={'\x00', 0x2, 0x94, 0x3, 0x7, 0x7fffffff, r9}) r10 = syz_open_dev$ttys(0xc, 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000c00)='./file1/file0\x00', &(0x7f0000000c40), 0x1000, &(0x7f0000000c80)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r10}, 0x2c, {[{@cache_mmap}, {@dfltuid={'dfltuid', 0x3d, r0}}, {@version_9p2000}, {@posixacl}, {@mmap}, {@ignoreqv}, {@msize={'msize', 0x3d, 0x100000000}}, {@cache_mmap}, {@access_any}]}}) r11 = inotify_init1(0x80000) r12 = inotify_add_watch(0xffffffffffffffff, &(0x7f0000000d40)='./file2\x00', 0x8a1) inotify_rm_watch(r11, r12) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000e00)={r6, 0x58, &(0x7f0000000d80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r14 = bpf$MAP_CREATE(0x0, &(0x7f0000000e40)=@bloom_filter={0x1e, 0x3, 0x3622, 0x80, 0x200, r6, 0x9, '\x00', r13, r6, 0x2, 0x4, 0x4, 0xd, @void, @value, @void, @value}, 0x50) sendmsg$nl_route_sched(r6, &(0x7f0000000fc0)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f00)=@gettfilter={0x5c, 0x2e, 0x200, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, r13, {0x3, 0xb}, {0xb, 0xfff2}, {0xfff1, 0x3}}, [{0x8, 0xb, 0x5f1}, {0x8, 0xb, 0x62b9187b}, {0x8, 0xb, 0x1}, {0x8, 0xb, 0x3000ca1f}, {0x8, 0xb, 0x4}, {0x8, 0xb, 0x3}, {0x8, 0xb, 0x9}]}, 0x5c}, 0x1, 0x0, 0x0, 0xc0}, 0x80) ioctl$EVIOCSKEYCODE_V2(r6, 0x40284504, &(0x7f0000001000)={0xff, 0x13, 0x5, 0x19, "57972efb0225a3d3b437bfa8fa72b228c9238f7c5a29739eb8777acac4eee517"}) r15 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001080), r11) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r6, &(0x7f0000001140)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001100)={&(0x7f00000010c0)={0x24, r15, 0x200, 0x70bd2b, 0x25dfdbff, {{}, {@void, @void}}, [@chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1720}]]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x44050) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000002240)={r14, &(0x7f0000001180)="cc321bca35986422255f2774653525b7aef18ef65dce4acef34b2813c411238e6e70cc30eb02b22d86f7984e00e72c0e7065553bcad3e4da685c865220f5c293bf12330eea188cb79c5b08caeba9f2b1284ea86da2deeb3d659501ed0fc3cfeec7df24bb66ee4d8dca90d6282fa6d14fbb47ddbae31fea34e102729aa1409b9fdbc9b17160f973b55be0c28a0ec739a709eb28", &(0x7f0000001240)=@buf="6badd0843d11fd66f11e393017bf0e41d07e11cb386c7f7a26a276175e873e66dc83e8cb6a57d6f8d0dce5a1e4ee5b0e240b5955ac54dd4b98121795789da0a9008a69132f0801a6da452239c11d350d8a285c4d6013a43fd41384f102ec675454f022ab57078b5f07c0a37c6519c6373b82030eecd987a7b3cdb0f127264ab3c30a2d95ed715619e355fdb548d0bc38d50a522bcc086d3f7a3317eec1cc28edca600ff5d8fee820d29d8b79ed6399de52fa9362b242a0ef3333f4b8955634f14239877272499d07a9efa205a625e77dad9707c1f95c66b1416e466a928f622b7fc5bd53e6e2ba44141184de79fd9c06987920cca8ba367dc17326415e139c56311bcb7f7cd750ea2e37aee87d0995648d68f6240f0b18acc4238890c846bb11667452c603f7157aedd8cb3f3bee04988f4f21a043e5229be6b6f46b27ba5c2f3fa16c3c7a2189e3646fe547046da37141481b2cb4d8881cc2919b3633e175ede7085ccc045849932b6448305f509b7f45f9b955696f0c130d42b7d5890e6926067cf718ca6b38415812abbee0a55c123a0ed095f05f7a6bea26da9a4e840a44effb1651507697c6dabf5044cd670b601f07d7a1df3b5ddf69769ced4ea8e703845b4fa3e3537434bc664ebfed2dba5716a160fbd8a86f54b69b7d99627570b670f8bf1b850a7ff41fb23b765695428fb2765e0b54ce0ec9b57967bfa94de1776ff4ff73ec9d7cca3cd4a7352c77a054f38c23956b26c901137de01c8a5cf5d2c9236ae334d2db0673a44843f7b69348dbf74b7af5a9c8643634b685235ad9397991c2bb428380c177b06765cb202d128b1f63f74b415a31ec5098cc1fa2000e1f12cc593eb13e793bfcc2b2f64122466cf8d3953883d36f36a27ca6b89db777032dc423ad4067ddf0f2e49cc3e41c8d3260d2a46ca7b7d05370a7235c804f5d9da421ff9ef20655b10c609cb78392946d4c487765f4b56bd95eb1533034bc5f5142b22fa96a9b649f0df3020715df238688693b7c6afb27016c5876e537e17d6244364e6d2ec252aab351c5691fad45c0c3238b24f34afa2836a0fc437e830cf0c16c360a3ceee16740f35423422c34710256b2b68d8cb0fe308c3c8b6169e28d7aff96df082e73f1b582874172d9a26ad1e5643f9a831d74ba0edad359e2130e984b325cb0eedc75bb133083bf6171b29a5e6a75780142359df1c67868775e2e569fe0ce9b2c89689b3815d6b4068e771537dc64565e039cc38c8af9b25289babebed78d4dfdc04802e1b795bc3546c724cd0809d0db4e93e45e0b5720145c2e9f9d4cc5f58b1b3f39b7ac91fff190a5b8d0d6d7260fc8e64c43937e2c70799dc9184ccfae88e0d0218f10a3ccb401580a971c9eb67ea8a757e27c10703ce6a07da033a7b5ac5439ad2b381c414a1b8c32d927aee89aac78854e9f4a73639d40d7147402bbba25ba787b6e644edfa214c8634c72681c5758032d41fc0a46b18fc1a53a062ac148174cef7a6a46b87f83ee76d73f4e5ce40e6f4ee5fcb1294a9b29ed6b6fbf8fa3cfb031656f15e994896da49f006b7aa356dc7bbd7d6537d066b10e4a08f2423d16ddd31d3e18bc6beb52ec0a06979d3f0649b7c371cb86d0b1e1f96bae405cd1a7e40784418dfa2e810538b48156b133f5fe8705126ef5afd889e00f8c8a9153fefb492a2c84329f7b9296e98e1f26786bd805d64e910e10a372110e88169f4ac4a9ff3ad5a172dd71705f51d0a21ebf824dc847ad5a43b72e1d2e445c06936f9b8bf3a5602dfe6e4772210cdb5f8500c4e1d087b86b9fe7bfad31781ab53e4bb9d9210622dc08d0ea894e7a69b72794846bccaba320ae30e4c7f70db60dccbb654b063556dc2ecc39f9fc22a50151c3b56fc3d5b24bc41ac4ba3de40501a006985f35b804aaf7ea0dbfb5115ebabab8da70ad74e3f222da56f6a3aedcee4ce1e349309e00aa99a8d2bd63c4d795a3406ea3195e7ea7fb4ae6eae8cb12340b8ef589d1f9364b6df1a296463805325dd18cb6bfdade24a009c6cc3795656f3327ef082e0bc573dfa84936f455878dccc7f0f0c2c292a3e361f51a726585baa88f13a4eddb8a541f8625da4e7664e6193c0d5134f8ec272b2d9b3048ec9fcd6366c164055e04e3a10bdcfc25371438542753fa974ac574892d0ee4bfe601667ac5397b8d6187a9fc459f9084099e297e2598fc6ca0329356a59a02d51d29f298f8b6137c6f775722073a7ce396c335b5741347c716a593c2ce49d92ca4d751558b70e1a7df17fc66504d9ee2ebcc9fae198be6ff7f2c684738c12233b8cd18df743055de11c3c39536a2b9421616f846a4e5118b2da9465b296978f769ee98deba8d5d1d84a437277f385cc128196e1919fe446ecdaa5f95081b8f01b5f895d52d81bd1b2ef0c7b92a766a6c3700df1389046ac6ac70fc4446595881fc48cacae2a4c40e00db4f0fcfb3e12479fd22f9afd9ca675fa61125d1671e45fdb7c1b8c02115d67685e755ac32d4e4c94350015865496a18cdfa927a94bc0bb1c1a68b52239d24c3cff81404bfa4cd4e0628dee69d3e51dbf396ba9fb7b19e0c1f3e7443ce98374141a570c716fa53a5c047b11b467e5b2acabb0f502469c1409c56a4510007ec2843a4010a416be608035d521a6d4069604bb6e326fe7e16fca10aeb67f2adec215c343831c10f9c9c70f5ad63e0fc00813272f37afd99c7f923e3b4abefeb47e209d8129422669b9d6b405b93295132cfcf6952eb397541c62aba75b17933fc7377a249a2c7d0a1606fb24daf9e2e32fe2112a10f201a1948264dc0f7d33508c65609a51703bc1d5991eb0a3985be228da8d699f5b99cad36ad08b1ef38aac39daa1402c867ae574b2f15924476e1efb49a26f11c786a6a49397678f06193542f8bada2dcb18812933f8d6e7c43e660b767b3590a1f320a5308afb7f28b8b1adc30131cdf79062803f3387a8295029123696dd20cf75ee7f27323ae73804cdd5f0d6cc6eb4c4aa0d678f07ef84b9751b29dcdd10fee0151e86e7e228b95fba2f10a47fb83b68288b4261f3084635f4e1fb4b3dad334972dc58e08ee63775c6c78d954792ef6e12f8a2ed957c7f2b702ed75cca65c6e4f0b73efc0cccc75d13149cb36b99f891c610d66d8d3019878b328dbbfda0bc4fb896f794f277e057d40f6c2b64843c962302f416cf2a5095e62b20cb1330f90fa260bf26fa59896a342c7c4cf55d2517ac4c7a5c722af33a7786efd401d1d58696350e005421402910fe07c53506886e5a26a284cff7c5a273fc42bcff3fb3432855a5d0a70124051e63b0676820cec43ab0775025f91bdf2eac1ed56e484febe03dfc5abf99c976b78170bbf1905e1dc282a43757c13bcea64aa5aa0e65ba858fc627d0443a195705a21aab1d191b4bc4f58104d65c0cae7d79687c4e6b334558fa7f29b62fe1c9ba090c5257af1cd883dee0c402435e2d2873734e9a59d98b721cbe1d32a58cedfdf469177d7e8c754570fd041db3a0cdf327c00ae5db71e9f190318523fc6af849a0f5d14f19c1a6198f96526b2077b05fe7268b63046dd905c5413f617e19150416c8a1f4555762b97914c4e03cfe9c972113016bb8f489241ee821a789be32f1bef1147e2e5eef9c9d3022eb5e043349031f21d6371839f2dc8b8e944d3b163ed95ced1e7f6b8518c16456843f6d163de8f12a06b3ba8997a590f27f1973b809095d6f01e4c32560933f457f06f7d871f133dfcdb926f4b2561a0bc65dda61119ef57fc7c97e4baec3bf0eb818687f527c1d504bbf1c4be0f5807c83ff04be5c408a9a3a45fb95d5982e06d1df701aebf0afd97317250b47bb012bbb4a481bf3295a4fad4f2e8398d9abc5fcb76ef20917d136387c5ea193cc68ef2cc7135afd03cc3fc321339a654402249d6a325fda44ec338e825334826260253892a64e87ed8c7e1e527270c1a8a2d6bbe0a99933db639317bb4a5819e8752191a79a11a133e48eab644abaaa0a8c7551c10149658f6afeb52a7e07769432229adba5d842a52e83b612cd4b3cf6f35aa8f4d321415fa4701e077f1df5d7e86eb00da99132ba35e6773bdb66d61202131d7243fb3ef8ed5f30d76b595a6e939376cf2018d679c668e64617712b64eaea038c005e6d645bf4af8b1ca69154a4561fec1d76e312e385711a73570c6855a6659fce335a6b25e8e27a31ebd3d1e2dd90ab56379c5cac9169d134f78dfbf258ece708ee5698c358b567d4ae49b0a9e000160e64a423c2ee5f53c8239714d14f3b397580c455701aaaf6769c84e46db8547f33ec68d69743d29b6ae7136336726886bfcec1fb3c16c7f7dde48d8fc5d58c38de979dace2d10194308fd916ec82d532758d39614eca5a1d4e4c5adb9fa061ccb95aea6b50ba0886d087871ce69d53128c05cf6930818813ebc3008e2654d8c219d73819f198d5757a28970aacc8abbeaa40b245cba19f6bc50f85ce33a99cdba545aa300d5b7d9fc707f69a918ef18b02791be59bac900e701a5da6e38f273ea24f37ca516a741b10356805bb28957cf25b6fd43cfa393b941afc9d5ad4bfe957d73ca7ca27dda59f927f131761e49873c838d03c7a4a80d5e74da7f7b8b6c7582a8d5c188b2233a38361f8cf6208689560e0c1740ead6b9fa9191791553e3fe7c1d14effba50a69c4c24a2fb4f87c48a1fdd08a01a6b0796b292248ee1bca092b2f81c4ad965e67b66ce2955c29ceb2ae7bf6ed32b4d6045c45c41f61959e88d6280f5a101fb8db7b3905cf02d1aa41c939fd69edf4c6bcb52f9f7321f3ff96103f35bd74ed40a84bd7bb354d245725b4da2abad09541fdd84110c3c4e6035c04b7496c46705ea266f1a0233857aae150ac5152ec285fb974d9c28bd3c5aa753452e4a6941bf6d49bd0141018c73fa5ff39edc3a6f71e329061d50746b363f0e250595caa42604a27a2cfea0785703e486d029f70b0f48fefa0112a69e2114a15a31ff4912c06201f15c3881fb44c725b58ee950c8163eda34d8165edf5e25ef8873c446f52910b29c117ece06f50c73323cf737d2248282601e17808beade0c267c899a09eb9fff14ae847d6bc8c59ef94bbb64f0414a84c517781955d8ab5fcf0b724d327f0583dce92d812142cf7941c801005bf8622a3c97fe0544ac4e80856a271a616aa742dec620799aa5ffc8230f2f629f46a1ef024d3198d11b1409e8ea957cbead949fa6ab0d8f1170e5b2f9bcb3612e744436813ab9b2955223f90f6615cf374966832e5a72c6004ed6bd22be5edbf165ab205a4b37a5da4e8dd1980d90750fe4ec1bb010ba191029e07fc07ad1376a1feb04283850a84d440c498eb6dd85749ac650f5949291a819238dcd4fdd9bd911308c5fa83fc7b939f7065d8fd053c4d32664424a934ee44c40714f6cb0be7020cd2bbf396c438df04ce3bfea071f0587c424f173357975246ea634f6a8f3e49ac1874ccc964d343310f02c5564469723e4cdf6cde6da11be7e0c30808f80ea9e0ebeacf48a82cf613a915a90c7bb60f294ae5eef834d9d19366e6d8e0a4185790159e4f34502363b48a2b03f4a08d885c218bd3b92f425cc45fbb947cdc0ca1ee358ebf89126e90a0e5843ff6db55cbc3bf7c6de3ae6cd396eb798d604f51b9314c97d258c91f609afeab07e85ada00bea68ac0d9019eb4ca9db7433aa99d92fc2703cbc5cf88945ea3bf4674f383d54465a2e3a6be622eb69070e93e5a01b703203ed1e41cefc4f7c78ac07b92f5b466afd8da0a9cc3bb389ea9539ba4fc5b7fc3", 0x4}, 0x20) bpf$OBJ_GET_MAP(0x7, &(0x7f00000022c0)=@generic={&(0x7f0000002280)='./file1/file0\x00'}, 0x18) 791.92863ms ago: executing program 3 (id=484): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18010000007b00000000000000000000850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x55) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000004c0)='kmem_cache_free\x00', r0}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x1, 0x0, 0x7ffc1ffb}]}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000001c0)={{r1}, &(0x7f00000004c0), &(0x7f0000000500)='%pK \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x18) getcwd(&(0x7f0000000040)=""/39, 0x27) bpf$MAP_CREATE(0x1900000000000000, 0x0, 0x48) r3 = socket$tipc(0x1e, 0x5, 0x0) gettid() bind$tipc(r3, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) r4 = socket$tipc(0x1e, 0x5, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec8500000050000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x23, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r5}, 0x10) r6 = socket$pppl2tp(0x18, 0x1, 0x1) r7 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r6, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, r7, {0x2, 0x0, @multicast2}, 0x2}}, 0x2e) r8 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r8, &(0x7f00000000c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}, 0x2, 0x2}}, 0x26) close_range(r7, 0xffffffffffffffff, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x3, 0x3, 0x3}, 0x10) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) sendmsg$tipc(r3, &(0x7f0000000280)={&(0x7f0000000040), 0x10, 0x0}, 0x0) 693.903881ms ago: executing program 3 (id=485): r0 = fsopen(&(0x7f0000000580)='securityfs\x00', 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ec0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000a3850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000240)='cachefiles_ref\x00', r1, 0x0, 0x3}, 0x16) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000001400)='./file1\x00', 0x21081e, &(0x7f00000012c0), 0x1, 0x4fa, &(0x7f00000005c0)="$eJzs3c9vG1kdAPCvnThx0uwmu+wBEOyW3YWCqjqJuxut9gDLCSFUCdEjSG1I3CiKHUexU5rQQ3rmikQlTnDkD+DcE3cuCG5cygGJHxGoQeLg1YwnqZvaTdQkdhR/PtJo3ps39fe9pvNe/U3iF8DQuhoRuxExFhF3I2I6u57LjvisfST3Pdt7uLS/93ApF63W7X/l0vbkWnT8mcSV7DWLEfGj70X8NPdy3Mb2ztpitVrZzOqzzdrGbGN758ZqbXGlslJZL5cX5hfmPrn5cfnMxvpebSwrffXpH3e/9fOkW1PZlc5xnKX20AuHcRKjEfGD8wg2ACPZeMYG3RFeSz4i3o6I99PnfzpG0q8mAHCZtVrT0ZrurAMAl10+zYHl8qUsFzAV+Xyp1M7hvROT+Wq90bx+r761vtzOlc1EIX9vtVqZy3KFM1HIJfX5tPy8Xj5SvxkRb0XEL8cn0nppqV5dHuR/fABgiF05sv7/d7y9/gMAl1xx0B0AAPrO+g8Aw8f6DwDDx/oPAMOnvf5PDLobAEAfef8PAMPH+g8AQ+WHt24lR2s/+/zr5fvbW2v1+zeWK421Um1rqbRU39wordTrK+ln9tSOe71qvb4x/1FsPZj59kajOdvY3rlTq2+tN++kn+t9p1JI79rtw8gAgF7eeu/JX3LJivzpRHpEx14OhYH2DDhv+UF3ABiYkUF3ABgYu33B8DrFe3zpAbgkumzR+4Jit18QarVarfPrEnDOrn1J/h+GVUf+308Bw5CR/4fhJf8Pw6vVyp10z/846Y0AwMUmxw/0+P7/29n5d9k3B36yfPSOx+fZKwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALjYDvb/LWV7gU9FPl8qRbwRETNRyN1brVbmIuLNiPjzeGE8qc8PuM8AwGnl/57L9v+6Nv3h1AtN7145LI5FxM9+fftXDxabzc0/RYzl/j1+cL35OLte7n/vAYDjHazT6bnjjfyzvYdLB0c/+/OP70ZEsR1/f28s9g/jj8Zoei5GISIm/5PL6m25jtzFaew+iogvdht/LqbSHEh759Oj8ZPYb/Q1fv6F+Pm0rX1O/i6+cAZ9gWHzJJl/Puv2/OXjanru/vwX0xnq9LL5L3mppf10Dnwe/2D+G+kx/109aYyP/vD9dmni5bZHEV8ejTiIvd8x/xzEz/WI/+EJ4//1K+++36ut9ZuIa9E9fmes2WZtY7axvXNjtba4UlmprJfLC/MLc5/c/Lg8m+aoZ3uvBv/89PqbvdqS8U/2iF88ZvxfP+H4f/v/uz/+2ivif/ODbvHz8c4r4idr4jdOGH9x8vfFXm1J/OUe4z/u63/9hPGf/m3npW3DAYDBaWzvrC1Wq5VNBYWLX0j+yV6AbnQtfKdfscaie9MvPmg/00eaWq3XitVrxjiLrBtwERw+9BHxv0F3BgAAAAAAAAAAAAAA6Kofv7E06DECAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABweX0eAAD//19xzyM=") r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='pids.current\x00', 0x275a, 0x0) r3 = creat(&(0x7f00000000c0)='./bus\x00', 0x182) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r4}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000e00000fdffffff03000000400001802c0004001400010002000000ac14140f000000000000000014000200020000000a01010200000000000000000d0001007564703a73"], 0x54}}, 0x0) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000001440)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000040)={&(0x7f0000001300)={0xdc, r6, 0x4, 0x70bd26, 0x25dfdbfd, {}, [@TIPC_NLA_LINK={0x48, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x40}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x401}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xa}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}]}]}, @TIPC_NLA_MEDIA={0x38, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2224}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}]}]}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xe9e6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}]}, @TIPC_NLA_MEDIA={0x1c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}]}, 0xdc}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) write$UHID_INPUT(r2, &(0x7f0000000280)={0x8, {"68828c0b9bc23b6a89f8110d35c59d082b92f476102ce32229638a495dcd21c89d83a602a5e31db5ec28b818a3d699abbfafad0370d610ac8a0c4726147706600ff53312a5a0fcf02dd3c0c051bce7e14058a91070617264a63a446e3bcbc60a8204e1cde7294551e2b14ca95768db0f1d7e91a01558164eb611a545bfff41ad4788237a35d9bb2087b6245d27b7fdf4d12d0b19d8cb93ab5ae5850dc1c521058256c8ffa7742038290bb874b0e4199e945f3ab5c74e1b3840f18b0c27377c18beea9f6f909f141e96c7ef2d65f293a13fbbca16644d71cf8cc7652391c5eacaa8a1e247815d7c91adab2cfe77c71882246812312aa01c99b9402a62d82ce80d08636aa5a87b550becadfe4b5ae98085a6b0d9fd3407461eecd242e243140cbe1027d68516e3c379a0921455ca4b36fb9d4b9f9324590fc77730385dee376d147a74bb08ce8fec7ed205311dc42f4cd009f57c85abced5844867f81ddf09cb67bb623ed41304c2d08373972f30418780c6bed885604b2fc6ea1cd1dfe48c5fae5f5925c9c657bb39d8b30db6eb1cab5031ae94d45aa4764d45397793250c758537e24bab0ab75d8066903f808d1bf68d189c1a1f5c6ad28dbeae6ab64c771346a9e7720b92ad4008db9c94d6b876753d57bb21f7c645d6833e680f52c3ecaf20b05869feb4ee670d4f18e233df78ccda64a8cbc6d28e392fad9cc7dc8baed666cf0e96111aac3376d3e66b50f83bbc51b180de2a320ee8c5fe17bea897acea40274c3962f009ede428a99e0fe869a9f711b626e68a5e257e32cd6a000f4c9c509b1116f2502f199823f29d7410e37f4d57755b85e3b0f555422f8631047187b55295001847e7395e7d59752ee37d12f7f9b0d94f00f626eb330ebcf5fd520925036cc07e687e001befa33475b67d381f5d0d5c969fd603464520d9212df27dbb4665c139755795a42005fac94f0ceeb6dee1f3bb0c7c1b03bbaafe7a4b53257892fa6a0148a1bbb43f0b57c21e278730c53a888864a8fbf71a81e154d5f923bdc67a3557d081655d3a63c63609c0e1804dbb7242ca489ac2f2d425a4f8007d4f312ca7723bf3c6633b651177c0a54d6ac50ac45e5f36e474685ef3938775537a3c50f06eca472d7f8cee44239b2a4d29fbf2629eaf62d879ab8dcd2fd5d2345298f3fea84307f0d22a5ecbe2c728cec1b9ad4240926dc9d3d94d5476a0f9f088b0c21b040139bbe103417ae11a85f72d652c93351f8e062530c03cb842ef3b231ecf36ef32c470c67d48648740334ea670a200e4d87745784c270023ac2391b39319162a268c55d64c763d9e5079c286b0c2eb6c084adbdd0b1823d9d31a73aa181cb507bfce4d9f7752da2fbbd3d3eb366b7fcb4c7868a5d010ea3b4e7dd6e68aeb044edf20e2d4aa2837cd70814a556b5a4f90fc47ceab97b2f6ec437f46196398667cf927c900523154b3bfee8e96eb4b4c03dc0d818511a51b5defd3ebf6523816560ba03fc010fd34ab09fdb3aa355e48b6b3a0cb6ce89b4008104a4afe8265f1178d177027918ec1aca8a2ad98fa63bad1367d379e6ff13a57909d8f9ecf50bf5dedc6e49cb9459e4db15c4aa2098fec4e13eafebaf8c1ea118d05c51e799f8e843e0c722ececfcf2422ece64dd945b6c14e5843a393e84873d3dd84eab786955014f210686aea9b11062c70e829ef9ff9da1be19705d2a74110d82e141cb1da325441a8593780470656e6116d5bf16bb6fee6b980ae3448d782c5f8d658f6e9e8494d9357490485a1b9879d34f4e681a425e36627f4844a64bfee3c90bb2c93c4e791ecefb0917b45f9323524fa575472f9152b84ab51aca006e5672091554d95a598c2c09068673a857704b131dac07bff07985941f2510aa52dbb79246bb5193819fe06cfafd24ac8f2cb98b9f4a7bb5f27d962fcb733b9ac25f1dec5a1d6f6c4fde072048169fbfdde0854a993ae1f93d13b4cfbacd926c204d687f2f9feb696406a8aa83de5853cdb2fc110db3e3ee717851ebc9bfea5f7563e7f41d8edfac83f2b6d015fca0f9ca29e3d97f9c727bdddc5eab6bf603c0af7b421aa44f3a03296fde5d980b3c2c707059440b0e6fac05a66d919733989f69209303d91e09e7b6fac37c812bb880bd06b687958dac2608ec6e07f492732c44b3a304d0a11a7307abab29e31239bde8274ec53a6999c0ec36ef708d46b4e606ddd4e41b05e144147b5a3d786806873dad19d8b11209a0d0d3e93d17ba4b6b75b5e8e9c36289f9be1db428278c0c18bef8327d374fcb16007c595b8c59b15c90f0b2e302071a1e328282b94516af2a83bbcdd2912a5b2044582f21820df59cee9d45a8dc0e9babfd2914c492f58e32475af0ce53bb0b25661ac5226e946f6cf87dab12601f2cb55573f17ac7d48a647a4ef38e3fca92377ffdd9b5f3bb75bad2b406d8d5656b4eea17a7e2f540c12985599bdb09793068b3151f5a7c39241c88c267f34cf342506338835a8e9975b76dde0e275f3522ff6be12402011868e658fba23ef0ea8eeb470f631ca1b5a2e5e35336320ed03ecc31212bf84467333730d96919e2ed9edddb71da5784fdbc23472da3840ac665cfafbc863d71f5e032d6cb1299375f96ae7a1658798561c5d3e549052751eda4d830109d0c7ccdd80afc7803e546738e3424cf77627330b9447ff34068585936bb60eadd47d40f171d80f5b4d3276a74a4ac606135b805a64d0d39a06344d3be8c1572cd33f9a3afd10dfefd4789a54e9cb55677b02f9330ee99a1f93a6cebd52f22eb93bcedf37f4cc3982b4dabaf26e215872e11cc836b439b580ea013c76ea8629ed752b087bcf176fdc8cb6ae4e2947f5bcf9338d48ce1cf74e365b720d1b3d8c5145d1a78e8eb1b45d21bb62ed1b6e212c13a0ea21223103cd521cb73666cc7a5bacf02b5764251257dea8138e3683c0f7ec4037093a3b78a2d74185289a4844903619b1d9d1553ea217ca214be2cba732907692a769d398d52b816e3859f8ae81e5d0c089e1a87885dd5c86c50ac83db3a802ea67bc0224b4d4e5ed0347a7b144004a93826b01244e75b6e499d4b26bb1845afea8654ba9ade75f5310b458885ad78eff3712c02e62363c5dedd6c99d9aae4cff5cc5ed9406c248744cb4f091eb1f419d0efd1ef5c850b4176fa07a1a5a4e8d39d2e0308916abc77f6cf6b4a44a8a01fc21059d0e100daaeaf636bd177637a583eb9f45c67bc2c76760a58bf448e2e379831755f7a974384d3d62727ca3fec2194dd633a0ed411d6586651b4bbd8b4f5746ce4e72715ba9736c240747f98a01fd3df0b9bed007763c1a1968d4b69eafd279d1c761f8d6a675ab2fced1793920b10c50af3520170b1d5041a0dde753a2fc210cf98ebcc5392a5deccaefdf4b002aeee716dcdca6cb6073881ddbfd37ee751edaca99b65202bfdbe1fec457bd502555b7dedc5d8e221d4093cf7acf89a3b801d6d2fdd3415d58bef856be0ff22eab5d75675081d85416ab70d7d36d617a2a7f0c8d6ed35a2a81588f01e80712534c3256fc52fb4ed5478325ae28efd78e7eaaabf08bd749226ecab7bdbab7a60b5b60f2d93714455ae6d3b88de9ebb5d2df81fc7e349af45d1b502cfaf36f4adc16886db2758b4f43f5a030912cb772def90d1a0fb555c8fb10d3a7bd8e2dd954860b8084ce5c72971f5df24ef5bc24937ccd545f964a86b6c466610e24cee92bf7a196c915975349b491e8bb1f164ae0af3fbe050d57dc7af839be63cdf1883ec31f5310c6e0d87c70902a66259bcf76588f14f96ebb85b95997f64814c73d6ff8b059536c70f7d72b5924258ffb706e2af7aaf580f327af6dff0c3b020b451c4b22d46fa72854af95b2b6a6d7a3e0b2b78c06eeec2edd5f1a2174ae8b7b6f4ce2e781314142b8482dc8ff4046e851a5d6b8347b4ac8b2326e1c359160ac49d637e4f5549d73369d3323223f179146a5426e21213c6e51a348bc9d55289837b42fa56f9084f6e268a9d041bde513b1e8ea13a7637bc53f67b2951b4bec7a44acb0d93ea325611c486806884b08192ed5768ca88e95db075d8d551b09c42d62a87e1b121adb5812ee1769f1555707b163af0ff78d728ad0a1871704645f1ed8632e85735ff24e7541005d5409205940df84926ec581218a4ce89498715fb09dcdb44849d3ca7631c1d472ffcafeb37610e8ca77ba4b43176d825a27f59ec81b217b7aa6e01698fe45ffafa0ea2356ad423e581b632b6c627e0d827da58523a40aa19ea3e2ca93f93ed2a33e4fabc36ae56abcb11ae7944577230ec6c498033976fb8d9610d9d9eacf7302ecb060ea5002d70eb6f327ded18f5b2c79e04f09bff203b7d572a214c3684eb89470c28a1361333b32dd63df2163c039d129c5f766fe1a4110f95fc99b87ead844433ac309c3565bc9ca7a6f838a121fc44303ae248a366865e0a3da36ed3046e304f579ff422a7b9946b5cfb52d3e4463e4c5a1e3c7ec1dc16c18c1cdc641b8a8301cd2fcd271489528b4bb4a8515a71be236faadc7ea05173c21f4b8a9aadae38d2e8443199a08a8df1d502df62736812398e8df6eb17f938d529e8dccfe6a15470be9a8cb613a7fb337f213f77ebd136ddbab9471629169e24304e8d20f37e9a341559afc9ab598119e504c53d5c8ec5316e8336295c4101d8bdf6c71d1483355c00972636ea6831704008858cf803defbba5069c24ac7d5e1b7c8e664212d350832fbc767e09a6c2a08073dd8ac2661fec32d6f548b56d74201c274e2cc07a1712169d3db64ebd5bc111fc0aa41f69a5ef849a41a84cb0673db00cb6ae345fdbd44a5467f8588aa24ef57d7ea9ce9b0b9d2c2e2ee7990c1e3d97375ffd800248f87789cedb94803c315728805b5c0394ab617eadacafebba89d103b28c9df323fc65d023539393ac18285246ffc5e4a7ba902dc234ac2383382f3f445f198cd82a494c8f7ea80c0517223f14e303cf7565e44cd650d4997202ac331355d2c734c61c8a1903d056eb03ce50d167a7a94854de234e45e3886287d01221c6d493ea078df81c2c0d7e5b61a34ceecbf83dd21edb2aeddd14869aaf034588076f6a604569e745f4400fa8ca7dfb9be8bfb85874283a5d1522ec70559abe4681c91112e3561841b2fad0540865944b5df385121b4c8d99cb4d5f9634ace1700c90cfc98f4086714f5f3fd8450f4067e32715aee5943c571fcdca2cb6115dcc373e3f5e96b08e626a1a776ffd5efbf898cfaac7405f75a40feb8ddf06cddf1258a09f3e58b424d409767966290c5c15d150e0f7d120f0078cb97337874f16838ce3cad921bad2573ecef3d853ee5d7e89c3fe517a0d1139ad3f1424c6e5e880cc8b33eb4762b7bd1fe5fd4e2d4c3249bb70b5fe2e74e3751e1b0d78dfbc78fbab4a35d7cd97f8be57eec3a6b3b5c63a5747f82bd3e7fba99bbf9ad1faee6f4b59e14049bbc7a78c285cc8be8cc3fac3451add460bdada49d65d2253adb3500ad3d163f9ae0e24d413ad348bc1a2ed940e6d1c28fa16b9ad05c2175b3374d765939148451b8daffb3f4e646397bc04b0f04a808b6f96dcab1dccbd5b55d4758279b67899dea10bbb61c58f6aad2aefe78f9e5d2b916ca6d717d78e978c25ad27b912e7bddede9c2bf3cd464ff102d78332c1468fc2f2f5cd20baddb71736c30a4a302bb5412587e95f165bc12c05cebf5128ef67064fe9b9f14aed30708a4e5afe8b0cf6c904dbedcd2d7c467cef6544ddd020de4cc50f646d0ba0862030febee6af93b263ff983708b1c725a13103", 0x1000}}, 0x1006) fallocate(r3, 0x0, 0x3, 0x2000402) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000140)={0xc, r3}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xb, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000180)='kfree\x00', r9, 0x0, 0x2ab}, 0x18) sendmsg$NFT_BATCH(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000050000000000000000000000000a20000000000a01030000000000000000010000000900010073797a310000000040000000030a01020000000000000000010000000900030073797a320000000014000480080002400000000008000140000000050900010073797a31000000004c000000050a01020000100000000000010020000c00024000000000000000010900010073797a310000000020000480140003006e657464657673696d300000000000000800014000000005"], 0xd4}}, 0x0) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r7, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000740)={0x2c, r10, 0x1, 0x1000000, 0x20000000, {0x3}, [@TIPC_NLA_BEARER={0x18, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xf, 0x1, @l2={'ib', 0x3a, 'geneve1\x00'}}, @TIPC_NLA_BEARER_PROP={0x4}]}]}, 0x2c}}, 0x0) 640.125252ms ago: executing program 1 (id=486): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000f00)='kfree\x00', r0, 0x0, 0x8000000}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000005c0)=ANY=[@ANYBLOB="14000000100001ff00000000000000000000000a2c000000050a01020000000000000000020000000900030073797a32000000000900010073797a300000000014000000020a031747d21400000000000000000014000000110001"], 0x68}, 0x1, 0x0, 0x0, 0x4006000}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000100001000b000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f08000340000000045c0000000c0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000300003802c00008028000180230001"], 0xe8}}, 0x0) 639.635322ms ago: executing program 2 (id=487): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000f00)='kfree\x00', r0, 0x0, 0x8000000}, 0x18) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000004c0), 0x48100) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f0000000040)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r3, 0xc08c5335, &(0x7f00000001c0)={0x0, 0x80, 0x0, 'queue0\x00', 0x9}) close_range(r2, 0xffffffffffffffff, 0x0) 590.125413ms ago: executing program 1 (id=488): capset(&(0x7f0000000380)={0x20080522}, &(0x7f0000000040)={0x200000, 0x40200003, 0x0, 0x6, 0x7}) setrlimit(0x40000000000008, &(0x7f0000000080)={0x0, 0x6}) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xb8af, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000600)='kfree\x00', r1}, 0x18) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendmmsg$inet(r0, &(0x7f0000000780)=[{{&(0x7f0000000040)={0x2, 0x4e21, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac1414aaffffffff0000000010"], 0x30}}], 0x1, 0x4008804) 577.744473ms ago: executing program 2 (id=489): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) open(&(0x7f0000000680)='./bus\x00', 0x180, 0x50) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r2}, &(0x7f0000000040), &(0x7f0000000280)='%pS \x00'}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r3}, 0x18) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r4}, 0x18) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000140)={0x28, 0x0, 0x0, @host}, 0x10) r5 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000010000305000000000000000000cf0000", @ANYRES32=0x0, @ANYBLOB="00000000000000002000128008000100677470001400028008000100", @ANYRES32=r5, @ANYBLOB="04227061", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x48}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0xfffffffffffffea1, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r6}, 0x10) r7 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, @perf_bp={0x0, 0x13}, 0x400, 0xffffffff, 0x6, 0x4, 0x0, 0x1, 0xfff9, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000001001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r8) r9 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$KDSKBENT(r9, 0x4b47, &(0x7f0000000400)={0x0, 0x7f, 0x700}) r10 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000840)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) add_key(&(0x7f0000000040)='ceph\x00', 0x0, &(0x7f0000000bc0)="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", 0x12d, r10) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYRESDEC, @ANYRES32=0x0, @ANYRES32, @ANYRES8=r9], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000840)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000800000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r12 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x140, 0x0) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) preadv(0xffffffffffffffff, 0x0, 0x0, 0x8, 0x3) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r12, 0xc018937e, &(0x7f0000001040)={{0x1, 0x1, 0x1018}, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00'}) 481.537904ms ago: executing program 1 (id=490): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x8, 0x0, 0x7ffc0002}]}) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0xfe, 0xdba}]}) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) r2 = socket(0x10, 0xa, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x200000, 0x0, {0x60, 0x0, 0x0, r1, {0xc}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x18, 0x2, [@TCA_CAKE_NAT={0x8, 0xb, 0x1}, @TCA_CAKE_BASE_RATE64={0xc, 0x2, 0xd}]}}]}, 0x48}}, 0x0) getsockopt$WPAN_SECURITY_LEVEL(r2, 0x0, 0x2, &(0x7f0000000180), &(0x7f0000000340)=0x4) r3 = syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x1008002, &(0x7f0000000100)={[{@grpquota}, {@delalloc}, {@resuid}, {@debug}, {@dioread_nolock}, {@jqfmt_vfsold}, {@nomblk_io_submit}, {@noauto_da_alloc}]}, 0x1, 0x5dc, &(0x7f0000001cc0)="$eJzs3c9vFFUcAPDvbH/QUrSFGBUP0sQYSJSWFjDEeICrIQ3+iBcvVloQWaChNVo0oSR4MTFejDHx5EH8L5TIlZOePHjxZEiIGo4mrpntTOm2sy0tbacyn0+y9M17O7w33X773r6+NxtAZQ2m/9Qi9kbEVBLRn8wtlHVGVjg4/7x7f39yOn0k0Wi88WcSSZaXPz/JvvZlJ/dExM8/JbGnY3m907NXzo/X65OXs+PhmQtTw9OzVw6euzB+dvLs5MXRl0aPHT1y9NjIoXVd19WCvJPX3/+w/7Oxt7/75p9k5PvfxpI4Hq9mT1x8HRtlMAab35NkeVHfsY2urCQd2c/J4pc46SyxQaxJ/vp1RcRT0R8dcf/F649PXyu1ccCmaiQRDaCiEvEPFZWPA/L39kvfB9dKGZUAW+HuifkJgOXx3zk/Nxg9zbmBnfeSWDytk0TE+mbmWu2KiNu3xq6fuTV2PTZpHg4oNnctIp4uiv+kGf8D0RMDzfivtcR/Oi44lX1N819fZ/1Lp4rFP2yd+fjvWTH+o038v7Mo/t9dZ/2D95Pv9bbEf+96LwkAAAAAAAAq6+aJiHix6O//tYX1P1Gw/qcvIo5vQP2DS46X//2/dmcDqgEK3D0R8Urh+t9avvp3oCNLPdZcD9CVnDlXnzwUEY9HxIHo2pEej6xQx8HP93zdrmwwW/+XP9L6b2drAbN23Onc0XrOxPjM+MNeNxBx91rEM4Xrf5OF/j8p6P/T3wdTD1jHnudvnGpXtnr8A5ul8W3E/sL+//5dK5KV788x3BwPDOejguWe/fiLH9rVv3r8F99Mwi0m4OGl/f/OleN/IFl8v57ptddxeLaz0a5sveP/7uTN5i1nurO8j8ZnZi6PRHQnJzvS3Jb80bW3GR5FeTzk8ZLG/4HnVp7/Kxr/90bE3JL/O/mrdU9x7sl/+35v1x7jfyhPGv8Ta+r/154YvTHwY7v6H6z/P9Ls6w9kOeb/YN5XeZh2t+YXhGNnUdFWtxcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgW1iNgVSW1oIV2rDQ1F9EXEE7GzVr80PfPCmUsfXJxIy5qf/1/LP+m3f/44yT//f2DR8eiS48MRsTsivuzobR4Pnb5Unyj74gEAAAAAAAAAAAAAAAAAAGCb6Guz/z/1R0fZrQM2XWfZDQBKUxD/v5TRDmDr6f+husQ/VJf4h+oS/1Bd4h+qS/xDdYl/qC7xDwAAAAAAj5Td+27+mkTE3Mu9zUeqOyvrKrVlwGarld0AoDRu8QPVZekPVJf3+ECySnlP25NWO3MlU6cf4mQAAAAAAAAAAAAAqJz9e+3/h6qy/x+qy/5/qK58//++ktsBbD3v8YFYZSd/4f7/Vc8CAAAAAAAAAAAAADbS9OyV8+P1+uRlibe2RzO2MtFoNK6mPwXbpT3/80S+FH67tGdJIt/r92Bnlfc7CQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAaPVfAAAA///1TCTJ") quotactl$Q_SETQUOTA(0xffffffff80000801, &(0x7f0000000380)=@nullb, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x5, 0x9, 0xffffffffffffffff, 0x6, 0x0, 0xfffffffffffffffd, 0x3f}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, 0xffffffffffffffff, 0x0, 0xf}, 0x18) bpf$MAP_CREATE(0x0, 0x0, 0x50) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r6, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) writev(r6, &(0x7f0000000200)=[{0x0}], 0x1) close_range(r5, 0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) statfs(0x0, 0x0) r7 = socket$pppoe(0x18, 0x1, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r4, 0x89f0, &(0x7f0000000240)={'erspan0\x00', 0x0}) r8 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000300)=@generic={0x0}, 0x18) r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000006c0)=@o_path={&(0x7f0000000680)='./bus\x00', 0x0, 0x8000, r3}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x16, 0x21, &(0x7f0000000840)=ANY=[@ANYBLOB="1800000008000000000000000300000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018260000", @ANYRES32=r5, @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000090000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000010000008500000082000000851000000300000097660800000000003f30feff01000000182a0000", @ANYRES32=r5, @ANYBLOB, @ANYRES32=r8, @ANYBLOB="0000000005000000bf91000000000000b70200000000000085000000854bafc60000009d000000000000"], &(0x7f0000000500)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x3a, '\x00', r1, @fallback=0x24, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x8, 0x1}, 0x8, 0x10, &(0x7f0000000640)={0x1, 0x8, 0x7859, 0x8}, 0x10, 0x0, r5, 0x3, &(0x7f0000000700)=[r9, r5], &(0x7f0000000740)=[{0x1, 0x1, 0x6, 0xb}, {0x1, 0x3, 0x3, 0x3}, {0x1, 0x3, 0xe, 0x2}], 0x10, 0xfffffffd, @void, @value}, 0x94) connect$pppoe(r7, &(0x7f0000000080)={0x18, 0x0, {0x0, @random="7c9ab5135269", 'pim6reg0\x00'}}, 0x1e) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x200000, &(0x7f0000000180)={[{@dioread_nolock}, {@stripe={'stripe', 0x3d, 0x3}}, {@min_batch_time={'min_batch_time', 0x3d, 0x1}}, {@nogrpid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nodelalloc}, {@errors_remount}, {@acl}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x343}}, {@jqfmt_vfsold}, {@barrier_val={'barrier', 0x3d, 0x7}}, {@nombcache}], [{@appraise}]}, 0xfd, 0x573, &(0x7f0000000cc0)="$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") r10 = openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r10, 0x401c5820, &(0x7f0000000600)={0x23e7, 0x4, 0x1, 0x5}) 375.075536ms ago: executing program 3 (id=491): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001340)=ANY=[@ANYBLOB="02000000040000000400000004"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="1801000000bae3000000000000000000850000007b00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000300000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000640)='kfree\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x12, 0x8, 0x4, 0x7cb4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (fail_nth: 9) 321.253906ms ago: executing program 0 (id=492): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r2, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) get_mempolicy(&(0x7f0000000080), &(0x7f00000000c0), 0x6, &(0x7f0000ffc000/0x4000)=nil, 0x1) r3 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r3, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x57) setsockopt$inet_mreqsrc(r3, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) r4 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r4, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) sendmsg$xdp(r2, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[], 0x30}}, 0x0) dup3(r1, r2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001800)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r5, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 274.056227ms ago: executing program 4 (id=493): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r1}, 0x10) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000300)=@raw={'raw\x00', 0x8, 0x3, 0x2a8, 0x0, 0x43, 0xa0, 0x108, 0x98, 0x210, 0x178, 0x178, 0x210, 0x178, 0x49, 0x0, {[{{@uncond, 0x12a, 0xc0, 0x108, 0x0, {0x0, 0x7a010000}, [@inet=@rpfilter={{0x28}, {0x7}}, @inet=@rpfilter={{0x28}, {0x3}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@remote, 'vcan0\x00', {0x3}}}}, {{@uncond, 0x0, 0xc0, 0x108, 0x0, {}, [@common=@socket0={{0x20}}, @common=@ah={{0x30}, {[0x6577, 0x9]}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x7, 0x400, 0x2, 'syz1\x00', {0xfffffffffffffffd}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x308) 273.328177ms ago: executing program 0 (id=494): set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000007b3a6d7b850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000000c0)='mm_page_alloc\x00', r0}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000940)=ANY=[@ANYBLOB="117db89be4cb5321c9", @ANYRESDEC=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x2, 0x0, 0x7ffc1ffb}]}) arch_prctl$ARCH_GET_XCOMP_PERM(0x1022, &(0x7f00000002c0)) mlockall(0x5) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) r3 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) getgroups(0x2, &(0x7f0000001080)=[0xee01, 0xffffffffffffffff]) keyctl$chown(0x4, r3, 0xee01, r5) syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000900)='./file0\x00', 0x810082, &(0x7f0000000b00)=ANY=[@ANYRES8=r5], 0x0, 0x2b9, &(0x7f0000000280)="$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") mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) setgroups(0x1, &(0x7f0000000080)=[r4]) keyctl$setperm(0x5, r3, 0x2121052f) keyctl$KEYCTL_MOVE(0x3, r3, r3, r3, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000680)='contention_end\x00', r7, 0x0, 0x2000003}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 228.066607ms ago: executing program 3 (id=495): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r0}, 0x18) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x275a, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b704000001000000850000007800"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r4}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f00000001c0)={0x1, &(0x7f0000000040)=[{0x6, 0xfc, 0x0, 0x6}]}, 0x10) ioctl$NS_GET_OWNER_UID(r1, 0xb704, &(0x7f0000000300)) mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x0) syz_clone(0x40200, 0x0, 0x49, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x9f, 0x0, 0x0, 0x0, 0xfffffffc, 0xfffe, 0x0, 0x0, 0x0, 0x10001}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 182.342488ms ago: executing program 2 (id=496): unshare(0x68040200) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) sendmsg$IPCTNL_MSG_CT_GET_STATS(r0, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x14, 0x5, 0x1, 0x201, 0x0, 0x0, {0x2, 0x0, 0x4}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x44095}, 0x4000800) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c00038008000140000000000800024000000000180003801400010076657468305f746f5f687372000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c000380140001"], 0xfc}}, 0x0) 173.306728ms ago: executing program 4 (id=497): r0 = io_uring_setup(0x243f, &(0x7f0000000200)={0x0, 0xfffffffb, 0x42, 0x2, 0xfffffffc}) io_uring_register$IORING_REGISTER_RESTRICTIONS(r0, 0xb, &(0x7f0000000040), 0x0) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065"], 0x15) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r1, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000380)={0xffffffffffffffff, 0x20, &(0x7f0000000040)={&(0x7f00000004c0)=""/249, 0xf9, 0x0, &(0x7f0000000000)=""/37, 0x25}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r3}, 0x10) mremap(&(0x7f00003ef000/0x3000)=nil, 0x3000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) io_uring_register$IORING_REGISTER_RESTRICTIONS(r0, 0xc, 0x0, 0x0) 0s ago: executing program 3 (id=498): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001340)=ANY=[@ANYBLOB="02000000040000000400000004"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="1801000000bae3000000000000000000850000007b00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000300000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000640)='kfree\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x12, 0x8, 0x4, 0x7cb4, 0x18, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0, @void, @value, @void, @value}, 0x48) kernel console output (not intermixed with test programs): [ 21.017185][ T29] audit: type=1400 audit(1745987443.088:81): avc: denied { read } for pid=2989 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 Warning: Permanently added '10.128.0.104' (ED25519) to the list of known hosts. [ 25.160406][ T29] audit: type=1400 audit(1745987447.228:82): avc: denied { mounton } for pid=3290 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=1925 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 25.161589][ T3290] cgroup: Unknown subsys name 'net' [ 25.183160][ T29] audit: type=1400 audit(1745987447.228:83): avc: denied { mount } for pid=3290 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 25.210554][ T29] audit: type=1400 audit(1745987447.258:84): avc: denied { unmount } for pid=3290 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 25.347304][ T3290] cgroup: Unknown subsys name 'cpuset' [ 25.353531][ T3290] cgroup: Unknown subsys name 'rlimit' [ 25.445309][ T29] audit: type=1400 audit(1745987447.508:85): avc: denied { setattr } for pid=3290 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 25.468968][ T29] audit: type=1400 audit(1745987447.518:86): avc: denied { create } for pid=3290 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 25.489656][ T29] audit: type=1400 audit(1745987447.518:87): avc: denied { write } for pid=3290 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 25.510055][ T29] audit: type=1400 audit(1745987447.518:88): avc: denied { read } for pid=3290 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 25.517406][ T3296] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 25.530624][ T29] audit: type=1400 audit(1745987447.538:89): avc: denied { mounton } for pid=3290 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 25.563799][ T29] audit: type=1400 audit(1745987447.538:90): avc: denied { mount } for pid=3290 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 25.587309][ T29] audit: type=1400 audit(1745987447.608:91): avc: denied { relabelto } for pid=3296 comm="mkswap" name="swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 25.614053][ T3290] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 27.503558][ T3305] chnl_net:caif_netlink_parms(): no params data found [ 27.584143][ T3310] chnl_net:caif_netlink_parms(): no params data found [ 27.612623][ T3306] chnl_net:caif_netlink_parms(): no params data found [ 27.640513][ T3303] chnl_net:caif_netlink_parms(): no params data found [ 27.657099][ T3305] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.664279][ T3305] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.671508][ T3305] bridge_slave_0: entered allmulticast mode [ 27.678117][ T3305] bridge_slave_0: entered promiscuous mode [ 27.691575][ T3304] chnl_net:caif_netlink_parms(): no params data found [ 27.707710][ T3305] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.714783][ T3305] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.722075][ T3305] bridge_slave_1: entered allmulticast mode [ 27.728577][ T3305] bridge_slave_1: entered promiscuous mode [ 27.774694][ T3310] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.781832][ T3310] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.789140][ T3310] bridge_slave_0: entered allmulticast mode [ 27.795604][ T3310] bridge_slave_0: entered promiscuous mode [ 27.816747][ T3306] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.823938][ T3306] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.831267][ T3306] bridge_slave_0: entered allmulticast mode [ 27.837862][ T3306] bridge_slave_0: entered promiscuous mode [ 27.844146][ T3310] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.851241][ T3310] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.858385][ T3310] bridge_slave_1: entered allmulticast mode [ 27.864851][ T3310] bridge_slave_1: entered promiscuous mode [ 27.876961][ T3305] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 27.889600][ T3305] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 27.906325][ T3306] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.913655][ T3306] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.921174][ T3306] bridge_slave_1: entered allmulticast mode [ 27.927742][ T3306] bridge_slave_1: entered promiscuous mode [ 27.942336][ T3310] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 27.971886][ T3310] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 27.981988][ T3305] team0: Port device team_slave_0 added [ 28.007674][ T3305] team0: Port device team_slave_1 added [ 28.013522][ T3304] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.020732][ T3304] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.027991][ T3304] bridge_slave_0: entered allmulticast mode [ 28.034624][ T3304] bridge_slave_0: entered promiscuous mode [ 28.041625][ T3304] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.048804][ T3304] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.056051][ T3304] bridge_slave_1: entered allmulticast mode [ 28.062722][ T3304] bridge_slave_1: entered promiscuous mode [ 28.070226][ T3306] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 28.079584][ T3303] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.086823][ T3303] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.094164][ T3303] bridge_slave_0: entered allmulticast mode [ 28.101018][ T3303] bridge_slave_0: entered promiscuous mode [ 28.112895][ T3310] team0: Port device team_slave_0 added [ 28.129109][ T3306] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 28.142997][ T3303] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.150252][ T3303] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.157443][ T3303] bridge_slave_1: entered allmulticast mode [ 28.163918][ T3303] bridge_slave_1: entered promiscuous mode [ 28.170701][ T3310] team0: Port device team_slave_1 added [ 28.191974][ T3304] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 28.216048][ T3305] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 28.223237][ T3305] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.249431][ T3305] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 28.261166][ T3304] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 28.270919][ T3306] team0: Port device team_slave_0 added [ 28.277459][ T3306] team0: Port device team_slave_1 added [ 28.289072][ T3303] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 28.298428][ T3310] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 28.305432][ T3310] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.331472][ T3310] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 28.342601][ T3305] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 28.349612][ T3305] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.375604][ T3305] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 28.399910][ T3303] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 28.414609][ T3310] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 28.421634][ T3310] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.448196][ T3310] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 28.472859][ T3306] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 28.479906][ T3306] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.505827][ T3306] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 28.517181][ T3306] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 28.524138][ T3306] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.550263][ T3306] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 28.568556][ T3304] team0: Port device team_slave_0 added [ 28.598526][ T3304] team0: Port device team_slave_1 added [ 28.611414][ T3310] hsr_slave_0: entered promiscuous mode [ 28.617712][ T3310] hsr_slave_1: entered promiscuous mode [ 28.624265][ T3303] team0: Port device team_slave_0 added [ 28.631534][ T3303] team0: Port device team_slave_1 added [ 28.644803][ T3305] hsr_slave_0: entered promiscuous mode [ 28.651775][ T3305] hsr_slave_1: entered promiscuous mode [ 28.657761][ T3305] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 28.665621][ T3305] Cannot create hsr debugfs directory [ 28.716590][ T3303] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 28.723587][ T3303] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.749624][ T3303] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 28.760939][ T3304] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 28.767976][ T3304] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.794169][ T3304] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 28.805712][ T3304] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 28.812713][ T3304] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.838716][ T3304] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 28.859248][ T3306] hsr_slave_0: entered promiscuous mode [ 28.865291][ T3306] hsr_slave_1: entered promiscuous mode [ 28.871259][ T3306] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 28.878846][ T3306] Cannot create hsr debugfs directory [ 28.890096][ T3303] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 28.897193][ T3303] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.923826][ T3303] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.002012][ T3304] hsr_slave_0: entered promiscuous mode [ 29.008250][ T3304] hsr_slave_1: entered promiscuous mode [ 29.014298][ T3304] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 29.021934][ T3304] Cannot create hsr debugfs directory [ 29.036972][ T3303] hsr_slave_0: entered promiscuous mode [ 29.043078][ T3303] hsr_slave_1: entered promiscuous mode [ 29.049115][ T3303] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 29.056701][ T3303] Cannot create hsr debugfs directory [ 29.163219][ T3305] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 29.184526][ T3305] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 29.195733][ T3305] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 29.218175][ T3305] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 29.250785][ T3310] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 29.264881][ T3310] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 29.273760][ T3310] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 29.283001][ T3310] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 29.315217][ T3306] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 29.325252][ T3306] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 29.339809][ T3306] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 29.348712][ T3306] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 29.386034][ T3304] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 29.400658][ T3305] 8021q: adding VLAN 0 to HW filter on device bond0 [ 29.413813][ T3304] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 29.424562][ T3304] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 29.434697][ T3304] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 29.459528][ T3310] 8021q: adding VLAN 0 to HW filter on device bond0 [ 29.469663][ T3305] 8021q: adding VLAN 0 to HW filter on device team0 [ 29.496629][ T3310] 8021q: adding VLAN 0 to HW filter on device team0 [ 29.505029][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.512122][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.528439][ T313] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.535588][ T313] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.545480][ T3303] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 29.564471][ T313] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.571655][ T313] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.580648][ T313] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.587858][ T313] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.600349][ T3303] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 29.609549][ T3303] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 29.622881][ T3303] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 29.645120][ T3306] 8021q: adding VLAN 0 to HW filter on device bond0 [ 29.671099][ T3305] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 29.692915][ T3306] 8021q: adding VLAN 0 to HW filter on device team0 [ 29.708476][ T386] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.715657][ T386] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.724855][ T386] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.731950][ T386] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.778321][ T3306] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 29.788784][ T3306] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 29.835061][ T3305] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 29.848637][ T3304] 8021q: adding VLAN 0 to HW filter on device bond0 [ 29.877116][ T3304] 8021q: adding VLAN 0 to HW filter on device team0 [ 29.888155][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.895408][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.908445][ T3303] 8021q: adding VLAN 0 to HW filter on device bond0 [ 29.918196][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.925321][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.934725][ T3310] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 29.956387][ T3304] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 29.966872][ T3304] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 29.981618][ T3303] 8021q: adding VLAN 0 to HW filter on device team0 [ 29.990655][ T3306] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.011564][ T313] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.018787][ T313] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.045197][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.052584][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.072032][ T3305] veth0_vlan: entered promiscuous mode [ 30.088732][ T3305] veth1_vlan: entered promiscuous mode [ 30.096118][ T3304] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.116498][ T3303] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 30.153034][ T3310] veth0_vlan: entered promiscuous mode [ 30.184003][ T3310] veth1_vlan: entered promiscuous mode [ 30.202072][ T3305] veth0_macvtap: entered promiscuous mode [ 30.220668][ T3303] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.229715][ T3305] veth1_macvtap: entered promiscuous mode [ 30.241999][ T3310] veth0_macvtap: entered promiscuous mode [ 30.255075][ T3306] veth0_vlan: entered promiscuous mode [ 30.269549][ T3310] veth1_macvtap: entered promiscuous mode [ 30.279944][ T3305] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.291103][ T3306] veth1_vlan: entered promiscuous mode [ 30.300336][ T3305] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.320654][ T3310] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 30.331290][ T3310] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.343216][ T3310] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.359145][ T3305] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.367977][ T3305] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.376738][ T3305] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.385710][ T3305] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.396038][ T3310] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 30.406604][ T3310] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.417444][ T3310] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.432956][ T3304] veth0_vlan: entered promiscuous mode [ 30.448229][ T3306] veth0_macvtap: entered promiscuous mode [ 30.454859][ T3304] veth1_vlan: entered promiscuous mode [ 30.462248][ T3310] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.471052][ T3310] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.479935][ T3310] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.488704][ T3310] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.508695][ T29] kauditd_printk_skb: 18 callbacks suppressed [ 30.508711][ T29] audit: type=1400 audit(1745987452.578:110): avc: denied { mounton } for pid=3305 comm="syz-executor" path="/root/syzkaller.eEtp0T/syz-tmp" dev="sda1" ino=1944 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 30.541138][ T29] audit: type=1400 audit(1745987452.578:111): avc: denied { mount } for pid=3305 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 30.563271][ T29] audit: type=1400 audit(1745987452.578:112): avc: denied { mounton } for pid=3305 comm="syz-executor" path="/root/syzkaller.eEtp0T/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 30.588841][ T29] audit: type=1400 audit(1745987452.578:113): avc: denied { mount } for pid=3305 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 30.610819][ T29] audit: type=1400 audit(1745987452.578:114): avc: denied { mounton } for pid=3305 comm="syz-executor" path="/root/syzkaller.eEtp0T/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 30.637644][ T29] audit: type=1400 audit(1745987452.578:115): avc: denied { mounton } for pid=3305 comm="syz-executor" path="/root/syzkaller.eEtp0T/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=3644 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 30.665308][ T29] audit: type=1400 audit(1745987452.578:116): avc: denied { unmount } for pid=3305 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 30.687086][ T29] audit: type=1400 audit(1745987452.608:117): avc: denied { mounton } for pid=3305 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=502 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 30.710073][ T29] audit: type=1400 audit(1745987452.608:118): avc: denied { mount } for pid=3305 comm="syz-executor" name="/" dev="gadgetfs" ino=4475 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 30.713300][ T3306] veth1_macvtap: entered promiscuous mode [ 30.739311][ T3305] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 30.767392][ T29] audit: type=1400 audit(1745987452.838:119): avc: denied { read write } for pid=3305 comm="syz-executor" name="loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 30.773739][ T3304] veth0_macvtap: entered promiscuous mode [ 30.809764][ T3306] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 30.820253][ T3306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.830202][ T3306] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 30.840666][ T3306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.856312][ T3440] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7) [ 30.862877][ T3440] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 30.870528][ T3440] vhci_hcd vhci_hcd.0: Device attached [ 30.876326][ T3306] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.898661][ T3304] veth1_macvtap: entered promiscuous mode [ 30.915674][ T3441] vhci_hcd: connection closed [ 30.915850][ T12] vhci_hcd: stop threads [ 30.917699][ T3306] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 30.920603][ T12] vhci_hcd: release socket [ 30.924779][ T3306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.935243][ T12] vhci_hcd: disconnect device [ 30.939692][ T3306] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 30.964837][ T3306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.975874][ T3306] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.989642][ T3306] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.998501][ T3306] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.007728][ T3306] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.016510][ T3306] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.029755][ T3304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 31.040288][ T3304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.050416][ T3304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 31.061254][ T3304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.071237][ T3304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 31.081682][ T3304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.092545][ T3304] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.101188][ T3304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 31.111997][ T3304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.121893][ T3304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 31.132468][ T3304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.142308][ T3304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 31.152964][ T3304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.168640][ T3304] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.200528][ T3304] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.209460][ T3304] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.218656][ T3304] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.227547][ T3304] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.261110][ T3303] veth0_vlan: entered promiscuous mode [ 31.280646][ T3303] veth1_vlan: entered promiscuous mode [ 31.322055][ T3303] veth0_macvtap: entered promiscuous mode [ 31.334891][ T3303] veth1_macvtap: entered promiscuous mode [ 31.350296][ T3303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 31.360915][ T3303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.370826][ T3303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 31.381470][ T3303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.391692][ T3303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 31.402262][ T3303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.412211][ T3303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 31.422690][ T3303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.437374][ T3462] loop3: detected capacity change from 0 to 512 [ 31.440056][ T3303] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.448627][ T3462] ======================================================= [ 31.448627][ T3462] WARNING: The mand mount option has been deprecated and [ 31.448627][ T3462] and is ignored by this kernel. Remove the mand [ 31.448627][ T3462] option from the mount to silence this warning. [ 31.448627][ T3462] ======================================================= [ 31.493827][ T3303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 31.504558][ T3303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.514734][ T3303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 31.525215][ T3303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.535067][ T3303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 31.545572][ T3303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.556064][ T3303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 31.566563][ T3303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.577694][ T3303] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.579341][ T3462] EXT4-fs (loop3): orphan cleanup on readonly fs [ 31.597453][ T3303] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.603826][ T3462] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.6: bg 0: block 248: padding at end of block bitmap is not set [ 31.606187][ T3303] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.606216][ T3303] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.637753][ T3462] EXT4-fs error (device loop3): ext4_acquire_dquot:6935: comm syz.3.6: Failed to acquire dquot type 1 [ 31.638422][ T3303] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.658830][ T3464] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7'. [ 31.661581][ T3462] EXT4-fs (loop3): 1 truncate cleaned up [ 31.667565][ T3464] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7'. [ 31.705612][ T3462] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 31.790117][ T3478] x_tables: ip_tables: socket match: used from hooks OUTPUT, but only valid from PREROUTING/INPUT [ 31.867559][ T3487] x_tables: ip_tables: socket match: used from hooks OUTPUT, but only valid from PREROUTING/INPUT [ 31.891215][ T3460] netlink: 'syz.3.6': attribute type 3 has an invalid length. [ 31.906767][ T3460] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6'. [ 31.923863][ T3462] syz.3.6 (3462) used greatest stack depth: 9360 bytes left [ 31.934671][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.017520][ T3502] netlink: 'kfree': attribute type 12 has an invalid length. [ 32.075820][ T3501] loop3: detected capacity change from 0 to 512 [ 32.104626][ T3509] loop2: detected capacity change from 0 to 512 [ 32.133307][ T3513] loop2: detected capacity change from 0 to 128 [ 32.145093][ T3513] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 32.154590][ T3510] loop4: detected capacity change from 0 to 1764 [ 32.166709][ T3511] netlink: 8 bytes leftover after parsing attributes in process `syz.1.19'. [ 32.199881][ T3510] iso9660: Bad value for 'check' [ 32.216014][ T3516] netlink: 8 bytes leftover after parsing attributes in process `syz.3.21'. [ 32.296803][ T3510] bond1: entered promiscuous mode [ 32.301921][ T3510] bond1: entered allmulticast mode [ 32.307793][ T3510] 8021q: adding VLAN 0 to HW filter on device bond1 [ 32.318607][ T3510] bond1 (unregistering): Released all slaves [ 32.392897][ T3513] FAT-fs (loop2): FAT read failed (blocknr 128) [ 32.407370][ T3522] Zero length message leads to an empty skb [ 32.456657][ T3513] syz.2.20 uses obsolete (PF_INET,SOCK_PACKET) [ 32.466299][ T3513] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 32.486174][ T3525] loop3: detected capacity change from 0 to 2048 [ 32.532452][ T3297] Alternate GPT is invalid, using primary GPT. [ 32.538985][ T3297] loop3: p1 p2 p3 [ 32.572892][ T3525] Alternate GPT is invalid, using primary GPT. [ 32.579459][ T3525] loop3: p1 p2 p3 [ 32.583480][ T12] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 32.597668][ T3530] netlink: 24 bytes leftover after parsing attributes in process `syz.4.26'. [ 32.637673][ T3525] SELinux: ebitmap: truncated map [ 32.681677][ T3537] vlan2: entered allmulticast mode [ 32.686871][ T3537] batadv0: entered allmulticast mode [ 32.696916][ T3525] SELinux: failed to load policy [ 32.769310][ T3539] x_tables: ip_tables: socket match: used from hooks OUTPUT, but only valid from PREROUTING/INPUT [ 32.832053][ T3545] netlink: 8 bytes leftover after parsing attributes in process `syz.4.30'. [ 32.910018][ T3550] loop0: detected capacity change from 0 to 1024 [ 32.921208][ T3554] netlink: 'syz.2.36': attribute type 1 has an invalid length. [ 32.922626][ C1] hrtimer: interrupt took 45588 ns [ 32.953151][ T3550] EXT4-fs error (device loop0): ext4_acquire_dquot:6935: comm syz.0.34: Failed to acquire dquot type 0 [ 32.973307][ T3550] EXT4-fs error (device loop0): mb_free_blocks:1948: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 32.994524][ T3550] EXT4-fs error (device loop0): ext4_do_update_inode:5211: inode #13: comm syz.0.34: corrupted inode contents [ 33.005946][ T3559] netlink: 8 bytes leftover after parsing attributes in process `syz.2.37'. [ 33.016950][ T3550] EXT4-fs error (device loop0): ext4_dirty_inode:6103: inode #13: comm syz.0.34: mark_inode_dirty error [ 33.038826][ T3550] EXT4-fs error (device loop0): ext4_do_update_inode:5211: inode #13: comm syz.0.34: corrupted inode contents [ 33.055397][ T3550] EXT4-fs error (device loop0): __ext4_ext_dirty:207: inode #13: comm syz.0.34: mark_inode_dirty error [ 33.068515][ T3550] EXT4-fs error (device loop0): ext4_do_update_inode:5211: inode #13: comm syz.0.34: corrupted inode contents [ 33.083616][ T3550] EXT4-fs error (device loop0) in ext4_orphan_del:305: Corrupt filesystem [ 33.093569][ T3550] EXT4-fs error (device loop0): ext4_do_update_inode:5211: inode #13: comm syz.0.34: corrupted inode contents [ 33.107936][ T3550] EXT4-fs error (device loop0): ext4_truncate:4255: inode #13: comm syz.0.34: mark_inode_dirty error [ 33.124073][ T3550] EXT4-fs error (device loop0) in ext4_process_orphan:347: Corrupt filesystem [ 33.137697][ T3550] EXT4-fs (loop0): 1 truncate cleaned up [ 33.162322][ T3550] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 33.253180][ T3570] netlink: 8 bytes leftover after parsing attributes in process `syz.1.41'. [ 33.299469][ T3572] netlink: 8 bytes leftover after parsing attributes in process `syz.2.42'. [ 33.519577][ T3584] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 33.526244][ T3584] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 33.534001][ T3584] vhci_hcd vhci_hcd.0: Device attached [ 33.543289][ T3585] vhci_hcd: connection closed [ 33.543572][ T12] vhci_hcd: stop threads [ 33.552678][ T12] vhci_hcd: release socket [ 33.552690][ T12] vhci_hcd: disconnect device [ 33.585229][ T3589] loop2: detected capacity change from 0 to 2048 [ 33.617932][ T3589] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 33.828913][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.865324][ T3600] x_tables: ip_tables: socket match: used from hooks OUTPUT, but only valid from PREROUTING/INPUT [ 34.046524][ T3614] loop3: detected capacity change from 0 to 256 [ 34.060959][ T3614] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 34.172782][ T3621] loop3: detected capacity change from 0 to 128 [ 34.186290][ T3621] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 34.201691][ T3621] ext4 filesystem being mounted at /10/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 34.367851][ T3629] lo: entered promiscuous mode [ 34.372779][ T3629] lo: entered allmulticast mode [ 34.392293][ T3629] netlink: 'syz.3.59': attribute type 39 has an invalid length. [ 34.551315][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.810543][ T3654] 9pnet: Could not find request transport: tcp [ 34.819095][ T3654] dummy0 speed is unknown, defaulting to 1000 [ 34.825437][ T3654] dummy0 speed is unknown, defaulting to 1000 [ 34.849223][ T3654] dummy0 speed is unknown, defaulting to 1000 [ 34.862557][ T3654] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 34.878974][ T3654] infiniband yz2: RDMA CMA: cma_listen_on_dev, error -98 [ 34.902371][ T3654] dummy0 speed is unknown, defaulting to 1000 [ 34.926408][ T3654] dummy0 speed is unknown, defaulting to 1000 [ 34.943960][ T3654] dummy0 speed is unknown, defaulting to 1000 [ 34.960633][ T3654] dummy0 speed is unknown, defaulting to 1000 [ 34.970234][ T3654] dummy0 speed is unknown, defaulting to 1000 [ 35.018275][ T3306] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 35.139007][ T3677] x_tables: ip_tables: socket match: used from hooks OUTPUT, but only valid from PREROUTING/INPUT [ 35.228632][ T3682] loop3: detected capacity change from 0 to 512 [ 35.243202][ T3682] EXT4-fs error (device loop3): ext4_get_journal_inode:5798: comm syz.3.81: inode #16777216: comm syz.3.81: iget: illegal inode # [ 35.265453][ T3682] EXT4-fs (loop3): Remounting filesystem read-only [ 35.272128][ T3682] EXT4-fs (loop3): no journal found [ 35.277659][ T3682] EXT4-fs (loop3): can't get journal size [ 35.289086][ T3682] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended [ 35.305554][ T3682] EXT4-fs (loop3): failed to initialize system zone (-22) [ 35.349251][ T3682] EXT4-fs (loop3): mount failed [ 35.590752][ T3700] x_tables: ip_tables: socket match: used from hooks OUTPUT, but only valid from PREROUTING/INPUT [ 35.640231][ T3701] loop3: detected capacity change from 0 to 512 [ 35.653881][ T3701] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 35.667010][ T3701] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 35.719540][ T29] kauditd_printk_skb: 268 callbacks suppressed [ 35.719557][ T29] audit: type=1400 audit(1745987457.788:384): avc: denied { create } for pid=3703 comm="syz.0.87" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 35.789195][ T3701] EXT4-fs error (device loop3): xattr_find_entry:333: inode #15: comm syz.3.81: corrupted xattr entries [ 35.801751][ T3701] EXT4-fs (loop3): Remounting filesystem read-only [ 35.808300][ T3701] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 35.821445][ T3701] EXT4-fs (loop3): 1 truncate cleaned up [ 35.827780][ T3701] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 35.994357][ T3707] loop0: detected capacity change from 0 to 512 [ 36.010371][ T29] audit: type=1400 audit(1745987457.848:385): avc: denied { listen } for pid=3703 comm="syz.0.87" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 36.030209][ T29] audit: type=1400 audit(1745987457.848:386): avc: denied { ioctl } for pid=3703 comm="syz.0.87" path="socket:[5139]" dev="sockfs" ino=5139 ioctlcmd=0x8924 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 36.256852][ T3701] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.335938][ T3707] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 36.399086][ T3707] EXT4-fs (loop0): 1 truncate cleaned up [ 36.441808][ T3707] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 36.555627][ T29] audit: type=1400 audit(1745987458.618:387): avc: denied { ioctl } for pid=3703 comm="syz.0.87" path="/17/file2/file1" dev="loop0" ino=15 ioctlcmd=0x660b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 36.753004][ T3719] loop4: detected capacity change from 0 to 128 [ 36.967885][ T3719] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 37.025075][ T3726] loop2: detected capacity change from 0 to 1024 [ 37.067845][ T29] audit: type=1400 audit(1745987459.128:388): avc: denied { remount } for pid=3725 comm="syz.2.96" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 37.095739][ T3719] ext4 filesystem being mounted at /23/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 37.251311][ T3732] loop2: detected capacity change from 0 to 1024 [ 37.259161][ T3732] EXT4-fs: Ignoring removed mblk_io_submit option [ 37.276678][ T3732] EXT4-fs: Ignoring removed nobh option [ 37.282325][ T3732] EXT4-fs: Ignoring removed bh option [ 37.292525][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.317049][ T3735] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 37.324800][ T3735] audit: out of memory in audit_log_start [ 37.359825][ T29] audit: type=1326 audit(1745987459.428:389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3718 comm="syz.4.93" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd824c1e969 code=0x0 [ 37.394003][ T3732] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 37.466551][ T29] audit: type=1400 audit(1745987459.518:390): avc: denied { setattr } for pid=3731 comm="syz.2.99" name="file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 37.488885][ T29] audit: type=1400 audit(1745987459.518:391): avc: denied { setopt } for pid=3731 comm="syz.2.99" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 37.532746][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.546906][ T3738] lo: entered promiscuous mode [ 37.551798][ T3738] lo: entered allmulticast mode [ 37.595216][ T3738] netlink: 'syz.4.93': attribute type 39 has an invalid length. [ 37.604244][ T3742] syz.2.102 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 37.619809][ T3743] __nla_validate_parse: 14 callbacks suppressed [ 37.619827][ T3743] netlink: 4 bytes leftover after parsing attributes in process `syz.2.102'. [ 37.662336][ T3746] netlink: 20 bytes leftover after parsing attributes in process `syz.0.104'. [ 37.721522][ T3751] netlink: 8 bytes leftover after parsing attributes in process `syz.3.106'. [ 37.760739][ T3754] loop1: detected capacity change from 0 to 512 [ 37.811303][ T3754] EXT4-fs error (device loop1): ext4_get_journal_inode:5798: comm syz.1.103: inode #16777216: comm syz.1.103: iget: illegal inode # [ 37.864119][ T3759] netlink: 8 bytes leftover after parsing attributes in process `syz.0.108'. [ 37.877257][ T3303] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 37.887654][ T3754] EXT4-fs (loop1): Remounting filesystem read-only [ 37.894230][ T3754] EXT4-fs (loop1): no journal found [ 37.900066][ T3754] EXT4-fs (loop1): can't get journal size [ 37.950484][ T3754] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 38.020649][ T3754] EXT4-fs (loop1): failed to initialize system zone (-22) [ 38.199151][ T3754] EXT4-fs (loop1): mount failed [ 38.379011][ T3780] loop3: detected capacity change from 0 to 512 [ 38.434506][ T3780] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 38.500982][ T3780] EXT4-fs (loop3): 1 truncate cleaned up [ 38.507239][ T3780] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 38.641608][ T3780] netlink: 4 bytes leftover after parsing attributes in process `syz.3.112'. [ 38.696941][ T3783] x_tables: ip_tables: socket match: used from hooks OUTPUT, but only valid from PREROUTING/INPUT [ 38.846158][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.922062][ T3793] loop1: detected capacity change from 0 to 512 [ 38.943035][ T3793] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 38.957716][ T3793] EXT4-fs error (device loop1): xattr_find_entry:333: inode #15: comm syz.1.103: corrupted xattr entries [ 38.969775][ T3793] EXT4-fs (loop1): Remounting filesystem read-only [ 38.976487][ T3793] EXT4-fs (loop1): 1 truncate cleaned up [ 38.982892][ T3793] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.286894][ T3793] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.377928][ T3804] netlink: 20 bytes leftover after parsing attributes in process `syz.0.122'. [ 39.392795][ T3802] FAULT_INJECTION: forcing a failure. [ 39.392795][ T3802] name failslab, interval 1, probability 0, space 0, times 0 [ 39.405565][ T3802] CPU: 1 UID: 0 PID: 3802 Comm: syz.4.120 Not tainted 6.15.0-rc4-syzkaller-00021-gca91b9500108 #0 PREEMPT(voluntary) [ 39.405608][ T3802] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 39.405620][ T3802] Call Trace: [ 39.405627][ T3802] [ 39.405634][ T3802] __dump_stack+0x1d/0x30 [ 39.405655][ T3802] dump_stack_lvl+0xe8/0x140 [ 39.405674][ T3802] dump_stack+0x15/0x1b [ 39.405695][ T3802] should_fail_ex+0x265/0x280 [ 39.405740][ T3802] ? tipc_nametbl_lookup_group+0x451/0x630 [ 39.405769][ T3802] should_failslab+0x8c/0xb0 [ 39.405799][ T3802] __kmalloc_cache_noprof+0x4c/0x320 [ 39.405823][ T3802] ? tipc_nametbl_lookup_group+0x102/0x630 [ 39.405845][ T3802] tipc_nametbl_lookup_group+0x451/0x630 [ 39.405891][ T3802] __tipc_sendmsg+0x409/0x1b00 [ 39.405959][ T3802] ? avc_has_perm_noaudit+0x1b1/0x200 [ 39.406002][ T3802] ? __rcu_read_unlock+0x4f/0x70 [ 39.406023][ T3802] __tipc_sendstream+0xa23/0xb30 [ 39.406063][ T3802] ? selinux_socket_sendmsg+0x175/0x1b0 [ 39.406134][ T3802] ? _raw_spin_unlock_bh+0x36/0x40 [ 39.406168][ T3802] tipc_send_packet+0x65/0x80 [ 39.406201][ T3802] ? __pfx_tipc_send_packet+0x10/0x10 [ 39.406247][ T3802] __sock_sendmsg+0x142/0x180 [ 39.406273][ T3802] ____sys_sendmsg+0x31e/0x4e0 [ 39.406346][ T3802] ___sys_sendmsg+0x17b/0x1d0 [ 39.406383][ T3802] __x64_sys_sendmsg+0xd4/0x160 [ 39.406411][ T3802] x64_sys_call+0x2999/0x2fb0 [ 39.406511][ T3802] do_syscall_64+0xd0/0x1a0 [ 39.406536][ T3802] ? clear_bhb_loop+0x25/0x80 [ 39.406563][ T3802] ? clear_bhb_loop+0x25/0x80 [ 39.406619][ T3802] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 39.406644][ T3802] RIP: 0033:0x7fd824c1e969 [ 39.406658][ T3802] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 39.406674][ T3802] RSP: 002b:00007fd823287038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 39.406765][ T3802] RAX: ffffffffffffffda RBX: 00007fd824e45fa0 RCX: 00007fd824c1e969 [ 39.406779][ T3802] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000004 [ 39.406790][ T3802] RBP: 00007fd823287090 R08: 0000000000000000 R09: 0000000000000000 [ 39.406835][ T3802] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 39.406878][ T3802] R13: 0000000000000000 R14: 00007fd824e45fa0 R15: 00007ffd7dc1ef78 [ 39.406895][ T3802] [ 40.004965][ T3807] SELinux: failed to load policy [ 40.018549][ T3811] netlink: 8 bytes leftover after parsing attributes in process `syz.0.125'. [ 40.042218][ T3807] netlink: 96 bytes leftover after parsing attributes in process `syz.2.123'. [ 40.132769][ T3817] netlink: 8 bytes leftover after parsing attributes in process `syz.3.126'. [ 40.224921][ T3823] x_tables: ip_tables: socket match: used from hooks OUTPUT, but only valid from PREROUTING/INPUT [ 40.492404][ T3834] netlink: 4 bytes leftover after parsing attributes in process `syz.3.133'. [ 40.517027][ T3838] mmap: syz.0.135 (3838) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 40.568247][ T3838] loop0: detected capacity change from 0 to 256 [ 40.603576][ T3846] FAULT_INJECTION: forcing a failure. [ 40.603576][ T3846] name failslab, interval 1, probability 0, space 0, times 0 [ 40.616369][ T3846] CPU: 0 UID: 0 PID: 3846 Comm: syz.3.139 Not tainted 6.15.0-rc4-syzkaller-00021-gca91b9500108 #0 PREEMPT(voluntary) [ 40.616456][ T3846] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 40.616471][ T3846] Call Trace: [ 40.616478][ T3846] [ 40.616486][ T3846] __dump_stack+0x1d/0x30 [ 40.616560][ T3846] dump_stack_lvl+0xe8/0x140 [ 40.616583][ T3846] dump_stack+0x15/0x1b [ 40.616603][ T3846] should_fail_ex+0x265/0x280 [ 40.616633][ T3846] should_failslab+0x8c/0xb0 [ 40.616685][ T3846] __kmalloc_noprof+0xa5/0x3e0 [ 40.616752][ T3846] ? blk_rq_map_user_iov+0x442/0x14a0 [ 40.616776][ T3846] blk_rq_map_user_iov+0x442/0x14a0 [ 40.616842][ T3846] ? blk_mq_get_tag+0x4f9/0x570 [ 40.616878][ T3846] ? __blk_mq_alloc_requests+0xd86/0xe30 [ 40.616941][ T3846] blk_rq_map_user_io+0x18f/0x260 [ 40.616963][ T3846] ? __rcu_read_unlock+0x4f/0x70 [ 40.616987][ T3846] ? sg_link_reserve+0x117/0x140 [ 40.617091][ T3846] sg_common_write+0xb06/0xc30 [ 40.617129][ T3846] sg_write+0x6b5/0x750 [ 40.617165][ T3846] vfs_writev+0x3eb/0x870 [ 40.617199][ T3846] ? __pfx_sg_write+0x10/0x10 [ 40.617256][ T3846] do_writev+0xe7/0x210 [ 40.617288][ T3846] __x64_sys_writev+0x45/0x50 [ 40.617365][ T3846] x64_sys_call+0x2006/0x2fb0 [ 40.617385][ T3846] do_syscall_64+0xd0/0x1a0 [ 40.617458][ T3846] ? clear_bhb_loop+0x25/0x80 [ 40.617528][ T3846] ? clear_bhb_loop+0x25/0x80 [ 40.617554][ T3846] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 40.617579][ T3846] RIP: 0033:0x7f4a41a9e969 [ 40.617597][ T3846] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 40.617660][ T3846] RSP: 002b:00007f4a40107038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 40.617683][ T3846] RAX: ffffffffffffffda RBX: 00007f4a41cc5fa0 RCX: 00007f4a41a9e969 [ 40.617699][ T3846] RDX: 0000000000000002 RSI: 0000200000000400 RDI: 0000000000000003 [ 40.617714][ T3846] RBP: 00007f4a40107090 R08: 0000000000000000 R09: 0000000000000000 [ 40.617728][ T3846] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 40.617743][ T3846] R13: 0000000000000000 R14: 00007f4a41cc5fa0 R15: 00007ffdfa1c5648 [ 40.617764][ T3846] [ 41.081244][ T29] kauditd_printk_skb: 46 callbacks suppressed [ 41.081258][ T29] audit: type=1400 audit(1745987463.148:436): avc: denied { write } for pid=3858 comm="gtp" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 41.106772][ T3859] netlink: 'gtp': attribute type 10 has an invalid length. [ 41.116475][ T3859] hsr_slave_0: left promiscuous mode [ 41.127644][ T3859] hsr_slave_1: left promiscuous mode [ 41.277981][ T29] audit: type=1400 audit(1745987463.348:437): avc: denied { map } for pid=3873 comm="syz.0.147" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=6265 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 41.302139][ T29] audit: type=1400 audit(1745987463.348:438): avc: denied { read write } for pid=3873 comm="syz.0.147" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=6265 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 41.404251][ T3886] x_tables: ip_tables: socket match: used from hooks OUTPUT, but only valid from PREROUTING/INPUT [ 41.479760][ T3888] loop3: detected capacity change from 0 to 512 [ 41.493911][ T3895] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 41.515981][ T29] audit: type=1400 audit(1745987463.408:439): avc: denied { write } for pid=3877 comm="syz.4.149" name="raw" dev="proc" ino=4026532890 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 41.518347][ T3895] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 41.538697][ T29] audit: type=1400 audit(1745987463.558:440): avc: denied { ioctl } for pid=3892 comm="syz.4.154" path="/dev/raw-gadget" dev="devtmpfs" ino=142 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 41.576977][ T3888] EXT4-fs error (device loop3): ext4_get_journal_inode:5798: comm syz.3.151: inode #16777216: comm syz.3.151: iget: illegal inode # [ 41.611152][ T3888] EXT4-fs (loop3): Remounting filesystem read-only [ 41.617769][ T3888] EXT4-fs (loop3): no journal found [ 41.622984][ T3888] EXT4-fs (loop3): can't get journal size [ 41.629862][ T29] audit: type=1400 audit(1745987463.578:441): avc: denied { connect } for pid=3892 comm="syz.4.154" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 41.653105][ T3898] loop0: detected capacity change from 0 to 512 [ 41.666983][ T3898] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 41.789348][ T29] audit: type=1400 audit(1745987463.778:442): avc: denied { mount } for pid=3903 comm="syz.4.156" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 41.811876][ T29] audit: type=1400 audit(1745987463.788:443): avc: denied { search } for pid=3903 comm="syz.4.156" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 41.833751][ T29] audit: type=1400 audit(1745987463.788:444): avc: denied { mounton } for pid=3903 comm="syz.4.156" path="/32/file0" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 41.859516][ T3888] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended [ 41.869366][ T3898] EXT4-fs (loop0): 1 truncate cleaned up [ 41.875229][ T3888] EXT4-fs (loop3): failed to initialize system zone (-22) [ 41.883043][ T3898] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 41.915498][ T3888] EXT4-fs (loop3): mount failed [ 41.960891][ T29] audit: type=1400 audit(1745987463.858:445): avc: denied { unmount } for pid=3303 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 42.240757][ T3915] loop2: detected capacity change from 0 to 512 [ 42.251581][ T3915] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 42.310015][ T3922] loop3: detected capacity change from 0 to 512 [ 42.317385][ T3922] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 42.330396][ T3922] EXT4-fs error (device loop3): xattr_find_entry:333: inode #15: comm syz.3.151: corrupted xattr entries [ 42.342142][ T3922] EXT4-fs (loop3): Remounting filesystem read-only [ 42.348806][ T3922] EXT4-fs (loop3): 1 truncate cleaned up [ 42.355648][ T3922] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.661351][ T3922] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.678460][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.721608][ T3927] FAULT_INJECTION: forcing a failure. [ 42.721608][ T3927] name failslab, interval 1, probability 0, space 0, times 0 [ 42.734485][ T3927] CPU: 0 UID: 0 PID: 3927 Comm: syz.4.162 Not tainted 6.15.0-rc4-syzkaller-00021-gca91b9500108 #0 PREEMPT(voluntary) [ 42.734512][ T3927] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 42.734524][ T3927] Call Trace: [ 42.734530][ T3927] [ 42.734537][ T3927] __dump_stack+0x1d/0x30 [ 42.734589][ T3927] dump_stack_lvl+0xe8/0x140 [ 42.734613][ T3927] dump_stack+0x15/0x1b [ 42.734634][ T3927] should_fail_ex+0x265/0x280 [ 42.734709][ T3927] should_failslab+0x8c/0xb0 [ 42.734805][ T3927] kmem_cache_alloc_noprof+0x50/0x310 [ 42.734848][ T3927] ? alloc_empty_file+0x76/0x200 [ 42.734883][ T3927] ? mntput+0x4b/0x80 [ 42.734899][ T3927] alloc_empty_file+0x76/0x200 [ 42.734937][ T3927] path_openat+0x68/0x2170 [ 42.734964][ T3927] ? _parse_integer_limit+0x170/0x190 [ 42.734992][ T3927] ? kstrtoull+0x111/0x140 [ 42.735020][ T3927] ? kstrtouint+0x76/0xc0 [ 42.735131][ T3927] do_filp_open+0x109/0x230 [ 42.735166][ T3927] do_sys_openat2+0xa6/0x110 [ 42.735191][ T3927] __x64_sys_openat+0xf2/0x120 [ 42.735217][ T3927] x64_sys_call+0x1af/0x2fb0 [ 42.735243][ T3927] do_syscall_64+0xd0/0x1a0 [ 42.735264][ T3927] ? clear_bhb_loop+0x25/0x80 [ 42.735328][ T3927] ? clear_bhb_loop+0x25/0x80 [ 42.735349][ T3927] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 42.735368][ T3927] RIP: 0033:0x7fd824c1d2d0 [ 42.735382][ T3927] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 49 94 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 9c 94 02 00 8b 44 [ 42.735431][ T3927] RSP: 002b:00007fd823286b70 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 42.735454][ T3927] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007fd824c1d2d0 [ 42.735469][ T3927] RDX: 0000000000000002 RSI: 00007fd823286c10 RDI: 00000000ffffff9c [ 42.735484][ T3927] RBP: 00007fd823286c10 R08: 0000000000000000 R09: 00007fd823286987 [ 42.735499][ T3927] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 42.735512][ T3927] R13: 0000000000000000 R14: 00007fd824e45fa0 R15: 00007ffd7dc1ef78 [ 42.735529][ T3927] [ 43.467464][ T3935] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.635100][ T3910] block device autoloading is deprecated and will be removed. [ 43.653390][ T3936] dummy0 speed is unknown, defaulting to 1000 [ 43.683535][ T3910] syz.2.158: attempt to access beyond end of device [ 43.683535][ T3910] md33: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 43.707674][ T3935] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.809868][ T3935] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.834917][ T3942] __nla_validate_parse: 8 callbacks suppressed [ 43.835000][ T3942] netlink: 20 bytes leftover after parsing attributes in process `syz.1.168'. [ 43.923474][ T3935] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.979773][ T3963] loop1: detected capacity change from 0 to 512 [ 43.996782][ T3963] EXT4-fs error (device loop1): ext4_orphan_get:1391: inode #15: comm syz.1.176: casefold flag without casefold feature [ 44.023816][ T3963] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.176: couldn't read orphan inode 15 (err -117) [ 44.062730][ T3963] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.089424][ T3966] netlink: 8 bytes leftover after parsing attributes in process `syz.2.177'. [ 44.128504][ T3963] FAULT_INJECTION: forcing a failure. [ 44.128504][ T3963] name failslab, interval 1, probability 0, space 0, times 0 [ 44.142017][ T3963] CPU: 1 UID: 0 PID: 3963 Comm: syz.1.176 Not tainted 6.15.0-rc4-syzkaller-00021-gca91b9500108 #0 PREEMPT(voluntary) [ 44.142050][ T3963] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 44.142062][ T3963] Call Trace: [ 44.142069][ T3963] [ 44.142076][ T3963] __dump_stack+0x1d/0x30 [ 44.142130][ T3963] dump_stack_lvl+0xe8/0x140 [ 44.142148][ T3963] dump_stack+0x15/0x1b [ 44.142163][ T3963] should_fail_ex+0x265/0x280 [ 44.142195][ T3963] should_failslab+0x8c/0xb0 [ 44.142264][ T3963] kmem_cache_alloc_noprof+0x50/0x310 [ 44.142305][ T3963] ? ext4_mb_new_blocks+0x79f/0x2050 [ 44.142365][ T3963] ext4_mb_new_blocks+0x79f/0x2050 [ 44.142397][ T3963] ? ext4_get_branch+0x321/0x3a0 [ 44.142455][ T3963] ? ext4_get_branch+0x321/0x3a0 [ 44.142492][ T3963] ? ext4_ind_map_blocks+0x814/0x14f0 [ 44.142584][ T3963] ext4_ind_map_blocks+0xb4c/0x14f0 [ 44.142640][ T3963] ? ext4_map_query_blocks+0x100/0x170 [ 44.142682][ T3963] ext4_map_blocks+0x555/0xd00 [ 44.142716][ T3963] _ext4_get_block+0x10a/0x350 [ 44.142805][ T3963] ext4_get_block+0x39/0x50 [ 44.142832][ T3963] ext4_block_write_begin+0x300/0x970 [ 44.142867][ T3963] ? __pfx_ext4_get_block+0x10/0x10 [ 44.142897][ T3963] ? folio_mapping+0xb9/0x120 [ 44.142920][ T3963] ext4_write_begin+0x43c/0xc30 [ 44.142997][ T3963] generic_perform_write+0x181/0x490 [ 44.143091][ T3963] ext4_buffered_write_iter+0x1ee/0x3c0 [ 44.143122][ T3963] ext4_file_write_iter+0x383/0xf00 [ 44.143220][ T3963] ? kstrtouint_from_user+0x9f/0xf0 [ 44.143258][ T3963] ? avc_policy_seqno+0x15/0x30 [ 44.143323][ T3963] ? selinux_file_permission+0x213/0x360 [ 44.143438][ T3963] ? __pfx_ext4_file_write_iter+0x10/0x10 [ 44.143472][ T3963] vfs_write+0x49d/0x8d0 [ 44.143509][ T3963] ksys_write+0xda/0x1a0 [ 44.143534][ T3963] __x64_sys_write+0x40/0x50 [ 44.143616][ T3963] x64_sys_call+0x2cdd/0x2fb0 [ 44.143649][ T3963] do_syscall_64+0xd0/0x1a0 [ 44.143669][ T3963] ? clear_bhb_loop+0x25/0x80 [ 44.143704][ T3963] ? clear_bhb_loop+0x25/0x80 [ 44.143781][ T3963] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 44.143828][ T3963] RIP: 0033:0x7fbf91a3e969 [ 44.143843][ T3963] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 44.143878][ T3963] RSP: 002b:00007fbf900a7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 44.143900][ T3963] RAX: ffffffffffffffda RBX: 00007fbf91c65fa0 RCX: 00007fbf91a3e969 [ 44.143915][ T3963] RDX: 000000000208e24b RSI: 0000200000000000 RDI: 0000000000000004 [ 44.143931][ T3963] RBP: 00007fbf900a7090 R08: 0000000000000000 R09: 0000000000000000 [ 44.143952][ T3963] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 44.143966][ T3963] R13: 0000000000000000 R14: 00007fbf91c65fa0 R15: 00007fffdbd5b888 [ 44.143989][ T3963] [ 44.212861][ T3935] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.311826][ T3969] loop3: detected capacity change from 0 to 512 [ 44.318298][ T3935] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.324146][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.331068][ T3954] loop0: detected capacity change from 0 to 256 [ 44.466509][ T3954] vfat: Unknown parameter ' [ 44.466509][ T3954] ' [ 44.476821][ T3969] EXT4-fs error (device loop3): ext4_orphan_get:1391: inode #15: comm syz.3.179: casefold flag without casefold feature [ 44.493585][ T3969] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.179: couldn't read orphan inode 15 (err -117) [ 44.510916][ T3935] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.522722][ T3969] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.537773][ T3969] netlink: 100 bytes leftover after parsing attributes in process `syz.3.179'. [ 44.568446][ T3935] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.697716][ T3980] FAULT_INJECTION: forcing a failure. [ 44.697716][ T3980] name failslab, interval 1, probability 0, space 0, times 0 [ 44.710490][ T3980] CPU: 1 UID: 0 PID: 3980 Comm: syz.0.180 Not tainted 6.15.0-rc4-syzkaller-00021-gca91b9500108 #0 PREEMPT(voluntary) [ 44.710591][ T3980] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 44.710607][ T3980] Call Trace: [ 44.710616][ T3980] [ 44.710675][ T3980] __dump_stack+0x1d/0x30 [ 44.710697][ T3980] dump_stack_lvl+0xe8/0x140 [ 44.710719][ T3980] dump_stack+0x15/0x1b [ 44.710739][ T3980] should_fail_ex+0x265/0x280 [ 44.710854][ T3980] should_failslab+0x8c/0xb0 [ 44.710882][ T3980] kmem_cache_alloc_noprof+0x50/0x310 [ 44.710936][ T3980] ? getname_flags+0x80/0x3b0 [ 44.710975][ T3980] getname_flags+0x80/0x3b0 [ 44.711012][ T3980] user_path_at+0x28/0x130 [ 44.711036][ T3980] __se_sys_mount+0x25b/0x2e0 [ 44.711108][ T3980] ? fput+0x8f/0xc0 [ 44.711127][ T3980] __x64_sys_mount+0x67/0x80 [ 44.711157][ T3980] x64_sys_call+0xd36/0x2fb0 [ 44.711245][ T3980] do_syscall_64+0xd0/0x1a0 [ 44.711266][ T3980] ? clear_bhb_loop+0x25/0x80 [ 44.711287][ T3980] ? clear_bhb_loop+0x25/0x80 [ 44.711320][ T3980] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 44.711347][ T3980] RIP: 0033:0x7f3ee55ae969 [ 44.711366][ T3980] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 44.711383][ T3980] RSP: 002b:00007f3ee3c17038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 44.711401][ T3980] RAX: ffffffffffffffda RBX: 00007f3ee57d5fa0 RCX: 00007f3ee55ae969 [ 44.711454][ T3980] RDX: 00002000000003c0 RSI: 0000200000000300 RDI: 0000000000000000 [ 44.711469][ T3980] RBP: 00007f3ee3c17090 R08: 0000000000000000 R09: 0000000000000000 [ 44.711536][ T3980] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 44.711549][ T3980] R13: 0000000000000000 R14: 00007f3ee57d5fa0 R15: 00007ffd9e5236d8 [ 44.711567][ T3980] [ 44.945186][ T3990] loop2: detected capacity change from 0 to 512 [ 44.952276][ T3990] ext2: Unknown parameter 'uid' [ 45.004272][ T3992] netlink: 20 bytes leftover after parsing attributes in process `syz.4.187'. [ 45.071064][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.093908][ T4002] loop0: detected capacity change from 0 to 512 [ 45.118119][ T4002] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 45.143184][ T4004] netlink: 8 bytes leftover after parsing attributes in process `syz.3.192'. [ 45.192503][ T4006] FAULT_INJECTION: forcing a failure. [ 45.192503][ T4006] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 45.205760][ T4006] CPU: 1 UID: 0 PID: 4006 Comm: syz.1.193 Not tainted 6.15.0-rc4-syzkaller-00021-gca91b9500108 #0 PREEMPT(voluntary) [ 45.205831][ T4006] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 45.205843][ T4006] Call Trace: [ 45.205849][ T4006] [ 45.205856][ T4006] __dump_stack+0x1d/0x30 [ 45.205876][ T4006] dump_stack_lvl+0xe8/0x140 [ 45.205950][ T4006] dump_stack+0x15/0x1b [ 45.205966][ T4006] should_fail_ex+0x265/0x280 [ 45.205996][ T4006] should_fail+0xb/0x20 [ 45.206087][ T4006] should_fail_usercopy+0x1a/0x20 [ 45.206104][ T4006] _copy_to_user+0x20/0xa0 [ 45.206124][ T4006] simple_read_from_buffer+0xb5/0x130 [ 45.206151][ T4006] proc_fail_nth_read+0x100/0x140 [ 45.206213][ T4006] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 45.206236][ T4006] vfs_read+0x19d/0x6f0 [ 45.206258][ T4006] ? __rcu_read_unlock+0x4f/0x70 [ 45.206282][ T4006] ? __fget_files+0x184/0x1c0 [ 45.206316][ T4006] ksys_read+0xda/0x1a0 [ 45.206380][ T4006] __x64_sys_read+0x40/0x50 [ 45.206403][ T4006] x64_sys_call+0x2d77/0x2fb0 [ 45.206425][ T4006] do_syscall_64+0xd0/0x1a0 [ 45.206530][ T4006] ? clear_bhb_loop+0x25/0x80 [ 45.206557][ T4006] ? clear_bhb_loop+0x25/0x80 [ 45.206610][ T4006] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 45.206634][ T4006] RIP: 0033:0x7fbf91a3d37c [ 45.206661][ T4006] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 45.206719][ T4006] RSP: 002b:00007fbf900a7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 45.206743][ T4006] RAX: ffffffffffffffda RBX: 00007fbf91c65fa0 RCX: 00007fbf91a3d37c [ 45.206755][ T4006] RDX: 000000000000000f RSI: 00007fbf900a70a0 RDI: 0000000000000007 [ 45.206793][ T4006] RBP: 00007fbf900a7090 R08: 0000000000000000 R09: 0000000000000000 [ 45.206805][ T4006] R10: 0000000002000000 R11: 0000000000000246 R12: 0000000000000001 [ 45.206817][ T4006] R13: 0000000000000000 R14: 00007fbf91c65fa0 R15: 00007fffdbd5b888 [ 45.206835][ T4006] [ 45.241197][ T4002] EXT4-fs (loop0): 1 truncate cleaned up [ 45.482458][ T4002] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 45.501165][ T4012] loop1: detected capacity change from 0 to 8192 [ 45.511650][ T4018] x_tables: ip_tables: socket match: used from hooks OUTPUT, but only valid from PREROUTING/INPUT [ 45.699998][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.731645][ T4030] netlink: 20 bytes leftover after parsing attributes in process `syz.4.204'. [ 45.950240][ T4042] netlink: 8 bytes leftover after parsing attributes in process `syz.0.207'. [ 45.998026][ T4044] netlink: 8 bytes leftover after parsing attributes in process `syz.3.208'. [ 46.043254][ T4049] netlink: 8 bytes leftover after parsing attributes in process `syz.4.210'. [ 46.081379][ T4052] vlan2: entered allmulticast mode [ 46.086737][ T4052] dummy0: entered allmulticast mode [ 46.154689][ T4056] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 46.255435][ T4062] netlink: 20 bytes leftover after parsing attributes in process `syz.0.217'. [ 46.272091][ T4068] loop3: detected capacity change from 0 to 512 [ 46.281749][ T4068] EXT4-fs: Ignoring removed nobh option [ 46.287464][ T4068] EXT4-fs: Ignoring removed i_version option [ 46.293822][ T4068] EXT4-fs: Mount option(s) incompatible with ext2 [ 46.333180][ T29] kauditd_printk_skb: 108 callbacks suppressed [ 46.333196][ T29] audit: type=1400 audit(1745987468.398:552): avc: denied { read } for pid=4067 comm="syz.3.219" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 46.367719][ T4068] program syz.3.219 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 46.377302][ T4068] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 46.512892][ T4080] loop3: detected capacity change from 0 to 1024 [ 46.519981][ T4080] EXT4-fs: Ignoring removed bh option [ 46.585462][ T4080] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 46.623691][ T4080] EXT4-fs error (device loop3): mb_free_blocks:1948: group 0, inode 15: block 225:freeing already freed block (bit 14); block bitmap corrupt. [ 46.639816][ T29] audit: type=1400 audit(1745987468.668:553): avc: denied { setcheckreqprot } for pid=4082 comm="syz.1.226" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 46.738560][ T4093] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 46.760478][ T4096] loop0: detected capacity change from 0 to 512 [ 46.771503][ T4096] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 46.785766][ T4096] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -2 [ 46.810151][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.847306][ T4101] loop2: detected capacity change from 0 to 1024 [ 46.854283][ T4101] EXT4-fs: inline encryption not supported [ 46.861653][ T4101] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 46.985607][ T4101] EXT4-fs (loop2): stripe (7) is not aligned with cluster size (16), stripe is disabled [ 46.998271][ T4096] EXT4-fs (loop0): 1 truncate cleaned up [ 47.005594][ T4101] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.019869][ T4096] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.063377][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.090926][ T4096] EXT4-fs error (device loop0): ext4_append:79: inode #2: comm syz.0.229: Logical block already allocated [ 47.131408][ T29] audit: type=1400 audit(1745987469.198:554): avc: denied { remount } for pid=4095 comm="syz.0.229" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 47.152315][ T4096] ext4: Unknown parameter 'nonumtail' [ 47.191928][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.226390][ T4122] x_tables: ip_tables: socket match: used from hooks OUTPUT, but only valid from PREROUTING/INPUT [ 47.251942][ T4114] $H: renamed from bond0 (while UP) [ 47.282768][ T4114] $H: entered promiscuous mode [ 47.289987][ T4114] bond_slave_0: entered promiscuous mode [ 47.297369][ T4114] bond_slave_1: entered promiscuous mode [ 47.326829][ T29] audit: type=1400 audit(1745987469.388:555): avc: denied { write } for pid=4125 comm="syz.0.240" name="001" dev="devtmpfs" ino=171 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 47.397181][ T4126] hub 9-0:1.0: USB hub found [ 47.402181][ T4126] hub 9-0:1.0: 8 ports detected [ 47.433786][ T4131] netlink: 'syz.2.242': attribute type 4 has an invalid length. [ 47.520107][ T4136] loop4: detected capacity change from 0 to 512 [ 47.587217][ T4136] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 47.596095][ T4136] EXT4-fs (loop4): invalid journal inode [ 47.604017][ T4136] EXT4-fs (loop4): can't get journal size [ 47.614254][ T4136] EXT4-fs (loop4): 1 truncate cleaned up [ 47.630528][ T4136] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 47.676087][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.703331][ T29] audit: type=1400 audit(1745987469.768:556): avc: denied { bind } for pid=4138 comm="syz.1.245" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 47.723649][ T4143] FAULT_INJECTION: forcing a failure. [ 47.723649][ T4143] name failslab, interval 1, probability 0, space 0, times 0 [ 47.736396][ T4143] CPU: 1 UID: 0 PID: 4143 Comm: syz.0.246 Not tainted 6.15.0-rc4-syzkaller-00021-gca91b9500108 #0 PREEMPT(voluntary) [ 47.736489][ T4143] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 47.736500][ T4143] Call Trace: [ 47.736505][ T4143] [ 47.736512][ T4143] __dump_stack+0x1d/0x30 [ 47.736562][ T4143] dump_stack_lvl+0xe8/0x140 [ 47.736585][ T4143] dump_stack+0x15/0x1b [ 47.736605][ T4143] should_fail_ex+0x265/0x280 [ 47.736716][ T4143] ? getname_flags+0x208/0x3b0 [ 47.736758][ T4143] should_failslab+0x8c/0xb0 [ 47.736793][ T4143] __kmalloc_cache_noprof+0x4c/0x320 [ 47.736816][ T4143] getname_flags+0x208/0x3b0 [ 47.736863][ T4143] io_openat2_prep+0x1a5/0x310 [ 47.736893][ T4143] io_submit_sqes+0x5cb/0x1000 [ 47.736999][ T4143] __se_sys_io_uring_enter+0x1c1/0x1b70 [ 47.737070][ T4143] ? __rcu_read_unlock+0x4f/0x70 [ 47.737121][ T4143] ? get_pid_task+0x96/0xd0 [ 47.737139][ T4143] ? proc_fail_nth_write+0x12d/0x160 [ 47.737224][ T4143] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 47.737252][ T4143] ? vfs_write+0x75e/0x8d0 [ 47.737274][ T4143] ? __rcu_read_unlock+0x4f/0x70 [ 47.737292][ T4143] ? __fget_files+0x184/0x1c0 [ 47.737320][ T4143] ? fput+0x8f/0xc0 [ 47.737360][ T4143] __x64_sys_io_uring_enter+0x78/0x90 [ 47.737395][ T4143] x64_sys_call+0x28c8/0x2fb0 [ 47.737417][ T4143] do_syscall_64+0xd0/0x1a0 [ 47.737441][ T4143] ? clear_bhb_loop+0x25/0x80 [ 47.737496][ T4143] ? clear_bhb_loop+0x25/0x80 [ 47.737520][ T4143] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 47.737546][ T4143] RIP: 0033:0x7f3ee55ae969 [ 47.737561][ T4143] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 47.737623][ T4143] RSP: 002b:00007f3ee3c17038 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 47.737642][ T4143] RAX: ffffffffffffffda RBX: 00007f3ee57d5fa0 RCX: 00007f3ee55ae969 [ 47.737653][ T4143] RDX: 000000000000addf RSI: 0000000000003516 RDI: 0000000000000003 [ 47.737731][ T4143] RBP: 00007f3ee3c17090 R08: 0000000000000000 R09: 000000000001517f [ 47.737742][ T4143] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000001 [ 47.737753][ T4143] R13: 0000000000000000 R14: 00007f3ee57d5fa0 R15: 00007ffd9e5236d8 [ 47.737769][ T4143] [ 48.100177][ T4155] x_tables: ip_tables: socket match: used from hooks OUTPUT, but only valid from PREROUTING/INPUT [ 48.118288][ T29] audit: type=1400 audit(1745987470.188:557): avc: denied { name_bind } for pid=4157 comm="syz.0.252" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 48.140226][ T29] audit: type=1400 audit(1745987470.188:558): avc: denied { node_bind } for pid=4157 comm="syz.0.252" saddr=172.20.20.170 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 48.261485][ T3381] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 48.288145][ T29] audit: type=1400 audit(1745987470.328:559): avc: denied { read write } for pid=4163 comm="syz.3.254" name="uhid" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 48.296554][ T3381] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 48.311435][ T29] audit: type=1400 audit(1745987470.328:560): avc: denied { open } for pid=4163 comm="syz.3.254" path="/dev/uhid" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 48.358455][ T4171] loop0: detected capacity change from 0 to 512 [ 48.395282][ T4171] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 48.439147][ T4170] SELinux: syz.4.250 (4170) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 48.456492][ T4171] EXT4-fs (loop0): 1 truncate cleaned up [ 48.476845][ T4171] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 48.849805][ T4164] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 48.872420][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.910396][ T4178] FAULT_INJECTION: forcing a failure. [ 48.910396][ T4178] name failslab, interval 1, probability 0, space 0, times 0 [ 48.923163][ T4178] CPU: 1 UID: 0 PID: 4178 Comm: syz.2.257 Not tainted 6.15.0-rc4-syzkaller-00021-gca91b9500108 #0 PREEMPT(voluntary) [ 48.923240][ T4178] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 48.923255][ T4178] Call Trace: [ 48.923263][ T4178] [ 48.923271][ T4178] __dump_stack+0x1d/0x30 [ 48.923291][ T4178] dump_stack_lvl+0xe8/0x140 [ 48.923310][ T4178] dump_stack+0x15/0x1b [ 48.923337][ T4178] should_fail_ex+0x265/0x280 [ 48.923374][ T4178] should_failslab+0x8c/0xb0 [ 48.923401][ T4178] kmem_cache_alloc_lru_noprof+0x55/0x310 [ 48.923438][ T4178] ? debugfs_alloc_inode+0x34/0x40 [ 48.923589][ T4178] ? __pfx_debugfs_alloc_inode+0x10/0x10 [ 48.923616][ T4178] debugfs_alloc_inode+0x34/0x40 [ 48.923642][ T4178] alloc_inode+0x3d/0x170 [ 48.923669][ T4178] new_inode+0x1d/0xe0 [ 48.923762][ T4178] debugfs_create_dir+0xc0/0x2b0 [ 48.923785][ T4178] ldisc_open+0x1c3/0x530 [ 48.923813][ T4178] ? vfree+0x374/0x3f0 [ 48.923835][ T4178] tty_ldisc_open+0x5a/0xb0 [ 48.923908][ T4178] tty_set_ldisc+0x1db/0x380 [ 48.923930][ T4178] tiocsetd+0x51/0x60 [ 48.923956][ T4178] tty_ioctl+0xa7f/0xb80 [ 48.923985][ T4178] ? __pfx_tty_ioctl+0x10/0x10 [ 48.924060][ T4178] __se_sys_ioctl+0xcb/0x140 [ 48.924142][ T4178] __x64_sys_ioctl+0x43/0x50 [ 48.924219][ T4178] x64_sys_call+0x19a8/0x2fb0 [ 48.924292][ T4178] do_syscall_64+0xd0/0x1a0 [ 48.924319][ T4178] ? clear_bhb_loop+0x25/0x80 [ 48.924346][ T4178] ? clear_bhb_loop+0x25/0x80 [ 48.924372][ T4178] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 48.924404][ T4178] RIP: 0033:0x7f8b7922e969 [ 48.924471][ T4178] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 48.924493][ T4178] RSP: 002b:00007f8b77811038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 48.924578][ T4178] RAX: ffffffffffffffda RBX: 00007f8b79456080 RCX: 00007f8b7922e969 [ 48.924656][ T4178] RDX: 0000200000000000 RSI: 0000000000005423 RDI: 0000000000000003 [ 48.924671][ T4178] RBP: 00007f8b77811090 R08: 0000000000000000 R09: 0000000000000000 [ 48.924686][ T4178] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 48.924731][ T4178] R13: 0000000000000001 R14: 00007f8b79456080 R15: 00007fff7670af48 [ 48.924795][ T4178] [ 48.924803][ T4178] debugfs: out of free dentries, can not create directory 'ptm0' [ 49.031443][ T4182] __nla_validate_parse: 5 callbacks suppressed [ 49.031464][ T4182] netlink: 8 bytes leftover after parsing attributes in process `syz.0.258'. [ 49.063552][ T4183] hub 9-0:1.0: USB hub found [ 49.180645][ T4183] hub 9-0:1.0: 8 ports detected [ 49.243047][ T4188] pimreg: entered allmulticast mode [ 49.253031][ T4188] pimreg: left allmulticast mode [ 49.267876][ T4192] netlink: 20 bytes leftover after parsing attributes in process `syz.4.263'. [ 49.278505][ T4192] FAULT_INJECTION: forcing a failure. [ 49.278505][ T4192] name failslab, interval 1, probability 0, space 0, times 0 [ 49.291179][ T4192] CPU: 1 UID: 0 PID: 4192 Comm: syz.4.263 Not tainted 6.15.0-rc4-syzkaller-00021-gca91b9500108 #0 PREEMPT(voluntary) [ 49.291224][ T4192] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 49.291240][ T4192] Call Trace: [ 49.291297][ T4192] [ 49.291330][ T4192] __dump_stack+0x1d/0x30 [ 49.291416][ T4192] dump_stack_lvl+0xe8/0x140 [ 49.291440][ T4192] dump_stack+0x15/0x1b [ 49.291496][ T4192] should_fail_ex+0x265/0x280 [ 49.291535][ T4192] should_failslab+0x8c/0xb0 [ 49.291571][ T4192] kmem_cache_alloc_noprof+0x50/0x310 [ 49.291618][ T4192] ? skb_clone+0x151/0x1f0 [ 49.291638][ T4192] skb_clone+0x151/0x1f0 [ 49.291657][ T4192] __netlink_deliver_tap+0x2c9/0x500 [ 49.291700][ T4192] __netlink_sendskb+0xc3/0xd0 [ 49.291729][ T4192] netlink_dump+0x698/0x7f0 [ 49.291921][ T4192] __netlink_dump_start+0x43e/0x520 [ 49.292020][ T4192] genl_family_rcv_msg_dumpit+0x115/0x180 [ 49.292051][ T4192] ? __pfx_genl_start+0x10/0x10 [ 49.292078][ T4192] ? __pfx_genl_dumpit+0x10/0x10 [ 49.292103][ T4192] ? __pfx_genl_done+0x10/0x10 [ 49.292136][ T4192] genl_rcv_msg+0x3f0/0x460 [ 49.292194][ T4192] ? __pfx_nl80211_dump_station+0x10/0x10 [ 49.292231][ T4192] netlink_rcv_skb+0x120/0x220 [ 49.292322][ T4192] ? __pfx_genl_rcv_msg+0x10/0x10 [ 49.292352][ T4192] genl_rcv+0x28/0x40 [ 49.292375][ T4192] netlink_unicast+0x59e/0x670 [ 49.292442][ T4192] netlink_sendmsg+0x58b/0x6b0 [ 49.292540][ T4192] ? __pfx_netlink_sendmsg+0x10/0x10 [ 49.292573][ T4192] __sock_sendmsg+0x142/0x180 [ 49.292605][ T4192] ____sys_sendmsg+0x31e/0x4e0 [ 49.292782][ T4192] ___sys_sendmsg+0x17b/0x1d0 [ 49.292823][ T4192] __x64_sys_sendmsg+0xd4/0x160 [ 49.292962][ T4192] x64_sys_call+0x2999/0x2fb0 [ 49.293075][ T4192] do_syscall_64+0xd0/0x1a0 [ 49.293095][ T4192] ? clear_bhb_loop+0x25/0x80 [ 49.293117][ T4192] ? clear_bhb_loop+0x25/0x80 [ 49.293137][ T4192] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 49.293182][ T4192] RIP: 0033:0x7fd824c1e969 [ 49.293200][ T4192] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 49.293221][ T4192] RSP: 002b:00007fd823287038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 49.293245][ T4192] RAX: ffffffffffffffda RBX: 00007fd824e45fa0 RCX: 00007fd824c1e969 [ 49.293260][ T4192] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000003 [ 49.293274][ T4192] RBP: 00007fd823287090 R08: 0000000000000000 R09: 0000000000000000 [ 49.293288][ T4192] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 49.293348][ T4192] R13: 0000000000000000 R14: 00007fd824e45fa0 R15: 00007ffd7dc1ef78 [ 49.293368][ T4192] [ 49.566760][ T4194] x_tables: ip_tables: socket match: used from hooks OUTPUT, but only valid from PREROUTING/INPUT [ 49.671034][ T4209] netlink: 24 bytes leftover after parsing attributes in process `syz.1.269'. [ 49.684666][ T4209] vxcan3: entered promiscuous mode [ 49.711479][ T4214] loop3: detected capacity change from 0 to 512 [ 49.727976][ T4213] netlink: 8 bytes leftover after parsing attributes in process `syz.4.272'. [ 49.738173][ T4216] dummy0 speed is unknown, defaulting to 1000 [ 49.738292][ T29] audit: type=1400 audit(1745987471.788:561): avc: denied { create } for pid=4215 comm="syz.1.273" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 49.761174][ T4214] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 49.776768][ T4213] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 49.856747][ T4214] EXT4-fs (loop3): 1 truncate cleaned up [ 49.890102][ T4214] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 49.935009][ T4224] pim6reg1: entered promiscuous mode [ 49.940433][ T4224] pim6reg1: entered allmulticast mode [ 50.026741][ T4224] netlink: 28 bytes leftover after parsing attributes in process `syz.4.275'. [ 50.050359][ T4231] x_tables: ip_tables: socket match: used from hooks OUTPUT, but only valid from PREROUTING/INPUT [ 50.064856][ T4224] loop4: detected capacity change from 0 to 512 [ 50.086566][ T4238] netlink: 12 bytes leftover after parsing attributes in process `syz.0.280'. [ 50.198338][ T4240] netlink: 8 bytes leftover after parsing attributes in process `syz.0.281'. [ 50.220524][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.231553][ T4224] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.275: bg 0: block 35: padding at end of block bitmap is not set [ 50.258784][ T4224] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 50.301187][ T4224] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.275: invalid indirect mapped block 4294967295 (level 1) [ 50.340362][ T4224] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.275: invalid indirect mapped block 4294967295 (level 2) [ 50.355633][ T4250] loop3: detected capacity change from 0 to 512 [ 50.362952][ T4250] EXT4-fs error (device loop3): ext4_get_journal_inode:5798: comm syz.3.285: inode #16777216: comm syz.3.285: iget: illegal inode # [ 50.374644][ T4224] EXT4-fs (loop4): 1 truncate cleaned up [ 50.377125][ T4250] EXT4-fs (loop3): Remounting filesystem read-only [ 50.388870][ T4250] EXT4-fs (loop3): no journal found [ 50.394169][ T4250] EXT4-fs (loop3): can't get journal size [ 50.400511][ T4224] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 50.417618][ T4252] loop2: detected capacity change from 0 to 512 [ 50.428123][ T4252] EXT4-fs error (device loop2): ext4_get_journal_inode:5798: comm syz.2.286: inode #16777216: comm syz.2.286: iget: illegal inode # [ 50.456919][ T4250] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended [ 50.468421][ T4252] EXT4-fs (loop2): Remounting filesystem read-only [ 50.475065][ T4252] EXT4-fs (loop2): no journal found [ 50.480323][ T4252] EXT4-fs (loop2): can't get journal size [ 50.506837][ T4250] EXT4-fs (loop3): failed to initialize system zone (-22) [ 50.516233][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.530720][ T4250] EXT4-fs (loop3): mount failed [ 50.539008][ T4252] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 50.549674][ T4252] EXT4-fs (loop2): failed to initialize system zone (-22) [ 50.606564][ T4252] EXT4-fs (loop2): mount failed [ 50.777001][ T4269] loop3: detected capacity change from 0 to 512 [ 50.901798][ T4269] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 50.958333][ T4269] EXT4-fs error (device loop3): xattr_find_entry:333: inode #15: comm syz.3.285: corrupted xattr entries [ 50.970409][ T4269] EXT4-fs (loop3): Remounting filesystem read-only [ 50.977103][ T4269] EXT4-fs (loop3): 1 truncate cleaned up [ 50.983910][ T4269] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.168110][ T4274] loop0: detected capacity change from 0 to 512 [ 51.216965][ T4269] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.245915][ T4276] x_tables: ip_tables: socket match: used from hooks OUTPUT, but only valid from PREROUTING/INPUT [ 51.300420][ T4274] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 51.421394][ T4274] EXT4-fs (loop0): 1 truncate cleaned up [ 51.448574][ T4274] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 51.695347][ T4270] loop2: detected capacity change from 0 to 512 [ 51.779314][ T4270] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 51.899168][ T4270] EXT4-fs error (device loop2): xattr_find_entry:333: inode #15: comm syz.2.286: corrupted xattr entries [ 51.931638][ T4298] netlink: 20 bytes leftover after parsing attributes in process `syz.4.301'. [ 51.948236][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.990962][ T4300] netlink: 8 bytes leftover after parsing attributes in process `syz.1.302'. [ 52.005583][ T4270] EXT4-fs (loop2): Remounting filesystem read-only [ 52.081386][ T4270] EXT4-fs (loop2): 1 truncate cleaned up [ 52.133207][ T4270] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 52.149311][ T29] kauditd_printk_skb: 14 callbacks suppressed [ 52.149328][ T29] audit: type=1326 audit(1745987474.218:576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4305 comm="syz.3.305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a41a9e969 code=0x7ffc0000 [ 52.178801][ T29] audit: type=1326 audit(1745987474.218:577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4305 comm="syz.3.305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=88 compat=0 ip=0x7f4a41a9e969 code=0x7ffc0000 [ 52.202020][ T29] audit: type=1326 audit(1745987474.218:578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4305 comm="syz.3.305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a41a9e969 code=0x7ffc0000 [ 52.225298][ T29] audit: type=1326 audit(1745987474.218:579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4305 comm="syz.3.305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f4a41a9e969 code=0x7ffc0000 [ 52.248668][ T29] audit: type=1326 audit(1745987474.218:580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4305 comm="syz.3.305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a41a9e969 code=0x7ffc0000 [ 52.272141][ T29] audit: type=1326 audit(1745987474.218:581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4305 comm="syz.3.305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=90 compat=0 ip=0x7f4a41a9e969 code=0x7ffc0000 [ 52.295497][ T29] audit: type=1326 audit(1745987474.218:582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4305 comm="syz.3.305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a41a9e969 code=0x7ffc0000 [ 52.319257][ T29] audit: type=1326 audit(1745987474.218:583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4305 comm="syz.3.305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=50 compat=0 ip=0x7f4a41a9e969 code=0x7ffc0000 [ 52.342562][ T29] audit: type=1400 audit(1745987474.218:584): avc: denied { listen } for pid=4305 comm="syz.3.305" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 52.362013][ T29] audit: type=1326 audit(1745987474.218:585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4305 comm="syz.3.305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a41a9e969 code=0x7ffc0000 [ 52.567580][ T4316] tipc: Started in network mode [ 52.572606][ T4316] tipc: Node identity fe80000000000000000000000000001, cluster identity 4711 [ 52.588918][ T4270] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.598053][ T4316] tipc: Enabled bearer , priority 10 [ 52.709462][ T4322] netlink: 8 bytes leftover after parsing attributes in process `syz.0.309'. [ 53.280323][ T4344] loop3: detected capacity change from 0 to 512 [ 53.315742][ T4344] EXT4-fs error (device loop3): ext4_get_journal_inode:5798: comm syz.3.316: inode #16777216: comm syz.3.316: iget: illegal inode # [ 53.348580][ T4344] EXT4-fs (loop3): Remounting filesystem read-only [ 53.355473][ T4344] EXT4-fs (loop3): no journal found [ 53.361021][ T4344] EXT4-fs (loop3): can't get journal size [ 53.372309][ T4349] x_tables: ip_tables: socket match: used from hooks OUTPUT, but only valid from PREROUTING/INPUT [ 53.411046][ T4344] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended [ 53.426780][ T4330] loop1: detected capacity change from 0 to 256 [ 53.443954][ T4330] vfat: Unknown parameter ' [ 53.443954][ T4330] ' [ 53.452603][ T4344] EXT4-fs (loop3): failed to initialize system zone (-22) [ 53.463491][ T4344] EXT4-fs (loop3): mount failed [ 53.697863][ T4361] loop3: detected capacity change from 0 to 512 [ 53.716488][ T3383] tipc: Node number set to 4269801488 [ 53.743747][ T4361] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 53.864214][ T4361] EXT4-fs error (device loop3): xattr_find_entry:333: inode #15: comm syz.3.316: corrupted xattr entries [ 53.876938][ T4361] EXT4-fs (loop3): Remounting filesystem read-only [ 53.883574][ T4361] EXT4-fs (loop3): 1 truncate cleaned up [ 53.890299][ T4361] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 55.274891][ T4371] __nla_validate_parse: 4 callbacks suppressed [ 55.274907][ T4371] netlink: 20 bytes leftover after parsing attributes in process `syz.4.328'. [ 55.299300][ T4361] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.485662][ T10] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 55.505131][ T10] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 55.568019][ T4379] x_tables: ip_tables: socket match: used from hooks OUTPUT, but only valid from PREROUTING/INPUT [ 55.711615][ T4384] x_tables: ip_tables: socket match: used from hooks OUTPUT, but only valid from PREROUTING/INPUT [ 55.796583][ T4387] netlink: 8 bytes leftover after parsing attributes in process `syz.1.334'. [ 56.105270][ T4393] netlink: 8 bytes leftover after parsing attributes in process `syz.0.336'. [ 56.199416][ T4399] netlink: 8 bytes leftover after parsing attributes in process `syz.3.338'. [ 56.286645][ T4402] netlink: 20 bytes leftover after parsing attributes in process `syz.4.339'. [ 56.389791][ T4406] x_tables: ip_tables: socket match: used from hooks OUTPUT, but only valid from PREROUTING/INPUT [ 56.521511][ T4413] loop1: detected capacity change from 0 to 512 [ 56.539104][ T4415] netlink: 24 bytes leftover after parsing attributes in process `syz.0.345'. [ 56.631093][ T4413] EXT4-fs error (device loop1): ext4_get_journal_inode:5798: comm syz.1.344: inode #16777216: comm syz.1.344: iget: illegal inode # [ 56.658804][ T4420] netlink: 8 bytes leftover after parsing attributes in process `syz.4.347'. [ 56.675804][ T4413] EXT4-fs (loop1): Remounting filesystem read-only [ 56.682419][ T4413] EXT4-fs (loop1): no journal found [ 56.687753][ T4413] EXT4-fs (loop1): can't get journal size [ 56.806927][ T4413] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 56.817651][ T4413] EXT4-fs (loop1): failed to initialize system zone (-22) [ 56.824819][ T4413] EXT4-fs (loop1): mount failed [ 57.067805][ T4431] loop1: detected capacity change from 0 to 512 [ 57.198945][ T4431] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 57.234677][ T4431] EXT4-fs error (device loop1): xattr_find_entry:333: inode #15: comm syz.1.344: corrupted xattr entries [ 57.246297][ T4431] EXT4-fs (loop1): Remounting filesystem read-only [ 57.252995][ T4431] EXT4-fs (loop1): 1 truncate cleaned up [ 57.259539][ T4431] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 57.357395][ T4435] netlink: 8 bytes leftover after parsing attributes in process `syz.2.350'. [ 57.405575][ T4431] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.460820][ T4436] loop0: detected capacity change from 0 to 1764 [ 57.504444][ T4436] iso9660: Bad value for 'check' [ 57.518330][ T29] kauditd_printk_skb: 161 callbacks suppressed [ 57.518353][ T29] audit: type=1326 audit(1745987479.588:747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4437 comm="syz.4.351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd824c1e969 code=0x7ffc0000 [ 57.579372][ T4438] loop4: detected capacity change from 0 to 2048 [ 57.626795][ T29] audit: type=1326 audit(1745987479.628:748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4437 comm="syz.4.351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fd824c1e969 code=0x7ffc0000 [ 57.650244][ T29] audit: type=1326 audit(1745987479.628:749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4437 comm="syz.4.351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fd824c1e9a3 code=0x7ffc0000 [ 57.673429][ T29] audit: type=1326 audit(1745987479.628:750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4437 comm="syz.4.351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fd824c1d41f code=0x7ffc0000 [ 57.696870][ T29] audit: type=1326 audit(1745987479.648:751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4437 comm="syz.4.351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7fd824c1e9f7 code=0x7ffc0000 [ 57.720207][ T29] audit: type=1326 audit(1745987479.648:752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4437 comm="syz.4.351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd824c1d2d0 code=0x7ffc0000 [ 57.743689][ T29] audit: type=1326 audit(1745987479.648:753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4437 comm="syz.4.351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd824c1e56b code=0x7ffc0000 [ 57.766867][ T29] audit: type=1326 audit(1745987479.678:754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4437 comm="syz.4.351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fd824c1d5ca code=0x7ffc0000 [ 57.789960][ T29] audit: type=1326 audit(1745987479.688:755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4437 comm="syz.4.351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd824c1e56b code=0x7ffc0000 [ 57.813306][ T29] audit: type=1326 audit(1745987479.688:756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4437 comm="syz.4.351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd824c1e56b code=0x7ffc0000 [ 57.850093][ T4444] SELinux: ebitmap: truncated map [ 57.930916][ T4444] SELinux: failed to load policy [ 57.969514][ T4444] vlan2: entered allmulticast mode [ 57.974693][ T4444] batadv0: entered allmulticast mode [ 58.103448][ T4438] Alternate GPT is invalid, using primary GPT. [ 58.109832][ T4438] loop4: p1 p2 p3 [ 58.223265][ T4430] bond1: entered promiscuous mode [ 58.228416][ T4430] bond1: entered allmulticast mode [ 58.266804][ T4430] 8021q: adding VLAN 0 to HW filter on device bond1 [ 58.394673][ T4430] bond1 (unregistering): Released all slaves [ 58.649896][ T4475] loop1: detected capacity change from 0 to 512 [ 58.670680][ T4475] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 58.729445][ T4475] EXT4-fs (loop1): 1 truncate cleaned up [ 58.742026][ T4475] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 58.819192][ T4487] smc: net device bond0 applied user defined pnetid SYZ0 [ 58.862487][ T4475] netlink: 4 bytes leftover after parsing attributes in process `syz.1.363'. [ 58.898171][ T4475] netlink: 4 bytes leftover after parsing attributes in process `syz.1.363'. [ 58.937082][ T4492] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 58.955292][ T4492] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 58.968481][ T4496] loop0: detected capacity change from 0 to 512 [ 58.988286][ T4496] EXT4-fs error (device loop0): ext4_get_journal_inode:5798: comm syz.0.373: inode #16777216: comm syz.0.373: iget: illegal inode # [ 59.010871][ T4496] EXT4-fs (loop0): Remounting filesystem read-only [ 59.017526][ T4496] EXT4-fs (loop0): no journal found [ 59.022755][ T4496] EXT4-fs (loop0): can't get journal size [ 59.031710][ T4496] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 59.041734][ T4496] EXT4-fs (loop0): failed to initialize system zone (-22) [ 59.049238][ T4496] EXT4-fs (loop0): mount failed [ 59.056806][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.117212][ T4499] FAULT_INJECTION: forcing a failure. [ 59.117212][ T4499] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 59.130503][ T4499] CPU: 0 UID: 0 PID: 4499 Comm: syz.1.374 Not tainted 6.15.0-rc4-syzkaller-00021-gca91b9500108 #0 PREEMPT(voluntary) [ 59.130533][ T4499] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 59.130569][ T4499] Call Trace: [ 59.130576][ T4499] [ 59.130602][ T4499] __dump_stack+0x1d/0x30 [ 59.130622][ T4499] dump_stack_lvl+0xe8/0x140 [ 59.130646][ T4499] dump_stack+0x15/0x1b [ 59.130666][ T4499] should_fail_ex+0x265/0x280 [ 59.130705][ T4499] should_fail+0xb/0x20 [ 59.130820][ T4499] should_fail_usercopy+0x1a/0x20 [ 59.130842][ T4499] _copy_to_user+0x20/0xa0 [ 59.130869][ T4499] sk_getsockopt+0x14f8/0x1810 [ 59.130960][ T4499] ? selinux_socket_getsockopt+0x175/0x1b0 [ 59.130992][ T4499] ? should_fail_ex+0xdb/0x280 [ 59.131032][ T4499] do_sock_getsockopt+0x14d/0x240 [ 59.131102][ T4499] __x64_sys_getsockopt+0x11e/0x1a0 [ 59.131136][ T4499] x64_sys_call+0x12aa/0x2fb0 [ 59.131162][ T4499] do_syscall_64+0xd0/0x1a0 [ 59.131189][ T4499] ? clear_bhb_loop+0x25/0x80 [ 59.131221][ T4499] ? clear_bhb_loop+0x25/0x80 [ 59.131241][ T4499] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 59.131260][ T4499] RIP: 0033:0x7fbf91a3e969 [ 59.131275][ T4499] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 59.131297][ T4499] RSP: 002b:00007fbf900a7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 59.131316][ T4499] RAX: ffffffffffffffda RBX: 00007fbf91c65fa0 RCX: 00007fbf91a3e969 [ 59.131332][ T4499] RDX: 0000000000000005 RSI: 0000000000000001 RDI: 0000000000000003 [ 59.131371][ T4499] RBP: 00007fbf900a7090 R08: 0000200000000100 R09: 0000000000000000 [ 59.131387][ T4499] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 59.131401][ T4499] R13: 0000000000000000 R14: 00007fbf91c65fa0 R15: 00007fffdbd5b888 [ 59.131423][ T4499] [ 59.442471][ T4511] loop0: detected capacity change from 0 to 512 [ 59.978653][ T4511] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 60.012557][ T4511] EXT4-fs error (device loop0): xattr_find_entry:333: inode #15: comm syz.0.373: corrupted xattr entries [ 60.024674][ T4511] EXT4-fs (loop0): Remounting filesystem read-only [ 60.031423][ T4511] EXT4-fs (loop0): 1 truncate cleaned up [ 60.038486][ T4511] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 60.197034][ T4511] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.289608][ T4546] loop1: detected capacity change from 0 to 512 [ 60.319320][ T4546] EXT4-fs error (device loop1): ext4_get_journal_inode:5798: comm syz.1.392: inode #16777216: comm syz.1.392: iget: illegal inode # [ 60.363629][ T4546] EXT4-fs (loop1): Remounting filesystem read-only [ 60.370374][ T4546] EXT4-fs (loop1): no journal found [ 60.375648][ T4546] EXT4-fs (loop1): can't get journal size [ 60.385149][ T4546] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 60.395043][ T4546] EXT4-fs (loop1): failed to initialize system zone (-22) [ 60.419420][ T4546] EXT4-fs (loop1): mount failed [ 60.937292][ T4565] loop1: detected capacity change from 0 to 512 [ 60.982623][ T4565] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 61.018783][ T4565] EXT4-fs error (device loop1): xattr_find_entry:333: inode #15: comm syz.1.392: corrupted xattr entries [ 61.030630][ T4565] EXT4-fs (loop1): Remounting filesystem read-only [ 61.037395][ T4565] EXT4-fs (loop1): 1 truncate cleaned up [ 61.044035][ T4565] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 61.376685][ T4565] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.437275][ T4574] x_tables: ip_tables: socket match: used from hooks OUTPUT, but only valid from PREROUTING/INPUT [ 61.633206][ T4582] loop4: detected capacity change from 0 to 512 [ 61.660133][ T4584] netlink: 'syz.2.405': attribute type 27 has an invalid length. [ 61.700585][ T4591] x_tables: ip_tables: socket match: used from hooks OUTPUT, but only valid from PREROUTING/INPUT [ 61.750273][ T4584] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.757489][ T4584] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.767527][ T4589] loop3: detected capacity change from 0 to 128 [ 61.787242][ T4582] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 61.916816][ T4582] EXT4-fs (loop4): 1 truncate cleaned up [ 61.942983][ T4582] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 61.958049][ T4584] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 61.984498][ T4584] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 62.078353][ T4584] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.087474][ T4584] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.096680][ T4584] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.105658][ T4584] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.163425][ T3370] dummy0 speed is unknown, defaulting to 1000 [ 62.169672][ T3370] yz2: Port: 1 Link DOWN [ 62.341685][ T4613] netlink: 8 bytes leftover after parsing attributes in process `syz.2.412'. [ 62.454226][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.581242][ T4639] loop3: detected capacity change from 0 to 512 [ 62.665585][ T4653] netlink: 8 bytes leftover after parsing attributes in process `syz.0.430'. [ 62.682424][ T4639] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 62.708103][ T4658] loop4: detected capacity change from 0 to 512 [ 62.753184][ T4639] ext4 filesystem being mounted at /70/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 62.795193][ T4658] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 62.823371][ T29] kauditd_printk_skb: 290 callbacks suppressed [ 62.823389][ T29] audit: type=1400 audit(1745987484.888:1047): avc: denied { create } for pid=4663 comm="syz.1.434" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 62.883683][ T29] audit: type=1400 audit(1745987484.918:1048): avc: denied { ioctl } for pid=4663 comm="syz.1.434" path="socket:[8562]" dev="sockfs" ino=8562 ioctlcmd=0x89e1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 62.908631][ T29] audit: type=1400 audit(1745987484.938:1049): avc: denied { shutdown } for pid=4635 comm="syz.3.423" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 62.937297][ T4658] EXT4-fs (loop4): 1 truncate cleaned up [ 62.963560][ T4658] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 63.092432][ T29] audit: type=1326 audit(1745987485.088:1050): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4675 comm="syz.0.439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ee55ae969 code=0x7ffc0000 [ 63.116525][ T29] audit: type=1326 audit(1745987485.088:1051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4675 comm="syz.0.439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=282 compat=0 ip=0x7f3ee55ae969 code=0x7ffc0000 [ 63.139957][ T29] audit: type=1326 audit(1745987485.088:1052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4675 comm="syz.0.439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ee55ae969 code=0x7ffc0000 [ 63.163666][ T29] audit: type=1326 audit(1745987485.088:1053): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4675 comm="syz.0.439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f3ee55ad2d0 code=0x7ffc0000 [ 63.187092][ T29] audit: type=1326 audit(1745987485.088:1054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4675 comm="syz.0.439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ee55ae969 code=0x7ffc0000 [ 63.210576][ T29] audit: type=1326 audit(1745987485.088:1055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4675 comm="syz.0.439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=40 compat=0 ip=0x7f3ee55ae969 code=0x7ffc0000 [ 63.233958][ T29] audit: type=1326 audit(1745987485.088:1056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4675 comm="syz.0.439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ee55ae969 code=0x7ffc0000 [ 63.258705][ T4682] Illegal XDP return value 4291362816 on prog (id 335) dev N/A, expect packet loss! [ 63.274396][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.306929][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.460521][ T4700] x_tables: ip_tables: socket match: used from hooks OUTPUT, but only valid from PREROUTING/INPUT [ 63.598632][ T4709] netlink: 96 bytes leftover after parsing attributes in process `syz.3.453'. [ 63.621916][ T4691] netlink: 'syz.4.442': attribute type 1 has an invalid length. [ 63.726226][ T4721] netlink: 'kfree': attribute type 12 has an invalid length. [ 63.865106][ T4736] x_tables: ip_tables: socket match: used from hooks OUTPUT, but only valid from PREROUTING/INPUT [ 63.899711][ T4727] SELinux: policydb magic number 0x224e0002 does not match expected magic number 0xf97cff8c [ 63.926627][ T4727] SELinux: failed to load policy [ 63.940204][ T4742] loop3: detected capacity change from 0 to 512 [ 63.965897][ T4742] EXT4-fs error (device loop3): ext4_orphan_get:1391: inode #17: comm syz.3.466: iget: bogus i_mode (0) [ 63.987640][ T4742] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.466: couldn't read orphan inode 17 (err -117) [ 64.031104][ T4742] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 64.072407][ T4750] loop2: detected capacity change from 0 to 512 [ 64.084463][ T4744] loop4: detected capacity change from 0 to 8192 [ 64.103933][ T4744] vfat: Unknown parameter 'xO[UֶSZ-Hͥ3 7 [ 64.103933][ T4744] d [ 64.103933][ T4744] ҀvVn&!7 Dѕ[?Kwl f 12Ik'% [ 64.103933][ T4744] ;gr{HsNZ0N t/Exx퍟~~;ƍ5nRZ]p_w/^'*SznYvRz' [ 64.142726][ T4750] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 64.166664][ T4750] ext4 filesystem being mounted at /97/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 64.250987][ T4750] tipc: Started in network mode [ 64.255944][ T4750] tipc: Node identity ac14140f, cluster identity 4711 [ 64.263536][ T4750] tipc: New replicast peer: 10.1.1.2 [ 64.269063][ T4750] tipc: Enabled bearer , priority 10 [ 64.297532][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.322127][ T4750] tipc: Enabled bearer , priority 10 [ 64.332840][ T4761] loop0: detected capacity change from 0 to 512 [ 64.346193][ T4761] EXT4-fs error (device loop0): ext4_get_journal_inode:5798: comm syz.0.473: inode #16777216: comm syz.0.473: iget: illegal inode # [ 64.380095][ T4761] EXT4-fs (loop0): Remounting filesystem read-only [ 64.386786][ T4761] EXT4-fs (loop0): no journal found [ 64.392117][ T4761] EXT4-fs (loop0): can't get journal size [ 64.405139][ T4765] x_tables: ip_tables: socket match: used from hooks OUTPUT, but only valid from PREROUTING/INPUT [ 64.405651][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.426870][ T4761] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 64.438189][ T4761] EXT4-fs (loop0): failed to initialize system zone (-22) [ 64.445456][ T4761] EXT4-fs (loop0): mount failed [ 64.581520][ T4770] bond0: entered promiscuous mode [ 64.586827][ T4770] bond0: entered allmulticast mode [ 64.593282][ T4770] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.621614][ T4770] bond0 (unregistering): Released all slaves [ 64.757796][ T4783] loop0: detected capacity change from 0 to 512 [ 64.765985][ T4783] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 64.799766][ T4783] EXT4-fs error (device loop0): xattr_find_entry:333: inode #15: comm syz.0.473: corrupted xattr entries [ 64.811733][ T4783] EXT4-fs (loop0): Remounting filesystem read-only [ 64.818404][ T4783] EXT4-fs (loop0): 1 truncate cleaned up [ 64.824947][ T4783] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 65.358385][ T4783] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.385646][ T4787] dummy0 speed is unknown, defaulting to 1000 [ 65.429667][ T4779] loop2: detected capacity change from 0 to 256 [ 65.439886][ T3381] tipc: Node number set to 2886997007 [ 65.467445][ T4779] vfat: Unknown parameter ' [ 65.467445][ T4779] ' [ 65.974265][ T4802] loop3: detected capacity change from 0 to 512 [ 66.008265][ T4802] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 66.045109][ T4802] ext4 filesystem being mounted at /83/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 66.096034][ T4802] tipc: Started in network mode [ 66.101010][ T4802] tipc: Node identity ac14140f, cluster identity 4711 [ 66.116706][ T4811] netlink: 8 bytes leftover after parsing attributes in process `syz.2.489'. [ 66.135995][ T4802] tipc: New replicast peer: 10.1.1.2 [ 66.141569][ T4802] tipc: Enabled bearer , priority 10 [ 66.196690][ T4802] tipc: Enabled bearer , priority 10 [ 66.260987][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.364872][ T4823] x_tables: ip_tables: socket match: used from hooks OUTPUT, but only valid from PREROUTING/INPUT [ 66.381150][ T4821] loop1: detected capacity change from 0 to 1024 [ 66.410338][ T4821] EXT4-fs: Ignoring removed nomblk_io_submit option [ 66.442291][ T4821] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 66.513288][ T4825] loop0: detected capacity change from 0 to 256 [ 66.530623][ T4834] dummy0 speed is unknown, defaulting to 1000 [ 66.537446][ T4825] vfat: Unknown parameter ' [ 66.537446][ T4825] ' [ 66.566523][ T4821] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 66.574671][ T4821] System zones: 0-1, 3-36 [ 66.633430][ T3306] ================================================================== [ 66.641742][ T3306] BUG: KCSAN: data-race in shmem_getattr / shmem_recalc_inode [ 66.649332][ T3306] [ 66.651679][ T3306] read-write to 0xffff8881323a7a30 of 8 bytes by task 4830 on cpu 0: [ 66.659775][ T3306] shmem_recalc_inode+0x36/0x1c0 [ 66.665028][ T3306] shmem_get_folio_gfp+0x7a3/0xd40 [ 66.670177][ T3306] shmem_write_begin+0xa8/0x190 [ 66.675075][ T3306] generic_perform_write+0x181/0x490 [ 66.680657][ T3306] shmem_file_write_iter+0xc5/0xf0 [ 66.685885][ T3306] __kernel_write_iter+0x253/0x4c0 [ 66.691066][ T3306] dump_user_range+0x5f4/0x8d0 [ 66.695852][ T3306] elf_core_dump+0x1dc2/0x1f80 [ 66.700877][ T3306] do_coredump+0x1836/0x1f40 [ 66.705503][ T3306] get_signal+0xd85/0xf70 [ 66.709878][ T3306] arch_do_signal_or_restart+0x97/0x480 [ 66.715485][ T3306] irqentry_exit_to_user_mode+0x5e/0xa0 [ 66.721080][ T3306] irqentry_exit+0x12/0x50 [ 66.725637][ T3306] asm_exc_page_fault+0x26/0x30 [ 66.730606][ T3306] [ 66.732959][ T3306] read to 0xffff8881323a7a30 of 8 bytes by task 3306 on cpu 1: [ 66.740521][ T3306] shmem_getattr+0x41/0x200 [ 66.745051][ T3306] vfs_getattr_nosec+0x143/0x1e0 [ 66.750647][ T3306] vfs_statx+0x11a/0x380 [ 66.754925][ T3306] vfs_fstatat+0xe1/0x160 [ 66.759299][ T3306] __se_sys_newfstatat+0x55/0x260 [ 66.764367][ T3306] __x64_sys_newfstatat+0x55/0x70 [ 66.769436][ T3306] x64_sys_call+0x2c22/0x2fb0 [ 66.774149][ T3306] do_syscall_64+0xd0/0x1a0 [ 66.778682][ T3306] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 66.784603][ T3306] [ 66.786942][ T3306] value changed: 0x000000000000061f -> 0x0000000000000622 [ 66.794063][ T3306] [ 66.796444][ T3306] Reported by Kernel Concurrency Sanitizer on: [ 66.802609][ T3306] CPU: 1 UID: 0 PID: 3306 Comm: syz-executor Not tainted 6.15.0-rc4-syzkaller-00021-gca91b9500108 #0 PREEMPT(voluntary) [ 66.815238][ T3306] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 66.825414][ T3306] ================================================================== [ 66.840245][ T4821] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 67.096380][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.256687][ T3383] tipc: Node number set to 2886997007