last executing test programs: 1m54.852371577s ago: executing program 0 (id=255): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@quota}]}, 0xff, 0x4fa, &(0x7f00000005c0)="$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") bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000240)=0x7) quotactl$Q_SETQUOTA(0xffffffff80000800, &(0x7f0000000140)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f00000002c0)={0x5, 0xffffffff, 0x4, 0x3, 0x2, 0x9, 0x7b, 0x0, 0x6}) 1m54.57235209s ago: executing program 0 (id=259): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001080)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xf, &(0x7f00000001c0)=ANY=[@ANYBLOB="18ffffffff00001693c581dbb4bff84b9ca1a59b000000000000c5000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000140000fbb703000000e31f008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000c00)='sys_enter\x00', r1}, 0x10) r2 = syz_pidfd_open(0x0, 0x0) process_madvise(r2, 0x0, 0x0, 0x1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r3, 0x25, &(0x7f00000000c0)) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000000040)=0x0) timer_settime(r5, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r6, 0x26, &(0x7f0000000000)={0x1}) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000000)={0x1}) close(r3) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r7, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r7, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) fcntl$lock(r8, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8}) fcntl$lock(r8, 0x26, &(0x7f0000000080)={0x1, 0x0, 0x2007, 0x1fd}) fcntl$lock(r8, 0x7, &(0x7f0000000280)={0x1, 0x0, 0x2f, 0x9}) fcntl$lock(r8, 0x7, &(0x7f00000000c0)={0x0, 0x2, 0x7, 0x401}) setsockopt$sock_int(r7, 0x1, 0xf, &(0x7f00000002c0)=0x7, 0x4) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r9, 0x1, 0x2a, &(0x7f0000000180)=0x40800001, 0x3c) bind$inet6(r9, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) 1m53.558549555s ago: executing program 0 (id=267): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000001007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'bridge0\x00', 0x0}) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) sendto$packet(r2, &(0x7f0000000100)="3f031c000302140006001e00890000004a1b7880610cc945000088a800008100000081000000", 0x26, 0x1, &(0x7f0000000540)={0xc9, 0x8100, r3, 0x1, 0x1, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}}, 0x14) 1m53.464882017s ago: executing program 0 (id=271): socket$tipc(0x1e, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10) link(&(0x7f00000001c0)='./bus\x00', &(0x7f0000000300)='./file0\x00') r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x403, 0x0, 0x300, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @gre={{0x8}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_PMTUDISC={0x5}, @IFLA_GRE_IGNORE_DF={0x5, 0x13, 0x1}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x44}, 0x1, 0xba01, 0x0, 0x4004001}, 0x0) 1m52.301350224s ago: executing program 0 (id=276): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0xff}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r4}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x18) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x1c, r6, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 1m51.133248741s ago: executing program 0 (id=281): r0 = socket$nl_route(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x20200) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f0000000340)={{0x3, 0x0, 0xffffffff, 0x1, 0x53f5}}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000004c0)=ANY=[@ANYBLOB="0000000000000000b7080000000200007b8af8ff00000000bfa200000000000007020000f8ffffffb7"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="2c0000001000010827bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="000000005610000004002b8008001b000000000018a20f33ba7600009bfedddc1f33397e1b883834"], 0x2c}}, 0x840) 1m35.230555415s ago: executing program 32 (id=281): r0 = socket$nl_route(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x20200) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f0000000340)={{0x3, 0x0, 0xffffffff, 0x1, 0x53f5}}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000004c0)=ANY=[@ANYBLOB="0000000000000000b7080000000200007b8af8ff00000000bfa200000000000007020000f8ffffffb7"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="2c0000001000010827bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="000000005610000004002b8008001b000000000018a20f33ba7600009bfedddc1f33397e1b883834"], 0x2c}}, 0x840) 6.856928059s ago: executing program 3 (id=752): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000280)='kfree\x00'}, 0x18) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x4, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0xb, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000006c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(0x0, r4) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_SOCK_GET(0xffffffffffffffff, 0x0, 0x404c044) syz_genetlink_get_family_id$ieee802154(0x0, r5) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000009400)={'wpan0\x00'}) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000400850000008200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000001c0)=ANY=[@ANYBLOB="8c00000013000500"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000014000300766c616e300000000000000000000000080004000000000034002b800800", @ANYBLOB="110008"], 0x8c}}, 0x0) 4.920104057s ago: executing program 3 (id=760): bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x2404c140) openat(0xffffffffffffff9c, 0x0, 0x0, 0xfe) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001780)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000000}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) r4 = socket$inet6(0xa, 0x2, 0x0) sendmsg$inet(r4, &(0x7f0000000340)={&(0x7f0000000100)={0x2, 0x4e22, @private=0xa010101}, 0x10, 0x0, 0x0, &(0x7f0000000040)=[@ip_retopts={{0x18, 0x0, 0x7, {[@noop, @ssrr={0x89, 0x7, 0x4, [@remote]}]}}}], 0x18}, 0x0) 4.865859058s ago: executing program 4 (id=761): socket$inet6(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0xc7) close(r0) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000), 0x101000, 0x800, 0x3, 0x1}, 0x20) syz_io_uring_setup(0x2070c4, &(0x7f0000000280)={0x0, 0x86ec, 0x10000, 0x1, 0x220, 0x0, r0}, &(0x7f0000000340), &(0x7f0000000200)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000002080)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_type(r6, &(0x7f0000000040), 0x2, 0x0) sendfile(r5, r7, 0x0, 0x9) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r8 = bpf$ITER_CREATE(0xb, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000ec0), &(0x7f0000000180)='./file2\x00', 0x420c, &(0x7f0000003240)=ANY=[], 0x6, 0x360, &(0x7f0000000b00)="$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") r9 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x105042, 0x40) mmap$IORING_OFF_SQ_RING(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x100000b, 0x2013, r9, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(r1, &(0x7f00000001c0)={0x2c, 0x8, r3}, 0x10) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x20080, &(0x7f0000000300)=ANY=[@ANYRES64=r8, @ANYRESHEX=r0, @ANYRESDEC=r7, @ANYRES8=r8]) 4.73789554s ago: executing program 2 (id=763): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) sched_setscheduler(0x0, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0xd, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000008002b000000000000000018040000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x18, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r2}, 0x10) syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000000)='./file0\x00', 0x2810000, &(0x7f0000000280)=ANY=[@ANYBLOB="6e6f6e756d7461696c3d302c726f6469722c696f636861727365743d6b6f69382d72752c756e695f786c6174653d312c636f6465706167653d313235352c726f6469722c616c6c6f775f7574696d653d30303030303030303030303030303030303030303036342c756e695f786c6174653d302c6e6f6e756d7461696c3d302c696f636861727365743d63703836312c73686f72746e616d653d6c6f7765722c73686f72746e616d653d77696e6e742c646973636172642c756e695f786c6174653d302c73686f72746e616d653d6d697865642c002dab0b191fb2ccceb71eb18196c71c4ecf838358be4b21c68a715a06e99db6572f49e2e559818c3ac27fa19cb8456d68b6c399d259b4f2cd832293ba03e6c9d8f6395e4d8e3a863acf841afc158f6f92786028b0bcd3f3b636a0bd8e42bdf24b014d3a37ee7dc0c50c38f9c612ff2d66a952cc2874418c14f502b47358823cc8adbc5c7ae9c61b7aee88dc31761b4f87dfd0c3ec85874ddd916bdab323b4c1e1abf6954b6bd3fccd8ab2b78d0fb371d7348e571cdd28eab749354bf150aa6590fadf7518cf96541bc0269967fe134674e27cde17e4dbf552e56f68123c01b5edf39649b1e4173595b61a95c4084fc443134f4d3e93808f7096cc23d74c11624c88f7e7368bd79d1d1a72fe347d5f124237c829b1aff2fdded98cc25392708012418a7d1edaaa55a1ba5d7b1121086d7d134dc1b44288a263dfa06dcda29e1aebdd7783d52181f13709faf80be3104cb770c4469f187f3fad6183f3b2034830f8e2672eda505120e39b10a866da37912d524e46e075f013532357b21bbd0d4f65b300638e26f1630ffe1a69a9c0010abc174976a4faf88cac1ed2f07f30ee403efd74a941b6d58d5ff1ffc7c0dbe22bbd3a1d5df5f29a3258f23ab5108cda88e4f1cb325741ad"], 0x25, 0x334, &(0x7f0000000c00)="$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") 3.953484171s ago: executing program 5 (id=765): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x0, 0x0, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r0 = socket$netlink(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x1, 0x6}, 0x2, 0x0, 0x2, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) open(0x0, 0x143c62, 0x0) mount(&(0x7f0000000100), 0x0, &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000300)='trans=rdma,') r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x7fffffffffe, &(0x7f0000006680)) semtimedop(0x0, 0x0, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000cbffffff00000000000000008500000041000000850000005000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x428a4}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'dummy0\x00'}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}}, 0x8000) 3.904222002s ago: executing program 4 (id=766): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, 0x0, 0x0, 0x7ff}, 0x94) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x5}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000d00)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000010700000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000800007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x22a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000850000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='signal_deliver\x00', r2}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000280)={'wg2\x00'}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000040)={'wg2\x00', @multicast}) 3.853025123s ago: executing program 2 (id=767): socketpair(0x1, 0x80000, 0xfff, &(0x7f0000000040)) openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xe, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x28031, 0xffffffffffffffff, 0x8000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r3}, 0x10) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0xf) 3.578259887s ago: executing program 3 (id=769): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000c00)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) fsopen(0x0, 0x0) unshare(0x2040600) r2 = syz_open_dev$usbfs(&(0x7f0000000080), 0x74, 0x101301) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) 3.522039678s ago: executing program 5 (id=771): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000"], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a00)={0x0, r0}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r3 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0xe1002) ioctl$SCSI_IOCTL_SEND_COMMAND(r3, 0x1, &(0x7f0000000040)=ANY=[@ANYRES64=r2]) syz_clone(0x400a1400, 0x0, 0x0, 0x0, 0x0, 0x0) 3.328221091s ago: executing program 3 (id=774): socket$inet6(0xa, 0x2, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x4, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1000000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000080), 0x74, 0x101301) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) syz_usb_connect(0x2, 0x64, 0x0, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x2, 0x7, 0x0, 0x5, 0x2, 0x0, 0x70bd2d, 0x25dfdbfe}, 0x10}}, 0x4) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xd, &(0x7f0000000780)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback=0x36e084fcb6392193, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r6, 0x0, 0x2e, &(0x7f0000000340)={0x3, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @loopback}}}, 0x108) setsockopt$inet_group_source_req(r6, 0x0, 0x2e, &(0x7f0000000480)={0x6, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @empty}}}, 0x108) getsockopt$inet_buf(r6, 0x0, 0x30, &(0x7f0000000340)=""/225, &(0x7f0000000180)=0xe1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TIOCVHANGUP(r7, 0x5437, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10) r8 = socket(0x10, 0x3, 0x0) connect$netlink(r8, &(0x7f0000000280)=@proc={0x10, 0x0, 0x1}, 0xc) sendmsg$nl_route_sched(r8, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x18, 0x32, 0x829, 0x0, 0x0, {0x0, 0x0, 0x2}, [{0x4}]}, 0x18}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00'}, 0x18) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000180)={'rose0\x00', 0x112}) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000100)={'vlan0\x00', 0x400}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x18) 3.209183773s ago: executing program 5 (id=775): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001a80)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x1c, 0x0, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000340)={&(0x7f0000000a00)={0x28c, 0x0, 0x4, 0x70bd2b, 0x25dfdbbd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_REKEY_DATA={0x88, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x3}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "a8fc97ea957758d6"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "557f15eb44e90c46"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x6}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x13115a88}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0xfffffffc}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="cea30718273ce2af2447c25f6c38becd7ceb41a5d83be9b6"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="662d8aa286c5f5ff6ea381172134ffc8ed01048969876ea76f5d5ef3a85ba755"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "518c479109bc0dd8"}]}, @NL80211_ATTR_REKEY_DATA={0x94, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "f2dffb34ba8e17f2"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="7053dba89b4d4875715346c952de81ae"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "fc569f2264c7c1af"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "9fd853fa8963fdde"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "2f53e3f0ec8eafca"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="ba1965e0946fc2a53e87fe3e86674d08db4dd5f9173caec7"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="42f1ddb943a8c4557d041a62acd0b0bea38e192cbab52e2bf51ba37087293f04"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "71ffdea169c92d07"}]}, @NL80211_ATTR_REKEY_DATA={0xa0, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="69d813e54c4a1fdeca4cf54f8dace4ea058ef253b0cb56cb"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x1}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="6d2a3fe063ac33a95b9d77d86382eaf9525d78797627cc53"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="7b41de390ea4bf1dcb3def39d62629e6"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x6}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="b611edf06994dcd02aa8dcef45c7a95da274f4862240740c2ea600bc71398da9"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x2}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="5366d55c6de4f0ce423b7b406d242e27"}]}, @NL80211_ATTR_REKEY_DATA={0x58, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "61b1243d312aa455"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="ca579a4f42c66a456cc92bec1a3643a2b49cd4c613cd36e7"}, @NL80211_REKEY_DATA_AKM={0x8}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="3a2540cf620e729f0d20586881a0f9d0e65e2c3386055c441eeec091ba1af278"}]}, @NL80211_ATTR_REKEY_DATA={0x5c, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="a12f08759e197c58c1bfd9b6f10e9f1b4fdf0c8cd9f2e44a935611f473591bf2"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x9}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="031cfcecc153f796150fc0b22a64339269443f0741512f8d"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x6}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x4}]}]}, 0x28c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000180), 0xffffffffffffffff) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/timers\x00', 0x41, 0x0) 3.048264175s ago: executing program 4 (id=776): socket$inet6(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0xc7) close(r0) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000), 0x101000, 0x800, 0x3, 0x1}, 0x20) syz_io_uring_setup(0x2070c4, &(0x7f0000000280)={0x0, 0x86ec, 0x10000, 0x1, 0x220, 0x0, r0}, &(0x7f0000000340), &(0x7f0000000200)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000002080)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_type(r6, &(0x7f0000000040), 0x2, 0x0) sendfile(r5, r7, 0x0, 0x9) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r8 = bpf$ITER_CREATE(0xb, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000ec0), &(0x7f0000000180)='./file2\x00', 0x420c, &(0x7f0000003240)=ANY=[], 0x6, 0x360, &(0x7f0000000b00)="$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") r9 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x105042, 0x40) mmap$IORING_OFF_SQ_RING(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x100000b, 0x2013, r9, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(r1, &(0x7f00000001c0)={0x2c, 0x8, r3}, 0x10) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x20080, &(0x7f0000000300)=ANY=[@ANYRES64=r8, @ANYRESHEX=r0, @ANYRESDEC=r7, @ANYRES8=r8]) 2.578956942s ago: executing program 2 (id=777): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="f5ff06fdff000000140012000c00010062726964"], 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x0, 0x0, {0x2, 0x20, 0x0, 0xff, r3}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) r4 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r4, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @empty}, 0xc) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x4) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000280)=@framed, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r7}, 0x10) ioctl$SG_GET_VERSION_NUM(0xffffffffffffffff, 0x2282, &(0x7f0000000380)) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x20088814}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0xe) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x7400, &(0x7f00000001c0)={&(0x7f0000000200)=@delchain={0x24, 0x11, 0x1, 0x1300, 0x0, {0x0, 0x0, 0x0, r8}}, 0x24}}, 0x0) 2.455071893s ago: executing program 2 (id=778): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff00000000000000", @ANYRES32=0x1, @ANYBLOB="000000000000000000000000b5b1df1900000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/25], 0x48) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000180)="2e00000011008b88040f80ec59acbc0413a1f8480f0000005e2900421803001825000a001400000002800000121f", 0x2e}], 0x1}, 0x800) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000240)='kfree\x00', r3, 0x0, 0x9}, 0x18) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYRES32=r1, @ANYRES16=r3, @ANYRESOCT], 0xf8}, 0x1, 0x0, 0x0, 0x2dd7abf44824eb72}, 0x4008040) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000c00)={0x18, 0x4, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x11}, 0x94) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000800)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16, @ANYBLOB="0103000000000000000001000d000800060000000000070003007e94342bfcb04a2209527daa6811477264c426400bdf063f249351960e9652fd6c021d9577"], 0x30}}, 0x40) socket$inet_smc(0x2b, 0x1, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r4}, &(0x7f0000000800), 0x0}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000001640)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x8c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='kfree\x00', r5}, 0x18) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000100)={0x0, 0x3, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a31000000001400078005001500070000000800124000000000050005000200000005000400000000000d000300686173683a6e6574"], 0x5c}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10040047}, 0x240008c4) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f00000008c0)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0}, 0x94) faccessat(0xffffffffffffff9c, &(0x7f0000000800)='./file0\x00', 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r8}, 0x10) syz_mount_image$ext4(&(0x7f0000000840)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0xca4e9a2efb741a00, &(0x7f0000000bc0)={[{@nobh}, {@data_writeback}], [{@dont_hash}, {@audit}]}, 0x1, 0x5ad, &(0x7f0000000180)="$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") 2.395340584s ago: executing program 2 (id=780): bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x2404c140) openat(0xffffffffffffff9c, 0x0, 0x0, 0xfe) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001780)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000000}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) r4 = socket$inet6(0xa, 0x2, 0x0) sendmsg$inet(r4, &(0x7f0000000340)={&(0x7f0000000100)={0x2, 0x4e22, @private=0xa010101}, 0x10, 0x0, 0x0, &(0x7f0000000040)=[@ip_retopts={{0x18, 0x0, 0x7, {[@noop, @ssrr={0x89, 0x7, 0x4, [@remote]}]}}}], 0x18}, 0x0) 2.049053059s ago: executing program 4 (id=782): r0 = socket$netlink(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000004180)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sys_enter\x00', r1}, 0x10) sysinfo(&(0x7f0000000680)=""/26) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x6, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r4}, 0x18) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002440)=ANY=[@ANYBLOB="3800000020000100000000000000000002000000000000000000"], 0x38}}, 0x0) 2.047598279s ago: executing program 1 (id=783): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b000000000000"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x1e6, 0x0, &(0x7f0000000980)="b0ff04c66b0d698cb89e2fe086dd1f74ffff06000000fe80000000000000ac14140746647b7954c4c06b580febc28eb143d0f6c0bad62c67a04402ba4125c7024f63fdb0b6c8ee826b4dfe6042a2f057c66cad677d850ea9928bcfcb47e585e427746ed3b27c40060cbd030a6d675c9926af53cd3085b24f9b7a486775c4f284f8c5a572ca115bce90c0ee9d4e7a07f5f1518092cb1f156694036f6618a59196631e6303fd5307d1112601d3641c9492f7dc3503416836b14590c53b1fc1ac149b70cc1142d6bc57fc3a76839fa2f96878b520fedfb9f64d81584a2e85ab4f6ec718b02d78f2ebf04e6b3b94610a21616181629a03c3dc0bf05e0a71f887833b81db7a10bc53259cb80716f6804934a411d424c1db98d454be1adb2776fdbb92b299d3b80af6987a871b4549fdb4c8297ee31ad925c8b0fb1a9d2589b08ed52602cbc26b56df71201bc4ea8621c56f33d251c1d4589af2dcd78fbb4e34bde02cb3920a30cee9489ee72c3e19304c16c2110e1839712d484b80abe77786a7e2ba834874a4e16b93dd07297554a06c2ad2c906f8ebb1db8730df096709184728d48f0a806696bd0d4b12d0064b933d9675353dae77fe8419451f85da63be78b70ca2a84a77f572d9f289d4313e6f6039fe756ac13a5d08838315dff44cda433cc7bc6b77449f8c", 0x0, 0x2f, 0xe8034000, 0x0, 0x6c, &(0x7f0000000000), &(0x7f00000000c0)="c6769e45b7c61302926682c7f9e9bb5ba2b3cdf023e8da0392a4cd62e2370f25ae5ba0dab896bcf5b774cd28bebbde39f796ae27d04582bb7c03e9fe830ea22c9fd03f6d2779515fdad3f5d0de07b7b70996102fdb67b1e77a34a5b7136a212fa2c0ea502588309dc3e42c55", 0x5dc}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18) socket$inet_udp(0x2, 0x2, 0x0) unshare(0x20000400) fcntl$setstatus(0xffffffffffffffff, 0x403, 0x26c00) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_emit_ethernet(0x82, &(0x7f0000000580)=ANY=[@ANYBLOB="cf599d3baed500000000000086dd60f20000004c2c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa00060008"], 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffffffffffffff86dd6060626000102c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa11000001"], 0x0) 1.99364632s ago: executing program 1 (id=784): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000c00)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) fsopen(0x0, 0x0) unshare(0x2040600) r2 = syz_open_dev$usbfs(&(0x7f0000000080), 0x74, 0x101301) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) 1.760317844s ago: executing program 1 (id=785): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000004c0)={'syzkaller0\x00', @link_local}) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r2}, 0x10) symlink(&(0x7f0000000000)='.\x00', 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1018e58, &(0x7f00000001c0), 0x6, 0x5fc, &(0x7f0000000600)="$eJzs3c9rHGUfAPDvzCZ5kzavaUXEFsWAhxakaVKLVS+29WAPBQv2IOKhoUlq6PYHTQq2FkzBg4KCiFeRXvwHvEvv3kRQb56FKlJRUOnK7M62m2Q3XdPsTpr5fGCzz/PM7D7PdydP5pmZPDsBlNZ49iON2BVx51QSMdaybDQaC8fz9W7/du109kiiVnv91ySSvKy5fpI/b88zwxHx7dGIRyur6124cvXsdLXW8F7E/sVzF/cvXLm6b/7c9JnZM7Pnpw68cPDQ5ItTB6c2JM7t+fOx4689+fH7bz8/9111XxKH4+TguzOxIo6NMh7jcScPsbV8ICIOZYk2n8vDZguEUGqV/PdxMCIej7Go1HMNYzH/UaGNA3qqVomoASWV6P9QUs1xQPPYvrvj4JM9HpX0z60jjQOg1fEPNM6NxHD92Gjb7aTlyKhxbmPHBtSf1fHPtd2fZ49Ydh7iz7tbZ2AD6ulk6XpEPNEu/qTeth31SLP402XtSCJiMiKG8va98gBtSFrSvTgPs5b1xp9GxOH8OSs/us76x1fk+x0/AOV080i+I1/Kcvf2f9nYozn+iTbjn9E2+671KHr/13n819zfD9fPkacrxmHZmOVE+7ccXFnw04fHPu1Uf+v4L3tk9TfHgv1w63rE7hXxf5AFm49/sviTNts/W+XU4e7qePX7X451WlZ0/LUbEXvaHv/cG5VmqTWuT+6fm6/OTjZ+tq3j62/e+rJT/UXHn23/bR3ib9n+6crXZZ/JxS7r+OrEjXOdlo3eN/7056Gkcbw5lJe8M724eGkqYig5nq/SUn5g7bY012m+Rxb/3mfa9/9lv//Xl7/PSPNPZhcuvnH2dqdl69n+LReT79S6bEMnWfwz99/+q/p/VvZJl3X88eblpzotWyv+kQcJDAAAAAAAAEoorV+DTdKJu+k0nZhozJd9LLal1QsLi8/OXbh8fiZib/3/IQfT5pXusUY+yfJT+f/DNvMHVuSfi4idEfFZZaSenzh9oTpTdPAAAAAAAAAAAAAAAAAAAACwSWzP5/8371P9e6Ux/x8oiV7eYA7Y3PR/KK96/191iyegDOz/obz0fygv/R/KS/+H8tL/obz0fygv/R/KS/8HAAAAgC1p59M3f0wiYumlkfojM5QvMyMItrbBohsAFKZSdAOAwty99G+wD6XT1fj/r/zLAXvfHKAASbvC+uCgtnbnv9n2lQAAAAAAAAAAAABAD+zZ1Xn+v7nBsLWZ9gfl9QDz/311ADzkfPU/lJdjfOB+s/iHOy0w/x8AAAAAAAAAAAAA+ma0/kjSiXwu8Gik6cRExP8jYkcMJnPz1dnJiHgkIn6oDP4vy08V3WgAAAAAAAAAAAAAAAAAAADYYhauXD07Xa3OXmpN/L2qZGsnmndB7UNdL8d/fFUk/f9YRiKi8I3Ss8RAS0kSsZRt+U3RsEsLsTmaUU8U/IcJAAAAAAAAAAAAAAAAAABKqGXucXu7v+hziwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACg/+7d/793iaJjBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeTv8GAAD//7V5QCw=") bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) creat(&(0x7f00000000c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f00000002c0)=ANY=[], 0x15) dup(r3) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000021007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r5}, 0x10) syz_open_procfs(0x0, &(0x7f0000000180)='net/kcm\x00') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000400)='io_uring_create\x00'}, 0x18) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(r6, 0x4b45, 0x0) ioctl$TIOCL_SETSEL(r6, 0x541c, &(0x7f00000000c0)={0x2, {0x2, 0x0, 0x300, 0x0, 0x8, 0x300}}) 1.662215486s ago: executing program 5 (id=786): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000050c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="740000001900010000000000000000001d01000005000d"], 0x74}, 0x1, 0x0, 0x0, 0x4}, 0x24040846) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) socket$xdp(0x2c, 0x3, 0x0) 1.661357726s ago: executing program 1 (id=787): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000002900000005"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x16, 0xc, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000060060000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000fdffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000030000"], &(0x7f0000000040)='GPL\x00', 0x7fff, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000180)='kfree\x00', r2}, 0x18) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000080)={'\x00', 0x39, 0x1ff, 0xfffffffb, 0x22c5, 0xb04, 0xffffffffffffffff}) kcmp(0x0, r4, 0x4, r3, r0) sendmsg$nl_route_sched(r0, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000002600)=@newtaction={0x488, 0x30, 0x12f, 0x0, 0x0, {}, [{0x474, 0x1, [@m_police={0x470, 0x1, 0x0, 0x0, {{0xb}, {0x444, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x548, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe40c, 0x0, 0x0, 0x0, 0x240000, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x518eaa54, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x8001, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x8e, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xf2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x550, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x4, 0x0, 0x800000, 0x4]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x4, 0x4, 0x8000009, 0x934a, {0x10, 0x2, 0x5, 0x4, 0x3, 0x100}, {0xf9, 0x2, 0x100, 0x81, 0xa}, 0x63febb3a, 0x4, 0x85}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x0, 0x1}}}}]}]}, 0x488}}, 0x0) 1.553806357s ago: executing program 1 (id=788): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0xff}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r4}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x18) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x1c, r6, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 747.369619ms ago: executing program 5 (id=789): bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="17000000000000000400"], 0x48) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r0}, 0x0, &(0x7f0000000340)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) syz_mount_image$vfat(&(0x7f0000000280), &(0x7f0000000000)='./file0\x00', 0x101c08a, &(0x7f0000000440)=ANY=[@ANYBLOB='shortname=mixed,iocharset=iso8859-=winnt,uni_xlate=1,uni_xlate=1,nonumtail=0,utf8=0,errors=continue,utf8=1,check=strict,iocharset=cp855,utf8=0,iocharset=koi8-u,codepage=857,utf8=0,rodir,shortname=win95,\x00'], 0x6, 0x2d4, &(0x7f00000006c0)="$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") 626.927851ms ago: executing program 1 (id=790): syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x404, &(0x7f00000005c0)={[{@discard}, {@bh}, {@nomblk_io_submit}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12) write(r1, &(0x7f0000004200)='t', 0x1) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000300)=ANY=[@ANYBLOB="04010000", @ANYBLOB="010000000000000000000100000024000300a05ca84f6c9c8e3853e2fd7a70ae0fb20f"], 0x104}, 0x1, 0x0, 0x0, 0x40000}, 0x20000010) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = fsmount(r3, 0x0, 0x4) syz_genetlink_get_family_id$SEG6(&(0x7f0000000200), r5) pwrite64(r4, 0x0, 0x0, 0x8080c61) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) 592.945491ms ago: executing program 4 (id=791): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff00000000000000", @ANYRES32=0x1, @ANYBLOB="000000000000000000000000b5b1df1900000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/25], 0x48) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000180)="2e00000011008b88040f80ec59acbc0413a1f8480f0000005e2900421803001825000a001400000002800000121f", 0x2e}], 0x1}, 0x800) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000240)='kfree\x00', r3, 0x0, 0x9}, 0x18) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYRES32=r1, @ANYRES16=r3, @ANYRESOCT], 0xf8}, 0x1, 0x0, 0x0, 0x2dd7abf44824eb72}, 0x4008040) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000c00)={0x18, 0x4, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x11}, 0x94) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000800)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16, @ANYBLOB="0103000000000000000001000d000800060000000000070003007e94342bfcb04a2209527daa6811477264c426400bdf063f249351960e9652fd6c021d9577"], 0x30}}, 0x40) socket$inet_smc(0x2b, 0x1, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r4}, &(0x7f0000000800), 0x0}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000001640)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x8c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='kfree\x00', r5}, 0x18) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000100)={0x0, 0x3, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a31000000001400078005001500070000000800124000000000050005000200000005000400000000000d000300686173683a6e6574"], 0x5c}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10040047}, 0x240008c4) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f00000008c0)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0}, 0x94) faccessat(0xffffffffffffff9c, &(0x7f0000000800)='./file0\x00', 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r8}, 0x10) syz_mount_image$ext4(&(0x7f0000000840)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0xca4e9a2efb741a00, &(0x7f0000000bc0)={[{@nobh}, {@data_writeback}], [{@dont_hash}, {@audit}]}, 0x1, 0x5ad, &(0x7f0000000180)="$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") 527.977762ms ago: executing program 5 (id=792): socket$inet6(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0xc7) close(r0) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000), 0x101000, 0x800, 0x3, 0x1}, 0x20) syz_io_uring_setup(0x2070c4, &(0x7f0000000280)={0x0, 0x86ec, 0x10000, 0x1, 0x220, 0x0, r0}, &(0x7f0000000340), &(0x7f0000000200)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000002080)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_type(r6, &(0x7f0000000040), 0x2, 0x0) sendfile(r5, r7, 0x0, 0x9) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r8 = bpf$ITER_CREATE(0xb, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000ec0), &(0x7f0000000180)='./file2\x00', 0x420c, &(0x7f0000003240)=ANY=[], 0x6, 0x360, &(0x7f0000000b00)="$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") r9 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x105042, 0x40) mmap$IORING_OFF_SQ_RING(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x100000b, 0x2013, r9, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(r1, &(0x7f00000001c0)={0x2c, 0x8, r3}, 0x10) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x20080, &(0x7f0000000300)=ANY=[@ANYRES64=r8, @ANYRESHEX=r0, @ANYRESDEC=r7, @ANYRES8=r8]) 268.413436ms ago: executing program 4 (id=793): socket$inet6(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) close(0xffffffffffffffff) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000), 0x101000, 0x800, 0x3, 0x1}, 0x20) syz_io_uring_setup(0x2070c4, &(0x7f0000000280)={0x0, 0x86ec, 0x10000, 0x1, 0x220}, &(0x7f0000000340), &(0x7f0000000200)) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f00000003c0)=0x800, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000002080)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_type(r5, &(0x7f0000000040), 0x2, 0x0) sendfile(r4, r6, 0x0, 0x9) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r7 = bpf$ITER_CREATE(0xb, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000ec0), &(0x7f0000000180)='./file2\x00', 0x420c, &(0x7f0000003240)=ANY=[], 0x6, 0x360, &(0x7f0000000b00)="$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") r8 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x105042, 0x40) mmap$IORING_OFF_SQ_RING(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x100000b, 0x2013, r8, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(r0, &(0x7f00000001c0)={0x2c, 0x8, r2}, 0x10) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x20080, &(0x7f0000000300)=ANY=[@ANYRES64=r7, @ANYRESHEX, @ANYRESDEC=r6, @ANYRES8=r7]) 212.228657ms ago: executing program 3 (id=794): r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f00000003c0)='mm_page_alloc\x00', r2, 0x0, 0xffffffffffffffff}, 0x18) r3 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x7, 0x0, 0x0, 0x0, 0x40008, 0x590, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x4c58, 0x1, 0x0, 0x0, 0x8, 0x4ac, 0xb, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000003, 0x13, r3, 0x0) pwrite64(r0, &(0x7f0000000080)='3', 0x1, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r4) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143041, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r6, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r6, 0x84, 0xa, &(0x7f00000001c0)={0x1, 0xfff, 0x0, 0x8, 0x9, 0xd, 0x4, 0x5, r7}, 0x20) pwritev2(r5, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r5, 0x40305829, &(0x7f00000000c0)={0x17c04, 0xffffffffffffffff, 0xfff, 0xfff, 0x9}) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000740)={0x1a4, 0x0, 0x1, 0x201, 0x0, 0x0, {0x1, 0x0, 0x3}, [@CTA_SEQ_ADJ_ORIG={0x54, 0xf, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x5}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x400}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x6}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x8}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x6}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x2}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x6}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x5}]}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x8}, @CTA_PROTOINFO={0x44, 0x4, 0x0, 0x1, @CTA_PROTOINFO_DCCP={0x40, 0x2, 0x0, 0x1, [@CTA_PROTOINFO_DCCP_STATE={0x5, 0x1, 0x5}, @CTA_PROTOINFO_DCCP_ROLE={0x5, 0x2, 0xe0}, @CTA_PROTOINFO_DCCP_STATE={0x5, 0x1, 0x6}, @CTA_PROTOINFO_DCCP_ROLE={0x5, 0x2, 0xf2}, @CTA_PROTOINFO_DCCP_ROLE={0x5, 0x2, 0x9}, @CTA_PROTOINFO_DCCP_ROLE={0x5, 0x2, 0x2}, @CTA_PROTOINFO_DCCP_HANDSHAKE_SEQ={0xc, 0x3, 0x1, 0x0, 0x9}]}}, @CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x3}, @CTA_LABELS_MASK={0x8, 0x17, [0x7]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x2}, @CTA_FILTER={0x3c, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x6}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x228}, @CTA_FILTER_ORIG_FLAGS={0x8}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x200}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x289}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x102}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x28}]}, @CTA_TUPLE_MASTER={0x9c, 0xe, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @multicast2}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @local}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @rand_addr=0x64010102}, {0x8, 0x2, @local}}}]}]}, 0x1a4}, 0x1, 0x0, 0x0, 0x880}, 0x0) wait4(0x0, &(0x7f0000000000), 0x2, &(0x7f0000000040)) 5.71662ms ago: executing program 3 (id=795): r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$KDFONTOP_SET(r0, 0x4b72, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x8) openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) write(r1, &(0x7f0000004200)='t', 0x1) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffc000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) setsockopt$IP6T_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x29, 0x41, 0x0, 0x78) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TCSETSF(r4, 0x5404, 0x0) 0s ago: executing program 2 (id=796): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x16, 0xc, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000060060000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000fdffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000000850000000300000095"], &(0x7f0000000040)='GPL\x00', 0x7fff, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000180)='kfree\x00', r1}, 0x18) r3 = getpgrp(0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x1f, &(0x7f0000000c00)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb85000000430000009574711c344eb77d0fc6a834a0bad55e40f81b9e4d84d2f107797be72f37a6c266d27ef0b6d486eca22ea0567b02b78387b57358fe0c587adc6d78fd2c83cdd7a294aea66c875d6ba0e6e904f5a47bc9e4a8fad6776846c23901564f0030a9aad095c867f94ee0404b31274d84426e9552d75ce5faf82a8710f3e750b9eec90239ff35f3d63913eaeb00"/217], 0x0, 0x10000004, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r5, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000100)=ANY=[@ANYBLOB="300000000203010200000000000000000000000008000340000000000900020000000000020000000800010001"], 0x30}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='sys_enter\x00'}, 0x10) syz_clone3(&(0x7f00000007c0)={0x40120000, 0x0, 0x0, 0x0, {0x40}, 0x0, 0x0, 0x0, 0x0}, 0x58) sendmsg$NFQNL_MSG_CONFIG(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)=ANY=[@ANYBLOB="50000000020301"], 0x50}, 0x1, 0x0, 0x0, 0x400c08c}, 0xb0) move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000080)={'\x00', 0x39, 0x1ff, 0xfffffffb, 0x22c5, 0xb04, 0xffffffffffffffff}) r8 = socket$kcm(0x2, 0x3, 0x84) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r10}, 0x10) sendmsg$inet(r8, &(0x7f0000001000)={&(0x7f0000000080)={0x2, 0x29, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000000580)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x14}, @loopback}}}], 0x20}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x18, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="d40a000040000000180000000000000000000000743039fe95"], &(0x7f0000000940)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x42}, 0x94) kcmp(r3, r7, 0x4, r2, r0) r11 = shmget(0x0, 0x1000, 0x100, &(0x7f0000ffd000/0x1000)=nil) shmctl$IPC_RMID(r11, 0x0) shmat(r11, &(0x7f0000ffc000/0x3000)=nil, 0x6000) sendmsg$nl_route_sched(r0, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000002600)=@newtaction={0x488, 0x30, 0x12f, 0x0, 0x0, {}, [{0x474, 0x1, [@m_police={0x470, 0x1, 0x0, 0x0, {{0xb}, {0x444, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x548, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe40c, 0x0, 0x0, 0x0, 0x240000, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x518eaa54, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x8001, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x8e, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xf2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x550, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x4, 0x0, 0x800000, 0x4]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x4, 0x4, 0x8000009, 0x934a, {0x10, 0x2, 0x5, 0x4, 0x3, 0x100}, {0xf9, 0x2, 0x100, 0x81, 0xa}, 0x63febb3a, 0x4, 0x85}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x0, 0x1}}}}]}]}, 0x488}}, 0x0) kernel console output (not intermixed with test programs): tions ignored when QUOTA feature is enabled [ 88.903390][ T4088] EXT4-fs (loop2): orphan cleanup on readonly fs [ 88.910689][ T4088] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.146: bg 0: block 248: padding at end of block bitmap is not set [ 88.926734][ T4088] Quota error (device loop2): write_blk: dquota write failed [ 88.934217][ T4088] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 88.944154][ T4088] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.146: Failed to acquire dquot type 1 [ 88.961362][ T4088] EXT4-fs (loop2): 1 truncate cleaned up [ 89.001447][ T4088] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 89.263112][ T4092] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 89.355872][ T29] audit: type=1400 audit(1751524193.319:228): avc: denied { ioctl } for pid=4097 comm="syz.3.150" path="socket:[4983]" dev="sockfs" ino=4983 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 89.431410][ T4092] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 89.580877][ T4101] netlink: 36 bytes leftover after parsing attributes in process `syz.0.149'. [ 90.936833][ T4108] capability: warning: `syz.4.153' uses deprecated v2 capabilities in a way that may be insecure [ 90.959896][ T29] audit: type=1400 audit(1751524194.919:229): avc: denied { bind } for pid=4107 comm="syz.4.153" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 91.265971][ T4111] xt_CT: No such helper "pptp" [ 91.273587][ T29] audit: type=1400 audit(1751524195.109:230): avc: denied { ioctl } for pid=4107 comm="syz.4.153" path="socket:[5747]" dev="sockfs" ino=5747 ioctlcmd=0x48f0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 91.298993][ T29] audit: type=1400 audit(1751524195.169:231): avc: denied { name_bind } for pid=4112 comm="syz.3.156" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 91.321550][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.369960][ T4115] loop0: detected capacity change from 0 to 4096 [ 91.422176][ T4115] loop0: detected capacity change from 0 to 1024 [ 91.458209][ T4115] ext4: Unknown parameter 'dont_appraise' [ 91.808998][ T4130] SELinux: syz.4.155 (4130) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 91.824037][ T4130] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 91.832975][ T4130] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 92.399437][ T4136] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 92.408241][ T4136] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 92.425698][ T4136] loop2: detected capacity change from 0 to 512 [ 92.434406][ T4136] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 92.482033][ T4136] EXT4-fs (loop2): orphan cleanup on readonly fs [ 92.489603][ T4136] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.161: bg 0: block 248: padding at end of block bitmap is not set [ 92.505077][ T4136] Quota error (device loop2): write_blk: dquota write failed [ 92.512707][ T4136] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 92.522665][ T4136] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.161: Failed to acquire dquot type 1 [ 92.534967][ T4136] EXT4-fs (loop2): 1 truncate cleaned up [ 92.542022][ T4136] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 92.559071][ T4136] EXT4-fs error (device loop2): ext4_lookup:1791: inode #2: comm syz.2.161: deleted inode referenced: 12 [ 92.728597][ T4140] loop1: detected capacity change from 0 to 512 [ 92.792000][ T4140] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 92.818162][ T4140] ext4 filesystem being mounted at /24/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 92.874184][ T29] audit: type=1400 audit(1751524196.799:232): avc: denied { bind } for pid=4144 comm="syz.3.164" lport=5 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 92.894317][ T29] audit: type=1400 audit(1751524196.809:233): avc: denied { name_bind } for pid=4144 comm="syz.3.164" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 92.915096][ T29] audit: type=1400 audit(1751524196.809:234): avc: denied { node_bind } for pid=4144 comm="syz.3.164" saddr=fe80::aa src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 92.962229][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.088957][ T29] audit: type=1326 audit(1751524197.039:235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4148 comm="syz.1.165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c3ec2e929 code=0x7ffc0000 [ 93.112360][ T29] audit: type=1326 audit(1751524197.039:236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4148 comm="syz.1.165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c3ec2e929 code=0x7ffc0000 [ 94.018952][ T4157] syz.1.167 (4157): /proc/4150/oom_adj is deprecated, please use /proc/4150/oom_score_adj instead. [ 95.046160][ T4115] syzkaller0: entered promiscuous mode [ 95.051785][ T4115] syzkaller0: entered allmulticast mode [ 96.511309][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.595954][ T4176] loop2: detected capacity change from 0 to 512 [ 97.655643][ T4176] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 97.665358][ T4176] EXT4-fs (loop2): orphan cleanup on readonly fs [ 97.758070][ T4184] loop0: detected capacity change from 0 to 512 [ 98.363855][ T4176] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.173: bg 0: block 248: padding at end of block bitmap is not set [ 98.628870][ T4176] __quota_error: 6 callbacks suppressed [ 98.628893][ T4176] Quota error (device loop2): write_blk: dquota write failed [ 98.642089][ T4176] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 98.652094][ T4176] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.173: Failed to acquire dquot type 1 [ 98.668573][ T4176] EXT4-fs (loop2): 1 truncate cleaned up [ 98.679472][ T4176] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 98.731427][ T4184] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 98.858197][ T4184] ext4 filesystem being mounted at /32/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 99.996443][ T4208] loop4: detected capacity change from 0 to 128 [ 100.078585][ T4210] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 100.530541][ T29] audit: type=1400 audit(1751524204.429:243): avc: denied { append } for pid=4183 comm="syz.0.176" path="/32/bus/memory.events.local" dev="loop0" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 100.578634][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.036140][ T4214] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 101.044637][ T4214] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 101.056712][ T4214] loop1: detected capacity change from 0 to 512 [ 101.071565][ T4214] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 101.087770][ T4214] EXT4-fs (loop1): orphan cleanup on readonly fs [ 101.095217][ T4214] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.183: bg 0: block 248: padding at end of block bitmap is not set [ 101.110714][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.120200][ T4214] Quota error (device loop1): write_blk: dquota write failed [ 101.127633][ T4214] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 101.137619][ T4214] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.183: Failed to acquire dquot type 1 [ 101.150509][ T4214] EXT4-fs (loop1): 1 truncate cleaned up [ 101.157149][ T4214] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 101.173605][ T4214] EXT4-fs error (device loop1): ext4_lookup:1791: inode #2: comm syz.1.183: deleted inode referenced: 12 [ 101.332251][ T4219] loop0: detected capacity change from 0 to 512 [ 101.546889][ T3981] kworker/u8:15: attempt to access beyond end of device [ 101.546889][ T3981] loop4: rw=1, sector=145, nr_sectors = 8 limit=128 [ 101.600326][ T4219] EXT4-fs (loop0): failed to open journal device unknown-block(0,0) -6 [ 101.614457][ T4223] loop2: detected capacity change from 0 to 256 [ 101.622207][ T3981] kworker/u8:15: attempt to access beyond end of device [ 101.622207][ T3981] loop4: rw=1, sector=161, nr_sectors = 8 limit=128 [ 101.636280][ T4223] msdos: Unknown parameter 'dLts' [ 101.645648][ T3981] kworker/u8:15: attempt to access beyond end of device [ 101.645648][ T3981] loop4: rw=1, sector=177, nr_sectors = 8 limit=128 [ 101.777162][ T3981] kworker/u8:15: attempt to access beyond end of device [ 101.777162][ T3981] loop4: rw=1, sector=193, nr_sectors = 8 limit=128 [ 101.790819][ T3981] kworker/u8:15: attempt to access beyond end of device [ 101.790819][ T3981] loop4: rw=1, sector=209, nr_sectors = 8 limit=128 [ 101.969733][ T3981] kworker/u8:15: attempt to access beyond end of device [ 101.969733][ T3981] loop4: rw=1, sector=225, nr_sectors = 8 limit=128 [ 102.040396][ T3981] kworker/u8:15: attempt to access beyond end of device [ 102.040396][ T3981] loop4: rw=1, sector=241, nr_sectors = 8 limit=128 [ 102.086150][ T3981] kworker/u8:15: attempt to access beyond end of device [ 102.086150][ T3981] loop4: rw=1, sector=257, nr_sectors = 8 limit=128 [ 102.138595][ T3981] kworker/u8:15: attempt to access beyond end of device [ 102.138595][ T3981] loop4: rw=1, sector=273, nr_sectors = 8 limit=128 [ 102.187502][ T3981] kworker/u8:15: attempt to access beyond end of device [ 102.187502][ T3981] loop4: rw=1, sector=289, nr_sectors = 8 limit=128 [ 102.333559][ T4227] loop4: detected capacity change from 0 to 512 [ 102.404208][ T4227] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 102.607513][ T4227] ext4 filesystem being mounted at /38/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 103.498678][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.881869][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.284362][ T4248] netlink: 72 bytes leftover after parsing attributes in process `syz.1.191'. [ 104.314376][ T4248] loop1: detected capacity change from 0 to 256 [ 104.705727][ T4262] loop4: detected capacity change from 0 to 256 [ 104.749381][ T4257] xt_CT: No such helper "pptp" [ 104.948059][ T4262] FAT-fs (loop4): codepage cp1255 not found [ 106.638525][ T4273] loop0: detected capacity change from 0 to 256 [ 106.662018][ T4273] msdos: Unknown parameter 'dLts' [ 108.390588][ T4287] loop0: detected capacity change from 0 to 4096 [ 109.131343][ T4287] loop0: detected capacity change from 0 to 1024 [ 109.167525][ T4287] ext4: Unknown parameter 'dont_appraise' [ 109.524886][ T4299] xt_CT: No such helper "pptp" [ 109.739081][ T4306] SELinux: syz.4.207 (4306) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 110.040397][ T4287] syzkaller0: entered promiscuous mode [ 110.046028][ T4287] syzkaller0: entered allmulticast mode [ 110.465536][ T4317] netlink: 12 bytes leftover after parsing attributes in process `syz.3.208'. [ 110.569721][ T4322] loop2: detected capacity change from 0 to 256 [ 110.579315][ T4322] msdos: Unknown parameter 'dLts' [ 111.111978][ T29] audit: type=1400 audit(1751524214.869:244): avc: denied { create } for pid=4325 comm="syz.3.214" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 111.131829][ T29] audit: type=1400 audit(1751524214.929:245): avc: denied { execmem } for pid=4328 comm="syz.3.215" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 111.709587][ T4333] loop1: detected capacity change from 0 to 128 [ 111.907896][ T4344] xt_CT: No such helper "pptp" [ 113.138454][ T4357] xt_CT: No such helper "pptp" [ 113.374309][ T4361] SELinux: syz.2.223 (4361) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 114.783275][ T4364] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 114.791862][ T4364] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 115.805346][ T4364] loop4: detected capacity change from 0 to 512 [ 116.328832][ T4373] loop2: detected capacity change from 0 to 128 [ 116.350745][ T4373] FAT-fs (loop2): Directory bread(block 32) failed [ 116.358760][ T4373] FAT-fs (loop2): Directory bread(block 33) failed [ 116.365762][ T4373] FAT-fs (loop2): Directory bread(block 34) failed [ 116.582608][ T4364] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 116.859716][ T4373] FAT-fs (loop2): Directory bread(block 35) failed [ 116.869038][ T4373] FAT-fs (loop2): Directory bread(block 36) failed [ 116.876673][ T4373] FAT-fs (loop2): Directory bread(block 37) failed [ 116.882993][ T4364] workqueue: Failed to create a rescuer kthread for wq "ext4-rsv-conversion": -EINTR [ 116.883210][ T4364] EXT4-fs: failed to create workqueue [ 116.883609][ T4373] FAT-fs (loop2): Directory bread(block 38) failed [ 116.892983][ T4364] EXT4-fs (loop4): mount failed [ 116.901137][ T4373] FAT-fs (loop2): Directory bread(block 39) failed [ 117.145571][ T4373] FAT-fs (loop2): Directory bread(block 40) failed [ 117.152376][ T4373] FAT-fs (loop2): Directory bread(block 41) failed [ 117.213190][ T4373] bio_check_eod: 81 callbacks suppressed [ 117.213205][ T4373] syz.2.227: attempt to access beyond end of device [ 117.213205][ T4373] loop2: rw=0, sector=4108, nr_sectors = 4 limit=128 [ 117.232974][ T4373] FAT-fs (loop2): Filesystem has been set read-only [ 117.239707][ T4373] FAT-fs (loop2): error, fat_free_clusters: deleting FAT entry beyond EOF [ 117.383965][ T4391] loop0: detected capacity change from 0 to 256 [ 117.390666][ T4391] msdos: Unknown parameter 'dLts' [ 118.137294][ T4400] loop1: detected capacity change from 0 to 512 [ 118.191813][ T4400] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 118.219840][ T4400] ext4 filesystem being mounted at /40/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 119.278786][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.303665][ T4411] netlink: 28 bytes leftover after parsing attributes in process `syz.3.235'. [ 120.644219][ T4424] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 120.653717][ T4424] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 122.425664][ T4424] loop1: detected capacity change from 0 to 512 [ 122.922669][ T4424] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 123.496035][ T4424] EXT4-fs (loop1): orphan cleanup on readonly fs [ 123.503507][ T4424] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.240: bg 0: block 248: padding at end of block bitmap is not set [ 123.518248][ T4424] Quota error (device loop1): write_blk: dquota write failed [ 123.525716][ T4424] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 123.535664][ T4424] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.240: Failed to acquire dquot type 1 [ 123.548260][ T4424] EXT4-fs (loop1): 1 truncate cleaned up [ 123.555531][ T4424] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 123.573108][ T4424] EXT4-fs error (device loop1): ext4_lookup:1791: inode #2: comm syz.1.240: deleted inode referenced: 12 [ 123.642467][ T4445] tipc: Started in network mode [ 123.647474][ T4445] tipc: Node identity 1652f4582c1e, cluster identity 4711 [ 123.654717][ T4445] tipc: Enabled bearer , priority 0 [ 123.674301][ T4444] tipc: Disabling bearer [ 123.740251][ T4457] loop0: detected capacity change from 0 to 1024 [ 123.746805][ T4458] netlink: 8 bytes leftover after parsing attributes in process `syz.3.250'. [ 123.806533][ T4457] EXT4-fs: Ignoring removed nomblk_io_submit option [ 123.813984][ T4457] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 123.840470][ T4457] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 124.217240][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 124.279047][ T29] audit: type=1400 audit(1751524228.239:246): avc: denied { bind } for pid=4470 comm="syz.3.257" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 124.359670][ T29] audit: type=1400 audit(1751524228.269:247): avc: denied { setopt } for pid=4470 comm="syz.3.257" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 124.395415][ T4475] loop0: detected capacity change from 0 to 512 [ 124.414858][ T4475] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 124.427641][ T4475] ext4 filesystem being mounted at /46/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 124.451287][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 124.587846][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 124.873041][ T4494] loop1: detected capacity change from 0 to 512 [ 124.915432][ T4494] EXT4-fs error (device loop1): ext4_ext_check_inode:523: inode #3: comm syz.1.264: pblk 24 bad header/extent: invalid extent entries - magic f30a, entries 3, max 4(4), depth 0(0) [ 124.935036][ T4494] EXT4-fs error (device loop1): ext4_quota_enable:7127: comm syz.1.264: Bad quota inode: 3, type: 0 [ 124.946994][ T4494] EXT4-fs warning (device loop1): ext4_enable_quotas:7168: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 124.963426][ T4494] EXT4-fs (loop1): mount failed [ 125.010797][ T29] audit: type=1326 audit(1751524228.969:248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4493 comm="syz.1.264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c3ec2e929 code=0x7ffc0000 [ 125.034197][ T29] audit: type=1326 audit(1751524228.969:249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4493 comm="syz.1.264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c3ec2e929 code=0x7ffc0000 [ 125.075136][ T29] audit: type=1326 audit(1751524229.029:250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4493 comm="syz.1.264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f9c3ec2e929 code=0x7ffc0000 [ 125.098516][ T29] audit: type=1326 audit(1751524229.029:251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4493 comm="syz.1.264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c3ec2e929 code=0x7ffc0000 [ 125.121848][ T29] audit: type=1326 audit(1751524229.029:252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4493 comm="syz.1.264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c3ec2e929 code=0x7ffc0000 [ 125.152295][ T29] audit: type=1326 audit(1751524229.039:253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4493 comm="syz.1.264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f9c3ec2e929 code=0x7ffc0000 [ 126.208101][ T4523] netlink: 72 bytes leftover after parsing attributes in process `syz.3.275'. [ 127.138050][ T4528] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 127.146993][ T4528] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 127.169243][ T4528] loop1: detected capacity change from 0 to 512 [ 127.186075][ T4528] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 127.197914][ T4528] EXT4-fs (loop1): orphan cleanup on readonly fs [ 127.223708][ T4528] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.273: bg 0: block 248: padding at end of block bitmap is not set [ 127.263525][ T4528] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.273: Failed to acquire dquot type 1 [ 127.308302][ T4528] EXT4-fs (loop1): 1 truncate cleaned up [ 127.323937][ T4528] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 127.341060][ T4528] EXT4-fs error (device loop1): ext4_lookup:1791: inode #2: comm syz.1.273: deleted inode referenced: 12 [ 129.375004][ T4549] loop4: detected capacity change from 0 to 512 [ 129.541865][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.601594][ T4549] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 129.614503][ T4549] ext4 filesystem being mounted at /59/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 131.445473][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.545865][ T29] kauditd_printk_skb: 10 callbacks suppressed [ 132.545880][ T29] audit: type=1326 audit(1751524236.509:262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4588 comm="syz.2.293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e0891e929 code=0x7ffc0000 [ 132.575460][ T29] audit: type=1326 audit(1751524236.509:263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4588 comm="syz.2.293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e0891e929 code=0x7ffc0000 [ 132.598884][ T29] audit: type=1326 audit(1751524236.509:264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4588 comm="syz.2.293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=160 compat=0 ip=0x7f4e0891e929 code=0x7ffc0000 [ 132.622130][ T29] audit: type=1326 audit(1751524236.509:265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4588 comm="syz.2.293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e0891e929 code=0x7ffc0000 [ 132.645911][ T29] audit: type=1326 audit(1751524236.509:266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4588 comm="syz.2.293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e0891e929 code=0x7ffc0000 [ 132.759576][ T4594] veth1_macvtap: left promiscuous mode [ 132.765768][ T4594] macsec0: entered promiscuous mode [ 132.848175][ T4596] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 132.856924][ T4596] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 132.875977][ T4596] loop2: detected capacity change from 0 to 512 [ 133.040386][ T4598] syz.3.296: attempt to access beyond end of device [ 133.040386][ T4598] loop7: rw=0, sector=0, nr_sectors = 1 limit=0 [ 133.158016][ T4598] FAT-fs (loop7): unable to read boot sector [ 134.253589][ T4602] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 134.262335][ T4602] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 134.724112][ T4602] loop1: detected capacity change from 0 to 512 [ 134.734848][ T4596] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 134.751048][ T4602] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 134.762004][ T4602] EXT4-fs (loop1): orphan cleanup on readonly fs [ 134.769651][ T4602] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.297: bg 0: block 248: padding at end of block bitmap is not set [ 134.785426][ T4602] Quota error (device loop1): write_blk: dquota write failed [ 134.792870][ T4602] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 134.802925][ T4602] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.297: Failed to acquire dquot type 1 [ 134.815514][ T4602] EXT4-fs (loop1): 1 truncate cleaned up [ 134.834400][ T4596] EXT4-fs (loop2): orphan cleanup on readonly fs [ 134.841836][ T4596] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.295: bg 0: block 248: padding at end of block bitmap is not set [ 134.858872][ T4596] Quota error (device loop2): write_blk: dquota write failed [ 134.866597][ T4596] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 134.876593][ T4596] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.295: Failed to acquire dquot type 1 [ 134.896814][ T4602] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 134.916741][ T4596] EXT4-fs (loop2): 1 truncate cleaned up [ 134.925089][ T4596] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 134.964073][ T4595] EXT4-fs error (device loop2): ext4_lookup:1791: inode #2: comm syz.2.295: deleted inode referenced: 12 [ 136.084334][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.200945][ T4611] loop2: detected capacity change from 0 to 512 [ 136.275965][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.398020][ T4611] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 136.416871][ T4611] ext4 filesystem being mounted at /61/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 136.502540][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.540838][ T4627] loop1: detected capacity change from 0 to 256 [ 137.235437][ T4627] FAT-fs (loop1): codepage cp1255 not found [ 137.270102][ T29] audit: type=1326 audit(1751524241.219:267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4622 comm="syz.1.302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c3ec2e929 code=0x7ffc0000 [ 137.486132][ T4630] bridge0: port 3(gretap0) entered blocking state [ 137.492821][ T4630] bridge0: port 3(gretap0) entered disabled state [ 137.499399][ T4630] gretap0: entered allmulticast mode [ 137.505268][ T4630] gretap0: entered promiscuous mode [ 137.510749][ T4630] bridge0: port 3(gretap0) entered blocking state [ 137.517313][ T4630] bridge0: port 3(gretap0) entered forwarding state [ 137.814248][ T4637] bridge1: entered promiscuous mode [ 137.819908][ T4637] bridge1: entered allmulticast mode [ 139.752269][ T4657] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 139.760954][ T4657] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 139.773029][ T4657] loop4: detected capacity change from 0 to 512 [ 139.782876][ T4657] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 139.798100][ T4657] EXT4-fs (loop4): orphan cleanup on readonly fs [ 139.805439][ T4657] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.311: bg 0: block 248: padding at end of block bitmap is not set [ 139.821397][ T4657] __quota_error: 7 callbacks suppressed [ 139.821417][ T4657] Quota error (device loop4): write_blk: dquota write failed [ 139.834659][ T4657] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 139.844730][ T4657] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.311: Failed to acquire dquot type 1 [ 139.858534][ T4657] EXT4-fs (loop4): 1 truncate cleaned up [ 139.869262][ T4657] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 139.888660][ T4657] EXT4-fs error (device loop4): ext4_lookup:1791: inode #2: comm syz.4.311: deleted inode referenced: 12 [ 140.573190][ T4662] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 140.581726][ T4662] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 141.625980][ T4662] loop1: detected capacity change from 0 to 512 [ 142.482638][ T4662] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 142.839130][ T4662] EXT4-fs (loop1): orphan cleanup on readonly fs [ 142.846119][ T4662] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.313: bg 0: block 248: padding at end of block bitmap is not set [ 142.861782][ T4662] Quota error (device loop1): write_blk: dquota write failed [ 142.869533][ T4662] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 142.879645][ T4662] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.313: Failed to acquire dquot type 1 [ 142.891939][ T4662] EXT4-fs (loop1): 1 truncate cleaned up [ 143.099871][ T4662] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 143.977595][ T29] audit: type=1400 audit(1751524247.939:275): avc: denied { mounton } for pid=4678 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 144.191821][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.341809][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.603893][ T4703] loop2: detected capacity change from 0 to 128 [ 145.668825][ T29] audit: type=1400 audit(1751524249.629:276): avc: denied { read } for pid=4705 comm="syz.1.327" name="loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 145.692924][ T29] audit: type=1400 audit(1751524249.629:277): avc: denied { open } for pid=4705 comm="syz.1.327" path="/dev/loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 146.833288][ T4725] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 146.841752][ T4725] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 147.795496][ T4678] chnl_net:caif_netlink_parms(): no params data found [ 147.828789][ T3992] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.403438][ T4721] loop1: detected capacity change from 0 to 512 [ 149.195237][ T3992] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.852606][ T4721] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 149.903690][ T4721] EXT4-fs (loop1): orphan cleanup on readonly fs [ 149.911128][ T4721] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.330: bg 0: block 248: padding at end of block bitmap is not set [ 149.926578][ T4721] Quota error (device loop1): write_blk: dquota write failed [ 149.934036][ T4721] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 149.944001][ T4721] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.330: Failed to acquire dquot type 1 [ 150.203412][ T4678] bridge0: port 1(bridge_slave_0) entered blocking state [ 150.210546][ T4678] bridge0: port 1(bridge_slave_0) entered disabled state [ 150.218414][ T4678] bridge_slave_0: entered allmulticast mode [ 150.225593][ T4678] bridge_slave_0: entered promiscuous mode [ 151.022437][ T4749] loop2: detected capacity change from 0 to 512 [ 151.032981][ T4749] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 151.044334][ T4721] EXT4-fs (loop1): 1 truncate cleaned up [ 151.051258][ T4721] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 151.129229][ T4749] EXT4-fs (loop2): orphan cleanup on readonly fs [ 151.139090][ T4749] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.333: bg 0: block 248: padding at end of block bitmap is not set [ 151.154725][ T4749] Quota error (device loop2): write_blk: dquota write failed [ 151.162204][ T4749] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 151.172224][ T4749] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.333: Failed to acquire dquot type 1 [ 151.186793][ T4749] EXT4-fs (loop2): 1 truncate cleaned up [ 151.194291][ T4749] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 151.224381][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 151.241162][ T3992] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.506451][ T4757] loop1: detected capacity change from 0 to 128 [ 151.587537][ T4758] xt_bpf: check failed: parse error [ 151.996738][ T3992] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.180208][ T3992] bridge_slave_1: left allmulticast mode [ 152.186202][ T3992] bridge_slave_1: left promiscuous mode [ 152.191910][ T3992] bridge0: port 2(bridge_slave_1) entered disabled state [ 152.402720][ T3992] bridge_slave_0: left allmulticast mode [ 152.408520][ T3992] bridge_slave_0: left promiscuous mode [ 152.414366][ T3992] bridge0: port 1(bridge_slave_0) entered disabled state [ 152.453821][ T4764] netlink: 20 bytes leftover after parsing attributes in process `syz.1.341'. [ 152.548481][ T4767] loop4: detected capacity change from 0 to 8192 [ 152.568975][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 152.712934][ T4767] loop4: p1 p2[DM] p4 [ 152.717385][ T4767] loop4: p1 size 196608 extends beyond EOD, truncated [ 152.745120][ T3992] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 152.766639][ T3992] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 152.781757][ T3992] bond0 (unregistering): Released all slaves [ 152.803042][ T4767] loop4: p2 start 4292936063 is beyond EOD, truncated [ 152.809892][ T4767] loop4: p4 size 50331648 extends beyond EOD, truncated [ 152.833825][ T29] audit: type=1326 audit(1751524256.729:278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4768 comm="syz.3.344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45865ee929 code=0x7ffc0000 [ 152.857398][ T29] audit: type=1326 audit(1751524256.729:279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4768 comm="syz.3.344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45865ee929 code=0x7ffc0000 [ 152.880753][ T29] audit: type=1326 audit(1751524256.729:280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4768 comm="syz.3.344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f45865ee929 code=0x7ffc0000 [ 152.904126][ T29] audit: type=1326 audit(1751524256.729:281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4768 comm="syz.3.344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45865ee929 code=0x7ffc0000 [ 152.927400][ T29] audit: type=1326 audit(1751524256.729:282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4768 comm="syz.3.344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45865ee929 code=0x7ffc0000 [ 152.950667][ T29] audit: type=1326 audit(1751524256.729:283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4768 comm="syz.3.344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=87 compat=0 ip=0x7f45865ee929 code=0x7ffc0000 [ 152.973830][ T29] audit: type=1326 audit(1751524256.729:284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4768 comm="syz.3.344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45865ee929 code=0x7ffc0000 [ 152.997324][ T29] audit: type=1326 audit(1751524256.729:285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4768 comm="syz.3.344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45865ee929 code=0x7ffc0000 [ 153.132806][ T4678] bridge0: port 2(bridge_slave_1) entered blocking state [ 153.140000][ T4678] bridge0: port 2(bridge_slave_1) entered disabled state [ 153.219035][ T4678] bridge_slave_1: entered allmulticast mode [ 153.399930][ T4678] bridge_slave_1: entered promiscuous mode [ 153.560745][ T3992] tipc: Left network mode [ 153.568910][ T3992] hsr_slave_0: left promiscuous mode [ 153.575339][ T3992] hsr_slave_1: left promiscuous mode [ 153.581089][ T3992] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 153.588558][ T3992] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 153.597530][ T3992] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 153.605133][ T3992] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 153.617755][ T3992] veth1_macvtap: left promiscuous mode [ 153.830077][ T3992] veth0_macvtap: left promiscuous mode [ 153.842394][ T3992] veth1_vlan: left promiscuous mode [ 154.154893][ T3992] veth0_vlan: left promiscuous mode [ 154.274245][ T3992] team0 (unregistering): Port device team_slave_1 removed [ 154.288134][ T3992] team0 (unregistering): Port device team_slave_0 removed [ 154.337065][ T4678] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 154.371689][ T4678] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 154.434523][ T4798] loop4: detected capacity change from 0 to 128 [ 154.486540][ T4678] team0: Port device team_slave_0 added [ 154.530413][ T4678] team0: Port device team_slave_1 added [ 154.680466][ T4678] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 154.687594][ T4678] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 154.713875][ T4678] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 154.765228][ T4678] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 154.772255][ T4678] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 154.798295][ T4678] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 154.873549][ T4678] hsr_slave_0: entered promiscuous mode [ 154.879665][ T4678] hsr_slave_1: entered promiscuous mode [ 154.885777][ T4678] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 154.893695][ T4678] Cannot create hsr debugfs directory [ 154.969961][ T4827] netlink: 20 bytes leftover after parsing attributes in process `syz.3.353'. [ 155.151272][ T4678] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 155.193149][ T4678] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 155.224683][ T4678] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 155.237712][ T4678] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 155.351419][ T4678] 8021q: adding VLAN 0 to HW filter on device bond0 [ 155.370682][ T4678] 8021q: adding VLAN 0 to HW filter on device team0 [ 155.486546][ T3999] bridge0: port 1(bridge_slave_0) entered blocking state [ 155.493854][ T3999] bridge0: port 1(bridge_slave_0) entered forwarding state [ 155.503405][ T3999] bridge0: port 2(bridge_slave_1) entered blocking state [ 155.510546][ T3999] bridge0: port 2(bridge_slave_1) entered forwarding state [ 155.578260][ T4678] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 155.588719][ T4678] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 155.638832][ T4857] xt_CT: No such helper "pptp" [ 156.328222][ T4881] loop2: detected capacity change from 0 to 512 [ 156.340685][ T4678] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 156.502657][ T29] kauditd_printk_skb: 15 callbacks suppressed [ 156.502736][ T29] audit: type=1400 audit(1751524260.459:301): avc: denied { bind } for pid=4887 comm="syz.1.362" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 156.574187][ T29] audit: type=1400 audit(1751524260.469:302): avc: denied { ioctl } for pid=4887 comm="syz.1.362" path="/dev/loop-control" dev="devtmpfs" ino=99 ioctlcmd=0x4c82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 156.972042][ T4913] loop4: detected capacity change from 0 to 128 [ 157.030003][ T4678] veth0_vlan: entered promiscuous mode [ 157.038470][ T4678] veth1_vlan: entered promiscuous mode [ 157.070298][ T4678] veth0_macvtap: entered promiscuous mode [ 157.079969][ T4678] veth1_macvtap: entered promiscuous mode [ 157.100475][ T4678] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 157.115615][ T4678] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 157.132131][ T4926] loop4: detected capacity change from 0 to 256 [ 157.147262][ T4678] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.156160][ T4678] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.164977][ T4678] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.173905][ T4678] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.366905][ T4926] FAT-fs (loop4): codepage cp1255 not found [ 157.387811][ T29] audit: type=1326 audit(1751524261.349:303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4919 comm="syz.4.365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc64c39e929 code=0x7ffc0000 [ 157.411154][ T29] audit: type=1326 audit(1751524261.349:304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4919 comm="syz.4.365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc64c39e929 code=0x7ffc0000 [ 157.434431][ T29] audit: type=1326 audit(1751524261.349:305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4919 comm="syz.4.365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7fc64c39e929 code=0x7ffc0000 [ 157.457959][ T29] audit: type=1326 audit(1751524261.349:306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4919 comm="syz.4.365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc64c39e929 code=0x7ffc0000 [ 157.481349][ T29] audit: type=1326 audit(1751524261.349:307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4919 comm="syz.4.365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc64c39e929 code=0x7ffc0000 [ 157.504714][ T29] audit: type=1326 audit(1751524261.349:308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4919 comm="syz.4.365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=87 compat=0 ip=0x7fc64c39e929 code=0x7ffc0000 [ 157.527972][ T29] audit: type=1326 audit(1751524261.349:309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4919 comm="syz.4.365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc64c39e929 code=0x7ffc0000 [ 157.551513][ T29] audit: type=1326 audit(1751524261.349:310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4919 comm="syz.4.365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc64c39e929 code=0x7ffc0000 [ 157.615321][ T4930] loop2: detected capacity change from 0 to 512 [ 157.729684][ T4934] loop1: detected capacity change from 0 to 256 [ 157.783570][ T4930] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 157.797574][ T4934] msdos: Unknown parameter 'dLts' [ 157.962626][ T4930] ext4 filesystem being mounted at /78/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 159.273161][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 159.908064][ T4969] loop2: detected capacity change from 0 to 512 [ 159.959517][ T4969] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 159.978240][ T4969] EXT4-fs (loop2): orphan cleanup on readonly fs [ 159.986109][ T4969] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.369: bg 0: block 248: padding at end of block bitmap is not set [ 160.002430][ T4969] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.369: Failed to acquire dquot type 1 [ 160.016606][ T4969] EXT4-fs (loop2): 1 truncate cleaned up [ 160.023815][ T4969] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 160.360496][ T4977] loop4: detected capacity change from 0 to 128 [ 161.261859][ T4942] syzkaller0: entered promiscuous mode [ 161.267610][ T4942] syzkaller0: entered allmulticast mode [ 161.829746][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.923274][ T5011] loop4: detected capacity change from 0 to 256 [ 161.933546][ T5007] loop1: detected capacity change from 0 to 1024 [ 161.977240][ T5007] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 162.049004][ T5010] loop2: detected capacity change from 0 to 512 [ 162.099950][ T5011] FAT-fs (loop4): codepage cp1255 not found [ 162.117692][ T29] kauditd_printk_skb: 4 callbacks suppressed [ 162.117710][ T29] audit: type=1326 audit(1751524266.079:313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5004 comm="syz.4.380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc64c39e929 code=0x7ffc0000 [ 162.147148][ T29] audit: type=1326 audit(1751524266.079:314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5004 comm="syz.4.380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc64c39e929 code=0x7ffc0000 [ 162.170478][ T29] audit: type=1326 audit(1751524266.079:315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5004 comm="syz.4.380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7fc64c39e929 code=0x7ffc0000 [ 162.193803][ T29] audit: type=1326 audit(1751524266.079:316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5004 comm="syz.4.380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc64c39e929 code=0x7ffc0000 [ 162.217234][ T29] audit: type=1326 audit(1751524266.079:317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5004 comm="syz.4.380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc64c39e929 code=0x7ffc0000 [ 162.240530][ T29] audit: type=1326 audit(1751524266.079:318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5004 comm="syz.4.380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=87 compat=0 ip=0x7fc64c39e929 code=0x7ffc0000 [ 162.263804][ T29] audit: type=1326 audit(1751524266.079:319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5004 comm="syz.4.380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc64c39e929 code=0x7ffc0000 [ 162.287140][ T29] audit: type=1326 audit(1751524266.079:320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5004 comm="syz.4.380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc64c39e929 code=0x7ffc0000 [ 162.608149][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.709522][ T5018] xt_CT: No such helper "pptp" [ 162.902717][ T5010] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 162.968124][ T5031] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 162.976790][ T5031] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 163.002758][ T5010] ext4 filesystem being mounted at /80/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 163.029830][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.624883][ T5064] loop4: detected capacity change from 0 to 128 [ 163.634065][ T5069] tipc: Enabling of bearer <‰ý‘eth:gr> rejected, media not registered [ 163.804094][ T29] audit: type=1400 audit(1751524267.759:321): avc: denied { load_policy } for pid=5077 comm="syz.1.390" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 163.837993][ T5078] SELinux: failed to load policy [ 163.893963][ T5082] hub 6-0:1.0: USB hub found [ 163.898744][ T5082] hub 6-0:1.0: 8 ports detected [ 163.939271][ T3985] kworker/u8:17: attempt to access beyond end of device [ 163.939271][ T3985] loop4: rw=1, sector=145, nr_sectors = 8 limit=128 [ 163.988146][ T3985] kworker/u8:17: attempt to access beyond end of device [ 163.988146][ T3985] loop4: rw=1, sector=161, nr_sectors = 8 limit=128 [ 164.015555][ T3985] kworker/u8:17: attempt to access beyond end of device [ 164.015555][ T3985] loop4: rw=1, sector=177, nr_sectors = 8 limit=128 [ 164.029203][ T3985] kworker/u8:17: attempt to access beyond end of device [ 164.029203][ T3985] loop4: rw=1, sector=193, nr_sectors = 8 limit=128 [ 164.042877][ T3985] kworker/u8:17: attempt to access beyond end of device [ 164.042877][ T3985] loop4: rw=1, sector=209, nr_sectors = 8 limit=128 [ 164.056505][ T3985] kworker/u8:17: attempt to access beyond end of device [ 164.056505][ T3985] loop4: rw=1, sector=225, nr_sectors = 8 limit=128 [ 164.070106][ T3985] kworker/u8:17: attempt to access beyond end of device [ 164.070106][ T3985] loop4: rw=1, sector=241, nr_sectors = 8 limit=128 [ 164.178957][ T3985] kworker/u8:17: attempt to access beyond end of device [ 164.178957][ T3985] loop4: rw=1, sector=257, nr_sectors = 8 limit=128 [ 164.198672][ T3985] kworker/u8:17: attempt to access beyond end of device [ 164.198672][ T3985] loop4: rw=1, sector=273, nr_sectors = 8 limit=128 [ 164.212473][ T3985] kworker/u8:17: attempt to access beyond end of device [ 164.212473][ T3985] loop4: rw=1, sector=289, nr_sectors = 8 limit=128 [ 164.490504][ T5095] netlink: 28 bytes leftover after parsing attributes in process `syz.4.392'. [ 164.632156][ T5099] loop2: detected capacity change from 0 to 512 [ 164.674263][ T5099] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 164.688902][ T5099] ext4 filesystem being mounted at /82/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 165.026082][ T5108] loop1: detected capacity change from 0 to 1024 [ 165.069504][ T5108] EXT4-fs: Ignoring removed nomblk_io_submit option [ 165.139094][ T5108] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 165.206769][ T5108] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 165.346473][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.379954][ T5116] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 165.404726][ T5116] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 165.448568][ T5118] loop4: detected capacity change from 0 to 256 [ 165.559039][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.672695][ T5118] FAT-fs (loop4): codepage cp1255 not found [ 165.689403][ T29] audit: type=1326 audit(1751524269.649:322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5113 comm="syz.4.399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc64c39e929 code=0x7ffc0000 [ 167.374412][ T5134] loop2: detected capacity change from 0 to 1024 [ 167.394263][ T5134] EXT4-fs: Ignoring removed nobh option [ 167.399966][ T5134] EXT4-fs: Ignoring removed bh option [ 167.669685][ T5134] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 167.729283][ T29] kauditd_printk_skb: 7 callbacks suppressed [ 167.729302][ T29] audit: type=1400 audit(1751524271.689:330): avc: denied { map } for pid=5133 comm="syz.2.405" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=8175 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 167.759423][ T29] audit: type=1400 audit(1751524271.689:331): avc: denied { read write } for pid=5133 comm="syz.2.405" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=8175 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 167.784118][ T29] audit: type=1400 audit(1751524271.689:332): avc: denied { read write } for pid=5133 comm="syz.2.405" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 167.807224][ T29] audit: type=1400 audit(1751524271.689:333): avc: denied { open } for pid=5133 comm="syz.2.405" path="/dev/ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 167.967305][ T5148] loop1: detected capacity change from 0 to 1024 [ 167.993124][ T29] audit: type=1400 audit(1751524271.789:334): avc: denied { ioctl } for pid=5133 comm="syz.2.405" path="/dev/ppp" dev="devtmpfs" ino=140 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 168.017895][ T29] audit: type=1326 audit(1751524271.879:335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5133 comm="syz.2.405" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e0891e929 code=0x7ffc0000 [ 168.041358][ T29] audit: type=1326 audit(1751524271.879:336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5133 comm="syz.2.405" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e0891e929 code=0x7ffc0000 [ 168.065327][ T29] audit: type=1326 audit(1751524271.889:337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5133 comm="syz.2.405" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f4e0891d290 code=0x7ffc0000 [ 168.068152][ T5148] EXT4-fs: Ignoring removed nomblk_io_submit option [ 168.088840][ T29] audit: type=1326 audit(1751524271.889:338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5133 comm="syz.2.405" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e0891e929 code=0x7ffc0000 [ 168.119537][ T29] audit: type=1326 audit(1751524271.889:339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5133 comm="syz.2.405" exe="/root/syz-executor" sig=0 arch=c000003e syscall=17 compat=0 ip=0x7f4e0891e929 code=0x7ffc0000 [ 168.182396][ T5148] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 168.231115][ T5148] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 168.416770][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 168.599444][ T5161] loop1: detected capacity change from 0 to 256 [ 168.618912][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 168.652203][ T5158] netlink: 28 bytes leftover after parsing attributes in process `syz.5.409'. [ 168.821597][ T5161] FAT-fs (loop1): codepage cp874 not found [ 169.819366][ T5182] loop5: detected capacity change from 0 to 512 [ 169.826174][ T5182] EXT4-fs: test_dummy_encryption option not supported [ 170.553203][ T5188] netlink: 28 bytes leftover after parsing attributes in process `syz.3.415'. [ 170.564537][ T5188] netlink: 40 bytes leftover after parsing attributes in process `syz.3.415'. [ 170.828647][ T5191] loop4: detected capacity change from 0 to 128 [ 171.053173][ T5207] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 171.076736][ T5207] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 171.274649][ T5213] xt_bpf: check failed: parse error [ 171.951208][ T3985] bio_check_eod: 102 callbacks suppressed [ 171.951226][ T3985] kworker/u8:17: attempt to access beyond end of device [ 171.951226][ T3985] loop4: rw=1, sector=145, nr_sectors = 8 limit=128 [ 172.007879][ T3985] kworker/u8:17: attempt to access beyond end of device [ 172.007879][ T3985] loop4: rw=1, sector=161, nr_sectors = 8 limit=128 [ 172.023430][ T3985] kworker/u8:17: attempt to access beyond end of device [ 172.023430][ T3985] loop4: rw=1, sector=177, nr_sectors = 8 limit=128 [ 172.037236][ T3985] kworker/u8:17: attempt to access beyond end of device [ 172.037236][ T3985] loop4: rw=1, sector=193, nr_sectors = 8 limit=128 [ 172.051869][ T3985] kworker/u8:17: attempt to access beyond end of device [ 172.051869][ T3985] loop4: rw=1, sector=209, nr_sectors = 8 limit=128 [ 172.065484][ T3985] kworker/u8:17: attempt to access beyond end of device [ 172.065484][ T3985] loop4: rw=1, sector=225, nr_sectors = 8 limit=128 [ 172.079151][ T3985] kworker/u8:17: attempt to access beyond end of device [ 172.079151][ T3985] loop4: rw=1, sector=241, nr_sectors = 8 limit=128 [ 172.101891][ T3985] kworker/u8:17: attempt to access beyond end of device [ 172.101891][ T3985] loop4: rw=1, sector=257, nr_sectors = 8 limit=128 [ 172.133698][ T3985] kworker/u8:17: attempt to access beyond end of device [ 172.133698][ T3985] loop4: rw=1, sector=273, nr_sectors = 8 limit=128 [ 172.172170][ T3985] kworker/u8:17: attempt to access beyond end of device [ 172.172170][ T3985] loop4: rw=1, sector=289, nr_sectors = 8 limit=128 [ 172.215711][ T5231] loop2: detected capacity change from 0 to 512 [ 172.223152][ T5231] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 172.243949][ T5231] EXT4-fs (loop2): orphan cleanup on readonly fs [ 172.253776][ T5231] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.429: bg 0: block 248: padding at end of block bitmap is not set [ 172.276050][ T5231] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.429: Failed to acquire dquot type 1 [ 172.289195][ T5231] EXT4-fs (loop2): 1 truncate cleaned up [ 172.296400][ T5231] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 172.374566][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 173.162852][ T5253] veth1_macvtap: left promiscuous mode [ 173.168534][ T5253] macsec0: entered promiscuous mode [ 173.271215][ T5255] loop5: detected capacity change from 0 to 128 [ 174.275368][ T5295] xt_CT: No such helper "pptp" [ 174.538914][ T5313] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 174.547558][ T5313] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 174.777514][ T5316] tipc: Started in network mode [ 174.782501][ T5316] tipc: Node identity ac14140f, cluster identity 4711 [ 174.881908][ T5316] tipc: New replicast peer: 255.255.255.255 [ 174.888104][ T5316] tipc: Enabled bearer , priority 10 [ 176.017332][ T3400] tipc: Node number set to 2886997007 [ 176.183172][ T5376] loop1: detected capacity change from 0 to 256 [ 176.285212][ T5376] FAT-fs (loop1): codepage cp1255 not found [ 176.580244][ T5386] loop5: detected capacity change from 0 to 128 [ 176.650937][ T5386] FAT-fs (loop5): Directory bread(block 32) failed [ 176.701102][ T5386] FAT-fs (loop5): Directory bread(block 33) failed [ 176.743560][ T5386] FAT-fs (loop5): Directory bread(block 34) failed [ 176.750218][ T5386] FAT-fs (loop5): Directory bread(block 35) failed [ 176.762298][ T5386] FAT-fs (loop5): Directory bread(block 36) failed [ 176.770015][ T5386] FAT-fs (loop5): Directory bread(block 37) failed [ 176.992399][ T5386] FAT-fs (loop5): Directory bread(block 38) failed [ 177.000804][ T5386] FAT-fs (loop5): Directory bread(block 39) failed [ 177.007795][ T5386] FAT-fs (loop5): Directory bread(block 40) failed [ 177.014474][ T5386] FAT-fs (loop5): Directory bread(block 41) failed [ 177.082243][ T5386] bio_check_eod: 186 callbacks suppressed [ 177.082262][ T5386] syz.5.455: attempt to access beyond end of device [ 177.082262][ T5386] loop5: rw=0, sector=4108, nr_sectors = 4 limit=128 [ 177.493496][ T5386] FAT-fs (loop5): Filesystem has been set read-only [ 177.500223][ T5386] FAT-fs (loop5): error, fat_free_clusters: deleting FAT entry beyond EOF [ 177.821718][ T5414] loop5: detected capacity change from 0 to 128 [ 177.890247][ T5415] syz.5.458: attempt to access beyond end of device [ 177.890247][ T5415] loop5: rw=2049, sector=145, nr_sectors = 8 limit=128 [ 177.931229][ T5415] syz.5.458: attempt to access beyond end of device [ 177.931229][ T5415] loop5: rw=2049, sector=161, nr_sectors = 8 limit=128 [ 177.988408][ T5415] syz.5.458: attempt to access beyond end of device [ 177.988408][ T5415] loop5: rw=2049, sector=177, nr_sectors = 8 limit=128 [ 178.019731][ T5415] syz.5.458: attempt to access beyond end of device [ 178.019731][ T5415] loop5: rw=2049, sector=193, nr_sectors = 8 limit=128 [ 178.127789][ T5415] syz.5.458: attempt to access beyond end of device [ 178.127789][ T5415] loop5: rw=2049, sector=209, nr_sectors = 8 limit=128 [ 178.177287][ T5415] syz.5.458: attempt to access beyond end of device [ 178.177287][ T5415] loop5: rw=2049, sector=225, nr_sectors = 8 limit=128 [ 178.227346][ T5415] syz.5.458: attempt to access beyond end of device [ 178.227346][ T5415] loop5: rw=2049, sector=241, nr_sectors = 8 limit=128 [ 178.281802][ T5415] syz.5.458: attempt to access beyond end of device [ 178.281802][ T5415] loop5: rw=2049, sector=257, nr_sectors = 8 limit=128 [ 178.331120][ T5415] syz.5.458: attempt to access beyond end of device [ 178.331120][ T5415] loop5: rw=2049, sector=273, nr_sectors = 8 limit=128 [ 178.358696][ T5419] xt_CT: No such helper "pptp" [ 178.539263][ T5448] loop5: detected capacity change from 0 to 512 [ 178.549477][ T5448] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 178.762966][ T5448] EXT4-fs (loop5): orphan cleanup on readonly fs [ 178.773058][ T5448] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.464: bg 0: block 248: padding at end of block bitmap is not set [ 178.788136][ T5448] __quota_error: 6 callbacks suppressed [ 178.788149][ T5448] Quota error (device loop5): write_blk: dquota write failed [ 178.801247][ T5448] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 178.811256][ T5448] EXT4-fs error (device loop5): ext4_acquire_dquot:6933: comm syz.5.464: Failed to acquire dquot type 1 [ 178.845786][ T5448] EXT4-fs (loop5): 1 truncate cleaned up [ 179.029257][ T5448] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 179.054429][ T4678] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 179.175694][ T5457] netlink: 28 bytes leftover after parsing attributes in process `syz.4.463'. [ 179.354581][ T5466] xt_CT: No such helper "pptp" [ 179.455001][ T5471] loop4: detected capacity change from 0 to 1024 [ 179.467152][ T5471] EXT4-fs: Ignoring removed bh option [ 179.475367][ T5471] EXT4-fs: inline encryption not supported [ 179.485143][ T5471] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 179.503539][ T5471] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 179.522493][ T5471] EXT4-fs error (device loop4): ext4_map_blocks:780: inode #3: block 2: comm syz.4.470: lblock 2 mapped to illegal pblock 2 (length 1) [ 179.562021][ T5471] Quota error (device loop4): qtree_write_dquot: dquota write failed [ 179.628857][ T5471] EXT4-fs error (device loop4): ext4_map_blocks:780: inode #3: block 48: comm syz.4.470: lblock 0 mapped to illegal pblock 48 (length 1) [ 179.722421][ T5471] Quota error (device loop4): v2_write_file_info: Can't write info structure [ 179.731436][ T5471] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.470: Failed to acquire dquot type 0 [ 179.830356][ T5471] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6255: Corrupt filesystem [ 179.917913][ T5471] EXT4-fs error (device loop4): ext4_evict_inode:254: inode #11: comm syz.4.470: mark_inode_dirty error [ 179.999369][ T5471] EXT4-fs warning (device loop4): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 180.020612][ T5471] EXT4-fs (loop4): 1 orphan inode deleted [ 180.028889][ T5471] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 180.045162][ T3975] EXT4-fs error (device loop4): ext4_map_blocks:780: inode #3: block 1: comm kworker/u8:12: lblock 1 mapped to illegal pblock 1 (length 1) [ 180.060714][ T3975] Quota error (device loop4): remove_tree: Can't read quota data block 1 [ 180.069273][ T3975] EXT4-fs error (device loop4): ext4_release_dquot:6969: comm kworker/u8:12: Failed to release dquot type 0 [ 180.093295][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 180.155836][ T5484] Cannot find add_set index 0 as target [ 180.227940][ T3306] EXT4-fs error (device loop4): __ext4_get_inode_loc:4792: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 180.241428][ T3306] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6255: Corrupt filesystem [ 180.262490][ T3306] EXT4-fs error (device loop4): ext4_quota_off:7217: inode #3: comm syz-executor: mark_inode_dirty error [ 180.576348][ T5494] loop1: detected capacity change from 0 to 256 [ 180.630561][ T5494] FAT-fs (loop1): codepage cp857 not found [ 180.878674][ T5500] xt_CT: No such helper "pptp" [ 181.027939][ T5502] SELinux: syz.2.478 (5502) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 181.833277][ T5515] netlink: 20 bytes leftover after parsing attributes in process `syz.2.482'. [ 182.249149][ T5523] loop2: detected capacity change from 0 to 256 [ 182.442458][ T5523] FAT-fs (loop2): codepage cp1255 not found [ 182.457634][ T29] audit: type=1326 audit(1751524286.419:344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5519 comm="syz.2.484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e0891e929 code=0x7ffc0000 [ 182.481037][ T29] audit: type=1326 audit(1751524286.419:345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5519 comm="syz.2.484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e0891e929 code=0x7ffc0000 [ 182.504974][ T29] audit: type=1326 audit(1751524286.419:346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5519 comm="syz.2.484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f4e0891e929 code=0x7ffc0000 [ 182.528185][ T29] audit: type=1326 audit(1751524286.419:347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5519 comm="syz.2.484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e0891e929 code=0x7ffc0000 [ 182.551508][ T29] audit: type=1326 audit(1751524286.419:348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5519 comm="syz.2.484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e0891e929 code=0x7ffc0000 [ 185.955686][ T5552] loop5: detected capacity change from 0 to 1024 [ 186.005098][ T5555] loop1: detected capacity change from 0 to 128 [ 186.053157][ T5552] EXT4-fs: Ignoring removed nomblk_io_submit option [ 186.082473][ T5552] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 186.468313][ T5552] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 186.755123][ T4678] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 186.819898][ T5570] binfmt_misc: register: failed to install interpreter file ./file0 [ 187.304405][ T5578] netlink: 28 bytes leftover after parsing attributes in process `syz.1.502'. [ 187.610404][ T5596] loop4: detected capacity change from 0 to 1024 [ 187.628630][ T5596] EXT4-fs: Ignoring removed nomblk_io_submit option [ 187.785906][ T5596] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 188.020585][ T5596] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 188.136590][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 188.187273][ T5605] loop1: detected capacity change from 0 to 512 [ 188.247088][ T5609] loop2: detected capacity change from 0 to 512 [ 188.941385][ T5626] loop5: detected capacity change from 0 to 1024 [ 188.948954][ T5626] EXT4-fs: Ignoring removed i_version option [ 188.957086][ T5605] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 188.981473][ T5626] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 188.994227][ T5605] EXT4-fs (loop1): orphan cleanup on readonly fs [ 189.000848][ T5609] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 189.012758][ T5609] EXT4-fs (loop2): orphan cleanup on readonly fs [ 189.019845][ T5605] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.513: bg 0: block 248: padding at end of block bitmap is not set [ 189.036678][ T5605] __quota_error: 3 callbacks suppressed [ 189.036693][ T5605] Quota error (device loop1): write_blk: dquota write failed [ 189.049754][ T5605] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 189.059714][ T5605] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.513: Failed to acquire dquot type 1 [ 189.071011][ T5609] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.511: bg 0: block 248: padding at end of block bitmap is not set [ 189.091823][ T5609] Quota error (device loop2): write_blk: dquota write failed [ 189.099336][ T5609] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 189.109393][ T5609] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.511: Failed to acquire dquot type 1 [ 189.122140][ T5605] EXT4-fs (loop1): 1 truncate cleaned up [ 189.129182][ T5605] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 189.152941][ T5609] EXT4-fs (loop2): 1 truncate cleaned up [ 189.159922][ T5609] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 189.173885][ T5609] EXT4-fs error (device loop2): ext4_lookup:1791: inode #2: comm syz.2.511: deleted inode referenced: 12 [ 189.339681][ T5626] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:483: comm syz.5.520: Invalid block bitmap block 0 in block_group 0 [ 189.354977][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 189.389046][ T5626] Quota error (device loop5): write_blk: dquota write failed [ 189.396578][ T5626] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 189.427092][ T5632] loop4: detected capacity change from 0 to 128 [ 189.438030][ T5626] EXT4-fs error (device loop5): ext4_acquire_dquot:6933: comm syz.5.520: Failed to acquire dquot type 0 [ 189.455895][ T5632] FAT-fs (loop4): Directory bread(block 32) failed [ 189.466608][ T5632] FAT-fs (loop4): Directory bread(block 33) failed [ 189.473573][ T5626] EXT4-fs error (device loop5): ext4_free_blocks:6587: comm syz.5.520: Freeing blocks not in datazone - block = 0, count = 4096 [ 189.488185][ T5632] FAT-fs (loop4): Directory bread(block 34) failed [ 189.494908][ T5632] FAT-fs (loop4): Directory bread(block 35) failed [ 189.515051][ T5632] FAT-fs (loop4): Directory bread(block 36) failed [ 189.521621][ T5632] FAT-fs (loop4): Directory bread(block 37) failed [ 189.529124][ T5626] EXT4-fs error (device loop5): ext4_read_inode_bitmap:139: comm syz.5.520: Invalid inode bitmap blk 0 in block_group 0 [ 189.542956][ T3981] Quota error (device loop5): do_check_range: Getting block 0 out of range 1-8 [ 189.552007][ T3981] EXT4-fs error (device loop5): ext4_release_dquot:6969: comm kworker/u8:15: Failed to release dquot type 0 [ 189.573413][ T5626] EXT4-fs error (device loop5) in ext4_free_inode:361: Corrupt filesystem [ 189.582488][ T5632] FAT-fs (loop4): Directory bread(block 38) failed [ 189.590326][ T5632] FAT-fs (loop4): Directory bread(block 39) failed [ 189.597248][ T5626] EXT4-fs (loop5): 1 orphan inode deleted [ 189.604677][ T5626] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 189.617342][ T5632] FAT-fs (loop4): Directory bread(block 40) failed [ 189.634477][ T5632] FAT-fs (loop4): Directory bread(block 41) failed [ 189.666271][ T4678] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 189.682266][ T5632] bio_check_eod: 47 callbacks suppressed [ 189.682282][ T5632] syz.4.522: attempt to access beyond end of device [ 189.682282][ T5632] loop4: rw=0, sector=4108, nr_sectors = 4 limit=128 [ 189.701579][ T3981] Quota error (device loop5): do_check_range: Getting block 0 out of range 1-8 [ 189.710693][ T3981] EXT4-fs error (device loop5): ext4_release_dquot:6969: comm kworker/u8:15: Failed to release dquot type 0 [ 189.724692][ T5632] FAT-fs (loop4): Filesystem has been set read-only [ 189.731477][ T5632] FAT-fs (loop4): error, fat_free_clusters: deleting FAT entry beyond EOF [ 189.952340][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 189.989251][ T5643] syzkaller0: entered promiscuous mode [ 189.995015][ T5643] syzkaller0: entered allmulticast mode [ 190.014426][ T5640] xt_CT: No such helper "pptp" [ 190.063268][ T5646] loop2: detected capacity change from 0 to 1024 [ 190.081854][ T5646] EXT4-fs: Ignoring removed bh option [ 190.087356][ T5646] EXT4-fs: Ignoring removed nomblk_io_submit option [ 190.145798][ T5646] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 190.164274][ T5650] loop4: detected capacity change from 0 to 1024 [ 190.173360][ T5650] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 190.201442][ T5650] EXT4-fs error (device loop4): ext4_map_blocks:816: inode #3: block 1: comm syz.4.527: lblock 1 mapped to illegal pblock 1 (length 1) [ 190.222728][ T5646] EXT4-fs error (device loop2): ext4_iget_extra_inode:5035: inode #15: comm syz.2.526: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 190.242623][ T5650] Quota error (device loop4): write_blk: dquota write failed [ 190.250090][ T5650] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 190.345697][ T5658] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 190.354386][ T5658] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 190.371277][ T5659] EXT4-fs error (device loop2): ext4_iget_extra_inode:5035: inode #15: comm syz.2.526: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 190.430696][ T5650] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.527: Failed to acquire dquot type 0 [ 190.465872][ T5650] EXT4-fs error (device loop4): ext4_free_blocks:6587: comm syz.4.527: Freeing blocks not in datazone - block = 0, count = 4096 [ 190.575646][ T5650] EXT4-fs error (device loop4): ext4_read_inode_bitmap:139: comm syz.4.527: Invalid inode bitmap blk 0 in block_group 0 [ 190.598337][ T3975] EXT4-fs error (device loop4): ext4_map_blocks:780: inode #3: block 1: comm kworker/u8:12: lblock 1 mapped to illegal pblock 1 (length 1) [ 190.648053][ T3975] EXT4-fs error (device loop4): ext4_release_dquot:6969: comm kworker/u8:12: Failed to release dquot type 0 [ 190.659834][ T5650] EXT4-fs error (device loop4) in ext4_free_inode:361: Corrupt filesystem [ 190.669631][ T5650] EXT4-fs (loop4): 1 orphan inode deleted [ 190.691829][ T5650] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 190.732885][ T5650] EXT4-fs error (device loop4): ext4_search_dir:1474: inode #2: block 16: comm syz.4.527: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0 [ 190.798445][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 190.840097][ T5674] loop4: detected capacity change from 0 to 256 [ 190.886608][ T5674] FAT-fs (loop4): codepage cp857 not found [ 190.941608][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 191.158547][ T5688] loop2: detected capacity change from 0 to 512 [ 191.166291][ T5688] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 191.177112][ T5688] EXT4-fs (loop2): orphan cleanup on readonly fs [ 191.184556][ T5688] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.532: bg 0: block 248: padding at end of block bitmap is not set [ 191.199614][ T5688] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.532: Failed to acquire dquot type 1 [ 191.214339][ T5688] EXT4-fs (loop2): 1 truncate cleaned up [ 191.315482][ T5689] netlink: 28 bytes leftover after parsing attributes in process `syz.4.531'. [ 191.327641][ T5689] netlink: 40 bytes leftover after parsing attributes in process `syz.4.531'. [ 191.680374][ T5688] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 191.723607][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 194.087739][ T5711] loop5: detected capacity change from 0 to 1024 [ 194.095043][ T3400] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 194.144114][ T3400] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 194.155375][ T5711] EXT4-fs: Ignoring removed nomblk_io_submit option [ 194.175643][ T5711] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 194.257958][ T5711] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 194.291270][ T4678] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 194.931522][ T5721] loop2: detected capacity change from 0 to 256 [ 194.977454][ T5721] FAT-fs (loop2): codepage cp857 not found [ 195.349244][ T5728] loop5: detected capacity change from 0 to 1024 [ 195.543651][ T5728] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 196.007989][ T4678] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 196.086138][ T5751] xt_CT: No such helper "pptp" [ 196.293165][ T5761] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 196.301810][ T5761] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 196.329053][ T5762] loop2: detected capacity change from 0 to 512 [ 196.375001][ T5762] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 196.385607][ T5762] EXT4-fs (loop2): orphan cleanup on readonly fs [ 196.395341][ T5762] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.553: bg 0: block 248: padding at end of block bitmap is not set [ 196.413219][ T5762] __quota_error: 9 callbacks suppressed [ 196.413237][ T5762] Quota error (device loop2): write_blk: dquota write failed [ 196.426319][ T5762] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 196.436288][ T5762] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.553: Failed to acquire dquot type 1 [ 196.459860][ T5762] EXT4-fs (loop2): 1 truncate cleaned up [ 196.475777][ T5762] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 197.531090][ T5767] loop1: detected capacity change from 0 to 256 [ 197.575267][ T5767] FAT-fs (loop1): codepage cp857 not found [ 198.577649][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 198.777074][ T5786] loop2: detected capacity change from 0 to 1024 [ 198.797167][ T5786] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 199.505857][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 199.551064][ T5803] loop2: detected capacity change from 0 to 512 [ 199.558429][ T5803] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 199.569808][ T5803] EXT4-fs (loop2): orphan cleanup on readonly fs [ 199.578024][ T5803] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.566: bg 0: block 248: padding at end of block bitmap is not set [ 199.593111][ T5803] Quota error (device loop2): write_blk: dquota write failed [ 199.600614][ T5803] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 199.610702][ T5803] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.566: Failed to acquire dquot type 1 [ 199.714800][ T5803] EXT4-fs (loop2): 1 truncate cleaned up [ 199.788199][ T5809] loop5: detected capacity change from 0 to 256 [ 199.831889][ T5809] FAT-fs (loop5): codepage cp857 not found [ 199.986643][ T5803] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 200.046455][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 200.079772][ T5816] loop2: detected capacity change from 0 to 1024 [ 200.089180][ T5818] tipc: Enabling of bearer rejected, failed to enable media [ 200.118952][ T5816] EXT4-fs: Ignoring removed nobh option [ 200.123977][ T5819] xt_CT: No such helper "pptp" [ 200.274926][ T5816] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 200.306998][ T5816] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4113: comm syz.2.569: Allocating blocks 385-513 which overlap fs metadata [ 200.646090][ T5816] EXT4-fs (loop2): pa ffff888106de9620: logic 16, phys. 129, len 24 [ 200.654415][ T5816] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 8 [ 200.918256][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 201.041617][ T5835] xt_CT: No such helper "pptp" [ 201.746064][ T5850] netlink: 28 bytes leftover after parsing attributes in process `syz.4.578'. [ 201.802617][ T29] audit: type=1326 audit(1751524305.759:358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5851 comm="syz.1.580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c3ec2e929 code=0x7ffc0000 [ 201.826167][ T29] audit: type=1326 audit(1751524305.759:359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5851 comm="syz.1.580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c3ec2e929 code=0x7ffc0000 [ 201.849593][ T29] audit: type=1326 audit(1751524305.759:360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5851 comm="syz.1.580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=195 compat=0 ip=0x7f9c3ec2e929 code=0x7ffc0000 [ 201.922830][ T29] audit: type=1326 audit(1751524305.839:361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5851 comm="syz.1.580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c3ec2e929 code=0x7ffc0000 [ 201.946298][ T29] audit: type=1326 audit(1751524305.839:362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5851 comm="syz.1.580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c3ec2e929 code=0x7ffc0000 [ 202.072227][ T5856] loop5: detected capacity change from 0 to 256 [ 202.079934][ T5856] msdos: Unknown parameter 'dLts' [ 202.224304][ T5859] loop2: detected capacity change from 0 to 512 [ 202.236208][ T5859] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 202.300600][ T5859] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a843c018, mo2=0002] [ 202.309575][ T5859] System zones: 0-2, 18-18, 34-34 [ 202.316567][ T5859] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 202.330400][ T5859] ext4 filesystem being mounted at /116/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 202.345850][ T29] audit: type=1400 audit(1751524306.309:363): avc: denied { remove_name } for pid=5858 comm="syz.2.583" name="file0" dev="loop2" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 202.368461][ T29] audit: type=1400 audit(1751524306.309:364): avc: denied { rename } for pid=5858 comm="syz.2.583" name="file0" dev="loop2" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 202.391218][ T29] audit: type=1400 audit(1751524306.309:365): avc: denied { unlink } for pid=5858 comm="syz.2.583" name="file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 202.413391][ T29] audit: type=1400 audit(1751524306.309:366): avc: denied { rename } for pid=5858 comm="syz.2.583" name="file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 202.435609][ T29] audit: type=1400 audit(1751524306.309:367): avc: denied { unlink } for pid=5858 comm="syz.2.583" name="file0" dev="loop2" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 202.597168][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 202.948597][ T5872] xt_CT: No such helper "pptp" [ 203.052477][ T5872] SELinux: syz.2.585 (5872) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 203.154074][ T5878] netlink: 28 bytes leftover after parsing attributes in process `syz.4.587'. [ 203.154400][ T5877] loop2: detected capacity change from 0 to 1024 [ 203.173525][ T5877] EXT4-fs: Ignoring removed nobh option [ 203.213712][ T5877] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 203.233251][ T5877] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4113: comm syz.2.586: Allocating blocks 385-513 which overlap fs metadata [ 203.253005][ T5877] EXT4-fs (loop2): pa ffff888106de95b0: logic 16, phys. 129, len 24 [ 203.261139][ T5877] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 8 [ 203.328286][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 203.458265][ T5895] netlink: 28 bytes leftover after parsing attributes in process `syz.2.591'. [ 204.525376][ T5911] xt_CT: No such helper "pptp" [ 204.634397][ T5911] SELinux: syz.1.596 (5911) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 205.624798][ T5929] netlink: 60 bytes leftover after parsing attributes in process `syz.2.601'. [ 205.683802][ T5933] netlink: 28 bytes leftover after parsing attributes in process `syz.2.602'. [ 205.994919][ T5938] xt_CT: No such helper "pptp" [ 206.154495][ T5940] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 206.155441][ T5943] netlink: 28 bytes leftover after parsing attributes in process `syz.2.605'. [ 206.163292][ T5940] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 206.388969][ T5945] loop2: detected capacity change from 0 to 1024 [ 206.877314][ T29] kauditd_printk_skb: 135 callbacks suppressed [ 206.877333][ T29] audit: type=1326 audit(1751524310.839:503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5944 comm="syz.2.606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e0891e929 code=0x7ffc0000 [ 206.922802][ T29] audit: type=1326 audit(1751524310.879:504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5944 comm="syz.2.606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e0891e929 code=0x7ffc0000 [ 206.962861][ T29] audit: type=1326 audit(1751524310.929:505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5944 comm="syz.2.606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e0891e929 code=0x7ffc0000 [ 207.149134][ T5960] netlink: 4 bytes leftover after parsing attributes in process `syz.2.610'. [ 207.171995][ T5962] netlink: 28 bytes leftover after parsing attributes in process `syz.3.611'. [ 207.272920][ T5974] netlink: 20 bytes leftover after parsing attributes in process `syz.4.617'. [ 207.350871][ T29] audit: type=1400 audit(1751524311.309:506): avc: denied { read } for pid=5978 comm="syz.4.620" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 207.392062][ T29] audit: type=1400 audit(1751524311.349:507): avc: denied { setopt } for pid=5969 comm="syz.5.615" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 207.411596][ T29] audit: type=1400 audit(1751524311.349:508): avc: denied { map_create } for pid=5969 comm="syz.5.615" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 207.430638][ T29] audit: type=1400 audit(1751524311.349:509): avc: denied { map_read map_write } for pid=5969 comm="syz.5.615" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 207.450334][ T29] audit: type=1400 audit(1751524311.349:510): avc: denied { create } for pid=5978 comm="syz.4.620" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 207.470754][ T29] audit: type=1400 audit(1751524311.349:511): avc: denied { prog_load } for pid=5969 comm="syz.5.615" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 207.489682][ T29] audit: type=1400 audit(1751524311.349:512): avc: denied { bpf } for pid=5969 comm="syz.5.615" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 208.185005][ T5994] loop5: detected capacity change from 0 to 256 [ 208.215461][ T5994] msdos: Unknown parameter 'dLts' [ 208.257720][ T5996] netlink: 20 bytes leftover after parsing attributes in process `syz.2.624'. [ 208.295789][ T5996] netlink: 4 bytes leftover after parsing attributes in process `syz.2.624'. [ 208.384866][ T5998] loop2: detected capacity change from 0 to 512 [ 208.454603][ T5998] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 208.467485][ T5998] ext4 filesystem being mounted at /131/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 209.105822][ T6007] futex_wake_op: syz.1.626 tries to shift op by 144; fix this program [ 209.142851][ T6009] netlink: 28 bytes leftover after parsing attributes in process `syz.1.627'. [ 209.273201][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 209.301773][ T6014] netlink: 20 bytes leftover after parsing attributes in process `syz.4.630'. [ 209.727334][ T6031] loop2: detected capacity change from 0 to 1024 [ 210.002076][ T6030] Set syz1 is full, maxelem 65536 reached [ 210.278304][ T6043] futex_wake_op: syz.4.638 tries to shift op by 144; fix this program [ 212.180000][ T6063] loop2: detected capacity change from 0 to 2048 [ 212.237034][ T29] kauditd_printk_skb: 46 callbacks suppressed [ 212.237049][ T29] audit: type=1400 audit(1751524316.199:559): avc: denied { mounton } for pid=6062 comm="syz.2.645" path="/136/file0" dev="tmpfs" ino=755 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 212.307161][ T6065] hub 6-0:1.0: USB hub found [ 212.312127][ T6065] hub 6-0:1.0: 8 ports detected [ 212.322711][ T6063] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 212.370782][ T6063] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 212.580853][ T6070] loop4: detected capacity change from 0 to 1024 [ 212.616937][ T29] audit: type=1400 audit(1751524316.269:560): avc: denied { write } for pid=6057 comm="syz.1.643" name="001" dev="devtmpfs" ino=162 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 213.127359][ T6081] program syz.5.650 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 213.127479][ T6069] Set syz1 is full, maxelem 65536 reached [ 213.142470][ T29] audit: type=1400 audit(1751524317.089:561): avc: denied { read write } for pid=6080 comm="syz.5.650" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 213.166458][ T29] audit: type=1400 audit(1751524317.089:562): avc: denied { open } for pid=6080 comm="syz.5.650" path="/dev/sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 213.236759][ T6087] netlink: 28 bytes leftover after parsing attributes in process `syz.4.651'. [ 213.288944][ T29] audit: type=1400 audit(1751524317.249:563): avc: denied { open } for pid=6092 comm="syz.4.653" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 213.308314][ T29] audit: type=1400 audit(1751524317.249:564): avc: denied { kernel } for pid=6092 comm="syz.4.653" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 213.328196][ T29] audit: type=1400 audit(1751524317.249:565): avc: denied { tracepoint } for pid=6092 comm="syz.4.653" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 213.384296][ T6096] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 213.393012][ T6096] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 213.424983][ T29] audit: type=1400 audit(1751524317.349:566): avc: denied { read write } for pid=6090 comm="syz.1.652" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 213.448485][ T29] audit: type=1400 audit(1751524317.349:567): avc: denied { open } for pid=6090 comm="syz.1.652" path="/dev/raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 213.471823][ T29] audit: type=1400 audit(1751524317.349:568): avc: denied { ioctl } for pid=6090 comm="syz.1.652" path="/dev/raw-gadget" dev="devtmpfs" ino=142 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 213.657835][ T6100] futex_wake_op: syz.5.654 tries to shift op by 144; fix this program [ 213.794670][ T6093] loop4: detected capacity change from 0 to 1024 [ 214.066924][ T6105] loop5: detected capacity change from 0 to 512 [ 214.131468][ T6105] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 214.244617][ T6105] EXT4-fs (loop5): orphan cleanup on readonly fs [ 214.286957][ T6105] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.657: bg 0: block 248: padding at end of block bitmap is not set [ 214.398858][ T6105] EXT4-fs error (device loop5): ext4_acquire_dquot:6933: comm syz.5.657: Failed to acquire dquot type 1 [ 214.462925][ T6105] EXT4-fs (loop5): 1 truncate cleaned up [ 214.488723][ T6105] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 214.584669][ T6103] syzkaller0: entered promiscuous mode [ 214.590237][ T6103] syzkaller0: entered allmulticast mode [ 214.631958][ T4678] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 214.775035][ T6113] xt_CT: No such helper "pptp" [ 214.820968][ T6113] SELinux: syz.4.660 (6113) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 214.914208][ T6116] loop5: detected capacity change from 0 to 2048 [ 215.023554][ T6116] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 215.167002][ T6116] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 216.198425][ T6143] netlink: 76 bytes leftover after parsing attributes in process `syz.2.668'. [ 216.238403][ T6143] gretap0: left allmulticast mode [ 216.243583][ T6143] gretap0: left promiscuous mode [ 216.248717][ T6143] bridge0: port 3(gretap0) entered disabled state [ 216.276264][ T6143] bridge_slave_0: left allmulticast mode [ 216.282178][ T6143] bridge_slave_0: left promiscuous mode [ 216.288018][ T6143] bridge0: port 1(bridge_slave_0) entered disabled state [ 216.304332][ T6143] bridge_slave_1: left allmulticast mode [ 216.310054][ T6143] bridge_slave_1: left promiscuous mode [ 216.315805][ T6143] bridge0: port 2(bridge_slave_1) entered disabled state [ 216.348401][ T6143] bond0: (slave bond_slave_0): Releasing backup interface [ 216.367368][ T6143] bond0: (slave bond_slave_1): Releasing backup interface [ 216.380993][ T6143] team0: Port device team_slave_0 removed [ 216.390810][ T6143] team0: Port device team_slave_1 removed [ 216.398379][ T6143] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 216.406007][ T6143] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 216.416731][ T6143] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 216.424251][ T6143] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 216.434534][ T6152] netlink: 16 bytes leftover after parsing attributes in process `syz.1.670'. [ 216.590156][ T6156] netlink: 28 bytes leftover after parsing attributes in process `syz.2.672'. [ 216.687823][ C1] hrtimer: interrupt took 19959 ns [ 216.759049][ T6158] netlink: 60 bytes leftover after parsing attributes in process `syz.5.673'. [ 216.881072][ T6167] hub 6-0:1.0: USB hub found [ 216.887843][ T6167] hub 6-0:1.0: 8 ports detected [ 217.036197][ T6177] wg2: entered promiscuous mode [ 217.041151][ T6177] wg2: entered allmulticast mode [ 217.709941][ T6220] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 217.718653][ T6220] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 217.737425][ T6220] loop2: detected capacity change from 0 to 512 [ 217.745196][ T29] kauditd_printk_skb: 124 callbacks suppressed [ 217.745284][ T29] audit: type=1400 audit(1751524321.669:691): avc: denied { read write } for pid=6210 comm="syz.2.680" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 217.774826][ T29] audit: type=1400 audit(1751524321.669:692): avc: denied { open } for pid=6210 comm="syz.2.680" path="/dev/raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 217.798099][ T29] audit: type=1400 audit(1751524321.669:693): avc: denied { ioctl } for pid=6210 comm="syz.2.680" path="/dev/raw-gadget" dev="devtmpfs" ino=142 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 217.823175][ T29] audit: type=1400 audit(1751524321.719:694): avc: denied { mounton } for pid=6210 comm="syz.2.680" path="/145/bus" dev="tmpfs" ino=803 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 217.849669][ T6220] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 217.897640][ T6220] EXT4-fs (loop2): orphan cleanup on readonly fs [ 217.915564][ T6220] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.680: bg 0: block 248: padding at end of block bitmap is not set [ 217.997719][ T6220] Quota error (device loop2): write_blk: dquota write failed [ 218.005294][ T6220] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 218.015346][ T6220] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.680: Failed to acquire dquot type 1 [ 218.029839][ T6220] EXT4-fs (loop2): 1 truncate cleaned up [ 218.037721][ T6220] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 218.088369][ T29] audit: type=1400 audit(1751524322.019:695): avc: denied { mount } for pid=6210 comm="syz.2.680" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 218.139370][ T6223] loop4: detected capacity change from 0 to 1024 [ 218.176447][ T6223] EXT4-fs: Ignoring removed nobh option [ 218.227386][ T6223] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 218.251736][ T6223] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4113: comm syz.4.681: Allocating blocks 385-513 which overlap fs metadata [ 218.267675][ T29] audit: type=1400 audit(1751524322.209:696): avc: denied { read } for pid=6222 comm="syz.4.681" dev="nsfs" ino=4026532633 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 218.288818][ T29] audit: type=1400 audit(1751524322.209:697): avc: denied { open } for pid=6222 comm="syz.4.681" path="net:[4026532633]" dev="nsfs" ino=4026532633 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 218.311941][ T29] audit: type=1400 audit(1751524322.209:698): avc: denied { add_name } for pid=6222 comm="syz.4.681" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 218.398997][ T6223] EXT4-fs (loop4): pa ffff888106de9690: logic 16, phys. 129, len 24 [ 218.407213][ T6223] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 8 [ 218.470563][ T6228] netlink: 16 bytes leftover after parsing attributes in process `syz.1.682'. [ 219.715826][ T6249] netlink: 76 bytes leftover after parsing attributes in process `syz.1.684'. [ 219.811779][ T6254] bridge_slave_0: left allmulticast mode [ 219.817571][ T6254] bridge_slave_0: left promiscuous mode [ 219.823351][ T6254] bridge0: port 1(bridge_slave_0) entered disabled state [ 219.836430][ T6254] bridge_slave_1: left allmulticast mode [ 219.842239][ T6254] bridge_slave_1: left promiscuous mode [ 219.848073][ T6254] bridge0: port 2(bridge_slave_1) entered disabled state [ 219.865660][ T6254] bond0: (slave bond_slave_0): Releasing backup interface [ 219.879797][ T6254] bond0: (slave bond_slave_1): Releasing backup interface [ 219.895242][ T6254] team0: Port device team_slave_0 removed [ 219.908016][ T6254] team0: Port device team_slave_1 removed [ 219.915970][ T6254] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 219.923582][ T6254] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 219.935913][ T6254] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 219.943719][ T6254] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 220.273852][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 220.458279][ T6291] loop5: detected capacity change from 0 to 128 [ 220.531125][ T6291] FAT-fs (loop5): Directory bread(block 32) failed [ 220.547635][ T6291] FAT-fs (loop5): Directory bread(block 33) failed [ 220.572175][ T6291] FAT-fs (loop5): Directory bread(block 34) failed [ 220.603550][ T6291] FAT-fs (loop5): Directory bread(block 35) failed [ 220.616849][ T6291] FAT-fs (loop5): Directory bread(block 36) failed [ 220.634162][ T6291] FAT-fs (loop5): Directory bread(block 37) failed [ 220.649389][ T6291] FAT-fs (loop5): Directory bread(block 38) failed [ 220.666160][ T6291] FAT-fs (loop5): Directory bread(block 39) failed [ 220.677826][ T6294] netlink: 60 bytes leftover after parsing attributes in process `syz.1.688'. [ 220.687379][ T6291] FAT-fs (loop5): Directory bread(block 40) failed [ 220.706049][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 220.723189][ T6291] FAT-fs (loop5): Directory bread(block 41) failed [ 220.752184][ T6291] syz.5.687: attempt to access beyond end of device [ 220.752184][ T6291] loop5: rw=0, sector=4108, nr_sectors = 4 limit=128 [ 220.822657][ T6291] FAT-fs (loop5): Filesystem has been set read-only [ 220.834315][ T6291] FAT-fs (loop5): error, fat_free_clusters: deleting FAT entry beyond EOF [ 221.147685][ T6309] loop5: detected capacity change from 0 to 512 [ 221.189613][ T6307] wg2: left promiscuous mode [ 221.195146][ T6307] wg2: left allmulticast mode [ 221.280180][ T6309] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 221.314492][ T6309] ext4 filesystem being mounted at /53/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 221.342333][ T6315] wg2: entered promiscuous mode [ 221.347356][ T6315] wg2: entered allmulticast mode [ 221.895981][ T6324] netlink: 60 bytes leftover after parsing attributes in process `syz.2.694'. [ 221.937373][ T4678] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 222.115802][ T6337] futex_wake_op: syz.5.697 tries to shift op by 144; fix this program [ 222.829190][ T6335] syzkaller0: entered promiscuous mode [ 222.834810][ T6335] syzkaller0: entered allmulticast mode [ 222.846161][ T6345] batman_adv: batadv0: Adding interface: dummy0 [ 222.852576][ T6345] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 222.899490][ T6345] batman_adv: batadv0: Interface activated: dummy0 [ 222.948656][ T29] kauditd_printk_skb: 70 callbacks suppressed [ 222.948673][ T29] audit: type=1400 audit(1751524326.909:769): avc: denied { firmware_load } for pid=6333 comm="syz.3.699" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 222.992730][ T6357] netlink: 60 bytes leftover after parsing attributes in process `syz.4.703'. [ 223.003607][ T29] audit: type=1400 audit(1751524326.929:770): avc: denied { write } for pid=6353 comm="syz.1.705" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 223.006261][ T6355] xt_CT: No such helper "pptp" [ 223.022576][ T29] audit: type=1326 audit(1751524326.949:771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6352 comm="syz.5.706" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc292d0e929 code=0x7ffc0000 [ 223.050692][ T29] audit: type=1326 audit(1751524326.949:772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6352 comm="syz.5.706" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc292d0e929 code=0x7ffc0000 [ 223.071350][ T6358] loop5: detected capacity change from 0 to 1024 [ 223.073963][ T29] audit: type=1326 audit(1751524326.949:773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6352 comm="syz.5.706" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7fc292d0e929 code=0x7ffc0000 [ 223.073998][ T29] audit: type=1326 audit(1751524326.949:774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6352 comm="syz.5.706" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc292d0e929 code=0x7ffc0000 [ 223.126957][ T29] audit: type=1326 audit(1751524326.949:775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6352 comm="syz.5.706" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc292d0e929 code=0x7ffc0000 [ 223.150408][ T29] audit: type=1326 audit(1751524326.949:776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6352 comm="syz.5.706" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc292d0e929 code=0x7ffc0000 [ 223.173773][ T29] audit: type=1326 audit(1751524326.949:777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6352 comm="syz.5.706" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc292d0e929 code=0x7ffc0000 [ 223.235752][ T29] audit: type=1326 audit(1751524327.199:778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6352 comm="syz.5.706" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc292d0e929 code=0x7ffc0000 [ 223.259739][ T6355] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 223.268369][ T6355] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 223.384396][ T6363] loop4: detected capacity change from 0 to 512 [ 223.435479][ T6363] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 223.480094][ T6363] ext4 filesystem being mounted at /151/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 223.532361][ T6370] wg2: left promiscuous mode [ 223.540138][ T6370] wg2: left allmulticast mode [ 223.601415][ T6371] wg2: entered promiscuous mode [ 223.606414][ T6371] wg2: entered allmulticast mode [ 224.303572][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 225.909719][ T6401] loop2: detected capacity change from 0 to 256 [ 225.957011][ T6403] netlink: 28 bytes leftover after parsing attributes in process `syz.4.718'. [ 225.980496][ T6401] FAT-fs (loop2): codepage cp857 not found [ 226.559070][ T6421] netlink: 16 bytes leftover after parsing attributes in process `syz.5.723'. [ 226.603067][ T6421] netlink: 4 bytes leftover after parsing attributes in process `syz.5.723'. [ 227.835225][ T6443] netlink: 28 bytes leftover after parsing attributes in process `syz.1.728'. [ 227.854057][ T6441] loop2: detected capacity change from 0 to 1024 [ 228.023490][ T29] kauditd_printk_skb: 153 callbacks suppressed [ 228.023507][ T29] audit: type=1326 audit(1751524331.989:932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6440 comm="syz.2.727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e0891e929 code=0x7ffc0000 [ 228.126786][ T6457] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 228.135410][ T6457] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 228.174186][ T29] audit: type=1400 audit(1751524332.089:933): avc: denied { write } for pid=6456 comm="syz.4.733" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 228.193305][ T29] audit: type=1400 audit(1751524332.089:934): avc: denied { read write } for pid=6456 comm="syz.4.733" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 228.216734][ T29] audit: type=1400 audit(1751524332.089:935): avc: denied { open } for pid=6456 comm="syz.4.733" path="/dev/raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 228.240335][ T29] audit: type=1400 audit(1751524332.089:936): avc: denied { ioctl } for pid=6456 comm="syz.4.733" path="/dev/raw-gadget" dev="devtmpfs" ino=142 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 228.322563][ T6464] loop5: detected capacity change from 0 to 256 [ 228.837448][ T6464] FAT-fs (loop5): codepage cp1255 not found [ 229.261874][ T6468] loop2: detected capacity change from 0 to 1024 [ 229.279753][ T6468] EXT4-fs: Ignoring removed bh option [ 229.285254][ T6468] EXT4-fs: Ignoring removed nomblk_io_submit option [ 229.428983][ T29] audit: type=1400 audit(1751524333.289:937): avc: denied { setopt } for pid=6469 comm="syz.3.737" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 229.451290][ T6468] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 229.477743][ T6481] wg2: left promiscuous mode [ 229.483473][ T6481] wg2: left allmulticast mode [ 229.493520][ T6468] EXT4-fs error (device loop2): ext4_iget_extra_inode:5035: inode #15: comm syz.2.735: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 229.536374][ T29] audit: type=1400 audit(1751524333.439:938): avc: denied { mount } for pid=6467 comm="syz.2.735" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 229.558185][ T29] audit: type=1400 audit(1751524333.449:939): avc: denied { add_name } for pid=6467 comm="syz.2.735" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 229.578799][ T29] audit: type=1400 audit(1751524333.449:940): avc: denied { create } for pid=6467 comm="syz.2.735" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 229.598750][ T29] audit: type=1400 audit(1751524333.449:941): avc: denied { read open } for pid=6467 comm="syz.2.735" path="/155/file0/bus" dev="loop2" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 229.724374][ T6484] EXT4-fs error (device loop2): ext4_iget_extra_inode:5035: inode #15: comm syz.2.735: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 229.749565][ T6483] wg2: entered promiscuous mode [ 229.754554][ T6483] wg2: entered allmulticast mode [ 230.607468][ T6492] loop4: detected capacity change from 0 to 128 [ 230.615613][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 230.656858][ T6493] loop5: detected capacity change from 0 to 128 [ 230.677108][ T6492] FAT-fs (loop4): Directory bread(block 32) failed [ 230.692465][ T6492] FAT-fs (loop4): Directory bread(block 33) failed [ 230.720456][ T6492] FAT-fs (loop4): Directory bread(block 34) failed [ 230.727175][ T6492] FAT-fs (loop4): Directory bread(block 35) failed [ 230.734071][ T6492] FAT-fs (loop4): Directory bread(block 36) failed [ 230.740639][ T6492] FAT-fs (loop4): Directory bread(block 37) failed [ 230.751372][ T6492] FAT-fs (loop4): Directory bread(block 38) failed [ 230.759232][ T6492] FAT-fs (loop4): Directory bread(block 39) failed [ 230.767182][ T6493] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000100) [ 230.775107][ T6493] FAT-fs (loop5): Filesystem has been set read-only [ 230.781774][ T6493] syz.5.742: attempt to access beyond end of device [ 230.781774][ T6493] loop5: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 230.786012][ T6495] loop2: detected capacity change from 0 to 256 [ 230.796080][ T6492] FAT-fs (loop4): Directory bread(block 40) failed [ 230.808670][ T6493] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000100) [ 230.816603][ T6493] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000100) [ 230.825050][ T6497] syz.5.742: attempt to access beyond end of device [ 230.825050][ T6497] loop5: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 230.832635][ T6492] FAT-fs (loop4): Directory bread(block 41) failed [ 230.846205][ T6495] FAT-fs (loop2): codepage cp857 not found [ 230.852682][ T6493] syz.5.742: attempt to access beyond end of device [ 230.852682][ T6493] loop5: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 230.875716][ T6493] syz.5.742: attempt to access beyond end of device [ 230.875716][ T6493] loop5: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 230.890259][ T6493] syz.5.742: attempt to access beyond end of device [ 230.890259][ T6493] loop5: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 230.907166][ T6492] syz.4.741: attempt to access beyond end of device [ 230.907166][ T6492] loop4: rw=0, sector=4108, nr_sectors = 4 limit=128 [ 230.924193][ T6497] syz.5.742: attempt to access beyond end of device [ 230.924193][ T6497] loop5: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 230.937458][ T6493] syz.5.742: attempt to access beyond end of device [ 230.937458][ T6493] loop5: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 230.951065][ T6492] FAT-fs (loop4): Filesystem has been set read-only [ 230.958713][ T6492] FAT-fs (loop4): error, fat_free_clusters: deleting FAT entry beyond EOF [ 230.964940][ T6499] netlink: 4 bytes leftover after parsing attributes in process `syz.2.744'. [ 230.976376][ T6497] syz.5.742: attempt to access beyond end of device [ 230.976376][ T6497] loop5: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 231.009409][ T6497] syz.5.742: attempt to access beyond end of device [ 231.009409][ T6497] loop5: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 231.095350][ T6499] netlink: 4 bytes leftover after parsing attributes in process `syz.2.744'. [ 231.190650][ T6508] loop4: detected capacity change from 0 to 128 [ 231.199288][ T6508] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 231.207286][ T6508] FAT-fs (loop4): Filesystem has been set read-only [ 231.220019][ T6507] hub 6-0:1.0: USB hub found [ 231.226536][ T6507] hub 6-0:1.0: 8 ports detected [ 231.320922][ T6508] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 231.328843][ T6508] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 231.823709][ T6528] loop5: detected capacity change from 0 to 1024 [ 232.023104][ T6548] netlink: 60 bytes leftover after parsing attributes in process `syz.3.749'. [ 232.385016][ T6573] netlink: 28 bytes leftover after parsing attributes in process `syz.3.752'. [ 232.685787][ T6580] netlink: 60 bytes leftover after parsing attributes in process `syz.1.754'. [ 233.229875][ T6596] loop4: detected capacity change from 0 to 256 [ 233.294687][ T6573] netlink: 40 bytes leftover after parsing attributes in process `syz.3.752'. [ 233.337710][ T6596] FAT-fs (loop4): codepage cp857 not found [ 233.471920][ T6608] loop4: detected capacity change from 0 to 128 [ 233.508011][ T6608] FAT-fs (loop4): Directory bread(block 32) failed [ 233.547526][ T6608] FAT-fs (loop4): Directory bread(block 33) failed [ 233.572120][ T6608] FAT-fs (loop4): Directory bread(block 34) failed [ 233.604567][ T6608] FAT-fs (loop4): Directory bread(block 35) failed [ 233.637730][ T6608] FAT-fs (loop4): Directory bread(block 36) failed [ 233.661070][ T6615] netlink: 4 bytes leftover after parsing attributes in process `syz.1.757'. [ 233.670458][ T6608] FAT-fs (loop4): Directory bread(block 37) failed [ 233.715025][ T6608] FAT-fs (loop4): Directory bread(block 38) failed [ 233.735676][ T6615] netlink: 4 bytes leftover after parsing attributes in process `syz.1.757'. [ 233.755081][ T6608] FAT-fs (loop4): Directory bread(block 39) failed [ 233.778465][ T6608] FAT-fs (loop4): Directory bread(block 40) failed [ 233.809578][ T6608] FAT-fs (loop4): Directory bread(block 41) failed [ 233.975152][ T6624] hub 6-0:1.0: USB hub found [ 233.979850][ T6624] hub 6-0:1.0: 8 ports detected [ 234.099307][ T6608] FAT-fs (loop4): Filesystem has been set read-only [ 234.123044][ T6608] FAT-fs (loop4): error, fat_free_clusters: deleting FAT entry beyond EOF [ 234.204543][ T6638] loop4: detected capacity change from 0 to 128 [ 234.279645][ T6638] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 234.287714][ T6638] FAT-fs (loop4): Filesystem has been set read-only [ 234.306746][ T6638] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 234.314704][ T6638] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 234.438327][ T6664] loop2: detected capacity change from 0 to 256 [ 234.916434][ T6664] FAT-fs (loop2): codepage cp1255 not found [ 235.112927][ T6672] 8021q: adding VLAN 0 to HW filter on device bond1 [ 235.227876][ T6672] bond1: (slave veth3): Enslaving as an active interface with an up link [ 235.238328][ T6676] batman_adv: batadv0: Interface deactivated: dummy0 [ 235.246341][ T6679] netlink: 28 bytes leftover after parsing attributes in process `syz.1.768'. [ 235.247303][ T6676] batman_adv: batadv0: Removing interface: dummy0 [ 235.360229][ T6676] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 235.393095][ T6677] wg2: left promiscuous mode [ 235.398227][ T6677] wg2: left allmulticast mode [ 235.444408][ T29] kauditd_printk_skb: 74 callbacks suppressed [ 235.444429][ T29] audit: type=1400 audit(1751524339.409:1016): avc: denied { sys_module } for pid=6675 comm="syz.2.767" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 235.477611][ T6682] wg2: entered promiscuous mode [ 235.482678][ T6682] wg2: entered allmulticast mode [ 235.504331][ T6690] program syz.5.771 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 235.586699][ T29] audit: type=1400 audit(1751524339.469:1017): avc: denied { read write } for pid=6689 comm="syz.5.771" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 235.610756][ T29] audit: type=1400 audit(1751524339.469:1018): avc: denied { open } for pid=6689 comm="syz.5.771" path="/dev/sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 236.007553][ T6721] loop4: detected capacity change from 0 to 128 [ 236.035839][ T6721] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 236.043818][ T6721] FAT-fs (loop4): Filesystem has been set read-only [ 236.070736][ T6721] bio_check_eod: 17091 callbacks suppressed [ 236.070772][ T6721] syz.4.776: attempt to access beyond end of device [ 236.070772][ T6721] loop4: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 236.184064][ T6721] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 236.192034][ T6721] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 236.432046][ T6721] syz.4.776: attempt to access beyond end of device [ 236.432046][ T6721] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 236.446483][ T6737] syz.4.776: attempt to access beyond end of device [ 236.446483][ T6737] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 236.467738][ T6742] netlink: 4 bytes leftover after parsing attributes in process `syz.2.777'. [ 236.492044][ T6737] syz.4.776: attempt to access beyond end of device [ 236.492044][ T6737] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 236.532207][ T6742] netlink: 4 bytes leftover after parsing attributes in process `syz.2.777'. [ 236.542083][ T6721] syz.4.776: attempt to access beyond end of device [ 236.542083][ T6721] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 236.582826][ T6747] loop2: detected capacity change from 0 to 1024 [ 236.625869][ T6721] syz.4.776: attempt to access beyond end of device [ 236.625869][ T6721] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 236.663666][ T29] audit: type=1400 audit(1751524340.619:1019): avc: denied { read } for pid=6754 comm="syz.2.780" dev="nsfs" ino=4026532395 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 236.684929][ T29] audit: type=1400 audit(1751524340.619:1020): avc: denied { open } for pid=6754 comm="syz.2.780" path="net:[4026532395]" dev="nsfs" ino=4026532395 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 236.708220][ T29] audit: type=1400 audit(1751524340.619:1021): avc: denied { create } for pid=6754 comm="syz.2.780" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 236.709519][ T6737] syz.4.776: attempt to access beyond end of device [ 236.709519][ T6737] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 236.743046][ T6721] syz.4.776: attempt to access beyond end of device [ 236.743046][ T6721] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 236.783842][ T6721] syz.4.776: attempt to access beyond end of device [ 236.783842][ T6721] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 236.797200][ T6737] syz.4.776: attempt to access beyond end of device [ 236.797200][ T6737] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 236.826085][ T29] audit: type=1400 audit(1751524340.739:1022): avc: denied { read } for pid=6756 comm="syz.1.781" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 236.845419][ T29] audit: type=1400 audit(1751524340.769:1023): avc: denied { create } for pid=6756 comm="syz.1.781" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 236.865835][ T29] audit: type=1400 audit(1751524340.769:1024): avc: denied { write } for pid=6756 comm="syz.1.781" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 236.886220][ T29] audit: type=1400 audit(1751524340.779:1025): avc: denied { read } for pid=6756 comm="syz.1.781" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 237.705684][ T6806] netlink: 28 bytes leftover after parsing attributes in process `syz.4.782'. [ 238.296136][ T6818] loop5: detected capacity change from 0 to 256 [ 238.390399][ T6818] FAT-fs (loop5): codepage cp857 not found [ 238.509325][ T6829] loop4: detected capacity change from 0 to 1024 [ 238.535979][ T6835] loop5: detected capacity change from 0 to 128 [ 238.549660][ T6835] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000100) [ 238.557568][ T6835] FAT-fs (loop5): Filesystem has been set read-only [ 238.572641][ T6835] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000100) [ 238.580545][ T6835] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000100) [ 238.840186][ T6863] loop4: detected capacity change from 0 to 128 [ 238.894031][ T6863] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 238.901952][ T6863] FAT-fs (loop4): Filesystem has been set read-only [ 238.940714][ T6863] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 238.948687][ T6863] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 239.098084][ T6825] ================================================================== [ 239.106231][ T6825] BUG: KCSAN: data-race in shmem_file_splice_read / shmem_file_splice_read [ 239.114868][ T6825] [ 239.117215][ T6825] write to 0xffff888112803ca8 of 8 bytes by task 6832 on cpu 1: [ 239.124872][ T6825] shmem_file_splice_read+0x470/0x600 [ 239.130292][ T6825] splice_direct_to_actor+0x26f/0x680 [ 239.135709][ T6825] do_splice_direct+0xda/0x150 [ 239.140594][ T6825] do_sendfile+0x380/0x650 [ 239.145057][ T6825] __x64_sys_sendfile64+0x105/0x150 [ 239.150379][ T6825] x64_sys_call+0xb39/0x2fb0 [ 239.155001][ T6825] do_syscall_64+0xd2/0x200 [ 239.159546][ T6825] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 239.165484][ T6825] [ 239.167834][ T6825] write to 0xffff888112803ca8 of 8 bytes by task 6825 on cpu 0: [ 239.175483][ T6825] shmem_file_splice_read+0x470/0x600 [ 239.180915][ T6825] splice_direct_to_actor+0x26f/0x680 [ 239.186431][ T6825] do_splice_direct+0xda/0x150 [ 239.191242][ T6825] do_sendfile+0x380/0x650 [ 239.195716][ T6825] __x64_sys_sendfile64+0x105/0x150 [ 239.200958][ T6825] x64_sys_call+0xb39/0x2fb0 [ 239.205677][ T6825] do_syscall_64+0xd2/0x200 [ 239.210209][ T6825] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 239.216140][ T6825] [ 239.218483][ T6825] value changed: 0x0000000000008669 -> 0x000000000000866a [ 239.225614][ T6825] [ 239.228005][ T6825] Reported by Kernel Concurrency Sanitizer on: [ 239.234211][ T6825] CPU: 0 UID: 0 PID: 6825 Comm: syz.1.790 Not tainted 6.16.0-rc4-syzkaller-00049-gb4911fb0b060 #0 PREEMPT(voluntary) [ 239.246606][ T6825] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 239.256708][ T6825] ================================================================== [ 239.328713][ T6873] netlink: 60 bytes leftover after parsing attributes in process `syz.2.796'.