last executing test programs: 1m2.562027576s ago: executing program 1 (id=593): write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000780)={0x8, {"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", 0x1000}}, 0x1006) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b6fffec850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r0, 0x0, 0x6}, 0x18) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001880), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000ec0)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r2], 0x7c}, 0x1, 0x0, 0x0, 0x20008085}, 0x0) 1m2.554812876s ago: executing program 1 (id=595): r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_opts(r0, 0x0, 0x1a, &(0x7f0000000100)="e1", 0x1) 1m2.476699736s ago: executing program 1 (id=597): r0 = socket$igmp(0x2, 0x3, 0x2) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020662a, &(0x7f00000008c0)={0x4, 0x2, 0x3, 0x6, 0x5, 0x0, [{0x2, 0x8001, 0x7fffffff, '\x00', 0x284}, {0x10000, 0xff, 0x8000000000000000, '\x00', 0x1080}, {0x3, 0x9, 0x8, '\x00', 0xa01}, {0x0, 0x80000001, 0x1, '\x00', 0x88b}, {0xffffffffffffad6a, 0x6, 0x2, '\x00', 0x2002}]}) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0b00000008000000020000000400000005"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r1, 0xffffffffffffffff}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000002ac0)=@polexpire={0xd8, 0x1b, 0x1, 0xfffffffe, 0x0, {{{@in=@local, @in=@private=0xa010101, 0x0, 0x0, 0x0, 0x40, 0x2}, {0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}}, [@sec_ctx={0xc, 0x8, {0x8}}, @mark={0xc}]}, 0xd8}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x100000e, 0x12, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x0, 0x3) 1m2.366899467s ago: executing program 1 (id=600): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0x40a85323, &(0x7f0000000000)={{0x80}, 'port0\x00', 0x1b, 0x0, 0x0, 0x2}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = syz_open_procfs$pagemap(0x0, &(0x7f0000000180)) ioctl$PAGEMAP_SCAN(r3, 0xc0606610, &(0x7f0000000100)={0x60, 0x0, &(0x7f0000000000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0xf8f, 0x0, 0x0, 0x0, 0x0, 0x2}) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000000900010073797a30000000003c000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000000f8c0000000c0a01080000000000000000010000000900020073797a3200000000600003805c000080080003400000000250000b80200001800a00010071756f7461000000100002800c0001400000000000000000140001800c000100636f756e74657200000000000000058011e70000666c6f775f6f66666c6f6164000000000900010073797a30"], 0x110}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz1\x00', 0x200002, 0x0) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x0, 0x1) syz_mount_image$vfat(&(0x7f0000000340), &(0x7f0000000980)='./file1\x00', 0x280809a, &(0x7f0000000f40)=ANY=[], 0xd, 0x2b9, &(0x7f0000000c00)="$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") r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000000), 0xffffff6a) ioctl$FIBMAP(r4, 0x1, &(0x7f00000000c0)) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x3d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x62200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100000, 0x0, 0x0, 0x6, 0x40, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x12, r6, 0x0) r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x40, 0x0, 0x82, 0x0, 0x8404, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1fffffff, 0x0, 0x0, 0x40}, r7, 0x100000000000, 0xffffffffffffffff, 0x0) ioctl$TUNSETQUEUE(r5, 0x400454d9, &(0x7f0000000000)={'geneve1\x00', 0x400}) close(r5) r8 = socket(0x2a, 0x2, 0x0) getsockname$packet(r8, 0x0, &(0x7f0000000040)) 1m2.128303478s ago: executing program 1 (id=605): write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000780)={0x8, {"9016e3ad9cf586acb729100fca8ffc6a6e7c42993aa2c4c00428c5330089cbf3f164e2965d2f2280edd1b23d891e5367842c5d9f8f0681bfdf05395b52cb6bb64e4e3e0202ec7cdddd2e3898c5efc3cdb9d8b6a88ee0e3a4a4246240150912ce9f014ac715afe8555baf002b8ee7cf2c5c731f7d25eec38f7a21b3353347267ae8d00319b605cf17da7cba964cf20181ce156fa3cddb3aab3f22ab906e18776e9d83ed91983f5f09e33220208b2ca42a7655c85c11d86425fae993d79c19db6d72e5765344bc2b73bd571cf7d70372f9a077bcdb0298e7e748081a8084bfec922427c26da1ac4d747896799c46319e62f8117585bded4093b3951d672e81d9ae0d7bbdbc4e8ca71ca1254d5d710cdbb55bb9e8929b912fcb45bab692fea161836d0480854636a5d6cccc2d4d3473e5e0cf3a9401fccc6745af36b25b8effd8ed9157aa2ef5b9937356a6455fbcc406c8fa42e2e3c250dc76052511a10fb168162f56d9770ef07ee43665608acfffe3e34e444905cbd180969ca41005b1314cf0f28c9ba11e62524da384f70a60fe3242a13ff6c44e32585b043b8451683bdf729583117dd0b2e18b74c5e5d5b22b4e99a5adbb0877561df9cc18c8e5f9ad2d24e234c2b6f33e85dd329726d17bc39b91d1a38fbe1c105d818ff7dc120b55d92b4c3004fe649ac72df4b96927e9f923e326113745926ec573a67588e7545a81b1c0654eeb1d3fef8d21b7fa3db6cbf1a20c9e514fc293c3ed0c52978cc4b124fa043424150e54b81d84092ae7462ec7543cca1fde48246390221d2574f44ca6476bfbd21ff0a911bb9d3f36890d3395329811b7ca2570721244a8fdc4f39d9297dfdef07ed948fc93a01634dc310c1bd69272f0141ad2b0820dfc9961149af2d44730dba734ee516d674fe199230498d01d502b2ba8a0223252dde04ad6cbb58090df42f9b0ca0f35893cd34a412b09984a4b2c9f5eb35685b0d605fbdfc4faed9af074d0b860ac78a8cc4356ccc8da8a9801b1e8a5b6ce00fee5cc5a19a13e8462d5bd46c4eb2837fe498e29050dd6a741bcd3d1d99f46074fa049d83f6168c06713a2cf84f178a8a6c7961313f885f70789c25fc38165ea76b58e96569238648783f1960ced06814429496e8f37aac471c00f27aef63b00259e8aaea733c0ec7cfe37c08b9599dc269bba6ca592af9f59e180900c303cc550bba7650be7e2a2ad55cd0657cd8d143891056fd1ce52ed51c8708b0f0914424e56a8327d938f89db12f7364ac0a97c4e3a49ced5f97bc10fdb32d7749c3401a41aaa6f98fcf22928c77e21e43b1478d9973c9d0edd94afc272c304498d41155a9bdee3fba94239ee24c33a90dc978ceb1160d4fbc2a84831e4f540a138f6481db8d2f58719b9cc1634a3d04af8047184f5f02d584be3e0c3599a0b781c472c73829bf765e47f6c2b533aa383ba2abacc3575fb038efa0d6d221c1926a1eb44c16eac8fc1401d672cc93fb59e495e97819d87095af124090717410ea7696f9578213c55c46962f7f476bf74c176232fb98ec674a8ca17e6fdb343c92f50093f51af820ec727446f04a7cc9dcffcbd5e7c4af85e30fd89ef40ffa590991aba9a66cf1dca20f5c9562175dd7fe0c826984b783eef6045e8cc53faf1405aae50cb9a74ae3e1a7b41e7bce2fb22808657d141daa4b8a32d2f8a3adf92a492574e5820d65c2f3aa074748db3f19d4d4520e12b8f770fef1780d4abdf38de0d405fa4898572746fed97ef790c8b2a2ef2a65e98fe51f5fa20ead61c425f4b706d2a564e653fc6f90ecc73bf05524bd58751d06847ccdc236e7dcab757f39856d940db90d23055c0fe7b95fde2f2d579d21a931105c579589bcab569deb1e46b6c495c7d4ef7a0aa987586dfc45d05facfa16ddf074b41629a11a4b4c7479813087d72cf036606d5108b7efa9f82c8bba7f9af06e8c396074c1f4bf9c6078f1e34e634130be14ff0686211723295b17e9f9cffc3b03ead01cbba3b17319c8b751cc84b37d527e522213164ca8bbb7cd5f48a766654e054d0ca1a9bc83d720753bc4ca88de83fb0a085cfdde008e5ea71206c86e926452dfe8c8ec63cfe3e01a661886f38d3c2f5a27fa15be6a315839eb6bdaedfd353476eeaafa7caace400c662f44b78426deaf2ed49129e9a64448684e503ee8a024ea48dbd8fe583099bd8179dac6c462ac88665a76bee7b928375ee662becf1a72b186847ad79f322930d701b374ce3fa4d921167e1e90caffcdc6fddce526e7b50ec8d7839df7ad0d52141fb14f07bfeb025e1063cf7ee6bcb533ec24aa745fe6a94cf1ef8a117b9a869a6ecba1eb37784d625b44c15387ba5d97dcc68d29a153b4014726a28b4403d1bed351520ff05021664c3aeb1d7a55e02984c82dafd49cfb039072f170e54eacddf33dc26e963a77b153a1f4394da4203101bc8f3864670ad297410dc85987f052cbad35607f16622c8e3b03b1a7d1fc9ccfad3e876c2233b8a4bf556d8e37031ee8258228d116dc3b0d16c89c6cf64871d3435261dfb1118227784f2303ff79cd5dc06da4bba3cee18014b42d72056e1f9f8c83ce3561ae00639534b26599fc4d492efb05e661619b057c1ba051d5086b4ceb3369ed9f46d7de7842449571f6907c62c349235755eb800383e32c5a65d7312645bbd57211ea2acbe93ea87c1a59319531cd89bbe6810641cdb93ec337b843afebfe42cd01fa1da1d2ac61de61123d94ab6ca3bbfd3b69b522f85b93b0cbc5b151c6b41689d27087776f970b9677f0a1c8541031fe03bb801cf9ad60f92c68e3ac4e97f6bf49b6033e54a24f977ea452ed4d4d537d80f3ae7427237161ea12c7e8494b5f232dc03fbe2d8a6f23b921831a90f5be5446cef16801254b964bc65e8ac02e2e138de4c9aa9fccd2221d3c6c21d66cd9b96e8ff588cd81ab117095bc62d2078b9c97ddf3e4980d8c7b86968319bfed9f99a826220f660a9f856818271c203a6d400c957226d9e05e3b37a0047f5a488cce2b78f861f898edea44f0bb5b636e0d9021c47e6bc48ce9dbdfa207eab8686de87c60e9a3a256efcaf0bbe0544c404b426afbede0ffd27faa396bc86e1ba31bfe28783c429d9c3fa55eff22cb8321a274d4cef7bccff5bdb7d08d04c911b1c664aa4640066e1c4c3f729cab26184ab98effe345918884340b67f81adee3c6d5690a8e7756c60f0fd76445217c9e90f164b4a7a639b83af520454b64c7e8997cb56f68bb4d38737a88a8715f22ff3df0c1e4b9c0625d5fc219898998bd210aa5ef672fd8f2e843ed1333c9cb94863d67ac50af8dcde25571fddd2dcb2cd1e879b82ad2d1b58c6a0a293b23d50a75e221484e577b9f8dad1dbe6d8d9a5ffd3716985d236e1e83c038d01e8af2664f1b5a1ee593b82b65e802bb38156e6007173cff2046789bddd9faf97b6c35c6202a066e4c01a59c193c532d142fb6f64aada1e647e7079e32c4eaeae7249f324baaf9f3cc90ca70e80f92d021b1b26beeda879df4e842ead91a5b94f8f6d2c09e83c3b09f663f7ebeda36a57107de78bfd4314a8541a0fec04bcbec5f07d41911a0d8df86ac5123c89470220508e09e104a9e3cce79ca9e855bebc0e606ad2b8bff234f35f6e02ad43419e2895a39b333313c047d64d6ba1fce58fe827d25e75517b9ef957a5e2da527db6bc786b708d1d9bae8a00f23a4e153c75c0095060468211ba7785a90ff3feb9db34abe4e7600343668173fcf8cb4d9335984cc186a8e2b5a947d16ce0deb65e2460c8aacd8c318d4b89edb2c85ad10f97340f478306782b3d4cd142b10a95a4571900e75e5b3bfb3ae946e110ba6a8b1bb454b4be720a7fdbe7bca1de17e9100129aeb93f97ad879156cc4f2b319c5f9e7c0dd0d25c9ec6ab96273540767b2f63b46f0e18b390c6c30218909d1d5aea53761516c1ab90b16ac467322a0c14fe605482765ffbc3daef157b2feeecff849cf1127c463cfc2cf62fbc6369a844303cc4dfacfbedd5263cd95860d4e4720638c8f248051fdfcc02be7b3066f4e43d9b0e69d4c19ae3a80b46e1cc1143cb4ff4fa0f9034599d34e6f904638dbefe6841ca7756ceeade4e67b0033a7c972ba64463499e14db400f62b21d7a22cdc76f2bcd32d893975240ac1c44619b641d889261fc81f33163ac525681c990eeb1f1ed6911c115a28e13adea7aec9b77aa37380957508fbd7d4f7f206000d9eb8b4672f48ef9b492e47404ae1e9e891a1b7612ead9d51d304d4e75eb924e068ab1c7131fd2f3d144cf6db9affdb0f21e152bc61977cc701b54f7ab841c715231e28cbc9671857a6c85ae16e834e016565ac2add29d759a1aaa6217b921233d6fe52c86b80d383a34e4760b45b4eb11fa4efe7fcc320cb6e42a102f333c4f4cc288dc5d4946dad40262f37556d98a1c6bb0a2028b8caa66dca870a0760cf3099b8acd704489187139038100ce96ad4ce27cba76a134490f8ddd1342c71e06e7c0d9cacfda06e4d247ee00563800881b1eb2575753a0904de513f13903c2273cede2d3440acc6d0f11cc11365348bb18a62b27b2f6ba720898b3488b33948ae09a31866ce4ee3fb19200e4d0f31d59cb277ec0dfbfb515a196478ebbd61afe7c407940d7da95a6624fbd98d7639d5aa8d89949fc226756fa496f0cb98af2aebb88c26d45c601d627ab178ee0f2652d2cbdbdfe40104a30f885ec6196d38913f800675ceb5c8cdc0d47a13bb9e3094d55dace83a99489df95d8fb8f0c337af5628d2ab1b2efda4abf46abee1247c3d96ca6addb527360088564b4ccb7dc890397316a10f78402eba629b697861ca6fbdf091f27bf82c0d0556e65f9b1bd32ff569112b97f564d2f37e4b419ec9a28f3eb5ac71293c2220b04b113f0bfd268667d005b4d66c027612b318e1f381bd0d36a073dd6ce539b01c6ac45b30b3bb7d67a160e6cf1294d885ce7e61bf98f6d11220b4075e9b682021af2a26296ee6d3f269396aa8e119748acf4d6f3aa0038b66299c90ca1d45b88d7c5fb10ef582d2e4959ca86b30de47cf8885c1df734768e2666c0fa779d179093a5fb96af41f23f18b7032ff2cf0affc2dcf9f00fb471132e13777a47c432aa0d5a9516264b320fd706a1e2a37b875a236545b43f09e46d1378b9f1cb2abb4a66133d56722eb9150b4f336971c4f9da740b12cab5ecbc9f5af2f417e395fa9d05508bcd50a740e36ac535a6e0ccbbfa0439e4713f65a843faa48f9285b162031361f5e34c29ea74b67337255bd99cf60e67a58847995c85d12da35ed9f26b8e3dd3a12f95450ed96ff4d5ae1a576c0d3ac92e4682a1e903b8f6d1850d25735c163afa29e2179555d1fbd6104fef9b544909f3f89b9677885ed8eaedfd2fa1e52ebfe610f76c2774a4456d0e166e416b9aa3d73264381445d474817c7d6d7fed14abd1e7508bbe572857ec2dde65dcc9229389cc8acd9abd669778e3eea7e4ab95096ab5c72ab2ee54a8534e54dc6b94f9cbf26d7ac4a6dae8714f9d040ad282a49371ff3e32b89ff6d6e5feb8cc00e3f67da21d49d85ce5d2c84d7479bcf4f160606da89d3fffb49fc24fdf746f7207e5a68c44b15af495bd3948df3a69ab50d2ffc9f0a4ba5b0ad1245642825ffc224abe50072b1003561b634f8998bbe2225ac2345c65d09df4b73c3e9ae3dbde11b7f46b284b3c40eee28f1b9430da27c17b9fc3df03b4a13f95cbb051db5b55aa41ca53e7c40b0b80af980d6ad272fb9f065dfab3ca04fdf488ba2650ae2591cd16bcde1e2bc740927c", 0x1000}}, 0x1006) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b6fffec850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r0, 0x0, 0x6}, 0x18) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001880), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000ec0)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r2], 0x7c}, 0x1, 0x0, 0x0, 0x20008085}, 0x0) 1m1.625085842s ago: executing program 1 (id=613): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1, 0x0, 0x7}, 0x18) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) 1m1.608258792s ago: executing program 32 (id=613): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1, 0x0, 0x7}, 0x18) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) 48.879706982s ago: executing program 0 (id=840): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000000000007b1af8ff00000000bf"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='mpol=interleave']) 48.862644952s ago: executing program 0 (id=841): socket$packet(0x11, 0x3, 0x300) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd"], 0xfdef) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000ffff0018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x9, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f60000008500000043"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x8000, 0x0) ioctl$TCSBRKP(r2, 0x5425, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0x3) ioctl$TCSETSW2(r3, 0x5408, &(0x7f0000000040)={0x3, 0x0, 0xfffffffe, 0x7fffffff, 0x0, "23f555d9adb42d4408020e90d1beaa82dc1ecf", 0x1000}) ioctl$TIOCGPGRP(r2, 0x5437, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0xe) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="980000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c0002800500010000000000080007"], 0x98}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={0xac, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @mcast1}]}]}, 0xac}}, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r5}, 0x10) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB='\t\x00'/20, @ANYRES32, @ANYBLOB='\x00'/19, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 48.356871525s ago: executing program 0 (id=846): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000040)={0x803, 0x3, 0x0, 0x3}, 0x8) sendto$inet(r0, &(0x7f0000000300)="ab", 0x1a000, 0x0, &(0x7f0000000100)={0x2, 0x4e22, @local}, 0x10) 48.257202126s ago: executing program 0 (id=850): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0xffff, 0x0, @local, 0x3}, 0x1c) connect$pppl2tp(r0, &(0x7f00000002c0)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x8, 0x0, 0x0, 0x0, {0xa, 0xfffe, 0x0, @rand_addr=' \x01\x00', 0x100}}}, 0x32) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x2008002, &(0x7f0000000080), 0x1, 0x53d, &(0x7f0000000a80)="$eJzs3c9vHFcdAPDvjH82TesEeoAKSIBCQFF2400bVb20uYBQVQlRcUAcUmNvLJNdr/GuS20s4f4NIIHECf4EDkgckHriwI0jEgeEVA5IASxQjATSopkdO1t7TZbsepd6Px9pMvPmzcz3vWxm39u3m3kBTKyrEbEXEbMR8VZELBT7k2KJ1zpLdtzD/d3lg/3d5STa7Tf/muT52b7oOifzdHHN+Yj42pcjvpWcjNvc3rm/VKtVN4t0uVXfKDe3d26s1ZdWq6vV9Url9uLtmy/feqkytLpeqf/8wZfWXv/6r375yfd/u/fF72XFuljkdddjmDpVnzmKk5mOiNfPItgYTBXr2TGXgyeTRsRHIuIz+f2/EFP5v04A4DxrtxeivdCdBgDOuzQfA0vSUkSkadEJKHXG8J6LC2mt0Wxdv9fYWl/pjJVdipn03lqtevPy3O+/kx88k2TpxTwvz8/TlWPpWxFxOSJ+OPdUni4tN2or4+nyAMDEe7q7/Y+If8ylaanU16k9vtUDAD405sddAABg5LT/ADB5tP8AMHn6aP+LL/v3zrwsAMBo+PwPAJNH+w8Ak0f7DwAT5atvvJEt7YPi+dcrb29v3W+8fWOl2rxfqm8tl5Ybmxul1UZjNX9mT/1x16s1GhuLL8bWO+VWtdkqN7d37tYbW+utu/lzve9WZ0ZSKwDgv7l85b3fJRGx98pT+RJdczloq+F8S8ddAGBspgY5WQcBPtTM9gWTq68mPO8k/ObMywKMR8+Hec/33PygH/8PQfzOCP6vXPt4/+P/5niG88X4P0yuJxv/f3Xo5QBGz/g/TK52Ozk+5//sURYAcC4N8BO+9veH1QkBxupxk3kP5ft/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOGcuRsS3I0lL+VzgafZnWipFPBMRl2ImubdWq96MiGfjSkTMzGXpxXEXGgAYUPrnpJj/69rCCxeP584m/5zL1xHx3Z+8+aN3llqtzcVs/9+O9s8dTh9WeXTeAPMKAgBDlrfflWLd9UH+4f7u8uEyyvI8uBP/LqYiXj7Y382XTs50ZDsj5vO+xIW/JzFdnDMfEc9HxNQQ4u+9GxEf61X/JB8buVTMfNodP4rYz4w0fvqB+Gme11lnna+PDqEsMGneuxMRr/W6/9K4mq973//z+TvU4B7c6Vzs8L3voCv+dBFpqkf87J6/2m+MF3/9lRM72wudvHcjnp/uFT85ip+cEv+FPuP/4ROf+sGrp+S1fxpxLXrH745VbtU3ys3tnRtr9aXV6mp1vVK5vXj75su3XqqU8zHq8uFI9Ul/eeX6s6eVLav/hVPiz/es/+zRuZ/rs/4/+9db3/z0o+Tc8fhf+Gzv1/+5nvE7sjbx833GX7rwi1On787ir5xS/8e9/tf7jP/+n3ZW+jwUABiB5vbO/aVarbo50Eb2KXQY1zmxkRWxv4MPu4uDBf1jnEUtnnBj5qz+Vs98Y/qorzjcK38ju+KIq5MOvRYDbTwcVazxvScBo/Hoph93SQAAAAAAAAAAAAAAgNOM4r8ujbuOAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAnF//CQAA//+zi8zo") r2 = socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/sctp\x00') r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x10, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r5}, 0x10) r6 = open_tree(r3, &(0x7f0000000640)='\x00', 0x89901) move_mount(r6, &(0x7f0000000040)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='net/sctp\x00') mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x2000000, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'veth1_macvtap\x00'}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3e, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x800000000003}, 0x100000, 0x5dd8, 0x3, 0x0, 0x0, 0x8, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$kcm(0x11, 0xa, 0x300) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2688ca4c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYRESOCT=r0], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r8}, 0x10) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x4a000, 0x2) writev(r0, &(0x7f0000000600)=[{&(0x7f00000006c0)="1c", 0x1}], 0x1) r9 = syz_clone(0x0, 0x0, 0x44, 0x0, 0x0, 0x0) r10 = syz_pidfd_open(r9, 0x0) r11 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r11}, 0x2c, {'wfdno', 0x3d, r10}}) 47.661404019s ago: executing program 0 (id=862): r0 = bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0), 0x8) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b00000000000000000000000d00000000000000", @ANYRES32=0x1, @ANYBLOB="0500"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="050000000000000003000000000000010400"/28], 0x50) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'bridge0\x00', 0x0}) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000040)=0xf3f, 0x4) sendto$packet(r2, &(0x7f00000000c0)="0e030e00c4e8120006001e0089e9aaa911d7c2290f0086dd1327c9167c642c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xe90c, 0x28000000, &(0x7f0000000540)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r4, &(0x7f0000000000), 0xfffffecc) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000e000000027000000a70500004383cf63", @ANYRES32=r1, @ANYBLOB="ff000000907df30200"/20, @ANYRES32=r3, @ANYRES32=r4, @ANYBLOB="0500000004000000010000000600000000000000", @ANYRES32, @ANYBLOB, @ANYRES32=r0, @ANYBLOB], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000070000000000000018110000", @ANYRES32=r5, @ANYRES16], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = socket$inet6(0xa, 0x2, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYRES8=r3], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r8}, 0x0, &(0x7f0000000040)}, 0x20) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0xb, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r9}, 0x10) mount(0x0, 0x0, 0x0, 0x0, 0x0) r10 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r10, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) close(r10) bind$inet6(r7, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty, 0xfffffff7}, 0x1c) setsockopt$inet6_int(r7, 0x29, 0x3, &(0x7f0000004240)=0x40000006, 0x4) recvmmsg(r7, &(0x7f00000018c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)=""/47, 0x2f}, 0x64}], 0x1, 0x2, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r7, 0x29, 0x36, &(0x7f00000000c0)=ANY=[], 0x8) setsockopt$inet6_int(r7, 0x29, 0x4, &(0x7f0000000000)=0x7f, 0x4) sendto$inet6(r7, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r5}, &(0x7f0000000680), &(0x7f00000006c0)=r6}, 0xfffffffffffffde7) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r11}, 0x10) 45.373799854s ago: executing program 0 (id=903): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0x4800}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000003900)=ANY=[@ANYBLOB="240000001600010a00000000000000000a000000040000000c0004"], 0x24}}, 0x0) 45.373613014s ago: executing program 33 (id=903): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0x4800}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000003900)=ANY=[@ANYBLOB="240000001600010a00000000000000000a000000040000000c0004"], 0x24}}, 0x0) 2.022750267s ago: executing program 5 (id=1551): add_key$keyring(0x0, &(0x7f00000002c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001c00110c0000006a00000f0007000000", @ANYRES32=r1, @ANYBLOB="800202000a000200577f0000aabb000020000e80"], 0x48}}, 0x0) 1.983963347s ago: executing program 5 (id=1552): socket$inet6_sctp(0xa, 0x801, 0x84) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000480)={'filter\x00', 0x4, 0x4, 0x408, 0x220, 0x0, 0x110, 0x320, 0x320, 0x320, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2}}, {@mac}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'pimreg1\x00', 'erspan0\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@local, @empty, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x1}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @local, @empty, 0x8, 0xffffffff}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local}, {@mac=@multicast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'nicvf0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x458) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = dup(r1) write$UHID_INPUT(r2, &(0x7f0000001040)={0x9b, {"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", 0xfffffffffffffebd}}, 0x1006) ioctl$sock_netdev_private(0xffffffffffffffff, 0x8930, &(0x7f00000010c0)="9980") write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r2, &(0x7f00000000c0)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x3ff}}, 0xfffffe28) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x12, 0xd, &(0x7f0000000280)=ANY=[@ANYRESHEX=r3, @ANYRES32=r3, @ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock_addr=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r4}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000005c0)=[{0x200000000006, 0xde, 0x0, 0x7ffc1ffb}]}) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) r7 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(0xffffffffffffffff, r8) lchown(&(0x7f0000000180)='./file0\x00', 0x0, r8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x18) signalfd(0xffffffffffffffff, &(0x7f0000000640), 0x8) r9 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r9}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r10 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000300)={0x0, 0x1, 0x7}) mq_timedsend(r10, 0x0, 0x0, 0x0, 0x0) 1.199372822s ago: executing program 4 (id=1568): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r0}, 0x18) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x1000f4) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x2, [@func_proto={0x0, 0x2, 0x0, 0xd, 0x2, [{0x0, 0x2}, {}]}, @ptr]}}, &(0x7f0000000200)=""/224, 0x42, 0xe0, 0x1, 0x0, 0x0, @void, @value}, 0x20) (fail_nth: 3) 1.087716013s ago: executing program 5 (id=1570): r0 = socket$inet6(0xa, 0x806, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1b00000000000000000000004639450000040000", @ANYRES32=0x0, @ANYBLOB="040400"/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffffff00"/28], 0x50) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "7f12ddc1517600000000000000000000eaff00"}) r2 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TIOCVHANGUP(r2, 0x5437, 0x0) r3 = openat$sysfs(0xffffff9c, &(0x7f0000000200)='/sys/kernel/notes', 0x0, 0x0) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000040)='ext4_ext_rm_idx\x00', 0xffffffffffffffff, 0x0, 0x3}, 0x18) write$binfmt_misc(r3, 0x0, 0x0) r5 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r5, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) listen(r5, 0x3) r6 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r6, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) r7 = accept4(r5, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001868000000000000000000080000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000001800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r8 = socket$nl_generic(0x11, 0x3, 0x10) sendmsg(r8, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x80, &(0x7f00000005c0)=[{}], 0x1, 0x0, 0x0, 0x11000000}, 0x0) sendmmsg(r7, &(0x7f0000001500), 0x588, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @mcast1, 0xfffffffe}, 0x1c) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="9ac47f755df6a7543b6dd9e74b07783047984cec", @ANYRES64=r1, @ANYRES64=r9, @ANYRES16=r3, @ANYBLOB="3756e1f52ba7dc2b4a780886e458203090b258337b2850230fcadc2eb5dbab7467a8fc4a14cd059a8627e056cd5d6880979634416d66f434c4be1bd123459bda275d5e0b15b5d397f249a792142078a4841f08f1597d5c8c2b9ec293c85ff021689fc9d7c5bc42d5d50bf1918b16aeded306d15ec70aeeca17eec54b53337145d20a88425c00d9864dcf7bfe3967bd685cdc49cdde345ab834b2d7b0", @ANYBLOB="8219a5ec73736560bf41c8e0f875aed6e52de31ad9c3911c6f11ab478b507bbe716bc38b61cc8ed1fb69c165df33740f6afb1712eb7d2356ecc8b6c6b2ee9118f96de479fdc15db8836d96eb1671878bcdf045e4b6d6d6e3b3df51480be4773c3a745fe1319c2a7c98302abe7ae97b21feda7b1ca4f9f192c09ffb741f0ed8426f515d294dd8703ef1948809c59f05873e151470d9bb4f3bb2d4552a77d21572db7a22d21ae537957d81c796111cf4c8", @ANYRES8=r4, @ANYRES8, @ANYRESOCT], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 1.072430493s ago: executing program 4 (id=1571): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="190000000400000008000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r1}, 0x10) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000b00)=@base={0x6, 0x4, 0x70be, 0x5c, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 1.029267553s ago: executing program 5 (id=1573): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x200000, &(0x7f0000000180)={[{@dioread_nolock}, {@norecovery}, {@min_batch_time={'min_batch_time', 0x3d, 0x1}}, {@nojournal_checksum}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nodelalloc}, {@errors_remount}, {@acl}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x343}}, {@jqfmt_vfsold}, {@barrier_val={'barrier', 0x3d, 0x7}}, {@nombcache}]}, 0xfd, 0x573, &(0x7f0000000cc0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) renameat2(r0, &(0x7f0000000340)='./file0\x00', r1, 0x0, 0x2) utimensat(0xffffffffffffff9c, &(0x7f00000003c0)='.\x00', 0x0, 0x0) 943.960463ms ago: executing program 4 (id=1574): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r2}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000050000000800000005"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000027b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='kfree\x00', r4}, 0x10) 935.254163ms ago: executing program 3 (id=1575): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x80100, 0x23) open_tree(r0, &(0x7f0000000100)='\x00', 0x88101) socket$unix(0x1, 0x1, 0x0) socket$unix(0x1, 0x1, 0x0) linkat(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0xffffffffffffffff, &(0x7f0000000640)='./bus\x00', 0x1400) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) r3 = socket$unix(0x1, 0x2, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0xee01, r4, 0xffffffffffffffff) setreuid(r4, 0x0) quotactl_fd$Q_QUOTAON(r1, 0xffffffff80000201, 0x0, &(0x7f0000000140)='./file1\x00') timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000240), 0xfffffecc) 902.131304ms ago: executing program 5 (id=1576): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex_waitv(&(0x7f0000001080)=[{0x3, &(0x7f0000001040)=0x3, 0x82}], 0x1, 0x0, 0x0, 0x1) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000240)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r4, 0x84, 0xf, 0x0, &(0x7f0000000840)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=@framed={{}, [@ringbuf_output={{0x18, 0x2, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x43}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0xa, 0x4, 0xfff, 0x3, 0x0, 0xffffffffffffffff, 0xfffff399, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000780)=ANY=[@ANYBLOB="dd1159c7b6bd8cff5548a4e0617469cc2eb0ee87ddad58a692097673e2b62d693fcd6f6399db8ec783835cc1be7943c1255840a58ea2a7914bb15cd86687c3dc9100818192a037ff52f4535f5bb7b8cb031ce6217e8c265fafcbfa1faa605e0c72421ae3a0e8941bb21a08ea0d0c64eb7c608e4c20bc9b4ac215496a9f7bccc7b7ceecda16dec7d7298294714bca00000000000000"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000580)='kmem_cache_free\x00', r6}, 0x10) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r7, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x9}, 0x1c) setsockopt$inet6_int(r7, 0x29, 0x8, &(0x7f0000000000)=0x3, 0x4) syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "2a8435", 0x14, 0x6, 0x0, @empty, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x4, 0x5, 0xc2}}}}}}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000500)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8a9646", 0x14, 0x6, 0x0, @empty, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x7}}}}}}}, 0x0) 850.640934ms ago: executing program 4 (id=1577): unshare(0xc000600) name_to_handle_at(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) syz_open_dev$usbfs(&(0x7f00000001c0), 0x1, 0xc0) r0 = socket$inet6(0xa, 0x3, 0x5) r1 = socket$l2tp6(0xa, 0x2, 0x73) dup3(r1, r0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffffff, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r3, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x29}, './file0\x00'}) 785.158105ms ago: executing program 3 (id=1578): socket$packet(0x11, 0x3, 0x300) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, 0x0, &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd"], 0xfdef) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000ffff0018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x9, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f60000008500000043"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x8000, 0x0) ioctl$TCSBRKP(r1, 0x5425, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0x3) ioctl$TCSETSW2(r2, 0x5408, &(0x7f0000000040)={0x3, 0x0, 0xfffffffe, 0x7fffffff, 0x0, "23f555d9adb42d4408020e90d1beaa82dc1ecf", 0x1000}) ioctl$TIOCGPGRP(r1, 0x5437, 0x0) 745.389615ms ago: executing program 4 (id=1579): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0x34204, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xc8, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x6, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='kfree\x00', r6}, 0x10) sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002ac0)=@newtaction={0x88c, 0x30, 0xffff, 0x0, 0x0, {}, [{0x878, 0x1, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xd02, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x6, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x40, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x0, 0x0, 0x8, 0xfffe, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x7, 0x0, 0x3, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x800, 0x20000000, 0x0, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0xe53c0000, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x5, 0x0, 0x0, 0x0, {0x3, 0x0, 0x0, 0x0, 0x0, 0x5}, {0x4, 0x2, 0x0, 0x0, 0x0, 0xff}}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x88c}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r7, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r8}, 0x10) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r9}, 0x10) r10 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$USBDEVFS_CONTROL(r10, 0xc0105500, &(0x7f0000000000)={0x80, 0x8, 0x0, 0x0, 0x4, 0xfffe, 0x0}) 663.917245ms ago: executing program 4 (id=1582): r0 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000080)=0x0) syz_open_procfs(r1, &(0x7f0000000040)='net\x00') r2 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) ioctl$sock_TIOCINQ(r2, 0x541b, &(0x7f00000000c0)) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x6) epoll_create1(0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) openat$rtc(0xffffffffffffff9c, &(0x7f0000000280), 0x620201, 0x0) unshare(0x2c020400) pselect6(0x40, &(0x7f00000045c0), 0x0, &(0x7f0000004640)={0xf8}, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0x15, &(0x7f0000000340)={r3, 0x0, 0x0}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000280)={0x0, 0x0}) bpf$PROG_LOAD(0x5, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000001080)={0x1, &(0x7f0000001180)=[{0x0, 0x48, 0xf, 0x80000000}]}) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000001040)=ANY=[@ANYBLOB="84010000100013070000000000000000ffffffff000000000000000000000000fe8000000000000000000000000000bb00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x184}}, 0x0) socket(0x2, 0x80805, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={0x0, &(0x7f0000000500), 0x99, 0x0, 0x0, 0x5, 0x10000, @value=r0}, 0x28) 425.953537ms ago: executing program 3 (id=1591): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000002080)={&(0x7f0000000300)='kfree\x00', r0}, 0x10) setsockopt(0xffffffffffffffff, 0x84, 0x81, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x2000480, &(0x7f0000001900), 0x1, 0x769, &(0x7f0000000380)="$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") open(&(0x7f0000000340)='./bus\x00', 0x64842, 0x0) open(0x0, 0x143142, 0x0) getsockopt$IPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x41, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) epoll_create1(0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x0, 0x0) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000001c0), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0xd, 0x0, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f00000015c0)={0x0, 0x0, &(0x7f0000001580)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000c00000008000400000000000800050008000020"], 0x24}}, 0x0) r3 = socket(0x10, 0x3, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) sendmsg$kcm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) 348.695637ms ago: executing program 2 (id=1593): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, 0xffffffffffffffff}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000a40)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff0000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x10) mount_setattr(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, &(0x7f0000000200)={0x0, 0x0, 0x40000}, 0x20) 318.489007ms ago: executing program 2 (id=1595): r0 = socket$inet6(0xa, 0x806, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1b00000000000000000000004639450000040000", @ANYRES32=0x0, @ANYBLOB="040400"/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffffff00"/28], 0x50) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "7f12ddc1517600000000000000000000eaff00"}) r2 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TIOCVHANGUP(r2, 0x5437, 0x0) r3 = openat$sysfs(0xffffff9c, &(0x7f0000000200)='/sys/kernel/notes', 0x0, 0x0) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000040)='ext4_ext_rm_idx\x00', 0xffffffffffffffff, 0x0, 0x3}, 0x18) write$binfmt_misc(r3, 0x0, 0x0) r5 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r5, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) listen(r5, 0x3) r6 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r6, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) r7 = accept4(r5, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001868000000000000000000080000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000001800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r8 = socket$nl_generic(0x11, 0x3, 0x10) sendmsg(r8, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x80, &(0x7f00000005c0)=[{}], 0x1, 0x0, 0x0, 0x11000000}, 0x0) sendmmsg(r7, &(0x7f0000001500), 0x588, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @mcast1, 0xfffffffe}, 0x1c) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="9ac47f755df6a7543b6dd9e74b07783047984cec", @ANYRES64=r1, @ANYRES64=r9, @ANYRES16=r3, @ANYBLOB="3756e1f52ba7dc2b4a780886e458203090b258337b2850230fcadc2eb5dbab7467a8fc4a14cd059a8627e056cd5d6880979634416d66f434c4be1bd123459bda275d5e0b15b5d397f249a792142078a4841f08f1597d5c8c2b9ec293c85ff021689fc9d7c5bc42d5d50bf1918b16aeded306d15ec70aeeca17eec54b53337145d20a88425c00d9864dcf7bfe3967bd685cdc49cdde345ab834b2d7b0", @ANYBLOB="8219a5ec73736560bf41c8e0f875aed6e52de31ad9c3911c6f11ab478b507bbe716bc38b61cc8ed1fb69c165df33740f6afb1712eb7d2356ecc8b6c6b2ee9118f96de479fdc15db8836d96eb1671878bcdf045e4b6d6d6e3b3df51480be4773c3a745fe1319c2a7c98302abe7ae97b21feda7b1ca4f9f192c09ffb741f0ed8426f515d294dd8703ef1948809c59f05873e151470d9bb4f3bb2d4552a77d21572db7a22d21ae537957d81c796111cf4c8", @ANYRES8=r4, @ANYRES8, @ANYRESOCT], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 308.670817ms ago: executing program 6 (id=1596): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="190000000400000008000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r1}, 0x10) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000b00)=@base={0x6, 0x4, 0x70be, 0x5c, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 259.977248ms ago: executing program 6 (id=1597): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x2008002, &(0x7f0000000040)={[{@commit={'commit', 0x3d, 0x3}}, {@nouid32}]}, 0x4, 0x549, &(0x7f0000001800)="$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") r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b7030000000000de850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x3, 0x3, 0x3}, 0x10) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DATA={0x10, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}]}, @NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0x2400}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x88}}, 0x0) setregid(0x0, r4) lsetxattr$system_posix_acl(&(0x7f00000003c0)='./bus\x00', &(0x7f0000000540)='system.posix_acl_access\x00', &(0x7f0000000680)=ANY=[@ANYBLOB="020000000100000000000000040000000000000008000100", @ANYRES32=0x0, @ANYBLOB="100001000000000020"], 0x2c, 0x0) r6 = socket$tipc(0x1e, 0x2, 0x0) sendmsg$tipc(r6, &(0x7f00000002c0)={&(0x7f0000000000), 0x10, 0x0}, 0x0) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000000)={0x9, 0x0, 0x7fff, 0x0, 0x4}) 245.110978ms ago: executing program 3 (id=1598): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r2}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000050000000800000005"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000027b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='kfree\x00', r4}, 0x10) 234.226258ms ago: executing program 2 (id=1599): r0 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x22400049, &(0x7f0000000700)={[{@dioread_nolock}, {@noinit_itable}, {}, {@noblock_validity}, {@data_err_abort}, {@noauto_da_alloc}, {@jqfmt_vfsv0}, {@barrier_val={'barrier', 0x3d, 0xd95a}}, {@debug}]}, 0x84, 0x479, &(0x7f00000012c0)="$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") fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYRES8=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000a40)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffff", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/cgroup.procs\x00', &(0x7f0000000240)=ANY=[@ANYBLOB="14"], &(0x7f0000000280), 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00'}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[], 0x0, 0x37, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000004440)=@base={0x9, 0x4, 0x4, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r2, 0x2, 0x1, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=@base={0xa, 0x2, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe40, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) r4 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) writev(r4, &(0x7f0000002800)=[{&(0x7f0000002500)='\f7', 0x45}], 0x1) write$cgroup_pid(r4, 0x0, 0x0) 150.835028ms ago: executing program 2 (id=1600): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, r0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x6) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='sched_process_wait\x00', r2}, 0x10) r4 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r3}, 0x8) close(r4) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') bpf$BPF_PROG_QUERY(0x10, &(0x7f00000005c0)={@ifindex, 0x11, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 137.478718ms ago: executing program 6 (id=1601): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x200000, &(0x7f0000000180)={[{@dioread_nolock}, {@norecovery}, {@min_batch_time={'min_batch_time', 0x3d, 0x1}}, {@nojournal_checksum}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nodelalloc}, {@errors_remount}, {@acl}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x343}}, {@jqfmt_vfsold}, {@barrier_val={'barrier', 0x3d, 0x7}}, {@nombcache}]}, 0xfd, 0x573, &(0x7f0000000cc0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) renameat2(r0, &(0x7f0000000340)='./file0\x00', r1, &(0x7f00000003c0)='./file1\x00', 0x2) utimensat(0xffffffffffffff9c, 0x0, 0x0, 0x0) 93.366839ms ago: executing program 3 (id=1602): r0 = socket$kcm(0x2, 0x3, 0x84) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0a0000000400000002000000"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000300000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) sendmsg$inet(r0, &(0x7f00000009c0)={&(0x7f0000000240)={0x2, 0x0, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="3c000000000000000000000007000000441454010000000000000000ac1414bb00000000004414000100000000000000000000000000000000000000000000001c00"/76, @ANYRES8], 0x60}, 0x40c0) 52.280079ms ago: executing program 6 (id=1603): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='kmem_cache_free\x00', r0, 0x0, 0x4}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) readahead(0xffffffffffffffff, 0x2, 0x8) 51.971819ms ago: executing program 2 (id=1604): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0x34204, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xc8, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x6, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='kfree\x00', r6}, 0x10) sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002ac0)=@newtaction={0x88c, 0x30, 0xffff, 0x0, 0x0, {}, [{0x878, 0x1, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xd02, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x6, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x40, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x0, 0x0, 0x8, 0xfffe, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x7, 0x0, 0x3, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x800, 0x20000000, 0x0, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0xe53c0000, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x5, 0x0, 0x0, 0x0, {0x3, 0x0, 0x0, 0x0, 0x0, 0x5}, {0x4, 0x2, 0x0, 0x0, 0x0, 0xff}}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x88c}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r7, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r8}, 0x10) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r9}, 0x10) r10 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$USBDEVFS_CONTROL(r10, 0xc0105500, &(0x7f0000000000)={0x80, 0x8, 0x0, 0x0, 0x4, 0xfffe, 0x0}) 32.831719ms ago: executing program 6 (id=1605): unshare(0xc000600) name_to_handle_at(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) syz_open_dev$usbfs(&(0x7f00000001c0), 0x1, 0xc0) r0 = socket$inet6(0xa, 0x3, 0x5) r1 = socket$l2tp6(0xa, 0x2, 0x73) dup3(r1, r0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffffff, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r3, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x29}, './file0\x00'}) 19.501489ms ago: executing program 2 (id=1606): add_key$keyring(0x0, &(0x7f00000002c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYRES32=r1, @ANYBLOB="800202000a000200577f0000aabb000020000e8005"], 0x48}}, 0x0) 957.23µs ago: executing program 5 (id=1607): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="09000000070000000300000048"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b000000000000000f0000004100000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x21081e, &(0x7f00000002c0), 0x1, 0x4f2, &(0x7f0000000600)="$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") 454.099µs ago: executing program 3 (id=1608): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r0}, 0x10) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000b00)=@base={0x6, 0x4, 0x70be, 0x5c, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 0s ago: executing program 6 (id=1609): r0 = socket$inet6(0xa, 0x806, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1b00000000000000000000004639450000040000", @ANYRES32=0x0, @ANYBLOB="040400"/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffffff00"/28], 0x50) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "7f12ddc1517600000000000000000000eaff00"}) r2 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TIOCVHANGUP(r2, 0x5437, 0x0) r3 = openat$sysfs(0xffffff9c, &(0x7f0000000200)='/sys/kernel/notes', 0x0, 0x0) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000040)='ext4_ext_rm_idx\x00', 0xffffffffffffffff, 0x0, 0x3}, 0x18) write$binfmt_misc(r3, 0x0, 0x0) r5 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r5, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) listen(r5, 0x3) r6 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r6, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) r7 = accept4(r5, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001868000000000000000000080000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000001800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r8 = socket$nl_generic(0x11, 0x3, 0x10) sendmsg(r8, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd8168", 0x7}], 0x1, 0x0, 0x0, 0x11000000}, 0x0) sendmmsg(r7, &(0x7f0000001500), 0x588, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @mcast1, 0xfffffffe}, 0x1c) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="9ac47f755df6a7543b6dd9e74b07783047984cec", @ANYRES64=r1, @ANYRES64=r9, @ANYRES16=r3, @ANYBLOB="3756e1f52ba7dc2b4a780886e458203090b258337b2850230fcadc2eb5dbab7467a8fc4a14cd059a8627e056cd5d6880979634416d66f434c4be1bd123459bda275d5e0b15b5d397f249a792142078a4841f08f1597d5c8c2b9ec293c85ff021689fc9d7c5bc42d5d50bf1918b16aeded306d15ec70aeeca17eec54b53337145d20a88425c00d9864dcf7bfe3967bd685cdc49cdde345ab834b2d7b0", @ANYBLOB="8219a5ec73736560bf41c8e0f875aed6e52de31ad9c3911c6f11ab478b507bbe716bc38b61cc8ed1fb69c165df33740f6afb1712eb7d2356ecc8b6c6b2ee9118f96de479fdc15db8836d96eb1671878bcdf045e4b6d6d6e3b3df51480be4773c3a745fe1319c2a7c98302abe7ae97b21feda7b1ca4f9f192c09ffb741f0ed8426f515d294dd8703ef1948809c59f05873e151470d9bb4f3bb2d4552a77d21572db7a22d21ae537957d81c796111cf4c8", @ANYRES8=r4, @ANYRES8, @ANYRESOCT], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) kernel console output (not intermixed with test programs): 120[7711] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 97.089074][ T7706] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=1843c01c, mo2=0002] [ 97.116964][ T7706] EXT4-fs (loop4): couldn't mount RDWR because of unsupported optional features (80) [ 97.126509][ T7706] EXT4-fs (loop4): Skipping orphan cleanup due to unknown ROCOMPAT features [ 97.135819][ T7702] EXT4-fs (loop5): 1 truncate cleaned up [ 97.155450][ T7710] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 97.161640][ T7702] EXT4-fs error (device loop5): ext4_xattr_inode_iget:440: comm syz.5.1119: inode #1073372648: comm syz.5.1119: iget: illegal inode # [ 97.163389][ T7710] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=1843c01c, mo2=0002] [ 97.190746][ T7702] EXT4-fs error (device loop5): ext4_xattr_inode_iget:445: comm syz.5.1119: error while reading EA inode 1073372648 err=-117 [ 97.205287][ T7706] EXT4-fs warning (device loop4): dx_probe:893: inode #2: comm syz.4.1118: dx entry: limit 65535 != root limit 120 [ 97.217496][ T7706] EXT4-fs warning (device loop4): dx_probe:966: inode #2: comm syz.4.1118: Corrupt directory, running e2fsck is recommended [ 97.231757][ T7702] EXT4-fs error (device loop5): ext4_xattr_delete_inode:2977: inode #15: comm syz.5.1119: corrupted xattr block 33: invalid header [ 97.246155][ T7710] EXT4-fs (loop2): couldn't mount RDWR because of unsupported optional features (80) [ 97.252621][ T7711] loop6: detected capacity change from 0 to 1024 [ 97.255684][ T7710] EXT4-fs (loop2): Skipping orphan cleanup due to unknown ROCOMPAT features [ 97.271521][ T7711] EXT4-fs: Ignoring removed nomblk_io_submit option [ 97.273506][ T7702] EXT4-fs warning (device loop5): ext4_evict_inode:276: xattr delete (err -117) [ 97.290991][ T7711] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 97.295169][ T7710] EXT4-fs warning (device loop2): dx_probe:893: inode #2: comm syz.2.1121: dx entry: limit 65535 != root limit 120 [ 97.311899][ T7710] EXT4-fs warning (device loop2): dx_probe:966: inode #2: comm syz.2.1121: Corrupt directory, running e2fsck is recommended [ 97.345841][ T3324] EXT4-fs warning (device loop4): dx_probe:893: inode #2: comm syz-executor: dx entry: limit 65535 != root limit 120 [ 97.358238][ T3324] EXT4-fs warning (device loop4): dx_probe:966: inode #2: comm syz-executor: Corrupt directory, running e2fsck is recommended [ 97.414538][ T7720] loop3: detected capacity change from 0 to 512 [ 97.473340][ T3324] EXT4-fs error (device loop4): ext4_readdir:261: inode #2: block 3: comm syz-executor: path /203/file0: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=4294967295, rec_len=17, size=1024 fake=0 [ 97.500898][ T7720] EXT4-fs (loop3): too many log groups per flexible block group [ 97.508582][ T7720] EXT4-fs (loop3): failed to initialize mballoc (-12) [ 97.524444][ T7720] EXT4-fs (loop3): mount failed [ 97.653949][ T7731] loop5: detected capacity change from 0 to 8192 [ 97.719761][ T7731] netlink: 'syz.5.1129': attribute type 322 has an invalid length. [ 97.877530][ T7749] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1135'. [ 97.879381][ T7750] loop6: detected capacity change from 0 to 512 [ 97.931702][ T7750] EXT4-fs error (device loop6): ext4_xattr_ibody_find:2240: inode #15: comm syz.6.1133: corrupted in-inode xattr: invalid ea_ino [ 97.949792][ T7750] EXT4-fs error (device loop6): ext4_orphan_get:1394: comm syz.6.1133: couldn't read orphan inode 15 (err -117) [ 98.073865][ T7760] loop3: detected capacity change from 0 to 512 [ 98.086825][ T7760] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 98.099124][ T7760] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e12c, mo2=0002] [ 98.099200][ T7760] EXT4-fs (loop3): orphan cleanup on readonly fs [ 98.099398][ T7760] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.1137: bg 0: block 361: padding at end of block bitmap is not set [ 98.100113][ T7760] EXT4-fs (loop3): Remounting filesystem read-only [ 98.111025][ T7761] loop5: detected capacity change from 0 to 512 [ 98.118039][ T7760] EXT4-fs (loop3): 1 truncate cleaned up [ 98.151017][ T7764] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1134'. [ 98.151037][ T7764] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1134'. [ 98.151049][ T7764] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1134'. [ 98.179994][ T7760] EXT4-fs mount: 15 callbacks suppressed [ 98.180011][ T7760] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 98.180051][ T7760] SELinux: (dev loop3, type ext4) getxattr errno 5 [ 98.180359][ T7760] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 98.210658][ T7761] EXT4-fs error (device loop5): ext4_acquire_dquot:6938: comm syz.5.1136: Failed to acquire dquot type 1 [ 98.229336][ T7761] EXT4-fs (loop5): 1 truncate cleaned up [ 98.248586][ T7761] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 98.303976][ T7761] ext4 filesystem being mounted at /107/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 98.324473][ T7769] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1138'. [ 98.807277][ T5763] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.839298][ T6869] EXT4-fs (loop6): unmounting filesystem 00000007-0000-0000-0000-000000000000. [ 98.923956][ T29] kauditd_printk_skb: 440 callbacks suppressed [ 98.923974][ T29] audit: type=1400 audit(1732710449.058:11431): avc: denied { setopt } for pid=7792 comm="syz.2.1149" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 98.966997][ T29] audit: type=1400 audit(1732710449.088:11432): avc: denied { write } for pid=7792 comm="syz.2.1149" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 99.012867][ T7795] loop4: detected capacity change from 0 to 8192 [ 99.019324][ T29] audit: type=1400 audit(1732710449.148:11433): avc: denied { name_bind } for pid=7792 comm="syz.2.1149" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 99.047056][ T7795] netlink: 'syz.4.1150': attribute type 322 has an invalid length. [ 99.066360][ T29] audit: type=1326 audit(1732710449.198:11434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7793 comm="syz.4.1150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07ee0d0809 code=0x7ffc0000 [ 99.090052][ T29] audit: type=1326 audit(1732710449.198:11435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7793 comm="syz.4.1150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f07ee0cf170 code=0x7ffc0000 [ 99.113531][ T29] audit: type=1326 audit(1732710449.198:11436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7793 comm="syz.4.1150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f07ee0d2037 code=0x7ffc0000 [ 99.137026][ T29] audit: type=1326 audit(1732710449.198:11437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7793 comm="syz.4.1150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f07ee0d0809 code=0x7ffc0000 [ 99.160425][ T29] audit: type=1326 audit(1732710449.198:11438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7793 comm="syz.4.1150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f07ee0d2037 code=0x7ffc0000 [ 99.183954][ T29] audit: type=1326 audit(1732710449.198:11439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7793 comm="syz.4.1150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f07ee0cf46a code=0x7ffc0000 [ 99.207327][ T29] audit: type=1326 audit(1732710449.198:11440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7793 comm="syz.4.1150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07ee0d0809 code=0x7ffc0000 [ 99.266236][ T7798] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1147'. [ 99.519311][ T7819] FAULT_INJECTION: forcing a failure. [ 99.519311][ T7819] name failslab, interval 1, probability 0, space 0, times 0 [ 99.519340][ T7819] CPU: 1 UID: 0 PID: 7819 Comm: syz.5.1156 Not tainted 6.12.0-syzkaller-10296-gaaf20f870da0 #0 [ 99.519394][ T7819] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 99.519450][ T7819] Call Trace: [ 99.519456][ T7819] [ 99.519464][ T7819] dump_stack_lvl+0xf2/0x150 [ 99.519493][ T7819] dump_stack+0x15/0x20 [ 99.519547][ T7819] should_fail_ex+0x223/0x230 [ 99.519586][ T7819] should_failslab+0x8f/0xb0 [ 99.519614][ T7819] kmem_cache_alloc_node_noprof+0x59/0x320 [ 99.519656][ T7819] ? __alloc_skb+0x10b/0x310 [ 99.519699][ T7819] __alloc_skb+0x10b/0x310 [ 99.519819][ T7819] ? audit_log_start+0x34c/0x6b0 [ 99.519897][ T7819] audit_log_start+0x368/0x6b0 [ 99.519944][ T7819] audit_seccomp+0x4b/0x130 [ 99.520023][ T7819] __seccomp_filter+0x6fa/0x1180 [ 99.520045][ T7819] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 99.520084][ T7819] ? vfs_write+0x596/0x920 [ 99.520154][ T7819] ? putname+0xcf/0xf0 [ 99.520188][ T7819] __secure_computing+0x9f/0x1c0 [ 99.520214][ T7819] syscall_trace_enter+0xd1/0x1f0 [ 99.520235][ T7819] ? fpregs_assert_state_consistent+0x83/0xa0 [ 99.520297][ T7819] do_syscall_64+0xaa/0x1c0 [ 99.520319][ T7819] ? clear_bhb_loop+0x55/0xb0 [ 99.520341][ T7819] ? clear_bhb_loop+0x55/0xb0 [ 99.520363][ T7819] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 99.520401][ T7819] RIP: 0033:0x7f994b090809 [ 99.520455][ T7819] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 99.520535][ T7819] RSP: 002b:00007f9949707058 EFLAGS: 00000246 ORIG_RAX: 0000000000000121 [ 99.520557][ T7819] RAX: ffffffffffffffda RBX: 00007f994b255fa0 RCX: 00007f994b090809 [ 99.520572][ T7819] RDX: 0000000000000008 RSI: 0000000020000300 RDI: ffffffffffffffff [ 99.520586][ T7819] RBP: 00007f99497070a0 R08: 0000000000000000 R09: 0000000000000000 [ 99.520601][ T7819] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 99.520615][ T7819] R13: 0000000000000000 R14: 00007f994b255fa0 R15: 00007ffd9863b7b8 [ 99.520636][ T7819] [ 99.719295][ T7834] loop4: detected capacity change from 0 to 512 [ 99.743743][ T7834] EXT4-fs (loop4): too many log groups per flexible block group [ 99.743772][ T7834] EXT4-fs (loop4): failed to initialize mballoc (-12) [ 99.743792][ T7834] EXT4-fs (loop4): mount failed [ 99.814056][ T7844] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1166'. [ 99.818857][ T7844] loop6: detected capacity change from 0 to 1024 [ 99.819271][ T7844] EXT4-fs: Ignoring removed nomblk_io_submit option [ 99.852821][ T7835] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1158'. [ 99.867780][ T7844] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 100.091460][ T7858] FAULT_INJECTION: forcing a failure. [ 100.091460][ T7858] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 100.091484][ T7858] CPU: 0 UID: 0 PID: 7858 Comm: syz.2.1169 Not tainted 6.12.0-syzkaller-10296-gaaf20f870da0 #0 [ 100.114843][ T7858] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 100.114861][ T7858] Call Trace: [ 100.114868][ T7858] [ 100.114877][ T7858] dump_stack_lvl+0xf2/0x150 [ 100.135737][ T7858] dump_stack+0x15/0x20 [ 100.139909][ T7858] should_fail_ex+0x223/0x230 [ 100.139995][ T7858] should_fail+0xb/0x10 [ 100.140020][ T7858] should_fail_usercopy+0x1a/0x20 [ 100.140091][ T7858] strncpy_from_user+0x25/0x210 [ 100.140115][ T7858] ? kmem_cache_alloc_noprof+0x18e/0x320 [ 100.140141][ T7858] ? getname_flags+0x81/0x3b0 [ 100.140201][ T7858] getname_flags+0xb0/0x3b0 [ 100.140302][ T7858] __x64_sys_rmdir+0x21/0x40 [ 100.140350][ T7858] x64_sys_call+0x27ca/0x2dc0 [ 100.140384][ T7858] do_syscall_64+0xc9/0x1c0 [ 100.140405][ T7858] ? clear_bhb_loop+0x55/0xb0 [ 100.140427][ T7858] ? clear_bhb_loop+0x55/0xb0 [ 100.140449][ T7858] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.140531][ T7858] RIP: 0033:0x7f745ec20809 [ 100.140545][ T7858] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 100.140563][ T7858] RSP: 002b:00007f745d297058 EFLAGS: 00000246 ORIG_RAX: 0000000000000054 [ 100.140581][ T7858] RAX: ffffffffffffffda RBX: 00007f745ede5fa0 RCX: 00007f745ec20809 [ 100.140597][ T7858] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 100.140612][ T7858] RBP: 00007f745d2970a0 R08: 0000000000000000 R09: 0000000000000000 [ 100.140628][ T7858] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 100.140667][ T7858] R13: 0000000000000000 R14: 00007f745ede5fa0 R15: 00007ffc6e0393a8 [ 100.140690][ T7858] [ 100.147597][ T6869] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.319747][ T7870] loop2: detected capacity change from 0 to 512 [ 100.340477][ T7870] EXT4-fs error (device loop2): ext4_orphan_get:1389: inode #17: comm syz.2.1175: iget: bogus i_mode (0) [ 100.340621][ T7870] EXT4-fs error (device loop2): ext4_orphan_get:1394: comm syz.2.1175: couldn't read orphan inode 17 (err -117) [ 100.341120][ T7870] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 100.354688][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.514274][ T7879] FAULT_INJECTION: forcing a failure. [ 100.514274][ T7879] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 100.514300][ T7879] CPU: 1 UID: 0 PID: 7879 Comm: syz.2.1178 Not tainted 6.12.0-syzkaller-10296-gaaf20f870da0 #0 [ 100.514363][ T7879] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 100.514378][ T7879] Call Trace: [ 100.514384][ T7879] [ 100.514432][ T7879] dump_stack_lvl+0xf2/0x150 [ 100.514459][ T7879] dump_stack+0x15/0x20 [ 100.514557][ T7879] should_fail_ex+0x223/0x230 [ 100.514596][ T7879] should_fail+0xb/0x10 [ 100.514620][ T7879] should_fail_usercopy+0x1a/0x20 [ 100.514647][ T7879] strncpy_from_user+0x25/0x210 [ 100.514674][ T7879] ? kmem_cache_alloc_noprof+0x18e/0x320 [ 100.514726][ T7879] ? getname_flags+0x81/0x3b0 [ 100.514760][ T7879] getname_flags+0xb0/0x3b0 [ 100.514789][ T7879] user_path_at+0x26/0x120 [ 100.514899][ T7879] do_utimes+0xc7/0x1f0 [ 100.514925][ T7879] __x64_sys_utimensat+0xc6/0x170 [ 100.514952][ T7879] ? fpregs_assert_state_consistent+0x83/0xa0 [ 100.514996][ T7879] x64_sys_call+0x272a/0x2dc0 [ 100.515091][ T7879] do_syscall_64+0xc9/0x1c0 [ 100.515114][ T7879] ? clear_bhb_loop+0x55/0xb0 [ 100.515141][ T7879] ? clear_bhb_loop+0x55/0xb0 [ 100.515201][ T7879] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.515254][ T7879] RIP: 0033:0x7f745ec20809 [ 100.515273][ T7879] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 100.515298][ T7879] RSP: 002b:00007f745d297058 EFLAGS: 00000246 ORIG_RAX: 0000000000000118 [ 100.515321][ T7879] RAX: ffffffffffffffda RBX: 00007f745ede5fa0 RCX: 00007f745ec20809 [ 100.515337][ T7879] RDX: 0000000000000000 RSI: 00000000200003c0 RDI: ffffffffffffff9c [ 100.515354][ T7879] RBP: 00007f745d2970a0 R08: 0000000000000000 R09: 0000000000000000 [ 100.515371][ T7879] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 100.515458][ T7879] R13: 0000000000000000 R14: 00007f745ede5fa0 R15: 00007ffc6e0393a8 [ 100.515480][ T7879] [ 100.536341][ T7882] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1174'. [ 100.767716][ T7902] loop6: detected capacity change from 0 to 512 [ 100.768282][ T7902] ext4: Unknown parameter 'usrjquot' [ 100.772406][ T7902] loop6: detected capacity change from 0 to 512 [ 100.782839][ T7902] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 100.790637][ T7902] EXT4-fs (loop6): 1 truncate cleaned up [ 100.791029][ T7902] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 100.865818][ T7905] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 100.867295][ T7905] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1189'. [ 100.982791][ T6869] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.027430][ T7923] serio: Serial port ptm0 [ 101.314244][ T7948] loop2: detected capacity change from 0 to 8192 [ 101.347580][ T7948] netlink: 'syz.2.1198': attribute type 322 has an invalid length. [ 101.727302][ T7976] loop3: detected capacity change from 0 to 1024 [ 101.793917][ T7976] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 101.797694][ T7976] EXT4-fs error (device loop3): ext4_xattr_inode_iget:440: inode #11: comm syz.3.1205: missing EA_INODE flag [ 101.830163][ T7976] EXT4-fs (loop3): Remounting filesystem read-only [ 101.969229][ T3331] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.116735][ T8011] loop2: detected capacity change from 0 to 512 [ 102.146466][ T8011] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 102.154438][ T8011] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=1843c01c, mo2=0002] [ 102.172609][ T8011] EXT4-fs (loop2): couldn't mount RDWR because of unsupported optional features (80) [ 102.172658][ T8011] EXT4-fs (loop2): Skipping orphan cleanup due to unknown ROCOMPAT features [ 102.172964][ T8011] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 102.207404][ T8011] EXT4-fs warning (device loop2): dx_probe:893: inode #2: comm syz.2.1213: dx entry: limit 65535 != root limit 120 [ 102.219564][ T8011] EXT4-fs warning (device loop2): dx_probe:966: inode #2: comm syz.2.1213: Corrupt directory, running e2fsck is recommended [ 102.252632][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.420781][ T8021] loop6: detected capacity change from 0 to 8192 [ 102.450338][ T8021] netlink: 'syz.6.1214': attribute type 322 has an invalid length. [ 102.576859][ T8053] loop6: detected capacity change from 0 to 2048 [ 102.596963][ T8053] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 102.708749][ T4970] EXT4-fs (loop6): Delayed block allocation failed for inode 18 at logical offset 8 with max blocks 2 with error 28 [ 102.708773][ T4970] EXT4-fs (loop6): This should not happen!! Data will be lost [ 102.708773][ T4970] [ 102.708784][ T4970] EXT4-fs (loop6): Total free blocks count 0 [ 102.708794][ T4970] EXT4-fs (loop6): Free/Dirty block details [ 102.708802][ T4970] EXT4-fs (loop6): free_blocks=0 [ 102.708857][ T4970] EXT4-fs (loop6): dirty_blocks=0 [ 102.708870][ T4970] EXT4-fs (loop6): Block reservation details [ 102.708882][ T4970] EXT4-fs (loop6): i_reserved_data_blocks=0 [ 102.711838][ T6869] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.070544][ T8097] loop4: detected capacity change from 0 to 512 [ 103.095181][ T8097] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 103.095197][ T8097] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=1843c01c, mo2=0002] [ 103.095364][ T8097] EXT4-fs (loop4): couldn't mount RDWR because of unsupported optional features (80) [ 103.095386][ T8097] EXT4-fs (loop4): Skipping orphan cleanup due to unknown ROCOMPAT features [ 103.095791][ T8097] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 103.115391][ T8097] EXT4-fs warning (device loop4): dx_probe:893: inode #2: comm syz.4.1225: dx entry: limit 65535 != root limit 120 [ 103.115427][ T8097] EXT4-fs warning (device loop4): dx_probe:966: inode #2: comm syz.4.1225: Corrupt directory, running e2fsck is recommended [ 103.131371][ T8101] __nla_validate_parse: 9 callbacks suppressed [ 103.131414][ T8101] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1222'. [ 103.164177][ T3324] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.289457][ T8111] FAULT_INJECTION: forcing a failure. [ 103.289457][ T8111] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 103.289488][ T8111] CPU: 1 UID: 0 PID: 8111 Comm: syz.2.1227 Not tainted 6.12.0-syzkaller-10296-gaaf20f870da0 #0 [ 103.289518][ T8111] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 103.289532][ T8111] Call Trace: [ 103.289540][ T8111] [ 103.289548][ T8111] dump_stack_lvl+0xf2/0x150 [ 103.289612][ T8111] dump_stack+0x15/0x20 [ 103.289627][ T8111] should_fail_ex+0x223/0x230 [ 103.289663][ T8111] should_fail+0xb/0x10 [ 103.289686][ T8111] should_fail_usercopy+0x1a/0x20 [ 103.289718][ T8111] strncpy_from_user+0x25/0x210 [ 103.289784][ T8111] ? kmem_cache_alloc_noprof+0x18e/0x320 [ 103.289815][ T8111] ? getname_flags+0x81/0x3b0 [ 103.289848][ T8111] getname_flags+0xb0/0x3b0 [ 103.289879][ T8111] getname+0x17/0x20 [ 103.289942][ T8111] do_sys_openat2+0x67/0x120 [ 103.289971][ T8111] __x64_sys_openat+0xf3/0x120 [ 103.289995][ T8111] x64_sys_call+0x2b30/0x2dc0 [ 103.290091][ T8111] do_syscall_64+0xc9/0x1c0 [ 103.290112][ T8111] ? clear_bhb_loop+0x55/0xb0 [ 103.290131][ T8111] ? clear_bhb_loop+0x55/0xb0 [ 103.290153][ T8111] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.290269][ T8111] RIP: 0033:0x7f745ec20809 [ 103.290286][ T8111] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 103.290308][ T8111] RSP: 002b:00007f745d297058 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 103.290326][ T8111] RAX: ffffffffffffffda RBX: 00007f745ede5fa0 RCX: 00007f745ec20809 [ 103.290337][ T8111] RDX: 0000000000000000 RSI: 00000000200003c0 RDI: ffffffffffffff9c [ 103.290426][ T8111] RBP: 00007f745d2970a0 R08: 0000000000000000 R09: 0000000000000000 [ 103.290441][ T8111] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 103.290456][ T8111] R13: 0000000000000000 R14: 00007f745ede5fa0 R15: 00007ffc6e0393a8 [ 103.290477][ T8111] [ 103.435818][ T8117] loop6: detected capacity change from 0 to 8192 [ 103.471322][ T8134] FAULT_INJECTION: forcing a failure. [ 103.471322][ T8134] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 103.471352][ T8134] CPU: 1 UID: 0 PID: 8134 Comm: syz.4.1233 Not tainted 6.12.0-syzkaller-10296-gaaf20f870da0 #0 [ 103.471440][ T8134] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 103.471455][ T8134] Call Trace: [ 103.471463][ T8134] [ 103.471471][ T8134] dump_stack_lvl+0xf2/0x150 [ 103.471530][ T8134] dump_stack+0x15/0x20 [ 103.471571][ T8134] should_fail_ex+0x223/0x230 [ 103.471603][ T8134] should_fail+0xb/0x10 [ 103.471628][ T8134] should_fail_usercopy+0x1a/0x20 [ 103.471676][ T8134] _copy_from_user+0x1e/0xb0 [ 103.471719][ T8134] do_ipt_set_ctl+0x423/0x8b0 [ 103.471865][ T8134] nf_setsockopt+0x195/0x1b0 [ 103.471895][ T8134] ip_setsockopt+0xea/0x100 [ 103.471935][ T8134] udp_setsockopt+0x95/0xb0 [ 103.472020][ T8134] sock_common_setsockopt+0x64/0x80 [ 103.472048][ T8134] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 103.472084][ T8134] __sys_setsockopt+0x187/0x200 [ 103.472106][ T8134] __x64_sys_setsockopt+0x66/0x80 [ 103.472128][ T8134] x64_sys_call+0x282e/0x2dc0 [ 103.472154][ T8134] do_syscall_64+0xc9/0x1c0 [ 103.472246][ T8134] ? clear_bhb_loop+0x55/0xb0 [ 103.472261][ T8134] ? clear_bhb_loop+0x55/0xb0 [ 103.472276][ T8134] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.472306][ T8134] RIP: 0033:0x7f07ee0d0809 [ 103.472323][ T8134] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 103.472345][ T8134] RSP: 002b:00007f07ec747058 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 103.472427][ T8134] RAX: ffffffffffffffda RBX: 00007f07ee295fa0 RCX: 00007f07ee0d0809 [ 103.472455][ T8134] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000006 [ 103.472468][ T8134] RBP: 00007f07ec7470a0 R08: 0000000000000538 R09: 0000000000000000 [ 103.472483][ T8134] R10: 0000000020000a80 R11: 0000000000000246 R12: 0000000000000001 [ 103.472498][ T8134] R13: 0000000000000000 R14: 00007f07ee295fa0 R15: 00007ffea9e8d628 [ 103.472520][ T8134] [ 103.499843][ T8117] netlink: 'syz.6.1229': attribute type 322 has an invalid length. [ 103.559452][ T8146] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1230'. [ 103.559480][ T8146] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1230'. [ 103.559495][ T8146] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1230'. [ 103.761042][ T8163] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1236'. [ 103.766340][ T8163] loop6: detected capacity change from 0 to 1024 [ 103.766853][ T8163] EXT4-fs: Ignoring removed nomblk_io_submit option [ 103.817463][ T8163] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 104.169418][ T29] kauditd_printk_skb: 766 callbacks suppressed [ 104.169433][ T29] audit: type=1400 audit(1732710454.308:12203): avc: denied { mount } for pid=8162 comm="syz.6.1236" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 104.178936][ T29] audit: type=1400 audit(1732710454.318:12204): avc: denied { read } for pid=3004 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 104.178971][ T29] audit: type=1400 audit(1732710454.318:12205): avc: denied { search } for pid=3004 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 104.179177][ T29] audit: type=1400 audit(1732710454.318:12206): avc: denied { append } for pid=3004 comm="syslogd" name="messages" dev="tmpfs" ino=8 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 104.179210][ T29] audit: type=1400 audit(1732710454.318:12207): avc: denied { open } for pid=3004 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=8 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 104.179305][ T29] audit: type=1400 audit(1732710454.318:12208): avc: denied { getattr } for pid=3004 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=8 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 104.201535][ T29] audit: type=1400 audit(1732710454.338:12209): avc: denied { write } for pid=8162 comm="syz.6.1236" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 104.201571][ T29] audit: type=1400 audit(1732710454.338:12210): avc: denied { add_name } for pid=8162 comm="syz.6.1236" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 104.201748][ T29] audit: type=1400 audit(1732710454.338:12211): avc: denied { create } for pid=8162 comm="syz.6.1236" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 104.202345][ T29] audit: type=1400 audit(1732710454.338:12212): avc: denied { read write } for pid=8162 comm="syz.6.1236" name="file1" dev="loop6" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 104.360506][ T6869] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.411775][ T8171] loop4: detected capacity change from 0 to 512 [ 104.544388][ T8175] ip6erspan0: entered promiscuous mode [ 104.579342][ T8175] ip6erspan0: entered allmulticast mode [ 104.593102][ T8173] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1239'. [ 104.680468][ T8182] loop2: detected capacity change from 0 to 1024 [ 104.690015][ T8182] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 104.705220][ T8186] loop5: detected capacity change from 0 to 256 [ 104.734083][ T8182] JBD2: no valid journal superblock found [ 104.740057][ T8182] EXT4-fs (loop2): Could not load journal inode [ 104.761273][ T8175] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1241'. [ 104.927707][ T8194] loop3: detected capacity change from 0 to 8192 [ 104.967950][ T8194] netlink: 'syz.3.1258': attribute type 322 has an invalid length. [ 104.979060][ T8209] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1248'. [ 104.988073][ T8209] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1248'. [ 104.997063][ T8209] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1248'. [ 105.144750][ T8219] loop3: detected capacity change from 0 to 512 [ 105.180840][ T8219] EXT4-fs (loop3): too many log groups per flexible block group [ 105.180870][ T8219] EXT4-fs (loop3): failed to initialize mballoc (-12) [ 105.180889][ T8219] EXT4-fs (loop3): mount failed [ 105.277918][ T8232] tmpfs: Bad value for 'mpol' [ 105.704199][ T8235] loop2: detected capacity change from 0 to 8192 [ 105.777018][ T8235] netlink: 'syz.2.1267': attribute type 322 has an invalid length. [ 105.793818][ T8247] pim6reg1: entered promiscuous mode [ 105.793842][ T8247] pim6reg1: entered allmulticast mode [ 105.982194][ T8255] loop3: detected capacity change from 0 to 512 [ 105.990403][ T8258] tmpfs: Bad value for 'mpol' [ 106.009250][ T8255] EXT4-fs (loop3): too many log groups per flexible block group [ 106.017160][ T8255] EXT4-fs (loop3): failed to initialize mballoc (-12) [ 106.025774][ T8255] EXT4-fs (loop3): mount failed [ 106.124594][ T8268] loop6: detected capacity change from 0 to 2048 [ 106.169054][ T8268] loop6: p2 < > [ 106.238034][ T8268] capability: warning: `syz.6.1279' uses deprecated v2 capabilities in a way that may be insecure [ 106.459449][ T8278] loop2: detected capacity change from 0 to 8192 [ 106.492154][ T8278] netlink: 'syz.2.1283': attribute type 322 has an invalid length. [ 106.635522][ T8288] tmpfs: Bad value for 'mpol' [ 106.687688][ T8290] pim6reg1: entered promiscuous mode [ 106.687716][ T8290] pim6reg1: entered allmulticast mode [ 106.767284][ T8292] loop5: detected capacity change from 0 to 512 [ 106.813668][ T8292] EXT4-fs (loop5): too many log groups per flexible block group [ 106.813764][ T8292] EXT4-fs (loop5): failed to initialize mballoc (-12) [ 106.813789][ T8292] EXT4-fs (loop5): mount failed [ 107.055547][ T8311] loop3: detected capacity change from 0 to 1024 [ 107.059015][ T8311] EXT4-fs: Ignoring removed nomblk_io_submit option [ 107.090141][ T8311] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 107.135004][ T3331] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.294389][ T8322] FAULT_INJECTION: forcing a failure. [ 107.294389][ T8322] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 107.294418][ T8322] CPU: 0 UID: 0 PID: 8322 Comm: syz.2.1300 Not tainted 6.12.0-syzkaller-10296-gaaf20f870da0 #0 [ 107.294447][ T8322] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 107.294528][ T8322] Call Trace: [ 107.294534][ T8322] [ 107.294540][ T8322] dump_stack_lvl+0xf2/0x150 [ 107.294567][ T8322] dump_stack+0x15/0x20 [ 107.294591][ T8322] should_fail_ex+0x223/0x230 [ 107.294618][ T8322] should_fail_alloc_page+0xfd/0x110 [ 107.294743][ T8322] __alloc_pages_noprof+0x109/0x340 [ 107.294772][ T8322] alloc_pages_mpol_noprof+0xb1/0x1e0 [ 107.294805][ T8322] vma_alloc_folio_noprof+0x1a0/0x2f0 [ 107.294864][ T8322] handle_mm_fault+0xdd7/0x2ac0 [ 107.294928][ T8322] exc_page_fault+0x296/0x650 [ 107.294964][ T8322] asm_exc_page_fault+0x26/0x30 [ 107.295148][ T8322] RIP: 0010:rep_movs_alternative+0x4a/0x70 [ 107.295182][ T8322] Code: 75 f1 c3 cc cc cc cc 66 0f 1f 84 00 00 00 00 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 df 83 f9 08 73 e8 eb c9 a4 c3 cc cc cc cc 48 89 c8 48 c1 e9 03 83 e0 07 f3 48 a5 89 c1 [ 107.295224][ T8322] RSP: 0018:ffffc90003ddfd58 EFLAGS: 00050206 [ 107.295238][ T8322] RAX: ffff888104973bf8 RBX: 000000002001b238 RCX: 0000000000000ff8 [ 107.295251][ T8322] RDX: 0000000000000000 RSI: ffff8881177b5000 RDI: 000000002001a240 [ 107.295263][ T8322] RBP: 0000000000000ff8 R08: 0000000080000000 R09: 0000000000000000 [ 107.295274][ T8322] R10: 00018881177b5000 R11: 00018881177b5ff7 R12: 0000000000000ff8 [ 107.295288][ T8322] R13: 00007ffffffff000 R14: 000000002001a240 R15: ffff8881177b5000 [ 107.295318][ T8322] _copy_to_user+0x7c/0xa0 [ 107.295342][ T8322] pagemap_read+0x3af/0x610 [ 107.295385][ T8322] ? __pfx_pagemap_read+0x10/0x10 [ 107.295499][ T8322] vfs_read+0x1a2/0x700 [ 107.295597][ T8322] ? __fget_files+0x17c/0x1c0 [ 107.295619][ T8322] ? __rcu_read_unlock+0x4e/0x70 [ 107.295642][ T8322] ? __fget_files+0x17c/0x1c0 [ 107.295729][ T8322] __x64_sys_pread64+0xf6/0x150 [ 107.295749][ T8322] x64_sys_call+0x26ee/0x2dc0 [ 107.295773][ T8322] do_syscall_64+0xc9/0x1c0 [ 107.295791][ T8322] ? clear_bhb_loop+0x55/0xb0 [ 107.295811][ T8322] ? clear_bhb_loop+0x55/0xb0 [ 107.295864][ T8322] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.517406][ T8322] RIP: 0033:0x7f745ec20809 [ 107.521842][ T8322] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 107.541453][ T8322] RSP: 002b:00007f745d297058 EFLAGS: 00000246 ORIG_RAX: 0000000000000011 [ 107.549887][ T8322] RAX: ffffffffffffffda RBX: 00007f745ede5fa0 RCX: 00007f745ec20809 [ 107.557855][ T8322] RDX: 0000000000019000 RSI: 000000002001a240 RDI: 0000000000000006 [ 107.565818][ T8322] RBP: 00007f745d2970a0 R08: 0000000000000000 R09: 0000000000000000 [ 107.573913][ T8322] R10: 0000000000100008 R11: 0000000000000246 R12: 0000000000000001 [ 107.581898][ T8322] R13: 0000000000000000 R14: 00007f745ede5fa0 R15: 00007ffc6e0393a8 [ 107.589897][ T8322] [ 107.600472][ T8320] loop3: detected capacity change from 0 to 8192 [ 107.744199][ T8332] loop6: detected capacity change from 0 to 1024 [ 107.751795][ T8320] netlink: 'syz.3.1297': attribute type 322 has an invalid length. [ 107.794409][ T8332] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 107.829073][ T8332] sg_write: data in/out 231/14 bytes for SCSI command 0x0-- guessing data in; [ 107.829073][ T8332] program syz.6.1304 not setting count and/or reply_len properly [ 107.962129][ T6869] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.090692][ T8354] loop3: detected capacity change from 0 to 1024 [ 108.130303][ T8354] EXT4-fs: Ignoring removed nomblk_io_submit option [ 108.182415][ T8354] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 108.205562][ T8366] loop2: detected capacity change from 0 to 1024 [ 108.212559][ T8366] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 108.214403][ T8366] EXT4-fs error (device loop2): ext4_xattr_inode_iget:440: inode #11: comm syz.2.1317: missing EA_INODE flag [ 108.214495][ T8366] EXT4-fs (loop2): Remounting filesystem read-only [ 108.251671][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.254988][ T3331] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.325436][ T8377] __nla_validate_parse: 11 callbacks suppressed [ 108.325478][ T8377] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1320'. [ 108.371104][ T8377] loop2: detected capacity change from 0 to 1024 [ 108.392058][ T8377] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 108.392143][ T8377] ext4 filesystem being mounted at /295/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 108.411992][ T8381] loop3: detected capacity change from 0 to 1024 [ 108.443362][ T8381] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 108.477400][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.477657][ T8381] sg_write: data in/out 231/14 bytes for SCSI command 0x0-- guessing data in; [ 108.477657][ T8381] program syz.3.1321 not setting count and/or reply_len properly [ 108.542406][ T3331] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.713727][ T8401] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1323'. [ 108.713748][ T8401] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1323'. [ 108.713758][ T8401] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1323'. [ 108.802529][ T8408] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1331'. [ 108.838519][ T8408] loop3: detected capacity change from 0 to 1024 [ 108.838858][ T8408] EXT4-fs: Ignoring removed nomblk_io_submit option [ 108.871877][ T8408] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 108.991568][ T3331] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.207551][ T29] kauditd_printk_skb: 285 callbacks suppressed [ 109.207565][ T29] audit: type=1326 audit(1732710459.339:12498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8406 comm="syz.5.1329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f994b0877a7 code=0x7ffc0000 [ 109.207696][ T29] audit: type=1326 audit(1732710459.339:12499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8406 comm="syz.5.1329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f994b02c149 code=0x7ffc0000 [ 109.207877][ T29] audit: type=1326 audit(1732710459.339:12500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8406 comm="syz.5.1329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f994b0877a7 code=0x7ffc0000 [ 109.208033][ T29] audit: type=1326 audit(1732710459.339:12501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8406 comm="syz.5.1329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f994b02c149 code=0x7ffc0000 [ 109.208423][ T29] audit: type=1326 audit(1732710459.349:12502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8406 comm="syz.5.1329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f994b090809 code=0x7ffc0000 [ 109.218437][ T29] audit: type=1326 audit(1732710459.359:12503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8406 comm="syz.5.1329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f994b0877a7 code=0x7ffc0000 [ 109.218852][ T8439] FAULT_INJECTION: forcing a failure. [ 109.218852][ T8439] name failslab, interval 1, probability 0, space 0, times 0 [ 109.218882][ T8439] CPU: 1 UID: 0 PID: 8439 Comm: syz.4.1342 Not tainted 6.12.0-syzkaller-10296-gaaf20f870da0 #0 [ 109.218955][ T8439] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 109.218976][ T8439] Call Trace: [ 109.218983][ T8439] [ 109.218991][ T8439] dump_stack_lvl+0xf2/0x150 [ 109.219052][ T8439] dump_stack+0x15/0x20 [ 109.219072][ T8439] should_fail_ex+0x223/0x230 [ 109.219104][ T8439] should_failslab+0x8f/0xb0 [ 109.219129][ T8439] kmem_cache_alloc_noprof+0x52/0x320 [ 109.219162][ T8439] ? alloc_empty_file+0xd0/0x200 [ 109.219270][ T8439] ? _raw_spin_unlock+0x26/0x50 [ 109.219299][ T8439] alloc_empty_file+0xd0/0x200 [ 109.219324][ T8439] alloc_file_pseudo+0xc3/0x140 [ 109.219351][ T8439] __shmem_file_setup+0x1bb/0x1f0 [ 109.219456][ T8439] shmem_file_setup+0x3b/0x50 [ 109.219483][ T8439] __se_sys_memfd_create+0x31d/0x5c0 [ 109.219531][ T8439] __x64_sys_memfd_create+0x31/0x40 [ 109.219571][ T8439] x64_sys_call+0x2d4c/0x2dc0 [ 109.219622][ T8439] do_syscall_64+0xc9/0x1c0 [ 109.219638][ T8439] ? clear_bhb_loop+0x55/0xb0 [ 109.219654][ T8439] ? clear_bhb_loop+0x55/0xb0 [ 109.219670][ T8439] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 109.219711][ T8439] RIP: 0033:0x7f07ee0d0809 [ 109.219724][ T8439] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 109.219741][ T8439] RSP: 002b:00007f07ec746e38 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 109.219758][ T8439] RAX: ffffffffffffffda RBX: 000000000000042f RCX: 00007f07ee0d0809 [ 109.219826][ T8439] RDX: 00007f07ec746f10 RSI: 0000000000000000 RDI: 00007f07ee1441c1 [ 109.219841][ T8439] RBP: 0000000020000940 R08: 00007f07ec746bd7 R09: 00007f07ec746e60 [ 109.219905][ T8439] R10: 000000000000000a R11: 0000000000000202 R12: 00000000200001c0 [ 109.219920][ T8439] R13: 00007f07ec746f10 R14: 00007f07ec746ed0 R15: 00000000200005c0 [ 109.220008][ T8439] [ 109.230891][ T29] audit: type=1326 audit(1732710459.369:12504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8406 comm="syz.5.1329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f994b02c149 code=0x7ffc0000 [ 109.233613][ T8442] loop3: detected capacity change from 0 to 512 [ 109.237183][ T29] audit: type=1326 audit(1732710459.369:12505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8406 comm="syz.5.1329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f994b0877a7 code=0x7ffc0000 [ 109.237400][ T29] audit: type=1326 audit(1732710459.369:12506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8406 comm="syz.5.1329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f994b02c149 code=0x7ffc0000 [ 109.237496][ T29] audit: type=1326 audit(1732710459.369:12507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8406 comm="syz.5.1329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f994b090809 code=0x7ffc0000 [ 109.264895][ T8443] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1334'. [ 109.286631][ T8442] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 109.286752][ T8442] ext4 filesystem being mounted at /266/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 109.301607][ T8442] EXT4-fs error (device loop3): ext4_ext_check_inode:524: inode #12: comm syz.3.1343: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 109.302724][ T8442] EXT4-fs error (device loop3): ext4_ext_check_inode:524: inode #12: comm syz.3.1343: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 109.402696][ T8451] loop2: detected capacity change from 0 to 512 [ 109.421835][ T3331] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.435208][ T8451] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 109.435226][ T8451] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=1843c01c, mo2=0002] [ 109.435321][ T8451] EXT4-fs (loop2): couldn't mount RDWR because of unsupported optional features (80) [ 109.435340][ T8451] EXT4-fs (loop2): Skipping orphan cleanup due to unknown ROCOMPAT features [ 109.435721][ T8451] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 109.444769][ T8451] EXT4-fs warning (device loop2): dx_probe:893: inode #2: comm syz.2.1345: dx entry: limit 65535 != root limit 120 [ 109.444793][ T8451] EXT4-fs warning (device loop2): dx_probe:966: inode #2: comm syz.2.1345: Corrupt directory, running e2fsck is recommended [ 109.506831][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.551391][ T8458] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1344'. [ 109.551413][ T8458] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1344'. [ 109.551441][ T8458] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1344'. [ 109.660912][ T8457] loop2: detected capacity change from 0 to 8192 [ 109.694872][ T8457] netlink: 'syz.2.1347': attribute type 322 has an invalid length. [ 110.330820][ T8483] loop6: detected capacity change from 0 to 512 [ 110.366916][ T8483] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 110.374899][ T8483] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=1843c01c, mo2=0002] [ 110.414650][ T8490] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1359'. [ 110.431029][ T8483] EXT4-fs (loop6): couldn't mount RDWR because of unsupported optional features (80) [ 110.440701][ T8483] EXT4-fs (loop6): Skipping orphan cleanup due to unknown ROCOMPAT features [ 110.455940][ T8483] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 110.458026][ T8490] loop5: detected capacity change from 0 to 1024 [ 110.475115][ T8483] EXT4-fs warning (device loop6): dx_probe:893: inode #2: comm syz.6.1357: dx entry: limit 65535 != root limit 120 [ 110.487266][ T8483] EXT4-fs warning (device loop6): dx_probe:966: inode #2: comm syz.6.1357: Corrupt directory, running e2fsck is recommended [ 110.541915][ T6869] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.581503][ T8498] tmpfs: Bad value for 'mpol' [ 110.613209][ T8503] loop4: detected capacity change from 0 to 2048 [ 110.739690][ T2985] hid-generic 0001:0006:0001.000C: unknown main item tag 0x0 [ 110.739720][ T2985] hid-generic 0001:0006:0001.000C: unknown main item tag 0x0 [ 110.739744][ T2985] hid-generic 0001:0006:0001.000C: unknown main item tag 0x0 [ 110.739814][ T2985] hid-generic 0001:0006:0001.000C: unknown main item tag 0x0 [ 110.739838][ T2985] hid-generic 0001:0006:0001.000C: unknown main item tag 0x0 [ 110.739856][ T2985] hid-generic 0001:0006:0001.000C: unknown main item tag 0x0 [ 110.739874][ T2985] hid-generic 0001:0006:0001.000C: unknown main item tag 0x0 [ 110.739891][ T2985] hid-generic 0001:0006:0001.000C: unknown main item tag 0x0 [ 110.739940][ T2985] hid-generic 0001:0006:0001.000C: unknown main item tag 0x0 [ 110.739965][ T2985] hid-generic 0001:0006:0001.000C: unknown main item tag 0x0 [ 110.739983][ T2985] hid-generic 0001:0006:0001.000C: unknown main item tag 0x0 [ 110.740000][ T2985] hid-generic 0001:0006:0001.000C: unknown main item tag 0x0 [ 110.740018][ T2985] hid-generic 0001:0006:0001.000C: unknown main item tag 0x0 [ 110.740102][ T2985] hid-generic 0001:0006:0001.000C: unknown main item tag 0x0 [ 110.740126][ T2985] hid-generic 0001:0006:0001.000C: unknown main item tag 0x0 [ 110.740151][ T2985] hid-generic 0001:0006:0001.000C: unknown main item tag 0x0 [ 110.740174][ T2985] hid-generic 0001:0006:0001.000C: unknown main item tag 0x0 [ 110.740194][ T2985] hid-generic 0001:0006:0001.000C: unknown main item tag 0x0 [ 110.740290][ T2985] hid-generic 0001:0006:0001.000C: unknown main item tag 0x0 [ 110.740313][ T2985] hid-generic 0001:0006:0001.000C: unknown main item tag 0x0 [ 110.740331][ T2985] hid-generic 0001:0006:0001.000C: unknown main item tag 0x0 [ 110.740350][ T2985] hid-generic 0001:0006:0001.000C: unknown main item tag 0x0 [ 110.740384][ T2985] hid-generic 0001:0006:0001.000C: unknown main item tag 0x0 [ 110.740408][ T2985] hid-generic 0001:0006:0001.000C: unknown main item tag 0x0 [ 110.740439][ T2985] hid-generic 0001:0006:0001.000C: unknown main item tag 0x0 [ 110.740462][ T2985] hid-generic 0001:0006:0001.000C: unknown main item tag 0x0 [ 110.740483][ T2985] hid-generic 0001:0006:0001.000C: unknown main item tag 0x0 [ 110.740501][ T2985] hid-generic 0001:0006:0001.000C: unknown main item tag 0x0 [ 110.740561][ T2985] hid-generic 0001:0006:0001.000C: unknown main item tag 0x0 [ 110.740582][ T2985] hid-generic 0001:0006:0001.000C: unknown main item tag 0x0 [ 110.740606][ T2985] hid-generic 0001:0006:0001.000C: unknown main item tag 0x0 [ 110.740630][ T2985] hid-generic 0001:0006:0001.000C: unknown main item tag 0x0 [ 110.740654][ T2985] hid-generic 0001:0006:0001.000C: unknown main item tag 0x0 [ 110.740678][ T2985] hid-generic 0001:0006:0001.000C: unknown main item tag 0x0 [ 110.740701][ T2985] hid-generic 0001:0006:0001.000C: unknown main item tag 0x0 [ 110.740776][ T2985] hid-generic 0001:0006:0001.000C: unknown main item tag 0x0 [ 110.740800][ T2985] hid-generic 0001:0006:0001.000C: unknown main item tag 0x0 [ 110.740915][ T2985] hid-generic 0001:0006:0001.000C: unknown main item tag 0x0 [ 110.740936][ T2985] hid-generic 0001:0006:0001.000C: unknown main item tag 0x0 [ 110.740960][ T2985] hid-generic 0001:0006:0001.000C: unknown main item tag 0x0 [ 110.740984][ T2985] hid-generic 0001:0006:0001.000C: unknown main item tag 0x0 [ 110.741060][ T2985] hid-generic 0001:0006:0001.000C: unknown main item tag 0x0 [ 110.741085][ T2985] hid-generic 0001:0006:0001.000C: unknown main item tag 0x0 [ 110.741109][ T2985] hid-generic 0001:0006:0001.000C: unknown main item tag 0x0 [ 110.741133][ T2985] hid-generic 0001:0006:0001.000C: unknown main item tag 0x0 [ 110.741156][ T2985] hid-generic 0001:0006:0001.000C: unknown main item tag 0x0 [ 110.741238][ T2985] hid-generic 0001:0006:0001.000C: unknown main item tag 0x0 [ 110.741286][ T2985] hid-generic 0001:0006:0001.000C: unknown main item tag 0x0 [ 110.741304][ T2985] hid-generic 0001:0006:0001.000C: unknown main item tag 0x0 [ 110.741322][ T2985] hid-generic 0001:0006:0001.000C: unknown main item tag 0x0 [ 110.741346][ T2985] hid-generic 0001:0006:0001.000C: unknown main item tag 0x0 [ 110.741370][ T2985] hid-generic 0001:0006:0001.000C: unknown main item tag 0x0 [ 110.741451][ T2985] hid-generic 0001:0006:0001.000C: unknown main item tag 0x0 [ 110.741469][ T2985] hid-generic 0001:0006:0001.000C: unknown main item tag 0x0 [ 110.741495][ T2985] hid-generic 0001:0006:0001.000C: unknown main item tag 0x0 [ 110.741523][ T2985] hid-generic 0001:0006:0001.000C: unknown main item tag 0x0 [ 110.741543][ T2985] hid-generic 0001:0006:0001.000C: unknown main item tag 0x0 [ 110.741561][ T2985] hid-generic 0001:0006:0001.000C: unknown main item tag 0x0 [ 110.741578][ T2985] hid-generic 0001:0006:0001.000C: unknown main item tag 0x0 [ 110.741615][ T2985] hid-generic 0001:0006:0001.000C: unknown main item tag 0x0 [ 110.741636][ T2985] hid-generic 0001:0006:0001.000C: unknown main item tag 0x0 [ 110.741660][ T2985] hid-generic 0001:0006:0001.000C: unknown main item tag 0x0 [ 110.741682][ T2985] hid-generic 0001:0006:0001.000C: unknown main item tag 0x0 [ 110.741748][ T2985] hid-generic 0001:0006:0001.000C: unknown main item tag 0x0 [ 110.741770][ T2985] hid-generic 0001:0006:0001.000C: unknown main item tag 0x0 [ 110.741793][ T2985] hid-generic 0001:0006:0001.000C: unknown main item tag 0x0 [ 110.741832][ T2985] hid-generic 0001:0006:0001.000C: unknown main item tag 0x0 [ 110.741856][ T2985] hid-generic 0001:0006:0001.000C: unknown main item tag 0x0 [ 110.741925][ T2985] hid-generic 0001:0006:0001.000C: unknown main item tag 0x0 [ 110.742005][ T2985] hid-generic 0001:0006:0001.000C: unknown main item tag 0x0 [ 110.742028][ T2985] hid-generic 0001:0006:0001.000C: unknown main item tag 0x0 [ 110.742056][ T2985] hid-generic 0001:0006:0001.000C: unknown main item tag 0x0 [ 110.742079][ T2985] hid-generic 0001:0006:0001.000C: unknown main item tag 0x0 [ 110.742179][ T2985] hid-generic 0001:0006:0001.000C: unknown main item tag 0x0 [ 110.742203][ T2985] hid-generic 0001:0006:0001.000C: unknown main item tag 0x0 [ 110.742227][ T2985] hid-generic 0001:0006:0001.000C: unknown main item tag 0x0 [ 110.742251][ T2985] hid-generic 0001:0006:0001.000C: unknown main item tag 0x0 [ 110.742275][ T2985] hid-generic 0001:0006:0001.000C: unknown main item tag 0x0 [ 110.742296][ T2985] hid-generic 0001:0006:0001.000C: unknown main item tag 0x0 [ 110.742320][ T2985] hid-generic 0001:0006:0001.000C: unknown main item tag 0x0 [ 110.742412][ T2985] hid-generic 0001:0006:0001.000C: unknown main item tag 0x0 [ 110.742454][ T2985] hid-generic 0001:0006:0001.000C: unknown main item tag 0x0 [ 110.742480][ T2985] hid-generic 0001:0006:0001.000C: unknown main item tag 0x0 [ 110.742506][ T2985] hid-generic 0001:0006:0001.000C: unknown main item tag 0x0 [ 110.742532][ T2985] hid-generic 0001:0006:0001.000C: unknown main item tag 0x0 [ 110.742625][ T2985] hid-generic 0001:0006:0001.000C: unknown main item tag 0x0 [ 110.742645][ T2985] hid-generic 0001:0006:0001.000C: unknown main item tag 0x0 [ 110.742765][ T2985] hid-generic 0001:0006:0001.000C: unknown main item tag 0x0 [ 110.742789][ T2985] hid-generic 0001:0006:0001.000C: unknown main item tag 0x0 [ 110.742814][ T2985] hid-generic 0001:0006:0001.000C: unknown main item tag 0x0 [ 110.742840][ T2985] hid-generic 0001:0006:0001.000C: unknown main item tag 0x0 [ 110.742896][ T2985] hid-generic 0001:0006:0001.000C: unknown main item tag 0x0 [ 110.742922][ T2985] hid-generic 0001:0006:0001.000C: unknown main item tag 0x0 [ 110.742946][ T2985] hid-generic 0001:0006:0001.000C: unknown main item tag 0x0 [ 110.742972][ T2985] hid-generic 0001:0006:0001.000C: unknown main item tag 0x0 [ 110.742994][ T2985] hid-generic 0001:0006:0001.000C: unknown main item tag 0x0 [ 110.743026][ T2985] hid-generic 0001:0006:0001.000C: unknown main item tag 0x0 [ 110.743128][ T2985] hid-generic 0001:0006:0001.000C: unknown main item tag 0x0 [ 110.743154][ T2985] hid-generic 0001:0006:0001.000C: unknown main item tag 0x0 [ 110.743252][ T2985] hid-generic 0001:0006:0001.000C: unknown main item tag 0x0 [ 110.743278][ T2985] hid-generic 0001:0006:0001.000C: unknown main item tag 0x0 [ 110.743299][ T2985] hid-generic 0001:0006:0001.000C: unknown main item tag 0x0 [ 110.743323][ T2985] hid-generic 0001:0006:0001.000C: unknown main item tag 0x0 [ 110.743343][ T2985] hid-generic 0001:0006:0001.000C: unknown main item tag 0x0 [ 110.743361][ T2985] hid-generic 0001:0006:0001.000C: unknown main item tag 0x0 [ 110.743468][ T2985] hid-generic 0001:0006:0001.000C: unknown main item tag 0x0 [ 110.743494][ T2985] hid-generic 0001:0006:0001.000C: unknown main item tag 0x0 [ 110.743516][ T2985] hid-generic 0001:0006:0001.000C: unknown main item tag 0x0 [ 110.743542][ T2985] hid-generic 0001:0006:0001.000C: unknown main item tag 0x0 [ 110.743567][ T2985] hid-generic 0001:0006:0001.000C: unknown main item tag 0x0 [ 110.743586][ T2985] hid-generic 0001:0006:0001.000C: unknown main item tag 0x0 [ 110.743609][ T2985] hid-generic 0001:0006:0001.000C: unknown main item tag 0x0 [ 110.743697][ T2985] hid-generic 0001:0006:0001.000C: unknown main item tag 0x0 [ 110.743735][ T2985] hid-generic 0001:0006:0001.000C: unknown main item tag 0x0 [ 110.743761][ T2985] hid-generic 0001:0006:0001.000C: unknown main item tag 0x0 [ 110.743787][ T2985] hid-generic 0001:0006:0001.000C: unknown main item tag 0x0 [ 110.743813][ T2985] hid-generic 0001:0006:0001.000C: unknown main item tag 0x0 [ 110.743867][ T2985] hid-generic 0001:0006:0001.000C: unknown main item tag 0x0 [ 110.743889][ T2985] hid-generic 0001:0006:0001.000C: unknown main item tag 0x0 [ 110.743946][ T2985] hid-generic 0001:0006:0001.000C: unknown main item tag 0x0 [ 110.743972][ T2985] hid-generic 0001:0006:0001.000C: unknown main item tag 0x0 [ 110.743998][ T2985] hid-generic 0001:0006:0001.000C: unknown main item tag 0x0 [ 110.744065][ T2985] hid-generic 0001:0006:0001.000C: unknown main item tag 0x0 [ 110.744085][ T2985] hid-generic 0001:0006:0001.000C: unknown main item tag 0x0 [ 110.744122][ T2985] hid-generic 0001:0006:0001.000C: unknown main item tag 0x0 [ 110.744148][ T2985] hid-generic 0001:0006:0001.000C: unknown main item tag 0x0 [ 110.744170][ T2985] hid-generic 0001:0006:0001.000C: unknown main item tag 0x0 [ 110.744213][ T2985] hid-generic 0001:0006:0001.000C: unknown main item tag 0x0 [ 110.744240][ T2985] hid-generic 0001:0006:0001.000C: unknown main item tag 0x0 [ 110.744352][ T2985] hid-generic 0001:0006:0001.000C: unknown main item tag 0x0 [ 110.744380][ T2985] hid-generic 0001:0006:0001.000C: unknown main item tag 0x0 [ 110.744407][ T2985] hid-generic 0001:0006:0001.000C: unknown main item tag 0x0 [ 110.744435][ T2985] hid-generic 0001:0006:0001.000C: unknown main item tag 0x0 [ 110.744537][ T2985] hid-generic 0001:0006:0001.000C: unknown main item tag 0x0 [ 110.744566][ T2985] hid-generic 0001:0006:0001.000C: unknown main item tag 0x0 [ 110.744624][ T2985] hid-generic 0001:0006:0001.000C: unknown main item tag 0x0 [ 110.744651][ T2985] hid-generic 0001:0006:0001.000C: unknown main item tag 0x0 [ 110.744679][ T2985] hid-generic 0001:0006:0001.000C: unknown main item tag 0x0 [ 110.744705][ T2985] hid-generic 0001:0006:0001.000C: unknown main item tag 0x0 [ 110.744808][ T2985] hid-generic 0001:0006:0001.000C: unknown main item tag 0x0 [ 110.744897][ T2985] hid-generic 0001:0006:0001.000C: unknown main item tag 0x0 [ 110.744925][ T2985] hid-generic 0001:0006:0001.000C: unknown main item tag 0x0 [ 110.744949][ T2985] hid-generic 0001:0006:0001.000C: unknown main item tag 0x0 [ 110.744969][ T2985] hid-generic 0001:0006:0001.000C: unknown main item tag 0x0 [ 110.745020][ T2985] hid-generic 0001:0006:0001.000C: unknown main item tag 0x0 [ 110.745055][ T2985] hid-generic 0001:0006:0001.000C: unknown main item tag 0x0 [ 110.745075][ T2985] hid-generic 0001:0006:0001.000C: unknown main item tag 0x0 [ 110.745094][ T2985] hid-generic 0001:0006:0001.000C: unknown main item tag 0x0 [ 110.745112][ T2985] hid-generic 0001:0006:0001.000C: unknown main item tag 0x0 [ 110.745146][ T2985] hid-generic 0001:0006:0001.000C: unknown main item tag 0x0 [ 110.745172][ T2985] hid-generic 0001:0006:0001.000C: unknown main item tag 0x0 [ 110.745197][ T2985] hid-generic 0001:0006:0001.000C: unknown main item tag 0x0 [ 110.745216][ T2985] hid-generic 0001:0006:0001.000C: unknown main item tag 0x0 [ 110.745234][ T2985] hid-generic 0001:0006:0001.000C: unknown main item tag 0x0 [ 110.745312][ T2985] hid-generic 0001:0006:0001.000C: unknown main item tag 0x0 [ 110.745331][ T2985] hid-generic 0001:0006:0001.000C: unknown main item tag 0x0 [ 110.745374][ T2985] hid-generic 0001:0006:0001.000C: unknown main item tag 0x0 [ 110.745397][ T2985] hid-generic 0001:0006:0001.000C: unknown main item tag 0x0 [ 110.745419][ T2985] hid-generic 0001:0006:0001.000C: unknown main item tag 0x0 [ 110.745456][ T2985] hid-generic 0001:0006:0001.000C: unknown main item tag 0x0 [ 110.745480][ T2985] hid-generic 0001:0006:0001.000C: unknown main item tag 0x0 [ 110.745501][ T2985] hid-generic 0001:0006:0001.000C: unknown main item tag 0x0 [ 110.745519][ T2985] hid-generic 0001:0006:0001.000C: unknown main item tag 0x0 [ 110.745609][ T2985] hid-generic 0001:0006:0001.000C: unknown main item tag 0x0 [ 110.745633][ T2985] hid-generic 0001:0006:0001.000C: unknown main item tag 0x0 [ 110.745655][ T2985] hid-generic 0001:0006:0001.000C: unknown main item tag 0x0 [ 110.745678][ T2985] hid-generic 0001:0006:0001.000C: unknown main item tag 0x0 [ 110.745715][ T2985] hid-generic 0001:0006:0001.000C: unknown main item tag 0x0 [ 110.745740][ T2985] hid-generic 0001:0006:0001.000C: unknown main item tag 0x0 [ 110.745760][ T2985] hid-generic 0001:0006:0001.000C: unknown main item tag 0x0 [ 110.745782][ T2985] hid-generic 0001:0006:0001.000C: unknown main item tag 0x0 [ 110.745801][ T2985] hid-generic 0001:0006:0001.000C: unknown main item tag 0x0 [ 110.745818][ T2985] hid-generic 0001:0006:0001.000C: unknown main item tag 0x0 [ 110.745872][ T2985] hid-generic 0001:0006:0001.000C: unknown main item tag 0x0 [ 110.745896][ T2985] hid-generic 0001:0006:0001.000C: unknown main item tag 0x0 [ 110.745949][ T2985] hid-generic 0001:0006:0001.000C: unknown main item tag 0x0 [ 110.745973][ T2985] hid-generic 0001:0006:0001.000C: unknown main item tag 0x0 [ 110.745994][ T2985] hid-generic 0001:0006:0001.000C: unknown main item tag 0x0 [ 110.746012][ T2985] hid-generic 0001:0006:0001.000C: unknown main item tag 0x0 [ 110.746079][ T2985] hid-generic 0001:0006:0001.000C: unknown main item tag 0x0 [ 110.746104][ T2985] hid-generic 0001:0006:0001.000C: unknown main item tag 0x0 [ 110.746146][ T2985] hid-generic 0001:0006:0001.000C: unknown main item tag 0x0 [ 110.746169][ T2985] hid-generic 0001:0006:0001.000C: unknown main item tag 0x0 [ 110.746196][ T2985] hid-generic 0001:0006:0001.000C: unknown main item tag 0x0 [ 110.746223][ T2985] hid-generic 0001:0006:0001.000C: unknown main item tag 0x0 [ 110.746246][ T2985] hid-generic 0001:0006:0001.000C: unknown main item tag 0x0 [ 110.746341][ T2985] hid-generic 0001:0006:0001.000C: unknown main item tag 0x0 [ 110.746368][ T2985] hid-generic 0001:0006:0001.000C: unknown main item tag 0x0 [ 110.746391][ T2985] hid-generic 0001:0006:0001.000C: unknown main item tag 0x0 [ 110.746412][ T2985] hid-generic 0001:0006:0001.000C: unknown main item tag 0x0 [ 110.746432][ T2985] hid-generic 0001:0006:0001.000C: unknown main item tag 0x0 [ 110.746453][ T2985] hid-generic 0001:0006:0001.000C: unknown main item tag 0x0 [ 110.746483][ T2985] hid-generic 0001:0006:0001.000C: unknown main item tag 0x0 [ 110.746510][ T2985] hid-generic 0001:0006:0001.000C: unknown main item tag 0x0 [ 110.746537][ T2985] hid-generic 0001:0006:0001.000C: unknown main item tag 0x0 [ 110.746559][ T2985] hid-generic 0001:0006:0001.000C: unknown main item tag 0x0 [ 110.746601][ T2985] hid-generic 0001:0006:0001.000C: unknown main item tag 0x0 [ 110.746628][ T2985] hid-generic 0001:0006:0001.000C: unknown main item tag 0x0 [ 110.746657][ T2985] hid-generic 0001:0006:0001.000C: unknown main item tag 0x0 [ 110.746714][ T2985] hid-generic 0001:0006:0001.000C: unknown main item tag 0x0 [ 110.746734][ T2985] hid-generic 0001:0006:0001.000C: unknown main item tag 0x0 [ 110.746754][ T2985] hid-generic 0001:0006:0001.000C: unknown main item tag 0x0 [ 110.746776][ T2985] hid-generic 0001:0006:0001.000C: unknown main item tag 0x0 [ 110.746803][ T2985] hid-generic 0001:0006:0001.000C: unknown main item tag 0x0 [ 110.746826][ T2985] hid-generic 0001:0006:0001.000C: unknown main item tag 0x0 [ 110.746847][ T2985] hid-generic 0001:0006:0001.000C: unknown main item tag 0x0 [ 110.746937][ T2985] hid-generic 0001:0006:0001.000C: unknown main item tag 0x0 [ 110.746962][ T2985] hid-generic 0001:0006:0001.000C: unknown main item tag 0x0 [ 110.746988][ T2985] hid-generic 0001:0006:0001.000C: unknown main item tag 0x0 [ 110.747017][ T2985] hid-generic 0001:0006:0001.000C: unknown main item tag 0x0 [ 110.747106][ T2985] hid-generic 0001:0006:0001.000C: unknown main item tag 0x0 [ 110.747134][ T2985] hid-generic 0001:0006:0001.000C: unknown main item tag 0x0 [ 110.747160][ T2985] hid-generic 0001:0006:0001.000C: unknown main item tag 0x0 [ 110.747189][ T2985] hid-generic 0001:0006:0001.000C: unknown main item tag 0x0 [ 110.747217][ T2985] hid-generic 0001:0006:0001.000C: unknown main item tag 0x0 [ 110.747255][ T2985] hid-generic 0001:0006:0001.000C: unknown main item tag 0x0 [ 110.747284][ T2985] hid-generic 0001:0006:0001.000C: unknown main item tag 0x0 [ 110.747320][ T2985] hid-generic 0001:0006:0001.000C: unknown main item tag 0x0 [ 110.747351][ T2985] hid-generic 0001:0006:0001.000C: unknown main item tag 0x0 [ 110.747376][ T2985] hid-generic 0001:0006:0001.000C: unknown main item tag 0x0 [ 110.747410][ T2985] hid-generic 0001:0006:0001.000C: unknown main item tag 0x0 [ 110.747436][ T2985] hid-generic 0001:0006:0001.000C: unknown main item tag 0x0 [ 110.747500][ T2985] hid-generic 0001:0006:0001.000C: unknown main item tag 0x0 [ 110.747526][ T2985] hid-generic 0001:0006:0001.000C: unknown main item tag 0x0 [ 110.747552][ T2985] hid-generic 0001:0006:0001.000C: unknown main item tag 0x0 [ 110.747577][ T2985] hid-generic 0001:0006:0001.000C: unknown main item tag 0x0 [ 110.747595][ T2985] hid-generic 0001:0006:0001.000C: unknown main item tag 0x0 [ 110.747616][ T2985] hid-generic 0001:0006:0001.000C: unknown main item tag 0x0 [ 110.749515][ T2985] hid-generic 0001:0006:0001.000C: hidraw0: HID vb.2f Device [syz0] on syz0 [ 110.837750][ T8520] loop4: detected capacity change from 0 to 512 [ 110.856409][ T8520] EXT4-fs (loop4): too many log groups per flexible block group [ 110.856445][ T8520] EXT4-fs (loop4): failed to initialize mballoc (-12) [ 110.856471][ T8520] EXT4-fs (loop4): mount failed [ 111.169375][ T8532] loop4: detected capacity change from 0 to 1024 [ 111.205612][ T8534] loop5: detected capacity change from 0 to 1024 [ 111.463011][ T8532] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 111.471360][ T8534] EXT4-fs: Ignoring removed nomblk_io_submit option [ 112.717300][ T3324] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.754299][ T8534] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 112.857670][ T5763] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.873453][ T8557] loop4: detected capacity change from 0 to 512 [ 112.911227][ T8557] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002] [ 112.956662][ T8557] System zones: 0-2, 18-18, 34-34 [ 112.970214][ T8557] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.1385: bg 0: block 248: padding at end of block bitmap is not set [ 113.013703][ T8557] EXT4-fs error (device loop4): ext4_acquire_dquot:6938: comm syz.4.1385: Failed to acquire dquot type 1 [ 113.015026][ T8572] loop3: detected capacity change from 0 to 512 [ 113.032163][ T8557] EXT4-fs (loop4): 1 truncate cleaned up [ 113.038192][ T8557] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 113.051168][ T8557] ext4 filesystem being mounted at /261/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 113.079677][ T3324] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.110796][ T8572] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 113.118774][ T8572] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=1843c01c, mo2=0002] [ 113.126978][ T8572] EXT4-fs (loop3): couldn't mount RDWR because of unsupported optional features (80) [ 113.136575][ T8572] EXT4-fs (loop3): Skipping orphan cleanup due to unknown ROCOMPAT features [ 113.211003][ T8572] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 113.253288][ T8572] EXT4-fs warning (device loop3): dx_probe:893: inode #2: comm syz.3.1390: dx entry: limit 65535 != root limit 120 [ 113.265543][ T8572] EXT4-fs warning (device loop3): dx_probe:966: inode #2: comm syz.3.1390: Corrupt directory, running e2fsck is recommended [ 113.332079][ T3331] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.399373][ T8592] __nla_validate_parse: 11 callbacks suppressed [ 113.399387][ T8592] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1392'. [ 113.480889][ T2985] hid-generic 0001:0006:0001.000D: unknown main item tag 0x0 [ 113.488318][ T2985] hid-generic 0001:0006:0001.000D: unknown main item tag 0x0 [ 113.495741][ T2985] hid-generic 0001:0006:0001.000D: unknown main item tag 0x0 [ 113.503170][ T2985] hid-generic 0001:0006:0001.000D: unknown main item tag 0x0 [ 113.510632][ T2985] hid-generic 0001:0006:0001.000D: unknown main item tag 0x0 [ 113.518023][ T2985] hid-generic 0001:0006:0001.000D: unknown main item tag 0x0 [ 113.525416][ T2985] hid-generic 0001:0006:0001.000D: unknown main item tag 0x0 [ 113.532835][ T2985] hid-generic 0001:0006:0001.000D: unknown main item tag 0x0 [ 113.540263][ T2985] hid-generic 0001:0006:0001.000D: unknown main item tag 0x0 [ 113.547654][ T2985] hid-generic 0001:0006:0001.000D: unknown main item tag 0x0 [ 113.555099][ T2985] hid-generic 0001:0006:0001.000D: unknown main item tag 0x0 [ 113.562512][ T2985] hid-generic 0001:0006:0001.000D: unknown main item tag 0x0 [ 113.569909][ T2985] hid-generic 0001:0006:0001.000D: unknown main item tag 0x0 [ 113.577307][ T2985] hid-generic 0001:0006:0001.000D: unknown main item tag 0x0 [ 113.584779][ T2985] hid-generic 0001:0006:0001.000D: unknown main item tag 0x0 [ 113.592271][ T2985] hid-generic 0001:0006:0001.000D: unknown main item tag 0x0 [ 113.599760][ T2985] hid-generic 0001:0006:0001.000D: unknown main item tag 0x0 [ 113.607147][ T2985] hid-generic 0001:0006:0001.000D: unknown main item tag 0x0 [ 113.614957][ T2985] hid-generic 0001:0006:0001.000D: unknown main item tag 0x0 [ 113.622552][ T2985] hid-generic 0001:0006:0001.000D: unknown main item tag 0x0 [ 113.629967][ T2985] hid-generic 0001:0006:0001.000D: unknown main item tag 0x0 [ 113.637420][ T2985] hid-generic 0001:0006:0001.000D: unknown main item tag 0x0 [ 113.644831][ T2985] hid-generic 0001:0006:0001.000D: unknown main item tag 0x0 [ 113.652346][ T2985] hid-generic 0001:0006:0001.000D: unknown main item tag 0x0 [ 113.659736][ T2985] hid-generic 0001:0006:0001.000D: unknown main item tag 0x0 [ 113.663998][ T8598] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1394'. [ 113.667197][ T2985] hid-generic 0001:0006:0001.000D: unknown main item tag 0x0 [ 113.683464][ T2985] hid-generic 0001:0006:0001.000D: unknown main item tag 0x0 [ 113.690872][ T2985] hid-generic 0001:0006:0001.000D: unknown main item tag 0x0 [ 113.698260][ T2985] hid-generic 0001:0006:0001.000D: unknown main item tag 0x0 [ 113.705657][ T2985] hid-generic 0001:0006:0001.000D: unknown main item tag 0x0 [ 113.713225][ T2985] hid-generic 0001:0006:0001.000D: unknown main item tag 0x0 [ 113.720720][ T2985] hid-generic 0001:0006:0001.000D: unknown main item tag 0x0 [ 113.728103][ T2985] hid-generic 0001:0006:0001.000D: unknown main item tag 0x0 [ 113.735542][ T2985] hid-generic 0001:0006:0001.000D: unknown main item tag 0x0 [ 113.742982][ T2985] hid-generic 0001:0006:0001.000D: unknown main item tag 0x0 [ 113.750437][ T2985] hid-generic 0001:0006:0001.000D: unknown main item tag 0x0 [ 113.757892][ T2985] hid-generic 0001:0006:0001.000D: unknown main item tag 0x0 [ 113.765373][ T2985] hid-generic 0001:0006:0001.000D: unknown main item tag 0x0 [ 113.772846][ T2985] hid-generic 0001:0006:0001.000D: unknown main item tag 0x0 [ 113.780253][ T2985] hid-generic 0001:0006:0001.000D: unknown main item tag 0x0 [ 113.787636][ T2985] hid-generic 0001:0006:0001.000D: unknown main item tag 0x0 [ 113.795051][ T2985] hid-generic 0001:0006:0001.000D: unknown main item tag 0x0 [ 113.802495][ T2985] hid-generic 0001:0006:0001.000D: unknown main item tag 0x0 [ 113.809926][ T2985] hid-generic 0001:0006:0001.000D: unknown main item tag 0x0 [ 113.817334][ T2985] hid-generic 0001:0006:0001.000D: unknown main item tag 0x0 [ 113.824826][ T2985] hid-generic 0001:0006:0001.000D: unknown main item tag 0x0 [ 113.832273][ T2985] hid-generic 0001:0006:0001.000D: unknown main item tag 0x0 [ 113.839692][ T2985] hid-generic 0001:0006:0001.000D: unknown main item tag 0x0 [ 113.847129][ T2985] hid-generic 0001:0006:0001.000D: unknown main item tag 0x0 [ 113.854633][ T2985] hid-generic 0001:0006:0001.000D: unknown main item tag 0x0 [ 113.862078][ T2985] hid-generic 0001:0006:0001.000D: unknown main item tag 0x0 [ 113.869671][ T2985] hid-generic 0001:0006:0001.000D: unknown main item tag 0x0 [ 113.877072][ T2985] hid-generic 0001:0006:0001.000D: unknown main item tag 0x0 [ 113.884552][ T2985] hid-generic 0001:0006:0001.000D: unknown main item tag 0x0 [ 113.891966][ T2985] hid-generic 0001:0006:0001.000D: unknown main item tag 0x0 [ 113.899371][ T2985] hid-generic 0001:0006:0001.000D: unknown main item tag 0x0 [ 113.906838][ T2985] hid-generic 0001:0006:0001.000D: unknown main item tag 0x0 [ 113.914247][ T2985] hid-generic 0001:0006:0001.000D: unknown main item tag 0x0 [ 113.921730][ T2985] hid-generic 0001:0006:0001.000D: unknown main item tag 0x0 [ 113.929266][ T2985] hid-generic 0001:0006:0001.000D: unknown main item tag 0x0 [ 113.936696][ T2985] hid-generic 0001:0006:0001.000D: unknown main item tag 0x0 [ 113.944122][ T2985] hid-generic 0001:0006:0001.000D: unknown main item tag 0x0 [ 113.951562][ T2985] hid-generic 0001:0006:0001.000D: unknown main item tag 0x0 [ 113.959028][ T2985] hid-generic 0001:0006:0001.000D: unknown main item tag 0x0 [ 113.966440][ T2985] hid-generic 0001:0006:0001.000D: unknown main item tag 0x0 [ 113.973896][ T2985] hid-generic 0001:0006:0001.000D: unknown main item tag 0x0 [ 113.981307][ T2985] hid-generic 0001:0006:0001.000D: unknown main item tag 0x0 [ 113.988792][ T2985] hid-generic 0001:0006:0001.000D: unknown main item tag 0x0 [ 113.996204][ T2985] hid-generic 0001:0006:0001.000D: unknown main item tag 0x0 [ 114.003601][ T2985] hid-generic 0001:0006:0001.000D: unknown main item tag 0x0 [ 114.011083][ T2985] hid-generic 0001:0006:0001.000D: unknown main item tag 0x0 [ 114.018485][ T2985] hid-generic 0001:0006:0001.000D: unknown main item tag 0x0 [ 114.025883][ T2985] hid-generic 0001:0006:0001.000D: unknown main item tag 0x0 [ 114.033302][ T2985] hid-generic 0001:0006:0001.000D: unknown main item tag 0x0 [ 114.040702][ T2985] hid-generic 0001:0006:0001.000D: unknown main item tag 0x0 [ 114.048168][ T2985] hid-generic 0001:0006:0001.000D: unknown main item tag 0x0 [ 114.055565][ T2985] hid-generic 0001:0006:0001.000D: unknown main item tag 0x0 [ 114.062961][ T2985] hid-generic 0001:0006:0001.000D: unknown main item tag 0x0 [ 114.070445][ T2985] hid-generic 0001:0006:0001.000D: unknown main item tag 0x0 [ 114.077897][ T2985] hid-generic 0001:0006:0001.000D: unknown main item tag 0x0 [ 114.085418][ T2985] hid-generic 0001:0006:0001.000D: unknown main item tag 0x0 [ 114.092856][ T2985] hid-generic 0001:0006:0001.000D: unknown main item tag 0x0 [ 114.100434][ T2985] hid-generic 0001:0006:0001.000D: unknown main item tag 0x0 [ 114.108416][ T2985] hid-generic 0001:0006:0001.000D: unknown main item tag 0x0 [ 114.115847][ T2985] hid-generic 0001:0006:0001.000D: unknown main item tag 0x0 [ 114.123254][ T2985] hid-generic 0001:0006:0001.000D: unknown main item tag 0x0 [ 114.130703][ T2985] hid-generic 0001:0006:0001.000D: unknown main item tag 0x0 [ 114.138101][ T2985] hid-generic 0001:0006:0001.000D: unknown main item tag 0x0 [ 114.145598][ T2985] hid-generic 0001:0006:0001.000D: unknown main item tag 0x0 [ 114.153142][ T2985] hid-generic 0001:0006:0001.000D: unknown main item tag 0x0 [ 114.160572][ T2985] hid-generic 0001:0006:0001.000D: unknown main item tag 0x0 [ 114.164387][ T8600] loop6: detected capacity change from 0 to 1024 [ 114.167992][ T2985] hid-generic 0001:0006:0001.000D: unknown main item tag 0x0 [ 114.181766][ T2985] hid-generic 0001:0006:0001.000D: unknown main item tag 0x0 [ 114.189211][ T2985] hid-generic 0001:0006:0001.000D: unknown main item tag 0x0 [ 114.196636][ T2985] hid-generic 0001:0006:0001.000D: unknown main item tag 0x0 [ 114.204072][ T2985] hid-generic 0001:0006:0001.000D: unknown main item tag 0x0 [ 114.211520][ T2985] hid-generic 0001:0006:0001.000D: unknown main item tag 0x0 [ 114.219065][ T2985] hid-generic 0001:0006:0001.000D: unknown main item tag 0x0 [ 114.226478][ T2985] hid-generic 0001:0006:0001.000D: unknown main item tag 0x0 [ 114.233904][ T2985] hid-generic 0001:0006:0001.000D: unknown main item tag 0x0 [ 114.241311][ T2985] hid-generic 0001:0006:0001.000D: unknown main item tag 0x0 [ 114.249295][ T2985] hid-generic 0001:0006:0001.000D: unknown main item tag 0x0 [ 114.256707][ T2985] hid-generic 0001:0006:0001.000D: unknown main item tag 0x0 [ 114.259872][ T8600] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 114.264235][ T2985] hid-generic 0001:0006:0001.000D: unknown main item tag 0x0 [ 114.283635][ T2985] hid-generic 0001:0006:0001.000D: unknown main item tag 0x0 [ 114.291061][ T2985] hid-generic 0001:0006:0001.000D: unknown main item tag 0x0 [ 114.298479][ T2985] hid-generic 0001:0006:0001.000D: unknown main item tag 0x0 [ 114.305861][ T2985] hid-generic 0001:0006:0001.000D: unknown main item tag 0x0 [ 114.313270][ T2985] hid-generic 0001:0006:0001.000D: unknown main item tag 0x0 [ 114.320666][ T2985] hid-generic 0001:0006:0001.000D: unknown main item tag 0x0 [ 114.328047][ T2985] hid-generic 0001:0006:0001.000D: unknown main item tag 0x0 [ 114.335489][ T2985] hid-generic 0001:0006:0001.000D: unknown main item tag 0x0 [ 114.342945][ T2985] hid-generic 0001:0006:0001.000D: unknown main item tag 0x0 [ 114.350461][ T2985] hid-generic 0001:0006:0001.000D: unknown main item tag 0x0 [ 114.357854][ T2985] hid-generic 0001:0006:0001.000D: unknown main item tag 0x0 [ 114.365352][ T2985] hid-generic 0001:0006:0001.000D: unknown main item tag 0x0 [ 114.372815][ T2985] hid-generic 0001:0006:0001.000D: unknown main item tag 0x0 [ 114.380248][ T2985] hid-generic 0001:0006:0001.000D: unknown main item tag 0x0 [ 114.387635][ T2985] hid-generic 0001:0006:0001.000D: unknown main item tag 0x0 [ 114.395070][ T2985] hid-generic 0001:0006:0001.000D: unknown main item tag 0x0 [ 114.402475][ T2985] hid-generic 0001:0006:0001.000D: unknown main item tag 0x0 [ 114.409887][ T2985] hid-generic 0001:0006:0001.000D: unknown main item tag 0x0 [ 114.417401][ T2985] hid-generic 0001:0006:0001.000D: unknown main item tag 0x0 [ 114.424800][ T2985] hid-generic 0001:0006:0001.000D: unknown main item tag 0x0 [ 114.432292][ T2985] hid-generic 0001:0006:0001.000D: unknown main item tag 0x0 [ 114.439686][ T2985] hid-generic 0001:0006:0001.000D: unknown main item tag 0x0 [ 114.447133][ T2985] hid-generic 0001:0006:0001.000D: unknown main item tag 0x0 [ 114.454577][ T2985] hid-generic 0001:0006:0001.000D: unknown main item tag 0x0 [ 114.462504][ T2985] hid-generic 0001:0006:0001.000D: unknown main item tag 0x0 [ 114.470428][ T2985] hid-generic 0001:0006:0001.000D: unknown main item tag 0x0 [ 114.477810][ T2985] hid-generic 0001:0006:0001.000D: unknown main item tag 0x0 [ 114.485614][ T2985] hid-generic 0001:0006:0001.000D: unknown main item tag 0x0 [ 114.493078][ T2985] hid-generic 0001:0006:0001.000D: unknown main item tag 0x0 [ 114.500542][ T2985] hid-generic 0001:0006:0001.000D: unknown main item tag 0x0 [ 114.508029][ T2985] hid-generic 0001:0006:0001.000D: unknown main item tag 0x0 [ 114.515423][ T2985] hid-generic 0001:0006:0001.000D: unknown main item tag 0x0 [ 114.522898][ T2985] hid-generic 0001:0006:0001.000D: unknown main item tag 0x0 [ 114.530306][ T2985] hid-generic 0001:0006:0001.000D: unknown main item tag 0x0 [ 114.537707][ T2985] hid-generic 0001:0006:0001.000D: unknown main item tag 0x0 [ 114.545121][ T2985] hid-generic 0001:0006:0001.000D: unknown main item tag 0x0 [ 114.552574][ T2985] hid-generic 0001:0006:0001.000D: unknown main item tag 0x0 [ 114.559970][ T2985] hid-generic 0001:0006:0001.000D: unknown main item tag 0x0 [ 114.567360][ T2985] hid-generic 0001:0006:0001.000D: unknown main item tag 0x0 [ 114.574773][ T2985] hid-generic 0001:0006:0001.000D: unknown main item tag 0x0 [ 114.582174][ T2985] hid-generic 0001:0006:0001.000D: unknown main item tag 0x0 [ 114.589678][ T2985] hid-generic 0001:0006:0001.000D: unknown main item tag 0x0 [ 114.597055][ T2985] hid-generic 0001:0006:0001.000D: unknown main item tag 0x0 [ 114.604463][ T2985] hid-generic 0001:0006:0001.000D: unknown main item tag 0x0 [ 114.611860][ T2985] hid-generic 0001:0006:0001.000D: unknown main item tag 0x0 [ 114.619247][ T2985] hid-generic 0001:0006:0001.000D: unknown main item tag 0x0 [ 114.626648][ T2985] hid-generic 0001:0006:0001.000D: unknown main item tag 0x0 [ 114.634056][ T2985] hid-generic 0001:0006:0001.000D: unknown main item tag 0x0 [ 114.641458][ T2985] hid-generic 0001:0006:0001.000D: unknown main item tag 0x0 [ 114.648873][ T2985] hid-generic 0001:0006:0001.000D: unknown main item tag 0x0 [ 114.656251][ T2985] hid-generic 0001:0006:0001.000D: unknown main item tag 0x0 [ 114.663652][ T2985] hid-generic 0001:0006:0001.000D: unknown main item tag 0x0 [ 114.671092][ T2985] hid-generic 0001:0006:0001.000D: unknown main item tag 0x0 [ 114.678497][ T2985] hid-generic 0001:0006:0001.000D: unknown main item tag 0x0 [ 114.685881][ T2985] hid-generic 0001:0006:0001.000D: unknown main item tag 0x0 [ 114.693294][ T2985] hid-generic 0001:0006:0001.000D: unknown main item tag 0x0 [ 114.700683][ T2985] hid-generic 0001:0006:0001.000D: unknown main item tag 0x0 [ 114.708173][ T2985] hid-generic 0001:0006:0001.000D: unknown main item tag 0x0 [ 114.715588][ T2985] hid-generic 0001:0006:0001.000D: unknown main item tag 0x0 [ 114.723055][ T2985] hid-generic 0001:0006:0001.000D: unknown main item tag 0x0 [ 114.730497][ T2985] hid-generic 0001:0006:0001.000D: unknown main item tag 0x0 [ 114.737878][ T2985] hid-generic 0001:0006:0001.000D: unknown main item tag 0x0 [ 114.745273][ T2985] hid-generic 0001:0006:0001.000D: unknown main item tag 0x0 [ 114.752676][ T2985] hid-generic 0001:0006:0001.000D: unknown main item tag 0x0 [ 114.760102][ T2985] hid-generic 0001:0006:0001.000D: unknown main item tag 0x0 [ 114.767472][ T2985] hid-generic 0001:0006:0001.000D: unknown main item tag 0x0 [ 114.774882][ T2985] hid-generic 0001:0006:0001.000D: unknown main item tag 0x0 [ 114.782384][ T2985] hid-generic 0001:0006:0001.000D: unknown main item tag 0x0 [ 114.789793][ T2985] hid-generic 0001:0006:0001.000D: unknown main item tag 0x0 [ 114.797310][ T2985] hid-generic 0001:0006:0001.000D: unknown main item tag 0x0 [ 114.804790][ T2985] hid-generic 0001:0006:0001.000D: unknown main item tag 0x0 [ 114.812274][ T2985] hid-generic 0001:0006:0001.000D: unknown main item tag 0x0 [ 114.819668][ T2985] hid-generic 0001:0006:0001.000D: unknown main item tag 0x0 [ 114.827054][ T2985] hid-generic 0001:0006:0001.000D: unknown main item tag 0x0 [ 114.834614][ T2985] hid-generic 0001:0006:0001.000D: unknown main item tag 0x0 [ 114.842071][ T2985] hid-generic 0001:0006:0001.000D: unknown main item tag 0x0 [ 114.849508][ T2985] hid-generic 0001:0006:0001.000D: unknown main item tag 0x0 [ 114.856953][ T2985] hid-generic 0001:0006:0001.000D: unknown main item tag 0x0 [ 114.864375][ T2985] hid-generic 0001:0006:0001.000D: unknown main item tag 0x0 [ 114.864754][ T29] kauditd_printk_skb: 278 callbacks suppressed [ 114.864767][ T29] audit: type=1400 audit(1732710464.999:12784): avc: denied { append open } for pid=8599 comm="syz.6.1397" path="/79/bus/file0/memory.events" dev="loop6" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 114.871757][ T2985] hid-generic 0001:0006:0001.000D: unknown main item tag 0x0 [ 114.871781][ T2985] hid-generic 0001:0006:0001.000D: unknown main item tag 0x0 [ 114.917450][ T2985] hid-generic 0001:0006:0001.000D: unknown main item tag 0x0 [ 114.924911][ T2985] hid-generic 0001:0006:0001.000D: unknown main item tag 0x0 [ 114.932317][ T2985] hid-generic 0001:0006:0001.000D: unknown main item tag 0x0 [ 114.939715][ T2985] hid-generic 0001:0006:0001.000D: unknown main item tag 0x0 [ 114.947100][ T2985] hid-generic 0001:0006:0001.000D: unknown main item tag 0x0 [ 114.954653][ T2985] hid-generic 0001:0006:0001.000D: unknown main item tag 0x0 [ 114.962063][ T2985] hid-generic 0001:0006:0001.000D: unknown main item tag 0x0 [ 114.969500][ T2985] hid-generic 0001:0006:0001.000D: unknown main item tag 0x0 [ 114.976895][ T2985] hid-generic 0001:0006:0001.000D: unknown main item tag 0x0 [ 114.984311][ T2985] hid-generic 0001:0006:0001.000D: unknown main item tag 0x0 [ 114.991740][ T2985] hid-generic 0001:0006:0001.000D: unknown main item tag 0x0 [ 114.999174][ T2985] hid-generic 0001:0006:0001.000D: unknown main item tag 0x0 [ 115.006627][ T2985] hid-generic 0001:0006:0001.000D: unknown main item tag 0x0 [ 115.014085][ T2985] hid-generic 0001:0006:0001.000D: unknown main item tag 0x0 [ 115.021498][ T2985] hid-generic 0001:0006:0001.000D: unknown main item tag 0x0 [ 115.028917][ T2985] hid-generic 0001:0006:0001.000D: unknown main item tag 0x0 [ 115.036305][ T2985] hid-generic 0001:0006:0001.000D: unknown main item tag 0x0 [ 115.043715][ T2985] hid-generic 0001:0006:0001.000D: unknown main item tag 0x0 [ 115.051108][ T2985] hid-generic 0001:0006:0001.000D: unknown main item tag 0x0 [ 115.058507][ T2985] hid-generic 0001:0006:0001.000D: unknown main item tag 0x0 [ 115.065884][ T2985] hid-generic 0001:0006:0001.000D: unknown main item tag 0x0 [ 115.073345][ T2985] hid-generic 0001:0006:0001.000D: unknown main item tag 0x0 [ 115.080806][ T2985] hid-generic 0001:0006:0001.000D: unknown main item tag 0x0 [ 115.088181][ T2985] hid-generic 0001:0006:0001.000D: unknown main item tag 0x0 [ 115.095577][ T2985] hid-generic 0001:0006:0001.000D: unknown main item tag 0x0 [ 115.102998][ T2985] hid-generic 0001:0006:0001.000D: unknown main item tag 0x0 [ 115.110405][ T2985] hid-generic 0001:0006:0001.000D: unknown main item tag 0x0 [ 115.117791][ T2985] hid-generic 0001:0006:0001.000D: unknown main item tag 0x0 [ 115.125192][ T2985] hid-generic 0001:0006:0001.000D: unknown main item tag 0x0 [ 115.132697][ T2985] hid-generic 0001:0006:0001.000D: unknown main item tag 0x0 [ 115.140096][ T2985] hid-generic 0001:0006:0001.000D: unknown main item tag 0x0 [ 115.147612][ T2985] hid-generic 0001:0006:0001.000D: unknown main item tag 0x0 [ 115.155015][ T2985] hid-generic 0001:0006:0001.000D: unknown main item tag 0x0 [ 115.162420][ T2985] hid-generic 0001:0006:0001.000D: unknown main item tag 0x0 [ 115.169820][ T2985] hid-generic 0001:0006:0001.000D: unknown main item tag 0x0 [ 115.177210][ T2985] hid-generic 0001:0006:0001.000D: unknown main item tag 0x0 [ 115.184637][ T2985] hid-generic 0001:0006:0001.000D: unknown main item tag 0x0 [ 115.192099][ T2985] hid-generic 0001:0006:0001.000D: unknown main item tag 0x0 [ 115.199497][ T2985] hid-generic 0001:0006:0001.000D: unknown main item tag 0x0 [ 115.207025][ T2985] hid-generic 0001:0006:0001.000D: unknown main item tag 0x0 [ 115.214470][ T2985] hid-generic 0001:0006:0001.000D: unknown main item tag 0x0 [ 115.221897][ T2985] hid-generic 0001:0006:0001.000D: unknown main item tag 0x0 [ 115.229330][ T2985] hid-generic 0001:0006:0001.000D: unknown main item tag 0x0 [ 115.240441][ T2985] hid-generic 0001:0006:0001.000D: hidraw0: HID vb.2f Device [syz0] on syz0 [ 115.301986][ T8609] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1400'. [ 115.319455][ T6869] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.329007][ T8611] loop4: detected capacity change from 0 to 512 [ 115.336960][ T29] audit: type=1326 audit(1732710465.459:12785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8614 comm="syz.5.1403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f994b090809 code=0x7ffc0000 [ 115.342605][ T8615] loop5: detected capacity change from 0 to 512 [ 115.360489][ T29] audit: type=1326 audit(1732710465.469:12786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8614 comm="syz.5.1403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f994b090809 code=0x7ffc0000 [ 115.369848][ T8615] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 115.390202][ T29] audit: type=1326 audit(1732710465.469:12787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8614 comm="syz.5.1403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f994b090809 code=0x7ffc0000 [ 115.421743][ T29] audit: type=1326 audit(1732710465.469:12788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8614 comm="syz.5.1403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f994b090809 code=0x7ffc0000 [ 115.445187][ T29] audit: type=1326 audit(1732710465.469:12789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8614 comm="syz.5.1403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f994b090809 code=0x7ffc0000 [ 115.468730][ T29] audit: type=1326 audit(1732710465.469:12790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8614 comm="syz.5.1403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f994b090809 code=0x7ffc0000 [ 115.492206][ T29] audit: type=1326 audit(1732710465.469:12791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8614 comm="syz.5.1403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f994b090843 code=0x7ffc0000 [ 115.515642][ T29] audit: type=1326 audit(1732710465.469:12792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8614 comm="syz.5.1403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f994b08f2bf code=0x7ffc0000 [ 115.539051][ T29] audit: type=1326 audit(1732710465.479:12793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8614 comm="syz.5.1403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f994b090897 code=0x7ffc0000 [ 115.563606][ T8611] EXT4-fs (loop4): too many log groups per flexible block group [ 115.571493][ T8611] EXT4-fs (loop4): failed to initialize mballoc (-12) [ 115.624194][ T8623] tmpfs: Bad value for 'mpol' [ 115.629141][ T8611] EXT4-fs (loop4): mount failed [ 115.644967][ T8615] netem: change failed [ 115.755788][ T8634] loop3: detected capacity change from 0 to 1024 [ 115.810765][ T8627] loop6: detected capacity change from 0 to 8192 [ 115.829644][ T8634] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 115.846317][ T8627] netlink: 'syz.6.1407': attribute type 322 has an invalid length. [ 115.892880][ T8651] loop5: detected capacity change from 0 to 512 [ 115.936486][ T3331] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.958243][ T8651] EXT4-fs (loop5): can't mount with commit=3, fs mounted w/o journal [ 115.983790][ T8660] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1406'. [ 116.272610][ T8677] block device autoloading is deprecated and will be removed. [ 116.284149][ T8677] syz.3.1424: attempt to access beyond end of device [ 116.284149][ T8677] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 116.357805][ T8684] loop3: detected capacity change from 0 to 1024 [ 116.381888][ T8684] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 116.461121][ T3331] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.505237][ T8690] loop3: detected capacity change from 0 to 512 [ 116.528918][ T8690] EXT4-fs (loop3): can't mount with commit=3, fs mounted w/o journal [ 116.707131][ T8694] loop3: detected capacity change from 0 to 1024 [ 116.740395][ T8694] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 116.842125][ T3331] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.904895][ T8700] loop4: detected capacity change from 0 to 8192 [ 116.937973][ T8700] netlink: 'syz.4.1431': attribute type 322 has an invalid length. [ 117.003989][ T8710] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1430'. [ 117.087779][ T8713] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1435'. [ 117.143119][ T8709] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1434'. [ 117.160645][ T8715] loop5: detected capacity change from 0 to 512 [ 117.177960][ T8709] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1434'. [ 117.181246][ T8719] serio: Serial port ptm0 [ 117.186973][ T8709] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1434'. [ 117.211805][ T8722] loop4: detected capacity change from 0 to 512 [ 117.231620][ T8715] EXT4-fs (loop5): can't mount with commit=3, fs mounted w/o journal [ 117.248660][ T8722] EXT4-fs (loop4): can't mount with commit=3, fs mounted w/o journal [ 117.393841][ T8740] loop4: detected capacity change from 0 to 512 [ 117.419498][ T8740] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2240: inode #15: comm syz.4.1445: corrupted in-inode xattr: invalid ea_ino [ 117.435104][ T8744] FAULT_INJECTION: forcing a failure. [ 117.435104][ T8744] name failslab, interval 1, probability 0, space 0, times 0 [ 117.435212][ T8744] CPU: 1 UID: 0 PID: 8744 Comm: syz.2.1446 Not tainted 6.12.0-syzkaller-10296-gaaf20f870da0 #0 [ 117.435241][ T8744] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 117.435255][ T8744] Call Trace: [ 117.435262][ T8744] [ 117.435305][ T8744] dump_stack_lvl+0xf2/0x150 [ 117.435326][ T8744] dump_stack+0x15/0x20 [ 117.435340][ T8744] should_fail_ex+0x223/0x230 [ 117.435419][ T8744] should_failslab+0x8f/0xb0 [ 117.435444][ T8744] kmem_cache_alloc_noprof+0x52/0x320 [ 117.435490][ T8744] ? security_inode_alloc+0x37/0x100 [ 117.435514][ T8744] security_inode_alloc+0x37/0x100 [ 117.435541][ T8744] inode_init_always_gfp+0x4a2/0x4f0 [ 117.435564][ T8744] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 117.435693][ T8744] alloc_inode+0x82/0x160 [ 117.435720][ T8744] new_inode+0x1e/0x100 [ 117.435747][ T8744] shmem_get_inode+0x24e/0x730 [ 117.435843][ T8744] __shmem_file_setup+0x127/0x1f0 [ 117.435869][ T8744] shmem_file_setup+0x3b/0x50 [ 117.435966][ T8744] __se_sys_memfd_create+0x31d/0x5c0 [ 117.436053][ T8744] __x64_sys_memfd_create+0x31/0x40 [ 117.436085][ T8744] x64_sys_call+0x2d4c/0x2dc0 [ 117.436110][ T8744] do_syscall_64+0xc9/0x1c0 [ 117.436147][ T8744] ? clear_bhb_loop+0x55/0xb0 [ 117.436226][ T8744] ? clear_bhb_loop+0x55/0xb0 [ 117.436249][ T8744] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.436280][ T8744] RIP: 0033:0x7f745ec20809 [ 117.436331][ T8744] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 117.436432][ T8744] RSP: 002b:00007f745d296d88 EFLAGS: 00000206 ORIG_RAX: 000000000000013f [ 117.610262][ T8744] RAX: ffffffffffffffda RBX: 0000000000001058 RCX: 00007f745ec20809 [ 117.618277][ T8744] RDX: 00007f745d296e0c RSI: 0000000000000000 RDI: 00007f745ec941c1 [ 117.626269][ T8744] RBP: 0000000020001700 R08: 00007f745d296b27 R09: 0000000000000000 [ 117.634260][ T8744] R10: 000000000000000a R11: 0000000000000206 R12: 0000000000000001 [ 117.642254][ T8744] R13: 00007f745d296e0c R14: 00007f745d296e10 R15: 00007ffc6e0393a8 [ 117.650293][ T8744] [ 117.668388][ T8740] EXT4-fs error (device loop4): ext4_orphan_get:1394: comm syz.4.1445: couldn't read orphan inode 15 (err -117) [ 117.722375][ T8740] EXT4-fs (loop4): mounted filesystem 00000007-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 117.763745][ T8755] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1449'. [ 117.846301][ T8759] FAULT_INJECTION: forcing a failure. [ 117.846301][ T8759] name failslab, interval 1, probability 0, space 0, times 0 [ 117.846327][ T8759] CPU: 0 UID: 0 PID: 8759 Comm: syz.2.1450 Not tainted 6.12.0-syzkaller-10296-gaaf20f870da0 #0 [ 117.846351][ T8759] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 117.846425][ T8759] Call Trace: [ 117.846434][ T8759] [ 117.846443][ T8759] dump_stack_lvl+0xf2/0x150 [ 117.846546][ T8759] dump_stack+0x15/0x20 [ 117.846569][ T8759] should_fail_ex+0x223/0x230 [ 117.846609][ T8759] should_failslab+0x8f/0xb0 [ 117.846637][ T8759] kmem_cache_alloc_node_noprof+0x59/0x320 [ 117.846677][ T8759] ? __alloc_skb+0x10b/0x310 [ 117.846765][ T8759] ? kstrtouint+0x77/0xc0 [ 117.846793][ T8759] __alloc_skb+0x10b/0x310 [ 117.846824][ T8759] ? selinux_file_permission+0x22a/0x360 [ 117.846914][ T8759] ppp_write+0x87/0x310 [ 117.846952][ T8759] vfs_writev+0x3fb/0x880 [ 117.846984][ T8759] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 117.847018][ T8759] ? __pfx_ppp_write+0x10/0x10 [ 117.847096][ T8759] __x64_sys_pwritev+0xf4/0x1c0 [ 117.847122][ T8759] x64_sys_call+0x768/0x2dc0 [ 117.847149][ T8759] do_syscall_64+0xc9/0x1c0 [ 117.847166][ T8759] ? clear_bhb_loop+0x55/0xb0 [ 117.847188][ T8759] ? clear_bhb_loop+0x55/0xb0 [ 117.847211][ T8759] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.847347][ T8759] RIP: 0033:0x7f745ec20809 [ 117.847363][ T8759] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 117.847387][ T8759] RSP: 002b:00007f745d297058 EFLAGS: 00000246 ORIG_RAX: 0000000000000128 [ 117.847420][ T8759] RAX: ffffffffffffffda RBX: 00007f745ede5fa0 RCX: 00007f745ec20809 [ 117.847446][ T8759] RDX: 0000000000000001 RSI: 0000000020000080 RDI: 0000000000000003 [ 117.847461][ T8759] RBP: 00007f745d2970a0 R08: 0000000000000000 R09: 0000000000000000 [ 117.847473][ T8759] R10: 0000000000000005 R11: 0000000000000246 R12: 0000000000000001 [ 117.847483][ T8759] R13: 0000000000000000 R14: 00007f745ede5fa0 R15: 00007ffc6e0393a8 [ 117.847499][ T8759] [ 118.084268][ T8765] loop3: detected capacity change from 0 to 1024 [ 118.193225][ T3324] EXT4-fs (loop4): unmounting filesystem 00000007-0000-0000-0000-000000000000. [ 118.224591][ T8765] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 118.272215][ T3331] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.308276][ T8777] loop3: detected capacity change from 0 to 512 [ 118.359433][ T8777] EXT4-fs (loop3): can't mount with commit=3, fs mounted w/o journal [ 118.382950][ T8782] loop4: detected capacity change from 0 to 1024 [ 118.411067][ T8782] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 118.490642][ T3324] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.655802][ T8803] loop5: detected capacity change from 0 to 1024 [ 118.703039][ T8803] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 118.719982][ T8809] loop6: detected capacity change from 0 to 512 [ 118.764225][ T8809] EXT4-fs (loop6): too many log groups per flexible block group [ 118.771996][ T8809] EXT4-fs (loop6): failed to initialize mballoc (-12) [ 118.786068][ T8818] loop3: detected capacity change from 0 to 512 [ 118.793866][ T8809] EXT4-fs (loop6): mount failed [ 118.801873][ T8819] __nla_validate_parse: 1 callbacks suppressed [ 118.801888][ T8819] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1460'. [ 118.809667][ T8818] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 118.824848][ T8818] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=1843c01c, mo2=0002] [ 118.838477][ T8818] EXT4-fs (loop3): couldn't mount RDWR because of unsupported optional features (80) [ 118.847982][ T8818] EXT4-fs (loop3): Skipping orphan cleanup due to unknown ROCOMPAT features [ 118.875109][ T8818] EXT4-fs warning (device loop3): dx_probe:893: inode #2: comm syz.3.1469: dx entry: limit 65535 != root limit 120 [ 118.887358][ T8818] EXT4-fs warning (device loop3): dx_probe:966: inode #2: comm syz.3.1469: Corrupt directory, running e2fsck is recommended [ 118.945932][ T8825] tmpfs: Bad value for 'mpol' [ 118.992567][ T8831] loop4: detected capacity change from 0 to 512 [ 119.002311][ T8828] loop3: detected capacity change from 0 to 2048 [ 119.010627][ T8831] ext4 filesystem being mounted at /275/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 119.031858][ T8828] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2240: inode #12: comm syz.3.1474: corrupted in-inode xattr: bad e_name length [ 119.049720][ T8828] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2240: inode #12: comm syz.3.1474: corrupted in-inode xattr: bad e_name length [ 119.069647][ T8828] netlink: 'syz.3.1474': attribute type 10 has an invalid length. [ 119.150575][ T8849] loop3: detected capacity change from 0 to 1024 [ 119.300367][ T8862] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1479'. [ 119.309590][ T8862] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1479'. [ 119.318577][ T8862] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1479'. [ 119.337838][ T8863] loop4: detected capacity change from 0 to 512 [ 119.374422][ T8863] EXT4-fs (loop4): too many log groups per flexible block group [ 119.382173][ T8863] EXT4-fs (loop4): failed to initialize mballoc (-12) [ 119.389309][ T8863] EXT4-fs (loop4): mount failed [ 119.425767][ T8870] syz.4.1485[8870] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 119.425905][ T8870] syz.4.1485[8870] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 119.437680][ T8870] syz.4.1485[8870] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 119.475421][ T8873] tmpfs: Bad value for 'mpol' [ 119.650879][ T8885] loop4: detected capacity change from 0 to 2048 [ 119.653162][ T8889] loop6: detected capacity change from 0 to 512 [ 119.673159][ T8885] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2240: inode #12: comm syz.4.1490: corrupted in-inode xattr: bad e_name length [ 119.701922][ T8889] EXT4-fs (loop6): can't mount with commit=3, fs mounted w/o journal [ 119.715072][ T8885] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2240: inode #12: comm syz.4.1490: corrupted in-inode xattr: bad e_name length [ 119.747791][ T8885] netlink: 'syz.4.1490': attribute type 10 has an invalid length. [ 119.811923][ T8899] syz.6.1496[8899] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 119.811974][ T8899] syz.6.1496[8899] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 119.853738][ T8899] syz.6.1496[8899] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 119.872604][ T29] kauditd_printk_skb: 340 callbacks suppressed [ 119.872617][ T29] audit: type=1326 audit(1732710470.009:13134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8898 comm="syz.6.1496" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ef1ae0809 code=0x7ffc0000 [ 119.943784][ T8909] loop6: detected capacity change from 0 to 1024 [ 119.950389][ T29] audit: type=1326 audit(1732710470.049:13135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8898 comm="syz.6.1496" exe="/root/syz-executor" sig=0 arch=c000003e syscall=187 compat=0 ip=0x7f3ef1ae0809 code=0x7ffc0000 [ 119.974007][ T29] audit: type=1326 audit(1732710470.049:13136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8898 comm="syz.6.1496" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ef1ae0809 code=0x7ffc0000 [ 120.233514][ T8928] loop3: detected capacity change from 0 to 512 [ 120.249594][ T8928] EXT4-fs (loop3): can't mount with commit=3, fs mounted w/o journal [ 120.309390][ T8933] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1504'. [ 120.313055][ T8932] loop3: detected capacity change from 0 to 2048 [ 120.318475][ T8933] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1504'. [ 120.333776][ T8933] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1504'. [ 120.370804][ T8935] tmpfs: Bad value for 'mpol' [ 120.405096][ T8932] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2240: inode #12: comm syz.3.1507: corrupted in-inode xattr: bad e_name length [ 120.461275][ T8942] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2240: inode #12: comm syz.3.1507: corrupted in-inode xattr: bad e_name length [ 120.522512][ T8948] netlink: 'syz.3.1507': attribute type 10 has an invalid length. [ 120.641942][ T8956] netlink: 'syz.6.1516': attribute type 13 has an invalid length. [ 120.650043][ T8956] netlink: 152 bytes leftover after parsing attributes in process `syz.6.1516'. [ 120.668517][ T8958] FAULT_INJECTION: forcing a failure. [ 120.668517][ T8958] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 120.681701][ T8958] CPU: 1 UID: 0 PID: 8958 Comm: syz.3.1515 Not tainted 6.12.0-syzkaller-10296-gaaf20f870da0 #0 [ 120.692070][ T8958] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 120.702149][ T8958] Call Trace: [ 120.705498][ T8958] [ 120.708430][ T8958] dump_stack_lvl+0xf2/0x150 [ 120.713015][ T8958] dump_stack+0x15/0x20 [ 120.717186][ T8958] should_fail_ex+0x223/0x230 [ 120.721903][ T8958] should_fail+0xb/0x10 [ 120.726085][ T8958] should_fail_usercopy+0x1a/0x20 [ 120.731154][ T8958] _copy_from_user+0x1e/0xb0 [ 120.735849][ T8958] copy_msghdr_from_user+0x54/0x2a0 [ 120.741103][ T8958] ? __fget_files+0x17c/0x1c0 [ 120.745840][ T8958] __sys_sendmsg+0x13e/0x230 [ 120.750528][ T8958] __x64_sys_sendmsg+0x46/0x50 [ 120.755349][ T8958] x64_sys_call+0x2734/0x2dc0 [ 120.760127][ T8958] do_syscall_64+0xc9/0x1c0 [ 120.764629][ T8958] ? clear_bhb_loop+0x55/0xb0 [ 120.769310][ T8958] ? clear_bhb_loop+0x55/0xb0 [ 120.774003][ T8958] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.779926][ T8958] RIP: 0033:0x7f1438aa0809 [ 120.784381][ T8958] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 120.804086][ T8958] RSP: 002b:00007f1437117058 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 120.812509][ T8958] RAX: ffffffffffffffda RBX: 00007f1438c65fa0 RCX: 00007f1438aa0809 [ 120.820565][ T8958] RDX: 0000000000000000 RSI: 0000000020000940 RDI: 0000000000000003 [ 120.828547][ T8958] RBP: 00007f14371170a0 R08: 0000000000000000 R09: 0000000000000000 [ 120.836588][ T8958] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 120.844564][ T8958] R13: 0000000000000000 R14: 00007f1438c65fa0 R15: 00007ffe62b70548 [ 120.852624][ T8958] [ 120.862855][ T8962] loop4: detected capacity change from 0 to 512 [ 120.888962][ T8956] erspan0: refused to change device tx_queue_len [ 120.896014][ T8956] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 120.902987][ T8965] tmpfs: Bad value for 'mpol' [ 120.914225][ T8963] lo speed is unknown, defaulting to 1000 [ 120.924769][ T8956] dccp_invalid_packet: P.Data Offset(4) too small [ 120.925068][ T8962] EXT4-fs (loop4): can't mount with commit=3, fs mounted w/o journal [ 120.931885][ T8963] vcan0 speed is unknown, defaulting to 1000 [ 121.077248][ T8977] loop4: detected capacity change from 0 to 1024 [ 121.078322][ T8974] FAULT_INJECTION: forcing a failure. [ 121.078322][ T8974] name failslab, interval 1, probability 0, space 0, times 0 [ 121.094468][ T29] audit: type=1326 audit(1732710471.209:13137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8973 comm="syz.3.1523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1438aa0809 code=0x7ffc0000 [ 121.096318][ T8974] CPU: 1 UID: 0 PID: 8974 Comm: syz.3.1523 Not tainted 6.12.0-syzkaller-10296-gaaf20f870da0 #0 [ 121.119673][ T29] audit: type=1326 audit(1732710471.209:13138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8973 comm="syz.3.1523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1438aa0809 code=0x7ffc0000 [ 121.129924][ T8974] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 121.130004][ T8974] Call Trace: [ 121.130012][ T8974] [ 121.130020][ T8974] dump_stack_lvl+0xf2/0x150 [ 121.130046][ T8974] dump_stack+0x15/0x20 [ 121.130067][ T8974] should_fail_ex+0x223/0x230 [ 121.153509][ T29] audit: type=1326 audit(1732710471.209:13139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8973 comm="syz.3.1523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f1438a9f170 code=0x7ffc0000 [ 121.163504][ T8974] should_failslab+0x8f/0xb0 [ 121.166786][ T29] audit: type=1326 audit(1732710471.209:13140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8973 comm="syz.3.1523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f1438a9f2bf code=0x7ffc0000 [ 121.169708][ T8974] kmem_cache_alloc_noprof+0x52/0x320 [ 121.239987][ T8974] ? audit_log_start+0x34c/0x6b0 [ 121.244962][ T8974] audit_log_start+0x34c/0x6b0 [ 121.249834][ T8974] audit_seccomp+0x4b/0x130 [ 121.254349][ T8974] __seccomp_filter+0x6fa/0x1180 [ 121.259344][ T8974] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 121.265040][ T8974] ? vfs_write+0x596/0x920 [ 121.269472][ T8974] ? putname+0xcf/0xf0 [ 121.273567][ T8974] __secure_computing+0x9f/0x1c0 [ 121.278506][ T8974] syscall_trace_enter+0xd1/0x1f0 [ 121.283629][ T8974] ? fpregs_assert_state_consistent+0x83/0xa0 [ 121.289849][ T8974] do_syscall_64+0xaa/0x1c0 [ 121.294375][ T8974] ? clear_bhb_loop+0x55/0xb0 [ 121.299079][ T8974] ? clear_bhb_loop+0x55/0xb0 [ 121.303762][ T8974] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 121.309674][ T8974] RIP: 0033:0x7f1438aa0809 [ 121.314100][ T8974] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 121.333781][ T8974] RSP: 002b:00007f1437117058 EFLAGS: 00000246 ORIG_RAX: 0000000000000074 [ 121.342243][ T8974] RAX: ffffffffffffffda RBX: 00007f1438c65fa0 RCX: 00007f1438aa0809 [ 121.350289][ T8974] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 121.358268][ T8974] RBP: 00007f14371170a0 R08: 0000000000000000 R09: 0000000000000000 [ 121.366241][ T8974] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 121.374215][ T8974] R13: 0000000000000000 R14: 00007f1438c65fa0 R15: 00007ffe62b70548 [ 121.382197][ T8974] [ 121.385527][ T8974] audit: audit_lost=7 audit_rate_limit=0 audit_backlog_limit=64 [ 121.393288][ T8974] audit: out of memory in audit_log_start [ 121.425108][ T29] audit: type=1326 audit(1732710471.559:13141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8973 comm="syz.3.1523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f1438a9f21c code=0x7ffc0000 [ 121.474532][ T8984] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1525'. [ 121.513486][ T8981] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1520'. [ 121.574944][ T8988] loop3: detected capacity change from 0 to 2048 [ 121.606732][ T8988] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2240: inode #12: comm syz.3.1526: corrupted in-inode xattr: bad e_name length [ 121.628187][ T8988] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2240: inode #12: comm syz.3.1526: corrupted in-inode xattr: bad e_name length [ 121.663679][ T8988] netlink: 'syz.3.1526': attribute type 10 has an invalid length. [ 121.712415][ T8999] tmpfs: Bad value for 'mpol' [ 121.773317][ T9006] loop3: detected capacity change from 0 to 512 [ 121.808730][ T9006] EXT4-fs (loop3): can't mount with commit=3, fs mounted w/o journal [ 121.913189][ T9018] syz.2.1538[9018] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 121.913275][ T9018] syz.2.1538[9018] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 121.930740][ T9018] syz.2.1538[9018] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 121.933493][ T9021] loop5: detected capacity change from 0 to 512 [ 121.984253][ T9021] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 121.992255][ T9021] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=1843c01c, mo2=0002] [ 122.021462][ T9021] EXT4-fs (loop5): couldn't mount RDWR because of unsupported optional features (80) [ 122.031060][ T9021] EXT4-fs (loop5): Skipping orphan cleanup due to unknown ROCOMPAT features [ 122.044347][ T9021] EXT4-fs warning (device loop5): dx_probe:893: inode #2: comm syz.5.1540: dx entry: limit 65535 != root limit 120 [ 122.056561][ T9021] EXT4-fs warning (device loop5): dx_probe:966: inode #2: comm syz.5.1540: Corrupt directory, running e2fsck is recommended [ 122.114105][ T9029] syz.5.1543[9029] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 122.135797][ T9029] loop5: detected capacity change from 0 to 1024 [ 122.169014][ T9029] EXT4-fs: Ignoring removed nomblk_io_submit option [ 122.195135][ T9029] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 122.218178][ T9037] tmpfs: Bad value for 'mpol' [ 122.277156][ T9042] loop3: detected capacity change from 0 to 512 [ 122.299736][ T9042] EXT4-fs (loop3): can't mount with commit=3, fs mounted w/o journal [ 122.378106][ T9045] loop3: detected capacity change from 0 to 512 [ 122.405649][ T9045] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 122.414001][ T9045] EXT4-fs (loop3): bad geometry: first data block 0 is beyond end of filesystem (0) [ 122.523552][ T9054] loop3: detected capacity change from 0 to 1024 [ 122.541896][ T9054] EXT4-fs: Ignoring removed nomblk_io_submit option [ 122.543184][ T9054] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 122.761896][ T9064] tmpfs: Bad value for 'mpol' [ 122.801492][ T9060] loop3: detected capacity change from 0 to 8192 [ 122.845221][ T9069] loop4: detected capacity change from 0 to 512 [ 122.847857][ T9060] netlink: 'syz.3.1556': attribute type 322 has an invalid length. [ 122.850673][ T9069] EXT4-fs (loop4): can't mount with commit=3, fs mounted w/o journal [ 122.963883][ T9076] loop3: detected capacity change from 0 to 1024 [ 123.083463][ T9084] loop4: detected capacity change from 0 to 512 [ 123.110906][ T9084] EXT4-fs (loop4): too many log groups per flexible block group [ 123.118697][ T9084] EXT4-fs (loop4): failed to initialize mballoc (-12) [ 123.131362][ T9084] EXT4-fs (loop4): mount failed [ 123.207298][ T9091] loop3: detected capacity change from 0 to 1024 [ 123.216025][ T9091] EXT4-fs: Ignoring removed nomblk_io_submit option [ 123.218692][ T9091] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 123.324381][ T9102] loop3: detected capacity change from 0 to 512 [ 123.372030][ T9102] EXT4-fs (loop3): can't mount with commit=3, fs mounted w/o journal [ 123.384867][ T9108] loop5: detected capacity change from 0 to 1024 [ 123.886051][ T9146] loop6: detected capacity change from 0 to 1024 [ 123.973488][ T9158] loop3: detected capacity change from 0 to 2048 [ 124.043038][ T9158] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2240: inode #12: comm syz.3.1591: corrupted in-inode xattr: bad e_name length [ 124.090446][ T9158] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2240: inode #12: comm syz.3.1591: corrupted in-inode xattr: bad e_name length [ 124.105663][ T9158] netlink: 'syz.3.1591': attribute type 10 has an invalid length. [ 124.124285][ T9174] loop6: detected capacity change from 0 to 512 [ 124.149169][ T9174] EXT4-fs (loop6): can't mount with commit=3, fs mounted w/o journal [ 124.909393][ T29] kauditd_printk_skb: 629 callbacks suppressed [ 124.909412][ T29] audit: type=1400 audit(1732710475.049:13769): avc: denied { recv } for pid=4970 comm="kworker/u8:24" saddr=10.128.0.163 src=30030 daddr=10.128.15.195 dest=59756 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=0 Nov 27 12:27:55 syzkaller kern.w[ 124.944490][ T29] audit: type=1400 audit(1732710475.079:13770): avc: denied { read } for pid=3004 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=0 arn kernel: [ 1[ 124.967778][ T29] audit: type=1400 audit(1732710475.079:13771): avc: denied { read } for pid=3004 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=0 24.909393][ T29] kauditd_printk_skb: 629 callb[ 124.994610][ T29] audit: type=1400 audit(1732710475.129:13772): avc: denied { read } for pid=3004 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=0 acks suppressed[ 125.017423][ T29] audit: type=1400 audit(1732710475.129:13773): avc: denied { read } for pid=3004 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=0 Nov 27 12:27:55 syzkaller kern.[ 125.042802][ T29] audit: type=1400 audit(1732710475.179:13774): avc: denied { read } for pid=3004 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=0 notice kernel: [[ 125.065629][ T29] audit: type=1400 audit(1732710475.179:13775): avc: denied { read } for pid=3004 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=0 124.909412][ T29] audit: typ[ 125.090847][ T29] audit: type=1400 audit(1732710475.229:13776): avc: denied { read } for pid=3004 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=0 e=1400 audit(173[ 125.113910][ T29] audit: type=1400 audit(1732710475.229:13777): avc: denied { read } for pid=3004 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=0 2710475.049:13769): avc: denied[ 125.139188][ T29] audit: type=1400 audit(1732710475.269:13778): avc: denied { read } for pid=3004 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=0 { recv } for pid=4970 comm="kworker/u8:24" saddr=10.128.0.163 src=30030 daddr=10.128.15.195 dest=59756 netif=eth0 scontext=root:sysadm_r:sysadm_ Nov 27 12:27:55 syzkaller kern.notice kernel: [ 124.944490][ T29] audit: type=1400 audit(1732710475.079:13770): avc: denied { read } for pid=3004 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass Nov 27 12:27:55 syzkaller kern.notice kernel: [ 124.967778][ T29] audit: type=1400 audit(1732710475.079:13771): avc: denied { read } for pid=3004 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass Nov 27 12:27:55 syzkaller kern.notice kernel: [ 124.994610][ T29] audit: type=1400 audit(1732710475.129:13772): avc: denied { read } for pid=3004 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass Nov 27 12:27:55 syzkaller kern.notice kernel: [ 125.017423][ T29] audit: type=1400 audit(1732710475.129:13773): avc: denied { read } for pid=3004 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass Nov 27 12:27:55 syzkaller kern.notice kernel: [ 125.042802][ T29] audit: type=1400 audit(1732710475.179:13774): avc: denied { read } for pid=3004 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass Nov 27 12:27:55 syzkaller kern.notice kernel: [ 125.065629][ T29] audit: type=1400 audit(1732710475.179:13775): avc: denied { read } for pid=3004 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass Nov 27 12:27:55 syzkaller kern.notice kernel: [ 125.090847][ T29] audit: type=1400 audit(1732710475.229:13776): avc: denied { read } for pid=3004 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass Nov 27 12:27:55 syzkaller kern.notice kernel: [ 125.113910][ T29] audit: type=1400 audit(1732710475.229:13777): avc: denied { read } for pid=3004 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass Nov 27 12:27:55 syzkaller kern.notice kernel: [ 125.139188][ T29] audit: type=1400 audit(1732710475.269:13778): avc: denied { read } for pid=3004 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass Nov 27 12:27:59 syzkaller daemon.err dhcpcd[9200]: ps_bpf_start_bpf: bpf_open: Invalid argument Nov 27 12:27:59 syzkaller daemon.err dhcpcd[9200]: ps_root_recvmsg: Invalid argument Nov 27 12:27:59 syzkaller daemon.err dhcpcd[3060]: ps_sendpsmmsg: Connection refused Nov 27 12:27:59 syzkaller daemon.err dhcpcd[3060]: ps_root_recvmsgcb: failed to send message to pid 9200: Connection refused Nov 27 12:28:00 [ 130.014204][ T29] kauditd_printk_skb: 10 callbacks suppressed syzkaller daemon[ 130.014221][ T29] audit: type=1400 audit(1732710480.149:13789): avc: denied { read } for pid=3004 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=0 .err dhcpcd[9201]: ps_bpf_start_bpf: bpf_open: Invalid argument Nov 27 12:28:00 [ 130.052026][ T29] audit: type=1400 audit(1732710480.189:13790): avc: denied { read } for pid=3004 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=0 syzkaller kern.w[ 130.074610][ T29] audit: type=1400 audit(1732710480.189:13791): avc: denied { read } for pid=3004 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=0 arn kernel: [ 1[ 130.098064][ T29] audit: type=1400 audit(1732710480.189:13792): avc: denied { read } for pid=3004 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=0 30.014204][ T29] kauditd_print[ 130.123416][ T29] audit: type=1400 audit(1732710480.259:13793): avc: denied { read } for pid=3004 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=0 k_skb: 10 callba[ 130.146393][ T29] audit: type=1400 audit(1732710480.259:13794): avc: denied { read } for pid=3004 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=0 cks suppressed [ 130.169786][ T29] audit: type=1400 audit(1732710480.259:13795): avc: denied { read } for pid=3004 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=0 Nov 27 12:28:00 syzkaller kern.notice kernel: [ [ 130.196669][ T29] audit: type=1400 audit(1732710480.329:13796): avc: denied { read } for pid=3004 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=0 130.014221][ [ 130.219493][ T29] audit: type=1400 audit(1732710480.329:13797): avc: denied { read } for pid=3004 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=0 T29] audit: type[ 130.242840][ T29] audit: type=1400 audit(1732710480.329:13798): avc: denied { read } for pid=3004 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=0 =1400 audit(1732710480.149:13789): avc: denied { read } for pid=3004 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass Nov 27 12:28:00 syzkaller daemon.err dhcpcd[9201]: ps_root_recvmsg: Invalid argument Nov 27 12:28:00 syzkaller kern.notice kernel: [ 130.052026][ T29] audit: type=1400 audit(1732710480.189:13790): avc: denied { read } for pid=3004 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass Nov 27 12:28:00 syzkaller kern.notice kernel: [ 130.074610][ T29] audit: type=1400 audit(1732710480.189:13791): avc: denied { read } for pid=3004 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass Nov 27 12:28:00 syzkaller kern.notice kernel: [ 130.098064][ T29] audit: type=1400 audit(1732710480.189:13792): avc: denied { read } for pid=3004 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass Nov 27 12:28:00 syzkaller kern.notice kernel: [ 130.123416][ T29] audit: type=1400 audit(1732710480.259:13793): avc: denied { read } for pid=3004 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass Nov 27 12:28:00 syzkaller kern.notice kernel: [ 130.146393][ T29] audit: type=1400 audit(1732710480.259:13794): avc: denied { read } for pid=3004 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass Nov 27 12:28:00 syzkaller kern.notice kernel: [ 130.169786][ T29] audit: type=1400 audit(1732710480.259:13795): avc: denied { read } for pid=3004 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass Nov 27 12:28:00 syzkaller kern.notice kernel: [ 130.196669][ T29] audit: type=1400 audit(1732710480.329:13796): avc: denied { read } for pid=3004 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass Nov 27 12:28:00 syzkaller kern.notice kernel: [ 130.219493][ T29] audit: type=1400 audit(1732710480.329:13797): avc: denied { read } for pid=3004 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass Nov 27 12:28:00 syzkaller kern.notice kernel: [ 130.242840][ T29] audit: type=1400 audit(1732710480.329:13798): avc: denied { read } for pid=3004 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass Nov 27 12:28:00 syzkaller daemon.err dhcpcd[9202]: ps_bpf_start_bpf: bpf_open: Invalid argument Nov 27 12:28:00 syzkaller daemon.err dhcpcd[9202]: ps_root_recvmsg: Invalid argument Nov 27 12:28:01 syzkaller daemon.err dhcpcd[3060]: ps_sendpsmmsg: Connection refused Nov 27 12:28:01 syzkaller daemon.err dhcpcd[3060]: ps_root_recvmsgcb: failed to send message to pid 7767: Connection refused [ 131.438451][ C0] ================================================================== [ 131.446565][ C0] BUG: KCSAN: data-race in __tmigr_cpu_activate / tmigr_handle_remote [ 131.454735][ C0] [ 131.457044][ C0] write to 0xffff888237d205dc of 1 bytes by task 0 on cpu 1: [ 131.464412][ C0] __tmigr_cpu_activate+0x55/0x200 [ 131.469526][ C0] tmigr_cpu_activate+0x8a/0xc0 [ 131.474375][ C0] timer_clear_idle+0x28/0x100 [ 131.479135][ C0] tick_nohz_restart_sched_tick+0x22/0x110 [ 131.484933][ C0] tick_nohz_idle_exit+0xfe/0x1d0 [ 131.489949][ C0] do_idle+0x1eb/0x230 [ 131.494035][ C0] cpu_startup_entry+0x25/0x30 [ 131.498786][ C0] start_secondary+0x96/0xa0 [ 131.503369][ C0] common_startup_64+0x12c/0x137 [ 131.508295][ C0] [ 131.510605][ C0] read to 0xffff888237d205dc of 1 bytes by interrupt on cpu 0: [ 131.518131][ C0] tmigr_handle_remote+0x26e/0x940 [ 131.523232][ C0] run_timer_softirq+0x5f/0x70 [ 131.528005][ C0] handle_softirqs+0xbf/0x280 [ 131.532671][ C0] __irq_exit_rcu+0x3a/0xc0 [ 131.537166][ C0] sysvec_apic_timer_interrupt+0x73/0x80 [ 131.542797][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 131.548781][ C0] __tsan_read8+0x2c/0x180 [ 131.553203][ C0] kthread_data+0x55/0x70 [ 131.557521][ C0] wq_worker_running+0x1a/0x130 [ 131.562384][ C0] worker_thread+0x5f4/0x6f0 [ 131.566963][ C0] kthread+0x1d1/0x210 [ 131.571024][ C0] ret_from_fork+0x4b/0x60 [ 131.575428][ C0] ret_from_fork_asm+0x1a/0x30 [ 131.580186][ C0] [ 131.582508][ C0] value changed: 0x00 -> 0x01 [ 131.587175][ C0] [ 131.589508][ C0] Reported by Kernel Concurrency Sanitizer on: [ 131.595662][ C0] CPU: 0 UID: 0 PID: 3396 Comm: kworker/0:3 Not tainted 6.12.0-syzkaller-10296-gaaf20f870da0 #0 [ 131.606068][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 131.616118][ C0] Workqueue: 0x0 (events) [ 131.620562][ C0] ================================================================== Nov 27 12:28:01 syzkaller kern.err kernel: [ 131.438451][ C0] ================================================================== Nov 27 12:28:01 syzkaller kern.err kernel: [ 131.446565][ C0] BUG: KCSAN: data-race in __tmigr_cpu_activate / tmigr_handle_remote Nov 27 12:28:01 syzkaller kern.err kernel: [ 131.454735][ C0] Nov 27 12:28:01 syzkaller kern.err kernel: [ 131.457044][ C0] write to 0xffff888237d205dc of 1 bytes by task 0 on cpu 1: Nov 27 12:28:01 syzkaller kern.warn kernel: [ 131.464412][ C0] __tmigr_cpu_activate+0x55/0x200 Nov 27 12:28:01 syzkaller kern.warn kernel: [ 131.469526][ C0] tmigr_cpu_activate+0x8a/0xc0 Nov 27 12:28:01 syzkaller kern.warn kernel: [ 131.474375][ C0] timer_clear_idle+0x28/0x100 Nov 27 12:28:01 syzkaller kern.warn kernel: [ 131.479135][ C0] tick_nohz_restart_sched_tick+0x22/0x110 Nov 27 12:28:01 syzkaller kern.warn kernel: [ 131.484933][ C0] tick_nohz_idle_exit+0xfe/0x1d0 Nov 27 12:28:01 syzkaller kern.warn kernel: [ 131.489949][ C0] do_idle+0x1eb/0x230 Nov 27 12:28:01 syzkaller kern.warn kernel: [ 131.494035][ C0] cpu_startup_entry+0x25/0x30 Nov 27 12:28:01 syzkaller kern.warn kernel: [ 131.498786][ C0] start_secondary+0x96/0xa0 Nov 27 12:28:01 syzkaller kern.warn kernel: [ 131.503369][ C0] common_startup_64+0x12c/0x137 Nov 27 12:28:01 syzkaller kern.err kernel: [ 131.508295][ C0] Nov 27 12:28:01 syzkaller kern.err kernel: [ 131.510605][ C0] read to 0xffff888237d205dc of 1 bytes by interrupt on cpu 0: Nov 27 12:28:01 syzkaller kern.warn kernel: [ 131.518131][ C0] tmigr_handle_remote+0x26e/0x940 Nov 27 12:28:01 syzkaller kern.warn kernel: [ 131.523232][ C0] run_timer_softirq+0x5f/0x70 Nov 27 12:28:01 syzkaller kern.warn kernel: [ 131.528005][ C0] handle_softirqs+0xbf/0x280 Nov 27 12:28:01 syzkaller kern.warn kernel: [ 131.532671][ C0] __irq_exit_rcu+0x3a/0xc0 Nov 27 12:28:01 syzkaller kern.warn kernel: [ 131.537166][ C0] sysvec_apic_timer_interrupt+0x73/0x80 Nov 27 12:28:01 syzkaller kern.warn kernel: [ 131.542797][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 Nov 27 12:28:01 syzkaller kern.warn kernel: [ 131.548781][ C0] __tsan_read8+0x2c/0x180 Nov 27 12:28:01 syzkaller kern.warn kernel: [ 131.553203][ C0] kthread_data+0x55/0x70 Nov 27 12:28:01 syzkaller kern.warn kernel: [ 131.557521][ C0] wq_worker_running+0x1a/0x130 Nov 27 12:28:01 syzkaller kern.warn kernel: [ 131.562384][ C0] worker_thread+0x5f4/0x6f0 Nov 27 12:28:01 syzkaller kern.warn kernel: [ 131.566963][ C0] kthread+0x1d1/0x210 Nov 27 12:28:01 syzkaller kern.warn kernel: [ 131.571024][ C0] ret_from_fork+0x4b/0x60 Nov 27 12:28:01 syzkaller kern.warn kernel: [ 131.575428][ C0] ret_from_fork_asm+0x1a/0x30 Nov 27 12:28:01 syzkaller kern.err kernel: [ 131.580186][ C0] Nov 27 12:28:01 syzkaller kern.err kernel: [ 131.582508][ C0] value changed: 0x00 -> 0x01 Nov 27 12:28:01 syzkaller kern.err kernel: [ 131.587175][ C0] Nov 27 12:28:01 syzkaller kern.err kernel: [ 131.589508][ C0] Reported by Kernel Concurrency Sanitizer on: Nov 27 12:28:01 syzkaller kern.warn kernel: [ 131.595662][ C0] CPU: 0 UID: 0 PID: 3396 Comm: kworker/0:3 Not tainted 6.12.0-syzkaller-10296-gaaf20f870da0 #0 Nov 27 12:28:01 syzkaller kern.warn kernel: [ 131.606068][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 Nov 27 12:28:01 syzkaller kern.warn kernel: [ 131.616118][ C0] Workqueue: 0x0 (events) Nov 27 12:28:01 syzkaller kern.err kernel: [ 131.620562][ C0] ================================================================== Nov 27 12:28:04 syzkaller daemon.err dhcpcd[3060]: ps_sendpsmmsg: Connection refused Nov 27 12:28:04 syzkaller daemon.err dhcpcd[3060]: ps_root_recvmsgcb: failed to send message to pid 6248: Connection refused Nov 27 12:28:05 syzkaller daemon.err dhcpcd[3060]: ps_sendpsmmsg: Connection refused Nov 27 12:28:05 syzkaller daemon.err dhcpcd[3060]: ps_root_recvmsgcb: failed to send message to pid 6276: Connection refused [ 137.041668][ T29] kauditd_printk_skb: 49 callbacks suppressed [ 137.041684][ T29] audit: type=1400 audit(1732710487.179:13848): avc: denied { read } for pid=3004 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=0 Nov 27 12:28:07 syzkaller daemon.err dhcpcd[3060]: ps_sendpsmmsg[ 137.075088][ T29] audit: type=1400 audit(1732710487.209:13849): avc: denied { read } for pid=3004 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=0 : Connection ref[ 137.098071][ T29] audit: type=1400 audit(1732710487.209:13850): avc: denied { read } for pid=3004 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=0 used Nov 27 12:[ 137.121499][ T29] audit: type=1400 audit(1732710487.209:13851): avc: denied { read } for pid=3004 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=0 28:07 syzkaller kern.warn kernel: [ 137.041668][ 137.148511][ T29] audit: type=1400 audit(1732710487.279:13852): avc: denied { read } for pid=3004 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=0 [ T29] kauditd[ 137.171134][ T29] audit: type=1400 audit(1732710487.279:13853): avc: denied { read } for pid=3004 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=0 _printk_skb: 49 [ 137.194541][ T29] audit: type=1400 audit(1732710487.279:13854): avc: denied { read } for pid=3004 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=0 callbacks suppre[ 137.218810][ T29] audit: type=1400 audit(1732710487.349:13855): avc: denied { read } for pid=3004 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=0 ssed Nov 27 12:[ 137.241433][ T29] audit: type=1400 audit(1732710487.349:13856): avc: denied { read } for pid=3004 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=0 28:07 syzkaller [ 137.264892][ T29] audit: type=1400 audit(1732710487.359:13857): avc: denied { read } for pid=3004 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=0 kern.notice kernel: [ 137.041684][ T29] audit: type=1400 audit(1732710487.179:13848): avc: denied { read } for pid=3004 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass Nov 27 12:28:07 syzkaller daemon.err dhcpcd[3060]: ps_root_recvmsgcb: failed to send message to pid 6394: Connection refused Nov 27 12:28:07 syzkaller kern.notice kernel: [ 137.075088][ T29] audit: type=1400 audit(1732710487.209:13849): avc: denied { read } for pid=3004 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass Nov 27 12:28:07 syzkaller kern.notice kernel: [ 137.098071][ T29] audit: type=1400 audit(1732710487.209:13850): avc: denied { read } for pid=3004 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass Nov 27 12:28:07 syzkaller kern.notice kernel: [ 137.121499][ T29] audit: type=1400 audit(1732710487.209:13851): avc: denied { read } for pid=3004 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass Nov 27 12:28:07 syzkaller kern.notice kernel: [ 137.148511][ T29] audit: type=1400 audit(1732710487.279:13852): avc: denied { read } for pid=3004 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass Nov 27 12:28:07 syzkaller kern.notice kernel: [ 137.171134][ T29] audit: type=1400 audit(1732710487.279:13853): avc: denied { read } for pid=3004 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass Nov 27 12:28:07 syzkaller kern.notice kernel: [ 137.194541][ T29] audit: type=1400 audit(1732710487.279:13854): avc: denied { read } for pid=3004 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass Nov 27 12:28:07 syzkaller kern.notice kernel: [ 137.218810][ T29] audit: type=1400 audit(1732710487.349:13855): avc: denied { read } for pid=3004 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass Nov 27 12:28:07 syzkaller kern.notice kernel: [ 137.241433][ T29] audit: type=1400 audit(1732710487.349:13856): avc: denied { read } for pid=3004 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass Nov 27 12:28:07 syzkaller kern.notice kernel: [ 137.264892][ T29] audit: type=1400 audit(1732710487.359:13857): avc: denied { read } for pid=3004 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass Nov 27 12:28:07 syzkaller daemon.err dhcpcd[3060]: ps_sendpsmmsg: Connection refused Nov 27 12:28:07 syzkaller daemon.err dhcpcd[3060]: ps_root_recvmsgcb: failed to send message to pid 6385: Connection refused