last executing test programs: 3.285395808s ago: executing program 1 (id=122): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) 3.252905139s ago: executing program 1 (id=124): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), r0) sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x3c, r1, 0x1, 0x70bd26, 0xa1ff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0xfffffffffffffe54}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='net/kcm\x00') r3 = socket$netlink(0x10, 0x3, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000480)='\xac\xed\x00\x00') r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00', r4}, 0x10) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r3, 0x4018f50b, &(0x7f0000000140)={0x1, 0x2, 0x81}) r5 = socket$kcm(0x10, 0x2, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000c00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r8}, 0x10) sendmmsg(0xffffffffffffffff, &(0x7f0000001d00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x24005805) sendmsg$kcm(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)=[{0x0}], 0x1}, 0x0) sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848110000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) socket$inet6(0xa, 0x0, 0x0) memfd_create(&(0x7f0000000100)='\vem\xda\x99R@m\xfc\xfe\x9b#*\xff', 0x0) mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x8000300000d, 0x50, r2, 0xffffd000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r9, 0x1, 0x1a, &(0x7f000002eff0)={0x135, &(0x7f0000000000)=[{}]}, 0x10) faccessat2(r2, &(0x7f0000000040)='\x00', 0x1, 0x1300) 2.340788033s ago: executing program 3 (id=135): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) 2.309456594s ago: executing program 3 (id=136): syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000040)={[{@noquota}]}, 0x1, 0x775, &(0x7f0000001180)="$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") r0 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x88882, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./bus\x00', 0x1c5902, 0x2d) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x37, 0x1, 0x0, 0x0, 0x0, 0x4007, 0x510, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x4c58, 0x10000, 0x0, 0x4, 0x8, 0x20002, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0x0}, 0x18) write(r2, &(0x7f0000004200), 0x0) sendfile(r2, r1, 0x0, 0x7ffff000) fallocate(r0, 0x0, 0x0, 0x1001f4) 2.263960464s ago: executing program 1 (id=138): syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000040)={[{@noquota}]}, 0x1, 0x775, &(0x7f0000001180)="$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") r0 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x88882, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./bus\x00', 0x1c5902, 0x2d) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="74721f195e7ffbf2dab21a3b61d661b8652dec6d8a4bfa9d1cb5cd86007a89d5f3793476dffa2235ea4b6aa96194efb996d3c983a519bf89f5934e8b40a280a7dccfd903adf5a77e92281efe058b1729de514d2e06ff9f1e7c2e6a6b25050d9de23361744f7bcca1e581752bdb2013", @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r4, @ANYBLOB=',version=9p2000.u,\x00']) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000380)={[{@init_itable_val}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@max_batch_time={'max_batch_time', 0x3d, 0x131}}, {@mblk_io_submit}, {@quota}]}, 0x3, 0x437, &(0x7f0000000d80)="$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") lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f0000000300), &(0x7f0000000040)=ANY=[], 0xfe37, 0x0) unlink(&(0x7f0000000180)='./file1\x00') write(r2, &(0x7f0000004200)='t', 0x1) sendfile(r2, r1, 0x0, 0x7ffff000) fallocate(r0, 0x0, 0x0, 0x1001f4) 2.048072088s ago: executing program 0 (id=140): bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000000000000000000001800", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 1.778692272s ago: executing program 0 (id=141): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRESDEC, @ANYRES16, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000fd000000ff0019ff0900000025b2fe0b72a3a0aa0618daa82eba8b5085ac1928bc9b7984e767d478cab432e574085d644915e9a748972173cc4cb14c50d1ed7e6eed9aee4a2d35a35aa76deb984b90e3198af9156b8f957850cdce9881676baedb8a7495c895efefd252f7256098467ca4b89bec2d2978d425ab21c08107dbf6fb"], 0x50) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x4008, 0x7, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x20, &(0x7f0000000a00)=ANY=[@ANYBLOB="1800000001040021001b00000003000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000000000095000000000000006d20f4ff00000000b7080000000000007b8af8ff00000000b7080000020000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a5000000181d0000", @ANYRES32=r0, @ANYBLOB="0000000000000000016a080006000000bf91000000000000b7020000000000008500000085000000b7000000000000009500000000000000"], 0x0, 0xfffdffff, 0x0, 0x0, 0x0, 0x56, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x31, &(0x7f0000000280)=ANY=[@ANYRES64=r0], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) connect$inet(r2, &(0x7f0000000480)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r2, &(0x7f0000001600), 0x3, 0x8010) shutdown(r2, 0x1) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000100)='kfree\x00', r1, 0x0, 0x8}, 0x18) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) gettid() r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x50) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) connect$netlink(r6, &(0x7f0000000040)=@unspec, 0xc) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1f, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095", @ANYRESHEX=r3, @ANYRESHEX=r3, @ANYRESDEC=r5, @ANYRES8, @ANYRES8], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x18) r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000006c0), 0x2000) r9 = socket(0x1a, 0x80b, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r9) getsockname$packet(r9, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$tipc(r9, &(0x7f00000005c0)={&(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x3, {0x2, 0x2, 0x4}}, 0x10, &(0x7f0000000440)=[{&(0x7f0000000880)="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", 0xfa}], 0x2d, &(0x7f00000004c0)="ed273236707aa5b2dbe46b21899d72530e4ef06ffc85a23714ee5342f293ef19862b60dba4d03fb390028517f89fb6b4d8f9749223b6faa20df55c30131c4280b8f45abba933e922103650", 0x4b}, 0x4c050) read(r8, &(0x7f0000000200)=""/209, 0x128) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r8, 0x4040534e, &(0x7f0000000080)={0x2bd, @tick=0x5}) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r8, 0xc0105303, &(0x7f0000000180)={0x2, 0x6, 0x6}) ioctl$PIO_UNIMAP(r4, 0x4b67, &(0x7f0000000200)={0x1, &(0x7f00000000c0)=[{0x7fff, 0xfff9}]}) 1.697744254s ago: executing program 3 (id=142): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x11ff, &(0x7f0000001280)="$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") r0 = syz_io_uring_setup(0x109, &(0x7f0000000140)={0x0, 0x114db, 0x0, 0x1, 0x89}, 0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, r1, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x29c780}) io_uring_enter(r0, 0x3518, 0xaddf, 0x2, 0x0, 0x0) 1.496011636s ago: executing program 1 (id=143): getsockopt$TIPC_SOCK_RECVQ_DEPTH(0xffffffffffffffff, 0x10f, 0x84, &(0x7f0000000100), &(0x7f0000000140)=0x4) 1.380388798s ago: executing program 1 (id=145): syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000040)={[{@noquota}]}, 0x1, 0x775, &(0x7f0000001180)="$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") r0 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x88882, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./bus\x00', 0x1c5902, 0x2d) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="74721f195e7ffbf2dab21a3b61d661b8652dec6d8a4bfa9d1cb5cd86007a89d5f3793476dffa2235ea4b6aa96194efb996d3c983a519bf89f5934e8b40a280a7dccfd903adf5a77e92281efe058b1729de514d2e06ff9f1e7c2e6a6b25050d9de23361744f7bcca1e581752bdb2013", @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r4, @ANYBLOB=',version=9p2000.u,\x00']) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000380)={[{@init_itable_val}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@max_batch_time={'max_batch_time', 0x3d, 0x131}}, {@mblk_io_submit}, {@quota}]}, 0x3, 0x437, &(0x7f0000000d80)="$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") lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f0000000300), &(0x7f0000000040)=ANY=[], 0xfe37, 0x0) unlink(&(0x7f0000000180)='./file1\x00') write(r2, &(0x7f0000004200)='t', 0x1) sendfile(r2, r1, 0x0, 0x7ffff000) fallocate(r0, 0x0, 0x0, 0x1001f4) 1.379933888s ago: executing program 3 (id=147): r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000380)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@data_err_ignore}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@data_err_ignore}, {@grpquota}, {@nobh}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000000a40)="$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") openat(0xffffffffffffff9c, &(0x7f00000005c0)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x441, 0x20) io_setup(0x6, &(0x7f0000001380)) socketpair$nbd(0x1, 0x1, 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x40002002) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000020000000000000000085000000ae00000095"], &(0x7f0000001b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x1000}, 0x18) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'geneve0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x10, 0x1}}]}}, @TCA_RATE={0x6}]}, 0x4c}, 0x1, 0x0, 0x0, 0x48801}, 0x0) io_setup(0x401, &(0x7f0000000100)=0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="340000001400b59500000000000000", @ANYRES32, @ANYBLOB="14000200ff02"], 0x34}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) io_destroy(r3) sendmsg$nl_generic(r0, &(0x7f0000000580)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)=ANY=[@ANYBLOB="14bd7400fddbdf2516000000"], 0x14}, 0x1, 0x0, 0x0, 0x4008810}, 0x8800) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) truncate(&(0x7f0000000900)='./file1\x00', 0x3000000) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) 1.336801169s ago: executing program 2 (id=148): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x400}, 0x100002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000040)={r2, &(0x7f0000000280)="806786eb2707d3ecfb12e772fac270b0e988ebda2cdea3fab820ec8b1837736d3990be93da4da66bc84a21c4f9e4cf4d47ca2b0ec2133b0cb007d170d654081cc00d8ba8fad99cb68fe83c9ddd1bb7a95f40b6ae0c6f95370b9bd5afff24f37b", &(0x7f0000000300)=""/193}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=ANY=[@ANYBLOB="140000001000040000000000000000000300000a20000000000a05000000000000000000070000000900010073797a300000000044000000090a010400000000000000000700ffff08000a40000000030900020073797a31000000000900010073797a3000000000080005400000002105000d40930000005c0000000c0a01020000000000000000070000000900020073797a31000000000900010073797a3000000000300003802c0000800400018024000b80100001800c0001"], 0xe8}, 0x1, 0x0, 0x0, 0x10}, 0x0) 1.29420444s ago: executing program 4 (id=149): rt_sigaction(0x40, &(0x7f0000000500)={&(0x7f0000000380)="2437460f1c2bdfd5c4a2f10027460f38e7418f69d8909ca3000810ffa5c43b3be5c436fe0d4e486df513bb559a00000f75bed5370b1c2665d2950e000000dbf5", 0x4000000, 0x0}, 0x0, 0x8, &(0x7f0000001540)) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='stat\x00') preadv(r0, &(0x7f0000000340)=[{&(0x7f00000013c0)=""/125, 0x7d}], 0x1, 0x0, 0xffffffff) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002078316e00000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000000000008500000006000000850000000500000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r1}, 0x10) getpgid(0x0) r2 = socket$kcm(0x10, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_BEACON(r3, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f00000003c0)={0x4c, r4, 0x1, 0x4, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0xfffffffd}}}}, [@NL80211_ATTR_IE_ASSOC_RESP={0x24, 0xe, [@ext_channel_switch={0x1c, 0x4, {0xfc, 0x0, 0x38}}, @peer_mgmt={0x75, 0x18, {0x0, 0x0, @val, @val, @val="669e5eced39f2c34e6904ebbbb27ac48"}}]}]}, 0x4c}}, 0x10) sendmsg$kcm(r2, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000200)="d8000000210081044e81f782db44b9040a00000000fe0500002015000600142603600e1209000a0000b94dcf5c0468c1d67f6f94007134cfeee0800089e408e8d8ef52b40800de00e06bbace8017cbec4c2ee5a7cef4090000001fb79164075ee4ce1b14d6d930dfe1d9db22fe7c9f8775730d16a4683f1aeb4edbb57a5035ccb29e00360db70100000040fad95667e006dcdf969b3ef35ce3bb9ad809d561cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a83100043370e9701008400002d3bc75dc0bb9dd33e438c0000000000000000", 0xd8}], 0x1}, 0x880) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0xa, &(0x7f0000000280)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x63, 0x11, 0x20}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r5}}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r6, &(0x7f00000000c0)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) dup(r6) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r8, r7) 1.191183181s ago: executing program 4 (id=150): syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000040)={[{@noquota}]}, 0x1, 0x775, &(0x7f0000001180)="$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") r0 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x88882, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./bus\x00', 0x1c5902, 0x2d) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pipe2$9p(0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)=ANY=[]) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000380)={[{@init_itable_val}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@max_batch_time={'max_batch_time', 0x3d, 0x131}}, {@mblk_io_submit}, {@quota}]}, 0x3, 0x437, &(0x7f0000000d80)="$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") lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f0000000300), &(0x7f0000000040)=ANY=[], 0xfe37, 0x0) unlink(&(0x7f0000000180)='./file1\x00') write(r2, &(0x7f0000004200)='t', 0x1) sendfile(r2, r1, 0x0, 0x7ffff000) fallocate(r0, 0x0, 0x0, 0x1001f4) 1.177792961s ago: executing program 2 (id=151): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r1 = fcntl$dupfd(r0, 0x0, r0) read$usbfs(r1, 0x0, 0x0) write$tun(r1, &(0x7f0000000400)=ANY=[], 0xa2) 1.056015823s ago: executing program 2 (id=152): syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000040)={[{@noquota}]}, 0x1, 0x775, &(0x7f0000001180)="$eJzs3c9rXNUeAPDvnSRNm/a95MGD9+oqIGigdGJqbBVcVFyIYKGga9thMg01k0zJTEoTAlpEcCOouBB007U/6s6tP7b6X7gQS9W0WHEhkTu5t502M2mSJpnqfD5wM+fceyfnfOf+OGfmHu4NoGeNpn8KEYcj4t0kYjibn0TEQDPVH3Fybb1bK8vldEpidfXlX5LmOjdXlsvR8p7UwSzz/4j45q2II4X15dYXl2ZK1WplPsuPN2YvjNcXl46eny1NV6Yrc8cnJiePnXjqxPGdi/W375cOXXvvhcc/P/nHm/+7+s63SZyMQ9my1jh2ymiMZp/JQPoR3uX5nS6sy5JuV4BtSQ/NvrWjPA7HcPQ1UwDAP9nrEbEKAPSYRPsPAD0m/x3g5spyOZ+6+4vE3rr+XETsX4s/v765tqQ/u2a3v3kddOhmcteVkSQiRnag/NGI+PjLVz9Np9il65AA7bxxOSLOjoyuP/8n68YsbNUTGyzbl72O3jPf+Q/2zldp/+fpdv2/wu3+T7Tp/wy2OXa3477H/4EdKGQDaf/v2Zaxbbda4s+M9GW5fzX7fAPJufPVSnpu+3dEjMXAYJqf2KCMsRt/3ui0rLX/9+v7r32Slp++3lmj8FP/4N3vmSo1Sg8Sc6vrlyMe6W8Xf3J7+ycd+r+nN1nGi8+8/VGnZWn8abz5tD7+yEYn7Y7VKxGPtd3+d0a0JRuOTxxv7g7j+U7Rxhc/fDjUqfzW7Z9Oafn5d4G9kG7/oY3jH0lax2vWt17Gd1eGv+607P7xt9//9yWvNNN5P+JSqdGYn4jYl7y0fv6xO+/N8/n6afxjj7Y//jfa/9PvhGc3GX//tZ8/2378uyuNf2pL23/riau3Zvo6lb+57T/ZTI1lczZz/ttsBR/kswMAAAAAAAAAAAAAAAAAAAAAAACAzSpExKFICsXb6UKhWFx7hvd/Y6hQrdUbR87VFuamovms7JEYKOS3uhxuuR/qRHY//Dx/7J78kxHxn4j4YPBAkt9HcarLsQMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABA7mCH5/+nfhzsdu0AgF2zv9sVAAD2nPYfAHqP9h8Aeo/2HwB6j/YfAHqP9h8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIBddvrUqXRa/X1luZzmpy4uLszULh6dqtRnirML5WK5Nn+hOF2rTVcrxXJt9n7/r1qrXZiMuYVL441KvTFeX1w6M1tbmGucOT9bmq6cqQzsSVQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAsDX1xaWZUrVamZfYRmL14ahG9xN92e70sNRnTxPJw1GNHU50+cQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8DfxVwAAAP//02Ii/w==") r0 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x88882, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./bus\x00', 0x1c5902, 0x2d) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x37, 0x1, 0x0, 0x0, 0x0, 0x4007, 0x510, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x4c58, 0x10000, 0x0, 0x4, 0x8, 0x20002, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0x0}, 0x18) write(r2, &(0x7f0000004200), 0x0) sendfile(r2, r1, 0x0, 0x7ffff000) fallocate(r0, 0x0, 0x0, 0x1001f4) 1.000190694s ago: executing program 1 (id=153): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a80)={{r2}, &(0x7f0000000a00), &(0x7f0000000a40)=r1}, 0x20) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000bc0)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000200180000000000000000000850000007b00000095"], &(0x7f00000003c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sched_switch\x00', r3, 0x0, 0xfffffffffffff801}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r2}, &(0x7f0000000880), &(0x7f00000008c0)=r1}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000010000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000008b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x6, 0x80, 0x3, 0xff, 0x5e, 0x8, 0x0, 0x3, 0x8b008, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x1, @perf_bp={0x0, 0x8}, 0x400, 0x81, 0xffffffff, 0x6, 0x8, 0x204002, 0x0, 0x0, 0x0, 0x0, 0x400000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x9) write$UHID_CREATE(0xffffffffffffffff, &(0x7f0000000780)={0x0, {'syz1\x00', 'syz0\x00', 'syz1\x00', &(0x7f00000000c0)=""/43, 0x2b, 0x0, 0x0, 0x0, 0x800}}, 0x120) write$UHID_DESTROY(0xffffffffffffffff, &(0x7f0000000080), 0x4) r5 = openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x4, 0x5, 0x0, 0xffffffffffffffff, 0x4000000}, 0x50) capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7}) bpf$MAP_CREATE(0x0, &(0x7f0000001b00)=@bloom_filter={0x1e, 0x0, 0x3, 0xfffffffb, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x0, 0xd}, 0x50) r6 = socket$inet6(0xa, 0x3, 0x3c) setsockopt$inet6_IPV6_RTHDR(r6, 0x29, 0x39, &(0x7f0000001640)=ANY=[@ANYBLOB="000202"], 0x18) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x18, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r7}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='sys_enter\x00', r8}, 0x10) setfsgid(0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="010000000400000008000000"], 0x48) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000600), r9) ioctl$EVIOCGABS20(r5, 0x80184560, &(0x7f0000000180)=""/6) sendmsg$NL802154_CMD_NEW_INTERFACE(r9, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={0x0}, 0x1, 0x0, 0x0, 0x2}, 0x300048c0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0xe, 0xd, &(0x7f0000000280)=ANY=[@ANYRES16=r6, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0xd86, 0x0, 0x0, 0x40f00, 0x14, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x43}, 0x94) 957.293745ms ago: executing program 2 (id=154): bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 868.834726ms ago: executing program 4 (id=155): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001c00110c0000001400000f0007000000", @ANYRES32=r1, @ANYBLOB="800202000a000200577f0000aabb000020"], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x0) 699.915469ms ago: executing program 0 (id=156): getsockopt$TIPC_SOCK_RECVQ_DEPTH(0xffffffffffffffff, 0x10f, 0x84, &(0x7f0000000100), &(0x7f0000000140)=0x4) 638.36131ms ago: executing program 0 (id=157): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70200001400000bb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b702000000000000850000008400"], &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000700)='kfree\x00', r2}, 0x18) r3 = fcntl$dupfd(r0, 0x0, r0) read$usbfs(r3, 0x0, 0x0) write$tun(r3, &(0x7f0000000400)=ANY=[], 0xa2) 637.91289ms ago: executing program 4 (id=158): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x11ff, &(0x7f0000001280)="$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") r0 = syz_io_uring_setup(0x109, &(0x7f0000000140)={0x0, 0x114db, 0x0, 0x1, 0x89}, 0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, r1, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x29c780}) io_uring_enter(r0, 0x3518, 0xaddf, 0x2, 0x0, 0x0) 598.977001ms ago: executing program 2 (id=159): socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7030000ec000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xd, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r2}, 0x18) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r4, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x4, 0x2, 0x0, 0x0, 0x7, 0x8}, {0x12, 0x3, 0x0, 0x1, 0x8001, 0x400}, 0xa5, 0x4, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) 561.541831ms ago: executing program 2 (id=160): r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000840)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) add_key(&(0x7f0000000040)='ceph\x00', 0x0, &(0x7f0000000bc0)="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", 0x12c, r0) r1 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) r2 = add_key$keyring(&(0x7f0000000000), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, r1) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00'}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = syz_io_uring_setup(0x6de4, &(0x7f0000000180)={0x0, 0x113a, 0x2, 0x2}, &(0x7f00000000c0), &(0x7f0000000000)) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS2(r4, 0xf, &(0x7f00000024c0)={0x2, 0x0, 0x0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000240)=""/191, 0xbf}], &(0x7f0000002480)=[0x0, 0x2]}, 0x20) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000200), 0x800) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r5, 0x4058534c, &(0x7f0000000180)={0x80, 0x2a, 0x3}) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$eJzs3c9vFFUcAPDvbH/QUrSFGBUP0sQYSJSWFjDEeICrIQ3+iBcvVloQKdDQGi2aUBK8mBgvxph48iD+F0rkyklPHrx4MiREDUcT18x2pnTb2ZYubacyn0+y9M17O7w33X773r6+NxtAZQ2m/9Qi9kbEdBLRn8wvlnVGVji48Lx7f39yOn0kUa+/8WcSSZaXPz/JvvZlJ/dExM8/JbGnY2W9M3NXzo9PTU1ezo6HZy9MD8/MXTl47sL42cmzkxdHXxo9dvTI0WMjh9q6rqsFeSevv/9h/2djb3/3zT/JyPe/jSVxPF7Nnrj0OjbKYAw2vifJyqK+YxtdWUk6sp+TpS9x0llig1iX/PXrioinoj864v6L1x+fvlZq44BNVU8i6kBFJeIfKiofB+Tv7Ze/D66VMioBtsLdEwsTACvjv3NhbjB6GnMDO+8lsXRaJ4mI9mbmmu2KiNu3xq6fuTV2PTZpHg4oNn8tIp4uiv+kEf8D0RMDjfivNcV/Oi44lX1N819vs/7lU8XiH7bOQvz3rBr/0SL+31kS/++2Wf/g/eR7vU3x39vuJQEAAAAAAEBl3TwRES8W/f2/trj+JwrW//RFxPENqH9w2fHKv//X7mxANUCBuyciXilc/1vLV/8OdGSpxxrrAbqSM+emJg9FxOMRcSC6dqTHI6vUcfDzPV+3KhvM1v/lj7T+29lawKwddzp3NJ8zMT47/rDXDUTcvRbxTOH632Sx/08K+v/098H0A9ax5/kbp1qVrR3/wGapfxuxv7D/v3/XimT1+3MMN8YDw/moYKVnP/7ih1b1txv/bjEBDy/t/3euHv8DydL79cysv47Dc531VmXtjv+7kzcbt5zpzvI+Gp+dvTwS0Z2c7Ehzm/JH199meBTl8ZDHSxr/B55bff6vaPzfGxHzy/7v5K/mPcW5J//t+71Ve4z/oTxp/E+sq/9ff2L0xsCPrep/sP7/SKOvP5DlmP+DBV/lYdrdnF8Qjp1FRVvdXgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4FNQiYlcktaHFdK02NBTRFxFPxM7a1KWZ2RfOXPrg4kRa1vj8/1r+Sb/9C8dJ/vn/A0uOR5cdH46I3RHxZUdv43jo9KWpibIvHgAAAAAAAAAAAAAAAAAAALaJvhb7/1N/dJTdOmDTdZbdAKA0BfH/SxntALae/h+qS/xDdYl/qC7xD9Ul/qG6xD9Ul/iH6hL/AAAAAADwSNm97+avSUTMv9zbeKS6s7KuUlsGbLZa2Q0ASuMWP1Bdlv5AdXmPDyRrlPe0PGmtM1czffohTgYAAAAAAAAAAACAytm/1/5/qCr7/6G67P+H6sr3/+8ruR3A1vMeH4g1dvIX7v9f8ywAAAAAAAAAAAAAYCPNzF05Pz41NXlZ4q3t0YytTNTr9avpT8F2ac//PJEvhd8u7VmWyPf6PdhZ5f1OAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAmv0XAAD//xYSJMU=") r6 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r7, &(0x7f0000004200)='t', 0x1) socket$pppoe(0x18, 0x1, 0x0) sendfile(r7, r6, 0x0, 0x3ffff) sendfile(r7, r6, 0x0, 0x7ffff000) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r5, 0x4058534c, &(0x7f0000000040)={0x80, 0x18, 0x2, 0xfffffff7, 0x0, 0x9}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB], 0x14}}, 0x0) syz_usb_connect$cdc_ecm(0x1, 0xef, &(0x7f00000005c0)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xdd, 0x1, 0x1, 0x10, 0x70, 0x1, [{{0x9, 0x4, 0x0, 0x6, 0x3, 0x2, 0x6, 0x0, 0x8, {{0xb, 0x24, 0x6, 0x0, 0x0, "02ce9782cb28"}, {0x5, 0x24, 0x0, 0x4}, {0xd, 0x24, 0xf, 0x1, 0x6, 0x4, 0x9, 0x4}, [@ncm={0x6, 0x24, 0x1a, 0x4, 0x2}, @obex={0x5, 0x24, 0x15, 0x7ff}, @mdlm_detail={0x7d, 0x24, 0x13, 0x3, "ea3d53b9daeebb81e70fbc69bcfb7bf4891fdf767b0a1c3eac717b2bb0ec86f736b1a03aee43ee5f3f02ecd3ddf62cd1b4cc3f160310ca4cfe6d556f3d4b7d5a61b6ab23500e4d1bdcd21bcbe652eae6c07d32de663df370afd14833dc43714702fa3f898f1ea2f50f8696b624b7f4547ab8133f0e096ea364"}, @country_functional={0x8, 0x24, 0x7, 0xe, 0x6, [0x5]}, @call_mgmt={0x5, 0x24, 0x1, 0x2, 0xd}, @dmm={0x7, 0x24, 0x14, 0x8000, 0xfff8}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x20, 0x8, 0x7f}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0x51, 0x5, 0x2}}}}}]}}]}}, &(0x7f00000007c0)={0xa, &(0x7f0000000700)={0xa, 0x6, 0x310, 0xa, 0xff, 0xb, 0xff, 0x6}, 0xf, &(0x7f0000000740)={0x5, 0xf, 0xf, 0x2, [@ext_cap={0x7, 0x10, 0x2, 0x8, 0x1, 0x6, 0x60}, @ptm_cap={0x3}]}, 0x1, [{0x3b, &(0x7f0000000780)=@string={0x3b, 0x3, "f63895c8381c1e5a5ca36ce34631fcda05642c8492f73616fc590a2e58b92b7d1ee88bdd5a18bbabaeb8a25510268f2fb7a3a15f1b4b1a37fc"}}]}) socket$inet6(0xa, 0x805, 0x0) sendmsg$IPSET_CMD_ADD(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast1}}, @IPSET_ATTR_PACKETS={0xc, 0x19, 0x1, 0x0, 0xceb}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x40000c4) r8 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x3}, 0x0, 0x0, r2) r9 = add_key$keyring(&(0x7f0000000440), &(0x7f0000000480)={'syz', 0x3}, 0x0, 0x0, r8) keyctl$invalidate(0x15, r9) 483.888572ms ago: executing program 0 (id=161): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), r0) sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x3c, r1, 0x1, 0x70bd26, 0xa1ff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0xfffffffffffffe54}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='net/kcm\x00') r3 = socket$netlink(0x10, 0x3, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000480)='\xac\xed\x00\x00') r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00', r4}, 0x10) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r3, 0x4018f50b, &(0x7f0000000140)={0x1, 0x2, 0x81}) r5 = socket$kcm(0x10, 0x2, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000c00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r8}, 0x10) sendmmsg(0xffffffffffffffff, &(0x7f0000001d00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x24005805) sendmsg$kcm(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)=[{0x0}], 0x1}, 0x0) sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848110000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) socket$inet6(0xa, 0x0, 0x0) memfd_create(&(0x7f0000000100)='\vem\xda\x99R@m\xfc\xfe\x9b#*\xff', 0x0) mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x8000300000d, 0x50, r2, 0xffffd000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r9, 0x1, 0x1a, &(0x7f000002eff0)={0x135, &(0x7f0000000000)=[{}]}, 0x10) faccessat2(r2, &(0x7f0000000040)='\x00', 0x1, 0x1300) 295.148135ms ago: executing program 3 (id=162): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="020300030d000000110700ed7295c508e20a4830820000000000030009005051fc3aa8b0cd000000e9215bb992464e73a02100000000000003000600000000de2797760000000002000100000000000000000d00000000030005000000000002000000ac14140000"], 0x68}, 0x1, 0x7}, 0x4004801) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'bridge0\x00'}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x50}}, 0x4820) socket$netlink(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, 0x0, 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x0, 0x0}) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02080000000100000080002000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x0, 0x10, &(0x7f0000000680)=ANY=[@ANYBLOB="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", @ANYRES32=r3, @ANYBLOB="0000000000000000b70400000800000085000000950000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x19, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) unshare(0x2c060000) bpf$MAP_CREATE(0x0, &(0x7f0000000980)=ANY=[@ANYRESDEC=0x0, @ANYBLOB="0592e3b841e2ceb22a93abae6f7a8d8a14e49678060cdfbac3b3cb33fdc36104bcd4c36d23b9f976b8aba6df73cd70a2f992d964ec81e0b3d1e5cda91e74a81276124a5b42867cdb872180f66ae20e727162cfc2a132ce8935a3504e93cbf57260e8c0b89aac7a9dc36c8f14e2f2740ced51d3c0d24cf39d", @ANYRESHEX], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0xd, 0xc, &(0x7f00000008c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @sock_ops=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xc}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000001340)={0x18, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="b45478037246f9552ee40a98738926fcdff504a55f63d20d5b56a6f96249a51763c2149616640000000000", @ANYRES8=r4], &(0x7f0000000440)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe5c, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) eventfd(0x7) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="010000000b000000010000000200000000000000", @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000200000000000d00"/28], 0x50) unshare(0x2c020400) unshare(0xc000000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000380)='sys_enter\x00'}, 0x10) r6 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000500)=ANY=[@ANYBLOB="38000000031401002dbd7000000000000900020073797a320000000008004100727865001400330076657468305f746f5f626f6e64"], 0x38}, 0x1, 0x0, 0x0, 0x20000854}, 0xc000) sendmsg$NL80211_CMD_RELOAD_REGDB(r6, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000040)={0x14, 0x0, 0x1, 0x70bd29, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x20004040}, 0x2000c410) faccessat(0xffffffffffffffff, 0x0, 0x5) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet(0x2, 0x1, 0x0) 245.577396ms ago: executing program 4 (id=163): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x400}, 0x100002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000040)={r2, &(0x7f0000000280)="806786eb2707d3ecfb12e772fac270b0e988ebda2cdea3fab820ec8b1837736d3990be93da4da66bc84a21c4f9e4cf4d47ca2b0ec2133b0cb007d170d654081cc00d8ba8fad99cb68fe83c9ddd1bb7a95f40b6ae0c6f95370b9bd5afff24f37b", &(0x7f0000000300)=""/193}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=ANY=[@ANYBLOB="140000001000040000000000000000000300000a20000000000a05000000000000000000070000000900010073797a300000000044000000090a010400000000000000000700ffff08000a40000000030900020073797a31000000000900010073797a3000000000080005400000002105000d40930000005c0000000c0a01020000000000000000070000000900020073797a31000000000900010073797a3000000000300003802c0000800400018024000b80100001800c0001"], 0xe8}, 0x1, 0x0, 0x0, 0x10}, 0x0) 83.370269ms ago: executing program 4 (id=164): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000700)='kfree\x00', r1}, 0x18) r2 = fcntl$dupfd(r0, 0x0, r0) read$usbfs(r2, 0x0, 0x0) 16.89369ms ago: executing program 3 (id=165): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x400}, 0x100002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='kfree\x00', r3, 0x0, 0x6}, 0x18) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=ANY=[@ANYBLOB="140000001000040000000000000000000300000a20000000000a05000000000000000000070000000900010073797a300000000044000000090a010400000000000000000700ffff08000a40000000030900020073797a31000000000900010073797a3000000000080005400000002105000d40930000005c0000000c0a01020000000000000000070000000900020073797a31000000000900010073797a3000000000300003802c0000800400018024000b80100001800c0001"], 0xe8}, 0x1, 0x0, 0x0, 0x10}, 0x0) 0s ago: executing program 0 (id=166): syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000040)={[{@noquota}]}, 0x1, 0x775, &(0x7f0000001180)="$eJzs3c9rXNUeAPDvnSRNm/a95MGD9+oqIGigdGJqbBVcVFyIYKGga9thMg01k0zJTEoTAlpEcCOouBB007U/6s6tP7b6X7gQS9W0WHEhkTu5t502M2mSJpnqfD5wM+fceyfnfOf+OGfmHu4NoGeNpn8KEYcj4t0kYjibn0TEQDPVH3Fybb1bK8vldEpidfXlX5LmOjdXlsvR8p7UwSzz/4j45q2II4X15dYXl2ZK1WplPsuPN2YvjNcXl46eny1NV6Yrc8cnJiePnXjqxPGdi/W375cOXXvvhcc/P/nHm/+7+s63SZyMQ9my1jh2ymiMZp/JQPoR3uX5nS6sy5JuV4BtSQ/NvrWjPA7HcPQ1UwDAP9nrEbEKAPSYRPsPAD0m/x3g5spyOZ+6+4vE3rr+XETsX4s/v765tqQ/u2a3v3kddOhmcteVkSQiRnag/NGI+PjLVz9Np9il65AA7bxxOSLOjoyuP/8n68YsbNUTGyzbl72O3jPf+Q/2zldp/+fpdv2/wu3+T7Tp/wy2OXa3477H/4EdKGQDaf/v2Zaxbbda4s+M9GW5fzX7fAPJufPVSnpu+3dEjMXAYJqf2KCMsRt/3ui0rLX/9+v7r32Slp++3lmj8FP/4N3vmSo1Sg8Sc6vrlyMe6W8Xf3J7+ycd+r+nN1nGi8+8/VGnZWn8abz5tD7+yEYn7Y7VKxGPtd3+d0a0JRuOTxxv7g7j+U7Rxhc/fDjUqfzW7Z9Oafn5d4G9kG7/oY3jH0lax2vWt17Gd1eGv+607P7xt9//9yWvNNN5P+JSqdGYn4jYl7y0fv6xO+/N8/n6afxjj7Y//jfa/9PvhGc3GX//tZ8/2378uyuNf2pL23/riau3Zvo6lb+57T/ZTI1lczZz/ttsBR/kswMAAAAAAAAAAAAAAAAAAAAAAACAzSpExKFICsXb6UKhWFx7hvd/Y6hQrdUbR87VFuamovms7JEYKOS3uhxuuR/qRHY//Dx/7J78kxHxn4j4YPBAkt9HcarLsQMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABA7mCH5/+nfhzsdu0AgF2zv9sVAAD2nPYfAHqP9h8Aeo/2HwB6j/YfAHqP9h8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIBddvrUqXRa/X1luZzmpy4uLszULh6dqtRnirML5WK5Nn+hOF2rTVcrxXJt9n7/r1qrXZiMuYVL441KvTFeX1w6M1tbmGucOT9bmq6cqQzsSVQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAsDX1xaWZUrVamZfYRmL14ahG9xN92e70sNRnTxPJw1GNHU50+cQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8DfxVwAAAP//02Ii/w==") r0 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x88882, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./bus\x00', 0x1c5902, 0x2d) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pipe2$9p(0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)=ANY=[]) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000380)={[{@init_itable_val}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@max_batch_time={'max_batch_time', 0x3d, 0x131}}, {@mblk_io_submit}, {@quota}]}, 0x3, 0x437, &(0x7f0000000d80)="$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") lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f0000000300), &(0x7f0000000040)=ANY=[], 0xfe37, 0x0) unlink(&(0x7f0000000180)='./file1\x00') write(r2, &(0x7f0000004200)='t', 0x1) sendfile(r2, r1, 0x0, 0x7ffff000) fallocate(r0, 0x0, 0x0, 0x1001f4) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.206' (ED25519) to the list of known hosts. [ 32.624749][ T29] audit: type=1400 audit(1752499631.294:62): avc: denied { mounton } for pid=3296 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 32.625905][ T3296] cgroup: Unknown subsys name 'net' [ 32.647504][ T29] audit: type=1400 audit(1752499631.294:63): avc: denied { mount } for pid=3296 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 32.674928][ T29] audit: type=1400 audit(1752499631.314:64): avc: denied { unmount } for pid=3296 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 32.834201][ T3296] cgroup: Unknown subsys name 'cpuset' [ 32.840468][ T3296] cgroup: Unknown subsys name 'rlimit' [ 33.031994][ T29] audit: type=1400 audit(1752499631.694:65): avc: denied { setattr } for pid=3296 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 33.058102][ T29] audit: type=1400 audit(1752499631.694:66): avc: denied { create } for pid=3296 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 33.078613][ T29] audit: type=1400 audit(1752499631.694:67): avc: denied { write } for pid=3296 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 33.099032][ T29] audit: type=1400 audit(1752499631.704:68): avc: denied { read } for pid=3296 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 33.108239][ T3298] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 33.119343][ T29] audit: type=1400 audit(1752499631.704:69): avc: denied { mounton } for pid=3296 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 33.152846][ T29] audit: type=1400 audit(1752499631.704:70): avc: denied { mount } for pid=3296 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 33.176233][ T29] audit: type=1400 audit(1752499631.794:71): avc: denied { relabelto } for pid=3298 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 33.205967][ T3296] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 34.406632][ T3308] chnl_net:caif_netlink_parms(): no params data found [ 34.439136][ T3306] chnl_net:caif_netlink_parms(): no params data found [ 34.526703][ T3305] chnl_net:caif_netlink_parms(): no params data found [ 34.535888][ T3308] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.543037][ T3308] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.550338][ T3308] bridge_slave_0: entered allmulticast mode [ 34.556868][ T3308] bridge_slave_0: entered promiscuous mode [ 34.574388][ T3308] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.581554][ T3308] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.588741][ T3308] bridge_slave_1: entered allmulticast mode [ 34.595188][ T3308] bridge_slave_1: entered promiscuous mode [ 34.606099][ T3306] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.613299][ T3306] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.620482][ T3306] bridge_slave_0: entered allmulticast mode [ 34.626929][ T3306] bridge_slave_0: entered promiscuous mode [ 34.651152][ T3308] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 34.662419][ T3306] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.669624][ T3306] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.676986][ T3306] bridge_slave_1: entered allmulticast mode [ 34.683467][ T3306] bridge_slave_1: entered promiscuous mode [ 34.700855][ T3308] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 34.721040][ T3306] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 34.748761][ T3308] team0: Port device team_slave_0 added [ 34.755490][ T3306] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 34.770056][ T3305] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.777234][ T3305] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.784497][ T3305] bridge_slave_0: entered allmulticast mode [ 34.791085][ T3305] bridge_slave_0: entered promiscuous mode [ 34.807632][ T3308] team0: Port device team_slave_1 added [ 34.817746][ T3305] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.824876][ T3305] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.832112][ T3305] bridge_slave_1: entered allmulticast mode [ 34.838806][ T3305] bridge_slave_1: entered promiscuous mode [ 34.878564][ T3308] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 34.885690][ T3308] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 34.911701][ T3308] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 34.923233][ T3306] team0: Port device team_slave_0 added [ 34.930245][ T3306] team0: Port device team_slave_1 added [ 34.948846][ T3305] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 34.958180][ T3308] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 34.965276][ T3308] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 34.991264][ T3308] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 35.011991][ T3315] chnl_net:caif_netlink_parms(): no params data found [ 35.021536][ T3305] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 35.042436][ T3318] chnl_net:caif_netlink_parms(): no params data found [ 35.051762][ T3305] team0: Port device team_slave_0 added [ 35.057812][ T3306] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 35.064837][ T3306] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 35.090873][ T3306] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 35.102241][ T3306] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 35.109319][ T3306] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 35.135352][ T3306] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 35.162242][ T3305] team0: Port device team_slave_1 added [ 35.199740][ T3308] hsr_slave_0: entered promiscuous mode [ 35.206760][ T3308] hsr_slave_1: entered promiscuous mode [ 35.221204][ T3306] hsr_slave_0: entered promiscuous mode [ 35.227373][ T3306] hsr_slave_1: entered promiscuous mode [ 35.233129][ T3306] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 35.240797][ T3306] Cannot create hsr debugfs directory [ 35.251728][ T3305] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 35.258759][ T3305] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 35.284780][ T3305] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 35.298250][ T3305] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 35.305278][ T3305] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 35.331223][ T3305] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 35.404217][ T3318] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.411343][ T3318] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.418715][ T3318] bridge_slave_0: entered allmulticast mode [ 35.425158][ T3318] bridge_slave_0: entered promiscuous mode [ 35.437613][ T3315] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.444783][ T3315] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.451956][ T3315] bridge_slave_0: entered allmulticast mode [ 35.458489][ T3315] bridge_slave_0: entered promiscuous mode [ 35.467404][ T3315] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.474590][ T3315] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.481914][ T3315] bridge_slave_1: entered allmulticast mode [ 35.488365][ T3315] bridge_slave_1: entered promiscuous mode [ 35.499265][ T3305] hsr_slave_0: entered promiscuous mode [ 35.505418][ T3305] hsr_slave_1: entered promiscuous mode [ 35.511490][ T3305] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 35.519186][ T3305] Cannot create hsr debugfs directory [ 35.529907][ T3318] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.537161][ T3318] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.544504][ T3318] bridge_slave_1: entered allmulticast mode [ 35.550979][ T3318] bridge_slave_1: entered promiscuous mode [ 35.597264][ T3318] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 35.608073][ T3315] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 35.629792][ T3318] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 35.642282][ T3315] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 35.688415][ T3315] team0: Port device team_slave_0 added [ 35.702136][ T3318] team0: Port device team_slave_0 added [ 35.712079][ T3315] team0: Port device team_slave_1 added [ 35.734215][ T3318] team0: Port device team_slave_1 added [ 35.747563][ T3315] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 35.754629][ T3315] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 35.780624][ T3315] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 35.803104][ T3315] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 35.810110][ T3315] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 35.836071][ T3315] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 35.855978][ T3318] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 35.863040][ T3318] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 35.889059][ T3318] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 35.913310][ T3318] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 35.920470][ T3318] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 35.946510][ T3318] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 35.978816][ T3315] hsr_slave_0: entered promiscuous mode [ 35.984993][ T3315] hsr_slave_1: entered promiscuous mode [ 35.990847][ T3315] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 35.998440][ T3315] Cannot create hsr debugfs directory [ 36.018086][ T3306] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 36.029442][ T3318] hsr_slave_0: entered promiscuous mode [ 36.035923][ T3318] hsr_slave_1: entered promiscuous mode [ 36.041689][ T3318] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 36.049316][ T3318] Cannot create hsr debugfs directory [ 36.060843][ T3306] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 36.076456][ T3306] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 36.091516][ T3306] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 36.161315][ T3305] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 36.170417][ T3305] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 36.179580][ T3305] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 36.200144][ T3305] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 36.231557][ T3308] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 36.254476][ T3308] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 36.263073][ T3308] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 36.274690][ T3308] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 36.302975][ T3315] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 36.312728][ T3315] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 36.321942][ T3315] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 36.330900][ T3315] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 36.374666][ T3318] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 36.383896][ T3318] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 36.392754][ T3318] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 36.401959][ T3318] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 36.413714][ T3315] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.420812][ T3315] bridge0: port 2(bridge_slave_1) entered forwarding state [ 36.428279][ T3315] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.435402][ T3315] bridge0: port 1(bridge_slave_0) entered forwarding state [ 36.451785][ T3306] 8021q: adding VLAN 0 to HW filter on device bond0 [ 36.466444][ T3305] 8021q: adding VLAN 0 to HW filter on device bond0 [ 36.485885][ T3306] 8021q: adding VLAN 0 to HW filter on device team0 [ 36.496566][ T51] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.504693][ T51] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.520393][ T3305] 8021q: adding VLAN 0 to HW filter on device team0 [ 36.532871][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.539989][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 36.548814][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.555915][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 36.581976][ T1713] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.589316][ T1713] bridge0: port 2(bridge_slave_1) entered forwarding state [ 36.598324][ T1713] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.605522][ T1713] bridge0: port 2(bridge_slave_1) entered forwarding state [ 36.634142][ T3315] 8021q: adding VLAN 0 to HW filter on device bond0 [ 36.644141][ T3308] 8021q: adding VLAN 0 to HW filter on device bond0 [ 36.674025][ T3308] 8021q: adding VLAN 0 to HW filter on device team0 [ 36.682582][ T3315] 8021q: adding VLAN 0 to HW filter on device team0 [ 36.702534][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.709760][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 36.720399][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.727594][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 36.742669][ T3318] 8021q: adding VLAN 0 to HW filter on device bond0 [ 36.754237][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.761322][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 36.770596][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.777692][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 36.833315][ T3318] 8021q: adding VLAN 0 to HW filter on device team0 [ 36.852486][ T3305] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 36.869474][ T3308] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 36.896699][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.903842][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 36.925083][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.932329][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 36.949479][ T3306] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.004571][ T3315] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.056363][ T3305] veth0_vlan: entered promiscuous mode [ 37.101727][ T3305] veth1_vlan: entered promiscuous mode [ 37.126707][ T3308] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.147302][ T3306] veth0_vlan: entered promiscuous mode [ 37.157080][ T3305] veth0_macvtap: entered promiscuous mode [ 37.168991][ T3306] veth1_vlan: entered promiscuous mode [ 37.186397][ T3318] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.194802][ T3305] veth1_macvtap: entered promiscuous mode [ 37.212190][ T3306] veth0_macvtap: entered promiscuous mode [ 37.237587][ T3305] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 37.249955][ T3306] veth1_macvtap: entered promiscuous mode [ 37.261813][ T3306] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 37.275308][ T3315] veth0_vlan: entered promiscuous mode [ 37.283092][ T3315] veth1_vlan: entered promiscuous mode [ 37.292030][ T3305] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 37.304380][ T3306] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 37.312872][ T3306] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.321636][ T3306] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.330383][ T3306] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.339127][ T3306] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.364209][ T3305] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.372994][ T3305] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.381865][ T3305] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.390749][ T3305] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.406089][ T3315] veth0_macvtap: entered promiscuous mode [ 37.422167][ T3308] veth0_vlan: entered promiscuous mode [ 37.430600][ T3315] veth1_macvtap: entered promiscuous mode [ 37.456605][ T3308] veth1_vlan: entered promiscuous mode [ 37.468381][ T3318] veth0_vlan: entered promiscuous mode [ 37.478514][ T3315] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 37.496744][ T3318] veth1_vlan: entered promiscuous mode [ 37.510674][ T3306] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 37.517111][ T3308] veth0_macvtap: entered promiscuous mode [ 37.537058][ T3315] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 37.559558][ T3318] veth0_macvtap: entered promiscuous mode [ 37.583303][ T3308] veth1_macvtap: entered promiscuous mode [ 37.591057][ T3315] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.599937][ T3315] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.608762][ T3315] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.617619][ T3315] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.622121][ T3478] loop0: detected capacity change from 0 to 2048 [ 37.645784][ T3318] veth1_macvtap: entered promiscuous mode [ 37.673133][ T3308] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 37.688961][ T3478] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 37.695221][ T3318] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 37.710517][ T3308] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 37.719183][ T3308] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.727970][ T3308] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.736752][ T3308] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.745493][ T3308] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.757207][ T29] kauditd_printk_skb: 28 callbacks suppressed [ 37.757224][ T29] audit: type=1400 audit(1752499636.424:100): avc: denied { mount } for pid=3477 comm="syz.0.1" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 37.799062][ T29] audit: type=1400 audit(1752499636.454:101): avc: denied { add_name } for pid=3477 comm="syz.0.1" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 37.819477][ T29] audit: type=1400 audit(1752499636.454:102): avc: denied { create } for pid=3477 comm="syz.0.1" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 37.839414][ T29] audit: type=1400 audit(1752499636.454:103): avc: denied { read write open } for pid=3477 comm="syz.0.1" path="/0/file1/bus" dev="loop0" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 37.862465][ T29] audit: type=1400 audit(1752499636.454:104): avc: denied { mounton } for pid=3477 comm="syz.0.1" path="/0/file1/file0" dev="loop0" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 37.890215][ T3318] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 37.904528][ T3318] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.913310][ T3318] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.922166][ T3318] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.930975][ T3318] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.986965][ T3487] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 37.987663][ T29] audit: type=1400 audit(1752499636.644:105): avc: denied { create } for pid=3485 comm="syz.4.5" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 38.069417][ T29] audit: type=1400 audit(1752499636.734:106): avc: denied { open } for pid=3489 comm="syz.3.7" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 38.088490][ T29] audit: type=1400 audit(1752499636.734:107): avc: denied { kernel } for pid=3489 comm="syz.3.7" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 38.111978][ T3492] loop4: detected capacity change from 0 to 512 [ 38.118857][ T3492] EXT4-fs: Ignoring removed nobh option [ 38.130332][ C1] hrtimer: interrupt took 37200 ns [ 38.150002][ T29] audit: type=1400 audit(1752499636.804:108): avc: denied { write } for pid=3489 comm="syz.3.7" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 38.186149][ T3494] loop1: detected capacity change from 0 to 2048 [ 38.199583][ T3492] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 38.222544][ T3478] syz.0.1 (3478) used greatest stack depth: 10456 bytes left [ 38.249480][ T3306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.267729][ T3494] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 38.281922][ T3492] EXT4-fs error (device loop4): ext4_do_update_inode:5568: inode #3: comm syz.4.6: corrupted inode contents [ 38.301086][ T3501] loop3: detected capacity change from 0 to 2048 [ 38.321331][ T3492] EXT4-fs error (device loop4): ext4_dirty_inode:6459: inode #3: comm syz.4.6: mark_inode_dirty error [ 38.342292][ T3492] EXT4-fs error (device loop4): ext4_do_update_inode:5568: inode #3: comm syz.4.6: corrupted inode contents [ 38.359178][ T3501] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 38.375583][ T3492] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #3: comm syz.4.6: mark_inode_dirty error [ 38.421664][ T29] audit: type=1400 audit(1752499637.084:109): avc: denied { create } for pid=3506 comm="syz.0.9" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 38.442289][ T3492] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.6: Failed to acquire dquot type 0 [ 38.454243][ T3492] EXT4-fs error (device loop4): ext4_do_update_inode:5568: inode #16: comm syz.4.6: corrupted inode contents [ 38.469462][ T3492] EXT4-fs error (device loop4): ext4_dirty_inode:6459: inode #16: comm syz.4.6: mark_inode_dirty error [ 38.489926][ T3492] EXT4-fs error (device loop4): ext4_do_update_inode:5568: inode #16: comm syz.4.6: corrupted inode contents [ 38.502673][ T3492] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #16: comm syz.4.6: mark_inode_dirty error [ 38.515854][ T3492] EXT4-fs error (device loop4): ext4_do_update_inode:5568: inode #16: comm syz.4.6: corrupted inode contents [ 38.527914][ T3492] EXT4-fs error (device loop4) in ext4_orphan_del:305: Corrupt filesystem [ 38.540664][ T3492] EXT4-fs error (device loop4): ext4_do_update_inode:5568: inode #16: comm syz.4.6: corrupted inode contents [ 38.553321][ T3492] EXT4-fs error (device loop4): ext4_truncate:4597: inode #16: comm syz.4.6: mark_inode_dirty error [ 38.572191][ T3492] EXT4-fs error (device loop4) in ext4_process_orphan:347: Corrupt filesystem [ 38.603742][ T3308] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.604384][ T3492] EXT4-fs (loop4): 1 truncate cleaned up [ 38.619124][ T3492] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.650190][ T3492] ext4 filesystem being mounted at /1/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 38.680649][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.695744][ T3492] syz.4.6 (3492) used greatest stack depth: 9960 bytes left [ 38.744698][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.867744][ T3530] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13'. [ 39.251704][ T3557] loop0: detected capacity change from 0 to 1024 [ 39.259043][ T3557] EXT4-fs: Ignoring removed orlov option [ 39.286316][ T3557] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.423924][ T3564] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 39.523592][ T3564] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 39.845388][ T3571] netlink: 8 bytes leftover after parsing attributes in process `syz.4.21'. [ 39.904757][ T3571] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.967584][ T3572] Zero length message leads to an empty skb [ 40.006225][ T3572] netlink: '’': attribute type 10 has an invalid length. [ 40.076271][ T3572] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 40.447452][ T3306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.484764][ T3588] loop0: detected capacity change from 0 to 2048 [ 40.511151][ T3588] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 40.571941][ T3598] loop3: detected capacity change from 0 to 2048 [ 40.587799][ T3598] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 40.688092][ T3306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.744510][ T3571] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.766973][ T3605] netlink: 8 bytes leftover after parsing attributes in process `syz.0.27'. [ 40.802723][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.817179][ T3571] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.856714][ T3607] loop3: detected capacity change from 0 to 2048 [ 40.866464][ T3571] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.883178][ T3607] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 40.911363][ T3571] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.925297][ T3571] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.938619][ T3571] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.950457][ T3571] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.000756][ T3614] loop0: detected capacity change from 0 to 2048 [ 41.039427][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.062263][ T3614] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 41.173681][ T3631] loop4: detected capacity change from 0 to 512 [ 41.198895][ T3631] EXT4-fs: Ignoring removed mblk_io_submit option [ 41.207274][ T3638] loop2: detected capacity change from 0 to 2048 [ 41.218133][ T3640] netlink: 8 bytes leftover after parsing attributes in process `syz.3.37'. [ 41.228169][ T3631] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 41.264937][ T3631] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 41.284065][ T3638] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 41.298251][ T3631] EXT4-fs (loop4): 1 truncate cleaned up [ 41.305027][ T3631] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.320997][ T3646] loop1: detected capacity change from 0 to 2048 [ 41.371521][ T3646] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 41.520480][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.562637][ T3654] netlink: 8 bytes leftover after parsing attributes in process `syz.2.40'. [ 41.573016][ T3306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.574173][ T3656] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 41.594037][ T3654] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.640623][ T3660] netlink: '’': attribute type 10 has an invalid length. [ 41.658605][ T3659] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 41.667617][ T3308] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.683084][ T3660] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 41.719434][ T3654] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.816401][ T3654] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.885632][ T3654] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.902215][ T3664] loop0: detected capacity change from 0 to 8192 [ 41.924680][ T3656] loop3: detected capacity change from 0 to 8192 [ 41.940300][ T3654] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.957111][ T3654] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.978012][ T3654] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.990146][ T3654] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.068352][ T3668] loop3: detected capacity change from 0 to 1024 [ 42.104964][ T3668] EXT4-fs: Ignoring removed orlov option [ 42.126136][ T3672] loop2: detected capacity change from 0 to 1024 [ 42.135191][ T3672] EXT4-fs: Ignoring removed orlov option [ 42.150611][ T3668] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.155141][ T3672] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.254820][ T3677] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 42.301120][ T3679] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 42.312695][ T3679] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 42.424677][ T3681] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 42.463890][ T3681] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 42.489146][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.543013][ T3684] netlink: 8 bytes leftover after parsing attributes in process `syz.4.47'. [ 42.565353][ T3684] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.578545][ T3682] loop0: detected capacity change from 0 to 8192 [ 42.605087][ T3686] netlink: '’': attribute type 10 has an invalid length. [ 42.625241][ T3686] bond0: (slave dummy0): Releasing backup interface [ 42.634963][ T3686] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 42.647574][ T3686] team0: Failed to send options change via netlink (err -105) [ 42.655150][ T3686] team0: Port device dummy0 added [ 42.667368][ T3684] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.669186][ T3686] netlink: '’': attribute type 10 has an invalid length. [ 42.685436][ T3686] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 42.696655][ T3686] team0: Failed to send options change via netlink (err -105) [ 42.704431][ T3686] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 42.715631][ T3686] team0: Port device dummy0 removed [ 42.733308][ T3686] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 42.752281][ T3684] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.825032][ T3684] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.855957][ T3694] loop1: detected capacity change from 0 to 2048 [ 42.862819][ T3694] /dev/loop1: Can't open blockdev [ 43.400373][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.403175][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.432665][ T29] kauditd_printk_skb: 194 callbacks suppressed [ 43.432682][ T29] audit: type=1400 audit(1752499642.094:302): avc: denied { write } for pid=3701 comm="syz.3.52" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 43.881734][ T29] audit: type=1400 audit(1752499642.094:303): avc: denied { connect } for pid=3701 comm="syz.3.52" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 43.901167][ T29] audit: type=1400 audit(1752499642.094:304): avc: denied { name_connect } for pid=3701 comm="syz.3.52" dest=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 43.935699][ T29] audit: type=1326 audit(1752499642.594:305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3709 comm="syz.0.55" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effb89ce929 code=0x7ffc0000 [ 43.959168][ T29] audit: type=1326 audit(1752499642.594:306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3709 comm="syz.0.55" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effb89ce929 code=0x7ffc0000 [ 43.982495][ T29] audit: type=1326 audit(1752499642.594:307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3709 comm="syz.0.55" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7effb89ce929 code=0x7ffc0000 [ 43.986525][ T3708] loop2: detected capacity change from 0 to 2048 [ 44.006033][ T29] audit: type=1326 audit(1752499642.594:308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3709 comm="syz.0.55" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effb89ce929 code=0x7ffc0000 [ 44.035233][ T29] audit: type=1326 audit(1752499642.594:309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3709 comm="syz.0.55" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effb89ce929 code=0x7ffc0000 [ 44.058506][ T29] audit: type=1326 audit(1752499642.594:310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3709 comm="syz.0.55" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7effb89ce929 code=0x7ffc0000 [ 44.081693][ T29] audit: type=1326 audit(1752499642.594:311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3709 comm="syz.0.55" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effb89ce929 code=0x7ffc0000 [ 44.128914][ T3717] netlink: 8 bytes leftover after parsing attributes in process `syz.3.57'. [ 44.136467][ T3708] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 44.187435][ T3719] loop0: detected capacity change from 0 to 1024 [ 44.191096][ T3722] netlink: 4 bytes leftover after parsing attributes in process `syz.1.59'. [ 44.196406][ T3719] EXT4-fs: Ignoring removed orlov option [ 44.218291][ T3717] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.232571][ T3719] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.252109][ T3724] netlink: '’': attribute type 10 has an invalid length. [ 44.270363][ T3724] team0: Port device dummy0 added [ 44.279252][ T3724] netlink: '’': attribute type 10 has an invalid length. [ 44.287551][ T3724] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 44.299479][ T3724] team0: Failed to send options change via netlink (err -105) [ 44.307409][ T3724] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 44.317513][ T3727] loop1: detected capacity change from 0 to 512 [ 44.325954][ T3724] team0: Port device dummy0 removed [ 44.333181][ T3727] ======================================================= [ 44.333181][ T3727] WARNING: The mand mount option has been deprecated and [ 44.333181][ T3727] and is ignored by this kernel. Remove the mand [ 44.333181][ T3727] option from the mount to silence this warning. [ 44.333181][ T3727] ======================================================= [ 44.355826][ T3724] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 44.404473][ T3727] EXT4-fs (loop1): bad geometry: first data block 0 is beyond end of filesystem (0) [ 44.415299][ T3717] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.439065][ T3733] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 44.448829][ T3733] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 44.486909][ T3717] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.497496][ T3727] loop1: detected capacity change from 0 to 8192 [ 44.526995][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.556860][ T3717] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.608481][ T3737] loop1: detected capacity change from 0 to 512 [ 44.628705][ T3737] EXT4-fs: Ignoring removed orlov option [ 44.631651][ T3717] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.645960][ T3739] netlink: 8 bytes leftover after parsing attributes in process `syz.2.63'. [ 44.655056][ T3737] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 44.659251][ T3717] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.674759][ T3739] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.689139][ T3717] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.700090][ T3737] EXT4-fs (loop1): 1 orphan inode deleted [ 44.705935][ T3737] EXT4-fs (loop1): 1 truncate cleaned up [ 44.706309][ T3717] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.712496][ T3737] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 44.734093][ T3741] netlink: '’': attribute type 10 has an invalid length. [ 44.742517][ T3739] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.756687][ T3741] bond0: (slave dummy0): Releasing backup interface [ 44.772912][ T3741] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 44.784044][ T3308] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.793927][ T3741] team0: Failed to send options change via netlink (err -105) [ 44.801463][ T3741] team0: Port device dummy0 added [ 44.803316][ T3742] netlink: 'syz.2.63': attribute type 10 has an invalid length. [ 44.822326][ T3742] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 44.833872][ T3742] team0: Failed to send options change via netlink (err -105) [ 44.841408][ T3742] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 44.852417][ T3742] team0: Port device dummy0 removed [ 44.866293][ T3742] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 44.884459][ T3739] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.904714][ T3747] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 44.952150][ T3739] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.957902][ T3755] netlink: 8 bytes leftover after parsing attributes in process `syz.3.67'. [ 44.978216][ T3755] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.027350][ T3761] netlink: '’': attribute type 10 has an invalid length. [ 45.038246][ T3761] bond0: (slave dummy0): Releasing backup interface [ 45.049255][ T3761] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 45.059899][ T3761] team0: Failed to send options change via netlink (err -105) [ 45.067509][ T3761] team0: Port device dummy0 added [ 45.077714][ T3763] netlink: 'syz.3.67': attribute type 10 has an invalid length. [ 45.077769][ T3755] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.104364][ T3763] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 45.126864][ T3763] team0: Failed to send options change via netlink (err -105) [ 45.143498][ T3763] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 45.152591][ T3763] team0: Port device dummy0 removed [ 45.174309][ T3763] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 45.216792][ T3755] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.275238][ T3755] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.311499][ T3306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.361684][ T3769] loop0: detected capacity change from 0 to 1024 [ 45.370639][ T3769] EXT4-fs: Ignoring removed orlov option [ 45.381226][ T3769] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.501694][ T3773] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 45.512284][ T3773] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 45.676098][ T3757] syz.1.68 (3757) used greatest stack depth: 9880 bytes left [ 45.683561][ T3756] syz.1.68 (3756) used greatest stack depth: 9688 bytes left [ 45.721539][ T3775] loop1: detected capacity change from 0 to 512 [ 45.728844][ T3775] EXT4-fs (loop1): bad geometry: first data block 0 is beyond end of filesystem (0) [ 45.767211][ T3684] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.779554][ T3684] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.792850][ T3684] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.805390][ T3684] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.814021][ T3778] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 45.835695][ T3780] loop4: detected capacity change from 0 to 512 [ 45.842383][ T3780] EXT4-fs: Ignoring removed orlov option [ 45.849172][ T3780] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 45.865127][ T3780] EXT4-fs (loop4): 1 orphan inode deleted [ 45.870911][ T3780] EXT4-fs (loop4): 1 truncate cleaned up [ 45.877273][ T3780] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 45.904683][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.926767][ T3784] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 45.940290][ T3782] loop1: detected capacity change from 0 to 8192 [ 46.034502][ T3786] loop1: detected capacity change from 0 to 512 [ 46.043049][ T3784] loop4: detected capacity change from 0 to 8192 [ 46.052203][ T3786] EXT4-fs (loop1): bad geometry: first data block 0 is beyond end of filesystem (0) [ 46.122994][ T3788] loop4: detected capacity change from 0 to 512 [ 46.129535][ T3786] loop1: detected capacity change from 0 to 8192 [ 46.133063][ T3788] EXT4-fs: Ignoring removed orlov option [ 46.144712][ T3788] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 46.180618][ T3788] EXT4-fs (loop4): 1 orphan inode deleted [ 46.186546][ T3788] EXT4-fs (loop4): 1 truncate cleaned up [ 46.193165][ T3788] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 46.206485][ T3306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.219817][ T3791] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 46.247187][ T3793] netlink: 8 bytes leftover after parsing attributes in process `syz.0.77'. [ 46.258579][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.264094][ T3795] netlink: 8 bytes leftover after parsing attributes in process `syz.1.78'. [ 46.277311][ T3793] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.308467][ T3795] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.313933][ T3798] netlink: '’': attribute type 10 has an invalid length. [ 46.324079][ T3799] netlink: '’': attribute type 10 has an invalid length. [ 46.337167][ T3798] team0: Failed to send options change via netlink (err -105) [ 46.344750][ T3798] team0: Port device dummy0 added [ 46.352887][ T3793] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.356850][ T3798] netlink: '’': attribute type 10 has an invalid length. [ 46.379248][ T3800] netlink: 'syz.1.78': attribute type 10 has an invalid length. [ 46.389340][ T3799] team0: Failed to send options change via netlink (err -105) [ 46.396942][ T3799] team0: Port device dummy0 added [ 46.406941][ T3798] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 46.422441][ T3798] team0: Failed to send options change via netlink (err -105) [ 46.437359][ T3798] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 46.463668][ T3798] team0: Port device dummy0 removed [ 46.474468][ T3798] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 46.501064][ T3795] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.514958][ T3800] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 46.543551][ T3800] team0: Failed to send options change via netlink (err -105) [ 46.551134][ T3800] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 46.568898][ T3800] team0: Port device dummy0 removed [ 46.577479][ T3800] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 46.589407][ T3793] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.612342][ T3795] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.637073][ T3793] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.679031][ T3820] loop4: detected capacity change from 0 to 512 [ 46.688824][ T3795] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.703806][ T3820] EXT4-fs (loop4): bad geometry: first data block 0 is beyond end of filesystem (0) [ 46.724454][ T3793] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.738689][ T3739] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.751371][ T3793] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.764163][ T3739] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.773749][ T3820] loop4: detected capacity change from 0 to 8192 [ 46.777889][ T3793] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.792374][ T3793] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.809009][ T3795] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.821411][ T3795] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.833482][ T3795] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.848423][ T3739] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.868953][ T3739] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.881069][ T3795] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.914672][ T3824] netlink: 'syz.2.85': attribute type 10 has an invalid length. [ 46.922422][ T3824] netlink: 168 bytes leftover after parsing attributes in process `syz.2.85'. [ 46.987418][ T3827] loop4: detected capacity change from 0 to 512 [ 47.073093][ T3827] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 47.118598][ T3827] EXT4-fs (loop4): orphan cleanup on readonly fs [ 47.126804][ T3827] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.84: bg 0: block 248: padding at end of block bitmap is not set [ 47.141679][ T3827] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.84: Failed to acquire dquot type 1 [ 47.155430][ T3827] EXT4-fs (loop4): 1 truncate cleaned up [ 47.162216][ T3827] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 47.476302][ T3841] netlink: 4 bytes leftover after parsing attributes in process `syz.2.89'. [ 47.610119][ T3846] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 47.674308][ T3845] loop1: detected capacity change from 0 to 2048 [ 47.903255][ T3827] syz.4.84 (3827) used greatest stack depth: 9576 bytes left [ 47.927366][ T3849] loop2: detected capacity change from 0 to 512 [ 47.946545][ T3845] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 47.974935][ T3849] EXT4-fs (loop2): bad geometry: first data block 0 is beyond end of filesystem (0) [ 48.178929][ T3849] loop2: detected capacity change from 0 to 8192 [ 48.198798][ T3846] loop0: detected capacity change from 0 to 8192 [ 48.350468][ T3855] loop2: detected capacity change from 0 to 2048 [ 48.371664][ T3308] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.406344][ T3855] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 48.475951][ T3859] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 48.561220][ T3865] netlink: 44 bytes leftover after parsing attributes in process `syz.1.96'. [ 48.615557][ T3866] loop0: detected capacity change from 0 to 1024 [ 48.628259][ T3866] EXT4-fs: Ignoring removed nobh option [ 48.634029][ T3866] EXT4-fs: Ignoring removed bh option [ 48.665579][ T3866] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.681383][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.717952][ T3874] netlink: 8 bytes leftover after parsing attributes in process `syz.4.98'. [ 48.736390][ T3874] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.765898][ T29] kauditd_printk_skb: 210 callbacks suppressed [ 48.765916][ T29] audit: type=1400 audit(1752499647.434:520): avc: denied { append } for pid=3861 comm="syz.0.95" path=2F31362F66696C65312FE91F7189591E9233614B dev="loop0" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 48.800133][ T3876] netlink: '’': attribute type 10 has an invalid length. [ 48.812792][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.840780][ T3876] bond0: (slave dummy0): Releasing backup interface [ 48.853869][ T3882] netlink: 'syz.4.98': attribute type 10 has an invalid length. [ 48.861800][ T29] audit: type=1400 audit(1752499647.524:521): avc: denied { read write } for pid=3861 comm="syz.0.95" name="file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 48.884305][ T29] audit: type=1400 audit(1752499647.524:522): avc: denied { open } for pid=3861 comm="syz.0.95" path="/16/file1/file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 48.907156][ T29] audit: type=1400 audit(1752499647.524:523): avc: denied { map } for pid=3861 comm="syz.0.95" path="/16/file1/file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 48.929884][ T29] audit: type=1400 audit(1752499647.524:524): avc: denied { execute } for pid=3861 comm="syz.0.95" path="/16/file1/file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 48.958651][ T3876] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 48.992511][ T3876] team0: Failed to send options change via netlink (err -105) [ 49.000086][ T3876] team0: Port device dummy0 added [ 49.025671][ T3874] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.035385][ T3894] loop2: detected capacity change from 0 to 512 [ 49.046417][ T3882] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 49.063649][ T3894] EXT4-fs (loop2): bad geometry: first data block 0 is beyond end of filesystem (0) [ 49.073916][ T3882] team0: Failed to send options change via netlink (err -105) [ 49.112006][ T3882] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 49.128612][ T3882] team0: Port device dummy0 removed [ 49.143304][ T3882] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 49.179644][ T3899] loop2: detected capacity change from 0 to 1024 [ 49.187412][ T3874] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.210781][ T3899] EXT4-fs: Ignoring removed orlov option [ 49.218744][ T3862] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4113: comm syz.0.95: Allocating blocks 497-513 which overlap fs metadata [ 49.235674][ T3899] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.255220][ T3874] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.298885][ T3904] loop1: detected capacity change from 0 to 1024 [ 49.305893][ T3904] EXT4-fs: Ignoring removed orlov option [ 49.330166][ T3904] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.347396][ T3886] EXT4-fs (loop0): pa ffff888106df4150: logic 560, phys. 305, len 13 [ 49.355677][ T3886] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 1 [ 49.357666][ T3908] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 49.382505][ T3908] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 49.397606][ T3306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.478785][ T3910] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 49.487578][ T3910] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 49.658961][ T3874] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.670554][ T3874] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.681729][ T3874] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.693164][ T3874] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.710452][ T3755] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.727976][ T3755] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.740429][ T3755] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.741076][ T29] audit: type=1400 audit(1752499648.404:525): avc: denied { create } for pid=3913 comm="syz.0.115" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 49.756967][ T3755] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.773434][ T29] audit: type=1326 audit(1752499648.414:526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3911 comm="syz.4.105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0950f0e929 code=0x7ffc0000 [ 49.801437][ T29] audit: type=1326 audit(1752499648.414:527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3911 comm="syz.4.105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0950f0e929 code=0x7ffc0000 [ 49.803171][ T3912] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 49.824751][ T29] audit: type=1326 audit(1752499648.414:528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3911 comm="syz.4.105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0950f0e929 code=0x7ffc0000 [ 49.855126][ T29] audit: type=1326 audit(1752499648.414:529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3911 comm="syz.4.105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f0950f0e929 code=0x7ffc0000 [ 49.880287][ T3914] infiniband syz2: set active [ 49.885098][ T3914] infiniband syz2: added veth0_to_bond [ 49.903183][ T3914] RDS/IB: syz2: added [ 49.908385][ T3914] smc: adding ib device syz2 with port count 1 [ 49.914915][ T3914] smc: ib device syz2 port 1 has pnetid [ 49.999319][ T3919] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 49.999330][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.041421][ T3912] loop4: detected capacity change from 0 to 8192 [ 50.064275][ T3921] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 50.071514][ T3923] netlink: 32 bytes leftover after parsing attributes in process `syz.3.108'. [ 50.151541][ T3308] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.213541][ T3932] loop1: detected capacity change from 0 to 512 [ 50.221516][ T3932] EXT4-fs: Ignoring removed mblk_io_submit option [ 50.255446][ T3925] loop2: detected capacity change from 0 to 8192 [ 50.266384][ T3932] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 50.307706][ T3932] EXT4-fs (loop1): 1 truncate cleaned up [ 50.333098][ T3938] loop3: detected capacity change from 0 to 2048 [ 50.345360][ T3932] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.419665][ T3938] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 50.599559][ T3951] loop2: detected capacity change from 0 to 1024 [ 50.896077][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.964743][ T3315] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 50.975818][ T3315] CPU: 1 UID: 0 PID: 3315 Comm: syz-executor Not tainted 6.16.0-rc6-syzkaller #0 PREEMPT(voluntary) [ 50.975848][ T3315] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 50.975865][ T3315] Call Trace: [ 50.975873][ T3315] [ 50.975884][ T3315] __dump_stack+0x1d/0x30 [ 50.975906][ T3315] dump_stack_lvl+0xe8/0x140 [ 50.975924][ T3315] dump_stack+0x15/0x1b [ 50.975940][ T3315] dump_header+0x81/0x220 [ 50.975997][ T3315] oom_kill_process+0x334/0x3f0 [ 50.976078][ T3315] out_of_memory+0x979/0xb80 [ 50.976112][ T3315] try_charge_memcg+0x5e6/0x9e0 [ 50.976233][ T3315] charge_memcg+0x51/0xc0 [ 50.976271][ T3315] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 50.976392][ T3315] __read_swap_cache_async+0x1df/0x350 [ 50.976426][ T3315] swap_cluster_readahead+0x277/0x3e0 [ 50.976461][ T3315] swapin_readahead+0xde/0x6f0 [ 50.976507][ T3315] ? __filemap_get_folio+0x4f7/0x6b0 [ 50.976537][ T3315] ? __rcu_read_unlock+0x34/0x70 [ 50.976559][ T3315] ? swap_cache_get_folio+0x77/0x200 [ 50.976669][ T3315] do_swap_page+0x301/0x2430 [ 50.976697][ T3315] ? finish_task_switch+0xad/0x2b0 [ 50.976778][ T3315] ? __pfx_default_wake_function+0x10/0x10 [ 50.976803][ T3315] handle_mm_fault+0x9a5/0x2be0 [ 50.976893][ T3315] ? mas_walk+0xf2/0x120 [ 50.976939][ T3315] do_user_addr_fault+0x636/0x1090 [ 50.976975][ T3315] ? fpregs_restore_userregs+0xe2/0x1d0 [ 50.977013][ T3315] ? switch_fpu_return+0xe/0x20 [ 50.977110][ T3315] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 50.977144][ T3315] exc_page_fault+0x62/0xa0 [ 50.977172][ T3315] asm_exc_page_fault+0x26/0x30 [ 50.977258][ T3315] RIP: 0033:0x7f0950f411a5 [ 50.977279][ T3315] Code: 00 00 00 00 00 83 ff 03 74 7b 83 ff 02 b8 fa ff ff ff 49 89 ca 0f 44 f8 80 3d 9e 53 1c 00 00 74 14 b8 e6 00 00 00 0f 05 f7 d8 66 2e 0f 1f 84 00 00 00 00 00 48 83 ec 28 48 89 54 24 10 89 74 [ 50.977295][ T3315] RSP: 002b:00007ffe67fb3fb8 EFLAGS: 00010246 [ 50.977314][ T3315] RAX: 0000000000000000 RBX: 000000000000003a RCX: 00007f0950f411a3 [ 50.977330][ T3315] RDX: 00007ffe67fb3fd0 RSI: 0000000000000000 RDI: 0000000000000000 [ 50.977345][ T3315] RBP: 00007ffe67fb403c R08: 000000002416f3df R09: 0000000000000000 [ 50.977386][ T3315] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000001388 [ 50.977397][ T3315] R13: 00000000000927c0 R14: 000000000000c4f4 R15: 00007ffe67fb4090 [ 50.977426][ T3315] [ 50.977432][ T3315] memory: usage 307200kB, limit 307200kB, failcnt 351 [ 51.106221][ T3951] EXT4-fs: Ignoring removed orlov option [ 51.111063][ T3315] memory+swap: usage 307156kB, limit 9007199254740988kB, failcnt 0 [ 51.224934][ T3951] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.230827][ T3315] kmem: usage 307176kB, limit 9007199254740988kB, failcnt 0 [ 51.250839][ T3315] Memory cgroup stats for /syz4: [ 51.253536][ T3315] cache 0 [ 51.261519][ T3315] rss 0 [ 51.264396][ T3315] shmem 0 [ 51.267350][ T3315] mapped_file 0 [ 51.270822][ T3315] dirty 0 [ 51.273831][ T3315] writeback 0 [ 51.277172][ T3315] workingset_refault_anon 4 [ 51.281778][ T3315] workingset_refault_file 0 [ 51.285458][ T3957] loop3: detected capacity change from 0 to 2048 [ 51.286320][ T3315] swap 204800 [ 51.296044][ T3315] swapcached 12288 [ 51.299868][ T3315] pgpgin 8965 [ 51.303174][ T3315] pgpgout 8959 [ 51.306686][ T3315] pgfault 14187 [ 51.310227][ T3315] pgmajfault 5 [ 51.313645][ T3315] inactive_anon 12288 [ 51.317719][ T3315] active_anon 0 [ 51.321189][ T3315] inactive_file 12288 [ 51.325253][ T3315] active_file 0 [ 51.328717][ T3315] unevictable 0 [ 51.332217][ T3315] hierarchical_memory_limit 314572800 [ 51.337644][ T3315] hierarchical_memsw_limit 9223372036854771712 [ 51.343891][ T3315] total_cache 0 [ 51.347389][ T3315] total_rss 0 [ 51.350761][ T3315] total_shmem 0 [ 51.354275][ T3315] total_mapped_file 0 [ 51.358360][ T3315] total_dirty 0 [ 51.361836][ T3315] total_writeback 0 [ 51.365678][ T3315] total_workingset_refault_anon 4 [ 51.370772][ T3315] total_workingset_refault_file 0 [ 51.375895][ T3315] total_swap 204800 [ 51.379723][ T3315] total_swapcached 12288 [ 51.383993][ T3315] total_pgpgin 8965 [ 51.387860][ T3315] total_pgpgout 8959 [ 51.391771][ T3315] total_pgfault 14187 [ 51.395803][ T3315] total_pgmajfault 5 [ 51.399713][ T3315] total_inactive_anon 12288 [ 51.404254][ T3315] total_active_anon 0 [ 51.408255][ T3315] total_inactive_file 12288 [ 51.412775][ T3315] total_active_file 0 [ 51.416835][ T3315] total_unevictable 0 [ 51.420834][ T3315] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.111,pid=3924,uid=0 [ 51.435539][ T3315] Memory cgroup out of memory: Killed process 3924 (syz.4.111) total-vm:93888kB, anon-rss:940kB, file-rss:22240kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 51.454587][ T3957] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 51.495702][ T3308] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.639778][ T3967] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 51.700531][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.701153][ T3967] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 51.731903][ T3971] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 51.807994][ T3983] netlink: 8 bytes leftover after parsing attributes in process `syz.1.124'. [ 51.820290][ T3984] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 51.839338][ T3983] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.907050][ T3988] netlink: '’': attribute type 10 has an invalid length. [ 51.918646][ T3989] netlink: 8 bytes leftover after parsing attributes in process `syz.4.125'. [ 51.930886][ T3983] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.016139][ T3983] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.071688][ T3983] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.132598][ T3997] netlink: 'syz.0.127': attribute type 10 has an invalid length. [ 52.140519][ T3997] netlink: 168 bytes leftover after parsing attributes in process `syz.0.127'. [ 52.199056][ T4002] loop0: detected capacity change from 0 to 2048 [ 52.215175][ T4002] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 52.432744][ T3983] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.462972][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.481016][ T3306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.494342][ T3983] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.528975][ T4017] loop2: detected capacity change from 0 to 2048 [ 52.549192][ T4017] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 52.671182][ T4029] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 52.708009][ T3983] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.742714][ T3983] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.788346][ T4034] loop3: detected capacity change from 0 to 2048 [ 52.809310][ T4038] loop1: detected capacity change from 0 to 2048 [ 52.827968][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.872407][ T4038] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 52.959679][ T4007] syz.4.130 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 52.970679][ T4007] CPU: 0 UID: 0 PID: 4007 Comm: syz.4.130 Not tainted 6.16.0-rc6-syzkaller #0 PREEMPT(voluntary) [ 52.970712][ T4007] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 52.970728][ T4007] Call Trace: [ 52.970736][ T4007] [ 52.970820][ T4007] __dump_stack+0x1d/0x30 [ 52.970841][ T4007] dump_stack_lvl+0xe8/0x140 [ 52.970860][ T4007] dump_stack+0x15/0x1b [ 52.970877][ T4007] dump_header+0x81/0x220 [ 52.970931][ T4007] oom_kill_process+0x334/0x3f0 [ 52.970961][ T4007] out_of_memory+0x979/0xb80 [ 52.970994][ T4007] try_charge_memcg+0x5e6/0x9e0 [ 52.971044][ T4007] charge_memcg+0x51/0xc0 [ 52.971155][ T4007] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 52.971246][ T4007] __read_swap_cache_async+0x1df/0x350 [ 52.971356][ T4007] swap_cluster_readahead+0x277/0x3e0 [ 52.971395][ T4007] swapin_readahead+0xde/0x6f0 [ 52.971501][ T4007] ? __filemap_get_folio+0x4f7/0x6b0 [ 52.971543][ T4007] ? swap_cache_get_folio+0x77/0x200 [ 52.971582][ T4007] do_swap_page+0x301/0x2430 [ 52.971607][ T4007] ? css_rstat_updated+0xcd/0x5b0 [ 52.971699][ T4007] ? __pfx_default_wake_function+0x10/0x10 [ 52.971735][ T4007] handle_mm_fault+0x9a5/0x2be0 [ 52.971763][ T4007] ? mas_walk+0xf2/0x120 [ 52.971815][ T4007] do_user_addr_fault+0x636/0x1090 [ 52.971848][ T4007] ? fpregs_restore_userregs+0xad/0x1d0 [ 52.971896][ T4007] ? switch_fpu_return+0xe/0x20 [ 52.971932][ T4007] ? fpregs_assert_state_consistent+0xb4/0xe0 [ 52.971973][ T4007] exc_page_fault+0x62/0xa0 [ 52.972009][ T4007] asm_exc_page_fault+0x26/0x30 [ 52.972059][ T4007] RIP: 0033:0x7f0950de538c [ 52.972079][ T4007] Code: 66 0f 1f 44 00 00 69 3d 26 03 e8 00 e8 03 00 00 48 8d 1d 27 0c 35 00 e8 02 95 12 00 eb 0c 48 81 c3 e0 00 00 00 48 39 eb 74 24 <80> 7b 20 00 74 ee 8b 43 0c 85 c0 74 e7 48 89 df 48 81 c3 e0 00 00 [ 52.972102][ T4007] RSP: 002b:00007ffe67fb3de0 EFLAGS: 00010206 [ 52.972149][ T4007] RAX: 0000000000000000 RBX: 00007f0951135fa0 RCX: 0000000000000000 [ 52.972160][ T4007] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000555570b5d808 [ 52.972172][ T4007] RBP: 00007f0951137ba0 R08: 0000000000000000 R09: 7fffffffffffffff [ 52.972183][ T4007] R10: 0000000000000000 R11: 0000000000000293 R12: 000000000000cf78 [ 52.972252][ T4007] R13: 00007f0951136240 R14: ffffffffffffffff R15: 00007ffe67fb3ef0 [ 52.972277][ T4007] [ 52.972311][ T4007] memory: usage 307200kB, limit 307200kB, failcnt 720 [ 53.204618][ T4007] memory+swap: usage 237196kB, limit 9007199254740988kB, failcnt 0 [ 53.212552][ T4007] kmem: usage 236864kB, limit 9007199254740988kB, failcnt 0 [ 53.220000][ T4007] Memory cgroup stats for /syz4: [ 53.248470][ T4007] cache 0 [ 53.256441][ T4007] rss 0 [ 53.259281][ T4007] shmem 0 [ 53.262479][ T4007] mapped_file 0 [ 53.266111][ T4007] dirty 0 [ 53.269059][ T4007] writeback 0 [ 53.272367][ T4007] workingset_refault_anon 30 [ 53.277171][ T4007] workingset_refault_file 81 [ 53.281787][ T4007] swap 200704 [ 53.285120][ T4007] swapcached 24576 [ 53.288854][ T4007] pgpgin 9316 [ 53.292150][ T4007] pgpgout 9307 [ 53.295679][ T4007] pgfault 14856 [ 53.299160][ T4007] pgmajfault 15 [ 53.302683][ T4007] inactive_anon 24576 [ 53.306722][ T4007] active_anon 0 [ 53.310200][ T4007] inactive_file 12288 [ 53.314251][ T4007] active_file 0 [ 53.317840][ T4007] unevictable 0 [ 53.321315][ T4007] hierarchical_memory_limit 314572800 [ 53.326756][ T4007] hierarchical_memsw_limit 9223372036854771712 [ 53.332935][ T4007] total_cache 0 [ 53.336482][ T4007] total_rss 0 [ 53.339883][ T4007] total_shmem 0 [ 53.343638][ T4007] total_mapped_file 0 [ 53.347866][ T4007] total_dirty 0 [ 53.351465][ T4007] total_writeback 0 [ 53.355382][ T4007] total_workingset_refault_anon 30 [ 53.360513][ T4007] total_workingset_refault_file 81 [ 53.365676][ T4007] total_swap 200704 [ 53.369592][ T4007] total_swapcached 24576 [ 53.373890][ T4007] total_pgpgin 9316 [ 53.377721][ T4007] total_pgpgout 9307 [ 53.381668][ T4007] total_pgfault 14856 [ 53.385725][ T4007] total_pgmajfault 15 [ 53.389792][ T4007] total_inactive_anon 24576 [ 53.394348][ T4007] total_active_anon 0 [ 53.398357][ T4007] total_inactive_file 12288 [ 53.402907][ T4007] total_active_file 0 [ 53.406941][ T4007] total_unevictable 0 [ 53.410945][ T4007] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.130,pid=4007,uid=0 [ 53.425621][ T4007] Memory cgroup out of memory: Killed process 4007 (syz.4.130) total-vm:98124kB, anon-rss:936kB, file-rss:26336kB, shmem-rss:0kB, UID:0 pgtables:136kB oom_score_adj:1000 [ 53.598899][ T4053] loop3: detected capacity change from 0 to 8192 [ 53.653014][ T4063] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 53.678752][ T4060] loop1: detected capacity change from 0 to 2048 [ 53.768789][ T4070] loop3: detected capacity change from 0 to 1024 [ 53.788420][ T4070] EXT4-fs: Ignoring removed nobh option [ 53.794117][ T4070] EXT4-fs: Ignoring removed bh option [ 53.797172][ T4072] netlink: 'syz.4.149': attribute type 10 has an invalid length. [ 53.807438][ T4072] netlink: 168 bytes leftover after parsing attributes in process `syz.4.149'. [ 53.888635][ T4081] loop4: detected capacity change from 0 to 2048 [ 53.986897][ T4090] loop2: detected capacity change from 0 to 2048 [ 54.148952][ T29] kauditd_printk_skb: 95 callbacks suppressed [ 54.148967][ T29] audit: type=1326 audit(1752499652.814:625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4099 comm="syz.2.154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff15b2ce929 code=0x7ffc0000 [ 54.178445][ T29] audit: type=1326 audit(1752499652.814:626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4099 comm="syz.2.154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff15b2ce929 code=0x7ffc0000 [ 54.201699][ T29] audit: type=1326 audit(1752499652.814:627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4099 comm="syz.2.154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=149 compat=0 ip=0x7ff15b2ce929 code=0x7ffc0000 [ 54.293532][ T29] audit: type=1326 audit(1752499652.934:628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4099 comm="syz.2.154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff15b2ce929 code=0x7ffc0000 [ 54.316918][ T29] audit: type=1326 audit(1752499652.934:629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4099 comm="syz.2.154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff15b2ce929 code=0x7ffc0000 [ 54.458341][ T4112] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 54.530551][ T4115] loop2: detected capacity change from 0 to 1024 [ 54.538657][ T4118] netlink: 8 bytes leftover after parsing attributes in process `syz.0.161'. [ 54.548254][ T4115] EXT4-fs: Ignoring removed orlov option [ 54.607023][ T4118] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.619820][ T4110] loop4: detected capacity change from 0 to 8192 [ 54.628703][ T4119] netlink: '’': attribute type 10 has an invalid length. [ 54.675199][ T4118] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.725106][ T4118] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.765954][ T4118] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.777058][ T4125] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 54.787469][ T4125] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 54.833759][ T4118] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.846079][ T4118] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.868832][ T4118] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.899511][ T29] audit: type=1400 audit(1752499653.564:630): avc: denied { create } for pid=4128 comm="syz.3.162" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 54.944676][ T4118] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.959552][ T29] audit: type=1400 audit(1752499653.594:631): avc: denied { write } for pid=4128 comm="syz.3.162" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 54.983859][ T4130] rdma_rxe: rxe_newlink: failed to add veth0_to_bond [ 55.061198][ T4136] loop0: detected capacity change from 0 to 2048 [ 55.082964][ T3308] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 55.094043][ T3308] CPU: 0 UID: 0 PID: 3308 Comm: syz-executor Not tainted 6.16.0-rc6-syzkaller #0 PREEMPT(voluntary) [ 55.094150][ T3308] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 55.094165][ T3308] Call Trace: [ 55.094182][ T3308] [ 55.094188][ T3308] __dump_stack+0x1d/0x30 [ 55.094209][ T3308] dump_stack_lvl+0xe8/0x140 [ 55.094229][ T3308] dump_stack+0x15/0x1b [ 55.094301][ T3308] dump_header+0x81/0x220 [ 55.094338][ T3308] oom_kill_process+0x334/0x3f0 [ 55.094367][ T3308] out_of_memory+0x979/0xb80 [ 55.094491][ T3308] try_charge_memcg+0x5e6/0x9e0 [ 55.094550][ T3308] charge_memcg+0x51/0xc0 [ 55.094651][ T3308] __mem_cgroup_charge+0x28/0xb0 [ 55.094683][ T3308] filemap_add_folio+0x4e/0x1b0 [ 55.094718][ T3308] __filemap_get_folio+0x31e/0x6b0 [ 55.094802][ T3308] filemap_fault+0x41d/0xb40 [ 55.094922][ T3308] __do_fault+0xb9/0x200 [ 55.094951][ T3308] handle_mm_fault+0xf78/0x2be0 [ 55.094979][ T3308] ? mas_walk+0xf2/0x120 [ 55.095023][ T3308] do_user_addr_fault+0x636/0x1090 [ 55.095065][ T3308] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 55.095199][ T3308] exc_page_fault+0x62/0xa0 [ 55.095236][ T3308] asm_exc_page_fault+0x26/0x30 [ 55.095262][ T3308] RIP: 0033:0x7f3a6a1e5974 [ 55.095322][ T3308] Code: 85 ed 09 00 00 48 b8 db 34 b6 d7 82 de 1b 43 48 f7 a4 24 98 00 00 00 48 8b 05 28 fe e7 00 48 69 8c 24 90 00 00 00 e8 03 00 00 <8b> 78 08 48 8b 44 24 18 48 c1 ea 12 4c 8b 0d 39 fd e7 00 48 01 d1 [ 55.095344][ T3308] RSP: 002b:00007ffcc32104e0 EFLAGS: 00010206 [ 55.095364][ T3308] RAX: 0000001b32120000 RBX: 0000000000000073 RCX: 000000000000d6d8 [ 55.095379][ T3308] RDX: 00000000009f4638 RSI: 00007ffcc3210570 RDI: 0000000000000001 [ 55.095392][ T3308] RBP: 00007ffcc321051c R08: 00000000025f954e R09: 7fffffffffffffff [ 55.095403][ T3308] R10: 3fffffffffffffff R11: 0000000000000202 R12: 0000000000001388 [ 55.095414][ T3308] R13: 00000000000927c0 R14: 000000000000d585 R15: 00007ffcc3210570 [ 55.095472][ T3308] [ 55.095480][ T3308] memory: usage 307200kB, limit 307200kB, failcnt 553 [ 55.116603][ T4095] ================================================================== [ 55.119829][ T3308] memory+swap: usage 307400kB, limit 9007199254740988kB, failcnt 0 [ 55.122805][ T4095] BUG: KCSAN: data-race in mem_cgroup_flush_stats_ratelimited / tick_do_update_jiffies64 [ 55.127123][ T3308] kmem: usage 307176kB, limit 9007199254740988kB, failcnt 0 [ 55.131681][ T4095] [ 55.131687][ T4095] read-write to 0xffffffff868099c0 of 8 bytes by interrupt on cpu 0: [ 55.135858][ T3308] Memory cgroup stats for [ 55.140241][ T4095] tick_do_update_jiffies64+0x113/0x1c0 [ 55.140289][ T4095] tick_nohz_handler+0x7f/0x2d0 [ 55.145163][ T3308] /syz1 [ 55.149715][ T4095] __hrtimer_run_queues+0x20f/0x5a0 [ 55.154596][ T3308] : [ 55.158882][ T4095] hrtimer_interrupt+0x21a/0x460 [ 55.365553][ T4095] __sysvec_apic_timer_interrupt+0x5c/0x1d0 [ 55.371481][ T4095] sysvec_apic_timer_interrupt+0x6f/0x80 [ 55.377141][ T4095] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 55.383160][ T4095] console_flush_all+0x55b/0x730 [ 55.388120][ T4095] console_unlock+0xa1/0x330 [ 55.392723][ T4095] vprintk_emit+0x388/0x650 [ 55.397242][ T4095] vprintk_default+0x26/0x30 [ 55.401848][ T4095] vprintk+0x1d/0x30 [ 55.405768][ T4095] _printk+0x79/0xa0 [ 55.409690][ T4095] mem_cgroup_print_oom_meminfo+0x84/0x250 [ 55.415513][ T4095] dump_header+0xa0/0x220 [ 55.419872][ T4095] oom_kill_process+0x334/0x3f0 [ 55.424754][ T4095] out_of_memory+0x979/0xb80 [ 55.429372][ T4095] try_charge_memcg+0x5e6/0x9e0 [ 55.434260][ T4095] charge_memcg+0x51/0xc0 [ 55.438621][ T4095] __mem_cgroup_charge+0x28/0xb0 [ 55.443589][ T4095] filemap_add_folio+0x4e/0x1b0 [ 55.448461][ T4095] __filemap_get_folio+0x31e/0x6b0 [ 55.453598][ T4095] filemap_fault+0x41d/0xb40 [ 55.458216][ T4095] __do_fault+0xb9/0x200 [ 55.462484][ T4095] handle_mm_fault+0xf78/0x2be0 [ 55.467352][ T4095] do_user_addr_fault+0x636/0x1090 [ 55.472492][ T4095] exc_page_fault+0x62/0xa0 [ 55.477021][ T4095] asm_exc_page_fault+0x26/0x30 [ 55.481885][ T4095] [ 55.484220][ T4095] read to 0xffffffff868099c0 of 8 bytes by task 4095 on cpu 1: [ 55.491778][ T4095] mem_cgroup_flush_stats_ratelimited+0x29/0x70 [ 55.498043][ T4095] count_shadow_nodes+0x6a/0x230 [ 55.503006][ T4095] do_shrink_slab+0x63/0x680 [ 55.507616][ T4095] shrink_slab+0x448/0x760 [ 55.512055][ T4095] shrink_node+0x6c3/0x2120 [ 55.516577][ T4095] do_try_to_free_pages+0x3f6/0xcd0 [ 55.521792][ T4095] try_to_free_mem_cgroup_pages+0x1ab/0x410 [ 55.527700][ T4095] try_charge_memcg+0x358/0x9e0 [ 55.532582][ T4095] obj_cgroup_charge_pages+0xa6/0x150 [ 55.537978][ T4095] __memcg_kmem_charge_page+0x9f/0x170 [ 55.543465][ T4095] __alloc_frozen_pages_noprof+0x188/0x360 [ 55.549302][ T4095] alloc_pages_mpol+0xb3/0x250 [ 55.554088][ T4095] alloc_pages_noprof+0x90/0x130 [ 55.559052][ T4095] __vmalloc_node_range_noprof+0x6f2/0xe00 [ 55.564885][ T4095] bpf_map_area_alloc+0xfa/0x150 [ 55.569835][ T4095] bloom_map_alloc+0x1b8/0x2c0 [ 55.574617][ T4095] map_create+0x843/0xb90 [ 55.578976][ T4095] __sys_bpf+0x5ab/0x790 [ 55.583249][ T4095] __x64_sys_bpf+0x41/0x50 [ 55.587691][ T4095] x64_sys_call+0x2478/0x2fb0 [ 55.592384][ T4095] do_syscall_64+0xd2/0x200 [ 55.596898][ T4095] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 55.602805][ T4095] [ 55.605138][ T4095] value changed: 0x00000000ffffa017 -> 0x00000000ffffa018 [ 55.612256][ T4095] [ 55.614586][ T4095] Reported by Kernel Concurrency Sanitizer on: [ 55.620750][ T4095] CPU: 1 UID: 0 PID: 4095 Comm: syz.1.153 Not tainted 6.16.0-rc6-syzkaller #0 PREEMPT(voluntary) [ 55.631351][ T4095] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 55.641420][ T4095] ================================================================== [ 55.659683][ T3308] cache 0 [ 55.662752][ T3308] rss 4096 [ 55.665919][ T3308] shmem 0 [ 55.668870][ T3308] mapped_file 0 [ 55.672340][ T3308] dirty 0 [ 55.675427][ T3308] writeback 4096 [ 55.678997][ T3308] workingset_refault_anon 67 [ 55.683705][ T3308] workingset_refault_file 96 [ 55.688397][ T3308] swap 200704 [ 55.691702][ T3308] swapcached 12288 [ 55.695460][ T3308] pgpgin 20064 [ 55.698848][ T3308] pgpgout 20057 [ 55.702327][ T3308] pgfault 19050 [ 55.705842][ T3308] pgmajfault 41 [ 55.709318][ T3308] inactive_anon 4096 [ 55.713348][ T3308] active_anon 8192 [ 55.717180][ T3308] inactive_file 0 [ 55.720861][ T3308] active_file 16384 [ 55.724733][ T3308] unevictable 0 [ 55.728290][ T3308] hierarchical_memory_limit 314572800 [ 55.733710][ T3308] hierarchical_memsw_limit 9223372036854771712 [ 55.739877][ T3308] total_cache 0 [ 55.743356][ T3308] total_rss 4096 [ 55.747019][ T3308] total_shmem 0 [ 55.750702][ T3308] total_mapped_file 0 [ 55.754854][ T3308] total_dirty 0 [ 55.758333][ T3308] total_writeback 4096 [ 55.762474][ T3308] total_workingset_refault_anon 67 [ 55.767651][ T3308] total_workingset_refault_file 96 [ 55.772789][ T3308] total_swap 200704 [ 55.776673][ T3308] total_swapcached 12288 [ 55.780949][ T3308] total_pgpgin 20064 [ 55.784900][ T3308] total_pgpgout 20057 [ 55.788919][ T3308] total_pgfault 19050 [ 55.792912][ T3308] total_pgmajfault 41 [ 55.796947][ T3308] total_inactive_anon 4096 [ 55.801428][ T3308] total_active_anon 8192 [ 55.805716][ T3308] total_inactive_file 0 [ 55.809882][ T3308] total_active_file 16384 [ 55.814262][ T3308] total_unevictable 0 [ 55.818265][ T3308] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.153,pid=4094,uid=0 [ 55.832900][ T3308] Memory cgroup out of memory: Killed process 4094 (syz.1.153) total-vm:95936kB, anon-rss:940kB, file-rss:22432kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000