last executing test programs: 6.064367625s ago: executing program 4 (id=1566): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00') write$binfmt_script(r0, 0x0, 0x0) 6.038551795s ago: executing program 4 (id=1568): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) eventfd(0xffff) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="1700000015007f", 0x7}], 0x1}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r4}, 0x10) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001480)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x34) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r7}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0xc, &(0x7f0000000040)=@framed={{0x18, 0x8}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r5}}, @func={0x85, 0x0, 0x1, 0x0, 0x3}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, @exit], {0x95, 0x0, 0xff85}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0, @void, @value, @void, @value}, 0x50) prctl$PR_SET_NAME(0xf, &(0x7f0000000340)='+}[p\xb3') r8 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x40008, 0x590, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfff7fffffffffefe, 0xa5d7}, 0x4c58, 0x0, 0x0, 0x0, 0x8, 0xffffffff, 0xb, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d000000180100002020732600000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000003, 0x13, r8, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f00000003c0)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, &(0x7f0000000240)={r9, 0x0, r2}) 5.0993472s ago: executing program 4 (id=1577): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) eventfd(0xffff) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="1700000015007f", 0x7}], 0x1}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r4}, 0x10) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001480)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x34) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r7}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0xc, &(0x7f0000000040)=@framed={{0x18, 0x8}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r5}}, @func={0x85, 0x0, 0x1, 0x0, 0x3}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, @exit], {0x95, 0x0, 0xff85}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0, @void, @value, @void, @value}, 0x50) prctl$PR_SET_NAME(0xf, &(0x7f0000000340)='+}[p\xb3') r8 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x40008, 0x590, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfff7fffffffffefe, 0xa5d7}, 0x4c58, 0x0, 0x0, 0x0, 0x8, 0xffffffff, 0xb, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d000000180100002020732600000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000003, 0x13, r8, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f00000003c0)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, &(0x7f0000000240)={r9, 0x0, r2}) 4.210496884s ago: executing program 4 (id=1586): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xb, &(0x7f0000000480)=ANY=[@ANYRESOCT=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000003680)='sched_switch\x00', r1}, 0x10) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000006c0)=ANY=[@ANYBLOB="140100002d0001000000000000600000010100800c00"/31], 0x114}], 0x1, 0x0, 0x0, 0x44010}, 0x0) r3 = perf_event_open(&(0x7f00000008c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}, 0x42}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x400e, &(0x7f0000000240)={[{@i_version}, {@nodiscard}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@lazytime}, {@jqfmt_vfsold}, {@quota}]}, 0x2, 0x447, &(0x7f0000000500)="$eJzs28+PE1UcAPDvTLfA8kOqwR/8UFfRSPyxCwsiBy8aTTxoYqIHPK67C0EKa9iaCCGKxuDRkHg3Hk38CzzpxagnE694NyTEcAE91Uw7s9uWdtld2y3azycZ+t7MK+99++a1b+btBDCyJrJ/kojtEXE1InY2s+0FJpovt25cnP3rxsXZJOr1t/5MGuVu3rg4WxQt3retyIxFpJ8lsbdLvYvnL5yeqVbnz+X5qdqZ96cWz194bktEzJ+cPzt97NiRw4deODr9fF/izOK6ueejhX27X3vnyhuzx6+8+/O3SRF/Rxx9MrHSwSfr9T5XN1w7WtLJ2BAbwpqUmsM0yo3xvzNKsdx5O+PVT4faOGCg6vV6/YHehy/Vgf+xJIbdAmA4ih/67Pq32DZo6nFXuP5S8wIoi/tWvjWPjEWalyl3XN/200REHL/091fZFoO5DwEA0Ob7bP7zbLf5Xxqt94XuyddQKhFxb0TcFxFHI2JXRNwf0Sj7YEQ8tMb6OxdJbp//pNfWFdgqZfO/F/O1reZWzPqK16iU8tyORvzlxgrVwfwzORDlzSdOVecPdfm/r+avP7zy2xe96m+d/2Vb1oZiLpi349rY5vb3zM3UZv5l2EuufxKxZ6w1/uLzT5ZWApKI2B0Re9ZZx6mnv9nX61iX+OultvhX0Id1pvrXEU81+/9SdMRfSFrXJ0+dmTnZvj45tSWq8wensrPgYNc6fvn18pu96r9z/w9W1v9bo3v/5ypJ63rt4trruPz75z2vadZ7/m9K3m7b9+FMrXbuUMSm5PVmo5f2l2rnpjvKTS+Xz+I/sL9b/GnjO674JPZGRHYSPxwRj0TEo3nbH4uIxyNi/wrx//TyE++tP/7ByuKfW1P/Lyc2Reee7onS6R+/a6u0spb4s/4/0kgdyPes5vtvNe1a39kMAAAA/z1pRGyPJJ1cSqfp5GTzb/h3xda0urBYe+bEwgdn55rPCFSinBZ3upr3g8tJcf+z0pKf7sgfzu8bf1kab+QnZxeqc8MOHkbcth7jP/NHaditAwbO81owuox/GF3GP4wu4x9GV5fxPz4+jIYAG67b7//HQ2gHsPE6xr9lPxghrv9hdBn/MLqMfxhJi+Nx54fkJSRuS0R6VzRDYkCJYX8zAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA9Mc/AQAA//8AOOPp") truncate(&(0x7f0000000080)='./file1\x00', 0xf62) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x169) write$binfmt_elf64(r5, 0x0, 0x78) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYRES32=r1, @ANYBLOB, @ANYRES32=0x0, @ANYRES64=r4, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4a, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x807ff, @void, @value}, 0x94) r7 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MIF(r7, 0x29, 0xca, &(0x7f0000000400)={0x2, 0x1, 0x10, 0x0, 0x2}, 0xc) setsockopt$MRT6_FLUSH(r7, 0x29, 0xd4, &(0x7f0000000080)=0x6, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x17) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESOCT=r6], 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f00000002c0)='kmem_cache_free\x00', r5, 0x0, 0x400000009}, 0x18) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) mmap(&(0x7f0000639000/0x2000)=nil, 0x2000, 0xc, 0x28011, r3, 0x0) socket$inet6(0xa, 0x1, 0x1) socket$nl_route(0x10, 0x3, 0x0) 4.090785375s ago: executing program 3 (id=1587): r0 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x2) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f0000002bc0)=ANY=[@ANYBLOB="18000000000700000000000000000000850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x71, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) rt_sigaction(0x19, 0x0, 0x0, 0x8, &(0x7f0000000440)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, 0x0, 0x20000000) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r4, 0x107, 0x5, &(0x7f0000000040)=@req={0x8, 0x8000, 0x1, 0x380000}, 0x10) r5 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000400), r5) getsockname$packet(r5, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=@newlink={0x48, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r6, 0x0, 0x20040}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x18, 0x2, 0x0, 0x1, @val={0x14, 0x1, {{0x0, 0x0, 0x0, r6, 0x225, 0x68020}}}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40}, 0x0) shmctl$IPC_RMID(0x0, 0x0) shmctl$IPC_INFO(0x0, 0x3, 0x0) write$binfmt_script(r0, &(0x7f0000000300)={'#! ', './file0'}, 0xb) clock_gettime(0x0, &(0x7f0000002ac0)={0x0, 0x0}) recvmmsg(r3, &(0x7f0000002a80)=[{{&(0x7f0000001600)=@un=@abs, 0x80, &(0x7f00000029c0)=[{&(0x7f0000001680)=""/4096, 0x1000}, {&(0x7f0000002680)=""/60, 0x3c}, {&(0x7f00000026c0)=""/95, 0x5f}, {&(0x7f0000002740)=""/134, 0x86}, {&(0x7f0000002800)=""/100, 0x64}, {&(0x7f0000002880)=""/99, 0x63}, {&(0x7f0000002900)=""/170, 0xaa}], 0x7, &(0x7f0000002a40)=""/29, 0x1d}, 0x4f}], 0x1, 0x10000, &(0x7f0000002b00)={r7, r8+10000000}) r9 = epoll_create(0x4) epoll_ctl$EPOLL_CTL_MOD(r9, 0x3, r2, &(0x7f0000002c00)={0x8}) preadv2(r0, &(0x7f00000014c0)=[{&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000000040)=""/123, 0x7b}, {&(0x7f0000000180)=""/93, 0x5d}, {&(0x7f0000000200)=""/205, 0xcd}, {&(0x7f0000001340)=""/162, 0xa2}, {&(0x7f0000001400)=""/141, 0x8d}], 0x6, 0x80, 0xfff, 0xa) ioctl$HIDIOCSFEATURE(0xffffffffffffffff, 0xc0404806, &(0x7f0000002b40)="b29ce40ba2166058e6d9856a2b34893660f1464f10896cd2d97b55236fe5df9115d9ddbbf7a9c5b7dc313216da0d5cf601fd96d4718ebb1d772ea3558d332e5e8d32b256ce92db53c5deee65cfdd0a290211b86816b3e49f5f929a3e") execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r10 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/diskstats\x00', 0x0, 0x0) r11 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) sendfile(r11, r10, 0x0, 0x7) lstat(&(0x7f0000000080)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0}) quotactl$Q_SETQUOTA(0xffffffff80000800, &(0x7f00000000c0)=@loop={'/dev/loop', 0x0}, r12, &(0x7f0000000d00)={0x100, 0x4, 0x0, 0x100040000, 0x2, 0xfffffffffffffffc, 0xfffffffffffffff8, 0x3, 0xe3f1}) 3.279970239s ago: executing program 3 (id=1588): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) eventfd(0xffff) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="1700000015007f", 0x7}], 0x1}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r4}, 0x10) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001480)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x34) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r7}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0xc, &(0x7f0000000040)=@framed={{0x18, 0x8}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r5}}, @func={0x85, 0x0, 0x1, 0x0, 0x3}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, @exit], {0x95, 0x0, 0xff85}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0, @void, @value, @void, @value}, 0x50) prctl$PR_SET_NAME(0xf, &(0x7f0000000340)='+}[p\xb3') r8 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x40008, 0x590, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfff7fffffffffefe, 0xa5d7}, 0x4c58, 0x0, 0x0, 0x0, 0x8, 0xffffffff, 0xb, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d000000180100002020732600000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000003, 0x13, r8, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f00000003c0)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, &(0x7f0000000240)={r9, 0x0, r2}) 2.387647742s ago: executing program 3 (id=1589): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, 0x0) syz_usb_connect(0x0, 0x48, &(0x7f0000000080)=ANY=[], 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00"/11], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB, @ANYRES32=r3, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000180)='sys_enter\x00', r4}, 0x18) syslog(0x2, &(0x7f0000000180)=""/4096, 0x1000) mremap(&(0x7f00001d3000/0x4000)=nil, 0x4000, 0x2000, 0x3, &(0x7f00009ad000/0x2000)=nil) r5 = io_uring_setup(0x200006, &(0x7f00000002c0)={0x0, 0x698c, 0x4, 0x2, 0xfffffffe, 0x0, r2}) close_range(r5, 0xffffffffffffffff, 0x200000000000000) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r7}, 0x10) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f0000001340)=0x0) sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, &(0x7f0000001440)={&(0x7f00000011c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001400)={&(0x7f0000001380)={0x54, 0x0, 0x200, 0x70bd26, 0x25dfdbff, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r8}]}, 0x54}, 0x1, 0x0, 0x0, 0x54}, 0x1) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x100000b, 0x12011, 0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) capget(&(0x7f0000000040), 0x0) 1.943317909s ago: executing program 0 (id=1591): creat(&(0x7f00000000c0)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x41, 0x1, 0x0, 0x0, 0x0, 0x5, 0x22051, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x800000000003}, 0x1100, 0x5dd8, 0x0, 0x3, 0x5, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800840, &(0x7f0000000880)={[{@errors_remount}, {@bsdgroups}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5e}}, {@noauto_da_alloc}, {@bsdgroups}, {@oldalloc}, {@nojournal_checksum}]}, 0x2, 0x459, &(0x7f0000000900)="$eJzs289vFFUcAPDvzLZFfrYi/gBRq8TY+KOlBZWDF40mHjCa6AGPtS2EUKihNRFCpBqDFxNDomfj0cS/wJsXo55MvOrdkBDlAnqqmdmZsrvs9gfd7gr7+STTvjfzdt/77sybeTNvN4CeNZz9SSJ2RMTvETFYzdYXGK7+u3HtwtQ/1y5MJbG09PZfSV7u+rULU2XR8nXbi8xIGpF+mhSV1Js/d/7U5OzszNkiP7Zw+v2x+XPnnzt5evLEzImZMxNHjhw+NP7iCxPPtyXOLK7r+z6a27/39XcvvzF17PJ7P3+XtXdHsb02jnYZzgL/eym3vDKt/nuy3ZV12c6adNLXxYawLpWIyHZXf97/B6MSN3feYLz2SVcbB2yq7Nq0pfXmxSXgLpZEt1sAdEd5oc/uf8ulQ0OP/4WrL1dvgLK4bxRLdUtfeaue3xvt3KT6hyPi2OK/X2dLbNJzCACAWp9PfXU0nm02/kvjgZpyu4o5lKGIuDcidkfEfRGxJyLuj8jLPhgRD61eZVqbaZwaunX8k1657eDWIBv/vVTMbdWP/5abOVQpcjvz+PuT4ydnZw4Wn8lI9G/J8uMr1PHDq7990Wpb7fgvW7L6y7Fg0Y4rfQ0P6KYnFybzQWkbXP04Yl9fs/iT5ZmAJCL2RsS+9b31rjJx8ulv97cqtHr8K2jDPNPSNxFPVff/YjTEX0pWnp8cuydmZw6OlUfFrX759dJbrerfUPxtkO3/bfXHf2ORoaR2vnZ+/XVc+uOzlvc0t3v8DyTv5OejgWLdh5MLC2fHIwaSo3m+bv3EzdeW+bJ8Fv/Igeb9f3fxmiz+hyMiO4gfiYhHI+Kxou2PR8QTEXFghfh/eqX1tvr4t+7oxv6fbnr+Wz7+G/b/+hOVUz9+36r+te3/w3lqpFiTn/9WsdYGbuSzAwAAgDtFmn8HPklHl9NpOjpa/Q7/ntiWzs7NLzxzfO6DM9PV78oPRX9aPukarHkeOp4sFu9YzU8Uz4rL7YeK58ZfVrbm+dGpudnpLscOvW57i/6f+bPS7dYBm67ZPNrEQBcaAnRcY/9P67MX3+xkY4CO8ntt6F2r9P+0U+0AOs/1H3pXs/5/sSFvLgDuTq7/0Lv0f+hd+j/0Lv0fetJqP5KvbPC3/xJ3XCJZW+FIu99Uic1LdPvMBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0B7/BQAA//9Ws+s/") 1.659987324s ago: executing program 0 (id=1592): creat(&(0x7f00000005c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000800)='./file0\x00', &(0x7f00000007c0), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='\x00\x00\x00\x00']) (fail_nth: 6) 1.412515318s ago: executing program 3 (id=1593): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r1 = syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="011300000000850005002a0000797a5f74756e0000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x40040}, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mount$9p_rdma(&(0x7f0000000000), &(0x7f0000000180)='.\x00', &(0x7f0000000200), 0x800, &(0x7f0000000300)=ANY=[@ANYRES32=r2]) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYRESDEC], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000510700140000000000000001b7080000000000007b8af8ff00000000b7080000fcffffff7b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='mm_page_alloc\x00', r4}, 0x10) unshare(0x66000080) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x41, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x800000000001}, 0x1100, 0x5dd8, 0x0, 0x8, 0x0, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x7, 0x7ffc1ff3}]}) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_procs(r5, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) openat$cgroup(r5, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000202300800000000025ad9835850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000440)='kmem_cache_free\x00', r4}, 0xe) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000004c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ff8}]}) getpriority(0x0, 0xffffffffffffffff) mincore(&(0x7f0000ffc000/0x3000)=nil, 0x3000, &(0x7f00000001c0)=""/152) r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/igmp\x00') pread64(r6, &(0x7f0000000180)=""/15, 0xfffffe9c, 0xb6) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000000000000200000004000000002e2e00"], 0x0, 0x1c, 0x0, 0x0, 0x800, 0x0, @void, @value}, 0x28) 1.327199479s ago: executing program 0 (id=1594): bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ANNOUNCE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r1, 0xa09, 0x70bd28, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYRESHEX], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x4, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 1.29216458s ago: executing program 0 (id=1595): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xfffffffc, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$rxrpc(0x21, 0x2, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_emit_ethernet(0xfdef, &(0x7f0000000180)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xfde1, 0x300, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e22, 0x4d, 0x0, @wg=@data}}}}}, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000140), 0x8, 0x800) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200010, &(0x7f0000000300)={[{@jqfmt_vfsold}]}, 0xfe, 0x55d, &(0x7f0000000980)="$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") openat$autofs(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0}, &(0x7f0000000580), 0x0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800"/15], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800019f00000000000000000a000000000000000800010001000000040004"], 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x8810) sendmmsg(r1, &(0x7f0000000000), 0x4000000000001f2, 0x0) 1.135109952s ago: executing program 0 (id=1597): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, 0x0) syz_usb_connect(0x0, 0x48, &(0x7f0000000080)=ANY=[], 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00"/11], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYRES32=r3, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000180)='sys_enter\x00', r4}, 0x18) syslog(0x2, &(0x7f0000000180)=""/4096, 0x1000) mremap(&(0x7f00001d3000/0x4000)=nil, 0x4000, 0x2000, 0x3, &(0x7f00009ad000/0x2000)=nil) r5 = io_uring_setup(0x200006, &(0x7f00000002c0)={0x0, 0x698c, 0x4, 0x2, 0xfffffffe, 0x0, r2}) close_range(r5, 0xffffffffffffffff, 0x200000000000000) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f0000001340)=0x0) sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, &(0x7f0000001440)={&(0x7f00000011c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001400)={&(0x7f0000001380)={0x54, 0x0, 0x200, 0x70bd26, 0x25dfdbff, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r7}]}, 0x54}, 0x1, 0x0, 0x0, 0x54}, 0x1) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x100000b, 0x12011, 0xffffffffffffffff, 0x0) capget(&(0x7f0000000040), 0x0) 1.127669162s ago: executing program 1 (id=1598): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000010"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1900000004000000040000000500000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r5}, &(0x7f0000000800), &(0x7f0000000840)=r6}, 0x20) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='tlb_flush\x00', r7}, 0x10) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r8}, 0x10) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1900000004000000080000000802000000000000", @ANYRES32, @ANYBLOB="0004933f94d78b70278600000002a6c3437c7876ca3c335e2aef8ea86047989fe4a73e805ee42ba656d5550d1554bbbc0980f9372612c9ccc30ddb3de641b3de2b2c46656c88f6bda22de4ba97278cde198c6e097d6cffe40617cc05ec5846549230aaee12283691810410fd1d0a8cb0a183", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000700000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r10}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) io_setup(0x4202, 0x0) r11 = socket$inet6(0xa, 0x80000, 0x0) bind$inet6(r11, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r12 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r11, 0x5) connect$inet(r12, &(0x7f0000000000)={0x2, 0x4e20, @local}, 0x10) close_range(r11, 0xffffffffffffffff, 0x0) 1.126945512s ago: executing program 3 (id=1599): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) eventfd(0xffff) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="1700000015007f", 0x7}], 0x1}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r4}, 0x10) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001480)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x34) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r7}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0xc, &(0x7f0000000040)=@framed={{0x18, 0x8}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r5}}, @func={0x85, 0x0, 0x1, 0x0, 0x3}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, @exit], {0x95, 0x0, 0xff85}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0, @void, @value, @void, @value}, 0x50) prctl$PR_SET_NAME(0xf, &(0x7f0000000340)='+}[p\xb3') r8 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x40008, 0x590, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfff7fffffffffefe, 0xa5d7}, 0x4c58, 0x0, 0x0, 0x0, 0x8, 0xffffffff, 0xb, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d000000180100002020732600000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000003, 0x13, r8, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f00000003c0)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, &(0x7f0000000240)={r9, 0x0, r2}) 1.030371734s ago: executing program 4 (id=1600): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r0}, &(0x7f00000002c0), &(0x7f0000000300)=r1}, 0x20) keyctl$set_reqkey_keyring(0xe, 0x1) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_usbip_server_init(0x4) syz_usbip_server_init(0x4) syz_usbip_server_init(0x2) syz_usbip_server_init(0x2) syz_usbip_server_init(0x0) syz_usbip_server_init(0x0) syz_usbip_server_init(0x3) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpu.stat\x00', 0x275a, 0x0) syz_usbip_server_init(0x4) write$UHID_CREATE2(r2, &(0x7f0000000080)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r2, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x49, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}) io_uring_enter(0xffffffffffffffff, 0x7330, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x300000d, 0x40010, 0xffffffffffffffff, 0x880d8000) 902.729116ms ago: executing program 1 (id=1602): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYRES8=r0, @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018020000", @ANYRES32, @ANYBLOB="00000000000000006600020000000000180000000000000000000000000000009500040000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 826.371487ms ago: executing program 1 (id=1604): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) timer_create(0x5, &(0x7f0000000100)={0x0, 0x19, 0x0, @thr={&(0x7f0000000000)="a07e18e9b45351566678220927ef12144ded1c774bcb681e370e8d21942968d179e5d74e9902417a25d565b9", &(0x7f00000000c0)="92f0b21fa183094b7b3704ed8f801abed1b679cd"}}, &(0x7f0000000200)=0x0) timer_gettime(r0, &(0x7f0000000240)) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) request_key(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'syz', 0x0}, 0x0, 0xfffffffffffffffe) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x800000000003}, 0x1100, 0x5dd8, 0x0, 0x5, 0x0, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x2, 0x12062, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x15bd}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) 825.510737ms ago: executing program 2 (id=1605): sysfs$1(0x1, &(0x7f0000000000)='kmem_cache_free\x00') syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f00000008c0)={[], [{@seclabel}, {@mask={'mask', 0x3d, '^MAY_WRITE'}}, {@fsname={'fsname', 0x3d, '\\*'}}, {@pcr={'pcr', 0x3d, 0xb}}, {@uid_eq}, {@smackfsfloor={'smackfsfloor', 0x3d, '\x00'}}, {@hash}, {@func={'func', 0x3d, 'KEXEC_KERNEL_CHECK'}}, {@fowner_lt}]}, 0x1, 0x763, &(0x7f0000002340)="$eJzs3d9rW1UcAPDvzZJldtN24MtEsLAHB2Op6+aYIDLRBxlOhvrmw5a1WRlNl9Gkoy2TOVEEn0SGz/548s1/QPRF33wUfBN8ksGQMV8EIXLTm5quyZp2zaLr5wM3fE/uTc/95t577knPIQlgxxpPH3IRByLikyRiNHs+iYhCK8pHnFrZ7u6da1PpkkSz+dYfSWubtBwdr0ntTR92Z4UPIw7n1tdbX1qeLVerlfmsPNGYuzJRX1o+cmmuPFOZqVyePPHCscmTk8+fnNy2XP/64I0Lp7959aub7//025vvnn4miVOxL1vXmcd2GY/x7D0ppG/hGq9sd2VDlgx7B9iS9NLctXKVx4EYjV2tCAB4lF2PiCYAsMMk7v8AsMO0/w/QHtsbxDjYf9ntlyNiT0f+xfaafDZmt6c1DjpyN1kzMpJExNg21D8eEYvvfPRtusSAxiEBunnvRkScHxtf3/4n6+YsbNZzfWwzfk9Z+wcPz/dp/+dkt/5fbrX/E136P8Uu1+5WbHz9525tQzU9pf2/F7v2f1cnrY3tykqPt/p8heTipWolbdueiIhDUSim5aP3qeP4py/92GtdZ/8vXdL6233BbD9u5YtrXzNdbpQfJOdOt29EPJXvln+yevyTHv3fs33W0fjh6S97rds4/8FqfhHxbNfj/++MtqRjfmIx1s1PnGidDxPts2K90sej+3vVP+z80+M/cv/8x5LO+Zr1zdfx82d/v9Zr3VbP/93J2624Pc10sdxozB+N2J28vv75jimki7+ulNvbp/kfOnj/9q/b+Z9+JjzfZ/6zn399Yev5D1aa//Smjv/mg4O/fNc9n2Y223jD43+8FR3Knumn/et3Bx/kvQMAAAAAAAAAAAAAAAAAAAAAAACAfuUiYl8kudJqnMuVSiu/4f1kjOSqtXrj8MXawuXpaP1W9lgUcu1vuhzt+D7Uo9n34bfLk/eUj0XE/oi4WXysVS5N1arTw04eAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADJ7e/z+f+r34rD3DgAYmD3D3gEA4KFz/weAncf9HwB2nnvu//n0oTCkfQEAHg6f/wFg53H/BwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYMDOnjmTLs0/71ybSsvTV5cWZmtXj0xX6rOluYWp0lRt/kppplabqZ4vTdXmev6h5orrtdqVyROxsDjRqNQbE/Wl5XNztYXLjXOX5sozlXOVwtpXFQeeIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD0ob60PFuuVivzrSDfDqoCgeDRDEaq1SQfscHGw26ZAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP4f/gkAAP//oBEhYg==") r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000faffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000080850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r2 = signalfd4(0xffffffffffffffff, &(0x7f00000000c0), 0x8, 0x0) faccessat2(r2, &(0x7f0000001400)='\x00', 0x0, 0x1100) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x45) r4 = openat$selinux_policy(0xffffff9c, &(0x7f0000001400), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10010, 0xffffffffffffffff, 0xccc5000) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000600)=ANY=[@ANYRES64=r4, @ANYRES64=r3, @ANYRES8=r4, @ANYRESOCT=0x0], &(0x7f0000000180)='GPL\x00', 0x800000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0x1}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x7f, 0x7ffc0002}]}) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000f00)='kfree\x00', r6}, 0x18) bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000040), 0x10) prctl$PR_SET_NAME(0xf, 0x0) setrlimit(0x40000000000008, &(0x7f0000000000)) memfd_secret(0x0) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0xd, 0x8, &(0x7f0000000a40)=ANY=[@ANYBLOB="18000000ec07000000000000020000b96cf89f0d226c3e00186400000c00000000000000ffffff7f185100000000000000000000008a4c00e4faffff9400000000000000"], &(0x7f00000006c0)='GPL\x00', 0x9, 0x0, 0x0, 0x41100, 0x75066b4f7277ef64, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000700)={0x7, 0x2}, 0x8, 0x10, &(0x7f0000000280)={0x1, 0x5, 0xfefe, 0x6}, 0x10, 0x0, r4, 0x0, &(0x7f0000000780)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r3, 0xffffffffffffffff], &(0x7f00000007c0), 0x10, 0x5, @value=r4}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/partitions\x00', 0x0, 0x0) preadv2(r7, &(0x7f0000001d00)=[{&(0x7f0000001b80)=""/109, 0x6d}], 0x1, 0x80000000, 0x10001, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x18) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r8, &(0x7f0000000040)={0x2, 0x4e24, @multicast2}, 0x10) sendmmsg$inet(r8, &(0x7f0000000480)=[{{&(0x7f0000000000)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x39}}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000080)="e6", 0x1}], 0x1}}], 0x1, 0x24040890) 587.249481ms ago: executing program 2 (id=1606): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xb, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0, 0x0, 0x8000}, 0x18) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000200), 0x800) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x4058534c, &(0x7f0000000180)={0x80, 0x2a, 0x3}) 575.630751ms ago: executing program 2 (id=1607): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x65, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00') write$binfmt_script(r2, &(0x7f0000002800)={'#! ', './cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0xff1) 560.466931ms ago: executing program 1 (id=1608): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xb, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0, 0x0, 0x8000}, 0x18) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000200), 0x800) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x4058534c, &(0x7f0000000180)={0x80, 0x2a, 0x3}) (fail_nth: 2) 549.006481ms ago: executing program 2 (id=1609): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) open_by_handle_at(r0, &(0x7f0000000080)=@shmem={0xc, 0x1, {0x20}}, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8101, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x6}, 0xffffffffffffffff, 0x0, r0, 0x0) 471.599813ms ago: executing program 2 (id=1610): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x65, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x4c, 0x2, 0x6, 0x101, 0x0, 0xa00, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}]}, 0x4c}}, 0x0) 471.117363ms ago: executing program 1 (id=1611): bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x11, 0xb, &(0x7f0000000740)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0, 0x0, 0x8000}, 0x18) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000200), 0x800) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x4058534c, &(0x7f0000000180)={0x80, 0x2a, 0x3}) 427.992123ms ago: executing program 2 (id=1612): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0500000004000000df7f00000100000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00', @ANYRES32=0x0, @ANYRES32], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0xe3b9}, 0x18) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="05000000220000000080000001"], 0x48) bpf$MAP_DELETE_ELEM(0x15, &(0x7f0000000780)={r2, &(0x7f00000006c0), 0xf0107ff0780000}, 0x20) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff", @ANYBLOB, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00'], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) write(r5, &(0x7f0000004200)='t', 0x1) sendfile(r5, r4, 0x0, 0x3ffff) sendfile(r5, r4, 0x0, 0x7ffff000) ioctl$F2FS_IOC_RESIZE_FS(r3, 0x4008f510, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r6}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000010000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000fe0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, &(0x7f0000000040)={0x1, 0x0, 0x10, 0xb, @vifc_lcl_addr=@dev={0xac, 0x14, 0x14, 0x3a}, @remote}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sys_enter\x00'}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x10) symlink(&(0x7f0000001780)='./file0/../file0\x00', &(0x7f00000017c0)='./file0\x00') r7 = syz_io_uring_setup(0x109, &(0x7f0000000140)={0x0, 0x114df, 0x0, 0x2, 0x89}, &(0x7f00000003c0)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r8, r9, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x29c780}) io_uring_enter(r7, 0x3516, 0xaddf, 0x2, 0x0, 0x1517f) 363.700685ms ago: executing program 1 (id=1613): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0500000004000000df7f00000100000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00', @ANYRES32=0x0, @ANYRES32], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0xe3b9}, 0x18) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="05000000220000000080000001"], 0x48) bpf$MAP_DELETE_ELEM(0x15, &(0x7f0000000780)={r2, &(0x7f00000006c0), 0xf0107ff0780000}, 0x20) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff", @ANYBLOB, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00'], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) write(r5, &(0x7f0000004200)='t', 0x1) sendfile(r5, r4, 0x0, 0x3ffff) sendfile(r5, r4, 0x0, 0x7ffff000) ioctl$F2FS_IOC_RESIZE_FS(r3, 0x4008f510, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r6}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000010000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000fe0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, &(0x7f0000000040)={0x1, 0x0, 0x10, 0xb, @vifc_lcl_addr=@dev={0xac, 0x14, 0x14, 0x3a}, @remote}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sys_enter\x00'}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x10) symlink(&(0x7f0000001780)='./file0/../file0\x00', &(0x7f00000017c0)='./file0\x00') r7 = syz_io_uring_setup(0x109, &(0x7f0000000140)={0x0, 0x114df, 0x0, 0x2, 0x89}, &(0x7f00000003c0)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r8, r9, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x29c780}) io_uring_enter(r7, 0x3516, 0xaddf, 0x2, 0x0, 0x1517f) 184.608627ms ago: executing program 0 (id=1614): openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000004c0), 0x20601, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003", @ANYRES32], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x22f2, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f00000001c0), 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.stat\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f00000002c0)={r3, 0x0, {0x2a00, 0x80010000, 0x0, 0x0, 0x8, 0x0, 0x3, 0x2, 0x4, "fee8a2ab78fc179fd1f8a0a1af1ea89de2b7fb646e00000000000000000300", "2809a100005240f45f819e00000000eaffffffffffff0713319292826500000000000000000000000000007759ffffffffffff00", "90be8b000079b40000000000e98c72c900", [0x82, 0x1]}}) ioctl$F2FS_IOC_RESIZE_FS(r2, 0x4008f510, &(0x7f0000000200)=0xfd3b) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="98000000189abb90ae00000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) r5 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, @perf_bp={0x0, 0x17}, 0x400, 0xffffffff, 0x6, 0x6, 0x0, 0x1, 0xfff9, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r7 = socket$can_j1939(0x1d, 0x2, 0x7) r8 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) r10 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r10, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r10, &(0x7f0000000040)={0x1d, r11, 0x1, {0x1, 0xff, 0x3}, 0xfe}, 0x18) bind$can_j1939(r7, &(0x7f0000000140)={0x1d, r9, 0x1, {0x2, 0xff, 0x3}, 0xfffffffffffffffe}, 0x18) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) mq_open(&(0x7f0000000000)='+)\x00', 0x40, 0x34, &(0x7f0000000080)={0x0, 0x6, 0x6, 0x1}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r12, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) r13 = syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0) ioctl$MON_IOCX_MFETCH(r13, 0xc0109207, &(0x7f0000000c40)={0x0, 0xfe72}) 1.43369ms ago: executing program 3 (id=1615): r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="4000000010000104000000260000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000180012800e00010077697265677561726400000004000280080003"], 0x40}, 0x1, 0xd}, 0x0) vmsplice(r0, &(0x7f0000000080)=[{&(0x7f0000000580)="b042f8d6b250303f88671e8f8ff11017de5adbe377c734d6cd7166d22b8c04b0a24c9fdd6c78073745823ac6978c23a53d93b50e54b8d55209bf41037ca418008fb3f6cc1fd01cfcba45abfefb10a2610f6fd6e72d03891cc67c89ca46741920feb95f16d5839438635a95a4d8496bf925d4a29518d9dc28c6292da2aa21a72ede3cd241a81f5f9412af0d191e71763547b77fbf297ba88bd165f5b36ce46f481a8f070d5a9138f6ada68ab4adcc734e10a36d0f136292a29103416d33c80642166dbdcdce3c395376ddbb4d2adfcaf47af7d7474e57467912c85958f277cf8a10bbfd4225df40f29a008d7d26a028b49df7", 0xf2}], 0x1, 0x3) socket(0x8000000010, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000010000b70400000000000085000000c300000095"], 0x0, 0x33, 0x0, 0x0, 0x41000, 0x64, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r6}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r7 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000200), 0x1, 0x0) writev(r7, &(0x7f0000001380)=[{&(0x7f0000000240)='4', 0x1}, {0x0}], 0x2) 0s ago: executing program 4 (id=1616): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000bc0000000000000000030000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x6, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='kfree\x00', r3, 0x0, 0x3}, 0x18) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000003800)=@newtaction={0x894, 0x30, 0x12f, 0x0, 0x0, {}, [{0x880, 0x1, [@m_police={0x87c, 0x1, 0x0, 0x0, {{0xb}, {0x850, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0xfffffffd, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}, {0x7, 0x0, 0x2, 0x0, 0x0, 0x7}, 0x80000001}}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x80000000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x3, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0xb, 0x0, 0x4, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffff35, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0xfffffffd, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x5, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x80000000, 0x0, 0x1]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x6b3}, @TCA_POLICE_RATE={0x404, 0x2, [0x1, 0x0, 0x5, 0x0, 0x2, 0xb, 0xfffffffb, 0x0, 0x7, 0xfea7, 0x1, 0xffff8000, 0x90, 0x9fd, 0x2, 0xb8, 0xca2, 0x6, 0x3c, 0x7, 0x1, 0xa89c, 0x1, 0xc, 0x492217a0, 0xff, 0x5, 0x3, 0x1ff, 0xe5, 0x2f, 0xe, 0x3, 0xa, 0x3, 0x1, 0x9, 0x11, 0x188, 0x6, 0x3ff, 0x7, 0xd, 0x3, 0xc0000, 0x8, 0x8, 0xffffff40, 0x100, 0x3, 0x5, 0x7, 0xe0b2, 0xfffffffe, 0x8fc, 0x84, 0x9, 0x3, 0x9, 0x80000001, 0x6, 0x0, 0x8, 0x800, 0x9, 0x1, 0x100, 0x401, 0x8, 0x3, 0xb5, 0x10001, 0x4, 0x1, 0x7f, 0xfffffffc, 0x8, 0x2, 0x7f, 0x0, 0x2, 0x4, 0x0, 0x4, 0x8000, 0x0, 0x9, 0x80, 0x7, 0x5, 0x1, 0x0, 0x7, 0xeb22, 0xd, 0x8000, 0xfffffff7, 0x0, 0x4, 0x3ff, 0x400000, 0x10, 0x5, 0x3, 0x10000, 0x5, 0x1, 0x0, 0x2, 0x7, 0x5, 0x6, 0x5, 0x4, 0x2, 0x81, 0x0, 0x10, 0x6, 0x7fff, 0x800, 0xfffffff4, 0x10000, 0x5, 0x8, 0xba, 0x4, 0x89, 0x2, 0x6, 0x100, 0x9, 0xffffa3e0, 0x86b9, 0xff, 0x1, 0x2, 0xf, 0x24b9, 0x3a, 0xe01, 0x1, 0x6430, 0xd, 0x8, 0x0, 0x3, 0x2, 0x3, 0x0, 0x200, 0xfffffeff, 0x9, 0xff, 0xa, 0x6, 0x7, 0x100, 0x1, 0x8001, 0x100, 0xb, 0x8, 0x101, 0x7, 0x2, 0xfffffc00, 0x81, 0x81, 0x200, 0x80000001, 0x0, 0x1, 0x9, 0x7, 0x4, 0xb, 0x80, 0x0, 0x0, 0x0, 0x5, 0x2, 0x65, 0x4, 0xfffffa0c, 0x3, 0x0, 0x4, 0x4, 0x35bc0, 0x9, 0xfffffffa, 0x7, 0x5, 0x3, 0x0, 0x6, 0x8, 0x28, 0x2, 0x5, 0x10001, 0x2, 0xd, 0x0, 0x3, 0x723, 0x0, 0xe, 0x9, 0x4, 0x6, 0x7, 0x1, 0xfffffbff, 0x7, 0x3, 0x8, 0x57, 0xfffffffb, 0x2, 0x7f, 0x2, 0x80000001, 0x0, 0x9, 0xf, 0xfffffffe, 0x928, 0x4, 0xfffffffd, 0x5, 0x6042, 0xb87, 0x6, 0x8d8d, 0x55, 0x101, 0x2, 0x64e8, 0xc, 0x82f, 0x2, 0x80a, 0xfff, 0x6, 0x3f7, 0x4, 0x8, 0x8, 0x1, 0x5d, 0x9, 0xd, 0x80]}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x0, 0x3}}}}]}]}, 0x894}}, 0x0) sendmsg$inet(r2, &(0x7f0000000780)={&(0x7f0000000400)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f0000000140)}], 0x1, &(0x7f0000000840)=[@ip_retopts={{0x10}}], 0x10}, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000200)='task\x00') lseek(r5, 0x3, 0x0) getdents(r5, 0x0, 0x40) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x0, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r6}, 0x10) lsetxattr$security_selinux(&(0x7f00000001c0)='.\x00', &(0x7f0000000240), &(0x7f0000000280)='system_u:object_r:fsadm_exec_t:s0\x00', 0x1001, 0x0) r7 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r8 = syz_io_uring_setup(0x10a, &(0x7f0000000340)={0x0, 0xfd69, 0x80, 0x7ffff, 0x2000088}, &(0x7f00000004c0)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r9, r10, &(0x7f00000002c0)=@IORING_OP_OPENAT2={0x1c, 0x14, 0x0, 0xffffffffffffffff, &(0x7f0000000000)={0x480}, 0x0, 0x18, 0x0, 0x12345}) io_uring_enter(r8, 0x3516, 0xaddf, 0x2, 0x0, 0x1517f) ioctl$NS_GET_OWNER_UID(r2, 0xb704, &(0x7f0000000000)=0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000580)={0x0, 0x0, 0x0}, &(0x7f00000005c0)=0xc) r13 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r13, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="38000000031401002abd7000fedbdf250900020073727a3100000000080041007369770014003300626f6e643000"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) r14 = syz_init_net_socket$x25(0x9, 0x5, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000bc0)={&(0x7f0000000340)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000400)=[{&(0x7f0000000240)="a50769", 0x3}, {&(0x7f0000000840)="e2bb1ed63a57576cc2dcd86b8604be154e8a7600393346db8d", 0x19}], 0x2, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1c0000000000000002000000", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="000000001c", @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000028000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB, @ANYRES32, @ANYRES32, @ANYRES32=r12, @ANYBLOB="000000001c000000000000000100000001000000", @ANYRES32, @ANYRES32=r13, @ANYRES32, @ANYBLOB="000000002c00000000000000010000", @ANYRES16=r14, @ANYRES32, @ANYRES32=r14, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="0000000010000000000000000100000001000000"], 0xe8, 0x200400d1}, 0x80) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000040)={{{@in6=@private0, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in=@loopback}}, &(0x7f0000000180)=0xe8) setresuid(r11, 0x0, r15) syz_pidfd_open(r7, 0x0) kernel console output (not intermixed with test programs): T7542] netlink: 120 bytes leftover after parsing attributes in process `syz.0.1204'. [ 165.625707][ T7542] 9pnet_fd: Insufficient options for proto=fd [ 165.909204][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.947703][ T7547] loop1: detected capacity change from 0 to 1024 [ 166.027710][ T7547] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 166.121071][ T7553] netlink: 244 bytes leftover after parsing attributes in process `syz.3.1207'. [ 166.151191][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.202965][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.336922][ T7555] netlink: 244 bytes leftover after parsing attributes in process `syz.0.1210'. [ 166.539091][ T7553] loop3: detected capacity change from 0 to 512 [ 166.644684][ T7553] EXT4-fs: Ignoring removed i_version option [ 166.706497][ T7555] loop0: detected capacity change from 0 to 512 [ 166.723684][ T7553] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 166.730238][ T7555] EXT4-fs: Ignoring removed i_version option [ 166.747193][ T7569] netlink: 244 bytes leftover after parsing attributes in process `syz.4.1213'. [ 166.770179][ T7555] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 166.803207][ T7553] EXT4-fs (loop3): 1 truncate cleaned up [ 166.825058][ T7553] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 166.843065][ T7555] EXT4-fs (loop0): 1 truncate cleaned up [ 166.864575][ T7555] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 167.047559][ T7569] loop4: detected capacity change from 0 to 512 [ 167.085245][ T7569] EXT4-fs: Ignoring removed i_version option [ 167.100928][ T7569] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 167.183128][ T7569] EXT4-fs (loop4): 1 truncate cleaned up [ 167.259351][ T7569] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 167.488936][ T7580] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(10) [ 167.495598][ T7580] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 167.503158][ T7580] vhci_hcd vhci_hcd.0: Device attached [ 167.513341][ T7580] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(12) [ 167.519987][ T7580] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 167.527619][ T7580] vhci_hcd vhci_hcd.0: Device attached [ 167.563286][ T7580] vhci_hcd vhci_hcd.0: pdev(1) rhport(2) sockfd(14) [ 167.569933][ T7580] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 167.577407][ T7580] vhci_hcd vhci_hcd.0: Device attached [ 167.641231][ T7580] vhci_hcd vhci_hcd.0: pdev(1) rhport(3) sockfd(17) [ 167.647979][ T7580] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 167.655644][ T7580] vhci_hcd vhci_hcd.0: Device attached [ 167.673023][ T3304] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.683344][ T3525] vhci_hcd: vhci_device speed not set [ 167.737420][ T7592] vhci_hcd: connection closed [ 167.742683][ T7586] vhci_hcd: connection closed [ 167.742771][ T7581] vhci_hcd: connection closed [ 167.742945][ T3525] usb 3-1: new full-speed USB device number 3 using vhci_hcd [ 167.747527][ T7583] vhci_hcd: connection closed [ 167.753621][ T4710] vhci_hcd: stop threads [ 167.773478][ T4710] vhci_hcd: release socket [ 167.777924][ T4710] vhci_hcd: disconnect device [ 167.805118][ T7582] vhci_hcd: sendmsg failed!, ret=-32 for 48 [ 167.833523][ T4710] vhci_hcd: stop threads [ 167.833989][ T7600] siw: device registration error -23 [ 167.837841][ T4710] vhci_hcd: release socket [ 167.847803][ T4710] vhci_hcd: disconnect device [ 167.874958][ T4710] vhci_hcd: stop threads [ 167.879279][ T4710] vhci_hcd: release socket [ 167.883827][ T4710] vhci_hcd: disconnect device [ 167.908634][ T4710] vhci_hcd: stop threads [ 167.912968][ T4710] vhci_hcd: release socket [ 167.917409][ T4710] vhci_hcd: disconnect device [ 167.928448][ T7605] 9pnet_virtio: no channels available for device 127.0.0.1 [ 168.284407][ T7613] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(10) [ 168.291060][ T7613] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 168.298616][ T7613] vhci_hcd vhci_hcd.0: Device attached [ 168.335294][ T7613] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(12) [ 168.341958][ T7613] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 168.349594][ T7613] vhci_hcd vhci_hcd.0: Device attached [ 168.373920][ T7613] vhci_hcd vhci_hcd.0: pdev(0) rhport(2) sockfd(14) [ 168.380570][ T7613] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 168.388199][ T7613] vhci_hcd vhci_hcd.0: Device attached [ 168.415631][ T7613] vhci_hcd vhci_hcd.0: pdev(0) rhport(3) sockfd(17) [ 168.422290][ T7613] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 168.430009][ T7613] vhci_hcd vhci_hcd.0: Device attached [ 168.480924][ T7613] vhci_hcd vhci_hcd.0: pdev(0) rhport(4) sockfd(19) [ 168.487575][ T7613] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 168.495244][ T7613] vhci_hcd vhci_hcd.0: Device attached [ 168.501464][ T3380] vhci_hcd: vhci_device speed not set [ 168.520848][ T7613] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 168.540062][ T7613] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 168.559100][ T7613] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 168.567397][ T3380] usb 1-1: new full-speed USB device number 6 using vhci_hcd [ 168.592769][ T7613] vhci_hcd vhci_hcd.0: port 0 already used [ 168.602276][ T7624] vhci_hcd: connection closed [ 168.602311][ T7620] vhci_hcd: connection closed [ 168.602478][ T7622] vhci_hcd: connection closed [ 168.607179][ T7617] vhci_hcd: connection closed [ 168.612196][ T37] vhci_hcd: stop threads [ 168.625560][ T37] vhci_hcd: release socket [ 168.630032][ T37] vhci_hcd: disconnect device [ 168.637028][ T7614] vhci_hcd: connection reset by peer [ 168.666503][ T29] kauditd_printk_skb: 193 callbacks suppressed [ 168.666521][ T29] audit: type=1400 audit(1745088539.188:6898): avc: denied { tracepoint } for pid=7626 comm="syz.2.1225" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 168.703330][ T37] vhci_hcd: stop threads [ 168.707631][ T37] vhci_hcd: release socket [ 168.712091][ T37] vhci_hcd: disconnect device [ 168.717089][ T37] vhci_hcd: stop threads [ 168.717449][ T29] audit: type=1400 audit(1745088539.238:6899): avc: denied { read } for pid=7626 comm="syz.2.1225" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 168.721346][ T37] vhci_hcd: release socket [ 168.721361][ T37] vhci_hcd: disconnect device [ 168.741674][ T37] vhci_hcd: stop threads [ 168.745083][ T29] audit: type=1326 audit(1745088539.238:6900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7626 comm="syz.2.1225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff722cbe169 code=0x7fc00000 [ 168.749751][ T37] vhci_hcd: release socket [ 168.781921][ T37] vhci_hcd: disconnect device [ 168.819238][ T37] vhci_hcd: stop threads [ 168.823584][ T37] vhci_hcd: release socket [ 168.828111][ T37] vhci_hcd: disconnect device [ 169.146084][ T29] audit: type=1400 audit(1745088539.668:6901): avc: denied { execmem } for pid=7552 comm="syz.3.1207" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 169.186820][ T29] audit: type=1400 audit(1745088539.708:6902): avc: denied { create } for pid=7552 comm="syz.3.1207" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 169.221169][ T29] audit: type=1400 audit(1745088539.738:6903): avc: denied { module_request } for pid=7552 comm="syz.3.1207" kmod="net-pf-10-proto-1-type-1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 169.260128][ T29] audit: type=1400 audit(1745088539.768:6904): avc: denied { name_bind } for pid=7635 comm="syz.0.1226" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 169.282427][ T29] audit: type=1400 audit(1745088539.768:6905): avc: denied { node_bind } for pid=7635 comm="syz.0.1226" saddr=255.255.255.255 src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 169.287923][ T7642] loop1: detected capacity change from 0 to 1024 [ 169.345044][ T29] audit: type=1400 audit(1745088539.778:6906): avc: denied { create } for pid=7641 comm="syz.1.1227" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 169.364807][ T29] audit: type=1326 audit(1745088539.838:6907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7626 comm="syz.2.1225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff722c5a359 code=0x7fc00000 [ 169.408432][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 169.430441][ T7642] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 169.433636][ T7648] netlink: 244 bytes leftover after parsing attributes in process `syz.2.1229'. [ 169.491398][ T7642] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7642 comm=syz.1.1227 [ 169.544304][ T7654] 9pnet_virtio: no channels available for device 127.0.0.1 [ 169.556692][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 169.736498][ T7665] loop3: detected capacity change from 0 to 1024 [ 169.753221][ T7666] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 169.763004][ T7665] EXT4-fs: Ignoring removed orlov option [ 169.782848][ T7666] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 169.803610][ T7665] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 170.000958][ T7655] loop2: detected capacity change from 0 to 512 [ 170.035323][ T7655] EXT4-fs: Ignoring removed i_version option [ 170.077951][ T7655] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 170.103732][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 170.133399][ T7655] EXT4-fs (loop2): 1 truncate cleaned up [ 170.167478][ T7655] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 170.507708][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 170.705878][ T7693] serio: Serial port ptm0 [ 170.777832][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.026131][ T7697] 9pnet_virtio: no channels available for device 127.0.0.1 [ 171.560372][ T7705] 9pnet_virtio: no channels available for device 127.0.0.1 [ 171.626160][ T7702] siw: device registration error -23 [ 171.666569][ T7709] netlink: 244 bytes leftover after parsing attributes in process `syz.2.1246'. [ 171.791709][ T7716] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 171.800418][ T7716] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 171.989212][ T7726] loop4: detected capacity change from 0 to 1024 [ 172.019035][ T7726] EXT4-fs: Ignoring removed orlov option [ 172.038511][ T7726] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 172.423564][ T7709] loop2: detected capacity change from 0 to 512 [ 172.488218][ T7709] EXT4-fs: Ignoring removed i_version option [ 172.550893][ T7709] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 172.572329][ T7731] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(10) [ 172.579058][ T7731] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 172.586693][ T7731] vhci_hcd vhci_hcd.0: Device attached [ 172.614115][ T7709] EXT4-fs (loop2): 1 truncate cleaned up [ 172.623099][ T7731] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(12) [ 172.629733][ T7731] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 172.637466][ T7731] vhci_hcd vhci_hcd.0: Device attached [ 172.649923][ T7709] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 172.666941][ T7731] vhci_hcd vhci_hcd.0: pdev(3) rhport(2) sockfd(14) [ 172.673579][ T7731] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 172.681072][ T7731] vhci_hcd vhci_hcd.0: Device attached [ 172.701812][ T7731] vhci_hcd vhci_hcd.0: pdev(3) rhport(3) sockfd(17) [ 172.708458][ T7731] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 172.716128][ T7731] vhci_hcd vhci_hcd.0: Device attached [ 172.762477][ T7731] vhci_hcd vhci_hcd.0: pdev(3) rhport(4) sockfd(19) [ 172.769133][ T7731] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 172.776754][ T7731] vhci_hcd vhci_hcd.0: Device attached [ 172.803499][ T36] vhci_hcd: vhci_device speed not set [ 172.811383][ T3525] usb 3-1: enqueue for inactive port 0 [ 172.816921][ T3525] usb 3-1: enqueue for inactive port 0 [ 172.822849][ T7731] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 172.832539][ T7752] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 172.839077][ T7752] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 172.846592][ T7752] vhci_hcd vhci_hcd.0: Device attached [ 172.854958][ T7731] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 172.862123][ T36] usb 7-1: new full-speed USB device number 7 using vhci_hcd [ 172.871926][ T7731] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 172.875049][ T7752] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(10) [ 172.886768][ T7752] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 172.894251][ T7752] vhci_hcd vhci_hcd.0: Device attached [ 172.901848][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 172.902955][ T7752] vhci_hcd vhci_hcd.0: pdev(0) rhport(2) sockfd(12) [ 172.912130][ T7731] vhci_hcd vhci_hcd.0: port 0 already used [ 172.917496][ T7752] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 172.931047][ T7752] vhci_hcd vhci_hcd.0: Device attached [ 172.941883][ T3525] vhci_hcd: vhci_device speed not set [ 172.953745][ T7752] vhci_hcd vhci_hcd.0: pdev(0) rhport(3) sockfd(14) [ 172.960458][ T7752] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 172.968093][ T7752] vhci_hcd vhci_hcd.0: Device attached [ 172.974776][ T7746] vhci_hcd: connection closed [ 172.975137][ T7735] vhci_hcd: connection reset by peer [ 172.977272][ T7749] vhci_hcd: connection closed [ 172.980258][ T7739] vhci_hcd: connection closed [ 172.985277][ T51] vhci_hcd: stop threads [ 172.998883][ T51] vhci_hcd: release socket [ 173.003339][ T51] vhci_hcd: disconnect device [ 173.009243][ T7737] vhci_hcd: connection closed [ 173.014614][ T51] vhci_hcd: stop threads [ 173.023767][ T51] vhci_hcd: release socket [ 173.028348][ T51] vhci_hcd: disconnect device [ 173.034983][ T7765] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 173.043074][ T51] vhci_hcd: stop threads [ 173.043085][ T51] vhci_hcd: release socket [ 173.043100][ T51] vhci_hcd: disconnect device [ 173.043330][ T51] vhci_hcd: stop threads [ 173.060795][ T51] vhci_hcd: release socket [ 173.065301][ T51] vhci_hcd: disconnect device [ 173.070473][ T7752] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 173.070926][ T51] vhci_hcd: stop threads [ 173.082954][ T51] vhci_hcd: release socket [ 173.087401][ T51] vhci_hcd: disconnect device [ 173.106796][ T7752] vhci_hcd vhci_hcd.0: pdev(0) rhport(6) sockfd(20) [ 173.113445][ T7752] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 173.121097][ T7752] vhci_hcd vhci_hcd.0: Device attached [ 173.161141][ T7765] vhci_hcd vhci_hcd.0: pdev(0) rhport(7) sockfd(24) [ 173.167788][ T7765] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 173.175260][ T7765] vhci_hcd vhci_hcd.0: Device attached [ 173.204523][ T7759] vhci_hcd: connection closed [ 173.204640][ T7772] vhci_hcd: connection closed [ 173.209385][ T7753] vhci_hcd: connection closed [ 173.214600][ T4710] vhci_hcd: stop threads [ 173.223616][ T4710] vhci_hcd: release socket [ 173.228062][ T4710] vhci_hcd: disconnect device [ 173.233332][ T7761] vhci_hcd: connection closed [ 173.233507][ T7769] vhci_hcd: connection closed [ 173.238257][ T7755] vhci_hcd: connection closed [ 173.243865][ T4710] vhci_hcd: stop threads [ 173.252930][ T4710] vhci_hcd: release socket [ 173.257409][ T4710] vhci_hcd: disconnect device [ 173.273350][ T4710] vhci_hcd: stop threads [ 173.277655][ T4710] vhci_hcd: release socket [ 173.282126][ T4710] vhci_hcd: disconnect device [ 173.291260][ T4710] vhci_hcd: stop threads [ 173.295617][ T4710] vhci_hcd: release socket [ 173.300116][ T4710] vhci_hcd: disconnect device [ 173.306316][ T4710] vhci_hcd: stop threads [ 173.310595][ T4710] vhci_hcd: release socket [ 173.315102][ T4710] vhci_hcd: disconnect device [ 173.321516][ T4710] vhci_hcd: stop threads [ 173.325829][ T4710] vhci_hcd: release socket [ 173.330286][ T4710] vhci_hcd: disconnect device [ 173.357193][ T7777] loop4: detected capacity change from 0 to 1024 [ 173.372764][ T7777] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 173.415698][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 173.552862][ T7787] loop4: detected capacity change from 0 to 512 [ 173.560191][ T7787] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 173.587835][ T7787] EXT4-fs (loop4): orphan cleanup on readonly fs [ 173.595463][ T7787] EXT4-fs error (device loop4): ext4_acquire_dquot:6935: comm syz.4.1261: Failed to acquire dquot type 1 [ 173.608003][ T7787] EXT4-fs (loop4): 1 truncate cleaned up [ 173.617796][ T7787] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 173.630822][ T3380] usb 1-1: enqueue for inactive port 0 [ 173.644415][ T7787] serio: Serial port ptm0 [ 173.645234][ T3380] usb 1-1: enqueue for inactive port 0 [ 173.731406][ T3380] vhci_hcd: vhci_device speed not set [ 173.768849][ T29] kauditd_printk_skb: 176 callbacks suppressed [ 173.768867][ T29] audit: type=1400 audit(1745088544.288:7082): avc: denied { write } for pid=7797 comm="syz.0.1264" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 173.803943][ T29] audit: type=1400 audit(1745088544.288:7083): avc: denied { open } for pid=7797 comm="syz.0.1264" path="/dev/sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 173.841149][ T29] audit: type=1326 audit(1745088544.358:7084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7793 comm="syz.3.1263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f407554e169 code=0x7fc00000 [ 173.912911][ T7802] loop0: detected capacity change from 0 to 512 [ 173.933504][ T7802] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 173.953922][ T7802] EXT4-fs (loop0): orphan cleanup on readonly fs [ 173.982490][ T7802] Quota error (device loop0): do_check_range: Getting block 196613 out of range 1-5 [ 173.991968][ T7802] Quota error (device loop0): qtree_read_dquot: Can't read quota structure for id 0 [ 174.001470][ T7802] EXT4-fs error (device loop0): ext4_acquire_dquot:6935: comm syz.0.1264: Failed to acquire dquot type 1 [ 174.043044][ T7802] EXT4-fs (loop0): 1 truncate cleaned up [ 174.051946][ T7802] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 174.068289][ T7802] sg_write: data in/out 209152/1 bytes for SCSI command 0xf2-- guessing data in; [ 174.068289][ T7802] program syz.0.1264 not setting count and/or reply_len properly [ 174.071083][ T29] audit: type=1400 audit(1745088544.588:7085): avc: denied { ioctl } for pid=7797 comm="syz.0.1264" path="/dev/sg0" dev="devtmpfs" ino=135 ioctlcmd=0x2285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 174.154913][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 174.181126][ T7808] loop2: detected capacity change from 0 to 1024 [ 174.189121][ T7808] EXT4-fs: Ignoring removed orlov option [ 174.204159][ T7808] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 174.303133][ T29] audit: type=1326 audit(1745088544.808:7086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7780 comm="syz.1.1260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99582ee169 code=0x7fc00000 [ 174.326632][ T29] audit: type=1326 audit(1745088544.808:7087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7780 comm="syz.1.1260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f99582ee169 code=0x7fc00000 [ 174.326663][ T29] audit: type=1326 audit(1745088544.808:7088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7780 comm="syz.1.1260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99582ee169 code=0x7fc00000 [ 174.373449][ T29] audit: type=1326 audit(1745088544.808:7089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7780 comm="syz.1.1260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99582ee169 code=0x7fc00000 [ 174.410658][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 175.253077][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 175.542990][ T7834] siw: device registration error -23 [ 176.151949][ T7860] loop2: detected capacity change from 0 to 1024 [ 176.202624][ T7860] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 176.253236][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 176.486895][ T7869] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1283'. [ 176.627516][ T7873] 9pnet_virtio: no channels available for device 127.0.0.1 [ 176.725596][ T7877] loop1: detected capacity change from 0 to 512 [ 176.764586][ T7877] EXT4-fs (loop1): 1 orphan inode deleted [ 176.771065][ T7877] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 176.784341][ T1012] EXT4-fs error (device loop1): ext4_release_dquot:6971: comm kworker/u8:5: Failed to release dquot type 1 [ 176.796088][ T7877] ext4 filesystem being mounted at /257/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 176.845347][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 176.855591][ T7882] loop4: detected capacity change from 0 to 512 [ 176.905267][ T7882] EXT4-fs (loop4): 1 orphan inode deleted [ 176.919795][ T7882] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 176.947475][ T12] EXT4-fs error (device loop4): ext4_release_dquot:6971: comm kworker/u8:0: Failed to release dquot type 1 [ 176.967863][ T7882] ext4 filesystem being mounted at /264/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 177.002051][ T7894] loop3: detected capacity change from 0 to 1024 [ 177.016060][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 177.040150][ T7894] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 177.064376][ T7899] 9pnet_virtio: no channels available for device 127.0.0.1 [ 177.112787][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 177.205997][ T7909] 9pnet_virtio: no channels available for device 127.0.0.1 [ 177.285895][ T7913] loop3: detected capacity change from 0 to 512 [ 177.298042][ T7913] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 177.316832][ T7913] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842e12c, mo2=0002] [ 177.331415][ T7913] System zones: 1-12 [ 177.346608][ T7913] EXT4-fs (loop3): orphan cleanup on readonly fs [ 177.360486][ T7913] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.1299: bg 0: block 361: padding at end of block bitmap is not set [ 177.391563][ T7913] EXT4-fs (loop3): Remounting filesystem read-only [ 177.400682][ T7913] EXT4-fs (loop3): 1 truncate cleaned up [ 177.412214][ T7913] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 177.504304][ T7929] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 177.519770][ T7929] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 177.524046][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 177.597724][ T7934] loop3: detected capacity change from 0 to 1024 [ 177.606472][ T7935] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 177.642820][ T7934] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 177.645730][ T7935] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 177.688776][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 177.859139][ T3304] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 177.874603][ T7943] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(10) [ 177.881256][ T7943] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 177.888719][ T7943] vhci_hcd vhci_hcd.0: Device attached [ 177.909419][ T7943] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(12) [ 177.916066][ T7943] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 177.923776][ T7943] vhci_hcd vhci_hcd.0: Device attached [ 177.930781][ T7943] vhci_hcd vhci_hcd.0: pdev(3) rhport(2) sockfd(14) [ 177.937402][ T7943] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 177.944891][ T7943] vhci_hcd vhci_hcd.0: Device attached [ 177.954612][ T7943] vhci_hcd vhci_hcd.0: pdev(3) rhport(3) sockfd(17) [ 177.961249][ T7943] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 177.968927][ T7943] vhci_hcd vhci_hcd.0: Device attached [ 177.976222][ T7943] vhci_hcd vhci_hcd.0: pdev(3) rhport(4) sockfd(19) [ 177.982913][ T7943] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 177.990576][ T7943] vhci_hcd vhci_hcd.0: Device attached [ 178.002945][ T7955] vhci_hcd: connection closed [ 178.003122][ T293] vhci_hcd: stop threads [ 178.003351][ T7953] vhci_hcd: connection closed [ 178.007824][ T293] vhci_hcd: release socket [ 178.012346][ T7944] vhci_hcd: connection reset by peer [ 178.016907][ T293] vhci_hcd: disconnect device [ 178.017084][ T7948] vhci_hcd: connection closed [ 178.033484][ T7951] vhci_hcd: connection closed [ 178.038686][ T293] vhci_hcd: stop threads [ 178.047672][ T293] vhci_hcd: release socket [ 178.052179][ T293] vhci_hcd: disconnect device [ 178.057026][ T293] vhci_hcd: stop threads [ 178.061311][ T293] vhci_hcd: release socket [ 178.065802][ T293] vhci_hcd: disconnect device [ 178.070713][ T293] vhci_hcd: stop threads [ 178.075049][ T293] vhci_hcd: release socket [ 178.079472][ T293] vhci_hcd: disconnect device [ 178.084931][ T293] vhci_hcd: stop threads [ 178.089205][ T293] vhci_hcd: release socket [ 178.093844][ T293] vhci_hcd: disconnect device [ 178.394509][ T7967] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1312'. [ 178.403475][ T7967] netlink: 'syz.2.1312': attribute type 3 has an invalid length. [ 178.411206][ T7967] netlink: 'syz.2.1312': attribute type 4 has an invalid length. [ 178.419085][ T7967] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1312'. [ 178.432536][ T7967] 9pnet_fd: Insufficient options for proto=fd [ 178.594552][ T7975] 9pnet_virtio: no channels available for device 127.0.0.1 [ 178.749131][ T7984] loop3: detected capacity change from 0 to 512 [ 178.766733][ T7984] EXT4-fs (loop3): 1 orphan inode deleted [ 178.773063][ T7984] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 178.785984][ T7984] ext4 filesystem being mounted at /267/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 178.786289][ T29] kauditd_printk_skb: 375 callbacks suppressed [ 178.786305][ T29] audit: type=1400 audit(1745088549.308:7463): avc: denied { mount } for pid=7983 comm="syz.3.1318" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 178.796657][ T293] Quota error (device loop3): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 178.834334][ T293] EXT4-fs error (device loop3): ext4_release_dquot:6971: comm kworker/u8:4: Failed to release dquot type 1 [ 178.844393][ T29] audit: type=1400 audit(1745088549.358:7464): avc: denied { unmount } for pid=3308 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 178.869976][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 178.900692][ T7992] 9pnet_virtio: no channels available for device 127.0.0.1 [ 178.949822][ T29] audit: type=1326 audit(1745088549.468:7465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7990 comm="syz.3.1319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f407554e169 code=0x7ffc0000 [ 178.973416][ T29] audit: type=1326 audit(1745088549.468:7466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7990 comm="syz.3.1319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f407554e169 code=0x7ffc0000 [ 178.997276][ T29] audit: type=1326 audit(1745088549.468:7467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7990 comm="syz.3.1319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7f407554e169 code=0x7ffc0000 [ 179.020741][ T29] audit: type=1326 audit(1745088549.468:7468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7990 comm="syz.3.1319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f407554e169 code=0x7ffc0000 [ 179.044277][ T29] audit: type=1326 audit(1745088549.468:7469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7990 comm="syz.3.1319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f407554e169 code=0x7ffc0000 [ 179.067760][ T29] audit: type=1326 audit(1745088549.468:7470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7990 comm="syz.3.1319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=432 compat=0 ip=0x7f407554e169 code=0x7ffc0000 [ 179.091217][ T29] audit: type=1326 audit(1745088549.468:7471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7990 comm="syz.3.1319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f407554e169 code=0x7ffc0000 [ 179.201087][ T8002] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1324'. [ 179.210091][ T8002] netlink: 'syz.4.1324': attribute type 3 has an invalid length. [ 179.211698][ T8003] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 179.218184][ T8002] netlink: 'syz.4.1324': attribute type 4 has an invalid length. [ 179.227347][ T8003] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 179.234159][ T8002] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1324'. [ 179.257234][ T8004] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 179.266533][ T8004] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 179.294173][ T8002] 9pnet_fd: Insufficient options for proto=fd [ 179.432382][ T8009] loop4: detected capacity change from 0 to 1024 [ 179.462927][ T8009] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 179.479038][ T8009] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8009 comm=syz.4.1325 [ 179.503556][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 179.563078][ T8019] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1327'. [ 179.573719][ T8019] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1327'. [ 179.622958][ T8023] 9pnet_virtio: no channels available for device 127.0.0.1 [ 179.676348][ T8021] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 179.685029][ T8021] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 179.768536][ T8031] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1332'. [ 179.777507][ T8031] netlink: 'syz.0.1332': attribute type 2 has an invalid length. [ 179.785380][ T8031] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1332'. [ 179.805518][ T8031] 9pnet_fd: Insufficient options for proto=fd [ 180.024250][ T8040] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1335'. [ 180.033270][ T8040] netlink: 'syz.0.1335': attribute type 3 has an invalid length. [ 180.041023][ T8040] netlink: 'syz.0.1335': attribute type 4 has an invalid length. [ 180.066128][ T8040] 9pnet_fd: Insufficient options for proto=fd [ 180.150848][ T8047] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 180.160352][ T8047] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 180.296170][ T8056] loop0: detected capacity change from 0 to 512 [ 180.312384][ T8056] EXT4-fs: Ignoring removed i_version option [ 180.328562][ T8058] 9pnet_virtio: no channels available for device 127.0.0.1 [ 180.344250][ T8056] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 180.379536][ T8056] EXT4-fs (loop0): 1 truncate cleaned up [ 180.388186][ T8056] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 180.751280][ T8071] serio: Serial port ptm0 [ 181.093100][ T8083] loop3: detected capacity change from 0 to 1024 [ 181.202822][ T8083] EXT4-fs: Ignoring removed orlov option [ 181.251398][ T8083] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 181.654359][ T8092] loop2: detected capacity change from 0 to 1024 [ 181.685737][ T3304] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 181.697510][ T8092] EXT4-fs: Ignoring removed orlov option [ 181.732448][ T8092] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 181.794266][ T8097] __nla_validate_parse: 2 callbacks suppressed [ 181.794285][ T8097] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1350'. [ 181.809411][ T8097] netlink: 'syz.0.1350': attribute type 3 has an invalid length. [ 181.817214][ T8097] netlink: 'syz.0.1350': attribute type 4 has an invalid length. [ 181.824983][ T8097] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1350'. [ 181.875325][ T8099] netlink: 244 bytes leftover after parsing attributes in process `syz.1.1351'. [ 182.025176][ T8097] 9pnet_fd: Insufficient options for proto=fd [ 182.040457][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 182.580547][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 182.654722][ T8108] 9pnet_virtio: no channels available for device 127.0.0.1 [ 182.676372][ T8110] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1355'. [ 182.812026][ T8099] loop1: detected capacity change from 0 to 512 [ 182.830434][ T8099] EXT4-fs: Ignoring removed i_version option [ 182.839696][ T8115] netlink: 244 bytes leftover after parsing attributes in process `syz.4.1357'. [ 182.874763][ T8099] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 182.897450][ T8116] siw: device registration error -23 [ 182.977291][ T8125] serio: Serial port ptm0 [ 182.994965][ T8099] EXT4-fs (loop1): 1 truncate cleaned up [ 183.006729][ T8099] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 183.217811][ T8130] netlink: 244 bytes leftover after parsing attributes in process `syz.3.1360'. [ 183.491071][ T8115] loop4: detected capacity change from 0 to 512 [ 183.543247][ T8115] EXT4-fs: Ignoring removed i_version option [ 183.581028][ T8115] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 183.658140][ T8115] EXT4-fs (loop4): 1 truncate cleaned up [ 183.694407][ T8115] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 183.715719][ T36] usb 7-1: enqueue for inactive port 0 [ 183.781634][ T36] vhci_hcd: vhci_device speed not set [ 183.886043][ T29] kauditd_printk_skb: 213 callbacks suppressed [ 183.886080][ T29] audit: type=1326 audit(1745088554.408:7685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8121 comm="syz.0.1359" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f941b33a359 code=0x7fc00000 [ 183.996180][ T8133] loop0: detected capacity change from 0 to 512 [ 184.022588][ T8130] loop3: detected capacity change from 0 to 512 [ 184.029673][ T29] audit: type=1400 audit(1745088554.508:7686): avc: denied { read write } for pid=8132 comm="syz.0.1361" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 184.053749][ T29] audit: type=1400 audit(1745088554.508:7687): avc: denied { open } for pid=8132 comm="syz.0.1361" path="/dev/sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 184.121313][ T8133] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 184.154733][ T8130] EXT4-fs: Ignoring removed i_version option [ 184.214662][ T8130] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 184.235917][ T8133] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842e12c, mo2=0002] [ 184.266676][ T8133] System zones: 1-12 [ 184.270714][ T8133] EXT4-fs (loop0): orphan cleanup on readonly fs [ 184.320156][ T8133] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.1361: bg 0: block 361: padding at end of block bitmap is not set [ 184.345692][ T8130] EXT4-fs (loop3): 1 truncate cleaned up [ 184.354560][ T8133] EXT4-fs (loop0): Remounting filesystem read-only [ 184.361208][ T8133] EXT4-fs (loop0): 1 truncate cleaned up [ 184.423543][ T8133] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 184.425703][ T8130] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 184.484053][ T8133] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1361'. [ 184.522685][ T3304] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 184.533271][ T29] audit: type=1400 audit(1745088555.048:7688): avc: denied { unmount } for pid=3304 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 184.601411][ T29] audit: type=1400 audit(1745088555.118:7689): avc: denied { read write } for pid=8138 comm="syz.2.1363" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 184.625062][ T29] audit: type=1400 audit(1745088555.118:7690): avc: denied { open } for pid=8138 comm="syz.2.1363" path="/dev/raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 184.648506][ T29] audit: type=1400 audit(1745088555.118:7691): avc: denied { ioctl } for pid=8138 comm="syz.2.1363" path="/dev/raw-gadget" dev="devtmpfs" ino=142 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 184.673695][ T8142] loop0: detected capacity change from 0 to 1024 [ 184.673799][ T8140] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 184.709281][ T8140] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 184.717566][ T8142] EXT4-fs: Ignoring removed orlov option [ 184.791454][ T29] audit: type=1400 audit(1745088555.288:7692): avc: denied { write } for pid=8141 comm="syz.0.1364" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 184.813295][ T29] audit: type=1400 audit(1745088555.288:7693): avc: denied { add_name } for pid=8141 comm="syz.0.1364" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 184.833878][ T29] audit: type=1400 audit(1745088555.288:7694): avc: denied { create } for pid=8141 comm="syz.0.1364" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 185.060334][ T8149] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1365'. [ 185.069378][ T8149] netlink: 'syz.1.1365': attribute type 3 has an invalid length. [ 185.077285][ T8149] netlink: 'syz.1.1365': attribute type 4 has an invalid length. [ 185.085071][ T8149] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1365'. [ 185.148706][ T8149] 9pnet_fd: Insufficient options for proto=fd [ 185.432280][ T8151] 9pnet_virtio: no channels available for device 127.0.0.1 [ 185.628184][ T8159] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 185.646766][ T8158] netlink: 244 bytes leftover after parsing attributes in process `syz.2.1369'. [ 185.709189][ T8161] serio: Serial port ptm0 [ 185.725614][ T8159] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 186.128819][ T8158] loop2: detected capacity change from 0 to 512 [ 186.268184][ T8158] EXT4-fs: Ignoring removed i_version option [ 186.337439][ T8158] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 186.590219][ T8158] EXT4-fs (loop2): 1 truncate cleaned up [ 187.022719][ T8178] loop1: detected capacity change from 0 to 1024 [ 187.174722][ T8182] serio: Serial port ptm0 [ 187.235389][ T8178] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8178 comm=syz.1.1373 [ 187.312180][ T8188] loop0: detected capacity change from 0 to 1024 [ 187.337009][ T8188] EXT4-fs: Ignoring removed orlov option [ 187.764293][ T8193] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1377'. [ 187.773353][ T8193] netlink: 'syz.2.1377': attribute type 3 has an invalid length. [ 187.781076][ T8193] netlink: 'syz.2.1377': attribute type 4 has an invalid length. [ 187.788975][ T8193] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1377'. [ 187.906865][ T8195] siw: device registration error -23 [ 187.913728][ T8197] 9pnet_fd: Insufficient options for proto=fd [ 188.055541][ T8199] 9pnet_virtio: no channels available for device 127.0.0.1 [ 188.075674][ T8201] loop1: detected capacity change from 0 to 1024 [ 188.338645][ T8208] loop1: detected capacity change from 0 to 512 [ 188.401231][ T8208] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 188.468838][ T8208] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842e12c, mo2=0002] [ 188.508759][ T8208] System zones: 1-12 [ 188.548152][ T8208] EXT4-fs (loop1): orphan cleanup on readonly fs [ 188.577042][ T8208] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.1381: bg 0: block 361: padding at end of block bitmap is not set [ 188.659909][ T8208] EXT4-fs (loop1): Remounting filesystem read-only [ 188.691885][ T8208] EXT4-fs (loop1): 1 truncate cleaned up [ 188.720274][ T8208] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1381'. [ 188.759058][ T8221] 9pnet_virtio: no channels available for device 127.0.0.1 [ 188.878841][ T8226] loop1: detected capacity change from 0 to 1024 [ 188.952037][ T8226] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8226 comm=syz.1.1387 [ 188.967059][ T8229] siw: device registration error -23 [ 188.978917][ T29] kauditd_printk_skb: 93 callbacks suppressed [ 188.978935][ T29] audit: type=1400 audit(1745088559.498:7788): avc: denied { create } for pid=8233 comm="syz.3.1389" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 189.033842][ T8236] 9pnet_virtio: no channels available for device 127.0.0.1 [ 189.040620][ T8238] 9pnet_virtio: no channels available for device 127.0.0.1 [ 189.089610][ T8242] netlink: 244 bytes leftover after parsing attributes in process `syz.1.1391'. [ 189.102570][ T29] audit: type=1326 audit(1745088559.628:7789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8237 comm="syz.3.1392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f407554e169 code=0x7ffc0000 [ 189.148664][ T29] audit: type=1326 audit(1745088559.628:7790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8237 comm="syz.3.1392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f407554e169 code=0x7ffc0000 [ 189.172203][ T29] audit: type=1326 audit(1745088559.628:7791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8237 comm="syz.3.1392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7f407554e169 code=0x7ffc0000 [ 189.195839][ T29] audit: type=1326 audit(1745088559.628:7792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8237 comm="syz.3.1392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f407554e169 code=0x7ffc0000 [ 189.219332][ T29] audit: type=1326 audit(1745088559.628:7793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8237 comm="syz.3.1392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=432 compat=0 ip=0x7f407554e169 code=0x7ffc0000 [ 189.242917][ T29] audit: type=1326 audit(1745088559.628:7794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8237 comm="syz.3.1392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f407554e169 code=0x7ffc0000 [ 189.266557][ T29] audit: type=1326 audit(1745088559.628:7795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8237 comm="syz.3.1392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f407554e169 code=0x7ffc0000 [ 189.290045][ T29] audit: type=1326 audit(1745088559.628:7796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8237 comm="syz.3.1392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f407554e169 code=0x7ffc0000 [ 189.313489][ T29] audit: type=1326 audit(1745088559.628:7797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8237 comm="syz.3.1392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f407554e169 code=0x7ffc0000 [ 189.469266][ T8253] loop3: detected capacity change from 0 to 1024 [ 189.510772][ T8253] EXT4-fs: Ignoring removed orlov option [ 189.520584][ T8242] loop1: detected capacity change from 0 to 512 [ 189.579384][ T8242] EXT4-fs: Ignoring removed i_version option [ 189.595609][ T8242] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 189.679704][ T8242] EXT4-fs (loop1): 1 truncate cleaned up [ 190.419308][ T8284] 9pnet_virtio: no channels available for device 127.0.0.1 [ 190.432645][ T8287] loop0: detected capacity change from 0 to 1024 [ 190.440199][ T8287] EXT4-fs: Ignoring removed orlov option [ 190.470885][ T8288] serio: Serial port ptm0 [ 190.726629][ T8295] loop3: detected capacity change from 0 to 1024 [ 190.755271][ T8295] EXT4-fs: Ignoring removed orlov option [ 191.759896][ T8319] loop1: detected capacity change from 0 to 1024 [ 191.785128][ T8319] EXT4-fs: Ignoring removed orlov option [ 191.826902][ T8321] siw: device registration error -23 [ 192.445132][ T8337] netlink: 120 bytes leftover after parsing attributes in process `syz.0.1418'. [ 192.495309][ T8337] 9pnet_fd: Insufficient options for proto=fd [ 192.683210][ T8348] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 192.707386][ T8349] loop2: detected capacity change from 0 to 1024 [ 192.731476][ T8348] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 192.736262][ T8349] EXT4-fs: Ignoring removed orlov option [ 192.796889][ T8349] EXT4-fs mount: 26 callbacks suppressed [ 192.796906][ T8349] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 192.838323][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 192.915535][ T8358] netlink: 244 bytes leftover after parsing attributes in process `syz.1.1424'. [ 192.934276][ T8356] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(10) [ 192.935461][ T8361] netlink: 120 bytes leftover after parsing attributes in process `syz.0.1426'. [ 192.940910][ T8356] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 192.957460][ T8356] vhci_hcd vhci_hcd.0: Device attached [ 193.021629][ T8356] vhci_hcd vhci_hcd.0: pdev(4) rhport(1) sockfd(12) [ 193.028296][ T8356] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 193.035908][ T8356] vhci_hcd vhci_hcd.0: Device attached [ 193.045284][ T8367] vhci_hcd vhci_hcd.0: pdev(4) rhport(2) sockfd(15) [ 193.051927][ T8367] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 193.059472][ T8367] vhci_hcd vhci_hcd.0: Device attached [ 193.078845][ T8361] 9pnet_fd: Insufficient options for proto=fd [ 193.128210][ T8356] vhci_hcd vhci_hcd.0: pdev(4) rhport(3) sockfd(17) [ 193.134856][ T8356] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 193.142551][ T8356] vhci_hcd vhci_hcd.0: Device attached [ 193.148070][ T3378] vhci_hcd: vhci_device speed not set [ 193.194980][ T8367] vhci_hcd vhci_hcd.0: pdev(4) rhport(4) sockfd(20) [ 193.201654][ T8367] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 193.209303][ T8367] vhci_hcd vhci_hcd.0: Device attached [ 193.214348][ T3378] usb 9-1: new full-speed USB device number 5 using vhci_hcd [ 193.252454][ T8356] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 193.281717][ T8356] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 193.311195][ T8358] loop1: detected capacity change from 0 to 512 [ 193.313776][ T8356] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 193.326515][ T8358] EXT4-fs: Ignoring removed i_version option [ 193.339063][ T8358] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 193.369197][ T8358] EXT4-fs (loop1): 1 truncate cleaned up [ 193.374849][ T8356] vhci_hcd vhci_hcd.0: port 0 already used [ 193.383460][ T8358] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 193.542738][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 193.567301][ T8370] vhci_hcd: connection closed [ 193.567335][ T8364] vhci_hcd: connection closed [ 193.567484][ T8368] vhci_hcd: connection closed [ 193.577267][ T8362] vhci_hcd: connection reset by peer [ 193.587865][ T51] vhci_hcd: stop threads [ 193.588450][ T8372] vhci_hcd: connection closed [ 193.592193][ T51] vhci_hcd: release socket [ 193.601305][ T51] vhci_hcd: disconnect device [ 193.635237][ T51] vhci_hcd: stop threads [ 193.639554][ T51] vhci_hcd: release socket [ 193.644122][ T51] vhci_hcd: disconnect device [ 193.661584][ T51] vhci_hcd: stop threads [ 193.665870][ T51] vhci_hcd: release socket [ 193.670325][ T51] vhci_hcd: disconnect device [ 193.701653][ T51] vhci_hcd: stop threads [ 193.705972][ T51] vhci_hcd: release socket [ 193.710465][ T51] vhci_hcd: disconnect device [ 193.738166][ T51] vhci_hcd: stop threads [ 193.742535][ T51] vhci_hcd: release socket [ 193.747048][ T51] vhci_hcd: disconnect device [ 193.846343][ T8392] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 193.855232][ T8392] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 193.902290][ T8395] serio: Serial port ptm0 [ 194.374950][ T29] kauditd_printk_skb: 479 callbacks suppressed [ 194.374965][ T29] audit: type=1326 audit(1745088564.898:8277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8398 comm="syz.4.1433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fefee5de169 code=0x7fc00000 [ 194.668743][ T29] audit: type=1400 audit(1745088565.188:8278): avc: denied { module_request } for pid=8357 comm="syz.1.1424" kmod="net-pf-10-proto-1-type-1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 194.866208][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 194.971206][ T29] audit: type=1326 audit(1745088565.488:8279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8409 comm="syz.3.1435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f407554e169 code=0x7fc00000 [ 195.057032][ T8419] loop1: detected capacity change from 0 to 1024 [ 195.072427][ T29] audit: type=1326 audit(1745088565.528:8280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8398 comm="syz.4.1433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fefee57a359 code=0x7fc00000 [ 195.095877][ T29] audit: type=1326 audit(1745088565.528:8281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8398 comm="syz.4.1433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7fefee57a41f code=0x7fc00000 [ 195.119304][ T29] audit: type=1326 audit(1745088565.528:8282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8398 comm="syz.4.1433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fefee5de169 code=0x7fc00000 [ 195.157450][ T8419] EXT4-fs: Ignoring removed orlov option [ 195.201362][ T8419] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 195.223724][ T29] audit: type=1400 audit(1745088565.748:8283): avc: denied { read } for pid=8423 comm="syz.4.1440" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 195.246063][ T8424] 9pnet_virtio: no channels available for device 127.0.0.1 [ 195.324039][ T29] audit: type=1326 audit(1745088565.848:8284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8423 comm="syz.4.1440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fefee5de169 code=0x7ffc0000 [ 195.358399][ T29] audit: type=1326 audit(1745088565.848:8285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8423 comm="syz.4.1440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fefee5de169 code=0x7ffc0000 [ 195.381946][ T29] audit: type=1326 audit(1745088565.878:8286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8423 comm="syz.4.1440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fefee5de169 code=0x7ffc0000 [ 195.531767][ T8434] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 195.542784][ T8434] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 195.759392][ T8439] netlink: 244 bytes leftover after parsing attributes in process `syz.3.1445'. [ 195.923790][ T8445] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1447'. [ 195.929384][ T8442] siw: device registration error -23 [ 195.932742][ T8445] netlink: 'syz.2.1447': attribute type 3 has an invalid length. [ 195.945846][ T8445] netlink: 'syz.2.1447': attribute type 4 has an invalid length. [ 195.953808][ T8445] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1447'. [ 195.983427][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 196.073834][ T8451] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 196.085218][ T8439] loop3: detected capacity change from 0 to 512 [ 196.116319][ T8451] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 196.127277][ T8439] EXT4-fs: Ignoring removed i_version option [ 196.146389][ T8439] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 196.180301][ T8439] EXT4-fs (loop3): 1 truncate cleaned up [ 196.195583][ T8439] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 196.481745][ T8465] serio: Serial port ptm0 [ 196.547691][ T8467] loop4: detected capacity change from 0 to 512 [ 196.595216][ T8467] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 196.653105][ T8467] EXT4-fs (loop4): orphan cleanup on readonly fs [ 196.695012][ T8467] EXT4-fs error (device loop4): ext4_acquire_dquot:6935: comm syz.4.1451: Failed to acquire dquot type 1 [ 196.759860][ T8467] EXT4-fs (loop4): 1 truncate cleaned up [ 196.793507][ T8467] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 196.867858][ T8464] sg_write: data in/out 209152/1 bytes for SCSI command 0xf2-- guessing data in; [ 196.867858][ T8464] program syz.4.1451 not setting count and/or reply_len properly [ 197.099357][ T8471] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 197.182596][ T8471] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 197.286277][ T8473] loop1: detected capacity change from 0 to 1024 [ 197.332683][ T8473] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 197.433891][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 197.580099][ T8481] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8) [ 197.586663][ T8481] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 197.594269][ T8481] vhci_hcd vhci_hcd.0: Device attached [ 197.631012][ T8484] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(11) [ 197.637696][ T8484] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 197.645154][ T8484] vhci_hcd vhci_hcd.0: Device attached [ 197.664991][ T8481] vhci_hcd vhci_hcd.0: pdev(1) rhport(2) sockfd(10) [ 197.671662][ T8481] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 197.679357][ T8481] vhci_hcd vhci_hcd.0: Device attached [ 197.701840][ T8484] vhci_hcd vhci_hcd.0: pdev(1) rhport(3) sockfd(15) [ 197.708498][ T8484] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 197.716188][ T8484] vhci_hcd vhci_hcd.0: Device attached [ 197.722336][ T8484] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 197.761909][ T8481] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 197.790829][ T8481] vhci_hcd vhci_hcd.0: pdev(1) rhport(6) sockfd(20) [ 197.797473][ T8481] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 197.805224][ T8481] vhci_hcd vhci_hcd.0: Device attached [ 197.810878][ T3525] vhci_hcd: vhci_device speed not set [ 197.851423][ T8481] vhci_hcd vhci_hcd.0: pdev(1) rhport(7) sockfd(23) [ 197.858076][ T8481] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 197.865580][ T8481] vhci_hcd vhci_hcd.0: Device attached [ 197.881366][ T3525] usb 3-1: new full-speed USB device number 4 using vhci_hcd [ 197.912448][ T8496] vhci_hcd: connection closed [ 197.912618][ T8489] vhci_hcd: connection closed [ 197.912683][ T8482] vhci_hcd: connection reset by peer [ 197.917364][ T8491] vhci_hcd: connection closed [ 197.917561][ T8485] vhci_hcd: connection closed [ 197.922292][ T8487] vhci_hcd: connection closed [ 197.945523][ T1012] vhci_hcd: stop threads [ 197.954516][ T1012] vhci_hcd: release socket [ 197.959132][ T1012] vhci_hcd: disconnect device [ 197.969356][ T8499] loop0: detected capacity change from 0 to 1024 [ 197.971386][ T1012] vhci_hcd: stop threads [ 197.979988][ T1012] vhci_hcd: release socket [ 197.983429][ T8499] EXT4-fs: Ignoring removed orlov option [ 197.984449][ T1012] vhci_hcd: disconnect device [ 198.008255][ T8499] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 198.021018][ T1012] vhci_hcd: stop threads [ 198.025427][ T1012] vhci_hcd: release socket [ 198.029855][ T1012] vhci_hcd: disconnect device [ 198.054069][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 198.064365][ T1012] vhci_hcd: stop threads [ 198.068665][ T1012] vhci_hcd: release socket [ 198.073241][ T1012] vhci_hcd: disconnect device [ 198.092562][ T1012] vhci_hcd: stop threads [ 198.096859][ T1012] vhci_hcd: release socket [ 198.101415][ T1012] vhci_hcd: disconnect device [ 198.112068][ T8504] netlink: 120 bytes leftover after parsing attributes in process `syz.3.1459'. [ 198.123900][ T8504] 9pnet_fd: Insufficient options for proto=fd [ 198.191377][ T1012] vhci_hcd: stop threads [ 198.195719][ T1012] vhci_hcd: release socket [ 198.200246][ T1012] vhci_hcd: disconnect device [ 198.251419][ T3378] usb 9-1: enqueue for inactive port 0 [ 198.266215][ T3378] usb 9-1: enqueue for inactive port 0 [ 198.351360][ T3378] vhci_hcd: vhci_device speed not set [ 198.528428][ T8508] netlink: 244 bytes leftover after parsing attributes in process `syz.1.1460'. [ 198.641728][ T8510] netlink: 244 bytes leftover after parsing attributes in process `syz.3.1461'. [ 198.886913][ T3304] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 199.009247][ T8517] 9pnet_virtio: no channels available for device 127.0.0.1 [ 199.194012][ T8508] loop1: detected capacity change from 0 to 512 [ 199.214593][ T8510] loop3: detected capacity change from 0 to 512 [ 199.306156][ T8510] EXT4-fs: Ignoring removed i_version option [ 199.323302][ T8508] EXT4-fs: Ignoring removed i_version option [ 199.386426][ T8510] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 199.397865][ T8508] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 199.510738][ T8508] EXT4-fs (loop1): 1 truncate cleaned up [ 199.517420][ T8510] EXT4-fs (loop3): 1 truncate cleaned up [ 199.655406][ T8510] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 199.675022][ T8508] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 199.767585][ T29] kauditd_printk_skb: 115 callbacks suppressed [ 199.767605][ T29] audit: type=1400 audit(1745088570.288:8400): avc: denied { mount } for pid=8509 comm="syz.3.1461" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 199.908454][ T29] audit: type=1400 audit(1745088570.318:8401): avc: denied { append } for pid=2986 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=8 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 199.931269][ T29] audit: type=1400 audit(1745088570.348:8402): avc: denied { read write } for pid=8509 comm="syz.3.1461" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 199.955389][ T29] audit: type=1400 audit(1745088570.358:8403): avc: denied { open } for pid=8507 comm="syz.1.1460" path="/dev/loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 199.979430][ T29] audit: type=1400 audit(1745088570.358:8404): avc: denied { ioctl } for pid=3304 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=100 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 200.005048][ T29] audit: type=1400 audit(1745088570.398:8405): avc: denied { write } for pid=8509 comm="syz.3.1461" name="file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 200.027353][ T29] audit: type=1400 audit(1745088570.398:8406): avc: denied { open } for pid=8509 comm="syz.3.1461" name="file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 200.049617][ T29] audit: type=1400 audit(1745088570.408:8407): avc: denied { read } for pid=8507 comm="syz.1.1460" name="file1" dev="loop1" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 200.071845][ T29] audit: type=1400 audit(1745088570.418:8408): avc: denied { map_create } for pid=8526 comm="syz.0.1466" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 200.091151][ T29] audit: type=1400 audit(1745088570.418:8409): avc: denied { map_read map_write } for pid=8526 comm="syz.0.1466" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 200.131533][ T8527] loop0: detected capacity change from 0 to 1024 [ 200.151727][ T8527] EXT4-fs: Ignoring removed orlov option [ 200.274661][ T8527] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 200.738988][ T8545] 9pnet_virtio: no channels available for device 127.0.0.1 [ 200.760553][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 200.856632][ T3304] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 200.882948][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 200.946367][ T8555] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(10) [ 200.953022][ T8555] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 200.959255][ T8559] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 200.960560][ T8555] vhci_hcd vhci_hcd.0: Device attached [ 201.043892][ T8563] serio: Serial port ptm0 [ 201.069767][ T8559] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 201.108207][ T8555] vhci_hcd vhci_hcd.0: pdev(2) rhport(1) sockfd(12) [ 201.114849][ T8555] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 201.122434][ T8555] vhci_hcd vhci_hcd.0: Device attached [ 201.305414][ T8571] vhci_hcd vhci_hcd.0: pdev(2) rhport(2) sockfd(14) [ 201.312092][ T8571] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 201.319540][ T8571] vhci_hcd vhci_hcd.0: Device attached [ 201.507699][ T8555] vhci_hcd vhci_hcd.0: pdev(2) rhport(3) sockfd(17) [ 201.514401][ T8555] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 201.522069][ T8555] vhci_hcd vhci_hcd.0: Device attached [ 201.679297][ T8571] vhci_hcd vhci_hcd.0: pdev(2) rhport(4) sockfd(16) [ 201.685954][ T8571] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 201.693561][ T8571] vhci_hcd vhci_hcd.0: Device attached [ 201.952304][ T8555] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 201.982046][ T8555] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 201.991362][ T3360] vhci_hcd: vhci_device speed not set [ 202.001220][ T8555] vhci_hcd vhci_hcd.0: pdev(2) rhport(7) sockfd(24) [ 202.007857][ T8555] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 202.015493][ T8555] vhci_hcd vhci_hcd.0: Device attached [ 202.051384][ T3360] usb 5-1: new full-speed USB device number 8 using vhci_hcd [ 202.063849][ T8583] netlink: 244 bytes leftover after parsing attributes in process `syz.1.1475'. [ 202.081714][ T8571] vhci_hcd vhci_hcd.0: port 0 already used [ 202.098423][ T8580] vhci_hcd: connection closed [ 202.098481][ T8578] vhci_hcd: connection closed [ 202.103421][ T293] vhci_hcd: stop threads [ 202.112444][ T293] vhci_hcd: release socket [ 202.116877][ T293] vhci_hcd: disconnect device [ 202.122981][ T8557] vhci_hcd: connection reset by peer [ 202.123123][ T8572] vhci_hcd: connection closed [ 202.128446][ T8565] vhci_hcd: connection closed [ 202.131406][ T8575] vhci_hcd: connection closed [ 202.172258][ T293] vhci_hcd: stop threads [ 202.181262][ T293] vhci_hcd: release socket [ 202.185758][ T293] vhci_hcd: disconnect device [ 202.230728][ T293] vhci_hcd: stop threads [ 202.235051][ T293] vhci_hcd: release socket [ 202.239476][ T293] vhci_hcd: disconnect device [ 202.266180][ T293] vhci_hcd: stop threads [ 202.270463][ T293] vhci_hcd: release socket [ 202.275023][ T293] vhci_hcd: disconnect device [ 202.312588][ T293] vhci_hcd: stop threads [ 202.316868][ T293] vhci_hcd: release socket [ 202.321300][ T293] vhci_hcd: disconnect device [ 202.348006][ T293] vhci_hcd: stop threads [ 202.352404][ T293] vhci_hcd: release socket [ 202.356850][ T293] vhci_hcd: disconnect device [ 202.367852][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 202.483373][ T8591] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 202.533012][ T8591] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 202.637552][ T8583] loop1: detected capacity change from 0 to 512 [ 202.655897][ T8583] EXT4-fs: Ignoring removed i_version option [ 202.709221][ T8600] loop2: detected capacity change from 0 to 1024 [ 202.719815][ T8600] EXT4-fs: Ignoring removed orlov option [ 202.729899][ T8583] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 202.785175][ T8600] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 202.872323][ T8583] EXT4-fs (loop1): 1 truncate cleaned up [ 202.896358][ T8583] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 202.982559][ T3525] usb 3-1: enqueue for inactive port 0 [ 203.093245][ T3525] usb 3-1: enqueue for inactive port 0 [ 203.194910][ T3525] vhci_hcd: vhci_device speed not set [ 203.421093][ T8607] 9pnet_virtio: no channels available for device 127.0.0.1 [ 203.506184][ T8609] netlink: 244 bytes leftover after parsing attributes in process `syz.3.1482'. [ 203.591496][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 203.693607][ T8612] 9pnet_virtio: no channels available for device 127.0.0.1 [ 204.055772][ T8620] loop4: detected capacity change from 0 to 512 [ 204.087868][ T8620] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 204.184661][ T8620] EXT4-fs (loop4): orphan cleanup on readonly fs [ 204.244527][ T8620] EXT4-fs error (device loop4): ext4_acquire_dquot:6935: comm syz.4.1484: Failed to acquire dquot type 1 [ 204.338039][ T8620] EXT4-fs (loop4): 1 truncate cleaned up [ 204.386958][ T8609] loop3: detected capacity change from 0 to 512 [ 204.396648][ T8620] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 204.458477][ T8609] EXT4-fs: Ignoring removed i_version option [ 204.554234][ T8619] sg_write: data in/out 209152/1 bytes for SCSI command 0xf2-- guessing data in; [ 204.554234][ T8619] program syz.4.1484 not setting count and/or reply_len properly [ 204.577031][ T8609] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 204.685078][ T8609] EXT4-fs (loop3): 1 truncate cleaned up [ 204.742374][ T8609] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 204.824151][ T29] kauditd_printk_skb: 136 callbacks suppressed [ 204.824169][ T29] audit: type=1400 audit(1745088575.348:8544): avc: denied { read } for pid=8631 comm="syz.2.1489" dev="nsfs" ino=4026532831 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 204.824614][ T8632] netlink: 244 bytes leftover after parsing attributes in process `syz.2.1489'. [ 204.830407][ T29] audit: type=1400 audit(1745088575.348:8545): avc: denied { open } for pid=8631 comm="syz.2.1489" path="net:[4026532831]" dev="nsfs" ino=4026532831 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 204.884052][ T29] audit: type=1400 audit(1745088575.348:8546): avc: denied { create } for pid=8631 comm="syz.2.1489" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 204.941098][ T29] audit: type=1400 audit(1745088575.348:8547): avc: denied { write } for pid=8631 comm="syz.2.1489" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 204.961605][ T29] audit: type=1400 audit(1745088575.428:8548): avc: denied { write } for pid=8608 comm="syz.3.1482" name="file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 204.983813][ T29] audit: type=1400 audit(1745088575.428:8549): avc: denied { open } for pid=8608 comm="syz.3.1482" name="file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 205.005977][ T29] audit: type=1400 audit(1745088575.448:8550): avc: denied { read } for pid=8608 comm="syz.3.1482" name="file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 205.028219][ T29] audit: type=1400 audit(1745088575.448:8551): avc: denied { create } for pid=8608 comm="syz.3.1482" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 205.047951][ T29] audit: type=1400 audit(1745088575.448:8552): avc: denied { setopt } for pid=8608 comm="syz.3.1482" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 205.087080][ T29] audit: type=1400 audit(1745088575.608:8553): avc: denied { unmount } for pid=3303 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 205.133235][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 205.432025][ T8632] loop2: detected capacity change from 0 to 512 [ 205.457184][ T8632] EXT4-fs: Ignoring removed i_version option [ 205.486790][ T8632] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 205.509314][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 205.534106][ T8648] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7) [ 205.540667][ T8648] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 205.548209][ T8648] vhci_hcd vhci_hcd.0: Device attached [ 205.554066][ T8632] EXT4-fs (loop2): 1 truncate cleaned up [ 205.564533][ T8648] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(9) [ 205.569445][ T8632] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 205.571128][ T8648] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 205.571173][ T8648] vhci_hcd vhci_hcd.0: Device attached [ 205.609355][ T8648] vhci_hcd vhci_hcd.0: pdev(3) rhport(2) sockfd(11) [ 205.616019][ T8648] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 205.623693][ T8648] vhci_hcd vhci_hcd.0: Device attached [ 205.668804][ T8648] vhci_hcd vhci_hcd.0: pdev(3) rhport(3) sockfd(13) [ 205.675534][ T8648] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 205.683302][ T8648] vhci_hcd vhci_hcd.0: Device attached [ 205.692243][ T8660] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 205.702214][ T8648] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 205.731742][ T3525] vhci_hcd: vhci_device speed not set [ 205.754091][ T8648] vhci_hcd vhci_hcd.0: pdev(3) rhport(6) sockfd(19) [ 205.760798][ T8648] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 205.768468][ T8648] vhci_hcd vhci_hcd.0: Device attached [ 205.782332][ T8648] vhci_hcd vhci_hcd.0: pdev(3) rhport(7) sockfd(22) [ 205.789075][ T8648] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 205.796594][ T8648] vhci_hcd vhci_hcd.0: Device attached [ 205.801405][ T3525] usb 7-1: new full-speed USB device number 8 using vhci_hcd [ 205.832401][ T8655] vhci_hcd: connection closed [ 205.832534][ T8649] vhci_hcd: connection reset by peer [ 205.841411][ T8662] vhci_hcd: connection closed [ 205.842783][ T8664] vhci_hcd: connection closed [ 205.842796][ T293] vhci_hcd: stop threads [ 205.847506][ T8653] vhci_hcd: connection closed [ 205.852222][ T293] vhci_hcd: release socket [ 205.852240][ T293] vhci_hcd: disconnect device [ 205.856621][ T8651] vhci_hcd: connection closed [ 205.870802][ T293] vhci_hcd: stop threads [ 205.879793][ T293] vhci_hcd: release socket [ 205.884278][ T293] vhci_hcd: disconnect device [ 205.899574][ T293] vhci_hcd: stop threads [ 205.903900][ T293] vhci_hcd: release socket [ 205.908337][ T293] vhci_hcd: disconnect device [ 205.934289][ T293] vhci_hcd: stop threads [ 205.938593][ T293] vhci_hcd: release socket [ 205.943156][ T293] vhci_hcd: disconnect device [ 205.958084][ T293] vhci_hcd: stop threads [ 205.962387][ T293] vhci_hcd: release socket [ 205.966934][ T293] vhci_hcd: disconnect device [ 205.981509][ T293] vhci_hcd: stop threads [ 205.985865][ T293] vhci_hcd: release socket [ 205.990297][ T293] vhci_hcd: disconnect device [ 206.238533][ T8669] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 206.274300][ T8669] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 206.357808][ T8672] netlink: 244 bytes leftover after parsing attributes in process `syz.3.1496'. [ 206.547190][ T8675] loop0: detected capacity change from 0 to 1024 [ 206.571742][ T8675] EXT4-fs: Ignoring removed orlov option [ 206.613165][ T8675] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 206.892655][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 206.920555][ T8672] loop3: detected capacity change from 0 to 512 [ 206.956895][ T8672] EXT4-fs: Ignoring removed i_version option [ 206.974388][ T8672] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 207.282532][ T3360] usb 5-1: enqueue for inactive port 0 [ 207.317884][ T3360] usb 5-1: enqueue for inactive port 0 [ 207.413206][ T3360] vhci_hcd: vhci_device speed not set [ 207.436666][ T8686] siw: device registration error -23 [ 207.631186][ T8672] EXT4-fs (loop3): 1 truncate cleaned up [ 207.646394][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 207.687518][ T8672] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 207.707756][ T3304] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 207.919605][ T8695] loop1: detected capacity change from 0 to 1024 [ 207.978158][ T8695] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 208.004658][ T8695] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8695 comm=syz.1.1504 [ 208.103461][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 208.900394][ T8712] loop4: detected capacity change from 0 to 1024 [ 208.910456][ T8712] EXT4-fs: Ignoring removed orlov option [ 208.969483][ T8712] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 208.989082][ T8723] loop2: detected capacity change from 0 to 512 [ 209.009547][ T8723] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 209.027901][ T8723] EXT4-fs (loop2): orphan cleanup on readonly fs [ 209.042983][ T8723] EXT4-fs error (device loop2): ext4_acquire_dquot:6935: comm syz.2.1506: Failed to acquire dquot type 1 [ 209.060756][ T8723] EXT4-fs (loop2): 1 truncate cleaned up [ 209.071909][ T8723] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 209.180610][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 209.206769][ T8723] sg_write: data in/out 209152/1 bytes for SCSI command 0xf2-- guessing data in; [ 209.206769][ T8723] program syz.2.1506 not setting count and/or reply_len properly [ 209.698112][ T8739] loop3: detected capacity change from 0 to 1024 [ 209.721066][ T8739] EXT4-fs: Ignoring removed orlov option [ 209.755926][ T8739] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 209.841108][ T29] kauditd_printk_skb: 74 callbacks suppressed [ 209.841194][ T29] audit: type=1400 audit(1745088580.358:8626): avc: denied { map_create } for pid=8744 comm="syz.0.1516" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 209.943584][ T29] audit: type=1400 audit(1745088580.368:8627): avc: denied { append } for pid=2986 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=8 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 209.966476][ T29] audit: type=1400 audit(1745088580.398:8628): avc: denied { map_read map_write } for pid=8744 comm="syz.0.1516" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 209.986329][ T29] audit: type=1400 audit(1745088580.398:8629): avc: denied { prog_load } for pid=8744 comm="syz.0.1516" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 210.005452][ T29] audit: type=1400 audit(1745088580.398:8630): avc: denied { read } for pid=8738 comm="syz.3.1514" path="/306/bus/bus" dev="loop3" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 210.027850][ T29] audit: type=1400 audit(1745088580.398:8631): avc: denied { write } for pid=8738 comm="syz.3.1514" path="/306/bus/bus" dev="loop3" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 210.050361][ T29] audit: type=1400 audit(1745088580.398:8632): avc: denied { bpf } for pid=8744 comm="syz.0.1516" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 210.071000][ T29] audit: type=1400 audit(1745088580.398:8633): avc: denied { perfmon } for pid=8744 comm="syz.0.1516" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 210.091914][ T29] audit: type=1400 audit(1745088580.398:8634): avc: denied { prog_run } for pid=8744 comm="syz.0.1516" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 210.110970][ T29] audit: type=1400 audit(1745088580.438:8635): avc: denied { read write } for pid=3303 comm="syz-executor" name="loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 210.164378][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 210.221043][ T8754] loop4: detected capacity change from 0 to 1024 [ 210.231937][ T8755] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 210.371545][ T8755] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 210.379874][ T8754] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 210.555283][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 210.568401][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 210.638124][ T8763] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(8) [ 210.641928][ T8762] loop3: detected capacity change from 0 to 1024 [ 210.644744][ T8763] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 210.658629][ T8763] vhci_hcd vhci_hcd.0: Device attached [ 210.707248][ T8766] vhci_hcd vhci_hcd.0: pdev(4) rhport(1) sockfd(10) [ 210.713897][ T8766] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 210.721442][ T8766] vhci_hcd vhci_hcd.0: Device attached [ 210.738034][ T8762] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 210.772706][ T8763] vhci_hcd vhci_hcd.0: pdev(4) rhport(2) sockfd(12) [ 210.779441][ T8763] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 210.787229][ T8763] vhci_hcd vhci_hcd.0: Device attached [ 210.787468][ T8762] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8762 comm=syz.3.1519 [ 210.832866][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 210.841432][ T8766] vhci_hcd vhci_hcd.0: pdev(4) rhport(3) sockfd(15) [ 210.848452][ T8766] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 210.856103][ T8766] vhci_hcd vhci_hcd.0: Device attached [ 210.861667][ T9] vhci_hcd: vhci_device speed not set [ 210.873465][ T8763] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 210.892077][ T3525] usb 7-1: enqueue for inactive port 0 [ 210.901392][ T3525] usb 7-1: enqueue for inactive port 0 [ 210.911966][ T8763] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 210.931195][ T8763] vhci_hcd vhci_hcd.0: pdev(4) rhport(6) sockfd(20) [ 210.931436][ T9] usb 9-1: new full-speed USB device number 6 using vhci_hcd [ 210.937823][ T8763] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 210.952841][ T8763] vhci_hcd vhci_hcd.0: Device attached [ 210.993211][ T3525] vhci_hcd: vhci_device speed not set [ 211.016559][ T8763] vhci_hcd vhci_hcd.0: pdev(4) rhport(7) sockfd(23) [ 211.023208][ T8763] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 211.030769][ T8763] vhci_hcd vhci_hcd.0: Device attached [ 211.052429][ T8783] netlink: 244 bytes leftover after parsing attributes in process `syz.3.1522'. [ 211.063484][ T8780] vhci_hcd: connection closed [ 211.063625][ T8778] vhci_hcd: connection closed [ 211.063930][ T8773] vhci_hcd: connection closed [ 211.068364][ T8767] vhci_hcd: connection closed [ 211.077959][ T8771] vhci_hcd: connection closed [ 211.080929][ T12] vhci_hcd: stop threads [ 211.083454][ T8764] vhci_hcd: connection reset by peer [ 211.087344][ T12] vhci_hcd: release socket [ 211.101376][ T12] vhci_hcd: disconnect device [ 211.127110][ T12] vhci_hcd: stop threads [ 211.131469][ T12] vhci_hcd: release socket [ 211.135933][ T12] vhci_hcd: disconnect device [ 211.151049][ T12] vhci_hcd: stop threads [ 211.155384][ T12] vhci_hcd: release socket [ 211.159818][ T12] vhci_hcd: disconnect device [ 211.172590][ T12] vhci_hcd: stop threads [ 211.176980][ T12] vhci_hcd: release socket [ 211.181448][ T12] vhci_hcd: disconnect device [ 211.200534][ T12] vhci_hcd: stop threads [ 211.204862][ T12] vhci_hcd: release socket [ 211.209310][ T12] vhci_hcd: disconnect device [ 211.233254][ T12] vhci_hcd: stop threads [ 211.237623][ T12] vhci_hcd: release socket [ 211.242111][ T12] vhci_hcd: disconnect device [ 211.281122][ T8791] loop1: detected capacity change from 0 to 1024 [ 211.281937][ T8788] siw: device registration error -23 [ 211.301874][ T8791] EXT4-fs: Ignoring removed orlov option [ 211.320622][ T8791] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 211.356127][ T8795] loop0: detected capacity change from 0 to 1024 [ 211.374165][ T8795] EXT4-fs: Ignoring removed orlov option [ 211.405245][ T8795] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 211.502328][ T8783] loop3: detected capacity change from 0 to 512 [ 211.519446][ T8783] EXT4-fs: Ignoring removed i_version option [ 211.532032][ T8783] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 211.578690][ T8783] EXT4-fs (loop3): 1 truncate cleaned up [ 211.596374][ T8783] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 212.139361][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 212.194972][ T8807] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 212.235064][ T8807] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 212.314191][ T3304] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 212.409385][ T8813] loop0: detected capacity change from 0 to 1024 [ 212.447301][ T8813] EXT4-fs: Ignoring removed orlov option [ 212.468507][ T8813] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 212.954559][ T8822] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 212.964951][ T8822] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 213.304054][ T3304] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 213.328757][ T8826] 9pnet_virtio: no channels available for device 127.0.0.1 [ 213.402436][ T8832] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 213.409002][ T8832] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 213.416617][ T8832] vhci_hcd vhci_hcd.0: Device attached [ 213.436278][ T8832] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(8) [ 213.442848][ T8832] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 213.450341][ T8832] vhci_hcd vhci_hcd.0: Device attached [ 213.500285][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 213.524039][ T8841] vhci_hcd vhci_hcd.0: pdev(0) rhport(2) sockfd(11) [ 213.530688][ T8841] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 213.538474][ T8841] vhci_hcd vhci_hcd.0: Device attached [ 213.597224][ T8832] vhci_hcd vhci_hcd.0: pdev(0) rhport(3) sockfd(10) [ 213.603892][ T8832] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 213.611549][ T8832] vhci_hcd vhci_hcd.0: Device attached [ 213.617107][ T3525] vhci_hcd: vhci_device speed not set [ 213.634549][ T8832] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 213.643750][ T8832] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 213.661397][ T8832] vhci_hcd vhci_hcd.0: pdev(0) rhport(6) sockfd(18) [ 213.668034][ T8832] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 213.675915][ T8832] vhci_hcd vhci_hcd.0: Device attached [ 213.681512][ T3525] usb 1-1: new full-speed USB device number 7 using vhci_hcd [ 213.693706][ T8832] vhci_hcd vhci_hcd.0: pdev(0) rhport(7) sockfd(21) [ 213.696868][ T8856] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1538'. [ 213.700409][ T8832] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 213.700448][ T8832] vhci_hcd vhci_hcd.0: Device attached [ 213.709381][ T8856] netlink: 'syz.3.1538': attribute type 3 has an invalid length. [ 213.730103][ T8856] netlink: 'syz.3.1538': attribute type 4 has an invalid length. [ 213.737966][ T8856] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1538'. [ 213.749377][ T8853] vhci_hcd: connection closed [ 213.749755][ T8851] vhci_hcd: connection closed [ 213.749957][ T4710] vhci_hcd: stop threads [ 213.761687][ T8847] vhci_hcd: connection closed [ 213.763487][ T4710] vhci_hcd: release socket [ 213.772680][ T4710] vhci_hcd: disconnect device [ 213.781432][ T8837] vhci_hcd: connection closed [ 213.781588][ T8842] vhci_hcd: connection closed [ 213.786698][ T8833] vhci_hcd: connection reset by peer [ 213.796823][ T4710] vhci_hcd: stop threads [ 213.801110][ T4710] vhci_hcd: release socket [ 213.805663][ T4710] vhci_hcd: disconnect device [ 213.820825][ T8856] 9pnet_fd: Insufficient options for proto=fd [ 213.827295][ T4710] vhci_hcd: stop threads [ 213.831623][ T4710] vhci_hcd: release socket [ 213.836067][ T4710] vhci_hcd: disconnect device [ 213.850995][ T4710] vhci_hcd: stop threads [ 213.855332][ T4710] vhci_hcd: release socket [ 213.859759][ T4710] vhci_hcd: disconnect device [ 213.891427][ T4710] vhci_hcd: stop threads [ 213.895774][ T4710] vhci_hcd: release socket [ 213.900205][ T4710] vhci_hcd: disconnect device [ 213.911749][ T4710] vhci_hcd: stop threads [ 213.916114][ T4710] vhci_hcd: release socket [ 213.920633][ T4710] vhci_hcd: disconnect device [ 214.013592][ T8861] loop4: detected capacity change from 0 to 512 [ 214.021249][ T8861] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 214.057097][ T8861] EXT4-fs (loop4): orphan cleanup on readonly fs [ 214.071738][ T8861] EXT4-fs error (device loop4): ext4_acquire_dquot:6935: comm syz.4.1539: Failed to acquire dquot type 1 [ 214.146318][ T8861] EXT4-fs (loop4): 1 truncate cleaned up [ 214.172721][ T8868] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 214.194315][ T8868] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 214.212611][ T8861] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 214.315804][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 214.373718][ T8878] loop0: detected capacity change from 0 to 1024 [ 214.380519][ T8878] EXT4-fs: Ignoring removed orlov option [ 214.389933][ T8878] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 215.034674][ T8894] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 215.062299][ T8894] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 215.179101][ T29] kauditd_printk_skb: 188 callbacks suppressed [ 215.179117][ T29] audit: type=1326 audit(1745088585.698:8822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8875 comm="syz.2.1543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff722c5a359 code=0x7fc00000 [ 215.236822][ T3304] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 215.265004][ T29] audit: type=1400 audit(1745088585.788:8823): avc: denied { create } for pid=8896 comm="syz.2.1549" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 215.265380][ T8897] netlink: 244 bytes leftover after parsing attributes in process `syz.2.1549'. [ 215.326593][ T29] audit: type=1400 audit(1745088585.788:8824): avc: denied { write } for pid=8896 comm="syz.2.1549" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 215.347140][ T29] audit: type=1326 audit(1745088585.818:8825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8892 comm="syz.3.1547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f407554e169 code=0x7ffc0000 [ 215.370570][ T29] audit: type=1326 audit(1745088585.818:8826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8892 comm="syz.3.1547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f407554e169 code=0x7ffc0000 [ 215.394037][ T29] audit: type=1326 audit(1745088585.838:8827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8883 comm="syz.1.1545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99582ee169 code=0x7fc00000 [ 215.469099][ T8903] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1550'. [ 215.478072][ T8903] netlink: 'syz.1.1550': attribute type 3 has an invalid length. [ 215.485875][ T8903] netlink: 'syz.1.1550': attribute type 4 has an invalid length. [ 215.493679][ T8903] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1550'. [ 215.508664][ T8905] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1551'. [ 215.517802][ T8905] netlink: 'syz.0.1551': attribute type 3 has an invalid length. [ 215.525585][ T8905] netlink: 'syz.0.1551': attribute type 4 has an invalid length. [ 215.533336][ T8905] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1551'. [ 215.548735][ T8905] 9pnet_fd: Insufficient options for proto=fd [ 215.573088][ T8903] 9pnet_fd: Insufficient options for proto=fd [ 215.822481][ T8897] loop2: detected capacity change from 0 to 512 [ 215.829559][ T8907] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1552'. [ 215.846912][ T8897] EXT4-fs: Ignoring removed i_version option [ 215.882276][ T8897] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 215.927733][ T8897] EXT4-fs (loop2): 1 truncate cleaned up [ 215.938654][ T8897] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 215.997560][ T8914] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 216.004158][ T8914] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 216.011620][ T8914] vhci_hcd vhci_hcd.0: Device attached [ 216.021461][ T9] usb 9-1: enqueue for inactive port 0 [ 216.021505][ T8917] loop1: detected capacity change from 0 to 512 [ 216.026946][ T9] usb 9-1: enqueue for inactive port 0 [ 216.074412][ T8917] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 216.098319][ T8920] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(8) [ 216.104933][ T8920] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 216.112461][ T8920] vhci_hcd vhci_hcd.0: Device attached [ 216.122310][ T9] vhci_hcd: vhci_device speed not set [ 216.127787][ T29] audit: type=1400 audit(1745088586.648:8828): avc: denied { write } for pid=8896 comm="syz.2.1549" name="file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 216.150095][ T29] audit: type=1400 audit(1745088586.648:8829): avc: denied { open } for pid=8896 comm="syz.2.1549" name="file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 216.173274][ T8914] vhci_hcd vhci_hcd.0: pdev(0) rhport(2) sockfd(7) [ 216.179817][ T8914] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 216.187582][ T8914] vhci_hcd vhci_hcd.0: Device attached [ 216.204781][ T8917] EXT4-fs (loop1): orphan cleanup on readonly fs [ 216.236539][ T8914] vhci_hcd vhci_hcd.0: pdev(0) rhport(3) sockfd(11) [ 216.239370][ T29] audit: type=1400 audit(1745088586.708:8830): avc: denied { create } for pid=8925 comm="syz.3.1556" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 216.243171][ T8914] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 216.243250][ T8914] vhci_hcd vhci_hcd.0: Device attached [ 216.263850][ T29] audit: type=1400 audit(1745088586.708:8831): avc: denied { write } for pid=8925 comm="syz.3.1556" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 216.327651][ T8931] loop3: detected capacity change from 0 to 1024 [ 216.353333][ T8931] EXT4-fs: Ignoring removed orlov option [ 216.361548][ T8917] EXT4-fs error (device loop1): ext4_acquire_dquot:6935: comm syz.1.1553: Failed to acquire dquot type 1 [ 216.384629][ T8914] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 216.393212][ T8914] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 216.406458][ T8931] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 216.473115][ T8917] EXT4-fs (loop1): 1 truncate cleaned up [ 216.489828][ T8917] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 216.504247][ T8920] vhci_hcd vhci_hcd.0: pdev(0) rhport(6) sockfd(18) [ 216.510887][ T8920] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 216.518595][ T8920] vhci_hcd vhci_hcd.0: Device attached [ 216.518760][ T8917] sg_write: data in/out 209152/1 bytes for SCSI command 0xf2-- guessing data in; [ 216.518760][ T8917] program syz.1.1553 not setting count and/or reply_len properly [ 216.593396][ T8914] vhci_hcd vhci_hcd.0: pdev(0) rhport(7) sockfd(21) [ 216.600137][ T8914] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 216.607580][ T8914] vhci_hcd vhci_hcd.0: Device attached [ 216.682651][ T8933] vhci_hcd: connection closed [ 216.682977][ T8928] vhci_hcd: connection closed [ 216.683080][ T8936] vhci_hcd: connection closed [ 216.687928][ T8921] vhci_hcd: connection closed [ 216.692721][ T8915] vhci_hcd: connection closed [ 216.697445][ T4710] vhci_hcd: stop threads [ 216.710959][ T4710] vhci_hcd: release socket [ 216.715490][ T4710] vhci_hcd: disconnect device [ 216.720663][ T8923] vhci_hcd: connection closed [ 216.793856][ T4710] vhci_hcd: stop threads [ 216.802853][ T4710] vhci_hcd: release socket [ 216.807289][ T4710] vhci_hcd: disconnect device [ 216.832739][ T4710] vhci_hcd: stop threads [ 216.837041][ T4710] vhci_hcd: release socket [ 216.841520][ T4710] vhci_hcd: disconnect device [ 216.861923][ T4710] vhci_hcd: stop threads [ 216.866211][ T4710] vhci_hcd: release socket [ 216.870641][ T4710] vhci_hcd: disconnect device [ 216.882109][ T4710] vhci_hcd: stop threads [ 216.886394][ T4710] vhci_hcd: release socket [ 216.890831][ T4710] vhci_hcd: disconnect device [ 216.912461][ T4710] vhci_hcd: stop threads [ 216.916756][ T4710] vhci_hcd: release socket [ 216.921193][ T4710] vhci_hcd: disconnect device [ 217.207154][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 218.731364][ T3525] usb 1-1: enqueue for inactive port 0 [ 218.736894][ T3525] usb 1-1: enqueue for inactive port 0 [ 218.811439][ T3525] vhci_hcd: vhci_device speed not set [ 218.879785][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 218.947981][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 218.992480][ T8955] loop3: detected capacity change from 0 to 1024 [ 219.014513][ T8960] loop2: detected capacity change from 0 to 1024 [ 219.021278][ T8960] EXT4-fs: Ignoring removed orlov option [ 219.024878][ T8955] EXT4-fs: Ignoring removed orlov option [ 219.985820][ T8981] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 219.992391][ T8981] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 219.999876][ T8981] vhci_hcd vhci_hcd.0: Device attached [ 220.041517][ T8981] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(7) [ 220.048092][ T8981] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 220.055649][ T8981] vhci_hcd vhci_hcd.0: Device attached [ 220.082376][ T8989] vhci_hcd vhci_hcd.0: pdev(0) rhport(2) sockfd(10) [ 220.089023][ T8989] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 220.096695][ T8989] vhci_hcd vhci_hcd.0: Device attached [ 220.139289][ T8981] vhci_hcd vhci_hcd.0: pdev(0) rhport(3) sockfd(9) [ 220.145980][ T8981] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 220.153625][ T8981] vhci_hcd vhci_hcd.0: Device attached [ 220.182599][ T8981] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 220.196825][ T8996] FAULT_INJECTION: forcing a failure. [ 220.196825][ T8996] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 220.209992][ T8996] CPU: 0 UID: 0 PID: 8996 Comm: syz.2.1570 Not tainted 6.15.0-rc2-syzkaller-00404-g8560697b23dc #0 PREEMPT(voluntary) [ 220.210026][ T8996] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 220.210046][ T8996] Call Trace: [ 220.210054][ T8996] [ 220.210063][ T8996] dump_stack_lvl+0xf6/0x150 [ 220.210087][ T8996] dump_stack+0x15/0x1a [ 220.210183][ T8996] should_fail_ex+0x261/0x270 [ 220.210205][ T8996] should_fail+0xb/0x10 [ 220.210264][ T8996] should_fail_usercopy+0x1a/0x20 [ 220.210293][ T8996] strncpy_from_user+0x25/0x230 [ 220.210333][ T8996] ? getname_flags+0x81/0x3b0 [ 220.210364][ T8996] getname_flags+0xb0/0x3b0 [ 220.210393][ T8996] getname_uflags+0x21/0x30 [ 220.210464][ T8996] __x64_sys_execveat+0x5e/0x90 [ 220.210499][ T8996] x64_sys_call+0x2ac7/0x2e10 [ 220.210526][ T8996] do_syscall_64+0xc9/0x1a0 [ 220.210595][ T8996] ? clear_bhb_loop+0x25/0x80 [ 220.210617][ T8996] ? clear_bhb_loop+0x25/0x80 [ 220.210639][ T8996] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 220.210664][ T8996] RIP: 0033:0x7ff722cbe169 [ 220.210741][ T8996] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 220.210815][ T8996] RSP: 002b:00007ff721327038 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 220.210837][ T8996] RAX: ffffffffffffffda RBX: 00007ff722ee5fa0 RCX: 00007ff722cbe169 [ 220.210853][ T8996] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 220.210868][ T8996] RBP: 00007ff721327090 R08: 0000000000001000 R09: 0000000000000000 [ 220.210882][ T8996] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 220.210968][ T8996] R13: 0000000000000000 R14: 00007ff722ee5fa0 R15: 00007ffdc7154408 [ 220.211013][ T8996] [ 220.235220][ T8989] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 220.394817][ T8998] vhci_hcd vhci_hcd.0: pdev(0) rhport(7) sockfd(22) [ 220.401455][ T8998] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 220.408965][ T8998] vhci_hcd vhci_hcd.0: Device attached [ 220.421349][ T29] kauditd_printk_skb: 18 callbacks suppressed [ 220.421365][ T29] audit: type=1400 audit(1745088590.938:8848): avc: denied { bind } for pid=9001 comm="syz.2.1571" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 220.442375][ T8981] vhci_hcd vhci_hcd.0: pdev(0) rhport(6) sockfd(15) [ 220.448760][ T9002] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1571'. [ 220.454490][ T8981] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 220.454580][ T8981] vhci_hcd vhci_hcd.0: Device attached [ 220.465684][ T29] audit: type=1400 audit(1745088590.988:8849): avc: denied { create } for pid=9001 comm="syz.2.1571" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 220.497546][ C1] IPv4: Oversized IP packet from 172.20.20.24 [ 220.498556][ T29] audit: type=1400 audit(1745088591.018:8850): avc: denied { setopt } for pid=9001 comm="syz.2.1571" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 220.523658][ T29] audit: type=1400 audit(1745088591.018:8851): avc: denied { ioctl } for pid=9001 comm="syz.2.1571" path="socket:[21123]" dev="sockfs" ino=21123 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 220.548650][ T29] audit: type=1400 audit(1745088591.018:8852): avc: denied { write } for pid=9001 comm="syz.2.1571" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 220.584322][ T8999] vhci_hcd: connection closed [ 220.584501][ T8997] vhci_hcd: connection closed [ 220.589397][ T8992] vhci_hcd: connection closed [ 220.594511][ T8982] vhci_hcd: connection closed [ 220.595674][ T37] vhci_hcd: stop threads [ 220.599376][ T8990] vhci_hcd: connection closed [ 220.603994][ T37] vhci_hcd: release socket [ 220.604011][ T37] vhci_hcd: disconnect device [ 220.608545][ T8985] vhci_hcd: connection closed [ 220.623530][ T37] vhci_hcd: stop threads [ 220.632549][ T37] vhci_hcd: release socket [ 220.637017][ T37] vhci_hcd: disconnect device [ 220.642141][ T37] vhci_hcd: stop threads [ 220.646464][ T37] vhci_hcd: release socket [ 220.650948][ T37] vhci_hcd: disconnect device [ 220.656203][ T37] vhci_hcd: stop threads [ 220.660522][ T37] vhci_hcd: release socket [ 220.665009][ T37] vhci_hcd: disconnect device [ 220.670175][ T37] vhci_hcd: stop threads [ 220.674549][ T37] vhci_hcd: release socket [ 220.679080][ T37] vhci_hcd: disconnect device [ 220.684030][ T37] vhci_hcd: stop threads [ 220.688304][ T37] vhci_hcd: release socket [ 220.691861][ T29] audit: type=1400 audit(1745088591.218:8853): avc: denied { append } for pid=2986 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=8 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 220.692756][ T37] vhci_hcd: disconnect device [ 220.735817][ T29] audit: type=1400 audit(1745088591.248:8854): avc: denied { read write } for pid=3303 comm="syz-executor" name="loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 220.760191][ T29] audit: type=1400 audit(1745088591.248:8855): avc: denied { open } for pid=3303 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 220.784464][ T29] audit: type=1400 audit(1745088591.248:8856): avc: denied { ioctl } for pid=3303 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=101 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 220.823703][ T9010] serio: Serial port ptm0 [ 220.832267][ T29] audit: type=1400 audit(1745088591.298:8857): avc: denied { create } for pid=9011 comm="syz.1.1575" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 220.832412][ T9012] siw: device registration error -23 [ 220.902987][ T9022] FAULT_INJECTION: forcing a failure. [ 220.902987][ T9022] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 220.916103][ T9022] CPU: 0 UID: 0 PID: 9022 Comm: syz.1.1578 Not tainted 6.15.0-rc2-syzkaller-00404-g8560697b23dc #0 PREEMPT(voluntary) [ 220.916145][ T9022] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 220.916159][ T9022] Call Trace: [ 220.916236][ T9022] [ 220.916246][ T9022] dump_stack_lvl+0xf6/0x150 [ 220.916275][ T9022] dump_stack+0x15/0x1a [ 220.916296][ T9022] should_fail_ex+0x261/0x270 [ 220.916320][ T9022] should_fail+0xb/0x10 [ 220.916338][ T9022] should_fail_usercopy+0x1a/0x20 [ 220.916378][ T9022] _copy_from_user+0x1c/0xa0 [ 220.916412][ T9022] copy_msghdr_from_user+0x54/0x2b0 [ 220.916448][ T9022] ? __fget_files+0x186/0x1c0 [ 220.916489][ T9022] __sys_sendmmsg+0x1eb/0x4b0 [ 220.916541][ T9022] __x64_sys_sendmmsg+0x57/0x70 [ 220.916619][ T9022] x64_sys_call+0x2b53/0x2e10 [ 220.916644][ T9022] do_syscall_64+0xc9/0x1a0 [ 220.916688][ T9022] ? clear_bhb_loop+0x25/0x80 [ 220.916714][ T9022] ? clear_bhb_loop+0x25/0x80 [ 220.916791][ T9022] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 220.916817][ T9022] RIP: 0033:0x7f99582ee169 [ 220.916835][ T9022] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 220.916856][ T9022] RSP: 002b:00007f9956957038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 220.916876][ T9022] RAX: ffffffffffffffda RBX: 00007f9958515fa0 RCX: 00007f99582ee169 [ 220.916887][ T9022] RDX: 0000000000000001 RSI: 0000200000001340 RDI: 0000000000000004 [ 220.916898][ T9022] RBP: 00007f9956957090 R08: 0000000000000000 R09: 0000000000000000 [ 220.916985][ T9022] R10: 0000000060048005 R11: 0000000000000246 R12: 0000000000000001 [ 220.917000][ T9022] R13: 0000000000000000 R14: 00007f9958515fa0 R15: 00007ffee82ce8d8 [ 220.917028][ T9022] [ 221.128350][ T9024] netlink: 'syz.1.1579': attribute type 10 has an invalid length. [ 221.136463][ T9024] bridge0: port 2(bridge_slave_1) entered disabled state [ 221.143857][ T9024] bridge0: port 1(bridge_slave_0) entered disabled state [ 221.154766][ T9024] bridge0: port 2(bridge_slave_1) entered blocking state [ 221.161904][ T9024] bridge0: port 2(bridge_slave_1) entered forwarding state [ 221.169201][ T9024] bridge0: port 1(bridge_slave_0) entered blocking state [ 221.176389][ T9024] bridge0: port 1(bridge_slave_0) entered forwarding state [ 221.186764][ T9024] bridge0: entered allmulticast mode [ 221.193010][ T9024] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 221.233163][ T9028] 9pnet_virtio: no channels available for device 127.0.0.1 [ 221.320677][ T9030] 9pnet_virtio: no channels available for device 127.0.0.1 [ 221.433061][ T9038] netlink: 244 bytes leftover after parsing attributes in process `syz.0.1584'. [ 221.484798][ T9039] loop1: detected capacity change from 0 to 512 [ 221.530280][ T9039] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 221.563525][ T9039] EXT4-fs (loop1): orphan cleanup on readonly fs [ 221.593677][ T9039] EXT4-fs error (device loop1): ext4_acquire_dquot:6935: comm syz.1.1583: Failed to acquire dquot type 1 [ 221.607011][ T9042] netlink: 244 bytes leftover after parsing attributes in process `syz.2.1585'. [ 221.637662][ T9039] EXT4-fs (loop1): 1 truncate cleaned up [ 221.664547][ T9039] sg_write: data in/out 209152/1 bytes for SCSI command 0xf2-- guessing data in; [ 221.664547][ T9039] program syz.1.1583 not setting count and/or reply_len properly [ 221.695321][ T9038] loop0: detected capacity change from 0 to 512 [ 221.771188][ T9044] netlink: 244 bytes leftover after parsing attributes in process `syz.4.1586'. [ 221.781975][ T9038] EXT4-fs: Ignoring removed i_version option [ 221.805318][ T9038] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 221.870305][ T9038] EXT4-fs (loop0): 1 truncate cleaned up [ 221.953688][ T9042] loop2: detected capacity change from 0 to 512 [ 222.013295][ T9044] loop4: detected capacity change from 0 to 512 [ 222.029919][ T9044] EXT4-fs: Ignoring removed i_version option [ 222.089608][ T9050] process 'syz.3.1587' launched '/dev/fd/3' with NULL argv: empty string added [ 222.252339][ T9044] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 222.266471][ T9042] EXT4-fs: Ignoring removed i_version option [ 222.291754][ T9042] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 222.342648][ T9044] EXT4-fs (loop4): 1 truncate cleaned up [ 222.388248][ T9042] EXT4-fs (loop2): 1 truncate cleaned up [ 223.674710][ T9061] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 223.731613][ T9061] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 223.874297][ T3304] EXT4-fs unmount: 9 callbacks suppressed [ 223.874317][ T3304] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 224.014728][ T9069] loop0: detected capacity change from 0 to 512 [ 224.033366][ T9069] EXT4-fs: Ignoring removed oldalloc option [ 224.051707][ T9069] EXT4-fs error (device loop0): ext4_xattr_inode_iget:433: comm syz.0.1591: Parent and EA inode have the same ino 15 [ 224.071507][ T9069] EXT4-fs (loop0): Remounting filesystem read-only [ 224.078076][ T9069] EXT4-fs warning (device loop0): ext4_evict_inode:262: couldn't mark inode dirty (err -30) [ 224.131427][ T9069] EXT4-fs (loop0): 1 orphan inode deleted [ 224.137644][ T9069] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 224.192503][ T9069] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 224.341362][ T9072] FAULT_INJECTION: forcing a failure. [ 224.341362][ T9072] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 224.354557][ T9072] CPU: 0 UID: 0 PID: 9072 Comm: syz.0.1592 Not tainted 6.15.0-rc2-syzkaller-00404-g8560697b23dc #0 PREEMPT(voluntary) [ 224.354591][ T9072] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 224.354606][ T9072] Call Trace: [ 224.354615][ T9072] [ 224.354625][ T9072] dump_stack_lvl+0xf6/0x150 [ 224.354667][ T9072] dump_stack+0x15/0x1a [ 224.354688][ T9072] should_fail_ex+0x261/0x270 [ 224.354717][ T9072] should_fail+0xb/0x10 [ 224.354742][ T9072] should_fail_usercopy+0x1a/0x20 [ 224.354812][ T9072] strncpy_from_user+0x25/0x230 [ 224.354926][ T9072] ? getname_flags+0x81/0x3b0 [ 224.354963][ T9072] getname_flags+0xb0/0x3b0 [ 224.354989][ T9072] user_path_at+0x26/0x140 [ 224.355019][ T9072] __se_sys_mount+0x25e/0x2e0 [ 224.355046][ T9072] __x64_sys_mount+0x67/0x80 [ 224.355065][ T9072] x64_sys_call+0xd11/0x2e10 [ 224.355142][ T9072] do_syscall_64+0xc9/0x1a0 [ 224.355198][ T9072] ? clear_bhb_loop+0x25/0x80 [ 224.355225][ T9072] ? clear_bhb_loop+0x25/0x80 [ 224.355251][ T9072] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 224.355357][ T9072] RIP: 0033:0x7f941b39e169 [ 224.355376][ T9072] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 224.355412][ T9072] RSP: 002b:00007f9419a07038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 224.355434][ T9072] RAX: ffffffffffffffda RBX: 00007f941b5c5fa0 RCX: 00007f941b39e169 [ 224.355449][ T9072] RDX: 00002000000007c0 RSI: 0000200000000800 RDI: 0000000000000000 [ 224.355541][ T9072] RBP: 00007f9419a07090 R08: 0000200000000340 R09: 0000000000000000 [ 224.355556][ T9072] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 224.355570][ T9072] R13: 0000000000000000 R14: 00007f941b5c5fa0 R15: 00007ffe9e673348 [ 224.355592][ T9072] [ 224.632237][ T9075] 9pnet_virtio: no channels available for device 127.0.0.1 [ 224.715235][ T9080] loop0: detected capacity change from 0 to 1024 [ 224.743511][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 224.755235][ T9080] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 224.800981][ T3304] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 224.874906][ T9085] loop2: detected capacity change from 0 to 256 [ 224.895417][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 224.945025][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 224.980603][ T9093] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 225.001495][ T9093] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 225.034021][ T9101] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 225.040588][ T9101] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 225.048135][ T9101] vhci_hcd vhci_hcd.0: Device attached [ 225.074380][ T9101] vhci_hcd vhci_hcd.0: pdev(4) rhport(1) sockfd(7) [ 225.081076][ T9101] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 225.088883][ T9101] vhci_hcd vhci_hcd.0: Device attached [ 225.102986][ T9110] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1603'. [ 225.163792][ T9116] vhci_hcd vhci_hcd.0: pdev(4) rhport(2) sockfd(10) [ 225.170447][ T9116] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 225.178134][ T9116] vhci_hcd vhci_hcd.0: Device attached [ 225.186119][ T9122] loop2: detected capacity change from 0 to 2048 [ 225.192981][ T9122] ext4: Unknown parameter 'mask' [ 225.220754][ T9101] vhci_hcd vhci_hcd.0: pdev(4) rhport(3) sockfd(9) [ 225.227370][ T9101] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 225.234924][ T3378] vhci_hcd: vhci_device speed not set [ 225.240359][ T9101] vhci_hcd vhci_hcd.0: Device attached [ 225.246460][ T9101] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 225.256806][ T9101] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 225.272114][ T9101] vhci_hcd vhci_hcd.0: pdev(4) rhport(6) sockfd(17) [ 225.278762][ T9101] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 225.286433][ T9101] vhci_hcd vhci_hcd.0: Device attached [ 225.293675][ T9101] vhci_hcd vhci_hcd.0: pdev(4) rhport(7) sockfd(20) [ 225.300366][ T9101] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 225.308090][ T9101] vhci_hcd vhci_hcd.0: Device attached [ 225.314660][ T3378] usb 9-1: new full-speed USB device number 7 using vhci_hcd [ 225.346826][ T9130] vhci_hcd: connection closed [ 225.346838][ T9128] vhci_hcd: connection closed [ 225.347151][ T9102] vhci_hcd: connection reset by peer [ 225.351637][ T9106] vhci_hcd: connection closed [ 225.361792][ T9125] vhci_hcd: connection closed [ 225.366625][ T9118] vhci_hcd: connection closed [ 225.371730][ T51] vhci_hcd: stop threads [ 225.380661][ T51] vhci_hcd: release socket [ 225.385123][ T51] vhci_hcd: disconnect device [ 225.390280][ T51] vhci_hcd: stop threads [ 225.394573][ T51] vhci_hcd: release socket [ 225.399001][ T51] vhci_hcd: disconnect device [ 225.418090][ T51] vhci_hcd: stop threads [ 225.422473][ T51] vhci_hcd: release socket [ 225.426981][ T51] vhci_hcd: disconnect device [ 225.432714][ T51] vhci_hcd: stop threads [ 225.436984][ T51] vhci_hcd: release socket [ 225.441543][ T51] vhci_hcd: disconnect device [ 225.446779][ T9137] FAULT_INJECTION: forcing a failure. [ 225.446779][ T9137] name failslab, interval 1, probability 0, space 0, times 1 [ 225.459532][ T9137] CPU: 1 UID: 0 PID: 9137 Comm: syz.1.1608 Not tainted 6.15.0-rc2-syzkaller-00404-g8560697b23dc #0 PREEMPT(voluntary) [ 225.459564][ T9137] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 225.459578][ T9137] Call Trace: [ 225.459585][ T9137] [ 225.459594][ T9137] dump_stack_lvl+0xf6/0x150 [ 225.459659][ T9137] dump_stack+0x15/0x1a [ 225.459752][ T9137] should_fail_ex+0x261/0x270 [ 225.459782][ T9137] should_failslab+0x8f/0xb0 [ 225.459807][ T9137] __kvmalloc_node_noprof+0x12c/0x520 [ 225.459856][ T9137] ? snd_seq_pool_init+0x50/0x200 [ 225.459963][ T9137] snd_seq_pool_init+0x50/0x200 [ 225.460000][ T9137] snd_seq_ioctl_set_client_pool+0x175/0x300 [ 225.460066][ T9137] snd_seq_ioctl+0x16b/0x2c0 [ 225.460126][ T9137] ? __pfx_snd_seq_ioctl+0x10/0x10 [ 225.460163][ T9137] __se_sys_ioctl+0xc9/0x140 [ 225.460207][ T9137] __x64_sys_ioctl+0x43/0x50 [ 225.460291][ T9137] x64_sys_call+0x168d/0x2e10 [ 225.460319][ T9137] do_syscall_64+0xc9/0x1a0 [ 225.460350][ T9137] ? clear_bhb_loop+0x25/0x80 [ 225.460385][ T9137] ? clear_bhb_loop+0x25/0x80 [ 225.460411][ T9137] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 225.460436][ T9137] RIP: 0033:0x7f99582ee169 [ 225.460469][ T9137] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 225.460491][ T9137] RSP: 002b:00007f9956957038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 225.460514][ T9137] RAX: ffffffffffffffda RBX: 00007f9958515fa0 RCX: 00007f99582ee169 [ 225.460530][ T9137] RDX: 0000200000000180 RSI: 000000004058534c RDI: 0000000000000005 [ 225.460579][ T9137] RBP: 00007f9956957090 R08: 0000000000000000 R09: 0000000000000000 [ 225.460591][ T9137] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 225.460605][ T9137] R13: 0000000000000000 R14: 00007f9958515fa0 R15: 00007ffee82ce8d8 [ 225.460669][ T9137] [ 225.474598][ T29] kauditd_printk_skb: 740 callbacks suppressed [ 225.474616][ T29] audit: type=1400 audit(1745088595.988:9596): avc: denied { create } for pid=9140 comm="syz.2.1610" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 225.501993][ T51] vhci_hcd: stop threads [ 225.524032][ T29] audit: type=1400 audit(1745088596.028:9597): avc: denied { write } for pid=9140 comm="syz.2.1610" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 225.529616][ T51] vhci_hcd: release socket [ 225.574571][ T9145] loop2: detected capacity change from 0 to 1024 [ 225.577609][ T51] vhci_hcd: disconnect device [ 225.600537][ T51] vhci_hcd: stop threads [ 225.639542][ T9145] EXT4-fs: Ignoring removed orlov option [ 225.645838][ T51] vhci_hcd: release socket [ 225.645856][ T51] vhci_hcd: disconnect device [ 225.665792][ T9147] loop1: detected capacity change from 0 to 1024 [ 225.681202][ T9145] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 225.702988][ T9147] EXT4-fs: Ignoring removed orlov option [ 225.761946][ T29] audit: type=1326 audit(1745088596.228:9598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9086 comm="syz.3.1599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f40754ea359 code=0x7fc00000 [ 225.785456][ T29] audit: type=1326 audit(1745088596.228:9599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9086 comm="syz.3.1599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f40754ea41f code=0x7fc00000 [ 225.808848][ T29] audit: type=1326 audit(1745088596.228:9600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9086 comm="syz.3.1599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f407554e169 code=0x7fc00000 [ 225.832621][ T29] audit: type=1400 audit(1745088596.308:9601): avc: denied { write } for pid=9144 comm="syz.2.1612" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 225.843178][ T9147] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 225.854419][ T29] audit: type=1400 audit(1745088596.308:9602): avc: denied { add_name } for pid=9144 comm="syz.2.1612" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 225.887655][ T29] audit: type=1400 audit(1745088596.308:9603): avc: denied { create } for pid=9144 comm="syz.2.1612" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 225.907790][ T29] audit: type=1400 audit(1745088596.328:9604): avc: denied { read open } for pid=9144 comm="syz.2.1612" path="/325/bus/bus" dev="loop2" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 225.930714][ T29] audit: type=1400 audit(1745088596.328:9605): avc: denied { write } for pid=9144 comm="syz.2.1612" name="bus" dev="loop2" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 226.000701][ T9145] ================================================================== [ 226.008849][ T9145] BUG: KCSAN: data-race in generic_buffers_fsync_noflush / writeback_single_inode [ 226.018108][ T9145] [ 226.020440][ T9145] write to 0xffff8881066c9c58 of 4 bytes by task 9153 on cpu 0: [ 226.028084][ T9145] writeback_single_inode+0x14f/0x3f0 [ 226.033485][ T9145] sync_inode_metadata+0x60/0x90 [ 226.038440][ T9145] generic_buffers_fsync_noflush+0xd8/0x120 [ 226.044396][ T9145] ext4_sync_file+0x1c3/0x6c0 [ 226.049087][ T9145] vfs_fsync_range+0x116/0x130 [ 226.053860][ T9145] ext4_buffered_write_iter+0x358/0x3c0 [ 226.059419][ T9145] ext4_file_write_iter+0x3b2/0xf80 [ 226.064714][ T9145] iter_file_splice_write+0x5f2/0x980 [ 226.070104][ T9145] direct_splice_actor+0x160/0x2c0 [ 226.075231][ T9145] splice_direct_to_actor+0x305/0x680 [ 226.080623][ T9145] do_splice_direct+0xd9/0x150 [ 226.085406][ T9145] do_sendfile+0x40a/0x690 [ 226.089835][ T9145] __x64_sys_sendfile64+0x113/0x160 [ 226.095052][ T9145] x64_sys_call+0xfc3/0x2e10 [ 226.099664][ T9145] do_syscall_64+0xc9/0x1a0 [ 226.104197][ T9145] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 226.110115][ T9145] [ 226.112443][ T9145] read to 0xffff8881066c9c58 of 4 bytes by task 9145 on cpu 1: [ 226.119986][ T9145] generic_buffers_fsync_noflush+0x83/0x120 [ 226.125909][ T9145] ext4_sync_file+0x1c3/0x6c0 [ 226.130597][ T9145] vfs_fsync_range+0x116/0x130 [ 226.135366][ T9145] ext4_buffered_write_iter+0x358/0x3c0 [ 226.140918][ T9145] ext4_file_write_iter+0x3b2/0xf80 [ 226.146128][ T9145] iter_file_splice_write+0x5f2/0x980 [ 226.151518][ T9145] direct_splice_actor+0x160/0x2c0 [ 226.156649][ T9145] splice_direct_to_actor+0x305/0x680 [ 226.162041][ T9145] do_splice_direct+0xd9/0x150 [ 226.166827][ T9145] do_sendfile+0x40a/0x690 [ 226.171254][ T9145] __x64_sys_sendfile64+0x113/0x160 [ 226.176467][ T9145] x64_sys_call+0xfc3/0x2e10 [ 226.181064][ T9145] do_syscall_64+0xc9/0x1a0 [ 226.185584][ T9145] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 226.191487][ T9145] [ 226.193810][ T9145] value changed: 0x00000038 -> 0x00000002 [ 226.199548][ T9145] [ 226.201872][ T9145] Reported by Kernel Concurrency Sanitizer on: [ 226.208022][ T9145] CPU: 1 UID: 0 PID: 9145 Comm: syz.2.1612 Not tainted 6.15.0-rc2-syzkaller-00404-g8560697b23dc #0 PREEMPT(voluntary) [ 226.220462][ T9145] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 226.230543][ T9145] ================================================================== [ 226.253701][ T9158] siw: device registration error -23 [ 226.426660][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 226.575350][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 230.411433][ T3378] usb 9-1: enqueue for inactive port 0 [ 230.417096][ T3378] usb 9-1: enqueue for inactive port 0 [ 230.491369][ T3378] vhci_hcd: vhci_device speed not set