last executing test programs: 2m54.627780252s ago: executing program 2 (id=292): r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) (async, rerun: 32) prlimit64(r0, 0xe, &(0x7f00000002c0)={0x8, 0x8b}, 0x0) (async, rerun: 32) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) (async) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000001700)=0x4) (async, rerun: 64) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) (async, rerun: 64) r4 = syz_io_uring_complete(0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000200)='netfs_failure\x00', r4, 0x0, 0x3}, 0x18) (async) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) (async) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) (async) futex(&(0x7f000000cffc)=0x4, 0xb, 0x4, 0x0, &(0x7f0000000080), 0x0) (async) futex(&(0x7f000000cffc), 0x5, 0x2, 0x0, &(0x7f0000000000), 0x5000000) (async) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='erofs_destroy_inode\x00', r4, 0x0, 0x3}, 0x18) (async) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async, rerun: 64) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async, rerun: 64) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10) (async, rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x9, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x14, 0x4c}, [@ldst={0x4}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) (rerun: 64) 2m54.222511729s ago: executing program 2 (id=294): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f0000002b80)=@generic={0x0, 0x7, 0x9}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a000000020000000110000007"], 0x50) socket(0x2b, 0x1, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r1}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00'}, 0x10) mlock(&(0x7f0000c00000/0x400000)=nil, 0x400000) mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000fff000/0x1000)=nil) sched_setscheduler(0x0, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r3}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r2}, &(0x7f0000000040), &(0x7f0000000080)=r3}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r4, 0xaf01, 0x0) r5 = eventfd(0xc) ioctl$VHOST_SET_LOG_FD(r4, 0x4004af07, &(0x7f0000000240)=r5) ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f0000000040)={0x1, r5}) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000000e40)={0x1, 0x0, [{0x0, 0xf3, &(0x7f00000008c0)=""/243}]}) ioctl$VHOST_SET_VRING_ERR(r4, 0x4008af22, &(0x7f00000002c0)={0x1, r5}) ioctl$VHOST_VSOCK_SET_RUNNING(r4, 0x4004af61, &(0x7f0000000000)=0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xf, @void, @value}, 0x94) 2m54.13511386s ago: executing program 2 (id=295): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x4, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xffffffff, @void, @value}, 0x94) close(r2) epoll_create(0x7bdd) syz_mount_image$ext4(0x0, &(0x7f0000000580)='./file0\x00', 0x19560c0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b000000"], 0x50) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount$incfs(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, 0x0) 2m52.92335195s ago: executing program 2 (id=300): r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000100), 0x1, 0x500, &(0x7f0000000a00)="$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") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.numa_stat\x00', 0x275a, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000000), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000000c0)='./bus\x00') ioctl$EXT4_IOC_MOVE_EXT(r1, 0x8004587d, &(0x7f00000003c0)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x4}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c3"], 0x0, 0x100, 0x0, 0x0, 0x0, 0x30, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000002085000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000003000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x840, &(0x7f0000000540)={[{@test_dummy_encryption}]}, 0x1, 0x236, &(0x7f0000000300)="$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") symlink(&(0x7f00000049c0)='./file1\x00', &(0x7f00000059c0)='./file0\x00') r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdirat(r4, &(0x7f0000000180)='./mnt/file0\x00', 0x0) renameat2(r5, &(0x7f0000000380)='./file0\x00', r5, &(0x7f0000000200)='./bus/file0\x00', 0x0) mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) chdir(&(0x7f00000000c0)='./bus\x00') creat(&(0x7f0000000240)='./file0\x00', 0xd) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000f00)={0x11, 0xc, &(0x7f0000000800)=ANY=[@ANYRES32=r0, @ANYRES64=r2, @ANYRESHEX=r4, @ANYRES64], &(0x7f0000000880)='GPL\x00', 0x4, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r7, @ANYRES32=r6], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r8}, 0x10) syz_mount_image$erofs(&(0x7f0000000340), &(0x7f0000000580)='./file2\x00', 0x2000400, &(0x7f0000000000)=ANY=[@ANYRES32=0x0, @ANYRESOCT, @ANYRES16], 0x1, 0x22a, &(0x7f00000005c0)="$eJzsmDGLE0EUx/8z2ewlIqLNFTYKHniil1z2UK4Jp4JgZXMnaqXBW48zuYvkVvACgsHGRjsLwcbCL2BxRSoLO7+AoIUKgoUpLGxsRt7O7GbiJCau6Xy/YvjPvDcz773NvCJgGOa/5fOnHx8fn19eOwVgP+YwY9a/5gAhtJaW/4dnd08+rV54/ur9yzfbB+53fz+Ptig1uFD4w/0egNfncojSm9LdP0nMmckaZKovQ+KE0VcgUDL6BmQ+OTeEwDWjb1u6Sf6l0q3NRli62Wysk1ikoUJDQMNAvhRfryOwbuZKKSUs+85uu15rNMKWJTxjG2LKJNLL6rNO/fLw0esAVSs+iv/qo4cdmie1WbTqV4FExSSxBIFVs76MmaQ2uiRW/oe9/vk5J/+h2ZIrGcYlWdCi+n0qxbLFoYVs2+cpnbOu6SCyhIH+rhWErTz6JqrkoPPR6RYBiIVnfR0Md14xHzTDXZecLEaIJ0UAU//KrsiURSJme923runLuO1KjL9CTP77KUwac/IQ/ybT5AHrlSLadfkvFRsV2Ls93T/UC4HjVn/yrP5RjrbulHd22wubW7WNcCPcDoKlMwJ4cDoox41Ij07f6/fnYtyf9lnn50f4+tLHvVoUtSp69IWPIqKoFcTzwHo2q3vNb9fNtggXARzTE2qbfnpizrlD+NpHxr6k5l0nhmEYhmEYhmEYhmEYhmGYSRn4w/MIRPwv6BgC7f0rAAD//xgsXjc=") open(&(0x7f0000000200)='./file0\x00', 0xc0, 0x0) mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0) userfaultfd(0x1) 2m52.572088115s ago: executing program 2 (id=303): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1b000000000000000000", @ANYRES32, @ANYBLOB="00000008000000000000000cfd7772d108f243bb7dc698ea2d535f0000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="4400000018001b0000000000000000000a0000000000ff000000000018001600140001000100000000000000000010000000000008000400", @ANYRES8=r0, @ANYBLOB="060015"], 0x44}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000b40)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x10}, {0xffff, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000200)=ANY=[@ANYRESOCT=r1], &(0x7f0000000040)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r3}, 0x18) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, 0x0, 0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001812", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x200000, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000000)='workqueue_queue_work\x00', r5, 0x0, 0xfffffffffffffffe}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000240)='kfree\x00', r6}, 0x10) socket$inet6_udp(0xa, 0x2, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r7, 0x6, 0x19, &(0x7f00000001c0)=0x7ff, 0x4) bind$inet6(r7, &(0x7f0000000000)={0xa, 0x8000002, 0x2000}, 0x1c) sendto$inet6(r7, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) 2m52.197865031s ago: executing program 2 (id=304): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x2c, 0x1, 0x4, 0x101, 0x0, 0x0, {0x1}, [@NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x9}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0xffff8000}, @NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4880}, 0x20004004) 2m52.050599844s ago: executing program 32 (id=304): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x2c, 0x1, 0x4, 0x101, 0x0, 0x0, {0x1}, [@NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x9}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0xffff8000}, @NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4880}, 0x20004004) 16.565815872s ago: executing program 1 (id=812): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000c40)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000001400), 0x208e24b) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x417d2ccf, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r0}, 0x0, &(0x7f0000000040)}, 0x20) r2 = socket$inet6(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00'}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r3}, 0x10) sendto$inet6(r2, &(0x7f0000000740)="900000001c001f4d154a813393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d72e5a15c50866c6d55d08f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee", 0x90, 0x3000c080, 0x0, 0x0) 14.271447439s ago: executing program 1 (id=818): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r0, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x15) r1 = dup(r0) write$FUSE_BMAP(r1, &(0x7f0000000100)={0x18}, 0x18) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b7030000000000de850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x10000000, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f00000001c0)='./bus\x00', 0x1808014, &(0x7f0000000600)=ANY=[], 0x5, 0x559a, &(0x7f000000cf00)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x40000, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="16000000000000000400000005", @ANYBLOB], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r8}, 0x10) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@minixdf}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") add_key$keyring(&(0x7f0000000280), &(0x7f0000000340)={'syz', 0x1}, 0x0, 0x0, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$binfmt_script(r9, &(0x7f0000000440), 0x1000a) mknodat$null(r3, &(0x7f0000000140)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x103) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) write$FUSE_DIRENTPLUS(r1, &(0x7f0000002c00)=ANY=[@ANYBLOB="b0"], 0xb0) getresuid(&(0x7f0000000800), &(0x7f0000000940), &(0x7f0000000840)) 12.339206131s ago: executing program 5 (id=822): capset(&(0x7f0000000040)={0x19980330}, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1400000004000000040000000800000000000000", @ANYRES32, @ANYBLOB="00020000975700000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) unshare(0x22020600) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x4, 0x4, 0x9, 0x11, r0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f00000020c0)={0x0, 0x0, 0x0, 0x0, 0x2, r1, 0x4}, 0x38) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}}, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00', r2}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000d000)={0x19, 0x3, &(0x7f0000003080)=ANY=[@ANYBLOB="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"/3584], &(0x7f0000014ff5)='GPL\x00', 0x2, 0x1000, &(0x7f0000014000)=""/4096, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r3, 0x3a, 0xcc0, 0xcc0, &(0x7f0000000200)="e460cdfbef2408322900119386dd6a00000000072feb311ccd3ec8a755c1e1380081ffad008036e8d50000ff010000001400000500242f09880bd320d98a61a90021e9bf", 0x0, 0x401, 0x0, 0xa8, 0x0, &(0x7f00000011c0)="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", &(0x7f00000004c0)="b33620dad49cc786c86a5c5444e76c2a1ef9224fb91083d2ba4368e98a14467703e9ee585196fa95320bd53c6a76ad443b81dc833b22016aeaafb4597c06919ecf7e5ea4d0a8995feaaf9a9feb0c4b5277398049a2f5475f6ceb26bd128189f4b1b3c662d3d1630717791de0cdac3ce6e01c5719b670da5ded7dfa9dda53f04ad151cb952d708eaa69e983dcfab36b2dac3f3fe85e1d86b3d73d4879fb11cfac51f3cb669a50", 0x1, 0xfffffffd}, 0x22) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000680)={[{@nodioread_nolock}, {@nouid32}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x4c}}, {@nouid32}, {@resgid}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0x8d55}}]}, 0x0, 0x46b, &(0x7f0000000740)="$eJzs28tvVNUfAPDvvX0APx7tD/EBolaJSeOjpQWVhRuNJi4wmugCl7UdSMNADa2JECLFGNyYGBJdG5cm/gXujIlRVyZudW9IiLIBXdXcO/fCdJgpFKa9lfl8kmnPufdMz/n23Me558wE0LNGsh9JxLaI+C0ihhrZ5QVGGr+uXTk7/feVs9NJLC299WeSl7t65ex0WbR839YiM5pGpB8nRSXLzZ8+c3yqXq+dKvLjCyfeG58/febZ2RNTx2rHaicnDx06eGDihecnn+tKnFlcV/d8OLd392vvXHx9+sjFd3/6JmvvtmJ/cxzdMpIF/tdSrnXfk92urGLbm9JJf4UNYVX6IiLrroH8/B+KvrjReUPx6keVNg5YU9m9aVPn3YtLwD0siapbAFSjvNFnz7/la52GHhvC5ZcaD0BZ3NeKV2NPf6RFmYGW59tuGomII4v/fJm9Yo3mIQAAmn06/cXheKbd+C+NB5rK7SjWUIYj4v8RsTMi7ouIXRFxf0Re9sGIeGiV9bcuDd08/kkv3VFgtykb/71YrG0tH/+Vo78Y7ity2/P4B5Kjs/Xa/uJ/MhoDm7L8xAp1fPfKr5912tc8/steWf3lWLBox6X+lgm6mamFqXxQ2gWXz0fs6W8Xf3J9JSCJiN0RsWd1f3pHmZh96uu9nQrdOv4VdGGdaemrLLzFLP7FaIm/lKy8Pjm+Oeq1/ePlUXGzn3+58Gan+u8q/i64XGv8bur/1iLDSfN67fzq67jw+ycdn2nu8PhPB5O3834ZLLZ9MLWwcGoiYjA5nOeXbZ+88d4yX5bPjv/Rfe3P/53Fe7J6Ho6I7CB+JCIejYjHirY/HhFPRMS+FeL/8eXO+8r4I62o/89HzLS9/l0//lv6f/WJvuM/fNup/tvr/4N5arTYkl//bqFdc7LLRWsD7+Z/BwAAAP8Vaf4Z+CQdu55O07Gxxmf4d8X/0vrc/MLTR+fePznT+Kz8cAyk5UzXUDEfWp+t1yaSxeIvNuZHJ4u54nK+9EAxb/x535Y8PzY9V5+pOHbodVs7nP+ZP/qqbh2wxra03To5uO4NASrQuo6eLs+ee2M9GwOsK9/Xht51i/M/Xa92AOvP/R96V7vz/1xL3loA3Jvc/6F3Of+hR6XfV90CoELu/9CT7uZ7/WuY2LwxmlFNYqN2Sp6IKBPphmiPxBolqr4yAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAdMe/AQAA///Zjesq") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) write$P9_RVERSION(r8, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB='S\x00\x00\x00\a\x00\x00F\x00', @ANYBLOB='b'], 0x53) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {}, 0x2c, {[], [], 0x6b}}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2000, 0x0, 0x0, @void, @value, @void, @value}, 0x50) 11.014154172s ago: executing program 5 (id=827): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sched_setaffinity(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) timer_create(0x7, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) close(0xffffffffffffffff) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7020000080000001823", @ANYRES32=r1, @ANYBLOB="0000000000000000b707000008000000850000006900000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18020000fcffffff000000000000210085000000360000009500070000000000b83f3584230b8f5ec8921327291cf4880dd3a91af830f8a476ba1b51d4eb67103b000000000000000000000000000000640f9922d207e93470686f20ad"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="2c00000010008100000000000080000000000000", @ANYRES32=0x0, @ANYBLOB="0a043cbf", @ANYRES32, @ANYBLOB="0a001b"], 0x2c}], 0x1}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb01001800000000000000240000002400000004000000000000000000000a03000000000000000000000400"], 0x0, 0x40, 0x0, 0x8, 0x0, 0x0, @void, @value}, 0x28) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000780)={0x0}, 0x18) 11.008853602s ago: executing program 1 (id=828): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0x3, 0x8, 0x1, 0x0, 0x0, {0x7}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x201}]}, 0x28}, 0x1, 0x0, 0x0, 0x24004004}, 0x240008c0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x801, 0x0) ioctl$TUNGETIFF(r1, 0x800454d2, &(0x7f0000000140)={'veth0_to_bridge\x00'}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNAPSHOT_GET_IMAGE_SIZE(0xffffffffffffffff, 0x8008330e, &(0x7f00000001c0)) statx(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x4000, 0xa08, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$tmpfs(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x1, &(0x7f00000003c0)={[{@usrquota_inode_hardlimit={'usrquota_inode_hardlimit', 0x3d, [0x70, 0x70]}}, {@huge_always}, {@noswap}, {@huge_never}, {@grpquota}, {@gid={'gid', 0x3d, r3}}, {@mpol={'mpol', 0x3d, {'bind', '', @val={0x3a, [0x38, 0x2c]}}}}, {@nr_blocks={'nr_blocks', 0x3d, [0x6d, 0x36, 0x36, 0x6b, 0x32, 0x6b, 0x36]}}, {@inode32}], [{@smackfstransmute}, {@smackfsdef={'smackfsdef', 0x3d, 'syz0\x00'}}, {@defcontext={'defcontext', 0x3d, 'sysadm_u'}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@obj_type}]}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000500), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000540)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r4, &(0x7f0000000640)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x4c, r5, 0x503, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7a}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x9}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7756145b}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x60002000}, 0x4) futex(&(0x7f0000000680)=0x1, 0xd, 0x2, &(0x7f00000006c0)={0x0, 0x3938700}, &(0x7f0000000700)=0x2, 0x2) mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xe) r7 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_GET_DIRTY_LOG(r7, 0x4010ae42, &(0x7f0000000740)={0x4, 0x0, &(0x7f0000800000/0x800000)=nil}) ioctl$KVM_GET_IRQCHIP(r7, 0xc208ae62, &(0x7f0000000780)) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000a80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)=@getspdinfo={0x14, 0x25, 0x300, 0x70bd28, 0x25dfdbfd, 0x8, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x80) r9 = syz_usb_connect(0x3, 0x5c3, &(0x7f0000000ac0)={{0x12, 0x1, 0x310, 0xd4, 0x44, 0xd3, 0x20, 0x403, 0xff1d, 0x6761, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5b1, 0x4, 0x0, 0xa, 0x0, 0x7, [{{0x9, 0x4, 0x5f, 0x8, 0x1, 0x61, 0xb9, 0x51, 0x3, [@hid_hid={0x9, 0x21, 0xf98a, 0x1, 0x1, {0x22, 0x9ff}}, @hid_hid={0x9, 0x21, 0x7ff, 0x80, 0x1, {0x22, 0xd10}}], [{{0x9, 0x5, 0x1, 0x2, 0x20, 0x0, 0x7f, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x0, 0x5}]}}]}}, {{0x9, 0x4, 0xd2, 0x4, 0xa, 0x11, 0xd7, 0x17, 0xf, [@cdc_ecm={{0x9, 0x24, 0x6, 0x0, 0x0, "1e7f2a52"}, {0x5, 0x24, 0x0, 0x1}, {0xd, 0x24, 0xf, 0x1, 0x1, 0x7, 0xfff7, 0x8}, [@ncm={0x6, 0x24, 0x1a, 0x0, 0x13}, @mbim_extended={0x8, 0x24, 0x1c, 0xa448, 0x34, 0xbdfe}, @obex={0x5}, @acm={0x4, 0x24, 0x2, 0xb}, @mbim={0xc, 0x24, 0x1b, 0xa, 0x1c8, 0x8, 0x6, 0xfffc, 0x1}]}], [{{0x9, 0x5, 0xb, 0xc, 0x40, 0x5, 0x4, 0xae}}, {{0x9, 0x5, 0x9, 0x8, 0x400, 0x6, 0x67, 0x5}}, {{0x9, 0x5, 0x4, 0x0, 0x200, 0x2, 0x7, 0x2a}}, {{0x9, 0x5, 0x0, 0x10, 0x40, 0x8, 0x91, 0x3, [@generic={0xfc, 0x7, "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"}, @uac_iso={0x7, 0x25, 0x1, 0x82, 0x4, 0x8001}]}}, {{0x9, 0x5, 0x2, 0x1, 0x20, 0x6, 0x3, 0x4, [@generic={0x21, 0x21, "6547f766228fbfb8fe07dd07d82a187cc7bc9dac882e32af644e768d02b453"}]}}, {{0x9, 0x5, 0xa, 0x8, 0x40, 0x67, 0x1, 0x3}}, {{0x9, 0x5, 0xc, 0x10, 0x8, 0xd, 0x4, 0x53, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x9, 0x6}, @uac_iso={0x7, 0x25, 0x1, 0x80}]}}, {{0x9, 0x5, 0x8, 0x10, 0x200, 0x8, 0x3, 0x81, [@generic={0xce, 0x4, "d6877df0f8a4ceb0806bc78c3d9963c9c9674c8ec1d39fb59d0400fe5b0afef93c5e1656380b4d5398747e981b6bfbd69d9d15ecd44945c30e204b7515cd6a314cb8d0d30b0094227e6b1c3f01aa34b984c3e4fd4a4b1bcb5183013441f5d395f363d5b26ced3aa1218728fbb8d10bb39d57149b91986e9a759be263e8255d8adcbd697c64605b2d5d22f644a3d1725ce1fade09e3406987fcd7cde9cd6cf343f9ebbba4381dd2f10b1b8d9c1899dba704cc6c032f36a3c15ab1a5d81a56201cfc47159f96908e627b7ab03f"}]}}, {{0x9, 0x5, 0xf, 0x4, 0x10, 0x4, 0x4, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x5, 0x7}, @generic={0x2d, 0x23, "027a778786e7ecc9e9809a0db72e7c3542e0f1a3d2f717db65a6077385eb779ac522709f0fa3a9d1c90757"}]}}, {{0x9, 0x5, 0x5, 0x4, 0x8, 0x76, 0xf4, 0xf4, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0xd, 0x8e}]}}]}}, {{0x9, 0x4, 0xa, 0x9, 0x4, 0x9a, 0x23, 0xb3, 0x61, [], [{{0x9, 0x5, 0xb, 0xc, 0x400, 0x8, 0x0, 0x1}}, {{0x9, 0x5, 0x6, 0x1, 0x8, 0xe, 0x1, 0x74, [@generic={0xa7, 0x21, "5e40effc338e92eeeea2c838b87e0332d3e8d899f39dcdc840f3b1f207b2f46ed1bbac9c5eaddbdd9df1535df33c5d28bad76eaed6ced29e44fb2b8bb7ed89d9ce0a76fd0a40373c5a1ba03332e2d9d128b123ca64e2c6a631b94386bdcb9faf69237ca19c06c8fb8ebd557651d7b1475000ff642b0b1c53a9999d2d684bab1b5664ab8d2ed0de6d0a253973f60b449163934da58195276ebda0ff9d28be4ef5c7a677e283"}]}}, {{0x9, 0x5, 0xb, 0x10, 0x20, 0x6, 0x81, 0x2, [@generic={0xbc, 0x9a140c09ab570410, "2aafef0c0c8d27718d2cf5d52bae6f745344913d0ee714de29079119a9b5ac65b7cb0e8ca2d7f6d7446451cab29a3a7ad16527d1ff4d53aecbdfb11e5f9647cac0a91b90158c44c0fb980397c4270088643eab9ba1a460bcafa5411558fd29f59e16a737ab8467cab3b68aa642ed44659ac82146c1a9506cb4c229520feca58f5016b828cf866581d3d7e2003976dbfdb5cd450c4c39f9ee24f8386afa725508ad34f4c5d853a59bbd99d98657ebf9958f651a3b299be5168160"}, @generic={0x43, 0x8, "2e59f3165d2f52e8588340f468f2a646a0849902a2cce0eb82229498a1e64427e789f1a7cf90d45ea55fb96bf73782d314f47cde46096b803929f133e19f1c0c79"}]}}, {{0x9, 0x5, 0x8, 0x10, 0x20, 0xba, 0x3, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0xc, 0xfffa}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x6, 0x8000}]}}]}}, {{0x9, 0x4, 0xae, 0xe9, 0x4, 0xbe, 0xa, 0x80, 0x4, [@hid_hid={0x9, 0x21, 0x2, 0xa, 0x1, {0x22, 0xfbf}}, @uac_control={{0xa, 0x24, 0x1, 0x7, 0xb}, [@input_terminal={0xc, 0x24, 0x2, 0x4, 0x100, 0x5, 0x1, 0xffff, 0x8, 0x81}, @mixer_unit={0x7, 0x24, 0x4, 0x4, 0xc0, "b946"}, @processing_unit={0x8, 0x24, 0x7, 0x4, 0x2, 0x7f, '7'}]}], [{{0x9, 0x5, 0x1, 0x0, 0x3ff, 0xba, 0x6, 0x9}}, {{0x9, 0x5, 0x80, 0x4, 0x10, 0x4, 0x0, 0xd}}, {{0x9, 0x5, 0x6, 0x1, 0x10, 0x1e, 0x6, 0x9}}, {{0x9, 0x5, 0x4, 0x8, 0x8, 0x9, 0x9, 0x43, [@generic={0x66, 0xd, "2c7a0e2118889479172251312b40a8cbe4200aff95b91a1830e9c0695f6a46ad5b2ea9b60f0fedabda00ee54f67859aceea0896c894ad074ff6c3f8bb30986c719884cacf8401568a6024c709e768800a49ce03e7467cf9994b1cabb728927686f3bbc87"}]}}]}}]}}]}}, &(0x7f0000001180)={0xa, &(0x7f00000010c0)={0xa, 0x6, 0x200, 0x6, 0x3, 0x3, 0x47, 0x5}, 0x28, &(0x7f0000001100)={0x5, 0xf, 0x28, 0x2, [@ssp_cap={0x18, 0x10, 0xa, 0x7f, 0x3, 0x80, 0x780, 0x7, [0x3f, 0xff4130, 0xcf]}, @wireless={0xb, 0x10, 0x1, 0x4, 0x24, 0x9, 0x5c, 0xacd1, 0x40}]}, 0x1, [{0x4, &(0x7f0000001140)=@lang_id={0x4, 0x3, 0x380a}}]}) syz_usb_disconnect(r9) r10 = openat(0xffffffffffffffff, &(0x7f00000011c0)='./file0\x00', 0x402020, 0x11) getpeername$packet(r10, &(0x7f0000001200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000001240)=0x14) bpf$MAP_CREATE(0x0, &(0x7f0000001280)=@base={0x2, 0x881, 0x0, 0x0, 0x6e0, r10, 0x8, '\x00', r11, r10, 0x2, 0x1, 0x4, 0x0, @void, @value, @void, @value}, 0x50) flock(r0, 0x3) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001340), 0xffffffffffffffff) sendmsg$NL802154_CMD_DEL_SEC_DEV(r12, &(0x7f0000001400)={&(0x7f0000001300)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000013c0)={&(0x7f0000001380)={0x1c, r13, 0x2, 0x70bd25, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x4004) read$FUSE(r10, &(0x7f0000001440)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) sched_setaffinity(r14, 0x8, &(0x7f0000003480)=0xa4f) 11.008345091s ago: executing program 4 (id=829): prlimit64(0x0, 0xe, &(0x7f0000000780)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000240)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_UNISCRNMAP(r3, 0x5410, &(0x7f00000010c0)=""/4096) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000ffffffff00000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082000000950000000000000057c9fbee38b6974ebb42f1f2ac49522de308e5995adca6c7293c93e56b4bd2e8c428c2"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="05000000010000000800000008000000000000005b78a783419fcfccc14811676c9d9b3dc39e71427f15e390a952b5ac7481eab3976481d57cddf1327a17c6ddc666daf3137aca3b91e28b4feea93b1dabf1933e1fc6bd3b248e3bf77f83d5bcaf21077ce148b95211fe6639d9676be4b9e566e6b470461265d830501a7c13277e397c0a31a401092469f0bc4dcb31b422b5f6b55d61e9b1628f653eb2f62e15908ce005b00f2a74783c613bdd4a", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000640)={{r6}, &(0x7f00000005c0), &(0x7f0000000600)='%-5lx \x00'}, 0x20) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000980)='sys_enter\x00', r7}, 0x18) capget(&(0x7f0000000440)={0x20080522}, 0x0) r8 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$int_in(r8, 0x5452, &(0x7f0000000140)=0x7) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000000, &(0x7f00000006c0), 0x1, 0x512, &(0x7f0000000c40)="$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") pipe2(0x0, 0x0) r9 = socket$pppl2tp(0x18, 0x1, 0x1) r10 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r9, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r10, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x3}}, 0x26) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 9.756936212s ago: executing program 4 (id=832): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x87}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x4, 0x93, &(0x7f00000003c0)=""/147, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40500000000000079107a000000000005000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x3}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = socket$inet(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r4, 0x890b, &(0x7f00000000c0)={0x0, {0x2, 0x4e22, @private=0xa010100}, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x20}}, {0x2, 0x4e20, @local}, 0x114, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x3, 0x2}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x9, 0x201, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x8000, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="9800000000000009557d22c2e4000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000440)={r7}, 0xc) ioctl$TUNSETLINK(r5, 0x400454cd, 0xfffffffe) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000080000085000000060000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r8 = pidfd_getfd(r6, r7, 0x0) getsockopt$inet6_opts(r8, 0x29, 0x3b, &(0x7f0000000180), &(0x7f0000000340)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000300)='qgroup_update_counters\x00'}, 0x18) socket$inet(0x2, 0x1, 0x0) 8.907924046s ago: executing program 5 (id=833): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000c50000181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000140000fbb703000000e31f008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='sys_enter\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r2, 0x25, &(0x7f00000000c0)={0x87}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r3, &(0x7f0000000480)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000400)={0x80, r4, 0x2, 0x70bd2a, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x6800000}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xf}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x5fa5}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x4c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xa2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @empty}}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x25}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) timer_create(0x0, &(0x7f0000000180)={0x0, 0x13, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)=0x0) timer_settime(r5, 0x0, &(0x7f0000000340)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) pause() bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00'}, 0x10) r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) fsetxattr$trusted_overlay_redirect(r6, &(0x7f0000000040), 0x0, 0x0, 0x0) 8.807030927s ago: executing program 3 (id=834): r0 = socket$inet6(0xa, 0x80002, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r2}, 0x10) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, 0x0, 0x0) 8.517314332s ago: executing program 3 (id=836): syz_open_dev$MSR(0x0, 0x10000000000, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000780)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e20}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d0000008500000008000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) unshare(0x42000000) io_setup(0x2007, &(0x7f0000000200)) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000680)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000007c0)=ANY=[@ANYBLOB="5800000055003d0926bd70000200000007000000", @ANYRES32=r4, @ANYBLOB="20000200", @ANYRES32=0x0, @ANYBLOB="00010100000000000000000000000000000000008edd000020000100a092a00e5666549c70853645e451e78e86dcd779da781037cd87ddc832c654e3bc7e80517d46c5c01c36e5d5fa654f9c4d44a4fb6932ec22a8aed30ac912b862df96acf710e28f62687a72b96f0205e05878a1638036b4c427ed23a398b1f89a8f84a44743", @ANYRES32=r4, @ANYBLOB="01020000ff02000000000000000000000000000186dd0000"], 0x58}}, 0x80) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x0, &(0x7f0000000c00), 0x1, 0xb80, &(0x7f0000000c40)="$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") r5 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r5, &(0x7f0000001fc0)=""/184, 0xb8) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r6, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x14, r7, 0x303, 0x0, 0x0, {0x3d}}, 0x14}}, 0x0) 7.98424496s ago: executing program 5 (id=838): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x3, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x1, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) socket(0x28, 0x5, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB='iocharset=cp855,nonumtail=0,uni_xlHte=0,shortname=winnt,codepage=950,utf8=0,utf8=0,shortname=winnt,uniate=0,discard,rodir,uni_xlate=1,\x00'], 0x1, 0x27e, &(0x7f0000000240)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0x44, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x74, 0x0, 0x800, 0x55007}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERIER={0x5, 0x19, 0x2}, @IFLA_BR_AGEING_TIME={0x8, 0x4, 0x81}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x200) ioctl$KVM_SET_LAPIC(r5, 0x4400ae8f, &(0x7f0000000380)={"f9bef8d1aaeadafa287efdb9450ae3e2d260489591c42ab93a0c7bca18e9a19fa8e6cd61e9f62f91123f1311f81f85b4044554cb6e3ca1b6d1fc011bd71bdda82f37ccfa5b87dd5dcd311dbbb67f240dc02c53b7eabf3651660ce801e3878538da8bb24e1dbc480dae36207bf6b7b946c7a8ec08468f9a75ec797b8c11807655272833a7c70ccfc9a8259e7a148eca4d16b6ff519973a20b65f91a7261cdd2440a5a0566d843fa334b0280f0aacc3b417322b9b56098dd842c44139da4bd1e2212a40ba043bd72b995b172b26b71d434e9f3bf74b4ed480b264e0e9d6f628732534db36bfb92ee6419fb244db44abf0cd9357755ce9c4c9a584e5eb89ffd10c8a6c3c6115265f25f798570751917cd7cfc2ca71729e268c3b30c05b3dfdb18cbbfd3036a889f5fefb0f9d56bf970bdbf2524f8e435b721c809e73a5fdafbf1594088ad1974908bf5fc752d564c1a4989a7d1e59564567d9b437442c5c1cfec93526395d18b1ecb18dedd713ced403a00a2cd27b2dc857808287ea88157b3c19075eb33f7cc60a6161a88ad37fb04d0ce0fda24176406391a5ac521299143bdf59a474a17272105e55e9870cec2942a6705993e821e54441c877a64450e739b1321ad17e1ed552e65654bbfcc8ebd1d64fc4e888609a90410f780fe5031c27737f2de05a7ddf00129eb746a2e990438d9bf6a3211779707d615d79111b3fe71c26433482306ce7563c11cdf6f8da283ae147311465af80ba5350e6d65438cd5a20ec155d78227e5336d504f8f1145f4b942180f7ba6e5c9a070d4e31289d4845229780e53713090e782a75b32729c10da28c1f2702dad57a37416fc138040064347a0a290803f51a619402d88d0a4b2bef39bf92696b6d7052459a78a258edfe2e66f2e10a80b168b483c90a1a1dd67c6d6c9b7a2336d1678131ca38552d9acff05dcd57f9f4164064b7781d8a8b5507e21edfe35d65d726bf24799535648cd04f3b7e85c3f6762f353a8f65afdc7ba63bc0eb65d7188cb1adee1d8d14c0413458d2ff65093d972ac3696fa12defc0f8dedf2309e1b80fc672205e6ccfc6b494233c4d00b5471cb52d896c73cddee40e5e51ee8a9bbe453a1a7d5b9832cacc5965220145504ccb2a157a7c1d9d718c0bf96cd350ac5ca330c827bedbff299774707f5840a0d954ae39c9421975d48e05d87a1ceddefbecae936e15ffb308364b69eefd345d6200cd128e48c162a4ebd026fefb7cc73e80204b21ff30d63e8707292f60682c6f6a587fff9c5a0fae24e0406df5363c7c9d31f72829b6a9d9237a84e83e22c33bf6313ee4072f09f9c6254d0eb7239d51cdda77b8e3d42a89449a3e1b6be8953a27651486383879490486fd11b6ac4e1b86f8a71fc294e0ebf572f4ef00582be189ee5a38c18d4d51cd3221fb1475a56cdf3cc7258bf8c559bf1a9"}) r6 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x458, 0x5013, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x2, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x64, 0x1, {0x22, 0x4f8}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x4, 0xbc}}}}}]}}]}}, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(r7, 0x6, 0x9, &(0x7f0000000200)={{0xff, @local, 0x0, 0x0, 'lc\x00'}, {@initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x44) getsockopt$inet_tcp_int(r7, 0x6, 0x9, 0x0, &(0x7f0000000040)) syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000080)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x10, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x0, 0x10, 0x4, [{{0x9, 0x4, 0x0, 0x2, 0x1, 0x7, 0x1, 0x3, 0x9, "", {{{0x9, 0x5, 0x1, 0x2, 0x10, 0x5, 0x8}}}}}]}}]}}, &(0x7f0000000600)={0x0, 0x0, 0x5, &(0x7f0000000180)={0x5, 0xf, 0x5}, 0x5, [{0x0, 0x0}, {0x8b, &(0x7f0000000440)=@string={0x8b, 0x3, "66a5670a284b3e5cee4fab665168a17a2c4c53075162b2ec4e3926d1b0638194faab47ed755f83e90dc5d6951e6c22989c5fd19d650953739aec028a2d0e6c4d30e12e555e0bec8fdd168d09d7a29780813f63ffd8b9ca9ad20efba0e0cf85b409d6cda7deb7c492abe1bc2840619c6639e027b31d27f26f3c4193ad925bf32dc3ae5473925d1adb8d"}}, {0xe9, &(0x7f0000000500)=@string={0xe9, 0x3, "0c6e1c11c3bbd51affc321cb2e80dceabdda50505e523bdf2fb6a1b9f6c81330a62f9b35eae299c68602c6ec377ecf7f51dcd130e2759256059341aa7ac37dc58b90ab1108fa9316b10e8699ab8afed2f0eb8df11eb57ed42b954b7313256a0d76d4c200d07fad03dbe2eab25ec690a1626c3356d2d73f640a4318a256c38a4c60b6ce34b5c9d1e8b651c958c8269b85002db9daac0df371ff7d2823c3d0949a44525ff9adeb961bec36e4cd929792994d6c6a01a747534e18538044ec3d731e88442350d80c12afcd1cb2eaa32b898f9ef97417742eeb79122cda25789274230ab3335da7f78d"}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0xc04}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x80c}}]}) syz_usb_control_io(r6, 0x0, 0x0) syz_usb_control_io$hid(r6, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000780)={0x2, 0x0, @ioapic={0x10000, 0x0, 0x4, 0xefffffff, 0x0, [{0x82, 0x8, 0xfc, '\x00', 0x3}, {0x3, 0x9, 0xfc, '\x00', 0x7c}, {0xfc, 0x12, 0x4, '\x00', 0x1}, {0x11, 0xb, 0x0, '\x00', 0xea}, {}, {0x0, 0x0, 0x4, '\x00', 0x2}, {0x1f, 0x1, 0x2}, {0xfd, 0x0, 0x0, '\x00', 0x2}, {0x0, 0xf, 0xf7, '\x00', 0xfc}, {0xa8, 0x6, 0x0, '\x00', 0x11}, {0xb}, {0x1, 0x9, 0x42, '\x00', 0xff}, {0x0, 0x0, 0x2, '\x00', 0x1}, {0x2, 0x0, 0x6}, {0xc2, 0x0, 0x0, '\x00', 0x49}, {0x1, 0x21, 0x80}, {0x3, 0x0, 0x0, '\x00', 0x80}, {0x0, 0x2, 0x6, '\x00', 0x10}, {0x48, 0x4, 0xd, '\x00', 0xfd}, {0x8, 0xc0, 0x3}, {0x0, 0x12, 0x3, '\x00', 0x35}, {0xfd, 0x9, 0x0, '\x00', 0x5}, {0x2, 0x2, 0x9}, {0x80, 0xff, 0x3, '\x00', 0x7}]}}) 7.952978131s ago: executing program 0 (id=839): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000080)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0x85}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) syz_genetlink_get_family_id$wireguard(&(0x7f0000000380), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000780)={0x8, 0x244}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) pipe(&(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(r6, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0xffffffff, @loopback}, 0x1c) splice(r6, 0x0, r5, 0x0, 0x406f413, 0x8) r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) shutdown(r6, 0x0) fsetxattr$security_evm(r7, &(0x7f0000000040), &(0x7f00000000c0)=@ng={0x4, 0x3, "b1408da78f3e3f614b296b1a09b3860bcf"}, 0x13, 0x2) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)=ANY=[], 0x1c8}}, 0x0) 7.662562936s ago: executing program 4 (id=840): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f0000002b80)=@generic={0x0, 0x7, 0x9}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a000000020000000110"], 0x50) socket(0x2b, 0x1, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r1}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00'}, 0x10) mlock(&(0x7f0000c00000/0x400000)=nil, 0x400000) mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000fff000/0x1000)=nil) sched_setscheduler(0x0, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r3}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r2}, &(0x7f0000000040), &(0x7f0000000080)=r3}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r4, 0xaf01, 0x0) r5 = eventfd(0xc) ioctl$VHOST_SET_LOG_FD(r4, 0x4004af07, &(0x7f0000000240)=r5) ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f0000000040)={0x1, r5}) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000000e40)={0x1, 0x0, [{0x0, 0xf3, &(0x7f00000008c0)=""/243}]}) ioctl$VHOST_SET_VRING_ERR(r4, 0x4008af22, &(0x7f00000002c0)={0x1, r5}) ioctl$VHOST_VSOCK_SET_RUNNING(r4, 0x4004af61, &(0x7f0000000000)=0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xf, @void, @value}, 0x94) 7.285577502s ago: executing program 3 (id=841): utimensat(0xffffffffffffffff, 0x0, 0x0, 0x100) mkdirat(0xffffffffffffff9c, 0x0, 0x181) mount(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r2}, 0x10) utime(&(0x7f0000000200)='./file0\x00', 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000040)="3700000013000318680907070000000f0000ff3f13000000170a001700000000040037000d00030001362564aa58b9a6c011f6bbf44dc4", 0x37}], 0x1) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f00000002c0)={{0xffffffffffffffff, 0x1, 0x1000001, 0x2, 0x6}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r3, 0x40505412, &(0x7f0000000180)={0x6, 0xae70, 0xb}) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1e0000007c63000009000000690b000015880000", @ANYRES32=r4, @ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB="0500000003000000050000000300000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000840)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x5, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f00000003c0)='qgroup_meta_convert\x00', r5, 0x0, 0xfffffffffffffff9}, 0x52) r6 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex_waitv(&(0x7f0000001080)=[{0x3, &(0x7f0000001040)=0x3, 0x82}], 0x1, 0x0, &(0x7f0000001100)={0x77359400}, 0x1) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1b00"/12], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x18) r7 = socket$nl_route(0x10, 0x3, 0x0) connect$netlink(r7, &(0x7f0000000280)=@proc={0x10, 0x0, 0x25dfdbfc, 0x2000}, 0x7) 6.901778018s ago: executing program 4 (id=842): prlimit64(0x0, 0xe, &(0x7f0000000780)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000240)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_UNISCRNMAP(r3, 0x5410, &(0x7f00000010c0)=""/4096) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000ffffffff00000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082000000950000000000000057c9fbee38b6974ebb42f1f2ac49522de308e5995adca6c7293c93e56b4bd2e8c428c2"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="05000000010000000800000008000000000000005b78a783419fcfccc14811676c9d9b3dc39e71427f15e390a952b5ac7481eab3976481d57cddf1327a17c6ddc666daf3137aca3b91e28b4feea93b1dabf1933e1fc6bd3b248e3bf77f83d5bcaf21077ce148b95211fe6639d9676be4b9e566e6b470461265d830501a7c13277e397c0a31a401092469f0bc4dcb31b422b5f6b55d61e9b1628f653eb2f62e15908ce005b00f2a74783c613bdd4a", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000640)={{r6}, &(0x7f00000005c0), &(0x7f0000000600)='%-5lx \x00'}, 0x20) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000980)='sys_enter\x00', r7}, 0x18) capget(&(0x7f0000000440)={0x20080522}, 0x0) r8 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$int_in(r8, 0x5452, &(0x7f0000000140)=0x7) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000000, &(0x7f00000006c0), 0x1, 0x512, &(0x7f0000000c40)="$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") pipe2(0x0, 0x0) r9 = socket$pppl2tp(0x18, 0x1, 0x1) r10 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r9, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r10, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x3}}, 0x26) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 6.745264621s ago: executing program 0 (id=843): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32, @ANYBLOB="0000000000000000b7080000000009007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sys_enter\x00', r1}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r2 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) unlinkat(r2, &(0x7f0000000280)='./file0\x00', 0x200) (fail_nth: 1) 5.732958057s ago: executing program 0 (id=844): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x2, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='kfree\x00', r0}, 0x10) r1 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r1, 0x8922, &(0x7f0000000000)={'veth1_virt_wifi\x00', 0x9}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xa3ea962f65f92b57, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r3}, 0x18) r4 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r4, &(0x7f0000000140)={0x28, 0x0, 0x0, @host}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002ac0)={0x1a, 0x4, &(0x7f0000000280)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x2008, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 5.732400527s ago: executing program 3 (id=845): socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0xa, 0x4, 0x8, 0xc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r4}, 0x10) sendmsg$NL80211_CMD_VENDOR(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001b40)={&(0x7f0000000180)={0x24, r1, 0x62c21a4ade68aba1, 0x0, 0x0, {{0x32}, {@val={0x8, 0x117}, @val={0x8}, @void}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) r5 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r5, 0x2, &(0x7f0000000440)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_open_procfs(r5, &(0x7f0000000380)='net/vlan/vlan1\x00') socketpair(0x2c, 0x4, 0x800, &(0x7f0000000300)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f00000004c0)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) arch_prctl$ARCH_SHSTK_LOCK(0x5003, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000240)={[{@bsdgroups}, {@grpquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@noauto_da_alloc}, {@nolazytime}, {@discard}, {@grpjquota}, {@errors_remount}, {@nobarrier}]}, 0x1, 0x46a, &(0x7f0000000980)="$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") syz_io_uring_setup(0x3fed, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) r8 = syz_open_procfs(0x0, &(0x7f0000000180)='fdinfo\x00') getdents64(r8, &(0x7f00000002c0)=""/4096, 0x1000) 5.686607968s ago: executing program 1 (id=846): socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0xa, 0x4, 0x8, 0xc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r4}, 0x10) sendmsg$NL80211_CMD_VENDOR(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001b40)={&(0x7f0000000180)={0x24, r1, 0x62c21a4ade68aba1, 0x0, 0x0, {{0x32}, {@val={0x8, 0x117}, @val={0x8}, @void}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) r5 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r5, 0x2, &(0x7f0000000440)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_open_procfs(r5, &(0x7f0000000380)='net/vlan/vlan1\x00') socketpair(0x2c, 0x4, 0x800, &(0x7f0000000300)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f00000004c0)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) arch_prctl$ARCH_SHSTK_LOCK(0x5003, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r8 = syz_open_procfs(0x0, &(0x7f0000000180)='fdinfo\x00') getdents64(r8, &(0x7f00000002c0)=""/4096, 0x1000) 3.911267297s ago: executing program 1 (id=847): prlimit64(0x0, 0xe, &(0x7f0000000780)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_UNISCRNMAP(r3, 0x5410, &(0x7f00000010c0)=""/4096) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000ffffffff000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082000000950000000000000057c9fbee38b6974ebb42f1f2ac49522de308e5995adca6c7293c93e56b4bd2e8c428c2"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="05000000010000000800000008000000000000005b78a783419fcfccc14811676c9d9b3dc39e71427f15e390a952b5ac7481eab3976481d57cddf1327a17c6ddc666daf3137aca3b91e28b4feea93b1dabf1933e1fc6bd3b248e3bf77f83d5bcaf21077ce148b95211fe6639d9676be4b9e566e6b470461265d830501a7c13277e397c0a31a401092469f0bc4dcb31b422b5f6b55d61e9b1628f653eb2f62e15908ce005b00f2a74783c613bdd4a", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000640)={{r5}, &(0x7f00000005c0), &(0x7f0000000600)='%-5lx \x00'}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000980)='sys_enter\x00', r6}, 0x18) capget(&(0x7f0000000440)={0x20080522}, 0x0) r7 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$int_in(r7, 0x5452, &(0x7f0000000140)=0x7) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000000, &(0x7f00000006c0), 0x1, 0x512, &(0x7f0000000c40)="$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") pipe2(0x0, 0x0) r8 = socket$pppl2tp(0x18, 0x1, 0x1) r9 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r8, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r9, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x3}}, 0x26) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 3.895444107s ago: executing program 4 (id=848): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{0x0}], 0x1, &(0x7f0000002940), 0x0, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000118110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014002000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='sys_enter\x00', r2}, 0x10) clock_settime(0x60ffffffffff, 0x0) r3 = syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = gettid() kcmp(r4, r3, 0x5, 0xffffffffffffffff, 0xffffffffffffffff) 2.687548226s ago: executing program 3 (id=849): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000c40)='memory.current\x00', 0x275a, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x417d2ccf, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r0}, 0x0, &(0x7f0000000040)}, 0x20) r2 = socket$inet6(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00'}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r3}, 0x10) sendto$inet6(r2, &(0x7f0000000740)="900000001c001f4d154a813393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d72e5a15c50866c6d55d08f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee", 0x90, 0x3000c080, 0x0, 0x0) 2.686988316s ago: executing program 0 (id=850): sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b70300000000000085000000720000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000240)='kfree\x00', r0}, 0x10) socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x19, &(0x7f00000001c0)=0x7ff, 0x4) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x8000002, 0x2000}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) 2.595843428s ago: executing program 0 (id=851): syz_open_dev$MSR(0x0, 0x10000000000, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000780)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e20}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d0000008500000008000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) unshare(0x42000000) io_setup(0x2007, &(0x7f0000000200)) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000680)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000007c0)=ANY=[@ANYBLOB="5800000055003d0926bd70000200000007000000", @ANYRES32=r4, @ANYBLOB="20000200", @ANYRES32=0x0, @ANYBLOB="00010100000000000000000000000000000000008edd000020000100a092a00e5666549c70853645e451e78e86dcd779da781037cd87ddc832c654e3bc7e80517d46c5c01c36e5d5fa654f9c4d44a4fb6932ec22a8aed30ac912b862df96acf710e28f62687a72b96f0205e05878a1638036b4c427ed23a398b1f89a8f84a44743", @ANYRES32=r4, @ANYBLOB="01020000ff02000000000000000000000000000186dd0000"], 0x58}}, 0x80) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x0, &(0x7f0000000c00), 0x1, 0xb80, &(0x7f0000000c40)="$eJzs3MtrXFUYAPDv3jyaNrGTiqgtggGpFcVp2hSFrlrXooIuuuyYTErI9GEmggldpHWvLkRcFKR/guDeunAluKgLrX9BEYsU3bQuInce6dBkktjO9PTx+8GZe86c6XzfN5fOPQfmJoAn1kTxkEfsjYiTWUSp9XweEcON3kjESvN1t2+eny5aFqur7/+VRRYRt26en26/V9Y6jrYGIxFx9a0snv50fdz60vJ8pVarLrTGBxdPnztYX1p+fe505VT1VPXMkak3j0y9MTXVw1qvn/vw6xd+eefli5c/m3z3q90/ZXEsxlpznXX0ykRMrH0mnQYjotLrYIkMtOrprDMbTJgQAACbyjvWcM9GKQbizuKtFD/+mjQ5AAAAoCdWByJWAQAAgMdcZv8PAAAAj7n27wBu3Tw/3W5pf5HwYN04HhHjzfrb9zc3ZwZjpXEciaGI2PV3Fp23tWbNf3bfJopI3/1cLVr06T7kzaxciIjnNzr/WaP+8cZd3OvrzyNisgfxJ+4aP0r1H+tB/NT1A/BkunK8eSFbf/3L19Y/scH1b3CDa9e9SH39a6//bq9b/92pf6DL+u+9bcbY9++rV7vNda7/Tnz++0wRvzjeV1H/w40LEfsGN6o/W6s/61L/yW3GGJ2+fqnbXFF/UW+7Pej6Vy9H7I+N62/LNvv7RAdn52rVyeZjlxj7fzhxoFv8zvNftCJ+ey/wIBTnf1eX+rc6/+e2GWP8uT/3dpvbuv78j+Hsg0ZvuPXMJ5XFxYVDEcPZ2+ufP7x5Lu3XtN+jqP+Vlzb//79R/cV3wkrrcyj2Ahdax2J88a6Yo/sPf3vv9fdXUf/MPZ7/L7YZ45vvL33UbS51/QAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8GvKIGIssL6/187xcjhiNiGdiV147W198bfbsx2dmirmI8RjKZ+dq1cmIKDXHWTE+1OjfGR++azwVEXsi4svSzsa4PH22NpO6eAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANaMRsRYZHk5IvKI+KeU5+Vy6qwAAACAnhtPnQAAAADQd/b/AAAA8Piz/wcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKDP9rx45VoWEStHdzZaYbg1N5Q0M6Df8tQJAMkMpE4ASGYwdQJAMvb4QLbF/EjXmR09zwUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAh9eBvVeuZRGxcnRnoxWGW3NDSTMD+i1PnQCQzEDqBIBkBlMnACRjjw9kW8yPdJ3Z0fNcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHh4jTValpcjIm/087xcjngqIsZjKJudq1UnI2J3RPxWGtpRjA+lThoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAICeqy8tz1dqteqCjo6Ozlon9TcTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAp1JeW5yu1WnWhnjoTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAILX60vJ8pVarLvSxk7pGAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADS+S8AAP//szUGGQ==") r5 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r5, &(0x7f0000001fc0)=""/184, 0xb8) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r6, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x14, r7, 0x303, 0x0, 0x0, {0x3d}}, 0x14}}, 0x0) 2.578241008s ago: executing program 5 (id=852): r0 = socket$inet6(0xa, 0x80002, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r2}, 0x10) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, 0x0, 0x0) 2.357294912s ago: executing program 5 (id=853): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000080)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0x85}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000380), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000780)={0x8, 0x244}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) pipe(&(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r7, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(r7, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0xffffffff, @loopback}, 0x1c) splice(r7, 0x0, r6, 0x0, 0x406f413, 0x8) r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) shutdown(r7, 0x0) fsetxattr$security_evm(r8, &(0x7f0000000040), &(0x7f00000000c0)=@ng={0x4, 0x3, "b1408da78f3e3f614b296b1a09b3860bcf"}, 0x13, 0x2) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)=ANY=[@ANYBLOB="c8010000", @ANYRES16=r1], 0x1c8}}, 0x0) 821.753507ms ago: executing program 1 (id=854): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x4c, &(0x7f00000002c0)=0x2) bpf$BPF_MAP_GET_FD_BY_ID(0x9, &(0x7f0000000280)={0x0, 0x2, 0x8}, 0xc) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r3}, 0x18) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x32, 0xffffffffffffffff, 0x0) (fail_nth: 5) 346.091414ms ago: executing program 0 (id=855): r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x601c2, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000000)={r0}, 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000300)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) r2 = inotify_init() inotify_add_watch(r2, &(0x7f0000000280)='./file0\x00', 0x40000120) lseek(r1, 0x100, 0x0) getdents64(r1, 0x0, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r3, &(0x7f0000000440), 0x10) listen(r3, 0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r4, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) writev(r4, &(0x7f00000002c0)=[{&(0x7f0000000880)="4077e2e17b2dca3730171620ff", 0xd}], 0x1) writev(r4, &(0x7f0000000000)=[{&(0x7f00000000c0)="91", 0x1}], 0x1) close_range(r3, r4, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x37e2f4aba9289b81, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10) ftruncate(r0, 0x8800000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r8, &(0x7f00000034c0)=[{{0x0, 0x0, &(0x7f0000001e40)=[{&(0x7f0000000b80)=""/4096, 0x20001b80}, {&(0x7f0000001b80)=""/112, 0x70}], 0x2, 0x0, 0xa0028cb4}}], 0x40000000000013c, 0x700, 0x0) sendfile(r7, r0, 0x0, 0x100001100) 145.347058ms ago: executing program 3 (id=856): utimensat(0xffffffffffffffff, 0x0, 0x0, 0x100) mkdirat(0xffffffffffffff9c, 0x0, 0x181) mount(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r2}, 0x10) utime(&(0x7f0000000200)='./file0\x00', 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000040)="3700000013000318680907070000000f0000ff3f13000000170a001700000000040037000d00030001362564aa58b9a6c011f6bbf44dc4", 0x37}], 0x1) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f00000002c0)={{0xffffffffffffffff, 0x1, 0x1000001, 0x2, 0x6}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r3, 0x40505412, &(0x7f0000000180)={0x6, 0xae70, 0xb}) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1e0000007c63000009000000690b000015880000", @ANYRES32=r4, @ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB="0500000003000000050000000300000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000840)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x5, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f00000003c0)='qgroup_meta_convert\x00', r5, 0x0, 0xfffffffffffffff9}, 0x52) r6 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex_waitv(&(0x7f0000001080)=[{0x3, &(0x7f0000001040)=0x3, 0x82}], 0x1, 0x0, &(0x7f0000001100)={0x77359400}, 0x1) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1b00"/12], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x18) r7 = socket$nl_route(0x10, 0x3, 0x0) connect$netlink(r7, &(0x7f0000000280)=@proc={0x10, 0x0, 0x25dfdbfc, 0x2000}, 0x7) 0s ago: executing program 4 (id=857): socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0xa, 0x4, 0x8, 0xc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r4}, 0x10) sendmsg$NL80211_CMD_VENDOR(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001b40)={&(0x7f0000000180)={0x24, r1, 0x62c21a4ade68aba1, 0x0, 0x0, {{0x32}, {@val={0x8, 0x117}, @val={0x8}, @void}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) r5 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r5, 0x2, &(0x7f0000000440)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_open_procfs(r5, &(0x7f0000000380)='net/vlan/vlan1\x00') socketpair(0x2c, 0x4, 0x800, &(0x7f0000000300)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f00000004c0)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) arch_prctl$ARCH_SHSTK_LOCK(0x5003, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r8 = syz_open_procfs(0x0, &(0x7f0000000180)='fdinfo\x00') getdents64(r8, &(0x7f00000002c0)=""/4096, 0x1000) kernel console output (not intermixed with test programs): 6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 222.180433][ T2929] bridge0: port 2(bridge_slave_1) entered disabled state [ 222.206468][ T28] audit: type=1400 audit(1745003996.753:367): avc: denied { unmount } for pid=294 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 222.337778][ T2942] FAULT_INJECTION: forcing a failure. [ 222.337778][ T2942] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 222.338211][ T330] usbhid 2-1:0.0: can't add hid device: -71 [ 222.361072][ T330] usbhid: probe of 2-1:0.0 failed with error -71 [ 222.367769][ T2942] CPU: 0 PID: 2942 Comm: syz.5.605 Not tainted 6.1.129-syzkaller-00014-gbc3d1d352ab6 #0 [ 222.377331][ T2942] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 222.382421][ T330] usb 2-1: USB disconnect, device number 6 [ 222.387215][ T2942] Call Trace: [ 222.395984][ T2942] [ 222.398758][ T2942] dump_stack_lvl+0x151/0x1b7 [ 222.403276][ T2942] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 222.408573][ T2942] dump_stack+0x15/0x1e [ 222.412561][ T2942] should_fail_ex+0x3d0/0x520 [ 222.417077][ T2942] should_fail+0xb/0x10 [ 222.421068][ T2942] should_fail_usercopy+0x1a/0x20 [ 222.425932][ T2942] copyin+0x1e/0x90 [ 222.429573][ T2942] _copy_from_iter+0x3c9/0xe00 [ 222.434172][ T2942] ? copyout_mc+0x80/0x80 [ 222.438335][ T2942] ? __kasan_check_write+0x14/0x20 [ 222.443288][ T2942] ? __check_object_size+0x48e/0x650 [ 222.448414][ T2942] netlink_sendmsg+0x8c8/0xd30 [ 222.453009][ T2942] ? netlink_getsockopt+0x540/0x540 [ 222.458046][ T2942] ? security_socket_sendmsg+0x82/0xb0 [ 222.463342][ T2942] ? netlink_getsockopt+0x540/0x540 [ 222.468369][ T2942] ____sys_sendmsg+0x5d3/0x9a0 [ 222.472974][ T2942] ? __sys_sendmsg_sock+0x40/0x40 [ 222.477834][ T2942] __sys_sendmsg+0x2a9/0x390 [ 222.482253][ T2942] ? ____sys_sendmsg+0x9a0/0x9a0 [ 222.487029][ T2942] ? __kasan_check_write+0x14/0x20 [ 222.491972][ T2942] ? mutex_unlock+0xb2/0x260 [ 222.496400][ T2942] ? __kasan_check_write+0x14/0x20 [ 222.501345][ T2942] ? __ia32_sys_read+0x90/0x90 [ 222.505942][ T2942] ? debug_smp_processor_id+0x17/0x20 [ 222.511149][ T2942] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 222.517055][ T2942] __x64_sys_sendmsg+0x7f/0x90 [ 222.521652][ T2942] x64_sys_call+0x16a/0x9a0 [ 222.525992][ T2942] do_syscall_64+0x3b/0x80 [ 222.530247][ T2942] ? clear_bhb_loop+0x55/0xb0 [ 222.534759][ T2942] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 222.540659][ T2942] RIP: 0033:0x7fe31d98e169 [ 222.544912][ T2942] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 222.564355][ T2942] RSP: 002b:00007fe31e8e2038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 222.572684][ T2942] RAX: ffffffffffffffda RBX: 00007fe31dbb5fa0 RCX: 00007fe31d98e169 [ 222.580495][ T2942] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000006 [ 222.588312][ T2942] RBP: 00007fe31e8e2090 R08: 0000000000000000 R09: 0000000000000000 [ 222.596236][ T2942] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 222.604045][ T2942] R13: 0000000000000000 R14: 00007fe31dbb5fa0 R15: 00007ffc3b7d1ff8 [ 222.611977][ T2942] [ 222.672001][ T292] EXT4-fs (loop0): unmounting filesystem. [ 222.723662][ T2955] netlink: 3 bytes leftover after parsing attributes in process `syz.3.609'. [ 223.249371][ T2964] netlink: 'syz.4.613': attribute type 27 has an invalid length. [ 223.257003][ T2952] loop5: detected capacity change from 0 to 40427 [ 223.362183][ T2965] loop0: detected capacity change from 0 to 512 [ 223.372115][ T2952] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 223.380507][ T2952] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 223.438782][ T2964] bridge0: port 2(bridge_slave_1) entered disabled state [ 223.445837][ T2964] bridge0: port 1(bridge_slave_0) entered disabled state [ 223.499728][ T2965] EXT4-fs (loop0): 1 orphan inode deleted [ 223.505401][ T2965] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 223.517325][ T2965] ext4 filesystem being mounted at /117/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 223.706136][ T2952] F2FS-fs (loop5): invalid crc value [ 223.844744][ T2952] F2FS-fs (loop5): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 39874397669) [ 224.363589][ T2979] netlink: 128 bytes leftover after parsing attributes in process `syz.3.614'. [ 224.379839][ T2952] F2FS-fs (loop5): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 224.398025][ T2979] loop3: detected capacity change from 0 to 1024 [ 224.439965][ T2979] EXT4-fs: Ignoring removed i_version option [ 224.446497][ T922] Quota error (device loop0): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 224.450309][ T2979] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 224.458370][ T922] EXT4-fs error (device loop0): ext4_release_dquot:6805: comm kworker/u4:8: Failed to release dquot type 1 [ 224.467073][ T2979] EXT4-fs (loop3): required journal recovery suppressed and not mounted read-only [ 224.478659][ T292] EXT4-fs (loop0): unmounting filesystem. [ 224.490588][ T2952] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 224.497721][ T2952] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 224.506251][ T2967] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 224.543368][ T2967] bridge0: port 1(bridge_slave_0) entered blocking state [ 224.550240][ T2967] bridge0: port 1(bridge_slave_0) entered forwarding state [ 224.558199][ T2979] loop3: detected capacity change from 0 to 512 [ 224.579881][ T2979] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (3832!=33349) [ 224.590283][ T2967] bridge0: port 2(bridge_slave_1) entered blocking state [ 224.597170][ T2967] bridge0: port 2(bridge_slave_1) entered forwarding state [ 224.617913][ T2979] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802e02c, mo2=0002] [ 224.628405][ T2983] syz.5.610: attempt to access beyond end of device [ 224.628405][ T2983] loop5: rw=2049, sector=77824, nr_sectors = 136 limit=40427 [ 224.645846][ T2979] System zones: 1-12 [ 224.650123][ T2979] EXT4-fs (loop3): orphan cleanup on readonly fs [ 224.664018][ T2967] device veth0_vlan left promiscuous mode [ 224.669644][ T2979] EXT4-fs error (device loop3): ext4_read_inode_bitmap:168: comm syz.3.614: Inode bitmap for bg 0 marked uninitialized [ 224.684052][ T2967] device veth0_vlan entered promiscuous mode [ 224.694921][ T2967] device veth1_macvtap left promiscuous mode [ 224.699081][ T2982] loop0: detected capacity change from 0 to 40427 [ 224.701127][ T2979] EXT4-fs (loop3): Remounting filesystem read-only [ 224.708986][ T2967] device veth1_macvtap entered promiscuous mode [ 224.719930][ T2982] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 224.726330][ T2979] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 224.730051][ T2982] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 224.736028][ T2970] netlink: 3 bytes leftover after parsing attributes in process `syz.1.612'. [ 224.760372][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 224.778600][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 224.790358][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 224.802230][ T2982] F2FS-fs (loop0): Found nat_bits in checkpoint [ 224.834884][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 224.858454][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 224.891294][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 224.917757][ T2988] loop4: detected capacity change from 0 to 8192 [ 224.990232][ T2982] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 224.997976][ T568] I/O error, dev loop4, sector 8064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 225.000186][ T2982] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 225.012665][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 225.109476][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 225.141772][ T2982] FAULT_INJECTION: forcing a failure. [ 225.141772][ T2982] name failslab, interval 1, probability 0, space 0, times 0 [ 225.333739][ T2982] CPU: 1 PID: 2982 Comm: syz.0.615 Not tainted 6.1.129-syzkaller-00014-gbc3d1d352ab6 #0 [ 225.343300][ T2982] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 225.353194][ T2982] Call Trace: [ 225.356315][ T2982] [ 225.359093][ T2982] dump_stack_lvl+0x151/0x1b7 [ 225.363621][ T2982] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 225.368909][ T2982] ? kvmalloc_node+0x221/0x640 [ 225.373502][ T2982] dump_stack+0x15/0x1e [ 225.377501][ T2982] should_fail_ex+0x3d0/0x520 [ 225.382093][ T2982] __should_failslab+0xaf/0xf0 [ 225.386694][ T2982] ? kvmalloc_node+0x221/0x640 [ 225.391563][ T2982] should_failslab+0x9/0x20 [ 225.395902][ T2982] __kmem_cache_alloc_node+0x3d/0x2a0 [ 225.401102][ T2982] ? __kasan_check_read+0x11/0x20 [ 225.405963][ T2982] ? kvmalloc_node+0x221/0x640 [ 225.410562][ T2982] __kmalloc_node+0xa3/0x1e0 [ 225.414995][ T2982] kvmalloc_node+0x221/0x640 [ 225.419418][ T2982] ? vm_mmap+0xb0/0xb0 [ 225.423322][ T2982] vmemdup_user+0x26/0xe0 [ 225.427487][ T2982] map_lookup_and_delete_elem+0x384/0x770 [ 225.433047][ T2982] __sys_bpf+0x540/0x7f0 [ 225.437120][ T2982] ? bpf_link_show_fdinfo+0x300/0x300 [ 225.442333][ T2982] ? __kasan_check_write+0x14/0x20 [ 225.447276][ T2982] ? fpregs_restore_userregs+0x130/0x290 [ 225.452745][ T2982] __x64_sys_bpf+0x7c/0x90 [ 225.456997][ T2982] x64_sys_call+0x87f/0x9a0 [ 225.461333][ T2982] do_syscall_64+0x3b/0x80 [ 225.465586][ T2982] ? clear_bhb_loop+0x55/0xb0 [ 225.470100][ T2982] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 225.475829][ T2982] RIP: 0033:0x7f600538e169 [ 225.480079][ T2982] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 225.499529][ T2982] RSP: 002b:00007f60061be038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 225.507769][ T2982] RAX: ffffffffffffffda RBX: 00007f60055b5fa0 RCX: 00007f600538e169 [ 225.515578][ T2982] RDX: 0000000000000020 RSI: 0000200000000800 RDI: 0000000000000015 [ 225.523391][ T2982] RBP: 00007f60061be090 R08: 0000000000000000 R09: 0000000000000000 [ 225.531201][ T2982] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 225.539008][ T2982] R13: 0000000000000000 R14: 00007f60055b5fa0 R15: 00007ffc9ee47078 [ 225.546854][ T2982] [ 225.571014][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 225.646748][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 225.706889][ T2988] loop4: detected capacity change from 0 to 2048 [ 225.818068][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 225.834625][ T2988] EXT4-fs (loop4): couldn't mount as ext2 due to feature incompatibilities [ 225.843739][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 225.861178][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 225.869561][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 225.886289][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 226.275721][ T3005] EXT4-fs error (device loop3): ext4_map_blocks:634: inode #2: block 5: comm syz.3.614: lblock 0 mapped to illegal pblock 5 (length 1) [ 226.340104][ T3007] incfs: Backing dir is not set, filesystem can't be mounted. [ 226.347860][ T3007] incfs: mount failed -2 [ 226.410962][ T28] audit: type=1400 audit(1745004000.873:368): avc: denied { setopt } for pid=2978 comm="syz.3.614" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 226.449478][ T3005] EXT4-fs warning (device loop3): dx_probe:823: inode #2: lblock 0: comm syz.3.614: error -117 reading directory block [ 226.597689][ T3012] loop4: detected capacity change from 0 to 256 [ 226.604275][ T3012] exfat: Unknown parameter '/proc/zoneinfo' [ 226.625399][ T3021] xt_bpf: check failed: parse error [ 226.632056][ T294] EXT4-fs (loop3): unmounting filesystem. [ 226.670791][ T568] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 226.682650][ T3024] netlink: 'syz.3.626': attribute type 27 has an invalid length. [ 226.719156][ T3022] overlayfs: failed to resolve './file0': -2 [ 226.742263][ T3024] bridge0: port 1(bridge_slave_0) entered disabled state [ 226.804943][ T3012] netlink: 8 bytes leftover after parsing attributes in process `syz.4.622'. [ 226.886547][ T3026] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 226.953664][ T3026] bridge0: port 1(bridge_slave_0) entered blocking state [ 226.960599][ T3026] bridge0: port 1(bridge_slave_0) entered forwarding state [ 227.021244][ T3026] device veth0_vlan left promiscuous mode [ 227.052121][ T3026] device veth0_vlan entered promiscuous mode [ 227.060531][ T3026] device veth1_macvtap left promiscuous mode [ 227.066110][ T3021] loop5: detected capacity change from 0 to 40427 [ 227.068317][ T3026] device veth1_macvtap entered promiscuous mode [ 227.080136][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 227.091103][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 227.106406][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 227.117135][ T3021] F2FS-fs (loop5): invalid crc value [ 227.141045][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 227.149798][ T3021] F2FS-fs (loop5): Found nat_bits in checkpoint [ 227.172852][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 227.199515][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 227.214909][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 227.228593][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 227.242239][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 227.255639][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 227.267948][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 227.282374][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 227.295714][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 227.311350][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 227.324847][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 227.336145][ T3021] F2FS-fs (loop5): Start checkpoint disabled! [ 227.409611][ T363] bridge0: port 2(bridge_slave_1) entered blocking state [ 227.416545][ T363] bridge0: port 2(bridge_slave_1) entered forwarding state [ 227.578242][ T3021] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6 [ 228.119238][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 228.180759][ T3040] netlink: 3 bytes leftover after parsing attributes in process `syz.4.628'. [ 228.196318][ T3044] loop1: detected capacity change from 0 to 40427 [ 228.232029][ T3044] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 228.367828][ T3044] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 228.389250][ T3021] F2FS-fs (loop5): ino:10, start:0, end:8192, need to trigger GC to reclaim enough free segment when checkpoint is enabled [ 228.392781][ T3044] F2FS-fs (loop1): invalid crc value [ 228.483538][ T3065] overlayfs: overlapping lowerdir path [ 228.553537][ T3044] F2FS-fs (loop1): SIT is corrupted node# 5 vs 7 [ 228.667110][ T3044] F2FS-fs (loop1): Failed to initialize F2FS segment manager (-117) [ 229.294605][ T363] kworker/u4:5: attempt to access beyond end of device [ 229.294605][ T363] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 229.309942][ T28] audit: type=1400 audit(1745004003.863:369): avc: denied { ioctl } for pid=3067 comm="syz.0.633" path="/dev/vhost-vsock" dev="devtmpfs" ino=264 ioctlcmd=0xaf11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 229.435949][ T3079] loop4: detected capacity change from 0 to 1024 [ 229.463734][ T28] audit: type=1400 audit(1745004003.863:370): avc: denied { bpf } for pid=3067 comm="syz.0.633" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 229.538527][ T28] audit: type=1400 audit(1745004003.863:371): avc: denied { prog_load } for pid=3067 comm="syz.0.633" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 229.591396][ T3079] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 229.616733][ T3086] incfs: Backing dir is not set, filesystem can't be mounted. [ 229.624169][ T3086] incfs: mount failed -2 [ 229.660014][ T3079] EXT4-fs error (device loop4): ext4_validate_block_bitmap:429: comm syz.4.636: bg 0: block 260: invalid block bitmap [ 229.701214][ T3079] EXT4-fs error (device loop4): ext4_free_inode:355: comm syz.4.636: bit already cleared for inode 15 [ 229.710881][ T28] audit: type=1400 audit(1745004003.933:372): avc: denied { read write } for pid=296 comm="syz-executor" name="loop4" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 229.762315][ T28] audit: type=1400 audit(1745004003.933:373): avc: denied { open } for pid=296 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 229.763158][ T296] EXT4-fs (loop4): unmounting filesystem. [ 229.802211][ T3091] loop5: detected capacity change from 0 to 512 [ 229.816921][ T3091] EXT4-fs error (device loop5): ext4_xattr_inode_iget:404: comm syz.5.634: inode #1: comm syz.5.634: iget: illegal inode # [ 229.840191][ T28] audit: type=1400 audit(1745004003.933:374): avc: denied { ioctl } for pid=296 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=118 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 229.873296][ T28] audit: type=1400 audit(1745004003.943:375): avc: denied { map_create } for pid=3078 comm="syz.4.636" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 229.892219][ T3091] EXT4-fs error (device loop5): ext4_xattr_inode_iget:409: comm syz.5.634: error while reading EA inode 1 err=-117 [ 229.904312][ T1441] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 229.912010][ T28] audit: type=1400 audit(1745004003.953:376): avc: denied { append } for pid=84 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=8 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 229.912185][ T3091] EXT4-fs (loop5): 1 orphan inode deleted [ 229.912982][ T3094] netlink: 96 bytes leftover after parsing attributes in process `syz.4.639'. [ 229.949512][ T3091] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 229.958016][ T28] audit: type=1400 audit(1745004003.953:377): avc: denied { perfmon } for pid=3078 comm="syz.4.636" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 229.991573][ T28] audit: type=1400 audit(1745004003.953:378): avc: denied { prog_run } for pid=3078 comm="syz.4.636" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 230.110819][ T3091] 9pnet_fd: Insufficient options for proto=fd [ 230.154528][ T3091] EXT4-fs (loop5): unmounting filesystem. [ 230.155026][ T1441] usb 4-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 230.178418][ T1441] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 230.196742][ T1441] usb 4-1: config 0 descriptor?? [ 230.288295][ T3107] netlink: 104 bytes leftover after parsing attributes in process `syz.4.641'. [ 230.403095][ T3113] netlink: 3 bytes leftover after parsing attributes in process `syz.4.644'. [ 230.609410][ T3111] loop0: detected capacity change from 0 to 40427 [ 230.621839][ T3111] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 230.630077][ T3111] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 230.641191][ T3111] F2FS-fs (loop0): invalid crc value [ 230.648051][ T3111] F2FS-fs (loop0): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 39874397669) [ 230.660405][ T3111] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 230.686459][ T3111] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 230.693522][ T3111] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 231.134940][ T3127] syz.0.643: attempt to access beyond end of device [ 231.134940][ T3127] loop0: rw=2049, sector=77824, nr_sectors = 136 limit=40427 [ 232.032775][ T3141] loop1: detected capacity change from 0 to 128 [ 232.041180][ T1441] usb 4-1: Cannot read MAC address [ 232.052220][ T1441] MOSCHIP usb-ethernet driver: probe of 4-1:0.0 failed with error -32 [ 232.061299][ T1441] usb 4-1: USB disconnect, device number 3 [ 232.105768][ T3141] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 232.141983][ T3141] ext4 filesystem being mounted at /135/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 232.509024][ T3141] binder_alloc: 3138: binder_alloc_buf size 4120 failed, no address space [ 232.517409][ T3141] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 4096 (num: 1 largest: 4096) [ 232.728428][ T290] EXT4-fs (loop1): unmounting filesystem. [ 232.755409][ T3134] loop5: detected capacity change from 0 to 40427 [ 232.761863][ T3152] incfs: Backing dir is not set, filesystem can't be mounted. [ 232.769190][ T3152] incfs: mount failed -2 [ 232.837024][ T3134] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 232.845545][ T3134] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 232.971532][ T3134] F2FS-fs (loop5): Found nat_bits in checkpoint [ 232.979861][ T3156] netlink: 96 bytes leftover after parsing attributes in process `syz.3.655'. [ 233.072903][ T3167] netlink: 'syz.1.657': attribute type 27 has an invalid length. [ 233.171256][ T3167] device lo left promiscuous mode [ 233.268182][ T3167] bridge0: port 4(gretap0) entered disabled state [ 233.283545][ T3134] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 233.303381][ T3134] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 233.353884][ T3167] bridge0: port 3(vlan2) entered disabled state [ 233.360069][ T3167] bridge0: port 2(bridge_slave_1) entered disabled state [ 233.367019][ T3167] bridge0: port 1(bridge_slave_0) entered disabled state [ 233.391656][ T3167] device veth0_to_batadv left promiscuous mode [ 233.435290][ T3171] bridge0: port 4(gretap0) entered blocking state [ 233.441616][ T3171] bridge0: port 4(gretap0) entered forwarding state [ 233.451448][ T3171] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 233.509812][ T3171] bridge0: port 1(bridge_slave_0) entered blocking state [ 233.516746][ T3171] bridge0: port 1(bridge_slave_0) entered forwarding state [ 233.525548][ T3171] bridge0: port 2(bridge_slave_1) entered blocking state [ 233.532465][ T3171] bridge0: port 2(bridge_slave_1) entered forwarding state [ 233.543935][ T3171] device veth0_to_batadv entered promiscuous mode [ 233.556525][ T3171] bridge0: port 3(vlan2) entered blocking state [ 233.562683][ T3171] bridge0: port 3(vlan2) entered forwarding state [ 233.575684][ T3171] device veth0_vlan left promiscuous mode [ 233.581801][ T3171] device veth0_vlan entered promiscuous mode [ 233.589049][ T3171] device veth1_macvtap left promiscuous mode [ 233.596305][ T3171] device veth1_macvtap entered promiscuous mode [ 233.603766][ T922] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 233.611631][ T922] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 233.620876][ T922] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 233.703642][ T922] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 233.765384][ T922] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 233.800794][ T922] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 233.813845][ T922] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 233.864411][ T922] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 233.915003][ T922] IPv6: ADDRCONF(NETDEV_CHANGE): vlan2: link becomes ready [ 233.955144][ T922] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 234.001766][ T922] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 234.046441][ T922] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 234.094636][ T922] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 234.138868][ T922] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 234.243571][ T922] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 234.501242][ T3180] netlink: 'syz.4.659': attribute type 27 has an invalid length. [ 234.522551][ T3180] bridge0: port 2(bridge_slave_1) entered disabled state [ 234.529564][ T3180] bridge0: port 1(bridge_slave_0) entered disabled state [ 234.764269][ T3192] loop0: detected capacity change from 0 to 512 [ 234.773757][ T3192] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 234.882048][ T3192] EXT4-fs (loop0): orphan cleanup on readonly fs [ 234.891690][ T3192] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.671: bg 0: block 248: padding at end of block bitmap is not set [ 234.907016][ T3192] __quota_error: 46 callbacks suppressed [ 234.907044][ T3192] Quota error (device loop0): write_blk: dquota write failed [ 234.919900][ T3192] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 234.929736][ T3192] EXT4-fs error (device loop0): ext4_acquire_dquot:6782: comm syz.0.671: Failed to acquire dquot type 1 [ 234.944037][ T3192] EXT4-fs (loop0): 1 truncate cleaned up [ 234.950603][ T3192] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 235.546322][ T3202] loop1: detected capacity change from 0 to 512 [ 239.216919][ T292] EXT4-fs (loop0): unmounting filesystem. [ 239.266764][ T3184] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 239.315059][ T3184] bridge0: port 1(bridge_slave_0) entered blocking state [ 239.321967][ T3184] bridge0: port 1(bridge_slave_0) entered forwarding state [ 239.330889][ T3184] bridge0: port 2(bridge_slave_1) entered blocking state [ 239.337745][ T3184] bridge0: port 2(bridge_slave_1) entered forwarding state [ 239.355693][ T3209] loop3: detected capacity change from 0 to 512 [ 239.371533][ T3202] EXT4-fs (loop1): 1 orphan inode deleted [ 239.377132][ T3202] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 239.386252][ T3202] ext4 filesystem being mounted at /139/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 239.388960][ T3209] EXT4-fs error (device loop3): ext4_xattr_inode_iget:404: comm syz.3.664: inode #1: comm syz.3.664: iget: illegal inode # [ 239.402957][ T3184] device veth0_vlan left promiscuous mode [ 239.415269][ T3184] device veth0_vlan entered promiscuous mode [ 239.427313][ T922] Quota error (device loop1): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 239.430888][ T3209] EXT4-fs error (device loop3): ext4_xattr_inode_iget:409: comm syz.3.664: error while reading EA inode 1 err=-117 [ 239.437463][ T28] audit: type=1400 audit(1745004013.983:425): avc: denied { connect } for pid=3198 comm="syz.1.662" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 239.451806][ T3184] device veth1_macvtap left promiscuous mode [ 239.471722][ T922] EXT4-fs error (device loop1): ext4_release_dquot:6805: comm kworker/u4:8: Failed to release dquot type 1 [ 239.478485][ T3209] EXT4-fs (loop3): 1 orphan inode deleted [ 239.493280][ T3184] device veth1_macvtap entered promiscuous mode [ 239.504377][ T3209] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 239.518628][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 239.528480][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 239.550037][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 239.661309][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 239.678213][ T3209] 9pnet_fd: Insufficient options for proto=fd [ 239.727062][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 239.735941][ T3209] EXT4-fs (loop3): unmounting filesystem. [ 239.779992][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 239.781821][ T290] EXT4-fs (loop1): unmounting filesystem. [ 239.794835][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 239.881259][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 239.970294][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 240.215140][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 240.317740][ T3225] xt_bpf: check failed: parse error [ 240.341201][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 240.538782][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 240.555973][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 240.582847][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 240.608241][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 240.808192][ T3220] netlink: 96 bytes leftover after parsing attributes in process `syz.3.666'. [ 240.920878][ T3230] netlink: 104 bytes leftover after parsing attributes in process `syz.4.668'. [ 240.931753][ T3225] loop1: detected capacity change from 0 to 40427 [ 241.020914][ T3225] F2FS-fs (loop1): invalid crc value [ 241.048631][ T3225] F2FS-fs (loop1): Found nat_bits in checkpoint [ 241.064467][ T3234] loop0: detected capacity change from 0 to 512 [ 241.070756][ T3235] incfs: Backing dir is not set, filesystem can't be mounted. [ 241.078076][ T3235] incfs: mount failed -2 [ 241.081080][ T3234] ext4: Unknown parameter 'smackfsroot' [ 241.217081][ T3225] F2FS-fs (loop1): Start checkpoint disabled! [ 241.225461][ T3225] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 241.239606][ T28] audit: type=1400 audit(1745004015.783:426): avc: denied { write } for pid=3224 comm="syz.1.667" path="/140/bus/file0" dev="loop1" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 241.267546][ T3225] F2FS-fs (loop1): ino:10, start:0, end:8192, need to trigger GC to reclaim enough free segment when checkpoint is enabled [ 241.309766][ T28] audit: type=1400 audit(1745004015.783:427): avc: denied { ioctl } for pid=3224 comm="syz.1.667" path="/140/bus/file0" dev="loop1" ino=10 ioctlcmd=0xf50d scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 241.481324][ T314] kworker/u4:3: attempt to access beyond end of device [ 241.481324][ T314] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 242.333189][ T3247] loop5: detected capacity change from 0 to 40427 [ 242.350812][ T3247] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 242.358384][ T3247] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 242.371691][ T3247] F2FS-fs (loop5): invalid crc value [ 242.390036][ T3252] netlink: 3 bytes leftover after parsing attributes in process `syz.4.677'. [ 242.412278][ T3247] F2FS-fs (loop5): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 39874397669) [ 242.423002][ T28] audit: type=1400 audit(1745004016.963:428): avc: denied { read } for pid=3256 comm="syz.1.674" name="ppp" dev="devtmpfs" ino=153 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 242.430312][ T3257] loop1: detected capacity change from 0 to 128 [ 242.450483][ T3249] loop3: detected capacity change from 0 to 40427 [ 242.456213][ T28] audit: type=1400 audit(1745004016.963:429): avc: denied { open } for pid=3256 comm="syz.1.674" path="/dev/ppp" dev="devtmpfs" ino=153 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 242.470618][ T3247] F2FS-fs (loop5): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 242.480980][ T28] audit: type=1400 audit(1745004016.963:430): avc: denied { ioctl } for pid=3256 comm="syz.1.674" path="/dev/ppp" dev="devtmpfs" ino=153 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 242.514983][ T28] audit: type=1400 audit(1745004016.973:431): avc: denied { write } for pid=3256 comm="syz.1.674" name="ppp" dev="devtmpfs" ino=153 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 242.537775][ T28] audit: type=1400 audit(1745004016.973:432): avc: denied { read write } for pid=3256 comm="syz.1.674" name="rtc0" dev="devtmpfs" ino=259 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 242.539847][ T3249] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 242.574687][ T3257] syz.1.674: attempt to access beyond end of device [ 242.574687][ T3257] loop1: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 242.588408][ T28] audit: type=1400 audit(1745004016.973:433): avc: denied { open } for pid=3256 comm="syz.1.674" path="/dev/rtc0" dev="devtmpfs" ino=259 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 242.589196][ T3249] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 242.612722][ T28] audit: type=1400 audit(1745004016.973:434): avc: denied { ioctl } for pid=3256 comm="syz.1.674" path="/dev/rtc0" dev="devtmpfs" ino=259 ioctlcmd=0x700a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 242.622501][ T3249] F2FS-fs (loop3): invalid crc value [ 242.650092][ T3247] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 242.656852][ T28] audit: type=1400 audit(1745004017.003:435): avc: denied { mount } for pid=3256 comm="syz.1.674" name="/" dev="loop1" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 242.657623][ T3257] syz.1.674: attempt to access beyond end of device [ 242.657623][ T3257] loop1: rw=524288, sector=145, nr_sectors = 224 limit=128 [ 242.679182][ T3247] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 242.692887][ T3257] syz.1.674: attempt to access beyond end of device [ 242.692887][ T3257] loop1: rw=0, sector=145, nr_sectors = 8 limit=128 [ 242.716788][ T3257] syz.1.674: attempt to access beyond end of device [ 242.716788][ T3257] loop1: rw=0, sector=145, nr_sectors = 8 limit=128 [ 242.730225][ T3257] syz.1.674: attempt to access beyond end of device [ 242.730225][ T3257] loop1: rw=0, sector=145, nr_sectors = 8 limit=128 [ 242.736671][ T3249] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 39874397669) [ 242.743621][ T3257] syz.1.674: attempt to access beyond end of device [ 242.743621][ T3257] loop1: rw=0, sector=145, nr_sectors = 8 limit=128 [ 242.758304][ T3249] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 242.766950][ T3257] syz.1.674: attempt to access beyond end of device [ 242.766950][ T3257] loop1: rw=0, sector=145, nr_sectors = 8 limit=128 [ 242.788826][ T3257] syz.1.674: attempt to access beyond end of device [ 242.788826][ T3257] loop1: rw=0, sector=145, nr_sectors = 8 limit=128 [ 242.799214][ T3249] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 242.802410][ T3257] syz.1.674: attempt to access beyond end of device [ 242.802410][ T3257] loop1: rw=0, sector=145, nr_sectors = 8 limit=128 [ 242.809173][ T3249] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 243.205140][ T3270] loop4: detected capacity change from 0 to 512 [ 243.281467][ T3270] EXT4-fs error (device loop4): ext4_xattr_inode_iget:404: comm syz.4.680: inode #1: comm syz.4.680: iget: illegal inode # [ 243.298873][ T3270] EXT4-fs error (device loop4): ext4_xattr_inode_iget:409: comm syz.4.680: error while reading EA inode 1 err=-117 [ 243.321253][ T3270] EXT4-fs (loop4): 1 orphan inode deleted [ 243.326999][ T3270] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 243.441201][ T3270] 9pnet_fd: Insufficient options for proto=fd [ 244.838957][ T3276] loop5: detected capacity change from 0 to 512 [ 244.864383][ T3270] EXT4-fs (loop4): unmounting filesystem. [ 244.929095][ T3276] EXT4-fs (loop5): 1 orphan inode deleted [ 244.935306][ T3276] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 244.944680][ T3276] ext4 filesystem being mounted at /69/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 244.972225][ T3288] netlink: 104 bytes leftover after parsing attributes in process `syz.0.682'. [ 245.255571][ T3292] loop1: detected capacity change from 0 to 512 [ 245.399990][ T3292] EXT4-fs (loop1): 1 orphan inode deleted [ 245.405668][ T3292] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 245.416724][ T3292] ext4 filesystem being mounted at /143/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 246.053493][ T363] EXT4-fs error (device loop5): ext4_release_dquot:6805: comm kworker/u4:5: Failed to release dquot type 1 [ 246.088614][ T363] EXT4-fs error (device loop1): ext4_release_dquot:6805: comm kworker/u4:5: Failed to release dquot type 1 [ 246.191073][ T3302] netlink: 'syz.4.685': attribute type 27 has an invalid length. [ 246.320831][ T290] EXT4-fs (loop1): unmounting filesystem. [ 246.326669][ T1720] EXT4-fs (loop5): unmounting filesystem. [ 246.338746][ T3305] incfs: Backing dir is not set, filesystem can't be mounted. [ 246.346273][ T3305] incfs: mount failed -2 [ 246.386380][ T3302] bridge0: port 2(bridge_slave_1) entered disabled state [ 246.393517][ T3302] bridge0: port 1(bridge_slave_0) entered disabled state [ 246.550591][ T3313] loop1: detected capacity change from 0 to 512 [ 254.530770][ T3313] EXT4-fs warning (device loop1): ext4_multi_mount_protect:404: Unable to create kmmpd thread for loop1. [ 254.574660][ T3306] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 254.629499][ T3306] bridge0: port 1(bridge_slave_0) entered blocking state [ 254.636420][ T3306] bridge0: port 1(bridge_slave_0) entered forwarding state [ 254.688769][ T3306] bridge0: port 2(bridge_slave_1) entered blocking state [ 254.695695][ T3306] bridge0: port 2(bridge_slave_1) entered forwarding state [ 254.777039][ T3306] device veth0_vlan left promiscuous mode [ 254.783300][ T3306] device veth0_vlan entered promiscuous mode [ 254.791083][ T3306] device veth1_macvtap left promiscuous mode [ 254.798062][ T3306] device veth1_macvtap entered promiscuous mode [ 254.805461][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 254.813872][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 254.821348][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 254.829711][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 254.839989][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 254.848436][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 254.856642][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 254.864861][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 254.873181][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 254.881539][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 254.889844][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 254.898160][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 254.906527][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 254.917817][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 254.926495][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 255.079552][ T3329] loop4: detected capacity change from 0 to 4096 [ 255.096457][ T3329] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 255.194055][ T3334] loop5: detected capacity change from 0 to 512 [ 255.287654][ T3321] loop0: detected capacity change from 0 to 40427 [ 255.302877][ T3334] EXT4-fs (loop5): 1 orphan inode deleted [ 255.308645][ T3334] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 255.318253][ T3334] ext4 filesystem being mounted at /71/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 255.333195][ T331] __quota_error: 3 callbacks suppressed [ 255.333212][ T331] Quota error (device loop5): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 255.377457][ T3321] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 255.392498][ T331] EXT4-fs error (device loop5): ext4_release_dquot:6805: comm kworker/u4:4: Failed to release dquot type 1 [ 255.404934][ T3321] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 255.425615][ T3321] F2FS-fs (loop0): invalid crc value [ 255.446991][ T3321] F2FS-fs (loop0): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 39874397669) [ 255.468079][ T3321] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 255.534487][ T3321] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 255.545938][ T3321] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 255.742196][ T3342] bio_check_eod: 16717 callbacks suppressed [ 255.742221][ T3342] syz.0.689: attempt to access beyond end of device [ 255.742221][ T3342] loop0: rw=2049, sector=77824, nr_sectors = 136 limit=40427 [ 255.765790][ T1720] EXT4-fs (loop5): unmounting filesystem. [ 255.793108][ T3344] netlink: 'syz.1.693': attribute type 27 has an invalid length. [ 255.804932][ T3344] bridge0: port 4(gretap0) entered disabled state [ 255.849028][ T296] EXT4-fs (loop4): unmounting filesystem. [ 255.913824][ T3344] bridge0: port 3(vlan2) entered disabled state [ 255.919972][ T3344] bridge0: port 2(bridge_slave_1) entered disabled state [ 255.926945][ T3344] bridge0: port 1(bridge_slave_0) entered disabled state [ 256.387538][ T3358] loop5: detected capacity change from 0 to 512 [ 256.603894][ T3358] EXT4-fs (loop5): 1 orphan inode deleted [ 256.609530][ T3358] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 256.622256][ T3358] ext4 filesystem being mounted at /74/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 257.040945][ T2398] Quota error (device loop5): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 257.072477][ T2398] EXT4-fs error (device loop5): ext4_release_dquot:6805: comm kworker/u4:11: Failed to release dquot type 1 [ 257.103270][ T3344] device veth0_to_batadv left promiscuous mode [ 257.136823][ T3363] loop3: detected capacity change from 0 to 40427 [ 257.160369][ T3363] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 257.168178][ T3363] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 259.293328][ T3373] loop1: detected capacity change from 0 to 512 [ 259.597049][ T3373] EXT4-fs (loop1): 1 orphan inode deleted [ 259.602681][ T3373] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 259.613856][ T2398] Quota error (device loop1): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 259.626236][ T3373] ext4 filesystem being mounted at /147/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 259.648306][ T3370] netlink: 3 bytes leftover after parsing attributes in process `syz.0.698'. [ 259.648406][ T3363] F2FS-fs (loop3): invalid crc value [ 259.670465][ T2398] EXT4-fs error (device loop1): ext4_release_dquot:6805: comm kworker/u4:11: Failed to release dquot type 1 [ 259.762392][ T3363] F2FS-fs (loop3): Failed to start F2FS issue_checkpoint_thread (-4) [ 259.806700][ T3382] incfs: Backing dir is not set, filesystem can't be mounted. [ 259.814134][ T3382] incfs: mount failed -2 [ 259.821429][ T3385] loop0: detected capacity change from 0 to 512 [ 259.857099][ T3385] EXT4-fs error (device loop0): ext4_xattr_inode_iget:404: comm syz.0.703: inode #1: comm syz.0.703: iget: illegal inode # [ 259.882341][ T3385] EXT4-fs error (device loop0): ext4_xattr_inode_iget:409: comm syz.0.703: error while reading EA inode 1 err=-117 [ 259.907146][ T3385] EXT4-fs (loop0): 1 orphan inode deleted [ 259.918966][ T3385] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 260.032965][ T3385] 9pnet_fd: Insufficient options for proto=fd [ 260.077976][ T3385] EXT4-fs (loop0): unmounting filesystem. [ 260.111633][ T3390] netlink: 'syz.3.704': attribute type 27 has an invalid length. [ 260.139428][ T290] EXT4-fs (loop1): unmounting filesystem. [ 260.195902][ T3390] bridge0: port 2(bridge_slave_1) entered disabled state [ 260.202940][ T3390] bridge0: port 1(bridge_slave_0) entered disabled state [ 260.282764][ T3392] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 260.292144][ T28] audit: type=1400 audit(1745004034.843:437): avc: denied { ioctl } for pid=3394 comm="syz.1.706" path="socket:[23858]" dev="sockfs" ino=23858 ioctlcmd=0x73 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 260.332603][ T3392] bridge0: port 1(bridge_slave_0) entered blocking state [ 260.339652][ T3392] bridge0: port 1(bridge_slave_0) entered forwarding state [ 260.347236][ T28] audit: type=1400 audit(1745004034.873:438): avc: denied { read } for pid=3394 comm="syz.1.706" dev="nsfs" ino=4026532290 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 260.378428][ T3392] bridge0: port 2(bridge_slave_1) entered blocking state [ 260.385344][ T3392] bridge0: port 2(bridge_slave_1) entered forwarding state [ 260.392838][ T28] audit: type=1400 audit(1745004034.873:439): avc: denied { open } for pid=3394 comm="syz.1.706" path="net:[4026532290]" dev="nsfs" ino=4026532290 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 260.429657][ T3392] device veth0_vlan left promiscuous mode [ 260.435926][ T3392] device veth0_vlan entered promiscuous mode [ 260.442061][ T28] audit: type=1400 audit(1745004034.873:440): avc: denied { create } for pid=3394 comm="syz.1.706" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 260.482791][ T3392] device veth1_macvtap left promiscuous mode [ 260.501227][ T3392] device veth1_macvtap entered promiscuous mode [ 260.508223][ T2398] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 260.518388][ T2398] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 260.533059][ T2398] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 260.576125][ T2398] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 260.602047][ T2398] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 260.629063][ T2398] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 260.667537][ T2398] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 260.693052][ T3404] loop4: detected capacity change from 0 to 4096 [ 260.711002][ T2398] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 260.719626][ T2398] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 260.728010][ T3404] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 260.738250][ T2398] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 260.771861][ T2398] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 260.780072][ T2398] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 260.788322][ T2398] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 260.796985][ T2398] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 260.805343][ T2398] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 260.814110][ T3391] netlink: 96 bytes leftover after parsing attributes in process `syz.0.705'. [ 260.863597][ T28] audit: type=1400 audit(1745004035.413:441): avc: denied { create } for pid=3408 comm="syz.3.709" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 261.006467][ T3414] loop3: detected capacity change from 0 to 512 [ 261.112287][ T3414] EXT4-fs (loop3): 1 truncate cleaned up [ 261.117833][ T3414] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 261.225024][ T28] audit: type=1400 audit(1745004035.723:442): avc: denied { map } for pid=3408 comm="syz.3.709" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=25063 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 262.063982][ T28] audit: type=1400 audit(1745004035.723:443): avc: denied { read write } for pid=3408 comm="syz.3.709" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=25063 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 262.088647][ T28] audit: type=1400 audit(1745004035.903:444): avc: denied { create } for pid=3411 comm="syz.1.710" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 262.118224][ T296] EXT4-fs (loop4): unmounting filesystem. [ 262.471525][ T28] audit: type=1400 audit(1745004036.603:445): avc: denied { write } for pid=3411 comm="syz.1.710" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 262.535977][ T294] EXT4-fs (loop3): unmounting filesystem. [ 262.565654][ T1720] EXT4-fs (loop5): unmounting filesystem. [ 262.618667][ T3425] loop4: detected capacity change from 0 to 512 [ 262.750472][ T3425] EXT4-fs (loop4): 1 orphan inode deleted [ 262.756159][ T3425] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 262.767577][ T3425] ext4 filesystem being mounted at /138/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 263.068115][ T3419] netlink: 'syz.0.711': attribute type 27 has an invalid length. [ 263.077003][ T922] Quota error (device loop4): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 264.053025][ T922] EXT4-fs error (device loop4): ext4_release_dquot:6805: comm kworker/u4:8: Failed to release dquot type 1 [ 264.597334][ T296] EXT4-fs (loop4): unmounting filesystem. [ 264.637835][ T3419] bridge0: port 2(bridge_slave_1) entered disabled state [ 264.644887][ T3419] bridge0: port 1(bridge_slave_0) entered disabled state [ 264.709159][ T3444] netlink: 104 bytes leftover after parsing attributes in process `syz.4.715'. [ 264.727820][ T3431] netlink: 3 bytes leftover after parsing attributes in process `syz.3.713'. [ 264.850831][ T3449] loop0: detected capacity change from 0 to 512 [ 264.872259][ T3449] EXT4-fs error (device loop0): ext4_xattr_inode_iget:404: comm syz.0.717: inode #1: comm syz.0.717: iget: illegal inode # [ 264.907736][ T3450] incfs: Backing dir is not set, filesystem can't be mounted. [ 264.915192][ T3450] incfs: mount failed -2 [ 264.933870][ T3449] EXT4-fs error (device loop0): ext4_xattr_inode_iget:409: comm syz.0.717: error while reading EA inode 1 err=-117 [ 264.951428][ T3456] netlink: 104 bytes leftover after parsing attributes in process `syz.5.719'. [ 264.971130][ T3449] EXT4-fs (loop0): 1 orphan inode deleted [ 264.976876][ T3449] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 265.066856][ T3449] 9pnet_fd: Insufficient options for proto=fd [ 265.133155][ T3449] EXT4-fs (loop0): unmounting filesystem. [ 265.156560][ T3464] netlink: 4 bytes leftover after parsing attributes in process `syz.5.723'. [ 265.167916][ T3464] bridge0: port 2(bridge_slave_1) entered disabled state [ 265.178328][ T3464] device bridge_slave_1 left promiscuous mode [ 265.184353][ T3464] bridge0: port 2(bridge_slave_1) entered disabled state [ 265.219947][ T3460] loop1: detected capacity change from 0 to 512 [ 265.294800][ T3469] loop4: detected capacity change from 0 to 512 [ 267.081969][ T3460] ext4: Unknown parameter 'smackfsroot' [ 267.519709][ T3471] loop0: detected capacity change from 0 to 512 [ 268.105187][ T3469] EXT4-fs: failed to create workqueue [ 268.110616][ T3469] EXT4-fs (loop4): mount failed [ 270.941653][ T3471] EXT4-fs warning (device loop0): ext4_multi_mount_protect:404: Unable to create kmmpd thread for loop0. [ 271.129085][ T3490] netlink: 3 bytes leftover after parsing attributes in process `syz.5.729'. [ 271.147594][ T3491] netlink: 'syz.4.727': attribute type 27 has an invalid length. [ 271.196668][ T3491] bridge0: port 2(bridge_slave_1) entered disabled state [ 271.203801][ T3491] bridge0: port 1(bridge_slave_0) entered disabled state [ 271.371714][ T3486] loop3: detected capacity change from 0 to 40427 [ 271.381070][ T3486] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 271.391994][ T3486] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 271.422985][ T386] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 271.431867][ T3486] F2FS-fs (loop3): invalid crc value [ 271.438517][ T3486] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 39874397669) [ 271.450835][ T3486] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 271.475817][ T3486] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 271.483062][ T3486] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 271.554256][ T3507] loop4: detected capacity change from 0 to 512 [ 271.630724][ T386] usb 2-1: Using ep0 maxpacket: 16 [ 271.692600][ T386] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 238, changing to 11 [ 271.771746][ T3507] EXT4-fs (loop4): 1 truncate cleaned up [ 271.777423][ T3507] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 271.843752][ T386] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 271.873908][ T386] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 271.885051][ T386] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 271.937213][ T386] usb 2-1: config 0 descriptor?? [ 272.354904][ T3488] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 272.404624][ T3488] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 272.476898][ T386] usbhid 2-1:0.0: can't add hid device: -71 [ 272.483054][ T386] usbhid: probe of 2-1:0.0 failed with error -71 [ 272.565044][ T386] usb 2-1: USB disconnect, device number 7 [ 272.574501][ T3511] syz.3.726: attempt to access beyond end of device [ 272.574501][ T3511] loop3: rw=2049, sector=77824, nr_sectors = 136 limit=40427 [ 272.593150][ T3515] netlink: 104 bytes leftover after parsing attributes in process `syz.5.733'. [ 272.973667][ T296] EXT4-fs (loop4): unmounting filesystem. [ 274.055981][ T3526] loop5: detected capacity change from 0 to 512 [ 276.234026][ T3528] loop4: detected capacity change from 0 to 512 [ 276.446014][ T3528] EXT4-fs (loop4): 1 orphan inode deleted [ 276.451733][ T3528] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 276.462652][ T3526] EXT4-fs (loop5): 1 orphan inode deleted [ 276.468257][ T3526] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 276.478996][ T3526] ext4 filesystem being mounted at /80/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 276.561859][ T3528] ext4 filesystem being mounted at /144/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 278.151509][ T43] Quota error (device loop4): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 278.312075][ T43] EXT4-fs error (device loop4): ext4_release_dquot:6805: comm kworker/u4:2: Failed to release dquot type 1 [ 280.965016][ T3543] loop0: detected capacity change from 0 to 512 [ 280.986150][ T43] Quota error (device loop5): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 281.022855][ T43] EXT4-fs error (device loop5): ext4_release_dquot:6805: comm kworker/u4:2: Failed to release dquot type 1 [ 281.042697][ T3548] netlink: 3 bytes leftover after parsing attributes in process `syz.1.743'. [ 281.053612][ T3543] EXT4-fs (loop0): 1 orphan inode deleted [ 281.059175][ T3543] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 281.069178][ T3543] ext4 filesystem being mounted at /142/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 281.098645][ T43] Quota error (device loop0): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 281.109948][ T3548] 0ªX¹¦À: renamed from wg1 [ 281.120837][ T43] EXT4-fs error (device loop0): ext4_release_dquot:6805: comm kworker/u4:2: Failed to release dquot type 1 [ 281.390938][ T3548] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 281.408201][ T1720] EXT4-fs (loop5): unmounting filesystem. [ 281.917261][ T3555] loop3: detected capacity change from 0 to 40427 [ 281.956834][ T3555] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 281.964458][ T3555] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 282.003301][ T3555] F2FS-fs (loop3): invalid crc value [ 282.019896][ T292] EXT4-fs (loop0): unmounting filesystem. [ 282.025995][ T296] EXT4-fs (loop4): unmounting filesystem. [ 282.079002][ T3555] F2FS-fs (loop3): SIT is corrupted node# 5 vs 7 [ 282.089094][ T3555] F2FS-fs (loop3): Failed to initialize F2FS segment manager (-117) [ 283.008654][ T3565] netlink: 'syz.0.744': attribute type 27 has an invalid length. [ 283.033843][ T3561] netlink: 'syz.5.741': attribute type 27 has an invalid length. [ 283.046872][ T3568] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 283.098344][ T3568] loop1: detected capacity change from 0 to 1024 [ 283.110187][ T3568] EXT4-fs: Ignoring removed orlov option [ 283.121520][ T3568] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 283.130333][ T3561] bridge0: port 1(bridge_slave_0) entered disabled state [ 283.143062][ T28] audit: type=1400 audit(1745004057.693:446): avc: denied { unlink } for pid=3567 comm="syz.1.745" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop1" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 283.191085][ T3570] loop4: detected capacity change from 0 to 512 [ 283.195480][ T3568] EXT4-fs (loop1): shut down requested (2) [ 283.197209][ T3575] netlink: 104 bytes leftover after parsing attributes in process `syz.3.747'. [ 283.204484][ T3570] ext4: Unknown parameter 'smackfsroot' [ 283.232636][ T3570] SELinux: policydb version 308803608 does not match my version range 15-33 [ 283.240625][ T28] audit: type=1400 audit(1745004057.783:447): avc: denied { load_policy } for pid=3569 comm="syz.4.746" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 283.241445][ T3570] SELinux: failed to load policy [ 283.305741][ T3565] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 283.330128][ T3565] device veth0_vlan left promiscuous mode [ 283.345716][ T3565] device veth0_vlan entered promiscuous mode [ 283.358187][ T3565] device veth1_macvtap left promiscuous mode [ 283.359572][ T290] EXT4-fs (loop1): unmounting filesystem. [ 283.365285][ T3565] device veth1_macvtap entered promiscuous mode [ 283.376974][ T922] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 283.384664][ T922] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 283.401239][ T922] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 283.436289][ T922] bridge0: port 1(bridge_slave_0) entered blocking state [ 283.443198][ T922] bridge0: port 1(bridge_slave_0) entered forwarding state [ 283.512989][ T922] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 283.549614][ T3588] loop3: detected capacity change from 0 to 512 [ 283.558671][ T386] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 283.614567][ T3586] loop1: detected capacity change from 0 to 512 [ 283.684466][ T3588] EXT4-fs (loop3): 1 truncate cleaned up [ 283.690014][ T3588] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 283.736994][ T922] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 283.830637][ T386] usb 5-1: Using ep0 maxpacket: 16 [ 283.842572][ T386] usb 5-1: config 0 has an invalid interface number: 105 but max is 0 [ 283.859747][ T3586] EXT4-fs error (device loop1): ext4_xattr_inode_iget:404: comm syz.1.750: inode #1: comm syz.1.750: iget: illegal inode # [ 283.875150][ T922] bridge0: port 2(bridge_slave_1) entered blocking state [ 283.882047][ T922] bridge0: port 2(bridge_slave_1) entered forwarding state [ 283.959962][ T386] usb 5-1: config 0 has an invalid descriptor of length 91, skipping remainder of the config [ 283.996342][ T3586] EXT4-fs error (device loop1): ext4_xattr_inode_iget:409: comm syz.1.750: error while reading EA inode 1 err=-117 [ 284.017178][ T922] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 284.033260][ T386] usb 5-1: config 0 has no interface number 0 [ 284.173979][ T922] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 284.183378][ T386] usb 5-1: New USB device found, idVendor=046c, idProduct=14e8, bcdDevice= b.28 [ 284.195128][ T3586] EXT4-fs (loop1): 1 orphan inode deleted [ 284.274343][ T3586] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 284.283235][ T922] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 284.291280][ T386] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 284.299093][ T386] usb 5-1: Product: syz [ 284.303788][ T922] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 284.405158][ T3586] 9pnet_fd: Insufficient options for proto=fd [ 284.701920][ T3597] loop0: detected capacity change from 0 to 512 [ 284.736529][ T3586] EXT4-fs (loop1): unmounting filesystem. [ 284.750097][ T294] EXT4-fs (loop3): unmounting filesystem. [ 284.787191][ T386] usb 5-1: Manufacturer: syz [ 284.802514][ T922] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 284.820759][ T3597] EXT4-fs (loop0): 1 orphan inode deleted [ 284.826482][ T3597] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 284.838585][ T3597] ext4 filesystem being mounted at /144/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 284.901895][ T386] usb 5-1: SerialNumber: syz [ 284.934273][ T386] usb 5-1: config 0 descriptor?? [ 284.942402][ T922] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 284.999952][ T922] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 285.010371][ T922] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 285.020703][ T922] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 285.133731][ T922] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 285.142253][ T922] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 285.151078][ T922] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 285.160959][ T922] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 285.169121][ T922] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 285.177420][ T922] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 285.186759][ T922] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 285.194926][ T922] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 285.203030][ T922] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 285.212738][ T3576] loop4: detected capacity change from 0 to 128 [ 285.226054][ T922] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 285.236074][ T3576] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 285.244832][ T922] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 285.253162][ T3576] ext4 filesystem being mounted at /146/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 285.263982][ T922] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 285.279045][ T922] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 285.286680][ T922] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 285.294284][ T922] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 285.302611][ T922] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 285.310820][ T922] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 285.318457][ T922] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 285.464582][ T3584] netlink: 'syz.5.749': attribute type 27 has an invalid length. [ 285.470915][ T8] Quota error (device loop0): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 285.481788][ T8] EXT4-fs error (device loop0): ext4_release_dquot:6805: comm kworker/u4:0: Failed to release dquot type 1 [ 285.498197][ T292] EXT4-fs (loop0): unmounting filesystem. [ 285.536521][ T28] audit: type=1400 audit(1745004060.083:448): avc: denied { read write } for pid=3607 comm="syz.0.753" name="kvm" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 285.537992][ T28] audit: type=1400 audit(1745004060.083:449): avc: denied { ioctl open } for pid=3607 comm="syz.0.753" path="/dev/kvm" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 285.573014][ T3587] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 285.589803][ T28] audit: type=1400 audit(1745004060.143:450): avc: denied { mount } for pid=3603 comm="syz.3.752" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 285.629412][ T3610] loop0: detected capacity change from 0 to 256 [ 285.632488][ T3587] device veth0_vlan left promiscuous mode [ 285.651975][ T3587] device veth0_vlan entered promiscuous mode [ 285.657843][ T28] audit: type=1400 audit(1745004060.173:451): avc: denied { create } for pid=3607 comm="syz.0.753" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 285.659156][ T3587] device veth1_macvtap left promiscuous mode [ 285.683515][ T3610] FAT-fs (loop0): Unrecognized mount option "uni_xlHte=0" or missing value [ 285.693889][ T3587] device veth1_macvtap entered promiscuous mode [ 285.703499][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 285.713784][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 285.725275][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 285.742565][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 285.749426][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 285.767097][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 285.767776][ T28] audit: type=1400 audit(1745004060.313:452): avc: denied { ioctl } for pid=3613 comm="syz.5.755" path="socket:[24129]" dev="sockfs" ino=24129 ioctlcmd=0x48c8 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 285.791336][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 285.828475][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 285.843767][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 285.851971][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 285.860119][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 285.868392][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 285.876616][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 285.885074][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 285.893217][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 285.905079][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 285.913428][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 285.921881][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 285.930207][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 285.938376][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 285.946454][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 285.954760][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 285.962885][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 285.971421][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 285.971767][ T3605] loop1: detected capacity change from 0 to 40427 [ 285.979774][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 285.994579][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 286.002581][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 286.010130][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 286.018007][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 286.019251][ T3605] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 286.027053][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 286.034057][ T3605] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 286.043037][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 286.050887][ T3605] F2FS-fs (loop1): invalid crc value [ 286.057787][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 286.071612][ T3605] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 39874397669) [ 286.085568][ T3605] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 286.087347][ T3616] netlink: 96 bytes leftover after parsing attributes in process `syz.5.756'. [ 286.129595][ T3605] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 286.137307][ T3605] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 286.247762][ T3627] netlink: 'syz.3.758': attribute type 27 has an invalid length. [ 286.268243][ T3627] bridge0: port 2(bridge_slave_1) entered disabled state [ 286.275410][ T3627] bridge0: port 1(bridge_slave_0) entered disabled state [ 286.299376][ T3628] syz.1.754: attempt to access beyond end of device [ 286.299376][ T3628] loop1: rw=2049, sector=77824, nr_sectors = 136 limit=40427 [ 286.381596][ T3632] loop5: detected capacity change from 0 to 512 [ 286.389818][ T3629] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 286.432781][ T3632] EXT4-fs (loop5): 1 orphan inode deleted [ 286.448900][ T3629] device veth0_vlan left promiscuous mode [ 286.451167][ T8] Quota error (device loop5): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 286.456470][ T3632] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 286.480718][ T8] EXT4-fs error (device loop5): ext4_release_dquot:6805: comm kworker/u4:0: Failed to release dquot type 1 [ 286.485725][ T3629] device veth0_vlan entered promiscuous mode [ 286.499510][ T3629] device veth1_macvtap left promiscuous mode [ 286.506318][ T3629] device veth1_macvtap entered promiscuous mode [ 286.521696][ T3632] ext4 filesystem being mounted at /85/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 286.532073][ T922] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 286.566389][ T922] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 286.619446][ T922] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 286.627693][ T28] audit: type=1400 audit(1745004061.173:453): avc: denied { bind } for pid=3635 comm="syz.3.760" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 286.648748][ T922] bridge0: port 1(bridge_slave_0) entered blocking state [ 286.655656][ T922] bridge0: port 1(bridge_slave_0) entered forwarding state [ 286.663444][ T28] audit: type=1400 audit(1745004061.173:454): avc: denied { listen } for pid=3635 comm="syz.3.760" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 286.685327][ T922] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 286.693829][ T922] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 286.701965][ T922] bridge0: port 2(bridge_slave_1) entered blocking state [ 286.709096][ T922] bridge0: port 2(bridge_slave_1) entered forwarding state [ 286.755834][ T386] usb 5-1: USB disconnect, device number 5 [ 286.762720][ T296] EXT4-fs (loop4): unmounting filesystem. [ 286.774425][ T922] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 286.783081][ T922] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 286.791345][ T922] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 286.799527][ T922] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 286.813525][ T922] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 286.824362][ T922] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 286.833685][ T922] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 286.856862][ T922] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 286.884509][ T922] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 286.912300][ T922] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 286.929153][ T922] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 286.940628][ T3033] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 286.953736][ T922] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 286.970733][ T922] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 286.987727][ T922] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 287.004175][ T922] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 287.019863][ T922] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 287.034530][ T922] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 287.048116][ T922] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 287.061967][ T922] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 287.074655][ T922] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 287.087290][ T922] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 287.099935][ T922] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 287.108024][ T922] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 287.116131][ T922] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 287.124934][ T922] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 287.130605][ T3033] usb 4-1: Using ep0 maxpacket: 16 [ 287.133171][ T922] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 287.142114][ T3033] usb 4-1: New USB device found, idVendor=0403, idProduct=fa78, bcdDevice= 0.03 [ 287.155631][ T3639] netlink: 'syz.1.759': attribute type 27 has an invalid length. [ 287.184398][ T3033] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 287.195567][ T3640] bridge0: port 4(gretap0) entered blocking state [ 287.201856][ T3640] bridge0: port 4(gretap0) entered forwarding state [ 287.210798][ T3033] usb 4-1: SerialNumber: syz [ 287.223499][ T3033] usb 4-1: config 0 descriptor?? [ 287.229434][ T3640] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 287.258595][ T3640] device veth0_to_batadv entered promiscuous mode [ 287.273729][ T3640] device veth0_vlan left promiscuous mode [ 287.279816][ T3640] device veth0_vlan entered promiscuous mode [ 287.287243][ T3640] device veth1_macvtap left promiscuous mode [ 287.294415][ T3640] device veth1_macvtap entered promiscuous mode [ 287.306313][ T922] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 287.321081][ T922] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 287.329624][ T922] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 287.341497][ T922] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 287.355192][ T922] bridge0: port 1(bridge_slave_0) entered blocking state [ 287.362098][ T922] bridge0: port 1(bridge_slave_0) entered forwarding state [ 287.369734][ T922] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 287.378036][ T922] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 287.386444][ T922] bridge0: port 2(bridge_slave_1) entered blocking state [ 287.393326][ T922] bridge0: port 2(bridge_slave_1) entered forwarding state [ 287.402063][ T922] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 287.411160][ T922] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 287.419204][ T922] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 287.430164][ T922] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 287.476549][ T922] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 287.541393][ T922] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 287.555551][ T922] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 287.570973][ T922] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 287.579273][ T922] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 287.587582][ T922] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 288.514254][ T3649] loop1: detected capacity change from 0 to 40427 [ 288.528900][ T3649] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 288.536617][ T3649] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 288.554736][ T3649] F2FS-fs (loop1): invalid crc value [ 288.626792][ T922] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 288.699225][ T3649] F2FS-fs (loop1): SIT is corrupted node# 5 vs 7 [ 288.706934][ T3649] F2FS-fs (loop1): Failed to initialize F2FS segment manager (-117) [ 288.749017][ T922] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 289.012699][ T922] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 289.021303][ T922] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 289.029310][ T922] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 289.037449][ T922] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 289.073636][ T922] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 289.081747][ T922] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 289.090176][ T922] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 289.098747][ T922] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 289.112004][ T922] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 289.119954][ T922] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 289.127829][ T922] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 289.135526][ T922] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 289.144192][ T922] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 289.152602][ T922] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 289.170930][ T922] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 289.218409][ T922] IPv6: ADDRCONF(NETDEV_CHANGE): vlan2: link becomes ready [ 289.226526][ T922] bridge0: port 3(vlan2) entered blocking state [ 289.232722][ T922] bridge0: port 3(vlan2) entered forwarding state [ 289.292111][ T3657] loop4: detected capacity change from 0 to 512 [ 289.328484][ T3657] EXT4-fs error (device loop4): ext4_xattr_inode_iget:404: comm syz.4.764: inode #1: comm syz.4.764: iget: illegal inode # [ 289.415770][ T3663] loop0: detected capacity change from 0 to 512 [ 289.452655][ T3657] EXT4-fs error (device loop4): ext4_xattr_inode_iget:409: comm syz.4.764: error while reading EA inode 1 err=-117 [ 289.580788][ T3663] EXT4-fs (loop0): 1 orphan inode deleted [ 289.586469][ T3663] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 289.599248][ T3663] ext4 filesystem being mounted at /146/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 289.695559][ T3657] EXT4-fs (loop4): 1 orphan inode deleted [ 289.787170][ T3657] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 290.198243][ T3657] 9pnet_fd: Insufficient options for proto=fd [ 290.399907][ T363] __quota_error: 4 callbacks suppressed [ 290.399929][ T363] Quota error (device loop0): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 290.411314][ T3033] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 290.428081][ T3033] usb 4-1: Detected SIO [ 290.436437][ T3033] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 290.445895][ T363] EXT4-fs error (device loop0): ext4_release_dquot:6805: comm kworker/u4:5: Failed to release dquot type 1 [ 290.461273][ T3033] usb 4-1: USB disconnect, device number 4 [ 290.469164][ T3033] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 290.472031][ T28] audit: type=1400 audit(1745004065.013:459): avc: denied { name_bind } for pid=3676 comm="syz.1.770" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 290.479199][ T3033] ftdi_sio 4-1:0.0: device disconnected [ 290.507415][ T3657] EXT4-fs (loop4): unmounting filesystem. [ 290.508446][ T1720] EXT4-fs (loop5): unmounting filesystem. [ 290.519305][ T292] EXT4-fs (loop0): unmounting filesystem. [ 290.642645][ T3679] loop4: detected capacity change from 0 to 512 [ 290.657023][ T3679] ext4: Unknown parameter 'smackfsroot' [ 290.744839][ T3679] SELinux: policydb version 308803608 does not match my version range 15-33 [ 290.760142][ T3679] SELinux: failed to load policy [ 290.770916][ T353] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 290.850614][ T386] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 290.920642][ T3033] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 290.971786][ T353] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 290.982672][ T353] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 290.991464][ T353] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 291.000083][ T353] usb 2-1: config 0 descriptor?? [ 291.040744][ T330] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 291.049004][ T386] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 291.058598][ T386] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 291.068135][ T386] usb 6-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 291.076977][ T386] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 291.085618][ T386] usb 6-1: config 0 descriptor?? [ 291.091717][ T386] usb 6-1: MIDIStreaming interface descriptor not found [ 291.100670][ T3033] usb 4-1: Using ep0 maxpacket: 16 [ 291.107458][ T3033] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 291.118570][ T3033] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 291.128459][ T3033] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 291.141278][ T3033] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 291.150141][ T3033] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 291.158806][ T3033] usb 4-1: config 0 descriptor?? [ 291.230671][ T330] usb 5-1: Using ep0 maxpacket: 16 [ 291.236725][ T330] usb 5-1: config 0 has an invalid interface number: 105 but max is 0 [ 291.244783][ T330] usb 5-1: config 0 has an invalid descriptor of length 91, skipping remainder of the config [ 291.254749][ T330] usb 5-1: config 0 has no interface number 0 [ 291.262524][ T330] usb 5-1: New USB device found, idVendor=046c, idProduct=14e8, bcdDevice= b.28 [ 291.271780][ T330] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 291.279605][ T330] usb 5-1: Product: syz [ 291.283617][ T330] usb 5-1: Manufacturer: syz [ 291.288021][ T330] usb 5-1: SerialNumber: syz [ 291.294696][ T349] usb 6-1: USB disconnect, device number 3 [ 291.302699][ T330] usb 5-1: config 0 descriptor?? [ 291.406940][ T353] keytouch 0003:0926:3333.0005: fixing up Keytouch IEC report descriptor [ 291.416940][ T353] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.0005/input/input8 [ 291.493210][ T28] audit: type=1400 audit(1745004066.043:460): avc: denied { read } for pid=87 comm="acpid" name="event3" dev="devtmpfs" ino=904 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 291.494829][ T353] keytouch 0003:0926:3333.0005: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0 [ 291.532213][ T28] audit: type=1400 audit(1745004066.043:461): avc: denied { open } for pid=87 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=904 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 291.558037][ T28] audit: type=1400 audit(1745004066.043:462): avc: denied { ioctl } for pid=87 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=904 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 291.581928][ T3684] loop4: detected capacity change from 0 to 128 [ 291.603806][ T3033] microsoft 0003:045E:07DA.0006: unknown global tag 0xe [ 291.615388][ T3684] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 291.623958][ T3033] microsoft 0003:045E:07DA.0006: item 0 2 1 14 parsing failed [ 291.631871][ T3684] ext4 filesystem being mounted at /149/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 291.632328][ T3033] microsoft 0003:045E:07DA.0006: parse failed [ 291.632361][ T3033] microsoft: probe of 0003:045E:07DA.0006 failed with error -22 [ 291.832890][ T3677] input: syz0 as /devices/virtual/input/input7 [ 291.837773][ T3693] loop0: detected capacity change from 0 to 4096 [ 291.863424][ T3693] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 291.932643][ T3033] usb 4-1: USB disconnect, device number 5 [ 291.953390][ T28] audit: type=1400 audit(1745004066.503:463): avc: denied { create } for pid=3704 comm="syz.5.776" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 292.168109][ T28] audit: type=1400 audit(1745004066.693:464): avc: denied { create } for pid=3704 comm="syz.5.776" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 292.188321][ T28] audit: type=1400 audit(1745004066.693:465): avc: denied { setopt } for pid=3704 comm="syz.5.776" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 292.211549][ T28] audit: type=1400 audit(1745004066.703:466): avc: denied { shutdown } for pid=3704 comm="syz.5.776" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 292.548728][ T28] audit: type=1400 audit(1745004067.093:467): avc: denied { read write } for pid=3709 comm="syz.3.777" name="fuse" dev="devtmpfs" ino=93 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 292.619287][ T292] EXT4-fs (loop0): unmounting filesystem. [ 292.857936][ T3716] loop3: detected capacity change from 0 to 512 [ 292.904434][ T3721] loop0: detected capacity change from 0 to 512 [ 293.047290][ T3716] EXT4-fs (loop3): 1 orphan inode deleted [ 293.066816][ T3721] EXT4-fs (loop0): 1 orphan inode deleted [ 293.072503][ T3721] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 293.086221][ T3721] ext4 filesystem being mounted at /150/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 293.172750][ T3716] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 293.307700][ T3716] ext4 filesystem being mounted at /164/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 293.328566][ T3728] loop5: detected capacity change from 0 to 256 [ 293.525576][ T3728] FAT-fs (loop5): Unrecognized mount option "uni_xlHte=0" or missing value [ 293.658767][ T353] usb 5-1: USB disconnect, device number 6 [ 293.688844][ T349] usb 2-1: USB disconnect, device number 8 [ 293.834221][ T363] EXT4-fs error (device loop3): ext4_release_dquot:6805: comm kworker/u4:5: Failed to release dquot type 1 [ 293.874942][ T363] EXT4-fs error (device loop0): ext4_release_dquot:6805: comm kworker/u4:5: Failed to release dquot type 1 [ 293.887094][ T294] EXT4-fs (loop3): unmounting filesystem. [ 293.894017][ T292] EXT4-fs (loop0): unmounting filesystem. [ 293.900182][ T296] EXT4-fs (loop4): unmounting filesystem. [ 293.917265][ T3734] FAULT_INJECTION: forcing a failure. [ 293.917265][ T3734] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 293.938465][ T3734] CPU: 0 PID: 3734 Comm: syz.1.785 Not tainted 6.1.129-syzkaller-00014-gbc3d1d352ab6 #0 [ 293.948029][ T3734] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 293.957934][ T3734] Call Trace: [ 293.961046][ T3734] [ 293.963823][ T3734] dump_stack_lvl+0x151/0x1b7 [ 293.968338][ T3734] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 293.973640][ T3734] dump_stack+0x15/0x1e [ 293.977622][ T3734] should_fail_ex+0x3d0/0x520 [ 293.982138][ T3734] should_fail+0xb/0x10 [ 293.986127][ T3734] should_fail_usercopy+0x1a/0x20 [ 293.990985][ T3734] _copy_from_user+0x1e/0xc0 [ 293.995544][ T3734] __se_sys_mount+0x179/0x3b0 [ 294.000051][ T3734] ? __this_cpu_preempt_check+0x13/0x20 [ 294.005432][ T3734] ? __x64_sys_mount+0xd0/0xd0 [ 294.010028][ T3734] ? debug_smp_processor_id+0x17/0x20 [ 294.015240][ T3734] __x64_sys_mount+0xbf/0xd0 [ 294.019674][ T3734] x64_sys_call+0x49d/0x9a0 [ 294.024004][ T3734] do_syscall_64+0x3b/0x80 [ 294.028258][ T3734] ? clear_bhb_loop+0x55/0xb0 [ 294.032774][ T3734] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 294.038499][ T3734] RIP: 0033:0x7feb2918e169 [ 294.042753][ T3734] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 294.062196][ T3734] RSP: 002b:00007feb29f80038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 294.070443][ T3734] RAX: ffffffffffffffda RBX: 00007feb293b5fa0 RCX: 00007feb2918e169 [ 294.078250][ T3734] RDX: 0000200000000200 RSI: 00002000000001c0 RDI: 0000000000000000 [ 294.086059][ T3734] RBP: 00007feb29f80090 R08: 0000200000000240 R09: 0000000000000000 [ 294.093871][ T3734] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 294.101772][ T3734] R13: 0000000000000000 R14: 00007feb293b5fa0 R15: 00007ffd22cd0ff8 [ 294.109621][ T3734] [ 294.166875][ T3739] netlink: 104 bytes leftover after parsing attributes in process `syz.4.781'. [ 294.703679][ T386] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 294.919398][ T3749] loop0: detected capacity change from 0 to 512 [ 294.923545][ T3744] loop1: detected capacity change from 0 to 512 [ 294.938630][ T3749] EXT4-fs (loop0): 1 truncate cleaned up [ 294.944199][ T3749] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 295.010765][ T386] usb 6-1: Using ep0 maxpacket: 16 [ 295.018056][ T386] usb 6-1: config 0 interface 0 has no altsetting 0 [ 295.029801][ T386] usb 6-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 295.030807][ T3744] EXT4-fs: Ignoring removed orlov option [ 295.054783][ T386] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 295.077922][ T386] usb 6-1: config 0 descriptor?? [ 295.115728][ T3744] EXT4-fs error (device loop1): ext4_orphan_get:1400: inode #15: comm syz.1.786: casefold flag without casefold feature [ 295.134450][ T3744] EXT4-fs error (device loop1): ext4_orphan_get:1405: comm syz.1.786: couldn't read orphan inode 15 (err -117) [ 295.146281][ T3744] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 295.155624][ T3744] EXT4-fs (loop1): unmounting filesystem. [ 295.312884][ T3725] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 295.321673][ T3725] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 295.465024][ T28] kauditd_printk_skb: 13 callbacks suppressed [ 295.465069][ T28] audit: type=1400 audit(1745004070.003:479): avc: denied { getopt } for pid=3761 comm="syz.4.790" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 295.695419][ T3758] loop3: detected capacity change from 0 to 512 [ 295.698003][ T3766] loop1: detected capacity change from 0 to 512 [ 295.726949][ T3766] EXT4-fs error (device loop1): ext4_xattr_inode_iget:404: comm syz.1.791: inode #1: comm syz.1.791: iget: illegal inode # [ 295.741217][ T3725] Disabled LAPIC found during irq injection [ 295.748002][ T386] usbhid 6-1:0.0: can't add hid device: -71 [ 295.754609][ T386] usbhid: probe of 6-1:0.0 failed with error -71 [ 295.762714][ T3758] EXT4-fs (loop3): 1 orphan inode deleted [ 295.768342][ T3758] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 295.769381][ T3766] EXT4-fs error (device loop1): ext4_xattr_inode_iget:409: comm syz.1.791: error while reading EA inode 1 err=-117 [ 295.777603][ T3758] ext4 filesystem being mounted at /166/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 295.800694][ T436] Quota error (device loop3): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 295.810346][ T436] EXT4-fs error (device loop3): ext4_release_dquot:6805: comm kworker/u4:7: Failed to release dquot type 1 [ 295.816923][ T386] usb 6-1: USB disconnect, device number 4 [ 295.832722][ T3766] EXT4-fs (loop1): 1 orphan inode deleted [ 295.838289][ T3766] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 295.930082][ T3766] 9pnet_fd: Insufficient options for proto=fd [ 295.939312][ T3766] EXT4-fs (loop1): unmounting filesystem. [ 296.032551][ T294] EXT4-fs (loop3): unmounting filesystem. [ 296.107216][ T3778] SELinux: ebitmap: map size 0 does not match my size 64 (high bit was 0) [ 296.140659][ T3778] SELinux: failed to load policy [ 296.256949][ T3780] loop3: detected capacity change from 0 to 512 [ 296.516744][ T3780] EXT4-fs (loop3): 1 orphan inode deleted [ 296.522395][ T3780] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 296.534026][ T3780] ext4 filesystem being mounted at /167/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 297.056775][ T3789] loop4: detected capacity change from 0 to 512 [ 297.159580][ T28] audit: type=1400 audit(1745004071.623:480): avc: denied { mounton } for pid=3786 comm="syz.5.795" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 297.201284][ T436] Quota error (device loop3): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 297.249415][ T436] EXT4-fs error (device loop3): ext4_release_dquot:6805: comm kworker/u4:7: Failed to release dquot type 1 [ 297.263041][ T3789] EXT4-fs (loop4): 1 orphan inode deleted [ 297.268648][ T3789] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 297.281014][ T3789] ext4 filesystem being mounted at /154/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 297.340797][ T436] Quota error (device loop4): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 297.350568][ T3033] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 297.357617][ T436] EXT4-fs error (device loop4): ext4_release_dquot:6805: comm kworker/u4:7: Failed to release dquot type 1 [ 297.458848][ T292] EXT4-fs (loop0): unmounting filesystem. [ 297.465324][ T294] EXT4-fs (loop3): unmounting filesystem. [ 297.573785][ T3033] usb 2-1: Using ep0 maxpacket: 16 [ 297.579961][ T3033] usb 2-1: config 0 has an invalid interface number: 105 but max is 0 [ 297.592106][ T3033] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 297.606233][ T3033] usb 2-1: config 0 has no interface number 0 [ 297.617878][ T3033] usb 2-1: New USB device found, idVendor=046c, idProduct=14e8, bcdDevice= b.28 [ 297.634052][ T3033] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 297.643142][ T3033] usb 2-1: Product: syz [ 297.649211][ T3033] usb 2-1: Manufacturer: syz [ 297.655758][ T3033] usb 2-1: SerialNumber: syz [ 297.671382][ T3033] usb 2-1: config 0 descriptor?? [ 297.679598][ T28] audit: type=1400 audit(1745004072.223:481): avc: denied { append } for pid=3798 comm="syz.3.798" name="kvm" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 297.958610][ T3777] loop1: detected capacity change from 0 to 128 [ 297.979169][ T3777] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 297.990807][ T3777] ext4 filesystem being mounted at /168/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 298.165095][ T3811] loop0: detected capacity change from 0 to 128 [ 298.231089][ T3811] EXT4-fs (loop0): Test dummy encryption mode enabled [ 298.267555][ T3811] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 298.276444][ T3811] ext4 filesystem being mounted at /154/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 298.315339][ T3811] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 298.341650][ T3814] loop5: detected capacity change from 0 to 256 [ 298.376561][ T3814] FAT-fs (loop5): Unrecognized mount option "uni_xlHte=0" or missing value [ 298.562106][ T3807] loop3: detected capacity change from 0 to 40427 [ 298.602640][ T3807] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 298.626230][ T3807] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 298.654443][ T3807] F2FS-fs (loop3): invalid crc value [ 298.695971][ T3807] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 39874397669) [ 298.715093][ T3807] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 298.778147][ T3807] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 298.789472][ T3807] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 298.832165][ T292] EXT4-fs (loop0): unmounting filesystem. [ 298.840717][ T353] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 298.879398][ T296] EXT4-fs (loop4): unmounting filesystem. [ 298.951246][ T3826] syz.3.801: attempt to access beyond end of device [ 298.951246][ T3826] loop3: rw=2049, sector=77824, nr_sectors = 136 limit=40427 [ 298.988165][ T3830] netlink: 104 bytes leftover after parsing attributes in process `syz.4.804'. [ 300.051266][ T3033] usb 2-1: USB disconnect, device number 9 [ 300.146785][ T3832] loop0: detected capacity change from 0 to 40427 [ 300.160988][ T353] usb 6-1: Using ep0 maxpacket: 16 [ 300.168504][ T353] usb 6-1: config 0 interface 0 has no altsetting 0 [ 300.181773][ T353] usb 6-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 300.190789][ T353] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 300.202037][ T353] usb 6-1: config 0 descriptor?? [ 300.275090][ T3832] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 300.282794][ T3832] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 300.292256][ T3832] F2FS-fs (loop0): invalid crc value [ 300.297802][ T290] EXT4-fs (loop1): unmounting filesystem. [ 300.379682][ T3844] loop4: detected capacity change from 0 to 4096 [ 300.414014][ T3832] F2FS-fs (loop0): SIT is corrupted node# 5 vs 7 [ 300.426372][ T3814] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 300.437119][ T3832] F2FS-fs (loop0): Failed to initialize F2FS segment manager (-117) [ 300.443666][ T3814] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 300.453749][ T3844] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 300.547026][ T3848] loop1: detected capacity change from 0 to 512 [ 301.889883][ T3848] EXT4-fs (loop1): 1 truncate cleaned up [ 301.895435][ T3848] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 301.914744][ T296] EXT4-fs (loop4): unmounting filesystem. [ 302.006696][ T353] usbhid 6-1:0.0: can't add hid device: -71 [ 302.012592][ T353] usbhid: probe of 6-1:0.0 failed with error -71 [ 302.020136][ T353] usb 6-1: USB disconnect, device number 5 [ 302.205250][ T290] EXT4-fs (loop1): unmounting filesystem. [ 303.339750][ T3874] loop0: detected capacity change from 0 to 512 [ 303.549279][ T3872] loop4: detected capacity change from 0 to 512 [ 303.722382][ T3876] loop5: detected capacity change from 0 to 4096 [ 303.904509][ T3866] netlink: 96 bytes leftover after parsing attributes in process `syz.1.812'. [ 303.934380][ T3876] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 304.258360][ T3872] EXT4-fs (loop4): 1 orphan inode deleted [ 304.263992][ T3872] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 304.274511][ T3872] ext4 filesystem being mounted at /159/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 304.374228][ T3874] EXT4-fs (loop0): 1 orphan inode deleted [ 304.379833][ T3874] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 304.389009][ T3874] ext4 filesystem being mounted at /156/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 304.400122][ T922] Quota error (device loop4): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 304.416034][ T922] EXT4-fs error (device loop4): ext4_release_dquot:6805: comm kworker/u4:8: Failed to release dquot type 1 [ 304.467094][ T3881] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 304.478517][ T922] Quota error (device loop0): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 304.489562][ T922] EXT4-fs error (device loop0): ext4_release_dquot:6805: comm kworker/u4:8: Failed to release dquot type 1 [ 304.517674][ T3884] netlink: 'syz.3.815': attribute type 27 has an invalid length. [ 304.526467][ T1720] EXT4-fs (loop5): unmounting filesystem. [ 304.541089][ T296] EXT4-fs (loop4): unmounting filesystem. [ 304.574982][ T292] EXT4-fs (loop0): unmounting filesystem. [ 304.620680][ T3884] bridge0: port 2(bridge_slave_1) entered disabled state [ 304.627706][ T3884] bridge0: port 1(bridge_slave_0) entered disabled state [ 304.711287][ T3891] netlink: 104 bytes leftover after parsing attributes in process `syz.4.816'. [ 305.852856][ T3895] loop5: detected capacity change from 0 to 40427 [ 305.882616][ T3895] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 305.890208][ T3895] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 305.902880][ T3895] F2FS-fs (loop5): invalid crc value [ 306.071292][ T3895] F2FS-fs (loop5): SIT is corrupted node# 5 vs 7 [ 306.077963][ T3895] F2FS-fs (loop5): Failed to initialize F2FS segment manager (-117) [ 306.212912][ T3886] loop1: detected capacity change from 0 to 40427 [ 306.236244][ T3886] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 306.245205][ T3886] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 306.301932][ T3886] F2FS-fs (loop1): invalid crc value [ 306.330085][ T3886] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 39874397669) [ 306.348080][ T3894] loop0: detected capacity change from 0 to 40427 [ 306.357170][ T3886] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 306.365982][ T3894] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 306.417698][ T3907] loop3: detected capacity change from 0 to 4096 [ 306.424394][ T3894] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 306.449210][ T3912] loop5: detected capacity change from 0 to 512 [ 306.461190][ T3894] F2FS-fs (loop0): invalid crc value [ 306.466544][ T3907] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 306.481935][ T3894] F2FS-fs (loop0): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 39874397669) [ 306.508716][ T3894] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 306.522021][ T3912] EXT4-fs error (device loop5): ext4_xattr_inode_iget:404: comm syz.5.822: inode #1: comm syz.5.822: iget: illegal inode # [ 306.526940][ T3886] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 306.542526][ T3886] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 306.564118][ T3912] EXT4-fs error (device loop5): ext4_xattr_inode_iget:409: comm syz.5.822: error while reading EA inode 1 err=-117 [ 306.578306][ T3912] EXT4-fs (loop5): 1 orphan inode deleted [ 306.584148][ T3912] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 306.644029][ T3925] syz.1.818: attempt to access beyond end of device [ 306.644029][ T3925] loop1: rw=2049, sector=77824, nr_sectors = 136 limit=40427 [ 306.692733][ T3912] 9pnet_fd: Insufficient options for proto=fd [ 306.695116][ T3894] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 306.705607][ T3894] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 306.838511][ T3912] EXT4-fs (loop5): unmounting filesystem. [ 307.543054][ T294] EXT4-fs (loop3): unmounting filesystem. [ 307.564492][ T3932] syz.0.819: attempt to access beyond end of device [ 307.564492][ T3932] loop0: rw=2049, sector=77824, nr_sectors = 136 limit=40427 [ 307.753369][ T3934] netlink: 3 bytes leftover after parsing attributes in process `syz.3.826'. [ 307.763725][ T3934] 0ªX¹¦À: renamed from wg1 [ 307.781143][ T3934] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 307.822465][ T3937] netlink: 'syz.5.827': attribute type 27 has an invalid length. [ 307.843369][ T3937] bridge0: port 1(bridge_slave_0) entered disabled state [ 307.994403][ T3942] loop4: detected capacity change from 0 to 512 [ 308.194261][ T3942] EXT4-fs (loop4): 1 orphan inode deleted [ 308.199922][ T3942] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 308.211787][ T3942] ext4 filesystem being mounted at /165/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 308.756547][ T3939] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 308.883523][ T28] audit: type=1400 audit(1745004083.333:482): avc: denied { create } for pid=3947 comm="syz.1.828" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 308.921245][ T3954] netlink: 104 bytes leftover after parsing attributes in process `syz.3.831'. [ 308.989398][ T3956] loop0: detected capacity change from 0 to 512 [ 309.040670][ T3598] Quota error (device loop4): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 309.043929][ T28] audit: type=1400 audit(1745004083.333:483): avc: denied { write } for pid=3947 comm="syz.1.828" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 309.055940][ T3598] EXT4-fs error (device loop4): ext4_release_dquot:6805: comm kworker/u4:12: Failed to release dquot type 1 [ 309.070343][ T28] audit: type=1400 audit(1745004083.333:484): avc: denied { nlmsg_read } for pid=3947 comm="syz.1.828" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 309.081648][ T330] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 309.115244][ T3956] EXT4-fs (loop0): 1 truncate cleaned up [ 309.120884][ T3956] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 309.277197][ T3939] device veth0_vlan left promiscuous mode [ 309.350278][ T3939] device veth0_vlan entered promiscuous mode [ 309.369210][ T296] EXT4-fs (loop4): unmounting filesystem. [ 309.464423][ T3939] device veth1_macvtap left promiscuous mode [ 309.480768][ T330] usb 2-1: Using ep0 maxpacket: 32 [ 309.488930][ T330] usb 2-1: config 0 has an invalid interface number: 95 but max is 3 [ 309.535849][ T330] usb 2-1: config 0 has an invalid interface number: 210 but max is 3 [ 309.584042][ T3939] device veth1_macvtap entered promiscuous mode [ 309.600963][ T330] usb 2-1: config 0 has an invalid interface number: 214 but max is 3 [ 309.745377][ T330] usb 2-1: config 0 has an invalid interface number: 10 but max is 3 [ 309.773757][ T330] usb 2-1: config 0 has an invalid interface number: 174 but max is 3 [ 309.791904][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 309.810023][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 309.817371][ T330] usb 2-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 309.831034][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 309.851585][ T330] usb 2-1: config 0 has an invalid descriptor of length 228, skipping remainder of the config [ 309.872500][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 309.879364][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 309.898865][ T330] usb 2-1: config 0 has 5 interfaces, different from the descriptor's value: 4 [ 309.915800][ T330] usb 2-1: config 0 has no interface number 0 [ 309.922125][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 309.930329][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 309.946467][ T330] usb 2-1: config 0 has no interface number 1 [ 309.961522][ T330] usb 2-1: config 0 has no interface number 2 [ 309.973555][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 309.981630][ T330] usb 2-1: config 0 has no interface number 3 [ 309.987523][ T330] usb 2-1: config 0 has no interface number 4 [ 309.994470][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 310.002438][ T330] usb 2-1: config 0 interface 95 altsetting 8 bulk endpoint 0x1 has invalid maxpacket 32 [ 310.012751][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 310.020863][ T330] usb 2-1: config 0 interface 210 altsetting 4 endpoint 0x9 has invalid maxpacket 1024, setting to 64 [ 310.032370][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 310.040317][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 310.048446][ T330] usb 2-1: config 0 interface 210 altsetting 4 endpoint 0x4 has invalid maxpacket 512, setting to 64 [ 310.051274][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 310.067177][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 310.076605][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 310.086411][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 310.134724][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 310.143988][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 310.152325][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 310.160212][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 310.168869][ T292] EXT4-fs (loop0): unmounting filesystem. [ 310.176329][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 310.184107][ T330] usb 2-1: config 0 interface 210 altsetting 4 has an invalid endpoint with address 0x0, skipping [ 310.200088][ T330] usb 2-1: config 0 interface 210 altsetting 4 endpoint 0x8 has invalid maxpacket 512, setting to 64 [ 310.211179][ T330] usb 2-1: config 0 interface 210 altsetting 4 has 8 endpoint descriptors, different from the interface descriptor's value: 10 [ 310.212723][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 310.224656][ T330] usb 2-1: too many endpoints for config 0 interface 214 altsetting 135: 125, using maximum allowed: 30 [ 310.246624][ T330] usb 2-1: config 0 interface 214 altsetting 135 has 2 endpoint descriptors, different from the interface descriptor's value: 125 [ 310.266093][ T330] usb 2-1: config 0 interface 10 altsetting 9 has a duplicate endpoint with address 0xB, skipping [ 310.277286][ T330] usb 2-1: config 0 interface 10 altsetting 9 has a duplicate endpoint with address 0xB, skipping [ 310.293329][ T330] usb 2-1: config 0 interface 10 altsetting 9 has a duplicate endpoint with address 0x8, skipping [ 310.306877][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 310.315430][ T330] usb 2-1: config 0 interface 174 altsetting 233 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 310.495609][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 310.510941][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 310.523687][ T28] audit: type=1400 audit(1745004085.073:485): avc: denied { write } for pid=84 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 310.540497][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 310.545115][ T330] usb 2-1: config 0 interface 95 has no altsetting 0 [ 310.559341][ T330] usb 2-1: config 0 interface 210 has no altsetting 0 [ 310.561168][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 310.566088][ T330] usb 2-1: config 0 interface 214 has no altsetting 0 [ 310.573917][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 310.579689][ T28] audit: type=1400 audit(1745004085.073:486): avc: denied { remove_name } for pid=84 comm="syslogd" name="messages" dev="tmpfs" ino=8 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 310.587293][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 310.609449][ T330] usb 2-1: config 0 interface 10 has no altsetting 0 [ 310.617186][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 310.631127][ T330] usb 2-1: config 0 interface 174 has no altsetting 0 [ 310.631728][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 310.641842][ T28] audit: type=1400 audit(1745004085.073:487): avc: denied { rename } for pid=84 comm="syslogd" name="messages" dev="tmpfs" ino=8 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 310.667207][ T28] audit: type=1400 audit(1745004085.073:488): avc: denied { add_name } for pid=84 comm="syslogd" name="messages.0" dev="tmpfs" ino=7 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 310.667487][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 310.700130][ T28] audit: type=1400 audit(1745004085.073:489): avc: denied { unlink } for pid=84 comm="syslogd" name="messages.0" dev="tmpfs" ino=7 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 310.709505][ T3979] loop3: detected capacity change from 0 to 4096 [ 310.722748][ T28] audit: type=1400 audit(1745004085.073:490): avc: denied { create } for pid=84 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 310.750281][ T330] usb 2-1: New USB device found, idVendor=0403, idProduct=ff1d, bcdDevice=67.61 [ 310.766820][ T3979] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 310.776886][ T3977] netlink: 96 bytes leftover after parsing attributes in process `syz.0.837'. [ 310.792234][ T330] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 310.816418][ T330] usb 2-1: Product: syz [ 310.817869][ T3983] loop5: detected capacity change from 0 to 256 [ 310.827323][ T3983] FAT-fs (loop5): Unrecognized mount option "uni_xlHte=0" or missing value [ 310.875535][ T330] usb 2-1: Manufacturer: syz [ 310.880026][ T330] usb 2-1: SerialNumber: syz [ 310.886989][ T330] usb 2-1: config 0 descriptor?? [ 310.892374][ T3952] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 310.899873][ T568] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 311.158623][ T330] ftdi_sio 2-1:0.95: FTDI USB Serial Device converter detected [ 311.483280][ T294] EXT4-fs (loop3): unmounting filesystem. [ 311.492590][ T330] ftdi_sio ttyUSB0: unknown device type: 0x6761 [ 311.774663][ T330] ftdi_sio 2-1:0.210: FTDI USB Serial Device converter detected [ 311.803947][ T330] ftdi_sio ttyUSB1: unknown device type: 0x6761 [ 311.813506][ T3994] netlink: 3 bytes leftover after parsing attributes in process `syz.3.841'. [ 311.831842][ T330] ftdi_sio 2-1:0.214: FTDI USB Serial Device converter detected [ 311.850304][ T330] ftdi_sio ttyUSB2: unknown device type: 0x6761 [ 311.872457][ T330] ftdi_sio 2-1:0.10: FTDI USB Serial Device converter detected [ 311.957029][ T330] ftdi_sio ttyUSB3: unknown device type: 0x6761 [ 311.966202][ T330] ftdi_sio 2-1:0.174: FTDI USB Serial Device converter detected [ 311.974763][ T330] ftdi_sio ttyUSB4: unknown device type: 0x6761 [ 311.983755][ T330] usb 2-1: USB disconnect, device number 10 [ 311.990316][ T330] ftdi_sio 2-1:0.95: device disconnected [ 311.998141][ T330] ftdi_sio 2-1:0.210: device disconnected [ 312.005292][ T330] ftdi_sio 2-1:0.214: device disconnected [ 312.047434][ T330] ftdi_sio 2-1:0.10: device disconnected [ 312.050604][ T4002] FAULT_INJECTION: forcing a failure. [ 312.050604][ T4002] name failslab, interval 1, probability 0, space 0, times 0 [ 312.055226][ T330] ftdi_sio 2-1:0.174: device disconnected [ 312.065528][ T4002] CPU: 0 PID: 4002 Comm: syz.0.843 Not tainted 6.1.129-syzkaller-00014-gbc3d1d352ab6 #0 [ 312.080556][ T4002] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 312.085517][ T4003] loop4: detected capacity change from 0 to 512 [ 312.090419][ T4002] Call Trace: [ 312.090430][ T4002] [ 312.090438][ T4002] dump_stack_lvl+0x151/0x1b7 [ 312.090468][ T4002] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 312.112204][ T4002] ? mutex_unlock+0xb2/0x260 [ 312.116639][ T4002] ? bit_wait_io_timeout+0x120/0x120 [ 312.121749][ T4002] ? __mutex_lock_slowpath+0x10/0x10 [ 312.126889][ T4002] dump_stack+0x15/0x1e [ 312.130954][ T4002] should_fail_ex+0x3d0/0x520 [ 312.135484][ T4002] ? getname_flags+0xba/0x520 [ 312.139973][ T4002] __should_failslab+0xaf/0xf0 [ 312.144574][ T4002] should_failslab+0x9/0x20 [ 312.148930][ T4002] kmem_cache_alloc+0x3b/0x320 [ 312.153526][ T4002] ? __ia32_sys_read+0x90/0x90 [ 312.158114][ T4002] getname_flags+0xba/0x520 [ 312.162549][ T4002] __x64_sys_unlinkat+0xb2/0xf0 [ 312.167233][ T4002] x64_sys_call+0x6e9/0x9a0 [ 312.171574][ T4002] do_syscall_64+0x3b/0x80 [ 312.175829][ T4002] ? clear_bhb_loop+0x55/0xb0 [ 312.180339][ T4002] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 312.186068][ T4002] RIP: 0033:0x7f600538e169 [ 312.190350][ T4002] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 312.209770][ T4002] RSP: 002b:00007f60061be038 EFLAGS: 00000246 ORIG_RAX: 0000000000000107 [ 312.218009][ T4002] RAX: ffffffffffffffda RBX: 00007f60055b5fa0 RCX: 00007f600538e169 [ 312.225819][ T4002] RDX: 0000000000000200 RSI: 0000200000000280 RDI: 0000000000000004 [ 312.233626][ T4002] RBP: 00007f60061be090 R08: 0000000000000000 R09: 0000000000000000 [ 312.241438][ T4002] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 312.249252][ T4002] R13: 0000000000000000 R14: 00007f60055b5fa0 R15: 00007ffc9ee47078 [ 312.257071][ T4002] [ 312.699160][ T4003] EXT4-fs (loop4): 1 orphan inode deleted [ 312.704979][ T4003] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 312.716644][ T4003] ext4 filesystem being mounted at /168/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 313.039867][ T28] audit: type=1400 audit(1745004087.583:491): avc: denied { ioctl } for pid=4008 comm="syz.0.844" path="socket:[26396]" dev="sockfs" ino=26396 ioctlcmd=0x8922 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 313.074363][ T4009] veth1_virt_wifi: mtu less than device minimum [ 314.142921][ T4016] loop3: detected capacity change from 0 to 512 [ 314.830034][ T4020] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 314.897087][ T28] audit: type=1400 audit(1745004089.443:492): avc: denied { connect } for pid=4008 comm="syz.0.844" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 314.964824][ T4016] EXT4-fs (loop3): 1 truncate cleaned up [ 314.970384][ T4016] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 315.929248][ T4025] loop1: detected capacity change from 0 to 512 [ 315.998142][ T4020] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 316.030675][ T436] Quota error (device loop4): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 316.040996][ T436] EXT4-fs error (device loop4): ext4_release_dquot:6805: comm kworker/u4:7: Failed to release dquot type 1 [ 316.071329][ T4025] EXT4-fs (loop1): 1 orphan inode deleted [ 316.076933][ T4025] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 316.085931][ T3033] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 316.093731][ T4025] ext4 filesystem being mounted at /174/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 316.112616][ T436] Quota error (device loop1): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 316.141765][ T436] EXT4-fs error (device loop1): ext4_release_dquot:6805: comm kworker/u4:7: Failed to release dquot type 1 [ 316.395670][ T4037] loop0: detected capacity change from 0 to 4096 [ 316.404044][ T296] EXT4-fs (loop4): unmounting filesystem. [ 317.869112][ T294] EXT4-fs (loop3): unmounting filesystem. [ 317.900181][ T290] EXT4-fs (loop1): unmounting filesystem. [ 317.947237][ T4037] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 318.413788][ T292] EXT4-fs (loop0): unmounting filesystem. [ 318.596708][ T4047] netlink: 96 bytes leftover after parsing attributes in process `syz.3.849'. [ 318.655323][ T4053] netlink: 3 bytes leftover after parsing attributes in process `syz.3.856'. [ 318.692446][ T28] audit: type=1400 audit(1745004093.233:493): avc: denied { mount } for pid=4051 comm="syz.0.855" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 318.714541][ T28] audit: type=1400 audit(1745004093.233:494): avc: denied { watch } for pid=4051 comm="syz.0.855" path="/166/file0" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1 [ 318.769250][ T28] audit: type=1400 audit(1745004093.233:495): avc: denied { bind } for pid=4051 comm="syz.0.855" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 318.790899][ T4058] syz.1.854[4058] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 318.790984][ T4058] syz.1.854[4058] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 318.802733][ T4058] FAULT_INJECTION: forcing a failure. [ 318.802733][ T4058] name failslab, interval 1, probability 0, space 0, times 0 [ 318.826222][ T4058] CPU: 1 PID: 4058 Comm: syz.1.854 Not tainted 6.1.129-syzkaller-00014-gbc3d1d352ab6 #0 [ 318.835712][ T4058] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 318.845608][ T4058] Call Trace: [ 318.848730][ T4058] [ 318.851512][ T4058] dump_stack_lvl+0x151/0x1b7 [ 318.856022][ T4058] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 318.861430][ T4058] dump_stack+0x15/0x1e [ 318.865416][ T4058] should_fail_ex+0x3d0/0x520 [ 318.869933][ T4058] ? mas_alloc_nodes+0x267/0x7d0 [ 318.874701][ T4058] __should_failslab+0xaf/0xf0 [ 318.879302][ T4058] should_failslab+0x9/0x20 [ 318.883652][ T4058] kmem_cache_alloc+0x3b/0x320 [ 318.888243][ T4058] mas_alloc_nodes+0x267/0x7d0 [ 318.892843][ T4058] mas_preallocate+0xef2/0x1bd0 [ 318.897533][ T4058] ? mas_destroy+0x3280/0x3280 [ 318.902134][ T4058] ? mas_prev_slot+0x88c/0x8c0 [ 318.906730][ T4058] vma_expand+0x2f2/0xa10 [ 318.910898][ T4058] mmap_region+0x1642/0x2c40 [ 318.915325][ T4058] ? file_mmap_ok+0x150/0x150 [ 318.919834][ T4058] ? cap_mmap_addr+0x169/0x2e0 [ 318.924431][ T4058] ? __kasan_check_write+0x14/0x20 [ 318.929387][ T4058] ? get_unmapped_area+0x31d/0x380 [ 318.934325][ T4058] do_mmap+0x853/0xe30 [ 318.938238][ T4058] ? mlock_future_check+0x110/0x110 [ 318.943269][ T4058] vm_mmap_pgoff+0x208/0x430 [ 318.947693][ T4058] ? account_locked_vm+0x250/0x250 [ 318.952638][ T4058] ? ksys_write+0x260/0x2c0 [ 318.956981][ T4058] ksys_mmap_pgoff+0xed/0x1e0 [ 318.961491][ T4058] ? debug_smp_processor_id+0x17/0x20 [ 318.966698][ T4058] __x64_sys_mmap+0x103/0x120 [ 318.971213][ T4058] x64_sys_call+0x67/0x9a0 [ 318.975466][ T4058] do_syscall_64+0x3b/0x80 [ 318.979722][ T4058] ? clear_bhb_loop+0x55/0xb0 [ 318.984232][ T4058] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 318.989988][ T4058] RIP: 0033:0x7feb2918e169 [ 318.994217][ T4058] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 319.013878][ T4058] RSP: 002b:00007feb29f3e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 319.022120][ T4058] RAX: ffffffffffffffda RBX: 00007feb293b6160 RCX: 00007feb2918e169 [ 319.029931][ T4058] RDX: 0000000000000000 RSI: 0000000000004000 RDI: 0000200000ffc000 [ 319.037756][ T4058] RBP: 00007feb29f3e090 R08: ffffffffffffffff R09: 0000000000000000 [ 319.045551][ T4058] R10: 0000000000000032 R11: 0000000000000246 R12: 0000000000000001 [ 319.053369][ T4058] R13: 0000000000000000 R14: 00007feb293b6160 R15: 00007ffd22cd0ff8 [ 319.061183][ T4058] [ 319.064299][ T4058] ------------[ cut here ]------------ [ 319.069563][ T4058] kernel BUG at mm/mmap.c:2829! [ 319.074315][ T4058] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 319.080150][ T4058] CPU: 1 PID: 4058 Comm: syz.1.854 Not tainted 6.1.129-syzkaller-00014-gbc3d1d352ab6 #0 [ 319.089708][ T4058] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 319.099593][ T4058] RIP: 0010:mmap_region+0x2b12/0x2c40 [ 319.104810][ T4058] Code: 03 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c fb f8 ff ff 48 89 df e8 bf a1 09 00 e9 ee f8 ff ff e8 85 f3 c1 ff 0f 0b e8 7e f3 c1 ff <0f> 0b 65 8b 05 e5 cb 4e 7e 41 89 c6 4c 89 f0 48 c1 e8 06 48 8d 3c [ 319.124241][ T4058] RSP: 0018:ffffc90002bcfa20 EFLAGS: 00010293 [ 319.130226][ T4058] RAX: ffffffff81b34572 RBX: 0000200000ffffff RCX: ffff8881124e2880 [ 319.138037][ T4058] RDX: 0000000000000000 RSI: 0000200000ffffff RDI: 0000200001000000 [ 319.145856][ T4058] RBP: ffffc90002bcfc50 R08: ffffffff81b325ea R09: ffffffff851250a3 [ 319.153667][ T4058] R10: 0000000000000003 R11: ffff8881124e2880 R12: ffffc90002bcfba8 [ 319.161473][ T4058] R13: 1ffff92000579f75 R14: ffff88810e684000 R15: 0000200001000000 [ 319.169288][ T4058] FS: 00007feb29f3e6c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 319.178050][ T4058] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 319.184480][ T4058] CR2: 00000000ffffffff CR3: 0000000130786000 CR4: 00000000003506a0 [ 319.192291][ T4058] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 319.200356][ T4058] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 319.208165][ T4058] Call Trace: [ 319.211293][ T4058] [ 319.214070][ T4058] ? __die_body+0x62/0xb0 [ 319.218252][ T4058] ? die+0x88/0xb0 [ 319.221794][ T4058] ? do_trap+0x103/0x330 [ 319.225885][ T4058] ? mmap_region+0x2b12/0x2c40 [ 319.230473][ T4058] ? handle_invalid_op+0x95/0xc0 [ 319.235246][ T4058] ? mmap_region+0x2b12/0x2c40 [ 319.240367][ T4058] ? exc_invalid_op+0x32/0x50 [ 319.244878][ T4058] ? asm_exc_invalid_op+0x1b/0x20 [ 319.249743][ T4058] ? mas_next_slot+0x413/0xb00 [ 319.254337][ T4058] ? mmap_region+0xb8a/0x2c40 [ 319.258860][ T4058] ? mmap_region+0x2b12/0x2c40 [ 319.263454][ T4058] ? mmap_region+0x2b12/0x2c40 [ 319.268064][ T4058] ? file_mmap_ok+0x150/0x150 [ 319.272569][ T4058] ? cap_mmap_addr+0x169/0x2e0 [ 319.277172][ T4058] ? __kasan_check_write+0x14/0x20 [ 319.282124][ T4058] ? get_unmapped_area+0x31d/0x380 [ 319.282266][ T28] audit: type=1400 audit(1745004093.233:496): avc: denied { listen } for pid=4051 comm="syz.0.855" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 319.287058][ T4058] do_mmap+0x853/0xe30 [ 319.310240][ T4058] ? mlock_future_check+0x110/0x110 [ 319.315271][ T4058] vm_mmap_pgoff+0x208/0x430 [ 319.319691][ T4058] ? account_locked_vm+0x250/0x250 [ 319.324640][ T4058] ? ksys_write+0x260/0x2c0 [ 319.328977][ T4058] ksys_mmap_pgoff+0xed/0x1e0 [ 319.333495][ T4058] ? debug_smp_processor_id+0x17/0x20 [ 319.338701][ T4058] __x64_sys_mmap+0x103/0x120 [ 319.343215][ T4058] x64_sys_call+0x67/0x9a0 [ 319.347465][ T4058] do_syscall_64+0x3b/0x80 [ 319.351716][ T4058] ? clear_bhb_loop+0x55/0xb0 [ 319.356232][ T4058] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 319.361964][ T4058] RIP: 0033:0x7feb2918e169 [ 319.366209][ T4058] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 319.385653][ T4058] RSP: 002b:00007feb29f3e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 319.393983][ T4058] RAX: ffffffffffffffda RBX: 00007feb293b6160 RCX: 00007feb2918e169 [ 319.401793][ T4058] RDX: 0000000000000000 RSI: 0000000000004000 RDI: 0000200000ffc000 [ 319.409605][ T4058] RBP: 00007feb29f3e090 R08: ffffffffffffffff R09: 0000000000000000 [ 319.417416][ T4058] R10: 0000000000000032 R11: 0000000000000246 R12: 0000000000000001 [ 319.425227][ T4058] R13: 0000000000000000 R14: 00007feb293b6160 R15: 00007ffd22cd0ff8 [ 319.433045][ T4058] [ 319.435902][ T4058] Modules linked in: [ 319.440184][ T4058] ---[ end trace 0000000000000000 ]--- [ 319.445644][ T4058] RIP: 0010:mmap_region+0x2b12/0x2c40 [ 319.450995][ T4058] Code: 03 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c fb f8 ff ff 48 89 df e8 bf a1 09 00 e9 ee f8 ff ff e8 85 f3 c1 ff 0f 0b e8 7e f3 c1 ff <0f> 0b 65 8b 05 e5 cb 4e 7e 41 89 c6 4c 89 f0 48 c1 e8 06 48 8d 3c [ 319.478115][ T4058] RSP: 0018:ffffc90002bcfa20 EFLAGS: 00010293 [ 319.484309][ T4058] RAX: ffffffff81b34572 RBX: 0000200000ffffff RCX: ffff8881124e2880 [ 319.492220][ T4058] RDX: 0000000000000000 RSI: 0000200000ffffff RDI: 0000200001000000 [ 319.500133][ T4058] RBP: ffffc90002bcfc50 R08: ffffffff81b325ea R09: ffffffff851250a3 [ 319.507961][ T4058] R10: 0000000000000003 R11: ffff8881124e2880 R12: ffffc90002bcfba8 [ 319.515882][ T4058] R13: 1ffff92000579f75 R14: ffff88810e684000 R15: 0000200001000000 [ 319.523794][ T4058] FS: 00007feb29f3e6c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 319.532672][ T4058] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 319.539172][ T4058] CR2: 00000000ffffffff CR3: 0000000130786000 CR4: 00000000003506a0 [ 319.547889][ T4058] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 319.555810][ T4058] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 319.563724][ T4058] Kernel panic - not syncing: Fatal exception [ 319.569856][ T4058] Kernel Offset: disabled [ 319.573989][ T4058] Rebooting in 86400 seconds..