last executing test programs: 4m10.801362198s ago: executing program 3 (id=1632): socket$can_raw(0x1d, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) mkdir(&(0x7f0000000040)='./file1\x00', 0x1e) mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000280)='./bus\x00', &(0x7f0000000080), 0x2000000, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) mknodat(0xffffffffffffffff, &(0x7f00000000c0)='./file1\x00', 0x0, 0x0) chdir(&(0x7f0000000140)='./bus\x00') linkat(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x0) unlink(&(0x7f0000000180)='./file1\x00') r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) renameat2(r3, &(0x7f00000001c0)='./file0\x00', r3, &(0x7f0000000340)='./file1\x00', 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b0000000500000008040000cd00000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r5}, 0x10) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@quota}]}, 0x1, 0x4fa, &(0x7f0000000ac0)="$eJzs3c9vG1kdAPCvnThx0uwmu+wBEOyW3YWCqjqJuxut9gDLCSFUCdEjSG1I3CiKHUexU5rQQ3rmikQlTnDkD+DcE3cuCG5cygGJHxGoQeLg1YwnqZvaTdQkdhR/PtJo3ps39fe9pvNe/U3iF8DQuhoRuxExFhF3I2I6u57LjvisfST3Pdt7uLS/93ApF63W7X/l0vbkWnT8mcSV7DWLEfGj70X8NPdy3Mb2ztpitVrZzOqzzdrGbGN758ZqbXGlslJZL5cX5hfmPrn5cfnMxvpebSwrffXpH3e/9fOkW1PZlc5xnKX20AuHcRKjEfGD8wg2ACPZeMYG3RFeSz4i3o6I99PnfzpG0q8mAHCZtVrT0ZrurAMAl10+zYHl8qUsFzAV+Xyp1M7hvROT+Wq90bx+r761vtzOlc1EIX9vtVqZy3KFM1HIJfX5tPy8Xj5SvxkRb0XEL8cn0nppqV5dHuR/fABgiF05sv7/d7y9/gMAl1xx0B0AAPrO+g8Aw8f6DwDDx/oPAMOnvf5PDLobAEAfef8PAMPH+g8AQ+WHt24lR2s/+/zr5fvbW2v1+zeWK421Um1rqbRU39wordTrK+ln9tSOe71qvb4x/1FsPZj59kajOdvY3rlTq2+tN++kn+t9p1JI79rtw8gAgF7eeu/JX3LJivzpRHpEx14OhYH2DDhv+UF3ABiYkUF3ABgYu33B8DrFe3zpAbgkumzR+4Jit18QarVarfPrEnDOrn1J/h+GVUf+308Bw5CR/4fhJf8Pw6vVyp10z/846Y0AwMUmxw/0+P7/29n5d9k3B36yfPSOx+fZKwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALjYDvb/LWV7gU9FPl8qRbwRETNRyN1brVbmIuLNiPjzeGE8qc8PuM8AwGnl/57L9v+6Nv3h1AtN7145LI5FxM9+fftXDxabzc0/RYzl/j1+cL35OLte7n/vAYDjHazT6bnjjfyzvYdLB0c/+/OP70ZEsR1/f28s9g/jj8Zoei5GISIm/5PL6m25jtzFaew+iogvdht/LqbSHEh759Oj8ZPYb/Q1fv6F+Pm0rX1O/i6+cAZ9gWHzJJl/Puv2/OXjanru/vwX0xnq9LL5L3mppf10Dnwe/2D+G+kx/109aYyP/vD9dmni5bZHEV8ejTiIvd8x/xzEz/WI/+EJ4//1K+++36ut9ZuIa9E9fmes2WZtY7axvXNjtba4UlmprJfLC/MLc5/c/Lg8m+aoZ3uvBv/89PqbvdqS8U/2iF88ZvxfP+H4f/v/uz/+2ivif/ODbvHz8c4r4idr4jdOGH9x8vfFXm1J/OUe4z/u63/9hPGf/m3npW3DAYDBaWzvrC1Wq5VNBYWLX0j+yV6AbnQtfKdfscaie9MvPmg/00eaWq3XitVrxjiLrBtwERw+9BHxv0F3BgAAAAAAAAAAAAAA6Kofv7E06DECAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABweX0eAAD//19xzyM=") 4m8.840956705s ago: executing program 3 (id=1638): socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) socket$inet6_tcp(0xa, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x10, 0xe, &(0x7f0000000b00)=ANY=[@ANYBLOB="b702000000000042bfa30000000000001602000000feffff7a0af0ff1100000079a4f0ff00000000b706000000000081ad64020000000000260404000100ff0f1704000001130a00b7040000050000006a0af2fe00000000850000005b000000b700000000000000950000000000000063e165cd844a954b26c933db8e175e097efb3f55bb2007ee51050512b5b42128aa090a79507df79f2d8129cf487130d5f24bf901115e17392ac66ad029d1c08a2c6146101e04aeacea799a22a2fa798b5adc436b27d53337e5003e4be7f8000000000000dbc2777df150b70639e25b7496cb8dcdd77b85b94109a314fd0840028f2ed1a4535550614e09d6378198a60978670838337af2abd55a87ac0394b2f82ffab7d153d62058d0a413b2173619ccf55520f22c9cb6712f3024b7041b1df65b3e1b9b31f154e89d485b1f7fc09a30f115646d14ce53d13d0cca00a1efc54fa737c28b994a8512c816fdcceaede3faedc51d29a47ffeffffff00f4c7a53ac271d6d6f4ea6bf97f2f33e2ea2e534300bcb3fdc4b4861004eefbda7f54f82a804dc5fa778100000000000000488e40b030166565a097b1b44b451de736bb6d43db8db03d4b7745fef1d04ec633dee254a6d491b849a5a7c2211fe4fd21a18986252a70f8f92eb6f0e8c7db35036865445971ff4bf23242a1f2c28159f09943b1b0452d1b72183aacf4a84f8d791fa99dac06b57479321a0574fb304bc2a168aa43328c8ddc20ea011bf5742e0e0d4334db8b20ce3f9f16cb7fc20faf791ec85821d0c48fb657c29b302b0d2277b44af326f36f3e2c25a61ec45c3af97a8f17da954a9b34f79908755f75ca13fb7c8bbd8b6e7dac1aba4b20dc7de058a4dfa7e85a8bdf1d4100d8bda74d66f47cc180f82c5f573c6d294d1665016ac59de637b30824d822133a7ac7fe13cab6692422a46e9ffe2d4a2d32f7528751313694bf5700b20ef0c248ddd3da3239acad4aff2066bb5d4045c9585638c2153a6eee01738b0c10671f4f559b7dcb98a6273b8c5f1e24d9f679e4fbe948dfb4cc4a389c69608241730459f0123fd383d5612ff0230dc6eb55e9d46de56ef907b059b905c0289afb9a79ae5498f6589880ed6eea7b9c670012be05e7de0940313c5826236ebced9390cb6941b8375d936a7d2120eca291963eb2d537d8ee4de5c183c960119451c31539b22809e1d7f0cda06a9fa87d949a3564cb778f54334354ec2697a03aff14a9aa4bd908a99494a65044dd539f5096412b926b2e095b84000243ff98df3347f0e399d1b9f27e3c33269c0e153b28b2d4410572bc45b9d3fa02208d304d455c3630eeaebde922320178b00cc6ed7966130b547dbf8b497af0a77fbcf2cd1d0000000000000001c80000000000000000000000091bee53595a779d243ac8cea769b10424d28804c026ab7f4a0281921f0128dfd70b438af60b060000000000000056642b49b745f3bf2cf7908b6d7d748308eea09fc361b4735efbf3411718d6ee7aebf9ef40662d7836d252c566f5ee8f8a836804ed3a1079b0282a12043408cd600087dc0dd22b634350761b9867682e11d94fff91af19f2f8df175d60a2892e456f5f4042bd13da2022f23daec61854f640f703db027665006e74f20675eb781925441578e93046aaddea8ec4ca37f71c2710a7ea8ae0dc214e1cc275b26adfac92e6de9200000000a1f6c5572a9ee7f7c8a5098600000000009ec7eee50e5bafecea4d4134f9d006c8d6883eca5c9c58c9e93311ab5009d9c209644bb1cb603cd60a9e241435fe82d5a96b09c68c73de2f04f15d0053875732f2258aea65559eb00e76e9d092a2a60ca770663da451080cc36000906d5a9fad98c308e89bd5ffb6151d79c1cee1cdfba05e3633becd937d7a15762e5f5a3a0bc33fdbe28a0800000000000000c92fe7f791e8f6029309508e5bf024ed8f8a005f2bbf96c89739f5d81e750d50515a59a3ad09e8802e8f4f535447cc0fc9d5f99a73145dfcedad69da9cd43758624600e78f4458542b14f29611f95d4a2aa31771cd379ec83554cea5e6539db7384e1f58d81f2f2653c4d9818708e27c89b552d3fcd116bce9c764c714c9402c21d181aae59efb28d4f91652f6820b6ec96280000320f8059195729d60c534ee8e8ff0755b67fe4c25edb85bcff24c757aa8090000000000008c420eb4304f66e3a37aaf000000000000000000000091e12aacf2ed9ee91cc82777c6a0da37e0219260f2944eb77cb7a20ab7ebcc2fbe2a986be27eacc454147267b05cba055cda2a57efefcb9a8761bc052bbb7f4167245753d31e7c1120a886bdf372ce255ca3c2aa8b0ebe42924db5d6d81e9b1514172e2f3fb1b46a1f7561b65c265b742d792d4f572d860718b5d9e94631657021612f6c974d10769e47575509bfe2d6ffa6cae835b0f492d32d12116c95e0b3b31713c20beae2dd340d7b67c3bed62b682a12363608d736289610fa01000000010000000d6f033f8438b57cedf532ee34e42b4041a682f54dc7b57200762d45724151014b733d497190f9ab3d5bab1f0635025ba9baa3a09b886e08c6bbd6e158f8e1c4ead2dc5bb4e2976a8383d8e415149455dc78439ae1b026ef03dfaa1f197a3b8ee7fcd1e39f5600a5c978584f97df1aed893821775c9b762f5acd2bf9a0eb18215ff90fe336bd75d3e8f704662d4084fa582afdd73d23546ae0abb118bdde3f4d08661e7937b8631e7439bf23618d3f7ab482dde3249f42e660496098f30e38e152ead80d7291b54da4a3b08b8fd7ddaa830ec5933a0a674334b8d4269e425b9fa0255f3ba988cfd9ae6ed8154b633a0f108f3245d3a0212586e6c5762db4076d9ee42836d3000000000033baf08867c22a29335ab8976219d500c855a5642fd6539bac21f429e40740cd4c5ba3cb49da499c1a2c6bfb6b0e2e8d168bcb79f8054de46aeaf1d44c1f0958f24a93b88ac8d146afb94977527721e16dcfe4e014ee5a503cfe6ea2ed7fad0e83056941507016489f38643c128f5f37b453d811b185551bbd08336abed54a0e2419b1a0e53214dd296d152cf82f42472bf1fd52a22efdd111977d3cf6f20e942df77792fda2c99bee3175defd519b4fae37fc1fe86ed99335ef2ed821c64af516ac03585ec43071f5cc6030cf855b7e5d725aa8e9b7bf6d7b27a4e4e2fb2ed2501e5ce4435f8cbc0ad746c1b60d60f23d892939c96f750cd71824142404c26992c49c916b82bbc81c8d93c537c3c38cd58d0b4a64ddf9c55a7506c8cce89ff51c8ad5e63d1e2d1fd945635c130b4ad0dbcead5ec8cb3be6a0a82cef44e31148d94bd7edc9e94a4e295f1743754a5ee9f444a10838"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffff4d, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="2000000011000100000000000300000008000300", @ANYRES32=r4], 0x20}], 0x1, 0x0, 0x0, 0x4000}, 0x40) 4m8.618295747s ago: executing program 3 (id=1639): socket$can_raw(0x1d, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) mkdir(&(0x7f0000000040)='./file1\x00', 0x1e) mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000280)='./bus\x00', &(0x7f0000000080), 0x2000000, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) mknodat(0xffffffffffffffff, &(0x7f00000000c0)='./file1\x00', 0x0, 0x0) chdir(&(0x7f0000000140)='./bus\x00') linkat(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x0) unlink(&(0x7f0000000180)='./file1\x00') r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) renameat2(r3, &(0x7f00000001c0)='./file0\x00', r3, &(0x7f0000000340)='./file1\x00', 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b0000000500000008040000cd00000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r5}, 0x10) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@quota}]}, 0x1, 0x4fa, &(0x7f0000000ac0)="$eJzs3c9vG1kdAPCvnThx0uwmu+wBEOyW3YWCqjqJuxut9gDLCSFUCdEjSG1I3CiKHUexU5rQQ3rmikQlTnDkD+DcE3cuCG5cygGJHxGoQeLg1YwnqZvaTdQkdhR/PtJo3ps39fe9pvNe/U3iF8DQuhoRuxExFhF3I2I6u57LjvisfST3Pdt7uLS/93ApF63W7X/l0vbkWnT8mcSV7DWLEfGj70X8NPdy3Mb2ztpitVrZzOqzzdrGbGN758ZqbXGlslJZL5cX5hfmPrn5cfnMxvpebSwrffXpH3e/9fOkW1PZlc5xnKX20AuHcRKjEfGD8wg2ACPZeMYG3RFeSz4i3o6I99PnfzpG0q8mAHCZtVrT0ZrurAMAl10+zYHl8qUsFzAV+Xyp1M7hvROT+Wq90bx+r761vtzOlc1EIX9vtVqZy3KFM1HIJfX5tPy8Xj5SvxkRb0XEL8cn0nppqV5dHuR/fABgiF05sv7/d7y9/gMAl1xx0B0AAPrO+g8Aw8f6DwDDx/oPAMOnvf5PDLobAEAfef8PAMPH+g8AQ+WHt24lR2s/+/zr5fvbW2v1+zeWK421Um1rqbRU39wordTrK+ln9tSOe71qvb4x/1FsPZj59kajOdvY3rlTq2+tN++kn+t9p1JI79rtw8gAgF7eeu/JX3LJivzpRHpEx14OhYH2DDhv+UF3ABiYkUF3ABgYu33B8DrFe3zpAbgkumzR+4Jit18QarVarfPrEnDOrn1J/h+GVUf+308Bw5CR/4fhJf8Pw6vVyp10z/846Y0AwMUmxw/0+P7/29n5d9k3B36yfPSOx+fZKwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALjYDvb/LWV7gU9FPl8qRbwRETNRyN1brVbmIuLNiPjzeGE8qc8PuM8AwGnl/57L9v+6Nv3h1AtN7145LI5FxM9+fftXDxabzc0/RYzl/j1+cL35OLte7n/vAYDjHazT6bnjjfyzvYdLB0c/+/OP70ZEsR1/f28s9g/jj8Zoei5GISIm/5PL6m25jtzFaew+iogvdht/LqbSHEh759Oj8ZPYb/Q1fv6F+Pm0rX1O/i6+cAZ9gWHzJJl/Puv2/OXjanru/vwX0xnq9LL5L3mppf10Dnwe/2D+G+kx/109aYyP/vD9dmni5bZHEV8ejTiIvd8x/xzEz/WI/+EJ4//1K+++36ut9ZuIa9E9fmes2WZtY7axvXNjtba4UlmprJfLC/MLc5/c/Lg8m+aoZ3uvBv/89PqbvdqS8U/2iF88ZvxfP+H4f/v/uz/+2ivif/ODbvHz8c4r4idr4jdOGH9x8vfFXm1J/OUe4z/u63/9hPGf/m3npW3DAYDBaWzvrC1Wq5VNBYWLX0j+yV6AbnQtfKdfscaie9MvPmg/00eaWq3XitVrxjiLrBtwERw+9BHxv0F3BgAAAAAAAAAAAAAA6Kofv7E06DECAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABweX0eAAD//19xzyM=") 4m6.527257086s ago: executing program 3 (id=1643): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000c00)=ANY=[@ANYBLOB="611272000000000061134c0000000000bf20000000000000070000000f0000003d030100000000009500ffb1000000006926000000000000bf670000000000001500fdff0fff52e84407000009300000240600000ee60000bf050000000000001c63000000000000650700000200000007070000fbffffff1f75000000000000bf54000000000000070400000410f900bd430100000000009500000000000000050000000000000095000000000000001c15a3ce747c693a74b62fd0758b15f09429c09074bc4b2bd2dc480dd7a064b8673e2060162cc43bcba1060999eef9d60bb39d0af449deaa27ea949e8f9000d885deea2783835e29eba8546fc020c1966f8b5f32b095f566edf66b7751828da9dbd5b996b9e8d897e461c01c697671d100000000400036c17fb01dde179c1f2686ee970d6482a2e71a55d6ebe700b3be005e47ef55e0dd81244b18590e000000000000356d82e43407a6d7fa94b21002f06cd247b126b6349ab62d7b07ba0a71a72145edade9941f49f300a8c8913e0e4ea9e4c77740ab3312edee62a4dc2fc85755d387bfa1bc9b49da28724ba9cd79fbee8f97af876d0e30c19555ffdd7d73815b459f4763c6222175c974be2f76fb5f330b015a68587a75c013000000000000000000000003000000000000d6ddc46e58eff8f4fbadfc6a3af8123b7f42407107000cdc9d7820c4eb67cc0f8b5fe9258eeacb5776aebbab3d5c55020000006082778366dadfc36029633e0514cbcee1f3928970bde148c940434f33acd377cbad17673b2d30b6339255c98eba97efb4e9ac1f11be815dd6045592edcbee7f253ec74c7c1313505bd7ff8fd58b3a6569c91dbdef1df585aeaea7346a2a65caee5c85f9eddeeeee3c8a2e523c864ac430eb47cb4d0c8767b9d4125661b5a1a170c04b64da3a99ddb93bf14fae3ca2d1e882375b8dbac83978e136c34f90b33cc0eeb57debcfe26589efc08124d5d62a7e593c9738a50171adf051ea4f07e7e7e770c2016eeacbe8511afffffbea75759a1ea5404f5453c0b5c46c9700808c096cf8cf5223f341cb003841b5cd224c1b381d56afebe9f99a00e3cd94dc0bb7af9e8709db487cc4d9b3b96723d69d512ddd57b0dee9b9f6ae80a502cce352098603e75414c91fce6c86287945bd8d258442760000ff010000000000000000000000300807f2f3906c1d45d05ba9df828d35376fed399fa311ff63a34f0c0b82b4f2825e729eb9b7f4c9ab3be5bc011ff29904bbc424880247fabe7325a6e8d139e99d2b2fbf7e84fca3b21c78840b858ce900a4eb9c2b8b9b7fb664d2aeac991ca09b1afc0ef7aed4541a2f7275130a9fa3853481c81e919c000000000000000000000000b1e0e4b55e0d5d8c657b4853fc18ec43be33e5f971cceda04d95c87489910ce692ee55c536d1671bffd4c9b98efb741b13f0ab26ac191c74"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="b0781a3300000000", @ANYRES16=r1, @ANYBLOB="010026bd7000fbdbdf2514000000"], 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x800) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x76, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00'}, 0x10) sendmsg$TIPC_CMD_GET_MAX_PORTS(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x1c}, 0x1c}}, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r4 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r5, 0x4040ae79, &(0x7f00000000c0)={0x0, 0x0, 0x1, r6, 0x11}) r7 = eventfd(0x9) ioctl$KVM_IOEVENTFD(r5, 0x4040ae79, &(0x7f0000000100)={0x400, 0xdddd0000, 0x1, r7, 0x1}) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x389380a, 0x0) umount2(&(0x7f00000000c0)='./file0/file0\x00', 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000002000000e27f000001"], 0x48) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x89901) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r9 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000580), 0x42, 0x0) syz_usb_connect$uac1(0x2, 0xdc, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=r8, @ANYRES16=r9, @ANYRESHEX], 0x0) 4m2.983752855s ago: executing program 3 (id=1665): r0 = socket(0x80000000000000a, 0x2, 0x0) getsockopt$inet6_mreq(r0, 0x29, 0x1, 0x0, &(0x7f0000001400)) 4m2.380580473s ago: executing program 3 (id=1667): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYRESDEC=r0, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095", @ANYRES32=r1], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a40)={{}, &(0x7f0000000000), &(0x7f0000000a00)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x3d, &(0x7f0000000000)='cgroup\x00\x8d\f\xf3\xcd\xc6X$\x01n-Hg\x144-.\xe2\x053\xe2\xf4\xbf[\xe9\xdddU\x91\x9d,\t\x8d\xc3@\x86,\x7f\xe2Z\xe8L\x80\xdbe~c\xbc\x9b\xcf\x9b\x1cH\x95\xf3'}, 0x30) bpf$PROG_LOAD(0x5, 0x0, 0x0) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000005c0)=ANY=[@ANYRES32=r7, @ANYRES32=r8, @ANYBLOB="02000000020000"], 0x10) 4m2.255163415s ago: executing program 32 (id=1667): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYRESDEC=r0, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095", @ANYRES32=r1], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a40)={{}, &(0x7f0000000000), &(0x7f0000000a00)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x3d, &(0x7f0000000000)='cgroup\x00\x8d\f\xf3\xcd\xc6X$\x01n-Hg\x144-.\xe2\x053\xe2\xf4\xbf[\xe9\xdddU\x91\x9d,\t\x8d\xc3@\x86,\x7f\xe2Z\xe8L\x80\xdbe~c\xbc\x9b\xcf\x9b\x1cH\x95\xf3'}, 0x30) bpf$PROG_LOAD(0x5, 0x0, 0x0) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="180000000000000000000000000000006112000000000000950000000000000051fa7824c74186dc02ec0696c37b64e3b24da3180100000005165c0f63cdc2e82818254950ee03568b8809a1ff4c7c4750eabfafcb9531b31e6a86827d1010c5a909ab98e00e19644a88e95ba26d1c9eecddb2d11c541418ceeb29b9b6829c6e433822bdb3cc85244aab60c1aae1314d7381fcfeb970bea672cf1e926f6a51479343144648a07a975bd89dc398712376610f6254f12495b4658319684387f6f3543205d4bc4ce05b8b961103673dff7f158052e62b20f05fd24108d8363d44fcd0f8f3647899762a17282a1914452d11f557c28f396eebdc858558db0276d14f9035f2b5f703e5be7e4acf8b78c2834ae5805fffee38a9a0033d520bcf6b08ede50899d4b9bdf85c71c5de2503dab358f42a2624c7daa9ed44039aab46419496362e54cfad05a0004ac71a003d7b85d07191bed4e5a890826300214146f7ed569985439baa355c2766dd056f5d79e454f3d873095e7a237bc06d035a8d601f21746d886419f38b34a495040000000071c2f0cce8c93cc17e9afa314fcb2ba15d646c66b0f65021829f87d988b4e2d71753b1549fa734f0b2e56dbd21ed2e09d0cddad721971637f384eed3034597c93e1c52f42cad0ed09c395dc6e9703660fefa1c80f467367c006f25caf0cbcefd13d68839893e39c588eb032905f91cafa4996dbf0c9be9654db05fb918086cc8228d02a3092c0830b8f587a5624515298b2d4eb2bde6f9a2eb83d53f717f13fa7552d92c51dbd32ea50c490ecd085d2811a7555c538cffffff7f00000000dd872244bfa64779e0f43a9c277e2910b7ccdc3d6726d34ad2101033a623ca2a49ad344884289130bc71cee2b7de62bf48129ae1af052a2d46a61625735a9eea7f793946b3229e861d8ea49806b3f7d4295f6b000000000000f337b1ceb2d8a65dcdcd895d7ba37098d2593fdaaef445af5bee02019c00000099b13ecda2a5b37de0519e974cba92ebaf0f701611a9b027ce04340bda4594cc9049c3f101629ab028145e004209ebe71a6fe84af50804000000000000004a27213354964e250a98fe357676f94b6947383e320fbb1118f586d5b9b1b977e1e1a4490ff67703a9b5900f8a6f8a805879dd91ec5ff435b219c53680c0ae04dcc4ef69b98fcb0d6b6a03a8b71a66b4e2876dc4b610444bf10000000000b046b6ae5d68156bcbd6d8793ade9a22ac8fc7857e5bbc14adc4e12b08f350c6789283b9990c72e64372a1f79769a8bdc632fc1a0b3417855d8b7d25ca4d404c23631ad3d2f55dcd385371c86170a4bca58c2b2b4eabc365f45bd10bb45b0c5bc354456a52be18d9b44014d20a3c51c8f013dade83562e73278662829e4f5a9ac00fd91178468c737f0872d97d38d11a176be5a0d7294c51eb161eddcfefa8837c7430721851ec2a107af0df6d43e732bbc01e76c66895eb85d36798d61622773591ee21ad9f6a1b73fa9cf3ffeb8a00b63af800a81d0fb8aa29df8b8ad6fbafefb5802a23cbdeeabceda5bfc5ff2fa5c1d61d04a1324794c6ed000696d9f04010c35474e690545c3d9bd836d4cef2585ba616e01c3d000000000000000000470ebc6f3453ecbf3047e4547d7632d3ad21798e730cb5d1da059b5bdb8107815dff995c0788906790406dfb4f8ee9f24ff94233e2e6e581e6e5de33a5f254c9a8b612547473c3001df3928dac9203b744619082421a8da7c00000000000000000000000000000018a73ef40cca690fb7595c6962984f8276677be6f66cbdbccf1896433808c9c84d74ac4a7c186a04a2250972f7acb156b21f9826b6acb7db32c4e3b3ec8b59fd972975edb1da872d81a35e4fda2f5cbde6b40bea20418c6e9dad30b791eea58f53e80fee4dd7fe08373ea2784fcd3a65261de71eb866458d2c22a"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000005c0)=ANY=[@ANYRES32=r7, @ANYRES32=r8, @ANYBLOB="02000000020000"], 0x10) 10.012362002s ago: executing program 1 (id=2473): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x92) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) link(&(0x7f0000000200)='./file1\x00', &(0x7f0000000300)='./bus\x00') r5 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) fsmount(r5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x0, 0x0, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@minixdf}]}, 0x1, 0x503, &(0x7f0000000fc0)="$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") 9.953036403s ago: executing program 2 (id=2474): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x92) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) link(&(0x7f0000000200)='./file1\x00', &(0x7f0000000300)='./bus\x00') r6 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) fsmount(r6, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x0, 0x0, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@minixdf}]}, 0x1, 0x503, &(0x7f0000000fc0)="$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") 8.920319207s ago: executing program 4 (id=2476): r0 = socket$can_raw(0x1d, 0x3, 0x1) fcntl$setpipe(r0, 0x407, 0x7) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) mkdir(&(0x7f0000000040)='./file1\x00', 0x1e) mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) mkdir(0x0, 0x0) mount$overlay(0x0, &(0x7f0000000280)='./bus\x00', &(0x7f0000000080), 0x2000000, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r4 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0, 0x0) mknodat(r4, &(0x7f00000000c0)='./file1\x00', 0x0, 0x0) chdir(&(0x7f0000000140)='./bus\x00') linkat(r4, &(0x7f0000000100)='./file1\x00', r4, &(0x7f0000000240)='./file0\x00', 0x0) unlink(&(0x7f0000000180)='./file1\x00') r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) renameat2(r5, &(0x7f00000001c0)='./file0\x00', r5, &(0x7f0000000340)='./file1\x00', 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b0000000500000008040000cd00000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r6], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r7}, 0x10) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@quota}]}, 0x1, 0x4fa, &(0x7f0000000ac0)="$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") open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x88882, 0x0) 8.888454408s ago: executing program 2 (id=2477): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0xc, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r4}, 0x18) mkdir(0x0, 0x21) r5 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r5, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) listen(r5, 0x1) r6 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r6, &(0x7f00000002c0)={&(0x7f0000000080)=@nameseq={0x1e, 0x2, 0x0, {0x41}}, 0x10, 0x0}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) close(r6) accept4(r5, 0x0, 0x0, 0x400000000000000) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x52) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_deliver\x00', r7}, 0x10) setsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, &(0x7f0000000300)=0x23, 0x4) 8.604314921s ago: executing program 1 (id=2481): r0 = socket$can_raw(0x1d, 0x3, 0x1) fcntl$setpipe(r0, 0x407, 0x7) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) mkdir(&(0x7f0000000040)='./file1\x00', 0x1e) mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, 0x0, &(0x7f0000000080), 0x2000000, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r4 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0, 0x0) mknodat(r4, &(0x7f00000000c0)='./file1\x00', 0x0, 0x0) chdir(&(0x7f0000000140)='./bus\x00') linkat(r4, &(0x7f0000000100)='./file1\x00', r4, &(0x7f0000000240)='./file0\x00', 0x0) unlink(&(0x7f0000000180)='./file1\x00') r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) renameat2(r5, &(0x7f00000001c0)='./file0\x00', r5, &(0x7f0000000340)='./file1\x00', 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b0000000500000008040000cd00000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r6], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r7}, 0x10) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@quota}]}, 0x1, 0x4fa, &(0x7f0000000ac0)="$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") open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x88882, 0x0) 7.148707901s ago: executing program 0 (id=2482): bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r3}, 0x18) mkdir(0x0, 0x21) bind$tipc(0xffffffffffffffff, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) listen(0xffffffffffffffff, 0x1) r4 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r4, &(0x7f00000002c0)={&(0x7f0000000080)=@nameseq={0x1e, 0x2, 0x0, {0x41}}, 0x10, 0x0}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) close(r4) 6.828185966s ago: executing program 5 (id=2484): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f00000001c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10) r1 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) fcntl$setlease(r1, 0x400, 0x0) fcntl$setlease(r1, 0x400, 0x2) 5.923449959s ago: executing program 4 (id=2485): r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f1, &(0x7f0000000340)={'sit0\x00', &(0x7f00000001c0)=@ethtool_cmd={0x3a, 0x5, 0x0, 0x0, 0xa, 0x0, 0x3, 0xfc, 0x3, 0xfc, 0x80, 0x1, 0x0, 0xff, 0x0, 0x1045, [0xfffffffb]}}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x8, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) socket$inet6_udp(0xa, 0x2, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x4800, 0x0) 5.915359319s ago: executing program 2 (id=2486): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r1 = syz_clone(0x0, 0x0, 0xfffffffffffffead, 0x0, 0x0, 0x0) r2 = syz_pidfd_open(r1, 0x0) process_mrelease(r2, 0x700000000000000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00'}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYRES32], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[@ANYRESHEX=r0], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) timer_gettime(0x0, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000500)=@generic={&(0x7f00000004c0)='./file0\x00'}, 0x18) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$unix(0x1, 0x1, 0x0) ioctl$sock_bt_hci(r7, 0x400448cc, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) 4.889439393s ago: executing program 5 (id=2487): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b0000000700000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYRESDEC=r0, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095", @ANYRES32=r1], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="01000000040000000800000008"], 0x50) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a40)={{r5}, &(0x7f0000000000), &(0x7f0000000a00)=r6}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r7}, 0x10) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) sendmsg$TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, 0x0, 0xc4b7bac946ebace2) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) 4.888609533s ago: executing program 2 (id=2488): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00'}) syz_mount_image$f2fs(&(0x7f0000000780), &(0x7f0000000000)='./file0\x00', 0x2008410, &(0x7f0000000140)=ANY=[], 0xfd, 0x559b, &(0x7f0000005d40)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x44, 0x86}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x9}, 0x0) setuid(0x0) getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) io_setup(0xa, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x28af, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='sched_switch\x00', r6}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000000)={'veth0_vlan\x00', @remote}) 4.586147557s ago: executing program 0 (id=2489): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) chdir(&(0x7f0000000540)='./cgroup\x00') r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x3, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10) mknod(&(0x7f0000000080)='./bus\x00', 0x40, 0xf) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syz_open_dev$usbmon(&(0x7f0000000000), 0x8, 0x240) 3.846386927s ago: executing program 1 (id=2490): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$key(0xf, 0x3, 0x2) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100001f00702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) sendmsg$key(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="020900000700000000000000000000000500"], 0x38}}, 0x0) 3.845519437s ago: executing program 0 (id=2491): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r1, r0) setsockopt$sock_attach_bpf(r0, 0x1, 0x21, &(0x7f0000000040), 0x4) sendmmsg(r0, &(0x7f0000010c80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{&(0x7f00000005c0)=@sco={0x1f, @none}, 0x80, &(0x7f0000004b40)=[{&(0x7f0000002600)="9331f5ce96e4072c2af15275258a6bd5fa574ebd97f0d56baafde6f40f30f063597c4dd28dbe030cfbcae99620a70d5b8a8c5accb7b4d09b2c9cc39cf59257ee49fc2fae9f229a171b30a3631c0188375ff666c9c4bcd2e466f550365acb9d7d228199af7ec0c5a23127fd9bd717d1485b08d75abab824510e23274d215a335be350ed5a23cf75f84811a730913c2bc680", 0x91}, {&(0x7f0000002880)="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", 0x1000}, {&(0x7f0000003880)="c1b8495653b0964c290ebd4e80d9c31059be7c36a3afda7eabf4ff1a5cd6719f0e297e045db82a031ec98e359f17742498763cb428777111ff5951070a2b762afd04ae2329c68c7faa17eb6d316169efce17928718d8402f26a191dc8f97cf137c35aa0af6743761a36facb069992dd55c89f140b1f328f1e3dde65c8c2d68d25d9b6e10e07a9c73a8bf7ba5743004b6dcc80fe987f613bc84b8e32e28f09d88e9c2e69d45d270636fd79d771933cc1f59d210674c4c366a25a75dc2", 0xbc}, {&(0x7f0000003940)="ecd2e789de8c34803f97e1e2dd9ffec51507241f43f5d920e81861778ee1835819f211b0f13753ddcda9dcdeadcb7b993039bd98d41e4814026e9fffb99af82765d2ab774c0981b2ea934e34ee4bc0327ea8669044c35b89642c7898e42b8f281c2da69ca167c1e45e1b249846556af9e5cd43b8f543de8919dae3df0f74c69e882c5c79de4b239b4cdf8218831cd042e1c369940dfbd3a25fc5fe255336f70a2ca15818249dc16625a2d3ac1e013ad034f95de5eb585774ad3de785c029926e148050a27fb80c4b280746dd95c3646ab3b33464e7a6bb9093c338b866dd5b2118670de64a7069eb30004a1d524d4e474f97b0e5dbc1baf8005a667315cd614d024d02806d20cfcde88d3e226e88d98523bf4b7b7c3279989b71f64fd5713f2c1f9241f3ca9ca426ae5446268b5e30280dbf115af847e3f08ed3bf2db81da2d7704e762fb82a968132b1793209c08963033e4a468ed16dab2414d3f85e2c109f31da3228ec079f7ae6e08145dcbd90123092028e94e71ae8d3b43c0d64ac521f16d441418bf20bc6ff67ceb9d9abfe5ec4ac2102227c5e67c5204632b3b3768c039a0dc0e7bd9120cc6e834ca62df90863ea1e8fbcd3783f1219a1ee08f572d9de5d786142a3825b9376cb1c24d89eb7078bbc04cbf72a1e4b81594de8c0398f67b862578ead333b3babaea5eac7464bef2ffa95ff23b09912d19226ade91d61c38441bbdc50f91b9b6f0617dcaffa37a98b3f43326048c1b1c5739bae9cf1ace3be2d5b5bf7ceed405bec9bc30575f608e8a12b7bc0af61aa6738754f7bfcb912d0a5af9fcbb8475f65703747ece9c230435fdd7c056100a7d90e3c4624b17535ebc828d3c252ad4205f6b1985cf126a755fa761dc5278892485710265f15a9054243f3c6e7c4e892b092e9d9e0468259d36d1660d4070e349f678753d2d264306f236e0ba42f48fa1355347d73e6f4356a2a51834347f54d44066778355516350986bff77db7d75b36b2e84373ef58a721166ea5212d9c357756da91eb7726e363049b50ef9277fdcd9add6ab8031b52d14c6f526150920039d102dbe1d272ed48481f32c089d53be67db128e7ba515b216a2c1334c5a75882f4c7416f1e0eb7fa2ebefb3eac71c8f7a3095e1206a56018231502178762b0791453791f268e5e16ceeb9be4acdf61f4858ac39dc34b50c2b5817059c3b8a1c6d98604a939ec1033c3ccfe4cd3498de6fb7dc520aad4348166455a4c5bee1e3855cb22d78911b8e949c412c1ebd6dcd96fe26e57872269179d3c3baad753bc52de4b077cb7b6d1cf032641f75539c0aed17048dc36d6a37bb6b240794f535dce0cb3618d1318ce6792165923be2ed6cf89e224084886a838981ba712668b8b974417959693052de863a160b0e72c04043030858f4a3bd305652617ae56589744004e91e04507b65f91342de4821d0083867730d5e9355d0bd804f2ab009ceeddd586a79ac098aed382add0968f581d249f19a0df27259974fefab6265df7f321458cc998a26e5ec26fb1c33552c30e5f1ffe1bc06b16bd58abce0e4c7dbfb1f41b3274e0fe87cf917e91d16a755e28a8ddb636ffe0e3774f76f52d460d840f0181a919b6cc8e9362ddc23c29399c490ad419d198ce92fa5915c485c222953d144ebe5e6a109af20fc63c07f3f137b82d892537f03fe8fa30ad7f2ca3f7fd12ceeb1895f9526cc16ba3897592269159537fa41053b3bb6ec9ddb0db81ab51762ddfb0413ab24dc9ec2c5e026cfaf93c1e811ef7db19ecd99affc47667bf1ccb6b8b830258f47aabf77471cb47f7516bed787dc277d57a71e1b1147875dacf6107ebfead86ec1e3fe3cbcf82aa825bd2a1c619fa97f267bac44127cefd32c5cf74ff310517060a899e0f4ee9489d5bc58effaf44cdb4f43fab31c21313c753fcdf62fadfed33585e0577de8e9821b9a62fa6431a2e3259a83abe91c69611cde11c701e25540e98dda60e7234d9b8d67cb20ae0bc205c2ca6b777dfdac38cea155d5d4d39f8262da8c945b0a932a28489c29e125b21b5605ca8913796cbab93fe91b48ecf70dc4f1bbdfdabcbffed85e30d4cb03840ce87ed28b0fed6d08044caae1fa27c9a646ca4b78df071c757872be5104d08c95c1c6566286708dabfb74c1b69889aaf92eabcdcc140bbcca17fca9ddcd360382e97f662a9b4ea1a9a541f78a0d90bd590a3e104f80a3837a3b09eebe91007f50c9457d8ff72e1e9360df317b85baf8d9c1f501e66a2d8b52937c900a484c14f53d910efc527fc40a0349fc5dc90908ad46a54d1e05fa79631c8d6825693d0c822906436096a898e3410977bb54edddac7e12d2ae78e2755ef2ff2813611fe4c7aa80cdba1c49891d1abf7c23fd4795e8fbaee16693a152c869a49345b790da40ee485549754fd27f25379a4f512f25aa885f2db3962a20b2ad33cdc48ea8eaf53549e92b32af2d884fc8665b7666704ce62e9caebec280f6dc94f9ec8f03a4a2c5fc6b97b13b2945c959b7aa36eb818634f2b2ca3305afa1178e4d540a079d9978c1b695bede3b3c9b34eb5b571cdb2a5f0039aec1e4711acf4a79f1cb02cbf91fe6cbfb4d48be3891ade7e9c2b4aba43d681833601dedce2732c7536af37c97a75ba4fe2dd0a97d1f5a25584a6ddb5caffd18560906ef3910c2218439f076504454b05e558d4816692cfc2810319bce762742f068c150cea07b15e94afe5d04281a66f51b58b5a1bbfa3f1b23b29055704461c2a8a0c35ed963af67183a12e53cf6520d97d4edc7f8379ac2f3b6640fd6de9fd3226ed1ee098821fe70f4124b450bfb06cfff9b3d90cf0acfb6d3f9c4730fbac04e703aaae01af90457487c330751961aac5b0b4f98227adeb01e86177d5280b6a25465519e5583a8cff8f6e79c0f7bc643afb068d100a98640f115628b349181427ecd038acc19a65edb29b3a9219b399c2efc85676a3c741994b912b35b5faaf269be36bb4ffeecca4f5a7d6a93caaea3fdc9e932e8e95fdd05ec9b336527b909da9ab169c937e29e4df0c4dc0627a394baa0948b084c2f14f759809e64a44101e907831047eb9d288f926513e3a73a2e8754c1add1f69b9443d81ef93a00c122a6ab591e4bf4775738a7ddf68f30b4327caad6a8c5c1787020e7598a8a0457f80137fa55605cf3f000489d061a4f368bcb5222e7813386dc5ea0805e17ba73f9355e8e2cb8d26bef9baba44540c9c709c79d456a6c3ee64bfd3167d1f8b839bbff1374e43b78226f9a5f745fd2abf60674c38a892894d4d7f5938f46c9b311f064526dac9ec5283f2bf64abc745fc42060071cdbe117901cdf280fe235d04a0c1d25c91a5146bb77ce478f0f1ef310e62baf778072ea35d84bd59f602d5e0da453aee167804cf3677aaf655cf9fae687450735f655149f0f69784fc505a4e99815c57feef50a1731e0f069676a5fe189c0219920f831ae41d433dfcd3c2717481c457bf46525619f10db7f7a9e282ea1cc13caa333943ee5329557db0ed539bb21b5bba8ca4a0b68e6812bbe4ad869e54017912741987d358bdeceb4491aa807ec89f2ae0d6a8e852952d8aab51cd5ccaee71a885bc4062e8fe12be8a7036277dd2666b909d357205ed27e5e33f6400ea9c71bac7f0e7bd8d39a2642ffb5de64e862dd12bb2715d8ea30d89b41d083119b91f32cb76e7bfc38e0795a77349e446b0af727d4f57ed889023f5178407c95175ccdfb953006ca0dd5b4d19fd595655b7d3dcd142bba2ecf3371aeebf391ad64cc7fe201169df47ced3a99fe7b4d55545891f2100b737a292d1171504f3118849b2cda1b7913abeb03a3b4c715525b37f6ece92fe4fbedac419e6397dadb0501f58864ddb502778bac1ee4925732093c8d8d83eb26228ce5f7615df2a279f46bc630c3f4f96f02b2671f90528bea42ecc327e912deb0fcd7f0f2a25b83492f5cae37c4a4a90ec25d485c02ab863f7c77f7f5567cd32b4ed65dd7ab296b45df12b3df3c8a82437807b86cf8628bfe4136a41c8c0972fe8c2160a04082364199b70b5a5e5641f364897a9ef045b5c9b87029beac0f234e17a7dd35ba144e4e65e1b0755366bb316c19e0e42819a20c6bb88c40f963b7af91298235978d85ec1a38d6066661f8f3afc25e7a3b620df3f60fd2790ea72955b9eab7a9aee9c2abad5c61247319a0185292390f57419a4b4e4e5db58e20d6e0d1e36a12c2b7d80b7dfaaf875fd355bd37c33bb1cbb1958f3ea3e36d08b1c11c8d16f10908ef88de77106283d2a87a259c0535cc76f2ec4a8fb9dba535ce0c2b5ff31bde89f04415aa7485f4201ab1208530a7be2ed962cb5574d8929cfa06481f9ddcc2ea3ada280b8032ab38fabbc85dd42e28e68063267784de5ca97695eb39f93366b7d0cc714e58d7db6e1476b88a5ae014f95b3a3e2e23a9b957b8d4c72cc75225540d1b72689f8aa21a700541cdf8c3c5eccd86b61b9c48798f36bdeb904e884f182e59b0b622d438c007ef90732b4fc5355d5beac48d05e8b18d87c1ede09ae9cc0be51f8f87f2ff207d23258eaa541210e3881706b84398f9789888a154c19a8797ce3f52ab0c494abe2790feb7a84ba2a85d4d56fb387c9b7b8d848c7b34daadbf4342e3fb23d56e2f5fc5996a518af7842cde22cfa26493de2be45eb926b71cb63404cf1ae6b5c0aee1a8166396d0959f429f4da1517f140506aeccd6cf0b55f9a477dd5b0d4d70420c7dc3bbacb165316cd364991dc6965f2d48ae55457c2b88fa57824dc5a24192e5989da118d3b943bb1f6e0180b0ee4cd573807b4d92607ca4699acc5b7e6e00b79714751354c0ea4c87fa6094e12efd9b54282bd07eef481365d8cf6b84f4018a25e348ab80a1a42caae75a4f604242f66bb1e3db90577baef591dfd7544f0380fc5b587f8b3f81c5ad9fa946aefe43bb3acd6be01e265f21fdf8c73da70fb4ba04928248f9a429a429e7eefc05bcf26db8ba70fd4fc9388467762cf19eee947f2d46daf5603caba34942b664327c977509a05113f074ca3fda3a93f4258e33f67e8687c87df8b70172431cc064d6979fc39b807669887d9ac089ed38a14269b24e6208989acceb78d32bc0b815ff416e8994b4c4b590ee1fd3e3d71ce07f0084c94de411bc7f07c37a016de2fb705dce358bb97f92c3fd596583f3f5b0db9f6d6ab438397c6bd347f9de636ef8686448d734e1380d8fab1248182d1bcddbdab5f9284644b6ff427e9afab72c14fb89ecc42f26bf63517e256b03bf25ad84c8fb80c691f8c4fb81b9cd294b993f1d13caadb3ad8dd3984af43e4d1a4b611f039589339121ccebbd154d8a4130bcedbda04a432ad161280dda5a5ccc27bc0d9c92d0e40a46229d152358e48c15b31c66666d0de1b4b17c21cb22c145b594afafbcf3b4046334e40cd146828e3cfd9e16cc97d358124015c6f6642d4f660b22fe389e7b33cc2901d5bae1bbc269c42cdffe3ec996d3364a103e6cde4f9626354f06f7f3e64fbc39cdcc32a3864ba0ceaaf4d382749b3e72a31c9294f813b39a51f5e499228a1532169c9716d56319b5d24e3a3183438f76104b2554eba0df3a74e21c82e1a29d4efc7e86e125f3a22d0913644e7dc2704ff9a9f0d8b0697da7d1228a6537fa68a71c8d837c847013fa5a4c8c0c142469319feb449984b9f73fd4badf12c6f24ecdd4d2eeaed1fb6a5eba67bda514101114ff12fe1cf5c624be77e38392feab831544a8c1a4ac2c69ff040844b4bf9a9dae3c1ac528cbe054b69d52b1c58d7cf4334", 0x1000}, {&(0x7f0000004940)="c17e4b3d86ada8a6f9422999405faca0dc0353cb2481b6f2a1c51b679b9f0ee531945130d80b6f30f78739561964d311ebd614868abfd4519bf071fd1fd597123427212bdba58a75907e6c4766997f6d697abc9e4c5198b5b4ae293f584255fbf555cea5b2a1581651f8c0282cce716844f76b5837820a032ca1e007afee366e60cf1a010a8fe86c14797337b5ec0526dfe1672b2a1c26148602a31881363bb6ecbabd9cb7616ae33e4dace660", 0xad}, {&(0x7f0000000400)="772354bb367b4f0c44580903c7989c9b7f87d225b88abe", 0x17}, {&(0x7f0000004a00)="481e9e02cfb1bca9fd74514b38003f9db0f63838a0da5390ab1beab3c02ba42520cf13abfac80da59a122fa84cee6bd84862f58093400b1fafd78714b165f4361053f37700c65278903c77de41e2b91610e46a953850b3e7d22ea52926e9a0b8d79b454044daa7ad552bf9061ab0d55ab10ba84ef31bd34608daecf090b26de707341ad102ab6d8d721b27aae1cbbbc4ccac157a02a85139549e0a15cfcd36d9b085aebe8429f25608fe883b89", 0xad}, {&(0x7f00000026c0)="89de83dbe92e8ee13a38571b6ea3716005810b", 0x13}, {&(0x7f0000002700)="68c3326ff17a0f26d1103c0f1379173e8a99ee51db77554d5e39ea", 0x1b}, {&(0x7f0000004ac0)="608a3827f463bc15abfc0cdfa0ce4f29798d6ea8bfb2df191f67407c4f6a0879edea568c7b7974d953ec162e8137e68670e211f6cccd06888f1fdc67a1b090d8462ce0eb6b292d135a14ab", 0x4b}], 0xa, &(0x7f0000004c00)=[{0x20, 0x88, 0x0, "31b26b6160a9c92b8caa93ad23"}, {0x78, 0x1, 0x7, "ede5091d7be2f3b99223ba2760d6997607ac1633b9adde6256d358e92ce6d25b8f9c6d4c456b7e5265aa7f3495cc55a07fdad99172b0170ce88a3c2a3b500f7fc32ab9cbf8c9d051db0de55d0d0cc11adeaba4047920c008719252414c24bca4b6be"}, {0x58, 0x10c, 0xd, "57edd404a267c4f82c6c0a93e35e2456a2a8f0428aef0d157cef9fa43d58a3a993e781b947373aa3742d09fc877942109e4755df06cca605152bfcf5cd08cd9cc192"}, {0x98, 0x107, 0x400, "fe593fe84eb9708e85085c4568668a663624ecac50c37822f6ea2c9d1622807f23e7cc8e32e69e87238b98f799615832109ab80359e664ca1abb0604ad653bb633fafc4449b25ed04b37e1310b8b1d38c1f171d41e97e37d6fc61af3f92fd4b15f997674ca9858321e6d6d09067cf428fcd7e09a693436807ceeb76dbe3df3e129165f96"}], 0x188}}, {{&(0x7f0000004dc0)=@caif=@dgm={0x25, 0x7, 0x82}, 0x80, &(0x7f0000004f40)=[{&(0x7f0000004e40)="42d70ab20af11ecac7a24412cec67ed3a9a246a9a8296aee868c69964b63146f80e723a842da459612f03673c11b0c7d53b488ded9f19b1778f6594e167db4a616b8f748ab6471ea6e1dac3b38ba0ee54250734163e3ac0d270195c839ace80555e28e217e107eab8ba985f0209fc0125712a48d8fac0ea38f94155a5112ece080ff17831779a29a79b03b2b37e9b1cafe6e3f7afb4f0c4ec86f4756c659da014338369503790226813a13457101a616a934db6d452ab5a5beace8e79ad62dd845248bce483a0d541e476253e51563b184f7563acf60d1844238dfa354b504826031c882b5522c86c0e8b9a3aa781976387457c49f", 0xf5}], 0x1, &(0x7f0000004f80)=[{0x68, 0x101, 0xa21, "1942893141153ebbda5936d735909cd5c5197ea061184cbfe5f9378087049c7d011296d459e8f833b9b059daff3a8952c10fdb636791b64d9aad7e2e6ac17169151cd66887751c79cf48ad6fe609d25690"}, {0x98, 0x6, 0x1, "050358e4d4b624f831e4a54b877d33c90f4c4f0fb50a7a21eee3965af4c306840a837eae20720b33fa323c059ddb01faf5fcefb72855d245430d97bde47e21ec6d729b497683c84f5e67b69d36cd2681065864338ad081cfc243ccd1cb4b019d4c9252287666aeb4fefe9537a00b64b3e1a16af434d2a044780af4b2165e375a9bb0946c5d50df"}], 0x100}}, {{0x0, 0x0, &(0x7f00000053c0)=[{&(0x7f0000005080)="f33d270ef82861e40d843d2078eb138a0f4233323e78052ada26dc4f3e17293d81277f6eb68098cc6e51037ba21534d69f58c9fdf2298acca976791817d6e3e5181717a5ee910b18722a0f6db4f4522d6a3a2c48926cf8c745a238f1c2fe3d55d74cc60590e7c19004a53b8ab95d475834c48a847a9914c4745a89213c42075165af68294cac010e3e", 0x89}, {&(0x7f0000005140)="9b7bf1af9becb3b033f591eafba18c1124575775014159399262579fbc8a832a53815383528117b3ec459b1b993f4063ef48cf78f264643ce0b4ff2c2390f050f42fef491ed27b64957ae243087c0d784733ed708b5d59aff01fe1d5850a3e491458e6498dece5b3f925826dd76c1af4b4352c9cc82936c8db2b90bc6a9ea864b2648d6b64", 0x85}, {&(0x7f0000005200)="448d2cdbe633067834be5d143126ec680dacbe2fe07fe5893825b2006b596ca3fa85c8d2d9c26f4bddf5fb493a50dcc0542df8ea9e2eb9b1f7ba2b98e99b77496d70465d45f8ebf727589fca46e172a0a0570b68719ae40bd14e2095890e2015", 0x60}, {&(0x7f0000005280)="dad28ed67ca0f71921b26a9cc014176ed9ddf3fbeb398901ec4a9d30f02ee82a0321d578046e94afaa5ff5c6b2eabd4752f9d604f4a3dba4", 0x38}, {&(0x7f00000052c0)="6fc4fa04cb6dbc92f20ba070fa22cbfff1febdbf9b2cdd1837709c7a30ac377a696795c588b5511cc2d5f640b66c7ce7e2c8b3a52fecbe296bf00fa227b0770f67dc2e9e4054e0b80471861af6c24a87e1e2a2b14dd73f1daf278c711aaabeb496a86425a21385b9fd0f1a4f9a5a91e6fadac47818fc5cb5f549450689a816", 0x7f}, {&(0x7f0000005340)="ba352324de957ee31e6fc6be651e3b0e0eeeba9a731e3b7a40900c5a8195ec8d55c08a49ca9399c87808441ed611a97072cf5454e2831964e23ae2ae0d7a13b119a581e68e4dea2223fb8ba2bc087cd6962a9ea72cd6097992d4ceb87a7c688ee99fe31850570b12c11d6e190462421e8239019c2e30432df8c0c119e58b", 0x7e}], 0x6, &(0x7f0000005440)=[{0x50, 0x3a, 0xe, "e98400abbc95d012f71dab69e7c92ee656836c97d1830f86663973b2a4cb965ca0a3b51497d3c759fca25d50e7ef5258309715bd458f2b8d4b3b90476718"}, {0xf8, 0x0, 0x4, "57f2d99d4844623ace273dcde7167f819f705be90d0f22f1775c6352c6a3760af13e0999b92d0c4a9054a7bc20796a2e3d7d327715066f7e629e9b0aa82f1cde933b05b953aa4ad13434905b91078d12efb06c2cd483b75dc8b8e57df5e772f74b2d0573a8125772eefe9eab3b87e8fb4e23404f13d4f9e2215dd7d4626573d72248d6fbf7fc29ac765b5ffd786a9c21e66e8d1d0909563dbcbbe28982460a0802cdecb658b47bacb08fc897479519276b85978b08fa582cddaf2b4bf527d93d99151476ba895eff16d1e497685ee973bda383097c998317988306aa6103825173fc"}, {0xb0, 0x29, 0x7, "f49dd20111f2ff924f471fe282d204978901923fdf6bec593ba8619544ff0bf3fa8fd16f82c8ecfb69483560f78ec269aa004df01e1aa00820877889863de518a3e3664b0032f57515a00fd4fe3584947a4ae45a3ddfa4e3ee246e4cac01dff0eb61338d64ad32c704da8c2c74e581679bafb7b49f61cb17eb891a60c2ed5af902afe582119bc860048f0d313766169b07f17c314154ace965e247"}, {0x70, 0x1, 0xf952, "163738bb6415f97096a51761777be89e9ef5e3927c462b5415e0d2800b110a8c6a5eec1e80e41c7acaaf7e0aa5684698820d0945823111d94311fc6094a1b633c206359641708bc33e67620591723c83f801110137671efbb80e9513906bce94"}, {0x110, 0x114, 0xbe, "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"}, {0x38, 0x111, 0x1000, "273bdba3e771e34d4b85915cbc13d00662272db04cb966f9636e473756f2f72544332598fc"}, {0x78, 0x118, 0x101, "25fe7373d47362adbd5653fb6af151fdccdcb9054a45a196b69c7a708fed28baf797db4eb1b40565df8ffe33763655b36897273a6ba0bec6536c3ab5c241c70ce9161c5d69cc0b4f70c4036b619e9601cea23ee30303c4ba09b69149219de6d8d20b739c"}], 0x428}}, {{&(0x7f00000058c0)=@xdp={0x2c, 0x4, 0x0, 0x6}, 0x80, &(0x7f0000006940)=[{&(0x7f0000005940)="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", 0x400}], 0x1}}], 0x9, 0x200000d1) 3.759543648s ago: executing program 0 (id=2492): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000600)='sys_enter\x00'}, 0x18) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYRESOCT=r0, @ANYRESOCT, @ANYRESDEC=r1], 0x18}, 0x4040801) sendmsg$unix(r0, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) 3.738399598s ago: executing program 0 (id=2493): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYRES32=r0, @ANYRESDEC=r0], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000280)={{r1}, &(0x7f0000000080), &(0x7f00000006c0)='%-010d \x00'}, 0x20) syz_emit_ethernet(0x2e, &(0x7f00000000c0)={@link_local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x67, 0x0, 0x0, 0x11, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast=0xe0000001}, {0x0, 0xe21, 0xc, 0x0, @gue={{0x1, 0x1, 0x0, 0x2, 0x0, @void}}}}}}}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x6469c2, 0x0) close(r3) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x331, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x80, 0x0, [{{0x9, 0x4, 0x0, 0x2, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x4f8}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x4}}}}}]}}]}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2c, &(0x7f0000000000)='/proc/sys/\x00et/\x00\x00v4\x00\x00s/\x92ync_\x00le\xf44\x8cm\xa0\x8dN\xd4\xa2\x88\x00\xd1l,'}, 0xff0a) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) setxattr$incfs_metadata(&(0x7f0000000800)='./cgroup\x00', &(0x7f0000000840), 0x0, 0x0, 0x1) prctl$PR_SET_NAME(0xf, &(0x7f0000000180)='wg1\x00') r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001600)=ANY=[], &(0x7f00000014c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x16, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x10, 0x3, @void, @value}, 0x94) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00', r6}, 0x18) removexattr(&(0x7f0000000200)='./cgroup\x00', &(0x7f0000000240)=@known='user.incfs.metadata\x00') r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r7) r8 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x82000, 0x23) getdents64(r8, &(0x7f0000000080)=""/4096, 0x1000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r5}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) syz_usb_control_io$hid(r4, &(0x7f0000000340)={0x24, 0x0, 0x0, 0x0, 0x0}, 0x0) eventfd(0x2) 3.730793338s ago: executing program 1 (id=2494): socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) syz_emit_ethernet(0x2a, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_TRIM(r3, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x10, 0x3f6, 0x2, 0x70bd26, 0x25dfdbfc, "", ["", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x20008840}, 0x2000c080) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r4, 0x89f1, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000040)={'syztnl0\x00', 0x0, 0x0, 0x80, 0x3, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x66, 0x2, 0x0, 0x4, 0x0, @loopback, @rand_addr=0x64010102}}}}) ioctl$SNDRV_TIMER_IOCTL_GINFO(0xffffffffffffffff, 0xc0f85403, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_attach_bpf(r6, 0x1, 0x44, &(0x7f0000009000), 0x4) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r5, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r8}, 0x10) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r9, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x670, 0x0, 0x2e0, 0x428, 0x2e0, 0x2e0, 0x5a0, 0x5a0, 0x5a0, 0x5a0, 0x5a0, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x5}}}, {{@ipv6={@mcast1, @local, [], [], 'macvtap0\x00', 'ip6tnl0\x00', {}, {}, 0x6}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@broadcast}}}, {{@ipv6={@mcast2, @loopback, [], [], 'veth0_to_team\x00', 'syzkaller0\x00', {}, {0xff}}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@unspec=@connmark={{0x30}}, @common=@inet=@socket1={{0x28, 'socket\x00', 0x3}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x1}}}, {{@uncond, 0x0, 0x120, 0x148, 0x0, {}, [@common=@frag={{0x30}}, @common=@hbh={{0x48}, {0x0, 0x0, 0x0, [0x4]}}]}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0x138, 0x178, 0x0, {}, [@common=@dst={{0x48}}, @common=@dst={{0x48}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@dev}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6d0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 3.171914536s ago: executing program 4 (id=2495): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000004c0)={&(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0}, 0x68) r0 = socket$key(0xf, 0x3, 0x2) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100001f00702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) sendmsg$key(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="020900000700000000000000000000000500"], 0x38}}, 0x0) 3.138224147s ago: executing program 4 (id=2496): r0 = socket$can_raw(0x1d, 0x3, 0x1) fcntl$setpipe(r0, 0x407, 0x7) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) mkdir(&(0x7f0000000040)='./file1\x00', 0x1e) mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, 0x0, &(0x7f0000000080), 0x2000000, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r4 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0, 0x0) mknodat(r4, &(0x7f00000000c0)='./file1\x00', 0x0, 0x0) chdir(&(0x7f0000000140)='./bus\x00') linkat(r4, &(0x7f0000000100)='./file1\x00', r4, &(0x7f0000000240)='./file0\x00', 0x0) unlink(&(0x7f0000000180)='./file1\x00') r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) renameat2(r5, &(0x7f00000001c0)='./file0\x00', r5, &(0x7f0000000340)='./file1\x00', 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b0000000500000008040000cd00000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r6], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r7}, 0x10) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@quota}]}, 0x1, 0x4fa, &(0x7f0000000ac0)="$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") open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x88882, 0x0) 3.065028207s ago: executing program 5 (id=2497): socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000004c0)={&(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0}, 0x68) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100001f00702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) sendmsg$key(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="020900000700000000000000000000000500"], 0x38}}, 0x0) 2.640956674s ago: executing program 1 (id=2498): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f00000001c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10) r1 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) fcntl$setlease(r1, 0x400, 0x0) fcntl$setlease(r1, 0x400, 0x2) 2.353501007s ago: executing program 2 (id=2499): syz_emit_ethernet(0xfdef, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6092c01f00082f00fe8000000000000000000000000000bb00000000000000000000070000000000242065580000000000000021000086dd080088be43"], 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) mount$incfs(&(0x7f0000000b40)='./file0\x00', &(0x7f0000000b80)='.\x00', &(0x7f0000000bc0), 0x1, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) r5 = inotify_init1(0x0) inotify_add_watch(r5, &(0x7f0000000000)='.\x00', 0x52000775) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x20000, 0x104) openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) r6 = dup(r5) ioctl$sock_inet_udp_SIOCINQ(r6, 0x541b, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000940)=@newqdisc={0x468, 0x24, 0x4ee4e6a52ff56541, 0x40000, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0x18}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x43c, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x8, 0x1, 0x2, 0x8, 0xc, 0x7}, {0x5, 0x0, 0x9, 0x401, 0x0, 0x7fffffff}, 0x2000001, 0x1000, 0x575}}, @TCA_TBF_RATE64={0xc, 0x4, 0x2749dcb7db3981e2}, @TCA_TBF_PTAB={0x404, 0x3, [0x1, 0x7fff, 0xa, 0x5, 0x8506, 0x200000, 0xfffffffb, 0x8, 0x6, 0xfffffffe, 0xfffffff8, 0x8e, 0x3, 0x9, 0x80, 0x4, 0x0, 0x1, 0x4, 0x8001, 0xb7, 0x1, 0x401, 0x7fff, 0x80000000, 0x1, 0x7, 0x7, 0x5, 0x7, 0xfffffffd, 0x3, 0x3, 0x6, 0x1, 0xaf7b, 0x6, 0x0, 0x7, 0x9, 0x109, 0xb, 0x822, 0x1, 0x7, 0xce, 0x80, 0x2005, 0x1698, 0x8, 0x10002, 0x8000001, 0x6, 0x1, 0x200, 0xffffffff, 0x0, 0x5, 0x9, 0x2, 0x1, 0x1a, 0x72a5cdfe, 0x5ca, 0x0, 0xd4, 0x4, 0x2, 0x1, 0x3, 0x1, 0x7fff, 0x9, 0xf146d1c, 0x800, 0x4, 0x4, 0x0, 0x3, 0x8, 0x80000001, 0x1000, 0x1, 0xb27, 0x900, 0x9, 0x5, 0x20000000, 0xffff, 0x0, 0x2, 0x3, 0x9, 0x2, 0x3b4, 0x0, 0xffffffff, 0x5, 0xffff, 0x2, 0xbffffd, 0x1, 0x3ff, 0xffffffff, 0x4, 0x7, 0x6, 0xe0fd5ce, 0x40, 0x4, 0x2, 0x9, 0x10f, 0x6, 0x6, 0x1901e503, 0x2, 0x2, 0x5, 0x2, 0x7, 0x0, 0x2, 0x1, 0x410, 0x0, 0x621, 0xf8, 0x8001, 0x8, 0x9, 0xfff, 0x2, 0x207ff, 0x54, 0x6, 0x1ff, 0x9, 0x40, 0xd08d, 0x400, 0x7, 0x6, 0x3, 0xc70, 0x4638, 0x8, 0x99, 0x8, 0x4, 0x7, 0xbe, 0xe7e, 0x4, 0x8, 0xfffffff9, 0x8000, 0x401, 0xe09d, 0x0, 0x3, 0x4000006, 0xb3, 0x8, 0xd40b, 0x27, 0x9, 0x8, 0x1, 0xfffff801, 0x3, 0x50d1, 0x8, 0x6, 0x12, 0x6, 0x9, 0x3, 0x4, 0xae, 0x1, 0x9, 0x4f73, 0xf69, 0x8, 0xffffffe8, 0x7, 0x1, 0x3ff, 0x9, 0x671, 0x3ff, 0x8, 0x8, 0x0, 0xbd, 0x1, 0x4, 0x5, 0x3, 0x9, 0xfffffff7, 0x3, 0x2, 0x0, 0x1, 0x526a, 0x7, 0x5, 0x6, 0x3, 0x3a440, 0x7fff, 0x89, 0x0, 0x3dc, 0x4, 0x8, 0x1, 0x9, 0xdb, 0x81, 0x6, 0x2, 0xfffffffd, 0x5, 0x200, 0xfffffffd, 0xfff, 0x6, 0x5, 0x7, 0x9, 0x5, 0x7, 0x7fffffff, 0x372f5507, 0xd51, 0x10001, 0x7, 0x7f, 0xfffffff7, 0xe, 0x7, 0x40001, 0xfff, 0x9, 0x401, 0x40000000, 0x7, 0x0, 0x6, 0x6, 0x40, 0x4, 0x600000]}]}}]}, 0x468}, 0x1, 0x0, 0x0, 0x404}, 0x0) 2.254202779s ago: executing program 5 (id=2500): ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000000)={'ip_vti0\x00', &(0x7f00000002c0)={'ip_vti0\x00', 0x0, 0x80, 0x20, 0x6, 0x29b, {{0x20, 0x4, 0x0, 0x9, 0x80, 0x67, 0x0, 0x7, 0x4, 0x0, @rand_addr=0x64010100, @broadcast, {[@lsrr={0x83, 0x27, 0xcd, [@remote, @remote, @local, @private=0xa010102, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote, @broadcast, @multicast1, @broadcast]}, @generic={0x94, 0x12, "8b23b925b4628b66f7d9df5908444c9d"}, @generic={0x7, 0x9, "9bbea2044a6e5a"}, @rr={0x7, 0x17, 0x40, [@empty, @multicast1, @local, @local, @multicast1]}, @timestamp_addr={0x44, 0xc, 0x71, 0x1, 0x4, [{@rand_addr=0x64010101, 0x6265e778}]}, @end, @end, @ra={0x94, 0x4}]}}}}}) pipe2$9p(&(0x7f0000000240), 0x0) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000500), 0x1, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000001000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000080000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000100000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r1}, 0x10) listxattr(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) 1.344482862s ago: executing program 1 (id=2501): open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={0x0, r0}, 0x18) socket$key(0xf, 0x3, 0x2) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) timer_settime(0x0, 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000008"], 0x48) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000003080), 0x101000, 0x0) ioctl$TIOCGRS485(r5, 0x542e, &(0x7f00000030c0)) 1.270321242s ago: executing program 5 (id=2502): mmap(&(0x7f0000220000/0x1000)=nil, 0x1000, 0x2000005, 0x4008032, 0xffffffffffffffff, 0x1000) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0x5}, 0x10) write(r0, &(0x7f00000000c0)="240000001e005f0214fffffffffffff80700000005000000000005004800050000000000", 0x24) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00'}) sendmsg$ETHTOOL_MSG_FEATURES_SET(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x1c, r4, 0x1, 0x0, 0xfffffffd, {}, [@ETHTOOL_A_FEATURES_WANTED={0x8, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x0) r6 = dup(r2) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000580)=ANY=[@ANYRESHEX=r1, @ANYBLOB=',wfdno', @ANYRESHEX=r6]) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0x12, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xa8ee, 0x0, 0x0, 0x0, 0xb}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [@generic={0x7, 0x5, 0x5, 0x5, 0x2}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0xf, 0x0, 0x0, 0x0, 0x7c97e954}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r8 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r8, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) setsockopt$sock_int(r8, 0x1, 0x28, &(0x7f00000000c0)=0xfffffff8, 0x4) unshare(0x80) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000500)='mm_lru_activate\x00', r9}, 0x18) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43451) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) write$cgroup_int(r10, &(0x7f0000000200), 0x43451) syz_emit_ethernet(0x2e, &(0x7f0000001140)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x1, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0) syz_emit_ethernet(0x2e, &(0x7f0000001140)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x66, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x1, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r7}, 0x10) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000000)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x29, 0xf, {0x4, 0x29, 0xc, 0x80, 0x4, 0x2, '\x00', '\nj#\x00'}}, 0x0}, 0x0) pread64(0xffffffffffffffff, &(0x7f0000001240)=""/102400, 0x19000, 0x1000000000) 1.268331532s ago: executing program 4 (id=2503): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$key(0xf, 0x3, 0x2) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100001f00702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) sendmsg$key(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="020900000700000000000000000000000500"], 0x38}}, 0x0) 839.828008ms ago: executing program 4 (id=2504): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000480), 0x400034f, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={0x0, r3}, 0x18) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xe, &(0x7f0000000300)={[{@noauto_da_alloc}, {@errors_remount}]}, 0x3, 0x445, &(0x7f0000000b00)="$eJzs28+PE1UcAPDvTLeLCLgr4g9+qKto3PhjlwVUDh7UaOIBExM96HGzuxCksIZdEyFEwRg8GWPi3Xj0X/CkF2M8mXjVuyEhhgvgqWbaGbYtbdktLUX6+SQD78282fe+nXnte/PaAEbWVPZPErE1Iv6MiIl6trnAVP2/q5fPLly7fHYhiWr13X+SWrkrl88uFEWL87bkmek0Iv0iid1t6l05feb4fKWydCrPz66e+Gh25fSZF46dmD+6dHTp5P5Dhw4emHv5pf0v9iXOrE1Xdn26vGfnWx988/bhr5rib4mjT6a6HXy6Wu1zdcO1rSGdjA2xIWxIKSKyy1Wu9f+JKMXaxZuINz8fauOAgapWq9UtnQ+fqwJ3sSSa87o8jIrigz6b/xZb6yDg1cENP4bu0mv1CVAW99V8qx8ZizQvU26Z3/bTVES8f+7f77ItBvMcAgCgyU/Z+Of5duO/NB5qKHdfvjY0GRH3R8T2iHggInZExIMRtbIPR8QjG6y/dZHkxvFPerGnwNYpG/+9kq9tNY//itFfTJby3LZa/OXkyLHK0r78NZmO8qYsP9eljp/f+OPrTscax3/ZltVfjAXzdlwc29R8zuL86vytxNzo0vmIXWPt4k+urwQkEbEzInb1WMexZ3/Y0+nYzePvog/rTNXvI56pX/9z0RJ/Iem+Pjl7T1SW9s0Wd8WNfvv9wjud6r+l+Psgu/73tr3/r8c/mTSu165svI4Lf33ZcU7T6/0/nrxXS4/n+z6ZX109NRcxnhyuN7px//61c4t8UT6Lf3pv+/6/PdZeid0Rkd3Ej0bEYxHxeN72JyLiyYjY2yX+X19/6sPe4x+sLP7FDV3/tcR4tO5pnygd/+XHpkonb4j/Wvfrf7CWms73rOf9bz3t6u1uBgAAgP+fNCK2RpLOXE+n6cxM/fvyOyLSyvLK6nNHlj8+uVj/jcBklNPiSddEw/PQuXxaX8+fj4j6VwuK4wfy58bfljbX8jMLy5XFYQcPI25Lh/6f+bs07NYBA+f3WjC69H8YXfo/jC79H0ZXm/6/eRjtAG6/dp//nw2hHcDt19L/LfvBCDH/h9Gl/8Po0v9hJK1sjpv/SL5rovhLPZ5+1yaifEc0Y2CJSO+IZkgMKDHc9yUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIB++S8AAP///fHg0g==") mkdir(&(0x7f0000000140)='./control\x00', 0x5) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x50, 0x10, 0x49920d862a92153b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, @IFLA_IPTUN_LINK={0x8, 0x1, r6}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x80010}, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000180)='./control\x00', 0xa4000960) 650.466851ms ago: executing program 5 (id=2505): setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000500)=@nat={'nat\x00', 0x670, 0x5, 0x3f8, 0x208, 0x160, 0xfeffffff, 0x160, 0xa8, 0x360, 0x360, 0xffffffff, 0x360, 0x360, 0x5, 0x0, {[{{@ip={@private=0xffffffff, @initdev={0xac, 0x1e, 0x80, 0x0}, 0x0, 0xff, 'macvlan1\x00', 'veth1\x00'}, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x4, @rand_addr=0x64010101, @remote, @icmp_id=0x64, @port=0x4e24}}}}, {{@uncond, 0x0, 0x70, 0xb8, 0x0, {0x0, 0x7}}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv6=@dev, @ipv4=@remote, @port, @icmp_id}}}, {{@uncond, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x1, @empty, @dev={0xac, 0x14, 0x14, 0x1a}, @icmp_id=0x67, @port=0x4e20}}}}, {{@uncond, 0x0, 0x130, 0x158, 0x0, {}, [@common=@unspec=@conntrack2={{0xc0}, {{@ipv6=@mcast2, [0xff000000, 0x0, 0x0, 0xff], @ipv4=@remote, [0xffffffff, 0xff000000, 0x0, 0xff000000], @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0xffffffff, 0x0, 0x0, 0xff], @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}, [0xffffff00, 0xff000000, 0x0, 0xff], 0x2, 0xfffffffe, 0x3c, 0x4e21, 0x4e22, 0x4e22, 0x4e20, 0x2000}, 0x1c1, 0x401}}]}, @common=@inet=@TCPMSS={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x458) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x8001000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x200, 0x0, 0x18c, 0x148, 0xd0, 0x0, 0x168, 0x2a8, 0x2a8, 0x168, 0x2a8, 0x3, 0x0, {[{{@ip={@dev, @remote, 0x0, 0x0, 'gretap0\x00', 'veth0_to_bond\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x6, 0x2, 0x3, 0x7, 0x2]}, {0xffffffffffffffff}}}}, {{@ip={@remote, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1\x00', 'bridge0\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0xee) getsockopt$XDP_STATISTICS(0xffffffffffffffff, 0x11b, 0x7, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) ioctl$sock_SIOCBRADDBR(r1, 0x89a0, &(0x7f0000000080)='veth0_virt_wifi\x00') sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @multicast2, 0xffff, 0x0, 'sh\x00', 0xdd48d042b50414d7, 0x80, 0x1e}, 0x2c) 76.875679ms ago: executing program 2 (id=2506): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x20044000) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000080)=@gcm_256={{0x303, 0x36}, "7b8bdfd668e040b5", "89e73c8e9aa7e7aa844ee902749b141eb57bda9660b3567988c3ddb6cb7405a4", "e01bfca4", "b914d9d2ad0d05dc"}, 0x38) 0s ago: executing program 0 (id=2507): r0 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r0, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000640)=@newtfilter={0x24, 0x2c, 0xd27, 0x2, 0x0, {0x0, 0x0, 0x0, r1, {0xb, 0x9}, {}, {0x1c, 0xfff1}}}, 0x24}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 0s ago: executing program 2 (id=2508): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x10}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x8c, 0x2c, 0xd27, 0x70bd25, 0x25dfdc00, {0x0, 0x0, 0x0, r6, {0x0, 0x8}, {}, {0x7}}, [@filter_kind_options=@f_matchall={{0xd}, {0x58, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x7, 0x24d417d6, 0x3, 0x800, 0xe26}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x2}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) kernel console output (not intermixed with test programs): ignore_rlimit_data. [ 531.922923][ T7523] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 531.936977][ T7523] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 531.947781][ T7523] F2FS-fs (loop5): invalid crc value [ 532.036767][ T7523] F2FS-fs (loop5): Found nat_bits in checkpoint [ 532.141465][ T7523] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 532.149112][ T7523] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 532.642769][ T7545] EXT4-fs (loop0): orphan cleanup on readonly fs [ 532.650120][ T7545] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.1951: bg 0: block 248: padding at end of block bitmap is not set [ 532.665183][ T7545] __quota_error: 3 callbacks suppressed [ 532.665193][ T7545] Quota error (device loop0): write_blk: dquota write failed [ 532.678734][ T7545] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 532.688925][ T7545] EXT4-fs error (device loop0): ext4_acquire_dquot:6226: comm syz.0.1951: Failed to acquire dquot type 1 [ 532.701179][ T7545] EXT4-fs (loop0): 1 truncate cleaned up [ 532.707594][ T7545] EXT4-fs (loop0): mounted filesystem without journal. Opts: bsdgroups,nodiscard,noblock_validity,grpjquota=,grpjquota=,noquota,auto_da_alloc,noload,nodiscard,,errors=continue [ 532.734115][ T7545] EXT4-fs error (device loop0): ext4_lookup:1834: inode #2: comm syz.0.1951: deleted inode referenced: 12 [ 532.758511][ T7549] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 532.775566][ T24] audit: type=1400 audit(1746818802.720:1950): avc: denied { write } for pid=77 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 532.828305][ T7549] EXT4-fs (loop5): 1 truncate cleaned up [ 532.852322][ T7549] EXT4-fs (loop5): mounted filesystem without journal. Opts: quota,,errors=continue [ 532.873507][ T24] audit: type=1400 audit(1746818802.720:1951): avc: denied { remove_name } for pid=77 comm="syslogd" name="messages" dev="tmpfs" ino=9 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 533.009118][ T24] audit: type=1400 audit(1746818802.720:1952): avc: denied { rename } for pid=77 comm="syslogd" name="messages" dev="tmpfs" ino=9 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 533.125377][ T24] audit: type=1400 audit(1746818802.720:1953): avc: denied { add_name } for pid=77 comm="syslogd" name="messages.0" dev="tmpfs" ino=8 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 533.142967][ T2015] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 533.298712][ T24] audit: type=1400 audit(1746818802.720:1954): avc: denied { unlink } for pid=77 comm="syslogd" name="messages.0" dev="tmpfs" ino=8 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 533.327157][ T24] audit: type=1400 audit(1746818802.720:1955): avc: denied { create } for pid=77 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 533.350969][ T7555] incfs: Error accessing: ./file0. [ 533.357989][ T7555] incfs: mount failed -2 [ 533.835575][ T2015] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 533.845959][ T2015] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 533.932400][ T7561] usb usb8: usbfs: process 7561 (syz.0.1954) did not claim interface 0 before use [ 534.215596][ T2015] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 534.233031][ T2015] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 534.252868][ T2015] usb 2-1: SerialNumber: syz [ 534.468190][ T7567] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 534.796184][ T7567] EXT4-fs (loop4): 1 truncate cleaned up [ 534.802380][ T7567] EXT4-fs (loop4): mounted filesystem without journal. Opts: noauto_da_alloc,errors=remount-ro, [ 534.962981][ T24] audit: type=1326 audit(1746818804.950:1956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7570 comm="syz.0.1957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f403de9e969 code=0x7ffc0000 [ 535.439088][ T24] audit: type=1326 audit(1746818804.990:1957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7570 comm="syz.0.1957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=261 compat=0 ip=0x7f403de9e969 code=0x7ffc0000 [ 535.471581][ T2015] usb 2-1: 0:2 : does not exist [ 535.599780][ T2015] usb 2-1: USB disconnect, device number 22 [ 536.125536][ T7587] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,quota,,errors=continue [ 536.140574][ T7587] ext4 filesystem being mounted at /362/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 536.478135][ T7596] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 536.519567][ T7596] EXT4-fs (loop5): 1 truncate cleaned up [ 536.539027][ T7596] EXT4-fs (loop5): mounted filesystem without journal. Opts: quota,,errors=continue [ 536.816046][ T7588] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 536.928932][ T7588] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 536.960640][ T7588] F2FS-fs (loop2): invalid crc value [ 538.127425][ T7610] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 538.184383][ T7605] EXT4-fs (loop1): orphan cleanup on readonly fs [ 538.192280][ T7605] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.1964: bg 0: block 248: padding at end of block bitmap is not set [ 538.207200][ T7605] __quota_error: 37 callbacks suppressed [ 538.207213][ T7605] Quota error (device loop1): write_blk: dquota write failed [ 538.221156][ T7605] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 538.231202][ T7605] EXT4-fs error (device loop1): ext4_acquire_dquot:6226: comm syz.1.1964: Failed to acquire dquot type 1 [ 538.243259][ T7605] EXT4-fs (loop1): 1 truncate cleaned up [ 538.249586][ T7605] EXT4-fs (loop1): mounted filesystem without journal. Opts: bsdgroups,nodiscard,noblock_validity,grpjquota=,grpjquota=,noquota,auto_da_alloc,noload,nodiscard,,errors=continue [ 538.270681][ T7605] EXT4-fs error (device loop1): ext4_lookup:1834: inode #2: comm syz.1.1964: deleted inode referenced: 12 [ 538.294303][ T7610] EXT4-fs (loop0): 1 truncate cleaned up [ 538.300497][ T7610] EXT4-fs (loop0): mounted filesystem without journal. Opts: noauto_da_alloc,errors=remount-ro, [ 538.426580][ T7588] F2FS-fs (loop2): Found nat_bits in checkpoint [ 538.616172][ T7588] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 538.623244][ T7588] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 538.687669][ T7621] incfs: Error accessing: ./file0. [ 538.692959][ T7621] incfs: mount failed -2 [ 539.108921][ T7630] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 539.126831][ T7630] EXT4-fs (loop5): 1 truncate cleaned up [ 539.132955][ T7630] EXT4-fs (loop5): mounted filesystem without journal. Opts: quota,,errors=continue [ 539.426692][ T7638] incfs: Error accessing: ./file0. [ 539.432089][ T7638] incfs: mount failed -2 [ 539.931063][ T7648] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 540.043702][ T7648] EXT4-fs (loop4): 1 truncate cleaned up [ 540.059671][ T7648] EXT4-fs (loop4): mounted filesystem without journal. Opts: noauto_da_alloc,errors=remount-ro, [ 540.130119][ T7650] EXT4-fs (loop1): orphan cleanup on readonly fs [ 540.196444][ T7650] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.1974: bg 0: block 248: padding at end of block bitmap is not set [ 540.429118][ T7662] syz.5.1975[7662] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 540.429472][ T7662] syz.5.1975[7662] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 541.430615][ T7650] Quota error (device loop1): write_blk: dquota write failed [ 541.450256][ T7650] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 541.460474][ T7650] EXT4-fs error (device loop1): ext4_acquire_dquot:6226: comm syz.1.1974: Failed to acquire dquot type 1 [ 541.472391][ T7650] EXT4-fs (loop1): 1 truncate cleaned up [ 541.756742][ T7650] EXT4-fs (loop1): mounted filesystem without journal. Opts: bsdgroups,nodiscard,noblock_validity,grpjquota=,grpjquota=,noquota,auto_da_alloc,noload,nodiscard,,errors=continue [ 541.952493][ T7662] EXT4-fs (loop5): Test dummy encryption mode enabled [ 541.959758][ T7662] EXT4-fs (loop5): Test dummy encryption mode enabled [ 541.976565][ T7662] EXT4-fs (loop5): mounted filesystem without journal. Opts: test_dummy_encryption=v1,test_dummy_encryption=v1,,errors=continue [ 541.990023][ T7662] ext4 filesystem being mounted at /56/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 542.056490][ T7660] EXT4-fs (loop2): orphan cleanup on readonly fs [ 542.063530][ T7660] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.1976: bg 0: block 248: padding at end of block bitmap is not set [ 542.067776][ T7650] EXT4-fs error (device loop1): ext4_lookup:1834: inode #2: comm syz.1.1974: deleted inode referenced: 12 [ 542.079497][ T7660] Quota error (device loop2): write_blk: dquota write failed [ 542.098339][ T7660] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 542.108731][ T7660] EXT4-fs error (device loop2): ext4_acquire_dquot:6226: comm syz.2.1976: Failed to acquire dquot type 1 [ 542.120914][ T7660] EXT4-fs (loop2): 1 truncate cleaned up [ 542.127075][ T7660] EXT4-fs (loop2): mounted filesystem without journal. Opts: bsdgroups,nodiscard,noblock_validity,grpjquota=,grpjquota=,noquota,auto_da_alloc,noload,nodiscard,,errors=continue [ 542.155206][ T7658] EXT4-fs error (device loop2): ext4_lookup:1834: inode #2: comm syz.2.1976: deleted inode referenced: 12 [ 542.434210][ T7671] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 542.496577][ T7671] EXT4-fs (loop5): 1 truncate cleaned up [ 542.502251][ T7671] EXT4-fs (loop5): mounted filesystem without journal. Opts: quota,,errors=continue [ 542.594697][ T7680] syz.2.1979[7680] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 542.595415][ T7680] syz.2.1979[7680] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 544.235547][ T7691] syz.2.1981[7691] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 544.365982][ T7692] EXT4-fs (loop0): orphan cleanup on readonly fs [ 544.430417][ T7692] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.1982: bg 0: block 248: padding at end of block bitmap is not set [ 544.526319][ T7692] Quota error (device loop0): write_blk: dquota write failed [ 544.556724][ T7692] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 544.575734][ T7692] EXT4-fs error (device loop0): ext4_acquire_dquot:6226: comm syz.0.1982: Failed to acquire dquot type 1 [ 544.656400][ T7692] EXT4-fs (loop0): 1 truncate cleaned up [ 544.694609][ T7692] EXT4-fs (loop0): mounted filesystem without journal. Opts: bsdgroups,nodiscard,noblock_validity,grpjquota=,grpjquota=,noquota,auto_da_alloc,noload,nodiscard,,errors=continue [ 545.376649][ T7692] EXT4-fs error (device loop0): ext4_lookup:1834: inode #2: comm syz.0.1982: deleted inode referenced: 12 [ 545.596101][ T7697] EXT4-fs error (device loop5): ext4_orphan_get:1395: inode #15: comm syz.5.1983: casefold flag without casefold feature [ 545.615678][ T7697] EXT4-fs error (device loop5): ext4_orphan_get:1400: comm syz.5.1983: couldn't read orphan inode 15 (err -117) [ 545.628026][ T7697] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue [ 547.619577][ T7731] EXT4-fs (loop2): orphan cleanup on readonly fs [ 547.627040][ T7731] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.1990: bg 0: block 248: padding at end of block bitmap is not set [ 547.642268][ T7731] Quota error (device loop2): write_blk: dquota write failed [ 547.649881][ T7731] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 547.659971][ T7731] EXT4-fs error (device loop2): ext4_acquire_dquot:6226: comm syz.2.1990: Failed to acquire dquot type 1 [ 547.672596][ T7731] EXT4-fs (loop2): 1 truncate cleaned up [ 547.678687][ T7731] EXT4-fs (loop2): mounted filesystem without journal. Opts: bsdgroups,nodiscard,noblock_validity,grpjquota=,grpjquota=,noquota,auto_da_alloc,noload,nodiscard,,errors=continue [ 547.698588][ T7731] EXT4-fs error (device loop2): ext4_lookup:1834: inode #2: comm syz.2.1990: deleted inode referenced: 12 [ 548.047229][ T7741] EXT4-fs (loop1): Mount option "noacl" will be removed by 3.5 [ 548.047229][ T7741] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 548.047229][ T7741] [ 548.066886][ T7741] EXT4-fs (loop1): Ignoring removed orlov option [ 548.073240][ T7741] EXT4-fs (loop1): couldn't mount as ext3 due to feature incompatibilities [ 548.265569][ T1611] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 548.376903][ T7754] usb usb8: usbfs: process 7754 (syz.2.1995) did not claim interface 0 before use [ 549.644851][ T7744] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 549.715598][ T1611] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 549.727296][ T1611] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 549.745616][ T7744] EXT4-fs (loop0): 1 truncate cleaned up [ 549.751582][ T7744] EXT4-fs (loop0): mounted filesystem without journal. Opts: quota,,errors=continue [ 549.835623][ T1611] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 549.859847][ T1611] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 549.875620][ T1611] usb 6-1: SerialNumber: syz [ 550.103973][ T7769] syz.4.2000[7769] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 550.104275][ T7769] syz.4.2000[7769] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 550.538006][ T7769] EXT4-fs (loop4): Test dummy encryption mode enabled [ 550.559036][ T7769] EXT4-fs (loop4): Test dummy encryption mode enabled [ 550.582923][ T7734] netlink: 9 bytes leftover after parsing attributes in process `syz.5.1991'. [ 550.644541][ T7769] EXT4-fs (loop4): mounted filesystem without journal. Opts: test_dummy_encryption=v1,test_dummy_encryption=v1,,errors=continue [ 550.658589][ T7769] ext4 filesystem being mounted at /408/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 550.834725][ T7734] device 31XD entered promiscuous mode [ 551.171548][ T7773] netlink: 5 bytes leftover after parsing attributes in process `syz.5.1991'. [ 551.282461][ T7773] 0XD: renamed from 31XD [ 551.288821][ T7773] device 30XD left promiscuous mode [ 551.307260][ T7773] A link change request failed with some changes committed already. Interface 30XD may have been left with an inconsistent configuration, please check. [ 551.376642][ T1611] usb 6-1: 0:2 : does not exist [ 551.388474][ T1611] usb 6-1: USB disconnect, device number 7 [ 551.847283][ T7791] EXT4-fs (loop2): orphan cleanup on readonly fs [ 551.854456][ T7791] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.2005: bg 0: block 248: padding at end of block bitmap is not set [ 551.870330][ T7791] Quota error (device loop2): write_blk: dquota write failed [ 551.877909][ T7791] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 551.888778][ T7791] EXT4-fs error (device loop2): ext4_acquire_dquot:6226: comm syz.2.2005: Failed to acquire dquot type 1 [ 551.902386][ T7791] EXT4-fs (loop2): 1 truncate cleaned up [ 551.908951][ T7791] EXT4-fs (loop2): mounted filesystem without journal. Opts: bsdgroups,nodiscard,noblock_validity,grpjquota=,grpjquota=,noquota,auto_da_alloc,noload,nodiscard,,errors=continue [ 551.929836][ T7791] EXT4-fs error (device loop2): ext4_lookup:1834: inode #2: comm syz.2.2005: deleted inode referenced: 12 [ 552.019254][ T7797] EXT4-fs (loop4): Mount option "noacl" will be removed by 3.5 [ 552.019254][ T7797] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 552.019254][ T7797] [ 552.082138][ T7797] EXT4-fs (loop4): Ignoring removed orlov option [ 552.104033][ T7797] EXT4-fs (loop4): couldn't mount as ext3 due to feature incompatibilities [ 552.335522][ T2120] usb 2-1: new full-speed USB device number 23 using dummy_hcd [ 552.591238][ T7800] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 552.599574][ T7800] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 552.609526][ T7800] F2FS-fs (loop5): invalid crc value [ 552.622574][ T7800] F2FS-fs (loop5): Found nat_bits in checkpoint [ 552.663958][ T7800] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 552.672352][ T7800] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 552.672448][ T318] udevd[318]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 552.775593][ T2120] usb 2-1: config 127 has an invalid interface number: 8 but max is 1 [ 552.784377][ T2120] usb 2-1: config 127 contains an unexpected descriptor of type 0x2, skipping [ 552.794547][ T2120] usb 2-1: config 127 has an invalid interface number: 201 but max is 1 [ 552.803422][ T2120] usb 2-1: config 127 contains an unexpected descriptor of type 0x2, skipping [ 552.813004][ T2120] usb 2-1: config 127 has no interface number 0 [ 552.819733][ T2120] usb 2-1: config 127 has no interface number 1 [ 552.827369][ T2120] usb 2-1: config 127 interface 8 altsetting 5 has a duplicate endpoint with address 0xF, skipping [ 552.839087][ T2120] usb 2-1: config 127 interface 8 altsetting 5 has a duplicate endpoint with address 0xF, skipping [ 552.850753][ T2120] usb 2-1: config 127 interface 8 altsetting 5 has an invalid endpoint with address 0x80, skipping [ 552.862961][ T2120] usb 2-1: config 127 interface 8 altsetting 5 has an invalid endpoint with address 0x80, skipping [ 552.874851][ T2120] usb 2-1: config 127 interface 8 altsetting 5 has a duplicate endpoint with address 0x8D, skipping [ 552.938974][ T2120] usb 2-1: config 127 interface 8 altsetting 5 has a duplicate endpoint with address 0x3, skipping [ 552.951346][ T2120] usb 2-1: config 127 interface 8 altsetting 5 has an invalid endpoint with address 0x0, skipping [ 553.037713][ T2120] usb 2-1: config 127 interface 8 altsetting 5 has an invalid endpoint with address 0x0, skipping [ 553.087052][ T2120] usb 2-1: config 127 interface 8 altsetting 5 endpoint 0x8 has invalid wMaxPacketSize 0 [ 553.824166][ T24] audit: type=1400 audit(1746818823.710:1995): avc: denied { mount } for pid=7826 comm="syz.0.2013" name="/" dev="ramfs" ino=37643 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 553.846878][ T2120] usb 2-1: config 127 interface 8 altsetting 5 endpoint 0xC has invalid maxpacket 512, setting to 64 [ 553.858370][ T2120] usb 2-1: config 127 interface 8 altsetting 5 endpoint 0x7 has invalid maxpacket 1024, setting to 64 [ 553.985560][ T2120] usb 2-1: config 127 interface 8 altsetting 5 has a duplicate endpoint with address 0x6, skipping [ 554.027260][ T2120] usb 2-1: config 127 interface 201 altsetting 5 endpoint 0x4 has invalid maxpacket 1024, setting to 64 [ 554.139602][ T2120] usb 2-1: config 127 interface 201 altsetting 5 has a duplicate endpoint with address 0x6, skipping [ 554.150961][ T2120] usb 2-1: config 127 interface 201 altsetting 5 has a duplicate endpoint with address 0xF, skipping [ 554.162385][ T2120] usb 2-1: config 127 interface 201 altsetting 5 has a duplicate endpoint with address 0x7, skipping [ 554.177738][ T2120] usb 2-1: config 127 interface 201 altsetting 5 has a duplicate endpoint with address 0xF, skipping [ 554.189340][ T2120] usb 2-1: config 127 interface 201 altsetting 5 has a duplicate endpoint with address 0x4, skipping [ 554.203230][ T2120] usb 2-1: config 127 interface 201 altsetting 5 has a duplicate endpoint with address 0x4, skipping [ 554.215608][ T2120] usb 2-1: config 127 interface 201 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 554.228144][ T2120] usb 2-1: config 127 interface 201 altsetting 5 has a duplicate endpoint with address 0xD, skipping [ 554.241906][ T2120] usb 2-1: config 127 interface 201 altsetting 5 has a duplicate endpoint with address 0x5, skipping [ 554.254227][ T2120] usb 2-1: config 127 interface 8 has no altsetting 0 [ 554.327101][ T7839] syz.2.2014[7839] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 554.327419][ T7839] syz.2.2014[7839] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 554.416179][ T2120] usb 2-1: config 127 interface 201 has no altsetting 0 [ 554.455289][ T7839] EXT4-fs (loop2): Test dummy encryption mode enabled [ 554.462686][ T7839] EXT4-fs (loop2): Test dummy encryption mode enabled [ 554.517608][ T7839] EXT4-fs (loop2): mounted filesystem without journal. Opts: test_dummy_encryption=v1,test_dummy_encryption=v1,,errors=continue [ 554.531855][ T7839] ext4 filesystem being mounted at /364/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 554.845768][ T2120] usb 2-1: string descriptor 0 read error: -71 [ 555.255337][ T2120] usb 2-1: New USB device found, idVendor=1199, idProduct=9053, bcdDevice=b8.1d [ 555.296988][ T2120] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 555.416477][ T2120] usb 2-1: can't set config #127, error -71 [ 555.425110][ T2120] usb 2-1: USB disconnect, device number 23 [ 555.915621][ T2120] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 556.135656][ T976] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 556.280978][ T7864] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 556.305643][ T7864] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 556.325114][ T7864] F2FS-fs (loop0): invalid crc value [ 556.355541][ T2120] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 556.366310][ T2120] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 556.376270][ T7864] F2FS-fs (loop0): Found nat_bits in checkpoint [ 556.412751][ T7864] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 556.420583][ T7864] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 556.495739][ T2120] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 556.505383][ T2120] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 556.513663][ T2120] usb 2-1: SerialNumber: syz [ 556.597557][ T7878] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,quota,,errors=continue [ 556.612383][ T7878] ext4 filesystem being mounted at /415/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 556.625725][ T976] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 556.636778][ T976] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 556.745546][ T976] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 556.764379][ T976] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 556.772718][ T976] usb 3-1: SerialNumber: syz [ 556.777912][ T7850] netlink: 9 bytes leftover after parsing attributes in process `syz.1.2018'. [ 556.805990][ T7850] device 30XD entered promiscuous mode [ 556.817555][ T7850] netlink: 5 bytes leftover after parsing attributes in process `syz.1.2018'. [ 556.835662][ T7850] 1XD: renamed from 30XD [ 556.846481][ T7850] device 31XD left promiscuous mode [ 556.868255][ T7850] A link change request failed with some changes committed already. Interface 31XD may have been left with an inconsistent configuration, please check. [ 556.936303][ T2120] usb 2-1: 0:2 : does not exist [ 556.948665][ T2120] usb 2-1: USB disconnect, device number 24 [ 557.126343][ T976] usb 3-1: 0:2 : does not exist [ 557.140061][ T976] usb 3-1: USB disconnect, device number 30 [ 557.226990][ T7888] fuse: Bad value for 'fd' [ 557.345532][ T24] audit: type=1400 audit(1746818827.180:1996): avc: denied { write } for pid=7884 comm="syz.0.2026" name="raw" dev="proc" ino=4026532479 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 557.545941][ T577] udevd[577]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 558.746316][ T7896] EXT4-fs (loop1): orphan cleanup on readonly fs [ 558.753620][ T7896] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.2028: bg 0: block 248: padding at end of block bitmap is not set [ 558.768706][ T7896] Quota error (device loop1): write_blk: dquota write failed [ 558.776733][ T7896] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 558.787555][ T7896] EXT4-fs error (device loop1): ext4_acquire_dquot:6226: comm syz.1.2028: Failed to acquire dquot type 1 [ 559.046167][ T7896] EXT4-fs (loop1): 1 truncate cleaned up [ 559.052409][ T7896] EXT4-fs (loop1): mounted filesystem without journal. Opts: bsdgroups,nodiscard,noblock_validity,grpjquota=,grpjquota=,noquota,auto_da_alloc,noload,nodiscard,,errors=continue [ 559.073652][ T7896] EXT4-fs error (device loop1): ext4_lookup:1834: inode #2: comm syz.1.2028: deleted inode referenced: 12 [ 559.115895][ T7906] erofs: Unknown parameter '' [ 559.369700][ T24] audit: type=1400 audit(1746818829.360:1997): avc: denied { create } for pid=7903 comm="syz.0.2029" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 560.039785][ T7928] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,quota,,errors=continue [ 560.055710][ T7928] ext4 filesystem being mounted at /369/bus/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 561.033161][ T24] audit: type=1400 audit(1746818831.020:1998): avc: denied { remount } for pid=7937 comm="syz.0.2040" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 561.084327][ T24] audit: type=1400 audit(1746818831.020:1999): avc: denied { mount } for pid=7937 comm="syz.0.2040" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 561.265882][ T7942] exfat: Bad value for 'errors' [ 561.275498][ T2118] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 561.416949][ T7940] EXT4-fs error (device loop2): ext4_orphan_get:1395: inode #15: comm syz.2.2039: casefold flag without casefold feature [ 561.430546][ T7940] EXT4-fs error (device loop2): ext4_orphan_get:1400: comm syz.2.2039: couldn't read orphan inode 15 (err -117) [ 561.495864][ T7951] xt_CT: You must specify a L4 protocol and not use inversions on it [ 561.535953][ T7940] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 561.746059][ T2118] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 561.757252][ T2118] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 561.855554][ T2118] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 561.865416][ T2118] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 561.884038][ T2118] usb 5-1: SerialNumber: syz [ 562.388925][ T7936] netlink: 9 bytes leftover after parsing attributes in process `syz.4.2038'. [ 562.399835][ T7936] device 30XD entered promiscuous mode [ 562.422804][ T7936] netlink: 5 bytes leftover after parsing attributes in process `syz.4.2038'. [ 562.432415][ T7936] 1XD: renamed from 30XD [ 562.448394][ T7963] EXT4-fs (loop0): orphan cleanup on readonly fs [ 562.456549][ T7963] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.2044: bg 0: block 248: padding at end of block bitmap is not set [ 562.471714][ T7963] Quota error (device loop0): write_blk: dquota write failed [ 562.479663][ T7963] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 562.490148][ T7963] EXT4-fs error (device loop0): ext4_acquire_dquot:6226: comm syz.0.2044: Failed to acquire dquot type 1 [ 562.502943][ T7963] EXT4-fs (loop0): 1 truncate cleaned up [ 562.509996][ T7963] EXT4-fs (loop0): mounted filesystem without journal. Opts: bsdgroups,nodiscard,noblock_validity,grpjquota=,grpjquota=,noquota,auto_da_alloc,noload,nodiscard,,errors=continue [ 562.531844][ T7963] EXT4-fs error (device loop0): ext4_lookup:1834: inode #2: comm syz.0.2044: deleted inode referenced: 12 [ 562.545566][ T7936] device 31XD left promiscuous mode [ 562.628509][ T7936] A link change request failed with some changes committed already. Interface 31XD may have been left with an inconsistent configuration, please check. [ 563.170430][ T7976] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 563.186552][ T7976] EXT4-fs (loop5): 1 truncate cleaned up [ 563.192580][ T7976] EXT4-fs (loop5): mounted filesystem without journal. Opts: quota,,errors=continue [ 563.228987][ T2118] usb 5-1: 0:2 : does not exist [ 563.243997][ T2118] usb 5-1: USB disconnect, device number 30 [ 563.881533][ T7991] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 563.918491][ T7991] EXT4-fs (loop2): 1 truncate cleaned up [ 563.924523][ T7991] EXT4-fs (loop2): mounted filesystem without journal. Opts: noauto_da_alloc,errors=remount-ro, [ 564.368252][ T8002] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 564.381805][ T8002] EXT4-fs (loop0): 1 truncate cleaned up [ 564.388281][ T8002] EXT4-fs (loop0): mounted filesystem without journal. Opts: quota,,errors=continue [ 564.889790][ T24] audit: type=1400 audit(1746818834.870:2000): avc: denied { create } for pid=8005 comm="syz.1.2055" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 565.906534][ T8021] EXT4-fs error (device loop4): ext4_orphan_get:1395: inode #15: comm syz.4.2057: casefold flag without casefold feature [ 565.929804][ T8021] EXT4-fs error (device loop4): ext4_orphan_get:1400: comm syz.4.2057: couldn't read orphan inode 15 (err -117) [ 565.955650][ T8021] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 566.463281][ T24] audit: type=1400 audit(1746818836.450:2001): avc: denied { read } for pid=8041 comm="syz.5.2063" name="loop-control" dev="devtmpfs" ino=114 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 566.494248][ T24] audit: type=1400 audit(1746818836.480:2002): avc: denied { open } for pid=8041 comm="syz.5.2063" path="/dev/loop-control" dev="devtmpfs" ino=114 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 566.523118][ T24] audit: type=1400 audit(1746818836.480:2003): avc: denied { ioctl } for pid=8041 comm="syz.5.2063" path="/dev/loop-control" dev="devtmpfs" ino=114 ioctlcmd=0x4c82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 566.724742][ T8051] incfs: Error accessing: ./file0. [ 566.730293][ T8051] incfs: mount failed -2 [ 567.288543][ T8055] FAULT_INJECTION: forcing a failure. [ 567.288543][ T8055] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 567.325566][ T8055] CPU: 0 PID: 8055 Comm: syz.4.2065 Not tainted 5.10.237-syzkaller-00309-g7e2543346ff7 #0 [ 567.335768][ T8055] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 567.345944][ T8055] Call Trace: [ 567.349334][ T8055] __dump_stack+0x21/0x24 [ 567.353676][ T8055] dump_stack_lvl+0x169/0x1d8 [ 567.358476][ T8055] ? show_regs_print_info+0x18/0x18 [ 567.363795][ T8055] ? netlink_sendmsg+0x8d0/0xb30 [ 567.368745][ T8055] dump_stack+0x15/0x1c [ 567.372904][ T8055] should_fail+0x3c1/0x510 [ 567.377606][ T8055] should_fail_usercopy+0x1a/0x20 [ 567.382670][ T8055] _copy_from_user+0x20/0xd0 [ 567.387453][ T8055] iovec_from_user+0x1bc/0x2f0 [ 567.392419][ T8055] ? __copy_msghdr_from_user+0x302/0x5e0 [ 567.398623][ T8055] __import_iovec+0x71/0x390 [ 567.403391][ T8055] ? __ia32_sys_shutdown+0x1e0/0x1e0 [ 567.408873][ T8055] import_iovec+0x7c/0xb0 [ 567.413214][ T8055] ___sys_sendmsg+0x1b9/0x260 [ 567.417906][ T8055] ? __sys_sendmsg+0x250/0x250 [ 567.422914][ T8055] ? kstrtouint_from_user+0x1a0/0x200 [ 567.428409][ T8055] ? __fdget+0x1a1/0x230 [ 567.432773][ T8055] __sys_sendmmsg+0x273/0x450 [ 567.437653][ T8055] ? __ia32_sys_sendmsg+0x2a0/0x2a0 [ 567.442867][ T8055] ? __ia32_sys_read+0x90/0x90 [ 567.447651][ T8055] ? fpu__clear_all+0x20/0x20 [ 567.452327][ T8055] __x64_sys_sendmmsg+0xa0/0xb0 [ 567.457177][ T8055] do_syscall_64+0x31/0x40 [ 567.461613][ T8055] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 567.467599][ T8055] RIP: 0033:0x7f47882ac969 [ 567.472097][ T8055] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 567.492441][ T8055] RSP: 002b:00007f47868f4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 567.501311][ T8055] RAX: ffffffffffffffda RBX: 00007f47884d4080 RCX: 00007f47882ac969 [ 567.509362][ T8055] RDX: 04000000000001f2 RSI: 0000200000000000 RDI: 0000000000000009 [ 567.517532][ T8055] RBP: 00007f47868f4090 R08: 0000000000000000 R09: 0000000000000000 [ 567.525596][ T8055] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 567.533907][ T8055] R13: 0000000000000000 R14: 00007f47884d4080 R15: 00007ffef9254b98 [ 567.647207][ T24] audit: type=1400 audit(1746818837.640:2004): avc: denied { ioctl } for pid=8069 comm="syz.2.2072" path="socket:[39048]" dev="sockfs" ino=39048 ioctlcmd=0x7459 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 567.990283][ T24] audit: type=1400 audit(1746818837.670:2005): avc: denied { read write } for pid=8069 comm="syz.2.2072" name="uhid" dev="devtmpfs" ino=261 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 568.568396][ T24] audit: type=1400 audit(1746818837.670:2006): avc: denied { open } for pid=8069 comm="syz.2.2072" path="/dev/uhid" dev="devtmpfs" ino=261 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 568.781933][ T8066] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 568.803241][ T8066] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 568.863113][ T8066] F2FS-fs (loop1): invalid crc value [ 568.883476][ T8066] F2FS-fs (loop1): Found nat_bits in checkpoint [ 568.995910][ T8066] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 569.003156][ T8066] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 569.215889][ T8104] incfs: Error accessing: ./file0. [ 569.221896][ T8104] incfs: mount failed -2 [ 570.012081][ T8119] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 570.047200][ T8119] EXT4-fs (loop2): 1 truncate cleaned up [ 570.053493][ T8119] EXT4-fs (loop2): mounted filesystem without journal. Opts: quota,,errors=continue [ 571.239064][ T8141] syz.5.2084[8141] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 571.239154][ T8141] syz.5.2084[8141] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 571.485593][ T976] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 571.558347][ T24] audit: type=1400 audit(1746818841.550:2007): avc: denied { write } for pid=8116 comm="syz.0.2085" name="kvm" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 571.875533][ T976] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 571.894280][ T976] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 572.029829][ T976] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 572.050516][ T976] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 572.068106][ T976] usb 5-1: SerialNumber: syz [ 572.346165][ T8159] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 572.362022][ T8159] EXT4-fs (loop1): 1 truncate cleaned up [ 572.368604][ T8159] EXT4-fs (loop1): mounted filesystem without journal. Opts: quota,,errors=continue [ 572.376417][ T976] usb 5-1: 0:2 : does not exist [ 572.424361][ T976] usb 5-1: USB disconnect, device number 31 [ 572.430686][ T8163] incfs: Error accessing: ./file0. [ 572.436258][ T8163] incfs: mount failed -2 [ 572.852906][ T1611] hid-generic 0000:0003:0000.0011: unknown main item tag 0x0 [ 572.862304][ T1611] hid-generic 0000:0003:0000.0011: unknown main item tag 0x0 [ 572.878344][ T1611] hid-generic 0000:0003:0000.0011: hidraw0: HID v0.00 Device [syz0] on syz1 [ 573.213070][ T24] audit: type=1400 audit(1746818843.200:2008): avc: denied { lock } for pid=8178 comm="syz.5.2102" path="socket:[38492]" dev="sockfs" ino=38492 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 574.539680][ T24] audit: type=1400 audit(1746818844.500:2009): avc: denied { create } for pid=8195 comm="syz.0.2107" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 574.785580][ T24] audit: type=1400 audit(1746818844.500:2010): avc: denied { write } for pid=8195 comm="syz.0.2107" name="file0" dev="tmpfs" ino=2789 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 574.809148][ T24] audit: type=1400 audit(1746818844.500:2011): avc: denied { open } for pid=8195 comm="syz.0.2107" path="/470/file0" dev="tmpfs" ino=2789 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 574.865565][ T24] audit: type=1400 audit(1746818844.500:2012): avc: denied { ioctl } for pid=8195 comm="syz.0.2107" path="/470/file0" dev="tmpfs" ino=2789 ioctlcmd=0x1275 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 574.985653][ T24] audit: type=1400 audit(1746818844.830:2013): avc: denied { unlink } for pid=270 comm="syz-executor" name="file0" dev="tmpfs" ino=2789 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 575.020922][ T8188] EXT4-fs error (device loop5): ext4_orphan_get:1395: inode #15: comm syz.5.2104: casefold flag without casefold feature [ 575.054829][ T8188] EXT4-fs error (device loop5): ext4_orphan_get:1400: comm syz.5.2104: couldn't read orphan inode 15 (err -117) [ 575.067740][ T8215] incfs: Error accessing: ./file0. [ 575.073135][ T8215] incfs: mount failed -2 [ 575.136873][ T8188] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue [ 575.180268][ T8209] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 575.188807][ T8209] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 575.355567][ T8209] F2FS-fs (loop1): invalid crc value [ 575.379738][ T8209] F2FS-fs (loop1): Found nat_bits in checkpoint [ 575.453030][ T8209] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 575.462595][ T8209] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 576.105054][ T24] audit: type=1400 audit(1746818846.090:2014): avc: denied { remount } for pid=8234 comm="syz.0.2117" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 576.475717][ T2118] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 576.545638][ T976] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 576.657338][ T8252] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,minixdf,,errors=continue [ 576.671342][ T8252] ext4 filesystem being mounted at /395/bus/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 576.861039][ T8259] usb usb8: usbfs: process 8259 (syz.4.2121) did not claim interface 0 before use [ 576.925826][ T976] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 576.938597][ T976] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 576.955759][ T2118] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 577.166752][ T2118] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 577.205577][ T976] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 577.225413][ T976] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 577.234135][ T976] usb 1-1: SerialNumber: syz [ 577.245935][ T24] audit: type=1326 audit(1746818847.240:2015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8260 comm="syz.5.2122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2e8ec2969 code=0x7ffc0000 [ 577.269723][ T2118] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 577.279196][ T2118] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 577.285214][ T24] audit: type=1326 audit(1746818847.240:2016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8260 comm="syz.5.2122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2e8ec2969 code=0x7ffc0000 [ 577.288058][ T2118] usb 3-1: SerialNumber: syz [ 577.336024][ T24] audit: type=1326 audit(1746818847.240:2017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8260 comm="syz.5.2122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=284 compat=0 ip=0x7ff2e8ec2969 code=0x7ffc0000 [ 577.410379][ T8263] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 577.418630][ T8263] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 577.428912][ T8263] F2FS-fs (loop1): invalid crc value [ 577.437865][ T8263] F2FS-fs (loop1): Found nat_bits in checkpoint [ 577.476739][ T8263] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 577.484457][ T8263] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 577.542793][ T8251] netlink: 9 bytes leftover after parsing attributes in process `syz.0.2120'. [ 577.632359][ T8274] syz.5.2125[8274] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 577.632524][ T8274] syz.5.2125[8274] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 577.688318][ T8251] device 30XD entered promiscuous mode [ 577.718391][ T8238] netlink: 9 bytes leftover after parsing attributes in process `syz.2.2119'. [ 578.157435][ T8238] device 31XD entered promiscuous mode [ 578.312566][ T8275] netlink: 5 bytes leftover after parsing attributes in process `syz.0.2120'. [ 578.328302][ T8275] 1XD: renamed from 30XD [ 578.349667][ T8275] device 31XD left promiscuous mode [ 578.368288][ T8275] A link change request failed with some changes committed already. Interface 31XD may have been left with an inconsistent configuration, please check. [ 578.446729][ T8280] netlink: 5 bytes leftover after parsing attributes in process `syz.2.2119'. [ 578.466973][ T8280] 0XD: renamed from 31XD [ 578.481427][ T8280] device 30XD left promiscuous mode [ 578.496219][ T8280] A link change request failed with some changes committed already. Interface 30XD may have been left with an inconsistent configuration, please check. [ 578.639378][ T2118] usb 3-1: 0:2 : does not exist [ 578.761916][ T976] usb 1-1: 0:2 : does not exist [ 578.770031][ T2118] usb 3-1: USB disconnect, device number 31 [ 578.806603][ T8288] incfs: Error accessing: ./file0. [ 578.812098][ T8288] incfs: mount failed -2 [ 578.821458][ T976] usb 1-1: USB disconnect, device number 26 [ 579.082657][ T8277] EXT4-fs error (device loop4): ext4_orphan_get:1395: inode #15: comm syz.4.2126: casefold flag without casefold feature [ 579.098372][ T8277] EXT4-fs error (device loop4): ext4_orphan_get:1400: comm syz.4.2126: couldn't read orphan inode 15 (err -117) [ 579.121959][ T8277] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 579.216044][ T577] udevd[577]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card1/controlC1/../uevent} for writing: No such file or directory [ 581.168468][ T8344] syz.0.2138[8344] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 581.168531][ T8344] syz.0.2138[8344] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 581.277857][ T8345] xt_CT: You must specify a L4 protocol and not use inversions on it [ 582.017853][ T8332] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 582.312351][ T8332] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 582.376277][ T8332] F2FS-fs (loop5): invalid crc value [ 582.460056][ T8332] F2FS-fs (loop5): Found nat_bits in checkpoint [ 582.589325][ T8332] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 582.621031][ T8332] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 586.145345][ T8385] EXT4-fs (loop5): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,quota,,errors=continue [ 586.159755][ T8385] ext4 filesystem being mounted at /87/bus/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 586.766636][ T8404] syz.1.2153[8404] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 586.766982][ T8404] syz.1.2153[8404] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 587.968788][ T8404] EXT4-fs (loop1): Test dummy encryption mode enabled [ 587.988012][ T8404] EXT4-fs (loop1): Test dummy encryption mode enabled [ 588.008516][ T8412] exfat: Deprecated parameter 'utf8' [ 588.020869][ T8404] EXT4-fs (loop1): mounted filesystem without journal. Opts: test_dummy_encryption=v1,test_dummy_encryption=v1,,errors=continue [ 588.035272][ T8404] ext4 filesystem being mounted at /401/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 588.053019][ T8412] exfat: Deprecated parameter 'utf8' [ 588.114646][ T8412] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x18acca35, utbl_chksum : 0xe619d30d) [ 590.908317][ T8423] EXT4-fs (loop5): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,quota,,errors=continue [ 590.923257][ T8423] ext4 filesystem being mounted at /88/bus/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 591.645490][ T8245] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 593.645495][ T8244] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 593.664655][ T8468] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,quota,,errors=continue [ 593.679019][ T8468] ext4 filesystem being mounted at /405/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 595.132477][ T8244] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 595.163818][ T8244] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 595.266336][ T8244] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 595.280470][ T8244] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 595.297412][ T8244] usb 3-1: SerialNumber: syz [ 595.591939][ T8483] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2175'. [ 595.667331][ T8460] netlink: 9 bytes leftover after parsing attributes in process `syz.2.2169'. [ 595.676903][ T8460] device 30XD entered promiscuous mode [ 595.684444][ T8460] netlink: 5 bytes leftover after parsing attributes in process `syz.2.2169'. [ 595.694146][ T8460] 1XD: renamed from 30XD [ 595.700482][ T8481] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 595.706573][ T8460] device 31XD left promiscuous mode [ 595.715716][ T8481] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 595.721053][ T8460] A link change request failed with some changes committed already. Interface 31XD may have been left with an inconsistent configuration, please check. [ 595.741030][ T8481] F2FS-fs (loop1): invalid crc value [ 595.753430][ T8481] F2FS-fs (loop1): Found nat_bits in checkpoint [ 595.787370][ T8244] usb 3-1: 0:2 : does not exist [ 595.806404][ T8244] usb 3-1: USB disconnect, device number 32 [ 595.824049][ T8481] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 595.831872][ T8481] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 595.885526][ T1697] usb 6-1: new full-speed USB device number 8 using dummy_hcd [ 598.155632][ T1697] usb 6-1: unable to get BOS descriptor or descriptor too short [ 601.724993][ T8528] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,minixdf,,errors=continue [ 601.740160][ T8528] ext4 filesystem being mounted at /409/bus/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 602.924072][ T1697] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 603.003507][ T1697] usb 6-1: can't read configurations, error -71 [ 604.129450][ T8245] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 604.147322][ T8245] hid-generic 0000:0000:0000.0012: hidraw0: HID v0.00 Device [syz1] on syz0 [ 605.565562][ T24] kauditd_printk_skb: 5 callbacks suppressed [ 605.565795][ T24] audit: type=1400 audit(1746818875.520:2023): avc: denied { connect } for pid=8556 comm="syz.4.2192" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 606.329457][ T8563] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 606.353656][ T8563] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 606.387140][ T8563] F2FS-fs (loop5): invalid crc value [ 606.417427][ T8563] F2FS-fs (loop5): Found nat_bits in checkpoint [ 606.453470][ T8563] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 606.460680][ T8563] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 606.476144][ T8579] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=4 (8 ns) > initial count (4 ns). Using initial count to start timer. [ 606.625491][ T1697] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 606.665595][ T976] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 607.170756][ T8593] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 607.183311][ T8593] EXT4-fs (loop5): 1 truncate cleaned up [ 607.189187][ T8593] EXT4-fs (loop5): mounted filesystem without journal. Opts: quota,,errors=continue [ 607.225571][ T1697] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 607.235806][ T976] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 607.236719][ T1697] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 607.265743][ T976] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 607.335675][ T1697] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 607.345017][ T1697] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 607.353832][ T1697] usb 1-1: SerialNumber: syz [ 607.355624][ T976] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 607.497016][ T8597] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 607.604871][ T8577] netlink: 9 bytes leftover after parsing attributes in process `syz.0.2197'. [ 607.626385][ T8597] EXT4-fs (loop1): 1 truncate cleaned up [ 607.651036][ T8577] device 31XD entered promiscuous mode [ 607.659749][ T8597] EXT4-fs (loop1): mounted filesystem without journal. Opts: quota,,errors=continue [ 607.703845][ T8608] netlink: 5 bytes leftover after parsing attributes in process `syz.0.2197'. [ 607.873184][ T8608] 0XD: renamed from 31XD [ 607.992363][ T8608] device 30XD left promiscuous mode [ 608.055266][ T8608] A link change request failed with some changes committed already. Interface 30XD may have been left with an inconsistent configuration, please check. [ 608.296548][ T1697] usb 1-1: 0:2 : does not exist [ 608.324284][ T1697] usb 1-1: USB disconnect, device number 27 [ 608.362271][ T976] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 608.371010][ T976] usb 5-1: SerialNumber: syz [ 609.333043][ T8582] netlink: 9 bytes leftover after parsing attributes in process `syz.4.2199'. [ 609.355596][ T24] audit: type=1400 audit(1746818879.340:2024): avc: denied { audit_write } for pid=8624 comm="syz.0.2208" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 609.408818][ T8582] device 31XD entered promiscuous mode [ 609.448007][ T8622] netlink: 5 bytes leftover after parsing attributes in process `syz.4.2199'. [ 609.465496][ T24] audit: type=1107 audit(1746818879.340:2025): pid=8624 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 609.598081][ T8622] 0XD: renamed from 31XD [ 609.609796][ T24] audit: type=1400 audit(1746818879.340:2026): avc: denied { mount } for pid=8624 comm="syz.0.2208" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 609.634683][ T8622] device 30XD left promiscuous mode [ 609.639987][ T24] audit: type=1400 audit(1746818879.400:2027): avc: denied { mounton } for pid=8624 comm="syz.0.2208" path="/495/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 609.974235][ T8622] A link change request failed with some changes committed already. Interface 30XD may have been left with an inconsistent configuration, please check. [ 609.999125][ T24] audit: type=1400 audit(1746818879.990:2028): avc: denied { unmount } for pid=270 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 610.161607][ T976] usb 5-1: 0:2 : does not exist [ 610.169096][ T976] usb 5-1: USB disconnect, device number 32 [ 610.735053][ T8637] usb usb8: usbfs: process 8637 (syz.0.2210) did not claim interface 0 before use [ 610.747131][ T8644] sch_tbf: peakrate 2147483647 is lower than or equals to rate 2831036522994172386 ! [ 611.104394][ T8533] udevd[8533]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 611.141292][ T24] audit: type=1400 audit(1746818881.130:2029): avc: denied { write } for pid=8646 comm="syz.2.2215" name="event2" dev="devtmpfs" ino=268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 611.170057][ T24] audit: type=1400 audit(1746818881.130:2030): avc: denied { open } for pid=8646 comm="syz.2.2215" path="/dev/input/event2" dev="devtmpfs" ino=268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 611.205574][ T24] audit: type=1400 audit(1746818881.190:2031): avc: denied { write } for pid=8648 comm="syz.0.2213" name="usbmon8" dev="devtmpfs" ino=178 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 611.513172][ T8663] syz.4.2216[8663] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 611.514894][ T8663] syz.4.2216[8663] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 611.743477][ T8244] usb 3-1: new low-speed USB device number 33 using dummy_hcd [ 613.010450][ T8641] EXT4-fs error (device loop1): ext4_orphan_get:1395: inode #15: comm syz.1.2212: casefold flag without casefold feature [ 613.030954][ T24] audit: type=1326 audit(1746818883.020:2032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8664 comm="syz.4.2218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47882ac969 code=0x7ffc0000 [ 613.135729][ T8641] EXT4-fs error (device loop1): ext4_orphan_get:1400: comm syz.1.2212: couldn't read orphan inode 15 (err -117) [ 613.158372][ T8641] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 613.175536][ T24] audit: type=1326 audit(1746818883.020:2033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8664 comm="syz.4.2218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47882ac969 code=0x7ffc0000 [ 613.200090][ T8244] usb 3-1: device descriptor read/64, error -71 [ 613.308235][ T24] audit: type=1326 audit(1746818883.050:2034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8664 comm="syz.4.2218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=284 compat=0 ip=0x7f47882ac969 code=0x7ffc0000 [ 613.335232][ T24] audit: type=1326 audit(1746818883.050:2035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8664 comm="syz.4.2218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47882ac969 code=0x7ffc0000 [ 613.362258][ T24] audit: type=1326 audit(1746818883.050:2036): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8664 comm="syz.4.2218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47882ac969 code=0x7ffc0000 [ 613.665636][ T8244] usb 3-1: device descriptor read/64, error -71 [ 613.763598][ T8685] 9pnet: Insufficient options for proto=fd [ 613.810819][ T8679] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 613.952649][ T8679] EXT4-fs (loop1): 1 truncate cleaned up [ 613.975631][ T8244] usb 3-1: new low-speed USB device number 34 using dummy_hcd [ 614.081623][ T8680] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,quota,,errors=continue [ 614.096815][ T8680] ext4 filesystem being mounted at /448/bus/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 614.186636][ T8679] EXT4-fs (loop1): mounted filesystem without journal. Opts: quota,,errors=continue [ 614.396985][ T24] audit: type=1400 audit(1746818884.390:2037): avc: denied { accept } for pid=8691 comm="syz.0.2226" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 614.484605][ T8693] sch_tbf: peakrate 2147483647 is lower than or equals to rate 2831036522994172386 ! [ 614.737403][ T8692] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2226'. [ 615.172785][ T24] audit: type=1326 audit(1746818885.160:2038): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8706 comm="syz.5.2231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2e8ec2969 code=0x7ffc0000 [ 616.166977][ T8719] 9pnet: Insufficient options for proto=fd [ 616.234910][ T24] kauditd_printk_skb: 29 callbacks suppressed [ 616.234924][ T24] audit: type=1326 audit(1746818886.220:2068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8724 comm="syz.0.2237" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f403de9e969 code=0x7ffc0000 [ 616.288614][ T24] audit: type=1326 audit(1746818886.270:2069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8724 comm="syz.0.2237" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f403de9e969 code=0x7ffc0000 [ 616.379884][ T24] audit: type=1326 audit(1746818886.280:2070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8724 comm="syz.0.2237" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f403de9e969 code=0x7ffc0000 [ 616.409775][ T24] audit: type=1326 audit(1746818886.280:2071): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8724 comm="syz.0.2237" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f403de9e969 code=0x7ffc0000 [ 616.434881][ T24] audit: type=1326 audit(1746818886.280:2072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8724 comm="syz.0.2237" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f403de9e969 code=0x7ffc0000 [ 616.461389][ T24] audit: type=1326 audit(1746818886.280:2073): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8724 comm="syz.0.2237" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f403de9e969 code=0x7ffc0000 [ 616.561003][ T24] audit: type=1326 audit(1746818886.280:2074): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8724 comm="syz.0.2237" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f403de9e969 code=0x7ffc0000 [ 616.613736][ T24] audit: type=1326 audit(1746818886.280:2075): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8724 comm="syz.0.2237" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f403de9e969 code=0x7ffc0000 [ 616.639366][ T24] audit: type=1326 audit(1746818886.280:2076): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8724 comm="syz.0.2237" exe="/root/syz-executor" sig=0 arch=c000003e syscall=262 compat=0 ip=0x7f403de9e969 code=0x7ffc0000 [ 616.664856][ T24] audit: type=1326 audit(1746818886.280:2077): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8724 comm="syz.0.2237" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f403de9e969 code=0x7ffc0000 [ 616.765549][ T2120] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 617.095488][ T2120] usb 1-1: Using ep0 maxpacket: 32 [ 617.216760][ T2120] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 617.245735][ T2120] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 1024 [ 617.276777][ T2120] usb 1-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 617.365800][ T2120] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 617.419321][ T2120] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 617.437724][ T8750] EXT4-fs (loop5): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,minixdf,,errors=continue [ 617.451875][ T8750] ext4 filesystem being mounted at /103/bus/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 617.479518][ T2120] usb 1-1: SerialNumber: syz [ 617.505520][ T8755] EXT4-fs (loop4): orphan cleanup on readonly fs [ 617.513517][ T8755] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.2244: bg 0: block 248: padding at end of block bitmap is not set [ 617.530651][ T8755] EXT4-fs error (device loop4): ext4_acquire_dquot:6226: comm syz.4.2244: Failed to acquire dquot type 1 [ 617.544169][ T8755] EXT4-fs (loop4): 1 truncate cleaned up [ 617.550476][ T8755] EXT4-fs (loop4): mounted filesystem without journal. Opts: bsdgroups,nodiscard,noblock_validity,grpjquota=,grpjquota=,noquota,auto_da_alloc,noload,nodiscard,,errors=continue [ 617.573671][ T8755] EXT4-fs error (device loop4): ext4_lookup:1834: inode #2: comm syz.4.2244: deleted inode referenced: 12 [ 617.626155][ T8725] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 617.646012][ T2120] cdc_acm 1-1:1.0: Control and data interfaces are not separated! [ 617.662861][ T2120] cdc_acm 1-1:1.0: ttyACM0: USB ACM device [ 617.744650][ T8766] 9pnet: Insufficient options for proto=fd [ 617.788331][ T8763] exfat: Deprecated parameter 'utf8' [ 617.812115][ T8763] exfat: Deprecated parameter 'utf8' [ 617.926393][ T8763] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x18acca35, utbl_chksum : 0xe619d30d) [ 617.979634][ T2120] usb 1-1: USB disconnect, device number 28 [ 618.293834][ T8774] syz.4.2250[8774] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 618.293922][ T8774] syz.4.2250[8774] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 618.685770][ T2120] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 619.064799][ T8799] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 619.087049][ T8799] EXT4-fs (loop4): 1 truncate cleaned up [ 619.093141][ T8799] EXT4-fs (loop4): mounted filesystem without journal. Opts: quota,,errors=continue [ 619.238926][ T2120] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 619.251897][ T2120] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 619.419174][ T2120] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 619.429215][ T2120] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 619.438318][ T2120] usb 6-1: SerialNumber: syz [ 619.874951][ T8782] netlink: 9 bytes leftover after parsing attributes in process `syz.5.2253'. [ 620.351109][ T8782] device 30XD entered promiscuous mode [ 620.361994][ T8808] netlink: 5 bytes leftover after parsing attributes in process `syz.5.2253'. [ 620.378759][ T8808] 1XD: renamed from 30XD [ 620.384631][ T8808] device 31XD left promiscuous mode [ 620.410769][ T8808] A link change request failed with some changes committed already. Interface 31XD may have been left with an inconsistent configuration, please check. [ 620.516320][ T2120] usb 6-1: 0:2 : does not exist [ 620.527353][ T2120] usb 6-1: USB disconnect, device number 10 [ 620.545976][ T8812] FAULT_INJECTION: forcing a failure. [ 620.545976][ T8812] name failslab, interval 1, probability 0, space 0, times 0 [ 620.569092][ T8812] CPU: 0 PID: 8812 Comm: syz.2.2261 Not tainted 5.10.237-syzkaller-00309-g7e2543346ff7 #0 [ 620.579278][ T8812] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 620.589700][ T8812] Call Trace: [ 620.593280][ T8812] __dump_stack+0x21/0x24 [ 620.597713][ T8812] dump_stack_lvl+0x169/0x1d8 [ 620.602491][ T8812] ? thaw_kernel_threads+0x220/0x220 [ 620.608389][ T8812] ? show_regs_print_info+0x18/0x18 [ 620.613676][ T8812] ? legacy_init_fs_context+0x51/0xb0 [ 620.619232][ T8812] dump_stack+0x15/0x1c [ 620.623956][ T8812] should_fail+0x3c1/0x510 [ 620.628935][ T8812] ? alloc_super+0x5e/0x7a0 [ 620.633630][ T8812] __should_failslab+0xa4/0xe0 [ 620.638400][ T8812] should_failslab+0x9/0x20 [ 620.643014][ T8812] kmem_cache_alloc_trace+0x3a/0x2e0 [ 620.648316][ T8812] ? _raw_spin_lock+0x8e/0xe0 [ 620.653109][ T8812] alloc_super+0x5e/0x7a0 [ 620.657515][ T8812] sget+0x1e4/0x4c0 [ 620.661365][ T8812] ? free_anon_bdev+0x30/0x30 [ 620.666057][ T8812] incfs_mount_fs+0xc3/0x8c0 [ 620.670761][ T8812] ? selinux_capset+0xf0/0xf0 [ 620.675701][ T8812] ? incfs_unlink+0x80/0x80 [ 620.680294][ T8812] legacy_get_tree+0xed/0x190 [ 620.685257][ T8812] ? incfs_unlink+0x80/0x80 [ 620.689883][ T8812] vfs_get_tree+0x89/0x260 [ 620.694487][ T8812] do_new_mount+0x25a/0xa20 [ 620.699201][ T8812] path_mount+0x572/0xc80 [ 620.703671][ T8812] __se_sys_mount+0x318/0x380 [ 620.708428][ T8812] ? fput+0x1a/0x20 [ 620.712229][ T8812] ? __x64_sys_mount+0xd0/0xd0 [ 620.717250][ T8812] ? fpu__clear_all+0x20/0x20 [ 620.721917][ T8812] __x64_sys_mount+0xbf/0xd0 [ 620.726593][ T8812] do_syscall_64+0x31/0x40 [ 620.731021][ T8812] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 620.737074][ T8812] RIP: 0033:0x7f37f0d1f969 [ 620.741833][ T8812] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 620.762626][ T8812] RSP: 002b:00007f37ef388038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 620.771209][ T8812] RAX: ffffffffffffffda RBX: 00007f37f0f46fa0 RCX: 00007f37f0d1f969 [ 620.779458][ T8812] RDX: 0000200000000040 RSI: 0000200000000100 RDI: 0000000000000000 [ 620.787764][ T8812] RBP: 00007f37ef388090 R08: 0000000000000000 R09: 0000000000000000 [ 620.796275][ T8812] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 620.804673][ T8812] R13: 0000000000000000 R14: 00007f37f0f46fa0 R15: 00007ffd09563df8 [ 621.025538][ T8244] Bluetooth: hci0: command 0x1003 tx timeout [ 621.035517][ T3461] Bluetooth: hci0: sending frame failed (-49) [ 621.363050][ T8818] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 621.371210][ T2120] usb 3-1: new full-speed USB device number 35 using dummy_hcd [ 621.440053][ T972] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 621.464221][ T8818] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 621.474051][ T8818] F2FS-fs (loop1): invalid crc value [ 621.481160][ T8818] F2FS-fs (loop1): Found nat_bits in checkpoint [ 621.525483][ T8818] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 621.532998][ T8818] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 621.999911][ T8842] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,minixdf,,errors=continue [ 622.014326][ T8842] ext4 filesystem being mounted at /459/bus/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 622.045628][ T2120] usb 3-1: config 127 has an invalid interface number: 8 but max is 1 [ 622.055951][ T2120] usb 3-1: config 127 contains an unexpected descriptor of type 0x2, skipping [ 622.066562][ T2120] usb 3-1: config 127 has an invalid interface number: 201 but max is 1 [ 622.075196][ T2120] usb 3-1: config 127 contains an unexpected descriptor of type 0x2, skipping [ 622.084611][ T972] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 622.095751][ T2120] usb 3-1: config 127 has no interface number 0 [ 622.102644][ T2120] usb 3-1: config 127 has no interface number 1 [ 622.109466][ T972] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 622.119274][ T2120] usb 3-1: config 127 interface 8 altsetting 5 has a duplicate endpoint with address 0xF, skipping [ 622.135651][ T2120] usb 3-1: config 127 interface 8 altsetting 5 has a duplicate endpoint with address 0xF, skipping [ 622.146969][ T2120] usb 3-1: config 127 interface 8 altsetting 5 has an invalid endpoint with address 0x80, skipping [ 622.158173][ T2120] usb 3-1: config 127 interface 8 altsetting 5 has an invalid endpoint with address 0x80, skipping [ 622.169428][ T2120] usb 3-1: config 127 interface 8 altsetting 5 has a duplicate endpoint with address 0x8D, skipping [ 622.180703][ T2120] usb 3-1: config 127 interface 8 altsetting 5 has a duplicate endpoint with address 0x3, skipping [ 622.192131][ T2120] usb 3-1: config 127 interface 8 altsetting 5 has an invalid endpoint with address 0x0, skipping [ 622.203471][ T2120] usb 3-1: config 127 interface 8 altsetting 5 has an invalid endpoint with address 0x0, skipping [ 622.214366][ T2120] usb 3-1: config 127 interface 8 altsetting 5 endpoint 0x8 has invalid wMaxPacketSize 0 [ 622.224428][ T972] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 622.233841][ T2120] usb 3-1: config 127 interface 8 altsetting 5 endpoint 0xC has invalid maxpacket 512, setting to 64 [ 622.245496][ T972] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 622.254486][ T2120] usb 3-1: config 127 interface 8 altsetting 5 endpoint 0x7 has invalid maxpacket 1024, setting to 64 [ 622.266057][ T972] usb 6-1: SerialNumber: syz [ 622.272171][ T2120] usb 3-1: config 127 interface 8 altsetting 5 has a duplicate endpoint with address 0x6, skipping [ 622.283410][ T2120] usb 3-1: config 127 interface 201 altsetting 5 endpoint 0x4 has invalid maxpacket 1024, setting to 64 [ 622.294809][ T2120] usb 3-1: config 127 interface 201 altsetting 5 has a duplicate endpoint with address 0x6, skipping [ 622.306365][ T2120] usb 3-1: config 127 interface 201 altsetting 5 has a duplicate endpoint with address 0xF, skipping [ 622.317538][ T2120] usb 3-1: config 127 interface 201 altsetting 5 has a duplicate endpoint with address 0x7, skipping [ 622.328527][ T2120] usb 3-1: config 127 interface 201 altsetting 5 has a duplicate endpoint with address 0xF, skipping [ 622.339803][ T2120] usb 3-1: config 127 interface 201 altsetting 5 has a duplicate endpoint with address 0x4, skipping [ 622.350863][ T2120] usb 3-1: config 127 interface 201 altsetting 5 has a duplicate endpoint with address 0x4, skipping [ 622.363219][ T2120] usb 3-1: config 127 interface 201 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 622.374518][ T2120] usb 3-1: config 127 interface 201 altsetting 5 has a duplicate endpoint with address 0xD, skipping [ 622.510259][ T8824] netlink: 9 bytes leftover after parsing attributes in process `syz.5.2266'. [ 622.537983][ T8824] device 31XD entered promiscuous mode [ 622.577601][ T8853] netlink: 5 bytes leftover after parsing attributes in process `syz.5.2266'. [ 622.618324][ T8853] 0XD: renamed from 31XD [ 622.680259][ T8853] device 30XD left promiscuous mode [ 622.712719][ T8853] A link change request failed with some changes committed already. Interface 30XD may have been left with an inconsistent configuration, please check. [ 623.435655][ T2120] usb 3-1: config 127 interface 201 altsetting 5 has a duplicate endpoint with address 0x5, skipping [ 623.439340][ T8244] Bluetooth: hci0: command 0x1001 tx timeout [ 623.447852][ T972] usb 6-1: 0:2 : does not exist [ 623.453352][ T3461] Bluetooth: hci0: sending frame failed (-49) [ 623.467667][ T972] usb 6-1: USB disconnect, device number 11 [ 623.550399][ T8852] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 623.564691][ T8852] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 623.574307][ T8852] F2FS-fs (loop4): invalid crc value [ 623.588918][ T8852] F2FS-fs (loop4): Found nat_bits in checkpoint [ 623.592771][ T2120] usb 3-1: config 127 interface 8 has no altsetting 0 [ 623.680768][ T2120] usb 3-1: config 127 interface 201 has no altsetting 0 [ 623.680999][ T8852] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 623.695503][ T8852] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 623.905600][ T2120] usb 3-1: New USB device found, idVendor=1199, idProduct=9053, bcdDevice=b8.1d [ 623.914795][ T2120] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 623.946082][ T2120] usb 3-1: Product: 횀䱐牆ਊ옝姰귿䡼榶탼ʡ耹ﮠ鸫ർ [ 624.009293][ T2120] usb 3-1: Manufacturer: Ⰺ [ 624.027090][ T2120] usb 3-1: SerialNumber: syz [ 624.245554][ T2120] usb 3-1: can't set config #127, error -71 [ 624.329274][ T972] usb 6-1: new full-speed USB device number 12 using dummy_hcd [ 624.342177][ T2120] usb 3-1: USB disconnect, device number 35 [ 624.704754][ T8877] usb usb8: usbfs: process 8877 (syz.4.2275) did not claim interface 0 before use [ 624.865935][ T8879] xt_CT: You must specify a L4 protocol and not use inversions on it [ 624.965870][ T972] usb 6-1: config 1 interface 0 altsetting 1 endpoint 0x81 has invalid maxpacket 65535, setting to 64 [ 624.996777][ T972] usb 6-1: config 1 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 625.066480][ T972] usb 6-1: config 1 interface 0 has no altsetting 0 [ 625.255849][ T972] usb 6-1: New USB device found, idVendor=054c, idProduct=03d5, bcdDevice= 0.40 [ 625.265200][ T972] usb 6-1: New USB device strings: Mfr=65, Product=2, SerialNumber=3 [ 625.274102][ T972] usb 6-1: Product: syz [ 625.278833][ T972] usb 6-1: Manufacturer: syz [ 625.283842][ T972] usb 6-1: SerialNumber: syz [ 625.292629][ T24] kauditd_printk_skb: 88 callbacks suppressed [ 625.292644][ T24] audit: type=1326 audit(1746818895.290:2164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8880 comm="syz.1.2277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff60d899969 code=0x7ffc0000 [ 625.323210][ T24] audit: type=1326 audit(1746818895.290:2165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8880 comm="syz.1.2277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff60d899969 code=0x7ffc0000 [ 625.329122][ T8864] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 625.505653][ T4350] Bluetooth: hci0: command 0x1009 tx timeout [ 625.709825][ T8864] udc-core: couldn't find an available UDC or it's busy [ 625.724769][ T8864] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 625.748017][ T8864] udc-core: couldn't find an available UDC or it's busy [ 625.757065][ T8864] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 625.901256][ T8897] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 625.914021][ T8897] EXT4-fs (loop1): 1 truncate cleaned up [ 625.920131][ T8897] EXT4-fs (loop1): mounted filesystem without journal. Opts: quota,,errors=continue [ 626.025530][ T972] usbhid 6-1:1.0: can't add hid device: -71 [ 626.034595][ T972] usbhid: probe of 6-1:1.0 failed with error -71 [ 626.045517][ T972] usb 6-1: USB disconnect, device number 12 [ 626.369718][ T8902] exfat: Deprecated parameter 'utf8' [ 626.375253][ T8902] exfat: Deprecated parameter 'utf8' [ 626.386506][ T8902] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x18acca35, utbl_chksum : 0xe619d30d) [ 626.596883][ T8910] usb usb8: usbfs: process 8910 (syz.5.2284) did not claim interface 0 before use [ 626.685740][ T2118] usb 3-1: new full-speed USB device number 36 using dummy_hcd [ 627.085465][ T4350] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 627.095678][ T2118] usb 3-1: config 127 has an invalid interface number: 8 but max is 1 [ 627.104514][ T2118] usb 3-1: config 127 contains an unexpected descriptor of type 0x2, skipping [ 627.114039][ T2118] usb 3-1: config 127 has an invalid interface number: 201 but max is 1 [ 627.123095][ T2118] usb 3-1: config 127 contains an unexpected descriptor of type 0x2, skipping [ 627.132991][ T2118] usb 3-1: config 127 has no interface number 0 [ 627.140159][ T2118] usb 3-1: config 127 has no interface number 1 [ 627.146779][ T2118] usb 3-1: config 127 interface 8 altsetting 5 has a duplicate endpoint with address 0xF, skipping [ 627.158295][ T2118] usb 3-1: config 127 interface 8 altsetting 5 has a duplicate endpoint with address 0xF, skipping [ 627.169470][ T2118] usb 3-1: config 127 interface 8 altsetting 5 has an invalid endpoint with address 0x80, skipping [ 627.180757][ T2118] usb 3-1: config 127 interface 8 altsetting 5 has an invalid endpoint with address 0x80, skipping [ 627.192514][ T2118] usb 3-1: config 127 interface 8 altsetting 5 has a duplicate endpoint with address 0x8D, skipping [ 627.203884][ T2118] usb 3-1: config 127 interface 8 altsetting 5 has a duplicate endpoint with address 0x3, skipping [ 627.215185][ T2118] usb 3-1: config 127 interface 8 altsetting 5 has an invalid endpoint with address 0x0, skipping [ 627.226039][ T2118] usb 3-1: config 127 interface 8 altsetting 5 has an invalid endpoint with address 0x0, skipping [ 627.236964][ T2118] usb 3-1: config 127 interface 8 altsetting 5 endpoint 0x8 has invalid wMaxPacketSize 0 [ 627.247436][ T2118] usb 3-1: config 127 interface 8 altsetting 5 endpoint 0xC has invalid maxpacket 512, setting to 64 [ 627.301128][ T2118] usb 3-1: config 127 interface 8 altsetting 5 endpoint 0x7 has invalid maxpacket 1024, setting to 64 [ 627.312492][ T2118] usb 3-1: config 127 interface 8 altsetting 5 has a duplicate endpoint with address 0x6, skipping [ 627.329281][ T24] audit: type=1326 audit(1746818897.320:2166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8915 comm="syz.5.2288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2e8ec2969 code=0x7ffc0000 [ 627.364433][ T2118] usb 3-1: config 127 interface 201 altsetting 5 endpoint 0x4 has invalid maxpacket 1024, setting to 64 [ 627.376561][ T24] audit: type=1326 audit(1746818897.350:2167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8915 comm="syz.5.2288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2e8ec2969 code=0x7ffc0000 [ 627.395502][ T2118] usb 3-1: config 127 interface 201 altsetting 5 has a duplicate endpoint with address 0x6, skipping [ 627.421484][ T2118] usb 3-1: config 127 interface 201 altsetting 5 has a duplicate endpoint with address 0xF, skipping [ 627.442991][ T2118] usb 3-1: config 127 interface 201 altsetting 5 has a duplicate endpoint with address 0x7, skipping [ 627.465876][ T2118] usb 3-1: config 127 interface 201 altsetting 5 has a duplicate endpoint with address 0xF, skipping [ 627.477998][ T2118] usb 3-1: config 127 interface 201 altsetting 5 has a duplicate endpoint with address 0x4, skipping [ 627.485593][ T4350] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 627.495479][ T2118] usb 3-1: config 127 interface 201 altsetting 5 has a duplicate endpoint with address 0x4, skipping [ 627.505477][ T4350] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 627.521617][ T2118] usb 3-1: config 127 interface 201 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 627.543645][ T2118] usb 3-1: config 127 interface 201 altsetting 5 has a duplicate endpoint with address 0xD, skipping [ 627.557859][ T2118] usb 3-1: config 127 interface 201 altsetting 5 has a duplicate endpoint with address 0x5, skipping [ 627.576696][ T2118] usb 3-1: config 127 interface 8 has no altsetting 0 [ 627.583652][ T2118] usb 3-1: config 127 interface 201 has no altsetting 0 [ 627.592109][ T8920] loop5: p1 < > p3 [ 627.596228][ T4350] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 627.605962][ T4350] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 627.614496][ T8920] loop5: p3 size 134217728 extends beyond EOD, truncated [ 627.621892][ T4350] usb 2-1: SerialNumber: syz [ 627.745565][ T2118] usb 3-1: New USB device found, idVendor=1199, idProduct=9053, bcdDevice=b8.1d [ 627.759875][ T2118] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 627.776497][ T2118] usb 3-1: Product: 횀䱐牆ਊ옝姰귿䡼榶탼ʡ耹ﮠ鸫ർ [ 627.792866][ T2118] usb 3-1: Manufacturer: Ⰺ [ 627.804724][ T8628] udevd[8628]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 627.823073][ T8533] udevd[8533]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 627.833633][ T2118] usb 3-1: SerialNumber: syz [ 627.860618][ T8920] kvm: emulating exchange as write [ 627.886939][ T8913] netlink: 9 bytes leftover after parsing attributes in process `syz.1.2286'. [ 627.905812][ T8913] device 31XD entered promiscuous mode [ 627.921557][ T8913] netlink: 5 bytes leftover after parsing attributes in process `syz.1.2286'. [ 627.937112][ T8913] 0XD: renamed from 31XD [ 627.943366][ T8913] device 30XD left promiscuous mode [ 627.950851][ T8913] A link change request failed with some changes committed already. Interface 30XD may have been left with an inconsistent configuration, please check. [ 627.977670][ T24] audit: type=1400 audit(1746818897.970:2168): avc: denied { execute } for pid=8919 comm="syz.5.2289" name="loop5p3" dev="devtmpfs" ino=1825 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 628.002010][ T4350] usb 2-1: 0:2 : does not exist [ 628.010893][ T4350] usb 2-1: USB disconnect, device number 26 [ 628.017988][ T24] audit: type=1400 audit(1746818898.000:2169): avc: denied { execute_no_trans } for pid=8919 comm="syz.5.2289" path="/dev/loop5p3" dev="devtmpfs" ino=1825 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 628.045684][ T24] audit: type=1400 audit(1746818898.000:2170): avc: denied { read write } for pid=8919 comm="syz.5.2289" name="binder1" dev="binder" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 628.072166][ T24] audit: type=1400 audit(1746818898.000:2171): avc: denied { open } for pid=8919 comm="syz.5.2289" path="/dev/binderfs/binder1" dev="binder" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 628.174893][ T2118] usb 3-1: USB disconnect, device number 36 [ 628.246274][ T8533] udevd[8533]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 628.694149][ T8931] EXT4-fs (loop5): orphan cleanup on readonly fs [ 628.703960][ T8931] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz.5.2291: bg 0: block 248: padding at end of block bitmap is not set [ 628.720435][ T8931] Quota error (device loop5): write_blk: dquota write failed [ 628.728328][ T8931] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 628.738488][ T8931] EXT4-fs error (device loop5): ext4_acquire_dquot:6226: comm syz.5.2291: Failed to acquire dquot type 1 [ 628.753695][ T8931] EXT4-fs (loop5): 1 truncate cleaned up [ 628.760598][ T8931] EXT4-fs (loop5): mounted filesystem without journal. Opts: bsdgroups,nodiscard,noblock_validity,grpjquota=,grpjquota=,noquota,auto_da_alloc,noload,nodiscard,,errors=continue [ 628.836391][ T8931] EXT4-fs error (device loop5): ext4_lookup:1834: inode #2: comm syz.5.2291: deleted inode referenced: 12 [ 629.528800][ T8941] usb usb8: usbfs: process 8941 (syz.4.2290) did not claim interface 0 before use [ 630.669841][ T24] audit: type=1326 audit(1746818900.660:2172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8961 comm="syz.4.2299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47882ac969 code=0x7ffc0000 [ 631.337102][ T24] audit: type=1326 audit(1746818900.660:2173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8961 comm="syz.4.2299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47882ac969 code=0x7ffc0000 [ 631.584680][ T8965] EXT4-fs (loop5): orphan cleanup on readonly fs [ 631.594857][ T8965] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz.5.2297: bg 0: block 248: padding at end of block bitmap is not set [ 631.610695][ T8965] Quota error (device loop5): write_blk: dquota write failed [ 631.618421][ T8965] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 631.628929][ T8965] EXT4-fs error (device loop5): ext4_acquire_dquot:6226: comm syz.5.2297: Failed to acquire dquot type 1 [ 631.643480][ T8965] EXT4-fs (loop5): 1 truncate cleaned up [ 631.676279][ T8965] EXT4-fs (loop5): mounted filesystem without journal. Opts: bsdgroups,nodiscard,noblock_validity,grpjquota=,grpjquota=,noquota,auto_da_alloc,noload,nodiscard,,errors=continue [ 631.709980][ T8965] EXT4-fs error (device loop5): ext4_lookup:1834: inode #2: comm syz.5.2297: deleted inode referenced: 12 [ 632.404214][ T8964] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,minixdf,,errors=continue [ 632.418635][ T8964] ext4 filesystem being mounted at /429/bus/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 632.530364][ T8973] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,minixdf,,errors=continue [ 632.544807][ T8973] ext4 filesystem being mounted at /469/bus/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 632.676472][ T8985] overlayfs: failed to resolve './file1': -2 [ 633.335830][ T24] audit: type=1326 audit(1746818903.320:2174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8988 comm="syz.1.2305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff60d899969 code=0x7ffc0000 [ 633.522851][ T8994] ------------[ cut here ]------------ [ 633.535496][ T24] audit: type=1326 audit(1746818903.360:2175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8988 comm="syz.1.2305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff60d899969 code=0x7ffc0000 [ 633.571207][ T8994] trace type BPF program uses run-time allocation [ 633.609716][ T8994] WARNING: CPU: 0 PID: 8994 at kernel/bpf/verifier.c:10496 check_map_prog_compatibility+0x5d6/0x740 [ 633.625513][ T24] audit: type=1326 audit(1746818903.360:2176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8988 comm="syz.1.2305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff60d899969 code=0x7ffc0000 [ 633.650911][ T8994] Modules linked in: [ 633.659566][ T8994] CPU: 0 PID: 8994 Comm: syz.1.2307 Not tainted 5.10.237-syzkaller-00309-g7e2543346ff7 #0 [ 633.692460][ T8994] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 633.710492][ T24] audit: type=1326 audit(1746818903.360:2177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8988 comm="syz.1.2305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7ff60d899969 code=0x7ffc0000 [ 633.734786][ T8994] RIP: 0010:check_map_prog_compatibility+0x5d6/0x740 [ 633.742228][ T8994] Code: 85 e9 14 fe ff ff e8 59 f7 ef ff 31 c0 e9 15 fe ff ff e8 4d f7 ef ff c6 05 a3 9b 2c 05 01 48 c7 c7 60 6c 05 85 e8 ba 3d f8 02 <0f> 0b e9 85 fc ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c a3 fa ff [ 633.763091][ T24] audit: type=1326 audit(1746818903.360:2178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8988 comm="syz.1.2305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff60d899969 code=0x7ffc0000 [ 633.807194][ T8994] RSP: 0018:ffffc900013e7468 EFLAGS: 00010246 [ 633.831156][ T8994] RAX: dd09a52397744700 RBX: 0000000000000001 RCX: 0000000000080000 [ 633.840033][ T8994] RDX: ffffc9000193c000 RSI: 000000000000293b RDI: 000000000000293c [ 633.848844][ T24] audit: type=1326 audit(1746818903.360:2179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8988 comm="syz.1.2305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff60d899969 code=0x7ffc0000 [ 633.912046][ T8994] RBP: ffffc900013e74b0 R08: dffffc0000000000 R09: ffffed103ee0a5f8 [ 633.920751][ T8994] R10: ffffed103ee0a5f8 R11: 1ffff1103ee0a5f7 R12: ffff88811e314000 [ 633.929648][ T8994] R13: 0000000000000011 R14: dffffc0000000000 R15: ffff888115785000 [ 633.938487][ T8994] FS: 00007ff60bf026c0(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 633.948459][ T8994] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 633.956046][ T8994] CR2: 0000000000000000 CR3: 000000012c662000 CR4: 00000000003506b0 [ 633.965519][ T8994] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 633.973922][ T8994] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 634.059888][ T9004] syz.0.2309[9004] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 634.059999][ T9004] syz.0.2309[9004] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 634.532468][ T8994] Call Trace: [ 635.265633][ T8994] ? __fdget+0x1a1/0x230 [ 635.270016][ T8994] resolve_pseudo_ldimm64+0x526/0x1020 [ 635.280151][ T8994] ? bpf_check+0xd720/0xd720 [ 635.284792][ T8994] ? kvmalloc_node+0x88/0x130 [ 635.317556][ T8994] bpf_check+0x8db4/0xd720 [ 635.322128][ T8994] ? bpf_get_btf_vmlinux+0x60/0x60 [ 635.327670][ T8994] ? 0xffffffffa0028000 [ 635.331844][ T8994] ? is_bpf_text_address+0x177/0x190 [ 635.337286][ T8994] ? selinux_bpf_prog_alloc+0x51/0x140 [ 635.342959][ T8994] ? __kernel_text_address+0xa0/0x100 [ 635.348799][ T4350] Bluetooth: hci0: command 0x1003 tx timeout [ 635.355100][ T3461] Bluetooth: hci0: sending frame failed (-49) [ 635.361909][ T8994] ? unwind_get_return_address+0x4d/0x90 [ 635.367760][ T8994] ? stack_trace_save+0xe0/0xe0 [ 635.373053][ T8994] ? arch_stack_walk+0xee/0x140 [ 635.420932][ T8994] ? stack_trace_save+0x98/0xe0 [ 635.426072][ T8994] ? stack_trace_snprint+0xf0/0xf0 [ 635.431265][ T8994] ? __kasan_slab_alloc+0x69/0xf0 [ 635.436580][ T8994] ? pcpu_block_update+0x3ec/0x900 [ 635.441969][ T8994] ? selinux_bpf_prog_alloc+0x51/0x140 [ 635.455512][ T8994] ? __kasan_kmalloc+0xec/0x110 [ 635.490444][ T8994] ? __kasan_kmalloc+0xda/0x110 [ 635.495722][ T8994] ? kmem_cache_alloc_trace+0x184/0x2e0 [ 635.501439][ T8994] ? selinux_bpf_prog_alloc+0x51/0x140 [ 635.507290][ T8994] ? security_bpf_prog_alloc+0x62/0x90 [ 635.514719][ T8994] ? bpf_prog_load+0x949/0x1420 [ 635.520431][ T8994] ? __se_sys_bpf+0x442/0x680 [ 635.530988][ T9014] netlink: 96 bytes leftover after parsing attributes in process `syz.0.2312'. [ 635.580833][ T8994] ? __x64_sys_bpf+0x7b/0x90 [ 635.607648][ T8994] ? do_syscall_64+0x31/0x40 [ 635.632264][ T8994] ? entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 635.644066][ T8994] ? memset+0x35/0x40 [ 635.672984][ T8994] ? bpf_obj_name_cpy+0x193/0x1e0 [ 635.728705][ T8994] bpf_prog_load+0xf5a/0x1420 [ 635.771778][ T8994] ? map_freeze+0x320/0x320 [ 635.814401][ T8994] ? selinux_bpf+0xc7/0xf0 [ 635.857274][ T8994] ? security_bpf+0x82/0xa0 [ 635.897603][ T8994] __se_sys_bpf+0x442/0x680 [ 635.940952][ T8994] ? __x64_sys_bpf+0x90/0x90 [ 635.983182][ T8994] ? fpu__clear_all+0x20/0x20 [ 636.025584][ T8994] __x64_sys_bpf+0x7b/0x90 [ 636.066884][ T8994] do_syscall_64+0x31/0x40 [ 636.105758][ T8994] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 636.425498][ T8994] RIP: 0033:0x7ff60d899969 [ 636.430090][ T8994] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 636.451679][ T8994] RSP: 002b:00007ff60bf02038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 636.460427][ T8994] RAX: ffffffffffffffda RBX: 00007ff60dac0fa0 RCX: 00007ff60d899969 [ 636.468757][ T8994] RDX: 0000000000000090 RSI: 00002000000000c0 RDI: 0000000000000005 [ 636.477868][ T8994] RBP: 00007ff60d91bab1 R08: 0000000000000000 R09: 0000000000000000 [ 636.485892][ T8994] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 636.494790][ T8994] R13: 0000000000000000 R14: 00007ff60dac0fa0 R15: 00007fffefb81178 [ 636.503033][ T8994] ---[ end trace 705205113c9a3ff8 ]--- [ 636.552246][ T24] kauditd_printk_skb: 16 callbacks suppressed [ 636.552262][ T24] audit: type=1326 audit(1746818906.540:2196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9019 comm="syz.0.2314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f403de9e969 code=0x7ffc0000 [ 636.648613][ T24] audit: type=1326 audit(1746818906.540:2197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9019 comm="syz.0.2314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f403de9e969 code=0x7ffc0000 [ 636.672860][ T24] audit: type=1326 audit(1746818906.540:2198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9019 comm="syz.0.2314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f403de9e969 code=0x7ffc0000 [ 636.697286][ T24] audit: type=1326 audit(1746818906.540:2199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9019 comm="syz.0.2314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f403de9e969 code=0x7ffc0000 [ 636.721451][ T24] audit: type=1326 audit(1746818906.540:2200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9019 comm="syz.0.2314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f403de9e969 code=0x7ffc0000 [ 636.804130][ T9025] netlink: 96 bytes leftover after parsing attributes in process `syz.1.2315'. [ 636.856032][ T24] audit: type=1326 audit(1746818906.540:2201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9019 comm="syz.0.2314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f403de9e969 code=0x7ffc0000 [ 637.324223][ T24] audit: type=1326 audit(1746818906.580:2202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9019 comm="syz.0.2314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f403de9e969 code=0x7ffc0000 [ 637.803445][ T8244] Bluetooth: hci0: command 0x1001 tx timeout [ 637.812346][ T3461] Bluetooth: hci0: sending frame failed (-49) [ 637.818788][ T24] audit: type=1326 audit(1746818906.580:2203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9019 comm="syz.0.2314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f403de9e969 code=0x7ffc0000 [ 637.843286][ T24] audit: type=1326 audit(1746818906.640:2204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9021 comm="syz.2.2311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37f0d1f969 code=0x7ffc0000 [ 637.867077][ T24] audit: type=1326 audit(1746818906.640:2205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9021 comm="syz.2.2311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37f0d1f969 code=0x7ffc0000 [ 638.194242][ T9039] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,minixdf,,errors=continue [ 638.208564][ T9039] ext4 filesystem being mounted at /433/bus/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 638.277821][ T9049] syz.0.2319[9049] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 638.277915][ T9049] syz.0.2319[9049] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 639.099598][ T9060] syz.4.2325[9060] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 639.112740][ T9060] syz.4.2325[9060] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 639.835487][ T4350] Bluetooth: hci0: command 0x1009 tx timeout [ 640.875780][ T9084] xt_CT: You must specify a L4 protocol and not use inversions on it [ 641.075577][ T972] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 641.363213][ T9088] overlayfs: failed to resolve './file0': -2 [ 641.630046][ T9088] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,quota,,errors=continue [ 641.644589][ T9088] ext4 filesystem being mounted at /476/bus/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 641.760347][ T972] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 641.931132][ T972] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 644.218997][ T972] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 644.228435][ T972] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 644.238927][ T24] kauditd_printk_skb: 92 callbacks suppressed [ 644.238941][ T24] audit: type=1326 audit(1746818914.190:2298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9108 comm="syz.0.2340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f403de9e969 code=0x7ffc0000 [ 644.383237][ T24] audit: type=1326 audit(1746818914.190:2299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9108 comm="syz.0.2340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f403de9e969 code=0x7ffc0000 [ 644.409920][ T972] usb 2-1: can't set config #1, error -71 [ 644.420165][ T972] usb 2-1: USB disconnect, device number 27 [ 644.460736][ T24] audit: type=1326 audit(1746818914.190:2300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9108 comm="syz.0.2340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f403de9e969 code=0x7ffc0000 [ 644.530766][ T24] audit: type=1326 audit(1746818914.190:2301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9108 comm="syz.0.2340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f403de9e969 code=0x7ffc0000 [ 644.575484][ T24] audit: type=1326 audit(1746818914.190:2302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9108 comm="syz.0.2340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f403de9e969 code=0x7ffc0000 [ 644.603666][ T24] audit: type=1326 audit(1746818914.190:2303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9108 comm="syz.0.2340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f403de9e969 code=0x7ffc0000 [ 644.627999][ T24] audit: type=1326 audit(1746818914.190:2304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9108 comm="syz.0.2340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f403de9e969 code=0x7ffc0000 [ 644.652753][ T24] audit: type=1326 audit(1746818914.190:2305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9108 comm="syz.0.2340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=120 compat=0 ip=0x7f403de9e969 code=0x7ffc0000 [ 644.676380][ T24] audit: type=1326 audit(1746818914.190:2306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9108 comm="syz.0.2340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f403de9e969 code=0x7ffc0000 [ 644.700979][ T24] audit: type=1326 audit(1746818914.190:2307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9108 comm="syz.0.2340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f403de9e969 code=0x7ffc0000 [ 644.761649][ T9116] EXT4-fs (loop1): orphan cleanup on readonly fs [ 644.769416][ T9116] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.2341: bg 0: block 248: padding at end of block bitmap is not set [ 644.784386][ T9116] EXT4-fs error (device loop1): ext4_acquire_dquot:6226: comm syz.1.2341: Failed to acquire dquot type 1 [ 644.796904][ T9116] EXT4-fs (loop1): 1 truncate cleaned up [ 644.803116][ T9116] EXT4-fs (loop1): mounted filesystem without journal. Opts: bsdgroups,nodiscard,noblock_validity,grpjquota=,grpjquota=,noquota,auto_da_alloc,noload,nodiscard,,errors=continue [ 644.828097][ T9116] EXT4-fs error (device loop1): ext4_lookup:1834: inode #2: comm syz.1.2341: deleted inode referenced: 12 [ 644.865507][ T290] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 645.785547][ T290] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 645.863142][ T290] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 645.945889][ T290] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 645.968127][ T290] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 646.040866][ T290] usb 3-1: SerialNumber: syz [ 646.362997][ T9150] EXT4-fs (loop5): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,minixdf,,errors=continue [ 646.377452][ T9150] ext4 filesystem being mounted at /120/bus/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 646.398131][ T9120] netlink: 9 bytes leftover after parsing attributes in process `syz.2.2344'. [ 646.409379][ T9120] device 31XD entered promiscuous mode [ 646.419655][ T9120] netlink: 5 bytes leftover after parsing attributes in process `syz.2.2344'. [ 646.429237][ T9120] 0XD: renamed from 31XD [ 646.435367][ T9120] device 30XD left promiscuous mode [ 646.441840][ T9120] A link change request failed with some changes committed already. Interface 30XD may have been left with an inconsistent configuration, please check. [ 646.535205][ T290] usb 3-1: 0:2 : does not exist [ 646.981943][ T9169] usb usb8: usbfs: process 9169 (syz.0.2356) did not claim interface 0 before use [ 647.627034][ T290] usb 3-1: USB disconnect, device number 37 [ 648.359536][ T289] Bluetooth: hci0: Frame reassembly failed (-84) [ 649.412918][ T9194] syz.0.2363[9194] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 649.413466][ T9194] syz.0.2363[9194] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 650.425669][ T4350] Bluetooth: hci0: command 0x1003 tx timeout [ 650.451208][ T9196] fuse: Unknown parameter 'user_i00000000000000000000' [ 650.595473][ T24] kauditd_printk_skb: 31 callbacks suppressed [ 650.595487][ T24] audit: type=1326 audit(1746818920.580:2337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9202 comm="syz.0.2367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f403de9e969 code=0x7ffc0000 [ 650.628474][ T24] audit: type=1326 audit(1746818920.580:2338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9202 comm="syz.0.2367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f403de9e969 code=0x7ffc0000 [ 650.655749][ T24] audit: type=1326 audit(1746818920.580:2339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9202 comm="syz.0.2367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f403de9e969 code=0x7ffc0000 [ 650.680590][ T24] audit: type=1326 audit(1746818920.580:2340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9202 comm="syz.0.2367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f403de9e969 code=0x7ffc0000 [ 650.722351][ T24] audit: type=1326 audit(1746818920.580:2341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9202 comm="syz.0.2367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f403de9e969 code=0x7ffc0000 [ 650.746354][ T24] audit: type=1326 audit(1746818920.580:2342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9202 comm="syz.0.2367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f403de9e969 code=0x7ffc0000 [ 650.770054][ T24] audit: type=1326 audit(1746818920.580:2343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9202 comm="syz.0.2367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f403de9e969 code=0x7ffc0000 [ 650.794261][ T24] audit: type=1326 audit(1746818920.580:2344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9202 comm="syz.0.2367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=120 compat=0 ip=0x7f403de9e969 code=0x7ffc0000 [ 651.359624][ T24] audit: type=1326 audit(1746818920.580:2345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9202 comm="syz.0.2367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f403de9e969 code=0x7ffc0000 [ 651.396466][ T24] audit: type=1326 audit(1746818920.580:2346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9202 comm="syz.0.2367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f403de9e969 code=0x7ffc0000 [ 651.786065][ T9214] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 651.881985][ T9214] EXT4-fs (loop4): 1 truncate cleaned up [ 651.894065][ T9214] EXT4-fs (loop4): mounted filesystem without journal. Opts: quota,,errors=continue [ 652.096062][ T9222] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 652.171138][ T9222] EXT4-fs (loop1): 1 truncate cleaned up [ 652.214721][ T9222] EXT4-fs (loop1): mounted filesystem without journal. Opts: quota,,errors=continue [ 652.465525][ T1697] Bluetooth: hci0: command 0x1001 tx timeout [ 652.495618][ T3461] Bluetooth: hci0: sending frame failed (-49) [ 653.281482][ T1697] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 653.818025][ T9252] fuse: Unknown parameter 'user_i00000000000000000000' [ 653.895595][ T1697] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 653.906164][ T1697] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 653.995576][ T1697] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 654.004955][ T1697] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 654.013728][ T1697] usb 6-1: SerialNumber: syz [ 654.257227][ T9238] netlink: 9 bytes leftover after parsing attributes in process `syz.5.2375'. [ 654.267937][ T9238] device 30XD entered promiscuous mode [ 654.282309][ T9238] netlink: 5 bytes leftover after parsing attributes in process `syz.5.2375'. [ 654.292034][ T9238] 1XD: renamed from 30XD [ 654.299728][ T9238] device 31XD left promiscuous mode [ 654.306915][ T9238] A link change request failed with some changes committed already. Interface 31XD may have been left with an inconsistent configuration, please check. [ 654.366034][ T1697] usb 6-1: 0:2 : does not exist [ 654.386026][ T1697] usb 6-1: USB disconnect, device number 13 [ 654.545476][ T8244] Bluetooth: hci0: command 0x1009 tx timeout [ 654.877397][ T8533] udevd[8533]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 656.745591][ T8244] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 657.239056][ T24] kauditd_printk_skb: 45 callbacks suppressed [ 657.239071][ T24] audit: type=1400 audit(1746818927.220:2392): avc: denied { name_bind } for pid=9293 comm="syz.1.2392" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 657.337336][ T9296] fuse: Unknown parameter 'user_id00000000000000000000' [ 657.714417][ T9301] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 657.776109][ T9301] EXT4-fs (loop5): 1 truncate cleaned up [ 657.782274][ T9301] EXT4-fs (loop5): mounted filesystem without journal. Opts: noauto_da_alloc,errors=remount-ro, [ 658.456007][ T8244] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 658.466577][ T8245] usb 2-1: new full-speed USB device number 28 using dummy_hcd [ 658.600620][ T8244] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 658.644221][ T24] audit: type=1107 audit(1746818928.630:2393): pid=9308 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 658.855490][ T664] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 658.876583][ T9314] EXT4-fs (loop5): orphan cleanup on readonly fs [ 658.883806][ T9314] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz.5.2397: bg 0: block 248: padding at end of block bitmap is not set [ 658.899029][ T9314] Quota error (device loop5): write_blk: dquota write failed [ 658.906592][ T9314] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 658.917392][ T9314] EXT4-fs error (device loop5): ext4_acquire_dquot:6226: comm syz.5.2397: Failed to acquire dquot type 1 [ 658.929940][ T9314] EXT4-fs (loop5): 1 truncate cleaned up [ 658.936294][ T9314] EXT4-fs (loop5): mounted filesystem without journal. Opts: bsdgroups,nodiscard,noblock_validity,grpjquota=,grpjquota=,noquota,auto_da_alloc,noload,nodiscard,,errors=continue [ 658.956547][ T9314] EXT4-fs error (device loop5): ext4_lookup:1834: inode #2: comm syz.5.2397: deleted inode referenced: 12 [ 659.215520][ T664] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 659.226055][ T664] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 659.325543][ T664] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 659.335165][ T664] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 659.344054][ T664] usb 5-1: SerialNumber: syz [ 659.517827][ T24] audit: type=1326 audit(1746818929.510:2394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9319 comm="syz.2.2400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37f0d1f969 code=0x7ffc0000 [ 659.584103][ T8244] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 659.594097][ T8244] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 659.602427][ T8244] usb 1-1: SerialNumber: syz [ 659.607542][ T24] audit: type=1326 audit(1746818929.530:2395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9319 comm="syz.2.2400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f37f0d1f969 code=0x7ffc0000 [ 659.631362][ T24] audit: type=1326 audit(1746818929.530:2396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9319 comm="syz.2.2400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37f0d1f969 code=0x7ffc0000 [ 659.641641][ T9307] netlink: 9 bytes leftover after parsing attributes in process `syz.4.2396'. [ 659.665160][ T24] audit: type=1326 audit(1746818929.530:2397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9319 comm="syz.2.2400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f37f0d1f969 code=0x7ffc0000 [ 659.690621][ T9307] device 30XD entered promiscuous mode [ 659.695588][ T8244] usb 1-1: can't set config #1, error -71 [ 659.698296][ T9324] netlink: 5 bytes leftover after parsing attributes in process `syz.4.2396'. [ 659.705612][ T8244] usb 1-1: USB disconnect, device number 29 [ 659.716985][ T9324] 1XD: renamed from 30XD [ 659.723618][ T9324] device 31XD left promiscuous mode [ 659.724353][ T24] audit: type=1326 audit(1746818929.530:2398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9319 comm="syz.2.2400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37f0d1f969 code=0x7ffc0000 [ 659.758255][ T24] audit: type=1326 audit(1746818929.530:2399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9319 comm="syz.2.2400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f37f0d1f969 code=0x7ffc0000 [ 659.787173][ T9324] A link change request failed with some changes committed already. Interface 31XD may have been left with an inconsistent configuration, please check. [ 659.866244][ T664] usb 5-1: 0:2 : does not exist [ 659.875600][ T8245] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 659.877600][ T664] usb 5-1: USB disconnect, device number 33 [ 659.962779][ T9330] syz.5.2402[9330] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 659.963126][ T9330] syz.5.2402[9330] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 660.119479][ T9330] EXT4-fs (loop5): Test dummy encryption mode enabled [ 660.138758][ T9330] EXT4-fs (loop5): Test dummy encryption mode enabled [ 660.280275][ T9330] EXT4-fs (loop5): mounted filesystem without journal. Opts: test_dummy_encryption=v1,test_dummy_encryption=v1,,errors=continue [ 660.294718][ T9330] ext4 filesystem being mounted at /131/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 660.876649][ T8245] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 660.886746][ T8245] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 660.895940][ T8245] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 660.915535][ T8245] usb 2-1: can't set config #4, error -71 [ 660.923263][ T8245] usb 2-1: USB disconnect, device number 28 [ 661.280807][ T9342] fuse: Unknown parameter 'user_id00000000000000000000' [ 662.293832][ T9363] usb usb8: usbfs: process 9363 (syz.4.2410) did not claim interface 0 before use [ 663.486283][ T9372] EXT4-fs (loop1): orphan cleanup on readonly fs [ 663.498756][ T9372] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.2412: bg 0: block 248: padding at end of block bitmap is not set [ 663.515262][ T9372] __quota_error: 3 callbacks suppressed [ 663.515284][ T9372] Quota error (device loop1): write_blk: dquota write failed [ 663.528672][ T9372] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 663.539109][ T9372] EXT4-fs error (device loop1): ext4_acquire_dquot:6226: comm syz.1.2412: Failed to acquire dquot type 1 [ 663.555423][ T9372] EXT4-fs (loop1): 1 truncate cleaned up [ 663.561989][ T9372] EXT4-fs (loop1): mounted filesystem without journal. Opts: bsdgroups,nodiscard,noblock_validity,grpjquota=,grpjquota=,noquota,auto_da_alloc,noload,nodiscard,,errors=continue [ 663.725606][ T9368] EXT4-fs error (device loop1): ext4_lookup:1834: inode #2: comm syz.1.2412: deleted inode referenced: 12 [ 664.621219][ T9394] xt_CT: You must specify a L4 protocol and not use inversions on it [ 665.337387][ T24] audit: type=1107 audit(1746818935.330:2403): pid=9397 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 665.395205][ T9405] fuse: Unknown parameter 'user_id00000000000000000000' [ 665.617828][ T9415] usb usb8: usbfs: process 9415 (syz.0.2424) did not claim interface 0 before use [ 665.748787][ T9416] netlink: 96 bytes leftover after parsing attributes in process `syz.4.2425'. [ 666.196006][ T9420] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 666.204890][ T9420] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 666.216193][ T9420] F2FS-fs (loop5): invalid crc value [ 666.366578][ T9420] F2FS-fs (loop5): Found nat_bits in checkpoint [ 666.719971][ T9420] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 666.739664][ T9420] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 667.235601][ T24] audit: type=1326 audit(1746818937.200:2404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9442 comm="syz.0.2432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f403de9e969 code=0x7ffc0000 [ 667.527791][ T9451] overlayfs: failed to resolve './file0': -2 [ 667.674098][ T9452] usb usb8: usbfs: process 9452 (syz.1.2433) did not claim interface 0 before use [ 669.447404][ T24] audit: type=1107 audit(1746818939.440:2405): pid=9463 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 670.147631][ T9474] usb usb8: usbfs: process 9474 (syz.1.2440) did not claim interface 0 before use [ 670.233126][ T9475] netlink: 96 bytes leftover after parsing attributes in process `syz.5.2441'. [ 671.021661][ T24] audit: type=1326 audit(1746818941.010:2406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9482 comm="syz.1.2444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff60d899969 code=0x7ffc0000 [ 671.075555][ T24] audit: type=1326 audit(1746818941.010:2407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9482 comm="syz.1.2444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff60d899969 code=0x7ffc0000 [ 672.206440][ T9500] netlink: 96 bytes leftover after parsing attributes in process `syz.0.2449'. [ 673.129736][ T8244] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 673.234708][ T9504] fuse: Bad value for 'fd' [ 673.621380][ T9497] EXT4-fs (loop4): orphan cleanup on readonly fs [ 673.629286][ T9497] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.2446: bg 0: block 248: padding at end of block bitmap is not set [ 673.644667][ T9497] Quota error (device loop4): write_blk: dquota write failed [ 673.652287][ T9497] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 673.662470][ T9497] EXT4-fs error (device loop4): ext4_acquire_dquot:6226: comm syz.4.2446: Failed to acquire dquot type 1 [ 673.675273][ T9497] EXT4-fs (loop4): 1 truncate cleaned up [ 673.681814][ T9497] EXT4-fs (loop4): mounted filesystem without journal. Opts: bsdgroups,nodiscard,noblock_validity,grpjquota=,grpjquota=,noquota,auto_da_alloc,noload,nodiscard,,errors=continue [ 673.702780][ T9497] EXT4-fs error (device loop4): ext4_lookup:1834: inode #2: comm syz.4.2446: deleted inode referenced: 12 [ 673.907081][ T24] audit: type=1326 audit(1746818943.900:2408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9516 comm="syz.4.2455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47882ac969 code=0x7ffc0000 [ 674.050365][ T9518] usb usb8: usbfs: process 9518 (syz.5.2454) did not claim interface 0 before use [ 674.240950][ T24] audit: type=1326 audit(1746818943.900:2409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9516 comm="syz.4.2455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47882ac969 code=0x7ffc0000 [ 674.315476][ T8244] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 674.327443][ T8244] usb 2-1: can't read configurations, error -71 [ 674.357649][ T24] audit: type=1107 audit(1746818944.350:2410): pid=9532 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 675.833551][ T9564] fuse: Bad value for 'fd' [ 676.294165][ T9557] EXT4-fs (loop5): orphan cleanup on readonly fs [ 676.302171][ T9557] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz.5.2466: bg 0: block 248: padding at end of block bitmap is not set [ 676.317604][ T9557] Quota error (device loop5): write_blk: dquota write failed [ 676.325188][ T9557] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 676.335715][ T9557] EXT4-fs error (device loop5): ext4_acquire_dquot:6226: comm syz.5.2466: Failed to acquire dquot type 1 [ 676.348108][ T9557] EXT4-fs (loop5): 1 truncate cleaned up [ 676.354138][ T9557] EXT4-fs (loop5): mounted filesystem without journal. Opts: bsdgroups,nodiscard,noblock_validity,grpjquota=,grpjquota=,noquota,auto_da_alloc,noload,nodiscard,,errors=continue [ 676.380834][ T9552] EXT4-fs error (device loop5): ext4_lookup:1834: inode #2: comm syz.5.2466: deleted inode referenced: 12 [ 677.450243][ T24] audit: type=1107 audit(1746818947.430:2411): pid=9584 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 677.466799][ T9576] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,minixdf,,errors=continue [ 677.481838][ T9576] ext4 filesystem being mounted at /465/bus/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 677.817982][ T9603] netlink: 96 bytes leftover after parsing attributes in process `syz.0.2480'. [ 679.399745][ T9600] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,quota,,errors=continue [ 679.414639][ T9600] ext4 filesystem being mounted at /503/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 682.023851][ T9613] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,quota,,errors=continue [ 682.039769][ T9613] ext4 filesystem being mounted at /466/bus/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 682.569625][ T24] audit: type=1326 audit(1746818952.560:2412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9638 comm="syz.0.2492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f403de9e969 code=0x7ffc0000 [ 682.646572][ T24] audit: type=1326 audit(1746818952.560:2413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9638 comm="syz.0.2492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f403de9e969 code=0x7ffc0000 [ 683.275455][ T1611] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 683.709282][ T1611] usb 1-1: Using ep0 maxpacket: 16 [ 684.115804][ T1611] usb 1-1: config 0 interface 0 has no altsetting 0 [ 684.128539][ T1611] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 684.353518][ T9656] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,quota,,errors=continue [ 684.368127][ T9656] ext4 filesystem being mounted at /506/bus/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 684.475619][ T1611] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 684.491054][ T1611] usb 1-1: config 0 descriptor?? [ 685.120874][ T9675] incfs: Error accessing: ./file0. [ 685.126832][ T9675] incfs: mount failed -2 [ 685.142527][ T24] audit: type=1326 audit(1746818955.130:2414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9644 comm="syz.0.2493" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f403de9e969 code=0x7ffc0000 [ 685.342295][ T24] audit: type=1326 audit(1746818955.130:2415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9644 comm="syz.0.2493" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f403de9e969 code=0x7ffc0000 [ 685.466509][ T24] audit: type=1326 audit(1746818955.130:2416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9644 comm="syz.0.2493" exe="/root/syz-executor" sig=0 arch=c000003e syscall=188 compat=0 ip=0x7f403de9e969 code=0x7ffc0000 [ 685.519312][ T24] audit: type=1326 audit(1746818955.130:2417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9644 comm="syz.0.2493" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f403de9e969 code=0x7ffc0000 [ 685.544314][ T24] audit: type=1326 audit(1746818955.130:2418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9644 comm="syz.0.2493" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f403de9e969 code=0x7ffc0000 [ 685.569976][ T24] audit: type=1326 audit(1746818955.130:2419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9644 comm="syz.0.2493" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f403de9e969 code=0x7ffc0000 [ 685.674131][ T24] audit: type=1326 audit(1746818955.130:2420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9644 comm="wg1" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f403de9e969 code=0x7ffc0000 [ 685.735941][ T24] audit: type=1326 audit(1746818955.130:2421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9644 comm="wg1" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f403de9e969 code=0x7ffc0000 [ 685.989383][ T9687] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 686.113855][ T9687] EXT4-fs (loop4): 1 truncate cleaned up [ 686.120043][ T9687] EXT4-fs (loop4): mounted filesystem without journal. Opts: noauto_da_alloc,errors=remount-ro, [ 686.835925][ T9696] ================================================================== [ 686.844412][ T9696] BUG: KASAN: slab-out-of-bounds in tc_setup_flow_action+0x842/0x3280 [ 686.852682][ T9696] Read of size 8 at addr ffff88812543fcc0 by task syz.2.2508/9696 [ 686.860676][ T9696] [ 686.863016][ T9696] CPU: 1 PID: 9696 Comm: syz.2.2508 Tainted: G W 5.10.237-syzkaller-00309-g7e2543346ff7 #0 [ 686.874645][ T9696] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 686.884887][ T9696] Call Trace: [ 686.888218][ T9696] __dump_stack+0x21/0x24 [ 686.892552][ T9696] dump_stack_lvl+0x169/0x1d8 [ 686.897234][ T9696] ? show_regs_print_info+0x18/0x18 [ 686.902474][ T9696] ? thaw_kernel_threads+0x220/0x220 [ 686.907952][ T9696] print_address_description+0x7f/0x2c0 [ 686.913495][ T9696] ? tc_setup_flow_action+0x842/0x3280 [ 686.919042][ T9696] kasan_report+0xe2/0x130 [ 686.923710][ T9696] ? flow_action_cookie_create+0x28/0x90 [ 686.929505][ T9696] ? tc_setup_flow_action+0x842/0x3280 [ 686.934958][ T9696] __asan_report_load8_noabort+0x14/0x20 [ 686.940681][ T9696] tc_setup_flow_action+0x842/0x3280 [ 686.946200][ T9696] ? __kmalloc+0x1a7/0x330 [ 686.950953][ T9696] ? flow_rule_alloc+0x32/0x2c0 [ 686.955885][ T9696] mall_replace_hw_filter+0x293/0x810 [ 686.961249][ T9696] ? pcpu_block_update_hint_alloc+0x8bc/0xc50 [ 686.967304][ T9696] ? mall_set_parms+0x410/0x410 [ 686.972239][ T9696] ? tcf_exts_destroy+0xb0/0xb0 [ 686.977091][ T9696] ? pcpu_alloc+0xf8a/0x16b0 [ 686.981676][ T9696] ? mall_set_parms+0x19d/0x410 [ 686.986681][ T9696] mall_change+0x528/0x750 [ 686.991354][ T9696] ? __kasan_check_write+0x14/0x20 [ 686.996734][ T9696] ? mall_get+0xa0/0xa0 [ 687.001165][ T9696] ? tcf_chain_tp_insert_unique+0xac1/0xc10 [ 687.007185][ T9696] ? nla_strcmp+0xf4/0x140 [ 687.011695][ T9696] tc_new_tfilter+0x13f6/0x1a10 [ 687.016830][ T9696] ? mall_get+0xa0/0xa0 [ 687.021382][ T9696] ? tcf_gate_entry_destructor+0x20/0x20 [ 687.027492][ T9696] ? security_capable+0x87/0xb0 [ 687.033170][ T9696] ? ns_capable+0x8c/0xf0 [ 687.038008][ T9696] ? netlink_net_capable+0x125/0x160 [ 687.044049][ T9696] ? tcf_gate_entry_destructor+0x20/0x20 [ 687.049895][ T9696] rtnetlink_rcv_msg+0x800/0xb90 [ 687.055400][ T9696] ? rtnetlink_bind+0x80/0x80 [ 687.061017][ T9696] ? arch_stack_walk+0xee/0x140 [ 687.066667][ T9696] ? stack_trace_save+0x98/0xe0 [ 687.071995][ T9696] ? stack_trace_snprint+0xf0/0xf0 [ 687.077460][ T9696] ? memcpy+0x56/0x70 [ 687.081546][ T9696] ? avc_has_perm+0x234/0x360 [ 687.087152][ T9696] ? __kasan_slab_alloc+0xbd/0xf0 [ 687.092376][ T9696] ? slab_post_alloc_hook+0x5d/0x2f0 [ 687.098350][ T9696] ? ___sys_sendmsg+0x1f0/0x260 [ 687.103810][ T9696] ? avc_has_perm_noaudit+0x240/0x240 [ 687.109709][ T9696] ? selinux_nlmsg_lookup+0x3fb/0x4a0 [ 687.115534][ T9696] netlink_rcv_skb+0x1e0/0x430 [ 687.121272][ T9696] ? rtnetlink_bind+0x80/0x80 [ 687.126258][ T9696] ? netlink_ack+0xb80/0xb80 [ 687.131143][ T9696] ? __netlink_lookup+0x387/0x3b0 [ 687.136160][ T9696] rtnetlink_rcv+0x1c/0x20 [ 687.140836][ T9696] netlink_unicast+0x87c/0xa40 [ 687.145590][ T9696] netlink_sendmsg+0x88d/0xb30 [ 687.150545][ T9696] ? netlink_getsockopt+0x530/0x530 [ 687.155740][ T9696] ? security_socket_sendmsg+0x82/0xa0 [ 687.161308][ T9696] ? netlink_getsockopt+0x530/0x530 [ 687.166694][ T9696] ____sys_sendmsg+0x5a2/0x8c0 [ 687.171468][ T9696] ? __sys_sendmsg_sock+0x40/0x40 [ 687.176596][ T9696] ? import_iovec+0x7c/0xb0 [ 687.181088][ T9696] ___sys_sendmsg+0x1f0/0x260 [ 687.185819][ T9696] ? __sys_sendmsg+0x250/0x250 [ 687.190670][ T9696] ? __fdget+0x1a1/0x230 [ 687.194925][ T9696] __x64_sys_sendmsg+0x1e2/0x2a0 [ 687.200114][ T9696] ? ___sys_sendmsg+0x260/0x260 [ 687.204960][ T9696] ? switch_fpu_return+0x197/0x340 [ 687.210077][ T9696] do_syscall_64+0x31/0x40 [ 687.214811][ T9696] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 687.220961][ T9696] RIP: 0033:0x7f37f0d1f969 [ 687.225771][ T9696] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 687.246476][ T9696] RSP: 002b:00007f37ef388038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 687.255071][ T9696] RAX: ffffffffffffffda RBX: 00007f37f0f46fa0 RCX: 00007f37f0d1f969 [ 687.263047][ T9696] RDX: 0000000004000000 RSI: 0000200000000580 RDI: 0000000000000006 [ 687.271373][ T9696] RBP: 00007f37f0da1ab1 R08: 0000000000000000 R09: 0000000000000000 [ 687.279788][ T9696] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 687.288205][ T9696] R13: 0000000000000000 R14: 00007f37f0f46fa0 R15: 00007ffd09563df8 [ 687.296463][ T9696] [ 687.299137][ T9696] Allocated by task 9696: [ 687.303674][ T9696] __kasan_kmalloc+0xda/0x110 [ 687.308613][ T9696] __kmalloc+0x1a7/0x330 [ 687.312847][ T9696] tcf_idr_create+0x5f/0x790 [ 687.317598][ T9696] tcf_idr_create_from_flags+0x61/0x70 [ 687.323396][ T9696] tcf_gact_init+0x2b4/0x520 [ 687.328422][ T9696] tcf_action_init_1+0x3e1/0x670 [ 687.333524][ T9696] tcf_action_init+0x1e6/0x700 [ 687.338420][ T9696] tcf_exts_validate+0x215/0x510 [ 687.343699][ T9696] mall_set_parms+0x4b/0x410 [ 687.348282][ T9696] mall_change+0x45c/0x750 [ 687.352901][ T9696] tc_new_tfilter+0x13f6/0x1a10 [ 687.357830][ T9696] rtnetlink_rcv_msg+0x800/0xb90 [ 687.362866][ T9696] netlink_rcv_skb+0x1e0/0x430 [ 687.367659][ T9696] rtnetlink_rcv+0x1c/0x20 [ 687.372064][ T9696] netlink_unicast+0x87c/0xa40 [ 687.376846][ T9696] netlink_sendmsg+0x88d/0xb30 [ 687.381889][ T9696] ____sys_sendmsg+0x5a2/0x8c0 [ 687.386903][ T9696] ___sys_sendmsg+0x1f0/0x260 [ 687.391654][ T9696] __x64_sys_sendmsg+0x1e2/0x2a0 [ 687.396584][ T9696] do_syscall_64+0x31/0x40 [ 687.401164][ T9696] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 687.407350][ T9696] [ 687.409682][ T9696] Last potentially related work creation: [ 687.415404][ T9696] kasan_save_stack+0x3a/0x60 [ 687.420190][ T9696] __kasan_record_aux_stack+0xd2/0x100 [ 687.425737][ T9696] kasan_record_aux_stack_noalloc+0xb/0x10 [ 687.431712][ T9696] call_rcu+0x105/0x1040 [ 687.435958][ T9696] neigh_parms_release+0x1cb/0x200 [ 687.441054][ T9696] addrconf_ifdown+0x15bb/0x1800 [ 687.446083][ T9696] addrconf_notify+0x3bd/0xe90 [ 687.451043][ T9696] raw_notifier_call_chain+0x90/0x100 [ 687.456430][ T9696] unregister_netdevice_many+0xf8b/0x1980 [ 687.462942][ T9696] unregister_netdevice_queue+0x31c/0x360 [ 687.468981][ T9696] ppp_release+0xef/0x1f0 [ 687.473762][ T9696] __fput+0x2fb/0x770 [ 687.478541][ T9696] ____fput+0x15/0x20 [ 687.482892][ T9696] task_work_run+0x127/0x190 [ 687.487489][ T9696] do_exit+0xa27/0x2470 [ 687.491955][ T9696] do_group_exit+0x141/0x310 [ 687.496830][ T9696] get_signal+0xf7d/0x12e0 [ 687.501256][ T9696] arch_do_signal_or_restart+0xbf/0x10f0 [ 687.506926][ T9696] exit_to_user_mode_loop+0xa2/0xe0 [ 687.512420][ T9696] syscall_exit_to_user_mode+0x68/0x90 [ 687.518150][ T9696] do_syscall_64+0x3d/0x40 [ 687.522753][ T9696] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 687.528988][ T9696] [ 687.531465][ T9696] The buggy address belongs to the object at ffff88812543fc00 [ 687.531465][ T9696] which belongs to the cache kmalloc-192 of size 192 [ 687.546586][ T9696] The buggy address is located 0 bytes to the right of [ 687.546586][ T9696] 192-byte region [ffff88812543fc00, ffff88812543fcc0) [ 687.561778][ T9696] The buggy address belongs to the page: [ 687.567652][ T9696] page:ffffea0004950fc0 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x12543f [ 687.577893][ T9696] flags: 0x4000000000000200(slab) [ 687.583013][ T9696] raw: 4000000000000200 ffffea00045d07c0 0000000500000005 ffff888100043380 [ 687.591994][ T9696] raw: 0000000000000000 0000000080100010 00000001ffffffff 0000000000000000 [ 687.600707][ T9696] page dumped because: kasan: bad access detected [ 687.607369][ T9696] page_owner tracks the page as allocated [ 687.613502][ T9696] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x112cc0(GFP_USER|__GFP_NOWARN|__GFP_NORETRY), pid 4432, ts 297607954874, free_ts 297068693206 [ 687.631171][ T9696] prep_new_page+0x179/0x180 [ 687.635761][ T9696] get_page_from_freelist+0x2235/0x23d0 [ 687.641399][ T9696] __alloc_pages_nodemask+0x268/0x5f0 [ 687.647088][ T9696] new_slab+0x84/0x3f0 [ 687.651160][ T9696] ___slab_alloc+0x2a6/0x450 [ 687.655742][ T9696] __slab_alloc+0x63/0xa0 [ 687.660269][ T9696] kmem_cache_alloc_trace+0x1b3/0x2e0 [ 687.665827][ T9696] kset_create_and_add+0x59/0x2b0 [ 687.670842][ T9696] netdev_register_kobject+0x1a5/0x320 [ 687.676303][ T9696] register_netdevice+0xddd/0x13c0 [ 687.681400][ T9696] register_netdev+0x3e/0x50 [ 687.686114][ T9696] ip6_tnl_init_net+0x2e4/0x3a0 [ 687.691058][ T9696] ops_init+0x1ba/0x4a0 [ 687.695394][ T9696] setup_net+0x36d/0xb50 [ 687.699759][ T9696] copy_net_ns+0x314/0x520 [ 687.704170][ T9696] create_new_namespaces+0x3a2/0x650 [ 687.709527][ T9696] page last free stack trace: [ 687.714686][ T9696] free_unref_page_prepare+0x2b7/0x2d0 [ 687.720153][ T9696] free_unref_page_list+0x12e/0x9b0 [ 687.725349][ T9696] release_pages+0xe38/0xe80 [ 687.730029][ T9696] free_pages_and_swap_cache+0x86/0xa0 [ 687.735687][ T9696] tlb_finish_mmu+0x175/0x300 [ 687.740454][ T9696] exit_mmap+0x2fc/0x540 [ 687.745059][ T9696] __mmput+0x93/0x2f0 [ 687.749092][ T9696] mmput+0x4e/0x150 [ 687.752921][ T9696] do_exit+0x986/0x2470 [ 687.757265][ T9696] do_group_exit+0x141/0x310 [ 687.761941][ T9696] get_signal+0xf7d/0x12e0 [ 687.766437][ T9696] arch_do_signal_or_restart+0xbf/0x10f0 [ 687.772071][ T9696] exit_to_user_mode_loop+0xa2/0xe0 [ 687.777368][ T9696] syscall_exit_to_user_mode+0x68/0x90 [ 687.782914][ T9696] do_syscall_64+0x3d/0x40 [ 687.787328][ T9696] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 687.793379][ T9696] [ 687.795708][ T9696] Memory state around the buggy address: [ 687.801365][ T9696] ffff88812543fb80: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 687.809428][ T9696] ffff88812543fc00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 687.817573][ T9696] >ffff88812543fc80: 00 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc [ 687.825894][ T9696] ^ [ 687.832145][ T9696] ffff88812543fd00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 687.840757][ T9696] ffff88812543fd80: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 687.848817][ T9696] ================================================================== [ 687.857325][ T9696] Disabling lock debugging due to kernel taint [ 687.864615][ T1611] usbhid 1-1:0.0: can't add hid device: -71 [ 687.915167][ T1611] usbhid: probe of 1-1:0.0 failed with error -71 [ 687.924154][ T1611] usb 1-1: USB disconnect, device number 30