last executing test programs: 4m35.603505117s ago: executing program 2 (id=1081): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000008500000050", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) 4m35.567888297s ago: executing program 2 (id=1083): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='sched_switch\x00', 0xffffffffffffffff, 0x0, 0x200000000}, 0x18) socket(0x40000000015, 0x805, 0x0) syz_open_dev$usbfs(0x0, 0x77, 0x41341) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) pipe(&(0x7f0000005880)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000b80)=ANY=[@ANYBLOB="18000000000000000000000000000000d80000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b70300000000000085000000"], &(0x7f0000000200)='GPL\x00', 0x1000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r1, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) sendmsg$rds(r1, &(0x7f0000000680)={&(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) setsockopt$RDS_CANCEL_SENT_TO(r1, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(r0, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="ec020000", @ANYRES16=r2, @ANYBLOB="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"], 0x2ec}, 0x1, 0x0, 0x0, 0x810}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x89a0, &(0x7f0000000040)={'syzkaller0\x00'}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'geneve0\x00', 0x0}) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000100)={r3, 0x2, 0x6}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f00000004c0)=ANY=[@ANYBLOB="9feb010018000000000000005800000058000000050000000700000006000006040000000a00200008000000090000001d0e0000020000000200e200000c0008000600000006000000090000000400000000020000060000000000524aee1d09b3273e0e000d0000000000000c04400000000e300000"], &(0x7f0000000100)=""/156, 0x75, 0x9c, 0x0, 0x1}, 0x28) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000080050005000200000011000300686173683a69702c706f7274"], 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070084000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) 4m35.462116519s ago: executing program 2 (id=1086): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x21, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f00000006c0)='kmem_cache_free\x00', r0, 0x0, 0x2000}, 0x18) syz_clone(0x638c1100, 0x0, 0x0, 0x0, 0x0, 0x0) 4m35.39827777s ago: executing program 2 (id=1089): syz_mount_image$vfat(&(0x7f0000000340), &(0x7f0000000000)='./file1\x00', 0x280809a, &(0x7f0000000f40)=ANY=[], 0x3, 0x2be, &(0x7f0000001a80)="$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") open(&(0x7f0000000140)='./file1\x00', 0x145142, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000200)={[{@quota}, {@debug}]}, 0x1, 0x246, &(0x7f0000000ac0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000040)={0x19, 0x5, 0xb, 0x6, 0xfffffff0, 0x9}) lstat(&(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000940)) fstat(r0, &(0x7f0000000380)) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000080)={[{@bsdgroups}]}, 0xfc, 0x574, &(0x7f0000001980)="$eJzs3c9rHFUcAPDvbJI2/aFJoRT1IIEerNRumsQfFTzUk4gWC3qvS7INJZtuyW5KEwu2B3vxIkUQsSB69+6x+A/4VxS0UKQEPXiJzGY2XZPZNNlumm3384Fp35uZzZvvvvm+fbOzywbQt8bSfwoRL0fEN0nESMu2wcg2jq3tt/Lw+nS6JLG6+ulfSSTZuub+Sfb/oazyUkT89lXEycLmdmtLy3OlSqW8kNXH6/NXxmtLy6cuzZdmy7Ply5NTU2fempp89523uxbr6+f/+f6Tux+e+fr4yne/3D9yO4mzcTjb1hrHE7jRWhmLsew5GYqzG3ac6EJjvSTZ6wOgIwNZng9FOgaMxECW9blWR57moQG77Ms0rYE+lch/6FPNeUDz2r5L18HPjAfvr10AbY5/cO29kRhuXBsdXEn+d2WUXu+OdqH9tI1f/7xzO12i3fsQ+7vQEMAGN25GxOnBwc3jX5KNf507vY19NrbRb68/sJfupvOfN/LmP4X1+U/kzH8O5eRuJx6f/4X7XWimrXT+917u/Hf9ptXoQFZ7oTHnG0ouXqqU07HtxYg4EUP70/pERHyQfxPk88LKvdV27bfO/9Ilbb85F8yO4/7ghvnfTKleevLI1zy4GfFK7vw3We//JKf/0+fj/DbbOFa+82q7bY+Pf3et/hTxWm7/P+rMZOv7k+ON82G8eVZs9vetY7+3a3+v40/7/+DW8Y8mrfdraztv48fhf8vttnV6/u9LPmuU92XrrpXq9YWJiH3Jx5vXTz56bLPe3D+N/8Txrce/vPP/QJrY24z/1tFbrbsO7yz+3ZXGP7Oj/t954d5HX/zQrv3t9f+bjdKJbM12xr/tHuCTPHcAAAAAAADQawoRcTiSQnG9XCgUi2uf7zgaBwuVaq1+8mJ18fJMNL4rOxpDhead7pGWz0NMZJ+HbdYnN9SnIuJIRHw7cKBRL05XKzN7HTwAAAAAAAAAAAAAAAAAAAD0iEMRw3nf/0/9MZD/mDargWfRFj/5DTzn2ud/tqUbv/QE9CSv/9C/5D/0L/kP/Uv+Q/+S/9C/5D/0L/kP/Wsn+f/zuV08EAAAAAAAAAAAAAAAAAAAAAAAAAAAAHg+nD93Ll1WVx5en07rM1eXFueqV0/NlGtzxfnF6eJ0deFKcbZana2Ui9PV+cf9vUq1emViMhavjdfLtfp4bWn5wnx18XL9wqX50mz5QnnoqUQFAAAAAAAAAAAAAAAAAAAAz5ba0vJcqVIpLygodFQY7I3D6MFCoTcOo8PCXo9MAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPDIfwEAAP//wGE62g==") r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r3, &(0x7f00000005c0)='\"', 0x1, 0x4fed0) ptrace(0x10, r1) ptrace$pokeuser(0x6, r1, 0x358, 0x0) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r5 = openat(r2, &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x80201, 0x2b50ad6d7d3125c5) fallocate(r5, 0x40, 0xa9e, 0x1) stat(&(0x7f0000000580)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$SG_BLKSECTGET(r5, 0x1267, &(0x7f0000000400)) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000280)='kfree\x00', r7}, 0x18) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) openat$rfkill(0xffffffffffffff9c, &(0x7f00000005c0), 0x840, 0x0) r9 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r9, 0x107, 0x12, &(0x7f0000000000), 0x8) close_range(r8, 0xffffffffffffffff, 0x0) sendmsg$netlink(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="140100002800010004000000fcdbdf250401f2800c00180008ac0f0000000100140001"], 0x114}, {&(0x7f00000009c0)=ANY=[@ANYBLOB="cc0200003100000425bd7000fddbdf25d2004b8090e985c10e41bc16c3afdfa48f5504b1be674defb8e523ca931fc47fca0761f089f12dee7390f97c1afc9919b1fe48e849ff8dfba904c78d93262ae3d33f0064ebf13671c70daa79cc0fe13e298fd364e11960d535c26097d135265e7942c4c5db720b1846c07b77ed5d954b166fd8b48c9e0f6ca471ddfcbb5f163f777786f7a3fbfa7733802ee8c4a951358fe78e1ef7f4dbe179e9502c3354b1cebef86cef6a5c32967a223845ba9396fced3f604240981e8f247067e1349e286bc6c8269ebede928867184559936b04001380000072f367e932248bbb5f84927c213d001b02bcf2d2bd5b90abb49e35b671d5cc9e8646e4ecaf6db0c14b26d2c061e2895d84e85ee2272e330857cf5816d5761dcdb9cbd0815823a9e2e08d59f3a8cac38f824e82d6a380359c14f0b327fd5004cfcb9ba79164d762baff997f2fd16507defa04591b820f92c60d5c85e8eab1cc5c87f6a6027e19ea6adec8a708b47f58365690e1f34b33cc001933f43099cbdb9dc2e741283e1400b300fc0000000000000000000000000000008b004180040037800c001496532832", @ANYRES32=r6, @ANYBLOB="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"], 0x2cc}], 0x2, 0x0, 0x0, 0x20000001}, 0x0) r10 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r10, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x202000, 0x1000}, 0x20) setsockopt$XDP_TX_RING(r10, 0x11b, 0x3, &(0x7f00000001c0)=0x2, 0x4) 4m34.753700572s ago: executing program 2 (id=1095): timerfd_create(0x8, 0x80000) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r0, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x101040) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r2, 0x40505412, &(0x7f00000000c0)={0x5, 0xa, 0x10, 0x0, 0xd}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x4) writev(r3, &(0x7f0000000080)=[{&(0x7f0000000e40)="480000001400190d09004beafd0d36020a8447000b4e230f00000000a2bc560119d7004f19dfb7f393d7359031033f817f00000000000000000101ff05c00e030002000000ffff01", 0x48}], 0x1) syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), r3) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000001600), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_PORTS(r4, &(0x7f00000016c0)={0x0, 0xffa6, &(0x7f0000001680)={&(0x7f0000001640)={0x1c, r5, 0x1}, 0x1c}}, 0x0) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r3, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000340)={&(0x7f00000001c0)={0x1c, r5, 0x200, 0x70bd29, 0x25dfdbff, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000}, 0xc0c1) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010000104a5270b7357000000925e4a44", @ANYRES32, @ANYBLOB="0dfa130016000000240012000c00010000000000000000000c0002f60800000001180000080001"], 0x44}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r7, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r7, 0x1, 0x8, &(0x7f0000000300), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r7, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r7) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000280)={r6, 0x7, 0x104, 0xfffffffe}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB='H'], 0x48}, 0x1, 0x0, 0x0, 0x20004810}, 0x0) sendmmsg(r6, &(0x7f00000002c0), 0x0, 0x4010) 4m34.425906739s ago: executing program 2 (id=1100): syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000059c0)='./bus\x00', 0x1400e, &(0x7f0000000100)={[{@quota}]}, 0x1, 0x441, &(0x7f00000009c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x0) writev(r0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x42, 0x0) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f0000000600)=ANY=[@ANYBLOB="09000000000000000dcf000000000000050000000700000002"]) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @dev, 0x5}, 0x1c) 4m34.425771369s ago: executing program 32 (id=1100): syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000059c0)='./bus\x00', 0x1400e, &(0x7f0000000100)={[{@quota}]}, 0x1, 0x441, &(0x7f00000009c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x0) writev(r0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x42, 0x0) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f0000000600)=ANY=[@ANYBLOB="09000000000000000dcf000000000000050000000700000002"]) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @dev, 0x5}, 0x1c) 3m36.005933546s ago: executing program 3 (id=2362): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000001000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000a80)='kfree\x00', r0, 0x0, 0xfffffffffffffffd}, 0x18) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1e, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r1}, 0x10) getrusage(0x0, &(0x7f0000000900)) perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x20) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r4, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r5 = socket(0x10, 0x803, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x208, 0x21}, 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000001c0)=ANY=[@ANYRESOCT=r4, @ANYRES32=r6, @ANYBLOB="0000000000000000b703000000000001850000001b000000b70000000000070095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='kfree\x00', r7}, 0x18) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f00000000c0)=@ethtool_stats}) set_mempolicy(0x3, &(0x7f0000000000)=0x4000000ffb, 0x8) syz_clone(0x4021400, 0x0, 0x9000, 0x0, 0x0, 0x0) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r8 = getpid() sched_setscheduler(r8, 0x2, &(0x7f0000000200)=0x4) futex(&(0x7f000000cffc)=0x1, 0x6, 0xffffffff, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x1, 0x6, 0xf0, 0x0, 0x0, 0x0) timer_create(0x7, &(0x7f0000000680)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x80, 0x2, 0x8b6}, &(0x7f0000000000), &(0x7f0000000300)) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0x16, &(0x7f0000000200)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000180000003d030100000000009500f000000000006926000000000000bf67000000000000560702000f02000067060000200000007a0a00ff0ee60000bf250000000000002d350000000000006507000002080000070700004c0000001f75000000000000bf54000000000000070400000400f9ffcd35010000000000ce040000000000001c000000000000009500000000000000db13d5d8b741f2cdaabc8383c8f56bb5df3083d20f8c2bf304000000815dcf0066d7ded3c5c49a08a503ea6d54f7f3125a8200578ac0836d6454745e70a27444003c5b20451b624db6f5320e9befc1e00b8b32917c4d30d16b7edb732bc3ac330b16c442aff70d27659bc58e296b16750c5577c848754b4894b07f15bab1c640a5c0c4fd62f9db829b301ef67fd2b2736f3af0c54af2412313b17c4c8081c4ed0572261960e227d34cfbfdb247bc2351c9d8363a8cb18b7330604da78b0aba47545f9a25a80dd7d28a5ae41824f611dd2de6dd581c52698f9542a444a8a3969946faded5d0e14c6c946eeb44fe63275c00000000"], &(0x7f0000000100)='GPL\x00'}, 0x48) 3m35.112160913s ago: executing program 3 (id=2377): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='sched_switch\x00', 0xffffffffffffffff, 0x0, 0x200000000}, 0x18) socket(0x40000000015, 0x805, 0x0) syz_open_dev$usbfs(0x0, 0x77, 0x41341) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) unshare(0x22020600) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) pipe(&(0x7f0000005880)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000b80)=ANY=[@ANYBLOB="18000000000000000000000000000000d80000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x1000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r1, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) sendmsg$rds(r1, &(0x7f0000000680)={&(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) setsockopt$RDS_CANCEL_SENT_TO(r1, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(r0, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="ec020000", @ANYRES16=r2, @ANYBLOB="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"], 0x2ec}, 0x1, 0x0, 0x0, 0x810}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x89a0, &(0x7f0000000040)={'syzkaller0\x00'}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'geneve0\x00', 0x0}) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000100)={r3, 0x2, 0x6}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f00000004c0)=ANY=[@ANYBLOB="9feb010018000000000000005800000058000000050000000700000006000006040000000a00200008000000090000001d0e0000020000000200e200000c0008000600000006000000090000000400000000020000060000000000524aee1d09b3273e0e000d0000000000000c04400000000e300000"], &(0x7f0000000100)=""/156, 0x75, 0x9c, 0x0, 0x1}, 0x28) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070084000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) 3m35.024369075s ago: executing program 3 (id=2381): r0 = socket$unix(0x1, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'ipvlan0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYRES32=0x0, @ANYBLOB="0000000000080400240012800b0001006d61637365630000140002800500060000000000050007000000000008000500", @ANYRES32=r3], 0x4c}}, 0x0) 3m34.998795935s ago: executing program 3 (id=2382): r0 = msgget$private(0x0, 0xfffffffffffffffd) msgrcv(r0, 0x0, 0x0, 0x1, 0x3000) msgrcv(r0, 0x0, 0x0, 0x1, 0x0) msgsnd(r0, 0x0, 0x0, 0x0) msgrcv(r0, &(0x7f0000000140)={0x0, ""/140}, 0x94, 0x2, 0x1000) syz_init_net_socket$x25(0x9, 0x5, 0x0) r1 = accept$unix(0xffffffffffffffff, &(0x7f0000000400)=@abs, &(0x7f0000000080)=0x6e) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000340)={0x0, 0x0}, &(0x7f0000000480)=0xc) getresuid(&(0x7f0000000180)=0x0, &(0x7f0000000200), &(0x7f0000000500)) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000580)=0x0) msgctl$IPC_SET(r0, 0x1, &(0x7f0000000680)={{0x3, r2, 0x0, r3, 0x0, 0x80, 0x8}, 0x0, 0x0, 0x0, 0x19, 0x5, 0x2bde, 0xffffffffffffff27, 0xc7, 0x2, 0x9, r4}) r5 = syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200410, &(0x7f0000000700)={[{@nodiscard}, {}, {@acl}, {@nomblk_io_submit}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@jqfmt_vfsv1}, {@nodelalloc}, {@auto_da_alloc}, {@norecovery}], [{@subj_user={'subj_user', 0x3d, 'acl'}}, {@smackfshat={'smackfshat', 0x3d, 'auto_da_alloc'}}, {@euid_eq={'euid', 0x3d, r2}}, {@fsmagic={'fsmagic', 0x3d, 0x7fffffffffffffff}}, {@fsuuid={'fsuuid', 0x3d, {[0x66, 0x34, 0x31, 0x31, 0x64, 0x32, 0x61, 0x34], 0x2d, [0x1cce82864a7b0dbc, 0x32, 0x63, 0x35], 0x2d, [0x33, 0x63, 0x39], 0x2d, [0xb, 0xc, 0x31, 0x30], 0x2d, [0x62, 0x61, 0x34, 0x33, 0x61, 0x61, 0x38, 0x5c]}}}]}, 0x5, 0x591, &(0x7f0000000f80)="$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") chdir(&(0x7f0000000380)='./file0\x00') semctl$IPC_INFO(0x0, 0x0, 0x3, &(0x7f0000000040)=""/53) r6 = creat(&(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2d) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f00000004c0)='./file0/file0\x00', &(0x7f0000000500)='./file0/../file0\x00', 0x0, 0x2125099, 0x0) mount$cgroup2(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000000), 0x81, 0x0) io_uring_register$IORING_REGISTER_FILES(r6, 0x2, &(0x7f0000000000)=[r6, r6, r5], 0x3) 3m34.100091852s ago: executing program 3 (id=2401): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = io_uring_setup(0x4d42, &(0x7f0000000240)={0x0, 0xcb6c, 0x40, 0x3, 0x12d}) io_uring_register$IORING_REGISTER_RESTRICTIONS(r2, 0xb, &(0x7f0000000480), 0x66) 3m33.981836175s ago: executing program 3 (id=2404): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='sched_switch\x00', 0xffffffffffffffff, 0x0, 0x200000000}, 0x18) socket(0x40000000015, 0x805, 0x0) syz_open_dev$usbfs(0x0, 0x77, 0x41341) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) unshare(0x22020600) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) pipe(&(0x7f0000005880)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000b80)=ANY=[@ANYBLOB="18000000000000000000000000000000d80000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x1000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r1, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) sendmsg$rds(r1, &(0x7f0000000680)={&(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) setsockopt$RDS_CANCEL_SENT_TO(r1, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(r0, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="ec020000", @ANYRES16=r2, @ANYBLOB="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"], 0x2ec}, 0x1, 0x0, 0x0, 0x810}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x89a0, &(0x7f0000000040)={'syzkaller0\x00'}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'geneve0\x00', 0x0}) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000100)={r3, 0x2, 0x6}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f00000004c0)=ANY=[@ANYBLOB="9feb010018000000000000005800000058000000050000000700000006000006040000000a00200008000000090000001d0e0000020000000200e200000c0008000600000006000000090000000400000000020000060000000000524aee1d09b3273e0e000d0000000000000c04400000000e300000"], &(0x7f0000000100)=""/156, 0x75, 0x9c, 0x0, 0x1}, 0x28) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070084000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) 3m33.954048415s ago: executing program 33 (id=2404): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='sched_switch\x00', 0xffffffffffffffff, 0x0, 0x200000000}, 0x18) socket(0x40000000015, 0x805, 0x0) syz_open_dev$usbfs(0x0, 0x77, 0x41341) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) unshare(0x22020600) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) pipe(&(0x7f0000005880)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000b80)=ANY=[@ANYBLOB="18000000000000000000000000000000d80000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x1000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r1, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) sendmsg$rds(r1, &(0x7f0000000680)={&(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) setsockopt$RDS_CANCEL_SENT_TO(r1, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(r0, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="ec020000", @ANYRES16=r2, @ANYBLOB="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"], 0x2ec}, 0x1, 0x0, 0x0, 0x810}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x89a0, &(0x7f0000000040)={'syzkaller0\x00'}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'geneve0\x00', 0x0}) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000100)={r3, 0x2, 0x6}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f00000004c0)=ANY=[@ANYBLOB="9feb010018000000000000005800000058000000050000000700000006000006040000000a00200008000000090000001d0e0000020000000200e200000c0008000600000006000000090000000400000000020000060000000000524aee1d09b3273e0e000d0000000000000c04400000000e300000"], &(0x7f0000000100)=""/156, 0x75, 0x9c, 0x0, 0x1}, 0x28) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070084000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) 5.046760234s ago: executing program 0 (id=5319): bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5e8, &(0x7f0000001200)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) perf_event_open(0x0, 0x0, 0xafffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4a, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000340)={'vxcan0\x00', 0x0}) bind$can_raw(r3, &(0x7f00000003c0)={0x1d, r4}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000080)=0xffffffffffffffff, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r2}, 0x10) r5 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r5, &(0x7f0000004200)='t', 0x1) sendfile(r5, r0, 0x0, 0x3ffff) sendfile(r5, r0, 0x0, 0x7ffff000) 4.601979332s ago: executing program 0 (id=5325): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="190000000400"], 0x48) capset(&(0x7f0000000340)={0x19980330}, &(0x7f0000002100)={0x1, 0x4, 0x0, 0xfffffffe, 0x7, 0x179}) r1 = syz_open_dev$loop(&(0x7f0000000000), 0x9, 0x4002) ioctl$IOC_PR_RELEASE(r1, 0x401070ca, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/14, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], &(0x7f0000000200)='GPL\x00', 0x6, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000001c0), 0x321fc1, 0x0) ioctl$TCSBRKP(r2, 0x5425, 0x6) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0xc044) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4000000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="81ffffff00000000180012800e0001007769726567756172640000000400028008000a00bc"], 0x40}}, 0x0) r5 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$selinux_load(r5, &(0x7f0000000280)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e757813"], 0x65) ioctl$TCSBRKP(r2, 0x5425, 0x80000000) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r6, 0xc08c5334, &(0x7f0000000500)={0x8b, 0xfff, 0x1, 'queue1\x00', 0x80000001}) 3.839893827s ago: executing program 0 (id=5333): syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5e8, &(0x7f0000001200)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4a, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r2 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000340)={'vxcan0\x00', 0x0}) bind$can_raw(r2, &(0x7f00000003c0)={0x1d, r3}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000080)=0xffffffffffffffff, 0x4) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000340)={0x9}, 0x8) r4 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r4, &(0x7f0000004200)='t', 0x1) sendfile(r4, r0, 0x0, 0x3ffff) sendfile(r4, r0, 0x0, 0x7ffff000) 3.071843241s ago: executing program 0 (id=5337): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r1, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000640)={0x28, 0x0, 0x2710, @local}, 0x10) recvmmsg(r2, &(0x7f0000002b80)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000002c0)=""/80, 0x50}], 0x1}, 0x5}], 0x40000, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) shutdown(r2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r5}, 0x10) gettid() timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) readv(r6, &(0x7f0000000300)=[{&(0x7f00000078c0)=""/86, 0x56}], 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x8031, 0xffffffffffffffff, 0xf15f3000) 1.998088952s ago: executing program 5 (id=5348): bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5e8, &(0x7f0000001200)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) perf_event_open(0x0, 0x0, 0xafffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4a, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000340)={'vxcan0\x00', 0x0}) bind$can_raw(r3, &(0x7f00000003c0)={0x1d, r4}, 0x10) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000340)={0x9}, 0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r2}, 0x10) r5 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r5, &(0x7f0000004200)='t', 0x1) sendfile(r5, r0, 0x0, 0x3ffff) sendfile(r5, r0, 0x0, 0x7ffff000) 1.954104923s ago: executing program 4 (id=5349): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) capset(&(0x7f0000000340)={0x19980330}, &(0x7f0000002100)={0x1, 0x4, 0x0, 0xfffffffe, 0x7, 0x179}) r1 = syz_open_dev$loop(&(0x7f0000000000), 0x9, 0x4002) ioctl$IOC_PR_RELEASE(r1, 0x401070ca, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000200)='GPL\x00', 0x6, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000001c0), 0x321fc1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4000000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="81ffffff00000000180012800e0001007769726567756172640000000400028008000a00bc"], 0x40}}, 0x0) 1.792260316s ago: executing program 4 (id=5350): socket$rds(0x15, 0x5, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='kfree\x00', r1}, 0x9) add_key(&(0x7f0000000280)='rxrpc\x00', 0x0, &(0x7f0000000100)="01000000020000000000006bb55a2a630b00c145f94cd977", 0x18, 0xffffffffffffffff) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000180)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x125}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x58}}, 0x24008890) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWOBJ={0x5c, 0x12, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x1}, @NFT_OBJECT_QUOTA=@NFTA_OBJ_DATA={0x48, 0x4, 0x0, 0x1, [@NFTA_QUOTA_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_QUOTA_CONSUMED={0xc}, @NFTA_QUOTA_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_QUOTA_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_QUOTA_CONSUMED={0xc, 0x4, 0x1, 0x0, 0x5}, @NFTA_QUOTA_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_QUOTA_CONSUMED={0xc, 0x4, 0x1, 0x0, 0x400}]}}, @NFT_MSG_DELFLOWTABLE={0x38, 0x18, 0xa, 0x301, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x1}]}], {0x14}}, 0xbc}, 0x1, 0x0, 0x0, 0x40008d4}, 0x4000000) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x6c, r2, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x44, @dev={0xfe, 0x80, '\x00', 0x16}, 0xff8}}, {0x20, 0x2, @in6={0xa, 0x0, 0xfffffffc, @mcast2}}}}]}]}, 0x6c}}, 0x0) 1.703346677s ago: executing program 4 (id=5352): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket$xdp(0x2c, 0x3, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() socket$inet_tcp(0x2, 0x1, 0x0) sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = socket(0x2c, 0x3, 0x0) setsockopt$sock_int(r3, 0x1, 0x2e, &(0x7f0000000280)=0x493, 0x4) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000100)) epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, r3, &(0x7f00000005c0)={0x2000a210}) epoll_wait(r4, &(0x7f0000001e40), 0x0, 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x20, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x73cea2d47785b264, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TCSETS(r6, 0x40045431, 0x0) syz_open_pts(r6, 0x0) 1.695594707s ago: executing program 1 (id=5353): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[], &(0x7f0000000100)='GPL\x00'}, 0x94) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') prctl$PR_SET_NAME(0xf, 0x0) r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) recvmsg(r0, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x40010000) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = mq_open(0x0, 0x42, 0x1f0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00'}, 0x18) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) mq_timedsend(r2, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r2, 0x0, 0x0, 0x6, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000e00000850000001b000000b700000000fa000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='sched_switch\x00', r4, 0x0, 0x401}, 0x18) syz_clone(0x42164000, 0x0, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r2, 0x0, 0x0, 0x0, 0x0) r5 = dup(r1) bind$rds(r5, &(0x7f0000000580)={0x2, 0x4e23, @empty}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$UHID_INPUT(r5, &(0x7f0000001040)={0xf, {"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", 0x1000}}, 0x1006) 1.634731839s ago: executing program 5 (id=5354): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000"], &(0x7f0000000200)='GPL\x00', 0x6, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r1}, &(0x7f0000000000), &(0x7f00000005c0)=r2}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r0, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000280)=[0x1], 0x0, 0x0, 0x1, 0x1}}, 0x3c) 1.293657445s ago: executing program 0 (id=5355): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r3 = socket(0x2c, 0x3, 0x0) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000100)) epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, r3, 0x0) epoll_wait(r4, &(0x7f0000001e40), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x20, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x73cea2d47785b264, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='sched_switch\x00', r5}, 0x18) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x8, 0x3, 0x440, 0x320, 0xa, 0x148, 0x368, 0x60, 0x400, 0x2a8, 0x2a8, 0x400, 0x2a8, 0x7fffffe, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'bridge0\x00', 'rose0\x00'}, 0x0, 0x2a0, 0x310, 0x0, {0x200003ae, 0x7f00}, [@common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x8601, 0x6, './file0\x00'}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f2f7b9f28413d9d8ad470ad2b60c45cb4ea6e7bf902bdc2ff8a9304d9f655c746adc0bdc773506378bc2d27efd6abb05175089830cc46186074d7de46d5af300"}}}, {{@ip={@empty, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth0_to_team\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@MARK={0x28}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x4a0) syz_open_dev$tty1(0xc, 0x4, 0x1) openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) 1.113804509s ago: executing program 5 (id=5356): getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000280)='kmem_cache_free\x00', r2, 0x0, 0x200000000000006}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) sendto$inet6(r3, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x56) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f0000000bc0)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff83, 0x0, 0x0}, &(0x7f0000000c00)=0x40) 846.002264ms ago: executing program 4 (id=5357): bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5e8, &(0x7f0000001200)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) perf_event_open(0x0, 0x0, 0xafffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4a, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000340)={'vxcan0\x00', 0x0}) bind$can_raw(r3, &(0x7f00000003c0)={0x1d, r4}, 0x10) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000340)={0x9}, 0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r2}, 0x10) r5 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r5, &(0x7f0000004200)='t', 0x1) sendfile(r5, r0, 0x0, 0x3ffff) sendfile(r5, r0, 0x0, 0x7ffff000) 833.082444ms ago: executing program 1 (id=5358): mkdir(&(0x7f0000000580)='./file0\x00', 0x92) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = inotify_init1(0x800) inotify_add_watch(r0, &(0x7f00000002c0)='./file0\x00', 0x100080c) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000340)='kfree\x00', r1, 0x0, 0x40}, 0x18) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xb, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4004055}, 0xc00c880) socket$kcm(0x2, 0x5, 0x84) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="50000000090601020000000000000000020000000900020073797a31000000000500010007000000280007800c00018008000140ffffffff0500070084000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x4000}, 0x80) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r5}, 0x10) r6 = openat$selinux_member(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$selinux_access(r6, &(0x7f00000004c0)=ANY=[], 0x56) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000480)='kfree\x00', r8}, 0x10) sendmsg$NFT_BATCH(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c00038008000140000000000800024000000000180003801400010076657468305f746f5f687372000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c0003801400010076657468305f746f5f687372"], 0xfc}}, 0x0) faccessat2(0xffffffffffffffff, 0x0, 0x2, 0x1200) ioctl$SNAPSHOT_GET_IMAGE_SIZE(0xffffffffffffffff, 0x8008330e, &(0x7f0000000400)) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x43, &(0x7f0000000080)={0x0, 0x2710}, 0x10) lsetxattr$security_selinux(&(0x7f0000000400)='./file0\x00', &(0x7f0000000000), &(0x7f0000000280)='system_u:object_r:fsadm_exec_t:s0\x00', 0x22, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) 800.012655ms ago: executing program 6 (id=5359): mkdir(&(0x7f0000000580)='./file0\x00', 0x92) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = inotify_init1(0x800) inotify_add_watch(r0, 0x0, 0x100080c) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bf"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000340)='kfree\x00', r1, 0x0, 0x40}, 0x18) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xb, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4004055}, 0xc00c880) socket$kcm(0x2, 0x5, 0x84) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="50000000090601020000000000000000020000000900020073797a31000000000500010007000000280007800c00018008000140ffffffff0500070084000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x4000}, 0x80) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c0000000014"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r5}, 0x10) r6 = openat$selinux_member(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$selinux_access(r6, &(0x7f00000004c0)=ANY=[], 0x56) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000480)='kfree\x00', r8}, 0x10) sendmsg$NFT_BATCH(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c00038008000140000000000800024000000000180003801400010076657468305f746f5f687372000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c0003801400010076657468305f746f5f687372"], 0xfc}}, 0x0) faccessat2(0xffffffffffffffff, 0x0, 0x2, 0x1200) ioctl$SNAPSHOT_GET_IMAGE_SIZE(0xffffffffffffffff, 0x8008330e, &(0x7f0000000400)) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x43, &(0x7f0000000080)={0x0, 0x2710}, 0x10) lsetxattr$security_selinux(&(0x7f0000000400)='./file0\x00', &(0x7f0000000000), &(0x7f0000000280)='system_u:object_r:fsadm_exec_t:s0\x00', 0x22, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) 796.298525ms ago: executing program 1 (id=5360): r0 = socket$netlink(0x10, 0x3, 0x14) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000440)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xb, &(0x7f0000000400)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000006020207b1af8ff00000000bfa100000000000007010000f8ffffffb702"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETSTEERINGEBPF(r2, 0x800454e0, &(0x7f00000001c0)=r3) close(r2) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000000314010000000000000000000900020073797a2f000000000800410072786500140033007465616d5f736c6176655f30"], 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x8844) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000f80)={[{@grpquota}, {}, {@nombcache}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@nodelalloc}, {@noblock_validity}, {@noauto_da_alloc}]}, 0xfe, 0x54c, &(0x7f0000000400)="$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") sendmsg$NFQNL_MSG_VERDICT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x20, 0x3, 0x3, 0x301, 0x0, 0x0, {0x1, 0x0, 0xa}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffe, 0x44}}]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x84) setxattr$incfs_id(&(0x7f0000000140)='./file0/file0\x00', &(0x7f00000001c0), 0x0, 0x0, 0x0) unlink(&(0x7f0000000080)='./file0/file0\x00') 766.534095ms ago: executing program 6 (id=5361): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) capset(&(0x7f0000000340)={0x19980330}, &(0x7f0000002100)={0x1, 0x4, 0x0, 0xfffffffe, 0x7, 0x179}) r1 = syz_open_dev$loop(&(0x7f0000000000), 0x9, 0x4002) ioctl$IOC_PR_RELEASE(r1, 0x401070ca, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000200)='GPL\x00', 0x6, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000001c0), 0x321fc1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4000000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="81ffffff00000000180012800e0001007769726567756172640000000400028008000a00bc"], 0x40}}, 0x0) 666.063487ms ago: executing program 5 (id=5362): creat(&(0x7f00000000c0)='./file0\x00', 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000"], &(0x7f0000000200)='GPL\x00', 0x6, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r0, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000280)=[0x1], 0x0, 0x0, 0x1, 0x1}}, 0x3c) 623.384108ms ago: executing program 6 (id=5363): creat(&(0x7f00000000c0)='./file0\x00', 0x48) socket$inet(0x2, 0x2, 0x2) openat(0xffffffffffffff9c, 0x0, 0x107042, 0x0) mknodat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mknodat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8801}, 0x4000) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TCSBRKP(r1, 0x5425, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000240), 0x408400, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, &(0x7f0000001080)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$TIOCGPGRP(r1, 0x5437, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f00000002c0)=@file={0x1, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000280)={[{@noload}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1}}, {@bh}, {@noload}, {@data_err_ignore}, {@usrjquota}]}, 0xfe, 0x44d, &(0x7f0000000900)="$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") bind$unix(r2, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f00000007c0)=ANY=[]) 610.413398ms ago: executing program 5 (id=5364): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000200)={{r0}, &(0x7f0000000140), &(0x7f0000000040)='%pI4 \x00'}, 0x2a) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) syz_usb_connect$rtl8150(0x1, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) 601.235138ms ago: executing program 1 (id=5365): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='kfree\x00', r2}, 0x9) add_key(&(0x7f0000000280)='rxrpc\x00', 0x0, &(0x7f0000000100)="01000000020000000000006bb55a2a630b00c145f94cd977", 0x18, 0xffffffffffffffff) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000180)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x125}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x58}}, 0x24008890) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWOBJ={0x5c, 0x12, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x1}, @NFT_OBJECT_QUOTA=@NFTA_OBJ_DATA={0x48, 0x4, 0x0, 0x1, [@NFTA_QUOTA_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_QUOTA_CONSUMED={0xc}, @NFTA_QUOTA_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_QUOTA_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_QUOTA_CONSUMED={0xc, 0x4, 0x1, 0x0, 0x5}, @NFTA_QUOTA_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_QUOTA_CONSUMED={0xc, 0x4, 0x1, 0x0, 0x400}]}}, @NFT_MSG_DELFLOWTABLE={0x38, 0x18, 0xa, 0x301, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x1}]}], {0x14}}, 0xbc}, 0x1, 0x0, 0x0, 0x40008d4}, 0x4000000) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x6c, r3, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x44, @dev={0xfe, 0x80, '\x00', 0x16}, 0xff8}}, {0x20, 0x2, @in6={0xa, 0x0, 0xfffffffc, @mcast2}}}}]}]}, 0x6c}}, 0x0) 527.220079ms ago: executing program 1 (id=5366): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000"], &(0x7f0000000200)='GPL\x00', 0x6, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r1}, &(0x7f0000000000), &(0x7f00000005c0)=r2}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r0, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000280)=[0x1], 0x0, 0x0, 0x1, 0x1}}, 0x3c) 498.91875ms ago: executing program 1 (id=5367): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket$xdp(0x2c, 0x3, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() socket$inet_tcp(0x2, 0x1, 0x0) sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = socket(0x2c, 0x3, 0x0) setsockopt$sock_int(r3, 0x1, 0x2e, &(0x7f0000000280)=0x493, 0x4) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000100)) epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, r3, &(0x7f00000005c0)={0x2000a210}) epoll_wait(r4, &(0x7f0000001e40), 0x0, 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x20, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x73cea2d47785b264, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TCSETS(r6, 0x40045431, 0x0) syz_open_pts(r6, 0x0) 490.96324ms ago: executing program 0 (id=5368): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[], &(0x7f0000000100)='GPL\x00'}, 0x94) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') prctl$PR_SET_NAME(0xf, 0x0) r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) recvmsg(r0, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x40010000) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = mq_open(0x0, 0x42, 0x1f0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00'}, 0x18) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) mq_timedsend(r2, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r2, 0x0, 0x0, 0x6, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000e00000850000001b000000b700000000fa000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='sched_switch\x00', r4, 0x0, 0x401}, 0x18) syz_clone(0x42164000, 0x0, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r2, 0x0, 0x0, 0x0, 0x0) r5 = dup(r1) bind$rds(r5, &(0x7f0000000580)={0x2, 0x4e23, @empty}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$UHID_INPUT(r5, &(0x7f0000001040)={0xf, {"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", 0x1000}}, 0x1006) 445.435701ms ago: executing program 4 (id=5369): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) r2 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000fee000)=0x3fa, 0x4) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @empty, 0x1}, 0x1c) listen(r2, 0x50) r3 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000fee000)=0x3fa, 0x4) bind$inet6(r3, 0x0, 0x0) listen(r3, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x51, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='timer_start\x00', r4}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000cc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x4}}], 0x18}}], 0x1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCBRDELBR(r5, 0x89a2, &(0x7f0000000200)='bridge0\x00') 424.948682ms ago: executing program 4 (id=5370): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0, 0x0, 0x1e2}, 0x18) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') prctl$PR_SET_NAME(0xf, &(0x7f0000000040)='-,^!!\x00') r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) recvmsg(r1, &(0x7f0000000540)={&(0x7f0000000180)=@x25, 0x80, &(0x7f0000000400)=[{&(0x7f0000000200)=""/250, 0xfa}, {&(0x7f0000000300)=""/222, 0xde}], 0x2, &(0x7f0000000440)=""/233, 0xe9}, 0x40010000) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = mq_open(&(0x7f0000000a00)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb\x00\x00\x00\x00\x00', 0x42, 0x1f0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000080200000e"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x20, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="180068d2558e4cdfffffffff0f991e3051e7de00", @ANYRES32=r0, @ANYRES16=r2], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4a, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xa9) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r4}, 0x18) socket(0x10, 0x803, 0x0) mq_timedsend(r3, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r3, 0x0, 0x0, 0x6, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000e00000850000001b000000b700000000fa000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='sched_switch\x00', r6, 0x0, 0x401}, 0x18) syz_clone(0x42164000, 0x0, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r3, 0x0, 0x0, 0x0, 0x0) r7 = dup(r2) bind$rds(r7, &(0x7f0000000580)={0x2, 0x4e23, @empty}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$UHID_INPUT(r7, &(0x7f0000001040)={0xf, {"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", 0x1000}}, 0x1006) 297.962654ms ago: executing program 6 (id=5371): mkdir(&(0x7f0000000580)='./file0\x00', 0x92) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = inotify_init1(0x800) inotify_add_watch(r0, 0x0, 0x100080c) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bf"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000340)='kfree\x00', r1, 0x0, 0x40}, 0x18) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xb, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4004055}, 0xc00c880) socket$kcm(0x2, 0x5, 0x84) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="50000000090601020000000000000000020000000900020073797a31000000000500010007000000280007800c00018008000140ffffffff0500070084000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x4000}, 0x80) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c0000000014"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r5}, 0x10) r6 = openat$selinux_member(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$selinux_access(r6, &(0x7f00000004c0)=ANY=[], 0x56) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000480)='kfree\x00', r8}, 0x10) sendmsg$NFT_BATCH(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c00038008000140000000000800024000000000180003801400010076657468305f746f5f687372000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c0003801400010076657468305f746f5f687372"], 0xfc}}, 0x0) faccessat2(0xffffffffffffffff, 0x0, 0x2, 0x1200) ioctl$SNAPSHOT_GET_IMAGE_SIZE(0xffffffffffffffff, 0x8008330e, &(0x7f0000000400)) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x43, &(0x7f0000000080)={0x0, 0x2710}, 0x10) lsetxattr$security_selinux(&(0x7f0000000400)='./file0\x00', &(0x7f0000000000), &(0x7f0000000280)='system_u:object_r:fsadm_exec_t:s0\x00', 0x22, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) 29.50707ms ago: executing program 6 (id=5372): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a000000020000"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='kfree\x00', r1}, 0x9) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000180)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x125}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x58}}, 0x24008890) 8.23166ms ago: executing program 5 (id=5373): syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5e8, &(0x7f0000001200)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4a, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r2 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000340)={'vxcan0\x00', 0x0}) bind$can_raw(r2, &(0x7f00000003c0)={0x1d, r3}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000080)=0xffffffffffffffff, 0x4) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000340)={0x9}, 0x8) r4 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r4, &(0x7f0000004200)='t', 0x1) sendfile(r4, r0, 0x0, 0x3ffff) sendfile(r4, r0, 0x0, 0x7ffff000) 0s ago: executing program 6 (id=5374): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) capset(&(0x7f0000000340)={0x19980330}, &(0x7f0000002100)={0x1, 0x4, 0x0, 0xfffffffe, 0x7, 0x179}) r1 = syz_open_dev$loop(&(0x7f0000000000), 0x9, 0x4002) ioctl$IOC_PR_RELEASE(r1, 0x401070ca, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000200)='GPL\x00', 0x6, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[@ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000001c0), 0x321fc1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4000000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="81ffffff00000000180012800e0001007769726567756172640000000400028008000a00bc"], 0x40}}, 0x0) kernel console output (not intermixed with test programs): e syscall=202 compat=0 ip=0x7f90230bebe9 code=0x7ffc0000 [ 321.478893][ T29] audit: type=1326 audit(3514320319.513:13966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17736 comm="syz.6.4517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f90230bebe9 code=0x7ffc0000 [ 321.505421][ T29] audit: type=1326 audit(3514320319.513:13967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17736 comm="syz.6.4517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90230bebe9 code=0x7ffc0000 [ 321.531564][ T29] audit: type=1326 audit(3514320319.513:13968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17736 comm="syz.6.4517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f90230bebe9 code=0x7ffc0000 [ 321.557980][ T29] audit: type=1326 audit(3514320319.513:13969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17736 comm="syz.6.4517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90230bebe9 code=0x7ffc0000 [ 321.681352][T17761] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=17761 comm=syz.6.4522 [ 321.708083][T17761] sd 0:0:1:0: device reset [ 321.717496][T17767] netlink: 360 bytes leftover after parsing attributes in process `syz.5.4523'. [ 321.771469][T17782] FAULT_INJECTION: forcing a failure. [ 321.771469][T17782] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 321.785236][T17782] CPU: 0 UID: 0 PID: 17782 Comm: syz.0.4525 Not tainted syzkaller #0 PREEMPT(voluntary) [ 321.785300][T17782] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 321.785314][T17782] Call Trace: [ 321.785322][T17782] [ 321.785330][T17782] __dump_stack+0x1d/0x30 [ 321.785353][T17782] dump_stack_lvl+0xe8/0x140 [ 321.785375][T17782] dump_stack+0x15/0x1b [ 321.785395][T17782] should_fail_ex+0x265/0x280 [ 321.785452][T17782] should_fail_alloc_page+0xf2/0x100 [ 321.785483][T17782] __alloc_frozen_pages_noprof+0xff/0x360 [ 321.785595][T17782] alloc_pages_mpol+0xb3/0x250 [ 321.785631][T17782] vma_alloc_folio_noprof+0x1aa/0x300 [ 321.785692][T17782] handle_mm_fault+0xec2/0x2c20 [ 321.785736][T17782] do_user_addr_fault+0x636/0x1090 [ 321.785768][T17782] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 321.785792][T17782] exc_page_fault+0x62/0xa0 [ 321.785819][T17782] asm_exc_page_fault+0x26/0x30 [ 321.785892][T17782] RIP: 0033:0x7f84781fc1eb [ 321.785907][T17782] Code: c0 8b 87 c0 00 00 00 66 0f 6c c0 85 c0 0f 85 44 01 00 00 c7 87 c0 00 00 00 ff ff ff ff 48 8d 84 24 20 21 00 00 48 8d 7c 24 20 <0f> 29 44 24 40 49 89 e4 48 89 44 24 50 8b 43 74 48 89 9c 24 00 01 [ 321.785976][T17782] RSP: 002b:00007f8476cb4e10 EFLAGS: 00010246 [ 321.785991][T17782] RAX: 00007f8476cb6f30 RBX: 00007f8478457640 RCX: 0000000000000000 [ 321.786004][T17782] RDX: 00007f8476cb6f78 RSI: 00007f84782aeca8 RDI: 00007f8476cb4e30 [ 321.786015][T17782] RBP: 0000000000000009 R08: 0000000000000000 R09: 0000000000000000 [ 321.786076][T17782] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 321.786088][T17782] R13: 00007f8478486038 R14: 00007f8478485fa0 R15: 00007fff5cdce0c8 [ 321.786184][T17782] [ 321.786194][T17782] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 322.052075][T17809] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4529'. [ 322.063497][T17809] bond_slave_0: entered promiscuous mode [ 322.069711][T17809] bond_slave_1: entered promiscuous mode [ 322.076898][T17809] macsec1: entered promiscuous mode [ 322.082389][T17809] bond0: entered promiscuous mode [ 322.087638][T17809] team0: entered promiscuous mode [ 322.092757][T17809] team_slave_0: entered promiscuous mode [ 322.098691][T17809] team_slave_1: entered promiscuous mode [ 322.104542][T17809] syz_tun: entered promiscuous mode [ 322.110554][T17809] bond0: left promiscuous mode [ 322.115656][T17809] team0: left promiscuous mode [ 322.120661][T17809] team_slave_0: left promiscuous mode [ 322.126110][T17809] team_slave_1: left promiscuous mode [ 322.131616][T17809] syz_tun: left promiscuous mode [ 322.136831][T17809] bond_slave_0: left promiscuous mode [ 322.142358][T17809] bond_slave_1: left promiscuous mode [ 322.218080][T17811] serio: Serial port ptm0 [ 322.454232][T17829] wireguard0: entered promiscuous mode [ 322.459925][T17829] wireguard0: entered allmulticast mode [ 322.499260][T17834] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 322.507399][T17834] SELinux: failed to load policy [ 322.637758][T17842] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=17842 comm=syz.1.4540 [ 322.670101][T17842] sd 0:0:1:0: device reset [ 323.095598][T17846] netlink: 360 bytes leftover after parsing attributes in process `syz.6.4541'. [ 323.205656][T17862] devtmpfs: Unknown parameter 'trans' [ 323.350683][T17891] netlink: 360 bytes leftover after parsing attributes in process `syz.4.4551'. [ 323.465689][T17911] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4556'. [ 323.487507][T17914] netlink: 40 bytes leftover after parsing attributes in process `syz.6.4557'. [ 323.520009][T17920] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=17920 comm=syz.6.4559 [ 323.532711][T17922] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4560'. [ 323.534697][T17920] sd 0:0:1:0: device reset [ 323.576994][T17926] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4562'. [ 323.588203][T17926] macsec1: entered promiscuous mode [ 323.593483][T17926] bond0: entered promiscuous mode [ 323.598585][T17926] bond_slave_0: entered promiscuous mode [ 323.604381][T17926] bond_slave_1: entered promiscuous mode [ 323.611172][T17926] bond0: left promiscuous mode [ 323.615958][T17926] bond_slave_0: left promiscuous mode [ 323.621479][T17926] bond_slave_1: left promiscuous mode [ 323.997975][T17933] loop1: detected capacity change from 0 to 512 [ 324.009048][T17933] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 324.059387][T17933] EXT4-fs (loop1): 1 truncate cleaned up [ 324.065953][T17933] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 324.085002][T17933] EXT4-fs error (device loop1): ext4_ext_precache:632: inode #15: comm syz.1.4565: pblk 0 bad header/extent: invalid magic - magic 7973, entries 27514, max 27745(0), depth 25964(25964) [ 324.133375][T11850] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 324.171538][T17951] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4569'. [ 324.186221][T17953] FAULT_INJECTION: forcing a failure. [ 324.186221][T17953] name failslab, interval 1, probability 0, space 0, times 0 [ 324.199149][T17953] CPU: 1 UID: 0 PID: 17953 Comm: syz.0.4573 Not tainted syzkaller #0 PREEMPT(voluntary) [ 324.199183][T17953] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 324.199203][T17953] Call Trace: [ 324.199210][T17953] [ 324.199216][T17953] __dump_stack+0x1d/0x30 [ 324.199236][T17953] dump_stack_lvl+0xe8/0x140 [ 324.199253][T17953] dump_stack+0x15/0x1b [ 324.199342][T17953] should_fail_ex+0x265/0x280 [ 324.199433][T17953] should_failslab+0x8c/0xb0 [ 324.199455][T17953] kmem_cache_alloc_node_noprof+0x57/0x320 [ 324.199482][T17953] ? __alloc_skb+0x101/0x320 [ 324.199521][T17953] __alloc_skb+0x101/0x320 [ 324.199556][T17953] netlink_alloc_large_skb+0xba/0xf0 [ 324.199576][T17953] netlink_sendmsg+0x3cf/0x6b0 [ 324.199600][T17953] ? __pfx_netlink_sendmsg+0x10/0x10 [ 324.199669][T17953] __sock_sendmsg+0x142/0x180 [ 324.199757][T17953] ____sys_sendmsg+0x31e/0x4e0 [ 324.199782][T17953] ___sys_sendmsg+0x17b/0x1d0 [ 324.199814][T17953] __x64_sys_sendmsg+0xd4/0x160 [ 324.199866][T17953] x64_sys_call+0x191e/0x2ff0 [ 324.199886][T17953] do_syscall_64+0xd2/0x200 [ 324.199914][T17953] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 324.200051][T17953] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 324.200076][T17953] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 324.200096][T17953] RIP: 0033:0x7f847824ebe9 [ 324.200112][T17953] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 324.200128][T17953] RSP: 002b:00007f8476cb7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 324.200145][T17953] RAX: ffffffffffffffda RBX: 00007f8478485fa0 RCX: 00007f847824ebe9 [ 324.200156][T17953] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000004 [ 324.200170][T17953] RBP: 00007f8476cb7090 R08: 0000000000000000 R09: 0000000000000000 [ 324.200186][T17953] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 324.200245][T17953] R13: 00007f8478486038 R14: 00007f8478485fa0 R15: 00007fff5cdce0c8 [ 324.200323][T17953] [ 324.214490][T17954] netlink: 10 bytes leftover after parsing attributes in process `syz.6.4571'. [ 324.544260][T17974] loop0: detected capacity change from 0 to 512 [ 324.551003][T17974] EXT4-fs: Ignoring removed bh option [ 324.556848][T17974] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 324.566092][T17974] EXT4-fs (loop0): 1 truncate cleaned up [ 324.573389][T17974] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 324.591859][T17974] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 324.724412][T17983] loop5: detected capacity change from 0 to 512 [ 324.740193][T17983] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 324.829016][T17983] EXT4-fs (loop5): 1 truncate cleaned up [ 324.835984][T17983] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 324.853626][T17986] wireguard1: entered promiscuous mode [ 324.859199][T17986] wireguard1: entered allmulticast mode [ 324.883048][T17983] EXT4-fs error (device loop5): ext4_ext_precache:632: inode #15: comm syz.5.4580: pblk 0 bad header/extent: invalid magic - magic 7973, entries 27514, max 27745(0), depth 25964(25964) [ 324.913309][T17989] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 324.922489][T17989] SELinux: failed to load policy [ 324.969984][T16398] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 325.215285][T17997] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4585'. [ 325.299614][T18001] wireguard0: entered promiscuous mode [ 325.306072][T18001] wireguard0: entered allmulticast mode [ 325.335937][T18008] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 325.343960][T18002] wireguard1: entered promiscuous mode [ 325.349428][T18002] wireguard1: entered allmulticast mode [ 325.374830][T18008] SELinux: failed to load policy [ 325.379958][T18009] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 325.387959][T18009] SELinux: failed to load policy [ 325.458900][T18014] loop0: detected capacity change from 0 to 8192 [ 325.507307][T18014] vfat filesystem being mounted at /361/bus supports timestamps until 2107-12-31 (0x10391447e) [ 325.553357][T18025] bond_slave_0: entered promiscuous mode [ 325.559715][T18025] bond_slave_1: entered promiscuous mode [ 325.577989][T18025] macsec1: entered promiscuous mode [ 325.584083][T18025] bond0: entered promiscuous mode [ 325.589268][T18025] team0: entered promiscuous mode [ 325.594561][T18025] team_slave_0: entered promiscuous mode [ 325.600356][T18025] team_slave_1: entered promiscuous mode [ 325.606166][T18025] syz_tun: entered promiscuous mode [ 325.627613][T18025] bond0: left promiscuous mode [ 325.632539][T18025] team0: left promiscuous mode [ 325.638089][T18025] team_slave_0: left promiscuous mode [ 325.643549][T18025] team_slave_1: left promiscuous mode [ 325.649298][T18025] syz_tun: left promiscuous mode [ 325.654665][T18025] bond_slave_0: left promiscuous mode [ 325.660612][T18025] bond_slave_1: left promiscuous mode [ 325.717041][T18033] wireguard0: entered promiscuous mode [ 325.722521][T18033] wireguard0: entered allmulticast mode [ 325.760864][T18037] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 325.774105][T18037] SELinux: failed to load policy [ 325.947921][T18047] loop6: detected capacity change from 0 to 512 [ 325.955641][T18047] EXT4-fs: Ignoring removed bh option [ 325.968093][T18047] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem [ 325.979692][T18047] EXT4-fs (loop6): 1 truncate cleaned up [ 325.990198][T18047] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 326.012836][T18047] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 326.076819][ T29] kauditd_printk_skb: 788 callbacks suppressed [ 326.076836][ T29] audit: type=1326 audit(3514320324.468:14758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18056 comm="syz.0.4602" exe="/root/syz-executor" sig=0 arch=c000003e syscall=219 compat=0 ip=0x7f847824ebe9 code=0x7ffc0000 [ 326.110651][ T29] audit: type=1326 audit(3514320324.468:14759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18056 comm="syz.0.4602" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f847824ebe9 code=0x7ffc0000 [ 326.135165][ T29] audit: type=1326 audit(3514320324.468:14760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18056 comm="syz.0.4602" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f847824ebe9 code=0x7ffc0000 [ 326.162791][ T29] audit: type=1326 audit(3514320324.468:14761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18056 comm="syz.0.4602" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f847824ebe9 code=0x7ffc0000 [ 326.187299][ T29] audit: type=1326 audit(3514320324.468:14762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18056 comm="syz.0.4602" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f847824ebe9 code=0x7ffc0000 [ 326.217154][ T29] audit: type=1326 audit(3514320324.468:14763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18056 comm="syz.0.4602" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f847824ebe9 code=0x7ffc0000 [ 326.244984][ T29] audit: type=1326 audit(3514320324.468:14764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18056 comm="syz.0.4602" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f847824ebe9 code=0x7ffc0000 [ 326.269535][ T29] audit: type=1326 audit(3514320324.468:14765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18056 comm="syz.0.4602" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f847824ebe9 code=0x7ffc0000 [ 326.298766][ T29] audit: type=1400 audit(3514320324.657:14766): avc: denied { open } for pid=18062 comm="syz.0.4603" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 326.320595][ T29] audit: type=1400 audit(3514320324.657:14767): avc: denied { mount } for pid=18062 comm="syz.0.4603" name="/" dev="ramfs" ino=59533 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 326.353756][T18064] wireguard0: entered promiscuous mode [ 326.359731][T18064] wireguard0: entered allmulticast mode [ 326.441636][T18074] SELinux: policydb magic number 0x69662f2e does not match expected magic number 0xf97cff8c [ 326.454509][T18074] SELinux: failed to load policy [ 326.480926][T18076] loop1: detected capacity change from 0 to 8192 [ 326.548514][T18079] wireguard0: entered promiscuous mode [ 326.554132][T18079] wireguard0: entered allmulticast mode [ 326.601558][T18083] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 326.612187][T18083] SELinux: failed to load policy [ 326.646291][T18076] vfat filesystem being mounted at /368/bus supports timestamps until 2107-12-31 (0x10391447e) [ 326.871174][T18095] devtmpfs: Unknown parameter 'trans' [ 327.157837][T18127] loop1: detected capacity change from 0 to 1024 [ 327.189760][T18127] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 327.227279][T18136] loop6: detected capacity change from 0 to 1024 [ 327.245060][T18136] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 327.268225][T18127] FAULT_INJECTION: forcing a failure. [ 327.268225][T18127] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 327.281892][T18127] CPU: 0 UID: 0 PID: 18127 Comm: syz.1.4620 Not tainted syzkaller #0 PREEMPT(voluntary) [ 327.281921][T18127] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 327.281932][T18127] Call Trace: [ 327.281939][T18127] [ 327.281946][T18127] __dump_stack+0x1d/0x30 [ 327.281978][T18127] dump_stack_lvl+0xe8/0x140 [ 327.281997][T18127] dump_stack+0x15/0x1b [ 327.282014][T18127] should_fail_ex+0x265/0x280 [ 327.282089][T18127] should_fail+0xb/0x20 [ 327.282166][T18127] should_fail_usercopy+0x1a/0x20 [ 327.282190][T18127] strncpy_from_user+0x25/0x230 [ 327.282220][T18127] ? kmem_cache_alloc_noprof+0x186/0x310 [ 327.282280][T18127] ? getname_flags+0x80/0x3b0 [ 327.282307][T18127] getname_flags+0xae/0x3b0 [ 327.282402][T18127] user_path_at+0x28/0x130 [ 327.282508][T18127] do_sys_truncate+0x5c/0x130 [ 327.282533][T18127] __x64_sys_truncate+0x31/0x40 [ 327.282558][T18127] x64_sys_call+0x1a2f/0x2ff0 [ 327.282582][T18127] do_syscall_64+0xd2/0x200 [ 327.282658][T18127] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 327.282683][T18127] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 327.282721][T18127] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 327.282741][T18127] RIP: 0033:0x7f07f0acebe9 [ 327.282756][T18127] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 327.282775][T18127] RSP: 002b:00007f07ef537038 EFLAGS: 00000246 ORIG_RAX: 000000000000004c [ 327.282796][T18127] RAX: ffffffffffffffda RBX: 00007f07f0d05fa0 RCX: 00007f07f0acebe9 [ 327.282827][T18127] RDX: 0000000000000000 RSI: 0000000008000c00 RDI: 0000200000000040 [ 327.282840][T18127] RBP: 00007f07ef537090 R08: 0000000000000000 R09: 0000000000000000 [ 327.282854][T18127] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 327.282867][T18127] R13: 00007f07f0d06038 R14: 00007f07f0d05fa0 R15: 00007fff5830f5e8 [ 327.282882][T18127] [ 327.525225][T10394] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 327.565198][T11850] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 327.586139][T18153] loop4: detected capacity change from 0 to 512 [ 327.601365][T18153] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 327.652170][T18153] EXT4-fs (loop4): 1 truncate cleaned up [ 327.659839][T18153] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 327.689189][T18153] EXT4-fs error (device loop4): ext4_ext_precache:632: inode #15: comm syz.4.4625: pblk 0 bad header/extent: invalid magic - magic 7973, entries 27514, max 27745(0), depth 25964(25964) [ 327.729258][T12354] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 327.884544][T18167] serio: Serial port ptm0 [ 328.028884][T18170] loop4: detected capacity change from 0 to 8192 [ 328.044184][T18176] loop0: detected capacity change from 0 to 1024 [ 328.117475][T18170] vfat filesystem being mounted at /307/bus supports timestamps until 2107-12-31 (0x10391447e) [ 328.186671][T18176] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 328.204436][T18182] wireguard0: entered promiscuous mode [ 328.210703][T18182] wireguard0: entered allmulticast mode [ 328.243688][T18185] __nla_validate_parse: 1 callbacks suppressed [ 328.243708][T18185] netlink: 360 bytes leftover after parsing attributes in process `syz.4.4634'. [ 328.264591][T12126] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 328.657764][T18209] serio: Serial port ptm0 [ 328.778485][T18234] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4645'. [ 328.789459][T18234] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4645'. [ 328.853422][T18244] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4647'. [ 328.868624][T18244] bond1: entered promiscuous mode [ 328.873700][T18244] bond1: entered allmulticast mode [ 328.879034][T18244] 8021q: adding VLAN 0 to HW filter on device bond1 [ 328.937774][T18252] wireguard0: entered promiscuous mode [ 328.943388][T18252] wireguard0: entered allmulticast mode [ 328.984208][T18254] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 328.991930][T18254] SELinux: failed to load policy [ 329.346593][T18270] wireguard0: entered promiscuous mode [ 329.352110][T18270] wireguard0: entered allmulticast mode [ 329.361263][T18273] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 329.369051][T18273] SELinux: failed to load policy [ 329.615459][T18280] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 329.624178][T18280] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 329.668124][T18281] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 329.684048][T18283] serio: Serial port ptm0 [ 329.688883][T18278] wireguard1: entered promiscuous mode [ 329.694350][T18278] wireguard1: entered allmulticast mode [ 329.700797][T18281] SELinux: failed to load policy [ 329.884108][T18286] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 329.904841][T18286] loop5: detected capacity change from 0 to 1024 [ 329.956583][T18286] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 329.988029][T18298] wireguard1: entered promiscuous mode [ 329.993570][T18298] wireguard1: entered allmulticast mode [ 330.003448][T16398] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 330.030951][T18301] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4663'. [ 330.045107][T18305] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 330.059087][T18305] SELinux: failed to load policy [ 330.862896][T18324] loop5: detected capacity change from 0 to 512 [ 330.877863][T18324] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 330.903751][T18324] EXT4-fs (loop5): 1 truncate cleaned up [ 330.910850][T18324] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 330.927273][ T29] kauditd_printk_skb: 700 callbacks suppressed [ 330.927288][ T29] audit: type=1400 audit(3514320329.570:15468): avc: denied { read open } for pid=18323 comm="syz.5.4669" path="/101/bus/bus" dev="loop5" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 330.995451][ T29] audit: type=1400 audit(3514320329.570:15469): avc: denied { write } for pid=18323 comm="syz.5.4669" name="bus" dev="loop5" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 331.040792][ T29] audit: type=1400 audit(3514320329.685:15470): avc: denied { create } for pid=18329 comm="syz.0.4672" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 331.060967][ T29] audit: type=1400 audit(3514320329.685:15471): avc: denied { bind } for pid=18329 comm="syz.0.4672" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 331.080588][ T29] audit: type=1400 audit(3514320329.685:15472): avc: denied { listen } for pid=18329 comm="syz.0.4672" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 331.100342][ T29] audit: type=1400 audit(3514320329.685:15473): avc: denied { connect } for pid=18329 comm="syz.0.4672" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 331.120299][ T29] audit: type=1400 audit(3514320329.685:15474): avc: denied { read } for pid=18329 comm="syz.0.4672" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 331.183332][T18342] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4673'. [ 331.202894][ T29] audit: type=1400 audit(3514320329.748:15475): avc: denied { remount } for pid=18335 comm="syz.4.4670" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 331.222980][ T29] audit: type=1400 audit(3514320329.811:15476): avc: denied { egress } for pid=43 comm="kworker/u8:3" saddr=fe80::1c daddr=ff02::2 netif=gretap0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=1 [ 331.246935][ T29] audit: type=1400 audit(3514320329.811:15477): avc: denied { sendto } for pid=43 comm="kworker/u8:3" saddr=fe80::1c daddr=ff02::2 netif=gretap0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:node_t tclass=node permissive=1 [ 331.292086][T18349] loop6: detected capacity change from 0 to 512 [ 331.305273][T18347] loop1: detected capacity change from 0 to 1024 [ 331.317820][T18349] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 331.336852][T18347] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 331.361908][T18349] EXT4-fs (loop6): 1 truncate cleaned up [ 331.368305][T18349] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 331.430178][T18349] EXT4-fs error (device loop6): ext4_ext_precache:632: inode #15: comm syz.6.4675: pblk 0 bad header/extent: invalid magic - magic 7973, entries 27514, max 27745(0), depth 25964(25964) [ 331.455297][T18338] loop0: detected capacity change from 0 to 1024 [ 331.488117][T11850] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 331.510234][T10394] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 331.520408][T18353] wireguard1: entered promiscuous mode [ 331.525927][T18353] wireguard1: entered allmulticast mode [ 331.529632][T18338] EXT4-fs (loop0): bad geometry: first data block 0 is beyond end of filesystem (0) [ 331.549706][T18357] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 331.558798][T18357] SELinux: failed to load policy [ 331.669180][T18359] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 331.682356][T18359] loop6: detected capacity change from 0 to 1024 [ 331.692659][T18361] wireguard0: entered promiscuous mode [ 331.698346][T18361] wireguard0: entered allmulticast mode [ 331.839321][T18370] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4682'. [ 331.904969][T18374] serio: Serial port ptm1 [ 332.093718][T18392] loop1: detected capacity change from 0 to 512 [ 332.100492][T18392] EXT4-fs: Ignoring removed bh option [ 332.198600][T18392] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 332.269461][T18392] EXT4-fs (loop1): 1 truncate cleaned up [ 332.329567][T18397] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 332.379017][T18397] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 332.422497][T18399] wireguard0: entered promiscuous mode [ 332.428011][T18399] wireguard0: entered allmulticast mode [ 332.471725][T18401] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 332.512219][T18401] SELinux: failed to load policy [ 332.735926][T18405] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 332.752939][T18405] loop1: detected capacity change from 0 to 1024 [ 332.994762][T18425] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4697'. [ 333.021533][T18429] tipc: Started in network mode [ 333.026494][T18429] tipc: Node identity fe800000000000000000000000000016, cluster identity 4711 [ 333.035859][T18429] tipc: Enabled bearer , priority 10 [ 333.054898][T18431] devtmpfs: Unknown parameter 'trans' [ 333.170514][T18438] wireguard1: entered promiscuous mode [ 333.176153][T18438] wireguard1: entered allmulticast mode [ 333.188279][T18436] loop0: detected capacity change from 0 to 8192 [ 333.211875][T18440] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 333.213894][T18436] vfat filesystem being mounted at /373/bus supports timestamps until 2107-12-31 (0x10391447e) [ 333.219864][T18440] SELinux: failed to load policy [ 333.305913][T18444] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=512 sclass=netlink_route_socket pid=18444 comm=syz.4.4703 [ 333.321481][T18444] sd 0:0:1:0: device reset [ 333.374941][T18446] netlink: 360 bytes leftover after parsing attributes in process `syz.0.4704'. [ 333.405436][T18448] netlink: 360 bytes leftover after parsing attributes in process `syz.0.4705'. [ 333.581591][T18459] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4710'. [ 333.616794][T18462] FAULT_INJECTION: forcing a failure. [ 333.616794][T18462] name failslab, interval 1, probability 0, space 0, times 0 [ 333.629762][T18462] CPU: 1 UID: 0 PID: 18462 Comm: syz.6.4711 Not tainted syzkaller #0 PREEMPT(voluntary) [ 333.629789][T18462] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 333.629881][T18462] Call Trace: [ 333.629887][T18462] [ 333.629893][T18462] __dump_stack+0x1d/0x30 [ 333.629913][T18462] dump_stack_lvl+0xe8/0x140 [ 333.629930][T18462] dump_stack+0x15/0x1b [ 333.629951][T18462] should_fail_ex+0x265/0x280 [ 333.629994][T18462] should_failslab+0x8c/0xb0 [ 333.630016][T18462] kmem_cache_alloc_noprof+0x50/0x310 [ 333.630048][T18462] ? skb_clone+0x151/0x1f0 [ 333.630102][T18462] skb_clone+0x151/0x1f0 [ 333.630124][T18462] __netlink_deliver_tap+0x2c9/0x500 [ 333.630150][T18462] netlink_unicast+0x66b/0x690 [ 333.630237][T18462] netlink_sendmsg+0x58b/0x6b0 [ 333.630283][T18462] ? __pfx_netlink_sendmsg+0x10/0x10 [ 333.630309][T18462] __sock_sendmsg+0x142/0x180 [ 333.630340][T18462] ____sys_sendmsg+0x31e/0x4e0 [ 333.630376][T18462] ___sys_sendmsg+0x17b/0x1d0 [ 333.630412][T18462] __x64_sys_sendmsg+0xd4/0x160 [ 333.630440][T18462] x64_sys_call+0x191e/0x2ff0 [ 333.630461][T18462] do_syscall_64+0xd2/0x200 [ 333.630547][T18462] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 333.630617][T18462] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 333.630646][T18462] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 333.630670][T18462] RIP: 0033:0x7f90230bebe9 [ 333.630686][T18462] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 333.630705][T18462] RSP: 002b:00007f9021b1f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 333.630741][T18462] RAX: ffffffffffffffda RBX: 00007f90232f5fa0 RCX: 00007f90230bebe9 [ 333.630826][T18462] RDX: 0000000000000000 RSI: 0000200000000300 RDI: 0000000000000003 [ 333.630837][T18462] RBP: 00007f9021b1f090 R08: 0000000000000000 R09: 0000000000000000 [ 333.630850][T18462] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 333.630863][T18462] R13: 00007f90232f6038 R14: 00007f90232f5fa0 R15: 00007ffe1591d678 [ 333.630882][T18462] [ 333.838903][T18462] tipc: Started in network mode [ 333.843911][T18462] tipc: Node identity fe800000000000000000000000000016, cluster identity 4711 [ 333.853414][T18462] tipc: Enabled bearer , priority 10 [ 333.880866][T18463] wireguard0: entered promiscuous mode [ 333.886369][T18463] wireguard0: entered allmulticast mode [ 333.926864][T18471] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 333.934704][T18468] loop1: detected capacity change from 0 to 8192 [ 333.943209][T18471] SELinux: failed to load policy [ 333.957906][T18468] vfat filesystem being mounted at /391/bus supports timestamps until 2107-12-31 (0x10391447e) [ 334.039071][T18479] serio: Serial port ptm0 [ 334.097468][ T1038] tipc: Node number set to 4269801494 [ 334.131867][T18491] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4722'. [ 334.146626][T18491] macsec1: entered promiscuous mode [ 334.151881][T18491] bond0: entered promiscuous mode [ 334.157088][T18491] bond_slave_0: entered promiscuous mode [ 334.162901][T18491] bond_slave_1: entered promiscuous mode [ 334.171947][T18491] bond0: left promiscuous mode [ 334.176801][T18491] bond_slave_0: left promiscuous mode [ 334.182265][T18491] bond_slave_1: left promiscuous mode [ 334.261843][T18496] policy can only be matched on NF_INET_PRE_ROUTING [ 334.261853][T18496] unable to load match [ 334.393537][T18504] wireguard1: entered promiscuous mode [ 334.399053][T18504] wireguard1: entered allmulticast mode [ 334.440966][T18508] loop5: detected capacity change from 0 to 1024 [ 334.463455][T18508] EXT4-fs mount: 7 callbacks suppressed [ 334.463470][T18508] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 334.679381][T16398] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 334.813008][ T1038] tipc: Node number set to 4269801494 [ 334.965709][T18517] wireguard0: entered promiscuous mode [ 334.971260][T18517] wireguard0: entered allmulticast mode [ 334.999419][T18523] serio: Serial port ptm0 [ 335.006145][T18527] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 335.016526][T18527] SELinux: failed to load policy [ 335.046488][T18529] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4734'. [ 335.055823][T18526] loop6: detected capacity change from 0 to 8192 [ 335.058689][T18529] bond_slave_0: entered promiscuous mode [ 335.067866][T18529] bond_slave_1: entered promiscuous mode [ 335.072165][T18526] vfat filesystem being mounted at /470/bus supports timestamps until 2107-12-31 (0x10391447e) [ 335.087989][T18529] macsec1: entered promiscuous mode [ 335.093225][T18529] bond0: entered promiscuous mode [ 335.098490][T18529] team0: entered promiscuous mode [ 335.103519][T18529] team_slave_0: entered promiscuous mode [ 335.109383][T18529] team_slave_1: entered promiscuous mode [ 335.115090][T18529] syz_tun: entered promiscuous mode [ 335.123540][T18529] bond0: left promiscuous mode [ 335.128647][T18529] team0: left promiscuous mode [ 335.133419][T18529] team_slave_0: left promiscuous mode [ 335.139099][T18529] team_slave_1: left promiscuous mode [ 335.144673][T18529] syz_tun: left promiscuous mode [ 335.149981][T18529] bond_slave_0: left promiscuous mode [ 335.155426][T18529] bond_slave_1: left promiscuous mode [ 335.253157][T18539] netlink: 360 bytes leftover after parsing attributes in process `syz.1.4739'. [ 335.326602][T18548] netlink: 10 bytes leftover after parsing attributes in process `syz.6.4738'. [ 335.391177][T18552] netlink: 5 bytes leftover after parsing attributes in process `syz.0.4742'. [ 335.996912][T18573] serio: Serial port ptm0 [ 336.025184][T18577] loop5: detected capacity change from 0 to 512 [ 336.035471][T18577] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 336.059355][T18577] EXT4-fs (loop5): 1 truncate cleaned up [ 336.080313][T18577] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 336.100929][T18577] EXT4-fs error (device loop5): ext4_ext_precache:632: inode #15: comm syz.5.4748: pblk 0 bad header/extent: invalid magic - magic 7973, entries 27514, max 27745(0), depth 25964(25964) [ 336.130123][T18583] loop4: detected capacity change from 0 to 8192 [ 336.152909][T18583] vfat filesystem being mounted at /336/bus supports timestamps until 2107-12-31 (0x10391447e) [ 336.159464][T16398] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 336.211318][T18589] loop1: detected capacity change from 0 to 512 [ 336.213941][T18589] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 336.226959][T18589] EXT4-fs (loop1): 1 truncate cleaned up [ 336.263040][T18589] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 336.282686][T18587] loop5: detected capacity change from 0 to 512 [ 336.282906][T18587] EXT4-fs: Ignoring removed bh option [ 336.283244][T18587] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 336.284011][T18587] EXT4-fs (loop5): 1 truncate cleaned up [ 336.315238][T18587] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 336.473139][ T29] kauditd_printk_skb: 285 callbacks suppressed [ 336.473152][ T29] audit: type=1326 audit(3514320335.396:15763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18598 comm="syz.4.4753" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa75178ebe9 code=0x7ffc0000 [ 336.524627][T18599] loop4: detected capacity change from 0 to 2048 [ 336.540532][T11850] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 336.573600][T18587] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 336.591226][ T29] audit: type=1326 audit(3514320335.428:15764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18598 comm="syz.4.4753" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa75178ebe9 code=0x7ffc0000 [ 336.614977][ T29] audit: type=1326 audit(3514320335.428:15765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18598 comm="syz.4.4753" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fa75178ebe9 code=0x7ffc0000 [ 336.638578][ T29] audit: type=1326 audit(3514320335.428:15766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18598 comm="syz.4.4753" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa75178ebe9 code=0x7ffc0000 [ 336.662146][ T29] audit: type=1326 audit(3514320335.428:15767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18598 comm="syz.4.4753" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa75178ebe9 code=0x7ffc0000 [ 336.685720][ T29] audit: type=1326 audit(3514320335.428:15768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18598 comm="syz.4.4753" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7fa75178ebe9 code=0x7ffc0000 [ 336.709289][ T29] audit: type=1326 audit(3514320335.428:15769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18598 comm="syz.4.4753" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa75178ebe9 code=0x7ffc0000 [ 336.733012][ T29] audit: type=1326 audit(3514320335.428:15770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18598 comm="syz.4.4753" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa75178ebe9 code=0x7ffc0000 [ 336.735033][T18599] EXT4-fs (loop4): mounted filesystem 00000800-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 336.756712][ T29] audit: type=1326 audit(3514320335.428:15771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18598 comm="syz.4.4753" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa75178ebe9 code=0x7ffc0000 [ 336.792198][ T29] audit: type=1326 audit(3514320335.428:15772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18598 comm="syz.4.4753" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa75178ebe9 code=0x7ffc0000 [ 336.840831][T18607] loop0: detected capacity change from 0 to 128 [ 336.849140][T18599] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.4753: bg 0: block 120: padding at end of block bitmap is not set [ 336.867655][T18607] FAT-fs (loop0): Directory bread(block 32) failed [ 336.879116][T18607] FAT-fs (loop0): Directory bread(block 33) failed [ 336.899462][T18607] FAT-fs (loop0): Directory bread(block 34) failed [ 336.906025][T18607] FAT-fs (loop0): Directory bread(block 35) failed [ 336.917281][T18607] FAT-fs (loop0): Directory bread(block 36) failed [ 336.925044][T18607] FAT-fs (loop0): Directory bread(block 37) failed [ 336.928345][T18616] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 336.933457][T18607] FAT-fs (loop0): Directory bread(block 38) failed [ 336.945619][T18616] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 336.947427][T18607] FAT-fs (loop0): Directory bread(block 39) failed [ 336.960818][T18607] FAT-fs (loop0): Directory bread(block 40) failed [ 336.967609][T18607] FAT-fs (loop0): Directory bread(block 41) failed [ 336.989482][T12354] EXT4-fs (loop4): unmounting filesystem 00000800-0000-0000-0000-000000000000. [ 336.996137][T18607] vfat filesystem being mounted at /388/file0 supports timestamps until 2107-12-31 (0x10391447e) [ 337.028657][T18607] FAULT_INJECTION: forcing a failure. [ 337.028657][T18607] name failslab, interval 1, probability 0, space 0, times 0 [ 337.041340][T18607] CPU: 0 UID: 0 PID: 18607 Comm: syz.0.4756 Not tainted syzkaller #0 PREEMPT(voluntary) [ 337.041370][T18607] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 337.041384][T18607] Call Trace: [ 337.041390][T18607] [ 337.041397][T18607] __dump_stack+0x1d/0x30 [ 337.041416][T18607] dump_stack_lvl+0xe8/0x140 [ 337.041588][T18607] dump_stack+0x15/0x1b [ 337.041606][T18607] should_fail_ex+0x265/0x280 [ 337.041631][T18607] should_failslab+0x8c/0xb0 [ 337.041656][T18607] kmem_cache_alloc_noprof+0x50/0x310 [ 337.041729][T18607] ? security_file_alloc+0x32/0x100 [ 337.041760][T18607] security_file_alloc+0x32/0x100 [ 337.041803][T18607] init_file+0x5c/0x1d0 [ 337.041830][T18607] alloc_empty_file+0x8b/0x200 [ 337.041930][T18607] path_openat+0x68/0x2170 [ 337.041949][T18607] ? mntput+0x4b/0x80 [ 337.041975][T18607] ? terminate_walk+0x27f/0x2a0 [ 337.042000][T18607] ? path_openat+0x1bf8/0x2170 [ 337.042082][T18607] ? _parse_integer_limit+0x170/0x190 [ 337.042097][T18607] do_filp_open+0x109/0x230 [ 337.042112][T18607] do_open_execat+0xd8/0x260 [ 337.042123][T18607] alloc_bprm+0x25/0x350 [ 337.042185][T18607] do_execveat_common+0x12e/0x750 [ 337.042231][T18607] ? getname_flags+0x154/0x3b0 [ 337.042247][T18607] __x64_sys_execveat+0x73/0x90 [ 337.042259][T18607] x64_sys_call+0x1fec/0x2ff0 [ 337.042350][T18607] do_syscall_64+0xd2/0x200 [ 337.042368][T18607] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 337.042410][T18607] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 337.042426][T18607] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 337.042439][T18607] RIP: 0033:0x7f847824ebe9 [ 337.042449][T18607] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 337.042501][T18607] RSP: 002b:00007f8476cb7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 337.042513][T18607] RAX: ffffffffffffffda RBX: 00007f8478485fa0 RCX: 00007f847824ebe9 [ 337.042521][T18607] RDX: 0000000000000000 RSI: 0000200000000280 RDI: ffffffffffffff9c [ 337.042528][T18607] RBP: 00007f8476cb7090 R08: 0000000000000000 R09: 0000000000000000 [ 337.042535][T18607] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 337.042671][T18607] R13: 00007f8478486038 R14: 00007f8478485fa0 R15: 00007fff5cdce0c8 [ 337.042682][T18607] [ 337.078128][T18625] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4762'. [ 337.321052][T18631] wireguard1: entered promiscuous mode [ 337.326653][T18631] wireguard1: entered allmulticast mode [ 337.370510][T18633] loop6: detected capacity change from 0 to 8192 [ 337.384588][T18633] vfat filesystem being mounted at /473/bus supports timestamps until 2107-12-31 (0x10391447e) [ 338.304159][T18659] loop5: detected capacity change from 0 to 2048 [ 338.349451][T18659] EXT4-fs (loop5): mounted filesystem 00000800-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 338.365189][T18659] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.4771: bg 0: block 120: padding at end of block bitmap is not set [ 338.442048][T16398] EXT4-fs (loop5): unmounting filesystem 00000800-0000-0000-0000-000000000000. [ 338.556200][T18674] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4775'. [ 338.568992][T18676] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4776'. [ 338.578988][T18674] netem: change failed [ 339.283310][T18685] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4779'. [ 339.348448][T18691] wireguard1: entered promiscuous mode [ 339.354015][T18691] wireguard1: entered allmulticast mode [ 339.391795][T18696] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 339.400377][T18696] SELinux: failed to load policy [ 339.469000][T18701] wireguard0: entered promiscuous mode [ 339.474548][T18701] wireguard0: entered allmulticast mode [ 339.510480][T18705] loop4: detected capacity change from 0 to 2048 [ 339.511806][T18709] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 339.524867][T18709] SELinux: failed to load policy [ 339.548819][T18705] EXT4-fs (loop4): mounted filesystem 00000800-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 339.571164][T18705] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.4786: bg 0: block 120: padding at end of block bitmap is not set [ 339.637784][T18721] loop1: detected capacity change from 0 to 512 [ 339.645616][T18721] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 339.661136][T12354] EXT4-fs (loop4): unmounting filesystem 00000800-0000-0000-0000-000000000000. [ 339.669858][T18721] EXT4-fs (loop1): 1 truncate cleaned up [ 339.676359][T18721] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 339.770066][T11850] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 339.821064][T18733] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 339.829799][T18733] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 340.141079][T18737] netlink: 32 bytes leftover after parsing attributes in process `syz.6.4792'. [ 340.231195][T18743] netlink: 360 bytes leftover after parsing attributes in process `syz.0.4795'. [ 340.257156][T18745] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 340.270619][T18745] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 340.315942][T18749] serio: Serial port ptm0 [ 340.528336][T18762] netlink: 10 bytes leftover after parsing attributes in process `syz.1.4799'. [ 340.802481][T18771] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4804'. [ 340.893841][T18776] loop0: detected capacity change from 0 to 512 [ 340.900544][T18776] EXT4-fs: Ignoring removed bh option [ 340.909772][T18776] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 340.920717][T18776] EXT4-fs (loop0): 1 truncate cleaned up [ 340.926796][T18776] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 340.945543][T18776] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 341.313238][T18787] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 341.331390][T18792] loop5: detected capacity change from 0 to 128 [ 341.353887][T18787] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 341.362142][T18792] msdos filesystem being mounted at /125/file0 supports timestamps until 2107-12-31 (0x10391447e) [ 341.397187][T18791] vlan2: entered promiscuous mode [ 341.402300][T18791] bridge0: entered promiscuous mode [ 341.454446][ T29] kauditd_printk_skb: 398 callbacks suppressed [ 341.454461][ T29] audit: type=1326 audit(3514320340.625:16171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18798 comm="syz.4.4813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa75178ebe9 code=0x7ffc0000 [ 341.484877][ T29] audit: type=1326 audit(3514320340.625:16172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18798 comm="syz.4.4813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa75178ebe9 code=0x7ffc0000 [ 341.508466][ T29] audit: type=1326 audit(3514320340.625:16173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18798 comm="syz.4.4813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fa75178ebe9 code=0x7ffc0000 [ 341.532339][ T29] audit: type=1326 audit(3514320340.625:16174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18798 comm="syz.4.4813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa75178ebe9 code=0x7ffc0000 [ 341.555923][ T29] audit: type=1326 audit(3514320340.625:16175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18798 comm="syz.4.4813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7fa75178ebe9 code=0x7ffc0000 [ 341.579486][ T29] audit: type=1326 audit(3514320340.625:16176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18798 comm="syz.4.4813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa75178ebe9 code=0x7ffc0000 [ 341.603064][ T29] audit: type=1326 audit(3514320340.625:16177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18798 comm="syz.4.4813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa75178ebe9 code=0x7ffc0000 [ 341.626639][ T29] audit: type=1326 audit(3514320340.625:16178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18798 comm="syz.4.4813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa75178ebe9 code=0x7ffc0000 [ 341.650255][ T29] audit: type=1326 audit(3514320340.625:16179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18798 comm="syz.4.4813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa75178ebe9 code=0x7ffc0000 [ 341.673929][ T29] audit: type=1326 audit(3514320340.625:16180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18798 comm="syz.4.4813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa75178ebe9 code=0x7ffc0000 [ 341.711056][T18803] wireguard0: entered promiscuous mode [ 341.716553][T18803] wireguard0: entered allmulticast mode [ 341.756480][T18805] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 341.764034][T18805] SELinux: failed to load policy [ 341.832699][T18807] wireguard0: entered promiscuous mode [ 341.838260][T18807] wireguard0: entered allmulticast mode [ 341.880021][T18809] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 341.887630][T18809] SELinux: failed to load policy [ 341.927582][T18811] serio: Serial port ptm1 [ 342.250130][T18826] netlink: 10 bytes leftover after parsing attributes in process `syz.1.4820'. [ 342.754804][T18842] devtmpfs: Unknown parameter 'trans' [ 342.878589][T18847] wireguard0: entered promiscuous mode [ 342.884145][T18847] wireguard0: entered allmulticast mode [ 343.017886][T18850] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4827'. [ 343.039441][T18852] loop1: detected capacity change from 0 to 2048 [ 343.039741][T18850] macsec1: entered promiscuous mode [ 343.051104][T18850] bond0: entered promiscuous mode [ 343.056174][T18850] bond_slave_0: entered promiscuous mode [ 343.061996][T18850] bond_slave_1: entered promiscuous mode [ 343.079758][T18850] bond0: left promiscuous mode [ 343.080795][T18852] EXT4-fs (loop1): mounted filesystem 00000800-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 343.084555][T18850] bond_slave_0: left promiscuous mode [ 343.102008][T18850] bond_slave_1: left promiscuous mode [ 343.113016][T18852] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.4828: bg 0: block 120: padding at end of block bitmap is not set [ 343.195222][T11850] EXT4-fs (loop1): unmounting filesystem 00000800-0000-0000-0000-000000000000. [ 343.196926][T18858] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4829'. [ 343.216487][T18858] macsec1: entered promiscuous mode [ 343.221694][T18858] bond0: entered promiscuous mode [ 343.226817][T18858] bond_slave_0: entered promiscuous mode [ 343.232664][T18858] bond_slave_1: entered promiscuous mode [ 343.265649][T18858] bond0: left promiscuous mode [ 343.270496][T18858] bond_slave_0: left promiscuous mode [ 343.275933][T18858] bond_slave_1: left promiscuous mode [ 343.292976][T18862] sd 0:0:1:0: device reset [ 343.379381][T18869] serio: Serial port ptm0 [ 343.467583][T18878] netlink: 72 bytes leftover after parsing attributes in process `syz.5.4835'. [ 343.977667][T18887] netlink: 10 bytes leftover after parsing attributes in process `syz.1.4838'. [ 344.313635][T18903] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4843'. [ 344.325824][T18903] macsec1: entered promiscuous mode [ 344.331114][T18903] bond0: entered promiscuous mode [ 344.336168][T18903] bond_slave_0: entered promiscuous mode [ 344.341967][T18903] bond_slave_1: entered promiscuous mode [ 344.351650][T18903] bond0: left promiscuous mode [ 344.356544][T18903] bond_slave_0: left promiscuous mode [ 344.362121][T18903] bond_slave_1: left promiscuous mode [ 345.766477][T18942] loop6: detected capacity change from 0 to 512 [ 345.774618][T18942] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 345.805381][T18942] EXT4-fs (loop6): 1 truncate cleaned up [ 345.811478][T18942] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 345.965909][T10394] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 346.007050][T18959] loop0: detected capacity change from 0 to 512 [ 346.015780][T18961] netlink: 10 bytes leftover after parsing attributes in process `syz.4.4858'. [ 346.021879][T18959] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 346.047559][T18963] wireguard0: entered promiscuous mode [ 346.053150][T18963] wireguard0: entered allmulticast mode [ 346.076860][T18959] EXT4-fs (loop0): 1 truncate cleaned up [ 346.090763][T18959] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 346.103974][T18966] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 346.116384][T18966] SELinux: failed to load policy [ 346.294641][T18976] loop5: detected capacity change from 0 to 512 [ 346.328274][T18976] EXT4-fs: Ignoring removed bh option [ 346.358449][T18976] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 346.398654][T18976] EXT4-fs (loop5): 1 truncate cleaned up [ 346.420434][T18976] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 346.467949][T18976] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 346.527734][T12126] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 346.561585][T18979] serio: Serial port ptm1 [ 346.596879][ T29] kauditd_printk_skb: 100 callbacks suppressed [ 346.596911][ T29] audit: type=1400 audit(3514320346.021:16281): avc: denied { setopt } for pid=18983 comm="syz.5.4867" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 346.624685][T18981] wireguard0: entered promiscuous mode [ 346.630214][T18981] wireguard0: entered allmulticast mode [ 346.641135][T18988] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 346.679137][T18988] SELinux: failed to load policy [ 346.685758][ T29] audit: type=1400 audit(3514320346.115:16282): avc: denied { map } for pid=18991 comm="syz.0.4870" path="socket:[62205]" dev="sockfs" ino=62205 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 346.709659][ T29] audit: type=1400 audit(3514320346.115:16283): avc: denied { read } for pid=18991 comm="syz.0.4870" path="socket:[62205]" dev="sockfs" ino=62205 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 346.741527][ T29] audit: type=1400 audit(3514320346.178:16284): avc: denied { setopt } for pid=18991 comm="syz.0.4870" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 346.797709][T18998] wireguard0: entered promiscuous mode [ 346.803213][T18998] wireguard0: entered allmulticast mode [ 346.841908][T19007] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 346.852974][T19007] SELinux: failed to load policy [ 346.873043][T19012] serio: Serial port ptm1 [ 346.967293][ T29] audit: type=1326 audit(3514320346.409:16285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19003 comm="syz.6.4875" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90230bebe9 code=0x7ffc0000 [ 347.012581][ T29] audit: type=1326 audit(3514320346.441:16286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19003 comm="syz.6.4875" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f90230bebe9 code=0x7ffc0000 [ 347.036374][ T29] audit: type=1326 audit(3514320346.441:16287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19003 comm="syz.6.4875" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90230bebe9 code=0x7ffc0000 [ 347.059989][ T29] audit: type=1326 audit(3514320346.441:16288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19003 comm="syz.6.4875" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f90230bebe9 code=0x7ffc0000 [ 347.083618][ T29] audit: type=1326 audit(3514320346.441:16289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19003 comm="syz.6.4875" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90230bebe9 code=0x7ffc0000 [ 347.107226][ T29] audit: type=1326 audit(3514320346.441:16290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19003 comm="syz.6.4875" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f90230bebe9 code=0x7ffc0000 [ 347.199358][T19021] netlink: 360 bytes leftover after parsing attributes in process `syz.4.4880'. [ 347.228344][T19031] loop0: detected capacity change from 0 to 1024 [ 347.229309][T19033] wireguard0: entered promiscuous mode [ 347.240231][T19033] wireguard0: entered allmulticast mode [ 347.254521][T19031] EXT4-fs: Ignoring removed orlov option [ 347.269759][T19037] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 347.278335][T19037] SELinux: failed to load policy [ 347.284308][T19031] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 347.355821][T19036] netlink: 10 bytes leftover after parsing attributes in process `syz.5.4887'. [ 347.549168][T12126] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 347.575746][T19052] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4891'. [ 347.976868][T19060] wireguard1: entered promiscuous mode [ 347.982507][T19060] wireguard1: entered allmulticast mode [ 348.020256][T19064] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 348.030834][T19064] SELinux: failed to load policy [ 348.174998][T19067] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 348.186702][T19067] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 348.201395][T19071] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4897'. [ 348.215623][T19065] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4892'. [ 348.227854][T19065] netem: change failed [ 348.242219][T19071] bond_slave_0: entered promiscuous mode [ 348.248545][T19071] bond_slave_1: entered promiscuous mode [ 348.254482][T19071] dummy0: entered promiscuous mode [ 348.260644][T19071] macsec1: entered promiscuous mode [ 348.266982][T19071] bond0: entered promiscuous mode [ 348.272639][T19071] team0: entered promiscuous mode [ 348.277851][T19071] team_slave_0: entered promiscuous mode [ 348.283969][T19071] team_slave_1: entered promiscuous mode [ 348.289838][T19071] syz_tun: entered promiscuous mode [ 348.297529][T19071] bond0: left promiscuous mode [ 348.302828][T19071] team0: left promiscuous mode [ 348.307885][T19071] team_slave_0: left promiscuous mode [ 348.314583][T19071] team_slave_1: left promiscuous mode [ 348.320734][T19071] syz_tun: left promiscuous mode [ 348.326705][T19071] bond_slave_0: left promiscuous mode [ 348.332458][T19071] bond_slave_1: left promiscuous mode [ 348.337927][T19071] dummy0: left promiscuous mode [ 348.405404][T19079] loop0: detected capacity change from 0 to 8192 [ 348.417535][T19081] netlink: 360 bytes leftover after parsing attributes in process `syz.5.4900'. [ 348.454510][T19079] vfat filesystem being mounted at /422/bus supports timestamps until 2107-12-31 (0x10391447e) [ 348.477961][T19085] netlink: 48 bytes leftover after parsing attributes in process `syz.5.4903'. [ 348.529754][T19087] loop6: detected capacity change from 0 to 512 [ 348.544422][T19087] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 348.556720][T19087] EXT4-fs (loop6): 1 truncate cleaned up [ 348.563479][T19087] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 348.723409][T10394] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 348.741764][T19097] wireguard1: entered promiscuous mode [ 348.747836][T19097] wireguard1: entered allmulticast mode [ 348.748258][T19095] loop1: detected capacity change from 0 to 8192 [ 348.775611][T19100] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 348.794752][T19100] SELinux: failed to load policy [ 348.806928][T19095] vfat filesystem being mounted at /429/bus supports timestamps until 2107-12-31 (0x10391447e) [ 348.820974][T19101] wireguard0: entered promiscuous mode [ 348.826877][T19101] wireguard0: entered allmulticast mode [ 348.858167][T19105] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 348.883392][T19105] SELinux: failed to load policy [ 349.455123][T19113] wireguard0: entered promiscuous mode [ 349.461670][T19113] wireguard0: entered allmulticast mode [ 349.500516][T19122] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 349.509738][T19122] SELinux: failed to load policy [ 349.613276][T19132] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 349.652656][T19132] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 349.812221][T19142] loop0: detected capacity change from 0 to 2048 [ 349.831422][T19142] EXT4-fs (loop0): mounted filesystem 00000800-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 349.857545][T19142] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.4922: bg 0: block 120: padding at end of block bitmap is not set [ 349.945535][T19153] wireguard0: entered promiscuous mode [ 349.945553][T19153] wireguard0: entered allmulticast mode [ 349.952891][T12126] EXT4-fs (loop0): unmounting filesystem 00000800-0000-0000-0000-000000000000. [ 349.980420][T19157] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 349.989615][T19157] SELinux: failed to load policy [ 350.077151][T19164] loop1: detected capacity change from 0 to 2048 [ 350.092390][T19164] EXT4-fs (loop1): mounted filesystem 00000800-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 350.108940][T19164] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.4927: bg 0: block 120: padding at end of block bitmap is not set [ 350.198081][T11850] EXT4-fs (loop1): unmounting filesystem 00000800-0000-0000-0000-000000000000. [ 350.421231][T19187] loop6: detected capacity change from 0 to 8192 [ 350.446420][T19187] vfat filesystem being mounted at /510/bus supports timestamps until 2107-12-31 (0x10391447e) [ 350.509073][T19191] loop5: detected capacity change from 0 to 2048 [ 350.531102][T19191] EXT4-fs (loop5): mounted filesystem 00000800-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 350.555908][T19191] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.4936: bg 0: block 120: padding at end of block bitmap is not set [ 350.632406][T16398] EXT4-fs (loop5): unmounting filesystem 00000800-0000-0000-0000-000000000000. [ 350.701349][T19199] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 350.720150][T19199] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 350.756315][T19202] netlink: 10 bytes leftover after parsing attributes in process `syz.5.4938'. [ 351.007948][T19207] loop0: detected capacity change from 0 to 1024 [ 351.058250][T19207] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 351.354512][T19214] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4942'. [ 351.366430][T19214] bond_slave_0: entered promiscuous mode [ 351.372158][T19214] bond_slave_1: entered promiscuous mode [ 351.377857][T19214] dummy0: entered promiscuous mode [ 351.383486][T19214] macsec1: entered promiscuous mode [ 351.388770][T19214] bond0: entered promiscuous mode [ 351.393962][T19214] team0: entered promiscuous mode [ 351.398997][T19214] team_slave_0: entered promiscuous mode [ 351.404714][T19214] team_slave_1: entered promiscuous mode [ 351.410452][T19214] syz_tun: entered promiscuous mode [ 351.440910][ T29] kauditd_printk_skb: 848 callbacks suppressed [ 351.440926][ T29] audit: type=1326 audit(3514320351.091:17139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19211 comm="syz.1.4941" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07f0acebe9 code=0x7ffc0000 [ 351.443070][T12126] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 351.447163][ T29] audit: type=1326 audit(3514320351.091:17140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19211 comm="syz.1.4941" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07f0acebe9 code=0x7ffc0000 [ 351.504147][T19214] bond0: left promiscuous mode [ 351.509305][T19214] team0: left promiscuous mode [ 351.514183][T19214] team_slave_0: left promiscuous mode [ 351.519710][T19214] team_slave_1: left promiscuous mode [ 351.525153][T19214] syz_tun: left promiscuous mode [ 351.534403][T19214] bond_slave_0: left promiscuous mode [ 351.539840][T19214] bond_slave_1: left promiscuous mode [ 351.545232][T19214] dummy0: left promiscuous mode [ 351.618371][ T29] audit: type=1326 audit(3514320351.291:17141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19226 comm="syz.4.4948" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa75178ebe9 code=0x7ffc0000 [ 351.650365][T19227] loop0: detected capacity change from 0 to 512 [ 351.660417][ T29] audit: type=1326 audit(3514320351.322:17142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19226 comm="syz.4.4948" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7fa75178ebe9 code=0x7ffc0000 [ 351.684019][ T29] audit: type=1326 audit(3514320351.322:17143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19226 comm="syz.4.4948" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa75178ebe9 code=0x7ffc0000 [ 351.707688][ T29] audit: type=1326 audit(3514320351.322:17144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19226 comm="syz.4.4948" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa75178ebe9 code=0x7ffc0000 [ 351.731322][ T29] audit: type=1326 audit(3514320351.322:17145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19226 comm="syz.4.4948" exe="/root/syz-executor" sig=0 arch=c000003e syscall=290 compat=0 ip=0x7fa75178ebe9 code=0x7ffc0000 [ 351.754964][ T29] audit: type=1326 audit(3514320351.322:17146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19226 comm="syz.4.4948" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa75178ebe9 code=0x7ffc0000 [ 351.760390][T19230] loop5: detected capacity change from 0 to 512 [ 351.778615][ T29] audit: type=1326 audit(3514320351.322:17147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19226 comm="syz.4.4948" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fa75178ebe9 code=0x7ffc0000 [ 351.788246][T19227] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 351.808204][ T29] audit: type=1326 audit(3514320351.322:17148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19226 comm="syz.4.4948" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa75178ebe9 code=0x7ffc0000 [ 351.820084][T19230] EXT4-fs: Ignoring removed bh option [ 351.848632][T19217] netlink: 'syz.1.4944': attribute type 4 has an invalid length. [ 351.856367][T19217] netlink: 17 bytes leftover after parsing attributes in process `syz.1.4944'. [ 351.881772][T19230] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 351.967434][T19230] EXT4-fs (loop5): 1 truncate cleaned up [ 351.973612][T19227] EXT4-fs (loop0): 1 truncate cleaned up [ 351.985039][T19227] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 352.001485][T19230] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 352.014410][T19235] wireguard0: entered promiscuous mode [ 352.019933][T19235] wireguard0: entered allmulticast mode [ 352.164263][T16398] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 352.216638][T12126] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 352.362574][T19250] loop6: detected capacity change from 0 to 1024 [ 352.472803][T19250] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 352.520691][T10394] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 353.599819][T19291] loop0: detected capacity change from 0 to 512 [ 353.607798][T19291] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 353.622149][T19291] EXT4-fs (loop0): 1 truncate cleaned up [ 353.622602][T19291] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 353.624252][T19294] wireguard1: entered promiscuous mode [ 353.624331][T19294] wireguard1: entered allmulticast mode [ 353.751129][T19306] serio: Serial port ptm0 [ 353.761039][T12126] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 354.011854][T19324] netlink: 360 bytes leftover after parsing attributes in process `syz.5.4971'. [ 354.526257][T19337] netlink: 360 bytes leftover after parsing attributes in process `syz.6.4974'. [ 354.725684][T19341] tipc: Started in network mode [ 354.730655][T19341] tipc: Node identity fe800000000000000000000000000016, cluster identity 4711 [ 354.759055][T19341] tipc: Enabled bearer , priority 10 [ 354.848331][T19345] loop6: detected capacity change from 0 to 512 [ 354.859339][T19345] EXT4-fs: Ignoring removed bh option [ 354.913518][T19345] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem [ 354.985236][T19345] EXT4-fs (loop6): 1 truncate cleaned up [ 355.023265][T19345] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 355.127758][T10394] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 355.200083][T19358] loop1: detected capacity change from 0 to 512 [ 355.225533][T19358] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 355.259822][T19358] EXT4-fs (loop1): 1 truncate cleaned up [ 355.312956][T19358] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 355.392482][T19368] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 355.439494][T19368] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 355.452287][T11850] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 355.726214][T19383] tipc: Enabling of bearer rejected, already enabled [ 355.825185][ T9] tipc: Node number set to 4269801494 [ 355.939342][T19390] loop0: detected capacity change from 0 to 1024 [ 355.960881][T19390] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 355.991109][T12126] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 356.087292][T19404] wireguard1: entered promiscuous mode [ 356.093094][T19404] wireguard1: entered allmulticast mode [ 356.285506][T19409] netlink: 'syz.0.4999': attribute type 4 has an invalid length. [ 356.294379][T19409] netlink: 17 bytes leftover after parsing attributes in process `syz.0.4999'. [ 356.364920][ T29] kauditd_printk_skb: 529 callbacks suppressed [ 356.364986][ T29] audit: type=1326 audit(3514320356.277:17678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19416 comm="syz.5.5003" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e287eebe9 code=0x7ffc0000 [ 356.399150][ T29] audit: type=1326 audit(3514320356.288:17679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19416 comm="syz.5.5003" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2e287eebe9 code=0x7ffc0000 [ 356.426755][ T29] audit: type=1326 audit(3514320356.288:17680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19416 comm="syz.5.5003" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e287eebe9 code=0x7ffc0000 [ 356.454988][ T29] audit: type=1326 audit(3514320356.288:17681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19416 comm="syz.5.5003" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e287eebe9 code=0x7ffc0000 [ 356.482835][ T29] audit: type=1326 audit(3514320356.288:17682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19416 comm="syz.5.5003" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2e287eebe9 code=0x7ffc0000 [ 356.506460][ T29] audit: type=1326 audit(3514320356.288:17683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19416 comm="syz.5.5003" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e287eebe9 code=0x7ffc0000 [ 356.530130][ T29] audit: type=1326 audit(3514320356.288:17684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19416 comm="syz.5.5003" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e287eebe9 code=0x7ffc0000 [ 356.553696][ T29] audit: type=1326 audit(3514320356.288:17685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19416 comm="syz.5.5003" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2e287eebe9 code=0x7ffc0000 [ 356.577472][ T29] audit: type=1326 audit(3514320356.288:17686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19416 comm="syz.5.5003" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e287eebe9 code=0x7ffc0000 [ 356.601198][ T29] audit: type=1326 audit(3514320356.288:17687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19416 comm="syz.5.5003" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2e287eebe9 code=0x7ffc0000 [ 356.870338][T19446] loop1: detected capacity change from 0 to 512 [ 356.886648][T19446] EXT4-fs: Ignoring removed bh option [ 356.893186][T19446] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 356.904179][T19446] EXT4-fs (loop1): 1 truncate cleaned up [ 356.910443][T19446] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 357.066033][T11850] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 358.029778][T19494] netlink: 'syz.0.5031': attribute type 4 has an invalid length. [ 358.037840][T19494] netlink: 17 bytes leftover after parsing attributes in process `syz.0.5031'. [ 358.201456][T19502] wireguard1: entered promiscuous mode [ 358.207260][T19502] wireguard1: entered allmulticast mode [ 358.248705][T19504] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 358.266992][T19504] SELinux: failed to load policy [ 358.384143][T19509] loop0: detected capacity change from 0 to 512 [ 358.401076][T19509] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 358.413555][T19509] EXT4-fs (loop0): 1 truncate cleaned up [ 358.419845][T19509] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 358.448652][T12126] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 358.484676][T19515] wireguard0: entered promiscuous mode [ 358.490180][T19515] wireguard0: entered allmulticast mode [ 358.515932][T19523] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 358.524147][T19523] SELinux: failed to load policy [ 358.677711][T19532] netlink: 10 bytes leftover after parsing attributes in process `syz.1.5044'. [ 358.724304][T19491] 9pnet_fd: p9_fd_create_tcp (19491): problem connecting socket to 127.0.0.1 [ 359.185224][T19540] serio: Serial port ptm1 [ 359.291491][T19543] loop4: detected capacity change from 0 to 2048 [ 359.345253][T19543] EXT4-fs (loop4): mounted filesystem 00000800-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 359.373354][T19543] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.5047: bg 0: block 120: padding at end of block bitmap is not set [ 359.391704][T19551] netlink: 360 bytes leftover after parsing attributes in process `syz.0.5050'. [ 359.522226][T12354] EXT4-fs (loop4): unmounting filesystem 00000800-0000-0000-0000-000000000000. [ 359.955157][T19571] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5056'. [ 359.971823][T19571] bond_slave_0: entered promiscuous mode [ 359.977516][T19571] bond_slave_1: entered promiscuous mode [ 359.983673][T19571] macsec1: entered promiscuous mode [ 359.989061][T19571] bond0: entered promiscuous mode [ 359.994300][T19571] team0: entered promiscuous mode [ 359.999375][T19571] team_slave_0: entered promiscuous mode [ 360.005142][T19571] team_slave_1: entered promiscuous mode [ 360.010944][T19571] syz_tun: entered promiscuous mode [ 360.018809][T19571] bond0: left promiscuous mode [ 360.023726][T19571] team0: left promiscuous mode [ 360.028560][T19571] team_slave_0: left promiscuous mode [ 360.033967][T19571] team_slave_1: left promiscuous mode [ 360.039587][T19571] syz_tun: left promiscuous mode [ 360.044801][T19571] bond_slave_0: left promiscuous mode [ 360.050279][T19571] bond_slave_1: left promiscuous mode [ 360.060189][T19569] loop6: detected capacity change from 0 to 8192 [ 360.079103][T19569] vfat filesystem being mounted at /530/bus supports timestamps until 2107-12-31 (0x10391447e) [ 360.157327][T19574] wireguard1: entered promiscuous mode [ 360.162927][T19574] wireguard1: entered allmulticast mode [ 360.597900][T19587] loop4: detected capacity change from 0 to 512 [ 360.635046][T19587] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 360.695991][T19587] EXT4-fs (loop4): 1 truncate cleaned up [ 360.702350][T19587] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 360.915872][T12354] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 360.974646][T19597] netlink: 10 bytes leftover after parsing attributes in process `syz.5.5062'. [ 361.091508][T19599] 9pnet_fd: p9_fd_create_tcp (19599): problem connecting socket to 127.0.0.1 [ 361.141038][ T29] kauditd_printk_skb: 257 callbacks suppressed [ 361.141053][ T29] audit: type=1326 audit(3514320361.264:17945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19598 comm="syz.4.5064" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa75178ebe9 code=0x7ffc0000 [ 361.170887][ T29] audit: type=1326 audit(3514320361.274:17946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19598 comm="syz.4.5064" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fa75178ebe9 code=0x7ffc0000 [ 361.194519][ T29] audit: type=1326 audit(3514320361.274:17947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19598 comm="syz.4.5064" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa75178ebe9 code=0x7ffc0000 [ 361.194549][ T29] audit: type=1326 audit(3514320361.274:17948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19598 comm="syz.4.5064" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa75178ebe9 code=0x7ffc0000 [ 361.219656][T19605] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5067'. [ 361.324073][ T29] audit: type=1326 audit(3514320361.474:17949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19602 comm="syz.6.5066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90230bebe9 code=0x7ffc0000 [ 361.347753][ T29] audit: type=1326 audit(3514320361.474:17950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19602 comm="syz.6.5066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90230bebe9 code=0x7ffc0000 [ 361.371377][ T29] audit: type=1326 audit(3514320361.474:17951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19602 comm="syz.6.5066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f90230bebe9 code=0x7ffc0000 [ 361.394988][ T29] audit: type=1326 audit(3514320361.474:17952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19602 comm="syz.6.5066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90230bebe9 code=0x7ffc0000 [ 361.418606][ T29] audit: type=1326 audit(3514320361.474:17953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19602 comm="syz.6.5066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90230bebe9 code=0x7ffc0000 [ 361.442197][ T29] audit: type=1326 audit(3514320361.484:17954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19602 comm="syz.6.5066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f90230bebe9 code=0x7ffc0000 [ 361.569735][T19608] loop4: detected capacity change from 0 to 512 [ 361.606144][T19608] EXT4-fs: Ignoring removed bh option [ 361.623618][T19608] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 361.685754][T19608] EXT4-fs (loop4): 1 truncate cleaned up [ 361.691717][T19608] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 361.711753][T19608] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 361.790688][T19622] netlink: 360 bytes leftover after parsing attributes in process `syz.5.5071'. [ 362.041610][T19628] netlink: 360 bytes leftover after parsing attributes in process `syz.1.5083'. [ 362.202630][T19630] loop5: detected capacity change from 0 to 512 [ 362.209474][T19630] EXT4-fs: Ignoring removed bh option [ 362.219186][T19630] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 362.239174][T19630] EXT4-fs (loop5): 1 truncate cleaned up [ 362.245822][T19630] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 362.399840][T16398] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 362.553614][T19653] wireguard0: entered promiscuous mode [ 362.559124][T19653] wireguard0: entered allmulticast mode [ 362.588598][T19657] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 362.603052][T19657] SELinux: failed to load policy [ 362.696001][T19659] netlink: 40 bytes leftover after parsing attributes in process `syz.5.5078'. [ 362.737320][T19661] loop1: detected capacity change from 0 to 512 [ 362.744667][T19661] EXT4-fs: Ignoring removed bh option [ 362.750718][T19661] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 362.760844][T19661] EXT4-fs (loop1): 1 truncate cleaned up [ 362.783741][T19665] loop5: detected capacity change from 0 to 1024 [ 362.793292][T19668] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5084'. [ 362.822203][T19670] loop1: detected capacity change from 0 to 512 [ 362.829597][T19670] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 362.842480][T19670] EXT4-fs (loop1): 1 truncate cleaned up [ 362.898077][T19679] netlink: 360 bytes leftover after parsing attributes in process `syz.5.5088'. [ 362.926984][T19682] loop5: detected capacity change from 0 to 512 [ 362.934882][T19682] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 362.957783][T19682] EXT4-fs (loop5): 1 truncate cleaned up [ 362.974639][T19685] serio: Serial port ptm2 [ 363.031445][T19692] netlink: 40 bytes leftover after parsing attributes in process `syz.6.5093'. [ 363.056807][T19695] wireguard1: entered promiscuous mode [ 363.062289][T19695] wireguard1: entered allmulticast mode [ 363.092218][T19701] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 363.111596][T19705] bond_slave_0: entered promiscuous mode [ 363.117338][T19705] bond_slave_1: entered promiscuous mode [ 363.118737][T19701] SELinux: failed to load policy [ 363.123017][T19705] dummy0: entered promiscuous mode [ 363.134141][T19705] macsec1: entered promiscuous mode [ 363.139342][T19705] bond0: entered promiscuous mode [ 363.144589][T19705] team0: entered promiscuous mode [ 363.149639][T19705] team_slave_0: entered promiscuous mode [ 363.155352][T19705] team_slave_1: entered promiscuous mode [ 363.161289][T19705] syz_tun: entered promiscuous mode [ 363.171303][T19705] bond0: left promiscuous mode [ 363.176278][T19705] team0: left promiscuous mode [ 363.181189][T19705] team_slave_0: left promiscuous mode [ 363.186690][T19705] team_slave_1: left promiscuous mode [ 363.192245][T19705] syz_tun: left promiscuous mode [ 363.197578][T19705] bond_slave_0: left promiscuous mode [ 363.202987][T19705] bond_slave_1: left promiscuous mode [ 363.208398][T19705] dummy0: left promiscuous mode [ 363.255571][T19714] loop1: detected capacity change from 0 to 512 [ 363.262610][T19714] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 363.280446][T19714] EXT4-fs (loop1): 1 truncate cleaned up [ 363.286736][T19714] EXT4-fs mount: 8 callbacks suppressed [ 363.286750][T19714] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 363.311697][T19718] loop6: detected capacity change from 0 to 512 [ 363.345404][T19718] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 363.384034][T19718] EXT4-fs (loop6): 1 truncate cleaned up [ 363.386762][T11850] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 363.398839][T19718] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 363.488217][T10394] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 363.843757][T19738] devtmpfs: Unknown parameter 'trans' [ 363.955511][T19749] wireguard0: entered promiscuous mode [ 363.961018][T19749] wireguard0: entered allmulticast mode [ 364.003700][T19753] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 364.025074][T19755] macsec1: entered promiscuous mode [ 364.030355][T19755] bond0: entered promiscuous mode [ 364.035518][T19755] bond_slave_0: entered promiscuous mode [ 364.041221][T19755] bond_slave_1: entered promiscuous mode [ 364.051423][T19753] SELinux: failed to load policy [ 364.080708][T19755] bond0: left promiscuous mode [ 364.085533][T19755] bond_slave_0: left promiscuous mode [ 364.091059][T19755] bond_slave_1: left promiscuous mode [ 364.188064][T19760] loop4: detected capacity change from 0 to 1024 [ 364.200598][T19758] wireguard0: entered promiscuous mode [ 364.206124][T19758] wireguard0: entered allmulticast mode [ 364.232503][T19767] loop1: detected capacity change from 0 to 512 [ 364.246422][T19768] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 364.246737][T19760] EXT4-fs: Ignoring removed orlov option [ 364.257749][T19768] SELinux: failed to load policy [ 364.265737][T19767] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 364.279633][T19760] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 364.281795][T19767] EXT4-fs (loop1): 1 truncate cleaned up [ 364.298288][T19767] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 364.336635][T11850] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 364.396664][T19776] loop1: detected capacity change from 0 to 2048 [ 364.411666][T19774] tipc: Started in network mode [ 364.416562][T19774] tipc: Node identity fe800000000000000000000000000016, cluster identity 4711 [ 364.425551][T19774] tipc: Enabling of bearer rejected, failed to enable media [ 364.436455][T19776] EXT4-fs (loop1): mounted filesystem 00000800-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 364.473982][T19776] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.5117: bg 0: block 120: padding at end of block bitmap is not set [ 364.570319][T11850] EXT4-fs (loop1): unmounting filesystem 00000800-0000-0000-0000-000000000000. [ 364.604253][T12354] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 364.609975][T19788] devtmpfs: Unknown parameter 'trans' [ 364.638148][T19790] __nla_validate_parse: 3 callbacks suppressed [ 364.638158][T19790] netlink: 360 bytes leftover after parsing attributes in process `syz.4.5122'. [ 364.684918][T19797] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 364.693647][T19797] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 365.152525][T19808] loop0: detected capacity change from 0 to 1024 [ 365.183037][T19808] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 365.216820][T12126] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 365.269698][T19821] loop0: detected capacity change from 0 to 512 [ 365.279375][T19821] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 365.292122][T19821] EXT4-fs (loop0): 1 truncate cleaned up [ 365.308726][T19821] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 365.478077][T12126] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 365.505585][T19828] serio: Serial port ptm0 [ 365.567750][T19833] devtmpfs: Unknown parameter 'trans' [ 365.677529][T19843] netlink: 'syz.6.5137': attribute type 4 has an invalid length. [ 365.685413][T19843] netlink: 17 bytes leftover after parsing attributes in process `syz.6.5137'. [ 365.772285][T19844] netlink: 'syz.0.5136': attribute type 4 has an invalid length. [ 365.780164][T19844] netlink: 17 bytes leftover after parsing attributes in process `syz.0.5136'. [ 365.879034][T19846] tipc: Enabling of bearer rejected, failed to enable media [ 366.197507][T19859] wireguard0: entered promiscuous mode [ 366.203043][T19859] wireguard0: entered allmulticast mode [ 366.432359][ T29] kauditd_printk_skb: 110 callbacks suppressed [ 366.432372][ T29] audit: type=1326 audit(3514320366.849:18065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19862 comm="syz.6.5144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90230bebe9 code=0x7ffc0000 [ 366.480021][ T29] audit: type=1326 audit(3514320366.870:18066): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19862 comm="syz.6.5144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7f90230bebe9 code=0x7ffc0000 [ 366.503630][ T29] audit: type=1326 audit(3514320366.870:18067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19862 comm="syz.6.5144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90230bebe9 code=0x7ffc0000 [ 366.527285][ T29] audit: type=1326 audit(3514320366.870:18068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19862 comm="syz.6.5144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90230bebe9 code=0x7ffc0000 [ 366.955976][T19872] serio: Serial port ptm2 [ 367.031360][T19879] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 367.040614][T19879] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 367.130985][T19883] tipc: Enabling of bearer rejected, already enabled [ 367.210151][T19890] loop6: detected capacity change from 0 to 512 [ 367.253989][T19890] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 367.276487][T19890] EXT4-fs (loop6): 1 truncate cleaned up [ 367.282451][T19890] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 367.289873][T19901] loop0: detected capacity change from 0 to 1024 [ 367.302450][T19901] EXT4-fs: Ignoring removed orlov option [ 367.320390][T19901] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 367.336506][T10394] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 367.360003][T12126] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 367.370130][T19904] wireguard0: entered promiscuous mode [ 367.370184][T19904] wireguard0: entered allmulticast mode [ 367.389650][T19909] loop0: detected capacity change from 0 to 1024 [ 367.418169][T19909] EXT4-fs: Ignoring removed orlov option [ 367.427380][T19909] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 367.547097][T19916] serio: Serial port ptm1 [ 367.567343][T19918] netlink: 360 bytes leftover after parsing attributes in process `syz.1.5161'. [ 367.610199][T19921] tipc: Started in network mode [ 367.615164][T19921] tipc: Node identity fe800000000000000000000000000016, cluster identity 4711 [ 367.624807][T19921] tipc: Enabled bearer , priority 10 [ 368.076939][T12126] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 368.143697][T19936] loop0: detected capacity change from 0 to 1024 [ 368.153196][T19936] EXT4-fs: Ignoring removed orlov option [ 368.184760][T19936] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 368.220188][T12126] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 368.245555][T19943] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5169'. [ 368.255645][ T29] audit: type=1326 audit(3514320368.760:18069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19937 comm="syz.4.5168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa75178ebe9 code=0x7ffc0000 [ 368.286763][ T29] audit: type=1326 audit(3514320368.760:18070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19937 comm="syz.4.5168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7fa75178ebe9 code=0x7ffc0000 [ 368.310478][ T29] audit: type=1326 audit(3514320368.760:18071): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19937 comm="syz.4.5168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa75178ebe9 code=0x7ffc0000 [ 368.334069][ T29] audit: type=1326 audit(3514320368.760:18072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19937 comm="syz.4.5168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa75178ebe9 code=0x7ffc0000 [ 368.684269][ T9] tipc: Node number set to 4269801494 [ 368.841819][T19968] loop5: detected capacity change from 0 to 512 [ 368.849562][T19968] EXT4-fs: Ignoring removed bh option [ 368.859647][T19968] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 368.869905][T19968] EXT4-fs (loop5): 1 truncate cleaned up [ 368.876756][T19968] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 368.890890][T19968] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 368.989403][T19971] netlink: 360 bytes leftover after parsing attributes in process `syz.4.5174'. [ 369.032028][T19973] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=19973 comm=syz.4.5175 [ 369.050986][T19973] sd 0:0:1:0: device reset [ 369.106435][T19981] loop5: detected capacity change from 0 to 1024 [ 369.106571][T19983] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5180'. [ 369.115876][T19981] EXT4-fs: Ignoring removed orlov option [ 369.140190][T19981] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 369.175455][T16398] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 369.233191][T19990] loop0: detected capacity change from 0 to 8192 [ 369.253753][T19990] vfat filesystem being mounted at /477/bus supports timestamps until 2107-12-31 (0x10391447e) [ 369.265206][T19996] loop6: detected capacity change from 0 to 1024 [ 369.274171][T19996] EXT4-fs: Ignoring removed orlov option [ 369.401458][T19996] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 369.707349][T20007] wireguard1: entered promiscuous mode [ 369.712846][T20007] wireguard1: entered allmulticast mode [ 369.891648][T10394] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 369.950281][ T29] audit: type=1326 audit(3514320370.534:18073): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20011 comm="syz.0.5188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f847824ebe9 code=0x7ffc0000 [ 370.105533][T20022] loop1: detected capacity change from 0 to 1024 [ 370.112168][T20022] EXT4-fs: Ignoring removed orlov option [ 370.113253][ T29] audit: type=1326 audit(3514320370.534:18074): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20011 comm="syz.0.5188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f847824ebe9 code=0x7ffc0000 [ 370.209492][T20022] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 370.483881][T20033] wireguard0: entered promiscuous mode [ 370.489502][T20033] wireguard0: entered allmulticast mode [ 370.543621][T20035] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 370.570827][T20035] SELinux: failed to load policy [ 370.585416][T20037] loop6: detected capacity change from 0 to 1024 [ 370.594020][T20037] EXT4-fs: Ignoring removed orlov option [ 370.605398][T20037] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 370.658080][T11850] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 371.144634][T10394] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 371.722980][ T29] kauditd_printk_skb: 11 callbacks suppressed [ 371.722992][ T29] audit: type=1326 audit(3514320372.392:18086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20060 comm="syz.0.5204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f847824ebe9 code=0x7ffc0000 [ 371.752659][ T29] audit: type=1326 audit(3514320372.392:18087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20060 comm="syz.0.5204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f847824ebe9 code=0x7ffc0000 [ 371.776243][ T29] audit: type=1326 audit(3514320372.392:18088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20060 comm="syz.0.5204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f847824ebe9 code=0x7ffc0000 [ 371.799819][ T29] audit: type=1326 audit(3514320372.392:18089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20060 comm="syz.0.5204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f847824ebe9 code=0x7ffc0000 [ 371.823499][ T29] audit: type=1326 audit(3514320372.392:18090): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20060 comm="syz.0.5204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f847824ebe9 code=0x7ffc0000 [ 371.847083][ T29] audit: type=1326 audit(3514320372.392:18091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20060 comm="syz.0.5204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f847824ebe9 code=0x7ffc0000 [ 371.870718][ T29] audit: type=1326 audit(3514320372.392:18092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20060 comm="syz.0.5204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f847824ebe9 code=0x7ffc0000 [ 371.894434][ T29] audit: type=1326 audit(3514320372.392:18093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20060 comm="syz.0.5204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f847824ebe9 code=0x7ffc0000 [ 371.917998][ T29] audit: type=1326 audit(3514320372.392:18094): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20060 comm="syz.0.5204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f847824ebe9 code=0x7ffc0000 [ 371.941660][ T29] audit: type=1326 audit(3514320372.392:18095): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20060 comm="syz.0.5204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f847824ebe9 code=0x7ffc0000 [ 372.015160][T20061] loop0: detected capacity change from 0 to 2048 [ 372.053704][T20062] loop5: detected capacity change from 0 to 8192 [ 372.090748][T20061] EXT4-fs (loop0): mounted filesystem 00000800-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 372.105100][T20074] loop4: detected capacity change from 0 to 1024 [ 372.134104][T20062] vfat filesystem being mounted at /211/bus supports timestamps until 2107-12-31 (0x10391447e) [ 372.149637][T20074] EXT4-fs: Ignoring removed orlov option [ 372.157774][T20061] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.5204: bg 0: block 120: padding at end of block bitmap is not set [ 372.184388][T20074] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 372.214082][T20076] loop1: detected capacity change from 0 to 1024 [ 372.241937][T20076] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 372.276629][T11850] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 372.326212][T12126] EXT4-fs (loop0): unmounting filesystem 00000800-0000-0000-0000-000000000000. [ 372.343724][T20090] serio: Serial port ptm0 [ 372.368873][T20093] wireguard0: entered promiscuous mode [ 372.374455][T20093] wireguard0: entered allmulticast mode [ 372.511647][T12354] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 373.299543][T20117] loop6: detected capacity change from 0 to 1024 [ 373.311891][T20119] loop0: detected capacity change from 0 to 512 [ 373.339947][T20119] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 373.350263][T20117] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 373.365987][T20119] EXT4-fs (loop0): 1 truncate cleaned up [ 373.418933][T20119] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 373.445382][T10394] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 373.505932][T12126] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 373.537875][T20126] loop6: detected capacity change from 0 to 1024 [ 373.546570][T20124] loop4: detected capacity change from 0 to 8192 [ 373.593063][T20124] vfat filesystem being mounted at /417/bus supports timestamps until 2107-12-31 (0x10391447e) [ 373.594470][T20126] EXT4-fs: Ignoring removed orlov option [ 373.633191][T20130] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 373.653236][T20130] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 373.685624][T20126] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 373.758923][T10394] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 373.805770][T20137] wireguard0: entered promiscuous mode [ 373.811417][T20137] wireguard0: entered allmulticast mode [ 373.843720][T20142] tipc: Enabling of bearer rejected, failed to enable media [ 373.856949][T20143] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 373.864584][T20143] SELinux: failed to load policy [ 373.876491][T20140] loop4: detected capacity change from 0 to 2048 [ 373.907158][T20140] EXT4-fs (loop4): mounted filesystem 00000800-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 373.934585][T20140] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.5231: bg 0: block 120: padding at end of block bitmap is not set [ 373.950320][T20148] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=20148 comm=syz.5.5232 [ 373.964351][T20148] sd 0:0:1:0: device reset [ 374.013619][T20149] loop6: detected capacity change from 0 to 1024 [ 374.029698][T20149] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 374.055129][T10394] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 374.065896][T12354] EXT4-fs (loop4): unmounting filesystem 00000800-0000-0000-0000-000000000000. [ 374.182118][T20167] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5238'. [ 374.192957][T20167] bond_slave_0: entered promiscuous mode [ 374.198708][T20167] bond_slave_1: entered promiscuous mode [ 374.205655][T20167] macsec1: entered promiscuous mode [ 374.210927][T20167] bond0: entered promiscuous mode [ 374.216065][T20167] team0: entered promiscuous mode [ 374.216235][T20166] loop4: detected capacity change from 0 to 8192 [ 374.221108][T20167] team_slave_0: entered promiscuous mode [ 374.221220][T20167] team_slave_1: entered promiscuous mode [ 374.238822][T20167] syz_tun: entered promiscuous mode [ 374.242228][T20166] vfat filesystem being mounted at /421/bus supports timestamps until 2107-12-31 (0x10391447e) [ 374.255615][T20167] bond0: left promiscuous mode [ 374.260529][T20167] team0: left promiscuous mode [ 374.265377][T20167] team_slave_0: left promiscuous mode [ 374.270886][T20167] team_slave_1: left promiscuous mode [ 374.276388][T20167] syz_tun: left promiscuous mode [ 374.281568][T20167] bond_slave_0: left promiscuous mode [ 374.286958][T20167] bond_slave_1: left promiscuous mode [ 374.995723][T20182] wireguard0: entered promiscuous mode [ 375.001306][T20182] wireguard0: entered allmulticast mode [ 375.065667][T20186] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 375.146444][T20186] SELinux: failed to load policy [ 375.250722][T20192] wireguard1: entered promiscuous mode [ 375.256221][T20192] wireguard1: entered allmulticast mode [ 375.308046][T20197] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 375.335158][T20197] SELinux: failed to load policy [ 375.396879][T20202] wireguard1: entered promiscuous mode [ 375.402460][T20202] wireguard1: entered allmulticast mode [ 375.421318][T20196] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 375.432687][T20196] loop6: detected capacity change from 0 to 1024 [ 375.453920][T20196] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 375.493083][T20209] loop4: detected capacity change from 0 to 1024 [ 375.503329][T20209] EXT4-fs: Ignoring removed orlov option [ 375.526971][T10394] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 375.546478][T20209] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 375.680089][T20217] netlink: 10 bytes leftover after parsing attributes in process `syz.6.5250'. [ 375.808370][T12354] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 376.028967][T20231] netlink: 360 bytes leftover after parsing attributes in process `syz.1.5255'. [ 376.052196][T20234] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5256'. [ 376.063028][T20234] bond_slave_0: entered promiscuous mode [ 376.068745][T20234] bond_slave_1: entered promiscuous mode [ 376.074622][T20234] macsec1: entered promiscuous mode [ 376.079866][T20234] bond0: entered promiscuous mode [ 376.085032][T20234] team0: entered promiscuous mode [ 376.090072][T20234] team_slave_0: entered promiscuous mode [ 376.095760][T20234] team_slave_1: entered promiscuous mode [ 376.101471][T20234] syz_tun: entered promiscuous mode [ 376.108463][T20234] bond0: left promiscuous mode [ 376.113350][T20234] team0: left promiscuous mode [ 376.118175][T20234] team_slave_0: left promiscuous mode [ 376.123635][T20234] team_slave_1: left promiscuous mode [ 376.129147][T20234] syz_tun: left promiscuous mode [ 376.134380][T20234] bond_slave_0: left promiscuous mode [ 376.139752][T20234] bond_slave_1: left promiscuous mode [ 376.216325][T20199] 9pnet_fd: p9_fd_create_tcp (20199): problem connecting socket to 127.0.0.1 [ 378.049511][T20254] loop1: detected capacity change from 0 to 1024 [ 378.056215][T20254] EXT4-fs: Ignoring removed orlov option [ 378.070956][ T29] kauditd_printk_skb: 190 callbacks suppressed [ 378.070970][ T29] audit: type=1326 audit(3514320379.058:18286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20257 comm="syz.4.5263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa75178ebe9 code=0x7ffc0000 [ 378.100799][ T29] audit: type=1326 audit(3514320379.058:18287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20257 comm="syz.4.5263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa75178ebe9 code=0x7ffc0000 [ 378.124516][ T29] audit: type=1326 audit(3514320379.058:18288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20257 comm="syz.4.5263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fa75178ebe9 code=0x7ffc0000 [ 378.131386][T20258] loop4: detected capacity change from 0 to 2048 [ 378.148275][ T29] audit: type=1326 audit(3514320379.058:18289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20257 comm="syz.4.5263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa75178ebe9 code=0x7ffc0000 [ 378.178361][ T29] audit: type=1326 audit(3514320379.058:18290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20257 comm="syz.4.5263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa75178ebe9 code=0x7ffc0000 [ 378.180668][T20254] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 378.202259][ T29] audit: type=1326 audit(3514320379.058:18291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20257 comm="syz.4.5263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7fa75178ebe9 code=0x7ffc0000 [ 378.237956][ T29] audit: type=1326 audit(3514320379.058:18292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20257 comm="syz.4.5263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa75178ebe9 code=0x7ffc0000 [ 378.237985][ T29] audit: type=1326 audit(3514320379.058:18293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20257 comm="syz.4.5263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa75178ebe9 code=0x7ffc0000 [ 378.238071][ T29] audit: type=1326 audit(3514320379.058:18294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20257 comm="syz.4.5263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa75178ebe9 code=0x7ffc0000 [ 378.238094][ T29] audit: type=1326 audit(3514320379.058:18295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20257 comm="syz.4.5263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa75178ebe9 code=0x7ffc0000 [ 378.359150][T11850] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 378.369980][T20258] EXT4-fs (loop4): mounted filesystem 00000800-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 378.390125][T20258] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.5263: bg 0: block 120: padding at end of block bitmap is not set [ 378.544610][T12354] EXT4-fs (loop4): unmounting filesystem 00000800-0000-0000-0000-000000000000. [ 378.611120][T20276] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 378.621713][T20276] loop1: detected capacity change from 0 to 1024 [ 378.649597][T20276] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 378.672416][T11850] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 378.695048][T20288] wireguard0: entered promiscuous mode [ 378.700619][T20288] wireguard0: entered allmulticast mode [ 378.740006][T20296] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 378.751841][T20296] SELinux: failed to load policy [ 378.764174][T20297] netlink: 10 bytes leftover after parsing attributes in process `syz.4.5270'. [ 378.829198][T20300] devtmpfs: Unknown parameter 'trans' [ 378.900831][T20306] loop0: detected capacity change from 0 to 1024 [ 378.910686][T20306] EXT4-fs: Ignoring removed orlov option [ 378.993391][T20306] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 379.134105][T12126] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 379.180944][T20311] netlink: 'syz.5.5274': attribute type 4 has an invalid length. [ 379.188787][T20311] netlink: 17 bytes leftover after parsing attributes in process `syz.5.5274'. [ 379.413932][T20320] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5278'. [ 379.444365][T20320] bond_slave_0: entered promiscuous mode [ 379.450293][T20320] bond_slave_1: entered promiscuous mode [ 379.485736][T20320] macsec1: entered promiscuous mode [ 379.491067][T20320] bond0: entered promiscuous mode [ 379.496290][T20320] team0: entered promiscuous mode [ 379.501306][T20320] team_slave_0: entered promiscuous mode [ 379.507044][T20320] team_slave_1: entered promiscuous mode [ 379.512819][T20320] syz_tun: entered promiscuous mode [ 379.548080][T20320] bond0: left promiscuous mode [ 379.553013][T20320] team0: left promiscuous mode [ 379.557780][T20320] team_slave_0: left promiscuous mode [ 379.563290][T20320] team_slave_1: left promiscuous mode [ 379.568770][T20320] syz_tun: left promiscuous mode [ 379.573931][T20320] bond_slave_0: left promiscuous mode [ 379.579315][T20320] bond_slave_1: left promiscuous mode [ 379.654199][T20327] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 379.673364][T20327] loop4: detected capacity change from 0 to 1024 [ 379.684584][T20329] netlink: 360 bytes leftover after parsing attributes in process `syz.1.5281'. [ 379.700453][T20327] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 379.734559][T12354] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 379.772782][T20339] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5283'. [ 379.910054][T20349] loop5: detected capacity change from 0 to 1024 [ 379.910456][T20349] EXT4-fs: Ignoring removed orlov option [ 379.928578][T20349] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 379.956626][T16398] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 380.220494][T20362] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5290'. [ 380.231924][T20362] macsec1: entered promiscuous mode [ 380.237120][T20362] bond0: entered promiscuous mode [ 380.242256][T20362] bond_slave_0: entered promiscuous mode [ 380.248009][T20362] bond_slave_1: entered promiscuous mode [ 380.254492][T20362] bond0: left promiscuous mode [ 380.259338][T20362] bond_slave_0: left promiscuous mode [ 380.264910][T20362] bond_slave_1: left promiscuous mode [ 380.392973][T20369] loop5: detected capacity change from 0 to 512 [ 380.399573][T20369] EXT4-fs: Ignoring removed bh option [ 380.406196][T20369] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 380.415908][T20369] EXT4-fs (loop5): 1 truncate cleaned up [ 380.456172][T20374] netlink: 360 bytes leftover after parsing attributes in process `syz.6.5293'. [ 380.530781][T20378] tipc: Enabling of bearer rejected, already enabled [ 380.560508][T20381] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5296'. [ 380.567582][T20383] loop1: detected capacity change from 0 to 1024 [ 380.577339][T20383] EXT4-fs: Ignoring removed orlov option [ 380.584730][T20381] bond_slave_0: entered promiscuous mode [ 380.590437][T20381] bond_slave_1: entered promiscuous mode [ 380.596190][T20381] dummy0: entered promiscuous mode [ 380.602277][T20381] macsec1: entered promiscuous mode [ 380.607491][T20381] bond0: entered promiscuous mode [ 380.612767][T20381] team0: entered promiscuous mode [ 380.617838][T20381] team_slave_0: entered promiscuous mode [ 380.623659][T20381] team_slave_1: entered promiscuous mode [ 380.629616][T20381] syz_tun: entered promiscuous mode [ 380.638138][T20386] loop5: detected capacity change from 0 to 1024 [ 380.645088][T20381] bond0: left promiscuous mode [ 380.650037][T20381] team0: left promiscuous mode [ 380.651513][T20386] EXT4-fs: Ignoring removed orlov option [ 380.654791][T20381] team_slave_0: left promiscuous mode [ 380.654844][T20381] team_slave_1: left promiscuous mode [ 380.671392][T20381] syz_tun: left promiscuous mode [ 380.678126][T20381] bond_slave_0: left promiscuous mode [ 380.683655][T20381] bond_slave_1: left promiscuous mode [ 380.689105][T20381] dummy0: left promiscuous mode [ 380.875807][T20396] wireguard0: entered promiscuous mode [ 380.881316][T20396] wireguard0: entered allmulticast mode [ 381.056195][T20416] serio: Serial port ptm0 [ 381.117544][T20422] netlink: 360 bytes leftover after parsing attributes in process `syz.4.5307'. [ 381.239449][T20434] loop5: detected capacity change from 0 to 512 [ 381.246513][T20434] EXT4-fs: Ignoring removed bh option [ 381.252843][T20434] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 381.262604][T20434] EXT4-fs (loop5): 1 truncate cleaned up [ 381.484272][T20440] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 381.494410][T20440] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 381.853359][T20446] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 381.862665][T20446] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 382.076048][T20460] wireguard0: entered promiscuous mode [ 382.081606][T20460] wireguard0: entered allmulticast mode [ 382.488755][T20468] loop0: detected capacity change from 0 to 1024 [ 382.504455][T20468] EXT4-fs: Ignoring removed orlov option [ 382.535684][T20470] serio: Serial port ptm0 [ 382.742343][T20481] devtmpfs: Unknown parameter 'trans' [ 382.978024][T20491] wireguard0: entered promiscuous mode [ 382.983557][T20491] wireguard0: entered allmulticast mode [ 383.013325][T20498] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 383.021214][T20498] SELinux: failed to load policy [ 383.067881][T20495] wireguard1: entered promiscuous mode [ 383.073382][T20495] wireguard1: entered allmulticast mode [ 383.080810][T20500] netlink: 'syz.4.5324': attribute type 4 has an invalid length. [ 383.088563][T20500] netlink: 17 bytes leftover after parsing attributes in process `syz.4.5324'. [ 383.144373][T20502] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 383.200189][T20502] SELinux: failed to load policy [ 383.417690][ T29] kauditd_printk_skb: 177 callbacks suppressed [ 383.417706][ T29] audit: type=1326 audit(3514320384.675:18473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20508 comm="syz.5.5330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e287eebe9 code=0x7ffc0000 [ 383.484659][T20511] loop5: detected capacity change from 0 to 1024 [ 383.494681][ T29] audit: type=1326 audit(3514320384.675:18474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20508 comm="syz.5.5330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e287eebe9 code=0x7ffc0000 [ 383.518387][ T29] audit: type=1326 audit(3514320384.675:18475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20508 comm="syz.5.5330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2e287eebe9 code=0x7ffc0000 [ 383.542143][ T29] audit: type=1326 audit(3514320384.675:18476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20508 comm="syz.5.5330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e287eebe9 code=0x7ffc0000 [ 383.544494][T20511] EXT4-fs: Ignoring removed orlov option [ 383.565796][ T29] audit: type=1326 audit(3514320384.675:18477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20508 comm="syz.5.5330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e287eebe9 code=0x7ffc0000 [ 383.594924][ T29] audit: type=1326 audit(3514320384.675:18478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20508 comm="syz.5.5330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2e287eebe9 code=0x7ffc0000 [ 383.618707][ T29] audit: type=1326 audit(3514320384.675:18479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20508 comm="syz.5.5330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e287eebe9 code=0x7ffc0000 [ 383.642327][ T29] audit: type=1326 audit(3514320384.675:18480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20508 comm="syz.5.5330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2e287eebe9 code=0x7ffc0000 [ 383.661997][T20514] loop0: detected capacity change from 0 to 1024 [ 383.665964][ T29] audit: type=1326 audit(3514320384.675:18481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20508 comm="syz.5.5330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e287eebe9 code=0x7ffc0000 [ 383.666021][ T29] audit: type=1326 audit(3514320384.675:18482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20508 comm="syz.5.5330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2e287eebe9 code=0x7ffc0000 [ 383.747566][T20514] EXT4-fs: Ignoring removed orlov option [ 384.400470][T20536] wireguard0: entered promiscuous mode [ 384.406080][T20536] wireguard0: entered allmulticast mode [ 384.516735][T20543] tipc: Enabling of bearer rejected, failed to enable media [ 385.481228][T20577] loop5: detected capacity change from 0 to 1024 [ 385.490195][T20575] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5347'. [ 385.504106][T20577] EXT4-fs: Ignoring removed orlov option [ 385.542055][T20581] wireguard1: entered promiscuous mode [ 385.547614][T20581] wireguard1: entered allmulticast mode [ 385.689759][T20585] tipc: Enabling of bearer rejected, already enabled [ 386.643924][T20612] loop4: detected capacity change from 0 to 1024 [ 386.665562][T20612] EXT4-fs: Ignoring removed orlov option [ 386.719014][T20622] wireguard0: entered promiscuous mode [ 386.724550][T20622] wireguard0: entered allmulticast mode [ 386.755812][T20624] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 386.788072][T20619] loop1: detected capacity change from 0 to 1024 [ 386.877498][T20635] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 386.887054][T20635] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 386.920048][T20638] tipc: Enabling of bearer rejected, already enabled [ 386.958017][T20636] loop6: detected capacity change from 0 to 512 [ 386.980948][T20636] EXT4-fs: Ignoring removed bh option [ 386.988068][T20636] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem [ 386.998324][T20636] EXT4-fs (loop6): 1 truncate cleaned up [ 387.477517][T20666] loop5: detected capacity change from 0 to 1024 [ 387.484696][T20666] EXT4-fs: Ignoring removed orlov option [ 387.492184][T20668] wireguard0: entered promiscuous mode [ 387.497818][T20668] wireguard0: entered allmulticast mode [ 387.596339][T20671] ================================================================== [ 387.604437][T20671] BUG: KCSAN: data-race in generic_buffers_fsync_noflush / writeback_single_inode [ 387.613648][T20671] [ 387.615980][T20671] write to 0xffff888106feb5c0 of 4 bytes by task 20666 on cpu 1: [ 387.623698][T20671] writeback_single_inode+0x14a/0x3e0 [ 387.629082][T20671] sync_inode_metadata+0x5b/0x90 [ 387.634032][T20671] generic_buffers_fsync_noflush+0xd9/0x120 [ 387.639934][T20671] ext4_sync_file+0x1ab/0x690 [ 387.644617][T20671] vfs_fsync_range+0x10d/0x130 [ 387.649390][T20671] ext4_buffered_write_iter+0x34f/0x3c0 [ 387.654951][T20671] ext4_file_write_iter+0x383/0xf00 [ 387.660173][T20671] iter_file_splice_write+0x663/0xa60 [ 387.665551][T20671] direct_splice_actor+0x153/0x2a0 [ 387.670659][T20671] splice_direct_to_actor+0x30f/0x680 [ 387.676021][T20671] do_splice_direct+0xda/0x150 [ 387.680767][T20671] do_sendfile+0x380/0x650 [ 387.685183][T20671] __x64_sys_sendfile64+0x105/0x150 [ 387.690390][T20671] x64_sys_call+0x2bb0/0x2ff0 [ 387.695063][T20671] do_syscall_64+0xd2/0x200 [ 387.699549][T20671] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 387.705441][T20671] [ 387.707743][T20671] read to 0xffff888106feb5c0 of 4 bytes by task 20671 on cpu 0: [ 387.715347][T20671] generic_buffers_fsync_noflush+0x80/0x120 [ 387.721224][T20671] ext4_sync_file+0x1ab/0x690 [ 387.725879][T20671] vfs_fsync_range+0x10d/0x130 [ 387.730646][T20671] ext4_buffered_write_iter+0x34f/0x3c0 [ 387.736181][T20671] ext4_file_write_iter+0x383/0xf00 [ 387.741369][T20671] iter_file_splice_write+0x663/0xa60 [ 387.746734][T20671] direct_splice_actor+0x153/0x2a0 [ 387.751824][T20671] splice_direct_to_actor+0x30f/0x680 [ 387.757175][T20671] do_splice_direct+0xda/0x150 [ 387.761918][T20671] do_sendfile+0x380/0x650 [ 387.766314][T20671] __x64_sys_sendfile64+0x105/0x150 [ 387.771492][T20671] x64_sys_call+0x2bb0/0x2ff0 [ 387.776148][T20671] do_syscall_64+0xd2/0x200 [ 387.780636][T20671] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 387.786505][T20671] [ 387.788828][T20671] value changed: 0x00000038 -> 0x00000002 [ 387.794533][T20671] [ 387.796845][T20671] Reported by Kernel Concurrency Sanitizer on: [ 387.802986][T20671] CPU: 0 UID: 0 PID: 20671 Comm: syz.5.5373 Not tainted syzkaller #0 PREEMPT(voluntary) [ 387.812764][T20671] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 387.822800][T20671] ==================================================================