last executing test programs: 9m59.481486533s ago: executing program 4 (id=220): syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @random="a61ee12478d3", @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "da37f2", 0x14, 0x2c, 0x0, @remote, @local, {[], {{0x2f00, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) (fail_nth: 1) 9m59.002054821s ago: executing program 4 (id=221): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000600)=ANY=[@ANYRES16, @ANYBLOB="25a706207ce57d92c07a88c202b290961012e0796315fb6d2cc509da4d930863eb9be4519d3ac17dc89da56940c8afe3f2b9e6ece7133db81d5d6798363aa7e3ef789e4a9bcef4e0857fe4c966971418c7cb022d69d250c1d42bd5adbf82a74fdd3bd030de301947c9da17328fe2c77a3b74e99ef77b2cd559609f15e5c1016eb71b75ffa7d45c07924160d286fdc08e9223eea19ee7e9108a6e72bfd827e28309f0d22f52254556303c0a5b64bd4530e9ef8c3e2b05e14649c2a2aab737f321b03ff8c5f8dd975f2fd785ef72440017bdc206b480b72bc59d4cf21522e4ed6746025597b8478a2648516f99d1f62aafbb5c07"], 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000340)=ANY=[@ANYRES8], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{}, &(0x7f0000000300), &(0x7f00000005c0)=r2}, 0x20) r3 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000280)={'fscrypt:', @desc4}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67163d702e2e423b9f9f6a31854ec98e98caa52dd8d39af14c31ed56ad5930000eeff0000000000000000000b00"}, 0x48, 0x0) r4 = add_key$fscrypt_v1(&(0x7f0000000400), &(0x7f0000000440)={'fscrypt:', @desc2}, &(0x7f0000000480)={0x0, "6035ae1e0fe721441700322225930e6c1e3e2a51a92fd796bc34d7cf6e0236805b4377f7ab1a9b01c103a4c6de6269613800"}, 0x48, 0xfffffffffffffffd) keyctl$KEYCTL_MOVE(0x4, r4, r3, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x15) pipe2$9p(0x0, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r5 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xb635773f06ebbeee, 0x80010, r1, 0x36336000) openat$sysfs(0xffffffffffffff9c, 0x0, 0x10840, 0xab) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f00000008c0)=@abs={0x1}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r8}, 0x10) unshare(0x64000600) r9 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x52ba, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x4, r9, r9, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x5, 0x0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, &(0x7f0000000dc0)=ANY=[@ANYBLOB="04020c0000000c0002"], 0x0, 0x0, 0x0}, 0x0) 9m55.719710576s ago: executing program 4 (id=239): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.sectors\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000d8ffffffb703000008000000b70400000000925e850000000800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000067dfb4a518110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000060000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x40, 0x6, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x9, 0x0, r2, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000500)='mm_lru_activate\x00', r4}, 0x10) write$cgroup_int(r1, &(0x7f0000000200), 0x43451) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000500)='mm_lru_activate\x00', r6}, 0x10) write$cgroup_int(r5, &(0x7f0000000200), 0x43451) 9m55.673007906s ago: executing program 4 (id=240): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) r3 = dup(r1) write$cgroup_type(r3, &(0x7f00000000c0), 0x9) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x82) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000300)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101a, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0) mount$bind(&(0x7f0000000040)='./file0/../file0\x00', &(0x7f0000000000)='./file0/file0\x00', 0x0, 0x2805011, 0x0) mount$bind(0x0, &(0x7f0000000180)='./file0/file0\x00', 0x0, 0x20000, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x1001402, 0x0) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xd0}}, 0x0) syz_kvm_setup_cpu$x86(r2, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, &(0x7f0000000340)="66b9650800000f320f019b5e7766b99a01000066b8fa00000066ba000000000f3066b8470000000f23d00f21f86635200000040f23f8663e0f00904b000f30ba4300b000ee3e0f01df660f2cffba430066b83f57000066ef", 0x58}], 0x1, 0x1, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) clock_nanosleep(0x4, 0x0, &(0x7f0000000100)={0x0, 0x989680}, &(0x7f0000000280)) 9m55.565155645s ago: executing program 4 (id=242): syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x800, &(0x7f0000000600)=ANY=[@ANYBLOB='iocharset=cp850,namecase=1,errors=remount-ro,errors=continue,fmask=00000000000000000000005,iocharset=koi8-ru,gid=', @ANYRESHEX=0x0, @ANYBLOB=',umask=00000000000006000000003,namecase=1,dmask=00000000000000000001777,allow_utime=00000000000000020000000,\x00'], 0x1, 0x1524, &(0x7f0000002280)="$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") open(0x0, 0x0, 0x149) rename(&(0x7f0000000200)='./file0\x00', &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 9m55.403073844s ago: executing program 4 (id=244): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0x8, 0xc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000840)={{r0}, &(0x7f0000000600), &(0x7f0000000800)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) shutdown(r2, 0x1) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r3, 0x8953, &(0x7f0000000100)={{0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x0, @remote}, 0x0, {0x2, 0x2, @private}, 'syz_tun\x00'}) 9m55.402799904s ago: executing program 32 (id=244): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0x8, 0xc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000840)={{r0}, &(0x7f0000000600), &(0x7f0000000800)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) shutdown(r2, 0x1) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r3, 0x8953, &(0x7f0000000100)={{0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x0, @remote}, 0x0, {0x2, 0x2, @private}, 'syz_tun\x00'}) 9m32.791727782s ago: executing program 2 (id=372): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00000008000000020000000400000005000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/21], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r0}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, 0x0, 0x0, 0xda1f, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) listen(0xffffffffffffffff, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) 9m31.826481988s ago: executing program 2 (id=377): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.sectors\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000d8ffffffb703000008000000b70400000000925e850000000800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000067dfb4a518110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000060000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x40, 0x6, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x9, 0x0, r2, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000500)='mm_lru_activate\x00', r4}, 0x10) write$cgroup_int(r1, &(0x7f0000000200), 0x43451) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000500)='mm_lru_activate\x00', r6}, 0x10) write$cgroup_int(r5, &(0x7f0000000200), 0x43451) 9m31.742025698s ago: executing program 2 (id=378): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000080)='./file1\x00', 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="6572726f72733d72656d6f756e742d726f2c6572726f72733d636f6e74696e75652c636865636b3d72656c617865642c646f74732c646f74732c6e6f646f74736f74732c646f74732c6e6f646f74732c6e6f646f746172642c64ef74732c646f74732c747a3d5554432c6572726f72733d636f6e74696e75652c6e6f646f74732c7379735f696d6d757461626c652c71756965742c646f74732c00000000000000000000000027c24c2b68ea882b21c229f03d3a218024c1ab5f5c43cc47e4d7344ab02bb8c2dcc1b91e1b9a48eb57c1715256501fe59c3054f3fec0132dce3aca569ad7061380a350bb5e1004b5aed521"], 0xfd, 0x1bf, &(0x7f0000000840)="$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") r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a00)={&(0x7f0000000d00)='sched_switch\x00', r0}, 0x10) socket$inet6(0xa, 0x3, 0x2) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r4, 0x11b, 0x6, &(0x7f0000000080)=0x200000, 0x4) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000"], 0x48) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f00000004c0)={'sit0\x00', &(0x7f0000000440)={'tunl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x3, 0x0, 0x4, 0x0, @multicast1, @local}}}}) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='afs_dir_check_failed\x00', r6}, 0x18) chdir(0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000280)=@framed, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r7}, 0x10) 9m27.697631299s ago: executing program 2 (id=384): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x78, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40080) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0x14, &(0x7f0000000080)=0x8, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'wg2\x00', 0x0}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x6, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r4}, &(0x7f0000000800), &(0x7f0000000840)=r5}, 0x20) sendto$packet(r1, &(0x7f0000000180)='7', 0x2, 0x0, &(0x7f0000000040)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @random="bf73a9e561c5"}, 0x14) r6 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) r7 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r7, 0x40087703, 0xfffffffe) fsetxattr$trusted_overlay_redirect(r0, &(0x7f00000001c0), &(0x7f0000000280)='./file0\x00', 0x8, 0x2) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x50, r7, 0x0) close_range(r6, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r8 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r8, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x891018, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f00000002c0)='./file0/file0\x00', &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x12f451, 0x0) mount$bind(&(0x7f00000000c0)='.\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x80700a, 0x0) 9m27.625172089s ago: executing program 2 (id=387): openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000dc0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, &(0x7f0000000040)=@name={0x1e, 0x2, 0x2, {{0x42, 0x2}, 0x4}}, 0x10) r4 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r4, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x1, {0x0, 0x0, 0x4}}, 0x10) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000ac0)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000700000000000000000000000000000000000000000000000200000000000000ffffffffffffffff0000000000000000000000000000000000000000000000000000000000000000ffffffffffffffff00"/111], 0xb8}}, 0x4004) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r6, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$nl_xfrm(r5, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000900)=ANY=[@ANYBLOB="14000000250018cfbcdec07503713700042cbd70040000000000000000"], 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x18810) r8 = socket$inet(0x2, 0x4000000000000001, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_CMD_DISABLE_BEARER(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYBLOB="01000000000000000000010000000000000002410c0000000013"], 0x34}}, 0x40841) setsockopt$SO_TIMESTAMP(r8, 0x1, 0x3f, &(0x7f0000000080)=0x1, 0x4) bind$inet(r8, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r8, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x15, &(0x7f00000003c0)=@raw={'raw\x00', 0x4001, 0x3, 0x208, 0x180, 0x0, 0x148, 0x0, 0x148, 0x218, 0x240, 0x240, 0x218, 0x240, 0x7fffffe, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'ip6gretap0\x00', 'veth1_to_batadv\x00'}, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x268) sendmsg$inet(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000180)='/', 0x1}], 0x1}, 0x0) recvmmsg(r8, &(0x7f0000000380)=[{{&(0x7f00000000c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000200)=""/170, 0xd5}, {&(0x7f0000000640)=""/133, 0x85}, {&(0x7f0000000f80)=""/254, 0xfe}, {&(0x7f0000000140)=""/37, 0x31}], 0x4, &(0x7f0000000340)=""/11, 0x3a}, 0x2}], 0x1, 0x0, 0x0) syz_emit_ethernet(0x10e, &(0x7f0000000b80)=ANY=[@ANYBLOB="ffffffffffffbbbbbbbbbbbb08004500010000040000000190780a010102ac1414aa0400907800000000486c0dba0066000209cc0010e0000002e000000100440ca2900001000000000fff8628ffffffff01036b0107bf92ed9e1a0710e18b9f5dffc8f40000b84100000001088c70306194b28658000000030203e0010f5aec6d8e067a40f2ef67106a330612612c697eb0d88645710d72f697f526c9021175850f2ec8c091273e0d1097da36be000df0911e6f61dceacba5de1b0610d75cae214ef7a83f522e7595a1ee820a219d257d7e7a6a8b4434f953e0000001000000077f000001000007ffe0000001a6d58c55ac1e010100002d76ffffffff00000000ac1414aa000000090080ea9a81"], 0x0) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$NL80211_CMD_SET_PMK(r9, &(0x7f0000000d80)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000980)={&(0x7f0000000740)=ANY=[@ANYBLOB="1e950948c5eda1e3afe2f9e64062ca362264", @ANYRES16=0x0, @ANYBLOB="02002abd7000fbdbdf257b00000008000300", @ANYRES32=0x0, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x20048004}, 0x20000800) sendmsg$nl_xfrm(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000840)=ANY=[@ANYRES64=r7, @ANYRESOCT=r1], 0xb8}, 0x1, 0x0, 0x0, 0x4}, 0xc056) 9m27.225927117s ago: executing program 2 (id=392): prlimit64(0x0, 0xe, &(0x7f0000000780)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000000200)=@file={0x1, './file0\x00'}, 0x6e) r1 = dup(r0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000002c0)='kmem_cache_free\x00', r3}, 0x10) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) r4 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000008002b000000000000000018040000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r7}, 0x10) read$msr(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) unshare(0x42000000) 9m27.062975526s ago: executing program 33 (id=392): prlimit64(0x0, 0xe, &(0x7f0000000780)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000000200)=@file={0x1, './file0\x00'}, 0x6e) r1 = dup(r0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000002c0)='kmem_cache_free\x00', r3}, 0x10) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) r4 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000008002b000000000000000018040000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r7}, 0x10) read$msr(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) unshare(0x42000000) 4m47.408727719s ago: executing program 1 (id=2151): mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b7000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000b80)}, 0x2100) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCSARP(r4, 0x8955, &(0x7f0000000040)={{0x2, 0x4e22, @multicast2}, {}, 0x0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 'ip6gre0\x00'}) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x840, &(0x7f0000000d40)={[{@test_dummy_encryption}]}, 0x1, 0x246, &(0x7f0000000ac0)="$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") r5 = open(&(0x7f0000000300)='./file1\x00', 0x14927e, 0x0) fallocate(r5, 0x0, 0x0, 0x1001f0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r6, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) write$cgroup_int(r5, &(0x7f00000001c0)=0xffff, 0x12) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x80000000) capget(&(0x7f0000000000)={0x20071026, r1}, &(0x7f0000000300)={0x6, 0x7fffffff, 0x2, 0x6, 0x7, 0x7}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000005c0)='9p_protocol_dump\x00'}, 0x10) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000000)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r7}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 4m46.510047655s ago: executing program 1 (id=2158): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x3e) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000000)={[{@bh}, {}, {@init_itable_val={'init_itable', 0x3d, 0x9}}, {@errors_remount}, {@journal_dev={'journal_dev', 0x3d, 0xd}}]}, 0x1, 0x4ce, &(0x7f0000001f80)="$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") 4m46.023148903s ago: executing program 1 (id=2163): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYRES8], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f00000001c0)='sched_switch\x00', r0}, 0x18) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000380)={@fallback=r0, 0x0, 0x1, 0xe, &(0x7f0000000040)=[0x0, 0x0], 0x2, 0x0, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000005c0)=ANY=[@ANYRES32=r1, @ANYRES32=r0, @ANYBLOB="3600000001000000", @ANYRES32=r0, @ANYBLOB, @ANYRES32=r0, @ANYBLOB="d1e72673ea06bc33c3ad2dcbd05b5dc9a3bd2f5070b20c0042514628eee3966f612ecc18ad91484497578b35e5dc3ea32102a54a60b90b6a78bf450143c8e3c00887ed77a8d4684e2faf7f42052d40fb9012a01a7762cd22e3ea54e22db93e53bd763e7ec7f12a49ba82111a5604ef1d15e548b41122883e4ae087e0e4f9f3148cfecd1cb79ae9d1fb74e2f7859d52312e2909dfe29a38e7ad8fa5144f18a892264e8c2cd7ba076f5de386eef2ca2974ca6a692f31e241e00c939592a658affb8187d4d785bdf3f4", @ANYRES64=r2], 0x20) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) getpid() r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000031c0)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf7cf39e3100c8acaa47684f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d7559f3b14820ed58b15627c95aa0b784625704f07372c29184ff7f4a7c0000070015006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1089d8b8588d72ec29c48b45e000000000000041201baa80b0b8ed8fb1ec577c377f627daaf787a68af2ad0810000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d40224edc5465a932b77a74e802a0dc6bf25d8a242bc6099ad2300000480006ef6c1ff0900ff0000000010c63a949e8b7955394ffaff03000000000000ab87b1bdeda7be586602d985430cea080000000000fb1a26abfb0767192361448279b05d96a703a660587a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aab926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae616b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb155481ef836eb0f8c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f57000000009700cf0b000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaed2b25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec0271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761036eafed1fb2b98b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe760e717a04becff0f719197724f4fce1093b62d7e8c7123d890cec55bf404e4e1f74b7eed82571be54c72d978cf906df08f11f1c4042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe514283707c70600000000000000b7561301bb997316db01ee601f2c9659db9bc04f7089a660d8dcc3ae83169cf331efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f871b136345cf67ca3fb5aac518a515d83129cd857c775f9e7d6101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af403269b4a39ce40293947d9a631bcbe3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f000000009191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562e00e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb2214209ed2d5d776e22a2a798de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b55ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f608ce27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df98674152f94e30400000000000000000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270b939b81367ac91bd627e87306703be8672d70d1ab57075228a95d32f46ed9bd1f00fb8191bbab2dc599dda61ee2010000294859323e7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf01cfaed9ef0ce21d69993e9960ff5f76015e6009756237badf4e7965bfe2777e808fcba821a00e8c5c39609ff854256cb490000000000c1fee30a3f7a85d1b2b458c77685efc0ceb1c8e5729c66018d169fc03aa188546bb2e51935ab9067ec3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab40743b2a428f1da1f626602111b40e761fd210819203828b202779d386ed295f023c67d867014d12ca3c471c7868e7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d42645288d7226bbd9c9e9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff00004043060000005dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec743af930cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df40600000000000000e9b49a1b36d48a44ba6a4530e59bec53e876dc660dd6d89f80a4377b1b1292a893a516dab183ee65744fb8fc4f9ce2242e0f00000000010000000000000000000057d77480e0345effff6413258d1f6eb190aa28cbb4bafe3436b176c7ed4b0600b805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fb03b84f63e022fe755f4007a4a899eaf52c4f491f1e97c862e29e4570600000091c691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104d74dc07748f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1202000000b59fed817072a0da60160761fd3dffda0f7c742eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c7000000000000000542954c167dd9b4acd946ffffffffffffffff1389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c9e281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b630500163aff094059e626766845fd779c9e6cdbbd64c2499ce3ffe2fef03f7cdd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426cfce471fef821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ada08f5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba3c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63e4581d5cc41cbde2ba66adc1168070c8c6e18a6e452a31bde54ad3e16304d06a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f700400fa0c61d5fe6d8ff353f631080405547d65375ae04f44f0c2543c772c5ccb137be7dc87746e1785a8214454d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b036e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e010000005a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb3985b7581bb5584c53984ba9c3340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a39938613067dbd1428c0805b4031a667e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b9e6626f19eecb87e39175e85e17000000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f1400010000ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1b0100448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae05025040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483d02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1098e40550a9cfd80e918d685a7b099a4f8ed654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732ab9100781b9912160a3fd2a2e74dd690c57bdfdc1f069f9491bca7a8c59363799be7005c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c1227c8bed10591958c906321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b863af34bac64c247672a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2cdfb7fea73ca18874664d60a4b9423f3297bc8eb91b4ee1d73272abbef3e7a828a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece58e752b47e6f677ec97c5c568a89d6e36b165c39132a0f27080ece2a94c360b002c77f82662675a7713c7067081cac1599a998c41ff4754268ae1676384ff799783f55d7e5a1a0920300000000000000d98440c355927629f2bcf9dc215a18ca0265400abf38e90000000000000000008faf2cddffbfa66bf32eb718e88ec75603ed7c7a8825ce0f27a114bd7a4ab74d0c7b8d90ccc1c3ca6620def782e24d75aed70eb676437f62677a69e0994cd82d72e95493c830fe9515329f40b7025326dec33a527c5d999298eaa3690fd0d38a02fc6e0bc16dbe19f353027edc014411e1138087221492f5d5e5cc9d0a1acd3f581eda9a807aa0e609f935f626d96351e0ff116686cbeb8939feecd5dac8cf45101942ce18e57bb7f337df5435bcf7e504b7c427f70a10e1cb8993a661306a0576b638a0171e6800b5b35589d676eb30ed1a72e8f7b057eb281c4504195635b6b285ebaba019913a2520e43ed790231f047f7d3789c10ae7d724929f77aec1d33d9587580268ee14396f71e7ef588cb2560d6bd0795a9b97281229eb16de286553469fad7214ffc3e416f8b8e442dce1d37f9b1c88a5d8a8d9f2fe45bd8df213ecb4194c8554aea13cadcd502e51f6fec80418e772b5bd8d0228949058038b185909ee542848680f9ad43f4057d676d5e21ae3d7e0e4a28c03f112a94707f032b35915e42993ff148291b8babe026646ee41905992db217561b90811c4702a14f312fe5d2ae7257db6be1034cc1c346b76a853ce274bf0435e18f7e86c660c18c872a4882d21db2046a1893b83c62d61bfeadc1f913e4cab2b897e096dd3fe3525090410cb23bab36cdf200a36014032cf6e5121803c5a0c4a273a19f340163fc6265441d513a1294b8439276394945d94a589708e32a1cb30a8b07b391201385e0b92ecbb7b13d7a87284164018ace6ce58a82c5de321452461089cdd69259f5390f5f508646a524490583c30630bedb47e158ad41c0a653e86a4f4f255cd2a6e95f33b586823aef5564d9de1f5bdd8c80e193f0597b8003860302cd243c00bc5a82c52afb115d16258d507937966bb89409d6d47b8b652d0761d7c72875ae1efb9bc7c6807c2d783e31fd9cd7e84d3d50d8fc44ab8ac9ccd2c0d42e3bd4c029241320446bbf47e23d1320de30fbdf7ed13f80c28fb5c13fccc2e3f73509bdcddad8a2fe48cdd61f2f43611704af64eed8b0cbbd08754f93b8f3d6347aad5cde1ccc5cbd5eaa87e52cea257c856a4af5243eeb5e89f0000000000000000f420df5e4c6d856b3d55e455c08110b2ef4255a38f81555e8e1f22d59c0bc3c9013e66a1f5bda1b695e1602c0afb5c35b2f68f3b151b1e869f40ff4d1bef5e926e1ff95f6321131e4cb797f53455a093a95e67605222d6acc29c46e5db1ef3b8b07e2169fb24ced4b3ae87ebeca06df93212e465bbd1a7e41df2e1a0d508f86cfc7a469ac682685c44692877d03c34c23a65d2677acc73b5d276fdebd685c9b7a079eae228d8426188cb19b083548f5f29e493ab079f33d1965dcbb165015c46998ad410d60cc65fcfa73bd65a43fc024455c4bf530d663976cf71490577251780ab6b1cf8d397444b5be575229f687a3d95ea6b2aa62fce8acb3d4a6a130b4fefa55d0c1d6f3fa448ee24e588e2965c9a442f0baf90923dda91a6850fb7b9c7f432b63001423fedcf053fa28024cc9a178a07042dabc07176fc524032c2edb340c9c18a83565c431aeb0c869683507255254430f90f61e4eca9c8fa98c000b35fec357ee1ebd08439bd95c1ab0753dfd2603d1608bd8c589a1e160000a6ee0ad13346e08738c2d7b00b5d121d918f1dc8bceded939fa8605b54b37cdfcea0bf2bc63e655dc04a2e50212ff89d6587d49896ce18916cf3adc12839c345ca91bb232b891fae2fdd68aaa38281c0feb2c107af3e080d6cdd1c6646ec6804d7e9960c02aa0db9eda24bbcb287fd2a890fa7f9d6ae0c0b1f8dd1603c9ea2f66b572276f96a28b5b6dd9f9bf6ad4bdaa2139b90faf1f40b0f141258578bd825daaaf718d21b7ac05fe5d1b699e5422ca341fe1c944f68fe3a6d783dcf30b0e09d7688f696883b61cb64464b04d351a0a69b0733c348049b0430ed40e200f4ff0000000000000000000000996bcc1b721b152c892fab887e7d20466d90c049c0fdf51dcc16d226a2619c6f47bc25b7f5df5c09fed638922ed127ab36aa7b0c58a2ce5894b1b0f5375d340d96b69b966b05daaf585121a9c7605ed8e9964eef1f14b74cbb2ccdadc6d0b77cf0492b75e1cd11bfdcfddde91b20366715ba0cbe1041be2a65c25d7ca15ef8b71bd2ab9a4294899a1964b0152518fc2ac15a728bcb9e2bc4b551dfdf9011a2a607bc39ad2c4d7c64dcf967724e9b63c397d5265ad3f1da4395a5a800d8845257dcbf210d4f00fe0bd3deed05e506736e6bb6d40ee6cb960bcdb33633ee87f82beb665a9a4c2d4d2b06479ade3a4cd6bba765c9f52b52a0bdd0849ab92baae3775570accb5a57ee9f0035fc6d3df4eebec2e7eb4ff863d3979a20f4428ddca471037b49d4fd130743a97faa02c293b721e52bf53d64c6585e138162331ef98792e1e9b21a6a084fb7b42c64062ef1323a8a65a8ed6038f274f28ff4f78136a1ef108efbe8c4f4e347d50dcdbc33bf3ade4c3a39d316061930d7dd39b8acdecc3f27830e3eda40e648328d95a9aee65a9dd09fd4e96d5b852025dc53ec3f30cc753e6a796084b4e34f521dbb230ae0f3b79142073d437e1fd22d3b7503ffa95b1d5c7740b0ecbfd35dc0f8af895583dfcc2689f6e02c2dd4b57f3dcac54f40da013eb221fa3d65de760576031052c25a96ed4b20230b36d46d3d3fd6bb1d77cc8a48a6b10fa0149e55ccde4a2b26cca2d1ca9191c74ab006a602543fc24d1283e353cfb917620000000024bf3eed258c02a591ec4cd295212d9a98d38745f6f6c4530900000000000000f184f239098bf32551c7cf454e2865974f6520112743f73c619c3cab5609e00178f7393e53462f31559220c026bbde09837bf1b3ffe748a3247c9569f0c5e99f4494f93e0fa1badca90c888616eca97bddabd8003fc12a084d4b11d841979e161b998ddda92f194c4ec7947b7b303be11e0962d429a2c542a28c4932e14c123dfe2b8ec47a11cce134fd6e42a9f4e00ab6de6b45"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000240)=0x1, 0x4) connect$inet(r4, &(0x7f00000006c0)={0x2, 0x0, @dev}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='mm_page_alloc\x00', r5}, 0x10) r6 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fsetxattr$system_posix_acl(r6, &(0x7f0000000000)='system.posix_acl_default\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB="0200000020"], 0xfe44, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000140)=0x1, 0x4) sendmmsg$inet(r4, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f00000026c0)=[{&(0x7f0000001100)="da9cac2c92d9d3990c8ea0727b3e49b46f2d1e4351e5dab081311166dacc8e0b493b5eb42dced784ddf51f9ff196b8d7b6cc5bad4efb071db6c28e5e2130b84e466b09bdddc4f81a04345aeece7a6833301b411666d75f3ba81f160e205a0866c723d96b7063b12a180127d656f6e16f28e1ac8d6af09663f1712714cb7b98a348ab71295cc5e6721419792709fb8935df68cf23f661f763162d12ba0120d465e4ccc26d3d7729a731a55aee96", 0xad}, {&(0x7f0000002780)="ac9dcdbb324ff0ce5f6aa4e8c20f6b6f47a7f305e28d5a9c2b08a1bca356141bf263402b5075f346ecbb1e8a9ba05609978a1e790298cb4838197e26154c4d4d4347f11d420a6699b2f563f4b71c0c5c2b959855c5a3fc40632e733af0957cbb263d8e943a683afee41e3279c2ee08fc0c5decb63433baa185a375f8bbe294e0a9c5d92c60e812dcb36706e3a3d94b108cdf0e0b268227d9a560fe103334b9e504afe30eb8d739b249d55a8f02341693bf6f074e980f7ef068c0b2f700131d07bdbaa401ec386fd503faf959289c0be776b836944f11b5c45ac44f9d235caec3fed1caca02bc0315f7fb67a5fca34130f7cc83c75e", 0xf5}, {&(0x7f0000001280)="b0a1561684c260fbffc45270a7c29c6432a2c74d5156b0dfba28d381ac7a6d761e44e782f0f7d8af82b035bfc559f1497de29ecb7f20d50dd4505f0b016c49491d15d81c438eeb7207256a250a8dde5db4215be156fec14dc560bfe0f12b1aa9b6f45f2f1c76452e54b22bd6e7a395c19eb30fef1dfdf2c114538440042fa21c3302861d7290d0a4378856357fb1b13d6ce6b7ccd1ff44ea973ffe7193b11480026d35eef3e2b5bbfd4c477611b29d041f221b6710b92409bd4463da28da8a62fffc9c2b6e6be2b57801b2bd9769eb4343fdc9249f8f6551346302d0cb2813f21384388d9a5d059d42", 0xe9}, {&(0x7f0000001080)="4ed9fe2d", 0x4}, {&(0x7f0000001380)="e5a852952b2653adab82e45aa6c227a221ade0e5ededee0d66c9eca131bf5d7bf3c2b05439cf98d0e1111a3ddaaee711f46b95a896ba6baa059213543905298e23e0a525a687068e2bdf644a870155986a272d6ed115f1062199608d79016c5b4326016bb06a21299f7ff95c59c5e75277236d6599ac0008dff7ff4b75b21cbb830887e7a8df7fca2dfd", 0x8a}, {&(0x7f0000001440)="a20ddbf09baa68e2577745f56718fb1db5d64b318e9bec958baa9d70afa7bbacc7a1c51f9cf4f5a5e2fa552c844db33455675201b061202ce4a57decd000496f18b9ceb934cbeb73f98ca3cd7e109c99ce6f43441f744e7010142dba5e540d42585eef2c65cbe0db447b4fbdef55c3b4491d1bc2ab14609d688a2e458274ee4b7b2a95d1d7c6949f91c006a2", 0x8c}, {&(0x7f0000001500)="76b21e5237b903a688ea2d523bda04dd37ad7b84b98256eabc74cd7def138add2be3aaf76fe022c9dc505cf04d7a8ace37cee6d254fc0d050db964baf632c20824d312e178783253f1f9ee9766d92e493e1a5882df0687fc6a74bd92d1611b5e8ffb8c35a4cdd34c20c27f81b55964766ab99a9eac7be0376959153e9086ef08786e40d95b1071b83c33b7824661b06119328ef38ebf7a0df3bbf5cf", 0x9c}, {&(0x7f00000016c0)="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", 0xbc0}], 0x8}}, {{0x0, 0x0, &(0x7f0000005dc0)=[{&(0x7f0000001600)="80", 0x1}], 0x1}}], 0x2, 0x0) close(r4) r7 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f00000003c0)={'ip6tnl0\x00', &(0x7f0000000340)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x8, 0x0, 0xd66}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r7, 0x89f3, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000040)={'ip6tnl0\x00', 0x0, 0x4, 0x0, 0x2, 0x4038a09, 0x4, @empty, @mcast2={0xff, 0x5}}}) r9 = socket$nl_audit(0x10, 0x3, 0x9) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r8, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0xfffffffffffffe5f) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r10}, 0x10) sendmsg$AUDIT_GET(r9, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000004c0)={0x10, 0x3e8, 0x500, 0x70bd28, 0x25dfdbfe}, 0x10}, 0x1, 0x0, 0x0, 0x8840}, 0x800) socket$nl_generic(0x10, 0x3, 0x10) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r11, 0x6, 0x21, &(0x7f0000000580)="aac6354efc0a7f516e24a40452449924", 0x10) 4m45.934227563s ago: executing program 1 (id=2165): socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000020000000c"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000007290000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) syz_clone(0x42000000, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = getpid() bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d0000001801000020207025000000000020"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = add_key$keyring(&(0x7f0000000340), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f00000003c0)='cma_release\x00', r6}, 0x18) syz_mount_image$ext4(&(0x7f0000001280)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x0, &(0x7f0000001080), 0x1, 0x4fe, &(0x7f0000000a40)="$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") rename(&(0x7f0000000280)='./file0/file0\x00', &(0x7f0000000380)='./file1\x00') keyctl$restrict_keyring(0xa, r4, &(0x7f0000000240)='pkcs7_test\x00', &(0x7f0000000300)='id\x0f\xac\xd1\xeb\xf4\xd8&w\xef\x9f`T3%\xfa\xbf\xef\xeb\x8e1w\xfd') r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r7, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) write$FUSE_NOTIFY_STORE(r7, &(0x7f0000000300)={0x28, 0x4, 0x0, {0x1, 0x10}}, 0x28) syz_fuse_handle_req(r7, &(0x7f0000008100)="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", 0x2000, &(0x7f0000000340)={&(0x7f0000000180)={0x50, 0x0, 0x0, {0x7, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_NOTIFY_RETRIEVE(r7, &(0x7f0000000040)={0x30, 0x5, 0x0, {0x0, 0x1, 0x7, 0x6}}, 0x30) sendmsg$netlink(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000480)=ANY=[@ANYBLOB="280000002100010002000000000000000a00000000000001016200000c00148008"], 0x28}], 0x1}, 0x0) syz_open_procfs(r2, &(0x7f0000000040)='fd/4\x00') syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x10, &(0x7f0000000200), 0x1, 0x48d, &(0x7f0000000e40)="$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") 4m45.096878829s ago: executing program 1 (id=2175): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000fbff000000000000001d8500000007000000850000002300000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xb, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000000000b3180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) setpgid(0x0, 0x0) uname(&(0x7f0000000140)=""/81) unshare(0x2000400) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143041, 0x0) pwritev2(r4, 0x0, 0x0, 0xe7b, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='kmem_cache_free\x00', r0}, 0x10) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) ptrace(0x8, r5) tgkill(r5, r5, 0x1a) waitid(0x2, 0x0, 0x0, 0x4, 0x0) 4m44.931815338s ago: executing program 1 (id=2180): ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', 0x0}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) r3 = gettid() syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r4 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext3\x00', &(0x7f0000000000)='./bus\x00', 0x10e, &(0x7f0000000240)={[{@errors_remount}, {@noinit_itable}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2000000000002a}}, {@errors_remount}, {@nodelalloc}, {@grpjquota}]}, 0x3, 0x45b, &(0x7f00000010c0)="$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") r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000d7c900000900000001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000d19c6e3601abacbb000000001d0000000000"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r5, 0xffffffffffffffff}, &(0x7f0000000540), &(0x7f0000000500)}, 0x20) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000005000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r7}, 0x10) quotactl$Q_QUOTAOFF(0xffffffff80000301, &(0x7f0000000200)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) getdents64(r4, 0x0, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$int_in(r8, 0x5452, &(0x7f0000000180)=0xf51) readv(r8, &(0x7f0000000300)=[{&(0x7f0000000340)=""/134, 0x86}], 0x1) dup(r1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) 4m44.869683408s ago: executing program 34 (id=2180): ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', 0x0}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) r3 = gettid() syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r4 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext3\x00', &(0x7f0000000000)='./bus\x00', 0x10e, &(0x7f0000000240)={[{@errors_remount}, {@noinit_itable}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2000000000002a}}, {@errors_remount}, {@nodelalloc}, {@grpjquota}]}, 0x3, 0x45b, &(0x7f00000010c0)="$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") r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000d7c900000900000001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000d19c6e3601abacbb000000001d0000000000"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r5, 0xffffffffffffffff}, &(0x7f0000000540), &(0x7f0000000500)}, 0x20) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000005000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r7}, 0x10) quotactl$Q_QUOTAOFF(0xffffffff80000301, &(0x7f0000000200)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) getdents64(r4, 0x0, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$int_in(r8, 0x5452, &(0x7f0000000180)=0xf51) readv(r8, &(0x7f0000000300)=[{&(0x7f0000000340)=""/134, 0x86}], 0x1) dup(r1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) 1m14.326543901s ago: executing program 6 (id=3517): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003020000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000500)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x40, 0xffffffff, @loopback}, 0x1c) close(r2) 1m14.262208131s ago: executing program 6 (id=3518): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000980)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000080)='./bus\x00', 0x21081e, &(0x7f00000001c0), 0x1, 0x504, &(0x7f0000000ac0)="$eJzs3c9vG1kdAPCvnThx0uwmu+wBEOyW3YWCqjqJuxut9gDLCSG0EmKPIHVD4kZR7DiKnaUJPaRnrkhU4gRH/gDOPXHnguDGpRyQ+BGBGiQORjMep25qN6FJ7Cj+fKTRvDdv4u/3NZ336pfGL4CRdT0i9iNiIiI+jYjZ7HouO+Kj9pHc9+Tg/srhwf2VXLRan/wjl7Yn16LraxLXstcsRsQPvhPx49zzcRu7exvL1WplO6vPN2tb843dvVvrteW1ylpls1xeWlxa+OD2++Vz6+tbtYms9OXHv9//xk+TtGayK939OE/trheO4iTGI+J7FxFsCMay/kwMOxFeSj4iXo+It9PnfzbG0u8mAHCVtVqz0ZrtrgMAV10+XQPL5UvZWsBM5POlUnsN742YzlfrjebNu/WdzdX2WtlcFPJ316uVhWytcC4KuaS+mJaf1svH6rcj4rWI+PnkVFovrdSrq8P8hw8AjLBrx+b/f0+2538A4IorDjsBAGDgzP8AMHrM/wAwesz/ADB62vP/1LDTAAAGyPt/ABg95n8AGCnf//jj5GgdZp9/vfrZ7s5G/bNbq5XGRqm2s1JaqW9vldbq9bX0M3tqJ71etV7fWnwvdu7NfXOr0Zxv7O7dqdV3Npt30s/1vlMppHftD6BnAEA/r7316E+5ZEb+cCo9omsvh8JQMwMuWn7YCQBDMzbsBIChsdsXjK4zvMe3PABXRI8tep9R7PULQq1Wq3VxKQEX7MYXrP/DqOpa//e/gGHEWP+H0WX9H0ZXq5U77Z7/cdobAYDLzRo/0Ofn/69n599kPxz40erxOx5eZFYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwuXX2/y1le4HPRD5fKkW8EhFzUcjdXa9WFiLi1Yj442RhMqkvDjlnAOCs8n/NZft/3Zh9d+aZpjevHRUnIuInv/zkF/eWm83tP0RM5P452bnefJhdLw8+ewDgZJ15Oj13vZF/cnB/pXMMMp+/fTsiiu34hwcTcXgUfzzG03MxChEx/a9cVm/Lda1dnMX+g4j4fK/+52ImXQNp73x6PH4S+5VBxJ/qxM8/Ez+f5tY+J38WnzuHXGDUPErGn496PX/5uJ6eez//xXSEOrts/EteauUwHQOfxu+Mf2N9xr/rp43x3u++2y5NPd/2IOKL4xGd2Idd408nfq5P/HdPGf/PX3rz7X5trV9F3Ije8btjzTdrW/ON3b1b67XltcpaZbNcXlpcWvjg9vvl+XSNer7/bPD3D2++2q8t6f90n/jFE/r/1VP2/9f//fSHX3lB/K+/0yt+Pt54QfxkTvzaKeMvT/+22K8tib/ap/8nff9vnjL+47/sPbdtOAAwPI3dvY3larWy/bKFw7N9uYLC/1FI/spegjR6Fr41qFgT0bvpZ++0n+ljTa3WS8XqN2Kcx6obcBkcPfQR8Z9hJwMAAAAAAAAAAAAAAPQ0iN9YGnYfAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAuLr+FwAA//8Xqc+p") 1m13.825302159s ago: executing program 6 (id=3520): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000080000000c"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="b70700000000000063119f00000000000700000000000000950000000000000086b223c17fd5c6311e80752befb60f283890ff0a97195cba4872b282cd13a47f256c1748557c"], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xb579, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x23) add_key(&(0x7f0000000040)='ceph\x00', 0x0, &(0x7f00000000c0)="010001000000000000001000015b097ead85847817353d2dbad05dd5", 0x1c, 0xfffffffffffffffd) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000700000000000000000000850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x1e, r4, 0xfffffffffffffffe, r4, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='nilfs2_segment_usage_freed\x00', r2, 0x0, 0x401}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x12, 0x2, 0x8, 0xd0eb, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x60, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x4c, 0x1, [@m_sample={0x48, 0x1, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0x300}}]}, {0x4}, {0xc}, {0xc, 0x4}}}]}]}, 0x60}}, 0x0) syz_emit_ethernet(0x56, &(0x7f00000016c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa2786dd603000bb00202b00fc020000000000000000000000000000fe8000000000000000000000000000aa3c01000000000000000000000000000000000890"], 0x0) 1m13.729991868s ago: executing program 6 (id=3522): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x0) mount$bind(&(0x7f0000000000)='./file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x8b101b, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0x0) 1m13.729019188s ago: executing program 6 (id=3525): syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = socket(0x2, 0x3, 0xff) connect$inet(r0, &(0x7f00000000c0)={0x2, 0xfffd, @local}, 0x10) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000180)={@dev={0xfe, 0x80, '\x00', 0x10}, 0x8000000, 0x0, 0xff, 0x0, 0x0, 0x9}, 0x20) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) write$binfmt_elf32(r0, 0x0, 0x58) getrlimit(0x5, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = openat$ppp(0xffffffffffffff9c, 0x0, 0x40082, 0x0) pwritev(r3, &(0x7f0000000040), 0x0, 0x0, 0x0) write$tun(0xffffffffffffffff, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="c8010000", @ANYRES16=r6, @ANYBLOB="0100000000000000000001000000060006000000000024000300a0cb879a47f5bc644c0e693fa6d031c74a1553b6e901b9ff2f518c78042fb5426c010880f4000080060005000180000024000100dbffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff240002001bc715ee4868b12a49f4df11bc05475489f6a27c4d6483ad2fa5e45903b0ce851400040002000000ac1414aa00000000000000008c00098028000080060001000a00000014000200ff020000000000000000000000000001050003000000000028000080060001000a000000140002000000000000000000000000000000000105000300030000001c000080060001000200da0008000200e000000105000300000000001c000080060001000200000008000200ac141400050003000000000074000080200004000a004e2200000000fc0000000000000000000000000000000400000024000100dbffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff080003000100000024000200cde20bc0d9b90ac13642d7b66459dd9db5e20b4b16d3d23f2cb03a8aa417dce6080007000000000014000200776730"], 0x1c8}}, 0x0) 1m13.645965888s ago: executing program 6 (id=3528): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000002080)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0x4}, 0x18) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) syz_clone(0x22023500, 0x0, 0x0, 0x0, 0x0, 0x0) 1m13.643696008s ago: executing program 35 (id=3528): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000002080)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0x4}, 0x18) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) syz_clone(0x22023500, 0x0, 0x0, 0x0, 0x0, 0x0) 1.457646677s ago: executing program 3 (id=5096): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000e000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000088500000082"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r1}, 0x10) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000b00)=@base={0x6, 0x4, 0x70be, 0x5c, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 1.382150737s ago: executing program 3 (id=5099): r0 = syz_clone3(&(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000004000ed0000000008100d00850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r1}, 0x10) r2 = syz_pidfd_open(r0, 0x0) pidfd_send_signal(r2, 0x9, 0x0, 0x0) 1.313676976s ago: executing program 3 (id=5102): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) lseek(0xffffffffffffffff, 0xc913, 0x4) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000480)=ANY=[@ANYBLOB="280000002100010002000000000000000a00000000000001016200000c00148008"], 0x28}], 0x1}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000", @ANYRES32, @ANYBLOB="00000001000000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/14], 0x48) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="a40000000001010400000000000000000a0000003c0001802c000180140003"], 0xa4}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00'}, 0x10) rt_sigtimedwait(0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES2(0xffffffffffffffff, 0xd, &(0x7f0000000a00)={0x7, 0x1, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000380)=""/183, 0xb7}, {&(0x7f0000000540)=""/208, 0xd0}, {&(0x7f00000006c0)=""/168, 0xa8}, {&(0x7f0000000180)=""/35, 0x23}, {&(0x7f0000000780)=""/78, 0x4e}, {&(0x7f0000000800)=""/225, 0xe1}, {&(0x7f0000000900)=""/223, 0xdf}], &(0x7f00000004c0)}, 0x20) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000001d00), 0x4) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0x10}, {0x4}, {0x0, 0x9}}}, 0x24}}, 0x0) 1.276640296s ago: executing program 3 (id=5105): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x18) poll(0x0, 0x0, 0x81) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000001200), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000001a80)=ANY=[@ANYBLOB="002918d910d46be7099c66b02010b1f0b7c3dc1dabe625969fb0adc922385af53d57a1d35dd71c90d9dd649b53142dd3d4108b4c7db82e8475d5bb6fa2fa626cd92c7326ce1ba2f33b0aef2b2164e01d910058b51684696959ea7f5a607a6572d2640cf9312a07000000260e3651a0cbfd2c080990fb4c76e9e613a759863734a70d0600ec77e8ba76aacbb21e4b903aa4873a9951f269a9c0f87805a1a0cbdf6b8644a1de05a8d9dd9687d67c8af7f68cb59e60d1fbefb49b93d6b72cce4162edc4468a13987d94d428df36915621aeff6dc1358a7331fa69e05c417c2e1e6b8dc29c496c76d02dfc2d7b48616fb3f01b221f4f8f484a00090964922de8909a1f9f7ef655a12a68a56cb341a8fba4cd81cedec9cb518d13d2a2564427b63b037494748a24daa21fe1256df68d000b2778bf0437cc642cd83c5a1b34eeffdf93ecbd85bb340eeef68dd60101769c74f94d217264c171feea0305bfc87c36247d90b129a9973f00000001d99b195d2f75653a0193672783c6dbca5d1445110621d8095064f0a034f492cf5aa4767a772d6f4967722546bfd83d3202f76c20a9d7f40f9e7818d77129df7fd072804e0227ecaa03dddd303a318d6f7763ce011543587e6a306780ca2f37db7e8a5b64a5059ac91ff2110e40ea13d70e1504653ba9eebcf61b427797fb3fd79d2bb9aaa13c9729fe323c4ac222991981381e004684fb200b17d2f6ede181067662ad8a31f45b613869ca8fc5b1dbe62407a1f6dcb86a4c430210e9bcfca9b83283b87316c4d17f388e0bab0500000092a82e12f8e5348f11e7739033e9081bfc598746cf032fa55d9581470000000019ac65f89ca7d96da3ca2db52f8ec80462fddf42dbbca24b7200"/643], 0x1, 0x120b, &(0x7f0000002300)="$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") rename(&(0x7f0000000040)='./file1\x00', &(0x7f0000001300)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 1.260446945s ago: executing program 8 (id=5107): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0xb8e, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000882b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) syz_mount_image$vfat(&(0x7f0000000280), &(0x7f0000000240)='./file0\x00', 0x18000, &(0x7f00000000c0)=ANY=[@ANYRES8=0x0, @ANYRESOCT, @ANYRES16=0x0, @ANYRESDEC, @ANYRES32, @ANYRES32], 0x1, 0x2ee, &(0x7f00000006c0)="$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") r2 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) fdatasync(r3) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mlock2(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) 1.187895985s ago: executing program 0 (id=5109): r0 = socket$nl_generic(0x11, 0x3, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@link_local, @random="0000fc00", @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x16, 0x7c, 0x0, @multicast2}}}}}, 0x0) sendmsg(r0, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0x36}], 0x2, 0x0, 0x0, 0x11000000}, 0x0) 1.187476025s ago: executing program 0 (id=5110): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000e000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000088500000082"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r1}, 0x10) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000b00)=@base={0x6, 0x4, 0x70be, 0x5c, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 1.156202595s ago: executing program 0 (id=5111): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000300)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x18) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=ANY=[@ANYBLOB="6c00000010000304002000003c0e77897399f655", @ANYRES32=0x0, @ANYBLOB="15020000000000003c0012800b00010067726574617000002c00028006000f000700000006000f0000800000060011004e220000080007007f000001050013000000000008000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x6c}, 0x1, 0xba01}, 0x0) 552.642743ms ago: executing program 8 (id=5116): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x6}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0xfecc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0, 0x0, 0xfffffffffffffff8}, 0x18) write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000000), 0xf) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x89f1, &(0x7f0000000040)={'ip6_vti0\x00', @random='\a\x00\x00 \x00'}) 463.278012ms ago: executing program 8 (id=5120): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r1) sendmsg$ETHTOOL_MSG_DEBUG_SET(r1, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000040200f2c8dc1b000000180001801400020073797a5f74756e0000000000000000000c000280"], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0) 395.832562ms ago: executing program 8 (id=5124): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) close(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r5, r4, 0x26, 0x0, 0x0, @void, @value}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r5}, &(0x7f0000000000), &(0x7f0000000080)=r1}, 0x20) recvmsg$unix(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000006c0)=""/179, 0x33fe0}], 0x1}, 0x0) sendmsg$inet(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x33fe0}], 0x1}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_256={{0x303}, 'v\x00', "07f217bd74511f465bbbd5de01000000f91800", "0000f600", "8ce63ecbc640735f"}, 0x38) close(0xffffffffffffffff) write$binfmt_register(0xffffffffffffffff, &(0x7f0000000080)={0x3a, 'syz0', 0x3a, 'E', 0x3a, 0x2, 0x3a, '\xf2:)@', 0x3a, '(', 0x3a, './file0'}, 0x2c) 395.470952ms ago: executing program 3 (id=5125): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000008ed6884269578a4a04007f"], &(0x7f0000000040)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @void, @value}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/wakeup_count', 0x0, 0x0) 357.882362ms ago: executing program 7 (id=5129): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000080000000f"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000046c0)=@newqdisc={0x45c, 0x24, 0x4ee4e6a52ff56541, 0x8000000, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_PTAB={0x404, 0x3, [0x2, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x40000000, 0x1000, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7e150a0b, 0x0, 0x5, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x10200, 0x5d2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x1007, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x7, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x4fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x7e98263b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd2d1, 0x0, 0x0, 0xb2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x7, 0xc3f3, 0x1, 0x0, 0x800, 0x9, 0x800, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0xfffffffe, 0xa42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x0, 0x6, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0xffffffff, 0x10, 0x0, 0x0, 0xb2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x1000, 0x100, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x800, 0x0, 0x3, 0x1, 0x0, 0xd959, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20]}, @TCA_TBF_PARMS={0x28, 0x1, {{0x0, 0x3, 0x0, 0x0, 0x0, 0xc0000000}, {0x3, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x7, 0x10, 0x2000000}}]}}]}, 0x45c}}, 0x0) 334.394591ms ago: executing program 8 (id=5130): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$UHID_CREATE2(r2, 0x0, 0x1b) 301.782791ms ago: executing program 5 (id=5131): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xa, 0x3, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000006c0)={{r0}, &(0x7f0000000640), &(0x7f0000000680)='%pi6 \x00'}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000280)={{}, &(0x7f0000000080), &(0x7f00000006c0)='%-010d \x00'}, 0x20) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) rt_sigpending(0x0, 0x0) 301.229031ms ago: executing program 3 (id=5132): mkdir(&(0x7f0000000000)='./control\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) close(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000100)={'ip6tnl0\x00', &(0x7f0000000080)={'syztnl1\x00', 0x0, 0x4, 0x0, 0x4, 0x7, 0x0, @private1, @loopback, 0x1, 0x8, 0x7f, 0x8}}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, 0xffffffffffffffff, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r7, &(0x7f00000001c0)={0xa, 0x4e22}, 0x1c) sendto$inet6(r7, 0x0, 0x0, 0x200008d4, &(0x7f000072e000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r7, 0x29, 0x36, 0x0, 0x18) close_range(r6, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) ioctl$USBDEVFS_DISCONNECT_CLAIM(r5, 0x8108551b, &(0x7f0000000300)={0x0, 0x0, "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"}) 296.606171ms ago: executing program 7 (id=5133): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) r2 = fsopen(&(0x7f0000000040)='sysfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) 296.110961ms ago: executing program 8 (id=5134): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$binfmt_aout(r0, &(0x7f0000000340)=ANY=[], 0xff2e) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$TCXONC(r0, 0x540a, 0x3) socket$inet_udplite(0x2, 0x2, 0x88) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6aab, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000240)=',-\x10*\x00', &(0x7f0000000380)='$\x00', 0x0) read(0xffffffffffffffff, 0x0, 0x0) 243.735971ms ago: executing program 0 (id=5135): syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x418484, &(0x7f0000000440), 0x1, 0x775, &(0x7f0000001180)="$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") r0 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0) fallocate(r0, 0x20, 0xf5, 0x10000) 243.437171ms ago: executing program 7 (id=5136): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000f3ff0000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='kmem_cache_free\x00', r0}, 0x18) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty, 0x10}, 0x1c) setsockopt$inet6_udp_encap(r1, 0x11, 0x64, &(0x7f0000000180)=0x2, 0x4) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x30, 0xe000, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x1, 0x4e20, 0x1c, 0x0, @gue={{0x2, 0x0, 0x2, 0x3}, "6580fb085efeaab2578eb7a6"}}}}}}, 0x0) 190.229161ms ago: executing program 5 (id=5137): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f00000001c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000007000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f0800034000000004640000000e0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000380003803400008028000180230001"], 0xf0}}, 0x0) 189.82815ms ago: executing program 7 (id=5138): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000e000018110000", @ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000088500000082"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r1}, 0x10) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000b00)=@base={0x6, 0x4, 0x70be, 0x5c, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 165.817961ms ago: executing program 7 (id=5139): syz_mount_image$ext4(&(0x7f0000000bc0)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x4000, &(0x7f0000000000), 0x2, 0xbb8, &(0x7f00000017c0)="$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") r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1, 0x0, 0x800000000000000}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) lchown(&(0x7f0000000180)='./file1\x00', 0x0, 0x0) 155.7336ms ago: executing program 5 (id=5140): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x4008, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40000000, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0, 0xffffffffffffffff}, 0x0, &(0x7f00000002c0)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r2}, 0x10) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) mkdir(0x0, 0x0) splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x7, 0x8) sched_setscheduler(0x0, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 106.74908ms ago: executing program 5 (id=5141): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r0}, 0x9) unshare(0x6a040000) 50.22174ms ago: executing program 5 (id=5142): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0x3, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r2, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f00000005c0)=""/151, 0x97}], 0x1, &(0x7f0000002f40)=""/229, 0xe5}, 0x0) close(r3) 49.87147ms ago: executing program 0 (id=5143): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000008ed6884269578a4a04007f"], &(0x7f0000000040)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/wakeup_count', 0x0, 0x0) 17.2682ms ago: executing program 5 (id=5144): r0 = getpid() socket$inet_udp(0x2, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000021b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r2}, 0x10) syz_open_dev$evdev(0x0, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sync() sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$DEVLINK_CMD_RELOAD(r3, &(0x7f0000000100)={0x0, 0x4100, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r4, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r0}}]}, 0x3c}}, 0x0) 14.59626ms ago: executing program 7 (id=5145): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = syz_clone3(&(0x7f0000001240)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) process_vm_writev(r2, 0x0, 0x0, 0x0, 0x0, 0x0) 0s ago: executing program 0 (id=5146): socketpair(0x23, 0x80009, 0x88, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x101000, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@remote, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in6=@mcast2, 0x0, 0x2b}, 0x0, @in=@empty}}, 0xe8) r1 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) sendmsg$key(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060"], 0xb8}}, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x60, 0x0, 0x0, 0x0, 0xee01}}}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x40, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x9}}}, 0xb8}}, 0x4000) kernel console output (not intermixed with test programs): 00.230:12784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13255 comm="syz.3.4002" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f43daa6bda9 code=0x7ffc0000 [ 636.163192][ T30] audit: type=1326 audit(1738307200.230:12785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13255 comm="syz.3.4002" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43daa6bda9 code=0x7ffc0000 [ 636.746155][ T30] audit: type=1326 audit(1738307200.230:12786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13255 comm="syz.3.4002" exe="/root/syz-executor" sig=0 arch=c000003e syscall=440 compat=0 ip=0x7f43daa6bda9 code=0x7ffc0000 [ 636.836731][ T30] audit: type=1326 audit(1738307200.230:12787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13255 comm="syz.3.4002" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43daa6bda9 code=0x7ffc0000 [ 636.862349][ T30] audit: type=1326 audit(1738307200.660:12788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13260 comm="syz.5.4004" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e85e8bda9 code=0x7ffc0000 [ 636.941481][ T30] audit: type=1326 audit(1738307200.660:12789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13260 comm="syz.5.4004" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e85e8bda9 code=0x7ffc0000 [ 636.965930][ T30] audit: type=1326 audit(1738307200.660:12790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13260 comm="syz.5.4004" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5e85e8bda9 code=0x7ffc0000 [ 636.977567][T13279] loop3: detected capacity change from 0 to 512 [ 636.998768][T13281] loop7: detected capacity change from 0 to 128 [ 637.034341][T13281] EXT4-fs (loop7): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000002,nouid32,,errors=continue. Quota mode: none. [ 637.048887][T13281] ext4 filesystem being mounted at /377/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 637.103779][T13279] EXT4-fs (loop3): orphan cleanup on readonly fs [ 637.112710][T13279] EXT4-fs warning (device loop3): ext4_enable_quotas:6423: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 637.131841][T13291] loop8: detected capacity change from 0 to 512 [ 637.138221][T13279] EXT4-fs (loop3): Cannot turn on quotas: error -22 [ 637.145518][T13291] EXT4-fs (loop8): VFS: Can't find ext4 filesystem [ 637.154785][T13279] EXT4-fs (loop3): 1 truncate cleaned up [ 637.160291][T13279] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 637.343550][T13318] syz.3.4027[13318] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 637.343640][T13318] syz.3.4027[13318] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 637.440510][T13327] loop3: detected capacity change from 0 to 4096 [ 637.520041][T13327] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 637.752533][T13347] loop7: detected capacity change from 0 to 512 [ 637.810562][T13347] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 637.841645][T13347] ext4 filesystem being mounted at /387/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 637.944430][T13359] loop7: detected capacity change from 0 to 16384 [ 638.314626][T13372] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4051'. [ 638.337244][T13377] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4040'. [ 639.239956][T13407] loop0: detected capacity change from 0 to 512 [ 639.251598][ C0] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 639.276514][T13407] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 639.296366][T13407] EXT4-fs (loop0): 1 truncate cleaned up [ 639.311593][T13407] EXT4-fs (loop0): mounted filesystem without journal. Opts: errors=remount-ro,resuid=0x0000000000000000,debug_want_extra_isize=0x0000000000000068,resgid=0x0000000000000000,block_validity,quota,. Quota mode: writeback. [ 639.487028][T13421] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4066'. [ 639.501646][T13421] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4066'. [ 639.673603][T13439] loop7: detected capacity change from 0 to 512 [ 639.687025][ T630] udevd[630]: symlink '../../loop7' '/dev/disk/by-label/syzkaller.tmp-b7:7' failed: Read-only file system [ 639.714470][T13442] syz.5.4077[13442] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 639.714563][T13442] syz.5.4077[13442] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 639.732383][T13439] EXT4-fs error (device loop7): ext4_orphan_get:1401: inode #15: comm syz.7.4075: casefold flag without casefold feature [ 639.793801][T13439] EXT4-fs error (device loop7): ext4_orphan_get:1406: comm syz.7.4075: couldn't read orphan inode 15 (err -117) [ 639.824096][T13448] 9pnet: Insufficient options for proto=fd [ 639.832247][T13439] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 639.870689][ T630] udevd[630]: symlink '../../loop7' '/dev/disk/by-label/syzkaller.tmp-b7:7' failed: Read-only file system [ 645.441873][ T30] kauditd_printk_skb: 74 callbacks suppressed [ 645.441893][ T30] audit: type=1400 audit(1738307204.770:12865): avc: denied { read } for pid=13453 comm="syz.5.4082" name="usbmon7" dev="devtmpfs" ino=172 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 645.608827][T13471] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4088'. [ 645.787545][ T30] audit: type=1400 audit(1738307204.770:12866): avc: denied { open } for pid=13453 comm="syz.5.4082" path="/dev/usbmon7" dev="devtmpfs" ino=172 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 645.848083][T13477] loop8: detected capacity change from 0 to 2048 [ 645.885189][ T30] audit: type=1326 audit(1738307210.530:12867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13480 comm="syz.7.4091" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda19903da9 code=0x7ffc0000 [ 645.974573][T13477] EXT4-fs (loop8): mounted filesystem without journal. Opts: dioread_nolock,minixdf,nolazytime,bsddf,,errors=continue. Quota mode: none. [ 645.988628][T13482] loop0: detected capacity change from 0 to 4096 [ 645.999685][ T30] audit: type=1326 audit(1738307210.560:12868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13480 comm="syz.7.4091" exe="/root/syz-executor" sig=0 arch=c000003e syscall=286 compat=0 ip=0x7fda19903da9 code=0x7ffc0000 [ 646.030787][ T342] udevd[342]: symlink '../../loop8' '/dev/disk/by-label/syzkaller.tmp-b7:8' failed: Read-only file system [ 646.054365][ T630] udevd[630]: symlink '../../loop0' '/dev/disk/by-label/syzkaller.tmp-b7:0' failed: Read-only file system [ 646.067574][T13477] ext4 filesystem being mounted at /111/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 646.079919][T13482] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 646.097694][ T342] udevd[342]: symlink '../../loop8' '/dev/disk/by-label/syzkaller.tmp-b7:8' failed: Read-only file system [ 646.116638][ T630] udevd[630]: symlink '../../loop0' '/dev/disk/by-label/syzkaller.tmp-b7:0' failed: Read-only file system [ 646.132922][T13477] EXT4-fs error (device loop8): ext4_validate_block_bitmap:438: comm syz.8.4089: bg 0: block 345: padding at end of block bitmap is not set [ 646.149859][ T30] audit: type=1326 audit(1738307210.560:12869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13480 comm="syz.7.4091" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda19903da9 code=0x7ffc0000 [ 646.184797][ T10] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 32768 with max blocks 1 with error 28 [ 646.197965][ T10] EXT4-fs (loop8): This should not happen!! Data will be lost [ 646.197965][ T10] [ 646.208071][ T30] audit: type=1326 audit(1738307210.790:12870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13479 comm="syz.0.4090" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3aed74da9 code=0x7ffc0000 [ 646.231923][ T10] EXT4-fs (loop8): Total free blocks count 0 [ 646.237726][ T10] EXT4-fs (loop8): Free/Dirty block details [ 646.244158][ T10] EXT4-fs (loop8): free_blocks=0 [ 646.248948][ T10] EXT4-fs (loop8): dirty_blocks=16 [ 646.254458][ T30] audit: type=1326 audit(1738307210.790:12871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13479 comm="syz.0.4090" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb3aed74da9 code=0x7ffc0000 [ 646.278873][ T10] EXT4-fs (loop8): Block reservation details [ 646.284895][ T10] EXT4-fs (loop8): i_reserved_data_blocks=1 [ 646.292728][ T30] audit: type=1326 audit(1738307210.790:12872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13479 comm="syz.0.4090" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3aed74da9 code=0x7ffc0000 [ 646.316653][ T30] audit: type=1326 audit(1738307210.790:12873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13479 comm="syz.0.4090" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb3aed74da9 code=0x7ffc0000 [ 646.340467][ T30] audit: type=1326 audit(1738307210.790:12874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13479 comm="syz.0.4090" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3aed74da9 code=0x7ffc0000 [ 647.731652][ C0] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 649.113763][ T630] udevd[630]: symlink '../../loop0' '/dev/disk/by-label/syzkaller.tmp-b7:8' failed: Read-only file system [ 649.151144][T13503] loop8: detected capacity change from 0 to 4096 [ 649.166184][ T630] udevd[630]: symlink '../../loop8' '/dev/disk/by-label/syzkaller.tmp-b7:8' failed: Read-only file system [ 649.182408][T13503] EXT4-fs (loop8): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 649.201161][ T630] udevd[630]: symlink '../../loop8' '/dev/disk/by-label/syzkaller.tmp-b7:8' failed: Read-only file system [ 649.451386][ T630] udevd[630]: symlink '../../loop8' '/dev/disk/by-label/syzkaller.tmp-b7:0' failed: Read-only file system [ 649.468785][T13513] loop3: detected capacity change from 0 to 512 [ 649.479463][T13517] loop7: detected capacity change from 0 to 512 [ 649.574783][T13532] loop0: detected capacity change from 0 to 512 [ 649.625664][T13517] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 649.642009][T13537] syz.5.4109[13537] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 649.642097][T13537] syz.5.4109[13537] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 649.643036][T13513] EXT4-fs (loop3): Ignoring removed mblk_io_submit option [ 649.665150][T13517] ext4 filesystem being mounted at /404/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 649.701167][T13532] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 649.725946][ T630] udevd[630]: symlink '../../loop3' '/dev/disk/by-label/syzkaller.tmp-b7:3' failed: Read-only file system [ 649.744618][T13532] EXT4-fs (loop0): 1 truncate cleaned up [ 649.751615][ T631] udevd[631]: symlink '../../loop0' '/dev/disk/by-label/syzkaller.tmp-b7:0' failed: Read-only file system [ 649.759004][T13532] EXT4-fs (loop0): mounted filesystem without journal. Opts: jqfmt=vfsv0,journal_ioprio=0x0000000000000002,debug_want_extra_isize=0x0000000000000068,lazytime,grpjquota=,quota,,errors=continue. Quota mode: writeback. [ 649.767007][T13513] EXT4-fs error (device loop3): ext4_xattr_inode_iget:404: comm syz.3.4101: inode #1: comm syz.3.4101: iget: illegal inode # [ 649.849259][T13513] EXT4-fs error (device loop3): ext4_xattr_inode_iget:409: comm syz.3.4101: error while reading EA inode 1 err=-117 [ 649.867202][T13513] EXT4-fs error (device loop3): ext4_xattr_inode_iget:404: comm syz.3.4101: inode #1: comm syz.3.4101: iget: illegal inode # [ 649.890389][T13513] EXT4-fs error (device loop3): ext4_xattr_inode_iget:409: comm syz.3.4101: error while reading EA inode 1 err=-117 [ 649.911817][T13513] EXT4-fs (loop3): 1 orphan inode deleted [ 649.920717][T13513] EXT4-fs (loop3): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000005,journal_dev=0x0000000000008000,debug_want_extra_isize=0x000000000000005c,minixdf,max_batch_time=0x0000000000000002,auto_da_alloc=0x0000000000000009,mblk_io_submit,,errors=continue. Quota mode: none. [ 650.070122][ T553] hid-generic 0000:0003:0000.0010: unknown main item tag 0x0 [ 650.080466][ T553] hid-generic 0000:0003:0000.0010: unknown main item tag 0x0 [ 650.089039][ T553] hid-generic 0000:0003:0000.0010: hidraw0: HID v0.00 Device [syz0] on syz1 [ 650.626986][ T30] kauditd_printk_skb: 82 callbacks suppressed [ 650.627000][ T30] audit: type=1400 audit(1738307215.270:12957): avc: denied { read } for pid=83 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 650.654878][ T30] audit: type=1400 audit(1738307215.270:12958): avc: denied { search } for pid=83 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 650.676402][ T30] audit: type=1400 audit(1738307215.270:12959): avc: denied { append } for pid=83 comm="syslogd" name="messages" dev="tmpfs" ino=13 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 650.698686][ T30] audit: type=1400 audit(1738307215.270:12960): avc: denied { open } for pid=83 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=13 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 650.721088][ T30] audit: type=1400 audit(1738307215.270:12961): avc: denied { getattr } for pid=83 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=13 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 650.816229][ T30] audit: type=1400 audit(1738307215.460:12962): avc: denied { confidentiality } for pid=13579 comm="syz.7.4127" lockdown_reason="use of bpf to read kernel RAM" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=lockdown permissive=1 [ 650.845824][T13580] loop7: detected capacity change from 0 to 256 [ 650.869048][ T30] audit: type=1400 audit(1738307215.510:12963): avc: denied { create } for pid=13581 comm="+}[@" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 650.937143][ T30] audit: type=1400 audit(1738307215.580:12964): avc: denied { mounton } for pid=13579 comm="syz.7.4127" path="/407/bus" dev="tmpfs" ino=2214 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 650.962347][T13583] tipc: Started in network mode [ 650.967159][T13583] tipc: Node identity ac14140f, cluster identity 4711 [ 650.974102][T13583] tipc: New replicast peer: 255.255.255.255 [ 650.980049][T13583] tipc: Enabled bearer , priority 10 [ 651.000624][ T30] audit: type=1400 audit(1738307215.610:12965): avc: denied { write } for pid=13581 comm="+}[@" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 651.019729][ T30] audit: type=1400 audit(1738307215.610:12966): avc: denied { mount } for pid=13579 comm="syz.7.4127" name="/" dev="loop7" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 651.168018][T13601] loop0: detected capacity change from 0 to 1024 [ 651.191057][ T630] udevd[630]: symlink '../../loop0' '/dev/disk/by-label/syzkaller.tmp-b7:0' failed: Read-only file system [ 651.207216][T13601] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 651.231582][T13607] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 651.282981][T13601] EXT4-fs (loop0): warning: mounting unchecked fs, running e2fsck is recommended [ 651.299667][T13620] loop3: detected capacity change from 0 to 512 [ 651.314216][T13601] EXT4-fs (loop0): mounted filesystem without journal. Opts: nogrpid,noinit_itable,barrier=0x0000000020000008,dioread_nolock,bsdgroups,min_batch_time=0x0000000000000006,inode_readahead_blks=0x0000000000000001,max_dir_size_kb=0x0000000000000001,,errors=continue. Quota mode: writeback. [ 651.374820][T13628] xt_hashlimit: max too large, truncated to 1048576 [ 651.387705][ T630] udevd[630]: symlink '../../loop3' '/dev/disk/by-label/syzkaller.tmp-b7:3' failed: Read-only file system [ 651.391004][T13620] EXT4-fs (loop3): Ignoring removed bh option [ 651.413306][T13630] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 651.420749][T13630] SELinux: failed to load policy [ 651.439397][ T630] udevd[630]: symlink '../../loop3' '/dev/disk/by-label/syzkaller.tmp-b7:0' failed: Read-only file system [ 651.456319][T13620] EXT4-fs error (device loop3): ext4_quota_enable:6379: comm syz.3.4146: inode #33554432: comm syz.3.4146: iget: illegal inode # [ 651.470722][T13620] EXT4-fs (loop3): Remounting filesystem read-only [ 651.477369][T13620] EXT4-fs error (device loop3): ext4_quota_enable:6382: comm syz.3.4146: Bad quota inode: 33554432, type: 2 [ 651.489247][T13620] EXT4-fs (loop3): Remounting filesystem read-only [ 651.495932][T13620] EXT4-fs warning (device loop3): ext4_enable_quotas:6423: Failed to enable quota tracking (type=2, err=-117, ino=33554432). Please run e2fsck to fix. [ 651.512241][T13620] EXT4-fs (loop3): mount failed [ 651.642460][T13650] loop3: detected capacity change from 0 to 128 [ 651.708207][T13658] SELinux: Context is not valid (left unmapped). [ 651.738548][ T630] udevd[630]: symlink '../../loop3' '/dev/disk/by-uuid/76b65be2-f6da-4727-8c75-0525a5b65a09.tmp-b7:3' failed: Read-only file system [ 651.753453][T13650] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 651.794146][T13650] ext4 filesystem being mounted at /158/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 651.830679][ T630] udevd[630]: symlink '../../loop3' '/dev/disk/by-uuid/76b65be2-f6da-4727-8c75-0525a5b65a09.tmp-b7:3' failed: Read-only file system [ 651.841538][T13660] loop0: detected capacity change from 0 to 8192 [ 651.860575][ T342] udevd[342]: symlink '../../loop0' '/dev/disk/by-label/SYZKALLER.tmp-b7:0' failed: Read-only file system [ 651.888001][T13667] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 651.957626][T13672] loop0: detected capacity change from 0 to 1024 [ 651.975565][T13675] tipc: New replicast peer: 255.255.255.255 [ 651.989253][T13675] tipc: Enabled bearer , priority 10 [ 652.052051][T13672] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (29950!=20869) [ 652.063320][T13683] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4174'. [ 652.064076][ T630] udevd[630]: symlink '../../loop0' '/dev/disk/by-label/syzkaller.tmp-b7:0' failed: Read-only file system [ 652.093565][T13672] EXT4-fs (loop0): invalid journal inode [ 652.099087][T13672] EXT4-fs (loop0): can't get journal size [ 652.104527][ T553] tipc: Node number set to 2886997007 [ 652.114622][T13672] EXT4-fs error (device loop0): ext4_protect_reserved_inode:182: inode #2: comm syz.0.4169: blocks 48-48 from inode overlap system zone [ 652.128948][T13672] EXT4-fs (loop0): failed to initialize system zone (-117) [ 652.136450][T13672] EXT4-fs (loop0): mount failed [ 652.234268][T13697] loop0: detected capacity change from 0 to 2048 [ 652.254289][T13701] SELinux: Context system_u:object_r:hald_log_t:s0 is not valid (left unmapped). [ 652.274620][T13703] syz.8.4183[13703] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 652.274712][T13703] syz.8.4183[13703] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 652.429408][ T630] udevd[630]: symlink '../../loop0' '/dev/disk/by-label/syzkaller.tmp-b7:0' failed: Read-only file system [ 652.429594][T13697] EXT4-fs (loop0): mounted filesystem without journal. Opts: dioread_nolock,minixdf,nolazytime,bsddf,,errors=continue. Quota mode: none. [ 652.467095][T13697] ext4 filesystem being mounted at /156/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 652.593596][T13738] loop0: detected capacity change from 0 to 1024 [ 652.620668][T13738] EXT4-fs (loop0): Ignoring removed oldalloc option [ 652.628941][ T630] udevd[630]: symlink '../../loop0' '/dev/disk/by-label/syzkaller.tmp-b7:0' failed: Read-only file system [ 652.670224][ T630] udevd[630]: symlink '../../loop0' '/dev/disk/by-label/syzkaller.tmp-b7:0' failed: Read-only file system [ 652.700109][T13751] device wg2 entered promiscuous mode [ 652.703928][T13738] EXT4-fs (loop0): mounted filesystem without journal. Opts: stripe=0x0000000000000003,noauto_da_alloc,jqfmt=vfsold,data_err=ignore,noauto_da_alloc,delalloc,resuid=0x0000000000000000,oldalloc,jqfmt=vfsv1,,errors=continue. Quota mode: none. [ 652.767240][T13754] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4205'. [ 652.928709][T13778] loop3: detected capacity change from 0 to 512 [ 653.063994][T13783] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4219'. [ 653.568771][T13808] loop8: detected capacity change from 0 to 4096 [ 653.583797][T13810] syz.0.4232[13810] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 653.583859][T13810] syz.0.4232[13810] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 653.597878][T13810] device pim6reg1 entered promiscuous mode [ 653.657493][T13808] EXT4-fs (loop8): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 653.727754][T13822] loop0: detected capacity change from 0 to 2048 [ 653.860968][T13825] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4238'. [ 653.883541][T13822] [EXT4 FS bs=2048, gc=1, bpg=262144, ipg=32, mo=a800c029, mo2=0002] [ 653.905330][T13822] System zones: 0-7 [ 653.910803][T13822] EXT4-fs (loop0): mounted filesystem without journal. Opts: debug,usrjquota=,errors=remount-ro,dioread_lock,max_batch_time=0x0000000000000008,nodiscard,minixdf,barrier=0x0000000000000000,nombcache,bsddf,. Quota mode: none. [ 653.950876][T13822] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.4237: bg 0: block 234: padding at end of block bitmap is not set [ 653.966258][T13822] EXT4-fs (loop0): Remounting filesystem read-only [ 653.997341][T13838] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4243'. [ 654.065842][T13844] SELinux: policydb version 29203 does not match my version range 15-33 [ 654.078176][T13844] SELinux: failed to load policy [ 654.185723][T13860] SELinux: Context system_u:object_r:var_lib_t:s0 is not valid (left unmapped). [ 654.360545][T13890] loop7: detected capacity change from 0 to 512 [ 654.486692][T13909] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 654.542179][T13914] netlink: 28 bytes leftover after parsing attributes in process `syz.8.4280'. [ 654.972101][T13946] 9pnet: Could not find request transport: rdma [ 655.050360][T13953] loop0: detected capacity change from 0 to 256 [ 655.145540][T13953] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 655.185590][ T2344] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 655.248942][ T2344] hid-generic 0000:0000:0000.0011: hidraw0: HID v0.00 Device [syz1] on syz0 [ 655.566582][ T553] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 655.644968][T13999] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 655.659394][ T30] kauditd_printk_skb: 369 callbacks suppressed [ 655.659412][ T30] audit: type=1400 audit(1738307219.300:13336): avc: denied { read } for pid=14000 comm="syz.5.4319" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 655.688686][ T30] audit: type=1400 audit(1738307219.300:13337): avc: denied { open } for pid=14000 comm="syz.5.4319" path="/dev/snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 655.712757][ T30] audit: type=1400 audit(1738307219.300:13338): avc: denied { ioctl } for pid=14000 comm="syz.5.4319" path="/dev/snapshot" dev="devtmpfs" ino=90 ioctlcmd=0x330e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 655.861549][ T553] usb 4-1: Using ep0 maxpacket: 16 [ 655.925379][ T30] audit: type=1400 audit(1738307219.570:13339): avc: denied { relabelfrom } for pid=14015 comm="syz.5.4326" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 655.945785][ T30] audit: type=1400 audit(1738307219.570:13340): avc: denied { relabelto } for pid=14015 comm="syz.5.4326" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 656.013513][ T553] usb 4-1: config 0 has no interfaces? [ 656.018949][ T553] usb 4-1: New USB device found, idVendor=056a, idProduct=0029, bcdDevice= 0.00 [ 656.031531][ T553] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 656.049250][ T553] usb 4-1: config 0 descriptor?? [ 656.061731][T14022] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4329'. [ 656.189105][T14036] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4336'. [ 656.294862][ T553] usb 4-1: USB disconnect, device number 34 [ 656.315106][T14040] SELinux: security_context_str_to_sid(st) failed for (dev ?, type ?) errno=-22 [ 656.344785][T14044] SELinux: Context : is not valid (left unmapped). [ 656.361848][ T30] audit: type=1400 audit(1738307220.010:13341): avc: denied { relabelto } for pid=14043 comm="syz.0.4339" name="rdma.current" dev="tmpfs" ino=1004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon=":" [ 656.413807][ T30] audit: type=1400 audit(1738307220.030:13342): avc: denied { associate } for pid=14043 comm="syz.0.4339" name="rdma.current" dev="tmpfs" ino=1004 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon=":" [ 656.425627][T14046] loop8: detected capacity change from 0 to 1024 [ 656.448410][ T30] audit: type=1400 audit(1738307220.040:13343): avc: denied { unlink } for pid=11705 comm="syz-executor" name="rdma.current" dev="tmpfs" ino=1004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon=":" [ 656.477304][ T630] udevd[630]: symlink '../../loop8' '/dev/disk/by-label/syzkaller.tmp-b7:8' failed: Read-only file system [ 656.489270][T14046] EXT4-fs (loop8): Ignoring removed bh option [ 656.491177][ T30] audit: type=1326 audit(1738307220.130:13344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14051 comm="syz.7.4343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda19903da9 code=0x7ffc0000 [ 656.496477][T14046] EXT4-fs (loop8): Ignoring removed orlov option [ 656.519559][ T30] audit: type=1326 audit(1738307220.130:13345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14051 comm="syz.7.4343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda19903da9 code=0x7ffc0000 [ 656.526185][T14046] EXT4-fs (loop8): Ignoring removed nomblk_io_submit option [ 656.564443][T14046] EXT4-fs (loop8): mounted filesystem without journal. Opts: resgid=0x0000000000000000,bsddf,sysvgroups,bh,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,nomblk_io_submit,,errors=continue. Quota mode: none. [ 656.592882][ T630] udevd[630]: symlink '../../loop8' '/dev/disk/by-label/syzkaller.tmp-b7:8' failed: Read-only file system [ 656.826995][T14075] loop8: detected capacity change from 0 to 512 [ 656.847849][ T630] udevd[630]: symlink '../../loop8' '/dev/disk/by-label/syzkaller.tmp-b7:8' failed: Read-only file system [ 656.869341][T14075] EXT4-fs (loop8): feature flags set on rev 0 fs, running e2fsck is recommended [ 656.900016][T14075] EXT4-fs warning (device loop8): ext4_update_dynamic_rev:1054: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 656.922627][T14075] EXT4-fs (loop8): 1 truncate cleaned up [ 656.929149][T14075] EXT4-fs (loop8): mounted filesystem without journal. Opts: noinit_itable,block_validity,sysvgroups,,errors=continue. Quota mode: writeback. [ 656.950708][ T630] udevd[630]: symlink '../../loop8' '/dev/disk/by-label/syzkaller.tmp-b7:8' failed: Read-only file system [ 656.965860][T14085] device pim6reg1 entered promiscuous mode [ 657.033603][T14089] loop3: detected capacity change from 0 to 2048 [ 657.073008][T14089] Alternate GPT is invalid, using primary GPT. [ 657.079352][T14089] loop3: p1 p2 p3 [ 657.141167][T14099] loop8: detected capacity change from 0 to 512 [ 657.157380][ T630] udevd[630]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 657.157725][ T631] udevd[631]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 657.177664][ T335] udevd[335]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 657.182525][T14099] EXT4-fs (loop8): mounted filesystem without journal. Opts: nouid32,,errors=continue. Quota mode: none. [ 657.189780][ T342] udevd[342]: symlink '../../loop8' '/dev/disk/by-label/syzkaller.tmp-b7:8' failed: Read-only file system [ 657.279110][T14106] loop3: detected capacity change from 0 to 512 [ 657.480940][T14130] loop7: detected capacity change from 0 to 1024 [ 657.526652][T14130] EXT4-fs (loop7): Ignoring removed nobh option [ 657.535053][ T630] udevd[630]: symlink '../../loop7' '/dev/disk/by-label/syzk\x06.tmp-b7:7' failed: Read-only file system [ 657.577033][T14130] EXT4-fs (loop7): mounted filesystem without journal. Opts: minixdf,bsddf,barrier=0x00000000000001ff,dioread_lock,nodelalloc,lazytime,lazytime,noblock_validity,nobh,noquota,delalloc,,errors=continue. Quota mode: none. [ 657.605325][ T630] udevd[630]: symlink '../../loop7' '/dev/disk/by-label/syzk\x06.tmp-b7:7' failed: Read-only file system [ 657.735350][ T553] hid-generic 0000:0000:0000.0012: unknown main item tag 0x7 [ 657.749689][ T553] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 657.769069][ T553] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 657.778266][T14162] loop3: detected capacity change from 0 to 4096 [ 657.786993][T14164] loop0: detected capacity change from 0 to 1024 [ 657.800463][ T553] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 657.815823][ T553] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 657.830810][ T553] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 657.845485][T14162] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 657.847094][ T553] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 657.863177][T14162] EXT4-fs (loop3): re-mounted. Opts: (null). Quota mode: writeback. [ 657.872198][T14164] EXT4-fs (loop0): Ignoring removed nomblk_io_submit option [ 657.879808][ T553] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 657.888321][ T553] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 657.896177][ T553] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 657.904375][ T553] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 657.912430][ T553] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 657.913427][T14164] EXT4-fs (loop0): mounted filesystem without journal. Opts: minixdf,bsddf,barrier=0x00000000000001ff,data_err=abort,debug_want_extra_isize=0x0000000000000080,lazytime,nodelalloc,noblock_validity,nomblk_io_submit,,errors=continue. Quota mode: none. [ 657.919821][ T553] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 657.951686][ T553] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 657.959032][ T553] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 657.966900][ T553] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 657.974966][ T553] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 657.982665][ T553] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 657.993387][ T553] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 658.008566][ T553] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 658.016766][ T553] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 658.024339][ T553] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 658.031917][ T553] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 658.039250][ T553] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 658.046941][ T553] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 658.054776][ T553] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 658.062351][ T553] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 658.069678][ T553] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 658.077603][ T553] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 658.085142][ T553] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 658.102429][ T553] hid-generic 0000:0000:0000.0012: hidraw0: HID v0.00 Device [syz0] on syz1 [ 658.199939][T14180] loop8: detected capacity change from 0 to 2048 [ 658.361801][T14191] loop8: detected capacity change from 0 to 512 [ 658.411998][T14191] EXT4-fs (loop8): quotafile must be on filesystem root [ 658.490235][T14203] loop3: detected capacity change from 0 to 128 [ 658.651851][T14213] loop3: detected capacity change from 0 to 512 [ 658.697126][T14217] loop8: detected capacity change from 0 to 512 [ 658.707145][T14213] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 658.715242][T14213] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8802c01c, mo2=0002] [ 658.724906][T14213] EXT4-fs (loop3): orphan cleanup on readonly fs [ 658.727063][T14224] loop7: detected capacity change from 0 to 512 [ 658.737803][T14213] EXT4-fs warning (device loop3): ext4_block_to_path:107: block 3279949761 > max in inode 13 [ 658.748033][T14213] EXT4-fs warning (device loop3): ext4_block_to_path:107: block 3279949762 > max in inode 13 [ 658.761309][T14213] EXT4-fs (loop3): 1 truncate cleaned up [ 658.767371][T14213] EXT4-fs (loop3): mounted filesystem without journal. Opts: commit=0x0000000000000000,noblock_validity,user_xattr,,errors=continue. Quota mode: none. [ 658.785682][T14213] EXT4-fs warning (device loop3): dx_probe:893: inode #2: comm syz.3.4410: dx entry: limit 65535 != root limit 120 [ 658.801576][T14213] EXT4-fs warning (device loop3): dx_probe:966: inode #2: comm syz.3.4410: Corrupt directory, running e2fsck is recommended [ 658.823249][T14224] EXT4-fs error (device loop7): ext4_orphan_get:1401: inode #15: comm syz.7.4416: casefold flag without casefold feature [ 658.836495][T14217] EXT4-fs error (device loop8): ext4_xattr_inode_iget:404: comm syz.8.4414: inode #1: comm syz.8.4414: iget: illegal inode # [ 658.855314][T14224] EXT4-fs error (device loop7): ext4_orphan_get:1406: comm syz.7.4416: couldn't read orphan inode 15 (err -117) [ 658.867342][T14217] EXT4-fs error (device loop8): ext4_xattr_inode_iget:409: comm syz.8.4414: error while reading EA inode 1 err=-117 [ 658.880775][T14217] EXT4-fs error (device loop8): ext4_xattr_inode_iget:404: comm syz.8.4414: inode #1: comm syz.8.4414: iget: illegal inode # [ 658.882263][T14224] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 658.917824][T14217] EXT4-fs error (device loop8): ext4_xattr_inode_iget:409: comm syz.8.4414: error while reading EA inode 1 err=-117 [ 658.931972][T14217] EXT4-fs (loop8): 1 orphan inode deleted [ 658.944158][T14217] EXT4-fs (loop8): mounted filesystem without journal. Opts: usrjquota=,block_validity,journal_dev=0x0000000000000dcc,bsdgroups,resgid=0x0000000000000000,minixdf,usrjquota=,debug_want_extra_isize=0x000000000000005c,data_err=ignore,dioread_lock,,errors=continue. Quota mode: none. [ 659.038139][T14246] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4423'. [ 659.108325][T14254] loop3: detected capacity change from 0 to 512 [ 659.137162][T14254] EXT4-fs (loop3): Ignoring removed nobh option [ 659.152581][T14254] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 659.270385][T14254] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,nobh,max_batch_time=0x00000000000003ff,nojournal_checksum,usrquota,dioread_nolock,nodiscard,. Quota mode: writeback. [ 659.290151][T14254] ext4 filesystem being mounted at /217/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 659.315910][T14254] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.4427: bg 0: block 224: padding at end of block bitmap is not set [ 659.352835][T14254] EXT4-fs (loop3): Remounting filesystem read-only [ 659.717212][T14286] loop8: detected capacity change from 0 to 512 [ 659.728309][T14284] rtc_cmos 00:00: Alarms can be up to one day in the future [ 659.756376][T14290] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4444'. [ 659.765315][T14290] netlink: 52 bytes leftover after parsing attributes in process `syz.3.4444'. [ 659.789510][T14290] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4444'. [ 659.889635][T14303] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 659.904725][T14286] EXT4-fs (loop8): mounted filesystem without journal. Opts: nolazytime,bsddf,,errors=continue. Quota mode: writeback. [ 659.925120][T14286] ext4 filesystem being mounted at /187/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 660.366766][ T553] rtc_cmos 00:00: Alarms can be up to one day in the future [ 660.395721][ T553] rtc_cmos 00:00: Alarms can be up to one day in the future [ 660.422968][ T553] rtc_cmos 00:00: Alarms can be up to one day in the future [ 660.431412][ T553] rtc_cmos 00:00: Alarms can be up to one day in the future [ 660.446392][ T553] rtc rtc0: __rtc_set_alarm: err=-22 [ 660.486877][T14325] loop0: detected capacity change from 0 to 512 [ 660.497388][T14325] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 660.499940][T14327] tipc: Started in network mode [ 660.510376][T14325] EXT4-fs (loop0): 1 truncate cleaned up [ 660.512663][T14327] tipc: Node identity , cluster identity 4711 [ 660.517322][T14325] EXT4-fs (loop0): mounted filesystem without journal. Opts: i_version,noload,debug_want_extra_isize=0x0000000000000068,lazytime,noinit_itable,usrquota,,errors=continue. Quota mode: writeback. [ 660.524396][T14327] tipc: Failed to obtain node identity [ 660.554254][T14327] tipc: Enabling of bearer rejected, failed to enable media [ 660.667954][ T30] kauditd_printk_skb: 92 callbacks suppressed [ 660.667974][ T30] audit: type=1400 audit(1738307224.310:13438): avc: denied { getopt } for pid=14337 comm="syz.8.4464" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 660.718752][T14341] device syzkaller0 entered promiscuous mode [ 660.724716][ T30] audit: type=1326 audit(1738307224.340:13439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14329 comm="syz.5.4462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e85e8bda9 code=0x7fc00000 [ 660.765000][T14344] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4467'. [ 660.788552][ T30] audit: type=1326 audit(1738307224.340:13440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14329 comm="syz.5.4462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=208 compat=0 ip=0x7f5e85e8bda9 code=0x7fc00000 [ 660.825089][ T30] audit: type=1326 audit(1738307224.340:13441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14329 comm="syz.5.4462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e85e8bda9 code=0x7fc00000 [ 660.881109][ T9079] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 660.888950][ T30] audit: type=1326 audit(1738307224.340:13442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14329 comm="syz.5.4462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e85e8bda9 code=0x7fc00000 [ 660.938909][ T30] audit: type=1326 audit(1738307224.340:13443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14329 comm="syz.5.4462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e85e8bda9 code=0x7fc00000 [ 660.980261][T14363] syz.0.4475[14363] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 660.980374][T14363] syz.0.4475[14363] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 661.034411][ T30] audit: type=1326 audit(1738307224.340:13444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14329 comm="syz.5.4462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e85e8bda9 code=0x7fc00000 [ 661.091374][T14372] usb usb8: usbfs: process 14372 (syz.5.4478) did not claim interface 2 before use [ 661.110522][ T30] audit: type=1326 audit(1738307224.340:13445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14329 comm="syz.5.4462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e85e8bda9 code=0x7fc00000 [ 661.141827][ T30] audit: type=1326 audit(1738307224.340:13446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14329 comm="syz.5.4462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e85e8bda9 code=0x7fc00000 [ 661.169311][ T30] audit: type=1326 audit(1738307224.340:13447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14329 comm="syz.5.4462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e85e8bda9 code=0x7fc00000 [ 661.570514][T14380] loop3: detected capacity change from 0 to 1024 [ 661.633933][T14380] EXT4-fs (loop3): Ignoring removed nobh option [ 661.646769][ T630] udevd[630]: symlink '../../loop3' '/dev/disk/by-label/syzkal\xff\xff\xff\xff\xff\xff\xff\x7f.tmp-b7:3' failed: Read-only file system [ 661.675374][T14380] EXT4-fs error (device loop3): ext4_ext_check_inode:501: inode #11: comm syz.3.4483: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 661.723630][T14380] EXT4-fs error (device loop3): ext4_orphan_get:1406: comm syz.3.4483: couldn't read orphan inode 11 (err -117) [ 661.747419][T14405] loop7: detected capacity change from 0 to 512 [ 661.755162][T14380] EXT4-fs (loop3): mounted filesystem without journal. Opts: sysvgroups,noload,nobh,noload,journal_dev=0x0000000000000004,norecovery,errors=continue,quota,,errors=continue. Quota mode: writeback. [ 661.779292][ T631] udevd[631]: symlink '../../loop7' '/dev/disk/by-label/syzkaller.tmp-b7:7' failed: Read-only file system [ 661.793028][T14405] EXT4-fs (loop7): feature flags set on rev 0 fs, running e2fsck is recommended [ 661.802992][T14380] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:476: comm syz.3.4483: Invalid block bitmap block 0 in block_group 0 [ 661.820587][ T630] udevd[630]: symlink '../../loop3' '/dev/disk/by-label/syzkal\xff\xff\xff\xff\xff\xff\xff\x7f.tmp-b7:3' failed: Read-only file system [ 661.840924][T14380] EXT4-fs error (device loop3): ext4_acquire_dquot:6188: comm syz.3.4483: Failed to acquire dquot type 0 [ 661.883227][T14405] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 661.908179][ T630] udevd[630]: symlink '../../loop7' '/dev/disk/by-label/syzkaller.tmp-b7:7' failed: Read-only file system [ 661.947118][T14405] EXT4-fs error (device loop7): ext4_do_update_inode:5205: inode #2: comm syz.7.4493: corrupted inode contents [ 661.958974][T14405] EXT4-fs error (device loop7): ext4_dirty_inode:6041: inode #2: comm syz.7.4493: mark_inode_dirty error [ 661.985882][T14405] EXT4-fs error (device loop7): ext4_do_update_inode:5205: inode #2: comm syz.7.4493: corrupted inode contents [ 662.114787][T14436] syz.7.4506[14436] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 662.114884][T14436] syz.7.4506[14436] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 662.167597][T14441] loop7: detected capacity change from 0 to 128 [ 662.616851][T14484] ------------[ cut here ]------------ [ 662.629402][T14484] trace type BPF program uses run-time allocation [ 662.636421][T14484] WARNING: CPU: 1 PID: 14484 at kernel/bpf/verifier.c:11701 check_map_prog_compatibility+0x6f1/0x890 [ 662.647490][T14484] Modules linked in: [ 662.651267][T14484] CPU: 1 PID: 14484 Comm: syz.7.4528 Not tainted 5.15.176-syzkaller-00066-gd1a25a6a4b3b #0 [ 662.664858][T14484] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 662.683028][T14484] RIP: 0010:check_map_prog_compatibility+0x6f1/0x890 [ 662.689915][T14484] Code: db e9 f9 fc ff ff e8 ee 29 ed ff 31 db e9 ed fc ff ff e8 e2 29 ed ff c6 05 30 51 a3 05 01 48 c7 c7 40 f2 87 85 e8 df 6f be ff <0f> 0b e9 5a fb ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 84 f9 ff [ 662.711046][T14491] netlink: 96 bytes leftover after parsing attributes in process `syz.7.4528'. [ 662.726716][T14484] RSP: 0018:ffffc90000e07328 EFLAGS: 00010246 [ 662.734622][T14484] RAX: c5b7e8d89c686f00 RBX: 0000000000000001 RCX: 0000000000080000 [ 662.742741][T14484] RDX: ffffc9000576b000 RSI: 0000000000000a27 RDI: 0000000000000a28 [ 662.750751][T14484] RBP: ffffc90000e07370 R08: ffffffff8157a565 R09: ffffed103ee265e8 [ 662.759167][T14484] R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000000000011 [ 662.767401][T14484] R13: ffff88810de76800 R14: ffffc90000189000 R15: dffffc0000000000 [ 662.781575][T14484] FS: 00007fda17f6e6c0(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 662.790577][T14484] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 662.797521][T14484] CR2: 00007fff195c27a8 CR3: 0000000136618000 CR4: 00000000003506b0 [ 662.806711][T14484] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 662.820968][T14484] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 662.835005][T14484] Call Trace: [ 662.838126][T14484] [ 662.853989][T14484] ? show_regs+0x58/0x60 [ 662.858092][T14484] ? __warn+0x160/0x2f0 [ 662.868746][T14484] ? check_map_prog_compatibility+0x6f1/0x890 [ 662.883481][T14484] ? report_bug+0x3d9/0x5b0 [ 662.894700][T14484] ? check_map_prog_compatibility+0x6f1/0x890 [ 662.900639][T14484] ? handle_bug+0x41/0x70 [ 662.911131][T14484] ? exc_invalid_op+0x1b/0x50 [ 662.917925][T14484] ? asm_exc_invalid_op+0x1b/0x20 [ 662.923279][T14484] ? __wake_up_klogd+0xd5/0x110 [ 662.928084][T14484] ? check_map_prog_compatibility+0x6f1/0x890 [ 662.934397][T14484] ? check_map_prog_compatibility+0x6f1/0x890 [ 662.940464][T14484] resolve_pseudo_ldimm64+0x682/0x1240 [ 662.946386][T14484] ? check_attach_btf_id+0xef0/0xef0 [ 662.952253][T14484] ? __mark_reg_known+0x1b0/0x1b0 [ 662.957334][T14484] ? security_capable+0x87/0xb0 [ 662.962870][T14484] bpf_check+0x3190/0x12c60 [ 662.967321][T14484] ? is_bpf_text_address+0x172/0x190 [ 662.973817][T14484] ? stack_trace_save+0x1c0/0x1c0 [ 662.978922][T14484] ? __kernel_text_address+0x9b/0x110 [ 662.984589][T14484] ? unwind_get_return_address+0x4d/0x90 [ 662.990209][T14484] ? bpf_get_btf_vmlinux+0x60/0x60 [ 662.997406][T14484] ? arch_stack_walk+0xf3/0x140 [ 663.002595][T14484] ? stack_trace_save+0x113/0x1c0 [ 663.007644][T14484] ? stack_trace_snprint+0xf0/0xf0 [ 663.013657][T14484] ? stack_trace_snprint+0xf0/0xf0 [ 663.018879][T14484] ? __stack_depot_save+0x34/0x470 [ 663.024556][T14484] ? ____kasan_kmalloc+0xed/0x110 [ 663.029591][T14484] ? ____kasan_kmalloc+0xdb/0x110 [ 663.035013][T14484] ? __kasan_kmalloc+0x9/0x10 [ 663.039609][T14484] ? kmem_cache_alloc_trace+0x11a/0x270 [ 663.045680][T14484] ? selinux_bpf_prog_alloc+0x51/0x140 [ 663.053255][T14484] ? security_bpf_prog_alloc+0x62/0x90 [ 663.058804][T14484] ? bpf_prog_load+0x9ee/0x1b50 [ 663.064365][T14484] ? __sys_bpf+0x4bc/0x760 [ 663.068741][T14484] ? __x64_sys_bpf+0x7c/0x90 [ 663.073849][T14484] ? x64_sys_call+0x87f/0x9a0 [ 663.078483][T14484] ? do_syscall_64+0x3b/0xb0 [ 663.083970][T14484] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 663.093249][T14484] ? __kasan_kmalloc+0x9/0x10 [ 663.104580][T14484] ? memset+0x35/0x40 [ 663.118013][T14484] ? bpf_obj_name_cpy+0x196/0x1e0 [ 663.124222][T14484] bpf_prog_load+0x12ac/0x1b50 [ 663.130935][T14484] ? map_freeze+0x370/0x370 [ 663.136273][T14484] ? selinux_bpf+0xcb/0x100 [ 663.140765][T14484] ? security_bpf+0x82/0xb0 [ 663.153014][T14484] __sys_bpf+0x4bc/0x760 [ 663.157320][T14484] ? bpf_link_show_fdinfo+0x300/0x300 [ 663.163108][T14484] ? __kasan_check_write+0x14/0x20 [ 663.168501][T14484] ? switch_fpu_return+0x15f/0x2e0 [ 663.173831][T14484] __x64_sys_bpf+0x7c/0x90 [ 663.180978][T14484] x64_sys_call+0x87f/0x9a0 [ 663.185996][T14484] do_syscall_64+0x3b/0xb0 [ 663.190299][T14484] ? clear_bhb_loop+0x35/0x90 [ 663.196292][T14484] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 663.206699][T14484] RIP: 0033:0x7fda19903da9 [ 663.213985][T14484] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 663.259279][T14484] RSP: 002b:00007fda17f6e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 663.278208][T14484] RAX: ffffffffffffffda RBX: 00007fda19b1cfa0 RCX: 00007fda19903da9 [ 663.302106][T14484] RDX: 0000000000000094 RSI: 0000000020000540 RDI: 0000000000000005 [ 663.327469][T14484] RBP: 00007fda199852a0 R08: 0000000000000000 R09: 0000000000000000 [ 663.336160][T14484] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 663.344516][T14484] R13: 0000000000000000 R14: 00007fda19b1cfa0 R15: 00007fff2b181908 [ 663.358711][T14484] [ 663.361789][T14484] ---[ end trace 0e14a7e6081e5aeb ]--- [ 663.417495][T14541] loop3: detected capacity change from 0 to 2048 [ 663.448635][T14551] loop8: detected capacity change from 0 to 2048 [ 663.468308][ T630] udevd[630]: symlink '../../loop3' '/dev/disk/by-label/syzkaller.tmp-b7:3' failed: Read-only file system [ 663.482364][T14541] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 663.523071][T14551] EXT4-fs (loop8): Ignoring removed mblk_io_submit option [ 663.535153][ T630] udevd[630]: symlink '../../loop8' '/dev/disk/by-label/syzkaller.tmp-b7:8' failed: Read-only file system [ 663.551061][T14551] EXT4-fs (loop8): mounted filesystem without journal. Opts: data_err=ignore,mblk_io_submit,i_version,,errors=continue. Quota mode: none. [ 663.573043][ T630] udevd[630]: symlink '../../loop8' '/dev/disk/by-label/syzkaller.tmp-b7:8' failed: Read-only file system [ 663.591729][ T297] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 663.841535][ T297] usb 1-1: Using ep0 maxpacket: 32 [ 663.946930][T14594] loop7: detected capacity change from 0 to 4096 [ 663.961607][ T297] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 663.973184][ T297] usb 1-1: config 0 has no interfaces? [ 663.978498][ T297] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 663.987548][ T297] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 664.003926][ T297] usb 1-1: config 0 descriptor?? [ 664.005031][ T630] udevd[630]: symlink '../../loop7' '/dev/disk/by-label/syzkaller.tmp-b7:7' failed: Read-only file system [ 664.027160][T14594] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 664.098578][T14611] netlink: 'syz.8.4593': attribute type 4 has an invalid length. [ 664.120367][T14611] netlink: 'syz.8.4593': attribute type 4 has an invalid length. [ 664.143875][T14615] loop8: detected capacity change from 0 to 512 [ 664.180476][T14615] EXT4-fs error (device loop8): ext4_xattr_inode_iget:404: comm syz.8.4586: inode #1: comm syz.8.4586: iget: illegal inode # [ 664.194007][T14615] EXT4-fs error (device loop8): ext4_xattr_inode_iget:409: comm syz.8.4586: error while reading EA inode 1 err=-117 [ 664.212421][T14615] EXT4-fs error (device loop8): ext4_xattr_inode_iget:404: comm syz.8.4586: inode #1: comm syz.8.4586: iget: illegal inode # [ 664.213726][ T630] udevd[630]: symlink '../../loop8' '/dev/disk/by-label/syzkaller.tmp-b7:8' failed: Read-only file system [ 664.232020][T14615] EXT4-fs error (device loop8): ext4_xattr_inode_iget:409: comm syz.8.4586: error while reading EA inode 1 err=-117 [ 664.248987][T14615] EXT4-fs (loop8): 1 orphan inode deleted [ 664.254611][T14615] EXT4-fs (loop8): mounted filesystem without journal. Opts: usrjquota=,block_validity,journal_dev=0x0000000000000dcc,bsdgroups,resgid=0x0000000000000000,minixdf,usrjquota=,debug_want_extra_isize=0x000000000000005c,data_err=ignore,dioread_lock,,errors=continue. Quota mode: none. [ 664.267676][ T297] usb 1-1: USB disconnect, device number 37 [ 664.288803][ T342] udevd[342]: symlink '../../loop8' '/dev/disk/by-label/syzkaller.tmp-b7:8' failed: Read-only file system [ 664.361898][ C0] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 664.800054][T14626] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4590'. [ 664.809900][T14626] netlink: 84 bytes leftover after parsing attributes in process `syz.5.4590'. [ 665.066765][T14648] loop8: detected capacity change from 0 to 2048 [ 665.102284][T14648] EXT4-fs (loop8): Ignoring removed nobh option [ 665.128631][T14648] EXT4-fs (loop8): mounted filesystem without journal. Opts: nobh,nodioread_nolock,,errors=continue. Quota mode: none. [ 665.150121][ T553] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 665.159532][ T553] hid-generic 0000:0000:0000.0013: hidraw0: HID v0.00 Device [syz1] on syz0 [ 665.165932][T14648] EXT4-fs (loop8): shut down requested (0) [ 665.223393][T14658] loop8: detected capacity change from 0 to 4096 [ 665.293605][T14658] EXT4-fs (loop8): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 665.421571][ T8319] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 665.671569][ T8319] usb 4-1: Using ep0 maxpacket: 16 [ 665.729460][ T30] kauditd_printk_skb: 769 callbacks suppressed [ 665.729476][ T30] audit: type=1326 audit(1738307229.370:14215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14632 comm="syz.0.4594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3aed74da9 code=0x7ffc0000 [ 665.773775][ T30] audit: type=1326 audit(1738307229.420:14216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14662 comm="syz.0.4605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3aed74da9 code=0x7ffc0000 [ 665.806009][ T30] audit: type=1326 audit(1738307229.450:14217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14662 comm="syz.0.4605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb3aed74da9 code=0x7ffc0000 [ 665.841636][ T8319] usb 4-1: config 0 has no interfaces? [ 665.849819][ T8319] usb 4-1: New USB device found, idVendor=056a, idProduct=0029, bcdDevice= 0.00 [ 665.861595][ T30] audit: type=1326 audit(1738307229.450:14218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14662 comm="syz.0.4605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3aed74da9 code=0x7ffc0000 [ 665.898214][ T30] audit: type=1326 audit(1738307229.450:14219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14662 comm="syz.0.4605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb3aed74da9 code=0x7ffc0000 [ 665.929069][ T8319] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 665.942135][T14673] loop7: detected capacity change from 0 to 512 [ 665.951669][ T30] audit: type=1326 audit(1738307229.450:14220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14662 comm="syz.0.4605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3aed74da9 code=0x7ffc0000 [ 665.995133][ T30] audit: type=1326 audit(1738307229.450:14221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14662 comm="syz.0.4605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb3aed74da9 code=0x7ffc0000 [ 665.998305][ T8319] usb 4-1: config 0 descriptor?? [ 666.031742][ T30] audit: type=1326 audit(1738307229.450:14222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14662 comm="syz.0.4605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3aed74da9 code=0x7ffc0000 [ 666.062413][T14673] EXT4-fs error (device loop7): ext4_xattr_inode_iget:404: comm syz.7.4607: inode #1: comm syz.7.4607: iget: illegal inode # [ 666.081886][T14673] EXT4-fs error (device loop7): ext4_xattr_inode_iget:409: comm syz.7.4607: error while reading EA inode 1 err=-117 [ 666.102835][T14673] EXT4-fs error (device loop7): ext4_xattr_inode_iget:404: comm syz.7.4607: inode #1: comm syz.7.4607: iget: illegal inode # [ 666.120933][ T30] audit: type=1326 audit(1738307229.450:14223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14662 comm="syz.0.4605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb3aed74da9 code=0x7ffc0000 [ 666.152137][T14673] EXT4-fs error (device loop7): ext4_xattr_inode_iget:409: comm syz.7.4607: error while reading EA inode 1 err=-117 [ 666.165895][ T30] audit: type=1326 audit(1738307229.450:14224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14662 comm="syz.0.4605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3aed74da9 code=0x7ffc0000 [ 666.168709][T14673] EXT4-fs (loop7): 1 orphan inode deleted [ 666.204421][T14673] EXT4-fs (loop7): mounted filesystem without journal. Opts: usrjquota=,block_validity,journal_dev=0x0000000000000dcc,bsdgroups,resgid=0x0000000000000000,minixdf,usrjquota=,debug_want_extra_isize=0x000000000000005c,data_err=ignore,dioread_lock,,errors=continue. Quota mode: none. [ 666.307025][T14683] loop0: detected capacity change from 0 to 512 [ 666.321187][ T8319] usb 4-1: USB disconnect, device number 35 [ 666.345351][T14683] EXT4-fs (loop0): mounted filesystem without journal. Opts: nolazytime,bsddf,,errors=continue. Quota mode: writeback. [ 666.357913][T14683] ext4 filesystem being mounted at /231/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 666.390088][T14690] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 666.709190][T14701] loop8: detected capacity change from 0 to 8192 [ 666.795929][ T630] udevd[630]: symlink '../../loop0' '/dev/disk/by-label/syzkaller.tmp-b7:7' failed: Read-only file system [ 666.814861][ T403] hid-generic 0000:0000:0004.0014: unknown main item tag 0x0 [ 666.827379][ T403] hid-generic 0000:0000:0004.0014: hidraw0: HID v0.00 Device [syz0] on syz1 [ 666.930730][T14723] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4630'. [ 667.007600][T14730] loop8: detected capacity change from 0 to 512 [ 667.023724][ T630] udevd[630]: symlink '../../loop8' '/dev/disk/by-label/syzkaller.tmp-b7:8' failed: Read-only file system [ 667.026478][T14730] EXT4-fs error (device loop8): ext4_xattr_inode_iget:404: comm syz.8.4633: inode #1: comm syz.8.4633: iget: illegal inode # [ 667.048149][T14730] EXT4-fs error (device loop8): ext4_xattr_inode_iget:409: comm syz.8.4633: error while reading EA inode 1 err=-117 [ 667.060890][T14730] EXT4-fs error (device loop8): ext4_xattr_inode_iget:404: comm syz.8.4633: inode #1: comm syz.8.4633: iget: illegal inode # [ 667.082093][T14730] EXT4-fs error (device loop8): ext4_xattr_inode_iget:409: comm syz.8.4633: error while reading EA inode 1 err=-117 [ 667.096154][T14730] EXT4-fs (loop8): 1 orphan inode deleted [ 667.101783][T14730] EXT4-fs (loop8): mounted filesystem without journal. Opts: usrjquota=,block_validity,journal_dev=0x0000000000000dcc,bsdgroups,resgid=0x0000000000000000,minixdf,usrjquota=,debug_want_extra_isize=0x000000000000005c,data_err=ignore,dioread_lock,,errors=continue. Quota mode: none. [ 667.146531][ T630] udevd[630]: symlink '../../loop8' '/dev/disk/by-label/syzkaller.tmp-b7:8' failed: Read-only file system [ 667.211339][ T630] udevd[630]: symlink '../../loop8' '/dev/disk/by-label/syzkaller.tmp-b7:0' failed: Read-only file system [ 667.290440][T14744] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 667.400672][T14758] loop0: detected capacity change from 0 to 1024 [ 667.416232][ T630] udevd[630]: symlink '../../loop0' '/dev/disk/by-label/syzkaller.tmp-b7:0' failed: Read-only file system [ 667.434994][T14758] EXT4-fs error (device loop0): ext4_acquire_dquot:6188: comm syz.0.4646: Failed to acquire dquot type 0 [ 667.455109][T14758] EXT4-fs error (device loop0): mb_free_blocks:1865: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 667.469483][T14758] EXT4-fs error (device loop0): ext4_do_update_inode:5205: inode #13: comm syz.0.4646: corrupted inode contents [ 667.481463][T14758] EXT4-fs error (device loop0): ext4_dirty_inode:6041: inode #13: comm syz.0.4646: mark_inode_dirty error [ 667.495993][T14758] EXT4-fs error (device loop0): ext4_do_update_inode:5205: inode #13: comm syz.0.4646: corrupted inode contents [ 667.587227][T14758] EXT4-fs error (device loop0): __ext4_ext_dirty:183: inode #13: comm syz.0.4646: mark_inode_dirty error [ 667.604874][T14758] EXT4-fs error (device loop0): ext4_do_update_inode:5205: inode #13: comm syz.0.4646: corrupted inode contents [ 667.626473][T14758] EXT4-fs error (device loop0) in ext4_orphan_del:305: Corrupt filesystem [ 667.645237][T14758] EXT4-fs error (device loop0): ext4_do_update_inode:5205: inode #13: comm syz.0.4646: corrupted inode contents [ 667.665129][T14758] EXT4-fs error (device loop0): ext4_truncate:4303: inode #13: comm syz.0.4646: mark_inode_dirty error [ 667.715869][T14758] EXT4-fs error (device loop0) in ext4_process_orphan:347: Corrupt filesystem [ 667.803017][T14758] EXT4-fs (loop0): 1 truncate cleaned up [ 667.808557][T14758] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 667.838329][ T630] udevd[630]: symlink '../../loop0' '/dev/disk/by-label/syzkaller.tmp-b7:0' failed: Read-only file system [ 667.898937][ T342] udevd[342]: symlink '../../loop8' '/dev/disk/by-label/syzkaller.tmp-b7:0' failed: Read-only file system [ 667.925365][T14768] loop3: detected capacity change from 0 to 2048 [ 667.933988][T14771] loop0: detected capacity change from 0 to 1024 [ 667.941899][T14771] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 667.950142][T14771] EXT4-fs (loop0): orphan cleanup on readonly fs [ 667.957608][T14771] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5837: Corrupt filesystem [ 667.967680][T14771] EXT4-fs (loop0): Remounting filesystem read-only [ 667.980656][ T342] udevd[342]: symlink '../../loop3' '/dev/disk/by-label/syzkaller.tmp-b7:3' failed: Read-only file system [ 667.987532][T14771] EXT4-fs error (device loop0): ext4_dirty_inode:6041: inode #3: comm syz.0.4650: mark_inode_dirty error [ 668.003816][T14771] EXT4-fs (loop0): Remounting filesystem read-only [ 668.010777][T14771] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:476: comm syz.0.4650: Invalid block bitmap block 3 in block_group 0 [ 668.026262][T14771] EXT4-fs (loop0): Remounting filesystem read-only [ 668.033711][T14768] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 668.044216][T14771] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5837: Corrupt filesystem [ 668.058070][T14771] EXT4-fs (loop0): Remounting filesystem read-only [ 668.067385][ T630] udevd[630]: symlink '../../loop3' '/dev/disk/by-label/syzkaller.tmp-b7:3' failed: Read-only file system [ 668.069708][T14771] EXT4-fs error (device loop0): ext4_dirty_inode:6041: inode #3: comm syz.0.4650: mark_inode_dirty error [ 668.090197][T14771] EXT4-fs (loop0): Remounting filesystem read-only [ 668.096690][T14771] EXT4-fs error (device loop0): ext4_map_blocks:629: inode #3: block 1: comm syz.0.4650: lblock 6 mapped to illegal pblock 1 (length 1) [ 668.112519][T14771] EXT4-fs (loop0): Remounting filesystem read-only [ 668.120353][T14771] EXT4-fs error (device loop0): ext4_map_blocks:629: inode #3: block 48: comm syz.0.4650: lblock 0 mapped to illegal pblock 48 (length 1) [ 668.134925][T14771] EXT4-fs (loop0): Remounting filesystem read-only [ 668.143519][T14771] EXT4-fs error (device loop0): ext4_acquire_dquot:6188: comm syz.0.4650: Failed to acquire dquot type 0 [ 668.159854][T14771] EXT4-fs (loop0): Remounting filesystem read-only [ 668.167201][T14771] EXT4-fs error (device loop0): ext4_map_blocks:629: inode #3: block 49: comm syz.0.4650: lblock 1 mapped to illegal pblock 49 (length 1) [ 668.168652][T14763] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4647'. [ 668.195858][T14763] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4647'. [ 668.205150][T14771] EXT4-fs (loop0): Remounting filesystem read-only [ 668.223512][T14771] EXT4-fs error (device loop0): ext4_acquire_dquot:6188: comm syz.0.4650: Failed to acquire dquot type 0 [ 668.242108][T14771] EXT4-fs (loop0): Remounting filesystem read-only [ 668.249429][T14771] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5837: Corrupt filesystem [ 668.259293][T14771] EXT4-fs (loop0): Remounting filesystem read-only [ 668.282503][T14771] EXT4-fs error (device loop0): ext4_evict_inode:283: inode #15: comm syz.0.4650: mark_inode_dirty error [ 668.295942][T14782] loop7: detected capacity change from 0 to 1024 [ 668.302195][T14771] EXT4-fs (loop0): Remounting filesystem read-only [ 668.308727][T14771] EXT4-fs warning (device loop0): ext4_evict_inode:286: couldn't mark inode dirty (err -117) [ 668.318897][T14771] EXT4-fs (loop0): 1 orphan inode deleted [ 668.324910][T14771] EXT4-fs (loop0): mounted filesystem without journal. Opts: max_dir_size_kb=0x0000000000000008,data_err=abort,minixdf,errors=remount-ro,abort,noblock_validity,acl,journal_dev=0x0000000000000f35,. Quota mode: none. [ 668.348669][T14782] EXT4-fs (loop7): Unrecognized mount option "ro" or missing value [ 668.410959][T14794] SELinux: Context system_u:object_r:dhcp_state_t:s0 is not valid (left unmapped). [ 668.455157][T14771] syz.0.4650 (14771) used greatest stack depth: 19656 bytes left [ 668.472508][ T630] udevd[630]: symlink '../../loop7' '/dev/disk/by-label/syzkaller.tmp-b7:7' failed: Read-only file system [ 668.523194][T14799] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4663'. [ 668.659245][T14819] loop8: detected capacity change from 0 to 1024 [ 668.682899][T14819] EXT4-fs (loop8): error: could not find journal device path: error -2 [ 668.734121][T14827] loop0: detected capacity change from 0 to 1024 [ 668.835420][T14827] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 669.449808][T14850] loop8: detected capacity change from 0 to 1024 [ 669.465613][T14852] device ip6tnl1 entered promiscuous mode [ 669.539239][T14850] EXT4-fs (loop8): Ignoring removed nobh option [ 669.561145][T14850] EXT4-fs (loop8): Ignoring removed bh option [ 669.597341][T14850] EXT4-fs (loop8): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 669.711347][T14850] EXT4-fs (loop8): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,dioread_lock,data_err=ignore,max_dir_size_kb=0x00000000004007b1,data_err=ignore,grpquota,nobh,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: writeback. [ 669.841030][T14850] EXT4-fs error (device loop8): ext4_mb_mark_diskspace_used:3876: comm syz.8.4685: Allocating blocks 497-513 which overlap fs metadata [ 669.855273][T14850] EXT4-fs (loop8): pa ffff8881290d6f18: logic 128, phys. 385, len 8 [ 669.863171][T14850] EXT4-fs error (device loop8): ext4_mb_release_inode_pa:4893: group 0, free 0, pa_free 1 [ 670.555208][T14882] loop8: detected capacity change from 0 to 2048 [ 670.570615][T14885] loop3: detected capacity change from 0 to 512 [ 670.649026][T14887] loop0: detected capacity change from 0 to 512 [ 670.696226][T14882] EXT4-fs (loop8): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 670.707302][T14885] EXT4-fs (loop3): mounted filesystem without journal. Opts: nodioread_nolock,inlinecrypt,minixdf,errors=remount-ro,. Quota mode: writeback. [ 670.742333][ T30] kauditd_printk_skb: 332 callbacks suppressed [ 670.742353][ T30] audit: type=1326 audit(1738307233.392:14549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14886 comm="syz.0.4699" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7fb3aed73617 code=0x7ffc0000 [ 670.772402][T14887] EXT4-fs (loop0): Ignoring removed mblk_io_submit option [ 670.779421][T14887] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 670.791776][T14885] ext4 filesystem being mounted at /258/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 670.807211][T14887] EXT4-fs (loop0): 1 truncate cleaned up [ 670.813346][T14887] EXT4-fs (loop0): mounted filesystem without journal. Opts: i_version,mblk_io_submit,debug_want_extra_isize=0x0000000000000068,lazytime,block_validity,data_err=abort,,errors=continue. Quota mode: none. [ 670.841356][ T30] audit: type=1326 audit(1738307233.392:14550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14886 comm="syz.0.4699" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7fb3aed7654a code=0x7ffc0000 [ 670.865556][ T30] audit: type=1326 audit(1738307233.482:14551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14886 comm="syz.0.4699" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb3aed73710 code=0x7ffc0000 [ 670.889495][ T30] audit: type=1326 audit(1738307233.482:14552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14886 comm="syz.0.4699" exe="/root/syz-executor" sig=0 arch=c000003e syscall=80 compat=0 ip=0x7fb3aed73af7 code=0x7ffc0000 [ 670.914269][ T30] audit: type=1326 audit(1738307233.482:14553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14886 comm="syz.0.4699" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb3aed73710 code=0x7ffc0000 [ 670.922051][T14885] EXT4-fs error (device loop3): ext4_empty_dir:3136: inode #12: comm syz.3.4697: invalid size [ 670.970761][ T30] audit: type=1326 audit(1738307233.482:14554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14886 comm="syz.0.4699" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb3aed749ab code=0x7ffc0000 [ 671.001255][T14885] EXT4-fs (loop3): Remounting filesystem read-only [ 671.032903][ T30] audit: type=1326 audit(1738307233.482:14555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14886 comm="syz.0.4699" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fb3aed73a0a code=0x7ffc0000 [ 671.069039][ T30] audit: type=1326 audit(1738307233.482:14556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14886 comm="syz.0.4699" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3aed74da9 code=0x7ffc0000 [ 671.103236][ T30] audit: type=1326 audit(1738307233.482:14557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14886 comm="syz.0.4699" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7fb3aed74da9 code=0x7ffc0000 [ 671.129736][ T30] audit: type=1326 audit(1738307233.482:14558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14886 comm="syz.0.4699" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3aed74da9 code=0x7ffc0000 [ 671.173077][T14922] SELinux: ebitmap: map size 0 does not match my size 64 (high bit was 0) [ 671.197172][T14922] SELinux: failed to load policy [ 671.221284][T14927] loop0: detected capacity change from 0 to 512 [ 671.245378][T14931] loop8: detected capacity change from 0 to 512 [ 671.368956][T14931] EXT4-fs error (device loop8): ext4_validate_block_bitmap:438: comm syz.8.4712: bg 0: block 248: padding at end of block bitmap is not set [ 671.384719][T14927] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000008,minixdf,,errors=continue. Quota mode: writeback. [ 671.407080][T14931] EXT4-fs error (device loop8): ext4_acquire_dquot:6188: comm syz.8.4712: Failed to acquire dquot type 1 [ 671.445097][T14927] ext4 filesystem being mounted at /250/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 671.518516][T14931] EXT4-fs (loop8): 1 truncate cleaned up [ 671.538765][T14931] EXT4-fs (loop8): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 671.601657][T14931] ext4 filesystem being mounted at /255/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 671.675386][T14956] netlink: 'syz.5.4721': attribute type 8 has an invalid length. [ 671.775944][T14960] syz.0.4724[14960] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 671.776035][T14960] syz.0.4724[14960] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 671.888278][T14966] loop0: detected capacity change from 0 to 1024 [ 672.002918][ T630] udevd[630]: symlink '../../loop0' '/dev/disk/by-label/syzkaller.tmp-b7:0' failed: Read-only file system [ 672.032011][T14966] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 672.044267][T14966] ext4 filesystem being mounted at /255/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 672.056868][T14975] loop8: detected capacity change from 0 to 128 [ 672.060708][ T630] udevd[630]: symlink '../../loop0' '/dev/disk/by-label/syzkaller.tmp-b7:0' failed: Read-only file system [ 672.189504][T14983] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4733'. [ 672.309477][T14975] attempt to access beyond end of device [ 672.309477][T14975] loop8: rw=2049, want=1041, limit=128 [ 672.405088][T14975] attempt to access beyond end of device [ 672.405088][T14975] loop8: rw=524288, want=369, limit=128 [ 672.430707][T14975] attempt to access beyond end of device [ 672.430707][T14975] loop8: rw=0, want=153, limit=128 [ 672.441335][T14975] attempt to access beyond end of device [ 672.441335][T14975] loop8: rw=0, want=153, limit=128 [ 672.452176][T14975] attempt to access beyond end of device [ 672.452176][T14975] loop8: rw=0, want=153, limit=128 [ 672.462863][T14975] attempt to access beyond end of device [ 672.462863][T14975] loop8: rw=0, want=153, limit=128 [ 672.497358][T14997] loop7: detected capacity change from 0 to 128 [ 672.566391][T14997] syz.7.4739[14997] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 672.566497][T14997] syz.7.4739[14997] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 672.589524][T14999] netlink: 84 bytes leftover after parsing attributes in process `+}[@'. [ 672.609736][T14975] attempt to access beyond end of device [ 672.609736][T14975] loop8: rw=0, want=153, limit=128 [ 672.621935][T14999] netlink: 12 bytes leftover after parsing attributes in process `+}[@'. [ 672.630186][T14999] netlink: 20 bytes leftover after parsing attributes in process `+}[@'. [ 672.633709][T14975] attempt to access beyond end of device [ 672.633709][T14975] loop8: rw=0, want=153, limit=128 [ 672.638772][T14999] netlink: 20 bytes leftover after parsing attributes in process `+}[@'. [ 672.657474][T14975] attempt to access beyond end of device [ 672.657474][T14975] loop8: rw=0, want=153, limit=128 [ 672.670141][T14997] attempt to access beyond end of device [ 672.670141][T14997] loop7: rw=34817, want=1041, limit=128 [ 672.670250][T14999] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 672.690913][T14999] bridge0: port 1(bridge_slave_0) entered disabled state [ 672.702125][T14999] device bridge_slave_0 left promiscuous mode [ 672.708965][T14999] bridge0: port 1(bridge_slave_0) entered disabled state [ 672.811166][T15005] loop7: detected capacity change from 0 to 512 [ 672.893447][ T630] udevd[630]: symlink '../../loop7' '/dev/disk/by-label/\x86\x5b.tmp-b7:7' failed: Read-only file system [ 672.908679][T15005] EXT4-fs error (device loop7): ext4_read_inode_bitmap:140: comm syz.7.4741: Invalid inode bitmap blk 4 in block_group 0 [ 672.931839][T15005] EXT4-fs (loop7): mounted filesystem without journal. Opts: noblock_validity,resuid=0x0000000000000000,data_err=abort,noload,journal_ioprio=0x0000000000000001,lazytime,,errors=continue. Quota mode: none. [ 672.971185][ T630] udevd[630]: symlink '../../loop7' '/dev/disk/by-label/\x86\x5b.tmp-b7:7' failed: Read-only file system [ 673.031333][T15012] loop7: detected capacity change from 0 to 512 [ 673.138631][T15012] EXT4-fs error (device loop7): ext4_xattr_inode_iget:404: comm syz.7.4743: inode #1: comm syz.7.4743: iget: illegal inode # [ 673.151897][T15012] EXT4-fs error (device loop7): ext4_xattr_inode_iget:409: comm syz.7.4743: error while reading EA inode 1 err=-117 [ 673.166299][ T630] udevd[630]: symlink '../../loop7' '/dev/disk/by-label/syzkaller.tmp-b7:7' failed: Read-only file system [ 673.170022][T15012] EXT4-fs error (device loop7): ext4_xattr_inode_iget:404: comm syz.7.4743: inode #1: comm syz.7.4743: iget: illegal inode # [ 673.226543][T15026] loop8: detected capacity change from 0 to 1024 [ 673.239247][T15012] EXT4-fs error (device loop7): ext4_xattr_inode_iget:409: comm syz.7.4743: error while reading EA inode 1 err=-117 [ 673.257213][ T630] udevd[630]: symlink '../../loop8' '/dev/disk/by-label/syzkaller.tmp-b7:8' failed: Read-only file system [ 673.273511][T15012] EXT4-fs (loop7): 1 orphan inode deleted [ 673.279331][T15026] EXT4-fs (loop8): Quota format mount options ignored when QUOTA feature is enabled [ 673.289925][T15032] SELinux: syz.3.4752 (15032) set checkreqprot to 1. This is deprecated and will be rejected in a future kernel release. [ 673.295312][T15012] EXT4-fs (loop7): mounted filesystem without journal. Opts: usrjquota=,block_validity,journal_dev=0x0000000000000dcc,bsdgroups,resgid=0x0000000000000000,minixdf,usrjquota=,debug_want_extra_isize=0x000000000000005c,data_err=ignore,dioread_lock,,errors=continue. Quota mode: none. [ 673.334742][T15026] EXT4-fs (loop8): Ignoring removed nomblk_io_submit option [ 673.343493][T15026] EXT4-fs (loop8): Ignoring removed nomblk_io_submit option [ 673.351203][T15026] EXT4-fs (loop8): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 673.400714][ T630] udevd[630]: symlink '../../loop7' '/dev/disk/by-label/syzkaller.tmp-b7:7' failed: Read-only file system [ 673.420569][T15026] EXT4-fs (loop8): mounted filesystem without journal. Opts: grpquota,sysvgroups,noauto_da_alloc,bsddf,dioread_nolock,jqfmt=vfsv0,nomblk_io_submit,nomblk_io_submit,grpid,inode_readahead_blks=0x0000000000040000,,errors=continue. Quota mode: writeback. [ 673.475782][T15035] loop3: detected capacity change from 0 to 4096 [ 673.587281][T15035] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 673.601326][ T631] udevd[631]: symlink '../../loop8' '/dev/disk/by-label/syzkaller.tmp-b7:8' failed: Read-only file system [ 673.615873][ T630] udevd[630]: symlink '../../loop8' '/dev/disk/by-label/syzkaller.tmp-b7:7' failed: Read-only file system [ 673.631177][T15041] syz.5.4756[15041] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 673.631264][T15041] syz.5.4756[15041] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 673.674157][ T342] udevd[342]: symlink '../../loop3' '/dev/disk/by-label/syzkaller.tmp-b7:3' failed: Read-only file system [ 673.780398][T15045] loop8: detected capacity change from 0 to 1024 [ 673.912821][ T20] hid-generic 0000:0000:0004.0015: unknown main item tag 0x0 [ 673.920941][ T20] hid-generic 0000:0000:0004.0015: hidraw0: HID v0.00 Device [syz0] on syz1 [ 674.154635][T15081] loop0: detected capacity change from 0 to 128 [ 674.982478][T15101] netlink: 84 bytes leftover after parsing attributes in process `+}[@'. [ 675.001056][T15101] netlink: 12 bytes leftover after parsing attributes in process `+}[@'. [ 675.009773][T15101] netlink: 20 bytes leftover after parsing attributes in process `+}[@'. [ 675.038726][T15101] netlink: 20 bytes leftover after parsing attributes in process `+}[@'. [ 675.113365][T15102] bridge0: port 1(bridge_slave_0) entered disabled state [ 675.133106][T15092] hid-generic 0000:0000:0004.0016: unknown main item tag 0x0 [ 675.145694][T15092] hid-generic 0000:0000:0004.0016: hidraw0: HID v0.00 Device [syz0] on syz1 [ 675.163319][T15102] device bridge_slave_0 left promiscuous mode [ 675.189728][T15102] bridge0: port 1(bridge_slave_0) entered disabled state [ 675.213779][T15110] netlink: 'syz.7.4784': attribute type 4 has an invalid length. [ 675.234038][T15113] loop3: detected capacity change from 0 to 1024 [ 675.315735][T15113] EXT4-fs (loop3): Ignoring removed nobh option [ 675.324862][T15122] loop7: detected capacity change from 0 to 4096 [ 675.331395][T15113] EXT4-fs (loop3): Ignoring removed bh option [ 675.363023][T15122] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 675.381903][T15113] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 675.396588][T15127] syz.0.4791[15127] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 675.396679][T15127] syz.0.4791[15127] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 675.468755][T15113] EXT4-fs (loop3): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,dioread_lock,data_err=ignore,max_dir_size_kb=0x00000000004007b1,data_err=ignore,grpquota,nobh,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: writeback. [ 675.522573][T15133] serio: Serial port ptm0 [ 675.526874][T15135] loop7: detected capacity change from 0 to 512 [ 675.545471][T15113] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:3876: comm syz.3.4786: Allocating blocks 497-513 which overlap fs metadata [ 675.567716][T15135] EXT4-fs (loop7): revision level too high, forcing read-only mode [ 675.570790][T15113] EXT4-fs (loop3): pa ffff8881290d60a8: logic 128, phys. 385, len 8 [ 675.583727][T15113] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:4893: group 0, free 0, pa_free 1 [ 675.611364][T15135] EXT4-fs (loop7): orphan cleanup on readonly fs [ 675.650973][T15135] EXT4-fs error (device loop7): ext4_acquire_dquot:6188: comm syz.7.4793: Failed to acquire dquot type 1 [ 675.665455][T15151] 9pnet: Could not find request transport: rdma [ 675.672254][T15135] EXT4-fs error (device loop7): ext4_validate_block_bitmap:438: comm syz.7.4793: bg 0: block 40: padding at end of block bitmap is not set [ 675.686838][T15135] EXT4-fs error (device loop7) in ext4_mb_clear_bb:6183: Corrupt filesystem [ 675.697534][T15135] EXT4-fs (loop7): 1 truncate cleaned up [ 675.703165][T15135] EXT4-fs (loop7): mounted filesystem without journal. Opts: nolazytime,,errors=continue. Quota mode: writeback. [ 675.812033][ T30] kauditd_printk_skb: 440 callbacks suppressed [ 675.812051][ T30] audit: type=1400 audit(1738307238.462:14995): avc: denied { mount } for pid=15166 comm="syz.7.4804" name="/" dev="configfs" ino=47 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 675.846987][T15167] loop3: detected capacity change from 0 to 512 [ 675.861405][ T30] audit: type=1400 audit(1738307238.502:14996): avc: denied { search } for pid=15166 comm="syz.7.4804" name="/" dev="configfs" ino=47 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 675.879732][T15173] xt_CT: No such helper "snmp_trap" [ 675.887449][ T30] audit: type=1400 audit(1738307238.502:14997): avc: denied { read } for pid=15166 comm="syz.7.4804" name="/" dev="configfs" ino=47 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 675.911199][ T30] audit: type=1400 audit(1738307238.502:14998): avc: denied { open } for pid=15166 comm="syz.7.4804" path="/" dev="configfs" ino=47 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 675.936082][ T30] audit: type=1400 audit(1738307238.532:14999): avc: denied { name_bind } for pid=15171 comm="syz.0.4810" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 675.967725][T15179] SELinux: policydb version 0 does not match my version range 15-33 [ 675.998540][T15167] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.4805: bg 0: block 35: padding at end of block bitmap is not set [ 675.999771][T15179] SELinux: failed to load policy [ 676.026462][ T30] audit: type=1400 audit(1738307238.662:15000): avc: denied { mount } for pid=15184 comm="syz.0.4816" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 676.049486][T15167] EXT4-fs (loop3): Remounting filesystem read-only [ 676.057025][ T30] audit: type=1400 audit(1738307238.702:15001): avc: denied { unmount } for pid=11705 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 676.058381][T15167] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6183: Corrupt filesystem [ 676.101537][ T30] audit: type=1326 audit(1738307238.742:15002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15188 comm="syz.8.4817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5502c3dda9 code=0x7ffc0000 [ 676.103081][T15167] EXT4-fs (loop3): Remounting filesystem read-only [ 676.125265][ T30] audit: type=1326 audit(1738307238.742:15003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15188 comm="syz.8.4817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5502c3dda9 code=0x7ffc0000 [ 676.135371][T15192] syz.0.4818[15192] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 676.155366][ T30] audit: type=1326 audit(1738307238.742:15004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15188 comm="syz.8.4817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=118 compat=0 ip=0x7f5502c3dda9 code=0x7ffc0000 [ 676.197755][T15167] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.4805: invalid indirect mapped block 4294967295 (level 1) [ 676.198008][T15192] syz.0.4818[15192] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 676.212300][T15167] EXT4-fs (loop3): Remounting filesystem read-only [ 676.231646][T15167] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.4805: invalid indirect mapped block 4294967295 (level 2) [ 676.251832][T15167] EXT4-fs (loop3): Remounting filesystem read-only [ 676.258734][T15167] EXT4-fs (loop3): 1 truncate cleaned up [ 676.271759][T15167] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,dioread_lock,bsddf,. Quota mode: none. [ 676.304386][T15205] loop7: detected capacity change from 0 to 512 [ 676.312876][T15203] loop8: detected capacity change from 0 to 512 [ 676.342805][T15205] EXT4-fs error (device loop7): ext4_xattr_inode_iget:404: comm syz.7.4823: inode #1: comm syz.7.4823: iget: illegal inode # [ 676.352220][T15211] loop0: detected capacity change from 0 to 1024 [ 676.364720][T15203] EXT4-fs (loop8): mounted filesystem without journal. Opts: mb_optimize_scan=0x0000000000000001,dioread_lock,errors=remount-ro,max_batch_time=0x0000000000000080,. Quota mode: writeback. [ 676.371214][T15205] EXT4-fs error (device loop7): ext4_xattr_inode_iget:409: comm syz.7.4823: error while reading EA inode 1 err=-117 [ 676.384163][T15203] ext4 filesystem being mounted at /276/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 676.396265][T15205] EXT4-fs error (device loop7): ext4_xattr_inode_iget:404: comm syz.7.4823: inode #1: comm syz.7.4823: iget: illegal inode # [ 676.416629][T15203] EXT4-fs error (device loop8): ext4_readdir:260: inode #2: block 12: comm syz.8.4824: path /276/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5066064, rec_len=1, size=2048 fake=0 [ 676.418648][T15205] EXT4-fs error (device loop7): ext4_xattr_inode_iget:409: comm syz.7.4823: error while reading EA inode 1 err=-117 [ 676.451781][T15203] EXT4-fs (loop8): Remounting filesystem read-only [ 676.458676][T15203] EXT4-fs error (device loop8): ext4_readdir:260: inode #2: block 13: comm syz.8.4824: path /276/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653246737, rec_len=1, size=2048 fake=0 [ 676.470982][T15205] EXT4-fs (loop7): 1 orphan inode deleted [ 676.485811][T15205] EXT4-fs (loop7): mounted filesystem without journal. Opts: usrjquota=,block_validity,journal_dev=0x0000000000000dcc,bsdgroups,resgid=0x0000000000000000,minixdf,usrjquota=,debug_want_extra_isize=0x000000000000005c,data_err=ignore,dioread_lock,,errors=continue. Quota mode: none. [ 676.491069][T15203] EXT4-fs (loop8): Remounting filesystem read-only [ 676.525978][T15211] EXT4-fs (loop0): mounted filesystem without journal. Opts: jqfmt=vfsv1,bsddf,barrier=0x0000000000000000,norecovery,debug_want_extra_isize=0x0000000000000080,resuid=0x0000000000000000,nodelalloc,acl,noinit_itable,,errors=continue. Quota mode: none. [ 676.541398][T15203] EXT4-fs error (device loop8): ext4_readdir:260: inode #2: block 14: comm syz.8.4824: path /276/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 676.578895][T15203] EXT4-fs (loop8): Remounting filesystem read-only [ 676.585542][T15203] EXT4-fs error (device loop8): ext4_readdir:260: inode #2: block 15: comm syz.8.4824: path /276/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5, rec_len=0, size=2048 fake=0 [ 676.607959][T15203] EXT4-fs (loop8): Remounting filesystem read-only [ 676.622131][T15203] EXT4-fs error (device loop8): ext4_readdir:260: inode #2: block 16: comm syz.8.4824: path /276/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653245223, rec_len=1, size=2048 fake=0 [ 676.644312][T15203] EXT4-fs (loop8): Remounting filesystem read-only [ 676.650768][T15203] EXT4-fs error (device loop8): ext4_readdir:260: inode #2: block 17: comm syz.8.4824: path /276/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 676.671381][T15203] EXT4-fs (loop8): Remounting filesystem read-only [ 676.677838][T15203] EXT4-fs error (device loop8): ext4_map_blocks:629: inode #2: block 18: comm syz.8.4824: lblock 23 mapped to illegal pblock 18 (length 1) [ 676.692253][T15203] EXT4-fs (loop8): Remounting filesystem read-only [ 676.698756][T15203] EXT4-fs error (device loop8): ext4_readdir:260: inode #2: block 19: comm syz.8.4824: path /276/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5, rec_len=0, size=2048 fake=0 [ 676.735171][T15203] EXT4-fs (loop8): Remounting filesystem read-only [ 676.741924][T15203] EXT4-fs error (device loop8): ext4_readdir:260: inode #2: block 20: comm syz.8.4824: path /276/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=2048 fake=0 [ 676.762489][T15203] EXT4-fs (loop8): Remounting filesystem read-only [ 676.769053][T15203] EXT4-fs error (device loop8): ext4_readdir:260: inode #2: block 21: comm syz.8.4824: path /276/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=2048 fake=0 [ 676.815774][T15203] EXT4-fs (loop8): Remounting filesystem read-only [ 676.850730][T15231] loop3: detected capacity change from 0 to 1024 [ 676.916250][T15231] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 676.920008][T15238] loop7: detected capacity change from 0 to 512 [ 677.009818][T15092] hid-generic 0000:0000:0004.0017: unknown main item tag 0x0 [ 677.019555][T15092] hid-generic 0000:0000:0004.0017: hidraw0: HID v0.00 Device [syz0] on syz1 [ 677.039782][ T631] udevd[631]: symlink '../../loop8' '/dev/disk/by-label/syzkaller.tmp-b7:3' failed: Read-only file system [ 677.057226][ T630] udevd[630]: symlink '../../loop7' '/dev/disk/by-label/syzkaller.tmp-b7:7' failed: Read-only file system [ 677.080250][T15238] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 677.109586][T15238] ext4 filesystem being mounted at /521/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 677.147091][ T630] udevd[630]: symlink '../../loop7' '/dev/disk/by-label/syzkaller.tmp-b7:7' failed: Read-only file system [ 677.197554][ T630] udevd[630]: symlink '../../loop7' '/dev/disk/by-label/syzkaller.tmp-b7:8' failed: Read-only file system [ 677.203457][T15262] loop8: detected capacity change from 0 to 256 [ 677.215732][T15258] device pim6reg1 entered promiscuous mode [ 677.236924][T15262] FAT-fs (loop8): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 677.343077][T15269] __nla_validate_parse: 5 callbacks suppressed [ 677.343098][T15269] netlink: 96 bytes leftover after parsing attributes in process `syz.7.4847'. [ 677.392267][T15275] loop8: detected capacity change from 0 to 1024 [ 677.436584][T15283] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4854'. [ 677.445458][T15283] device bridge_slave_1 left promiscuous mode [ 677.451680][T15283] bridge0: port 2(bridge_slave_1) entered disabled state [ 677.481384][ T630] udevd[630]: symlink '../../loop8' '/dev/disk/by-label/syzkal\xff\xff\xff\xff\xff\xff\xff\x7f.tmp-b7:8' failed: Read-only file system [ 677.487380][T15275] EXT4-fs error (device loop8): ext4_read_block_bitmap_nowait:476: comm syz.8.4849: Invalid block bitmap block 0 in block_group 0 [ 677.517786][T15275] EXT4-fs error (device loop8): ext4_acquire_dquot:6188: comm syz.8.4849: Failed to acquire dquot type 0 [ 677.530871][T15275] EXT4-fs error (device loop8): ext4_free_blocks:6223: comm syz.8.4849: Freeing blocks not in datazone - block = 0, count = 4096 [ 677.548354][T15275] EXT4-fs error (device loop8): ext4_read_inode_bitmap:140: comm syz.8.4849: Invalid inode bitmap blk 0 in block_group 0 [ 677.561589][ T541] EXT4-fs error (device loop8): ext4_release_dquot:6211: comm kworker/u4:5: Failed to release dquot type 0 [ 677.563720][T15275] EXT4-fs error (device loop8) in ext4_free_inode:362: Corrupt filesystem [ 677.581969][T15275] EXT4-fs (loop8): 1 orphan inode deleted [ 677.589281][T15275] EXT4-fs (loop8): mounted filesystem without journal. Opts: ; sysvgroups,stripe=0x0000000000000000,auto_da_alloc,quota,nogrpid,norecovery,bsddf,noinit_itable,,errors=continue. Quota mode: writeback. [ 677.616591][ T630] udevd[630]: symlink '../../loop8' '/dev/disk/by-label/syzkal\xff\xff\xff\xff\xff\xff\xff\x7f.tmp-b7:8' failed: Read-only file system [ 677.647172][T15288] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4855'. [ 678.295416][T15329] hub 2-0:1.0: USB hub found [ 678.300283][T15329] hub 2-0:1.0: 1 port detected [ 678.340643][T15334] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4876'. [ 678.406077][T15345] loop3: detected capacity change from 0 to 2048 [ 678.423931][T15347] loop0: detected capacity change from 0 to 256 [ 678.442843][T15347] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 678.462000][ T630] udevd[630]: symlink '../../loop3' '/dev/disk/by-label/syzkaller.tmp-b7:3' failed: Read-only file system [ 678.481119][T15345] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,lazytime,data_err=abort,errors=remount-ro,. Quota mode: writeback. [ 678.503975][T15345] EXT4-fs error (device loop3): ext4_find_extent:929: inode #2: comm syz.3.4880: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 678.504665][ T630] udevd[630]: symlink '../../loop3' '/dev/disk/by-label/syzkaller.tmp-b7:3' failed: Read-only file system [ 678.532174][T15345] EXT4-fs (loop3): Remounting filesystem read-only [ 678.685161][T15362] tipc: Enabled bearer , priority 0 [ 678.692743][T15362] +: renamed from syzkaller0 [ 678.707802][T15362] tipc: Disabling bearer [ 678.723449][T15366] SELinux: ebitmap: map size 0 does not match my size 64 (high bit was 0) [ 678.734740][T15366] SELinux: failed to load policy [ 678.817305][T15374] loop8: detected capacity change from 0 to 512 [ 678.840069][ T630] udevd[630]: symlink '../../loop8' '/dev/disk/by-label/syzkaller.tmp-b7:8' failed: Read-only file system [ 678.857293][T15377] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4894'. [ 678.871770][T15377] device veth1_macvtap left promiscuous mode [ 678.872305][T15374] EXT4-fs error (device loop8): ext4_xattr_inode_iget:404: comm syz.8.4892: inode #1: comm syz.8.4892: iget: illegal inode # [ 678.897755][T15374] EXT4-fs error (device loop8): ext4_xattr_inode_iget:409: comm syz.8.4892: error while reading EA inode 1 err=-117 [ 678.912531][T15374] EXT4-fs error (device loop8): ext4_xattr_inode_iget:404: comm syz.8.4892: inode #1: comm syz.8.4892: iget: illegal inode # [ 678.941735][T15374] EXT4-fs error (device loop8): ext4_xattr_inode_iget:409: comm syz.8.4892: error while reading EA inode 1 err=-117 [ 678.958651][T15374] EXT4-fs (loop8): 1 orphan inode deleted [ 678.971609][T15374] EXT4-fs (loop8): mounted filesystem without journal. Opts: usrjquota=,block_validity,journal_dev=0x0000000000000dcc,bsdgroups,resgid=0x0000000000000000,minixdf,usrjquota=,debug_want_extra_isize=0x000000000000005c,data_err=ignore,dioread_lock,,errors=continue. Quota mode: none. [ 679.010347][ T630] udevd[630]: symlink '../../loop8' '/dev/disk/by-label/syzkaller.tmp-b7:8' failed: Read-only file system [ 679.070655][T15390] loop0: detected capacity change from 0 to 512 [ 679.122090][T15390] EXT4-fs error (device loop0): ext4_xattr_inode_iget:404: comm syz.0.4901: inode #1: comm syz.0.4901: iget: illegal inode # [ 679.139523][T15390] EXT4-fs error (device loop0): ext4_xattr_inode_iget:409: comm syz.0.4901: error while reading EA inode 1 err=-117 [ 679.152302][T15390] EXT4-fs error (device loop0): ext4_xattr_inode_iget:404: comm syz.0.4901: inode #1: comm syz.0.4901: iget: illegal inode # [ 679.169599][T15390] EXT4-fs error (device loop0): ext4_xattr_inode_iget:409: comm syz.0.4901: error while reading EA inode 1 err=-117 [ 679.182385][T15390] EXT4-fs (loop0): 1 orphan inode deleted [ 679.187949][T15390] EXT4-fs (loop0): mounted filesystem without journal. Opts: usrjquota=,block_validity,journal_dev=0x0000000000000dcc,bsdgroups,resgid=0x0000000000000000,minixdf,usrjquota=,debug_want_extra_isize=0x000000000000005c,data_err=ignore,dioread_lock,,errors=continue. Quota mode: none. [ 679.453663][T15407] loop7: detected capacity change from 0 to 512 [ 679.562405][T15407] EXT4-fs (loop7): Ignoring removed mblk_io_submit option [ 679.569646][T15407] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 679.593349][T15407] EXT4-fs (loop7): 1 truncate cleaned up [ 679.598953][T15407] EXT4-fs (loop7): mounted filesystem without journal. Opts: i_version,mblk_io_submit,debug_want_extra_isize=0x0000000000000068,lazytime,discard,data_err=abort,,errors=continue. Quota mode: none. [ 679.627966][T15407] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 680.059591][T15414] loop7: detected capacity change from 0 to 4096 [ 680.073937][T15418] loop8: detected capacity change from 0 to 1024 [ 680.122076][T15418] EXT4-fs (loop8): mounted filesystem without journal. Opts: jqfmt=vfsv1,bsddf,barrier=0x0000000000000000,norecovery,debug_want_extra_isize=0x0000000000000080,resuid=0x0000000000000000,nodelalloc,acl,noinit_itable,,errors=continue. Quota mode: none. [ 680.122418][T15414] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 680.237447][T15437] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4919'. [ 680.246985][T15437] device veth1_macvtap left promiscuous mode [ 680.336069][T15445] netlink: 84 bytes leftover after parsing attributes in process `+}[@'. [ 680.344492][T15445] netlink: 12 bytes leftover after parsing attributes in process `+}[@'. [ 680.352957][T15445] netlink: 20 bytes leftover after parsing attributes in process `+}[@'. [ 680.361387][T15445] netlink: 20 bytes leftover after parsing attributes in process `+}[@'. [ 680.428869][T15448] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 680.483650][T15455] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 680.541762][T15455] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 680.562602][T15455] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 680.579538][T15455] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 680.617389][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 680.627849][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 680.646027][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 680.679113][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 680.723208][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 680.740752][T15468] loop3: detected capacity change from 0 to 4096 [ 680.754261][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 680.769415][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 680.790111][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 680.849827][T15468] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 680.889694][ T30] kauditd_printk_skb: 418 callbacks suppressed [ 680.889711][ T30] audit: type=1326 audit(1738307243.532:15420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15467 comm="syz.3.4929" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43daa6bda9 code=0x7ffc0000 [ 681.224314][ T30] audit: type=1326 audit(1738307243.532:15421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15467 comm="syz.3.4929" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f43daa6bda9 code=0x7ffc0000 [ 681.248577][ T30] audit: type=1326 audit(1738307243.532:15422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15467 comm="syz.3.4929" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43daa6bda9 code=0x7ffc0000 [ 681.272317][ T30] audit: type=1326 audit(1738307243.532:15423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15467 comm="syz.3.4929" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f43daa6bda9 code=0x7ffc0000 [ 681.308185][ T30] audit: type=1326 audit(1738307243.532:15424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15467 comm="syz.3.4929" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43daa6bda9 code=0x7ffc0000 [ 681.332002][ T30] audit: type=1326 audit(1738307243.532:15425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15467 comm="syz.3.4929" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f43daa6bda9 code=0x7ffc0000 [ 681.355990][ T30] audit: type=1326 audit(1738307243.532:15426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15467 comm="syz.3.4929" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43daa6bda9 code=0x7ffc0000 [ 681.379760][ T30] audit: type=1326 audit(1738307243.532:15427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15467 comm="syz.3.4929" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f43daa6bda9 code=0x7ffc0000 [ 681.439037][ T30] audit: type=1326 audit(1738307243.532:15428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15467 comm="syz.3.4929" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43daa6bda9 code=0x7ffc0000 [ 681.462886][ T30] audit: type=1326 audit(1738307243.532:15429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15467 comm="syz.3.4929" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f43daa6bda9 code=0x7ffc0000 [ 681.933759][T15490] syz.7.4937[15490] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 681.933859][T15490] syz.7.4937[15490] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 682.001793][T15492] loop7: detected capacity change from 0 to 2048 [ 682.040554][T15498] syz.0.4942[15498] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 682.040642][T15498] syz.0.4942[15498] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 682.063995][ T630] udevd[630]: symlink '../../loop7' '/dev/disk/by-label/syzkaller.tmp-b7:7' failed: Read-only file system [ 682.099699][T15492] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 682.117177][T15492] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 682.132130][T15492] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 22 with error 28 [ 682.141196][ T630] udevd[630]: symlink '../../loop7' '/dev/disk/by-label/syzkaller.tmp-b7:7' failed: Read-only file system [ 682.144533][T15492] EXT4-fs (loop7): This should not happen!! Data will be lost [ 682.144533][T15492] [ 682.144558][T15492] EXT4-fs (loop7): Total free blocks count 0 [ 682.144581][T15492] EXT4-fs (loop7): Free/Dirty block details [ 682.144596][T15492] EXT4-fs (loop7): free_blocks=2415919104 [ 682.144611][T15492] EXT4-fs (loop7): dirty_blocks=32 [ 682.144624][T15492] EXT4-fs (loop7): Block reservation details [ 682.144636][T15492] EXT4-fs (loop7): i_reserved_data_blocks=2 [ 682.147505][T15492] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 32 with error 28 [ 682.211599][T15492] EXT4-fs (loop7): This should not happen!! Data will be lost [ 682.211599][T15492] [ 682.310806][T15515] loop8: detected capacity change from 0 to 128 [ 682.422852][T15525] netlink: 'syz.7.4947': attribute type 8 has an invalid length. [ 682.444189][ T541] handle_bad_sector: 13893 callbacks suppressed [ 682.444211][ T541] attempt to access beyond end of device [ 682.444211][ T541] loop8: rw=1, want=1041, limit=128 [ 682.470801][T15522] device wireguard0 entered promiscuous mode [ 682.592416][T15533] loop8: detected capacity change from 0 to 1024 [ 682.668201][ T630] udevd[630]: symlink '../../loop8' '/dev/disk/by-label/syzkaller.tmp-b7:8' failed: Read-only file system [ 682.692546][T15533] EXT4-fs (loop8): mounted filesystem without journal. Opts: grpquota,debug_want_extra_isize=0x0000000000000088,resuid=0x0000000000000000,max_batch_time=0x0000000000000003,lazytime,usrquota,data_err=abort,data_err=abort,,errors=continue. Quota mode: writeback. [ 683.225993][T15554] device wg2 left promiscuous mode [ 683.267343][ T9079] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 683.293968][ T9079] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 683.308997][ T9079] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 683.328213][ T9079] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 683.343875][ T9079] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 683.374664][ T9079] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 683.393050][ T9079] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 683.403758][T15568] loop8: detected capacity change from 0 to 512 [ 683.410403][ T9079] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 683.427296][ T630] udevd[630]: symlink '../../loop8' '/dev/disk/by-label/syzkaller.tmp-b7:8' failed: Read-only file system [ 683.428097][T15566] loop7: detected capacity change from 0 to 4096 [ 683.445909][ T9079] IPv6: ADDRCONF(NETDEV_CHANGE): veth3: link becomes ready [ 683.455891][ T9079] IPv6: ADDRCONF(NETDEV_CHANGE): veth2: link becomes ready [ 683.458945][T15568] EXT4-fs error (device loop8): ext4_xattr_inode_iget:404: comm syz.8.4968: inode #1: comm syz.8.4968: iget: illegal inode # [ 683.476944][T15559] netlink: 'syz.3.4965': attribute type 3 has an invalid length. [ 683.484920][T15568] EXT4-fs error (device loop8): ext4_xattr_inode_iget:409: comm syz.8.4968: error while reading EA inode 1 err=-117 [ 683.498060][T15559] netlink: 'syz.3.4965': attribute type 3 has an invalid length. [ 683.498091][T15568] EXT4-fs error (device loop8): ext4_xattr_inode_iget:404: comm syz.8.4968: inode #1: comm syz.8.4968: iget: illegal inode # [ 683.528403][ T630] udevd[630]: symlink '../../loop7' '/dev/disk/by-label/syzkaller.tmp-b7:7' failed: Read-only file system [ 683.529005][T15568] EXT4-fs error (device loop8): ext4_xattr_inode_iget:409: comm syz.8.4968: error while reading EA inode 1 err=-117 [ 683.552965][T15568] EXT4-fs (loop8): 1 orphan inode deleted [ 683.558438][T15566] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 683.558528][T15568] EXT4-fs (loop8): mounted filesystem without journal. Opts: usrjquota=,block_validity,journal_dev=0x0000000000000dcc,bsdgroups,resgid=0x0000000000000000,minixdf,usrjquota=,debug_want_extra_isize=0x000000000000005c,data_err=ignore,dioread_lock,,errors=continue. Quota mode: none. [ 683.600962][ T630] udevd[630]: symlink '../../loop7' '/dev/disk/by-label/syzkaller.tmp-b7:7' failed: Read-only file system [ 683.658440][ T342] udevd[342]: symlink '../../loop8' '/dev/disk/by-label/syzkaller.tmp-b7:8' failed: Read-only file system [ 683.764806][ T630] udevd[630]: symlink '../../loop8' '/dev/disk/by-label/syzkaller.tmp-b7:7' failed: Read-only file system [ 683.769282][T15584] syz.7.4974[15584] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 683.785359][T15586] loop8: detected capacity change from 0 to 128 [ 683.808690][T15584] syz.7.4974[15584] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 683.834014][ T630] udevd[630]: symlink '../../loop8' '/dev/disk/by-label/SYZKALLER.tmp-b7:8' failed: Read-only file system [ 683.868775][ T630] udevd[630]: symlink '../../loop8' '/dev/disk/by-uuid/1DD9-F30B.tmp-b7:8' failed: Read-only file system [ 683.919798][T15597] device syzkaller0 entered promiscuous mode [ 684.050569][T15604] loop8: detected capacity change from 0 to 4096 [ 684.245989][T15604] EXT4-fs (loop8): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 684.311406][T15617] loop0: detected capacity change from 0 to 256 [ 684.599081][T15628] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 685.020080][ T996] hid-generic 0000:0000:0004.0018: unknown main item tag 0x0 [ 685.083880][ T996] hid-generic 0000:0000:0004.0018: hidraw0: HID v0.00 Device [syz0] on syz1 [ 685.360273][T15646] Invalid ELF header magic: != ELF [ 686.010304][ T552] hid-generic 0000:0000:0004.0019: unknown main item tag 0x0 [ 686.018066][ T552] hid-generic 0000:0000:0004.0019: hidraw0: HID v0.00 Device [syz0] on syz1 [ 686.065064][T15675] loop7: detected capacity change from 0 to 512 [ 686.115195][T15675] EXT4-fs error (device loop7): ext4_xattr_inode_iget:404: comm syz.7.5010: inode #1: comm syz.7.5010: iget: illegal inode # [ 686.128791][T15675] EXT4-fs error (device loop7): ext4_xattr_inode_iget:409: comm syz.7.5010: error while reading EA inode 1 err=-117 [ 686.141439][T15675] EXT4-fs error (device loop7): ext4_xattr_inode_iget:404: comm syz.7.5010: inode #1: comm syz.7.5010: iget: illegal inode # [ 686.154801][T15675] EXT4-fs error (device loop7): ext4_xattr_inode_iget:409: comm syz.7.5010: error while reading EA inode 1 err=-117 [ 686.168142][T15675] EXT4-fs (loop7): 1 orphan inode deleted [ 686.174096][T15675] EXT4-fs (loop7): mounted filesystem without journal. Opts: usrjquota=,block_validity,journal_dev=0x0000000000000dcc,bsdgroups,resgid=0x0000000000000000,minixdf,usrjquota=,debug_want_extra_isize=0x000000000000005c,data_err=ignore,dioread_lock,,errors=continue. Quota mode: none. [ 686.243450][T15678] loop8: detected capacity change from 0 to 256 [ 686.262144][T15680] loop3: detected capacity change from 0 to 512 [ 686.282637][T15678] FAT-fs (loop8): Unrecognized mount option "nonumtaim=0" or missing value [ 686.294754][T15680] EXT4-fs (loop3): Mount option "delalloc" incompatible with ext3 [ 686.345439][T15684] device syzkaller0 entered promiscuous mode [ 686.461579][T15697] __nla_validate_parse: 5 callbacks suppressed [ 686.461598][T15697] netlink: 84 bytes leftover after parsing attributes in process `+}[@'. [ 686.478062][T15697] netlink: 12 bytes leftover after parsing attributes in process `+}[@'. [ 686.482388][T15696] loop3: detected capacity change from 0 to 4096 [ 686.486949][T15697] netlink: 20 bytes leftover after parsing attributes in process `+}[@'. [ 686.500989][T15697] netlink: 20 bytes leftover after parsing attributes in process `+}[@'. [ 686.814431][T15696] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 686.846506][T15697] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 686.866515][ T30] kauditd_printk_skb: 154 callbacks suppressed [ 686.866531][ T30] audit: type=1326 audit(1738307249.512:15584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15695 comm="syz.3.5016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43daa6bda9 code=0x7ffc0000 [ 686.900606][ T30] audit: type=1326 audit(1738307249.542:15585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15695 comm="syz.3.5016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43daa6bda9 code=0x7ffc0000 [ 686.945937][T15706] tipc: Started in network mode [ 686.954556][T15708] loop8: detected capacity change from 0 to 512 [ 686.961221][ T30] audit: type=1326 audit(1738307249.572:15586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15695 comm="syz.3.5016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f43daa6bda9 code=0x7ffc0000 [ 686.964145][T15706] tipc: Node identity 7, cluster identity 4711 [ 686.990782][ T30] audit: type=1326 audit(1738307249.572:15587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15695 comm="syz.3.5016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43daa6bda9 code=0x7ffc0000 [ 687.014445][T15706] tipc: Node number set to 7 [ 687.019173][T15706] tipc: Cannot configure node identity twice [ 687.026666][ T30] audit: type=1326 audit(1738307249.572:15588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15695 comm="syz.3.5016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43daa6bda9 code=0x7ffc0000 [ 687.056765][T15708] EXT4-fs error (device loop8): ext4_xattr_inode_iget:404: comm syz.8.5023: inode #1: comm syz.8.5023: iget: illegal inode # [ 687.061568][ T30] audit: type=1326 audit(1738307249.582:15589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15695 comm="syz.3.5016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f43daa6bda9 code=0x7ffc0000 [ 687.087880][T15708] EXT4-fs error (device loop8): ext4_xattr_inode_iget:409: comm syz.8.5023: error while reading EA inode 1 err=-117 [ 687.098503][ T30] audit: type=1326 audit(1738307249.582:15590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15695 comm="syz.3.5016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43daa6bda9 code=0x7ffc0000 [ 687.132894][ T630] udevd[630]: symlink '../../loop8' '/dev/disk/by-label/syzkaller.tmp-b7:3' failed: Read-only file system [ 687.138844][ T30] audit: type=1326 audit(1738307249.582:15591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15695 comm="syz.3.5016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43daa6bda9 code=0x7ffc0000 [ 687.154828][T15714] loop3: detected capacity change from 0 to 512 [ 687.168053][ T30] audit: type=1326 audit(1738307249.582:15592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15695 comm="syz.3.5016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f43daa6bda9 code=0x7ffc0000 [ 687.197323][ T30] audit: type=1326 audit(1738307249.582:15593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15695 comm="syz.3.5016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43daa6bda9 code=0x7ffc0000 [ 687.231410][T15708] EXT4-fs error (device loop8): ext4_xattr_inode_iget:404: comm syz.8.5023: inode #1: comm syz.8.5023: iget: illegal inode # [ 687.247156][T15708] EXT4-fs error (device loop8): ext4_xattr_inode_iget:409: comm syz.8.5023: error while reading EA inode 1 err=-117 [ 687.280343][ T630] udevd[630]: symlink '../../loop3' '/dev/disk/by-label/syzkaller.tmp-b7:3' failed: Read-only file system [ 687.292195][T15708] EXT4-fs (loop8): 1 orphan inode deleted [ 687.302898][T15717] SELinux: ebitmap: map size 0 does not match my size 64 (high bit was 0) [ 687.310564][T15714] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 687.320141][T15708] EXT4-fs (loop8): mounted filesystem without journal. Opts: usrjquota=,block_validity,journal_dev=0x0000000000000dcc,bsdgroups,resgid=0x0000000000000000,minixdf,usrjquota=,debug_want_extra_isize=0x000000000000005c,data_err=ignore,dioread_lock,,errors=continue. Quota mode: none. [ 687.351624][T15714] ext4 filesystem being mounted at /303/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 687.365099][T15717] SELinux: failed to load policy [ 687.381156][ T342] udevd[342]: symlink '../../loop8' '/dev/disk/by-label/syzkaller.tmp-b7:8' failed: Read-only file system [ 687.395729][ T630] udevd[630]: symlink '../../loop3' '/dev/disk/by-label/syzkaller.tmp-b7:3' failed: Read-only file system [ 687.427841][T15726] loop7: detected capacity change from 0 to 512 [ 687.454443][ T630] udevd[630]: symlink '../../loop7' '/dev/disk/by-label/syzkaller.tmp-b7:7' failed: Read-only file system [ 687.482778][T15726] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 687.494186][T15726] ext4 filesystem being mounted at /560/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 687.516550][ T630] udevd[630]: symlink '../../loop7' '/dev/disk/by-label/syzkaller.tmp-b7:3' failed: Read-only file system [ 687.517019][ T342] udevd[342]: symlink '../../loop7' '/dev/disk/by-label/syzkaller.tmp-b7:8' failed: Read-only file system [ 687.542039][ T631] udevd[631]: symlink '../../loop7' '/dev/disk/by-label/syzkaller.tmp-b7:7' failed: Read-only file system [ 687.554114][T15726] EXT4-fs error (device loop7): ext4_do_update_inode:5205: inode #2: comm syz.7.5031: corrupted inode contents [ 687.560442][T15737] device gre0 entered promiscuous mode [ 687.572202][T15726] EXT4-fs error (device loop7): ext4_dirty_inode:6041: inode #2: comm syz.7.5031: mark_inode_dirty error [ 687.598038][T15737] device vlan2 entered promiscuous mode [ 687.600011][T15726] EXT4-fs error (device loop7): ext4_do_update_inode:5205: inode #2: comm syz.7.5031: corrupted inode contents [ 687.615824][T15726] EXT4-fs error (device loop7): __ext4_ext_dirty:183: inode #2: comm syz.7.5031: mark_inode_dirty error [ 687.627040][T15737] device gre0 left promiscuous mode [ 687.643866][T15740] loop3: detected capacity change from 0 to 4096 [ 687.653821][ T630] udevd[630]: symlink '../../loop7' '/dev/disk/by-label/syzkaller.tmp-b7:7' failed: Read-only file system [ 687.689289][T15740] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 687.720147][ T630] udevd[630]: symlink '../../loop3' '/dev/disk/by-label/syzkaller.tmp-b7:3' failed: Read-only file system [ 687.740842][T15754] loop8: detected capacity change from 0 to 512 [ 687.813816][T15754] EXT4-fs error (device loop8): ext4_xattr_inode_iget:404: comm syz.8.5042: inode #1: comm syz.8.5042: iget: illegal inode # [ 687.853231][T15754] EXT4-fs error (device loop8): ext4_xattr_inode_iget:409: comm syz.8.5042: error while reading EA inode 1 err=-117 [ 687.886166][T15770] netlink: 84 bytes leftover after parsing attributes in process `+}[@'. [ 687.900411][T15770] netlink: 12 bytes leftover after parsing attributes in process `+}[@'. [ 687.905960][T15754] EXT4-fs error (device loop8): ext4_xattr_inode_iget:404: comm syz.8.5042: inode #1: comm syz.8.5042: iget: illegal inode # [ 687.908984][T15770] netlink: 20 bytes leftover after parsing attributes in process `+}[@'. [ 687.929930][T15770] netlink: 20 bytes leftover after parsing attributes in process `+}[@'. [ 687.933362][T15754] EXT4-fs error (device loop8): ext4_xattr_inode_iget:409: comm syz.8.5042: error while reading EA inode 1 err=-117 [ 687.941954][T15770] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 687.951188][T15754] EXT4-fs (loop8): 1 orphan inode deleted [ 687.964654][T15754] EXT4-fs (loop8): mounted filesystem without journal. Opts: usrjquota=,block_validity,journal_dev=0x0000000000000dcc,bsdgroups,resgid=0x0000000000000000,minixdf,usrjquota=,debug_want_extra_isize=0x000000000000005c,data_err=ignore,dioread_lock,,errors=continue. Quota mode: none. [ 687.964748][T15770] bridge0: port 1(bridge_slave_0) entered disabled state [ 688.007927][T15770] device bridge_slave_0 left promiscuous mode [ 688.014646][T15770] bridge0: port 1(bridge_slave_0) entered disabled state [ 688.172422][T15776] SELinux: ebitmap: map size 0 does not match my size 64 (high bit was 0) [ 688.181889][T15776] SELinux: failed to load policy [ 688.456579][T15788] netlink: 'syz.8.5057': attribute type 13 has an invalid length. [ 688.484533][T15788] gretap0: refused to change device tx_queue_len [ 688.489599][T15786] loop0: detected capacity change from 0 to 4096 [ 688.507859][T15788] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 688.606950][T15786] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 688.614675][ T552] hid-generic 0000:0000:0004.001A: unknown main item tag 0x0 [ 688.674802][ T552] hid-generic 0000:0000:0004.001A: hidraw0: HID v0.00 Device [syz0] on syz1 [ 688.799545][T15801] syz.5.5064[15801] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 688.799646][T15801] syz.5.5064[15801] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 689.514130][ T552] hid-generic 0000:0000:0004.001B: unknown main item tag 0x0 [ 689.603443][ T552] hid-generic 0000:0000:0004.001B: hidraw0: HID v0.00 Device [syz0] on syz1 [ 689.743559][T15845] syz.7.5080[15845] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 689.743644][T15845] syz.7.5080[15845] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 689.882433][T15854] loop3: detected capacity change from 0 to 4096 [ 689.921858][ T552] hid-generic 0000:0000:0004.001C: unknown main item tag 0x0 [ 689.937225][ T552] hid-generic 0000:0000:0004.001C: hidraw0: HID v0.00 Device [syz0] on syz1 [ 689.994981][T15876] syz.7.5095[15876] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 689.995165][T15876] syz.7.5095[15876] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 690.022853][T15854] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 690.046902][T15876] usb usb1: usbfs: process 15876 (syz.7.5095) did not claim interface 0 before use [ 690.086965][T15876] syz.7.5095[15876] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 690.087058][T15876] syz.7.5095[15876] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 690.121570][T15879] device bond_slave_1 entered promiscuous mode [ 690.179684][T15882] device bond_slave_1 left promiscuous mode [ 690.355352][T15902] loop8: detected capacity change from 0 to 128 [ 690.373149][T15906] syz.0.5108[15906] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 690.373235][T15906] syz.0.5108[15906] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 690.476971][T15902] attempt to access beyond end of device [ 690.476971][T15902] loop8: rw=2049, want=1041, limit=128 [ 690.510002][T15902] attempt to access beyond end of device [ 690.510002][T15902] loop8: rw=524288, want=369, limit=128 [ 690.521288][T15902] attempt to access beyond end of device [ 690.521288][T15902] loop8: rw=0, want=153, limit=128 [ 690.534458][T15902] attempt to access beyond end of device [ 690.534458][T15902] loop8: rw=0, want=153, limit=128 [ 690.551997][T15902] attempt to access beyond end of device [ 690.551997][T15902] loop8: rw=0, want=153, limit=128 [ 690.563328][T15902] attempt to access beyond end of device [ 690.563328][T15902] loop8: rw=0, want=153, limit=128 [ 690.582931][T15916] loop3: detected capacity change from 0 to 8192 [ 691.235454][T15950] sch_tbf: burst 3298 is lower than device lo mtu (11337746) ! [ 691.420361][T15967] loop0: detected capacity change from 0 to 2048 [ 691.479488][T15977] loop7: detected capacity change from 0 to 4096 [ 691.513399][T15967] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 691.544097][T15977] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 691.614066][T15994] ================================================================== [ 691.621976][T15994] BUG: KASAN: slab-out-of-bounds in xfrm_policy_inexact_list_reinsert+0x5b0/0x660 [ 691.631016][T15994] Read of size 1 at addr ffff888120053bf8 by task syz.0.5146/15994 [ 691.638722][T15994] [ 691.640893][T15994] CPU: 1 PID: 15994 Comm: syz.0.5146 Tainted: G W 5.15.176-syzkaller-00066-gd1a25a6a4b3b #0 [ 691.652088][T15994] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 691.661984][T15994] Call Trace: [ 691.665109][T15994] [ 691.667885][T15994] dump_stack_lvl+0x151/0x1c0 [ 691.672400][T15994] ? io_uring_drop_tctx_refs+0x190/0x190 [ 691.677867][T15994] ? panic+0x760/0x760 [ 691.681783][T15994] print_address_description+0x87/0x3b0 [ 691.687152][T15994] ? stack_trace_save+0x113/0x1c0 [ 691.692019][T15994] kasan_report+0x179/0x1c0 [ 691.696364][T15994] ? xfrm_policy_inexact_list_reinsert+0x5b0/0x660 [ 691.702690][T15994] ? xfrm_policy_inexact_list_reinsert+0x5b0/0x660 [ 691.709026][T15994] __asan_report_load1_noabort+0x14/0x20 [ 691.714494][T15994] xfrm_policy_inexact_list_reinsert+0x5b0/0x660 [ 691.720657][T15994] ? ____kasan_kmalloc+0xed/0x110 [ 691.725515][T15994] ? ____kasan_kmalloc+0xdb/0x110 [ 691.730377][T15994] ? xfrm_policy_addr_delta+0x23b/0x370 [ 691.735764][T15994] xfrm_policy_inexact_insert_node+0x917/0xb00 [ 691.741746][T15994] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 691.747681][T15994] ? xfrm_policy_inexact_alloc_bin+0x5ad/0x13f0 [ 691.753728][T15994] xfrm_policy_inexact_alloc_chain+0x4ec/0xaf0 [ 691.759815][T15994] xfrm_policy_inexact_insert+0x6a/0x1160 [ 691.765368][T15994] ? __kasan_check_write+0x14/0x20 [ 691.770435][T15994] ? _raw_spin_lock_bh+0xa4/0x1b0 [ 691.775389][T15994] ? policy_hash_bysel+0x137/0x700 [ 691.780323][T15994] xfrm_policy_insert+0xe7/0x940 [ 691.785197][T15994] xfrm_add_policy+0x4f2/0x980 [ 691.789853][T15994] ? cap_capable+0x1d2/0x270 [ 691.794211][T15994] ? xfrm_dump_sa_done+0xc0/0xc0 [ 691.798988][T15994] xfrm_user_rcv_msg+0x4f3/0x7d0 [ 691.803759][T15994] ? xfrm_netlink_rcv+0x90/0x90 [ 691.808451][T15994] ? avc_has_perm+0x16f/0x260 [ 691.812973][T15994] ? avc_has_perm_noaudit+0x430/0x430 [ 691.818165][T15994] netlink_rcv_skb+0x1cf/0x410 [ 691.822766][T15994] ? xfrm_netlink_rcv+0x90/0x90 [ 691.827451][T15994] ? netlink_ack+0xb10/0xb10 [ 691.831876][T15994] ? mutex_lock+0xb6/0x1e0 [ 691.836128][T15994] ? wait_for_completion_killable_timeout+0x10/0x10 [ 691.842552][T15994] ? __netlink_lookup+0x37b/0x3a0 [ 691.847415][T15994] xfrm_netlink_rcv+0x72/0x90 [ 691.851940][T15994] netlink_unicast+0x8df/0xac0 [ 691.856529][T15994] ? netlink_detachskb+0x90/0x90 [ 691.861301][T15994] ? security_netlink_send+0x7b/0xa0 [ 691.866437][T15994] netlink_sendmsg+0xa0a/0xd20 [ 691.871026][T15994] ? netlink_getsockopt+0x560/0x560 [ 691.876146][T15994] ? security_socket_sendmsg+0x82/0xb0 [ 691.881443][T15994] ? netlink_getsockopt+0x560/0x560 [ 691.886469][T15994] ____sys_sendmsg+0x59e/0x8f0 [ 691.891073][T15994] ? __sys_sendmsg_sock+0x40/0x40 [ 691.895930][T15994] ? import_iovec+0xe5/0x120 [ 691.900360][T15994] ___sys_sendmsg+0x252/0x2e0 [ 691.904871][T15994] ? __sys_sendmsg+0x260/0x260 [ 691.909468][T15994] ? percpu_counter_add_batch+0x13d/0x160 [ 691.915118][T15994] ? __fdget+0x1bc/0x240 [ 691.919189][T15994] __se_sys_sendmsg+0x19a/0x260 [ 691.923877][T15994] ? __x64_sys_sendmsg+0x90/0x90 [ 691.928656][T15994] ? __kasan_check_write+0x14/0x20 [ 691.933597][T15994] ? switch_fpu_return+0x15f/0x2e0 [ 691.938543][T15994] __x64_sys_sendmsg+0x7b/0x90 [ 691.943234][T15994] x64_sys_call+0x16a/0x9a0 [ 691.947569][T15994] do_syscall_64+0x3b/0xb0 [ 691.951933][T15994] ? clear_bhb_loop+0x35/0x90 [ 691.956444][T15994] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 691.962174][T15994] RIP: 0033:0x7fb3aed74da9 [ 691.966428][T15994] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 691.985874][T15994] RSP: 002b:00007fb3ad3df038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 691.994635][T15994] RAX: ffffffffffffffda RBX: 00007fb3aef8dfa0 RCX: 00007fb3aed74da9 [ 692.002442][T15994] RDX: 0000000000004000 RSI: 0000000020000580 RDI: 0000000000000005 [ 692.010253][T15994] RBP: 00007fb3aedf62a0 R08: 0000000000000000 R09: 0000000000000000 [ 692.018066][T15994] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 692.025890][T15994] R13: 0000000000000000 R14: 00007fb3aef8dfa0 R15: 00007ffce0cb4fc8 [ 692.033695][T15994] [ 692.036552][T15994] [ 692.038731][T15994] Allocated by task 15994: [ 692.042993][T15994] ____kasan_kmalloc+0xdb/0x110 [ 692.047725][T15994] __kasan_kmalloc+0x9/0x10 [ 692.052001][T15994] __kmalloc+0x13f/0x2c0 [ 692.056083][T15994] sk_prot_alloc+0xf9/0x330 [ 692.060421][T15994] sk_alloc+0x38/0x430 [ 692.064326][T15994] pfkey_create+0x12c/0x620 [ 692.068666][T15994] __sock_create+0x3be/0x7e0 [ 692.073178][T15994] __sys_socket+0x132/0x370 [ 692.077518][T15994] __x64_sys_socket+0x7a/0x90 [ 692.082033][T15994] x64_sys_call+0x147/0x9a0 [ 692.086378][T15994] do_syscall_64+0x3b/0xb0 [ 692.090631][T15994] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 692.096351][T15994] [ 692.098523][T15994] Last potentially related work creation: [ 692.104078][T15994] kasan_save_stack+0x3b/0x60 [ 692.108591][T15994] __kasan_record_aux_stack+0xd3/0xf0 [ 692.113807][T15994] kasan_record_aux_stack_noalloc+0xb/0x10 [ 692.119569][T15994] call_rcu+0x123/0x10b0 [ 692.123663][T15994] qdisc_destroy+0x162/0x280 [ 692.128073][T15994] dev_shutdown+0x192/0x560 [ 692.132430][T15994] unregister_netdevice_many+0x9b2/0x17c0 [ 692.137969][T15994] unregister_netdevice_queue+0x2e6/0x350 [ 692.143526][T15994] __tun_detach+0xd14/0x1510 [ 692.147976][T15994] tun_chr_close+0x92/0x140 [ 692.152292][T15994] __fput+0x228/0x8c0 [ 692.156110][T15994] ____fput+0x15/0x20 [ 692.159927][T15994] task_work_run+0x129/0x190 [ 692.164355][T15994] exit_to_user_mode_loop+0xc4/0xe0 [ 692.169389][T15994] exit_to_user_mode_prepare+0x5a/0xa0 [ 692.174684][T15994] syscall_exit_to_user_mode+0x26/0x160 [ 692.180065][T15994] do_syscall_64+0x47/0xb0 [ 692.184317][T15994] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 692.190045][T15994] [ 692.192221][T15994] Second to last potentially related work creation: [ 692.198759][T15994] kasan_save_stack+0x3b/0x60 [ 692.203265][T15994] __kasan_record_aux_stack+0xd3/0xf0 [ 692.208553][T15994] kasan_record_aux_stack_noalloc+0xb/0x10 [ 692.214286][T15994] insert_work+0x56/0x320 [ 692.218449][T15994] __queue_work+0x92a/0xcd0 [ 692.222785][T15994] queue_work_on+0x105/0x170 [ 692.227214][T15994] release_tty+0x73b/0x810 [ 692.231470][T15994] tty_release_struct+0xc1/0xe0 [ 692.236155][T15994] tty_release+0xdf4/0x1070 [ 692.240493][T15994] __fput+0x228/0x8c0 [ 692.244321][T15994] ____fput+0x15/0x20 [ 692.248129][T15994] task_work_run+0x129/0x190 [ 692.252579][T15994] exit_to_user_mode_loop+0xc4/0xe0 [ 692.257592][T15994] exit_to_user_mode_prepare+0x5a/0xa0 [ 692.262987][T15994] syscall_exit_to_user_mode+0x26/0x160 [ 692.268453][T15994] do_syscall_64+0x47/0xb0 [ 692.272710][T15994] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 692.278437][T15994] [ 692.280607][T15994] The buggy address belongs to the object at ffff888120053800 [ 692.280607][T15994] which belongs to the cache kmalloc-1k of size 1024 [ 692.294492][T15994] The buggy address is located 1016 bytes inside of [ 692.294492][T15994] 1024-byte region [ffff888120053800, ffff888120053c00) [ 692.307784][T15994] The buggy address belongs to the page: [ 692.313245][T15994] page:ffffea0004801400 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x120050 [ 692.323308][T15994] head:ffffea0004801400 order:3 compound_mapcount:0 compound_pincount:0 [ 692.331468][T15994] flags: 0x4000000000010200(slab|head|zone=1) [ 692.337376][T15994] raw: 4000000000010200 dead000000000100 dead000000000122 ffff888100043080 [ 692.345792][T15994] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000 [ 692.354205][T15994] page dumped because: kasan: bad access detected [ 692.360555][T15994] page_owner tracks the page as allocated [ 692.366094][T15994] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d2a20(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 11401, ts 589390960813, free_ts 589331012738 [ 692.386147][T15994] post_alloc_hook+0x1a3/0x1b0 [ 692.390742][T15994] prep_new_page+0x1b/0x110 [ 692.395086][T15994] get_page_from_freelist+0x3550/0x35d0 [ 692.400465][T15994] __alloc_pages+0x27e/0x8f0 [ 692.404897][T15994] new_slab+0x9a/0x4e0 [ 692.408798][T15994] ___slab_alloc+0x39e/0x830 [ 692.413223][T15994] __slab_alloc+0x4a/0x90 [ 692.417390][T15994] __kmalloc_track_caller+0x171/0x2c0 [ 692.422601][T15994] __alloc_skb+0x10c/0x550 [ 692.426851][T15994] inet6_rt_notify+0x2db/0x550 [ 692.431450][T15994] fib6_add+0x23ac/0x3df0 [ 692.435621][T15994] ip6_route_add+0x8a/0x130 [ 692.440073][T15994] addrconf_add_linklocal+0x5b5/0x9e0 [ 692.445278][T15994] addrconf_addr_gen+0x572/0xd00 [ 692.450053][T15994] addrconf_init_auto_addrs+0xb8a/0x1060 [ 692.455522][T15994] addrconf_notify+0x91d/0xdd0 [ 692.460127][T15994] page last free stack trace: [ 692.464635][T15994] free_unref_page_prepare+0x7c8/0x7d0 [ 692.469929][T15994] free_unref_page+0xe8/0x750 [ 692.474444][T15994] __free_pages+0x61/0xf0 [ 692.478627][T15994] __free_slab+0xec/0x1d0 [ 692.482773][T15994] __unfreeze_partials+0x165/0x1a0 [ 692.487733][T15994] put_cpu_partial+0xc4/0x120 [ 692.492233][T15994] __slab_free+0x1c8/0x290 [ 692.496487][T15994] ___cache_free+0x109/0x120 [ 692.500915][T15994] qlink_free+0x4d/0x90 [ 692.504912][T15994] qlist_free_all+0x44/0xb0 [ 692.509246][T15994] kasan_quarantine_reduce+0x15a/0x180 [ 692.514540][T15994] __kasan_slab_alloc+0x2f/0xe0 [ 692.519225][T15994] slab_post_alloc_hook+0x53/0x2c0 [ 692.524187][T15994] kmem_cache_alloc+0xf5/0x250 [ 692.528782][T15994] __alloc_skb+0xbe/0x550 [ 692.532939][T15994] rtmsg_ifa+0x1e7/0x3a0 [ 692.537019][T15994] [ 692.539284][T15994] Memory state around the buggy address: [ 692.544750][T15994] ffff888120053a80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 692.552657][T15994] ffff888120053b00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 692.560715][T15994] >ffff888120053b80: 00 00 00 00 00 00 00 00 00 00 00 00 fc fc fc fc [ 692.568611][T15994] ^ [ 692.576426][T15994] ffff888120053c00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 692.584325][T15994] ffff888120053c80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 692.592322][T15994] ================================================================== [ 692.600205][T15994] Disabling lock debugging due to kernel taint [ 692.649380][ T30] kauditd_printk_skb: 127 callbacks suppressed [ 692.649399][ T30] audit: type=1326 audit(1738307255.292:15721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15998 comm="syz.7.5145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda19903da9 code=0x7ffc0000 [ 692.685300][ T30] audit: type=1326 audit(1738307255.292:15722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15998 comm="syz.7.5145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fda19903da9 code=0x7ffc0000 [ 692.708809][ T30] audit: type=1326 audit(1738307255.292:15723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15998 comm="syz.7.5145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda19903da9 code=0x7ffc0000 [ 692.733078][ T30] audit: type=1326 audit(1738307255.292:15724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15998 comm="syz.7.5145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fda19903da9 code=0x7ffc0000 [ 692.756795][ T30] audit: type=1326 audit(1738307255.302:15725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15998 comm="syz.7.5145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda19903da9 code=0x7ffc0000 [ 692.780259][ T30] audit: type=1326 audit(1738307255.302:15726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15998 comm="syz.7.5145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fda19903da9 code=0x7ffc0000 [ 692.803903][ T30] audit: type=1326 audit(1738307255.322:15727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15998 comm="syz.7.5145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda19903da9 code=0x7ffc0000 [ 692.833220][ T30] audit: type=1326 audit(1738307255.332:15728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15998 comm="syz.7.5145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7fda19903da9 code=0x7ffc0000 [ 692.856744][ T30] audit: type=1326 audit(1738307255.332:15729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15998 comm="syz.7.5145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda19903da9 code=0x7ffc0000 [ 692.881040][ T30] audit: type=1326 audit(1738307255.332:15730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15998 comm="syz.7.5145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=311 compat=0 ip=0x7fda19903da9 code=0x7ffc0000 [ 698.281823][ C0] ip6_tunnel: syztnl1 xmit: Local address not yet configured!