last executing test programs: 2.428494378s ago: executing program 1 (id=832): r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001500)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000006000000040000000000000700000000000000000000000105000001800000000000000001000085"], 0x0, 0x52, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) dup3(r1, r0, 0x0) 2.407513669s ago: executing program 1 (id=833): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x1f6, 0x4) sendmmsg$inet(r0, &(0x7f0000001980)=[{{&(0x7f00000002c0)={0x2, 0x4e22, @loopback}, 0x10, 0x0}}], 0x1, 0x240080e4) write(r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r1, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) recvmmsg(r0, &(0x7f0000000f80)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000580)=""/179, 0xb3}], 0x1}}], 0x1, 0x2000, 0x0) 2.39530274s ago: executing program 1 (id=835): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r1 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f0000000000)='asymmetric\x00', &(0x7f0000000080)=@keyring={'key_or_keyring:', r1}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0b00000005000000010001000700000001000000", @ANYRES32, @ANYBLOB='\x00\b\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b40300000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x82000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000002c0)='kfree\x00'}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2.331944576s ago: executing program 1 (id=840): syz_mount_image$ext4(&(0x7f0000000500)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f00000002c0)={[{}]}, 0x1, 0x453, &(0x7f00000014c0)="$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") r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'macvlan0\x00'}) fcntl$setstatus(r0, 0x4, 0x6000) syz_genetlink_get_family_id$nl80211(0x0, r0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, "ef359f413bb90900f7d6a4ae6dddfbd11000000000000000000ff8ee09e737ff0edf110ff4117639c2eb8f18d2b8f6277dd41905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61ffcf33524bbd9bffbcc2542ded71038232d71e14efbac003000000852f2036dc783800000000e9b49600", "f28359738e229a4c66810000000000f300e6d902000000000000000000000001"}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x6b142, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000640)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x2e, 0x5}}, 0x20) syz_mount_image$ext4(&(0x7f0000000500)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f00000002c0)={[{}]}, 0x1, 0x453, &(0x7f00000014c0)="$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") (async) creat(&(0x7f0000000000)='./bus\x00', 0x0) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'macvlan0\x00'}) (async) fcntl$setstatus(r0, 0x4, 0x6000) (async) syz_genetlink_get_family_id$nl80211(0x0, r0) (async) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) (async) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) (async) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, "ef359f413bb90900f7d6a4ae6dddfbd11000000000000000000ff8ee09e737ff0edf110ff4117639c2eb8f18d2b8f6277dd41905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61ffcf33524bbd9bffbcc2542ded71038232d71e14efbac003000000852f2036dc783800000000e9b49600", "f28359738e229a4c66810000000000f300e6d902000000000000000000000001"}) (async) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x6b142, 0x0) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000640)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x2e, 0x5}}, 0x20) (async) 2.307046039s ago: executing program 3 (id=842): r0 = openat$uhid(0xffffff9c, &(0x7f0000000000), 0x802, 0x0) read(r0, &(0x7f0000000180)=""/84, 0x54) 2.28925393s ago: executing program 3 (id=844): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000080000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000040008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r1}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x54}}, 0x0) 2.278267722s ago: executing program 3 (id=846): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_all\x00', 0x275a, 0x0) fallocate(r0, 0x0, 0x0, 0x8000001) fallocate(r0, 0x20, 0x2000, 0x140000) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x8000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x18) syz_usbip_server_init(0x1) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) writev(r2, &(0x7f0000000300)=[{&(0x7f00000000c0)="c057", 0x2}], 0x1) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000000000800000a0660400", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r2, @ANYBLOB="00000000000000000000000000000000f8ffffff78c8000000000000"], 0x50) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setresuid(0xee00, 0xee01, 0x0) fchown(0xffffffffffffffff, 0x0, 0xee01) setreuid(0xee01, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="00000000000000000f0200000000000085000000860000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r5}, 0x10) openat2$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r6, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r6, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) recvfrom(r6, &(0x7f0000000480)=""/110, 0xfffffe32, 0x734, 0x0, 0xfffffffffffffecb) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020148100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0xfffffffffffffd13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r7}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) syz_io_uring_setup(0x10d, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x20000}, &(0x7f00000000c0), &(0x7f0000000280)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) 2.172192561s ago: executing program 1 (id=849): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x1f6, 0x4) sendmmsg$inet(r0, &(0x7f0000001980)=[{{&(0x7f00000002c0)={0x2, 0x4e22, @loopback}, 0x10, 0x0}}], 0x1, 0x240080e4) write(r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r1, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) recvmmsg(r0, &(0x7f0000000f80)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000580)=""/179, 0xb3}], 0x1}}], 0x1, 0x2000, 0x0) 2.156912172s ago: executing program 4 (id=851): io_setup(0x3, &(0x7f0000000140)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) ptrace$ARCH_SET_CPUID(0x1e, r0, 0x0, 0x1012) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000008002b000000000000000018040000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r4}, 0x10) r5 = syz_open_dev$usbfs(&(0x7f0000000040), 0x75, 0x109301) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYRESDEC=r5], &(0x7f0000000100)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000000)='sched_switch\x00', r3, 0x0, 0xab}, 0x1e) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffed850000006d000000a50000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) r7 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x520, 0x340, 0x25, 0x148, 0x0, 0x60, 0x488, 0x2a8, 0x2a8, 0x488, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'geneve0\x00', {0x0, 0x0, 0x9, 0x0, 0x0, 0xffffffff, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x0, 0x6, './file0\x00'}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x6, 'syz0\x00'}}}, {{@ip={@empty, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth0_to_team\x00'}, 0x0, 0xe8, 0x148, 0x0, {}, [@common=@set={{0x40}}, @common=@unspec=@statistic={{0x38}}]}, @common=@SET={0x60}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x580) 1.862964099s ago: executing program 1 (id=859): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_all\x00', 0x275a, 0x0) fallocate(r0, 0x0, 0x0, 0x8000001) fallocate(r0, 0x20, 0x2000, 0x140000) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x8, &(0x7f0000003900)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x8000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x18) syz_usbip_server_init(0x1) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) writev(r2, &(0x7f0000000300)=[{&(0x7f00000000c0)="c057", 0x2}], 0x1) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000000000800000a0660400", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r2, @ANYBLOB="00000000000000000000000000000000f8ffffff78c8000000000000"], 0x50) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setresuid(0xee00, 0xee01, 0x0) fchown(0xffffffffffffffff, 0x0, 0xee01) setreuid(0xee01, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="00000000000000000f0200000000000085000000860000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r5}, 0x10) openat2$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r6, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r6, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) recvfrom(r6, &(0x7f0000000480)=""/110, 0xfffffe32, 0x734, 0x0, 0xfffffffffffffecb) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020148100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0xfffffffffffffd13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r7}, 0x10) socket$inet_udplite(0x2, 0x2, 0x88) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) syz_io_uring_setup(0x10d, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x20000}, &(0x7f00000000c0), &(0x7f0000000280)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) 1.410395181s ago: executing program 2 (id=869): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x1f6, 0x4) sendmmsg$inet(r0, &(0x7f0000001980)=[{{&(0x7f00000002c0)={0x2, 0x4e22, @loopback}, 0x10, 0x0}}], 0x1, 0x240080e4) write(r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r1, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) recvmmsg(r0, &(0x7f0000000f80)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000580)=""/179, 0xb3}], 0x1}}], 0x1, 0x2000, 0x0) 1.410089981s ago: executing program 2 (id=870): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x1f6, 0x4) sendmmsg$inet(r0, &(0x7f0000001980)=[{{&(0x7f00000002c0)={0x2, 0x4e22, @loopback}, 0x10, 0x0}}], 0x1, 0x240080e4) write(r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r1, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) recvmmsg(r0, &(0x7f0000000f80)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000580)=""/179, 0xb3}], 0x1}}], 0x1, 0x2000, 0x0) 1.388407983s ago: executing program 2 (id=871): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r1 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f0000000000)='asymmetric\x00', &(0x7f0000000080)=@keyring={'key_or_keyring:', r1}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0b00000005000000010001000700000001000000", @ANYRES32, @ANYBLOB='\x00\b\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b40300000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x82000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000002c0)='kfree\x00'}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 1.349680046s ago: executing program 2 (id=872): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xffffffff, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff00000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000000000e94e50c500"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000880)='ext2\x00', &(0x7f0000000500)='./file0\x00', 0x21000e, &(0x7f0000000280), 0xfe, 0x504, &(0x7f0000000a40)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r3, 0x40086607, &(0x7f0000000080)={@id={0x64, 0x0, @d}}) r4 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r4, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r5, 0x29, 0x19, &(0x7f0000000040)=0x3, 0x4) syz_emit_ethernet(0xfed7, &(0x7f00000002c0)={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "02adf7", 0x38, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @time_exceed={0x2, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "00641a", 0x0, 0x3a, 0x0, @mcast1, @mcast1, [], "1e520b4c951ee12e"}}}}}}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000300)='kmem_cache_free\x00', r1}, 0x18) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000040)={r1, r0}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000010000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000100)='kmem_cache_free\x00', r7}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) ustat(0x0, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003cc0)=[{{0x0, 0x500, &(0x7f0000003980), 0x171, 0x0, 0x0, 0x20000000}, 0xa}], 0x400000000000172, 0x4000300) 1.195936131s ago: executing program 2 (id=873): bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000740)='./file0\x00', 0x10040, &(0x7f0000000200)={[{@journal_dev}, {@nouid32}]}, 0xfe, 0x269, &(0x7f0000000780)="$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") r0 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000000000000000000000000008500000013000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0x0, 0x10, 0x10, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) symlinkat(&(0x7f0000000300)='./file0\x00', r0, &(0x7f0000000c80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') symlinkat(&(0x7f0000000dc0)='./file0\x00', r0, &(0x7f0000000ec0)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') mkdirat(r0, &(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) symlinkat(&(0x7f0000000040)='./file0\x00', r0, &(0x7f00000004c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r3 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r3, &(0x7f0000000100)="f257a8ea7bc273dfaeab96850806", 0xe, 0x0, &(0x7f0000000200)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14) r5 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fsetxattr$system_posix_acl(r5, &(0x7f0000000000)='system.posix_acl_default\x00', &(0x7f00000002c0)={{}, {0x8}}, 0xfe44, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095", @ANYRES16], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r4, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000bc0)={0x6, 0xf, &(0x7f0000000a40)=@raw=[@call={0x85, 0x0, 0x0, 0x9f}, @alu={0x0, 0x0, 0xb, 0x8, 0x2, 0x42, 0x4}, @printk={@u, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}}, @map_val={0x18, 0xa, 0x2, 0x0, r1}, @jmp={0x5, 0x1, 0x0, 0x2, 0x8, 0x18, 0x10}, @ldst={0x0, 0x2, 0x3, 0x8, 0x7, 0xfffffffffffffffc, 0xffffffffffffffff}, @func={0x85, 0x0, 0x1, 0x0, 0x3}], &(0x7f00000001c0)='syzkaller\x00', 0x2, 0x77, &(0x7f0000000ac0)=""/119, 0x41100, 0x0, '\x00', r4, 0x25, r5, 0x8, &(0x7f0000000480)={0x4, 0x3}, 0x8, 0x10, &(0x7f0000000700)={0x1, 0x1, 0x2, 0x1}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000b40), &(0x7f0000000b80)=[{0x5, 0x1, 0x10, 0x7}, {0x0, 0x1, 0x3, 0x7}], 0x10, 0xff, @void, @value}, 0x94) r7 = socket$pppl2tp(0x18, 0x1, 0x1) r8 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r8, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x3}, 0x1c) connect$pppl2tp(r7, &(0x7f00000002c0)=@pppol2tpin6={0x18, 0x1, {0x0, r8, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, 0x32) writev(r7, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x34000}], 0x1) mkdir(&(0x7f0000000200)='./file0\x00', 0x80) 1.126968757s ago: executing program 4 (id=874): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="00000000000000ff0000000062a200000000000007020000f8ffffffb7030000080000f66876293bf82bb633bef106fceb4f00b7040000000000008500"/72], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f00000000c0)=0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r6) sendmsg$NFC_CMD_DEV_UP(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001c80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="010000000000000000000200000008000100", @ANYRES32=r5], 0x1c}}, 0x0) bind$nfc_llcp(r3, &(0x7f0000000240)={0x27, r5, 0x1, 0x4, 0x1, 0xc, "380d2c8bda490291f3c80ab28f8ae2de9972448e42232aecf20c9d6f43222d2da3e88908e7d84c6e4c453788c2d90b8ab3afb66cd8639f4dad78e247d5d8a5", 0x2a}, 0x60) listen(r2, 0x101) r8 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r8, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0xfff, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3f, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000000020000000000000000018190000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000024"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r10}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={0xffffffffffffffff, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) connect$inet(r8, &(0x7f0000e5c000)={0x2, 0x4e20, @dev}, 0x10) r11 = accept4(r2, 0x0, 0x0, 0x0) sendmmsg$unix(r11, &(0x7f0000008cc0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}}], 0x1, 0x0) 1.058831113s ago: executing program 2 (id=875): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_all\x00', 0x275a, 0x0) fallocate(r0, 0x0, 0x0, 0x8000001) fallocate(r0, 0x20, 0x2000, 0x140000) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x8000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x18) syz_usbip_server_init(0x1) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) writev(r2, &(0x7f0000000300)=[{&(0x7f00000000c0)="c057", 0x2}], 0x1) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000000000800000a0660400", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r2, @ANYBLOB="00000000000000000000000000000000f8ffffff78c8000000000000"], 0x50) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setresuid(0xee00, 0xee01, 0x0) fchown(0xffffffffffffffff, 0x0, 0xee01) setreuid(0xee01, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="00000000000000000f0200000000000085000000860000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r5}, 0x10) openat2$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r6, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r6, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) recvfrom(r6, &(0x7f0000000480)=""/110, 0xfffffe32, 0x734, 0x0, 0xfffffffffffffecb) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020148100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0xfffffffffffffd13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r7}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) syz_io_uring_setup(0x10d, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x20000}, &(0x7f00000000c0), &(0x7f0000000280)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) 993.512759ms ago: executing program 4 (id=876): socket(0x25, 0x801, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000580)='sched_switch\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=ANY=[@ANYBLOB="4c0000001800010000000000f8dbdf2102200008000000090000000008000100e000000206001c004e20000008000700e000000208000200ffffffff08000100ac1414"], 0x4c}}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x60, 0x0}, 0x8) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r4}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0xa, 0x101, 0x7ffd, 0xcc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r5 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) read$usbfs(r5, &(0x7f0000000380)=""/167, 0xa7) r6 = open_tree(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x100) epoll_ctl$EPOLL_CTL_MOD(r5, 0x3, r6, &(0x7f00000001c0)={0x40000000}) socket(0x25, 0x801, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000580)='sched_switch\x00', r0}, 0x10) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=ANY=[@ANYBLOB="4c0000001800010000000000f8dbdf2102200008000000090000000008000100e000000206001c004e20000008000700e000000208000200ffffffff08000100ac1414"], 0x4c}}, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x60}, 0x8) (async) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r4}, 0x10) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0xa, 0x101, 0x7ffd, 0xcc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) (async) openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) (async) read$usbfs(r5, &(0x7f0000000380)=""/167, 0xa7) (async) open_tree(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x100) (async) epoll_ctl$EPOLL_CTL_MOD(r5, 0x3, r6, &(0x7f00000001c0)={0x40000000}) (async) 910.254747ms ago: executing program 0 (id=877): bpf$ENABLE_STATS(0x20, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x5, 0x7fff0006}]}) close_range(r0, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x12, 0xffffffffffffffff, 0x0) chdir(&(0x7f0000000240)='./file0\x00') mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x7800007, 0x12, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000000)='./bus\x00', 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={0xffffffffffffffff, 0xe0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000001280)=[0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) 861.899001ms ago: executing program 3 (id=878): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESHEX, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) setgroups(0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r4}, 0x10) syz_open_dev$usbfs(&(0x7f0000000480), 0xc, 0x141341) openat$full(0xffffff9c, &(0x7f0000000500), 0x800, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') pread64(r5, 0x0, 0x0, 0x0) 814.258556ms ago: executing program 0 (id=879): read(0xffffffffffffffff, &(0x7f0000000180)=""/84, 0x54) 813.980966ms ago: executing program 0 (id=880): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x1f6, 0x4) sendmmsg$inet(r0, &(0x7f0000001980)=[{{&(0x7f00000002c0)={0x2, 0x4e22, @loopback}, 0x10, 0x0}}], 0x1, 0x240080e4) write(r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r1, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) recvmmsg(r0, &(0x7f0000000f80)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000580)=""/179, 0xb3}], 0x1}}], 0x1, 0x2000, 0x0) 768.064279ms ago: executing program 0 (id=881): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000e8ff0000000000ff000044850000000e0000003f0000000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r1 = socket$xdp(0x2c, 0x3, 0x0) r2 = accept(r1, &(0x7f0000000700)=@xdp, &(0x7f00000003c0)=0x80) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000600)={'ip6_vti0\x00', &(0x7f0000000580)={'syztnl2\x00', 0x0, 0x2f, 0x4, 0x0, 0x8b9, 0x1, @ipv4={'\x00', '\xff\xff', @multicast2}, @mcast1, 0x20, 0x10, 0x6, 0x2a}}) setsockopt$MRT_ADD_VIF(r2, 0x0, 0xca, &(0x7f00000006c0)={0x0, 0x0, 0xa4, 0x6, @vifc_lcl_ifindex=r3, @initdev={0xac, 0x1e, 0x5, 0x0}}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x6, 0x6, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x5}, [@ldst={0x0, 0x1, 0x1, 0xa, 0x0, 0xfffffffffffffffc, 0xffffffffffffffed}, @btf_id={0x18, 0xa, 0x3, 0x0, 0x2}]}, &(0x7f0000000280)='syzkaller\x00', 0x9, 0x53, &(0x7f0000000400)=""/83, 0x41100, 0x3, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000480)={0x1, 0x10, 0x3, 0x2}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1bd, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r4 = socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) r7 = syz_open_dev$usbmon(&(0x7f0000000900), 0x0, 0x0) ioctl$MON_IOCX_MFETCH(r7, 0xc0109207, &(0x7f0000000080)={0x0, 0x6}) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) r8 = perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext, 0x10c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x66}, 0xffffffffffffffff, 0x0, r8, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="550a00000000000061115c0000000000180000000000000000000000e7ff00009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) ioctl$PERF_EVENT_IOC_DISABLE(r8, 0x2401, 0x3) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x8000000000, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) symlink(&(0x7f0000001780)='./file0/../file0\x00', &(0x7f00000017c0)='./file0\x00') r9 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x0) write$binfmt_script(r9, &(0x7f0000000300)={'#! ', './file0'}, 0xb) execveat(r9, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) sendmsg$kcm(r4, 0x0, 0x0) 664.990229ms ago: executing program 4 (id=882): mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x2, 0x3, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x1e, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x80800e, &(0x7f0000000f40), 0x1, 0x503, &(0x7f0000000880)="$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") r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) write$cgroup_type(r2, &(0x7f0000000200), 0xf642e7e) fallocate(r2, 0x8, 0x1800, 0x1000) write$UHID_CREATE(r0, &(0x7f0000002a00)={0x0, {'syz0\x00', 'syz0\x00', 'syz1\x00', &(0x7f00000000c0)=""/43, 0x2b}}, 0x120) write$UHID_DESTROY(r0, &(0x7f0000000080), 0x4) 349.584588ms ago: executing program 0 (id=883): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_opts(r1, 0x0, 0x4, 0x0, 0x0) r2 = syz_genetlink_get_family_id$auto(&(0x7f0000000180)='kfree\x00', r0) sendmsg$autorun(0xffffffffffffffff, &(0x7f0000000340)=@policy303={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="00002dbd7000fddbdf2504000000060002004e210000060002004e200000060003004e230000060002004e240000060003004e200000"], 0x3c}, 0x1, 0x0, 0x0, 0x4081}, 0x4000000) lstat(&(0x7f0000000040)='./file0\x00', &(0x7f00000002c0)) socket$packet(0x11, 0xa, 0x300) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, &(0x7f00000000c0)="ff", 0x1, 0xffffffffffffffff) r4 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1700000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r6}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r7}, 0x10) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, &(0x7f0000000140)='asymmetric\x00', &(0x7f0000000440)=@secondary) keyctl$KEYCTL_MOVE(0x1e, r3, 0xffffffffffffffff, r4, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480), 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r8 = getpgrp(0x0) r9 = syz_pidfd_open(r8, 0x0) pidfd_getfd(r9, r9, 0x0) 203.578041ms ago: executing program 3 (id=884): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="440000601300290a000000000000602007000000", @ANYRES32=r1, @ANYBLOB="00000000020000001c001a80080002802d002d0008000200f5642d"], 0x44}}, 0x0) 196.156832ms ago: executing program 4 (id=885): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200001400ffd9b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) getdents64(r1, &(0x7f00000003c0)=""/57, 0x39) getdents64(r1, 0xfffffffffffffffe, 0x29) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000480)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) statx(0xffffffffffffffff, 0x0, 0x6000, 0x153146e58b5e3128, 0x0) pipe(&(0x7f0000000080)) 154.573966ms ago: executing program 3 (id=886): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xffffffff, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff00000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000000000e94e50c500"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000880)='ext2\x00', &(0x7f0000000500)='./file0\x00', 0x21000e, &(0x7f0000000280), 0xfe, 0x504, &(0x7f0000000a40)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r3, 0x40086607, &(0x7f0000000080)={@id={0x64, 0x0, @d}}) r4 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r4, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r5, 0x29, 0x19, &(0x7f0000000040)=0x3, 0x4) syz_emit_ethernet(0xfed7, &(0x7f00000002c0)={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "02adf7", 0x38, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @time_exceed={0x2, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "00641a", 0x0, 0x3a, 0x0, @mcast1, @mcast1, [], "1e520b4c951ee12e"}}}}}}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000300)='kmem_cache_free\x00', r1}, 0x18) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000040)={r1, r0}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000010000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000100)='kmem_cache_free\x00', r7}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) ustat(0x0, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003cc0)=[{{0x0, 0x500, &(0x7f0000003980), 0x171, 0x0, 0x0, 0x20000000}, 0xa}], 0x400000000000172, 0x4000300) 153.967046ms ago: executing program 0 (id=887): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xffffffff, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff00000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000000000e94e50c500"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000880)='ext2\x00', &(0x7f0000000500)='./file0\x00', 0x21000e, &(0x7f0000000280), 0xfe, 0x504, &(0x7f0000000a40)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r3, 0x40086607, &(0x7f0000000080)={@id={0x64, 0x0, @d}}) r4 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r4, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r5, 0x29, 0x19, &(0x7f0000000040)=0x3, 0x4) syz_emit_ethernet(0xfed7, &(0x7f00000002c0)={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "02adf7", 0x38, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @time_exceed={0x2, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "00641a", 0x0, 0x3a, 0x0, @mcast1, @mcast1, [], "1e520b4c951ee12e"}}}}}}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000300)='kmem_cache_free\x00', r1}, 0x18) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000040)={r1, r0}, 0xc) r6 = socket$inet6(0xa, 0x800000000000002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000010000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000100)='kmem_cache_free\x00', r7}, 0x10) ustat(0x0, 0x0) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) sendmmsg$inet6(r6, &(0x7f0000003cc0)=[{{0x0, 0x500, &(0x7f0000003980), 0x171, 0x0, 0x0, 0x20000000}, 0xa}], 0x400000000000172, 0x4000300) 0s ago: executing program 4 (id=888): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xffffffff, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff00000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000000000e94e50c500"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000880)='ext2\x00', &(0x7f0000000500)='./file0\x00', 0x21000e, &(0x7f0000000280), 0xfe, 0x504, &(0x7f0000000a40)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r3, 0x40086607, &(0x7f0000000080)={@id={0x64, 0x0, @d}}) r4 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r4, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r5, 0x29, 0x19, &(0x7f0000000040)=0x3, 0x4) syz_emit_ethernet(0xfed7, &(0x7f00000002c0)={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "02adf7", 0x38, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @time_exceed={0x2, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "00641a", 0x0, 0x3a, 0x0, @mcast1, @mcast1, [], "1e520b4c951ee12e"}}}}}}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000300)='kmem_cache_free\x00', r1}, 0x18) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000040)={r1, r0}, 0xc) r6 = socket$inet6(0xa, 0x800000000000002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000010000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000100)='kmem_cache_free\x00', r7}, 0x10) ustat(0x0, 0x0) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) sendmmsg$inet6(r6, &(0x7f0000003cc0)=[{{0x0, 0x500, &(0x7f0000003980), 0x171, 0x0, 0x0, 0x20000000}, 0xa}], 0x400000000000172, 0x4000300) kernel console output (not intermixed with test programs): uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4325 comm="syz.2.276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9121f5df39 code=0x7ffc0000 [ 45.655991][ T4138] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 45.709058][ T4347] syzkaller0: entered promiscuous mode [ 45.714576][ T4347] syzkaller0: entered allmulticast mode [ 45.769528][ T29] audit: type=1326 audit(1727326190.100:1135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4357 comm="syz.2.279" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9121f5df39 code=0x0 [ 45.832313][ T4138] veth0_vlan: entered promiscuous mode [ 45.847744][ T4138] veth1_vlan: entered promiscuous mode [ 45.864168][ T4138] veth0_macvtap: entered promiscuous mode [ 45.872223][ T4138] veth1_macvtap: entered promiscuous mode [ 45.878705][ T4373] netlink: 'syz.2.279': attribute type 1 has an invalid length. [ 45.886444][ T4373] netlink: 'syz.2.279': attribute type 2 has an invalid length. [ 45.899117][ T4138] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 45.909649][ T4138] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 45.921494][ T4138] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 45.932333][ T4138] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 45.942815][ T4138] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 45.952776][ T4138] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 45.963280][ T4138] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 45.973158][ T4138] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 45.983583][ T4138] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 45.993409][ T4138] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 46.003853][ T4138] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.016092][ T4138] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 46.027480][ T4138] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.036254][ T4138] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.045004][ T4138] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.053741][ T4138] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.072957][ T29] audit: type=1400 audit(1727326190.400:1136): avc: denied { mount } for pid=4138 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 46.143048][ T4380] loop3: detected capacity change from 0 to 512 [ 46.150812][ T4380] EXT4-fs (loop3): bad s_want_extra_isize: 16384 [ 46.211079][ T4381] netlink: 12 bytes leftover after parsing attributes in process `syz.3.237'. [ 46.309532][ T4386] netlink: 44 bytes leftover after parsing attributes in process `syz.1.282'. [ 46.318694][ T4386] netlink: 84 bytes leftover after parsing attributes in process `syz.1.282'. [ 46.328862][ T29] audit: type=1326 audit(1727326190.660:1137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4385 comm="syz.1.282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f586962df39 code=0x7ffc0000 [ 46.373235][ T29] audit: type=1326 audit(1727326190.680:1138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4385 comm="syz.1.282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f586962df39 code=0x7ffc0000 [ 46.501102][ T4401] loop0: detected capacity change from 0 to 512 [ 46.517180][ T4401] ext4 filesystem being mounted at /72/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 46.530726][ T4401] EXT4-fs error (device loop0): ext4_acquire_dquot:6879: comm syz.0.288: Failed to acquire dquot type 0 [ 46.578298][ T4407] loop0: detected capacity change from 0 to 1024 [ 46.616912][ T4407] A link change request failed with some changes committed already. Interface vcan0 may have been left with an inconsistent configuration, please check. [ 46.736498][ T4416] netlink: 8 bytes leftover after parsing attributes in process `syz.2.292'. [ 46.798420][ T4416] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 46.948775][ T4417] loop2: detected capacity change from 0 to 2048 [ 47.006030][ T4409] loop4: detected capacity change from 0 to 764 [ 47.094419][ T4435] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(4) [ 47.101020][ T4435] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 47.108574][ T4435] vhci_hcd vhci_hcd.0: Device attached [ 47.202575][ T4444] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(4) [ 47.209107][ T4444] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 47.216646][ T4444] vhci_hcd vhci_hcd.0: Device attached [ 47.219987][ T4442] syzkaller0: entered promiscuous mode [ 47.227637][ T4442] syzkaller0: entered allmulticast mode [ 47.357045][ T3337] usb 9-1: new low-speed USB device number 2 using vhci_hcd [ 47.616683][ T4458] netlink: 'syz.0.302': attribute type 1 has an invalid length. [ 47.624373][ T4458] netlink: 'syz.0.302': attribute type 2 has an invalid length. [ 47.964685][ T9] usb 5-1: new low-speed USB device number 3 using vhci_hcd [ 48.088453][ T4445] vhci_hcd: connection reset by peer [ 48.088811][ T4436] vhci_hcd: connection reset by peer [ 48.099555][ T11] vhci_hcd: stop threads [ 48.103804][ T11] vhci_hcd: release socket [ 48.108396][ T11] vhci_hcd: disconnect device [ 48.128300][ T11] vhci_hcd: stop threads [ 48.132573][ T11] vhci_hcd: release socket [ 48.137072][ T11] vhci_hcd: disconnect device [ 48.193230][ T4471] loop1: detected capacity change from 0 to 512 [ 48.208312][ T4471] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 48.220329][ T4471] EXT4-fs error (device loop1): ext4_orphan_get:1414: comm syz.1.309: bad orphan inode 2 [ 48.230865][ T4471] EXT4-fs (loop1): Remounting filesystem read-only [ 48.237987][ T4471] SELinux: (dev loop1, type ext4) getxattr errno 5 [ 48.367365][ T4480] netlink: 40 bytes leftover after parsing attributes in process `syz.0.313'. [ 48.446031][ T4485] serio: Serial port ptm0 [ 48.994794][ T4493] loop2: detected capacity change from 0 to 512 [ 49.106238][ T4493] ext4 filesystem being mounted at /50/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 49.134588][ T752] hid-generic 0000:0000:0000.0007: unknown main item tag 0x7 [ 49.142229][ T752] hid-generic 0000:0000:0000.0007: ignoring exceeding usage max [ 49.153299][ T752] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 49.163959][ T752] hid-generic 0000:0000:0000.0007: unknown main item tag 0x6 [ 49.171453][ T752] hid-generic 0000:0000:0000.0007: unknown main item tag 0xd [ 49.185341][ T752] hid-generic 0000:0000:0000.0007: hidraw0: HID v0.00 Device [syz0] on syz0 [ 49.341576][ T4507] loop2: detected capacity change from 0 to 512 [ 49.350399][ T4507] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 49.369218][ T4508] syzkaller0: entered promiscuous mode [ 49.374768][ T4508] syzkaller0: entered allmulticast mode [ 49.381473][ T4507] EXT4-fs error (device loop2): ext4_orphan_get:1414: comm syz.2.321: bad orphan inode 2 [ 49.395899][ T4507] EXT4-fs (loop2): Remounting filesystem read-only [ 49.406146][ T4507] SELinux: (dev loop2, type ext4) getxattr errno 5 [ 49.418407][ T4491] Cannot find set identified by id 0 to match [ 49.433364][ T4478] syz.1.312 (4478) used greatest stack depth: 6464 bytes left [ 49.525589][ T4521] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(4) [ 49.532113][ T4521] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 49.539651][ T4521] vhci_hcd vhci_hcd.0: Device attached [ 49.601033][ T4526] netlink: 8 bytes leftover after parsing attributes in process `syz.1.328'. [ 49.662132][ T4526] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 49.742541][ T4526] loop1: detected capacity change from 0 to 2048 [ 50.304708][ T29] kauditd_printk_skb: 146 callbacks suppressed [ 50.304724][ T29] audit: type=1400 audit(1727326194.630:1283): avc: denied { write } for pid=4540 comm="syz.4.332" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 50.350722][ T4522] vhci_hcd: connection closed [ 50.356567][ T50] vhci_hcd: stop threads [ 50.365505][ T50] vhci_hcd: release socket [ 50.369925][ T50] vhci_hcd: disconnect device [ 50.384078][ T4545] netlink: 8 bytes leftover after parsing attributes in process `syz.4.335'. [ 50.393398][ T4545] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 50.420225][ T4547] loop1: detected capacity change from 0 to 512 [ 50.441755][ T4545] loop4: detected capacity change from 0 to 2048 [ 50.448894][ T4547] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 50.469563][ T4547] EXT4-fs error (device loop1): ext4_orphan_get:1414: comm syz.1.334: bad orphan inode 2 [ 50.479643][ T4547] EXT4-fs (loop1): Remounting filesystem read-only [ 50.493556][ T4547] SELinux: (dev loop1, type ext4) getxattr errno 5 [ 50.520923][ T29] audit: type=1400 audit(1727326194.850:1284): avc: denied { listen } for pid=4552 comm="syz.4.336" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 50.575227][ T29] audit: type=1400 audit(1727326194.890:1285): avc: denied { create } for pid=4558 comm="syz.1.339" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 50.590088][ T4563] sch_tbf: peakrate 8 is lower than or equals to rate 12 ! [ 50.617816][ T4563] loop1: detected capacity change from 0 to 2048 [ 50.641922][ T29] audit: type=1400 audit(1727326194.970:1286): avc: denied { remount } for pid=4562 comm="syz.1.340" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 50.662419][ T4563] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 50.679691][ T4563] EXT4-fs: Ignoring removed orlov option [ 50.685641][ T4563] EXT4-fs (loop1): can't enable nombcache during remount [ 50.696543][ T4563] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 50.696736][ T29] audit: type=1400 audit(1727326195.030:1287): avc: denied { read } for pid=4562 comm="syz.1.340" path="/76/file0/bus" dev="loop1" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 50.782681][ T4567] netlink: 4 bytes leftover after parsing attributes in process `syz.1.341'. [ 50.797551][ T4567] loop1: detected capacity change from 0 to 512 [ 50.804104][ T4567] EXT4-fs: Ignoring removed oldalloc option [ 50.811999][ T4567] EXT4-fs error (device loop1): ext4_xattr_inode_iget:436: comm syz.1.341: Parent and EA inode have the same ino 15 [ 50.836724][ T4567] EXT4-fs (loop1): Remounting filesystem read-only [ 50.843328][ T4567] EXT4-fs warning (device loop1): ext4_evict_inode:259: couldn't mark inode dirty (err -5) [ 50.854270][ T4567] EXT4-fs (loop1): 1 orphan inode deleted [ 50.863994][ T4567] SELinux: (dev loop1, type ext4) getxattr errno 5 [ 50.899072][ T4575] netlink: 8 bytes leftover after parsing attributes in process `syz.3.344'. [ 50.908207][ T4575] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 50.933434][ T4575] loop3: detected capacity change from 0 to 2048 [ 50.943208][ T29] audit: type=1400 audit(1727326195.270:1288): avc: denied { create } for pid=4576 comm="syz.0.345" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 50.963648][ T29] audit: type=1400 audit(1727326195.270:1289): avc: denied { write } for pid=4576 comm="syz.0.345" path="socket:[7350]" dev="sockfs" ino=7350 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 50.987686][ T29] audit: type=1400 audit(1727326195.270:1290): avc: denied { nlmsg_read } for pid=4576 comm="syz.0.345" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 51.014295][ T29] audit: type=1400 audit(1727326195.350:1291): avc: denied { append } for pid=4584 comm="syz.1.347" name="sg0" dev="devtmpfs" ino=111 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 51.039014][ T4585] sg_write: process 202 (syz.1.347) changed security contexts after opening file descriptor, this is not allowed. [ 51.051624][ T4585] program syz.1.347 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 51.150005][ T4593] loop0: detected capacity change from 0 to 1024 [ 51.157846][ T4593] EXT4-fs: Ignoring removed oldalloc option [ 51.173344][ T4593] EXT4-fs (loop0): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 51.223871][ T4594] veth0_vlan: entered allmulticast mode [ 51.236943][ T29] audit: type=1400 audit(1727326195.570:1292): avc: denied { write } for pid=4592 comm="syz.0.351" name="task" dev="proc" ino=7133 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 51.252772][ T4601] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present! [ 51.324467][ T4603] Cannot find set identified by id 0 to match [ 51.609623][ T4607] pim6reg1: entered promiscuous mode [ 51.614972][ T4607] pim6reg1: entered allmulticast mode [ 51.638561][ T4611] syzkaller0: entered promiscuous mode [ 51.644105][ T4611] syzkaller0: entered allmulticast mode [ 51.645492][ T4618] netlink: 8 bytes leftover after parsing attributes in process `syz.0.355'. [ 51.667075][ T4618] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 51.690582][ T4618] loop0: detected capacity change from 0 to 2048 [ 51.754228][ T4632] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 51.763458][ T4632] batadv_slave_0: entered promiscuous mode [ 51.830374][ T4646] loop3: detected capacity change from 0 to 256 [ 51.922462][ T4660] netlink: 8 bytes leftover after parsing attributes in process `syz.0.361'. [ 51.931767][ T4660] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 51.960174][ T4660] loop0: detected capacity change from 0 to 2048 [ 52.175872][ T4669] serio: Serial port ptm0 [ 52.244263][ T4672] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(4) [ 52.250799][ T4672] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 52.258353][ T4672] vhci_hcd vhci_hcd.0: Device attached [ 52.355371][ T4678] serio: Serial port ptm2 [ 52.368983][ T4681] loop0: detected capacity change from 0 to 512 [ 52.375533][ T3337] usb 9-1: enqueue for inactive port 0 [ 52.390532][ T3337] usb 9-1: enqueue for inactive port 0 [ 52.397264][ T4681] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 52.424425][ T4681] EXT4-fs error (device loop0): ext4_orphan_get:1414: comm syz.0.365: bad orphan inode 2 [ 52.450337][ T4681] EXT4-fs (loop0): Remounting filesystem read-only [ 52.457497][ T4681] SELinux: (dev loop0, type ext4) getxattr errno 5 [ 52.465119][ T3337] vhci_hcd: vhci_device speed not set [ 53.071148][ T4673] vhci_hcd: connection reset by peer [ 53.076902][ T40] vhci_hcd: stop threads [ 53.081175][ T40] vhci_hcd: release socket [ 53.081270][ T40] vhci_hcd: disconnect device [ 53.081310][ T9] usb 5-1: enqueue for inactive port 0 [ 53.081335][ T9] usb 5-1: enqueue for inactive port 0 [ 53.144708][ T9] vhci_hcd: vhci_device speed not set [ 53.269989][ T8] hid-generic 0000:0000:0000.0008: unknown main item tag 0x7 [ 53.277480][ T8] hid-generic 0000:0000:0000.0008: ignoring exceeding usage max [ 53.288349][ T8] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 53.307865][ T4729] syzkaller0: entered promiscuous mode [ 53.313437][ T4729] syzkaller0: entered allmulticast mode [ 53.314306][ T8] hid-generic 0000:0000:0000.0008: unknown main item tag 0x6 [ 53.326558][ T8] hid-generic 0000:0000:0000.0008: unknown main item tag 0xd [ 53.336594][ T8] hid-generic 0000:0000:0000.0008: hidraw0: HID v0.00 Device [syz0] on syz0 [ 53.885915][ T4746] loop0: detected capacity change from 0 to 128 [ 53.895618][ T4746] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 53.903516][ T4746] FAT-fs (loop0): Filesystem has been set read-only [ 53.910753][ T4746] bio_check_eod: 19 callbacks suppressed [ 53.910784][ T4746] syz.0.384: attempt to access beyond end of device [ 53.910784][ T4746] loop0: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 53.938640][ T4746] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 53.946527][ T4746] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 53.974388][ T4746] syz.0.384: attempt to access beyond end of device [ 53.974388][ T4746] loop0: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 53.977465][ T4754] serio: Serial port ptm0 [ 53.990282][ T4746] syz.0.384: attempt to access beyond end of device [ 53.990282][ T4746] loop0: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 54.002279][ T4752] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8) [ 54.011658][ T4752] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 54.019296][ T4752] vhci_hcd vhci_hcd.0: Device attached [ 54.026828][ T4755] vhci_hcd: connection closed [ 54.027009][ T3555] vhci_hcd: stop threads [ 54.036158][ T3555] vhci_hcd: release socket [ 54.040572][ T3555] vhci_hcd: disconnect device [ 54.100550][ T4761] loop4: detected capacity change from 0 to 512 [ 54.123285][ T4761] ext4 filesystem being mounted at /66/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 54.141512][ T4770] netlink: 8 bytes leftover after parsing attributes in process `syz.3.391'. [ 54.156455][ T4770] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 54.247575][ T4777] netlink: 8 bytes leftover after parsing attributes in process `syz.4.393'. [ 54.256592][ T4777] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 54.328754][ T4783] Cannot find set identified by id 0 to match [ 54.650807][ T4793] netlink: 28 bytes leftover after parsing attributes in process `syz.4.401'. [ 54.682330][ T4797] loop4: detected capacity change from 0 to 512 [ 54.692890][ T4798] loop1: detected capacity change from 0 to 512 [ 54.711066][ T4798] EXT4-fs: Ignoring removed oldalloc option [ 54.717718][ T4797] ext4 filesystem being mounted at /70/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 54.733181][ T4797] EXT4-fs error (device loop4): ext4_acquire_dquot:6879: comm syz.4.403: Failed to acquire dquot type 0 [ 54.741668][ T4798] EXT4-fs error (device loop1): ext4_xattr_inode_iget:436: comm syz.1.402: Parent and EA inode have the same ino 15 [ 54.757041][ T4798] EXT4-fs (loop1): Remounting filesystem read-only [ 54.763747][ T4798] EXT4-fs warning (device loop1): ext4_evict_inode:259: couldn't mark inode dirty (err -5) [ 54.774023][ T4798] EXT4-fs (loop1): 1 orphan inode deleted [ 54.780154][ T4798] SELinux: (dev loop1, type ext4) getxattr errno 5 [ 54.871855][ T752] hid-generic 0000:0000:0000.0009: unknown main item tag 0x7 [ 54.879336][ T752] hid-generic 0000:0000:0000.0009: ignoring exceeding usage max [ 54.890404][ T752] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 54.916925][ T752] hid-generic 0000:0000:0000.0009: unknown main item tag 0x6 [ 54.924385][ T752] hid-generic 0000:0000:0000.0009: unknown main item tag 0xd [ 54.927600][ T4808] loop4: detected capacity change from 0 to 512 [ 54.939049][ T752] hid-generic 0000:0000:0000.0009: hidraw0: HID v0.00 Device [syz0] on syz0 [ 54.948747][ T4808] EXT4-fs: Ignoring removed oldalloc option [ 54.957844][ T4808] EXT4-fs error (device loop4): ext4_xattr_inode_iget:436: comm syz.4.404: Parent and EA inode have the same ino 15 [ 54.970427][ T4808] EXT4-fs (loop4): Remounting filesystem read-only [ 54.977069][ T4808] EXT4-fs warning (device loop4): ext4_evict_inode:259: couldn't mark inode dirty (err -5) [ 54.988532][ T4808] EXT4-fs (loop4): 1 orphan inode deleted [ 54.994663][ T4808] SELinux: (dev loop4, type ext4) getxattr errno 5 [ 55.121836][ T4822] loop0: detected capacity change from 0 to 512 [ 55.139668][ T4822] EXT4-fs error (device loop0): ext4_get_journal_inode:5762: comm syz.0.412: inode #196608: comm syz.0.412: iget: illegal inode # [ 55.154207][ T4822] EXT4-fs (loop0): Remounting filesystem read-only [ 55.160771][ T4822] EXT4-fs (loop0): no journal found [ 55.166006][ T4822] EXT4-fs (loop0): can't get journal size [ 55.175306][ T4822] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 55.186085][ T4822] EXT4-fs (loop0): failed to initialize system zone (-22) [ 55.193272][ T4822] EXT4-fs (loop0): mount failed [ 55.214781][ T4835] serio: Serial port ptm0 [ 55.226459][ T4827] loop1: detected capacity change from 0 to 128 [ 55.279146][ T4839] loop4: detected capacity change from 0 to 512 [ 55.319482][ T4839] ext4 filesystem being mounted at /74/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 55.334536][ T4848] loop2: detected capacity change from 0 to 512 [ 55.354127][ T4848] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 55.363230][ T4848] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 55.372317][ T29] kauditd_printk_skb: 111 callbacks suppressed [ 55.372329][ T29] audit: type=1326 audit(1727326199.700:1402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4851 comm="syz.1.422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f586962df39 code=0x7ffc0000 [ 55.407359][ T4855] syz.0.423[4855] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 55.407432][ T4855] syz.0.423[4855] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 55.440191][ T3337] hid-generic 0000:0000:0000.000A: unknown main item tag 0x7 [ 55.459066][ T3337] hid-generic 0000:0000:0000.000A: ignoring exceeding usage max [ 55.470029][ T3337] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 55.482389][ T29] audit: type=1326 audit(1727326199.730:1403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4851 comm="syz.1.422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=116 compat=0 ip=0x7f586962df39 code=0x7ffc0000 [ 55.504835][ T4848] EXT4-fs (loop2): warning: checktime reached, running e2fsck is recommended [ 55.505738][ T29] audit: type=1326 audit(1727326199.730:1404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4851 comm="syz.1.422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f586962df39 code=0x7ffc0000 [ 55.515469][ T4848] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 55.537759][ T29] audit: type=1326 audit(1727326199.730:1405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4851 comm="syz.1.422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f586962df39 code=0x7ffc0000 [ 55.569124][ T29] audit: type=1326 audit(1727326199.730:1406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4851 comm="syz.1.422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f586962df39 code=0x7ffc0000 [ 55.592485][ T29] audit: type=1326 audit(1727326199.730:1407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4851 comm="syz.1.422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f586962df39 code=0x7ffc0000 [ 55.593379][ T4848] System zones: 0-2 [ 55.615789][ T29] audit: type=1326 audit(1727326199.730:1408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4851 comm="syz.1.422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f586962df39 code=0x7ffc0000 [ 55.619622][ T4848] , 18-18, 34-34 [ 55.642876][ T29] audit: type=1326 audit(1727326199.730:1409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4851 comm="syz.1.422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f586962df39 code=0x7ffc0000 [ 55.646427][ T4848] [ 55.669702][ T29] audit: type=1326 audit(1727326199.730:1410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4851 comm="syz.1.422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f586962df39 code=0x7ffc0000 [ 55.695371][ T29] audit: type=1326 audit(1727326199.730:1411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4851 comm="syz.1.422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f586962c8d0 code=0x7ffc0000 [ 55.719124][ T3337] hid-generic 0000:0000:0000.000A: unknown main item tag 0x6 [ 55.720253][ T4848] EXT4-fs warning (device loop2): ext4_update_dynamic_rev:1138: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 55.726544][ T3337] hid-generic 0000:0000:0000.000A: unknown main item tag 0xd [ 55.742287][ T4848] EXT4-fs (loop2): 1 truncate cleaned up [ 55.749469][ T3337] hid-generic 0000:0000:0000.000A: hidraw0: HID v0.00 Device [syz0] on syz0 [ 55.790403][ T4848] EXT4-fs warning (device loop2): ext4_group_extend:1889: can't read last block, resize aborted [ 55.803356][ T4848] EXT4-fs error (device loop2): ext4_readdir:261: inode #2: block 3: comm syz.2.421: path /64/file0: bad entry in directory: inode out of bounds - offset=0, inode=63, rec_len=12, size=4096 fake=1 [ 55.822544][ T4860] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4) [ 55.822567][ T4860] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 55.836609][ T4860] vhci_hcd vhci_hcd.0: Device attached [ 55.849732][ T4788] syz.3.399 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 55.860673][ T4788] CPU: 0 UID: 0 PID: 4788 Comm: syz.3.399 Not tainted 6.11.0-syzkaller-10622-gaa486552a110 #0 [ 55.870914][ T4788] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 55.881026][ T4788] Call Trace: [ 55.884318][ T4788] [ 55.887275][ T4788] dump_stack_lvl+0xf2/0x150 [ 55.891896][ T4788] dump_stack+0x15/0x20 [ 55.896129][ T4788] dump_header+0x83/0x2d0 [ 55.900459][ T4788] oom_kill_process+0x341/0x4c0 [ 55.905306][ T4788] out_of_memory+0x9af/0xbe0 [ 55.909917][ T4788] ? css_next_descendant_pre+0x11c/0x140 [ 55.915610][ T4788] mem_cgroup_out_of_memory+0x13e/0x190 [ 55.921183][ T4788] try_charge_memcg+0x51b/0x810 [ 55.926069][ T4788] charge_memcg+0x50/0xc0 [ 55.930441][ T4788] mem_cgroup_swapin_charge_folio+0xd0/0x150 [ 55.936496][ T4788] __read_swap_cache_async+0x236/0x480 [ 55.941981][ T4788] swap_cluster_readahead+0x37e/0x3f0 [ 55.947351][ T4788] swapin_readahead+0xe4/0x6f0 [ 55.952185][ T4788] ? __filemap_get_folio+0x420/0x5b0 [ 55.957466][ T4788] ? swap_cache_get_folio+0x77/0x210 [ 55.962746][ T4788] do_swap_page+0x2af/0x23e0 [ 55.967341][ T4788] ? __rcu_read_lock+0x36/0x50 [ 55.972155][ T4788] ? pte_offset_map_nolock+0x124/0x1d0 [ 55.977690][ T4788] handle_mm_fault+0x8c5/0x2a80 [ 55.982540][ T4788] exc_page_fault+0x3b9/0x650 [ 55.987276][ T4788] asm_exc_page_fault+0x26/0x30 [ 55.992118][ T4788] RIP: 0033:0x7fcfd285cab0 [ 55.996521][ T4788] Code: 48 8b 43 38 83 43 28 04 48 8d 50 fc 48 89 53 38 89 68 fc 8b 43 28 48 83 c4 38 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 44 00 00 44 24 1e 01 8b 7c 24 18 48 89 d6 48 89 54 24 10 e8 ea 1d fe ff [ 56.016193][ T4788] RSP: 002b:00007ffd26531010 EFLAGS: 00010246 [ 56.022253][ T4788] RAX: 000000000000e225 RBX: 00007fcfd3665720 RCX: ffffffff81526aef [ 56.030263][ T4788] RDX: ffffffff81526a71 RSI: ffffffff81526aef RDI: 00007fcfd21ff000 [ 56.038222][ T4788] RBP: 00000000000009f1 R08: 00007fcfd2b20000 R09: ffffffff815266fd [ 56.046250][ T4788] R10: 0000000081526af3 R11: 0000000000000006 R12: ffffffff815266fd [ 56.054300][ T4788] R13: 00007fcfd2b36018 R14: 0000000000000008 R15: 000000000001fa72 [ 56.062334][ T4788] ? get_swappiness+0x1d/0x1b0 [ 56.067094][ T4788] ? get_swappiness+0x1d/0x1b0 [ 56.071994][ T4788] ? try_to_inc_max_seq+0x24f/0xbe0 [ 56.077189][ T4788] ? try_to_inc_max_seq+0x1d1/0xbe0 [ 56.082413][ T4788] ? try_to_inc_max_seq+0x24f/0xbe0 [ 56.087683][ T4788] [ 56.091392][ T4788] memory: usage 307200kB, limit 307200kB, failcnt 241 [ 56.098838][ T4788] memory+swap: usage 307388kB, limit 9007199254740988kB, failcnt 0 [ 56.106821][ T4788] kmem: usage 307120kB, limit 9007199254740988kB, failcnt 0 [ 56.114172][ T4788] Memory cgroup stats for /syz3: [ 56.119773][ T4788] cache 81920 [ 56.128103][ T4788] rss 0 [ 56.130856][ T4788] shmem 0 [ 56.133849][ T4788] mapped_file 81920 [ 56.137700][ T4788] dirty 81920 [ 56.140983][ T4788] writeback 0 [ 56.144307][ T4788] workingset_refault_anon 44 [ 56.148979][ T4788] workingset_refault_file 83 [ 56.150498][ T4866] serio: Serial port ptm0 [ 56.153600][ T4788] swap 192512 [ 56.153609][ T4788] swapcached 0 [ 56.165014][ T4788] pgpgin 83730 [ 56.168383][ T4788] pgpgout 83710 [ 56.171843][ T4788] pgfault 45056 [ 56.175323][ T4788] pgmajfault 36 [ 56.178783][ T4788] inactive_anon 0 [ 56.182438][ T4788] active_anon 0 [ 56.182445][ T4788] inactive_file 0 [ 56.182451][ T4788] active_file 81920 [ 56.182456][ T4788] unevictable 0 [ 56.182463][ T4788] hierarchical_memory_limit 314572800 [ 56.182469][ T4788] hierarchical_memsw_limit 9223372036854771712 [ 56.182478][ T4788] total_cache 81920 [ 56.212462][ T4788] total_rss 0 [ 56.215760][ T4788] total_shmem 0 [ 56.219279][ T4788] total_mapped_file 81920 [ 56.223647][ T4788] total_dirty 81920 [ 56.224876][ T3337] usb 3-1: new low-speed USB device number 2 using vhci_hcd [ 56.227587][ T4788] total_writeback 0 [ 56.238696][ T4788] total_workingset_refault_anon 44 [ 56.243852][ T4788] total_workingset_refault_file 83 [ 56.249023][ T4788] total_swap 192512 [ 56.252826][ T4788] total_swapcached 0 [ 56.256732][ T4788] total_pgpgin 83730 [ 56.260618][ T4788] total_pgpgout 83710 [ 56.264607][ T4788] total_pgfault 45056 [ 56.268647][ T4788] total_pgmajfault 36 [ 56.272624][ T4788] total_inactive_anon 0 [ 56.276864][ T4788] total_active_anon 0 [ 56.280836][ T4788] total_inactive_file 0 [ 56.285041][ T4788] total_active_file 81920 [ 56.289620][ T4788] total_unevictable 0 [ 56.293596][ T4788] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.399,pid=4788,uid=0 [ 56.308250][ T4788] Memory cgroup out of memory: Killed process 4788 (syz.3.399) total-vm:86980kB, anon-rss:736kB, file-rss:15904kB, shmem-rss:0kB, UID:0 pgtables:112kB oom_score_adj:1000 [ 56.381957][ T4879] serio: Serial port ptm2 [ 56.614477][ T4889] loop3: detected capacity change from 0 to 512 [ 56.621480][ T4863] vhci_hcd: connection reset by peer [ 56.627106][ T4829] vhci_hcd: stop threads [ 56.631362][ T4829] vhci_hcd: release socket [ 56.635798][ T4829] vhci_hcd: disconnect device [ 56.646184][ T4889] ext4 filesystem being mounted at /19/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 56.663822][ T4889] EXT4-fs error (device loop3): ext4_acquire_dquot:6879: comm syz.3.434: Failed to acquire dquot type 0 [ 57.013681][ T4897] infiniband Syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 57.138676][ T4903] loop4: detected capacity change from 0 to 2048 [ 57.147316][ T3338] hid (null): global environment stack underflow [ 57.154112][ T3338] hid-generic 0000:0000:0000.000B: unknown main item tag 0x2 [ 57.161686][ T3338] hid-generic 0000:0000:0000.000B: global environment stack underflow [ 57.169902][ T3338] hid-generic 0000:0000:0000.000B: item 0 2 1 11 parsing failed [ 57.178800][ T3338] hid-generic 0000:0000:0000.000B: probe with driver hid-generic failed with error -22 [ 57.224499][ C1] hrtimer: interrupt took 29432 ns [ 57.248271][ T4918] serio: Serial port ptm0 [ 57.273413][ T4913] netlink: 8 bytes leftover after parsing attributes in process `syz.4.443'. [ 57.339838][ T4913] loop4: detected capacity change from 0 to 512 [ 57.360441][ T752] hid-generic 0000:0000:0000.000C: unknown main item tag 0x7 [ 57.367962][ T752] hid-generic 0000:0000:0000.000C: ignoring exceeding usage max [ 57.379747][ T752] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 57.388822][ T752] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 57.396345][ T752] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 57.403801][ T752] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 57.411282][ T752] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 57.418756][ T752] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 57.426333][ T752] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 57.431969][ T4913] EXT4-fs error (device loop4): ext4_clear_blocks:876: inode #13: comm syz.4.443: attempt to clear invalid blocks 2 len 1 [ 57.433741][ T752] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 57.433766][ T752] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 57.433788][ T752] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 57.433858][ T752] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 57.448632][ T4913] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, [ 57.453956][ T752] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 57.453980][ T752] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 57.454023][ T752] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 57.454044][ T752] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 57.454083][ T752] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 57.454107][ T752] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 57.454130][ T752] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 57.454153][ T752] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 57.454177][ T752] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 57.461810][ T4913] block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 57.468989][ T752] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 57.474686][ T752] hid-generic 0000:0000:0000.000C: hidraw0: HID v0.00 Device [syz0] on syz0 [ 57.477572][ T4913] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.443: invalid indirect mapped block 1819239214 (level 0) [ 57.527484][ T4939] serio: Serial port ptm2 [ 57.531936][ T4913] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.443: invalid indirect mapped block 1819239214 (level 1) [ 57.616238][ T4913] EXT4-fs (loop4): 1 truncate cleaned up [ 57.628749][ T4913] EXT4-fs warning (device loop4): dx_probe:833: inode #2: comm syz.4.443: Unrecognised inode hash code 20 [ 57.640306][ T4913] EXT4-fs warning (device loop4): dx_probe:966: inode #2: comm syz.4.443: Corrupt directory, running e2fsck is recommended [ 57.707244][ T4943] Cannot find set identified by id 0 to match [ 58.149685][ T4949] Cannot find set identified by id 0 to match [ 58.236413][ T4951] loop1: detected capacity change from 0 to 512 [ 58.243454][ T4951] ext4: Unknown parameter 'dont_hash' [ 58.356608][ T4955] loop2: detected capacity change from 0 to 512 [ 58.418895][ T4955] ext4 filesystem being mounted at /75/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 58.430950][ T4955] EXT4-fs error (device loop2): ext4_acquire_dquot:6879: comm syz.2.459: Failed to acquire dquot type 0 [ 58.431468][ T4961] netlink: 8 bytes leftover after parsing attributes in process `syz.0.461'. [ 58.451048][ T4961] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 58.469885][ T4964] netlink: 'syz.2.462': attribute type 10 has an invalid length. [ 58.477730][ T4964] netlink: 40 bytes leftover after parsing attributes in process `syz.2.462'. [ 58.487506][ T4964] batman_adv: batadv0: Adding interface: veth1_vlan [ 58.494171][ T4964] batman_adv: batadv0: The MTU of interface veth1_vlan is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.520373][ T4964] batman_adv: batadv0: Interface activated: veth1_vlan [ 58.599268][ T752] hid-generic 0000:0000:0000.000D: unknown main item tag 0x7 [ 58.606778][ T752] hid-generic 0000:0000:0000.000D: ignoring exceeding usage max [ 58.617519][ T752] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 58.626034][ T752] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 58.633411][ T752] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 58.640979][ T752] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 58.648409][ T752] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 58.655795][ T752] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 58.663204][ T752] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 58.670652][ T752] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 58.678121][ T752] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 58.685515][ T752] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 58.692937][ T752] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 58.700312][ T752] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 58.707702][ T752] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 58.715091][ T752] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 58.722580][ T752] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 58.730072][ T752] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 58.737559][ T752] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 58.744978][ T752] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 58.752362][ T752] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 58.759762][ T752] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 58.767158][ T752] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 58.777129][ T752] hid-generic 0000:0000:0000.000D: hidraw0: HID v0.00 Device [syz0] on syz0 [ 59.463749][ T4990] loop0: detected capacity change from 0 to 128 [ 59.515380][ T4993] loop0: detected capacity change from 0 to 512 [ 59.537985][ T4993] ext4 filesystem being mounted at /122/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 59.559155][ T4993] EXT4-fs error (device loop0): ext4_readdir:261: inode #2: block 3: comm syz.0.472: path /122/file1: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=514, rec_len=0, size=2048 fake=0 [ 59.588366][ T4993] EXT4-fs (loop0): Remounting filesystem read-only [ 59.822760][ T4991] loop1: detected capacity change from 0 to 512 [ 59.832904][ T4991] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 59.848171][ T4983] Cannot find set identified by id 0 to match [ 59.875358][ T4991] EXT4-fs (loop1): 1 truncate cleaned up [ 59.911742][ T5010] netlink: 8 bytes leftover after parsing attributes in process `syz.2.477'. [ 59.925798][ T5010] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 59.976323][ T5014] netlink: 8 bytes leftover after parsing attributes in process `syz.3.479'. [ 59.994617][ T5014] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 60.131656][ T5029] loop2: detected capacity change from 0 to 512 [ 60.170511][ T5029] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 60.179641][ T5029] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 60.190796][ T5033] loop3: detected capacity change from 0 to 512 [ 60.207974][ T5033] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 60.209760][ T5029] EXT4-fs (loop2): warning: checktime reached, running e2fsck is recommended [ 60.227013][ T5029] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 60.235059][ T5029] System zones: 0-2, 18-18, 34-34 [ 60.246149][ T5033] EXT4-fs error (device loop3): ext4_orphan_get:1414: comm syz.3.488: bad orphan inode 2 [ 60.256103][ T5029] EXT4-fs warning (device loop2): ext4_update_dynamic_rev:1138: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 60.266412][ T5033] EXT4-fs (loop3): Remounting filesystem read-only [ 60.278219][ T5033] SELinux: (dev loop3, type ext4) getxattr errno 5 [ 60.286476][ T5029] EXT4-fs (loop2): 1 truncate cleaned up [ 60.321083][ T5029] EXT4-fs warning (device loop2): ext4_group_extend:1889: can't read last block, resize aborted [ 60.354539][ T35] hid-generic 0000:0000:0000.000E: unknown main item tag 0x7 [ 60.362080][ T35] hid-generic 0000:0000:0000.000E: ignoring exceeding usage max [ 60.373369][ T35] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 60.390254][ T5029] EXT4-fs error (device loop2): ext4_readdir:261: inode #2: block 3: comm syz.2.486: path /86/file0: bad entry in directory: inode out of bounds - offset=0, inode=63, rec_len=12, size=4096 fake=1 [ 60.390289][ T35] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 60.390313][ T35] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 60.390336][ T35] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 60.409557][ T35] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 60.439071][ T35] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 60.446489][ T35] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 60.453955][ T35] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 60.461615][ T35] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 60.469249][ T35] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 60.476751][ T35] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 60.484131][ T35] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 60.491556][ T35] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 60.498978][ T35] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 60.506388][ T35] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 60.513817][ T35] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 60.521232][ T35] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 60.528680][ T35] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 60.536067][ T29] kauditd_printk_skb: 444 callbacks suppressed [ 60.536114][ T35] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 60.536124][ T29] audit: type=1326 audit(1727326204.840:1852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5028 comm="syz.2.486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9121f5df39 code=0x7ffc0000 [ 60.542262][ T35] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 60.542285][ T35] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 60.549661][ T29] audit: type=1326 audit(1727326204.840:1853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5028 comm="syz.2.486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9121f5df39 code=0x7ffc0000 [ 60.577177][ T5045] netlink: 8 bytes leftover after parsing attributes in process `syz.0.491'. [ 60.580311][ T29] audit: type=1326 audit(1727326204.840:1854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5028 comm="syz.2.486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=136 compat=0 ip=0x7f9121f5df39 code=0x7ffc0000 [ 60.587834][ T5045] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 60.610919][ T29] audit: type=1326 audit(1727326204.840:1855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5028 comm="syz.2.486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9121f5df39 code=0x7ffc0000 [ 60.610945][ T29] audit: type=1326 audit(1727326204.840:1856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5028 comm="syz.2.486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f9121f5df39 code=0x7ffc0000 [ 60.610966][ T29] audit: type=1326 audit(1727326204.840:1857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5028 comm="syz.2.486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9121f5df39 code=0x7ffc0000 [ 60.610998][ T29] audit: type=1326 audit(1727326204.840:1858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5028 comm="syz.2.486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f9121f5df39 code=0x7ffc0000 [ 60.653388][ T5044] netlink: 8 bytes leftover after parsing attributes in process `syz.1.492'. [ 60.675800][ T29] audit: type=1326 audit(1727326204.840:1859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5028 comm="syz.2.486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9121f5df39 code=0x7ffc0000 [ 60.701872][ T35] hid-generic 0000:0000:0000.000E: hidraw0: HID v0.00 Device [syz0] on syz0 [ 60.722268][ T29] audit: type=1326 audit(1727326204.840:1860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5028 comm="syz.2.486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f9121f5df39 code=0x7ffc0000 [ 60.780380][ T5044] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 60.787323][ T29] audit: type=1326 audit(1727326204.840:1861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5028 comm="syz.2.486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9121f5df39 code=0x7ffc0000 [ 60.872550][ T5052] netlink: 8 bytes leftover after parsing attributes in process `syz.0.494'. [ 60.888598][ T5052] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 60.895438][ T5054] serio: Serial port ptm0 [ 60.935084][ T5062] loop2: detected capacity change from 0 to 2048 [ 60.937478][ T5064] loop3: detected capacity change from 0 to 512 [ 60.949267][ T5064] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 60.958179][ T5066] loop1: detected capacity change from 0 to 512 [ 60.966649][ T5066] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 60.967253][ T5064] EXT4-fs error (device loop3): ext4_orphan_get:1414: comm syz.3.500: bad orphan inode 2 [ 60.986721][ T5064] EXT4-fs (loop3): Remounting filesystem read-only [ 60.993652][ T5064] SELinux: (dev loop3, type ext4) getxattr errno 5 [ 60.993847][ T5066] EXT4-fs error (device loop1): ext4_orphan_get:1414: comm syz.1.501: bad orphan inode 2 [ 61.010527][ T5066] EXT4-fs (loop1): Remounting filesystem read-only [ 61.017841][ T5066] SELinux: (dev loop1, type ext4) getxattr errno 5 [ 61.053430][ T5076] netlink: 8 bytes leftover after parsing attributes in process `syz.3.504'. [ 61.063514][ T5076] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 61.150611][ T5087] serio: Serial port ptm2 [ 61.216464][ T5098] loop0: detected capacity change from 0 to 2048 [ 61.244031][ T5102] netlink: 'syz.2.511': attribute type 1 has an invalid length. [ 61.251762][ T5102] netlink: 'syz.2.511': attribute type 2 has an invalid length. [ 61.261231][ T3337] usb 3-1: enqueue for inactive port 0 [ 61.266761][ T3337] usb 3-1: enqueue for inactive port 0 [ 61.302303][ T5109] loop0: detected capacity change from 0 to 512 [ 61.309337][ T5109] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 61.318536][ T5109] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 61.327284][ T5109] EXT4-fs (loop0): warning: checktime reached, running e2fsck is recommended [ 61.336362][ T5109] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 61.344368][ T5109] System zones: 0-2, 18-18, 34-34 [ 61.344723][ T3337] vhci_hcd: vhci_device speed not set [ 61.354950][ T5109] EXT4-fs warning (device loop0): ext4_update_dynamic_rev:1138: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 61.369986][ T5109] EXT4-fs (loop0): 1 truncate cleaned up [ 61.378247][ T5109] EXT4-fs warning (device loop0): ext4_group_extend:1889: can't read last block, resize aborted [ 61.389374][ T5109] EXT4-fs error (device loop0): ext4_readdir:261: inode #2: block 3: comm syz.0.516: path /131/file0: bad entry in directory: inode out of bounds - offset=0, inode=63, rec_len=12, size=4096 fake=1 [ 61.496937][ T5120] netlink: 24 bytes leftover after parsing attributes in process `syz.0.521'. [ 61.518409][ T5122] loop0: detected capacity change from 0 to 512 [ 61.536106][ T5122] ext4 filesystem being mounted at /137/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 61.548293][ T5122] EXT4-fs error (device loop0): ext4_acquire_dquot:6879: comm syz.0.522: Failed to acquire dquot type 0 [ 61.583477][ T5128] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 61.590109][ T5128] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 61.597733][ T5128] vhci_hcd vhci_hcd.0: Device attached [ 61.722442][ T5129] vhci_hcd: connection closed [ 61.722736][ T4829] vhci_hcd: stop threads [ 61.731714][ T4829] vhci_hcd: release socket [ 61.736246][ T4829] vhci_hcd: disconnect device [ 61.760939][ T5137] loop4: detected capacity change from 0 to 512 [ 61.767524][ T5137] EXT4-fs: Ignoring removed oldalloc option [ 61.775169][ T5137] EXT4-fs error (device loop4): ext4_xattr_inode_iget:436: comm syz.4.526: Parent and EA inode have the same ino 15 [ 61.787593][ T5137] EXT4-fs (loop4): Remounting filesystem read-only [ 61.794104][ T5137] EXT4-fs warning (device loop4): ext4_evict_inode:259: couldn't mark inode dirty (err -5) [ 61.794673][ T3338] vhci_hcd: vhci_device speed not set [ 61.804248][ T5137] EXT4-fs (loop4): 1 orphan inode deleted [ 61.815608][ T5137] SELinux: (dev loop4, type ext4) getxattr errno 5 [ 61.855775][ T5142] loop4: detected capacity change from 0 to 512 [ 61.862706][ T5142] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 61.871851][ T5142] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 61.880882][ T5142] EXT4-fs (loop4): warning: checktime reached, running e2fsck is recommended [ 61.889830][ T5142] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 61.898083][ T5142] System zones: 0-2, 18-18, 34-34 [ 61.903683][ T5142] EXT4-fs warning (device loop4): ext4_update_dynamic_rev:1138: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 61.918931][ T5142] EXT4-fs (loop4): 1 truncate cleaned up [ 61.926059][ T5142] EXT4-fs warning (device loop4): ext4_group_extend:1889: can't read last block, resize aborted [ 61.934929][ T5146] loop1: detected capacity change from 0 to 512 [ 61.937097][ T5142] EXT4-fs error (device loop4): ext4_readdir:261: inode #2: block 3: comm syz.4.528: path /89/file0: bad entry in directory: inode out of bounds - offset=0, inode=63, rec_len=12, size=4096 fake=1 [ 61.966348][ T5146] ext4 filesystem being mounted at /109/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 62.001600][ T5150] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 62.016761][ T5152] loop4: detected capacity change from 0 to 512 [ 62.034852][ T987] hid-generic 0000:0000:0000.000F: unknown main item tag 0x7 [ 62.039494][ T5152] ext4 filesystem being mounted at /90/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 62.042312][ T987] hid-generic 0000:0000:0000.000F: ignoring exceeding usage max [ 62.064045][ T987] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 62.073054][ T987] hid-generic 0000:0000:0000.000F: unknown main item tag 0x6 [ 62.077737][ T752] hid-generic 0000:0000:0000.0010: unknown main item tag 0x7 [ 62.080467][ T987] hid-generic 0000:0000:0000.000F: unknown main item tag 0xd [ 62.087820][ T752] hid-generic 0000:0000:0000.0010: ignoring exceeding usage max [ 62.105802][ T752] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 62.114291][ T752] hid-generic 0000:0000:0000.0010: unknown main item tag 0x6 [ 62.121718][ T752] hid-generic 0000:0000:0000.0010: unknown main item tag 0xd [ 62.130479][ T752] hid-generic 0000:0000:0000.0010: hidraw0: HID v0.00 Device [syz0] on syz0 [ 62.166579][ T987] hid-generic 0000:0000:0000.000F: hidraw0: HID v0.00 Device [syz0] on syz0 [ 62.191347][ T5161] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 62.197964][ T5161] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 62.205508][ T5161] vhci_hcd vhci_hcd.0: Device attached [ 62.284086][ T5167] Cannot find set identified by id 0 to match [ 62.478544][ T5177] __nla_validate_parse: 2 callbacks suppressed [ 62.478556][ T5177] netlink: 28 bytes leftover after parsing attributes in process `syz.0.538'. [ 62.537315][ T5179] loop1: detected capacity change from 0 to 128 [ 62.590393][ T5181] loop0: detected capacity change from 0 to 512 [ 62.593834][ T5183] serio: Serial port ptm0 [ 62.601254][ T5181] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 62.610392][ T5181] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 62.619244][ T5181] EXT4-fs (loop0): warning: checktime reached, running e2fsck is recommended [ 62.628295][ T5181] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 62.636469][ T5181] System zones: 0-2, 18-18, 34-34 [ 62.641967][ T5181] EXT4-fs warning (device loop0): ext4_update_dynamic_rev:1138: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 62.657225][ T5181] EXT4-fs (loop0): 1 truncate cleaned up [ 62.667506][ T5181] EXT4-fs warning (device loop0): ext4_group_extend:1889: can't read last block, resize aborted [ 62.678599][ T5181] EXT4-fs error (device loop0): ext4_readdir:261: inode #2: block 3: comm syz.0.540: path /143/file0: bad entry in directory: inode out of bounds - offset=0, inode=63, rec_len=12, size=4096 fake=1 [ 62.762938][ T5190] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 62.770680][ T5190] batadv_slave_0: entered promiscuous mode [ 62.798115][ T5192] netlink: 8 bytes leftover after parsing attributes in process `syz.4.544'. [ 62.807335][ T5192] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 62.873151][ T5195] TCP: TCP_TX_DELAY enabled [ 62.988411][ T5202] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(4) [ 62.994986][ T5202] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 63.002567][ T5202] vhci_hcd vhci_hcd.0: Device attached [ 63.038565][ T5162] vhci_hcd: connection closed [ 63.038768][ T40] vhci_hcd: stop threads [ 63.047837][ T40] vhci_hcd: release socket [ 63.052252][ T40] vhci_hcd: disconnect device [ 63.244775][ T752] usb 5-1: new low-speed USB device number 4 using vhci_hcd [ 63.305379][ T5211] serio: Serial port ptm2 [ 63.606323][ T5217] Cannot find set identified by id 0 to match [ 63.777159][ T5225] syz.3.551[5225] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 63.777862][ T5225] syz.3.551[5225] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 63.820376][ T5225] syz.3.551[5225] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 63.893727][ T5203] vhci_hcd: connection reset by peer [ 63.915093][ T4829] vhci_hcd: stop threads [ 63.917999][ T5232] netlink: 8 bytes leftover after parsing attributes in process `syz.3.555'. [ 63.919358][ T4829] vhci_hcd: release socket [ 63.928579][ T5232] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 63.932515][ T4829] vhci_hcd: disconnect device [ 64.171337][ T5239] Cannot find set identified by id 0 to match [ 64.440895][ T5245] loop1: detected capacity change from 0 to 512 [ 64.448509][ T5245] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 64.457597][ T5245] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 64.470854][ T5247] loop2: detected capacity change from 0 to 512 [ 64.477980][ T5247] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 64.487117][ T5247] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 64.506844][ T5245] EXT4-fs (loop1): warning: checktime reached, running e2fsck is recommended [ 64.517008][ T5247] EXT4-fs (loop2): warning: checktime reached, running e2fsck is recommended [ 64.521542][ T5245] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 64.529268][ T5247] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 64.533892][ T5245] System zones: 0-2, 18-18, 34-34 [ 64.543730][ T5247] System zones: 0-2, 18-18, 34-34 [ 64.552250][ T5245] EXT4-fs warning (device loop1): ext4_update_dynamic_rev:1138: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 64.567337][ T5247] EXT4-fs warning (device loop2): ext4_update_dynamic_rev:1138: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 64.568101][ T5245] EXT4-fs (loop1): 1 truncate cleaned up [ 64.582301][ T5247] EXT4-fs (loop2): 1 truncate cleaned up [ 64.592983][ T5245] EXT4-fs warning (device loop1): ext4_group_extend:1889: can't read last block, resize aborted [ 64.603539][ T5247] EXT4-fs warning (device loop2): ext4_group_extend:1889: can't read last block, resize aborted [ 64.604367][ T5245] EXT4-fs error (device loop1): ext4_readdir:261: inode #2: block 3: comm syz.1.560: path /114/file0: bad entry in directory: inode out of bounds - offset=0, inode=63, rec_len=12, size=4096 fake=1 [ 64.615106][ T5247] EXT4-fs error (device loop2): ext4_readdir:261: inode #2: block 3: comm syz.2.561: path /98/file0: bad entry in directory: inode out of bounds - offset=0, inode=63, rec_len=12, size=4096 fake=1 [ 64.692638][ T5252] serio: Serial port ptm0 [ 64.783949][ T5264] netlink: 8 bytes leftover after parsing attributes in process `syz.2.566'. [ 64.795666][ T5265] netlink: 8 bytes leftover after parsing attributes in process `syz.0.564'. [ 64.814751][ T5264] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 64.842411][ T5265] loop0: detected capacity change from 0 to 512 [ 64.858210][ T5265] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 64.884975][ T5265] EXT4-fs (loop0): orphan cleanup on readonly fs [ 64.894403][ T5265] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.564: bg 0: block 248: padding at end of block bitmap is not set [ 64.926537][ T5265] EXT4-fs error (device loop0): ext4_acquire_dquot:6879: comm syz.0.564: Failed to acquire dquot type 1 [ 64.964133][ T5265] EXT4-fs (loop0): 1 truncate cleaned up [ 64.977083][ T5273] loop2: detected capacity change from 0 to 512 [ 65.012486][ T5274] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(4) [ 65.019018][ T5274] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 65.026568][ T5274] vhci_hcd vhci_hcd.0: Device attached [ 65.058164][ T5273] EXT4-fs mount: 88 callbacks suppressed [ 65.058180][ T5273] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 65.076529][ T5273] ext4 filesystem being mounted at /102/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 65.173102][ T5283] loop0: detected capacity change from 0 to 512 [ 65.203191][ T3269] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.235939][ T5283] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 65.254760][ T5283] ext4 filesystem being mounted at /150/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 65.376454][ T3266] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.396502][ T5288] netlink: 16 bytes leftover after parsing attributes in process `syz.2.571'. [ 65.452017][ T5295] loop4: detected capacity change from 0 to 512 [ 65.465235][ T5295] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 65.474433][ T5295] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 65.545029][ T29] kauditd_printk_skb: 430 callbacks suppressed [ 65.545053][ T29] audit: type=1326 audit(1727326209.880:2288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5299 comm="syz.1.575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f586962df39 code=0x7ffc0000 [ 65.583418][ T5295] EXT4-fs (loop4): warning: checktime reached, running e2fsck is recommended [ 65.588978][ T5292] netlink: 'syz.0.572': attribute type 2 has an invalid length. [ 65.606165][ T5295] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 65.621887][ T5303] loop1: detected capacity change from 0 to 512 [ 65.624725][ T5295] System zones: 0-2, 18-18, 34-34 [ 65.634135][ T5295] EXT4-fs warning (device loop4): ext4_update_dynamic_rev:1138: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 65.646203][ T5301] syzkaller0: entered promiscuous mode [ 65.649928][ T5295] EXT4-fs (loop4): 1 truncate cleaned up [ 65.653907][ T5301] syzkaller0: entered allmulticast mode [ 65.654095][ T5303] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 65.660184][ T5295] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 65.693109][ T5295] EXT4-fs warning (device loop4): ext4_group_extend:1889: can't read last block, resize aborted [ 65.695204][ T5303] EXT4-fs error (device loop1): ext4_orphan_get:1414: comm syz.1.576: bad orphan inode 2 [ 65.715590][ T5303] EXT4-fs (loop1): Remounting filesystem read-only [ 65.722392][ T5303] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 65.734945][ T5307] capability: warning: `syz.0.572' uses deprecated v2 capabilities in a way that may be insecure [ 65.743216][ T5303] SELinux: (dev loop1, type ext4) getxattr errno 5 [ 65.745507][ T5295] EXT4-fs error (device loop4): ext4_readdir:261: inode #2: block 3: comm syz.4.573: path /99/file0: bad entry in directory: inode out of bounds - offset=0, inode=63, rec_len=12, size=4096 fake=1 [ 65.766883][ T5303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.793999][ T29] audit: type=1326 audit(1727326210.120:2289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5294 comm="syz.4.573" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f692003df39 code=0x7ffc0000 [ 65.803858][ T5310] loop1: detected capacity change from 0 to 512 [ 65.817454][ T29] audit: type=1326 audit(1727326210.120:2290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5294 comm="syz.4.573" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f692003df39 code=0x7ffc0000 [ 65.824061][ T5310] EXT4-fs: Ignoring removed nobh option [ 65.846835][ T29] audit: type=1326 audit(1727326210.120:2291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5294 comm="syz.4.573" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f692003df39 code=0x7ffc0000 [ 65.849075][ T29] audit: type=1326 audit(1727326210.180:2292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5294 comm="syz.4.573" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f692003df39 code=0x7ffc0000 [ 65.864562][ T5310] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 65.875770][ T29] audit: type=1326 audit(1727326210.180:2293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5294 comm="syz.4.573" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f692003df39 code=0x7ffc0000 [ 65.900691][ T5310] EXT4-fs (loop1): 1 truncate cleaned up [ 65.909386][ T5275] vhci_hcd: connection closed [ 65.932366][ T5310] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 65.940420][ T29] audit: type=1326 audit(1727326210.240:2294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5294 comm="syz.4.573" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f692003df39 code=0x7ffc0000 [ 65.946638][ T4829] vhci_hcd: stop threads [ 65.954455][ T29] audit: type=1326 audit(1727326210.250:2295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5294 comm="syz.4.573" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f692003df39 code=0x7ffc0000 [ 65.977657][ T4829] vhci_hcd: release socket [ 65.981875][ T29] audit: type=1326 audit(1727326210.250:2296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5294 comm="syz.4.573" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f692003df39 code=0x7ffc0000 [ 66.005148][ T4829] vhci_hcd: disconnect device [ 66.009518][ T29] audit: type=1326 audit(1727326210.250:2297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5294 comm="syz.4.573" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f692003df39 code=0x7ffc0000 [ 66.071290][ T3270] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.094361][ T5314] netlink: 8 bytes leftover after parsing attributes in process `syz.4.578'. [ 66.103271][ T5314] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 66.124266][ T3260] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.169924][ T5319] serio: Serial port ptm0 [ 66.316250][ T5324] Cannot find set identified by id 0 to match [ 66.713943][ T5339] loop0: detected capacity change from 0 to 128 [ 66.773661][ T5343] loop0: detected capacity change from 0 to 2048 [ 66.786955][ T5343] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 66.813172][ T3266] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.853891][ T5351] loop2: detected capacity change from 0 to 128 [ 66.979778][ T5361] loop2: detected capacity change from 0 to 512 [ 66.986770][ T5361] EXT4-fs: Ignoring removed oldalloc option [ 66.994321][ T5361] EXT4-fs error (device loop2): ext4_xattr_inode_iget:436: comm syz.2.595: Parent and EA inode have the same ino 15 [ 67.014549][ T5361] EXT4-fs (loop2): Remounting filesystem read-only [ 67.021143][ T5361] EXT4-fs warning (device loop2): ext4_evict_inode:259: couldn't mark inode dirty (err -5) [ 67.039311][ T5361] EXT4-fs (loop2): 1 orphan inode deleted [ 67.047742][ T5361] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 67.059951][ T5361] SELinux: (dev loop2, type ext4) getxattr errno 5 [ 67.067909][ T5361] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.105452][ T5370] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 67.121517][ T5370] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 67.180218][ T5382] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(4) [ 67.186761][ T5382] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 67.194295][ T5382] vhci_hcd vhci_hcd.0: Device attached [ 67.204845][ T5386] 9pnet_fd: Insufficient options for proto=fd [ 67.268435][ T5391] syz.3.604[5391] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 67.268525][ T5391] syz.3.604[5391] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 67.302112][ T5391] syz.3.604[5391] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 67.374954][ T5388] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4) [ 67.392647][ T5388] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 67.400250][ T5388] vhci_hcd vhci_hcd.0: Device attached [ 67.539175][ T5405] serio: Serial port ptm0 [ 67.644714][ T3341] usb 3-1: new low-speed USB device number 3 using vhci_hcd [ 67.671318][ T5413] loop0: detected capacity change from 0 to 2048 [ 67.707794][ T5413] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 67.743021][ T3266] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.779003][ T5419] loop0: detected capacity change from 0 to 512 [ 67.798722][ T5419] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 67.824010][ T5419] EXT4-fs (loop0): orphan cleanup on readonly fs [ 67.839368][ T5419] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.611: bg 0: block 248: padding at end of block bitmap is not set [ 67.868412][ T5419] EXT4-fs error (device loop0): ext4_acquire_dquot:6879: comm syz.0.611: Failed to acquire dquot type 1 [ 67.886340][ T5419] EXT4-fs (loop0): 1 truncate cleaned up [ 67.892549][ T5419] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 67.914396][ T3266] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.974735][ T5383] vhci_hcd: connection closed [ 67.981396][ T5426] loop0: detected capacity change from 0 to 512 [ 67.992609][ T335] vhci_hcd: stop threads [ 67.996872][ T335] vhci_hcd: release socket [ 68.001278][ T335] vhci_hcd: disconnect device [ 68.003305][ T5426] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 68.016685][ T5426] EXT4-fs error (device loop0): ext4_orphan_get:1414: comm syz.0.614: bad orphan inode 2 [ 68.026744][ T5389] vhci_hcd: connection reset by peer [ 68.028866][ T5426] EXT4-fs (loop0): Remounting filesystem read-only [ 68.032408][ T40] vhci_hcd: stop threads [ 68.042811][ T40] vhci_hcd: release socket [ 68.043165][ T5426] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 68.047286][ T40] vhci_hcd: disconnect device [ 68.060643][ T5426] SELinux: (dev loop0, type ext4) getxattr errno 5 [ 68.071227][ T5426] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.294783][ T752] usb 5-1: enqueue for inactive port 0 [ 68.301124][ T752] usb 5-1: enqueue for inactive port 0 [ 68.374696][ T752] vhci_hcd: vhci_device speed not set [ 68.389304][ T5436] loop3: detected capacity change from 0 to 512 [ 68.417166][ T5436] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 68.430858][ T5436] ext4 filesystem being mounted at /52/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 68.452084][ T4138] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.512281][ T5445] loop3: detected capacity change from 0 to 512 [ 68.529915][ T5445] EXT4-fs: Ignoring removed oldalloc option [ 68.665668][ T5445] EXT4-fs error (device loop3): ext4_xattr_inode_iget:436: comm syz.3.622: Parent and EA inode have the same ino 15 [ 68.683478][ T5445] EXT4-fs (loop3): Remounting filesystem read-only [ 68.690069][ T5445] EXT4-fs warning (device loop3): ext4_evict_inode:259: couldn't mark inode dirty (err -5) [ 68.702778][ T5445] EXT4-fs (loop3): 1 orphan inode deleted [ 68.708955][ T5445] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 68.731111][ T5445] SELinux: (dev loop3, type ext4) getxattr errno 5 [ 68.739071][ T5454] loop1: detected capacity change from 0 to 512 [ 68.741615][ T5445] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.755651][ T5454] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 68.775860][ T5454] EXT4-fs (loop1): orphan cleanup on readonly fs [ 68.782694][ T5454] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.624: bg 0: block 248: padding at end of block bitmap is not set [ 68.797803][ T5454] EXT4-fs error (device loop1): ext4_acquire_dquot:6879: comm syz.1.624: Failed to acquire dquot type 1 [ 68.801114][ T5459] syz.3.627[5459] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 68.809206][ T5459] syz.3.627[5459] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 68.809477][ T5454] EXT4-fs (loop1): 1 truncate cleaned up [ 68.821501][ T5459] syz.3.627[5459] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 68.833147][ T5454] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 68.871198][ T3260] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.942080][ T5472] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(4) [ 68.948612][ T5472] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 68.956166][ T5472] vhci_hcd vhci_hcd.0: Device attached [ 68.975170][ T5475] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4) [ 68.981786][ T5475] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 68.989357][ T5475] vhci_hcd vhci_hcd.0: Device attached [ 69.603974][ T5487] netlink: 28 bytes leftover after parsing attributes in process `syz.0.633'. [ 69.641088][ T5490] loop0: detected capacity change from 0 to 2048 [ 69.667241][ T5490] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 69.692045][ T3266] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.726821][ T5503] syz.0.639[5503] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 69.726916][ T5503] syz.0.639[5503] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 69.738440][ T5503] syz.0.639[5503] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 69.751866][ T5473] vhci_hcd: connection closed [ 69.763683][ T5476] vhci_hcd: connection closed [ 69.768786][ T40] vhci_hcd: stop threads [ 69.777738][ T40] vhci_hcd: release socket [ 69.782147][ T40] vhci_hcd: disconnect device [ 69.787081][ T40] vhci_hcd: stop threads [ 69.791311][ T40] vhci_hcd: release socket [ 69.795791][ T40] vhci_hcd: disconnect device [ 69.813079][ T5508] syz.0.640[5508] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 69.813222][ T5508] syz.0.640[5508] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 69.825106][ T5508] syz.0.640[5508] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 69.850673][ T5513] process 'syz.2.641' launched './file1' with NULL argv: empty string added [ 69.858929][ T5515] loop0: detected capacity change from 0 to 512 [ 69.878719][ T5515] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 69.887858][ T5515] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 69.897313][ T5515] EXT4-fs (loop0): warning: checktime reached, running e2fsck is recommended [ 69.906256][ T5515] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 69.914265][ T5515] System zones: 0-2, 18-18, 34-34 [ 69.919817][ T5515] EXT4-fs warning (device loop0): ext4_update_dynamic_rev:1138: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 69.935478][ T5515] EXT4-fs (loop0): 1 truncate cleaned up [ 69.941483][ T5515] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 69.954513][ T5515] EXT4-fs warning (device loop0): ext4_group_extend:1889: can't read last block, resize aborted [ 69.965534][ T5515] EXT4-fs error (device loop0): ext4_readdir:261: inode #2: block 3: comm syz.0.642: path /179/file0: bad entry in directory: inode out of bounds - offset=0, inode=63, rec_len=12, size=4096 fake=1 [ 69.994472][ T3266] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.011127][ T5520] netlink: 4 bytes leftover after parsing attributes in process `syz.0.644'. [ 70.077085][ T5524] loop4: detected capacity change from 0 to 2048 [ 70.088615][ T5524] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 70.112669][ T3270] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.182262][ T5535] loop4: detected capacity change from 0 to 512 [ 70.188780][ T5535] EXT4-fs: Ignoring removed oldalloc option [ 70.206360][ T5535] EXT4-fs error (device loop4): ext4_xattr_inode_iget:436: comm syz.4.650: Parent and EA inode have the same ino 15 [ 70.219013][ T5535] EXT4-fs (loop4): Remounting filesystem read-only [ 70.225634][ T5535] EXT4-fs warning (device loop4): ext4_evict_inode:259: couldn't mark inode dirty (err -5) [ 70.236533][ T5535] EXT4-fs (loop4): 1 orphan inode deleted [ 70.242701][ T5535] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 70.254813][ T5535] SELinux: (dev loop4, type ext4) getxattr errno 5 [ 70.262435][ T5535] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.457168][ T5544] syz.3.652[5544] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 70.479625][ T5557] netlink: 8 bytes leftover after parsing attributes in process `syz.0.658'. [ 70.500752][ T5557] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 70.505211][ T5560] serio: Serial port ptm0 [ 70.526483][ T5558] loop3: detected capacity change from 0 to 2048 [ 70.536760][ T5558] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 70.566674][ T4138] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.577467][ T29] kauditd_printk_skb: 656 callbacks suppressed [ 70.577546][ T29] audit: type=1326 audit(1727326214.910:2950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5566 comm="syz.4.660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f692003df39 code=0x7ffc0000 [ 70.608221][ T29] audit: type=1326 audit(1727326214.910:2951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5566 comm="syz.4.660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f692003df39 code=0x7ffc0000 [ 70.631589][ T29] audit: type=1326 audit(1727326214.910:2952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5566 comm="syz.4.660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f692003df39 code=0x7ffc0000 [ 70.654791][ T29] audit: type=1326 audit(1727326214.910:2953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5566 comm="syz.4.660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f692003df39 code=0x7ffc0000 [ 70.678117][ T29] audit: type=1326 audit(1727326214.910:2954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5566 comm="syz.4.660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f692003df39 code=0x7ffc0000 [ 70.701339][ T29] audit: type=1326 audit(1727326214.910:2955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5566 comm="syz.4.660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f692003df39 code=0x7ffc0000 [ 70.724751][ T29] audit: type=1326 audit(1727326214.910:2956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5566 comm="syz.4.660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f692003df39 code=0x7ffc0000 [ 70.748264][ T29] audit: type=1326 audit(1727326214.910:2957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5566 comm="syz.4.660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=40 compat=0 ip=0x7f692003df39 code=0x7ffc0000 [ 70.765407][ T5578] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(4) [ 70.771585][ T29] audit: type=1326 audit(1727326214.910:2958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5566 comm="syz.4.660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f692003df39 code=0x7ffc0000 [ 70.778021][ T5578] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 70.778195][ T5578] vhci_hcd vhci_hcd.0: Device attached [ 70.814859][ T29] audit: type=1326 audit(1727326214.910:2959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5566 comm="syz.4.660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f692003df39 code=0x7ffc0000 [ 70.895404][ T5583] loop0: detected capacity change from 0 to 512 [ 70.919027][ T5583] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 70.928198][ T5583] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 70.960016][ T5583] EXT4-fs (loop0): warning: checktime reached, running e2fsck is recommended [ 70.993898][ T5583] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 71.002153][ T5583] System zones: 0-2, 18-18, 34-34 [ 71.016779][ T5583] EXT4-fs warning (device loop0): ext4_update_dynamic_rev:1138: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 71.035550][ T5587] Cannot find set identified by id 0 to match [ 71.051453][ T3337] usb 9-1: new low-speed USB device number 3 using vhci_hcd [ 71.108475][ T5583] EXT4-fs (loop0): 1 truncate cleaned up [ 71.149143][ T5583] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 71.269106][ T5581] EXT4-fs warning (device loop0): ext4_group_extend:1889: can't read last block, resize aborted [ 71.288786][ T5581] EXT4-fs error (device loop0): ext4_readdir:261: inode #2: block 3: comm syz.0.664: path /187/file0: bad entry in directory: inode out of bounds - offset=0, inode=63, rec_len=12, size=4096 fake=1 [ 71.412270][ T5584] Cannot find set identified by id 0 to match [ 71.514441][ T3266] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.622675][ T5579] vhci_hcd: connection reset by peer [ 71.635861][ T4829] vhci_hcd: stop threads [ 71.640167][ T4829] vhci_hcd: release socket [ 71.644598][ T4829] vhci_hcd: disconnect device [ 71.671961][ T5598] loop0: detected capacity change from 0 to 512 [ 71.693777][ T5598] EXT4-fs: Ignoring removed oldalloc option [ 71.700700][ T5600] netlink: 'syz.1.669': attribute type 1 has an invalid length. [ 71.708380][ T5600] netlink: 'syz.1.669': attribute type 2 has an invalid length. [ 71.719765][ T5598] EXT4-fs error (device loop0): ext4_xattr_inode_iget:436: comm syz.0.667: Parent and EA inode have the same ino 15 [ 71.732585][ T5598] EXT4-fs (loop0): Remounting filesystem read-only [ 71.739196][ T5598] EXT4-fs warning (device loop0): ext4_evict_inode:259: couldn't mark inode dirty (err -5) [ 71.751113][ T5598] EXT4-fs (loop0): 1 orphan inode deleted [ 71.757448][ T5598] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 71.770516][ T5598] SELinux: (dev loop0, type ext4) getxattr errno 5 [ 71.789709][ T5598] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.838812][ T5611] loop0: detected capacity change from 0 to 128 [ 71.871633][ T5618] serio: Serial port ptm0 [ 71.877619][ T5611] syz.0.674: attempt to access beyond end of device [ 71.877619][ T5611] loop0: rw=0, sector=121, nr_sectors = 119 limit=128 [ 71.943321][ T5620] ip6t_srh: unknown srh invflags 7D00 [ 72.060932][ T4830] kworker/u8:10: attempt to access beyond end of device [ 72.060932][ T4830] loop0: rw=1, sector=241, nr_sectors = 800 limit=128 [ 72.140755][ T5624] netlink: 8 bytes leftover after parsing attributes in process `syz.0.677'. [ 72.180511][ T5624] loop0: detected capacity change from 0 to 516 [ 72.188382][ T5624] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 72.197674][ T5624] EXT4-fs error (device loop0): __ext4_fill_super:5458: inode #2: comm syz.0.677: iget: special inode unallocated [ 72.209966][ T5624] EXT4-fs (loop0): get root inode failed [ 72.215659][ T5624] EXT4-fs (loop0): mount failed [ 72.324562][ T5633] loop0: detected capacity change from 0 to 512 [ 72.337204][ T5633] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 72.349823][ T5633] ext4 filesystem being mounted at /194/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 72.361978][ T5637] netlink: 8 bytes leftover after parsing attributes in process `syz.4.678'. [ 72.387956][ T5637] loop4: detected capacity change from 0 to 512 [ 72.395862][ T5637] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 72.407924][ T5637] EXT4-fs (loop4): orphan cleanup on readonly fs [ 72.412255][ T752] hid-generic 0000:0000:0000.0011: unknown main item tag 0x7 [ 72.414912][ T5637] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.678: bg 0: block 248: padding at end of block bitmap is not set [ 72.421659][ T752] hid-generic 0000:0000:0000.0011: ignoring exceeding usage max [ 72.437584][ T5637] EXT4-fs error (device loop4): ext4_acquire_dquot:6879: comm syz.4.678: Failed to acquire dquot type 1 [ 72.446825][ T752] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 72.455058][ T5637] EXT4-fs (loop4): 1 truncate cleaned up [ 72.462287][ T752] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 72.475127][ T752] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 72.482506][ T752] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 72.489877][ T752] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 72.497286][ T752] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 72.504677][ T752] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 72.512075][ T752] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 72.519501][ T752] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 72.526889][ T752] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 72.534246][ T752] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 72.541710][ T752] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 72.549115][ T752] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 72.556490][ T752] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 72.563847][ T752] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 72.571222][ T752] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 72.578669][ T752] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 72.586036][ T752] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 72.593419][ T752] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 72.600791][ T752] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 72.608266][ T752] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 72.616372][ T5637] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 72.616889][ T752] hid-generic 0000:0000:0000.0011: hidraw0: HID v0.00 Device [syz0] on syz0 [ 72.667361][ T3266] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.677656][ T3270] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.695348][ T3341] usb 3-1: enqueue for inactive port 0 [ 72.703505][ T3341] usb 3-1: enqueue for inactive port 0 [ 72.713993][ T5645] loop0: detected capacity change from 0 to 512 [ 72.726887][ T5645] EXT4-fs: Ignoring removed oldalloc option [ 72.776369][ T3341] vhci_hcd: vhci_device speed not set [ 72.777026][ T5645] EXT4-fs error (device loop0): ext4_xattr_inode_iget:436: comm syz.0.683: Parent and EA inode have the same ino 15 [ 72.802248][ T5660] netlink: 28 bytes leftover after parsing attributes in process `syz.2.691'. [ 72.814716][ T5645] EXT4-fs (loop0): Remounting filesystem read-only [ 72.821291][ T5645] EXT4-fs warning (device loop0): ext4_evict_inode:259: couldn't mark inode dirty (err -5) [ 72.835078][ T5645] EXT4-fs (loop0): 1 orphan inode deleted [ 72.841311][ T5645] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 72.842105][ T5672] loop2: detected capacity change from 0 to 128 [ 72.853859][ T5645] SELinux: (dev loop0, type ext4) getxattr errno 5 [ 72.870557][ T5645] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.882624][ T5670] loop4: detected capacity change from 0 to 512 [ 72.894273][ T5675] netlink: 8 bytes leftover after parsing attributes in process `syz.1.693'. [ 72.910502][ T5677] loop0: detected capacity change from 0 to 512 [ 72.918636][ T5677] EXT4-fs (loop0): bad s_want_extra_isize: 16384 [ 72.918788][ T5670] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 72.937590][ T5670] ext4 filesystem being mounted at /116/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 72.965187][ T24] hid (null): global environment stack underflow [ 72.972203][ T24] hid-generic 0000:0000:0000.0012: unknown main item tag 0x2 [ 72.979713][ T24] hid-generic 0000:0000:0000.0012: global environment stack underflow [ 72.987961][ T24] hid-generic 0000:0000:0000.0012: item 0 2 1 11 parsing failed [ 72.990019][ T5691] netlink: 12 bytes leftover after parsing attributes in process `syz.0.697'. [ 72.997159][ T24] hid-generic 0000:0000:0000.0012: probe with driver hid-generic failed with error -22 [ 73.033191][ T3270] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.071412][ T5702] loop3: detected capacity change from 0 to 512 [ 73.078267][ T5702] EXT4-fs: Ignoring removed i_version option [ 73.084304][ T5702] EXT4-fs: Ignoring removed i_version option [ 73.085167][ T5706] loop4: detected capacity change from 0 to 512 [ 73.090449][ T5702] EXT4-fs: Ignoring removed nomblk_io_submit option [ 73.098146][ T5706] EXT4-fs: Ignoring removed oldalloc option [ 73.103303][ T5702] ext4: Unknown parameter 'mask' [ 73.110746][ T5706] EXT4-fs error (device loop4): ext4_xattr_inode_iget:436: comm syz.4.709: Parent and EA inode have the same ino 15 [ 73.127972][ T5706] EXT4-fs (loop4): Remounting filesystem read-only [ 73.134551][ T5706] EXT4-fs warning (device loop4): ext4_evict_inode:259: couldn't mark inode dirty (err -5) [ 73.147698][ T5706] EXT4-fs (loop4): 1 orphan inode deleted [ 73.153891][ T5706] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 73.167314][ T5706] SELinux: (dev loop4, type ext4) getxattr errno 5 [ 73.174724][ T5706] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.190265][ T5711] loop1: detected capacity change from 0 to 2048 [ 73.207462][ T5711] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 73.216188][ T5717] serio: Serial port ptm2 [ 73.231637][ T3260] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.263838][ T5721] loop1: detected capacity change from 0 to 512 [ 73.288004][ T5721] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.300591][ T5721] ext4 filesystem being mounted at /139/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 73.310449][ T5732] serio: Serial port ptm0 [ 73.325913][ T9] hid (null): global environment stack underflow [ 73.332771][ T9] hid-generic 0000:0000:0000.0013: unknown main item tag 0x2 [ 73.340247][ T9] hid-generic 0000:0000:0000.0013: global environment stack underflow [ 73.348503][ T9] hid-generic 0000:0000:0000.0013: item 0 2 1 11 parsing failed [ 73.357921][ T9] hid-generic 0000:0000:0000.0013: probe with driver hid-generic failed with error -22 [ 73.378032][ T3260] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.422420][ T9] hid (null): global environment stack underflow [ 73.429337][ T9] hid-generic 0000:0000:0000.0014: unknown main item tag 0x2 [ 73.436767][ T9] hid-generic 0000:0000:0000.0014: global environment stack underflow [ 73.444983][ T9] hid-generic 0000:0000:0000.0014: item 0 2 1 11 parsing failed [ 73.453120][ T9] hid-generic 0000:0000:0000.0014: probe with driver hid-generic failed with error -22 [ 73.466388][ T5744] syzkaller0: entered promiscuous mode [ 73.471888][ T5744] syzkaller0: entered allmulticast mode [ 73.505147][ T5750] loop1: detected capacity change from 0 to 512 [ 73.512001][ T5750] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 73.521102][ T5750] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 73.529948][ T5750] EXT4-fs (loop1): warning: checktime reached, running e2fsck is recommended [ 73.539188][ T5750] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 73.547274][ T5750] System zones: 0-2, 18-18, 34-34 [ 73.552804][ T5750] EXT4-fs warning (device loop1): ext4_update_dynamic_rev:1138: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 73.567806][ T5750] EXT4-fs (loop1): 1 truncate cleaned up [ 73.573931][ T5750] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 73.589740][ T5750] EXT4-fs warning (device loop1): ext4_group_extend:1889: can't read last block, resize aborted [ 73.600875][ T5750] EXT4-fs error (device loop1): ext4_readdir:261: inode #2: block 3: comm syz.1.725: path /145/file0: bad entry in directory: inode out of bounds - offset=0, inode=63, rec_len=12, size=4096 fake=1 [ 73.632929][ T3260] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.687009][ T5759] loop1: detected capacity change from 0 to 512 [ 73.706301][ T5759] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.719157][ T5759] ext4 filesystem being mounted at /149/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 73.744447][ T3341] hid (null): global environment stack underflow [ 73.751691][ T3341] hid-generic 0000:0000:0000.0015: unknown main item tag 0x2 [ 73.753278][ T5763] serio: Serial port ptm3 [ 73.759221][ T3341] hid-generic 0000:0000:0000.0015: global environment stack underflow [ 73.771703][ T3341] hid-generic 0000:0000:0000.0015: item 0 2 1 11 parsing failed [ 73.779418][ T3341] hid-generic 0000:0000:0000.0015: probe with driver hid-generic failed with error -22 [ 73.795982][ T3260] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.872341][ T5777] bpf_get_probe_write_proto: 5 callbacks suppressed [ 73.872384][ T5777] syz.1.736[5777] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 73.879171][ T5777] syz.1.736[5777] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 73.890610][ T5777] syz.1.736[5777] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 74.167404][ T5786] loop3: detected capacity change from 0 to 512 [ 74.186386][ T5786] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 74.195564][ T5786] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 74.214316][ T5786] EXT4-fs (loop3): warning: checktime reached, running e2fsck is recommended [ 74.223385][ T5786] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 74.232759][ T5786] System zones: 0-2, 18-18, 34-34 [ 74.238629][ T5786] EXT4-fs warning (device loop3): ext4_update_dynamic_rev:1138: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 74.254170][ T5786] EXT4-fs (loop3): 1 truncate cleaned up [ 74.260691][ T5786] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 74.275646][ T5786] EXT4-fs warning (device loop3): ext4_group_extend:1889: can't read last block, resize aborted [ 74.287654][ T5786] EXT4-fs error (device loop3): ext4_readdir:261: inode #2: block 3: comm syz.3.738: path /75/file0: bad entry in directory: inode out of bounds - offset=0, inode=63, rec_len=12, size=4096 fake=1 [ 74.330569][ T4138] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.353084][ T5789] loop2: detected capacity change from 0 to 512 [ 74.362138][ T5789] EXT4-fs (loop2): bad s_want_extra_isize: 16384 [ 74.690238][ T5798] loop0: detected capacity change from 0 to 128 [ 74.936757][ T5810] serio: Serial port ptm0 [ 74.964003][ T5812] netlink: 28 bytes leftover after parsing attributes in process `syz.1.749'. [ 75.044421][ T5796] Cannot find set identified by id 0 to match [ 75.071357][ T5817] syzkaller0: entered promiscuous mode [ 75.076890][ T5817] syzkaller0: entered allmulticast mode [ 75.080089][ T5820] loop4: detected capacity change from 0 to 512 [ 75.096766][ T5820] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 75.109422][ T5820] ext4 filesystem being mounted at /122/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 75.133500][ T24] hid (null): global environment stack underflow [ 75.140357][ T24] hid-generic 0000:0000:0000.0016: unknown main item tag 0x2 [ 75.147954][ T24] hid-generic 0000:0000:0000.0016: global environment stack underflow [ 75.156198][ T24] hid-generic 0000:0000:0000.0016: item 0 2 1 11 parsing failed [ 75.164359][ T24] hid-generic 0000:0000:0000.0016: probe with driver hid-generic failed with error -22 [ 75.182472][ T3270] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.201130][ T5826] serio: Serial port ptm2 [ 75.477927][ T5847] loop3: detected capacity change from 0 to 512 [ 75.497000][ T5847] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 75.509655][ T5847] ext4 filesystem being mounted at /85/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 75.532978][ T9] hid (null): global environment stack underflow [ 75.540004][ T9] hid-generic 0000:0000:0000.0017: unknown main item tag 0x2 [ 75.547476][ T9] hid-generic 0000:0000:0000.0017: global environment stack underflow [ 75.555696][ T9] hid-generic 0000:0000:0000.0017: item 0 2 1 11 parsing failed [ 75.563908][ T9] hid-generic 0000:0000:0000.0017: probe with driver hid-generic failed with error -22 [ 75.580906][ T4138] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.600833][ T5851] loop3: detected capacity change from 0 to 512 [ 75.607809][ T5851] EXT4-fs (loop3): bad s_want_extra_isize: 16384 [ 75.668022][ T5852] netlink: 12 bytes leftover after parsing attributes in process `syz.3.763'. [ 75.781433][ T29] kauditd_printk_skb: 311 callbacks suppressed [ 75.781448][ T29] audit: type=1326 audit(1727326220.110:3269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5853 comm="syz.0.764" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28b76cdf39 code=0x7ffc0000 [ 75.812111][ T29] audit: type=1326 audit(1727326220.110:3270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5853 comm="syz.0.764" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28b76cdf39 code=0x7ffc0000 [ 75.835776][ T29] audit: type=1326 audit(1727326220.110:3271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5853 comm="syz.0.764" exe="/root/syz-executor" sig=0 arch=c000003e syscall=111 compat=0 ip=0x7f28b76cdf39 code=0x7ffc0000 [ 75.859213][ T29] audit: type=1326 audit(1727326220.110:3272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5853 comm="syz.0.764" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28b76cdf39 code=0x7ffc0000 [ 75.882535][ T29] audit: type=1326 audit(1727326220.110:3273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5853 comm="syz.0.764" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28b76cdf39 code=0x7ffc0000 [ 75.905937][ T29] audit: type=1326 audit(1727326220.110:3274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5853 comm="syz.0.764" exe="/root/syz-executor" sig=0 arch=c000003e syscall=434 compat=0 ip=0x7f28b76cdf39 code=0x7ffc0000 [ 75.929305][ T29] audit: type=1326 audit(1727326220.110:3275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5853 comm="syz.0.764" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28b76cdf39 code=0x7ffc0000 [ 75.952709][ T29] audit: type=1326 audit(1727326220.110:3276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5853 comm="syz.0.764" exe="/root/syz-executor" sig=0 arch=c000003e syscall=438 compat=0 ip=0x7f28b76cdf39 code=0x7ffc0000 [ 75.976607][ T29] audit: type=1326 audit(1727326220.110:3277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5853 comm="syz.0.764" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28b76cdf39 code=0x7ffc0000 [ 75.999919][ T29] audit: type=1326 audit(1727326220.120:3278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5853 comm="syz.0.764" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28b76cdf39 code=0x7ffc0000 [ 76.134943][ T3337] usb 9-1: enqueue for inactive port 0 [ 76.145788][ T3337] usb 9-1: enqueue for inactive port 0 [ 76.168209][ T752] hid (null): global environment stack underflow [ 76.168235][ T5873] syz.4.773[5873] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 76.175317][ T752] hid-generic 0000:0000:0000.0018: unknown main item tag 0x2 [ 76.193702][ T5873] syz.4.773[5873] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 76.193918][ T752] hid-generic 0000:0000:0000.0018: global environment stack underflow [ 76.193996][ T5873] syz.4.773[5873] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 76.205158][ T752] hid-generic 0000:0000:0000.0018: item 0 2 1 11 parsing failed [ 76.225650][ T3337] vhci_hcd: vhci_device speed not set [ 76.232635][ T752] hid-generic 0000:0000:0000.0018: probe with driver hid-generic failed with error -22 [ 76.242239][ T5874] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 76.305602][ T5874] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 76.602782][ T5894] syzkaller0: entered promiscuous mode [ 76.608402][ T5894] syzkaller0: entered allmulticast mode [ 76.815622][ T5892] Cannot find set identified by id 0 to match [ 76.837084][ T5896] serio: Serial port ptm0 [ 76.960878][ T5902] loop1: detected capacity change from 0 to 2048 [ 77.008488][ T5909] loop1: detected capacity change from 0 to 128 [ 77.048229][ T5913] dccp_invalid_packet: P.Data Offset(4) too small [ 77.057161][ T5913] loop1: detected capacity change from 0 to 128 [ 77.063576][ T5913] vfat: Unknown parameter '/dev/virtual_nci' [ 77.156516][ T5919] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4) [ 77.163048][ T5919] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 77.170616][ T5919] vhci_hcd vhci_hcd.0: Device attached [ 77.283735][ T5927] loop2: detected capacity change from 0 to 512 [ 77.292010][ T5927] EXT4-fs (loop2): bad s_want_extra_isize: 16384 [ 77.382178][ T5931] netlink: 12 bytes leftover after parsing attributes in process `syz.2.788'. [ 77.407455][ T5933] netlink: 24 bytes leftover after parsing attributes in process `syz.3.790'. [ 77.416372][ T752] usb 3-1: new low-speed USB device number 4 using vhci_hcd [ 77.478020][ T5935] loop3: detected capacity change from 0 to 512 [ 77.484587][ T5935] EXT4-fs: Ignoring removed nomblk_io_submit option [ 77.597107][ T5935] EXT4-fs (loop3): orphan cleanup on readonly fs [ 77.619463][ T5935] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.791: bg 0: block 248: padding at end of block bitmap is not set [ 77.634642][ T5935] EXT4-fs error (device loop3): ext4_acquire_dquot:6879: comm syz.3.791: Failed to acquire dquot type 1 [ 77.646269][ T5935] EXT4-fs (loop3): 1 truncate cleaned up [ 77.705193][ T5942] serio: Serial port ptm0 [ 77.955210][ T5920] vhci_hcd: connection reset by peer [ 77.960866][ T4830] vhci_hcd: stop threads [ 77.965155][ T4830] vhci_hcd: release socket [ 77.969645][ T4830] vhci_hcd: disconnect device [ 77.989130][ T5930] syz.4.789 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_NOWARN|__GFP_ZERO), order=0, oom_score_adj=1000 [ 78.003272][ T5930] CPU: 0 UID: 0 PID: 5930 Comm: syz.4.789 Not tainted 6.11.0-syzkaller-10622-gaa486552a110 #0 [ 78.013508][ T5930] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 78.023647][ T5930] Call Trace: [ 78.026922][ T5930] [ 78.029849][ T5930] dump_stack_lvl+0xf2/0x150 [ 78.034458][ T5930] dump_stack+0x15/0x20 [ 78.038699][ T5930] dump_header+0x83/0x2d0 [ 78.043156][ T5930] oom_kill_process+0x341/0x4c0 [ 78.048007][ T5930] out_of_memory+0x9af/0xbe0 [ 78.052612][ T5930] mem_cgroup_out_of_memory+0x13e/0x190 [ 78.058182][ T5930] try_charge_memcg+0x51b/0x810 [ 78.063048][ T5930] obj_cgroup_charge_pages+0xbd/0x1a0 [ 78.068621][ T5930] __memcg_kmem_charge_page+0x9d/0x170 [ 78.074150][ T5930] __alloc_pages_noprof+0x1bc/0x360 [ 78.079338][ T5930] alloc_pages_mpol_noprof+0xb1/0x1e0 [ 78.084719][ T5930] alloc_pages_noprof+0xe1/0x100 [ 78.089707][ T5930] __vmalloc_node_range_noprof+0x72e/0xec0 [ 78.095522][ T5930] __kvmalloc_node_noprof+0x121/0x170 [ 78.100952][ T5930] ? ip_set_alloc+0x1f/0x30 [ 78.105490][ T5930] ip_set_alloc+0x1f/0x30 [ 78.109877][ T5930] hash_netiface_create+0x273/0x730 [ 78.115078][ T5930] ? __nla_parse+0x40/0x60 [ 78.119486][ T5930] ? __pfx_hash_netiface_create+0x10/0x10 [ 78.125264][ T5930] ip_set_create+0x359/0x8a0 [ 78.129845][ T5930] ? memchr+0x21/0x50 [ 78.133828][ T5930] ? __nla_parse+0x40/0x60 [ 78.138313][ T5930] nfnetlink_rcv_msg+0x4a9/0x570 [ 78.143286][ T5930] netlink_rcv_skb+0x12c/0x230 [ 78.148044][ T5930] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 78.153568][ T5930] nfnetlink_rcv+0x16c/0x15c0 [ 78.158291][ T5930] ? kmem_cache_free+0xdc/0x2d0 [ 78.163168][ T5930] ? nlmon_xmit+0x51/0x60 [ 78.167593][ T5930] ? __kfree_skb+0x102/0x150 [ 78.172176][ T5930] ? consume_skb+0x49/0x160 [ 78.176674][ T5930] ? nlmon_xmit+0x51/0x60 [ 78.181126][ T5930] ? dev_hard_start_xmit+0x3c1/0x3f0 [ 78.186577][ T5930] ? __dev_queue_xmit+0xb8a/0x1fe0 [ 78.191678][ T5930] ? ref_tracker_free+0x3a5/0x410 [ 78.196703][ T5930] ? __dev_queue_xmit+0x161/0x1fe0 [ 78.201847][ T5930] ? __netlink_deliver_tap+0x495/0x4c0 [ 78.207309][ T5930] netlink_unicast+0x599/0x670 [ 78.212069][ T5930] netlink_sendmsg+0x5cc/0x6e0 [ 78.216830][ T5930] ? __pfx_netlink_sendmsg+0x10/0x10 [ 78.222108][ T5930] __sock_sendmsg+0x140/0x180 [ 78.226775][ T5930] ____sys_sendmsg+0x312/0x410 [ 78.231534][ T5930] __sys_sendmsg+0x1d9/0x270 [ 78.236113][ T5930] ? futex_wait+0x18e/0x1c0 [ 78.240640][ T5930] __x64_sys_sendmsg+0x46/0x50 [ 78.245396][ T5930] x64_sys_call+0x2689/0x2d60 [ 78.250114][ T5930] do_syscall_64+0xc9/0x1c0 [ 78.254612][ T5930] ? clear_bhb_loop+0x55/0xb0 [ 78.259285][ T5930] ? clear_bhb_loop+0x55/0xb0 [ 78.264052][ T5930] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 78.269952][ T5930] RIP: 0033:0x7f692003df39 [ 78.274358][ T5930] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 78.293981][ T5930] RSP: 002b:00007f691ecb7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 78.302379][ T5930] RAX: ffffffffffffffda RBX: 00007f69201f5f80 RCX: 00007f692003df39 [ 78.310354][ T5930] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000004 [ 78.318310][ T5930] RBP: 00007f69200b0216 R08: 0000000000000000 R09: 0000000000000000 [ 78.326331][ T5930] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 78.334365][ T5930] R13: 0000000000000000 R14: 00007f69201f5f80 R15: 00007ffc8c9295b8 [ 78.342393][ T5930] [ 78.345626][ T5930] memory: usage 307200kB, limit 307200kB, failcnt 206 [ 78.352535][ T5930] memory+swap: usage 307392kB, limit 9007199254740988kB, failcnt 0 [ 78.360522][ T5930] kmem: usage 306764kB, limit 9007199254740988kB, failcnt 0 [ 78.367831][ T5930] Memory cgroup stats for /syz4: [ 78.368772][ T5930] cache 446464 [ 78.377212][ T5930] rss 0 [ 78.380012][ T5930] shmem 0 [ 78.382939][ T5930] mapped_file 446464 [ 78.386962][ T5930] dirty 446464 [ 78.390425][ T5930] writeback 0 [ 78.393754][ T5930] workingset_refault_anon 188 [ 78.398493][ T5930] workingset_refault_file 169 [ 78.403291][ T5930] swap 196608 [ 78.406606][ T5930] swapcached 0 [ 78.410185][ T5930] pgpgin 123831 [ 78.413679][ T5930] pgpgout 123722 [ 78.417275][ T5930] pgfault 86014 [ 78.420712][ T5930] pgmajfault 109 [ 78.424251][ T5930] inactive_anon 0 [ 78.427883][ T5930] active_anon 0 [ 78.431331][ T5930] inactive_file 0 [ 78.434967][ T5930] active_file 446464 [ 78.438917][ T5930] unevictable 0 [ 78.442347][ T5930] hierarchical_memory_limit 314572800 [ 78.447730][ T5930] hierarchical_memsw_limit 9223372036854771712 [ 78.453896][ T5930] total_cache 446464 [ 78.457857][ T5930] total_rss 0 [ 78.461115][ T5930] total_shmem 0 [ 78.464544][ T5930] total_mapped_file 446464 [ 78.468951][ T5930] total_dirty 446464 [ 78.472817][ T5930] total_writeback 0 [ 78.476610][ T5930] total_workingset_refault_anon 188 [ 78.481785][ T5930] total_workingset_refault_file 169 [ 78.486973][ T5930] total_swap 196608 [ 78.490750][ T5930] total_swapcached 0 [ 78.494613][ T5930] total_pgpgin 123831 [ 78.498611][ T5930] total_pgpgout 123722 [ 78.502700][ T5930] total_pgfault 86014 [ 78.506703][ T5930] total_pgmajfault 109 [ 78.510758][ T5930] total_inactive_anon 0 [ 78.514928][ T5930] total_active_anon 0 [ 78.518959][ T5930] total_inactive_file 0 [ 78.519210][ T5947] loop2: detected capacity change from 0 to 128 [ 78.523125][ T5930] total_active_file 446464 [ 78.533753][ T5930] total_unevictable 0 [ 78.537780][ T5930] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.789,pid=5929,uid=0 [ 78.552298][ T5930] Memory cgroup out of memory: Killed process 5929 (syz.4.789) total-vm:86980kB, anon-rss:608kB, file-rss:15904kB, shmem-rss:0kB, UID:0 pgtables:108kB oom_score_adj:1000 [ 78.630956][ T5954] loop0: detected capacity change from 0 to 2048 [ 78.639452][ T5959] netlink: 24 bytes leftover after parsing attributes in process `syz.3.801'. [ 78.686186][ T5966] serio: Serial port ptm0 [ 78.794729][ T5974] netlink: 8 bytes leftover after parsing attributes in process `syz.3.805'. [ 78.808206][ T5973] serio: Serial port ptm2 [ 78.856397][ T5974] loop3: detected capacity change from 0 to 512 [ 78.864818][ T5974] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 78.937679][ T5974] EXT4-fs (loop3): orphan cleanup on readonly fs [ 78.977119][ T5974] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.805: bg 0: block 248: padding at end of block bitmap is not set [ 79.007240][ T5974] EXT4-fs error (device loop3): ext4_acquire_dquot:6879: comm syz.3.805: Failed to acquire dquot type 1 [ 79.020357][ T5974] EXT4-fs (loop3): 1 truncate cleaned up [ 79.045245][ T5985] capability: warning: `syz.1.809' uses 32-bit capabilities (legacy support in use) [ 79.113150][ T5993] netlink: 24 bytes leftover after parsing attributes in process `syz.1.813'. [ 79.170151][ T5997] loop1: detected capacity change from 0 to 128 [ 79.239438][ T6015] loop3: detected capacity change from 0 to 512 [ 79.246108][ T6015] /dev/loop3: Can't open blockdev [ 79.247247][ T6017] netlink: 24 bytes leftover after parsing attributes in process `syz.4.825'. [ 79.338014][ T6032] loop4: detected capacity change from 0 to 128 [ 79.381979][ T6043] netlink: 24 bytes leftover after parsing attributes in process `syz.3.837'. [ 79.409710][ T6047] loop4: detected capacity change from 0 to 512 [ 79.422425][ T6047] ext4: Unknown parameter 'dont_appraise' [ 79.434402][ T6049] loop1: detected capacity change from 0 to 512 [ 79.494819][ T6049] loop1: detected capacity change from 512 to 64 [ 79.501894][ T6049] syz.1.840: attempt to access beyond end of device [ 79.501894][ T6049] loop1: rw=0, sector=70, nr_sectors = 2 limit=64 [ 79.502428][ T6066] netlink: 24 bytes leftover after parsing attributes in process `syz.4.848'. [ 79.540224][ T3260] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz-executor: invalid indirect mapped block 1280 (level 0) [ 79.559662][ T6070] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(4) [ 79.566254][ T6070] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 79.573878][ T6070] vhci_hcd vhci_hcd.0: Device attached [ 79.599088][ T3260] EXT4-fs error (device loop1): ext4_lookup:1813: inode #14: comm syz-executor: unexpected EA_INODE flag [ 79.623464][ T3260] EXT4-fs error (device loop1): ext4_lookup:1813: inode #14: comm syz-executor: unexpected EA_INODE flag [ 79.702442][ T6084] loop2: detected capacity change from 0 to 128 [ 79.742185][ T6082] Cannot find set identified by id 0 to match [ 79.742811][ T6081] loop0: detected capacity change from 0 to 512 [ 79.766302][ T6081] ext4 filesystem being mounted at /213/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 79.793199][ T24] hid (null): global environment stack underflow [ 79.800839][ T24] hid-generic 0000:0000:0000.0019: unknown main item tag 0x2 [ 79.808254][ T24] hid-generic 0000:0000:0000.0019: global environment stack underflow [ 79.816433][ T24] hid-generic 0000:0000:0000.0019: item 0 2 1 11 parsing failed [ 79.825912][ T24] hid-generic 0000:0000:0000.0019: probe with driver hid-generic failed with error -22 [ 79.908471][ T40] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.950261][ T24] hid-generic 0000:0000:0000.001A: unknown main item tag 0x7 [ 79.957731][ T24] hid-generic 0000:0000:0000.001A: ignoring exceeding usage max [ 79.974434][ T24] hid-generic 0000:0000:0000.001A: unknown main item tag 0x5 [ 79.981888][ T24] hid-generic 0000:0000:0000.001A: collection stack underflow [ 79.989471][ T24] hid-generic 0000:0000:0000.001A: item 0 0 0 12 parsing failed [ 79.998349][ T40] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.998991][ T24] hid-generic 0000:0000:0000.001A: probe with driver hid-generic failed with error -22 [ 80.020079][ T6107] serio: Serial port ptm0 [ 80.046606][ T40] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.047473][ T6110] loop2: detected capacity change from 0 to 2048 [ 80.103171][ T40] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.132721][ T6121] loop2: detected capacity change from 0 to 512 [ 80.160840][ T6121] ext4 filesystem being mounted at /146/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 80.182299][ T6101] chnl_net:caif_netlink_parms(): no params data found [ 80.197635][ T8] hid (null): global environment stack underflow [ 80.207117][ T8] hid-generic 0000:0000:0000.001B: unknown main item tag 0x2 [ 80.214668][ T8] hid-generic 0000:0000:0000.001B: global environment stack underflow [ 80.222923][ T8] hid-generic 0000:0000:0000.001B: item 0 2 1 11 parsing failed [ 80.230969][ T8] hid-generic 0000:0000:0000.001B: probe with driver hid-generic failed with error -22 [ 80.252541][ T40] bridge_slave_1: left allmulticast mode [ 80.258310][ T40] bridge_slave_1: left promiscuous mode [ 80.263974][ T40] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.273104][ T40] bridge_slave_0: left allmulticast mode [ 80.278815][ T40] bridge_slave_0: left promiscuous mode [ 80.284489][ T40] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.343862][ T6072] vhci_hcd: connection closed [ 80.344263][ T4830] vhci_hcd: stop threads [ 80.353450][ T4830] vhci_hcd: release socket [ 80.357976][ T4830] vhci_hcd: disconnect device [ 80.398341][ T40] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 80.410270][ T40] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 80.411517][ T6140] loop2: detected capacity change from 0 to 512 [ 80.425737][ T6140] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 80.427037][ T40] bond0 (unregistering): Released all slaves [ 80.434824][ T6140] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 80.450835][ T6140] EXT4-fs (loop2): warning: checktime reached, running e2fsck is recommended [ 80.451706][ T40] bond1 (unregistering): Released all slaves [ 80.461566][ T6140] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 80.468234][ T40] bond2 (unregistering): Released all slaves [ 80.474989][ T6140] System zones: 0-2, 18-18, 34-34 [ 80.482372][ T40] bond3 (unregistering): Released all slaves [ 80.490813][ T6140] EXT4-fs warning (device loop2): ext4_update_dynamic_rev:1138: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 80.506499][ T6140] EXT4-fs (loop2): 1 truncate cleaned up [ 80.514789][ T6140] EXT4-fs warning (device loop2): ext4_group_extend:1889: can't read last block, resize aborted [ 80.525804][ T6140] EXT4-fs error (device loop2): ext4_readdir:261: inode #2: block 3: comm syz.2.872: path /152/file0: bad entry in directory: inode out of bounds - offset=0, inode=63, rec_len=12, size=4096 fake=1 [ 80.551901][ T6101] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.558963][ T6101] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.566085][ T6101] bridge_slave_0: entered allmulticast mode [ 80.572519][ T6101] bridge_slave_0: entered promiscuous mode [ 80.579244][ T6101] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.586455][ T6101] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.599794][ T6145] loop2: detected capacity change from 0 to 128 [ 80.607235][ T6101] bridge_slave_1: entered allmulticast mode [ 80.613622][ T6145] ext4 filesystem being mounted at /153/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 80.617553][ T6101] bridge_slave_1: entered promiscuous mode [ 80.639785][ T40] hsr_slave_0: left promiscuous mode [ 80.646803][ T40] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 80.654424][ T40] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 80.656074][ T6148] syz.4.874[6148] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 80.661931][ T40] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 80.663936][ T6148] syz.4.874[6148] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 80.681448][ T6148] syz.4.874[6148] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 80.703246][ T40] veth1_macvtap: left promiscuous mode [ 80.720037][ T40] veth0_macvtap: left promiscuous mode [ 80.725690][ T40] veth1_vlan: left promiscuous mode [ 80.730924][ T40] veth0_vlan: left promiscuous mode [ 80.736897][ T6154] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(4) [ 80.743512][ T6154] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 80.751114][ T6154] vhci_hcd vhci_hcd.0: Device attached [ 80.842076][ T40] team0 (unregistering): Port device team_slave_1 removed [ 80.866992][ T40] team0 (unregistering): Port device team_slave_0 removed [ 80.967856][ T6101] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.977244][ T6158] __nla_validate_parse: 1 callbacks suppressed [ 80.977257][ T6158] netlink: 8 bytes leftover after parsing attributes in process `syz.4.876'. [ 80.994681][ T3341] usb 5-1: new low-speed USB device number 5 using vhci_hcd [ 81.015870][ T29] kauditd_printk_skb: 215 callbacks suppressed [ 81.015884][ T29] audit: type=1400 audit(1727326225.350:3490): avc: denied { accept } for pid=6169 comm="syz.0.881" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 81.048140][ T6101] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.087626][ T6101] team0: Port device team_slave_0 added [ 81.108148][ T6101] team0: Port device team_slave_1 added [ 81.109384][ T6172] loop4: detected capacity change from 0 to 512 [ 81.121118][ T29] audit: type=1400 audit(1727326225.440:3491): avc: denied { read } for pid=6169 comm="syz.0.881" name="usbmon0" dev="devtmpfs" ino=117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 81.144425][ T29] audit: type=1400 audit(1727326225.440:3492): avc: denied { open } for pid=6169 comm="syz.0.881" path="/dev/usbmon0" dev="devtmpfs" ino=117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 81.168266][ T29] audit: type=1400 audit(1727326225.440:3493): avc: denied { ioctl } for pid=6169 comm="syz.0.881" path="/dev/usbmon0" dev="devtmpfs" ino=117 ioctlcmd=0x9207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 81.210671][ T6101] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.217713][ T6101] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.245343][ T6101] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.246180][ T6172] ext4 filesystem being mounted at /148/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 81.279457][ T29] audit: type=1400 audit(1727326225.610:3494): avc: denied { execute } for pid=6169 comm="syz.0.881" dev="tmpfs" ino=1159 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 81.306106][ T6101] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.313055][ T6101] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.339061][ T6101] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.341898][ T24] hid (null): global environment stack underflow [ 81.360516][ T29] audit: type=1400 audit(1727326225.610:3495): avc: denied { execute_no_trans } for pid=6169 comm="syz.0.881" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAADD16D64C8854858A9250C1A65E0202864656C6574656429 dev="tmpfs" ino=1159 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 81.398074][ T24] hid-generic 0000:0000:0000.001C: unknown main item tag 0x2 [ 81.405614][ T24] hid-generic 0000:0000:0000.001C: global environment stack underflow [ 81.413781][ T24] hid-generic 0000:0000:0000.001C: item 0 2 1 11 parsing failed [ 81.424661][ T29] audit: type=1326 audit(1727326225.750:3496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6175 comm="syz.3.878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfd297df39 code=0x7ffc0000 [ 81.448129][ T29] audit: type=1326 audit(1727326225.750:3497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6175 comm="syz.3.878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=116 compat=0 ip=0x7fcfd297df39 code=0x7ffc0000 [ 81.471429][ T29] audit: type=1326 audit(1727326225.750:3498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6175 comm="syz.3.878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfd297df39 code=0x7ffc0000 [ 81.472516][ T24] hid-generic 0000:0000:0000.001C: probe with driver hid-generic failed with error -22 [ 81.494830][ T29] audit: type=1326 audit(1727326225.750:3499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6175 comm="syz.3.878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcfd297df39 code=0x7ffc0000 [ 81.533517][ T6155] vhci_hcd: connection reset by peer [ 81.541942][ T6101] hsr_slave_0: entered promiscuous mode [ 81.565280][ T3555] vhci_hcd: stop threads [ 81.569682][ T3555] vhci_hcd: release socket [ 81.574085][ T3555] vhci_hcd: disconnect device [ 81.580763][ T6101] hsr_slave_1: entered promiscuous mode [ 81.594811][ T6101] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 81.607316][ T6183] loop3: detected capacity change from 0 to 512 [ 81.612583][ T6101] Cannot create hsr debugfs directory [ 81.625156][ T6183] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 81.634328][ T6183] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 81.644523][ T6183] EXT4-fs (loop3): warning: checktime reached, running e2fsck is recommended [ 81.646530][ T6185] loop0: detected capacity change from 0 to 512 [ 81.663600][ T6183] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 81.671754][ T6183] System zones: 0-2, 18-18, 34-34 [ 81.675588][ T6185] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 81.685873][ T6185] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 81.685892][ T6183] EXT4-fs warning (device loop3): ext4_update_dynamic_rev:1138: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 81.685966][ T6185] ================================================================== [ 81.685992][ T6185] BUG: KCSAN: data-race in data_push_tail / string [ 81.686024][ T6185] [ 81.686032][ T6185] write to 0xffffffff88b89f82 of 1 bytes by task 6183 on cpu 0: [ 81.686049][ T6185] string+0x16c/0x210 [ 81.686073][ T6185] vsnprintf+0xa09/0xe30 [ 81.686098][ T6185] vscnprintf+0x42/0x90 [ 81.686119][ T6185] printk_sprint+0x30/0x2d0 [ 81.686146][ T6185] vprintk_store+0x570/0x810 [ 81.686170][ T6185] vprintk_emit+0x15e/0x680 [ 81.686192][ T6185] vprintk_default+0x26/0x30 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 81.686218][ T6185] vprintk+0x75/0x80 [ 81.686233][ T6185] _printk+0x7a/0xa0 [ 81.686248][ T6185] __ext4_warning+0x130/0x140 [ 81.686270][ T6185] ext4_update_dynamic_rev+0x7b/0xc0 [ 81.686296][ T6185] ext4_mark_iloc_dirty+0xba4/0xe10 [ 81.686321][ T6185] __ext4_mark_inode_dirty+0x314/0x440 [ 81.686342][ T6185] ext4_ext_truncate+0x58/0x150 [ 81.686360][ T6185] ext4_truncate+0x776/0xb10 [ 81.686380][ T6185] ext4_process_orphan+0x113/0x1c0 [ 81.686408][ T6185] ext4_orphan_cleanup+0x696/0x9e0 [ 81.686439][ T6185] ext4_fill_super+0x36b3/0x3a10 [ 81.686462][ T6185] get_tree_bdev+0x256/0x2e0 [ 81.686489][ T6185] ext4_get_tree+0x1c/0x30 [ 81.686514][ T6185] vfs_get_tree+0x56/0x1e0 [ 81.686542][ T6185] do_new_mount+0x227/0x690 [ 81.686569][ T6185] path_mount+0x49b/0xb30 [ 81.686587][ T6183] EXT4-fs (loop3): 1 truncate cleaned up [ 81.686594][ T6185] __se_sys_mount+0x27c/0x2d0 [ 81.686622][ T6185] __x64_sys_mount+0x67/0x80 [ 81.686649][ T6185] x64_sys_call+0x203e/0x2d60 [ 81.686671][ T6185] do_syscall_64+0xc9/0x1c0 [ 81.686696][ T6185] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 81.686724][ T6185] [ 81.686731][ T6185] read to 0xffffffff88b89f80 of 8 bytes by task 6185 on cpu 1: [ 81.686748][ T6185] data_push_tail+0x102/0x430 [ 81.686769][ T6185] data_alloc+0xbe/0x2c0 [ 81.686788][ T6185] prb_reserve+0x85e/0xb60 [ 81.686812][ T6185] vprintk_store+0x53f/0x810 [ 81.686836][ T6185] vprintk_emit+0x15e/0x680 [ 81.686860][ T6185] vprintk_default+0x26/0x30 [ 81.686888][ T6185] vprintk+0x75/0x80 [ 81.686908][ T6185] _printk+0x7a/0xa0 [ 81.686925][ T6185] __ext4_msg+0x18e/0x1a0 [ 81.686948][ T6185] ext4_check_feature_compatibility+0x59d/0x5e0 [ 81.686972][ T6185] ext4_fill_super+0x20dc/0x3a10 [ 81.686997][ T6185] get_tree_bdev+0x256/0x2e0 [ 81.687023][ T6185] ext4_get_tree+0x1c/0x30 [ 81.687043][ T6185] vfs_get_tree+0x56/0x1e0 [ 81.687067][ T6185] do_new_mount+0x227/0x690 [ 81.687091][ T6185] path_mount+0x49b/0xb30 [ 81.687116][ T6185] __se_sys_mount+0x27c/0x2d0 [ 81.687142][ T6185] __x64_sys_mount+0x67/0x80 [ 81.687167][ T6185] x64_sys_call+0x203e/0x2d60 [ 81.687189][ T6185] do_syscall_64+0xc9/0x1c0 [ 81.687212][ T6185] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 81.687235][ T6185] [ 81.687239][ T6185] value changed: 0x00000000ffffe29d -> 0x2933706f6f6c2065 [ 81.687254][ T6185] [ 81.687259][ T6185] Reported by Kernel Concurrency Sanitizer on: [ 81.687270][ T6185] CPU: 1 UID: 0 PID: 6185 Comm: syz.0.887 Not tainted 6.11.0-syzkaller-10622-gaa486552a110 #0 [ 81.687297][ T6185] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 81.687311][ T6185] ================================================================== [ 81.725703][ T6185] EXT4-fs (loop0): warning: checktime reached, running e2fsck is recommended [ 81.726947][ T6183] EXT4-fs warning (device loop3): ext4_group_extend:1889: can't read last block, resize aborted [ 81.749152][ T6185] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 81.758672][ T6192] loop4: detected capacity change from 0 to 512 [ 81.762539][ T6185] System zones: [ 81.808785][ T6192] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 81.813573][ T6185] 0-2 [ 81.818533][ T6192] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 81.823081][ T6185] , 18-18 [ 81.897467][ T6183] EXT4-fs error (device loop3): ext4_readdir:261: inode #2: block 3: comm syz.3.886: path /116/file0: bad entry in directory: inode out of bounds - offset=0, inode=63, rec_len=12, size=4096 fake=1 [ 81.898597][ T6185] , 34-34 [ 81.925743][ T6192] workqueue: Failed to create a rescuer kthread for wq "ext4-rsv-conversion": -EINTR [ 81.926030][ T6185] [ 81.930935][ T6192] EXT4-fs: failed to create workqueue [ 81.979987][ T6192] EXT4-fs (loop4): mount failed [ 81.987193][ T6185] EXT4-fs warning (device loop0): ext4_update_dynamic_rev:1138: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 82.152044][ T6185] EXT4-fs (loop0): 1 truncate cleaned up [ 82.287419][ T4830] bridge_slave_1: left allmulticast mode [ 82.293067][ T4830] bridge_slave_1: left promiscuous mode [ 82.298855][ T4830] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.311717][ T4830] bridge_slave_0: left allmulticast mode [ 82.317387][ T4830] bridge_slave_0: left promiscuous mode [ 82.323018][ T4830] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.417927][ T4830] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 82.427869][ T4830] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 82.438741][ T4830] bond0 (unregistering): Released all slaves [ 82.454688][ T752] usb 3-1: enqueue for inactive port 0 [ 82.460273][ T752] usb 3-1: enqueue for inactive port 0 [ 82.519228][ T4830] hsr_slave_0: left promiscuous mode [ 82.524787][ T4830] hsr_slave_1: left promiscuous mode [ 82.530578][ T4830] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 82.537899][ T752] vhci_hcd: vhci_device speed not set [ 82.538245][ T4830] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 82.574600][ T4830] team0 (unregistering): Port device team_slave_1 removed [ 82.584459][ T4830] team0 (unregistering): Port device team_slave_0 removed [ 82.909681][ T4830] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.007858][ T4830] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.047501][ T4830] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.107063][ T4830] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.166572][ T4830] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.207440][ T4830] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.277178][ T4830] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.358074][ T4830] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.427586][ T4830] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.477397][ T4830] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.527499][ T4830] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.597678][ T4830] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.667276][ T4830] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.707480][ T4830] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.777055][ T4830] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.826785][ T4830] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.905358][ T4830] bridge_slave_1: left allmulticast mode [ 83.911016][ T4830] bridge_slave_1: left promiscuous mode [ 83.916694][ T4830] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.924211][ T4830] bridge_slave_0: left allmulticast mode [ 83.929960][ T4830] bridge_slave_0: left promiscuous mode [ 83.935602][ T4830] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.943462][ T4830] bridge_slave_1: left allmulticast mode [ 83.949191][ T4830] bridge_slave_1: left promiscuous mode [ 83.954816][ T4830] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.962453][ T4830] bridge_slave_0: left allmulticast mode [ 83.968129][ T4830] bridge_slave_0: left promiscuous mode [ 83.973850][ T4830] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.981947][ T4830] bridge_slave_1: left allmulticast mode [ 83.987679][ T4830] bridge_slave_1: left promiscuous mode [ 83.993278][ T4830] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.000857][ T4830] bridge_slave_0: left allmulticast mode [ 84.006505][ T4830] bridge_slave_0: left promiscuous mode [ 84.012124][ T4830] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.020129][ T4830] bridge_slave_1: left allmulticast mode [ 84.025799][ T4830] bridge_slave_1: left promiscuous mode [ 84.031403][ T4830] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.038988][ T4830] bridge_slave_0: left allmulticast mode [ 84.044606][ T4830] bridge_slave_0: left promiscuous mode [ 84.050242][ T4830] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.396511][ T4830] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 84.406326][ T4830] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 84.416190][ T4830] bond0 (unregistering): Released all slaves [ 84.424122][ T4830] bond1 (unregistering): Released all slaves [ 84.432757][ T4830] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 84.442626][ T4830] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 84.452429][ T4830] bond0 (unregistering): Released all slaves [ 84.461128][ T4830] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 84.471134][ T4830] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 84.480876][ T4830] bond0 (unregistering): Released all slaves [ 84.489694][ T4830] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 84.499545][ T4830] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 84.509327][ T4830] bond0 (unregistering): Released all slaves [ 84.517869][ T4830] bond1 (unregistering): Released all slaves [ 84.601358][ T4830] hsr_slave_0: left promiscuous mode [ 84.606888][ T4830] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 84.614247][ T4830] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 84.621753][ T4830] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 84.629332][ T4830] batman_adv: batadv0: Interface deactivated: veth1_vlan [ 84.636453][ T4830] batman_adv: batadv0: Removing interface: veth1_vlan [ 84.645210][ T4830] hsr_slave_0: left promiscuous mode [ 84.650782][ T4830] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 84.658226][ T4830] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 84.665683][ T4830] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 84.674422][ T4830] hsr_slave_0: left promiscuous mode [ 84.680055][ T4830] hsr_slave_1: left promiscuous mode [ 84.685654][ T4830] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 84.693005][ T4830] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 84.700500][ T4830] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 84.709460][ T4830] hsr_slave_0: left promiscuous mode [ 84.715086][ T4830] hsr_slave_1: left promiscuous mode [ 84.720606][ T4830] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 84.728072][ T4830] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 84.735489][ T4830] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 84.746994][ T4830] veth1_macvtap: left promiscuous mode [ 84.752496][ T4830] veth0_macvtap: left promiscuous mode [ 84.758529][ T4830] veth1_vlan: left promiscuous mode [ 84.763750][ T4830] veth0_vlan: left promiscuous mode [ 84.769364][ T4830] veth1_macvtap: left promiscuous mode [ 84.774900][ T4830] veth0_macvtap: left promiscuous mode [ 84.780436][ T4830] veth1_vlan: left promiscuous mode [ 84.785689][ T4830] veth0_vlan: left promiscuous mode [ 84.791209][ T4830] veth1_macvtap: left promiscuous mode [ 84.796676][ T4830] veth0_macvtap: left promiscuous mode [ 84.802201][ T4830] veth1_vlan: left promiscuous mode [ 84.807508][ T4830] veth0_vlan: left promiscuous mode [ 84.813070][ T4830] veth1_macvtap: left promiscuous mode [ 84.818632][ T4830] veth0_macvtap: left promiscuous mode [ 84.824098][ T4830] veth1_vlan: left promiscuous mode [ 84.829314][ T4830] veth0_vlan: left promiscuous mode [ 84.990758][ T4830] team0 (unregistering): Port device team_slave_1 removed [ 85.000130][ T4830] team0 (unregistering): Port device team_slave_0 removed [ 85.052553][ T4830] team0 (unregistering): Port device team_slave_1 removed [ 85.061840][ T4830] team0 (unregistering): Port device team_slave_0 removed [ 85.113454][ T4830] team0 (unregistering): Port device team_slave_1 removed [ 85.123192][ T4830] team0 (unregistering): Port device team_slave_0 removed [ 85.175235][ T4830] team0 (unregistering): Port device team_slave_1 removed [ 85.185154][ T4830] team0 (unregistering): Port device team_slave_0 removed [ 86.054706][ T3341] usb 5-1: enqueue for inactive port 0 [ 86.060187][ T3341] usb 5-1: enqueue for inactive port 0 [ 86.134683][ T3341] vhci_hcd: vhci_device speed not set