last executing test programs: 3m13.230106653s ago: executing program 32 (id=172): r0 = socket$kcm(0x10, 0x2, 0x4) close(r0) socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x3, &(0x7f00000011c0)=[{&(0x7f0000000140)="5c00000013006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514000cc00800020007000c00040004c00364bc24eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 3m6.169465602s ago: executing program 33 (id=408): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000000000000073113f000000000016000000000000009500740000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000080)=@generic={&(0x7f0000000000)='./file0\x00', r1}, 0x18) 2m53.268478084s ago: executing program 34 (id=911): r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f0000000000)=0x13) write$binfmt_misc(r0, &(0x7f0000000240), 0xfffffecc) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x1) 2m53.015717585s ago: executing program 35 (id=923): perf_event_open(&(0x7f0000004cc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x9, 0x400, 0x6, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0xa5ba, 0x1, @perf_bp={0x0, 0x1}, 0x100410, 0x200, 0x6, 0x1, 0x9, 0x9, 0xfffd, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r0 = socket(0x2, 0x2, 0x0) getsockopt$bt_BT_SECURITY(r0, 0x88, 0x68, 0x0, 0x20000000) 2m12.676162957s ago: executing program 7 (id=2624): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='pids.max\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000040)=0xffffffffffffffed, 0x12) 2m12.675849637s ago: executing program 7 (id=2626): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000027b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000300)=@o_path={&(0x7f0000000200)='./file1/file0\x00', r1, 0x4000, r1}, 0x18) 2m12.618028558s ago: executing program 7 (id=2629): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008f00850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="5c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800e00010069703665727370616e0000002000028006000200300000001400060000000000000000000000ffff7f00000108000a00", @ANYRES32], 0x5c}}, 0x0) 2m12.534884768s ago: executing program 7 (id=2634): r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000680)={[{@abort}, {@debug}]}, 0x1, 0x774, &(0x7f00000007c0)="$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") syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000100)='.\x00', 0x64, &(0x7f00000001c0)=ANY=[], 0x1, 0x0, &(0x7f0000000000)) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 2m12.173841101s ago: executing program 7 (id=2653): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000002c0)=@framed={{}, [@printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xffffffff}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x8001000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x268, 0x0, 0x11, 0x148, 0xf8, 0x0, 0x1d0, 0x2a8, 0x2a8, 0x1d0, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x98, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x3, 0x1, 0x4]}, {0xffffffffffffffff}}}}, {{@ip={@multicast2, @private, 0x0, 0x0, 'ip_vti0\x00', 'geneve0\x00'}, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2c8) 2m11.842277742s ago: executing program 7 (id=2669): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='smaps_rollup\x00') pread64(r0, &(0x7f000001a240)=""/102400, 0x19000, 0x100008) 2m11.841586202s ago: executing program 36 (id=2669): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='smaps_rollup\x00') pread64(r0, &(0x7f000001a240)=""/102400, 0x19000, 0x100008) 1m37.243005393s ago: executing program 5 (id=4359): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x6000, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x5, "000500"}}}]}, 0x48}}, 0x0) 1m37.232062173s ago: executing program 5 (id=4360): r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000500)={'team0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x9c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r1, {0x0, 0xfff2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x6c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x8, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x402], [0x0, 0x8, 0x3, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x4}]}]}]}}]}, 0x9c}}, 0x10) 1m37.210019453s ago: executing program 5 (id=4361): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000014c0)=ANY=[@ANYBLOB="b702000000000000bfa30000000000000702000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff6d6405000000000065040400010000000404000001000000b7050000400000006a0a80fe000000008500000053000000b7000000000000009500001000000000a80501363034fdb117168bd07ba00af739d1a1ee35fe163a255c33282044b32495ef8ab9adc67ccc945f105d802f5132143c0a9fc7a84452569957c1002ed7d4d8e17f791f4798c8eb483e9973320d046c3126c6afcfd84de03352c69b3edff5be26f8ffa5f8f2879021c2ea53ea79acd7fb38dd1abb75aa393cea26d465637d11f705000000473e7b7c4ae7dd5e4dee88518ddf12dddd4bfc6a4dd3b6beba51074229b0d4b504516c4c3e5d1aa044d8d00728141cd67bcd68f253288e655c6b34e02e90637ef2912ba7de26ff2357ef17f95a25780c3a057844f226ef4e912f01a201e694e3806e8c70e8b69524cd19f7525d8d66bb766f7f3f918c86a70252236800001897133af94a5a4cfc794d8b9d7c33632152c48eaf302f0b2e0c252b00000000000000006f1bbefbe08de65e3762e194ba4cae8b13535d7d11ee917bca4885bbf597a14ab2458efce78510d86272d88e0c8088f404f011289ebc5623faa1182632161e073af1d69a2e36bed435000025ecd201d2ffb0a7fa4f5d11060cdcf071defd0a8be3b69ce3e4f361aca75827426dde87fdf4617222674280f55e98107450c19b9d86329bd5b4697336112b0b8754ce3574046bf6114d1a88597850b77378fa8edfff8faf8b8ec039bab385cac0535373bb8fab90539b1a65ddff841eb671f3faf37ebdfccea0c002ad2b42047c9ec43193ccf617dbf8a12b4f189edbf9fb7c42b1f435ccd4d96822e6b70100912c92e3943e9c4f45d8bcd528fa8a3ea847f10e9b2506f3bb506f1d7fbde8010000000000a073d0de5538ab42e170b3baae34c35987b0dda497ac3f5e97e6e6aeea15c6d5ed24310100000003bb6030f84b63aaf8690db0221b1705c501f802ff59b4e683efa4b6e77e042072bd2ac37d413008ec9eb8166f6e28b49a77ed91befc65315896f88a8fb1dd679fb4c515f8b7a5b7aca6a251a89d47b728502f7e621cc0e3ba04000000c149ee6601728c750d304197c22da8650579475afd96187d881e93b42a5fdfd686d8900c44c67133dad58037fda65885a15a429edfe3027a5ebf95254744f10fd607bc3300b94932b8d944e0b083bbd86b19cb074577a25ff581d92af08a06f857310a2f14326b0b290205e91a682e00c8762cbc6b904c980eef6e6a1def886c95676dce6a8194479700a02b92bdc8d05eae1f24fdd7b80d1bb404c22f681594de2ebb9687219de8d73ac83823feb402a2415a9850d5f0183ec67be96dc0e4c2d7acf1dfe79d6771903b76e21190c22d641030e1ddacf006c3116e1803af20a5f2b5f7ba58aca5bcabbbab24414a3810788e5503e4be66d683daac5f0001000077339b4200000000108a3c87b19d5b9a00c75d84a92d6dcf00ba96edf35ede0e2b57c26e94801b498924166bde57d5f24258d9fd028096cc15a8b912b494d4bbe609031ea1ca65a548971d5d16296dd08e020000007a27310d5d01f8a8a0f5212d7f628f554afea715ccbc66cbb1016490f5d579308cb3188cf2fcaf67e0c16443d526ba4b968f07ae362c2133c168313e84beb871203880dd453c45d0a137d7f5a8b039dbfa62fb2b4214f8e69f967bf1fbd89e77fcca110000000800000000000000f8877994ebdc35f7efd41e3babd9b3782edd6776d5b6cb4ecd72c9de9b5503747d71440378cf2c2c7ea2dc5febb654a867f853713cf4c0bb322fbbe446d18dee4c821275ef18259cafc346c8b3b9fb0f3adcf6ea310a6b9a3f59e29a5909ea047fb61affb4bc8bbea1fb761b8933795b1a91358a7791aa843d07020e8bb6fc18458c49ac6313e7165b7d9f65e94a62b69f1011b94340cdb7303f01e5cdb5682ddf73d65c3de1d88dd7496d6345d5b9de0223988056a53e19a8b96b9640bc6c09d3c2ff894d626b57c776ed53f94d5e22ff148061b37f72bd92924cb1d0a725e19b264346b7cae0251a850de78316503f3c3d395c7e3f04fc8d52583327cd2341ce4b2d092815376299686f41353b2823814563011a2223b9dd00000000000000000000003a131374a3371cb3e2a9bb4d798b91cefa444501f40b7c9589e8c0bb6c82123d2b45ce905d0903b32ecf30e828c71a07a83f3275f3d661d1af0ffbd5d7f0"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r1, 0xfeffff, 0xe80, 0x3f000002, &(0x7f0000000700)="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", 0x0, 0xf0, 0x0, 0xf0, 0xffffff0c}, 0x40) 1m37.190986264s ago: executing program 5 (id=4364): syz_read_part_table(0x1054, &(0x7f0000001340)="$eJzsz72twjAYBdCbKC9WpnihZgimyAJMEtGzCLOwDrWR+ZGyAILinML2d+Ury+G71szbsZbknDHJX5I+U9uP13l/S/e8MfQpeQ+vUoYkh00y5hFlrfVU6vjfKu2t7Pqlnaa2dFkun/8gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPy+ewAAAP//RmEMSw==") socket$key(0xf, 0x3, 0x2) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newsa={0x154, 0x10, 0x633, 0x0, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x18}}, @in6=@dev}, {@in=@rand_addr=0x1, 0x0, 0x32}, @in6=@mcast2, {0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, {}, {}, 0x0, 0x0, 0x2, 0x1, 0x7}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @encap={0x1c, 0x4, {0x2, 0x0, 0x0, @in6=@private1}}]}, 0x154}}, 0x0) 1m37.043547284s ago: executing program 5 (id=4373): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0)=0x20) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) unlink(&(0x7f00000000c0)='./file1\x00') 1m37.017660954s ago: executing program 5 (id=4374): perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x3d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x62000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100000, 0x0, 0x0, 0x6, 0x3, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = io_uring_setup(0x6282, &(0x7f0000000080)) mount(&(0x7f00000003c0)=@nullb, 0x0, 0x0, 0x10, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) 1m22.674297723s ago: executing program 37 (id=4374): perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x3d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x62000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100000, 0x0, 0x0, 0x6, 0x3, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = io_uring_setup(0x6282, &(0x7f0000000080)) mount(&(0x7f00000003c0)=@nullb, 0x0, 0x0, 0x10, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) 47.753061956s ago: executing program 8 (id=6377): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000031c0)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf7cf39e3100c8acaa47684f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d7559f3b14820ed58b15627c95aa0b784625704f07372c29184ff7f4a7c0000070015006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1089d8b8588d72ec29c48b45e000000000000041201baa80b0b8ed8fb1ec577c377f627daaf787a68af2ad0810000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d40224edc5465a932b77a74e802a0dc6bf25d8a242bc6099ad2300000480006ef6c1ff0900ff0000000010c63a949e8b7955394ffaff03000000000000ab87b1bdeda7be586602d985430cea080000000000fb1a26abfb0767192361448279b05d96a703a660587a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aab926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae616b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb155481ef836eb0f8c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f57000000009700cf0b000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaed2b25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec0271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761036eafed1fb2b98b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe760e717a04becff0f719197724f4fce1093b62d7e8c7123d890cec55bf404e4e1f74b7eed82571be54c72d978cf906df08f11f1c4042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe514283707c70600000000000000b7561301bb997316db01ee601f2c9659db9bc04f7089a660d8dcc3ae83169cf331efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f871b136345cf67ca3fb5aac518a515d83129cd857c775f9e7d6101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af403269b4a39ce40293947d9a631bcbe3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f000000009191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562e00e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb2214209ed2d5d776e22a2a798de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b55ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f608ce27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df98674152f94e30400000000000000000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270b939b81367ac91bd627e87306703be8672d70d1ab57075228a95d32f46ed9bd1f00fb8191bbab2dc599dda61ee2010000294859323e7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf01cfaed9ef0ce21d69993e9960ff5f76015e6009756237badf4e7965bfe2777e808fcba821a00e8c5c39609ff854256cb490000000000c1fee30a3f7a85d1b2b458c77685efc0ceb1c8e5729c66018d169fc03aa188546bb2e51935ab9067ec3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab40743b2a428f1da1f626602111b40e761fd210819203828b202779d386ed295f023c67d867014d12ca3c471c7868e7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d42645288d7226bbd9c9e9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff00004043060000005dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec743af930cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df40600000000000000e9b49a1b36d48a44ba6a4530e59bec53e876dc660dd6d89f80a4377b1b1292a893a516dab183ee65744fb8fc4f9ce2242e0f00000000010000000000000000000057d77480e0345effff6413258d1f6eb190aa28cbb4bafe3436b176c7ed4b0600b805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fb03b84f63e022fe755f4007a4a899eaf52c4f491f1e97c862e29e4570600000091c691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104d74dc07748f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1202000000b59fed817072a0da60160761fd3dffda0f7c742eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c7000000000000000542954c167dd9b4acd946ffffffffffffffff1389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c9e281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b630500163aff094059e626766845fd779c9e6cdbbd64c2499ce3ffe2fef03f7cdd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426cfce471fef821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ada08f5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba3c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63e4581d5cc41cbde2ba66adc1168070c8c6e18a6e452a31bde54ad3e16304d06a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f700400fa0c61d5fe6d8ff353f631080405547d65375ae04f44f0c2543c772c5ccb137be7dc87746e1785a8214454d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b036e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e010000005a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb3985b7581bb5584c53984ba9c3340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a39938613067dbd1428c0805b4031a667e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b9e6626f19eecb87e39175e85e17000000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f1400010000ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1b0100448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae05025040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483d02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1098e40550a9cfd80e918d685a7b099a4f8ed654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732ab9100781b9912160a3fd2a2e74dd690c57bdfdc1f069f9491bca7a8c59363799be7005c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c1227c8bed10591958c906321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b863af34bac64c247672a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2cdfb7fea73ca18874664d60a4b9423f3297bc8eb91b4ee1d73272abbef3e7a828a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece58e752b47e6f677ec97c5c568a89d6e36b165c39132a0f27080ece2a94c360b002c77f82662675a7713c7067081cac1599a998c41ff4754268ae1676384ff799783f55d7e5a1a0920300000000000000d98440c355927629f2bcf9dc215a18ca0265400abf38e90000000000000000008faf2cddffbfa66bf32eb718e88ec75603ed7c7a8825ce0f27a114bd7a4ab74d0c7b8d90ccc1c3ca6620def782e24d75aed70eb676437f62677a69e0994cd82d72e95493c830fe9515329f40b7025326dec33a527c5d999298eaa3690fd0d38a02fc6e0bc16dbe19f353027edc014411e1138087221492f5d5e5cc9d0a1acd3f581eda9a807aa0e609f935f626d96351e0ff116686cbeb8939feecd5dac8cf45101942ce18e57bb7f337df5435bcf7e504b7c427f70a10e1cb8993a661306a0576b638a0171e6800b5b35589d676eb30ed1a72e8f7b057eb281c4504195635b6b285ebaba019913a2520e43ed790231f047f7d3789c10ae7d724929f77aec1d33d9587580268ee14396f71e7ef588cb2560d6bd0795a9b97281229eb16de286553469fad7214ffc3e416f8b8e442dce1d37f9b1c88a5d8a8d9f2fe45bd8df213ecb4194c8554aea13cadcd502e51f6fec80418e772b5bd8d0228949058038b185909ee542848680f9ad43f4057d676d5e21ae3d7e0e4a28c03f112a94707f032b35915e42993ff148291b8babe026646ee41905992db217561b90811c4702a14f312fe5d2ae7257db6be1034cc1c346b76a853ce274bf0435e18f7e86c660c18c872a4882d21db2046a1893b83c62d61bfeadc1f913e4cab2b897e096dd3fe3525090410cb23bab36cdf200a36014032cf6e5121803c5a0c4a273a19f340163fc6265441d513a1294b8439276394945d94a589708e32a1cb30a8b07b391201385e0b92ecbb7b13d7a87284164018ace6ce58a82c5de321452461089cdd69259f5390f5f508646a524490583c30630bedb47e158ad41c0a653e86a4f4f255cd2a6e95f33b586823aef5564d9de1f5bdd8c80e193f0597b8003860302cd243c00bc5a82c52afb115d16258d507937966bb89409d6d47b8b652d0761d7c72875ae1efb9bc7c6807c2d783e31fd9cd7e84d3d50d8fc44ab8ac9ccd2c0d42e3bd4c029241320446bbf47e23d1320de30fbdf7ed13f80c28fb5c13fccc2e3f73509bdcddad8a2fe48cdd61f2f43611704af64eed8b0cbbd08754f93b8f3d6347aad5cde1ccc5cbd5eaa87e52cea257c856a4af5243eeb5e89f0000000000000000f420df5e4c6d856b3d55e455c08110b2ef4255a38f81555e8e1f22d59c0bc3c9013e66a1f5bda1b695e1602c0afb5c35b2f68f3b151b1e869f40ff4d1bef5e926e1ff95f6321131e4cb797f53455a093a95e67605222d6acc29c46e5db1ef3b8b07e2169fb24ced4b3ae87ebeca06df93212e465bbd1a7e41df2e1a0d508f86cfc7a469ac682685c44692877d03c34c23a65d2677acc73b5d276fdebd685c9b7a079eae228d8426188cb19b083548f5f29e493ab079f33d1965dcbb165015c46998ad410d60cc65fcfa73bd65a43fc024455c4bf530d663976cf71490577251780ab6b1cf8d397444b5be575229f687a3d95ea6b2aa62fce8acb3d4a6a130b4fefa55d0c1d6f3fa448ee24e588e2965c9a442f0baf90923dda91a6850fb7b9c7f432b63001423fedcf053fa28024cc9a178a07042dabc07176fc524032c2edb340c9c18a83565c431aeb0c869683507255254430f90f61e4eca9c8fa98c000b35fec357ee1ebd08439bd95c1ab0753dfd2603d1608bd8c589a1e160000a6ee0ad13346e08738c2d7b00b5d121d918f1dc8bceded939fa8605b54b37cdfcea0bf2bc63e655dc04a2e50212ff89d6587d49896ce18916cf3adc12839c345ca91bb232b891fae2fdd68aaa38281c0feb2c107af3e080d6cdd1c6646ec6804d7e9960c02aa0db9eda24bbcb287fd2a890fa7f9d6ae0c0b1f8dd1603c9ea2f66b572276f96a28b5b6dd9f9bf6ad4bdaa2139b90faf1f40b0f141258578bd825daaaf718d21b7ac05fe5d1b699e5422ca341fe1c944f68fe3a6d783dcf30b0e09d7688f696883b61cb64464b04d351a0a69b0733c348049b0430ed40e200f4ff0000000000000000000000996bcc1b721b152c892fab887e7d20466d90c049c0fdf51dcc16d226a2619c6f47bc25b7f5df5c09fed638922ed127ab36aa7b0c58a2ce5894b1b0f5375d340d96b69b966b05daaf585121a9c7605ed8e9964eef1f14b74cbb2ccdadc6d0b77cf0492b75e1cd11bfdcfddde91b20366715ba0cbe1041be2a65c25d7ca15ef8b71bd2ab9a4294899a1964b0152518fc2ac15a728bcb9e2bc4b551dfdf9011a2a607bc39ad2c4d7c64dcf967724e9b63c397d5265ad3f1da4395a5a800d8845257dcbf210d4f00fe0bd3deed05e506736e6bb6d40ee6cb960bcdb33633ee87f82beb665a9a4c2d4d2b06479ade3a4cd6bba765c9f52b52a0bdd0849ab92baae3775570accb5a57ee9f0035fc6d3df4eebec2e7eb4ff863d3979a20f4428ddca471037b49d4fd130743a97faa02c293b721e52bf53d64c6585e138162331ef98792e1e9b21a6a084fb7b42c64062ef1323a8a65a8ed6038f274f28ff4f78136a1ef108efbe8c4f4e347d50dcdbc33bf3ade4c3a39d316061930d7dd39b8acdecc3f27830e3eda40e648328d95a9aee65a9dd09fd4e96d5b852025dc53ec3f30cc753e6a796084b4e34f521dbb230ae0f3b79142073d437e1fd22d3b7503ffa95b1d5c7740b0ecbfd35dc0f8af895583dfcc2689f6e02c2dd4b57f3dcac54f40da013eb221fa3d65de760576031052c25a96ed4b20230b36d46d3d3fd6bb1d77cc8a48a6b10fa0149e55ccde4a2b26cca2d1ca9191c74ab006a602543fc24d1283e353cfb917620000000024bf3eed258c02a591ec4cd295212d9a98d38745f6f6c4530900000000000000f184f239098bf32551c7cf454e2865974f6520112743f73c619c3cab5609e00178f7393e53462f31559220c026bbde09837bf1b3ffe748a3247c9569f0c5e99f4494f93e0fa1badca90c888616eca97bddabd8003fc12a084d4b11d841979e161b998ddda92f194c4ec7947b7b303be11e0962d429a2c542a28c4932e14c123dfe2b8ec47a11cce134fd6e42a9f4e00ab6de6b45"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x18) mlockall(0x4) 47.707842196s ago: executing program 8 (id=6382): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, 0xffffffffffffffff}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x10, &(0x7f0000000a40)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x10) mq_unlink(0x0) 47.687184487s ago: executing program 8 (id=6383): r0 = syz_open_dev$loop(&(0x7f0000000040), 0x7, 0x2480) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.stat\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xd, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea89de2b7fb0a0100000000000000000300", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b460a1a93c5209000000000000003d458dd4992861ac00", "90be8b000000140008000000007f000009000000008000"}}) write$UHID_CREATE2(r1, &(0x7f0000000400)={0xb, {'syz1\x00', 'syz1\x00', 'syz1\x00', 0x0, 0xfff9, 0xe12f, 0x38df, 0xc, 0x1}}, 0x118) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x90) 47.666523877s ago: executing program 8 (id=6384): syz_mount_image$iso9660(&(0x7f0000000240), &(0x7f0000000380)='./file0\x00', 0x0, &(0x7f0000000d80)=ANY=[], 0x3, 0x7a6, &(0x7f00000016c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) r0 = syz_clone(0x0, 0x0, 0xfffffffffffffead, 0x0, 0x0, 0x0) r1 = syz_pidfd_open(r0, 0x0) process_mrelease(r1, 0x700000000000000) 47.541429367s ago: executing program 8 (id=6387): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f00000001c0)=0x800, 0x4) r1 = socket$tipc(0x1e, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000a00)={'veth1_to_team\x00', 0x0}) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x3, r2}, 0x10) 47.362285639s ago: executing program 8 (id=6392): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x52) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_deliver\x00', r1}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) 47.362106838s ago: executing program 38 (id=6392): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x52) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_deliver\x00', r1}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) 31.701386075s ago: executing program 1 (id=7187): r0 = fsopen(&(0x7f0000000400)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000240)=',-\x10*\x00', &(0x7f0000000380)='$\x00', 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1}, 0x18) close(r0) 31.677398165s ago: executing program 1 (id=7190): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0b00000007000000080000000400000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000017b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000bc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kfree\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001840)=@newtaction={0xe6c, 0x30, 0x25, 0x0, 0x0, {}, [{0xe58, 0x1, [@m_pedit={0xe54, 0x1, 0x0, 0x0, {{0xa}, {0xe28, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x3}, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x9}, {}, {}, {}, {0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x1}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x2c6}, {0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0xfffffffd}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {0x8001}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x100}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}]}}, @TCA_PEDIT_KEYS_EX={0x4}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe6c}}, 0x0) 31.640066485s ago: executing program 1 (id=7192): perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x57, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xfffffffdffff18d6, 0x96ef}, 0x1206c, 0x80, 0x7, 0x0, 0x0, 0xe, 0x8000, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = fsopen(&(0x7f0000000340)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000006c0)='\xcfD\xbc\xbf\x95@\xd6j\'$\x1d\x14\xb7!\x8b\x84=r \xe34\xdb\x84\x00\x00>\xf9\x9c\x83s1n@\x1e\x99\xcah\x85\xb8\xbeSAk\xf4\xb6 \xdf\xa0P\x18\x19\xae\x8c\x9a\x19mm\r<|\xe8\x9e\xa0x\x84p2\xf9\xe2\xed\xb0\f\x7f;\xf6J18G\x83\xe9]\xf4\x96\xbc\x9e\xfcG\xb5\x1b', &(0x7f0000000000)='t+\xdb\xaaU\x8e\xd6\x9b\xaar\xa1\xf7\xf1\xfa\xed\r\f:\xef\xff\xa7x kT\x14\xaf\xe9\xf2G\x85h\x8a\x05\xd9\xa9\xf8\xb1O0\x05\xee\xc5\x81\xfd\xa5\x99\xfe\x81\xf2\xde>\xcdF8\xd2x\xb4\x05\xf8\x0e\xc2\x85\xfe\xd8b=\xf8q\xa96{\xf49\x88\xb1\xcb\x81n\n.\xd0;7\xd6\xc5', 0x0) readv(r0, &(0x7f0000000480)=[{&(0x7f0000002800)=""/4104, 0x1008}], 0x1) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) 31.586288206s ago: executing program 1 (id=7194): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0, 0x0) mount$bind(&(0x7f0000000080)='./file0\x00', &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x2081c80, 0x0) move_mount(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', r0, &(0x7f00000000c0)='./file0/file0\x00', 0x0) 31.585521126s ago: executing program 1 (id=7196): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000fa540000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) cachestat(0xffffffffffffffff, 0x0, 0x0, 0x0) 31.373818257s ago: executing program 1 (id=7210): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00') writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)="dc", 0x1}], 0x8) 31.373150477s ago: executing program 39 (id=7210): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00') writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)="dc", 0x1}], 0x8) 21.75599014s ago: executing program 4 (id=7694): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000200)='tlb_flush\x00', r0}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 21.69410326s ago: executing program 4 (id=7697): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000100000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x1208002, &(0x7f0000000400)={[{@grpquota}, {@delalloc}, {@init_itable_val={'init_itable', 0x3d, 0xf}}, {@debug}, {@jqfmt_vfsold}, {}, {@nomblk_io_submit}, {@nouid32}]}, 0x1, 0x5f5, &(0x7f0000000bc0)="$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") lchown(&(0x7f00000006c0)='./file0\x00', 0x0, 0xee01) 21.67446018s ago: executing program 4 (id=7700): perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x3d, 0x1, 0x0, 0x0, 0x0, 0x4, 0x62200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100000, 0x0, 0x0, 0x6, 0x3, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00'}, 0x10) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x3c, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x5, 0x9}, 0x0, 0x3, 0xffff, 0x0, 0x0, 0xce05}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$nl_route_sched(r0, &(0x7f0000007940)={0x0, 0x0, &(0x7f0000007900)={&(0x7f0000000680)=@newtaction={0x180, 0x30, 0x216822a75a8bdd29, 0xffe4, 0x0, {}, [{0x16c, 0x1, [@m_connmark={0x50, 0x2, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3, 0xd, 0x5, 0x0, 0x3}, 0x8}}]}, {0x4}, {0xc}, {0xc}}}, @m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0xd4, 0x3, 0x0, 0x0, {{0x9}, {0x58, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0x0, 0x3, {0x2, 0xea3, 0x7}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x1d28}}, @TCA_GACT_PARMS={0x18, 0x2, {0xb66, 0xb3, 0x10000000, 0x34e, 0xffff}}, @TCA_GACT_PARMS={0x18, 0x2, {0x7ff, 0xd8, 0x0, 0x9, 0x100000e0}}]}, {0x52, 0x6, "a06b1d1931f3579c6d7c5159238a286074602c3726c701f3c0d5382de62a6e8c4fb714fcd674c66cd306a4f78d3d05530609c9b04b7483bd084d70df8e77e6fbd503917aa0a6c737cef0ed021b60"}, {0xc}, {0x1, 0x8, {0x2, 0x2}}}}]}]}, 0x180}}, 0x0) 21.549603671s ago: executing program 4 (id=7707): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x81105a, 0x0) chroot(&(0x7f0000000300)='./file0/file0\x00') pivot_root(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f00000001c0)='./file0/../file0/../file0\x00') 21.549411841s ago: executing program 4 (id=7708): r0 = creat(&(0x7f0000000140)='./file0\x00', 0x149) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='attr/current\x00') mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000001200), 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 21.318446982s ago: executing program 4 (id=7718): syz_mount_image$msdos(&(0x7f0000000200), &(0x7f00000000c0)='./bus\x00', 0x10088, &(0x7f0000000580)=ANY=[], 0x1, 0x1ff, &(0x7f00000002c0)="$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") r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r0, 0x402, 0x2) fcntl$notify(r0, 0x402, 0x100000000) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r0, 0x40047211, &(0x7f0000000080)) 21.318209132s ago: executing program 40 (id=7718): syz_mount_image$msdos(&(0x7f0000000200), &(0x7f00000000c0)='./bus\x00', 0x10088, &(0x7f0000000580)=ANY=[], 0x1, 0x1ff, &(0x7f00000002c0)="$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") r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r0, 0x402, 0x2) fcntl$notify(r0, 0x402, 0x100000000) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r0, 0x40047211, &(0x7f0000000080)) 1.096295404s ago: executing program 6 (id=8711): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000340)=[{0x6, 0x1, 0x0, 0x67b}]}, 0x10) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x7d, 0x30}, &(0x7f0000000240)=0xc) 1.010171304s ago: executing program 9 (id=8716): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000300)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001940)=@newtaction={0xe98, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe50, 0x2, {{{}, 0x97, 0x0, [{}, {}]}, [{}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {}, {}, {0x448eade7}, {0x0, 0x0, 0x80000000}, {}, {0x0, 0x0, 0x0, 0x2000}, {0x0, 0x0, 0x0, 0x0, 0x400}, {}, {}, {}, {0x0, 0x1, 0x0, 0x0, 0xfffffffe}, {}, {}, {}, {}, {}, {}, {0x0, 0x3, 0x0, 0x0, 0x0, 0x9}, {}, {0x0, 0x0, 0x100}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {0xfffffffc}, {}, {}, {}, {0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x1}, {}, {}, {0x0, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {0xfffffffe}, {}, {0xd5}, {}, {0x0, 0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x10}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x800, 0x6}, {}, {}, {}, {}, {}, {0x0, 0x5, 0x0, 0x2}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}, {}, {}, {0xffffffff}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x4}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {0x0, 0x800000}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x1000}, {}, {}, {}, {}, {}, {0x4, 0x0, 0x0, 0x0, 0x1}, {}, {0x0, 0x9}, {}, {0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xb}], [{}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {0x5}, {}, {}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {0x0, 0x1}, {}, {}, {}, {}, {0x0, 0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}}, 0x0) 1.009211775s ago: executing program 9 (id=8720): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0xa, 0x4, 0x8, 0xb, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = memfd_create(&(0x7f00000001c0)='\x00\xc76\xbe\x91\x8d\x182)!\x9a%\xd9\x19\x17\xb0\xed|\xb3\xc2\x017h\xe9kL\xa2\xd28\xd6\x06\a\x0e\xfc\xfe\x12\x8f&\x13\xae%@T\xa3\xb0>\\\xec\xa9\xf9Q@6A\x10\x8cn|\x00\x00\x00\x00\x00\x00\x00\x00\xeb0\xdd\xe8\x87\x05=\xfb\x8b$\xdcQ\xee\xc5\x1f\x8bQ\xf7fo\"i\xa1hk\x1d\xf5z\xc1\x7f\xa4\\]\xc4\xbe3\xf9\xa8\t?:\xd8\xda\x84\xeepI[\x1c\x00\x00\x00\x00\xf9v\x00\x00\x00\x00\x00T\xb6\xbe\x0f~\xc0\x92\xe9O{\xa8\x81(\x01\x14\xfc\x83\xf9\xfb\x05\x94Tr@Lq]\xf9\x15zj\x87\xc4\x8e\xe8/\xb9-&R\x8e\xb2\xb3bBx\x1e1\x18\x8f2\xf7]#\xed,\xc7\x03\x00\x00\x00\xa3\xee\xcb\xaf\xb3\xe3\'}\x18\xe8O\xa8#K\xb6\xe4R$\xaa\x00U\x92\xd2\x99\xb80x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x3, r0}) io_uring_enter(r1, 0x353, 0x3, 0x1, 0x0, 0x0) signalfd(r0, &(0x7f0000002340), 0x8) 798.022406ms ago: executing program 2 (id=8730): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0, 0x0, 0xffffffffffffffff}, 0x13) set_robust_list(&(0x7f0000000180)={0x0, 0x1}, 0x18) 748.942716ms ago: executing program 2 (id=8732): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000280)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x1000, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = syz_io_uring_setup(0x6acf, &(0x7f0000000940), &(0x7f00000009c0), &(0x7f00000003c0)) io_uring_register$IORING_REGISTER_BUFFERS2(r2, 0xf, &(0x7f0000001c80)={0x8, 0x0, 0x0, &(0x7f0000001140)=[{&(0x7f0000000680)=""/128, 0x80}, {&(0x7f0000000d80)=""/81, 0x51}, {&(0x7f0000000e00)=""/184, 0xb8}, {&(0x7f0000000ec0)=""/95, 0x5f}, {&(0x7f0000000f40)=""/204, 0xcc}, {&(0x7f0000001040)=""/209, 0xd2}, {&(0x7f0000000540)=""/52, 0xfffffffffffffe14}, {&(0x7f0000000700)=""/25, 0x19}], &(0x7f0000000540)}, 0x20) 739.421396ms ago: executing program 2 (id=8733): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x2, 0x13, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 686.888896ms ago: executing program 2 (id=8735): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000100)=[{0x80000006, 0x1, 0x0, 0xbe}]}, 0x10) bpf$ENABLE_STATS(0x20, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000140)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd308", 0x14, 0x6, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x78}}}}}}}, 0x0) 686.191096ms ago: executing program 2 (id=8738): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000002f00)={0x0, 0x10, &(0x7f0000002ec0)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000002f40)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000080)={r2, 0x9, 0x5}, 0x8) 671.151606ms ago: executing program 9 (id=8739): syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='attr/keycreate\x00') seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x1, &(0x7f0000000480)=[{0x6}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/3\x00') write$UHID_CREATE2(r0, 0x0, 0x0) 276.945978ms ago: executing program 6 (id=8752): syz_mount_image$vfat(&(0x7f0000000440), &(0x7f0000000000)='./file1\x00', 0x844, &(0x7f0000000bc0)=ANY=[@ANYBLOB="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"], 0x1, 0x253, &(0x7f00000004c0)="$eJzs3c9LVFEUAOCjM/5qMxJBEEEDEbQaVGhvRIEkFckQRkhjjiGOCAlCLdRWQas2LVu6M4JatKv/IWjTJtpEy9y1CF/ok3HMMTVyJpzv27zDu+fcd++V956zmDt3T89MT8zOTa6ufo3u7rbIDt5fS5K26I32yERqKQCAo+RHksT3JNXssQAAjeH9DwCtZ6/3f0d6uNHgYQEAh+jvP/8/H333uVQevLCP1KSrGn4aO/gYAYB/a2T09tW19+d6huLNs4iZJ/PF+WJ6TNsvTsZUVKIcfZGLnxFJVRpfGRq+3Jdf1xNRnFncrF+cL2a21/dHLnojbl3bWd+fT22v74hjtfUDkYsT9a8/ULe+M86frakvRC4+3IvZqMTE+r8kNfUL/fn8pevDv9V3beTFcqapfx8AAAAAAAAAAAAAAAAAAAAAAI6mQr6qt97+PYXCbu1p/f73B9ran+fpRn02TmXjcXNnDwAAAAAAAAAAAAAAAAAAAP+HuYePpkuVSvlBNRi/OXV8+5m9grY6TZnN/g/ST8sE6wtziJc4ExGHPYvXK+WPy2N3Rpq/mA0M6q/qq6YPbPwPOe0RsRGcfDFYervw5dvOnFiquZez6X1bqqTHztqHRb7BDycAAAAAAAAAAAAAAAAAAGgxW18D3i0jaeyAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKAJtn7//8BBZ/XMSk/a2S7JaePLps4TAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDW9isAAP//e+Wozg==") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141042, 0x0) pwritev2(r0, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) pwritev2(r1, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0x20000c82}], 0x1, 0x900, 0x0, 0x0) 227.433209ms ago: executing program 0 (id=8753): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000000004000000000000000201801000020786c3500000000002020207b1af8ff00000000bfa10000000000000701000094ffffffb702000008000000b703000000000020850000002d000000850000002a00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$kcm(0x29, 0x2, 0x0) sendmmsg$inet(r1, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f00000002c0)="89", 0x1}], 0x1, &(0x7f0000000e40)=ANY=[], 0xd0}}, {{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000001c0)="bc", 0x1}], 0x1}}], 0x2, 0x0) close(r1) 132.387999ms ago: executing program 3 (id=8755): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000c40)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={0xffffffffffffffff, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x10, &(0x7f0000002e00), &(0x7f0000000000), 0x8, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={r1, 0x66, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7000000, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffcf3, 0xfffffffffffffd48, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) 132.049889ms ago: executing program 0 (id=8756): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x65, &(0x7f0000000200)=0x4091, 0x4) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x6}, 0x75) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) 131.909899ms ago: executing program 3 (id=8757): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000001540)='kmem_cache_free\x00', r0}, 0x18) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_NODES(r1, &(0x7f0000000500)={0x0, 0x37fd, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r2, 0x1, 0x0, 0x0, {{}, {0x0, 0x6}}}, 0xfd53}}, 0x0) 119.916319ms ago: executing program 6 (id=8759): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000002000000fd0f000003"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) get_mempolicy(0x0, 0x0, 0x2000, &(0x7f00005e2000/0x3000)=nil, 0x3) 102.300479ms ago: executing program 3 (id=8760): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x2710}, 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) 94.439359ms ago: executing program 0 (id=8761): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x9c, 0xb, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r2, 0x0, 0x0}, 0x20) 54.31961ms ago: executing program 6 (id=8762): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b707000008000000850000006900000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) unshare(0x2c060000) unshare(0x2c020400) 53.89461ms ago: executing program 3 (id=8764): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000340)=[{0x6, 0x1, 0x0, 0x67b}]}, 0x10) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x7d, 0x30}, &(0x7f0000000240)=0xc) 53.75181ms ago: executing program 0 (id=8765): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0xa, 0x4, 0xf1, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0xfff, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffff30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb3a, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000280)=@generic={0x0, r0}, 0x18) 53.255659ms ago: executing program 3 (id=8766): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000080b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/asound/seq/clients\x00', 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 48.45779ms ago: executing program 6 (id=8767): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000007b00000000000000000000850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008f00850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000280)='kfree\x00', r0}, 0x18) r1 = io_uring_setup(0x1694, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x64}) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) 48.022649ms ago: executing program 0 (id=8768): bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000300)={0xffffffffffffffff, &(0x7f0000001180)="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"}, 0x20) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) listen(r0, 0xfffff922) socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$bt_hci(r0, 0x84, 0x81, &(0x7f0000001280)=""/4107, &(0x7f00000000c0)=0x100b) 26.01629ms ago: executing program 3 (id=8769): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r0, 0x0, 0x0) poll(&(0x7f0000000100)=[{r0}], 0x1, 0x9d) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32={[0x2600]}}], 0xffc8) 16.65313ms ago: executing program 0 (id=8770): perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x3d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x62000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, @perf_bp={0x0, 0x2}, 0x100000, 0x0, 0x0, 0x6, 0x3, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001240)=@newqdisc={0x45c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_PTAB={0x404, 0x3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x10000, 0x0, 0xfffffffd, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0xfffffffa, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0xe1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdb0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}, @TCA_TBF_PARMS={0x28, 0x1, {{}, {0x2, 0x0, 0x0, 0x0, 0x0, 0x40}}}]}}]}, 0x45c}}, 0x0) 0s ago: executing program 6 (id=8771): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x320) kernel console output (not intermixed with test programs): dget: couldn't find an available UDC or it's busy [ 185.564100][T20604] loop6: detected capacity change from 0 to 512 [ 185.569395][T20600] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 185.573849][T20604] EXT4-fs: Ignoring removed oldalloc option [ 185.590393][T20604] EXT4-fs error (device loop6): ext4_xattr_inode_iget:436: comm syz.6.6824: Parent and EA inode have the same ino 15 [ 185.603196][T20604] EXT4-fs (loop6): Remounting filesystem read-only [ 185.609734][T20604] EXT4-fs warning (device loop6): ext4_evict_inode:259: couldn't mark inode dirty (err -5) [ 185.620213][T20604] EXT4-fs (loop6): 1 orphan inode deleted [ 185.625975][T16684] tipc: Node number set to 2130706433 [ 185.632632][T20604] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 185.646603][T20604] SELinux: (dev loop6, type ext4) getxattr errno 5 [ 185.653864][T20604] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 185.717692][T20621] loop6: detected capacity change from 0 to 512 [ 185.724715][T20621] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 185.746103][T20621] EXT4-fs (loop6): 1 orphan inode deleted [ 185.751940][T20621] EXT4-fs (loop6): 1 truncate cleaned up [ 185.759676][T20621] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 185.774160][T20621] EXT4-fs error (device loop6): ext4_inlinedir_to_tree:1404: inode #12: block 7: comm syz.6.6832: path /1336/bus/file0: bad entry in directory: directory entry overrun - offset=788, inode=13, rec_len=784, size=60 fake=0 [ 185.839426][ T4522] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 185.852535][ T29] kauditd_printk_skb: 331 callbacks suppressed [ 185.852549][ T29] audit: type=1326 audit(2000000068.782:6255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20637 comm="syz.3.6839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f100005ff19 code=0x7ffc0000 [ 185.902272][ T29] audit: type=1326 audit(2000000068.782:6256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20637 comm="syz.3.6839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f100005ff19 code=0x7ffc0000 [ 185.926541][ T29] audit: type=1326 audit(2000000068.782:6257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20637 comm="syz.3.6839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f100005ff19 code=0x7ffc0000 [ 185.950687][ T29] audit: type=1326 audit(2000000068.782:6258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20637 comm="syz.3.6839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f100005ff19 code=0x7ffc0000 [ 185.974222][ T29] audit: type=1326 audit(2000000068.782:6259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20637 comm="syz.3.6839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f100005ff19 code=0x7ffc0000 [ 185.998343][ T29] audit: type=1326 audit(2000000068.782:6260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20637 comm="syz.3.6839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f100005ff19 code=0x7ffc0000 [ 186.021862][ T29] audit: type=1326 audit(2000000068.782:6261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20637 comm="syz.3.6839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f100005ff19 code=0x7ffc0000 [ 186.046015][ T29] audit: type=1326 audit(2000000068.782:6262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20637 comm="syz.3.6839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f100005ff19 code=0x7ffc0000 [ 186.069622][ T29] audit: type=1326 audit(2000000068.814:6263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20637 comm="syz.3.6839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f100005ff19 code=0x7ffc0000 [ 186.093691][ T29] audit: type=1404 audit(2000000068.814:6264): enforcing=1 old_enforcing=0 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 186.207490][T20659] loop6: detected capacity change from 0 to 764 [ 186.289165][T20666] xt_HMARK: spi-set and port-set can't be combined [ 186.367927][T20671] netlink: 'syz.6.6854': attribute type 1 has an invalid length. [ 186.444723][T20677] netlink: 'syz.6.6857': attribute type 4 has an invalid length. [ 186.494782][T20681] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 186.599402][T20693] geneve2: entered promiscuous mode [ 186.604674][T20693] geneve2: entered allmulticast mode [ 186.729026][T20719] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 186.743738][T20719] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 186.841321][T20738] team0 (unregistering): Port device team_slave_0 removed [ 186.849094][T20738] team0 (unregistering): Port device team_slave_1 removed [ 187.027092][T20779] loop1: detected capacity change from 0 to 1024 [ 187.036101][T20779] EXT4-fs: Ignoring removed orlov option [ 187.041805][T20779] EXT4-fs: Ignoring removed orlov option [ 187.072193][T20779] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 187.106297][T20795] loop2: detected capacity change from 0 to 512 [ 187.111028][ T3296] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 187.123298][T20795] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 187.132449][T20795] EXT4-fs (loop2): orphan cleanup on readonly fs [ 187.138996][T20795] EXT4-fs warning (device loop2): ext4_enable_quotas:7156: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 187.153885][T20795] EXT4-fs (loop2): Cannot turn on quotas: error -117 [ 187.162529][T20795] EXT4-fs error (device loop2): ext4_orphan_get:1389: inode #16: comm syz.2.6902: iget: immutable or append flags not allowed on symlinks [ 187.176807][T20795] EXT4-fs error (device loop2): ext4_orphan_get:1394: comm syz.2.6902: couldn't read orphan inode 16 (err -117) [ 187.190438][T20795] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 187.216120][T20795] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 187.234560][T15924] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 187.436650][T20844] __nla_validate_parse: 12 callbacks suppressed [ 187.436664][T20844] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6928'. [ 187.514780][T20853] loop2: detected capacity change from 0 to 512 [ 187.521579][T20853] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 187.540322][T20853] EXT4-fs (loop2): corrupt root inode, run e2fsck [ 187.541214][T20850] can0: slcan on ttyS3. [ 187.546867][T20853] EXT4-fs (loop2): mount failed [ 187.597076][T20849] can0 (unregistered): slcan off ttyS3. [ 187.702539][T20881] syz.3.6944[20881] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 187.702835][T20881] syz.3.6944[20881] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 187.709477][T20883] syz.2.6945[20883] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 187.725922][T20883] syz.2.6945[20883] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 187.726494][T20881] syz.3.6944[20881] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 187.738239][T20883] syz.2.6945[20883] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 187.940705][T20910] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.960398][T20910] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.968714][T20910] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.977023][T20910] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.985285][T20910] geneve2: entered promiscuous mode [ 187.990613][T20910] geneve2: entered allmulticast mode [ 187.997152][T20910] netdevsim netdevsim6 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.005622][T20910] netdevsim netdevsim6 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.014076][T20910] netdevsim netdevsim6 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.022664][T20910] netdevsim netdevsim6 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.088973][T20932] pim6reg: entered allmulticast mode [ 188.105871][T20932] pim6reg: left allmulticast mode [ 188.112709][T20936] syz.3.6969[20936] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 188.200947][T20948] bridge_slave_0: left allmulticast mode [ 188.218305][T20948] bridge_slave_0: left promiscuous mode [ 188.223134][T20955] netlink: 24 bytes leftover after parsing attributes in process `syz.6.6977'. [ 188.223994][T20948] bridge0: port 1(bridge_slave_0) entered disabled state [ 188.247511][T20948] bridge_slave_1: left allmulticast mode [ 188.253151][T20948] bridge_slave_1: left promiscuous mode [ 188.258858][T20948] bridge0: port 2(bridge_slave_1) entered disabled state [ 188.277007][T20948] bond0: (slave bond_slave_0): Releasing backup interface [ 188.288872][T20948] bond0: (slave bond_slave_1): Releasing backup interface [ 188.311530][T20948] team0: Port device team_slave_0 removed [ 188.320243][T20948] team0: Port device team_slave_1 removed [ 188.327541][T20948] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 188.335029][T20948] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 188.346283][T20948] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 188.353779][T20948] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 188.442470][T20977] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6989'. [ 188.514290][T16676] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 188.521760][T16676] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 188.529149][T16676] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 188.536606][T16676] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 188.544680][T16676] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 188.552105][T16676] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 188.559533][T16676] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 188.567021][T16676] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 188.575162][T16676] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 188.582623][T16676] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 188.590038][T16676] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 188.598012][T16676] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 188.605421][T16676] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 188.612851][T16676] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 188.620264][T16676] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 188.628350][T16676] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 188.635748][T16676] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 188.643121][T16676] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 188.650509][T16676] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 188.658537][T16676] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 188.665942][T16676] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 188.673396][T16676] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 188.680776][T16676] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 188.688790][T16676] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 188.696196][T16676] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 188.703609][T16676] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 188.710985][T16676] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 188.719435][T16676] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 188.726918][T16676] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 188.734321][T16676] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 188.742413][T16676] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 188.749805][T16676] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 188.757220][T16676] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 188.764614][T16676] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 188.772630][T16676] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 188.780066][T16676] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 188.787459][T16676] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 188.794837][T16676] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 188.802885][T16676] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 188.810317][T16676] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 188.817829][T16676] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 188.825258][T16676] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 188.833291][T16676] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 188.841995][T16676] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz0] on syz1 [ 188.986255][T21021] loop1: detected capacity change from 0 to 128 [ 189.022516][T21027] geneve0: entered allmulticast mode [ 189.099154][T21044] netlink: 133492 bytes leftover after parsing attributes in process `syz.1.7019'. [ 189.249853][T21062] loop1: detected capacity change from 0 to 1024 [ 189.255669][T21064] futex_wake_op: syz.9.7029 tries to shift op by 144; fix this program [ 189.287803][T21062] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 189.379350][ T3296] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 189.484506][T21083] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 189.502547][T21083] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 189.541644][T21091] serio: Serial port ptm0 [ 189.638555][T21096] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7042'. [ 189.791621][T21105] loop1: detected capacity change from 0 to 8192 [ 189.806244][T21115] loop2: detected capacity change from 0 to 512 [ 189.819655][T21115] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 189.830869][T21105] bio_check_eod: 35204 callbacks suppressed [ 189.830883][T21105] syz.1.7046: attempt to access beyond end of device [ 189.830883][T21105] loop1: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 189.852970][T21115] EXT4-fs (loop2): 1 truncate cleaned up [ 189.859367][T21115] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 189.872771][T21105] FAT-fs (loop1): error, invalid access to FAT (entry 0x0000e1b1) [ 189.881316][T21105] FAT-fs (loop1): Filesystem has been set read-only [ 189.889273][T21105] FAT-fs (loop1): error, invalid access to FAT (entry 0x0000e1b1) [ 189.899103][T21105] FAT-fs (loop1): error, invalid access to FAT (entry 0x0000e1b1) [ 189.963386][T15924] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 189.991793][T21122] loop1: detected capacity change from 0 to 4096 [ 190.002475][T21122] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 190.081432][ T3296] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 190.109311][T21130] netlink: 28 bytes leftover after parsing attributes in process `syz.6.7058'. [ 190.281721][T21151] loop2: detected capacity change from 0 to 1024 [ 190.306873][T21157] random: crng reseeded on system resumption [ 190.346941][T21165] bpf_get_probe_write_proto: 8 callbacks suppressed [ 190.347015][T21165] syz.1.7072[21165] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 190.368979][T21165] syz.1.7072[21165] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 190.383269][T21165] syz.1.7072[21165] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 190.392723][T21151] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 190.457877][T15924] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 190.527726][T21186] IPVS: sync thread started: state = MASTER, mcast_ifn = ip6gre0, syncid = 1, id = 0 [ 190.616560][ T29] kauditd_printk_skb: 355 callbacks suppressed [ 190.616572][ T29] audit: type=1400 audit(2000000073.779:6619): avc: denied { bind } for pid=21197 comm="syz.9.7086" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 190.642881][ T29] audit: type=1400 audit(2000000073.779:6620): avc: denied { read } for pid=21197 comm="syz.9.7086" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 190.667540][ T29] audit: type=1326 audit(2000000073.790:6621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21201 comm="syz.2.7087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67c9fcff19 code=0x7ffc0000 [ 190.691141][ T29] audit: type=1326 audit(2000000073.790:6622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21201 comm="syz.2.7087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67c9fcff19 code=0x7ffc0000 [ 190.694529][T21207] loop2: detected capacity change from 0 to 1024 [ 190.715379][ T29] audit: type=1326 audit(2000000073.790:6623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21201 comm="syz.2.7087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f67c9fcff19 code=0x7ffc0000 [ 190.745243][ T29] audit: type=1326 audit(2000000073.790:6624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21201 comm="syz.2.7087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67c9fcff19 code=0x7ffc0000 [ 190.760262][T21207] Quota error (device loop2): do_check_range: Getting block 64 out of range 1-5 [ 190.769361][ T29] audit: type=1326 audit(2000000073.790:6625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21201 comm="syz.2.7087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f67c9fcff19 code=0x7ffc0000 [ 190.777786][T21207] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0 [ 190.801800][ T29] audit: type=1326 audit(2000000073.790:6626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21201 comm="syz.2.7087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67c9fcff19 code=0x7ffc0000 [ 190.810523][T21207] EXT4-fs error (device loop2): ext4_acquire_dquot:6938: comm syz.2.7089: Failed to acquire dquot type 0 [ 190.845748][T21207] EXT4-fs error (device loop2): mb_free_blocks:1948: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 190.862421][T21207] EXT4-fs error (device loop2): ext4_do_update_inode:5153: inode #13: comm syz.2.7089: corrupted inode contents [ 190.874960][T21207] EXT4-fs error (device loop2): ext4_dirty_inode:6041: inode #13: comm syz.2.7089: mark_inode_dirty error [ 190.881125][T21214] loop3: detected capacity change from 0 to 512 [ 190.886532][T21207] EXT4-fs error (device loop2): ext4_do_update_inode:5153: inode #13: comm syz.2.7089: corrupted inode contents [ 190.886615][T21207] EXT4-fs error (device loop2): __ext4_ext_dirty:207: inode #13: comm syz.2.7089: mark_inode_dirty error [ 190.886897][T21207] EXT4-fs error (device loop2): ext4_do_update_inode:5153: inode #13: comm syz.2.7089: corrupted inode contents [ 190.922963][T21214] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 190.931752][T21207] EXT4-fs error (device loop2) in ext4_orphan_del:305: Corrupt filesystem [ 190.943255][T21212] loop9: detected capacity change from 0 to 512 [ 190.955899][T21207] EXT4-fs error (device loop2): ext4_do_update_inode:5153: inode #13: comm syz.2.7089: corrupted inode contents [ 190.968222][T21207] EXT4-fs error (device loop2): ext4_truncate:4240: inode #13: comm syz.2.7089: mark_inode_dirty error [ 190.980791][T21207] EXT4-fs error (device loop2) in ext4_process_orphan:347: Corrupt filesystem [ 190.988773][T21214] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec019, mo2=0002] [ 190.989940][T21207] EXT4-fs (loop2): 1 truncate cleaned up [ 191.002642][T21214] System zones: 1-12 [ 191.007026][T21207] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 191.019942][T21212] EXT4-fs (loop9): revision level too high, forcing read-only mode [ 191.021337][T21214] EXT4-fs (loop3): 1 truncate cleaned up [ 191.027942][T21212] EXT4-fs (loop9): orphan cleanup on readonly fs [ 191.034270][T21214] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 191.040404][T21212] EXT4-fs warning (device loop9): ext4_enable_quotas:7156: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 191.067877][T21212] EXT4-fs (loop9): Cannot turn on quotas: error -117 [ 191.075467][T21212] EXT4-fs error (device loop9): ext4_orphan_get:1389: inode #16: comm syz.9.7090: casefold flag without casefold feature [ 191.092262][T21212] EXT4-fs error (device loop9): ext4_orphan_get:1394: comm syz.9.7090: couldn't read orphan inode 16 (err -117) [ 191.105815][T21207] bond1: entered promiscuous mode [ 191.110932][T21207] bond1: entered allmulticast mode [ 191.116757][T21212] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 191.127309][T21207] 8021q: adding VLAN 0 to HW filter on device bond1 [ 191.147933][T21207] bond1 (unregistering): Released all slaves [ 191.174332][T10746] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 191.200900][T19626] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 191.227401][T15924] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 191.262311][T21235] loop2: detected capacity change from 0 to 512 [ 191.279335][T21235] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 191.293838][T21240] netlink: 28 bytes leftover after parsing attributes in process `syz.9.7104'. [ 191.305312][T21235] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 191.318628][T21235] ext4 filesystem being mounted at /422/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 191.338643][T21244] loop6: detected capacity change from 0 to 8192 [ 191.356276][T15924] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 191.372181][T21244] syz.6.7105: attempt to access beyond end of device [ 191.372181][T21244] loop6: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 191.386672][T21244] FAT-fs (loop6): error, invalid access to FAT (entry 0x0000e1b1) [ 191.388497][T21249] loop1: detected capacity change from 0 to 1024 [ 191.394619][T21244] FAT-fs (loop6): Filesystem has been set read-only [ 191.414076][T21244] FAT-fs (loop6): error, invalid access to FAT (entry 0x0000e1b1) [ 191.422126][T21244] FAT-fs (loop6): error, invalid access to FAT (entry 0x0000e1b1) [ 191.431304][T21249] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 191.485217][ T3296] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 191.561688][T21271] atomic_op ffff888115b75928 conn xmit_atomic 0000000000000000 [ 191.607318][T21279] syz.2.7121[21279] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 191.607421][T21279] syz.2.7121[21279] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 191.619048][T21279] syz.2.7121[21279] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 191.639952][T21279] netlink: 133492 bytes leftover after parsing attributes in process `syz.2.7121'. [ 191.719357][T21298] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7128'. [ 191.767854][T21304] ebtables: ebtables: counters copy to user failed while replacing table [ 191.829417][T21322] IPVS: Error connecting to the multicast addr [ 191.874375][T21331] loop1: detected capacity change from 0 to 512 [ 191.888286][T21333] loop2: detected capacity change from 0 to 512 [ 191.893951][T21331] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 191.894926][T21333] EXT4-fs: dax option not supported [ 191.907758][T21331] ext4 filesystem being mounted at /1371/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 191.940989][T21331] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 191.959385][T21341] syz.6.7146[21341] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 191.959494][T21341] syz.6.7146[21341] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 191.969663][T21331] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 191.972129][T21341] syz.6.7146[21341] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 191.993442][ T3296] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 192.033624][T21344] netlink: 28 bytes leftover after parsing attributes in process `syz.6.7149'. [ 192.411942][T21404] __nla_validate_parse: 2 callbacks suppressed [ 192.411974][T21404] netlink: 40 bytes leftover after parsing attributes in process `syz.9.7177'. [ 192.427490][T21404] all: renamed from gre0 [ 192.485117][T21413] loop1: detected capacity change from 0 to 512 [ 192.494378][T21413] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 192.502097][T21416] loop9: detected capacity change from 0 to 1024 [ 192.522555][T21416] EXT4-fs error (device loop9): ext4_acquire_dquot:6938: comm syz.9.7183: Failed to acquire dquot type 0 [ 192.534018][T21413] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 192.534405][T21416] EXT4-fs error (device loop9): mb_free_blocks:1948: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 192.542008][T21413] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e000e118, mo2=0002] [ 192.565372][T21413] System zones: 0-1, 15-15, 18-18, 34-34 [ 192.570820][T21416] EXT4-fs error (device loop9): ext4_do_update_inode:5153: inode #13: comm syz.9.7183: corrupted inode contents [ 192.571267][T21413] EXT4-fs (loop1): orphan cleanup on readonly fs [ 192.589987][T21413] EXT4-fs warning (device loop1): ext4_enable_quotas:7156: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 192.597359][T21416] EXT4-fs error (device loop9): ext4_dirty_inode:6041: inode #13: comm syz.9.7183: mark_inode_dirty error [ 192.604514][T21413] EXT4-fs (loop1): Cannot turn on quotas: error -22 [ 192.623731][T21416] EXT4-fs error (device loop9): ext4_do_update_inode:5153: inode #13: comm syz.9.7183: corrupted inode contents [ 192.635508][T21413] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.7181: bg 0: block 40: padding at end of block bitmap is not set [ 192.635883][T21413] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 192.660933][T21416] EXT4-fs error (device loop9): __ext4_ext_dirty:207: inode #13: comm syz.9.7183: mark_inode_dirty error [ 192.661015][T21413] EXT4-fs (loop1): 1 truncate cleaned up [ 192.661528][T21413] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 192.672521][T21416] EXT4-fs error (device loop9): ext4_do_update_inode:5153: inode #13: comm syz.9.7183: corrupted inode contents [ 192.685301][T21413] EXT4-fs (loop1): shut down requested (1) [ 192.690937][T21416] EXT4-fs error (device loop9) in ext4_orphan_del:305: Corrupt filesystem [ 192.719044][T21413] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=16 [ 192.727874][T21413] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=16 [ 192.741406][T21416] EXT4-fs error (device loop9): ext4_do_update_inode:5153: inode #13: comm syz.9.7183: corrupted inode contents [ 192.754729][T21416] EXT4-fs error (device loop9): ext4_truncate:4240: inode #13: comm syz.9.7183: mark_inode_dirty error [ 192.766354][T21416] EXT4-fs error (device loop9) in ext4_process_orphan:347: Corrupt filesystem [ 192.766527][ T3296] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 192.775724][T21416] EXT4-fs (loop9): 1 truncate cleaned up [ 192.790251][T21416] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 192.836663][T21416] bond2: entered promiscuous mode [ 192.841703][T21416] bond2: entered allmulticast mode [ 192.847084][T21416] 8021q: adding VLAN 0 to HW filter on device bond2 [ 192.847715][T21426] xt_HMARK: spi-set and port-set can't be combined [ 192.861263][T21416] bond2 (unregistering): Released all slaves [ 192.918180][T21438] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 192.938976][T10746] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 192.959186][T21442] random: crng reseeded on system resumption [ 193.097087][T21458] netlink: 8 bytes leftover after parsing attributes in process `syz.9.7202'. [ 193.143096][T21466] ALSA: seq fatal error: cannot create timer (-22) [ 193.191210][T21474] loop3: detected capacity change from 0 to 128 [ 193.356674][T21480] sit0 speed is unknown, defaulting to 1000 [ 193.392937][T21508] loop2: detected capacity change from 0 to 512 [ 193.399857][T21480] lo speed is unknown, defaulting to 1000 [ 193.426506][T21508] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 193.452673][T21508] EXT4-fs (loop2): orphan cleanup on readonly fs [ 193.464519][T21508] EXT4-fs warning (device loop2): ext4_enable_quotas:7156: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 193.480079][T21480] chnl_net:caif_netlink_parms(): no params data found [ 193.501146][T21508] EXT4-fs (loop2): Cannot turn on quotas: error -117 [ 193.517772][T21508] EXT4-fs error (device loop2): ext4_orphan_get:1389: inode #16: comm syz.2.7223: casefold flag without casefold feature [ 193.533160][T21508] EXT4-fs error (device loop2): ext4_orphan_get:1394: comm syz.2.7223: couldn't read orphan inode 16 (err -117) [ 193.551497][T21521] loop6: detected capacity change from 0 to 512 [ 193.558288][T21521] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 193.558795][T21508] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 193.597685][T21521] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec019, mo2=0002] [ 193.606034][T21480] bridge0: port 1(bridge_slave_0) entered blocking state [ 193.613177][T21480] bridge0: port 1(bridge_slave_0) entered disabled state [ 193.620414][T21480] bridge_slave_0: entered allmulticast mode [ 193.626854][T21480] bridge_slave_0: entered promiscuous mode [ 193.627815][T21521] System zones: 1-12 [ 193.633301][T21480] bridge0: port 2(bridge_slave_1) entered blocking state [ 193.643663][T21480] bridge0: port 2(bridge_slave_1) entered disabled state [ 193.650878][T21480] bridge_slave_1: entered allmulticast mode [ 193.651055][T21521] EXT4-fs (loop6): 1 truncate cleaned up [ 193.657627][T21480] bridge_slave_1: entered promiscuous mode [ 193.664426][T21521] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 193.702173][T21480] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 193.733980][T21480] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 193.790370][T21480] team0: Port device team_slave_0 added [ 193.796911][T21480] team0: Port device team_slave_1 added [ 193.830810][T21480] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 193.837821][T21480] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 193.863738][T21480] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 193.875679][T21480] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 193.882674][T21480] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 193.909305][T21480] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 193.930748][T21552] loop3: detected capacity change from 0 to 512 [ 193.943208][T21548] team0 (unregistering): Port device team_slave_0 removed [ 193.951902][T21552] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 193.960435][T21552] EXT4-fs (loop3): orphan cleanup on readonly fs [ 193.967041][T21552] EXT4-fs warning (device loop3): ext4_enable_quotas:7156: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 193.981971][T21552] EXT4-fs (loop3): Cannot turn on quotas: error -117 [ 193.982327][T21548] team0 (unregistering): Port device team_slave_1 removed [ 193.989433][T21552] EXT4-fs error (device loop3): ext4_orphan_get:1389: inode #16: comm syz.3.7240: casefold flag without casefold feature [ 194.003030][T21559] netlink: 16 bytes leftover after parsing attributes in process `+}[@'. [ 194.009238][T21552] EXT4-fs error (device loop3): ext4_orphan_get:1394: comm syz.3.7240: couldn't read orphan inode 16 (err -117) [ 194.048369][T21480] hsr_slave_0: entered promiscuous mode [ 194.077290][T21480] hsr_slave_1: entered promiscuous mode [ 194.093153][T21480] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 194.101199][T21480] Cannot create hsr debugfs directory [ 194.115682][T21564] loop6: detected capacity change from 0 to 1024 [ 194.133829][T21572] loop2: detected capacity change from 0 to 512 [ 194.135484][T21564] EXT4-fs error (device loop6): ext4_acquire_dquot:6938: comm syz.6.7245: Failed to acquire dquot type 0 [ 194.151554][T21572] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 194.161788][T21564] EXT4-fs error (device loop6): mb_free_blocks:1948: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 194.161839][T21564] EXT4-fs error (device loop6): ext4_do_update_inode:5153: inode #13: comm syz.6.7245: corrupted inode contents [ 194.163703][T21564] EXT4-fs error (device loop6): ext4_dirty_inode:6041: inode #13: comm syz.6.7245: mark_inode_dirty error [ 194.190983][T21572] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec019, mo2=0002] [ 194.200999][T21564] EXT4-fs error (device loop6): ext4_do_update_inode:5153: inode #13: comm syz.6.7245: corrupted inode contents [ 194.208031][T21572] System zones: 1-12 [ 194.223290][T21564] EXT4-fs error (device loop6): __ext4_ext_dirty:207: inode #13: comm syz.6.7245: mark_inode_dirty error [ 194.237014][T21572] EXT4-fs (loop2): 1 truncate cleaned up [ 194.243345][T21564] EXT4-fs error (device loop6): ext4_do_update_inode:5153: inode #13: comm syz.6.7245: corrupted inode contents [ 194.255366][T21564] EXT4-fs error (device loop6) in ext4_orphan_del:305: Corrupt filesystem [ 194.274276][T21564] EXT4-fs error (device loop6): ext4_do_update_inode:5153: inode #13: comm syz.6.7245: corrupted inode contents [ 194.296610][T21564] EXT4-fs error (device loop6): ext4_truncate:4240: inode #13: comm syz.6.7245: mark_inode_dirty error [ 194.330359][T21564] EXT4-fs error (device loop6) in ext4_process_orphan:347: Corrupt filesystem [ 194.352324][T21564] EXT4-fs (loop6): 1 truncate cleaned up [ 194.386958][T21582] loop2: detected capacity change from 0 to 4096 [ 194.404549][T21564] bond1: entered promiscuous mode [ 194.409695][T21564] bond1: entered allmulticast mode [ 194.427889][T21564] 8021q: adding VLAN 0 to HW filter on device bond1 [ 194.441292][T21564] bond1 (unregistering): Released all slaves [ 194.453349][T21582] EXT4-fs error (device loop2): ext4_do_update_inode:5153: inode #15: comm syz.2.7252: corrupted inode contents [ 194.467433][T21582] EXT4-fs error (device loop2): ext4_dirty_inode:6041: inode #15: comm syz.2.7252: mark_inode_dirty error [ 194.479756][T21582] EXT4-fs error (device loop2): ext4_do_update_inode:5153: inode #15: comm syz.2.7252: corrupted inode contents [ 194.494303][T21582] EXT4-fs error (device loop2): __ext4_ext_dirty:207: inode #15: comm syz.2.7252: mark_inode_dirty error [ 194.506621][T21582] EXT4-fs error (device loop2): ext4_do_update_inode:5153: inode #15: comm syz.2.7252: corrupted inode contents [ 194.520727][T21582] EXT4-fs error (device loop2): __ext4_ext_dirty:207: inode #15: comm syz.2.7252: mark_inode_dirty error [ 194.535525][T21582] EXT4-fs error (device loop2): ext4_do_update_inode:5153: inode #15: comm syz.2.7252: corrupted inode contents [ 194.554210][T21582] EXT4-fs error (device loop2): ext4_truncate:4240: inode #15: comm syz.2.7252: mark_inode_dirty error [ 194.570806][T21582] EXT4-fs error (device loop2) in ext4_setattr:5568: Corrupt filesystem [ 194.587185][T21599] EXT4-fs error (device loop2): ext4_do_update_inode:5153: inode #15: comm syz.2.7252: corrupted inode contents [ 194.670322][T21619] loop6: detected capacity change from 0 to 2048 [ 194.693150][T21480] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 194.693264][T21627] SELinux: security_context_str_to_sid (u) failed with errno=-22 [ 194.703721][T21623] loop9: detected capacity change from 0 to 512 [ 194.717178][T21480] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 194.725979][T21480] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 194.734377][T21619] loop6: p1 p2 p3 < > p4 < p5 p6 > [ 194.739578][T21619] loop6: partition table partially beyond EOD, truncated [ 194.747393][T21623] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 194.750397][T21619] loop6: p1 size 33024 extends beyond EOD, truncated [ 194.759040][T21623] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec019, mo2=0002] [ 194.771918][T21623] System zones: 1-12 [ 194.778068][T21480] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 194.785489][T21623] EXT4-fs (loop9): 1 truncate cleaned up [ 194.793877][T21619] loop6: p2 start 16908804 is beyond EOD, truncated [ 194.800633][T21619] loop6: p3 start 4284289 is beyond EOD, truncated [ 194.809758][T21630] Invalid ELF header magic: != ELF [ 194.814380][T21480] 8021q: adding VLAN 0 to HW filter on device bond0 [ 194.829538][T21619] loop6: p5 size 33024 extends beyond EOD, truncated [ 194.837114][T21619] loop6: p6 start 16908804 is beyond EOD, truncated [ 194.844819][T21480] 8021q: adding VLAN 0 to HW filter on device team0 [ 194.884211][ T40] bridge0: port 1(bridge_slave_0) entered blocking state [ 194.891481][ T40] bridge0: port 1(bridge_slave_0) entered forwarding state [ 194.911522][ T40] bridge0: port 2(bridge_slave_1) entered blocking state [ 194.918712][ T40] bridge0: port 2(bridge_slave_1) entered forwarding state [ 194.948083][T21480] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 195.012896][T21648] loop9: detected capacity change from 0 to 512 [ 195.034903][T21648] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 195.047051][T21480] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 195.066215][T21648] EXT4-fs (loop9): 1 truncate cleaned up [ 195.268647][T21480] veth0_vlan: entered promiscuous mode [ 195.300508][T21480] veth1_vlan: entered promiscuous mode [ 195.323775][T21480] veth0_macvtap: entered promiscuous mode [ 195.331001][T21480] veth1_macvtap: entered promiscuous mode [ 195.344670][T21480] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 195.355146][T21480] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.368577][T21480] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 195.384664][T21480] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 195.395155][T21480] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.408368][T21480] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 195.417858][T21480] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.426620][T21480] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.435383][T21480] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.444216][T21480] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.505970][ T29] kauditd_printk_skb: 187 callbacks suppressed [ 195.505984][ T29] audit: type=1400 audit(2000000078.913:6806): avc: denied { mounton } for pid=21480 comm="syz-executor" path="/root/syzkaller.67RIGy/syz-tmp" dev="sda1" ino=1964 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 195.537642][ T29] audit: type=1400 audit(2000000078.913:6807): avc: denied { mount } for pid=21480 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 195.560413][ T29] audit: type=1400 audit(2000000078.913:6808): avc: denied { mounton } for pid=21480 comm="syz-executor" path="/root/syzkaller.67RIGy/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 195.587309][ T29] audit: type=1400 audit(2000000078.913:6809): avc: denied { mounton } for pid=21480 comm="syz-executor" path="/root/syzkaller.67RIGy/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=60372 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 195.615457][ T29] audit: type=1400 audit(2000000078.955:6810): avc: denied { mounton } for pid=21480 comm="syz-executor" path="/dev/binderfs" dev="devtmpfs" ino=502 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 195.744081][T21723] hub 9-0:1.0: USB hub found [ 195.748731][T21723] hub 9-0:1.0: 8 ports detected [ 195.763294][T21727] netlink: 24 bytes leftover after parsing attributes in process `syz.9.7293'. [ 195.786738][T21729] loop6: detected capacity change from 0 to 1024 [ 195.809809][T21729] EXT4-fs: Ignoring removed nomblk_io_submit option [ 195.822357][T21729] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 195.840648][T21736] loop9: detected capacity change from 0 to 1024 [ 195.860774][T21729] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e854e01c, mo2=0003] [ 195.871516][T21729] System zones: 0-1, 3-36 [ 195.881664][ T29] audit: type=1400 audit(2000000079.301:6811): avc: denied { setattr } for pid=21726 comm="syz.6.7295" name="file0" dev="loop6" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 195.967264][T21752] syz.3.7314[21752] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 195.967340][T21752] syz.3.7314[21752] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 195.998712][T21752] syz.3.7314[21752] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 196.036327][T21759] ALSA: seq fatal error: cannot create timer (-22) [ 196.064472][T21757] IPv6: Can't replace route, no match found [ 196.084581][T21765] loop2: detected capacity change from 0 to 128 [ 196.140715][ T29] audit: type=1326 audit(2000000079.574:6812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21774 comm="syz.4.7325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81d5b2ff19 code=0x7ffc0000 [ 196.164231][ T29] audit: type=1326 audit(2000000079.574:6813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21774 comm="syz.4.7325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81d5b2ff19 code=0x7ffc0000 [ 196.187762][ T29] audit: type=1326 audit(2000000079.574:6814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21774 comm="syz.4.7325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f81d5b2ff19 code=0x7ffc0000 [ 196.211313][ T29] audit: type=1326 audit(2000000079.574:6815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21774 comm="syz.4.7325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81d5b2ff19 code=0x7ffc0000 [ 196.247712][T21777] siw: device registration error -23 [ 196.427377][T21810] syz.4.7340[21810] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 196.427473][T21810] syz.4.7340[21810] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 196.462164][T21810] syz.4.7340[21810] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 196.545798][T21825] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 196.633602][T21837] syz.9.7354[21837] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 196.633687][T21837] syz.9.7354[21837] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 196.671047][T21837] syz.9.7354[21837] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 196.744716][T21848] loop2: detected capacity change from 0 to 512 [ 196.807030][T21848] ext4 filesystem being mounted at /479/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 196.819629][T21858] syz.4.7363[21858] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 196.902475][T21866] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7367'. [ 197.095117][T21885] netlink: 116 bytes leftover after parsing attributes in process `syz.3.7376'. [ 197.160304][T21890] loop3: detected capacity change from 0 to 128 [ 197.175541][T21888] sit0 speed is unknown, defaulting to 1000 [ 197.252279][T21888] lo speed is unknown, defaulting to 1000 [ 197.421387][T21888] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7377'. [ 197.731285][T21860] syz.9.7364 (21860) used greatest stack depth: 6360 bytes left [ 197.820656][T21959] sit0 speed is unknown, defaulting to 1000 [ 197.866996][T21959] lo speed is unknown, defaulting to 1000 [ 198.213869][T22030] loop6: detected capacity change from 0 to 256 [ 198.262382][T22034] Invalid ELF header magic: != ELF [ 198.305376][T22032] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 198.317405][T22032] vhci_hcd: invalid port number 10 [ 198.322566][T22032] vhci_hcd: USB_PORT_FEAT_U1/2_TIMEOUT req not supported for USB 2.0 roothub [ 198.339635][T22037] vlan0: entered promiscuous mode [ 198.454298][T22053] SELinux: policydb version 0 does not match my version range 15-33 [ 198.463626][T22055] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=22055 comm=syz.9.7445 [ 198.476885][T22053] SELinux: failed to load policy [ 198.484113][T22058] loop3: detected capacity change from 0 to 512 [ 198.503474][T22058] EXT4-fs: Ignoring removed nomblk_io_submit option [ 198.532142][T22058] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 198.540190][T22058] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=1842c01c, mo2=0002] [ 198.565847][T22058] EXT4-fs (loop3): couldn't mount RDWR because of unsupported optional features (80) [ 198.575423][T22058] EXT4-fs (loop3): Skipping orphan cleanup due to unknown ROCOMPAT features [ 198.605530][T22058] EXT4-fs (loop3): couldn't mount RDWR because of unsupported optional features (80) [ 198.610003][T22078] loop9: detected capacity change from 0 to 2048 [ 198.667272][T22078] Alternate GPT is invalid, using primary GPT. [ 198.673555][T22078] loop9: p1 p2 p3 [ 198.711927][T22087] loop9: detected capacity change from 0 to 512 [ 198.744520][T22087] ext4 filesystem being mounted at /1013/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 198.820794][T22104] loop9: detected capacity change from 0 to 512 [ 198.831521][T22106] bridge_slave_0: left allmulticast mode [ 198.837242][T22106] bridge_slave_0: left promiscuous mode [ 198.842887][T22106] bridge0: port 1(bridge_slave_0) entered disabled state [ 198.852848][T22106] bridge_slave_1: left allmulticast mode [ 198.858647][T22106] bridge_slave_1: left promiscuous mode [ 198.864506][T22106] bridge0: port 2(bridge_slave_1) entered disabled state [ 198.870779][T16962] hid-generic 0000:3000000:0000.0004: unknown main item tag 0x4 [ 198.875600][T22104] ext4 filesystem being mounted at /1015/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 198.879213][T16962] hid-generic 0000:3000000:0000.0004: unknown main item tag 0x2 [ 198.898155][T16962] hid-generic 0000:3000000:0000.0004: unknown main item tag 0x3 [ 198.906168][T16962] hid-generic 0000:3000000:0000.0004: hidraw0: HID v0.00 Device [sy] on syz0 [ 198.917783][T22106] bond0: (slave bond_slave_0): Releasing backup interface [ 198.925209][T22104] EXT4-fs (loop9): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 198.937701][T22106] bond_slave_0: left promiscuous mode [ 198.945289][T22104] EXT4-fs (loop9): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 198.963021][T22106] bond0: (slave bond_slave_1): Releasing backup interface [ 198.974088][T22106] bond_slave_1: left promiscuous mode [ 198.980499][T22106] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 198.994549][T22106] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 199.002466][T22113] netlink: 16402 bytes leftover after parsing attributes in process `syz.6.7470'. [ 199.012291][T22108] netlink: 16402 bytes leftover after parsing attributes in process `syz.6.7470'. [ 199.039557][T22125] loop3: detected capacity change from 0 to 512 [ 199.068435][T22125] ext4 filesystem being mounted at /212/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 199.119337][T22141] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7482'. [ 199.162130][T22143] syzkaller1: entered promiscuous mode [ 199.167637][T22143] syzkaller1: entered allmulticast mode [ 199.177809][ T1030] IPVS: starting estimator thread 0... [ 199.292017][T22156] IPVS: using max 2736 ests per chain, 136800 per kthread [ 199.338021][T22180] ebtables: ebtables: counters copy to user failed while replacing table [ 199.348501][T22188] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 199.475102][T22214] geneve2: entered promiscuous mode [ 199.480532][T22214] geneve2: entered allmulticast mode [ 199.521220][T22225] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7522'. [ 199.530264][T22225] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7522'. [ 199.530788][T22229] xt_HMARK: spi-set and port-set can't be combined [ 199.575552][T22233] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7526'. [ 199.659057][T22255] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7534'. [ 199.668146][T22255] netlink: 'syz.4.7534': attribute type 7 has an invalid length. [ 199.676606][T22255] netlink: 'syz.4.7534': attribute type 8 has an invalid length. [ 199.684390][T22255] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7534'. [ 199.724835][T22255] gretap0: entered promiscuous mode [ 199.732885][T22255] batadv_slave_1: entered promiscuous mode [ 199.733273][T22262] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 199.756467][T22255] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 199.760809][T22262] vhci_hcd: invalid port number 10 [ 199.769288][T22262] vhci_hcd: USB_PORT_FEAT_U1/2_TIMEOUT req not supported for USB 2.0 roothub [ 199.769760][T22255] Cannot create hsr debugfs directory [ 200.081715][T15924] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 200.092652][T15924] CPU: 1 UID: 0 PID: 15924 Comm: syz-executor Not tainted 6.13.0-rc1-syzkaller-00036-g5076001689e4 #0 [ 200.103588][T15924] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 200.113637][T15924] Call Trace: [ 200.117015][T15924] [ 200.119937][T15924] dump_stack_lvl+0xf2/0x150 [ 200.124539][T15924] dump_stack+0x15/0x1a [ 200.128695][T15924] dump_header+0x83/0x2d0 [ 200.133080][T15924] oom_kill_process+0x341/0x4c0 [ 200.138096][T15924] out_of_memory+0x9af/0xbe0 [ 200.142783][T15924] ? css_next_descendant_pre+0x11c/0x140 [ 200.148416][T15924] mem_cgroup_out_of_memory+0x13e/0x190 [ 200.154048][T15924] try_charge_memcg+0x508/0x7f0 [ 200.158945][T15924] charge_memcg+0x50/0xc0 [ 200.163318][T15924] mem_cgroup_swapin_charge_folio+0xd0/0x150 [ 200.169347][T15924] __read_swap_cache_async+0x236/0x480 [ 200.174803][T15924] swap_cluster_readahead+0x279/0x3f0 [ 200.180198][T15924] swapin_readahead+0xe4/0x6f0 [ 200.185064][T15924] ? next_uptodate_folio+0x812/0x890 [ 200.190459][T15924] ? swap_cache_get_folio+0x77/0x210 [ 200.195741][T15924] do_swap_page+0x31b/0x2550 [ 200.200322][T15924] ? __rcu_read_lock+0x36/0x50 [ 200.205084][T15924] ? __pfx_default_wake_function+0x10/0x10 [ 200.210981][T15924] handle_mm_fault+0x8e4/0x2ac0 [ 200.215919][T15924] exc_page_fault+0x3b9/0x650 [ 200.220598][T15924] asm_exc_page_fault+0x26/0x30 [ 200.225540][T15924] RIP: 0033:0x7f67c9ea4ec7 [ 200.229944][T15924] Code: d7 82 de 1b 43 48 f7 a4 24 88 00 00 00 48 8b 05 df 08 e2 00 48 69 8c 24 80 00 00 00 e8 03 00 00 48 c1 ea 12 48 01 ca 8b 48 08 <39> 4c 24 18 48 89 d0 4c 0f 45 ea 4c 29 f0 48 3b 05 c4 07 e2 00 73 [ 200.249615][T15924] RSP: 002b:00007ffe5db5dcd0 EFLAGS: 00010202 [ 200.255800][T15924] RAX: 0000001b2ef20000 RBX: 0000000000000447 RCX: 0000000000000004 [ 200.263794][T15924] RDX: 00000000000325d0 RSI: 00007ffe5db5dd50 RDI: 0000000000000001 [ 200.271758][T15924] RBP: 00007ffe5db5dcfc R08: 00000000112bdd6b R09: 7fffffffffffffff [ 200.279729][T15924] R10: 00007f67ca16a038 R11: 0000000000000010 R12: 0000000000000032 [ 200.287694][T15924] R13: 0000000000032488 R14: 0000000000032428 R15: 00007ffe5db5dd50 [ 200.295663][T15924] [ 200.298768][T15924] memory: usage 280160kB, limit 307200kB, failcnt 260 [ 200.306040][T15924] memory+swap: usage 276008kB, limit 9007199254740988kB, failcnt 0 [ 200.314028][T15924] kmem: usage 256612kB, limit 9007199254740988kB, failcnt 0 [ 200.321305][T15924] Memory cgroup stats for /syz2: [ 200.391378][T15924] cache 0 [ 200.399287][T15924] rss 8192 [ 200.402378][T15924] shmem 0 [ 200.405309][T15924] mapped_file 0 [ 200.408848][T15924] dirty 0 [ 200.411782][T15924] writeback 0 [ 200.415063][T15924] workingset_refault_anon 9 [ 200.419653][T15924] workingset_refault_file 14 [ 200.424349][T15924] swap 544768 [ 200.427736][T15924] swapcached 20480 [ 200.431454][T15924] pgpgin 79026 [ 200.434827][T15924] pgpgout 79021 [ 200.438414][T15924] pgfault 94944 [ 200.441918][T15924] pgmajfault 7 [ 200.445280][T15924] inactive_anon 0 [ 200.449008][T15924] active_anon 20480 [ 200.452810][T15924] inactive_file 0 [ 200.456506][T15924] active_file 0 [ 200.459952][T15924] unevictable 0 [ 200.463437][T15924] hierarchical_memory_limit 314572800 [ 200.468887][T15924] hierarchical_memsw_limit 9223372036854771712 [ 200.475060][T15924] total_cache 0 [ 200.478594][T15924] total_rss 8192 [ 200.482135][T15924] total_shmem 0 [ 200.485632][T15924] total_mapped_file 0 [ 200.489606][T15924] total_dirty 0 [ 200.493057][T15924] total_writeback 0 [ 200.496897][T15924] total_workingset_refault_anon 9 [ 200.501910][T15924] total_workingset_refault_file 14 [ 200.507047][T15924] total_swap 544768 [ 200.510851][T15924] total_swapcached 20480 [ 200.515401][T15924] total_pgpgin 79026 [ 200.519368][T15924] total_pgpgout 79021 [ 200.523463][T15924] total_pgfault 94944 [ 200.527446][T15924] total_pgmajfault 7 [ 200.531338][T15924] total_inactive_anon 0 [ 200.535562][T15924] total_active_anon 20480 [ 200.539881][T15924] total_inactive_file 0 [ 200.544085][T15924] total_active_file 0 [ 200.548062][T15924] total_unevictable 0 [ 200.552062][T15924] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.7530,pid=22240,uid=0 [ 200.561425][ T29] kauditd_printk_skb: 259 callbacks suppressed [ 200.561439][ T29] audit: type=1400 audit(2000000084.193:7075): avc: denied { create } for pid=22300 comm="syz.3.7566" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 200.566803][T15924] Memory cgroup out of memory: Killed process 22240 (syz.2.7530) total-vm:93148kB, anon-rss:616kB, file-rss:22176kB, shmem-rss:0kB, UID:0 pgtables:120kB oom_score_adj:1000 [ 200.649601][ T29] audit: type=1400 audit(2000000084.319:7076): avc: denied { ioctl } for pid=22305 comm="syz.2.7558" path="socket:[62395]" dev="sockfs" ino=62395 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 200.675036][T22309] xt_hashlimit: max too large, truncated to 1048576 [ 200.681712][ T29] audit: type=1400 audit(2000000084.319:7077): avc: denied { read } for pid=22305 comm="syz.2.7558" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 200.731466][ T29] audit: type=1326 audit(2000000084.393:7078): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22319 comm="syz.6.7564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83a003ff19 code=0x7ffc0000 [ 200.757171][ T29] audit: type=1326 audit(2000000084.393:7079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22319 comm="syz.6.7564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83a003ff19 code=0x7ffc0000 [ 200.780710][ T29] audit: type=1326 audit(2000000084.393:7080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22319 comm="syz.6.7564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=459 compat=0 ip=0x7f83a003ff19 code=0x7ffc0000 [ 200.804258][ T29] audit: type=1326 audit(2000000084.393:7081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22319 comm="syz.6.7564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83a003ff19 code=0x7ffc0000 [ 200.814437][T22327] sit0 speed is unknown, defaulting to 1000 [ 200.827887][ T29] audit: type=1326 audit(2000000084.393:7082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22319 comm="syz.6.7564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83a003ff19 code=0x7ffc0000 [ 200.888281][T22327] lo speed is unknown, defaulting to 1000 [ 200.901695][ T29] audit: type=1326 audit(2000000084.571:7083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22331 comm="syz.9.7571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1a7bfff19 code=0x7ffc0000 [ 200.926797][ T29] audit: type=1326 audit(2000000084.571:7084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22331 comm="syz.9.7571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1a7bfff19 code=0x7ffc0000 [ 200.996179][T22340] bpf_get_probe_write_proto: 26 callbacks suppressed [ 200.996204][T22340] syz.9.7574[22340] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 201.008562][T22340] syz.9.7574[22340] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 201.024285][T22340] syz.9.7574[22340] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 201.072677][T22349] sit0 speed is unknown, defaulting to 1000 [ 201.082287][T22353] syz.6.7580[22353] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 201.090159][T22353] syz.6.7580[22353] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 201.101996][T22353] syz.6.7580[22353] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 201.127374][T22355] loop9: detected capacity change from 0 to 164 [ 201.155195][T22355] rock: corrupted directory entry. extent=41, offset=65536, size=8 [ 201.169415][T22349] lo speed is unknown, defaulting to 1000 [ 201.293215][T22381] loop9: detected capacity change from 0 to 256 [ 201.520019][T22425] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 201.984904][T22503] loop3: detected capacity change from 0 to 1024 [ 201.994704][T22506] netlink: 133492 bytes leftover after parsing attributes in process `syz.4.7642'. [ 202.033066][T22511] loop9: detected capacity change from 0 to 2048 [ 202.085236][T22511] loop9: p1 < > p4 [ 202.089452][T22511] loop9: p4 size 8388608 extends beyond EOD, truncated [ 202.345977][T22530] syz.9.7655[22530] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 202.346049][T22530] syz.9.7655[22530] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 202.358092][T22530] syz.9.7655[22530] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 202.398136][T22530] ebtables: ebtables: counters copy to user failed while replacing table [ 202.447257][T22545] loop6: detected capacity change from 0 to 512 [ 202.453815][T22545] EXT4-fs: Ignoring removed i_version option [ 202.460513][T22545] EXT4-fs: Ignoring removed mblk_io_submit option [ 202.468386][T22545] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 202.478548][T22545] EXT4-fs (loop6): can't mount with journal_checksum, fs mounted w/o journal [ 202.603589][T22573] x_tables: duplicate underflow at hook 2 [ 202.655873][T22585] vhci_hcd: invalid port number 0 [ 202.665763][T22586] netlink: 16402 bytes leftover after parsing attributes in process `syz.9.7673'. [ 202.677155][T22575] netlink: 16402 bytes leftover after parsing attributes in process `syz.9.7673'. [ 202.787482][T22610] xt_hashlimit: max too large, truncated to 1048576 [ 202.836513][T22616] netlink: 28 bytes leftover after parsing attributes in process `syz.9.7693'. [ 202.845511][T22616] netlink: 28 bytes leftover after parsing attributes in process `syz.9.7693'. [ 202.910926][T22629] netlink: 108 bytes leftover after parsing attributes in process `syz.4.7700'. [ 202.920335][T22629] netlink: 108 bytes leftover after parsing attributes in process `syz.4.7700'. [ 202.930091][T22629] netlink: 84 bytes leftover after parsing attributes in process `syz.4.7700'. [ 202.939868][T22634] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.7698'. [ 202.951352][T22625] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.7698'. [ 203.114673][T22655] loop2: detected capacity change from 0 to 764 [ 203.122104][T22655] Symlink component flag not implemented [ 203.127865][T22655] Symlink component flag not implemented (129) [ 203.134754][T22655] rock: directory entry would overflow storage [ 203.140921][T22655] rock: sig=0x4f50, size=4, remaining=3 [ 203.147156][T22655] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 203.164818][T22659] random: crng reseeded on system resumption [ 203.179724][T22661] 9pnet: Could not find request transport: 0xffffffffffffffff [ 203.204752][T22664] syz.2.7717[22664] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 203.237162][ T3394] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.299502][ T3394] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.376757][T22670] sit0 speed is unknown, defaulting to 1000 [ 203.401677][ T3394] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.416842][T22670] lo speed is unknown, defaulting to 1000 [ 203.441892][ T3394] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.521623][ T3394] bridge_slave_1: left allmulticast mode [ 203.527361][ T3394] bridge_slave_1: left promiscuous mode [ 203.533036][ T3394] bridge0: port 2(bridge_slave_1) entered disabled state [ 203.540739][ T3394] bridge_slave_0: left allmulticast mode [ 203.546492][ T3394] bridge_slave_0: left promiscuous mode [ 203.552179][ T3394] bridge0: port 1(bridge_slave_0) entered disabled state [ 203.589615][ T3394] gretap0 (unregistering): left promiscuous mode [ 203.658703][ T3394] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 203.668345][ T3394] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 203.677860][ T3394] bond0 (unregistering): Released all slaves [ 203.685975][T22670] chnl_net:caif_netlink_parms(): no params data found [ 203.700629][T22707] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.7734'. [ 203.815525][ T3394] batadv_slave_1: left promiscuous mode [ 203.835479][ T3394] hsr_slave_0: left promiscuous mode [ 203.843004][ T3394] hsr_slave_1: left promiscuous mode [ 203.852936][ T3394] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 203.860394][ T3394] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 203.873775][ T3394] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 203.882227][ T3394] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 203.892178][ T3394] veth1_macvtap: left promiscuous mode [ 203.897860][ T3394] veth0_macvtap: left promiscuous mode [ 203.903399][ T3394] veth1_vlan: left promiscuous mode [ 203.909349][ T3394] veth0_vlan: left promiscuous mode [ 203.984129][ T3394] team0 (unregistering): Port device team_slave_1 removed [ 203.996921][ T3394] team0 (unregistering): Port device team_slave_0 removed [ 204.062740][T22670] bridge0: port 1(bridge_slave_0) entered blocking state [ 204.069856][T22670] bridge0: port 1(bridge_slave_0) entered disabled state [ 204.077673][T22670] bridge_slave_0: entered allmulticast mode [ 204.085532][T22753] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 204.085577][T22670] bridge_slave_0: entered promiscuous mode [ 204.109283][T22753] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 204.117994][T22670] bridge0: port 2(bridge_slave_1) entered blocking state [ 204.125166][T22670] bridge0: port 2(bridge_slave_1) entered disabled state [ 204.132336][T22670] bridge_slave_1: entered allmulticast mode [ 204.139454][T22670] bridge_slave_1: entered promiscuous mode [ 204.160480][T22670] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 204.170891][T22670] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 204.190193][T22670] team0: Port device team_slave_0 added [ 204.196503][T22670] team0: Port device team_slave_1 added [ 204.210080][T22670] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 204.217102][T22670] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 204.243513][T22670] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 204.254735][T22670] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 204.261700][T22670] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 204.287933][T22670] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 204.311195][T22670] hsr_slave_0: entered promiscuous mode [ 204.317653][T22670] hsr_slave_1: entered promiscuous mode [ 204.323521][T22670] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 204.331162][T22670] Cannot create hsr debugfs directory [ 204.465318][ T3394] IPVS: stop unused estimator thread 0... [ 204.594208][T22670] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 204.602551][T22670] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 204.611653][T22670] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 204.620253][T22670] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 204.632670][T22670] bridge0: port 2(bridge_slave_1) entered blocking state [ 204.639753][T22670] bridge0: port 2(bridge_slave_1) entered forwarding state [ 204.647002][T22670] bridge0: port 1(bridge_slave_0) entered blocking state [ 204.654026][T22670] bridge0: port 1(bridge_slave_0) entered forwarding state [ 204.680402][T22670] 8021q: adding VLAN 0 to HW filter on device bond0 [ 204.690644][ T40] bridge0: port 1(bridge_slave_0) entered disabled state [ 204.699296][ T40] bridge0: port 2(bridge_slave_1) entered disabled state [ 204.711419][T22670] 8021q: adding VLAN 0 to HW filter on device team0 [ 204.720558][ T40] bridge0: port 1(bridge_slave_0) entered blocking state [ 204.727686][ T40] bridge0: port 1(bridge_slave_0) entered forwarding state [ 204.738714][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 204.745792][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 204.800839][T22670] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 204.857235][T22670] veth0_vlan: entered promiscuous mode [ 204.864729][T22670] veth1_vlan: entered promiscuous mode [ 204.879437][T22670] veth0_macvtap: entered promiscuous mode [ 204.886928][T22670] veth1_macvtap: entered promiscuous mode [ 204.896142][T22670] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 204.907301][T22670] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 204.917946][T22670] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 204.928146][T22670] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 204.939119][T22670] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 204.949659][T22670] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 204.958640][T22670] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.967532][T22670] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.976250][T22670] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.984947][T22670] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.107399][T22796] loop6: detected capacity change from 0 to 1024 [ 205.118374][T22796] EXT4-fs: Ignoring removed nomblk_io_submit option [ 205.125035][T22796] EXT4-fs: Ignoring removed mblk_io_submit option [ 205.136332][T22799] sch_tbf: peakrate 8 is lower than or equals to rate 12 ! [ 205.144362][T22796] EXT4-fs (loop6): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 205.195948][T22809] loop2: detected capacity change from 0 to 2048 [ 205.202628][T22806] SELinux: security_context_str_to_sid (u) failed with errno=-22 [ 205.261258][T22809] loop2: p1 p2 p3 < > p4 < p5 p6 > [ 205.266547][T22809] loop2: partition table partially beyond EOD, truncated [ 205.273789][T22809] loop2: p1 size 33024 extends beyond EOD, truncated [ 205.290433][T22809] loop2: p2 start 16908804 is beyond EOD, truncated [ 205.297719][T22809] loop2: p3 start 4284289 is beyond EOD, truncated [ 205.306762][T22809] loop2: p5 size 33024 extends beyond EOD, truncated [ 205.314540][T22809] loop2: p6 start 16908804 is beyond EOD, truncated [ 205.317446][T22824] loop3: detected capacity change from 0 to 512 [ 205.348661][T22824] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 205.367892][T22824] EXT4-fs (loop3): 1 truncate cleaned up [ 205.377901][T22827] ebtables: ebtables: counters copy to user failed while replacing table [ 205.393355][T22834] netlink: 'syz.2.7784': attribute type 10 has an invalid length. [ 205.409915][T22834] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 205.450627][T22840] loop9: detected capacity change from 0 to 128 [ 205.474476][ T29] kauditd_printk_skb: 182 callbacks suppressed [ 205.474490][ T29] audit: type=1400 audit(2000000089.379:7267): avc: denied { ioctl } for pid=22837 comm="syz.0.7785" path="socket:[64978]" dev="sockfs" ino=64978 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 205.511236][T22840] FAT-fs (loop9): error, invalid access to FAT (entry 0x00000100) [ 205.519098][T22840] FAT-fs (loop9): Filesystem has been set read-only [ 205.526475][T22840] FAT-fs (loop9): error, invalid FAT chain (i_pos 548, last_block 8) [ 205.534990][T22840] FAT-fs (loop9): error, corrupted file size (i_pos 548, 522) [ 205.606604][ T29] audit: type=1400 audit(2000000089.516:7268): avc: denied { read write } for pid=22854 comm="syz.3.7793" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 205.652957][ T29] audit: type=1400 audit(2000000089.547:7269): avc: denied { open } for pid=22854 comm="syz.3.7793" path="/dev/ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 205.677106][ T29] audit: type=1400 audit(2000000089.547:7270): avc: denied { ioctl } for pid=22854 comm="syz.3.7793" path="/dev/ppp" dev="devtmpfs" ino=140 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 205.703189][ T29] audit: type=1326 audit(2000000089.579:7271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22862 comm="syz.0.7797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9dfe49ff19 code=0x7ffc0000 [ 205.727412][ T29] audit: type=1326 audit(2000000089.579:7272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22862 comm="syz.0.7797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9dfe49ff19 code=0x7ffc0000 [ 205.747461][T22864] ebtables: ebtables: counters copy to user failed while replacing table [ 205.750870][ T29] audit: type=1326 audit(2000000089.589:7273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22862 comm="syz.0.7797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9dfe49ff19 code=0x7ffc0000 [ 205.783382][ T29] audit: type=1326 audit(2000000089.589:7274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22862 comm="syz.0.7797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9dfe49ff19 code=0x7ffc0000 [ 205.806922][ T29] audit: type=1326 audit(2000000089.589:7275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22862 comm="syz.0.7797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9dfe49ff19 code=0x7ffc0000 [ 205.830782][ T29] audit: type=1326 audit(2000000089.589:7276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22862 comm="syz.0.7797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9dfe49ff19 code=0x7ffc0000 [ 205.980832][T22890] loop0: detected capacity change from 0 to 2048 [ 206.006373][T22900] loop9: detected capacity change from 0 to 512 [ 206.012967][T22900] EXT4-fs: dax option not supported [ 206.038102][T22890] Alternate GPT is invalid, using primary GPT. [ 206.044449][T22890] loop0: p1 p2 p3 [ 206.093032][T22914] loop3: detected capacity change from 0 to 256 [ 206.129531][T22922] bridge0: entered allmulticast mode [ 206.138120][T22922] pim6reg: entered allmulticast mode [ 206.201456][T22928] ebtables: ebtables: counters copy to user failed while replacing table [ 206.299916][T22951] sit0 speed is unknown, defaulting to 1000 [ 206.370863][T22951] lo speed is unknown, defaulting to 1000 [ 206.791061][T23002] loop2: detected capacity change from 0 to 512 [ 206.804377][T23002] EXT4-fs: Ignoring removed nomblk_io_submit option [ 206.814388][T23002] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 206.822333][T23002] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=1842c01c, mo2=0002] [ 206.831148][T23002] EXT4-fs (loop2): couldn't mount RDWR because of unsupported optional features (80) [ 206.840653][T23002] EXT4-fs (loop2): Skipping orphan cleanup due to unknown ROCOMPAT features [ 206.852169][T23002] EXT4-fs (loop2): couldn't mount RDWR because of unsupported optional features (80) [ 206.866597][T15331] IPVS: starting estimator thread 0... [ 206.952557][T23009] IPVS: using max 2688 ests per chain, 134400 per kthread [ 207.091442][T23027] loop0: detected capacity change from 0 to 32768 [ 207.124409][T23027] loop0: p1 p3 < p5 p6 p7 > p4 [ 207.199266][T23050] SELinux: security_context_str_to_sid (u) failed with errno=-22 [ 207.329558][T23072] bpf_get_probe_write_proto: 17 callbacks suppressed [ 207.329573][T23072] syz.3.7891[23072] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 207.343855][T23072] syz.3.7891[23072] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 207.356519][T23072] syz.3.7891[23072] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 207.368583][T23077] syz.9.7894[23077] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 207.381289][T23077] syz.9.7894[23077] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 207.393850][T23077] syz.9.7894[23077] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 207.691916][T23107] usb usb7: usbfs: process 23107 (syz.3.7917) did not claim interface 0 before use [ 207.743341][T23113] sch_tbf: peakrate 8 is lower than or equals to rate 12 ! [ 207.769743][T23119] syz.3.7914[23119] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 207.769781][T23119] syz.3.7914[23119] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 207.782746][T23119] syz.3.7914[23119] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 207.861392][T23126] __nla_validate_parse: 11 callbacks suppressed [ 207.861460][T23126] netlink: 16402 bytes leftover after parsing attributes in process `syz.9.7918'. [ 207.890106][T23125] netlink: 16402 bytes leftover after parsing attributes in process `syz.9.7918'. [ 207.921862][T23134] loop3: detected capacity change from 0 to 512 [ 207.929841][T23134] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 207.952101][T23134] EXT4-fs (loop3): 1 truncate cleaned up [ 208.260792][T23163] loop0: detected capacity change from 0 to 128 [ 208.297466][T23163] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x61ff7272 (sector = 1) [ 208.309436][T23168] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 208.395734][T23186] loop9: detected capacity change from 0 to 1024 [ 208.404017][T23186] EXT4-fs: Ignoring removed nobh option [ 208.409690][T23186] EXT4-fs: Ignoring removed orlov option [ 208.499274][T23195] syz.0.7950[23195] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 208.586596][T23212] xt_hashlimit: max too large, truncated to 1048576 [ 208.951125][T23274] loop2: detected capacity change from 0 to 512 [ 208.957855][T23274] EXT4-fs: Ignoring removed mblk_io_submit option [ 209.016259][T23287] netlink: 128 bytes leftover after parsing attributes in process `syz.3.7986'. [ 209.025553][T23287] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7986'. [ 209.189714][T23297] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5408 sclass=netlink_route_socket pid=23297 comm=syz.2.7990 [ 209.228401][T23301] Process accounting resumed [ 209.367674][T23314] netlink: 128 bytes leftover after parsing attributes in process `syz.2.7998'. [ 209.377379][T23314] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7998'. [ 209.558921][T23344] netlink: 128 bytes leftover after parsing attributes in process `syz.6.8011'. [ 209.568415][T23344] netlink: 16 bytes leftover after parsing attributes in process `syz.6.8011'. [ 209.631793][T23354] loop6: detected capacity change from 0 to 2048 [ 209.660731][T23354] EXT4-fs error (device loop6): ext4_ext_precache:631: inode #2: comm syz.6.8016: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 5(5) [ 209.679398][T23354] EXT4-fs (loop6): Remounting filesystem read-only [ 209.783159][T23376] netlink: 133492 bytes leftover after parsing attributes in process `syz.0.8027'. [ 209.847574][T23380] netlink: 128 bytes leftover after parsing attributes in process `syz.9.8028'. [ 209.873642][T23385] loop0: detected capacity change from 0 to 1024 [ 209.889271][T23385] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 209.908446][T23385] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 209.926375][T23385] EXT4-fs (loop0): orphan cleanup on readonly fs [ 209.933115][T23385] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5837: Corrupt filesystem [ 209.948415][T23385] EXT4-fs (loop0): Remounting filesystem read-only [ 209.959056][T23385] EXT4-fs (loop0): 1 orphan inode deleted [ 209.969555][T23385] SELinux: (dev loop0, type ext4) getxattr errno 5 [ 210.088142][T23420] loop0: detected capacity change from 0 to 2048 [ 210.116076][T23420] loop0: p1 < > p4 [ 210.122766][T23420] loop0: p4 size 8388608 extends beyond EOD, truncated [ 210.148459][T23428] x_tables: ip6_tables: socket match: used from hooks OUTPUT, but only valid from PREROUTING/INPUT [ 210.153512][T23425] loop3: detected capacity change from 0 to 1024 [ 210.170937][T23425] EXT4-fs: Ignoring removed nomblk_io_submit option [ 210.179803][T23425] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 210.192655][T23425] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e854e01c, mo2=0003] [ 210.194612][T23432] loop0: detected capacity change from 0 to 512 [ 210.201606][T23425] System zones: 0-1, 3-36 [ 210.214284][T23432] EXT4-fs: Ignoring removed mblk_io_submit option [ 210.244703][T23432] journal_path: Lookup failure for './file0' [ 210.250842][T23432] EXT4-fs: error: could not find journal device path [ 210.328523][T23443] netlink: 'syz.0.8056': attribute type 12 has an invalid length. [ 210.353461][ T29] kauditd_printk_skb: 349 callbacks suppressed [ 210.353475][ T29] audit: type=1400 audit(2000000094.492:7622): avc: denied { read } for pid=23444 comm="syz.9.8059" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 210.382877][ T29] audit: type=1400 audit(2000000094.492:7623): avc: denied { open } for pid=23444 comm="syz.9.8059" path="/dev/autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 210.406569][ T29] audit: type=1400 audit(2000000094.492:7624): avc: denied { ioctl } for pid=23444 comm="syz.9.8059" path="/dev/autofs" dev="devtmpfs" ino=91 ioctlcmd=0x9374 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 210.495862][ T29] audit: type=1400 audit(2000000094.649:7625): avc: denied { watch } for pid=23455 comm="syz.3.8065" path="/320" dev="tmpfs" ino=1653 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 210.545442][ T29] audit: type=1400 audit(2000000094.702:7626): avc: denied { create } for pid=23463 comm="syz.0.8067" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 210.576750][ T29] audit: type=1400 audit(2000000094.702:7627): avc: denied { setopt } for pid=23463 comm="syz.0.8067" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 210.615759][ T29] audit: type=1400 audit(2000000094.754:7628): avc: denied { connect } for pid=23463 comm="syz.0.8067" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 210.636047][ T29] audit: type=1326 audit(2000000094.775:7629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23461 comm="syz.2.8068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67c9fcff19 code=0x7ffc0000 [ 210.659990][ T29] audit: type=1326 audit(2000000094.775:7630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23461 comm="syz.2.8068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67c9fcff19 code=0x7ffc0000 [ 210.683492][ T29] audit: type=1326 audit(2000000094.775:7631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23461 comm="syz.2.8068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=105 compat=0 ip=0x7f67c9fcff19 code=0x7ffc0000 [ 210.757337][T23484] loop6: detected capacity change from 0 to 1024 [ 210.793964][T23484] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=804ec119, mo2=0002] [ 210.804433][T23484] EXT4-fs mount: 48 callbacks suppressed [ 210.804446][T23484] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 210.825102][T23484] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 210.864649][T23484] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=804ec119, mo2=0002] [ 210.888018][T23484] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 210.928014][T23505] loop9: detected capacity change from 0 to 128 [ 210.935958][ T4522] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 210.945614][T23505] FAT-fs (loop9): Invalid FSINFO signature: 0x41615252, 0x61ff7272 (sector = 1) [ 211.000514][T23513] netlink: 'syz.9.8089': attribute type 10 has an invalid length. [ 211.009749][T23513] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 211.018996][T23513] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 211.098066][T23528] can0: slcan on ttyS3. [ 211.134265][T23528] can0 (unregistered): slcan off ttyS3. [ 211.434325][T23568] loop3: detected capacity change from 0 to 512 [ 211.454647][T23568] EXT4-fs: Ignoring removed i_version option [ 211.460713][T23568] EXT4-fs: Ignoring removed mblk_io_submit option [ 211.473931][T23568] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 211.491400][T23568] EXT4-fs (loop3): can't mount with journal_checksum, fs mounted w/o journal [ 211.686540][T23586] random: crng reseeded on system resumption [ 211.799947][T23594] sit0 speed is unknown, defaulting to 1000 [ 211.854387][T23611] loop9: detected capacity change from 0 to 512 [ 211.879779][T23611] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 211.897704][T23594] lo speed is unknown, defaulting to 1000 [ 211.939707][T23624] syzkaller1: entered promiscuous mode [ 211.945281][T23624] syzkaller1: entered allmulticast mode [ 211.960128][T23611] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 211.972774][T23611] ext4 filesystem being mounted at /1159/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 212.004185][T10746] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 212.091869][T23645] netlink: 'syz.0.8148': attribute type 1 has an invalid length. [ 212.313392][T23670] ip6t_srh: unknown srh invflags 7D00 [ 212.463189][T23689] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 212.479483][T23651] loop3: detected capacity change from 0 to 32768 [ 212.512778][T23693] loop0: detected capacity change from 0 to 512 [ 212.525410][T23651] loop3: p1 p3 < p5 p6 p7 > p4 [ 212.538163][T23693] EXT4-fs error (device loop0): ext4_orphan_get:1394: comm syz.0.8170: couldn't read orphan inode 26 (err -116) [ 212.583962][T23693] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 212.639493][T23693] ext4 filesystem being mounted at /84/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 212.730913][T22670] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 212.751208][T23671] syz.9.8161 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 212.762213][T23671] CPU: 1 UID: 0 PID: 23671 Comm: syz.9.8161 Not tainted 6.13.0-rc1-syzkaller-00036-g5076001689e4 #0 [ 212.773028][T23671] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 212.783086][T23671] Call Trace: [ 212.786448][T23671] [ 212.789401][T23671] dump_stack_lvl+0xf2/0x150 [ 212.794122][T23671] dump_stack+0x15/0x1a [ 212.798341][T23671] dump_header+0x83/0x2d0 [ 212.802671][T23671] oom_kill_process+0x341/0x4c0 [ 212.807510][T23671] out_of_memory+0x9af/0xbe0 [ 212.812104][T23671] ? css_next_descendant_pre+0x11c/0x140 [ 212.817743][T23671] mem_cgroup_out_of_memory+0x13e/0x190 [ 212.823293][T23671] try_charge_memcg+0x508/0x7f0 [ 212.828157][T23671] charge_memcg+0x50/0xc0 [ 212.832483][T23671] mem_cgroup_swapin_charge_folio+0xd0/0x150 [ 212.838456][T23671] __read_swap_cache_async+0x236/0x480 [ 212.843927][T23671] swap_cluster_readahead+0x279/0x3f0 [ 212.849296][T23671] swapin_readahead+0xe4/0x6f0 [ 212.854132][T23671] ? __lruvec_stat_mod_folio+0xdb/0x120 [ 212.859724][T23671] ? swap_cache_get_folio+0x77/0x210 [ 212.865124][T23671] do_swap_page+0x31b/0x2550 [ 212.869720][T23671] ? __rcu_read_lock+0x36/0x50 [ 212.874520][T23671] ? __pfx_default_wake_function+0x10/0x10 [ 212.880320][T23671] handle_mm_fault+0x8e4/0x2ac0 [ 212.885240][T23671] exc_page_fault+0x3b9/0x650 [ 212.889974][T23671] asm_exc_page_fault+0x26/0x30 [ 212.894826][T23671] RIP: 0033:0x7fa1a7ad28ac [ 212.899228][T23671] Code: 72 64 0f 1f 40 00 69 3d 06 2e e2 00 e8 03 00 00 48 8d 1d 07 37 2f 00 e8 d2 d5 12 00 eb 0c 48 81 c3 e0 00 00 00 48 39 eb 74 24 <80> 7b 20 00 74 ee 8b 43 0c 85 c0 74 e7 48 89 df 48 81 c3 e0 00 00 [ 212.918844][T23671] RSP: 002b:00007ffc65bcad30 EFLAGS: 00010206 [ 212.924928][T23671] RAX: 0000000000000000 RBX: 00007fa1a7dc5fa0 RCX: 0000000000000000 [ 212.932887][T23671] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000055556864a808 [ 212.940847][T23671] RBP: 00007fa1a7dc7ba0 R08: 0000000000000000 R09: 7fffffffffffffff [ 212.948811][T23671] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000035b88 [ 212.956882][T23671] R13: 00007ffc65bcae30 R14: 0000000000000032 R15: ffffffffffffffff [ 212.964871][T23671] [ 212.968065][T23671] memory: usage 307192kB, limit 307200kB, failcnt 348 [ 212.975030][T23671] memory+swap: usage 307580kB, limit 9007199254740988kB, failcnt 0 [ 212.983011][T23671] kmem: usage 307180kB, limit 9007199254740988kB, failcnt 0 [ 212.990322][T23671] Memory cgroup stats for /syz9: [ 212.991087][T23671] cache 0 [ 212.999099][T23671] rss 0 [ 213.001921][T23671] shmem 0 [ 213.004936][T23671] mapped_file 0 [ 213.008395][T23671] dirty 0 [ 213.011341][T23671] writeback 0 [ 213.014619][T23671] workingset_refault_anon 1591 [ 213.019473][T23671] workingset_refault_file 0 [ 213.024080][T23671] swap 389120 [ 213.027499][T23671] swapcached 16384 [ 213.031329][T23671] pgpgin 180980 [ 213.034788][T23671] pgpgout 180975 [ 213.038403][T23671] pgfault 200760 [ 213.041963][T23671] pgmajfault 223 [ 213.045501][T23671] inactive_anon 0 [ 213.049165][T23671] active_anon 16384 [ 213.052961][T23671] inactive_file 0 [ 213.056595][T23671] active_file 4096 [ 213.060339][T23671] unevictable 0 [ 213.063825][T23671] hierarchical_memory_limit 314572800 [ 213.069207][T23671] hierarchical_memsw_limit 9223372036854771712 [ 213.075356][T23671] total_cache 0 [ 213.078834][T23671] total_rss 0 [ 213.082107][T23671] total_shmem 0 [ 213.085630][T23671] total_mapped_file 0 [ 213.089642][T23671] total_dirty 0 [ 213.093105][T23671] total_writeback 0 [ 213.096948][T23671] total_workingset_refault_anon 1591 [ 213.102357][T23671] total_workingset_refault_file 0 [ 213.107421][T23671] total_swap 389120 [ 213.111217][T23671] total_swapcached 16384 [ 213.115453][T23671] total_pgpgin 180980 [ 213.119659][T23671] total_pgpgout 180975 [ 213.123737][T23671] total_pgfault 200760 [ 213.127944][T23671] total_pgmajfault 223 [ 213.132079][T23671] total_inactive_anon 0 [ 213.136307][T23671] total_active_anon 16384 [ 213.140628][T23671] total_inactive_file 0 [ 213.144828][T23671] total_active_file 4096 [ 213.149059][T23671] total_unevictable 0 [ 213.153037][T23671] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz9,task_memcg=/syz9,task=syz.9.8161,pid=23671,uid=0 [ 213.167917][T23671] Memory cgroup out of memory: Killed process 23671 (syz.9.8161) total-vm:95196kB, anon-rss:616kB, file-rss:22176kB, shmem-rss:0kB, UID:0 pgtables:116kB oom_score_adj:1000 [ 213.245707][T23727] loop3: detected capacity change from 0 to 2048 [ 213.290799][T23727] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 213.304133][T23739] __nla_validate_parse: 14 callbacks suppressed [ 213.304148][T23739] netlink: 14 bytes leftover after parsing attributes in process `syz.6.8187'. [ 213.347753][T23742] erspan0: Device is already in use. [ 213.353485][T19626] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 213.354058][T23745] bpf_get_probe_write_proto: 8 callbacks suppressed [ 213.354071][T23745] syz.0.8191[23745] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 213.369757][T23745] syz.0.8191[23745] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 213.381505][T23745] syz.0.8191[23745] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 213.423645][T23751] loop0: detected capacity change from 0 to 128 [ 213.453740][T23756] loop6: detected capacity change from 0 to 512 [ 213.454170][T23751] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 213.476294][T23758] vlan2: entered promiscuous mode [ 213.481850][T23751] ext4 filesystem being mounted at /90/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 213.494254][T23756] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 213.507672][T23756] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 213.520957][T22670] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 213.532575][T23756] ext4 filesystem being mounted at /1596/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 213.616413][ T4522] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 213.689817][T23785] loop6: detected capacity change from 0 to 512 [ 213.719345][T23785] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 213.777541][T23785] ext4 filesystem being mounted at /1597/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 213.838093][T23796] loop0: detected capacity change from 0 to 1024 [ 213.844963][ T4522] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 213.891602][T23796] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 213.931578][T23808] loop3: detected capacity change from 0 to 128 [ 213.956688][T23796] EXT4-fs error (device loop0): ext4_xattr_inode_iget:440: inode #11: comm syz.0.8213: missing EA_INODE flag [ 213.980386][T23808] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 214.001833][T23796] EXT4-fs (loop0): Remounting filesystem read-only [ 214.009530][T23808] ext4 filesystem being mounted at /342/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 214.033780][T23816] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=12 [ 214.042788][T23816] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=12 [ 214.052027][T23808] EXT4-fs (loop3): re-mounted 76b65be2-f6da-4727-8c75-0525a5b65a09 ro. Quota mode: none. [ 214.079195][T22670] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 214.099973][T19626] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 214.117661][T23819] loop6: detected capacity change from 0 to 256 [ 214.135604][T23819] FAT-fs (loop6): bogus number of FAT sectors [ 214.141688][T23819] FAT-fs (loop6): Can't find a valid FAT filesystem [ 214.302749][T23833] syzkaller1: entered promiscuous mode [ 214.308877][T23833] syzkaller1: entered allmulticast mode [ 214.326880][T23835] loop6: detected capacity change from 0 to 512 [ 214.343005][T23835] EXT4-fs: dax option not supported [ 214.407468][T23842] netlink: 87 bytes leftover after parsing attributes in process `syz.6.8231'. [ 214.522666][T23848] sit0 speed is unknown, defaulting to 1000 [ 214.558487][T23848] lo speed is unknown, defaulting to 1000 [ 214.815189][T23875] xt_CT: You must specify a L4 protocol and not use inversions on it [ 214.950901][T23902] loop2: detected capacity change from 0 to 2048 [ 214.962340][T23902] EXT4-fs: Ignoring removed mblk_io_submit option [ 214.993620][T23902] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 215.018365][T23918] syz.9.8265[23918] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 215.018412][T23918] syz.9.8265[23918] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 215.032814][T23918] syz.9.8265[23918] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 215.042536][T23913] wireguard0: entered promiscuous mode [ 215.051409][T23902] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.8259: bg 0: block 234: padding at end of block bitmap is not set [ 215.055628][T23913] wireguard0: entered allmulticast mode [ 215.066726][T23902] EXT4-fs (loop2): Remounting filesystem read-only [ 215.127479][T15924] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 215.163579][T23933] netlink: 133492 bytes leftover after parsing attributes in process `syz.2.8269'. [ 215.262759][ T29] kauditd_printk_skb: 220 callbacks suppressed [ 215.262774][ T29] audit: type=1400 audit(2000000355.650:7852): avc: denied { setopt } for pid=23928 comm="syz.9.8270" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 215.288591][ T29] audit: type=1400 audit(2000000355.650:7853): avc: denied { connect } for pid=23943 comm="syz.0.8275" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 215.325230][T23948] 9pnet: Could not find request transport: 0xffffffffffffffff [ 215.353248][T23951] loop6: detected capacity change from 0 to 2048 [ 215.359654][ T29] audit: type=1400 audit(2000000355.745:7854): avc: denied { read write } for pid=23952 comm="syz.0.8278" name="rdma_cm" dev="devtmpfs" ino=251 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 215.383013][ T29] audit: type=1400 audit(2000000355.745:7855): avc: denied { open } for pid=23952 comm="syz.0.8278" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=251 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 215.412943][T23951] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 215.429302][T23951] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 215.430374][ T29] audit: type=1400 audit(2000000355.829:7856): avc: denied { ioctl } for pid=23950 comm="syz.6.8277" path="/1617/file1/file1" dev="loop6" ino=15 ioctlcmd=0x5828 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 215.472098][ T4522] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 215.500014][T23959] loop6: detected capacity change from 0 to 2048 [ 215.508804][T23959] EXT4-fs: Ignoring removed mblk_io_submit option [ 215.526925][T23963] loop0: detected capacity change from 0 to 256 [ 215.538517][T23959] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 215.539264][T23963] FAT-fs (loop0): Directory bread(block 64) failed [ 215.554876][T23959] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.8280: bg 0: block 234: padding at end of block bitmap is not set [ 215.558207][T23963] FAT-fs (loop0): Directory bread(block 65) failed [ 215.573230][T23959] EXT4-fs (loop6): Remounting filesystem read-only [ 215.578279][T23963] FAT-fs (loop0): Directory bread(block 66) failed [ 215.591318][T23963] FAT-fs (loop0): Directory bread(block 67) failed [ 215.598532][T23963] FAT-fs (loop0): Directory bread(block 68) failed [ 215.605138][T23963] FAT-fs (loop0): Directory bread(block 69) failed [ 215.611709][T23963] FAT-fs (loop0): Directory bread(block 70) failed [ 215.612633][ T4522] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 215.618248][T23963] FAT-fs (loop0): Directory bread(block 71) failed [ 215.618273][T23963] FAT-fs (loop0): Directory bread(block 72) failed [ 215.618292][T23963] FAT-fs (loop0): Directory bread(block 73) failed [ 215.670834][T23963] syz.0.8282: attempt to access beyond end of device [ 215.670834][T23963] loop0: rw=0, sector=1768, nr_sectors = 4 limit=256 [ 215.685410][T23963] syz.0.8282: attempt to access beyond end of device [ 215.685410][T23963] loop0: rw=0, sector=1768, nr_sectors = 4 limit=256 [ 215.719934][ T29] audit: type=1326 audit(2000000356.133:7857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23971 comm="syz.0.8285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9dfe49ff19 code=0x7ffc0000 [ 215.743515][ T29] audit: type=1326 audit(2000000356.133:7858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23971 comm="syz.0.8285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9dfe49ff19 code=0x7ffc0000 [ 215.767721][ T29] audit: type=1326 audit(2000000356.133:7859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23971 comm="syz.0.8285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9dfe49ff19 code=0x7ffc0000 [ 215.791198][ T29] audit: type=1326 audit(2000000356.133:7860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23971 comm="syz.0.8285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9dfe49ff19 code=0x7ffc0000 [ 215.815295][ T29] audit: type=1326 audit(2000000356.133:7861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23971 comm="syz.0.8285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9dfe49ff19 code=0x7ffc0000 [ 215.911917][T23984] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8291'. [ 215.978409][T23991] loop3: detected capacity change from 0 to 164 [ 216.018799][T23991] rock: corrupted directory entry. extent=41, offset=65536, size=8 [ 216.092846][T24013] syz.9.8305[24013] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 216.092975][T24013] syz.9.8305[24013] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 216.107776][T24013] syz.9.8305[24013] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 216.161813][T24025] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.8309'. [ 216.193014][T24020] netlink: 268 bytes leftover after parsing attributes in process `syz.6.8308'. [ 216.243944][T24030] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 216.335245][T24043] xt_hashlimit: max too large, truncated to 1048576 [ 216.511721][T24071] syz.2.8332[24071] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 216.563570][T24078] loop2: detected capacity change from 0 to 512 [ 216.642436][T24078] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 216.655412][T24078] ext4 filesystem being mounted at /684/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 216.687628][T24090] loop6: detected capacity change from 0 to 512 [ 216.698354][T15924] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 216.734343][T24090] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 216.747802][T24090] ext4 filesystem being mounted at /1634/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 216.759567][T24090] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 216.995244][T24123] loop6: detected capacity change from 0 to 512 [ 217.040304][T24123] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 217.052997][T24123] ext4 filesystem being mounted at /1639/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 217.092025][ T4522] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 217.182527][T24156] loop6: detected capacity change from 0 to 2048 [ 217.221651][T24156] loop6: p1 < > p4 [ 217.226616][T24156] loop6: p4 size 8388608 extends beyond EOD, truncated [ 217.266954][T24164] xt_hashlimit: max too large, truncated to 1048576 [ 217.431447][T24191] 9pnet: Could not find request transport: 0xffffffffffffffff [ 217.562972][T24197] xt_hashlimit: max too large, truncated to 1048576 [ 217.610787][T24203] loop3: detected capacity change from 0 to 512 [ 217.617572][T24203] EXT4-fs: Ignoring removed mblk_io_submit option [ 217.625522][T24203] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 217.653210][T19626] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 217.674890][T24207] loop3: detected capacity change from 0 to 2048 [ 217.698665][T24207] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 217.713708][T24207] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 217.737696][T19626] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 217.921611][T24228] loop3: detected capacity change from 0 to 512 [ 217.938052][T24228] EXT4-fs error (device loop3): ext4_orphan_get:1394: comm syz.3.8399: couldn't read orphan inode 26 (err -116) [ 217.951403][T24228] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 217.965688][T24228] ext4 filesystem being mounted at /379/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 217.988726][T19626] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 218.092838][T24263] loop2: detected capacity change from 0 to 1024 [ 218.104156][T24263] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 218.114962][T24263] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 218.123112][T24263] EXT4-fs (loop2): orphan cleanup on readonly fs [ 218.129759][T24263] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5837: Corrupt filesystem [ 218.139612][T24263] EXT4-fs (loop2): Remounting filesystem read-only [ 218.146839][T24263] EXT4-fs (loop2): 1 orphan inode deleted [ 218.153014][T24263] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 218.166826][T24265] sit0 speed is unknown, defaulting to 1000 [ 218.174443][T24263] SELinux: (dev loop2, type ext4) getxattr errno 5 [ 218.181185][T24263] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 218.228192][T24265] lo speed is unknown, defaulting to 1000 [ 218.236202][T24270] netlink: 'syz.2.8410': attribute type 10 has an invalid length. [ 218.253968][T24270] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 218.270633][T24270] batadv0: entered promiscuous mode [ 218.282565][T24270] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 218.324711][T24279] loop6: detected capacity change from 0 to 512 [ 218.331842][T24279] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 218.341707][T24279] EXT4-fs (loop6): VFS: Can't find ext4 filesystem [ 218.380464][T24285] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(3) [ 218.386991][T24285] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 218.395224][T24285] vhci_hcd vhci_hcd.0: Device attached [ 218.424089][T24286] vhci_hcd: connection closed [ 218.424212][ T3394] vhci_hcd: stop threads [ 218.433306][ T3394] vhci_hcd: release socket [ 218.437742][ T3394] vhci_hcd: disconnect device [ 218.586127][T24265] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8409'. [ 218.698613][T24313] netlink: 'syz.9.8428': attribute type 12 has an invalid length. [ 218.706495][T24313] netlink: 14585 bytes leftover after parsing attributes in process `syz.9.8428'. [ 218.923993][T24344] loop2: detected capacity change from 0 to 1024 [ 218.953511][T24344] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=804ec119, mo2=0002] [ 218.963224][T24344] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 218.991758][T24344] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 219.004271][T24344] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=804ec119, mo2=0002] [ 219.023552][T24344] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 219.051287][T15924] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 219.069180][T24366] netlink: 268 bytes leftover after parsing attributes in process `syz.3.8454'. [ 219.124083][T24378] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 219.130312][T24382] can0: slcan on ttyS3. [ 219.130601][T24378] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 219.142788][T24378] vhci_hcd vhci_hcd.0: Device attached [ 219.149778][T24379] vhci_hcd: connection closed [ 219.149913][ T3394] vhci_hcd: stop threads [ 219.158854][ T3394] vhci_hcd: release socket [ 219.163245][ T3394] vhci_hcd: disconnect device [ 219.192889][T24382] can0 (unregistered): slcan off ttyS3. [ 219.605877][T24401] netlink: 268 bytes leftover after parsing attributes in process `syz.0.8467'. [ 219.641353][T24405] atomic_op ffff88810eed7d28 conn xmit_atomic 0000000000000000 [ 219.689338][T24413] netlink: 104 bytes leftover after parsing attributes in process `syz.2.8473'. [ 219.729416][T24419] netlink: 16 bytes leftover after parsing attributes in process `syz.9.8476'. [ 219.890038][T24430] loop6: detected capacity change from 0 to 512 [ 219.896829][T24430] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 219.908898][T24430] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 219.921629][T24430] ext4 filesystem being mounted at /1661/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 219.942985][ T4522] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 220.037551][T24447] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 220.049817][T24447] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 220.064614][T24447] xt_TCPMSS: Only works on TCP SYN packets [ 220.078833][ T29] kauditd_printk_skb: 308 callbacks suppressed [ 220.078846][ T29] audit: type=1400 audit(2000000360.700:8166): avc: denied { mounton } for pid=24450 comm="syz.9.8489" path="/syzcgroup/cpu/syz9/cgroup.procs" dev="cgroup" ino=739 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=file permissive=1 [ 220.113996][ T29] audit: type=1400 audit(2000000360.742:8167): avc: denied { execute } for pid=24456 comm="syz.3.8492" path="/399/cpu.stat" dev="tmpfs" ino=2070 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 220.130487][T24459] loop3: detected capacity change from 0 to 512 [ 220.147155][T24459] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 220.160263][T24459] ext4 filesystem being mounted at /400/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 220.187955][T24465] netlink: 6 bytes leftover after parsing attributes in process `syz.9.8495'. [ 220.197666][T19626] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 220.211454][ T29] audit: type=1326 audit(2000000360.847:8168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24466 comm="syz.9.8497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1a7bfff19 code=0x7ffc0000 [ 220.236280][ T29] audit: type=1326 audit(2000000360.847:8169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24468 comm="syz.3.8496" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f100005ff19 code=0x7ffc0000 [ 220.259886][ T29] audit: type=1326 audit(2000000360.847:8170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24468 comm="syz.3.8496" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f100005ff19 code=0x7ffc0000 [ 220.283612][ T29] audit: type=1326 audit(2000000360.847:8171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24468 comm="syz.3.8496" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f100005ff19 code=0x7ffc0000 [ 220.307167][ T29] audit: type=1326 audit(2000000360.847:8172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24468 comm="syz.3.8496" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f100005ff19 code=0x7ffc0000 [ 220.331010][ T29] audit: type=1326 audit(2000000360.847:8173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24468 comm="syz.3.8496" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f100005ff19 code=0x7ffc0000 [ 220.354593][ T29] audit: type=1326 audit(2000000360.847:8174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24468 comm="syz.3.8496" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f100005ff19 code=0x7ffc0000 [ 220.378068][ T29] audit: type=1326 audit(2000000360.878:8175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24466 comm="syz.9.8497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa1a7bfff19 code=0x7ffc0000 [ 220.419182][T24481] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 220.428056][T24481] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 220.448931][T24484] netlink: 36 bytes leftover after parsing attributes in process `syz.0.8512'. [ 220.632501][T24493] 9pnet_fd: Insufficient options for proto=fd [ 220.639676][T24495] netlink: 'syz.0.8507': attribute type 21 has an invalid length. [ 220.760920][T24517] netlink: 16 bytes leftover after parsing attributes in process `syz.6.8519'. [ 220.816960][T24527] netlink: 'syz.0.8523': attribute type 10 has an invalid length. [ 220.825359][T24527] netlink: 40 bytes leftover after parsing attributes in process `syz.0.8523'. [ 220.837990][T24527] team0: Port device geneve1 added [ 220.865453][T24534] No such timeout policy "syz0" [ 220.914363][T24540] can0: slcan on ttyS3. [ 220.956539][T24540] can0 (unregistered): slcan off ttyS3. [ 221.134057][T24568] loop9: detected capacity change from 0 to 128 [ 221.142189][T24568] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 221.154996][T24568] ext4 filesystem being mounted at /1233/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 221.181076][T10746] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 221.252003][T24589] netlink: 'syz.3.8551': attribute type 21 has an invalid length. [ 221.259932][T24589] netlink: 'syz.3.8551': attribute type 20 has an invalid length. [ 221.267856][T24589] IPv6: NLM_F_CREATE should be specified when creating new route [ 221.268068][T24591] loop0: detected capacity change from 0 to 1024 [ 221.318608][T24591] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=804ec119, mo2=0002] [ 221.327181][T24591] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 221.342817][T24591] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 221.354263][T24591] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=804ec119, mo2=0002] [ 221.364813][T24591] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 221.382960][T22670] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 221.482112][T24619] bpf_get_probe_write_proto: 5 callbacks suppressed [ 221.482128][T24619] syz.0.8574[24619] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 221.488864][T24619] syz.0.8574[24619] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 221.501374][T24619] syz.0.8574[24619] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 221.633167][T24644] loop2: detected capacity change from 0 to 512 [ 221.653133][T24644] EXT4-fs: dax option not supported [ 221.741247][T24661] SELinux: Context system_u:object_r:crypt_device_t:s0 is not valid (left unmapped). [ 221.962235][T24680] bond1: entered promiscuous mode [ 221.967414][T24680] bond1: entered allmulticast mode [ 221.979303][T24680] 8021q: adding VLAN 0 to HW filter on device bond1 [ 221.992404][T24680] bond1 (unregistering): Released all slaves [ 222.059777][T24699] SELinux: security_context_str_to_sid (u) failed with errno=-22 [ 222.067731][T24697] wireguard0: entered promiscuous mode [ 222.073319][T24697] wireguard0: entered allmulticast mode [ 222.281118][T24741] loop0: detected capacity change from 0 to 512 [ 222.283463][T24736] loop2: detected capacity change from 0 to 164 [ 222.287849][T24741] EXT4-fs: dax option not supported [ 222.300852][T24736] rock: corrupted directory entry. extent=41, offset=65536, size=8 [ 222.377216][T24758] syz.0.8632[24758] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 222.377268][T24758] syz.0.8632[24758] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 222.389565][T24758] syz.0.8632[24758] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 222.460770][T24769] Cannot find del_set index 4 as target [ 222.488160][T24771] loop3: detected capacity change from 0 to 512 [ 222.500800][T24771] EXT4-fs: dax option not supported [ 222.547428][T24781] loop3: detected capacity change from 0 to 256 [ 222.567919][T24781] FAT-fs (loop3): Directory bread(block 64) failed [ 222.574596][T24781] FAT-fs (loop3): Directory bread(block 65) failed [ 222.587660][T24781] FAT-fs (loop3): Directory bread(block 66) failed [ 222.595062][T24781] FAT-fs (loop3): Directory bread(block 67) failed [ 222.601765][T24781] FAT-fs (loop3): Directory bread(block 68) failed [ 222.608537][T24781] FAT-fs (loop3): Directory bread(block 69) failed [ 222.615360][T24781] FAT-fs (loop3): Directory bread(block 70) failed [ 222.622145][T24781] FAT-fs (loop3): Directory bread(block 71) failed [ 222.628767][T24781] FAT-fs (loop3): Directory bread(block 72) failed [ 222.635440][T24781] FAT-fs (loop3): Directory bread(block 73) failed [ 222.658500][T24781] syz.3.8643: attempt to access beyond end of device [ 222.658500][T24781] loop3: rw=0, sector=1768, nr_sectors = 4 limit=256 [ 222.664399][T24790] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 222.673939][T24781] syz.3.8643: attempt to access beyond end of device [ 222.673939][T24781] loop3: rw=0, sector=1768, nr_sectors = 4 limit=256 [ 222.790485][T24808] loop9: detected capacity change from 0 to 512 [ 222.798177][T24808] EXT4-fs: dax option not supported [ 222.808065][T24807] loop2: detected capacity change from 0 to 1764 [ 222.854870][T24816] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=19 sclass=netlink_audit_socket pid=24816 comm=syz.2.8660 [ 222.911569][T24828] syz.3.8666[24828] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 222.911666][T24828] syz.3.8666[24828] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 222.923272][T24828] syz.3.8666[24828] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 223.059376][T24858] loop2: detected capacity change from 0 to 512 [ 223.091445][T24858] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 223.104342][T24858] EXT4-fs (loop2): 1 truncate cleaned up [ 223.109388][T24864] usb usb1: usbfs: interface 0 claimed by hub while 'syz.3.8683' sets config #0 [ 223.114709][T24858] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 223.123222][T24864] usb usb1: usbfs: interface 0 claimed by hub while 'syz.3.8683' sets config #1 [ 223.162604][T15924] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 223.225465][T24880] syz.3.8690: attempt to access beyond end of device [ 223.225465][T24880] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 223.231308][T24883] syz.9.8692[24883] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 223.533174][T24932] loop2: detected capacity change from 0 to 2048 [ 223.584625][T24932] loop2: p3 < > p4 < > [ 223.588812][T24932] loop2: partition table partially beyond EOD, truncated [ 223.597300][T24932] loop2: p3 start 4284289 is beyond EOD, truncated [ 223.620563][T24949] loop0: detected capacity change from 0 to 512 [ 223.631661][T24949] EXT4-fs: Ignoring removed mblk_io_submit option [ 223.639686][T24949] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 223.642571][T24951] loop9: detected capacity change from 0 to 512 [ 223.662799][T24951] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 223.675555][T24951] ext4 filesystem being mounted at /1294/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 223.677233][T22670] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 223.686661][T24951] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 223.802384][T24970] tipc: Started in network mode [ 223.807367][T24970] tipc: Node identity ac14140f, cluster identity 4711 [ 223.821033][T24970] tipc: New replicast peer: 255.255.255.5 [ 223.826965][T24970] tipc: Enabled bearer , priority 10 [ 223.980743][T24992] Invalid logical block size (5) [ 224.035833][T25000] loop0: detected capacity change from 0 to 128 [ 224.042521][T25000] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 224.054682][T25000] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 224.120238][T25009] loop0: detected capacity change from 0 to 164 [ 224.120506][T25007] loop3: detected capacity change from 0 to 1024 [ 224.133496][T25007] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 224.146475][T25007] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 224.154546][T25007] EXT4-fs (loop3): orphan cleanup on readonly fs [ 224.161257][T25007] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5837: Corrupt filesystem [ 224.171314][T25007] EXT4-fs (loop3): Remounting filesystem read-only [ 224.177924][T25007] EXT4-fs (loop3): 1 orphan inode deleted [ 224.184179][T25007] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 224.196599][T25007] SELinux: (dev loop3, type ext4) getxattr errno 5 [ 224.203392][T25007] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 224.305261][T25016] loop6: detected capacity change from 0 to 256 [ 224.320443][T25016] FAT-fs (loop6): Directory bread(block 64) failed [ 224.327551][T25016] FAT-fs (loop6): Directory bread(block 65) failed [ 224.334086][T25016] FAT-fs (loop6): Directory bread(block 66) failed [ 224.344396][T25016] FAT-fs (loop6): Directory bread(block 67) failed [ 224.351761][T25016] FAT-fs (loop6): Directory bread(block 68) failed [ 224.359559][T25016] FAT-fs (loop6): Directory bread(block 69) failed [ 224.370346][T25016] FAT-fs (loop6): Directory bread(block 70) failed [ 224.378554][T25016] FAT-fs (loop6): Directory bread(block 71) failed [ 224.385553][T25016] FAT-fs (loop6): Directory bread(block 72) failed [ 224.392341][T25016] FAT-fs (loop6): Directory bread(block 73) failed [ 224.415916][T25016] syz.6.8752: attempt to access beyond end of device [ 224.415916][T25016] loop6: rw=0, sector=1768, nr_sectors = 4 limit=256 [ 224.430352][T25016] syz.6.8752: attempt to access beyond end of device [ 224.430352][T25016] loop6: rw=0, sector=1768, nr_sectors = 4 limit=256 [ 224.568941][T25050] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 224.584222][T25052] syzkaller1: entered promiscuous mode [ 224.589718][T25052] syzkaller1: entered allmulticast mode [ 224.625284][T25053] ================================================================== [ 224.633391][T25053] BUG: KCSAN: data-race in do_sys_poll / pollwake [ 224.639821][T25053] [ 224.642127][T25053] read to 0xffffc900036bbc10 of 4 bytes by task 25048 on cpu 0: [ 224.649732][T25053] do_sys_poll+0x95d/0xc20 [ 224.654142][T25053] __se_sys_poll+0xe1/0x200 [ 224.658659][T25053] __x64_sys_poll+0x43/0x50 [ 224.663150][T25053] x64_sys_call+0x2a72/0x2dc0 [ 224.667806][T25053] do_syscall_64+0xc9/0x1c0 [ 224.672285][T25053] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 224.678164][T25053] [ 224.680475][T25053] write to 0xffffc900036bbc10 of 4 bytes by task 25053 on cpu 1: [ 224.688192][T25053] pollwake+0xbe/0x110 [ 224.692256][T25053] __wake_up+0x65/0xb0 [ 224.696335][T25053] snd_seq_cell_free+0x1e7/0x210 [ 224.701295][T25053] snd_seq_dispatch_event+0x210/0x240 [ 224.706677][T25053] snd_seq_check_queue+0x181/0x320 [ 224.711785][T25053] snd_seq_enqueue_event+0x26e/0x2a0 [ 224.717058][T25053] snd_seq_client_enqueue_event+0x21a/0x2b0 [ 224.722932][T25053] snd_seq_write+0x3f3/0x500 [ 224.727503][T25053] vfs_write+0x281/0x920 [ 224.731722][T25053] ksys_write+0xe8/0x1b0 [ 224.735946][T25053] __x64_sys_write+0x42/0x50 [ 224.740516][T25053] x64_sys_call+0x287e/0x2dc0 [ 224.745170][T25053] do_syscall_64+0xc9/0x1c0 [ 224.749650][T25053] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 224.755524][T25053] [ 224.757822][T25053] value changed: 0x00000001 -> 0x00000000 [ 224.763509][T25053] [ 224.765811][T25053] Reported by Kernel Concurrency Sanitizer on: [ 224.771930][T25053] CPU: 1 UID: 0 PID: 25053 Comm: syz.3.8769 Not tainted 6.13.0-rc1-syzkaller-00036-g5076001689e4 #0 [ 224.782663][T25053] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 224.792693][T25053] ================================================================== [ 224.803916][ T3374] tipc: Node number set to 2886997007