last executing test programs: 7.631652399s ago: executing program 1 (id=773): openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/11], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x3, 0x0, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r0, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) recvfrom(r0, &(0x7f0000000480)=""/110, 0x28000, 0x734, 0x0, 0xfffffffffffffecb) 6.069809354s ago: executing program 1 (id=780): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0500000004000000df7f00000100000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0xe3b9}, 0x18) bpf$MAP_DELETE_ELEM(0x15, &(0x7f0000000780)={0xffffffffffffffff, &(0x7f00000006c0), 0xf0107ff0780000}, 0x20) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff", @ANYBLOB, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00'], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$eJzs3c9vFFUcAPDvbH/QUrSFGBUP0sQYSJSWFjDEeICrIQ3+iBcvVloQKdDQGi2aUBK8mBgvxph48iD+F0rkyklPHrx4MiREDUcT18x2pnTb2ZYubacyn0+y9M17O7w33X773r6+NxtAZQ2m/9Qi9kbEdBLRn8wvlnVGVji48Lx7f39yOn0kUa+/8WcSSZaXPz/JvvZlJ/dExM8/JbGnY2W9M3NXzo9PTU1ezo6HZy9MD8/MXTl47sL42cmzkxdHXxo9dvTI0WMjh9q6rqsFeSevv/9h/2djb3/3zT/JyPe/jSVxPF7Nnrj0OjbKYAw2vifJyqK+YxtdWUk6sp+TpS9x0llig1iX/PXrioinoj864v6L1x+fvlZq44BNVU8i6kBFJeIfKiofB+Tv7Ze/D66VMioBtsLdEwsTACvjv3NhbjB6GnMDO+8lsXRaJ4mI9mbmmu2KiNu3xq6fuTV2PTZpHg4oNn8tIp4uiv+kEf8D0RMDjfivNcV/Oi44lX1N819vs/7lU8XiH7bOQvz3rBr/0SL+31kS/++2Wf/g/eR7vU3x39vuJQEAAAAAAEBl3TwRES8W/f2/trj+JwrW//RFxPENqH9w2fHKv//X7mxANUCBuyciXilc/1vLV/8OdGSpxxrrAbqSM+emJg9FxOMRcSC6dqTHI6vUcfDzPV+3KhvM1v/lj7T+29lawKwddzp3NJ8zMT47/rDXDUTcvRbxTOH632Sx/08K+v/098H0A9ax5/kbp1qVrR3/wGapfxuxv7D/v3/XimT1+3MMN8YDw/moYKVnP/7ih1b1txv/bjEBDy/t/3euHv8DydL79cysv47Dc531VmXtjv+7kzcbt5zpzvI+Gp+dvTwS0Z2c7Ehzm/JH199meBTl8ZDHSxr/B55bff6vaPzfGxHzy/7v5K/mPcW5J//t+71Ve4z/oTxp/E+sq/9ff2L0xsCPrep/sP7/SKOvP5DlmP+DBV/lYdrdnF8Qjp1FRVvdXgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4FNQiYlcktaHFdK02NBTRFxFPxM7a1KWZ2RfOXPrg4kRa1vj8/1r+Sb/9C8dJ/vn/A0uOR5cdH46I3RHxZUdv43jo9KWpibIvHgAAAAAAAAAAAAAAAAAAALaJvhb7/1N/dJTdOmDTdZbdAKA0BfH/SxntALae/h+qS/xDdYl/qC7xD9Ul/qG6xD9Ul/iH6hL/AAAAAADwSNm97+avSUTMv9zbeKS6s7KuUlsGbLZa2Q0ASuMWP1Bdlv5AdXmPDyRrlPe0PGmtM1czffohTgYAAAAAAAAAAACAytm/1/5/qCr7/6G67P+H6sr3/+8ruR3A1vMeH4g1dvIX7v9f8ywAAAAAAAAAAAAAYCPNzF05Pz41NXlZ4q3t0YytTNTr9avpT8F2ac//PJEvhd8u7VmWyPf6PdhZ5f1OAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAmv0XAAD//xYSJMU=") r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) write(r4, &(0x7f0000004200)='t', 0x1) sendfile(r4, r3, 0x0, 0x3ffff) sendfile(r4, r3, 0x0, 0x7ffff000) ioctl$F2FS_IOC_RESIZE_FS(r2, 0x4008f510, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r5}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000010000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000fe0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, &(0x7f0000000040)={0x1, 0x0, 0x10, 0xb, @vifc_lcl_addr=@dev={0xac, 0x14, 0x14, 0x3a}, @remote}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sys_enter\x00'}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x10) symlink(&(0x7f0000001780)='./file0/../file0\x00', &(0x7f00000017c0)='./file0\x00') r6 = syz_io_uring_setup(0x109, &(0x7f0000000140)={0x0, 0x114df, 0x0, 0x2, 0x89}, &(0x7f00000003c0)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r7, r8, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x29c780}) io_uring_enter(r6, 0x3516, 0xaddf, 0x2, 0x0, 0x1517f) 4.455249779s ago: executing program 2 (id=784): mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r2 = dup(r1) write$P9_RLERRORu(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x808000, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) stat(0x0, 0x0) open$dir(&(0x7f0000000180)='./file0\x00', 0x400, 0x40) (fail_nth: 2) 3.916145468s ago: executing program 2 (id=786): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xb, &(0x7f0000000480)=ANY=[@ANYRESOCT=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000003680)='sched_switch\x00', r1}, 0x10) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000006c0)=ANY=[@ANYBLOB="140100002d0001000000000000600000010100800c00"/31], 0x114}], 0x1, 0x0, 0x0, 0x44010}, 0x0) r3 = perf_event_open(&(0x7f00000008c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}, 0x42}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x400e, &(0x7f0000000240)={[{@i_version}, {@nodiscard}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@lazytime}, {@jqfmt_vfsold}, {@quota}]}, 0x2, 0x447, &(0x7f0000000500)="$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") truncate(&(0x7f0000000080)='./file1\x00', 0xf62) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x169) write$binfmt_elf64(r5, 0x0, 0x78) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYRES32=r1, @ANYBLOB, @ANYRES32=0x0, @ANYRES64=r4, @ANYBLOB='\x00'/14], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4a, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x807ff, @void, @value}, 0x94) r7 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MIF(r7, 0x29, 0xca, &(0x7f0000000400)={0x2, 0x1, 0x10, 0x0, 0x2}, 0xc) setsockopt$MRT6_FLUSH(r7, 0x29, 0xd4, &(0x7f0000000080)=0x6, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x17) bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="17000000000000"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESOCT=r6], 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @void, @value}, 0x94) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) mmap(&(0x7f0000639000/0x2000)=nil, 0x2000, 0xc, 0x28011, r3, 0x0) socket$inet6(0xa, 0x1, 0x1) socket$nl_route(0x10, 0x3, 0x0) 3.667754582s ago: executing program 1 (id=787): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="011300000000850005002a0000797a5f74756e000000000000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x40040}, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mount$9p_rdma(&(0x7f0000000000), &(0x7f0000000180)='.\x00', &(0x7f0000000200), 0x800, &(0x7f0000000300)=ANY=[@ANYRES32=r3]) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYRESDEC], 0x48) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x41, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x800000000001}, 0x1100, 0x5dd8, 0x0, 0x8, 0x0, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x7, 0x7ffc1ff3}]}) fsmount(0xffffffffffffffff, 0x0, 0x0) 3.417504226s ago: executing program 2 (id=788): r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="4000000010000104000000260000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000180012800e00010077697265677561726400000004000280080003"], 0x40}, 0x1, 0xd}, 0x0) vmsplice(r0, &(0x7f0000000080)=[{&(0x7f0000000580)="b042f8d6b250303f88671e8f8ff11017de5adbe377c734d6cd7166d22b8c04b0a24c9fdd6c78073745823ac6978c23a53d93b50e54b8d55209bf41037ca418008fb3f6cc1fd01cfcba45abfefb10a2610f6fd6e72d03891cc67c89ca46741920feb95f16d5839438635a95a4d8496bf925d4a29518d9dc28c6292da2aa21a72ede3cd241a81f5f9412af0d191e71763547b77fbf297ba88bd165f5b36ce46f481a8f070d5a9138f6ada68ab4adcc734e10a36d0f136292a29103416d33c80642166dbdcdce3c395376ddbb4d2adfcaf47af7d7474e57467912c85958f277cf8a10bbfd4225df40f29a008d7d26a028b49df7", 0xf2}], 0x1, 0x3) socket(0x8000000010, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000010000b70400000000000085000000c300000095"], 0x0, 0x33, 0x0, 0x0, 0x41000, 0x64, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r5}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r6 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000200), 0x1, 0x0) writev(r6, &(0x7f0000001380)=[{&(0x7f0000000240)='4', 0x1}, {0x0}], 0x2) 3.16275932s ago: executing program 3 (id=789): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0500000004000000df7f00000100000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0xe3b9}, 0x18) bpf$MAP_DELETE_ELEM(0x15, &(0x7f0000000780)={0xffffffffffffffff, &(0x7f00000006c0), 0xf0107ff0780000}, 0x20) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff", @ANYBLOB, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00'], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) write(r4, &(0x7f0000004200)='t', 0x1) sendfile(r4, r3, 0x0, 0x3ffff) sendfile(r4, r3, 0x0, 0x7ffff000) ioctl$F2FS_IOC_RESIZE_FS(r2, 0x4008f510, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r5}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000010000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000fe0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, &(0x7f0000000040)={0x1, 0x0, 0x10, 0xb, @vifc_lcl_addr=@dev={0xac, 0x14, 0x14, 0x3a}, @remote}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sys_enter\x00'}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x10) symlink(&(0x7f0000001780)='./file0/../file0\x00', &(0x7f00000017c0)='./file0\x00') r6 = syz_io_uring_setup(0x109, &(0x7f0000000140)={0x0, 0x114df, 0x0, 0x2, 0x89}, &(0x7f00000003c0)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r7, r8, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x29c780}) io_uring_enter(r6, 0x3516, 0xaddf, 0x2, 0x0, 0x1517f) 2.799569366s ago: executing program 2 (id=792): openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/11], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x3, 0x0, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r0, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) recvfrom(r0, &(0x7f0000000480)=""/110, 0x28000, 0x734, 0x0, 0xfffffffffffffecb) 2.736817517s ago: executing program 1 (id=794): socket$inet_tcp(0x2, 0x1, 0x0) read$msr(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syz_clone(0x102311, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040)=0x2) readv(r3, &(0x7f0000000000)=[{&(0x7f0000001300)=""/244, 0x940}], 0x1) 2.667114478s ago: executing program 4 (id=795): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r0}, &(0x7f00000002c0), &(0x7f0000000300)=r1}, 0x20) r2 = syz_io_uring_setup(0x42e6, &(0x7f00000002c0)={0x0, 0x5edd, 0x10, 0x2}, &(0x7f0000000040), &(0x7f0000000140)) io_uring_enter(r2, 0x7330, 0x0, 0x0, 0x0, 0x0) 2.666545818s ago: executing program 4 (id=796): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r1 = syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1], 0x2c}, 0x1, 0x0, 0x0, 0x40040}, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mount$9p_rdma(&(0x7f0000000000), &(0x7f0000000180)='.\x00', &(0x7f0000000200), 0x800, &(0x7f0000000300)=ANY=[@ANYRES32=r2]) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYRESDEC], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000510700140000000000000001b7080000000000007b8af8ff00000000b7080000fcffffff7b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='mm_page_alloc\x00', r4}, 0x10) unshare(0x66000080) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x41, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x800000000001}, 0x1100, 0x5dd8, 0x0, 0x8, 0x0, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x7, 0x7ffc1ff3}]}) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_procs(r5, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) openat$cgroup(r5, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000202300800000000025ad9835850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000440)='kmem_cache_free\x00', r4}, 0xe) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000004c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ff8}]}) getpriority(0x0, 0xffffffffffffffff) mincore(&(0x7f0000ffc000/0x3000)=nil, 0x3000, &(0x7f00000001c0)=""/152) r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/igmp\x00') pread64(r6, &(0x7f0000000180)=""/15, 0xfffffe9c, 0xb6) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000000000000200000004000000002e2e00"], 0x0, 0x1c, 0x0, 0x0, 0x800, 0x0, @void, @value}, 0x28) 2.240887075s ago: executing program 4 (id=797): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xfffffffc, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$rxrpc(0x21, 0x2, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, 0x0, &(0x7f0000000140), 0x5, 0xffffffffffffffff, 0x4}, 0x38) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200010, &(0x7f0000000300)={[{@jqfmt_vfsold}]}, 0xfe, 0x55d, &(0x7f0000000980)="$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") sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[], 0xa0}}, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800019f00000000000000000a000000000000000800010001000000040004"], 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x8810) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) 2.088149237s ago: executing program 4 (id=798): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) eventfd(0xffff) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="1700000015007f", 0x7}], 0x1}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r4}, 0x10) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001480)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x34) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r7}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0xc, &(0x7f0000000040)=@framed={{0x18, 0x8}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r5}}, @func={0x85, 0x0, 0x1, 0x0, 0x3}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, @exit], {0x95, 0x0, 0xff85}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0, @void, @value, @void, @value}, 0x50) prctl$PR_SET_NAME(0xf, &(0x7f0000000340)='+}[p\xb3') r8 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x40008, 0x590, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfff7fffffffffefe, 0xa5d7}, 0x4c58, 0x0, 0x0, 0x0, 0x8, 0xffffffff, 0xb, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d000000180100002020732600000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000003, 0x13, r8, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f00000003c0)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, &(0x7f0000000240)={r9, 0x0, r2}) 1.88363202s ago: executing program 2 (id=800): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, 0x0) syz_usb_connect(0x0, 0x48, &(0x7f0000000080)=ANY=[], 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00"/11], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYRES32=r3, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000180)='sys_enter\x00', r4}, 0x18) syslog(0x2, &(0x7f0000000180)=""/4096, 0x1000) mremap(&(0x7f00001d3000/0x4000)=nil, 0x4000, 0x2000, 0x3, &(0x7f00009ad000/0x2000)=nil) r5 = io_uring_setup(0x200006, &(0x7f00000002c0)={0x0, 0x698c, 0x4, 0x2, 0xfffffffe, 0x0, r2}) close_range(r5, 0xffffffffffffffff, 0x200000000000000) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f0000001340)=0x0) sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, &(0x7f0000001440)={&(0x7f00000011c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001400)={&(0x7f0000001380)={0x54, 0x0, 0x200, 0x70bd26, 0x25dfdbff, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r7}]}, 0x54}, 0x1, 0x0, 0x0, 0x54}, 0x1) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x100000b, 0x12011, 0xffffffffffffffff, 0x0) capget(&(0x7f0000000040), 0x0) 1.87052614s ago: executing program 3 (id=801): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) eventfd(0xffff) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="1700000015007f", 0x7}], 0x1}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r4}, 0x10) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001480)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x34) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r7}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0xc, &(0x7f0000000040)=@framed={{0x18, 0x8}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r5}}, @func={0x85, 0x0, 0x1, 0x0, 0x3}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, @exit], {0x95, 0x0, 0xff85}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0, @void, @value, @void, @value}, 0x50) prctl$PR_SET_NAME(0xf, &(0x7f0000000340)='+}[p\xb3') r8 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x40008, 0x590, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfff7fffffffffefe, 0xa5d7}, 0x4c58, 0x0, 0x0, 0x0, 0x8, 0xffffffff, 0xb, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d000000180100002020732600000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000003, 0x13, r8, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f00000003c0)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, &(0x7f0000000240)={r9, 0x0, r2}) 1.014215664s ago: executing program 1 (id=802): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x7, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000004600020000000000070000eaffffffff040001000000000085100000faffffff95"], &(0x7f00000005c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x2e) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000640)="941afdf4a98ca3f7be65965a49195a3cb6651f1a9032dae9247b6d51ac7ac2e8c99295f9b5d405161910e41831bf71d7d8ed633b5eff6a5d95e5", &(0x7f00000006c0)="5a0dca70d1fa7dd33d432f000f0db330ff40fa3da7b5abb11e8c0935ab18c3adb8316afde233a6b6ee910f5f9800195869edce008854e39832f28725ec10715aaeec56bb4feae8f5ee902858829164a957485a3b5336a14aaf7ea9c1dedef996b203060d7a5ed42d279eea8f6cd4e108bb2f74244942ef613d28c4072908d0d99740bd5d3964b5de6713e6f988c9c0fee20befb36555a35f418189c72f01c32edb9c98b54c65ee51ab4d77d275e79cca81f4d777fa9b3c3252069a4c3689d7db44fbd818f412a406", 0x5, r1}, 0x38) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$ext4(&(0x7f0000000600)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) write(r4, &(0x7f0000004200)='t', 0x1) sendfile(r4, r3, 0x0, 0x3ffff) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b000000000000000000000000801643573e57f016dbb4bd41a969225d51d6c121b43c68246ca74fc17587472da63ded0757"], 0x48) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000240)={[{@grpquota}, {@auto_da_alloc}, {@minixdf}]}, 0x1, 0x50c, &(0x7f0000000ac0)="$eJzs3c9vG1kdAPCvnThx0uwmu+wBEOyW3YWCqjqJuxut9gDLEaGVEHsEqRsSN4pix1HsLJvQQ3rmikQlTvTIH8C5Jw7cuCC4cSkHJH5EoAaJg9GMJ6mb2o3VJHYUfz7SaObNm/r7fXH8Xuc59gtgZF2PiP2ImIiITyNiNjufy7b4qL0l1z05uLdyeHBvJRet1if/zKX1ybno+DeJa9ljFiPihw8jfpJ7Pm5jd29juVqtbGfl+WZta76xu3drvba8VlmrbJbLS4tLCx/cfr98bm19qzaRHX318R/2v/WzJK2Z7ExnO85Tu+mF4ziJ8Yj4/kUEG4KxrD0Tw06El5KPiNcj4u309T8bY+mzCQBcZa3WbLRmO8sAwFWXT+fAcvlSNhcwE/l8qdSew3sjpvPVeqN58259Z3O1PVc2F4X83fVqZSGbK5yLQi4pL6bHT8vlE+XbEfFaRPxiciotl1bq1dVh/scHAEbYtRPj/38m2+M/AHDFFYedAAAwcD3G//1B5wEADI77fwAYPcZ/ABg97fF/athpAAAD5P4fAEaP8R8ARsoPPv442VqH2fdfr362u7NR/+zWaqWxUartrJRW6ttbpbV6fS39zp7aaY9Xrde3Ft+Lnc/nvr3VaM43dvfu1Oo7m8076fd636kU0qt8sgAAhum1tx79OZeMyB9OpVt0rOVQGGpmwEXLDzsBYGjGhp0AMDRW+4LRdYZ7fNMDcEV0WaL3GcVuHxBqtVqti0sJuGA3vmT+H0ZVx/y/vwKGEWP+H0aX+X8YXa1Wrt81/6PfCwGAy80cP9Dj/f/Xs/1vsjcHfrx68ooHF5kVAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXG5H6/+WsrXAZyKfL5UiXomIuSjk7q5XKwsR8WpE/GmyMJmUF4ecMwBwVvm/5bL1v27MvjvzTNWb144PJyLip7/65JefLzeb23+MmMj9a/LofPNBdr48+OwBgNMdjdPpvuNG/snBvZWjbZD5/P27EVFsxz88mIjD4/jjMZ7ui1GIiOl/57JyW65j7uIs9u9HxBe7tT8XM+kcSHvl05Pxk9ivDDR+/pn4+bSuvU9+Fl84h1xg1DxK+p+Pur3+8nE93Xd//RfTHurssv4veaiVw7QPfBr/qP8b69H/Xe83xnu/+177aOr5uvsRXx6POIp92NH/HMXP9Yj/bp/x//KVN9/uVdf6dcSN6B6/M9Z8s7Y139jdu7VeW16rrFU2y+WlxaWFD26/X55P56jne48G//jw5qu96pL2T/eIXzyl/V/vs/0P//fpj772gvjffKdb/Hy88YL4yZj4jT7jL0//ttirLom/2qP9pz3/N/uM//ive88tGw4ADE9jd29juVqtbI/kQfR38e+zH9alyHmkD5Jn4RKk0fXgO4OKNRHdq37+TvvXdDKi8xe71XqpWL16jPOYdQMug+MXfUT8d9jJAAAAAAAAAAAAAAAAXQ3iE0vDbiMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABX1/8DAAD//9RMyv0=") quotactl$Q_QUOTAOFF(0xffffffff80000302, &(0x7f0000000000)=@sr0, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000640)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x0) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f00000004c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x50400020}, 0xc, &(0x7f00000002c0)={&(0x7f0000000440)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="000027bd7000fbdbdf250b0000000a000900000000040000000005002e0000000000080034007384000008000b000100000005002f00010000000500370001000000"], 0x48}, 0x1, 0x0, 0x0, 0x48000}, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r8, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) sendto(r8, &(0x7f0000000400)='i/!', 0x3, 0x44080, 0x0, 0x0) recvmsg(r7, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)=""/60, 0x3c}], 0x1}, 0x40fd) semtimedop(0x0, &(0x7f00000003c0)=[{0x2, 0x4, 0x1800}], 0x1, 0x0) semop(0x0, &(0x7f00000000c0)=[{0x2}], 0x1) syz_init_net_socket$x25(0x9, 0x5, 0x0) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000080), 0x2, 0x0) 849.499677ms ago: executing program 0 (id=804): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000000)=@caif=@util={0x25, "ced74054f291290669e0ad9b144d623f"}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)="19462cc746500bcb8937a858f5feed5df56f499171d8bf87e2b787a1", 0x1c}], 0x1, &(0x7f0000000100)=[{0x78, 0x1, 0x16, "2b8593beb5d11202ee36436ed8a76f8511865dfefae522a50dc9dbdca5880b193c47c5d48e2e10595350f4fa1cf1ca0b2a010f0e45ffa2659b843f6ca4452a11ee7dfc198e7a883e3f9cdb6dadb7136885520ce2f26005ea82deaa8dd2ac0c49f8d702392a58"}, {0xd8, 0x6, 0x7, "b3c1aa303f973f9c581a52cc6c0262af15ec2949481283a454406620d5f4df20303498884a5fc271f10ab53a2b3d6a60e9d0e7d499b12ac0ae8baa216b046b112125442bfccfd4a4b480531d9ac8b87354bb306fa1e6c76b531424e6e261a6dca3794dc968ad6317e64de9e8334626a4637ec0ab3e016cee18a8e01971d9b1b57966964a8edbbc9426d837ec5f2d07d974f99e3797c678043a02b6f46b336e7ca076e8ed948b7a0d0f1b4b86589544dcd4b19f7ba55ce3cff23d27279d0c0635546b4188a5fe"}, {0x108, 0x109, 0x2ad9, "e841ab0fbd064053cc522953a22e7deff0d4cc2356e869e64b7335b88991f09186a4ea31c22cd20978e28dbbd35bff10d8d76e1fff1d578e763217e6a0488ce45424cc9f5068dceee91b084f1738b367ba4a5ccc653a9804c0f4d9f79b9ff9e6189405c989f222011a71201125b6719a583ba511c5ae49181657e9e8e83d969a054b328509d5a76d55e1d3aeae05d132106b333992d8e43213e9e81fa07aa5794b0a2b991016cde3c8757222ddb6e3f741130207e8164901c36064d1feda736ec2ae55be0ebf6187dc925c098bce8badc854a5408bb47ca1afc2353c54e0cbda7ebe91e3edbdb65fd3bad591d43912bc95eb89ab154248f2"}], 0x258}, 0x44005) (async) r0 = syz_open_dev$vcsu(&(0x7f00000003c0), 0x6, 0x2002) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000400)=0x1a) getpeername$qrtr(r0, &(0x7f0000000440), &(0x7f0000000480)=0xc) (async) getresuid(&(0x7f00000004c0), &(0x7f0000000500), &(0x7f0000000540)) (async) lstat(&(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)) r1 = dup(r0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x18, 0x21, &(0x7f0000000680)=@raw=[@printk={@li, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}}, @printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2}}, @printk={@u, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x400}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}}], &(0x7f00000007c0)='GPL\x00', 0x4, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f0000000800)={0x5, 0x2}, 0x8, 0x10, &(0x7f0000000840)={0x5, 0xd, 0x100, 0x1}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000880)=[r1], 0x0, 0x10, 0x2, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000980)={&(0x7f0000000640)='qgroup_update_counters\x00', r2, 0x0, 0x5db}, 0x18) (async) prctl$PR_SET_SECCOMP(0x16, 0xb9c65d953cf175ba, &(0x7f0000000a00)={0x5, &(0x7f00000009c0)=[{0x4, 0x4, 0x0, 0xfffffffb}, {0x7, 0x87, 0xf, 0x2}, {0x3, 0x1, 0x9, 0x1ff}, {0x5, 0x6, 0x81, 0x1fffc0}, {0x3, 0x81, 0xb, 0x5}]}) gettid() (async) epoll_pwait(0xffffffffffffffff, &(0x7f0000000a40)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0xa, 0x2, &(0x7f0000000ac0)={[0xfffffffffffffffe]}, 0x8) (async) ioctl$HDIO_GETGEO(r1, 0x301, &(0x7f0000000b00)) (async) prctl$PR_SET_NAME(0xf, &(0x7f0000000b40)='$\x00') (async) quotactl_fd$Q_SYNC(r1, 0xffffffff80000102, 0x0, 0x0) sendmmsg$inet6(r0, &(0x7f0000001680)=[{{&(0x7f0000000b80)={0xa, 0x4e21, 0x1, @loopback, 0xd4}, 0x1c, &(0x7f0000000f00)=[{&(0x7f0000000bc0)="4a8b2f7707a9204f3f0864a16175c312feb8ae00eaa5b84d1f1c84dfd7050fc6c76b6a4144fa11655fe3b84d7e995fdcab4e0cf0165ac38ddd0bba711c5cdfe5ce32dd2344b4b696ed4e98c7ca52d139e2ae48eb743f545b1bf53eb47ce68efeba6d5f181d3ceef38c2765c009c1b89df81f1a3033890938305f95cf", 0x7c}, {&(0x7f0000000c40)="862fe3258883633c1e95766a6b15a4c6063917486d09023a979ba2404f1ffea38c04f568ad636b080b9bf721d1", 0x2d}, {&(0x7f0000000c80)="7d14757b39f6e5a38ee29fead348578d69e6f75ddf11d2de878f0553ea16e9ba8a6840d38db34004137dc444ed69c17ada15b6aeb238cbcb8126b0afda2949dfbef2ce7dd405e527a47677b0a523649ca60fefff36765b6e3b075bba846709c7c8fd7e9f5b6fd4be7190204ced3dcab76a57ba8c0a5f344d3a39673a0368", 0x7e}, {&(0x7f0000000d00)="bb7693265a2d22010152b762bec179a7a3c9db2a8ec0ed31620f51a2fcbcb880f93ee96f0bdf8c05b032e3a750444ccaf309a15104c878584af503b9d11facdff7dba0357310017970349339719d55f052fe4e8cb52acb0fa86ef6e8d9371a0a8280792b39471e7a4b28072a64695561643c6ce746bfa4e5cb238415c850d54876abefc7e57300ed5d59f9fa735983da", 0x90}, {&(0x7f0000000dc0)="0667bca641765cda95426dff94fb1271354da4b98c9d56da6cfca0812110a00d81e77f0127953bff55d33f679c89ed88458031a92eb66e0a27165e6ba465766638253b29497902739718594c2005f667889f7feb177a1aebc1cbd66daa69d1dc0629951fc1b3a6cfb3cec19ddf5d10ac18ef506f8641ca998a451df9768994b276b5cf165bc975b4ab0b4d5ce8659cfe4fe974f665f55c0e37daf039020b28b6f0192c2ecc0e14d3441d13564b83a10a8bf6bd169775cfd5dabfe0e5744b621de42f8575615d298211d2d079003f5fef65e678b7a81b", 0xd6}, {&(0x7f0000000ec0)="45b81de93d5fa3bde0f0dd0cc9e3f0d17d35", 0x12}], 0x6, &(0x7f0000000f80)=[@hopopts={{0x38, 0x29, 0x36, {0x3c, 0x3, '\x00', [@ra={0x5, 0x2, 0x8}, @enc_lim={0x4, 0x1, 0xbb}, @hao={0xc9, 0x10, @rand_addr=' \x01\x00'}]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x6}}, @rthdr_2292={{0x38, 0x29, 0x39, {0x3c, 0x4, 0x0, 0xff, 0x0, [@private2={0xfc, 0x2, '\x00', 0x1}, @remote]}}}, @hoplimit={{0x14, 0x29, 0x34, 0x2}}], 0xa0}}, {{&(0x7f0000001040)={0xa, 0x4e20, 0x6, @local, 0x6f6}, 0x1c, &(0x7f0000001200)=[{&(0x7f0000001080)}, {&(0x7f00000010c0)="b595dc8019e0b05c1dc9ca0be964d6bb", 0x10}, {&(0x7f0000001100)="331863d5785b7d067b1dcd0502aa8660d6eb3c5e90472da89c86f8933874489cb2960bc2e5e3bbd19637f1a5c3d425dceb450768b85cdd738cd3791bd810a8f46cd865d374aa58affdc1b0e07640a1b83781ab8425c5d79ebfed5a02110ed57eae060fab69c043f750ffb0d33d59f970a1eadf887712528676b3158b41d34c781dca1b8a7d25d4aa19b86d05dccffd38172726cfaf9c6df58d3fac8b4016c9009641b0fe2caa9ef365b5dec3a820a836466b570a371d054dd7c1a8fc8aa1111c4a7b", 0xc2}], 0x3, &(0x7f0000001240)=[@rthdrdstopts={{0x28, 0x29, 0x37, {0x88, 0x1, '\x00', [@jumbo={0xc2, 0x4, 0x7f}, @jumbo={0xc2, 0x4, 0x8}]}}}, @rthdr={{0x28, 0x29, 0x39, {0x1, 0x2, 0x1, 0x2, 0x0, [@mcast2]}}}, @rthdr={{0x58, 0x29, 0x39, {0x16, 0x8, 0x3, 0x2, 0x0, [@private0={0xfc, 0x0, '\x00', 0x1}, @loopback, @private1, @rand_addr=' \x01\x00']}}}], 0xa8}}, {{0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f0000001300)="01a22ca77176f8be450f48553ed8854e6778dce4259f1e5143178de987044119bc223fca4162ab3f8ef38626ec8e461133325cc9f9623fee72", 0x39}, {&(0x7f0000001340)="2a18ac71ac4cad4c22085eb2aebae4995266bc0dd0d2acb4dcbeb3279bba30ca391a983a195a536ffa359d563d4728ad4fec68c1978f3035ddb9c86a74f11c39a076c6a4dfcc08ff4440dd17e8dccb3903a212f0a9546c1583384b3cf5eac03668348ab98289061d81a8883c3abc92", 0x6f}], 0x2, &(0x7f0000001400)=[@rthdr_2292={{0x38, 0x29, 0x39, {0xff, 0x4, 0x1, 0x7f, 0x0, [@dev={0xfe, 0x80, '\x00', 0x41}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02']}}}, @flowinfo={{0x14, 0x29, 0xb, 0xe18}}, @dontfrag={{0x14, 0x29, 0x3e, 0x4}}, @dontfrag={{0x14, 0x29, 0x3e, 0x4}}, @dontfrag={{0x14, 0x29, 0x3e, 0x80000000}}, @rthdr_2292={{0x78, 0x29, 0x39, {0x32, 0xc, 0x0, 0xf, 0x0, [@private0, @local, @mcast2, @loopback, @mcast1, @ipv4={'\x00', '\xff\xff', @empty}]}}}, @rthdrdstopts={{0x20, 0x29, 0x37, {0x87, 0x0, '\x00', [@enc_lim]}}}, @dstopts={{0x40, 0x29, 0x37, {0x16, 0x4, '\x00', [@jumbo={0xc2, 0x4, 0x8}, @pad1, @hao={0xc9, 0x10, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @pad1, @enc_lim={0x4, 0x1, 0x7}, @pad1]}}}, @rthdr={{0x88, 0x29, 0x39, {0x1, 0xe, 0x1, 0x3, 0x0, [@empty, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast1, @loopback, @mcast1, @mcast1, @private2]}}}, @rthdrdstopts={{0x68, 0x29, 0x37, {0x2b, 0x9, '\x00', [@padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @hao={0xc9, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @enc_lim={0x4, 0x1, 0x2}, @ra={0x5, 0x2, 0xe}, @hao={0xc9, 0x10, @ipv4={'\x00', '\xff\xff', @empty}}, @hao={0xc9, 0x10, @mcast1}, @ra={0x5, 0x2, 0xa}, @pad1]}}}], 0x260}}], 0x3, 0x11) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000001900)={'wg2\x00', 0x0}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000001a40)={0x2, 0x18, &(0x7f0000001740)=@framed={{0x18, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0xbd}, @exit, @ldst={0x1, 0x3, 0x3, 0x8, 0xc, 0x50, 0x4}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @jmp={0x5, 0x1, 0x0, 0x9, 0x0, 0x30, 0xfffffffffffffffc}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @func={0x85, 0x0, 0x1, 0x0, 0x8}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @tail_call={{0x18, 0x2, 0x1, 0x0, r0}}, @printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7fffffff}}]}, &(0x7f0000001800)='GPL\x00', 0x0, 0xb0, &(0x7f0000001840)=""/176, 0x1e00, 0x24, '\x00', r3, @fallback=0x2f, 0xffffffffffffffff, 0x8, &(0x7f0000001940)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000001980)={0x4, 0x5, 0x0, 0x7}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, &(0x7f00000019c0)=[r1, r1, r1, r0, r0, r0, r0, r1, r0], &(0x7f0000001a00)=[{0x3, 0x4, 0xb, 0x6}], 0x10, 0x1000, @void, @value}, 0x94) (async) socket$nl_generic(0x10, 0x3, 0x10) r5 = inotify_init1(0x40000) inotify_add_watch(r5, &(0x7f0000001b00)='./file0\x00', 0x24000006) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001b80)={&(0x7f0000001b40)='ext4_es_remove_extent\x00', r4, 0x0, 0xfffffffffffffffb}, 0x18) (async) openat$uhid(0xffffffffffffff9c, &(0x7f0000001bc0), 0x802, 0x0) (async) write$RDMA_USER_CM_CMD_CONNECT(r1, &(0x7f0000001c00)={0x6, 0x118, 0xfa00, {{0x9, 0x3, "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", 0x8, 0x9, 0x36, 0x4, 0x9, 0xe, 0x60}}}, 0x120) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f0000001d40)={0x0, @in={{0x2, 0x4e23, @loopback}}, [0xfb6e, 0xffffffffffffffff, 0x7, 0x6, 0x8, 0xfffffffffffffffa, 0x5, 0x0, 0xc, 0x4, 0x0, 0x2, 0x7, 0x4, 0x100000000]}, &(0x7f0000001e40)=0x100) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000001e80)={r6, 0x97, "220836b2315d2879e99b165b9ad5e4ec838cd28ea2fdb5c7f3c5cb5f84e844944e9c5c1f6f8033b6f4b5178dd145a027a78655ee1f196d80fb6e35f1d307f7172c1c8945cc3f162c6187a4390c79d943c14bf4be17e676c43685e114b744eb7ce5fa0f4f691df81cd61f05799dda2f8af4d940f110ff12e0a24101d367e06ed8be08c18e2792ba7bf1515190d32a3dd4f0ad4a3dfb9d8f"}, &(0x7f0000001f40)=0x9f) recvmsg$kcm(r0, &(0x7f0000003300)={&(0x7f0000001f80)=@vsock={0x28, 0x0, 0x0, @hyper}, 0x80, &(0x7f0000003200)=[{&(0x7f0000002000)=""/66, 0x42}, {&(0x7f0000002080)=""/4096, 0x1000}, {&(0x7f0000003080)=""/104, 0x68}, {&(0x7f0000003100)=""/221, 0xdd}], 0x4, &(0x7f0000003240)=""/191, 0xbf}, 0x0) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000003380)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000003340)={0xffffffffffffffff}, 0x111, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f00000033c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0xf2e, @empty, 0x6}, {0xa, 0x4e21, 0x4, @ipv4={'\x00', '\xff\xff', @loopback}, 0x6}, r7, 0x6}}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000003780)={0x18, 0x14, &(0x7f0000003440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x36, 0x0, 0x0, 0x0, 0x85a}, {}, {}, [@cb_func={0x18, 0x6, 0x4, 0x0, 0x2}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @map_val={0x18, 0x8, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0xff3}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000003500)='GPL\x00', 0xa69, 0x3f, &(0x7f0000003540)=""/63, 0x40f00, 0x57, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f0000003640)={0x1, 0x5}, 0x8, 0x10, &(0x7f0000003680)={0x0, 0x2, 0x3, 0x9}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000003740)=[0xffffffffffffffff, r1, r1], 0x0, 0x10, 0xaa, @void, @value}, 0x94) 788.093147ms ago: executing program 0 (id=805): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r0}, &(0x7f00000002c0), &(0x7f0000000300)=r1}, 0x20) r2 = syz_io_uring_setup(0x42e6, &(0x7f00000002c0)={0x0, 0x5edd, 0x10, 0x2}, &(0x7f0000000040), &(0x7f0000000140)) io_uring_enter(r2, 0x7330, 0x0, 0x0, 0x0, 0x0) 787.438587ms ago: executing program 0 (id=806): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="011300000000850005002a0000797a5f74756e000000000000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x40040}, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mount$9p_rdma(&(0x7f0000000000), &(0x7f0000000180)='.\x00', &(0x7f0000000200), 0x800, &(0x7f0000000300)=ANY=[@ANYRES32=r3]) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x41, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x800000000001}, 0x1100, 0x5dd8, 0x0, 0x8, 0x0, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x7, 0x7ffc1ff3}]}) fsmount(0xffffffffffffffff, 0x0, 0x0) 715.230279ms ago: executing program 3 (id=807): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)={0x80, 0x0, 0x1, 0x0, 0x0, 0x0, {}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @dev}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @private2}}}]}]}, 0x80}, 0x1, 0xfffff000}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000001c0)=ANY=[@ANYBLOB="980000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="800000deff000000700012800e0001006970366772657461700000005c000280050008004000000006000f00810000000800140006000000060011"], 0x98}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x740, 0x140) close(r3) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=@newqdisc={0xfc, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@TCA_STAB={0xd8, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x1, 0x9, 0xb7, 0x7, 0x2, 0xf9a, 0x0, 0x4}}, {0xc, 0x2, [0x1, 0x81, 0x1, 0x49e2]}}, {{0x1c, 0x1, {0x4, 0x0, 0x6, 0xfffffffb, 0x1, 0x4, 0x8, 0x7}}, {0x12, 0x2, [0x6, 0x87, 0x8, 0x0, 0x5, 0x9, 0x8]}}, {{0x1c, 0x1, {0x0, 0x7, 0x1, 0x0, 0x0, 0x5, 0x3, 0x5}}, {0xe, 0x2, [0x3, 0x6, 0xff5c, 0xd, 0x3]}}, {{0x1c, 0x1, {0x10, 0xb4, 0x3, 0x6db, 0x1, 0x1, 0x3, 0x4}}, {0xc, 0x2, [0x1, 0x800, 0x300, 0xf]}}, {{0x1c, 0x1, {0xa, 0xc, 0x5, 0x5, 0x0, 0x3, 0x8, 0x3}}, {0xa, 0x2, [0xff, 0x1000, 0x1]}}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x801}, 0x0) r6 = syz_io_uring_setup(0xfbb, &(0x7f00000001c0)={0x0, 0xfffffffd, 0x10000, 0x5, 0x1a6}, &(0x7f0000000100), &(0x7f0000000080)) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x2000004, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYBLOB="8241abfd948f831e6b11662c95b81b1fd8d7a64bc638f6e9fdb53177a12f62c106907b0bbe86fab6f798722a85d9f3a6ab9c", @ANYRESOCT=r0, @ANYRESHEX=r6, @ANYBLOB=',\x00']) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x1e00, 0x21, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f00000001c0)="b4979f35a50faecccd29a3094ac1f8741763aa1d62", 0x15, 0x41, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'lo\x00'}) r8 = socket(0x840000000002, 0x3, 0xfa) connect$inet(r8, &(0x7f0000000140)={0x2, 0x4e22, @remote}, 0x10) sendmmsg$inet(r8, &(0x7f0000005240), 0x4000095, 0x0) 713.795478ms ago: executing program 0 (id=808): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xfffffffc, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$rxrpc(0x21, 0x2, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_emit_ethernet(0xfdef, &(0x7f0000000180)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xfde1, 0x300, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e22, 0x4d, 0x0, @wg=@data}}}}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, 0x0, &(0x7f0000000140), 0x5, 0xffffffffffffffff, 0x4}, 0x38) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200010, &(0x7f0000000300)={[{@jqfmt_vfsold}]}, 0xfe, 0x55d, &(0x7f0000000980)="$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") sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[], 0xa0}}, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800019f00000000000000000a000000000000000800010001000000040004"], 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x8810) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) 638.96044ms ago: executing program 4 (id=809): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) eventfd(0xffff) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="1700000015007f", 0x7}], 0x1}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0, @void, @value, @void, @value}, 0x50) 604.50573ms ago: executing program 2 (id=810): openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/11], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x3, 0x0, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r0, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) recvfrom(r0, &(0x7f0000000480)=""/110, 0x28000, 0x734, 0x0, 0xfffffffffffffecb) 593.975231ms ago: executing program 0 (id=811): r0 = socket$kcm(0x10, 0x2, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000080)="2e00000038000511d25a80698c63940d0124fc602f6e35400c000200001ec00037153e370a00018025581d00d1bd", 0x2e}], 0x1, 0x0, 0x0, 0x39c}, 0x0) (fail_nth: 1) 330.191585ms ago: executing program 0 (id=812): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) eventfd(0xffff) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="1700000015007f", 0x7}], 0x1}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r4}, 0x10) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001480)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x34) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r7}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0xc, &(0x7f0000000040)=@framed={{0x18, 0x8}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r5}}, @func={0x85, 0x0, 0x1, 0x0, 0x3}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, @exit], {0x95, 0x0, 0xff85}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0, @void, @value, @void, @value}, 0x50) prctl$PR_SET_NAME(0xf, &(0x7f0000000340)='+}[p\xb3') r8 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x40008, 0x590, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfff7fffffffffefe, 0xa5d7}, 0x4c58, 0x0, 0x0, 0x0, 0x8, 0xffffffff, 0xb, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d000000180100002020732600000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000003, 0x13, r8, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f00000003c0)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, &(0x7f0000000240)={r9, 0x0, r2}) 329.060695ms ago: executing program 4 (id=813): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) eventfd(0xffff) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="1700000015007f", 0x7}], 0x1}, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x2000000000000020, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r3}, 0x10) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001480)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x34) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r6}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0xc, &(0x7f0000000040)=@framed={{0x18, 0x8}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r4}}, @func={0x85, 0x0, 0x1, 0x0, 0x3}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, @exit], {0x95, 0x0, 0xff85}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0, @void, @value, @void, @value}, 0x50) prctl$PR_SET_NAME(0xf, &(0x7f0000000340)='+}[p\xb3') r7 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x40008, 0x590, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfff7fffffffffefe, 0xa5d7}, 0x4c58, 0x0, 0x0, 0x0, 0x8, 0xffffffff, 0xb, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d000000180100002020732600000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000003, 0x13, r7, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f00000003c0)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000240)={r8, 0x0, r1}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) 151.156348ms ago: executing program 3 (id=814): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000027b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) syz_emit_ethernet(0x32, &(0x7f0000000740)={@local, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x2, 0xfd, 0x11, 0x0, @empty, @remote}, {0x0, 0x0, 0x10, 0x0, @gue={{0x2}}}}}}}, 0x0) 113.875928ms ago: executing program 1 (id=815): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0500000004000000df7f00000100000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0xe3b9}, 0x18) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="05000000220000000080000001"], 0x48) bpf$MAP_DELETE_ELEM(0x15, &(0x7f0000000780)={r2, &(0x7f00000006c0), 0xf0107ff0780000}, 0x20) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff", @ANYBLOB, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00'], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) write(r5, &(0x7f0000004200)='t', 0x1) sendfile(r5, r4, 0x0, 0x3ffff) sendfile(r5, r4, 0x0, 0x7ffff000) ioctl$F2FS_IOC_RESIZE_FS(r3, 0x4008f510, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r6}, 0x10) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r7}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000010000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000fe0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, &(0x7f0000000040)={0x1, 0x0, 0x10, 0xb, @vifc_lcl_addr=@dev={0xac, 0x14, 0x14, 0x3a}, @remote}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sys_enter\x00'}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x10) symlink(&(0x7f0000001780)='./file0/../file0\x00', &(0x7f00000017c0)='./file0\x00') syz_io_uring_setup(0x109, &(0x7f0000000140)={0x0, 0x114df, 0x0, 0x2, 0x89}, &(0x7f00000003c0), &(0x7f0000000040)) 111.582508ms ago: executing program 3 (id=816): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r0}, &(0x7f00000002c0), &(0x7f0000000300)=r1}, 0x20) r2 = syz_io_uring_setup(0x42e6, &(0x7f00000002c0)={0x0, 0x5edd, 0x10, 0x2}, &(0x7f0000000040), &(0x7f0000000140)) io_uring_enter(r2, 0x7330, 0x0, 0x0, 0x0, 0x0) 0s ago: executing program 3 (id=817): syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) write(r1, &(0x7f0000004200)='t', 0x1) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) kernel console output (not intermixed with test programs): 439][ T4747] vhci_hcd vhci_hcd.0: pdev(1) rhport(3) sockfd(17) [ 71.109078][ T4747] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 71.116844][ T4747] vhci_hcd vhci_hcd.0: Device attached [ 71.123726][ T4747] vhci_hcd vhci_hcd.0: pdev(1) rhport(4) sockfd(19) [ 71.130335][ T4747] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 71.138002][ T4747] vhci_hcd vhci_hcd.0: Device attached [ 71.144605][ T4747] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 71.155418][ T4747] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 71.165481][ T4747] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 71.177127][ T4747] vhci_hcd vhci_hcd.0: port 0 already used [ 71.203113][ T4770] vhci_hcd: connection closed [ 71.205980][ T4762] vhci_hcd: connection closed [ 71.220331][ T4777] serio: Serial port ptm1 [ 71.229441][ T4765] vhci_hcd: connection closed [ 71.232531][ T4772] vhci_hcd: connection closed [ 71.240777][ T38] vhci_hcd: stop threads [ 71.249853][ T38] vhci_hcd: release socket [ 71.254293][ T38] vhci_hcd: disconnect device [ 71.260817][ T38] vhci_hcd: stop threads [ 71.265132][ T38] vhci_hcd: release socket [ 71.269728][ T38] vhci_hcd: disconnect device [ 71.275856][ T4757] vhci_hcd: connection closed [ 71.277935][ T38] vhci_hcd: stop threads [ 71.286992][ T38] vhci_hcd: release socket [ 71.291420][ T38] vhci_hcd: disconnect device [ 71.298734][ T38] vhci_hcd: stop threads [ 71.303189][ T38] vhci_hcd: release socket [ 71.307683][ T38] vhci_hcd: disconnect device [ 71.314803][ T38] vhci_hcd: stop threads [ 71.319219][ T38] vhci_hcd: release socket [ 71.323669][ T38] vhci_hcd: disconnect device [ 71.609894][ T4784] siw: device registration error -23 [ 71.634599][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.008576][ T4796] netlink: 244 bytes leftover after parsing attributes in process `syz.2.388'. [ 72.034106][ T4799] 9pnet_virtio: no channels available for device 127.0.0.1 [ 72.075598][ T4794] siw: device registration error -23 [ 72.108051][ T9] vhci_hcd: vhci_device speed not set [ 72.154495][ T4801] loop4: detected capacity change from 0 to 1024 [ 72.230285][ T4804] loop1: detected capacity change from 0 to 512 [ 72.247475][ T4801] EXT4-fs: Ignoring removed orlov option [ 72.294692][ T4801] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 72.307652][ T4804] EXT4-fs (loop1): 1 orphan inode deleted [ 72.314045][ T4804] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 72.331728][ T1291] EXT4-fs error (device loop1): ext4_release_dquot:6971: comm kworker/u8:6: Failed to release dquot type 1 [ 72.385494][ T4810] loop0: detected capacity change from 0 to 1024 [ 72.418836][ T4804] ext4 filesystem being mounted at /74/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 72.466045][ T4810] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 72.517912][ T4804] netlink: 'syz.1.390': attribute type 39 has an invalid length. [ 72.590313][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.709456][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.071256][ T4824] serio: Serial port ptm0 [ 73.366357][ T4796] loop2: detected capacity change from 0 to 512 [ 73.426539][ T4828] siw: device registration error -23 [ 73.459081][ T4796] EXT4-fs: Ignoring removed i_version option [ 73.546797][ T23] usb 7-1: enqueue for inactive port 0 [ 73.552400][ T23] usb 7-1: enqueue for inactive port 0 [ 73.598341][ T4796] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 73.776951][ T23] vhci_hcd: vhci_device speed not set [ 73.834021][ T29] kauditd_printk_skb: 217 callbacks suppressed [ 73.834035][ T29] audit: type=1326 audit(1745088526.155:1813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4818 comm="syz.0.394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fe27fb7a359 code=0x7fc00000 [ 73.863603][ T29] audit: type=1326 audit(1745088526.155:1814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4818 comm="syz.0.394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7fe27fb7a41f code=0x7fc00000 [ 73.886871][ T29] audit: type=1326 audit(1745088526.155:1815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4818 comm="syz.0.394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fe27fbde169 code=0x7fc00000 [ 74.011114][ T4838] loop0: detected capacity change from 0 to 1024 [ 74.020984][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.054838][ T4838] EXT4-fs: Ignoring removed orlov option [ 74.080287][ T4796] EXT4-fs (loop2): 1 truncate cleaned up [ 74.121463][ T4838] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.161673][ T4796] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.200974][ T4845] 9pnet_virtio: no channels available for device 127.0.0.1 [ 74.240144][ T29] audit: type=1400 audit(1745088526.245:1816): avc: denied { name_bind } for pid=4832 comm="syz.3.396" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 74.261839][ T29] audit: type=1400 audit(1745088526.245:1817): avc: denied { node_bind } for pid=4832 comm="syz.3.396" saddr=255.255.255.255 src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 74.284402][ T29] audit: type=1400 audit(1745088526.415:1818): avc: denied { append } for pid=4839 comm="syz.3.400" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 74.308750][ T29] audit: type=1400 audit(1745088526.415:1819): avc: denied { open } for pid=4839 comm="syz.3.400" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 74.333144][ T29] audit: type=1400 audit(1745088526.435:1820): avc: denied { create } for pid=4839 comm="syz.3.400" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 74.352516][ T29] audit: type=1400 audit(1745088526.445:1821): avc: denied { ioctl } for pid=4839 comm="syz.3.400" path="socket:[9248]" dev="sockfs" ino=9248 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 74.376945][ T29] audit: type=1400 audit(1745088526.445:1822): avc: denied { bind } for pid=4839 comm="syz.3.400" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 75.249368][ T4851] serio: Serial port ptm0 [ 75.561777][ T4854] loop1: detected capacity change from 0 to 1024 [ 75.585674][ T4857] loop4: detected capacity change from 0 to 512 [ 75.753899][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.766628][ T4857] EXT4-fs (loop4): 1 orphan inode deleted [ 75.773741][ T4857] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 75.787607][ T4854] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 75.805612][ T4857] ext4 filesystem being mounted at /81/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 75.817782][ T4854] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4854 comm=syz.1.403 [ 75.846473][ T4857] netlink: 'syz.4.404': attribute type 39 has an invalid length. [ 76.196692][ T12] EXT4-fs error (device loop4): ext4_release_dquot:6971: comm kworker/u8:0: Failed to release dquot type 1 [ 76.229588][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.241275][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.251064][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.352363][ T4871] 9pnet_virtio: no channels available for device 127.0.0.1 [ 76.740430][ T4897] loop3: detected capacity change from 0 to 512 [ 76.773593][ T4897] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 76.795751][ T4897] EXT4-fs (loop3): orphan cleanup on readonly fs [ 76.807399][ T4897] EXT4-fs error (device loop3): ext4_acquire_dquot:6935: comm syz.3.413: Failed to acquire dquot type 1 [ 76.828667][ T4897] EXT4-fs (loop3): 1 truncate cleaned up [ 76.855195][ T4897] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 76.871891][ T4897] sg_write: data in/out 209152/1 bytes for SCSI command 0xf2-- guessing data in; [ 76.871891][ T4897] program syz.3.413 not setting count and/or reply_len properly [ 77.304825][ T4908] 9pnet_virtio: no channels available for device 127.0.0.1 [ 77.313310][ T4909] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 77.337522][ T4909] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 77.460679][ T4912] netlink: 244 bytes leftover after parsing attributes in process `syz.0.418'. [ 77.799250][ T4912] loop0: detected capacity change from 0 to 512 [ 77.813660][ T4912] EXT4-fs: Ignoring removed i_version option [ 77.825310][ T4912] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 77.849164][ T4912] EXT4-fs (loop0): 1 truncate cleaned up [ 77.861703][ T4912] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 78.003418][ T4923] 9pnet_virtio: no channels available for device 127.0.0.1 [ 78.119564][ T4928] loop4: detected capacity change from 0 to 1024 [ 78.147566][ T4928] EXT4-fs: Ignoring removed orlov option [ 78.163897][ T4928] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 78.397935][ T4934] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 78.406408][ T4934] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 79.169244][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.283228][ T29] kauditd_printk_skb: 195 callbacks suppressed [ 79.283243][ T29] audit: type=1400 audit(1745088531.605:2015): avc: denied { execmem } for pid=4911 comm="syz.0.418" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 79.326939][ T29] audit: type=1400 audit(1745088531.605:2016): avc: denied { module_request } for pid=4911 comm="syz.0.418" kmod="net-pf-10-proto-1-type-1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 79.349838][ T29] audit: type=1326 audit(1745088531.635:2017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4935 comm="syz.1.425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa93411e169 code=0x7fc00000 [ 79.382233][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.455497][ T4950] loop0: detected capacity change from 0 to 1024 [ 79.462733][ T4950] EXT4-fs: Ignoring removed orlov option [ 79.478777][ T4950] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 79.509327][ T4953] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 79.524887][ T4953] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 79.638062][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.715167][ T29] audit: type=1326 audit(1745088532.035:2018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4945 comm="syz.1.428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa93411e169 code=0x7ffc0000 [ 79.739431][ T29] audit: type=1326 audit(1745088532.065:2019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4945 comm="syz.1.428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=125 compat=0 ip=0x7fa93411e169 code=0x7ffc0000 [ 79.762897][ T29] audit: type=1326 audit(1745088532.065:2020): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4945 comm="syz.1.428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa93411e169 code=0x7ffc0000 [ 79.786264][ T29] audit: type=1326 audit(1745088532.065:2021): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4945 comm="syz.1.428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa93411e169 code=0x7ffc0000 [ 79.858004][ T29] audit: type=1326 audit(1745088532.185:2022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4958 comm="syz.3.431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c4f1ae169 code=0x7fc00000 [ 79.937182][ T29] audit: type=1400 audit(1745088532.235:2023): avc: denied { nlmsg_write } for pid=4962 comm="syz.2.432" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 80.135612][ T4972] loop2: detected capacity change from 0 to 1024 [ 80.143507][ T4972] EXT4-fs: Ignoring removed orlov option [ 80.199796][ T4972] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 80.386684][ T29] audit: type=1400 audit(1745088532.705:2024): avc: denied { create } for pid=4978 comm="syz.4.437" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 80.409955][ T4979] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(10) [ 80.416608][ T4979] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 80.424153][ T4979] vhci_hcd vhci_hcd.0: Device attached [ 80.435344][ T4982] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 80.447250][ T4982] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 80.461187][ T4983] vhci_hcd vhci_hcd.0: pdev(4) rhport(1) sockfd(13) [ 80.467937][ T4983] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 80.475579][ T4983] vhci_hcd vhci_hcd.0: Device attached [ 80.491347][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.501445][ T4979] vhci_hcd vhci_hcd.0: pdev(4) rhport(2) sockfd(12) [ 80.508071][ T4979] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 80.515607][ T4979] vhci_hcd vhci_hcd.0: Device attached [ 80.528868][ T4979] vhci_hcd vhci_hcd.0: pdev(4) rhport(3) sockfd(17) [ 80.535496][ T4979] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 80.543156][ T4979] vhci_hcd vhci_hcd.0: Device attached [ 80.592927][ T4979] vhci_hcd vhci_hcd.0: pdev(4) rhport(4) sockfd(19) [ 80.599613][ T4979] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 80.607347][ T4979] vhci_hcd vhci_hcd.0: Device attached [ 80.617134][ T10] vhci_hcd: vhci_device speed not set [ 80.648296][ T4995] vhci_hcd: connection closed [ 80.648635][ T4406] vhci_hcd: stop threads [ 80.648874][ T4989] vhci_hcd: connection closed [ 80.653353][ T4406] vhci_hcd: release socket [ 80.657937][ T4987] vhci_hcd: connection closed [ 80.662361][ T4406] vhci_hcd: disconnect device [ 80.669196][ T4997] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 80.684977][ T10] usb 9-1: new full-speed USB device number 3 using vhci_hcd [ 80.693739][ T4980] vhci_hcd: connection closed [ 80.694089][ T4985] vhci_hcd: connection closed [ 80.706827][ T4981] vhci_hcd: sendmsg failed!, ret=-32 for 48 [ 80.711486][ T4997] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 80.713127][ T4406] vhci_hcd: stop threads [ 80.724786][ T4406] vhci_hcd: release socket [ 80.729331][ T4406] vhci_hcd: disconnect device [ 80.746709][ T4406] vhci_hcd: stop threads [ 80.751013][ T4406] vhci_hcd: release socket [ 80.755545][ T4406] vhci_hcd: disconnect device [ 80.762930][ T4406] vhci_hcd: stop threads [ 80.767228][ T4406] vhci_hcd: release socket [ 80.771758][ T4406] vhci_hcd: disconnect device [ 80.776731][ T4406] vhci_hcd: stop threads [ 80.781044][ T4406] vhci_hcd: release socket [ 80.785544][ T4406] vhci_hcd: disconnect device [ 81.029147][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.133704][ T5004] 9pnet_virtio: no channels available for device 127.0.0.1 [ 81.243310][ T5006] siw: device registration error -23 [ 81.368337][ T5018] siw: device registration error -23 [ 81.376019][ T5022] siw: device registration error -23 [ 81.445464][ T5032] 9pnet_virtio: no channels available for device 127.0.0.1 [ 81.581516][ T5039] netlink: 244 bytes leftover after parsing attributes in process `syz.1.456'. [ 81.631093][ T5039] loop1: detected capacity change from 0 to 512 [ 81.653419][ T5039] EXT4-fs: Ignoring removed i_version option [ 81.678977][ T5039] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 81.730736][ T5039] EXT4-fs (loop1): 1 truncate cleaned up [ 81.738664][ T5039] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 82.076878][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.139695][ T5053] siw: device registration error -23 [ 82.153978][ T5050] siw: device registration error -23 [ 82.208042][ T5060] netlink: 8 bytes leftover after parsing attributes in process `syz.4.462'. [ 82.217041][ T5060] netlink: 'syz.4.462': attribute type 3 has an invalid length. [ 82.224809][ T5060] netlink: 'syz.4.462': attribute type 4 has an invalid length. [ 82.232521][ T5060] netlink: 16 bytes leftover after parsing attributes in process `syz.4.462'. [ 82.245341][ T5061] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 82.262614][ T5061] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 82.276196][ T5060] 9pnet_fd: Insufficient options for proto=fd [ 82.395354][ T5071] 9pnet_virtio: no channels available for device 127.0.0.1 [ 82.425023][ T5072] loop3: detected capacity change from 0 to 512 [ 82.473085][ T5072] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 82.512578][ T5072] EXT4-fs (loop3): orphan cleanup on readonly fs [ 82.536466][ T5072] EXT4-fs error (device loop3): ext4_acquire_dquot:6935: comm syz.3.463: Failed to acquire dquot type 1 [ 82.592187][ T5072] EXT4-fs (loop3): 1 truncate cleaned up [ 82.639933][ T5072] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 82.681026][ T5078] netlink: 244 bytes leftover after parsing attributes in process `syz.0.467'. [ 82.787592][ T5072] sg_write: data in/out 209152/1 bytes for SCSI command 0xf2-- guessing data in; [ 82.787592][ T5072] program syz.3.463 not setting count and/or reply_len properly [ 82.905794][ T5078] loop0: detected capacity change from 0 to 512 [ 82.955660][ T5078] EXT4-fs: Ignoring removed i_version option [ 82.966300][ T5078] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 83.004267][ T5078] EXT4-fs (loop0): 1 truncate cleaned up [ 83.023967][ T5078] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 83.076868][ T5092] siw: device registration error -23 [ 83.414165][ T5101] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 83.438643][ T5101] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 83.856556][ T5107] 9pnet_virtio: no channels available for device 127.0.0.1 [ 84.070574][ T5112] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(9) [ 84.077137][ T5112] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 84.084691][ T5112] vhci_hcd vhci_hcd.0: Device attached [ 84.092379][ T5112] vhci_hcd vhci_hcd.0: pdev(4) rhport(1) sockfd(11) [ 84.099093][ T5112] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 84.106744][ T5112] vhci_hcd vhci_hcd.0: Device attached [ 84.143843][ T5112] vhci_hcd vhci_hcd.0: pdev(4) rhport(2) sockfd(13) [ 84.150842][ T5112] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 84.158510][ T5112] vhci_hcd vhci_hcd.0: Device attached [ 84.195291][ T5112] vhci_hcd vhci_hcd.0: pdev(4) rhport(3) sockfd(15) [ 84.195356][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.201912][ T5112] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 84.202022][ T5112] vhci_hcd vhci_hcd.0: Device attached [ 84.242408][ T5112] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 84.258233][ T5112] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 84.287591][ T5112] vhci_hcd vhci_hcd.0: pdev(4) rhport(6) sockfd(21) [ 84.294217][ T5112] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 84.301867][ T5112] vhci_hcd vhci_hcd.0: Device attached [ 84.309627][ T29] kauditd_printk_skb: 312 callbacks suppressed [ 84.309644][ T29] audit: type=1400 audit(1745088536.635:2335): avc: denied { read write } for pid=5125 comm="syz.0.481" name="sg0" dev="devtmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 84.312915][ T5126] loop0: detected capacity change from 0 to 512 [ 84.315858][ T29] audit: type=1400 audit(1745088536.635:2336): avc: denied { open } for pid=5125 comm="syz.0.481" path="/dev/sg0" dev="devtmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 84.370434][ T5126] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 84.385178][ T5112] vhci_hcd vhci_hcd.0: pdev(4) rhport(7) sockfd(24) [ 84.391815][ T5112] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 84.399326][ T5112] vhci_hcd vhci_hcd.0: Device attached [ 84.406442][ T29] audit: type=1400 audit(1745088536.725:2337): avc: denied { execute } for pid=5110 comm="syz.4.478" path="/98/cpu.stat" dev="tmpfs" ino=535 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 84.406765][ T5130] vhci_hcd: connection closed [ 84.431172][ T5126] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842e12c, mo2=0002] [ 84.432188][ T5116] vhci_hcd: connection closed [ 84.436013][ T5127] vhci_hcd: connection closed [ 84.444565][ T1291] vhci_hcd: stop threads [ 84.449309][ T5119] vhci_hcd: connection closed [ 84.453299][ T1291] vhci_hcd: release socket [ 84.453316][ T1291] vhci_hcd: disconnect device [ 84.472146][ T5121] vhci_hcd: connection closed [ 84.472352][ T1291] vhci_hcd: stop threads [ 84.481411][ T1291] vhci_hcd: release socket [ 84.485880][ T1291] vhci_hcd: disconnect device [ 84.490999][ T5113] vhci_hcd: connection closed [ 84.491155][ T5126] System zones: 1-12 [ 84.500496][ T5126] EXT4-fs (loop0): orphan cleanup on readonly fs [ 84.509052][ T1291] vhci_hcd: stop threads [ 84.513319][ T1291] vhci_hcd: release socket [ 84.517778][ T1291] vhci_hcd: disconnect device [ 84.523114][ T5126] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.481: bg 0: block 361: padding at end of block bitmap is not set [ 84.539903][ T1291] vhci_hcd: stop threads [ 84.544242][ T1291] vhci_hcd: release socket [ 84.548812][ T1291] vhci_hcd: disconnect device [ 84.554089][ T1291] vhci_hcd: stop threads [ 84.558426][ T1291] vhci_hcd: release socket [ 84.562853][ T1291] vhci_hcd: disconnect device [ 84.569272][ T5126] EXT4-fs (loop0): Remounting filesystem read-only [ 84.576069][ T5126] EXT4-fs (loop0): 1 truncate cleaned up [ 84.584365][ T1291] vhci_hcd: stop threads [ 84.588673][ T1291] vhci_hcd: release socket [ 84.593137][ T1291] vhci_hcd: disconnect device [ 84.599691][ T5126] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 84.618155][ T5126] netlink: 4 bytes leftover after parsing attributes in process `syz.0.481'. [ 84.640912][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 84.729495][ T5136] siw: device registration error -23 [ 84.756700][ T29] audit: type=1400 audit(1745088537.075:2338): avc: denied { append } for pid=5141 comm="syz.2.485" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 84.781023][ T29] audit: type=1400 audit(1745088537.075:2339): avc: denied { open } for pid=5141 comm="syz.2.485" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 84.806330][ T29] audit: type=1400 audit(1745088537.085:2340): avc: denied { create } for pid=5141 comm="syz.2.485" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 84.825734][ T29] audit: type=1400 audit(1745088537.085:2341): avc: denied { ioctl } for pid=5141 comm="syz.2.485" path="socket:[8982]" dev="sockfs" ino=8982 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 84.850261][ T29] audit: type=1400 audit(1745088537.085:2342): avc: denied { bind } for pid=5141 comm="syz.2.485" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 84.869544][ T29] audit: type=1400 audit(1745088537.085:2343): avc: denied { write } for pid=5141 comm="syz.2.485" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 84.888809][ T29] audit: type=1400 audit(1745088537.085:2344): avc: denied { read } for pid=5141 comm="syz.2.485" name="usbmon7" dev="devtmpfs" ino=163 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 84.926049][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.012985][ T5146] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 85.038371][ T5146] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 85.049168][ T5154] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 85.057960][ T5154] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 85.061871][ T5153] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(10) [ 85.072333][ T5153] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 85.079873][ T5153] vhci_hcd vhci_hcd.0: Device attached [ 85.088560][ T5153] vhci_hcd vhci_hcd.0: pdev(4) rhport(1) sockfd(12) [ 85.095195][ T5153] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 85.102755][ T5153] vhci_hcd vhci_hcd.0: Device attached [ 85.109373][ T5153] vhci_hcd vhci_hcd.0: pdev(4) rhport(2) sockfd(14) [ 85.115989][ T5153] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 85.123538][ T5153] vhci_hcd vhci_hcd.0: Device attached [ 85.130574][ T5153] vhci_hcd vhci_hcd.0: pdev(4) rhport(3) sockfd(17) [ 85.137387][ T5153] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 85.145056][ T5153] vhci_hcd vhci_hcd.0: Device attached [ 85.151757][ T5153] vhci_hcd vhci_hcd.0: pdev(4) rhport(4) sockfd(19) [ 85.158385][ T5153] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 85.166030][ T5153] vhci_hcd vhci_hcd.0: Device attached [ 85.172403][ T5153] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 85.181152][ T5153] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 85.189780][ T5153] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 85.199136][ T5153] vhci_hcd vhci_hcd.0: port 0 already used [ 85.213225][ T5165] vhci_hcd: connection closed [ 85.213476][ T5163] vhci_hcd: connection closed [ 85.213544][ T1291] vhci_hcd: stop threads [ 85.223525][ T5156] vhci_hcd: connection closed [ 85.227285][ T1291] vhci_hcd: release socket [ 85.227308][ T1291] vhci_hcd: disconnect device [ 85.232315][ T5161] vhci_hcd: connection closed [ 85.236855][ T5158] vhci_hcd: connection closed [ 85.243632][ T1291] vhci_hcd: stop threads [ 85.255028][ T1291] vhci_hcd: release socket [ 85.259596][ T1291] vhci_hcd: disconnect device [ 85.264847][ T1291] vhci_hcd: stop threads [ 85.269340][ T1291] vhci_hcd: release socket [ 85.273910][ T1291] vhci_hcd: disconnect device [ 85.279051][ T1291] vhci_hcd: stop threads [ 85.283388][ T1291] vhci_hcd: release socket [ 85.287958][ T1291] vhci_hcd: disconnect device [ 85.292856][ T1291] vhci_hcd: stop threads [ 85.297336][ T1291] vhci_hcd: release socket [ 85.301777][ T1291] vhci_hcd: disconnect device [ 85.584948][ T5172] netlink: 244 bytes leftover after parsing attributes in process `syz.0.491'. [ 85.700487][ T5179] loop3: detected capacity change from 0 to 1024 [ 85.709526][ T5179] EXT4-fs: Ignoring removed orlov option [ 85.718359][ T5176] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 85.737594][ T5176] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 85.756950][ T5179] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 85.777872][ T10] usb 9-1: enqueue for inactive port 0 [ 85.787207][ T10] usb 9-1: enqueue for inactive port 0 [ 85.853676][ T5186] serio: Serial port ptm0 [ 85.927003][ T10] vhci_hcd: vhci_device speed not set [ 85.987320][ T5172] loop0: detected capacity change from 0 to 512 [ 86.012755][ T5172] EXT4-fs: Ignoring removed i_version option [ 86.027846][ T5172] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 86.047901][ T5190] loop4: detected capacity change from 0 to 512 [ 86.333091][ T5190] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 86.403128][ T5190] EXT4-fs (loop4): orphan cleanup on readonly fs [ 86.415351][ T5172] EXT4-fs (loop0): 1 truncate cleaned up [ 86.433843][ T5190] EXT4-fs error (device loop4): ext4_acquire_dquot:6935: comm syz.4.496: Failed to acquire dquot type 1 [ 86.476381][ T5172] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 86.494318][ T5190] EXT4-fs (loop4): 1 truncate cleaned up [ 86.519104][ T5190] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 86.593924][ T5190] sg_write: data in/out 209152/1 bytes for SCSI command 0xf2-- guessing data in; [ 86.593924][ T5190] program syz.4.496 not setting count and/or reply_len properly [ 86.654945][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.731380][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.273746][ T5215] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 87.282376][ T5215] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 87.575970][ T5223] netlink: 8 bytes leftover after parsing attributes in process `syz.2.506'. [ 87.585457][ T5223] netlink: 'syz.2.506': attribute type 3 has an invalid length. [ 87.593192][ T5223] netlink: 'syz.2.506': attribute type 4 has an invalid length. [ 87.600890][ T5223] netlink: 16 bytes leftover after parsing attributes in process `syz.2.506'. [ 87.615656][ T5223] 9pnet_fd: Insufficient options for proto=fd [ 87.820128][ T5230] loop2: detected capacity change from 0 to 1024 [ 87.827573][ T5230] EXT4-fs: Ignoring removed orlov option [ 87.842012][ T5230] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 88.045720][ T5240] loop4: detected capacity change from 0 to 512 [ 88.057186][ T5240] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 88.115671][ T5240] EXT4-fs (loop4): orphan cleanup on readonly fs [ 88.229115][ T5240] EXT4-fs error (device loop4): ext4_acquire_dquot:6935: comm syz.4.510: Failed to acquire dquot type 1 [ 88.240499][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.291161][ T5240] EXT4-fs (loop4): 1 truncate cleaned up [ 88.325388][ T5240] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 88.417184][ T5249] netlink: 120 bytes leftover after parsing attributes in process `syz.0.514'. [ 88.437012][ T5240] sg_write: data in/out 209152/1 bytes for SCSI command 0xf2-- guessing data in; [ 88.437012][ T5240] program syz.4.510 not setting count and/or reply_len properly [ 88.449682][ T5250] siw: device registration error -23 [ 88.463982][ T5249] 9pnet_fd: Insufficient options for proto=fd [ 88.683061][ T5257] serio: Serial port ptm0 [ 88.700363][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.352360][ T5264] netlink: 8 bytes leftover after parsing attributes in process `syz.3.519'. [ 89.361323][ T5264] netlink: 'syz.3.519': attribute type 3 has an invalid length. [ 89.369090][ T5264] netlink: 'syz.3.519': attribute type 4 has an invalid length. [ 89.376776][ T5264] netlink: 16 bytes leftover after parsing attributes in process `syz.3.519'. [ 89.430244][ T5264] 9pnet_fd: Insufficient options for proto=fd [ 89.605790][ T29] kauditd_printk_skb: 76 callbacks suppressed [ 89.605805][ T29] audit: type=1400 audit(1745088541.925:2417): avc: denied { create } for pid=5265 comm="syz.2.517" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 89.649869][ T5266] loop2: detected capacity change from 0 to 1024 [ 89.702138][ T5266] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 89.736150][ T29] audit: type=1400 audit(1745088542.055:2418): avc: denied { read } for pid=5265 comm="syz.2.517" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 89.822167][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.843948][ T29] audit: type=1400 audit(1745088542.085:2419): avc: denied { open } for pid=5265 comm="syz.2.517" path="/dev/autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 89.868416][ T29] audit: type=1326 audit(1745088542.095:2420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5259 comm="syz.0.518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe27fbde169 code=0x7fc00000 [ 89.891813][ T29] audit: type=1326 audit(1745088542.095:2421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5259 comm="syz.0.518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe27fbde169 code=0x7fc00000 [ 89.915661][ T29] audit: type=1326 audit(1745088542.095:2422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5259 comm="syz.0.518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe27fbde169 code=0x7fc00000 [ 89.940434][ T29] audit: type=1326 audit(1745088542.095:2423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5259 comm="syz.0.518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe27fbde169 code=0x7fc00000 [ 89.963843][ T29] audit: type=1326 audit(1745088542.095:2424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5259 comm="syz.0.518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe27fbde169 code=0x7fc00000 [ 89.987515][ T29] audit: type=1326 audit(1745088542.095:2425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5259 comm="syz.0.518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe27fbde169 code=0x7fc00000 [ 90.011211][ T29] audit: type=1326 audit(1745088542.095:2426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5259 comm="syz.0.518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe27fbde169 code=0x7fc00000 [ 90.099560][ T5275] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(10) [ 90.106552][ T5275] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 90.114369][ T5275] vhci_hcd vhci_hcd.0: Device attached [ 90.150360][ T5280] loop2: detected capacity change from 0 to 1024 [ 90.176049][ T5272] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(10) [ 90.182709][ T5272] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 90.188538][ T5287] netlink: 244 bytes leftover after parsing attributes in process `syz.1.526'. [ 90.190262][ T5272] vhci_hcd vhci_hcd.0: Device attached [ 90.207935][ T5286] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(12) [ 90.214625][ T5286] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 90.222384][ T5286] vhci_hcd vhci_hcd.0: Device attached [ 90.247495][ T5280] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 90.261359][ T5292] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(12) [ 90.268129][ T5292] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 90.275741][ T5292] vhci_hcd vhci_hcd.0: Device attached [ 90.281893][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.288290][ T5275] vhci_hcd vhci_hcd.0: pdev(3) rhport(2) sockfd(15) [ 90.297656][ T5275] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 90.305182][ T5275] vhci_hcd vhci_hcd.0: Device attached [ 90.310899][ T10] vhci_hcd: vhci_device speed not set [ 90.325578][ T5272] vhci_hcd vhci_hcd.0: pdev(0) rhport(2) sockfd(14) [ 90.332241][ T5272] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 90.334765][ T5275] vhci_hcd vhci_hcd.0: pdev(3) rhport(3) sockfd(17) [ 90.339846][ T5272] vhci_hcd vhci_hcd.0: Device attached [ 90.346340][ T5275] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 90.359541][ T5275] vhci_hcd vhci_hcd.0: Device attached [ 90.376703][ T10] usb 7-1: new full-speed USB device number 4 using vhci_hcd [ 90.387171][ T3794] vhci_hcd: vhci_device speed not set [ 90.398111][ T5286] vhci_hcd vhci_hcd.0: pdev(3) rhport(4) sockfd(20) [ 90.404748][ T5286] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 90.412541][ T5286] vhci_hcd vhci_hcd.0: Device attached [ 90.422139][ T5272] vhci_hcd vhci_hcd.0: pdev(0) rhport(3) sockfd(17) [ 90.428784][ T5272] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 90.436543][ T5272] vhci_hcd vhci_hcd.0: Device attached [ 90.460777][ T3794] usb 1-1: new full-speed USB device number 2 using vhci_hcd [ 90.463318][ T5275] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 90.491045][ T5292] vhci_hcd vhci_hcd.0: pdev(0) rhport(4) sockfd(20) [ 90.497687][ T5292] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 90.499622][ T5275] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 90.505416][ T5292] vhci_hcd vhci_hcd.0: Device attached [ 90.544175][ T5275] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 90.562237][ T5272] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 90.574609][ T5287] loop1: detected capacity change from 0 to 512 [ 90.580482][ T5272] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 90.590743][ T5275] vhci_hcd vhci_hcd.0: port 0 already used [ 90.598019][ T5272] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 90.609023][ T5287] EXT4-fs: Ignoring removed i_version option [ 90.619017][ T5272] vhci_hcd vhci_hcd.0: port 0 already used [ 90.626163][ T5304] vhci_hcd: connection closed [ 90.626391][ T5299] vhci_hcd: connection closed [ 90.629979][ T5287] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 90.631197][ T31] vhci_hcd: stop threads [ 90.631243][ T31] vhci_hcd: release socket [ 90.631258][ T31] vhci_hcd: disconnect device [ 90.631418][ T31] vhci_hcd: stop threads [ 90.637701][ T5295] vhci_hcd: connection closed [ 90.645920][ T31] vhci_hcd: release socket [ 90.652760][ T5297] vhci_hcd: connection closed [ 90.654531][ T31] vhci_hcd: disconnect device [ 90.654570][ T5306] vhci_hcd: connection closed [ 90.659433][ T5309] vhci_hcd: connection closed [ 90.691288][ T5277] vhci_hcd: connection reset by peer [ 90.701398][ T5288] vhci_hcd: connection closed [ 90.711182][ T5293] vhci_hcd: connection closed [ 90.711348][ T5283] vhci_hcd: connection reset by peer [ 90.731800][ T5287] EXT4-fs (loop1): 1 truncate cleaned up [ 90.736822][ T31] vhci_hcd: stop threads [ 90.741934][ T31] vhci_hcd: release socket [ 90.746381][ T31] vhci_hcd: disconnect device [ 90.751231][ T5287] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 90.756771][ T31] vhci_hcd: stop threads [ 90.768506][ T31] vhci_hcd: release socket [ 90.773009][ T31] vhci_hcd: disconnect device [ 90.799952][ T31] vhci_hcd: stop threads [ 90.804245][ T31] vhci_hcd: release socket [ 90.808814][ T31] vhci_hcd: disconnect device [ 90.831345][ T31] vhci_hcd: stop threads [ 90.835647][ T31] vhci_hcd: release socket [ 90.840125][ T31] vhci_hcd: disconnect device [ 90.854905][ T31] vhci_hcd: stop threads [ 90.859310][ T31] vhci_hcd: release socket [ 90.863770][ T31] vhci_hcd: disconnect device [ 90.884581][ T31] vhci_hcd: stop threads [ 90.889029][ T31] vhci_hcd: release socket [ 90.893649][ T31] vhci_hcd: disconnect device [ 90.914125][ T31] vhci_hcd: stop threads [ 90.918478][ T31] vhci_hcd: release socket [ 90.923009][ T31] vhci_hcd: disconnect device [ 90.931786][ T31] vhci_hcd: stop threads [ 90.936146][ T31] vhci_hcd: release socket [ 90.940623][ T31] vhci_hcd: disconnect device [ 91.263959][ T5317] loop2: detected capacity change from 0 to 1024 [ 91.280196][ T5321] netlink: 244 bytes leftover after parsing attributes in process `syz.3.529'. [ 91.298835][ T5317] EXT4-fs: Ignoring removed orlov option [ 91.338986][ T5319] netlink: 8 bytes leftover after parsing attributes in process `syz.0.530'. [ 91.355107][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.374869][ T5317] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 91.392881][ T5324] netlink: 8 bytes leftover after parsing attributes in process `syz.0.530'. [ 91.393935][ T5319] veth0_to_bond: entered allmulticast mode [ 91.556758][ T5330] serio: Serial port ptm0 [ 91.793345][ T5336] 9pnet_virtio: no channels available for device 127.0.0.1 [ 92.092397][ T5321] loop3: detected capacity change from 0 to 512 [ 92.188154][ T5321] EXT4-fs: Ignoring removed i_version option [ 92.200357][ T5340] netlink: 8 bytes leftover after parsing attributes in process `syz.0.534'. [ 92.209412][ T5340] netlink: 'syz.0.534': attribute type 3 has an invalid length. [ 92.217290][ T5340] netlink: 'syz.0.534': attribute type 4 has an invalid length. [ 92.225019][ T5340] netlink: 16 bytes leftover after parsing attributes in process `syz.0.534'. [ 92.265866][ T5321] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 92.392719][ T5321] EXT4-fs (loop3): 1 truncate cleaned up [ 92.399872][ T5342] 9pnet_fd: Insufficient options for proto=fd [ 92.424354][ T5321] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 92.532313][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.964608][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.020286][ T5356] loop0: detected capacity change from 0 to 1024 [ 93.046749][ T5356] EXT4-fs: Ignoring removed orlov option [ 93.062775][ T5354] siw: device registration error -23 [ 93.091469][ T5356] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 93.317567][ T5365] 9pnet_virtio: no channels available for device 127.0.0.1 [ 93.434883][ T5372] loop2: detected capacity change from 0 to 512 [ 93.495964][ T5372] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 93.689067][ T5372] EXT4-fs (loop2): orphan cleanup on readonly fs [ 93.752274][ T5372] EXT4-fs error (device loop2): ext4_acquire_dquot:6935: comm syz.2.541: Failed to acquire dquot type 1 [ 93.768320][ T5381] loop4: detected capacity change from 0 to 512 [ 93.775842][ T5381] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 93.788126][ T5381] EXT4-fs (loop4): orphan cleanup on readonly fs [ 93.810489][ T5381] EXT4-fs error (device loop4): ext4_acquire_dquot:6935: comm syz.4.546: Failed to acquire dquot type 1 [ 93.828759][ T5381] EXT4-fs (loop4): 1 truncate cleaned up [ 93.837719][ T5381] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 93.859751][ T5372] EXT4-fs (loop2): 1 truncate cleaned up [ 93.865725][ T5381] serio: Serial port ptm0 [ 93.892690][ T5372] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 93.987972][ T5368] sg_write: data in/out 209152/1 bytes for SCSI command 0xf2-- guessing data in; [ 93.987972][ T5368] program syz.2.541 not setting count and/or reply_len properly [ 94.189348][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.307207][ T5388] netlink: 8 bytes leftover after parsing attributes in process `syz.0.548'. [ 94.316084][ T5388] netlink: 'syz.0.548': attribute type 3 has an invalid length. [ 94.323791][ T5388] netlink: 'syz.0.548': attribute type 4 has an invalid length. [ 94.331647][ T5388] netlink: 16 bytes leftover after parsing attributes in process `syz.0.548'. [ 94.344232][ T5388] 9pnet_fd: Insufficient options for proto=fd [ 94.468842][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.541623][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.606434][ T5403] loop1: detected capacity change from 0 to 512 [ 94.618533][ T5403] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 94.669334][ T5403] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842e12c, mo2=0002] [ 94.693346][ T5403] System zones: 1-12 [ 94.697525][ T5403] EXT4-fs (loop1): orphan cleanup on readonly fs [ 94.703917][ T29] kauditd_printk_skb: 210 callbacks suppressed [ 94.703964][ T29] audit: type=1326 audit(1745088547.025:2633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5409 comm="syz.0.555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe27fbde169 code=0x7ffc0000 [ 94.733527][ T29] audit: type=1326 audit(1745088547.025:2634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5409 comm="syz.0.555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fe27fbde169 code=0x7ffc0000 [ 94.756842][ T29] audit: type=1326 audit(1745088547.025:2635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5409 comm="syz.0.555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe27fbde169 code=0x7ffc0000 [ 94.758392][ T5403] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.553: bg 0: block 361: padding at end of block bitmap is not set [ 94.780180][ T29] audit: type=1326 audit(1745088547.025:2636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5409 comm="syz.0.555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe27fbde169 code=0x7ffc0000 [ 94.780226][ T29] audit: type=1326 audit(1745088547.075:2637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5396 comm="syz.3.550" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c4f1ae169 code=0x7fc00000 [ 94.855184][ T5403] EXT4-fs (loop1): Remounting filesystem read-only [ 94.873266][ T5403] EXT4-fs (loop1): 1 truncate cleaned up [ 94.894605][ T29] audit: type=1400 audit(1745088547.215:2638): avc: denied { append } for pid=2987 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=7 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 94.925045][ T5403] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 94.938159][ T29] audit: type=1400 audit(1745088547.225:2639): avc: denied { read write } for pid=3307 comm="syz-executor" name="loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 94.962448][ T29] audit: type=1400 audit(1745088547.225:2640): avc: denied { open } for pid=3307 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 94.986687][ T29] audit: type=1400 audit(1745088547.225:2641): avc: denied { ioctl } for pid=3307 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=100 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 95.012434][ T29] audit: type=1400 audit(1745088547.245:2642): avc: denied { map_create } for pid=5415 comm="syz.0.557" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 95.059545][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 95.107953][ T5421] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 95.114561][ T5421] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 95.122128][ T5421] vhci_hcd vhci_hcd.0: Device attached [ 95.131222][ T5421] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(10) [ 95.137882][ T5421] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 95.145374][ T5421] vhci_hcd vhci_hcd.0: Device attached [ 95.151888][ T5421] vhci_hcd vhci_hcd.0: pdev(0) rhport(2) sockfd(12) [ 95.158515][ T5421] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 95.166261][ T5421] vhci_hcd vhci_hcd.0: Device attached [ 95.177943][ T5421] vhci_hcd vhci_hcd.0: pdev(0) rhport(3) sockfd(14) [ 95.184612][ T5421] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 95.192257][ T5421] vhci_hcd vhci_hcd.0: Device attached [ 95.199986][ T5421] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 95.209431][ T5421] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 95.219550][ T5421] vhci_hcd vhci_hcd.0: pdev(0) rhport(6) sockfd(20) [ 95.226180][ T5421] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 95.233891][ T5421] vhci_hcd vhci_hcd.0: Device attached [ 95.241036][ T5421] vhci_hcd vhci_hcd.0: pdev(0) rhport(7) sockfd(23) [ 95.247665][ T5421] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 95.255156][ T5421] vhci_hcd vhci_hcd.0: Device attached [ 95.261984][ T5435] vhci_hcd: connection closed [ 95.262110][ T38] vhci_hcd: stop threads [ 95.262179][ T5433] vhci_hcd: connection closed [ 95.266881][ T38] vhci_hcd: release socket [ 95.280407][ T38] vhci_hcd: disconnect device [ 95.287500][ T5426] vhci_hcd: connection closed [ 95.287659][ T5424] vhci_hcd: connection closed [ 95.288499][ T5428] vhci_hcd: connection closed [ 95.292548][ T5431] vhci_hcd: connection closed [ 95.303171][ T38] vhci_hcd: stop threads [ 95.312163][ T38] vhci_hcd: release socket [ 95.316723][ T38] vhci_hcd: disconnect device [ 95.322533][ T38] vhci_hcd: stop threads [ 95.326881][ T38] vhci_hcd: release socket [ 95.331312][ T38] vhci_hcd: disconnect device [ 95.336371][ T38] vhci_hcd: stop threads [ 95.340684][ T38] vhci_hcd: release socket [ 95.345122][ T38] vhci_hcd: disconnect device [ 95.350513][ T38] vhci_hcd: stop threads [ 95.354783][ T38] vhci_hcd: release socket [ 95.359266][ T38] vhci_hcd: disconnect device [ 95.371952][ T38] vhci_hcd: stop threads [ 95.376458][ T38] vhci_hcd: release socket [ 95.380958][ T38] vhci_hcd: disconnect device [ 95.393530][ T5438] 9pnet_virtio: no channels available for device 127.0.0.1 [ 95.456865][ T10] usb 7-1: enqueue for inactive port 0 [ 95.462510][ T10] usb 7-1: enqueue for inactive port 0 [ 95.478379][ T5441] loop4: detected capacity change from 0 to 512 [ 95.485598][ T5441] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 95.508815][ T5441] EXT4-fs (loop4): orphan cleanup on readonly fs [ 95.515696][ T5441] EXT4-fs error (device loop4): ext4_acquire_dquot:6935: comm syz.4.561: Failed to acquire dquot type 1 [ 95.528712][ T5441] EXT4-fs (loop4): 1 truncate cleaned up [ 95.535000][ T5441] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 95.536766][ T10] vhci_hcd: vhci_device speed not set [ 95.553437][ T3794] usb 1-1: enqueue for inactive port 0 [ 95.565600][ T3794] usb 1-1: enqueue for inactive port 0 [ 95.571789][ T5441] serio: Serial port ptm0 [ 95.636714][ T3794] vhci_hcd: vhci_device speed not set [ 95.720867][ T5445] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(10) [ 95.727548][ T5445] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 95.735040][ T5445] vhci_hcd vhci_hcd.0: Device attached [ 95.744718][ T5445] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(12) [ 95.751344][ T5445] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 95.759196][ T5445] vhci_hcd vhci_hcd.0: Device attached [ 95.770760][ T5445] vhci_hcd vhci_hcd.0: pdev(3) rhport(2) sockfd(14) [ 95.777415][ T5445] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 95.784994][ T5445] vhci_hcd vhci_hcd.0: Device attached [ 95.794725][ T5445] vhci_hcd vhci_hcd.0: pdev(3) rhport(3) sockfd(17) [ 95.801367][ T5445] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 95.809071][ T5445] vhci_hcd vhci_hcd.0: Device attached [ 95.842179][ T5445] vhci_hcd vhci_hcd.0: pdev(3) rhport(4) sockfd(19) [ 95.848828][ T5445] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 95.856547][ T5445] vhci_hcd vhci_hcd.0: Device attached [ 95.872948][ T5445] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 95.883455][ T5445] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 95.907287][ T5445] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 95.925262][ T5445] vhci_hcd vhci_hcd.0: port 0 already used [ 95.933798][ T5455] vhci_hcd: connection closed [ 95.933914][ T12] vhci_hcd: stop threads [ 95.935102][ T5446] vhci_hcd: connection closed [ 95.938687][ T12] vhci_hcd: release socket [ 95.938704][ T12] vhci_hcd: disconnect device [ 95.957077][ T5452] vhci_hcd: connection closed [ 95.966599][ T5450] vhci_hcd: connection closed [ 95.966801][ T5448] vhci_hcd: connection closed [ 95.994969][ T12] vhci_hcd: stop threads [ 96.004060][ T12] vhci_hcd: release socket [ 96.008554][ T12] vhci_hcd: disconnect device [ 96.022888][ T12] vhci_hcd: stop threads [ 96.027219][ T12] vhci_hcd: release socket [ 96.032198][ T12] vhci_hcd: disconnect device [ 96.045695][ T10] vhci_hcd: vhci_device speed not set [ 96.052588][ T12] vhci_hcd: stop threads [ 96.056942][ T12] vhci_hcd: release socket [ 96.061400][ T12] vhci_hcd: disconnect device [ 96.066926][ T5468] netlink: 32 bytes leftover after parsing attributes in process `syz.1.566'. [ 96.101675][ T12] vhci_hcd: stop threads [ 96.106008][ T12] vhci_hcd: release socket [ 96.110499][ T12] vhci_hcd: disconnect device [ 96.149811][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.182755][ T5474] loop0: detected capacity change from 0 to 512 [ 96.204343][ T5474] EXT4-fs (loop0): 1 orphan inode deleted [ 96.211140][ T5474] ext4 filesystem being mounted at /120/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 96.223769][ T38] EXT4-fs error (device loop0): ext4_release_dquot:6971: comm kworker/u8:2: Failed to release dquot type 1 [ 96.294973][ T5486] serio: Serial port ptm0 [ 97.224617][ T5500] loop2: detected capacity change from 0 to 1024 [ 97.238779][ T5500] EXT4-fs: Ignoring removed orlov option [ 97.256033][ T5503] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 97.322027][ T5503] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 97.583082][ T5511] loop0: detected capacity change from 0 to 1024 [ 97.852712][ T5518] loop3: detected capacity change from 0 to 512 [ 97.905556][ T5518] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 97.973378][ T5518] EXT4-fs (loop3): orphan cleanup on readonly fs [ 98.020315][ T5518] EXT4-fs error (device loop3): ext4_acquire_dquot:6935: comm syz.3.580: Failed to acquire dquot type 1 [ 98.091226][ T5518] EXT4-fs (loop3): 1 truncate cleaned up [ 98.208042][ T5518] sg_write: data in/out 209152/1 bytes for SCSI command 0xf2-- guessing data in; [ 98.208042][ T5518] program syz.3.580 not setting count and/or reply_len properly [ 98.254997][ T5526] 9pnet_virtio: no channels available for device 127.0.0.1 [ 98.288185][ T5528] 9pnet_virtio: no channels available for device 127.0.0.1 [ 98.420399][ T5536] 9pnet_virtio: no channels available for device 127.0.0.1 [ 98.479803][ T5538] 9pnet_virtio: no channels available for device 127.0.0.1 [ 98.491045][ T5540] loop2: detected capacity change from 0 to 512 [ 98.541002][ T5540] EXT4-fs (loop2): 1 orphan inode deleted [ 98.559157][ T31] EXT4-fs error (device loop2): ext4_release_dquot:6971: comm kworker/u8:1: Failed to release dquot type 1 [ 98.581197][ T5540] ext4 filesystem being mounted at /106/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 98.802910][ T5555] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 98.811339][ T5556] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 98.819149][ T5555] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 98.836379][ T5556] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 98.915325][ T5562] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 98.935342][ T5562] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 99.508648][ T5568] netlink: 8 bytes leftover after parsing attributes in process `syz.4.596'. [ 99.517522][ T5568] netlink: 'syz.4.596': attribute type 2 has an invalid length. [ 99.525217][ T5568] netlink: 16 bytes leftover after parsing attributes in process `syz.4.596'. [ 99.574668][ T5568] 9pnet_fd: Insufficient options for proto=fd [ 99.615124][ T5573] loop2: detected capacity change from 0 to 512 [ 99.637867][ T5573] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 99.671529][ T5573] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842e12c, mo2=0002] [ 99.690721][ T5573] System zones: 1-12 [ 99.694778][ T5573] EXT4-fs (loop2): orphan cleanup on readonly fs [ 99.716289][ T5573] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.598: bg 0: block 361: padding at end of block bitmap is not set [ 99.737000][ T5573] EXT4-fs (loop2): Remounting filesystem read-only [ 99.752486][ T5573] EXT4-fs (loop2): 1 truncate cleaned up [ 99.778878][ T5573] EXT4-fs mount: 10 callbacks suppressed [ 99.778973][ T5573] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 99.805685][ T5573] netlink: 52 bytes leftover after parsing attributes in process `syz.2.598'. [ 99.827662][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 99.868907][ T5583] 9pnet_virtio: no channels available for device 127.0.0.1 [ 99.876217][ T29] kauditd_printk_skb: 320 callbacks suppressed [ 99.876229][ T29] audit: type=1400 audit(1745088552.195:2957): avc: denied { create } for pid=5580 comm="syz.4.601" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 99.900110][ T5581] netlink: 8 bytes leftover after parsing attributes in process `syz.4.601'. [ 99.930575][ T5581] veth0_to_bond: entered allmulticast mode [ 99.952741][ T5584] netlink: 8 bytes leftover after parsing attributes in process `syz.4.601'. [ 99.972728][ T29] audit: type=1326 audit(1745088552.295:2958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5582 comm="syz.2.600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc85f75e169 code=0x7ffc0000 [ 99.996181][ T29] audit: type=1326 audit(1745088552.295:2959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5582 comm="syz.2.600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc85f75e169 code=0x7ffc0000 [ 100.035431][ T29] audit: type=1326 audit(1745088552.345:2960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5582 comm="syz.2.600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7fc85f75e169 code=0x7ffc0000 [ 100.058888][ T29] audit: type=1326 audit(1745088552.345:2961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5582 comm="syz.2.600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc85f75e169 code=0x7ffc0000 [ 100.082682][ T29] audit: type=1326 audit(1745088552.345:2962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5582 comm="syz.2.600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc85f75e169 code=0x7ffc0000 [ 100.106091][ T29] audit: type=1326 audit(1745088552.345:2963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5582 comm="syz.2.600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=432 compat=0 ip=0x7fc85f75e169 code=0x7ffc0000 [ 100.129445][ T29] audit: type=1326 audit(1745088552.345:2964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5582 comm="syz.2.600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc85f75e169 code=0x7ffc0000 [ 100.153340][ T29] audit: type=1326 audit(1745088552.345:2965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5582 comm="syz.2.600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc85f75e169 code=0x7ffc0000 [ 100.177044][ T29] audit: type=1326 audit(1745088552.345:2966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5582 comm="syz.2.600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc85f75e169 code=0x7ffc0000 [ 100.272408][ T5590] netlink: 8 bytes leftover after parsing attributes in process `syz.2.603'. [ 100.293210][ T5592] loop4: detected capacity change from 0 to 1024 [ 100.319882][ T5590] veth0_to_bond: entered allmulticast mode [ 100.351380][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.366082][ T5590] netlink: 8 bytes leftover after parsing attributes in process `syz.2.603'. [ 100.401645][ T5592] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 100.426874][ T5599] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 100.435450][ T5599] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 100.457156][ T5602] loop0: detected capacity change from 0 to 512 [ 100.510716][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.540283][ T5602] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 100.550586][ T5607] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 100.576411][ T5609] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(10) [ 100.583118][ T5609] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 100.590672][ T5609] vhci_hcd vhci_hcd.0: Device attached [ 100.596993][ T5607] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 100.610613][ T5602] EXT4-fs (loop0): orphan cleanup on readonly fs [ 100.623804][ T5609] vhci_hcd vhci_hcd.0: pdev(2) rhport(1) sockfd(12) [ 100.630529][ T5609] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 100.638087][ T5609] vhci_hcd vhci_hcd.0: Device attached [ 100.648073][ T5602] EXT4-fs error (device loop0): ext4_acquire_dquot:6935: comm syz.0.605: Failed to acquire dquot type 1 [ 100.663235][ T5609] vhci_hcd vhci_hcd.0: pdev(2) rhport(2) sockfd(14) [ 100.669887][ T5609] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 100.677348][ T5609] vhci_hcd vhci_hcd.0: Device attached [ 100.685711][ T5602] EXT4-fs (loop0): 1 truncate cleaned up [ 100.692054][ T5602] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 100.724435][ T5609] vhci_hcd vhci_hcd.0: pdev(2) rhport(3) sockfd(17) [ 100.731097][ T5609] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 100.738811][ T5609] vhci_hcd vhci_hcd.0: Device attached [ 100.752483][ T5609] vhci_hcd vhci_hcd.0: pdev(2) rhport(4) sockfd(19) [ 100.759126][ T5609] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 100.766898][ T5609] vhci_hcd vhci_hcd.0: Device attached [ 100.774780][ T5602] sg_write: data in/out 209152/1 bytes for SCSI command 0xf2-- guessing data in; [ 100.774780][ T5602] program syz.0.605 not setting count and/or reply_len properly [ 100.793893][ T3794] vhci_hcd: vhci_device speed not set [ 100.806178][ T5612] vhci_hcd: connection closed [ 100.806263][ T5615] vhci_hcd: connection closed [ 100.812830][ T4406] vhci_hcd: stop threads [ 100.816767][ T5618] vhci_hcd: connection closed [ 100.817673][ T4406] vhci_hcd: release socket [ 100.830982][ T4406] vhci_hcd: disconnect device [ 100.836224][ T5622] vhci_hcd: connection closed [ 100.836683][ T5620] vhci_hcd: connection closed [ 100.841645][ T4406] vhci_hcd: stop threads [ 100.850734][ T4406] vhci_hcd: release socket [ 100.855164][ T4406] vhci_hcd: disconnect device [ 100.860168][ T3794] usb 5-1: new full-speed USB device number 4 using vhci_hcd [ 100.868783][ T3794] usb 5-1: enqueue for inactive port 0 [ 100.874282][ T3794] usb 5-1: enqueue for inactive port 0 [ 100.879922][ T3794] usb 5-1: enqueue for inactive port 0 [ 100.885596][ T4406] vhci_hcd: stop threads [ 100.889909][ T4406] vhci_hcd: release socket [ 100.894337][ T4406] vhci_hcd: disconnect device [ 100.899192][ T4406] vhci_hcd: stop threads [ 100.903464][ T4406] vhci_hcd: release socket [ 100.907953][ T4406] vhci_hcd: disconnect device [ 100.913233][ T4406] vhci_hcd: stop threads [ 100.917694][ T4406] vhci_hcd: release socket [ 100.922203][ T4406] vhci_hcd: disconnect device [ 100.946700][ T3794] vhci_hcd: vhci_device speed not set [ 101.052919][ T5625] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(10) [ 101.059583][ T5625] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 101.067077][ T5625] vhci_hcd vhci_hcd.0: Device attached [ 101.074206][ T5625] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(12) [ 101.080869][ T5625] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 101.088433][ T5625] vhci_hcd vhci_hcd.0: Device attached [ 101.097958][ T5625] vhci_hcd vhci_hcd.0: pdev(1) rhport(2) sockfd(14) [ 101.104660][ T5625] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 101.112261][ T5625] vhci_hcd vhci_hcd.0: Device attached [ 101.120990][ T5625] vhci_hcd vhci_hcd.0: pdev(1) rhport(3) sockfd(17) [ 101.127632][ T5625] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 101.135290][ T5625] vhci_hcd vhci_hcd.0: Device attached [ 101.157986][ T5632] vhci_hcd: connection closed [ 101.158049][ T5630] vhci_hcd: connection closed [ 101.158207][ T4406] vhci_hcd: stop threads [ 101.163025][ T5628] vhci_hcd: connection closed [ 101.167477][ T4406] vhci_hcd: release socket [ 101.167488][ T4406] vhci_hcd: disconnect device [ 101.185718][ T5626] vhci_hcd: connection closed [ 101.186185][ T4406] vhci_hcd: stop threads [ 101.195182][ T4406] vhci_hcd: release socket [ 101.199716][ T4406] vhci_hcd: disconnect device [ 101.204747][ T4406] vhci_hcd: stop threads [ 101.209107][ T4406] vhci_hcd: release socket [ 101.213539][ T4406] vhci_hcd: disconnect device [ 101.228700][ T4406] vhci_hcd: stop threads [ 101.233066][ T4406] vhci_hcd: release socket [ 101.237567][ T4406] vhci_hcd: disconnect device [ 101.246765][ T3490] vhci_hcd: vhci_device speed not set [ 101.251314][ T5635] netlink: 8 bytes leftover after parsing attributes in process `syz.3.612'. [ 101.264839][ T5635] veth0_to_bond: entered allmulticast mode [ 101.287868][ T5635] netlink: 8 bytes leftover after parsing attributes in process `syz.3.612'. [ 101.459009][ T5646] netlink: 244 bytes leftover after parsing attributes in process `syz.3.616'. [ 101.510139][ T5647] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 101.530714][ T5647] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 101.720930][ T5646] loop3: detected capacity change from 0 to 512 [ 101.759121][ T5646] EXT4-fs: Ignoring removed i_version option [ 101.780089][ T5646] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 101.806134][ T5646] EXT4-fs (loop3): 1 truncate cleaned up [ 101.818061][ T5646] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 101.920726][ T5655] loop1: detected capacity change from 0 to 1024 [ 101.938829][ T5655] EXT4-fs: Ignoring removed orlov option [ 101.981888][ T5655] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 102.440921][ T5669] loop2: detected capacity change from 0 to 512 [ 102.448224][ T5669] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 102.475061][ T5669] EXT4-fs (loop2): orphan cleanup on readonly fs [ 102.479799][ T5671] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 102.497333][ T5669] EXT4-fs error (device loop2): ext4_acquire_dquot:6935: comm syz.2.622: Failed to acquire dquot type 1 [ 102.509492][ T5671] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 102.527960][ T5669] EXT4-fs (loop2): 1 truncate cleaned up [ 102.537420][ T5669] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 102.560812][ T5669] serio: Serial port ptm0 [ 102.901655][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.070886][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.118432][ T5683] 9pnet_virtio: no channels available for device 127.0.0.1 [ 103.226352][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.229763][ T5686] loop0: detected capacity change from 0 to 1024 [ 103.259429][ T5686] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 103.275751][ T5686] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5686 comm=syz.0.628 [ 103.313768][ T5691] loop2: detected capacity change from 0 to 512 [ 103.321922][ T5691] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 103.335574][ T5691] EXT4-fs (loop2): orphan cleanup on readonly fs [ 103.343228][ T5691] EXT4-fs error (device loop2): ext4_acquire_dquot:6935: comm syz.2.629: Failed to acquire dquot type 1 [ 103.355940][ T5691] EXT4-fs (loop2): 1 truncate cleaned up [ 103.363375][ T5691] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 103.387016][ T5691] serio: Serial port ptm0 [ 103.388747][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.455996][ T5695] loop0: detected capacity change from 0 to 1024 [ 103.490289][ T5695] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 103.510861][ T5702] loop4: detected capacity change from 0 to 1024 [ 103.533899][ T5702] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 103.554818][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.564854][ T5702] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5702 comm=syz.4.632 [ 103.581071][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.617953][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.619000][ T5708] loop0: detected capacity change from 0 to 1024 [ 103.639734][ T5708] EXT4-fs: Ignoring removed orlov option [ 103.653454][ T5708] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 103.831043][ T5721] serio: Serial port ptm1 [ 103.881833][ T5724] loop4: detected capacity change from 0 to 512 [ 103.892163][ T5724] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 103.941884][ T5724] EXT4-fs (loop4): orphan cleanup on readonly fs [ 104.138655][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.151640][ T5724] EXT4-fs error (device loop4): ext4_acquire_dquot:6935: comm syz.4.637: Failed to acquire dquot type 1 [ 104.216929][ T5727] 9pnet_virtio: no channels available for device 127.0.0.1 [ 104.337968][ T5724] EXT4-fs (loop4): 1 truncate cleaned up [ 104.435864][ T5724] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 104.699223][ T5724] sg_write: data in/out 209152/1 bytes for SCSI command 0xf2-- guessing data in; [ 104.699223][ T5724] program syz.4.637 not setting count and/or reply_len properly [ 104.890510][ T5733] netlink: 244 bytes leftover after parsing attributes in process `syz.1.640'. [ 105.290339][ T5733] loop1: detected capacity change from 0 to 512 [ 105.313568][ T5733] EXT4-fs: Ignoring removed i_version option [ 105.662958][ T5733] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 105.685278][ T5735] 9pnet_virtio: no channels available for device 127.0.0.1 [ 105.695538][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.716786][ T5737] 9pnet_virtio: no channels available for device 127.0.0.1 [ 105.775971][ T5733] EXT4-fs (loop1): 1 truncate cleaned up [ 105.785120][ T29] kauditd_printk_skb: 153 callbacks suppressed [ 105.785136][ T29] audit: type=1326 audit(1745088558.105:3112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5734 comm="syz.3.641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c4f1ae169 code=0x7ffc0000 [ 105.814738][ T29] audit: type=1326 audit(1745088558.105:3113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5734 comm="syz.3.641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c4f1ae169 code=0x7ffc0000 [ 105.838149][ T29] audit: type=1326 audit(1745088558.105:3114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5734 comm="syz.3.641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7f1c4f1ae169 code=0x7ffc0000 [ 105.861558][ T29] audit: type=1326 audit(1745088558.105:3115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5734 comm="syz.3.641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c4f1ae169 code=0x7ffc0000 [ 105.885060][ T29] audit: type=1326 audit(1745088558.105:3116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5734 comm="syz.3.641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=432 compat=0 ip=0x7f1c4f1ae169 code=0x7ffc0000 [ 105.908906][ T29] audit: type=1326 audit(1745088558.105:3117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5734 comm="syz.3.641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c4f1ae169 code=0x7ffc0000 [ 105.909462][ T5733] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 105.932316][ T29] audit: type=1326 audit(1745088558.235:3118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5734 comm="syz.3.641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c4f1ae169 code=0x7ffc0000 [ 105.985980][ T29] audit: type=1326 audit(1745088558.305:3119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5736 comm="syz.2.642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc85f75e169 code=0x7ffc0000 [ 106.009366][ T29] audit: type=1326 audit(1745088558.305:3120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5736 comm="syz.2.642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7fc85f75e169 code=0x7ffc0000 [ 106.032786][ T29] audit: type=1326 audit(1745088558.305:3121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5736 comm="syz.2.642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc85f75e169 code=0x7ffc0000 [ 106.113957][ T5747] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 106.141387][ T5747] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 106.346096][ T5756] loop3: detected capacity change from 0 to 512 [ 106.357993][ T5756] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 106.387266][ T5756] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842e12c, mo2=0002] [ 106.407992][ T5756] System zones: 1-12 [ 106.414293][ T5756] EXT4-fs (loop3): orphan cleanup on readonly fs [ 106.431223][ T5756] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.648: bg 0: block 361: padding at end of block bitmap is not set [ 106.476312][ T5756] EXT4-fs (loop3): Remounting filesystem read-only [ 106.496917][ T5756] EXT4-fs (loop3): 1 truncate cleaned up [ 106.503040][ T5756] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 106.520912][ T5756] netlink: 52 bytes leftover after parsing attributes in process `syz.3.648'. [ 106.540974][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 106.718304][ T5763] serio: Serial port ptm0 [ 107.023554][ T5767] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 107.084504][ T5767] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 107.261733][ T5770] loop2: detected capacity change from 0 to 1024 [ 107.378853][ T5770] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 107.428179][ T5770] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5770 comm=syz.2.651 [ 107.540364][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.604955][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.663822][ T5774] loop2: detected capacity change from 0 to 1024 [ 107.682795][ T5776] loop4: detected capacity change from 0 to 1024 [ 107.697276][ T5774] EXT4-fs: Ignoring removed orlov option [ 107.732677][ T5774] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 107.760363][ T5776] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 107.806213][ T5776] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5776 comm=syz.4.653 [ 107.887990][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.014835][ T5787] loop4: detected capacity change from 0 to 1024 [ 108.043450][ T5787] EXT4-fs: Ignoring removed orlov option [ 108.087187][ T5787] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 108.230723][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.255755][ T5793] siw: device registration error -23 [ 108.354442][ T5803] netlink: 244 bytes leftover after parsing attributes in process `syz.3.659'. [ 108.647735][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.809452][ T5812] netlink: 244 bytes leftover after parsing attributes in process `syz.2.662'. [ 108.862105][ T5803] loop3: detected capacity change from 0 to 512 [ 108.887026][ T5803] EXT4-fs: Ignoring removed i_version option [ 108.952199][ T5816] loop0: detected capacity change from 0 to 512 [ 108.963696][ T5816] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 108.963768][ T5803] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 108.985086][ T5816] EXT4-fs (loop0): orphan cleanup on readonly fs [ 109.005522][ T5816] EXT4-fs error (device loop0): ext4_acquire_dquot:6935: comm syz.0.663: Failed to acquire dquot type 1 [ 109.035443][ T5816] EXT4-fs (loop0): 1 truncate cleaned up [ 109.057975][ T5816] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 109.083909][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.088499][ T5803] EXT4-fs (loop3): 1 truncate cleaned up [ 109.155458][ T5816] sg_write: data in/out 209152/1 bytes for SCSI command 0xf2-- guessing data in; [ 109.155458][ T5816] program syz.0.663 not setting count and/or reply_len properly [ 109.175373][ T5803] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 109.259503][ T5812] loop2: detected capacity change from 0 to 512 [ 109.276486][ T5812] EXT4-fs: Ignoring removed i_version option [ 109.295222][ T5812] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 109.394184][ T5812] EXT4-fs (loop2): 1 truncate cleaned up [ 109.513908][ T5812] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 109.637786][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.696148][ T5844] netlink: 120 bytes leftover after parsing attributes in process `syz.4.673'. [ 109.736153][ T5844] 9pnet_fd: Insufficient options for proto=fd [ 110.143821][ T5855] loop4: detected capacity change from 0 to 512 [ 110.183910][ T5855] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 110.221619][ T5855] EXT4-fs (loop4): orphan cleanup on readonly fs [ 110.251388][ T5855] EXT4-fs error (device loop4): ext4_acquire_dquot:6935: comm syz.4.675: Failed to acquire dquot type 1 [ 110.283661][ T5858] loop1: detected capacity change from 0 to 1024 [ 110.359018][ T5855] EXT4-fs (loop4): 1 truncate cleaned up [ 110.365483][ T5855] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 110.403326][ T5858] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 110.442224][ T5858] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5858 comm=syz.1.676 [ 110.452250][ T5855] sg_write: data in/out 209152/1 bytes for SCSI command 0xf2-- guessing data in; [ 110.452250][ T5855] program syz.4.675 not setting count and/or reply_len properly [ 110.494582][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.626766][ T5865] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 110.647300][ T5865] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 110.822160][ T29] kauditd_printk_skb: 109 callbacks suppressed [ 110.822179][ T29] audit: type=1326 audit(1745088563.145:3227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5861 comm="syz.1.677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa93411e169 code=0x7ffc0000 [ 110.886439][ T29] audit: type=1326 audit(1745088563.185:3228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5861 comm="syz.1.677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa93411e169 code=0x7ffc0000 [ 110.909829][ T29] audit: type=1326 audit(1745088563.185:3229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5861 comm="syz.1.677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa93411e169 code=0x7ffc0000 [ 110.933566][ T29] audit: type=1326 audit(1745088563.185:3230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5861 comm="syz.1.677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa93411e169 code=0x7ffc0000 [ 110.957023][ T29] audit: type=1326 audit(1745088563.185:3231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5861 comm="syz.1.677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa93411e169 code=0x7ffc0000 [ 110.980318][ T29] audit: type=1326 audit(1745088563.185:3232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5861 comm="syz.1.677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa93411e169 code=0x7ffc0000 [ 111.003903][ T29] audit: type=1326 audit(1745088563.185:3233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5861 comm="syz.1.677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa93411e169 code=0x7ffc0000 [ 111.027232][ T29] audit: type=1326 audit(1745088563.195:3234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5861 comm="syz.1.677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7fa93411e169 code=0x7ffc0000 [ 111.027267][ T29] audit: type=1326 audit(1745088563.195:3235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5861 comm="syz.1.677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa93411e169 code=0x7ffc0000 [ 111.027319][ T29] audit: type=1326 audit(1745088563.195:3236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5861 comm="syz.1.677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa93411e169 code=0x7ffc0000 [ 111.315854][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.375771][ T5872] siw: device registration error -23 [ 111.589301][ T5879] serio: Serial port ptm0 [ 111.839606][ T5884] loop2: detected capacity change from 0 to 1024 [ 111.908529][ T5884] EXT4-fs: Ignoring removed orlov option [ 111.990626][ T5884] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 112.866785][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.886087][ T5896] netlink: 244 bytes leftover after parsing attributes in process `syz.1.686'. [ 112.956544][ T5898] 9pnet_virtio: no channels available for device 127.0.0.1 [ 113.524185][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.575338][ T5908] loop0: detected capacity change from 0 to 1024 [ 113.602714][ T5896] loop1: detected capacity change from 0 to 512 [ 113.624003][ T5896] EXT4-fs: Ignoring removed i_version option [ 113.632672][ T5908] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 113.648177][ T5896] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 113.679406][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.694490][ T5896] EXT4-fs (loop1): 1 truncate cleaned up [ 113.720271][ T5896] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 113.835356][ T5915] loop0: detected capacity change from 0 to 1024 [ 113.850974][ T5915] EXT4-fs: Ignoring removed orlov option [ 113.890628][ T5915] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 114.113140][ T5920] netlink: 8 bytes leftover after parsing attributes in process `syz.2.693'. [ 114.122025][ T5920] netlink: 'syz.2.693': attribute type 3 has an invalid length. [ 114.129708][ T5920] netlink: 'syz.2.693': attribute type 4 has an invalid length. [ 114.137375][ T5920] netlink: 16 bytes leftover after parsing attributes in process `syz.2.693'. [ 114.173013][ T5920] 9pnet_fd: Insufficient options for proto=fd [ 114.399022][ T5922] netlink: 120 bytes leftover after parsing attributes in process `syz.3.694'. [ 114.449540][ T5922] 9pnet_fd: Insufficient options for proto=fd [ 114.750760][ T5926] netlink: 244 bytes leftover after parsing attributes in process `syz.2.696'. [ 114.780720][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.793762][ T5928] loop3: detected capacity change from 0 to 512 [ 114.803419][ T5928] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 114.850343][ T5928] EXT4-fs (loop3): orphan cleanup on readonly fs [ 114.868073][ T5928] EXT4-fs error (device loop3): ext4_acquire_dquot:6935: comm syz.3.695: Failed to acquire dquot type 1 [ 114.917538][ T5928] EXT4-fs (loop3): 1 truncate cleaned up [ 114.938222][ T5928] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 115.009917][ T5928] sg_write: data in/out 209152/1 bytes for SCSI command 0xf2-- guessing data in; [ 115.009917][ T5928] program syz.3.695 not setting count and/or reply_len properly [ 115.244900][ T5926] loop2: detected capacity change from 0 to 512 [ 115.279587][ T5926] EXT4-fs: Ignoring removed i_version option [ 115.305381][ T5926] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 115.356067][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.367418][ T5926] EXT4-fs (loop2): 1 truncate cleaned up [ 115.385718][ T5926] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 115.448236][ T5938] netlink: 244 bytes leftover after parsing attributes in process `syz.4.698'. [ 115.720635][ T5940] loop0: detected capacity change from 0 to 1024 [ 115.773476][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.787847][ T5940] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 115.881808][ T5938] loop4: detected capacity change from 0 to 512 [ 115.899159][ T5938] EXT4-fs: Ignoring removed i_version option [ 115.914426][ T5938] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 115.927499][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.002372][ T5938] EXT4-fs (loop4): 1 truncate cleaned up [ 116.037404][ T5938] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 116.088328][ T5953] 9pnet_virtio: no channels available for device 127.0.0.1 [ 116.096658][ T29] kauditd_printk_skb: 18 callbacks suppressed [ 116.096693][ T29] audit: type=1326 audit(1745088568.415:3253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5944 comm="syz.1.700" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa93411e169 code=0x7fc00000 [ 116.198035][ T29] audit: type=1326 audit(1745088568.525:3254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5952 comm="syz.0.702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe27fbde169 code=0x7ffc0000 [ 116.221399][ T29] audit: type=1326 audit(1745088568.525:3255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5952 comm="syz.0.702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7fe27fbde169 code=0x7ffc0000 [ 116.244798][ T29] audit: type=1326 audit(1745088568.525:3256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5952 comm="syz.0.702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe27fbde169 code=0x7ffc0000 [ 116.268316][ T29] audit: type=1326 audit(1745088568.525:3257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5952 comm="syz.0.702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=432 compat=0 ip=0x7fe27fbde169 code=0x7ffc0000 [ 116.291647][ T29] audit: type=1326 audit(1745088568.525:3258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5952 comm="syz.0.702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe27fbde169 code=0x7ffc0000 [ 116.315140][ T29] audit: type=1326 audit(1745088568.525:3259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5952 comm="syz.0.702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe27fbde169 code=0x7ffc0000 [ 116.338624][ T29] audit: type=1326 audit(1745088568.525:3260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5952 comm="syz.0.702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe27fbde169 code=0x7ffc0000 [ 116.362168][ T29] audit: type=1326 audit(1745088568.525:3261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5952 comm="syz.0.702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe27fbde169 code=0x7ffc0000 [ 116.385539][ T29] audit: type=1326 audit(1745088568.525:3262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5952 comm="syz.0.702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe27fbde169 code=0x7ffc0000 [ 116.835612][ T5963] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 116.882938][ T5963] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 117.400606][ T5967] loop0: detected capacity change from 0 to 1024 [ 117.435768][ T5967] EXT4-fs: Ignoring removed orlov option [ 117.467959][ T5967] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 117.855638][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.892878][ T5976] netlink: 8 bytes leftover after parsing attributes in process `syz.2.707'. [ 117.901825][ T5976] netlink: 'syz.2.707': attribute type 3 has an invalid length. [ 117.909608][ T5976] netlink: 'syz.2.707': attribute type 4 has an invalid length. [ 117.917274][ T5976] netlink: 16 bytes leftover after parsing attributes in process `syz.2.707'. [ 117.972355][ T5976] 9pnet_fd: Insufficient options for proto=fd [ 118.407598][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.660394][ T5969] syz.0.706 (5969) used greatest stack depth: 9496 bytes left [ 118.688918][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.709131][ T5995] netlink: 244 bytes leftover after parsing attributes in process `syz.0.713'. [ 118.790059][ T5999] serio: Serial port ptm0 [ 119.070132][ T5995] loop0: detected capacity change from 0 to 512 [ 119.122082][ T5995] EXT4-fs: Ignoring removed i_version option [ 119.135150][ T5995] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 119.163870][ T5995] EXT4-fs (loop0): 1 truncate cleaned up [ 119.258784][ T6004] netlink: 244 bytes leftover after parsing attributes in process `syz.2.716'. [ 119.620615][ T6006] 9pnet_virtio: no channels available for device 127.0.0.1 [ 119.650280][ T6004] loop2: detected capacity change from 0 to 512 [ 119.684567][ T6004] EXT4-fs: Ignoring removed i_version option [ 119.745257][ T6004] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 120.208007][ T6004] EXT4-fs (loop2): 1 truncate cleaned up [ 121.224045][ T29] kauditd_printk_skb: 91 callbacks suppressed [ 121.224060][ T29] audit: type=1326 audit(1745088573.545:3354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6018 comm="syz.1.719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa9340ba359 code=0x7fc00000 [ 121.359700][ T6029] netlink: 244 bytes leftover after parsing attributes in process `syz.1.721'. [ 121.368876][ T29] audit: type=1400 audit(1745088573.585:3355): avc: denied { read } for pid=2987 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 121.390936][ T29] audit: type=1400 audit(1745088573.585:3356): avc: denied { search } for pid=2987 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 121.412749][ T29] audit: type=1400 audit(1745088573.585:3357): avc: denied { append } for pid=2987 comm="syslogd" name="messages" dev="tmpfs" ino=7 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 121.435063][ T29] audit: type=1400 audit(1745088573.585:3358): avc: denied { open } for pid=2987 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=7 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 121.457725][ T29] audit: type=1400 audit(1745088573.585:3359): avc: denied { getattr } for pid=2987 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=7 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 121.480579][ T29] audit: type=1326 audit(1745088573.585:3360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6018 comm="syz.1.719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7fa9340ba41f code=0x7fc00000 [ 121.503838][ T29] audit: type=1326 audit(1745088573.585:3361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6018 comm="syz.1.719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fa93411e169 code=0x7fc00000 [ 121.527171][ T29] audit: type=1400 audit(1745088573.685:3362): avc: denied { read } for pid=6028 comm="syz.1.721" dev="nsfs" ino=4026532512 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 121.540212][ T6032] netlink: 244 bytes leftover after parsing attributes in process `syz.3.722'. [ 121.548262][ T29] audit: type=1400 audit(1745088573.685:3363): avc: denied { open } for pid=6028 comm="syz.1.721" path="net:[4026532512]" dev="nsfs" ino=4026532512 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 121.753794][ T6038] 9pnet_virtio: no channels available for device 127.0.0.1 [ 122.104467][ T6043] 9pnet_virtio: no channels available for device 127.0.0.1 [ 122.261683][ T6030] loop1: detected capacity change from 0 to 512 [ 122.293223][ T6032] loop3: detected capacity change from 0 to 512 [ 122.300117][ T6030] EXT4-fs: Ignoring removed i_version option [ 122.304847][ T6030] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 122.360652][ T6032] EXT4-fs: Ignoring removed i_version option [ 122.376566][ T6030] EXT4-fs (loop1): 1 truncate cleaned up [ 122.388105][ T6032] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 122.431489][ T6054] serio: Serial port ptm0 [ 122.532677][ T6032] EXT4-fs (loop3): 1 truncate cleaned up [ 123.370329][ T6063] 9pnet_virtio: no channels available for device 127.0.0.1 [ 124.019024][ T6078] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 124.100542][ T6083] 9pnet_virtio: no channels available for device 127.0.0.1 [ 124.116309][ T6078] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 124.649196][ T6093] 9pnet_virtio: no channels available for device 127.0.0.1 [ 124.802768][ T6100] loop3: detected capacity change from 0 to 1024 [ 124.896467][ T6100] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6100 comm=syz.3.739 [ 125.004563][ T6107] loop3: detected capacity change from 0 to 1024 [ 125.292943][ T6115] serio: Serial port ptm0 [ 125.321344][ T6118] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(10) [ 125.327982][ T6118] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 125.335446][ T6118] vhci_hcd vhci_hcd.0: Device attached [ 125.345972][ T6118] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(12) [ 125.352605][ T6118] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 125.360168][ T6118] vhci_hcd vhci_hcd.0: Device attached [ 125.368704][ T6118] vhci_hcd vhci_hcd.0: pdev(1) rhport(2) sockfd(14) [ 125.375330][ T6118] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 125.382860][ T6118] vhci_hcd vhci_hcd.0: Device attached [ 125.392877][ T6118] vhci_hcd vhci_hcd.0: pdev(1) rhport(3) sockfd(16) [ 125.399553][ T6118] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 125.407274][ T6118] vhci_hcd vhci_hcd.0: Device attached [ 125.417887][ T6118] vhci_hcd vhci_hcd.0: pdev(1) rhport(4) sockfd(18) [ 125.424596][ T6118] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 125.432348][ T6118] vhci_hcd vhci_hcd.0: Device attached [ 125.481187][ T6131] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 125.491789][ T6118] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 125.502610][ T6118] vhci_hcd vhci_hcd.0: pdev(1) rhport(7) sockfd(24) [ 125.509226][ T6118] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 125.517068][ T6118] vhci_hcd vhci_hcd.0: Device attached [ 125.522776][ T3490] vhci_hcd: vhci_device speed not set [ 125.534375][ T6118] vhci_hcd vhci_hcd.0: port 0 already used [ 125.542173][ T6132] vhci_hcd: connection closed [ 125.542440][ T51] vhci_hcd: stop threads [ 125.551443][ T51] vhci_hcd: release socket [ 125.555980][ T51] vhci_hcd: disconnect device [ 125.583071][ T6121] vhci_hcd: connection closed [ 125.583283][ T6123] vhci_hcd: connection closed [ 125.588391][ T3490] usb 3-1: new full-speed USB device number 6 using vhci_hcd [ 125.602063][ T6125] vhci_hcd: connection closed [ 125.602247][ T6127] vhci_hcd: connection closed [ 125.609786][ T6119] vhci_hcd: connection closed [ 125.624510][ T6120] vhci_hcd: sendmsg failed!, ret=-32 for 48 [ 125.641846][ T51] vhci_hcd: stop threads [ 125.646244][ T51] vhci_hcd: release socket [ 125.650749][ T51] vhci_hcd: disconnect device [ 125.666977][ T51] vhci_hcd: stop threads [ 125.671351][ T51] vhci_hcd: release socket [ 125.675816][ T51] vhci_hcd: disconnect device [ 125.701132][ T51] vhci_hcd: stop threads [ 125.705453][ T51] vhci_hcd: release socket [ 125.709934][ T51] vhci_hcd: disconnect device [ 125.731107][ T51] vhci_hcd: stop threads [ 125.735432][ T51] vhci_hcd: release socket [ 125.739925][ T51] vhci_hcd: disconnect device [ 125.769810][ T51] vhci_hcd: stop threads [ 125.774227][ T51] vhci_hcd: release socket [ 125.778754][ T51] vhci_hcd: disconnect device [ 125.888408][ T6143] 9pnet_virtio: no channels available for device 127.0.0.1 [ 126.132043][ T6149] netlink: 8 bytes leftover after parsing attributes in process `syz.0.750'. [ 126.141053][ T6149] netlink: 'syz.0.750': attribute type 3 has an invalid length. [ 126.148815][ T6149] netlink: 'syz.0.750': attribute type 4 has an invalid length. [ 126.156715][ T6149] netlink: 16 bytes leftover after parsing attributes in process `syz.0.750'. [ 126.173664][ T6149] 9pnet_fd: Insufficient options for proto=fd [ 126.272205][ T29] kauditd_printk_skb: 289 callbacks suppressed [ 126.272223][ T29] audit: type=1400 audit(1745088578.595:3653): avc: denied { create } for pid=6150 comm="syz.1.751" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 126.311140][ T6151] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8) [ 126.317705][ T6151] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 126.325192][ T6151] vhci_hcd vhci_hcd.0: Device attached [ 126.355405][ T6154] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(11) [ 126.362050][ T6154] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 126.369588][ T6154] vhci_hcd vhci_hcd.0: Device attached [ 126.398563][ T6151] vhci_hcd vhci_hcd.0: pdev(1) rhport(2) sockfd(10) [ 126.405226][ T6151] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 126.412970][ T6151] vhci_hcd vhci_hcd.0: Device attached [ 126.435310][ T6151] vhci_hcd vhci_hcd.0: pdev(1) rhport(3) sockfd(14) [ 126.441964][ T6151] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 126.449674][ T6151] vhci_hcd vhci_hcd.0: Device attached [ 126.456463][ T6151] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 126.462800][ T29] audit: type=1400 audit(1745088578.775:3654): avc: denied { read } for pid=6161 comm="syz.3.752" dev="nsfs" ino=4026532630 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 126.465284][ T6151] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 126.504548][ T29] audit: type=1400 audit(1745088578.825:3655): avc: denied { open } for pid=6161 comm="syz.3.752" path="net:[4026532630]" dev="nsfs" ino=4026532630 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 126.507073][ T6162] netlink: 244 bytes leftover after parsing attributes in process `syz.3.752'. [ 126.528043][ T29] audit: type=1400 audit(1745088578.825:3656): avc: denied { create } for pid=6161 comm="syz.3.752" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 126.567125][ T6151] vhci_hcd vhci_hcd.0: pdev(1) rhport(6) sockfd(20) [ 126.573770][ T6151] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 126.581565][ T6151] vhci_hcd vhci_hcd.0: Device attached [ 126.612782][ T29] audit: type=1400 audit(1745088578.825:3657): avc: denied { write } for pid=6161 comm="syz.3.752" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 126.633252][ T29] audit: type=1400 audit(1745088578.865:3658): avc: denied { open } for pid=6161 comm="syz.3.752" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 126.652567][ T29] audit: type=1400 audit(1745088578.865:3659): avc: denied { kernel } for pid=6161 comm="syz.3.752" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 126.659435][ T6166] loop4: detected capacity change from 0 to 1024 [ 126.672022][ T29] audit: type=1326 audit(1745088578.925:3660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6138 comm="syz.2.747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc85f6fa359 code=0x7fc00000 [ 126.701772][ T29] audit: type=1400 audit(1745088578.935:3661): avc: denied { create } for pid=6165 comm="syz.4.753" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 126.726875][ T6154] vhci_hcd vhci_hcd.0: pdev(1) rhport(7) sockfd(24) [ 126.733608][ T6154] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 126.741121][ T6154] vhci_hcd vhci_hcd.0: Device attached [ 126.745335][ T6173] netlink: 244 bytes leftover after parsing attributes in process `syz.2.755'. [ 126.775292][ T6152] vhci_hcd: connection closed [ 126.775583][ T31] vhci_hcd: stop threads [ 126.780224][ T6163] vhci_hcd: connection closed [ 126.780310][ T31] vhci_hcd: release socket [ 126.794058][ T31] vhci_hcd: disconnect device [ 126.796816][ T6167] vhci_hcd: connection closed [ 126.798952][ T6159] vhci_hcd: connection closed [ 126.803852][ T6157] vhci_hcd: connection closed [ 126.807776][ T31] vhci_hcd: stop threads [ 126.817959][ T31] vhci_hcd: release socket [ 126.819415][ T6155] vhci_hcd: connection closed [ 126.822395][ T31] vhci_hcd: disconnect device [ 126.834760][ T31] vhci_hcd: stop threads [ 126.839188][ T31] vhci_hcd: release socket [ 126.843645][ T31] vhci_hcd: disconnect device [ 126.850149][ T29] audit: type=1400 audit(1745088579.005:3662): avc: denied { read } for pid=2987 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 126.873650][ T31] vhci_hcd: stop threads [ 126.878000][ T31] vhci_hcd: release socket [ 126.882471][ T31] vhci_hcd: disconnect device [ 126.898480][ T31] vhci_hcd: stop threads [ 126.902982][ T31] vhci_hcd: release socket [ 126.907528][ T31] vhci_hcd: disconnect device [ 126.914752][ T31] vhci_hcd: stop threads [ 126.919117][ T31] vhci_hcd: release socket [ 126.923579][ T31] vhci_hcd: disconnect device [ 127.069432][ T6183] loop4: detected capacity change from 0 to 1024 [ 127.070263][ T6162] loop3: detected capacity change from 0 to 512 [ 127.099265][ T6183] EXT4-fs: Ignoring removed orlov option [ 127.100840][ T6162] EXT4-fs: Ignoring removed i_version option [ 127.122601][ T6162] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 127.194043][ T6162] EXT4-fs (loop3): 1 truncate cleaned up [ 127.227348][ T6173] loop2: detected capacity change from 0 to 512 [ 127.253112][ T6173] EXT4-fs: Ignoring removed i_version option [ 127.268700][ T6173] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 127.338644][ T6189] netlink: 244 bytes leftover after parsing attributes in process `syz.1.758'. [ 127.476403][ T6173] EXT4-fs (loop2): 1 truncate cleaned up [ 127.634230][ T6192] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 127.643842][ T6192] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 128.174191][ T6189] loop1: detected capacity change from 0 to 512 [ 128.205628][ T6189] EXT4-fs: Ignoring removed i_version option [ 128.220110][ T6189] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 128.289213][ T6189] EXT4-fs (loop1): 1 truncate cleaned up [ 128.751152][ T6200] 9pnet_virtio: no channels available for device 127.0.0.1 [ 129.010255][ T6209] serio: Serial port ptm0 [ 129.127458][ T6210] netlink: 8 bytes leftover after parsing attributes in process `syz.0.764'. [ 129.136366][ T6210] netlink: 'syz.0.764': attribute type 3 has an invalid length. [ 129.144100][ T6210] netlink: 'syz.0.764': attribute type 4 has an invalid length. [ 129.151763][ T6210] netlink: 16 bytes leftover after parsing attributes in process `syz.0.764'. [ 129.593205][ T6211] 9pnet_fd: Insufficient options for proto=fd [ 130.122182][ T3303] EXT4-fs unmount: 20 callbacks suppressed [ 130.122297][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.278125][ T6220] loop0: detected capacity change from 0 to 1024 [ 130.308638][ T6220] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 130.339193][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.472459][ T6230] 9pnet_virtio: no channels available for device 127.0.0.1 [ 130.597359][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.930892][ T6236] loop4: detected capacity change from 0 to 1024 [ 130.952341][ T6236] EXT4-fs: Ignoring removed orlov option [ 131.042296][ T6236] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 131.151727][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.191897][ T6240] loop3: detected capacity change from 0 to 1024 [ 131.253051][ T6240] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 131.469767][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.499190][ T3490] usb 3-1: enqueue for inactive port 0 [ 131.504747][ T3490] usb 3-1: enqueue for inactive port 0 [ 131.576703][ T3490] vhci_hcd: vhci_device speed not set [ 131.592096][ T6246] 9pnet_virtio: no channels available for device 127.0.0.1 [ 131.640255][ T29] kauditd_printk_skb: 128 callbacks suppressed [ 131.640272][ T29] audit: type=1326 audit(1745088583.965:3791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6245 comm="syz.2.770" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc85f75e169 code=0x7ffc0000 [ 131.769012][ T29] audit: type=1326 audit(1745088583.995:3792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6245 comm="syz.2.770" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc85f75e169 code=0x7ffc0000 [ 131.792545][ T29] audit: type=1326 audit(1745088583.995:3793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6245 comm="syz.2.770" exe="/root/syz-executor" sig=0 arch=c000003e syscall=432 compat=0 ip=0x7fc85f75e169 code=0x7ffc0000 [ 131.816005][ T29] audit: type=1326 audit(1745088583.995:3794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6245 comm="syz.2.770" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc85f75e169 code=0x7ffc0000 [ 131.839391][ T29] audit: type=1326 audit(1745088583.995:3795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6245 comm="syz.2.770" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc85f75e169 code=0x7ffc0000 [ 131.940098][ T6258] loop3: detected capacity change from 0 to 1024 [ 131.958514][ T6258] EXT4-fs: Ignoring removed orlov option [ 132.515276][ T6263] serio: Serial port ptm0 [ 132.580953][ T29] audit: type=1400 audit(1745088584.195:3796): avc: denied { read } for pid=2987 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 132.603068][ T29] audit: type=1400 audit(1745088584.195:3797): avc: denied { search } for pid=2987 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 132.624676][ T29] audit: type=1400 audit(1745088584.195:3798): avc: denied { append } for pid=2987 comm="syslogd" name="messages" dev="tmpfs" ino=7 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 132.647062][ T29] audit: type=1400 audit(1745088584.195:3799): avc: denied { open } for pid=2987 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=7 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 132.669723][ T29] audit: type=1400 audit(1745088584.195:3800): avc: denied { getattr } for pid=2987 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=7 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 132.730769][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.809852][ T6267] loop1: detected capacity change from 0 to 1024 [ 132.826394][ T6267] EXT4-fs: Ignoring removed orlov option [ 132.835650][ T6258] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 132.870011][ T6267] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 133.161070][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.417185][ T6287] FAULT_INJECTION: forcing a failure. [ 134.417185][ T6287] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 134.430320][ T6287] CPU: 0 UID: 0 PID: 6287 Comm: syz.2.784 Not tainted 6.15.0-rc2-syzkaller-00404-g8560697b23dc #0 PREEMPT(voluntary) [ 134.430354][ T6287] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 134.430372][ T6287] Call Trace: [ 134.430380][ T6287] [ 134.430388][ T6287] dump_stack_lvl+0xf6/0x150 [ 134.430412][ T6287] dump_stack+0x15/0x1a [ 134.430511][ T6287] should_fail_ex+0x261/0x270 [ 134.430541][ T6287] should_fail+0xb/0x10 [ 134.430566][ T6287] should_fail_usercopy+0x1a/0x20 [ 134.430617][ T6287] strncpy_from_user+0x25/0x230 [ 134.430716][ T6287] ? getname_flags+0x81/0x3b0 [ 134.430746][ T6287] getname_flags+0xb0/0x3b0 [ 134.430811][ T6287] do_sys_openat2+0x65/0x110 [ 134.430909][ T6287] __x64_sys_open+0xea/0x110 [ 134.430943][ T6287] x64_sys_call+0x13e2/0x2e10 [ 134.430970][ T6287] do_syscall_64+0xc9/0x1a0 [ 134.430995][ T6287] ? clear_bhb_loop+0x25/0x80 [ 134.431042][ T6287] ? clear_bhb_loop+0x25/0x80 [ 134.431067][ T6287] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 134.431093][ T6287] RIP: 0033:0x7fc85f75e169 [ 134.431116][ T6287] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 134.431136][ T6287] RSP: 002b:00007fc85ddc7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 134.431236][ T6287] RAX: ffffffffffffffda RBX: 00007fc85f985fa0 RCX: 00007fc85f75e169 [ 134.431252][ T6287] RDX: 0000000000000040 RSI: 0000000000000400 RDI: 0000200000000180 [ 134.431267][ T6287] RBP: 00007fc85ddc7090 R08: 0000000000000000 R09: 0000000000000000 [ 134.431281][ T6287] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 134.431295][ T6287] R13: 0000000000000000 R14: 00007fc85f985fa0 R15: 00007ffe10f80208 [ 134.431313][ T6287] [ 134.781759][ T6284] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 134.847455][ T6284] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 134.856735][ T6291] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 134.955156][ T6294] netlink: 244 bytes leftover after parsing attributes in process `syz.2.786'. [ 134.974594][ T6291] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 135.026790][ T6294] loop2: detected capacity change from 0 to 512 [ 135.065831][ T6294] EXT4-fs: Ignoring removed i_version option [ 135.092672][ T6294] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 135.113206][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.126504][ T6294] EXT4-fs (loop2): 1 truncate cleaned up [ 135.134914][ T6294] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 135.362779][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.622473][ T6300] loop3: detected capacity change from 0 to 1024 [ 135.641226][ T6300] EXT4-fs: Ignoring removed orlov option [ 135.671671][ T6300] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 135.692622][ T6303] 9pnet_virtio: no channels available for device 127.0.0.1 [ 135.892742][ T6308] 9pnet_virtio: no channels available for device 127.0.0.1 [ 136.146258][ T6328] 9pnet_virtio: no channels available for device 127.0.0.1 [ 136.172353][ T6329] serio: Serial port ptm0 [ 136.576393][ T6333] loop4: detected capacity change from 0 to 1024 [ 136.604694][ T6333] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 136.663859][ T29] kauditd_printk_skb: 137 callbacks suppressed [ 136.663877][ T29] audit: type=1400 audit(1745088588.985:3938): avc: denied { unmount } for pid=3311 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 136.697888][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.730268][ T29] audit: type=1400 audit(1745088589.015:3939): avc: denied { read } for pid=2987 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 136.752564][ T29] audit: type=1400 audit(1745088589.015:3940): avc: denied { search } for pid=2987 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 136.774247][ T29] audit: type=1400 audit(1745088589.015:3941): avc: denied { open } for pid=2987 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=7 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 136.796844][ T29] audit: type=1400 audit(1745088589.015:3942): avc: denied { getattr } for pid=2987 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=7 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 136.861572][ T6337] netlink: 244 bytes leftover after parsing attributes in process `syz.0.799'. [ 136.940993][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.970427][ T6340] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 137.010395][ T6340] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 137.043363][ T29] audit: type=1326 audit(1745088589.145:3943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6312 comm="syz.0.791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fe27fb7a359 code=0x7fc00000 [ 137.066719][ T29] audit: type=1400 audit(1745088589.185:3944): avc: denied { read } for pid=6336 comm="syz.0.799" dev="nsfs" ino=4026532395 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 137.087792][ T29] audit: type=1400 audit(1745088589.185:3945): avc: denied { open } for pid=6336 comm="syz.0.799" path="net:[4026532395]" dev="nsfs" ino=4026532395 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 137.111009][ T29] audit: type=1400 audit(1745088589.185:3946): avc: denied { write } for pid=6336 comm="syz.0.799" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 137.131430][ T29] audit: type=1400 audit(1745088589.295:3947): avc: denied { read write } for pid=6338 comm="syz.2.800" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 137.515669][ T6337] loop0: detected capacity change from 0 to 512 [ 137.552197][ T6337] EXT4-fs: Ignoring removed i_version option [ 137.566376][ T6337] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 137.615880][ T6337] EXT4-fs (loop0): 1 truncate cleaned up [ 137.628630][ T6337] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 137.785361][ T6359] loop1: detected capacity change from 0 to 1024 [ 137.792259][ T6359] EXT4-fs: Ignoring removed orlov option [ 137.809455][ T6359] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 137.824975][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.977530][ T6371] 9pnet_virtio: no channels available for device 127.0.0.1 [ 138.080527][ T6374] netlink: 8 bytes leftover after parsing attributes in process `syz.3.807'. [ 138.089478][ T6374] netlink: 'syz.3.807': attribute type 3 has an invalid length. [ 138.097235][ T6374] netlink: 'syz.3.807': attribute type 4 has an invalid length. [ 138.104924][ T6374] netlink: 16 bytes leftover after parsing attributes in process `syz.3.807'. [ 138.121661][ T6374] 9pnet_fd: Insufficient options for proto=fd [ 138.129053][ T6375] loop0: detected capacity change from 0 to 1024 [ 138.145926][ T6375] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 138.190012][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.228405][ T6383] FAULT_INJECTION: forcing a failure. [ 138.228405][ T6383] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 138.241612][ T6383] CPU: 0 UID: 0 PID: 6383 Comm: syz.0.811 Not tainted 6.15.0-rc2-syzkaller-00404-g8560697b23dc #0 PREEMPT(voluntary) [ 138.241642][ T6383] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 138.241655][ T6383] Call Trace: [ 138.241662][ T6383] [ 138.241669][ T6383] dump_stack_lvl+0xf6/0x150 [ 138.241759][ T6383] dump_stack+0x15/0x1a [ 138.241781][ T6383] should_fail_ex+0x261/0x270 [ 138.241878][ T6383] should_fail+0xb/0x10 [ 138.241902][ T6383] should_fail_usercopy+0x1a/0x20 [ 138.241959][ T6383] _copy_from_user+0x1c/0xa0 [ 138.241991][ T6383] copy_msghdr_from_user+0x54/0x2b0 [ 138.242030][ T6383] ? __fget_files+0x186/0x1c0 [ 138.242074][ T6383] __sys_sendmsg+0x141/0x240 [ 138.242119][ T6383] __x64_sys_sendmsg+0x46/0x50 [ 138.242146][ T6383] x64_sys_call+0x26f3/0x2e10 [ 138.242188][ T6383] do_syscall_64+0xc9/0x1a0 [ 138.242211][ T6383] ? clear_bhb_loop+0x25/0x80 [ 138.242235][ T6383] ? clear_bhb_loop+0x25/0x80 [ 138.242261][ T6383] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 138.242314][ T6383] RIP: 0033:0x7fe27fbde169 [ 138.242330][ T6383] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 138.242351][ T6383] RSP: 002b:00007fe27e247038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 138.242372][ T6383] RAX: ffffffffffffffda RBX: 00007fe27fe05fa0 RCX: 00007fe27fbde169 [ 138.242384][ T6383] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 138.242395][ T6383] RBP: 00007fe27e247090 R08: 0000000000000000 R09: 0000000000000000 [ 138.242439][ T6383] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 138.242452][ T6383] R13: 0000000000000000 R14: 00007fe27fe05fa0 R15: 00007ffceaec5b38 [ 138.242474][ T6383] [ 138.638777][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.682716][ T6397] loop1: detected capacity change from 0 to 1024 [ 138.695419][ T6397] EXT4-fs: Ignoring removed orlov option [ 138.718817][ T6397] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 138.749208][ T6402] loop3: detected capacity change from 0 to 1024 [ 138.756114][ T6402] EXT4-fs: Ignoring removed orlov option [ 138.779299][ T6402] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 138.971554][ T6402] ================================================================== [ 138.979694][ T6402] BUG: KCSAN: data-race in vfs_fsync_range / writeback_single_inode [ 138.987793][ T6402] [ 138.990127][ T6402] write to 0xffff888106338f08 of 4 bytes by task 6406 on cpu 0: [ 138.997877][ T6402] writeback_single_inode+0x14f/0x3f0 [ 139.003373][ T6402] sync_inode_metadata+0x60/0x90 [ 139.008349][ T6402] generic_buffers_fsync_noflush+0xd8/0x120 [ 139.014325][ T6402] ext4_sync_file+0x1c3/0x6c0 [ 139.019048][ T6402] vfs_fsync_range+0x116/0x130 [ 139.023859][ T6402] ext4_buffered_write_iter+0x358/0x3c0 [ 139.029535][ T6402] ext4_file_write_iter+0x3b2/0xf80 [ 139.034829][ T6402] iter_file_splice_write+0x5f2/0x980 [ 139.040249][ T6402] direct_splice_actor+0x160/0x2c0 [ 139.045422][ T6402] splice_direct_to_actor+0x305/0x680 [ 139.050837][ T6402] do_splice_direct+0xd9/0x150 [ 139.055643][ T6402] do_sendfile+0x40a/0x690 [ 139.060271][ T6402] __x64_sys_sendfile64+0x113/0x160 [ 139.065678][ T6402] x64_sys_call+0xfc3/0x2e10 [ 139.070303][ T6402] do_syscall_64+0xc9/0x1a0 [ 139.074846][ T6402] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 139.080782][ T6402] [ 139.083117][ T6402] read to 0xffff888106338f08 of 4 bytes by task 6402 on cpu 1: [ 139.090854][ T6402] vfs_fsync_range+0x9a/0x130 [ 139.095548][ T6402] ext4_buffered_write_iter+0x358/0x3c0 [ 139.101125][ T6402] ext4_file_write_iter+0x3b2/0xf80 [ 139.106352][ T6402] iter_file_splice_write+0x5f2/0x980 [ 139.111771][ T6402] direct_splice_actor+0x160/0x2c0 [ 139.116923][ T6402] splice_direct_to_actor+0x305/0x680 [ 139.122338][ T6402] do_splice_direct+0xd9/0x150 [ 139.127147][ T6402] do_sendfile+0x40a/0x690 [ 139.131589][ T6402] __x64_sys_sendfile64+0x113/0x160 [ 139.136813][ T6402] x64_sys_call+0xfc3/0x2e10 [ 139.141525][ T6402] do_syscall_64+0xc9/0x1a0 [ 139.146050][ T6402] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 139.151977][ T6402] [ 139.154316][ T6402] value changed: 0x00000038 -> 0x00000002 [ 139.160045][ T6402] [ 139.162381][ T6402] Reported by Kernel Concurrency Sanitizer on: [ 139.168648][ T6402] CPU: 1 UID: 0 PID: 6402 Comm: syz.3.817 Not tainted 6.15.0-rc2-syzkaller-00404-g8560697b23dc #0 PREEMPT(voluntary) [ 139.181008][ T6402] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 139.191099][ T6402] ================================================================== [ 139.541565][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.678285][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.