last executing test programs: 7.594479944s ago: executing program 4 (id=3863): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x4, &(0x7f00000001c0)=ANY=[@ANYRESHEX], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYRESOCT=r0], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000000)='ext4_remove_blocks\x00', r1}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000500)={0x6, &(0x7f0000000340)=[{0xfffd, 0x4, 0x2, 0x2}, {0xb, 0x6f, 0x3, 0x401}, {0x8, 0x2, 0x6, 0x5}, {0x7, 0x8, 0x6}, {0xd, 0x4, 0xff, 0xffffffc0}, {0x7f, 0x1, 0x3, 0x6}]}) r3 = inotify_init() r4 = inotify_add_watch(r3, &(0x7f0000000200)='.\x00', 0xa2000294) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYRESDEC=0x0], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000540)=ANY=[@ANYRES16=r4, @ANYRES16=r2, @ANYRES16=r5, @ANYRES8=r1, @ANYRES8, @ANYRESOCT=0x0], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x57, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000640)={0x1, &(0x7f0000000080)=[{0x4, 0x9, 0x4, 0x7ffc0002}]}) shutdown(0xffffffffffffffff, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x18) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, 0x0, 0x0) eventfd2(0x9, 0x100001) r8 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r9 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000200), 0x60400, 0x0) close_range(r8, r9, 0x0) prctl$PR_GET_NAME(0x10, &(0x7f0000000180)=""/46) execveat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) link(0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) socket$inet6_sctp(0xa, 0x1, 0x84) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) munmap(&(0x7f0000470000/0x400000)=nil, 0xe06500) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0x8, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r10, @ANYBLOB="0000000000000000b703000000e00000850000001b000000b700000000fa000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x2000cffd, 0x0, 0x0) 5.91319448s ago: executing program 4 (id=3868): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x800, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000000000000000200009500"], &(0x7f00000001c0)='syzkaller\x00'}, 0x94) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800e00010069703665727370616e0000002000028006000200300000001400060000000000000000000000ffff7f00000108000a00", @ANYRESOCT], 0x5c}}, 0x0) shutdown(r6, 0x0) r7 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x2, 0xc}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r7, &(0x7f00000003c0)={0x14, 0x88, 0xfa00, {r8, 0x10, 0x0, @in={0x2, 0x4e20, @rand_addr=0x64010100}}}, 0x90) pipe2(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) readv(r9, &(0x7f0000000740)=[{&(0x7f0000000480)=""/215, 0xd7}], 0x1) writev(r10, &(0x7f0000000200)=[{&(0x7f0000000100)="19", 0x3a4e1e905c56cdb7}], 0x1) inotify_init1(0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'veth1_to_hsr\x00', 0x0}) r12 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r5, r11, 0x25, 0x0, @val=@netfilter}, 0x40) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) close_range(r4, r12, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x400}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000780)=@newtfilter={0x38, 0x2c, 0xf27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xf}, {}, {0x7, 0x4}}, [@filter_kind_options=@f_flow={{0x9}, {0x8, 0x2, [@TCA_FLOW_EMATCHES={0x4}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40014}, 0x0) 5.338836199s ago: executing program 4 (id=3873): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xfd01}, 0x8) clock_adjtime(0x0, &(0x7f0000000640)={0x7, 0x9, 0x380000, 0x8, 0xfffffffffffffff9, 0xfffffffffffffff7, 0x9, 0x0, 0xae, 0x6, 0x7, 0x4, 0xfffffffffffff04f, 0x7, 0x80000000, 0xfffffffffffffff8, 0xffffffffffffffff, 0x5, 0x0, 0x100, 0x4, 0x2, 0x5, 0x3, 0x8, 0x8}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0}, 0x18) syz_mount_image$ext4(&(0x7f0000000780)='ext3\x00', &(0x7f0000000280)='./file2\x00', 0x2000410, &(0x7f0000000240)={[{@noquota}, {@errors_remount}]}, 0x1, 0x7db, &(0x7f0000001d40)="$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") r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000fc0)=@raw={'raw\x00', 0x8, 0x3, 0x4e8, 0x0, 0x11, 0x148, 0x340, 0x0, 0x450, 0x2a8, 0x2a8, 0x450, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x0, 0x0, 0x3f, 0x0, 0x88000000, 0x3, 0x7}}}, @common=@unspec=@bpf1={{0x230}, @pinned={0x1, 0x0, 0x0, './file0\x00'}}]}, @unspec=@CT0={0x48}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00'}, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@quota={{0x38}, {0x0, 0x0, 0x81}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x4f, 0x7, "72f6daeff0a9c6294e211d2d88fe6dcff5d0e552201da3b7a1fdb30dcb59"}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x548) bpf$MAP_DELETE_ELEM(0x4, &(0x7f0000000080)={0xffffffffffffffff, 0x0}, 0x20) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.idle_time\x00', 0x275a, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r3, 0x8004587d, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x80240, 0x0) ioctl$TIOCVHANGUP(r4, 0x5437, 0x2) 4.257766536s ago: executing program 4 (id=3881): bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x800000, &(0x7f0000000500)=ANY=[@ANYRES8=0x0, @ANYRESOCT, @ANYRESOCT, @ANYRES32, @ANYBLOB="b7ad7cd65c46a5be7840094fc88ed3944440d445ac89758d3aa4a6c77ea3e1e50196a99f88ba68f3377383de4de11c07aa5d22d9f4f3c58344d6011b6ea5ee82cf40e4ca5976370cb73c872e576f936791a0ffa5639ac237214be5926acea5405e00f1a144cf7a5240bc1e56ed617e19d6a5a268505f0012b4baf36d3a71eb34c8b67281dbba4b20c3d724ef150deff6f7d908bc72575a1f43b608e0d118", @ANYBLOB="a1fffd2e4c38a7b17fef1a78ad1943012e7b7711a1517cd8b4288a2fbb7d202d8c4a1809add074e6dde0703158125f2f114c49f5ee5f249d63ac0d851c212ccd8d82b7c694ead23c417021e8bc78d646d07e3513568bb81d2179a012dcdcb845b0a58b6d5e46a177de56e3e77ed573967e4eea299078019693ca486edbaa44e947802c7f46f1de18cf7f0e1af02964d04cc84d979855e8d3a3fda262f6a7d2b4b4849fd880c9b9af9be818ba05386754a3505e833ca0b9770f63e91f3a9a04e9fca51d88273d5491ed", @ANYRES8=0x0], 0x3, 0x7ec, &(0x7f0000001580)="$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") r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000580)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000460000000000767a1811e7a51c31fd12bdac73187c17a98cb200"/49, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000820000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)={0x14, 0x24, 0x1, 0x70bd28, 0x0, {0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) getpeername$inet6(0xffffffffffffffff, &(0x7f0000000800)={0xa, 0x0, 0x0, @initdev}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r3}, 0x10) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x4f0, 0x340, 0x25, 0x148, 0x0, 0x60, 0x458, 0x2a8, 0x2a8, 0x458, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'geneve0\x00', {0x44, 0x0, 0x9, 0x0, 0x0, 0xffffffff, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x0, 0x6, './file0\x00'}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x6, 'syz0\x00'}}}, {{@ip={@broadcast, @multicast1, 0x0, 0x0, 'veth1_to_bond\x00', 'veth0\x00', {0xff}}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@unspec=@cgroup0={{0x28}, {0x4}}, @common=@unspec=@statistic={{0x38}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x8000, 'syz0\x00', {0x481c}}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x550) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000200)={'vxcan1\x00', 0x0}) bind$can_j1939(r4, &(0x7f0000000100)={0x1d, r5, 0xfffffffffffffffd, {0x0, 0xff}}, 0x18) sendmsg$can_j1939(r4, &(0x7f00000002c0)={&(0x7f00000000c0)={0x1d, 0x0, 0x16, {0x0, 0x1ee}, 0x2}, 0x18, &(0x7f0000000440)={0x0}}, 0xc894) r6 = socket$netlink(0x10, 0x3, 0x10) setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f0000000000), 0x4) r7 = getpid() r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), r6) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000410"], 0x50) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='kmem_cache_free\x00', r11}, 0x18) syz_emit_ethernet(0x66, &(0x7f0000000880)={@broadcast, @random="6487a2bed3d6", @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x300, 0x0, 0x0, 0x6c, 0x0, @private}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x0, 0x1}, {}, {}, {}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x4}}}}}}}}, 0x0) sendmsg$DEVLINK_CMD_RELOAD(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000080)={0x3c, r9, 0x1, 0x70bd26, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r7}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r6, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4) 4.219959336s ago: executing program 3 (id=3882): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) sched_getattr(0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x50) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) read(0xffffffffffffffff, &(0x7f0000000840)=""/40, 0x28) bpf$OBJ_GET_MAP(0x7, &(0x7f0000001640)=@generic={&(0x7f0000001600)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x8}, 0x18) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff8000}]}) close_range(r0, 0xffffffffffffffff, 0x0) openat$ptp0(0xffffffffffffff9c, 0x0, 0x410800, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f0000000700)=',&#^%\x00') bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000e40)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000040000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setresuid(0xffffffffffffffff, 0x0, 0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00'}, 0x10) syz_usbip_server_init(0x4) r1 = socket$inet(0x2, 0xa, 0x1000) bind(r1, 0x0, 0x0) 3.227353841s ago: executing program 3 (id=3883): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0b00000005000000020000000400000005"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="05000000040000000c00000005"], 0x50) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000a80)=@bpf_tracing={0x1a, 0x14, &(0x7f0000000d80)=ANY=[@ANYBLOB="000000df04d86484225a2e7917edfe7eebc8cae6e86f4ba8e9bd85da6d28548907f17635c5e0baa3fc5711aec9a258d1404531d0d367860a367a227d117a678a06037070ae07dbf48c21d33aba753da03fa736cdf4aa788fdaa455c51dbf13b9430c64649d70cd034b4a283e8568ba11bbefa23b940d86b1b025d7d3dcebd7906b19aab4f96b3cef83e58f5b83e6234ee69c61837e333625eff443adc1b66a531c50ca2c5ee89c", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000018430000fcffffff00000000000000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000"], &(0x7f0000000800)='syzkaller\x00', 0x2, 0xa2, &(0x7f0000000840)=""/162, 0x41000, 0x4, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x8, &(0x7f0000000900)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000940)={0x4, 0xd, 0x6}, 0x10, 0x67e8, 0xffffffffffffffff, 0x0, &(0x7f0000000a40)=[r0, r0, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0], 0x0, 0x10, 0x4}, 0x94) bpf$TOKEN_CREATE(0x24, &(0x7f0000000b40), 0x8) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000cc0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r4}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1b, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000009e70a71771445aa088dd0000b559e097cae030ea1c918e51952433eec56a4ae0ff4e1336a24af7b25bafb443050d3d1f000000000000000081412eea1047f4ccd54326f9d2e24afb206dfca45abe9ac491d827b191ba9c8e920a490e77f9d94a1989e5b55d93bf1850f4404f3637dbcf8e54321358ddd243d5cba60253f01fd90009621d52e487104da96d410000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r5}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) msgget$private(0x0, 0x102) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r6, 0x0, 0x4}, 0x18) syz_io_uring_setup(0x1714, &(0x7f0000000300)={0x0, 0x2dd2, 0x10100, 0x0, 0xffffffdc}, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r7, r8, &(0x7f00000001c0)=@IORING_OP_RENAMEAT={0x23, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000002180)='./file0\x00', 0xffffffffffffffff, 0x0, 0x1}) r9 = socket(0x10, 0x803, 0x0) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f00000027c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000f000000970000005000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='sys_enter\x00', r11}, 0x10) membarrier(0x2, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r12 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r13, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=@newtfilter={0x44, 0x2c, 0xd27, 0x30bd29, 0x2, {0x0, 0x0, 0x0, r13, {0x0, 0x6}, {}, {0x11, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_IPV4_DST={0x8, 0xc, @local}, @TCA_FLOWER_KEY_IPV4_DST_MASK={0x8, 0xd, 0xff000000}]}}]}, 0x44}}, 0x0) 2.195749037s ago: executing program 1 (id=3885): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="05000000040000000c00000005"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)='%ps \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000cc0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) msgget$private(0x0, 0x102) 2.168026117s ago: executing program 1 (id=3886): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x0) ioctl$sock_inet_udp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) write(r0, 0x0, 0x0) 2.058451189s ago: executing program 1 (id=3888): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000080)=0x654a, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="796104000000000000007e0000000c0099001000000004000000d0"], 0x20}}, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) write$cgroup_freezer_state(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$sock_int(r0, 0x1, 0xc, &(0x7f0000000000)=0x1, 0x4) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) r3 = getpid() r4 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r3, 0x0, 0xffffffffffffffff, 0x0) r5 = getpid() r6 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r5, 0x0, r4, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r6, 0x2401, 0x80ffff) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$OBJ_GET_PROG(0x7, &(0x7f00000003c0)=@generic={&(0x7f0000000280)='./file0\x00', 0x0, 0x10}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r7}, 0x10) 2.00402097s ago: executing program 3 (id=3890): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = dup3(r0, r0, 0x80000) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000480)=ANY=[@ANYRESDEC=r0, @ANYBLOB="0000000000000000b7082a00000000007b8af8ffe7ffffffbfa20000009b14ec54acd49de43600000007020000f8ffffffb7030000ae54ca58e30b63d8c11eb1f4", @ANYBLOB="180000000000000000040000000000850000006d00000018110000", @ANYRES64=r0, @ANYRESOCT], &(0x7f0000000000)='syzkaller\x00', 0x4, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1f, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000080)='kfree\x00', r2}, 0x18) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000240)={0x3800000, 0x0}, 0x8) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000340)={@ifindex, r1, 0x2b, 0x2039, r1, @void, @void, @value=r3}, 0x20) r4 = open(&(0x7f0000000280)='.\x00', 0x80, 0x28) r5 = socket(0x3, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000000000)={'sit0\x00', &(0x7f00000002c0)={'gretap0\x00', 0x0, 0x7, 0x8000, 0x1, 0x7fffffff, {{0x12, 0x4, 0x0, 0x16, 0x48, 0x64, 0x0, 0x41, 0x4, 0x0, @multicast2, @rand_addr=0x64010102, {[@timestamp_addr={0x44, 0x1c, 0x19, 0x1, 0x5, [{@rand_addr=0x64010101, 0x200}, {@private=0xa010101, 0xffffff40}, {@remote, 0xffffffff}]}, @generic={0x89, 0x8, "4e337e8206cd"}, @timestamp={0x44, 0x8, 0xc2, 0x0, 0xc, [0x81]}, @ra={0x94, 0x4}, @end]}}}}}) fcntl$notify(r4, 0x402, 0x8000003d) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000c40), r6) r8 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r8, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001a0001000000ff7f0000000080000000", @ANYRES32=0x0, @ANYRES32=r8], 0x24}}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r6, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x54, r7, 0x1, 0x0, 0x0, {0x6, 0x0, 0x900}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @loopback}, @NLBL_UNLABEL_A_SECCTX={0xf, 0x7, 'unconfined\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @mcast2}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @private=0xa010101}]}, 0x54}, 0x2, 0x34005}, 0x4000000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0xfffffffffffffffd}, 0x18) creat(&(0x7f00000006c0)='./file0\x00', 0x50) bind$bt_sco(0xffffffffffffffff, &(0x7f0000000140), 0x8) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x17, 0xc, 0x0, 0x0, 0x7a, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @cgroup_sysctl=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r9}, 0x10) r10 = socket$pppl2tp(0x18, 0x1, 0x1) r11 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r10, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, r11, {0x2, 0x0, @multicast2}, 0x2}}, 0x2e) r12 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r12, &(0x7f00000000c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}, 0x2, 0x2}}, 0x26) close_range(r11, 0xffffffffffffffff, 0x0) 1.941337021s ago: executing program 2 (id=3892): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)={{0x14}, [@NFT_MSG_NEWRULE={0x70, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x80}, [@NFTA_RULE_EXPRESSIONS={0x44, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @masq={{0x9}, @val={0x4}}}, {0x2c, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_NG_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_NG_DREG={0x8, 0x1, 0x1, 0x0, 0x24}, @NFTA_NG_MODULUS={0x8, 0x2, 0x1, 0x0, 0x80000001}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xf}}}, 0x98}}, 0x12) 1.890419231s ago: executing program 3 (id=3894): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0b00000005000000020000000400000005"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000080)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)='%ps \x00'}, 0x20) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000a80)=@bpf_tracing={0x1a, 0x14, &(0x7f0000000d80)=ANY=[@ANYBLOB="000000df04d86484225a2e7917edfe7eebc8cae6e86f4ba8e9bd85da6d28548907f17635c5e0baa3fc5711aec9a258d1404531d0d367860a367a227d117a678a06037070ae07dbf48c21d33aba753da03fa736cdf4aa788fdaa455c51dbf13b9430c64649d70cd034b4a283e8568ba11bbefa23b940d86b1b025d7d3dcebd7906b19aab4f96b3cef83e58f5b83e6234ee69c61837e333625eff443adc1b66a531c50ca2c5ee89c", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000018430000fcffffff00000000000000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000"], &(0x7f0000000800)='syzkaller\x00', 0x2, 0xa2, &(0x7f0000000840)=""/162, 0x41000, 0x4, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x8, &(0x7f0000000900)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000940)={0x4, 0xd, 0x6}, 0x10, 0x67e8, 0xffffffffffffffff, 0x0, &(0x7f0000000a40)=[r0, r0, r0, r1, 0xffffffffffffffff, r1, r0], 0x0, 0x10, 0x4}, 0x94) bpf$TOKEN_CREATE(0x24, &(0x7f0000000b40)={0x0, r1}, 0x8) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000cc0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r4}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1b, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000009e70a71771445aa088dd0000b559e097cae030ea1c918e51952433eec56a4ae0ff4e1336a24af7b25bafb443050d3d1f000000000000000081412eea1047f4ccd54326f9d2e24afb206dfca45abe9ac491d827b191ba9c8e920a490e77f9d94a1989e5b55d93bf1850f4404f3637dbcf8e54321358ddd243d5cba60253f01fd90009621d52e487104da96d410000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r5}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) msgget$private(0x0, 0x102) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r6, 0x0, 0x4}, 0x18) syz_io_uring_setup(0x1714, &(0x7f0000000300)={0x0, 0x2dd2, 0x10100, 0x0, 0xffffffdc}, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r7, r8, &(0x7f00000001c0)=@IORING_OP_RENAMEAT={0x23, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000002180)='./file0\x00', 0xffffffffffffffff, 0x0, 0x1}) r9 = socket(0x10, 0x803, 0x0) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f00000027c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000f000000970000005000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='sys_enter\x00', r11}, 0x10) membarrier(0x2, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r12 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r13, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=@newtfilter={0x44, 0x2c, 0xd27, 0x30bd29, 0x2, {0x0, 0x0, 0x0, r13, {0x0, 0x6}, {}, {0x11, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_IPV4_DST={0x8, 0xc, @local}, @TCA_FLOWER_KEY_IPV4_DST_MASK={0x8, 0xd, 0xff000000}]}}]}, 0x44}}, 0x0) 1.884365052s ago: executing program 2 (id=3895): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x800, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000000000000000200009500"], &(0x7f00000001c0)='syzkaller\x00'}, 0x94) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800e00010069703665727370616e0000002000028006000200300000001400060000000000000000000000ffff7f00000108000a00", @ANYRESOCT], 0x5c}}, 0x0) shutdown(r6, 0x0) r7 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x2, 0xc}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r7, &(0x7f00000003c0)={0x14, 0x88, 0xfa00, {r8, 0x10, 0x0, @in={0x2, 0x4e20, @rand_addr=0x64010100}}}, 0x90) pipe2(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) readv(r9, &(0x7f0000000740)=[{&(0x7f0000000480)=""/215, 0xd7}], 0x1) writev(r10, &(0x7f0000000200)=[{&(0x7f0000000100)="19", 0x3a4e1e905c56cdb7}], 0x1) inotify_init1(0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'veth1_to_hsr\x00', 0x0}) r12 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r5, r11, 0x25, 0x0, @val=@netfilter}, 0x40) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) close_range(r4, r12, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x400}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000780)=@newtfilter={0x38, 0x2c, 0xf27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xf}, {}, {0x7, 0x4}}, [@filter_kind_options=@f_flow={{0x9}, {0x8, 0x2, [@TCA_FLOW_EMATCHES={0x4}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40014}, 0x0) 1.821539802s ago: executing program 4 (id=3896): socket$nl_route(0x10, 0x3, 0x0) epoll_create1(0x0) socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x5000000, 0x0, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02000000040000000100000022bf"], 0x48) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x4, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0x10, 0xffffffffffffffff, 0x2) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{r0, 0xffffffffffffffff}, &(0x7f00000003c0), &(0x7f0000000400)}, 0x20) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000740), &(0x7f0000000840), 0xffffd6c0, r1}, 0x38) fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x0, 0x200000eb, &(0x7f0000000040)=ANY=[], 0x0, 0x6, 0x0, 0x0, 0x41100, 0x58, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100cb3a}, 0x94) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x200008, &(0x7f0000000900)={[{@grpquota}, {@usrquota}, {@quota}], [{@obj_role={'obj_role', 0x3d, 'nodiscard'}}, {@fsname={'fsname', 0x3d, '\x98!*5'}}, {@permit_directio}, {@fowner_lt}, {@smackfstransmute={'smackfstransmute', 0x3d, ','}}, {@smackfsfloor={'smackfsfloor', 0x3d, '\xd4i\xff\x10?\xfc\x80k\x89\x9a|\x1c\x89l.\x85\x80Z\xe2\xba\xa0S\xa0\x8e\xedp0\xfb\xd3\xf9\x94TP=\x8d\xf0\xd9\xee\x12\xb7Y\xeby\tl2\x8d\xda\xc5\x0fM\xb5\xf5\xe9\xa6!> \x995'}}, {@dont_appraise}, {@fscontext={'fscontext', 0x3d, 'system_u'}}, {@appraise}]}, 0x1, 0x504, &(0x7f0000001000)="$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") r3 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000840)={[{@bsdgroups}, {@nodiscard}, {@noblock_validity}, {@mb_optimize_scan}, {@grpjquota}, {@norecovery}, {@abort}, {@nombcache}, {@stripe={'stripe', 0x3d, 0x10}}]}, 0x64, 0x525, &(0x7f0000001a80)="$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") ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x80044940, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, 0x0) syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1a4a438, &(0x7f00000008c0)=ANY=[], 0xb, 0x0, &(0x7f0000000000)) syz_genetlink_get_family_id$mptcp(&(0x7f0000000340), r2) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r5, 0x0, r6, 0x0, 0x1, 0x0) ioctl$sock_inet_udp_SIOCINQ(r6, 0x541b, 0x0) write(r4, 0x0, 0x0) 1.739059694s ago: executing program 3 (id=3897): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb70200"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a000000020000000110000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0xb, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r7 = socket(0x10, 0x803, 0x0) sendto(r7, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000000)='./bus\x00', 0x116003d, &(0x7f0000001fc0)=ANY=[@ANYBLOB='shortname=lower,iocharset=iso8859-1,fmask=000000000000000000000J6,uni_xlate=1,uni_xlate=0,fmask=00000000000000000000003,uid=', @ANYBLOB="7d75aefbe901e9bcf8a06bbcf587b96062ba5fa26ecce7d3b460b4533df9c5505d473a09f17b71071b625aea47d260a63cc3ddddfab8bb6e6f64c704809835d7fa60abb8f326edfee27cf1f97c3cf2ec38176700d962de683b0a5cba8fd5e59ed8caf43ae4946391d3c6b1ffe6fbfc2329a46df8a47f40e40e5572d4f0e37c8a", @ANYBLOB="2c756e695f786c6174653d302c757466383d312c636865636b3d7374726963742c6e6f6e756d7461696c3d302c726f6469722c6572726f72733d636f6e74696e75652c73686f72746e616d653d6c6f7765722c756d61516b3d30303030303030303030303030303030303030303030372c726f6469722c7379735f696d6d757461626c652c00e938dc09f7faaa1367021238080df6946f8a6d4aa4aa9c9cce337d8377e3", @ANYRES64=r3, @ANYBLOB="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"], 0x80, 0x2bb, &(0x7f0000001240)="$eJzs3U9rI2UcB/DfpMkkKpgcPInggB48Ldu9ekmRXRB7cslBPWhxtyBNEFoo+AdjT169ePDgKxAEX4gX34HgVfBmhcLITGaapI1pIk3rls/n0l+feb4zv5k+tNNDn370yujgSRb7J1/+Fp1OEo1+9OM0iV40ovZ1zOl/GwDAs+w0z+PPfGKdXBIRnc21BQBs0Io//188r36+kbYAgA16/N777+zs7j58N8s68Wj0zfGg+M2++Dg5vrMfn8Qwnsb96MZZRPmi0IrybaEoH+V5Pm5mhV68PhofD4rk6MNfqvPv/BFR5rejG71y6Pxto8y/vftwO5uYyY+LPp6vrt8v8g+iGy+dh+fyDxbkY5DGG6/N9H8vuvHrx/FpDONJ2cQ0/9V2lr2Vf/fXFx8U7RX5ZHw8aJfzpvKtG/7SAAAAAAAAAAAAAAAAAAAAAABwh92r9s5pR7l/TzFU7b+zdVZ80oqs1pvfn2eST+oTze4PlOf5OI8f6v117mdZllcTp/lmvNyM5u3cNQAAAAAAAAAAAAAAAAAAAPy/HH32+cHecPj08FqKejeAZkT8/Tjiv56nPzPyaiyf3K6uuTccNqpyfk5zdiS26jlJxNI2ipu4psdyVfHcpZ6r4sef1j1h5+o5rcXXus6iXl0He8niZ9iOeqRTLZLv04jpnDRWvFb6b4fyWGf5pQsPdde+9/SFshgvmRPJssbe/H3y5KqR5OJdpOVTXRhvVcVM/MLaWGk9R2cSv/y9IrFbBwAAAAAAAAAAAAAAAAAAbNT0r38XHDxZGm3k7Y21BQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA3avr//9coxlV4hclpHB41bvkeAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAuPv+CQAA///WoVye") ioctl$TCFLSH(0xffffffffffffffff, 0x400455c8, 0x20000000008) mkdir(&(0x7f0000000000)='./control\x00', 0xa2) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[@ANYBLOB="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"], &(0x7f0000000200)=""/2, 0x155, 0x2, 0x1, 0x2, 0x10000}, 0x28) bpf$TOKEN_CREATE(0x24, &(0x7f00000002c0)={0x0, r0}, 0x8) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x9, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @fallback=0x12, r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000001c0)='mm_page_free\x00', r9, 0x0, 0x6}, 0x18) r10 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x2082) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r10, 0xc0a85320, &(0x7f00000005c0)={{0x80, 0x7}, 'port0\x00', 0x44, 0xa04f2, 0x10000000, 0x8000008, 0x3, 0x4, 0x80000001}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r10, 0x40505330, &(0x7f00000001c0)={0x800100, 0xffffffff, 0x22, 0xe1d9, 0x1101, 0xff}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r10, 0x40505330, &(0x7f00000004c0)={0x800100, 0xfffffffd, 0x0, 0x8, 0x9, 0x6}) 1.597049236s ago: executing program 1 (id=3898): prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) add_key$fscrypt_provisioning(0x0, &(0x7f0000000080)={'syz', 0x2}, &(0x7f0000000280)=ANY=[], 0x9, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f00000003c0)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00', r4}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)={0xa000000d}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000400)={0xa}) epoll_pwait(r0, &(0x7f0000000080)=[{}], 0x1, 0x80000000, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$BTRFS_IOC_QUOTA_CTL(r6, 0xc0109428, &(0x7f0000000040)={0x1}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='sched_switch\x00', r5, 0x0, 0xa}, 0x18) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x8a, &(0x7f00000003c0)={[{@jqfmt_vfsold}, {@usrjquota, 0x22}, {@errors_continue}, {@journal_dev={'journal_dev', 0x3d, 0xb83}}, {@data_err_ignore}, {@grpjquota, 0x22}, {@errors_continue}, {@errors_remount}, {@noblock_validity}]}, 0xfe, 0x44e, &(0x7f0000000900)="$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") 1.551182126s ago: executing program 2 (id=3899): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = dup3(r0, r0, 0x80000) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000480)=ANY=[@ANYRESDEC=r0, @ANYBLOB, @ANYBLOB="180000000000000000040000000000850000006d00000018110000", @ANYRES64=r0, @ANYRESOCT], &(0x7f0000000000)='syzkaller\x00', 0x4, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1f, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000080)='kfree\x00', r2}, 0x18) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000240)={0x3800000, 0x0}, 0x8) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000340)={@ifindex, r1, 0x2b, 0x2039, r1, @void, @void, @value=r3}, 0x20) r4 = open(&(0x7f0000000280)='.\x00', 0x80, 0x28) r5 = socket(0x3, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000000000)={'sit0\x00', &(0x7f00000002c0)={'gretap0\x00', 0x0, 0x7, 0x8000, 0x1, 0x7fffffff, {{0x13, 0x4, 0x0, 0x16, 0x4c, 0x64, 0x0, 0x41, 0x4, 0x0, @multicast2, @rand_addr=0x64010102, {[@timestamp_addr={0x44, 0x1c, 0x19, 0x1, 0x5, [{@rand_addr=0x64010101, 0x200}, {@private=0xa010101, 0xffffff40}, {@remote, 0xffffffff}]}, @generic={0x89, 0x7, "4e337e8206cd"}, @timestamp={0x44, 0xc, 0xc2, 0x0, 0xc, [0x81, 0x100000]}, @ra={0x94, 0x4}, @end]}}}}}) fcntl$notify(r4, 0x402, 0x8000003d) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000c40), r6) r8 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r8, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001a0001000000ff7f0000000080000000", @ANYRES32=0x0, @ANYRES32=r8], 0x24}}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r6, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x54, r7, 0x1, 0x0, 0x0, {0x6, 0x0, 0x900}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @loopback}, @NLBL_UNLABEL_A_SECCTX={0xf, 0x7, 'unconfined\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @mcast2}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @private=0xa010101}]}, 0x54}, 0x2, 0x34005}, 0x4000000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0xfffffffffffffffd}, 0x18) creat(&(0x7f00000006c0)='./file0\x00', 0x50) bind$bt_sco(0xffffffffffffffff, &(0x7f0000000140), 0x8) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x7a, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @cgroup_sysctl=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r10}, 0x10) r11 = socket$pppl2tp(0x18, 0x1, 0x1) r12 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r11, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, r12, {0x2, 0x0, @multicast2}, 0x2}}, 0x2e) r13 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r13, 0x0, 0x0) close_range(r12, 0xffffffffffffffff, 0x0) 1.084521084s ago: executing program 2 (id=3900): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x0) ioctl$sock_inet_udp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) write(r0, 0x0, 0x0) 898.384877ms ago: executing program 2 (id=3901): r0 = socket(0x1d, 0x2, 0x6) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x5, 0x0, &(0x7f0000000040)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xb8af}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000600)='kfree\x00', r1}, 0x18) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000380)={0x1d, r2, 0x1, {0x0, 0x1, 0x3}, 0xfe}, 0x18) sendmmsg$sock(r0, &(0x7f0000000280)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="1f", 0x206c}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r3}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x4, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="b40800000000000073119a00000000008510000002000000b7000000000000009500c200000000009500"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000400)={0x1, 0x1, 0x14, 0x3}) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) futex(0x0, 0x3, 0x0, &(0x7f0000fd7ff0), 0x0, 0xfffffffd) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x0) 643.464501ms ago: executing program 0 (id=3903): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0x2}, 0x18) creat(&(0x7f00000000c0)='./file0\x00', 0x48) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX]) 598.468631ms ago: executing program 0 (id=3904): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = dup3(r0, r0, 0x80000) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000480)=ANY=[@ANYRESDEC=r0, @ANYBLOB="0000000000000000b7082a00000000007b8af8ffe7ffffffbfa20000009b14ec54acd49de43600000007020000f8ffffffb7030000ae54ca58e30b63d8c11eb1f4", @ANYBLOB="180000000000000000040000000000850000006d00000018110000", @ANYRES64=r0, @ANYRESOCT], &(0x7f0000000000)='syzkaller\x00', 0x4, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1f, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000080)='kfree\x00', r2}, 0x18) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000240)={0x3800000, 0x0}, 0x8) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000340)={@ifindex, r1, 0x2b, 0x2039, r1, @void, @void, @value=r3}, 0x20) r4 = open(&(0x7f0000000280)='.\x00', 0x80, 0x28) r5 = socket(0x3, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000000000)={'sit0\x00', &(0x7f00000002c0)={'gretap0\x00', 0x0, 0x7, 0x8000, 0x1, 0x7fffffff, {{0x12, 0x4, 0x0, 0x16, 0x48, 0x64, 0x0, 0x41, 0x4, 0x0, @multicast2, @rand_addr=0x64010102, {[@timestamp_addr={0x44, 0x1c, 0x19, 0x1, 0x5, [{@rand_addr=0x64010101, 0x200}, {@private=0xa010101, 0xffffff40}, {@remote, 0xffffffff}]}, @generic={0x89, 0x8, "4e337e8206cd"}, @timestamp={0x44, 0x8, 0xc2, 0x0, 0xc, [0x81]}, @ra={0x94, 0x4}, @end]}}}}}) fcntl$notify(r4, 0x402, 0x8000003d) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000c40), r6) r8 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r8, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001a0001000000ff7f0000000080000000", @ANYRES32=0x0, @ANYRES32=r8], 0x24}}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r6, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x54, r7, 0x1, 0x0, 0x0, {0x6, 0x0, 0x900}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @loopback}, @NLBL_UNLABEL_A_SECCTX={0xf, 0x7, 'unconfined\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @mcast2}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @private=0xa010101}]}, 0x54}, 0x2, 0x34005}, 0x4000000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0xfffffffffffffffd}, 0x18) creat(&(0x7f00000006c0)='./file0\x00', 0x50) bind$bt_sco(0xffffffffffffffff, &(0x7f0000000140), 0x8) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x17, 0xc, 0x0, 0x0, 0x7a, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @cgroup_sysctl=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r9}, 0x10) r10 = socket$pppl2tp(0x18, 0x1, 0x1) r11 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r10, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, r11, {0x2, 0x0, @multicast2}, 0x2}}, 0x2e) r12 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r12, &(0x7f00000000c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}, 0x2, 0x2}}, 0x26) close_range(r11, 0xffffffffffffffff, 0x0) 525.912032ms ago: executing program 0 (id=3905): r0 = openat$sysfs(0xffffff9c, &(0x7f00000037c0)='/sys/kernel/notes', 0x0, 0x0) r1 = syz_io_uring_setup(0xbdc, &(0x7f0000000080)={0x0, 0xec21, 0x80, 0x1, 0x40000333}, &(0x7f0000000340)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r0, 0x0, 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='\x00\x00\x00\x00\x00') io_uring_enter(r1, 0x847ba, 0x2000, 0xe, 0x0, 0x0) 426.888214ms ago: executing program 0 (id=3906): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)={{0x14}, [@NFT_MSG_NEWRULE={0x70, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x80}, [@NFTA_RULE_EXPRESSIONS={0x44, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @masq={{0x9}, @val={0x4}}}, {0x2c, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_NG_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_NG_DREG={0x8, 0x1, 0x1, 0x0, 0x24}, @NFTA_NG_MODULUS={0x8, 0x2, 0x1, 0x0, 0x80000001}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xf}}}, 0x98}}, 0x12) 387.409784ms ago: executing program 0 (id=3907): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000080)=0x654a, 0x4) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$sock_int(r0, 0x1, 0xc, &(0x7f0000000000)=0x1, 0x4) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 386.183994ms ago: executing program 1 (id=3908): mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x30, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x5) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) unshare(0x2c020400) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x20442) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000040)={{0x3, 0x0, 0x0, 0x0, 0x91}, 0x0, 0x8, 0x5}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x18) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000005c0)='rss_stat\x00', r2, 0x0, 0xfffffffffffffffe}, 0x18) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_CMP_DATA={0xc, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "63f4"}]}, @NFTA_CMP_SREG={0x8}, @NFTA_CMP_OP={0x8, 0x2, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xcc}, 0x1, 0x0, 0x0, 0x20004014}, 0x0) msgget$private(0x0, 0x240) r4 = socket$caif_stream(0x25, 0x1, 0x5) r5 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETSF2(r5, 0x402c542d, &(0x7f0000000140)={0xfffffff7, 0x0, 0x0, 0xfdff, 0xe0, "6ae23ae16f51000009faeeaf000000000400", 0x10}) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000040)=0x3a) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000000)=0xa) ioctl$FS_IOC_GETVERSION(r4, 0x80087601, &(0x7f0000000000)) syz_emit_ethernet(0x7a, &(0x7f00000002c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6002173600442b00fc0206000000000000000000000000010420880b0000000000000800000086dd"], 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3800000056000100000000000000000007020000", @ANYRES32, @ANYBLOB="200001"], 0x38}}, 0x40004010) msgsnd(0x0, &(0x7f0000000180)=ANY=[], 0x2000, 0x0) msgrcv(0x0, &(0x7f00000004c0)={0x0, ""/4}, 0x2000, 0xffffff7f00000000, 0x3000) 364.443334ms ago: executing program 4 (id=3909): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000080)=0x654a, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="796104000000000000007e0000000c0099001000000004000000d0"], 0x20}}, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) write$cgroup_freezer_state(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$sock_int(r0, 0x1, 0xc, &(0x7f0000000000)=0x1, 0x4) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) r3 = getpid() r4 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r3, 0x0, 0xffffffffffffffff, 0x0) r5 = getpid() r6 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r5, 0x0, r4, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r6, 0x2401, 0x80ffff) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$OBJ_GET_PROG(0x7, &(0x7f00000003c0)=@generic={&(0x7f0000000280)='./file0\x00', 0x0, 0x10}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r7}, 0x10) 290.292666ms ago: executing program 0 (id=3910): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) (async) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/kcm\x00') faccessat2(r1, &(0x7f0000000040)='\x00', 0x1, 0x1300) (async) sendto$inet6(r1, &(0x7f0000000080)="d3b23b96747d582a457963355b0013a0f86e4f99c7f4a5c35e25313844f8472c8ea52d81c2b0e958f1ab932a192daa1cfc5667c885f4ea677e9fe5d3d8c37f7ab774516a34ad4fa2bd8d1caac79db301ac313d372b9913e2f4e595f2f414", 0x5e, 0x8080, &(0x7f0000000100)={0xa, 0x4e20, 0x10, @loopback, 0x5}, 0x1c) (async) socket$nl_route(0x10, 0x3, 0x0) (async) r2 = syz_io_uring_setup(0x3c20, &(0x7f0000000400)={0x0, 0x204e, 0x800, 0x8002, 0x200030c}, &(0x7f0000000380)=0x0, &(0x7f00000004c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000002c00)=@IORING_OP_TIMEOUT={0xb, 0x11, 0x0, 0x0, 0x7, &(0x7f0000000100), 0x1, 0x40, 0x1}) io_uring_enter(r2, 0x627, 0xc1040000, 0x43, 0x0, 0x0) (async) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0900000004000000e27f000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) (async) syz_genetlink_get_family_id$smc(0x0, 0xffffffffffffffff) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) (async) wait4(0x0, 0x0, 0x40000000, 0x0) r7 = creat(0x0, 0x0) (async) io_setup(0x9, &(0x7f0000000280)=0x0) io_submit(r8, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x2, 0x1, 0x0, r7, 0x0}]) (async) write$binfmt_aout(0xffffffffffffffff, 0x0, 0xff2e) (async) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, "0062ff00"}) (async) r9 = socket$nl_generic(0x10, 0x3, 0x10) (async) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r10, @ANYBLOB="01000000000000feff00170000000c0006800800060000000000e122dff3647a354a84ea64d5cdde721fc39f2f60b36bf54136373aa0dcd679fb40c6d7ed15957af0094257621891c4767224590f216988e3c164050d9db7e037be2559ba1a6c309b97853c661794259a1ffff05e0b7e10ec09f95ba11814be6940995a4832bb8c3df13b88526defd1a2ca507763000000"], 0x20}, 0x1, 0x0, 0x0, 0x204c}, 0x4000004) bpf$PROG_LOAD(0x5, 0x0, 0x0) 29.24911ms ago: executing program 1 (id=3911): prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) add_key$fscrypt_provisioning(0x0, &(0x7f0000000080)={'syz', 0x2}, &(0x7f0000000280)=ANY=[], 0x9, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f00000003c0)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00', r4}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)={0xa000000d}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000400)={0xa}) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$BTRFS_IOC_QUOTA_CTL(r6, 0xc0109428, &(0x7f0000000040)={0x1}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='sched_switch\x00', r5, 0x0, 0xa}, 0x18) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x8a, &(0x7f00000003c0)={[{@jqfmt_vfsold}, {@usrjquota, 0x22}, {@errors_continue}, {@journal_dev={'journal_dev', 0x3d, 0xb83}}, {@data_err_ignore}, {@grpjquota, 0x22}, {@errors_continue}, {@errors_remount}, {@noblock_validity}]}, 0xfe, 0x44e, &(0x7f0000000900)="$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") 13.59487ms ago: executing program 3 (id=3912): openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000200)='fd/3\x00') r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYRES64], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="754d03fb28147770b7080000000000007b8af8ff0000bb3544ad2b0000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r0}, &(0x7f0000000000), 0x0}, 0x20) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, 0x0, 0x0) munmap(&(0x7f0000002000/0x2000)=nil, 0x2000) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec8500000050000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000800)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002abd7000000000001a00000098000180140002006970766c616e31000000000000000000e23d989071cdcbcce4910b890067e02d5fa8fc047fa6c4c586daec180ba218062fb4ddcc17ebda882001843f26191bcf660c0446d4c42bf7834df341e882f9639aa3873c72af0137daea455159d954f48ea6e8b45985d7a991632c06055d887cf613b8ff86ae8542bd610af7c0b9c2f163226d7f02b33186e0200fa8b32d197e986eda463b459367e6fe820b6c713b2692c7e73bf6610d050000000000000000000000001ddc1512b9e0f2bc98b84cd35b346fa40d062b41f51a75e57c23942d7af900"/243], 0x2c}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$TIOCL_SETSEL(r7, 0x541c, &(0x7f00000000c0)={0x2, {0x2, 0x3bf, 0x4, 0x14a}}) ioctl$TIOCL_PASTESEL(r7, 0x541c, &(0x7f0000000000)) lstat(&(0x7f00000002c0)='./file1\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x10000, &(0x7f0000000380)={[], [{@smackfshat={'smackfshat', 0x3d, 'ext4\x00'}}, {@euid_lt={'euid<', r8}}, {@smackfstransmute={'smackfstransmute', 0x3d, '*.\\'}}, {@smackfstransmute={'smackfstransmute', 0x3d, '-'}}]}, 0x3, 0x4cd, &(0x7f0000000c80)="$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") mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000000050005000200000c12000300686173683a6e65742c706f7274"], 0x4c}}, 0x2) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000005c0), r9) sendmsg$IPSET_CMD_ADD(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000090601020000ffff00000000020000000900020073797a31000000000500010007000000280007800c00018008000140ffffffff0500070084000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) 0s ago: executing program 2 (id=3913): r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00'}) socket$netlink(0x10, 0x3, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSIGACCEPT(r1, 0x5607, 0x4) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000080000000b"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) write$selinux_attr(0xffffffffffffffff, &(0x7f0000000100)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) ioctl$VT_ACTIVATE(r1, 0x5606, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x18}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r5}, 0x18) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000014c0)=ANY=[@ANYBLOB="0a0000001300000020000000bc00000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000040000000000"], 0x50) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="181000001838804ac94277acfe6ea604b30a89a17a302f3f937b672c22d493c4c81d894a47d9459aebe67eaefb17ffed024fffdc314d88f737ea56966e566f02cb9d3ce900000000000000000000000000001000", @ANYRES32=r6, @ANYBLOB="00000000000000009500000000000000"], &(0x7f0000000480)='syzkaller\x00', 0x1}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080), 0x10}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={r7, 0xe0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, 0x0, 0x0}}, 0x10) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000f00)={0x11, 0x7, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000300000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000000020000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r8}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=ANY=[], &(0x7f0000000000)='syzkaller\x00'}, 0x94) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00'}, 0x10) r10 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)}], 0x1}, 0x0) ioctl$TIOCSWINSZ(r1, 0x5414, &(0x7f0000000180)={0x9, 0x0, 0x3, 0x7fff}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0}, 0x18) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x2008002, &(0x7f0000000600)={[{@acl}, {@prjquota}, {@quota}, {@data_journal}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x8d}}]}, 0x1, 0x558, &(0x7f0000000680)="$eJzs3c9vI1cdAPDvTH52d9vsQg9QAbtAYUGrtTfedlX10nIBoaoSouKAOGxD4o3C2nGIndKESKR/A0ggcYI/gQMSB6SeOHDjiMQBEOWAVCACbZA4GM14kriJw5rEsdn485Fm58ebme979s6852dnXgBj60ZE7ETEdES8GRFzxfakmOLVzpTt92h3e3Fvd3sxiXb7jb8leXq2LbqOyVwuzjkbEV/9UsQ3k+Nxm5tbDxdqtep6sV5u1dfKzc2t2yv1heXqcnW1Urk3f+/OS3dfrAysrNfrP3v/iyuvfe2Xv/j4e7/Z+fx3s2xdKdK6yzFInaJPHcTJTEbEa+cRbAQmivn0iPPB6aQR8aGI+FR+/c/FRP6/EwC4yNrtuWjPda8DABddmveBJWkpItK0aASUOn14z8altNZotm49aGysLnX6yq7GVPpgpVa9c23md9/Od55KsvX5PC1Pz9crR9bvRsS1iPjBzFP5emmxUVsaTZMHAMbe5e76PyL+OZOmpVJfh/b4Vg8AeGLMjjoDAMDQqf8BYPyo/wFg/PRR/xdf9u+ce14AgOHw+R8Axo/6HwDGj/ofAMbKV15/PZvae8Xzr5fe2tx42Hjr9lK1+bBU31gsLTbW10rLjcZy/sye+uPOV2s01uZfiI23y61qs1Vubm7drzc2Vlv38+d6369ODaVUAMB/c+36u79NImLn5afyKbrGclBXw8WWDnAv4MkycZaDNRDgiWa0LxhffVXheSPh1+eeF2A0ej7Me7bn4gf96H8I4ndG8H/l5kf77/83xjNcLHr2YXydrv//lYHnAxi+U/f//2Gw+QCGr91Ojo75P32QBABcSGf4CV/7e4NqhAAj9bjBvAfy/T8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABcMFci4luRpKV8LPA0+zctlSKejoirMZU8WKlV70TEM3E9IqZmsvX5UWcaADij9C9JMf7XzbnnrxxNnU7+NZPPI+I7P37jh28vtFrr89n2vx9sn9kfPqxyeNwZxhUEAPr3p352yuvvSjHv+iD/aHd7cX86xzwe8/4XDgYfXdzb3c6nTspktNvtdsRs3pa49I8kJotjZiPiuYiYGED8nXci4iO9yp/kfSNXi5FPu+NHEfvpocZPPxA/zdM68+zl+/AA8gLj5t3s/vNqr+svjRv5vPf1P5vfoc4uv//NRuzf+/a64k8WkSZ6xM+u+Rv9xnjhV18+trE910l7J+K5yV7xk4P4yQnxn+8z/u8/9onvv3JCWvsnETejd/zuWOVWfa3c3Ny6vVJfWK4uV1crlXvz9+68dPfFSjnvoy7v91Qf99eXbz1zUt6y8l86IX7nnb98pPzTB8d+ps/y//Tfb37jk4erM0fjf+7Tvd//Z/N579c/qxM/22f8hUs/P3H47iz+0gnlf9z7f6vP+O/9eWupz10BgCFobm49XKjVqutnWsg+hQ7iPMcWsiz2t/N+c/FsQf8Y+cLhy5JEEoMuV9YY62fnqfN6Vc99YfKgrTjYM389O+OQi5MOvBSnWYirxcKjYQUd3T0JGI7Di37UOQEAAAAAAAAAAAAAAE4yjL9hGnUZAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAuLj+EwAA//8GP8IF") 0s ago: executing program 0 (id=3914): r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00'}) socket$netlink(0x10, 0x3, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSIGACCEPT(r1, 0x5607, 0x4) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000080000000b"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) write$selinux_attr(0xffffffffffffffff, 0x0, 0x0) ioctl$VT_ACTIVATE(r1, 0x5606, 0x4) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r5}, 0x18) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000014c0)=ANY=[@ANYBLOB="0a0000001300000020000000bc00000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000040000000000"], 0x50) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="181000001838804ac94277acfe6ea604b30a89a17a302f3f937b672c22d493c4c81d894a47d9459aebe67eaefb17ffed024fffdc314d88f737ea56966e566f02cb9d3ce900000000000000000000000000001000", @ANYRES32=r6, @ANYBLOB="0000000000000000950000000000"], &(0x7f0000000480)='syzkaller\x00', 0x1}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080), 0x10}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={r7, 0xe0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, 0x0, 0x0}}, 0x10) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000f00)={0x11, 0x7, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000300000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000000020000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r8}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000000000000000000000000008500000087000000180100002020702500000000002020207b1af8ff00000000bfa100000000e7ff06010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00'}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7, 0x0, &(0x7f00000004c0)=[{0x0, 0x0, 0x0, 0x3}, {0x0, 0x4}, {0x0, 0x4, 0x10009, 0x5}, {0x3, 0x2, 0x3, 0x3}, {0x1, 0x1, 0xa, 0xb}, {0x5, 0x3, 0x1, 0xb}, {0x5, 0x2, 0xc, 0xc}], 0x10, 0xfffffff7}, 0x94) r10 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)}], 0x1}, 0x0) ioctl$TIOCSWINSZ(r1, 0x5414, &(0x7f0000000180)={0x9, 0x0, 0x3, 0x7fff}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0}, 0x18) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x2008002, &(0x7f0000000600)={[{@acl}, {@prjquota}, {@quota}, {@data_journal}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x8d}}]}, 0x1, 0x558, &(0x7f0000000680)="$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") kernel console output (not intermixed with test programs): sim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.046267][T11681] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.119339][T11779] netlink: 'syz.3.3008': attribute type 6 has an invalid length. [ 230.166476][T11783] loop3: detected capacity change from 0 to 764 [ 230.176067][T11783] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 230.187725][T11783] vxcan1: tx address claim with dlc 0 [ 230.198591][T11783] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.218102][T11738] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.237539][T11783] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.267069][T11738] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.306213][T11783] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.327591][T11738] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.367565][T11783] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.421184][T11738] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.446955][T11738] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.469899][T11738] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.486120][T11738] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.472644][T11807] FAULT_INJECTION: forcing a failure. [ 231.472644][T11807] name failslab, interval 1, probability 0, space 0, times 0 [ 231.485463][T11807] CPU: 0 UID: 0 PID: 11807 Comm: syz.4.3019 Not tainted 6.16.0-rc5-syzkaller-00053-g8c2e52ebbe88 #0 PREEMPT(voluntary) [ 231.485614][T11807] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 231.485627][T11807] Call Trace: [ 231.485633][T11807] [ 231.485640][T11807] __dump_stack+0x1d/0x30 [ 231.485662][T11807] dump_stack_lvl+0xe8/0x140 [ 231.485681][T11807] dump_stack+0x15/0x1b [ 231.485697][T11807] should_fail_ex+0x265/0x280 [ 231.485846][T11807] should_failslab+0x8c/0xb0 [ 231.485869][T11807] kmem_cache_alloc_lru_noprof+0x55/0x310 [ 231.485958][T11807] ? sock_alloc_inode+0x34/0xa0 [ 231.485984][T11807] ? __pfx_sock_alloc_inode+0x10/0x10 [ 231.486006][T11807] sock_alloc_inode+0x34/0xa0 [ 231.486088][T11807] alloc_inode+0x40/0x170 [ 231.486121][T11807] __sock_create+0x122/0x5b0 [ 231.486175][T11807] __sys_socketpair+0x170/0x430 [ 231.486200][T11807] ? ksys_write+0x192/0x1a0 [ 231.486306][T11807] __x64_sys_socketpair+0x52/0x60 [ 231.486333][T11807] x64_sys_call+0x23f2/0x2fb0 [ 231.486362][T11807] do_syscall_64+0xd2/0x200 [ 231.486449][T11807] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 231.486476][T11807] ? clear_bhb_loop+0x40/0x90 [ 231.486501][T11807] ? clear_bhb_loop+0x40/0x90 [ 231.486525][T11807] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 231.486546][T11807] RIP: 0033:0x7fae2206e929 [ 231.486562][T11807] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 231.486580][T11807] RSP: 002b:00007fae206d7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 231.486631][T11807] RAX: ffffffffffffffda RBX: 00007fae22295fa0 RCX: 00007fae2206e929 [ 231.486643][T11807] RDX: 0000000000000002 RSI: 0000000000000002 RDI: 000000000000001d [ 231.486655][T11807] RBP: 00007fae206d7090 R08: 0000000000000000 R09: 0000000000000000 [ 231.486667][T11807] R10: 0000200000000280 R11: 0000000000000246 R12: 0000000000000001 [ 231.486679][T11807] R13: 0000000000000000 R14: 00007fae22295fa0 R15: 00007ffeda02e918 [ 231.486699][T11807] [ 231.486737][T11807] socket: no more sockets [ 231.724568][T11809] __nla_validate_parse: 6 callbacks suppressed [ 231.724584][T11809] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3020'. [ 231.740254][T11809] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3020'. [ 231.749384][T11809] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3020'. [ 231.762764][T11809] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3020'. [ 231.771775][T11809] netlink: 'syz.0.3020': attribute type 6 has an invalid length. [ 232.789904][T11826] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3024'. [ 232.859876][T11828] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3025'. [ 233.752205][T11841] Process accounting resumed [ 234.162774][T11854] loop4: detected capacity change from 0 to 256 [ 234.206501][T11783] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.226781][T11783] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.288989][T11783] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.352499][T11783] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.662979][ T29] kauditd_printk_skb: 3562 callbacks suppressed [ 234.663028][ T29] audit: type=1326 audit(234.630:53502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11856 comm="syz.3.3035" exe="/root/syz-executor" sig=0 arch=c000003e syscall=50 compat=0 ip=0x7f122e8ee929 code=0x7ffc0000 [ 234.947393][T11861] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3036'. [ 235.008050][ T29] audit: type=1326 audit(234.670:53503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11856 comm="syz.3.3035" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f122e8e58e7 code=0x7ffc0000 [ 235.031227][ T29] audit: type=1326 audit(234.670:53504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11856 comm="syz.3.3035" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f122e88ab19 code=0x7ffc0000 [ 235.054428][ T29] audit: type=1326 audit(234.670:53505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11856 comm="syz.3.3035" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f122e8ee929 code=0x7ffc0000 [ 235.077690][ T29] audit: type=1326 audit(234.670:53506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11856 comm="syz.3.3035" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f122e8ee929 code=0x7ffc0000 [ 235.100779][ T29] audit: type=1326 audit(234.670:53507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11838 comm="syz.0.3029" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f71b78bab19 code=0x7ffc0000 [ 235.127530][ T29] audit: type=1326 audit(234.670:53508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11838 comm="syz.0.3029" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f71b78bab19 code=0x7ffc0000 [ 235.150508][ T29] audit: type=1326 audit(234.670:53509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11856 comm="syz.3.3035" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f122e8ee929 code=0x7ffc0000 [ 235.173417][ T29] audit: type=1326 audit(234.670:53510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11856 comm="syz.3.3035" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f122e8ee929 code=0x7ffc0000 [ 235.196574][ T29] audit: type=1326 audit(234.670:53511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11856 comm="syz.3.3035" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f122e8ee929 code=0x7ffc0000 [ 235.327785][T11864] vhci_hcd: invalid port number 96 [ 236.420032][T11895] loop3: detected capacity change from 0 to 512 [ 236.427813][T11895] EXT4-fs: Project quota feature not enabled. Cannot enable project quota enforcement. [ 236.463750][T11897] vhci_hcd: invalid port number 96 [ 236.510626][T11905] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 236.519937][T11905] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 236.688691][T11909] lo speed is unknown, defaulting to 1000 [ 236.751697][T11909] chnl_net:caif_netlink_parms(): no params data found [ 236.791785][T11909] bridge0: port 1(bridge_slave_0) entered blocking state [ 236.798968][T11909] bridge0: port 1(bridge_slave_0) entered disabled state [ 236.806571][T11909] bridge_slave_0: entered allmulticast mode [ 236.813233][T11909] bridge_slave_0: entered promiscuous mode [ 236.820253][T11909] bridge0: port 2(bridge_slave_1) entered blocking state [ 236.827432][T11909] bridge0: port 2(bridge_slave_1) entered disabled state [ 236.834759][T11909] bridge_slave_1: entered allmulticast mode [ 236.841162][T11909] bridge_slave_1: entered promiscuous mode [ 236.860435][T11909] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 236.871121][T11909] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 236.895291][T11909] team0: Port device team_slave_0 added [ 236.902070][T11909] team0: Port device team_slave_1 added [ 236.923635][T11909] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 236.930681][T11909] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 236.956764][T11909] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 236.968133][T11909] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 236.975259][T11909] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 237.001438][T11909] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 237.029950][T11909] hsr_slave_0: entered promiscuous mode [ 237.038514][T11909] hsr_slave_1: entered promiscuous mode [ 237.044534][T11909] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 237.052200][T11909] Cannot create hsr debugfs directory [ 237.115962][T11909] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.164099][T11909] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.214636][T11909] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.254728][T11909] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.548076][T11909] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 238.557280][T11909] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 238.566223][T11909] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 238.575413][T11909] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 238.616604][T11909] 8021q: adding VLAN 0 to HW filter on device bond0 [ 238.630517][T11909] 8021q: adding VLAN 0 to HW filter on device team0 [ 238.641013][ T9347] bridge0: port 1(bridge_slave_0) entered blocking state [ 238.648138][ T9347] bridge0: port 1(bridge_slave_0) entered forwarding state [ 238.659616][ T9357] bridge0: port 2(bridge_slave_1) entered blocking state [ 238.666893][ T9357] bridge0: port 2(bridge_slave_1) entered forwarding state [ 238.844786][ T9343] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 238.854761][ T9343] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 238.864323][ T9343] bond0 (unregistering): Released all slaves [ 238.905815][ T9343] tipc: Left network mode [ 238.913917][ T9343] hsr_slave_0: left promiscuous mode [ 238.919492][ T9343] hsr_slave_1: left promiscuous mode [ 238.925352][ T9343] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 238.932832][ T9343] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 238.940507][ T9343] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 238.948230][ T9343] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 238.958423][ T9343] veth0_macvtap: left promiscuous mode [ 238.964032][ T9343] veth1_vlan: left promiscuous mode [ 238.969260][ T9343] veth0_vlan: left promiscuous mode [ 239.001387][ T9343] pim6reg (unregistering): left allmulticast mode [ 239.035861][ T9343] team0 (unregistering): Port device team_slave_1 removed [ 239.045571][ T9343] team0 (unregistering): Port device team_slave_0 removed [ 239.078454][T11909] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 239.142786][T11909] veth0_vlan: entered promiscuous mode [ 239.150573][T11909] veth1_vlan: entered promiscuous mode [ 239.165497][T11909] veth0_macvtap: entered promiscuous mode [ 239.172558][T11909] veth1_macvtap: entered promiscuous mode [ 239.184079][T11909] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 239.195489][T11909] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 239.205250][T11909] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.214073][T11909] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.222859][T11909] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.231670][T11909] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.494370][T11954] loop3: detected capacity change from 0 to 256 [ 244.506759][ T29] kauditd_printk_skb: 3055 callbacks suppressed [ 244.506783][ T29] audit: type=1400 audit(244.480:56567): avc: denied { watch watch_reads } for pid=11955 comm="syz.1.3062" path="/12/file0" dev="tmpfs" ino=80 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 244.555177][T11959] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3063'. [ 244.574041][ T29] audit: type=1400 audit(244.520:56568): avc: denied { create } for pid=11956 comm="syz.2.3063" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 244.593255][ T29] audit: type=1400 audit(244.520:56569): avc: denied { setopt } for pid=11956 comm="syz.2.3063" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 244.614896][ T29] audit: type=1400 audit(244.590:56570): avc: denied { read write } for pid=11955 comm="syz.1.3062" name="rdma_cm" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 244.638738][ T29] audit: type=1400 audit(244.590:56571): avc: denied { open } for pid=11955 comm="syz.1.3062" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 244.667126][ T29] audit: type=1400 audit(244.590:56572): avc: denied { create } for pid=11958 comm="syz.3.3064" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 244.686234][ T29] audit: type=1400 audit(244.590:56573): avc: denied { bind } for pid=11958 comm="syz.3.3064" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 244.705092][ T29] audit: type=1400 audit(244.590:56574): avc: denied { write } for pid=11958 comm="syz.3.3064" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 244.752627][ T29] audit: type=1400 audit(244.720:56575): avc: denied { block_suspend } for pid=11960 comm="syz.4.3065" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 244.787923][ T29] audit: type=1326 audit(244.760:56576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11967 comm="syz.2.3066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f606f16e929 code=0x7ffc0000 [ 245.007587][T11981] loop3: detected capacity change from 0 to 512 [ 245.016406][T11981] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 245.032143][T11981] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 245.038789][T11981] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 245.046303][T11981] vhci_hcd vhci_hcd.0: Device attached [ 245.056962][T11986] vhci_hcd: connection closed [ 245.057362][ T9344] vhci_hcd: stop threads [ 245.066446][ T9344] vhci_hcd: release socket [ 245.070903][ T9344] vhci_hcd: disconnect device [ 245.459677][T11991] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3072'. [ 245.468756][T11991] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3072'. [ 245.477796][T11991] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3072'. [ 245.487178][T11991] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3072'. [ 245.496177][T11991] netlink: 'syz.4.3072': attribute type 6 has an invalid length. [ 245.556029][T11993] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3073'. [ 245.577986][T11993] loop4: detected capacity change from 0 to 512 [ 245.586719][T11993] ext4: Unknown parameter 'smackfshat' [ 245.761409][T11999] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3077'. [ 245.838655][T11999] loop4: detected capacity change from 0 to 512 [ 245.850651][T11999] ext4: Unknown parameter 'smackfshat' [ 245.883069][T12008] FAULT_INJECTION: forcing a failure. [ 245.883069][T12008] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 245.896208][T12008] CPU: 1 UID: 0 PID: 12008 Comm: syz.2.3080 Not tainted 6.16.0-rc5-syzkaller-00053-g8c2e52ebbe88 #0 PREEMPT(voluntary) [ 245.896244][T12008] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 245.896271][T12008] Call Trace: [ 245.896280][T12008] [ 245.896290][T12008] __dump_stack+0x1d/0x30 [ 245.896313][T12008] dump_stack_lvl+0xe8/0x140 [ 245.896331][T12008] dump_stack+0x15/0x1b [ 245.896359][T12008] should_fail_ex+0x265/0x280 [ 245.896396][T12008] should_fail+0xb/0x20 [ 245.896502][T12008] should_fail_usercopy+0x1a/0x20 [ 245.896603][T12008] _copy_from_user+0x1c/0xb0 [ 245.896685][T12008] core_sys_select+0x1ce/0x6e0 [ 245.896727][T12008] ? set_user_sigmask+0x84/0x190 [ 245.896750][T12008] __se_sys_pselect6+0x216/0x280 [ 245.896826][T12008] __x64_sys_pselect6+0x78/0x90 [ 245.896871][T12008] x64_sys_call+0x1caa/0x2fb0 [ 245.896894][T12008] do_syscall_64+0xd2/0x200 [ 245.897032][T12008] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 245.897105][T12008] ? clear_bhb_loop+0x40/0x90 [ 245.897126][T12008] ? clear_bhb_loop+0x40/0x90 [ 245.897153][T12008] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 245.897179][T12008] RIP: 0033:0x7f606f16e929 [ 245.897208][T12008] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 245.897230][T12008] RSP: 002b:00007f606d7d7038 EFLAGS: 00000246 ORIG_RAX: 000000000000010e [ 245.897272][T12008] RAX: ffffffffffffffda RBX: 00007f606f395fa0 RCX: 00007f606f16e929 [ 245.897284][T12008] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000040 [ 245.897295][T12008] RBP: 00007f606d7d7090 R08: 0000200000000280 R09: 0000000000000000 [ 245.897306][T12008] R10: 0000200000000240 R11: 0000000000000246 R12: 0000000000000001 [ 245.897397][T12008] R13: 0000000000000000 R14: 00007f606f395fa0 R15: 00007ffc0fe39b18 [ 245.897419][T12008] [ 246.593535][T12033] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3087'. [ 246.659479][T12033] loop3: detected capacity change from 0 to 512 [ 246.673533][T12033] ext4: Unknown parameter 'smackfshat' [ 246.991748][T12042] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3091'. [ 247.023825][T12044] loop4: detected capacity change from 0 to 512 [ 247.030998][T12044] EXT4-fs: Project quota feature not enabled. Cannot enable project quota enforcement. [ 247.056980][T12046] vxcan1: tx address claim with dlc 0 [ 247.067559][T12048] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=5126 sclass=netlink_audit_socket pid=12048 comm=syz.4.3094 [ 247.091798][T12046] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.188725][T12046] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.283134][T12046] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.326884][T12046] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.381622][T12046] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.393707][T12046] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.405284][T12046] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.416805][T12046] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.489487][T12068] FAULT_INJECTION: forcing a failure. [ 247.489487][T12068] name failslab, interval 1, probability 0, space 0, times 0 [ 247.502380][T12068] CPU: 0 UID: 0 PID: 12068 Comm: syz.4.3102 Not tainted 6.16.0-rc5-syzkaller-00053-g8c2e52ebbe88 #0 PREEMPT(voluntary) [ 247.502417][T12068] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 247.502480][T12068] Call Trace: [ 247.502486][T12068] [ 247.502493][T12068] __dump_stack+0x1d/0x30 [ 247.502520][T12068] dump_stack_lvl+0xe8/0x140 [ 247.502543][T12068] dump_stack+0x15/0x1b [ 247.502568][T12068] should_fail_ex+0x265/0x280 [ 247.502653][T12068] should_failslab+0x8c/0xb0 [ 247.502682][T12068] kmem_cache_alloc_node_noprof+0x57/0x320 [ 247.502716][T12068] ? __alloc_skb+0x101/0x320 [ 247.502752][T12068] __alloc_skb+0x101/0x320 [ 247.502799][T12068] netlink_alloc_large_skb+0xba/0xf0 [ 247.502929][T12068] netlink_sendmsg+0x3cf/0x6b0 [ 247.502973][T12068] ? __pfx_netlink_sendmsg+0x10/0x10 [ 247.503018][T12068] __sock_sendmsg+0x142/0x180 [ 247.503041][T12068] ____sys_sendmsg+0x31e/0x4e0 [ 247.503145][T12068] ___sys_sendmsg+0x17b/0x1d0 [ 247.503197][T12068] __x64_sys_sendmsg+0xd4/0x160 [ 247.503263][T12068] x64_sys_call+0x2999/0x2fb0 [ 247.503403][T12068] do_syscall_64+0xd2/0x200 [ 247.503442][T12068] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 247.503475][T12068] ? clear_bhb_loop+0x40/0x90 [ 247.503531][T12068] ? clear_bhb_loop+0x40/0x90 [ 247.503552][T12068] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 247.503576][T12068] RIP: 0033:0x7fae2206e929 [ 247.503595][T12068] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 247.503616][T12068] RSP: 002b:00007fae206d7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 247.503639][T12068] RAX: ffffffffffffffda RBX: 00007fae22295fa0 RCX: 00007fae2206e929 [ 247.503654][T12068] RDX: 0000000000000800 RSI: 00002000000004c0 RDI: 0000000000000005 [ 247.503747][T12068] RBP: 00007fae206d7090 R08: 0000000000000000 R09: 0000000000000000 [ 247.503763][T12068] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 247.503778][T12068] R13: 0000000000000000 R14: 00007fae22295fa0 R15: 00007ffeda02e918 [ 247.503802][T12068] [ 247.750019][T12071] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3103'. [ 247.763732][T12073] loop4: detected capacity change from 0 to 512 [ 247.770382][T12073] EXT4-fs: Project quota feature not enabled. Cannot enable project quota enforcement. [ 247.812296][T12076] lo speed is unknown, defaulting to 1000 [ 247.908875][T12079] loop4: detected capacity change from 0 to 512 [ 247.909208][T12079] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 247.929055][T12079] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 247.935798][T12079] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 247.935875][T12079] vhci_hcd vhci_hcd.0: Device attached [ 247.936592][T12090] vhci_hcd: connection closed [ 247.949166][ T9343] vhci_hcd: stop threads [ 247.958390][ T9343] vhci_hcd: release socket [ 247.958402][ T9343] vhci_hcd: disconnect device [ 248.073403][T12098] vhci_hcd: invalid port number 96 [ 248.229100][T12103] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 248.235670][T12103] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 248.243171][T12103] vhci_hcd vhci_hcd.0: Device attached [ 248.251306][T12108] vhci_hcd: connection closed [ 248.251466][ T9343] vhci_hcd: stop threads [ 248.260623][ T9343] vhci_hcd: release socket [ 248.265099][ T9343] vhci_hcd: disconnect device [ 248.491796][T12121] loop4: detected capacity change from 0 to 512 [ 248.500337][T12121] ext4: Unknown parameter 'smackfshat' [ 248.604190][T12128] vhci_hcd: invalid port number 96 [ 248.938174][T12136] loop3: detected capacity change from 0 to 512 [ 248.960692][T12136] EXT4-fs: Project quota feature not enabled. Cannot enable project quota enforcement. [ 249.440300][T12156] netlink: 'syz.1.3137': attribute type 6 has an invalid length. [ 249.473117][T12155] vhci_hcd: invalid port number 96 [ 249.536823][ T29] kauditd_printk_skb: 1159 callbacks suppressed [ 249.536838][ T29] audit: type=1326 audit(249.510:57736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12157 comm="syz.3.3139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb10a3ee929 code=0x7ffc0000 [ 249.668655][ T29] audit: type=1326 audit(249.550:57737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12157 comm="syz.3.3139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb10a3ee929 code=0x7ffc0000 [ 249.691810][ T29] audit: type=1326 audit(249.550:57738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12157 comm="syz.3.3139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb10a3ee929 code=0x7ffc0000 [ 249.714754][ T29] audit: type=1326 audit(249.550:57739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12157 comm="syz.3.3139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb10a3ee929 code=0x7ffc0000 [ 249.737763][ T29] audit: type=1326 audit(249.550:57740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12157 comm="syz.3.3139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb10a3ee929 code=0x7ffc0000 [ 249.761018][ T29] audit: type=1326 audit(249.550:57741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12157 comm="syz.3.3139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fb10a3ee929 code=0x7ffc0000 [ 249.783980][ T29] audit: type=1326 audit(249.550:57742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12157 comm="syz.3.3139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb10a3ee929 code=0x7ffc0000 [ 249.807137][ T29] audit: type=1326 audit(249.550:57743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12157 comm="syz.3.3139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7fb10a3ee929 code=0x7ffc0000 [ 249.830109][ T29] audit: type=1326 audit(249.550:57744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12157 comm="syz.3.3139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb10a3ee929 code=0x7ffc0000 [ 249.853193][ T29] audit: type=1326 audit(249.550:57745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12157 comm="syz.3.3139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7fb10a3ee929 code=0x7ffc0000 [ 250.005311][ T9347] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.023980][T12181] __nla_validate_parse: 10 callbacks suppressed [ 250.024016][T12181] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3145'. [ 250.055943][T12183] loop3: detected capacity change from 0 to 512 [ 250.085011][T12183] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 250.101801][ T9347] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.125194][T12183] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #2: comm syz.3.3146: corrupted inode contents [ 250.151184][T12169] lo speed is unknown, defaulting to 1000 [ 250.177585][T12183] EXT4-fs error (device loop3): ext4_dirty_inode:6459: inode #2: comm syz.3.3146: mark_inode_dirty error [ 250.195698][ T9347] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.226421][T12183] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #2: comm syz.3.3146: corrupted inode contents [ 250.257560][T12183] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #2: comm syz.3.3146: mark_inode_dirty error [ 250.295618][ T9347] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.319962][T12169] chnl_net:caif_netlink_parms(): no params data found [ 250.327667][T11909] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 250.375823][T12169] bridge0: port 1(bridge_slave_0) entered blocking state [ 250.383000][T12169] bridge0: port 1(bridge_slave_0) entered disabled state [ 250.383256][T12196] loop4: detected capacity change from 0 to 512 [ 250.396781][T12196] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 250.409548][T12169] bridge_slave_0: entered allmulticast mode [ 250.413272][T12208] vhci_hcd: invalid port number 96 [ 250.416471][T12169] bridge_slave_0: entered promiscuous mode [ 250.427840][T12169] bridge0: port 2(bridge_slave_1) entered blocking state [ 250.435031][T12169] bridge0: port 2(bridge_slave_1) entered disabled state [ 250.442443][T12169] bridge_slave_1: entered allmulticast mode [ 250.449224][T12169] bridge_slave_1: entered promiscuous mode [ 250.586383][ T9347] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 250.596947][ T9347] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 250.610390][ T9347] bond0 (unregistering): Released all slaves [ 250.855373][ T9347] hsr_slave_0: left promiscuous mode [ 250.861479][ T9347] hsr_slave_1: left promiscuous mode [ 250.876996][ T9347] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 250.884573][ T9347] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 250.899450][ T9347] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 250.907122][ T9347] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 250.917391][ T9347] veth1_macvtap: left promiscuous mode [ 250.923026][ T9347] veth1_vlan: left promiscuous mode [ 250.928422][ T9347] veth0_vlan: left promiscuous mode [ 250.998840][ T9347] team0 (unregistering): Port device team_slave_1 removed [ 251.010558][ T9347] team0 (unregistering): Port device team_slave_0 removed [ 251.064165][T12169] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 251.093700][T12169] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 251.128805][T12232] FAULT_INJECTION: forcing a failure. [ 251.128805][T12232] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 251.141975][T12232] CPU: 1 UID: 0 PID: 12232 Comm: syz.3.3158 Not tainted 6.16.0-rc5-syzkaller-00053-g8c2e52ebbe88 #0 PREEMPT(voluntary) [ 251.142005][T12232] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 251.142018][T12232] Call Trace: [ 251.142025][T12232] [ 251.142034][T12232] __dump_stack+0x1d/0x30 [ 251.142113][T12232] dump_stack_lvl+0xe8/0x140 [ 251.142211][T12232] dump_stack+0x15/0x1b [ 251.142265][T12232] should_fail_ex+0x265/0x280 [ 251.142303][T12232] should_fail+0xb/0x20 [ 251.142337][T12232] should_fail_usercopy+0x1a/0x20 [ 251.142375][T12232] _copy_from_user+0x1c/0xb0 [ 251.142458][T12232] ___sys_sendmsg+0xc1/0x1d0 [ 251.142519][T12232] __x64_sys_sendmsg+0xd4/0x160 [ 251.142567][T12232] x64_sys_call+0x2999/0x2fb0 [ 251.142601][T12232] do_syscall_64+0xd2/0x200 [ 251.142646][T12232] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 251.142695][T12232] ? clear_bhb_loop+0x40/0x90 [ 251.142720][T12232] ? clear_bhb_loop+0x40/0x90 [ 251.142748][T12232] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 251.142775][T12232] RIP: 0033:0x7fb10a3ee929 [ 251.142793][T12232] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 251.142890][T12232] RSP: 002b:00007fb108a57038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 251.142944][T12232] RAX: ffffffffffffffda RBX: 00007fb10a615fa0 RCX: 00007fb10a3ee929 [ 251.142960][T12232] RDX: 0000000000000000 RSI: 00002000000004c0 RDI: 0000000000000005 [ 251.142975][T12232] RBP: 00007fb108a57090 R08: 0000000000000000 R09: 0000000000000000 [ 251.142990][T12232] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 251.143043][T12232] R13: 0000000000000000 R14: 00007fb10a615fa0 R15: 00007ffd2ff16b08 [ 251.143064][T12232] [ 251.328445][T12169] team0: Port device team_slave_0 added [ 251.337209][T12169] team0: Port device team_slave_1 added [ 251.374672][T12169] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 251.381742][T12169] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 251.407993][T12169] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 251.422414][T12169] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 251.429472][T12169] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 251.455564][T12169] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 251.478145][T12239] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3162'. [ 251.487234][T12239] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3162'. [ 251.496242][T12239] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3162'. [ 251.505993][T12239] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3162'. [ 251.515116][T12239] netlink: 'syz.4.3162': attribute type 6 has an invalid length. [ 251.547859][T12249] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3165'. [ 251.560896][T12169] hsr_slave_0: entered promiscuous mode [ 251.561479][T12169] hsr_slave_1: entered promiscuous mode [ 251.583242][T12169] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 251.590858][T12169] Cannot create hsr debugfs directory [ 251.938914][T12169] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 251.949425][T12169] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 251.960095][T12169] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 251.970663][T12169] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 252.017836][T12169] 8021q: adding VLAN 0 to HW filter on device bond0 [ 252.032492][T12169] 8021q: adding VLAN 0 to HW filter on device team0 [ 252.043748][ T9343] bridge0: port 1(bridge_slave_0) entered blocking state [ 252.051012][ T9343] bridge0: port 1(bridge_slave_0) entered forwarding state [ 252.062926][ T9346] bridge0: port 2(bridge_slave_1) entered blocking state [ 252.070051][ T9346] bridge0: port 2(bridge_slave_1) entered forwarding state [ 252.145579][T12169] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 252.215029][T12169] veth0_vlan: entered promiscuous mode [ 252.230257][T12169] veth1_vlan: entered promiscuous mode [ 252.258902][T12169] veth0_macvtap: entered promiscuous mode [ 252.268677][T12169] veth1_macvtap: entered promiscuous mode [ 252.285076][T12169] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 252.304635][T12169] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 252.326514][T12169] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.335394][T12169] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.344276][T12169] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.353066][T12169] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.570161][T12296] loop3: detected capacity change from 0 to 256 [ 253.090758][T12307] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3178'. [ 254.032984][T12315] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3180'. [ 254.042065][T12315] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3180'. [ 254.051068][T12315] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3180'. [ 254.175471][T12315] netlink: 'syz.3.3180': attribute type 6 has an invalid length. [ 254.545321][ T29] kauditd_printk_skb: 7422 callbacks suppressed [ 254.545374][ T29] audit: type=1326 audit(254.520:65165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12276 comm="syz.4.3172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fae2200ab19 code=0x7ffc0000 [ 254.574746][ T29] audit: type=1326 audit(254.520:65166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12276 comm="syz.4.3172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fae2200ab19 code=0x7ffc0000 [ 254.597724][ T29] audit: type=1326 audit(254.520:65167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12276 comm="syz.4.3172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fae2200ab19 code=0x7ffc0000 [ 254.620727][ T29] audit: type=1326 audit(254.520:65168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12276 comm="syz.4.3172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fae2200ab19 code=0x7ffc0000 [ 254.643852][ T29] audit: type=1326 audit(254.520:65169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12276 comm="syz.4.3172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fae2200ab19 code=0x7ffc0000 [ 254.666884][ T29] audit: type=1326 audit(254.520:65170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12276 comm="syz.4.3172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fae2200ab19 code=0x7ffc0000 [ 254.689821][ T29] audit: type=1326 audit(254.520:65171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12276 comm="syz.4.3172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fae2200ab19 code=0x7ffc0000 [ 254.712794][ T29] audit: type=1326 audit(254.520:65172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12276 comm="syz.4.3172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fae2200ab19 code=0x7ffc0000 [ 254.735829][ T29] audit: type=1326 audit(254.520:65173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12276 comm="syz.4.3172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fae2200ab19 code=0x7ffc0000 [ 254.758789][ T29] audit: type=1326 audit(254.520:65174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12276 comm="syz.4.3172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fae2200ab19 code=0x7ffc0000 [ 254.785527][T12340] loop3: detected capacity change from 0 to 512 [ 255.204304][T12340] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 255.243404][T12351] __nla_validate_parse: 1 callbacks suppressed [ 255.243420][T12351] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3191'. [ 255.258748][T12351] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3191'. [ 255.267764][T12351] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3191'. [ 255.300439][T12338] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #2: comm syz.3.3189: corrupted inode contents [ 255.316405][T12351] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3191'. [ 255.325641][T12351] netlink: 'syz.4.3191': attribute type 6 has an invalid length. [ 255.354273][T12338] EXT4-fs error (device loop3): ext4_dirty_inode:6459: inode #2: comm syz.3.3189: mark_inode_dirty error [ 255.372553][T12338] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #2: comm syz.3.3189: corrupted inode contents [ 255.373393][T12358] siw: device registration error -23 [ 255.387050][T12338] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #2: comm syz.3.3189: mark_inode_dirty error [ 255.396405][T12360] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3195'. [ 255.410173][T12360] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3195'. [ 255.419250][T12360] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3195'. [ 255.428496][T12360] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3195'. [ 255.437498][T12360] netlink: 'syz.0.3195': attribute type 6 has an invalid length. [ 255.471367][T11909] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 255.599604][T12372] loop3: detected capacity change from 0 to 512 [ 255.608733][T12372] EXT4-fs: Project quota feature not enabled. Cannot enable project quota enforcement. [ 256.280776][T12386] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3204'. [ 256.289959][T12386] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3204'. [ 256.440121][T12386] netlink: 'syz.2.3204': attribute type 6 has an invalid length. [ 256.755329][T12392] xt_hashlimit: max too large, truncated to 1048576 [ 256.785410][T12392] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=5126 sclass=netlink_audit_socket pid=12392 comm=syz.1.3207 [ 256.975126][T12399] netlink: 'syz.2.3209': attribute type 6 has an invalid length. [ 258.067131][T12427] netlink: 'syz.2.3216': attribute type 6 has an invalid length. [ 258.473371][T12435] vhci_hcd: invalid port number 96 [ 259.553551][T12458] loop3: detected capacity change from 0 to 512 [ 259.604179][T12458] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 259.726546][T12458] loop3: detected capacity change from 0 to 512 [ 259.852624][T12458] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 259.913856][T12458] EXT4-fs (loop3): orphan cleanup on readonly fs [ 260.012429][T12458] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.3227: bg 0: block 248: padding at end of block bitmap is not set [ 260.072835][T12458] __quota_error: 3126 callbacks suppressed [ 260.072859][T12458] Quota error (device loop3): write_blk: dquota write failed [ 260.086153][T12458] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 260.096272][T12458] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.3227: Failed to acquire dquot type 1 [ 260.227736][T12458] EXT4-fs (loop3): 1 truncate cleaned up [ 260.264655][T12458] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 260.285350][ T29] audit: type=1326 audit(260.260:68301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12466 comm="syz.2.3231" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe2a1dce929 code=0x0 [ 260.343840][T12469] vhci_hcd: invalid port number 96 [ 260.376850][ T29] audit: type=1326 audit(260.350:68302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12472 comm="syz.4.3233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae2206e929 code=0x7ffc0000 [ 260.400027][ T29] audit: type=1326 audit(260.350:68303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12472 comm="syz.4.3233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae2206e929 code=0x7ffc0000 [ 260.423175][ T29] audit: type=1326 audit(260.350:68304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12472 comm="syz.4.3233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fae2206e929 code=0x7ffc0000 [ 260.446260][ T29] audit: type=1326 audit(260.350:68305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12472 comm="syz.4.3233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae2206e929 code=0x7ffc0000 [ 260.469316][ T29] audit: type=1326 audit(260.350:68306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12472 comm="syz.4.3233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae2206e929 code=0x7ffc0000 [ 260.492435][ T29] audit: type=1326 audit(260.350:68307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12472 comm="syz.4.3233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=282 compat=0 ip=0x7fae2206e929 code=0x7ffc0000 [ 260.515433][ T29] audit: type=1326 audit(260.350:68308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12472 comm="syz.4.3233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae2206e929 code=0x7ffc0000 [ 260.551396][T12457] ext4: Unknown parameter '00000010' [ 260.679735][T11909] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 260.805980][T12479] loop3: detected capacity change from 0 to 512 [ 260.812725][T12479] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 260.824956][T12479] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(0) [ 260.831525][T12479] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 260.839022][T12479] vhci_hcd vhci_hcd.0: Device attached [ 261.034160][ T3400] vhci_hcd: vhci_device speed not set [ 261.124589][ T3400] usb 7-1: new full-speed USB device number 2 using vhci_hcd [ 261.280360][T12494] xt_hashlimit: max too large, truncated to 1048576 [ 261.343171][T12500] vhci_hcd: invalid port number 96 [ 261.392911][T12482] vhci_hcd: connection reset by peer [ 261.399829][ T9343] vhci_hcd: stop threads [ 261.404241][ T9343] vhci_hcd: release socket [ 261.408737][ T9343] vhci_hcd: disconnect device [ 261.475285][T12528] lo speed is unknown, defaulting to 1000 [ 261.587629][T12534] lo speed is unknown, defaulting to 1000 [ 261.659785][T12540] loop4: detected capacity change from 0 to 256 [ 261.737288][T12542] loop3: detected capacity change from 0 to 512 [ 261.804290][T12542] EXT4-fs (loop3): orphan cleanup on readonly fs [ 261.854334][T12542] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.3252: Failed to acquire dquot type 1 [ 261.940756][T12542] EXT4-fs (loop3): 1 truncate cleaned up [ 261.990962][T12542] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 262.175283][T12554] vhci_hcd: invalid port number 96 [ 262.440782][T11909] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 262.928987][T12588] loop3: detected capacity change from 0 to 512 [ 262.965343][T12588] EXT4-fs: Project quota feature not enabled. Cannot enable project quota enforcement. [ 263.033089][T12596] netlink: 'syz.0.3275': attribute type 4 has an invalid length. [ 264.418994][T12620] xt_hashlimit: max too large, truncated to 1048576 [ 264.993240][T12636] netlink: 'syz.1.3291': attribute type 4 has an invalid length. [ 265.129527][ T29] kauditd_printk_skb: 1475 callbacks suppressed [ 265.129578][ T29] audit: type=1326 audit(265.050:69782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12598 comm="syz.0.3277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f71b78bab19 code=0x7ffc0000 [ 265.159115][ T29] audit: type=1326 audit(265.100:69783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12598 comm="syz.0.3277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f71b78bab19 code=0x7ffc0000 [ 265.182184][ T29] audit: type=1326 audit(265.100:69784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12598 comm="syz.0.3277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f71b78bab19 code=0x7ffc0000 [ 265.205187][ T29] audit: type=1326 audit(265.100:69785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12598 comm="syz.0.3277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f71b78bab19 code=0x7ffc0000 [ 265.228300][ T29] audit: type=1326 audit(265.100:69786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12598 comm="syz.0.3277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f71b78bab19 code=0x7ffc0000 [ 265.251326][ T29] audit: type=1326 audit(265.100:69787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12598 comm="syz.0.3277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f71b78bab19 code=0x7ffc0000 [ 265.274468][ T29] audit: type=1326 audit(265.100:69788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12598 comm="syz.0.3277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f71b78bab19 code=0x7ffc0000 [ 265.297484][ T29] audit: type=1326 audit(265.100:69789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12598 comm="syz.0.3277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f71b78bab19 code=0x7ffc0000 [ 265.320616][ T29] audit: type=1326 audit(265.100:69790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12598 comm="syz.0.3277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f71b78bab19 code=0x7ffc0000 [ 265.344396][ T29] audit: type=1326 audit(265.100:69791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12598 comm="syz.0.3277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f71b78bab19 code=0x7ffc0000 [ 265.713056][T12647] __nla_validate_parse: 10 callbacks suppressed [ 265.713071][T12647] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3295'. [ 265.728470][T12647] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3295'. [ 265.737508][T12647] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3295'. [ 265.760095][T12647] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3295'. [ 265.769193][T12647] netlink: 'syz.2.3295': attribute type 6 has an invalid length. [ 265.897396][T12661] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3301'. [ 265.906470][T12661] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3301'. [ 265.915488][T12661] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3301'. [ 265.943028][T12664] loop3: detected capacity change from 0 to 512 [ 265.956989][T12654] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(0) [ 265.962856][T12661] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3301'. [ 265.963549][T12654] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 265.972635][T12661] netlink: 'syz.4.3301': attribute type 6 has an invalid length. [ 265.980183][T12654] vhci_hcd vhci_hcd.0: Device attached [ 266.019789][T12668] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(0) [ 266.026362][T12668] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 266.034045][T12668] vhci_hcd vhci_hcd.0: Device attached [ 266.039212][T12664] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 266.068666][T12664] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #2: comm syz.3.3302: corrupted inode contents [ 266.091160][T12664] EXT4-fs error (device loop3): ext4_dirty_inode:6459: inode #2: comm syz.3.3302: mark_inode_dirty error [ 266.109335][T12664] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #2: comm syz.3.3302: corrupted inode contents [ 266.130142][T12664] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #2: comm syz.3.3302: mark_inode_dirty error [ 266.166985][ T3400] usb 7-1: enqueue for inactive port 0 [ 266.172652][ T2960] vhci_hcd: vhci_device speed not set [ 266.179099][T11909] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 266.185018][ T3400] usb 7-1: enqueue for inactive port 0 [ 266.232877][ T2960] usb 5-1: new full-speed USB device number 2 using vhci_hcd [ 266.270407][ T10] vhci_hcd: vhci_device speed not set [ 266.342770][ T10] usb 3-1: new full-speed USB device number 2 using vhci_hcd [ 266.362659][ T3400] vhci_hcd: vhci_device speed not set [ 266.387870][T12686] netlink: 'syz.0.3307': attribute type 4 has an invalid length. [ 266.539224][T12666] vhci_hcd: connection reset by peer [ 266.545516][ T9344] vhci_hcd: stop threads [ 266.549867][ T9344] vhci_hcd: release socket [ 266.554350][ T9344] vhci_hcd: disconnect device [ 267.125465][T12701] loop4: detected capacity change from 0 to 256 [ 267.144805][T12703] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3313'. [ 267.153845][T12703] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3313'. [ 267.164588][T12703] netlink: 'syz.3.3313': attribute type 6 has an invalid length. [ 267.216361][T12669] vhci_hcd: connection reset by peer [ 267.231421][ T9343] vhci_hcd: stop threads [ 267.235833][ T9343] vhci_hcd: release socket [ 267.240387][ T9343] vhci_hcd: disconnect device [ 267.502466][T12705] loop3: detected capacity change from 0 to 32768 [ 267.684525][T12705] loop3: p1 p2 p3 < > [ 267.690211][T12705] loop3: p1 size 242222080 extends beyond EOD, truncated [ 267.705535][T12705] loop3: p2 start 4294967295 is beyond EOD, truncated [ 269.076168][T12744] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(0) [ 269.082828][T12744] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 269.090550][T12744] vhci_hcd vhci_hcd.0: Device attached [ 269.415592][T12764] loop3: detected capacity change from 0 to 512 [ 269.439380][T12764] EXT4-fs (loop3): external journal device major/minor numbers have changed [ 269.514043][T12764] EXT4-fs (loop3): failed to open journal device unknown-block(11,131) -6 [ 269.627778][T12752] vhci_hcd: connection closed [ 269.628044][ T9353] vhci_hcd: stop threads [ 269.637061][ T9353] vhci_hcd: release socket [ 269.641535][ T9353] vhci_hcd: disconnect device [ 269.855679][T12771] loop4: detected capacity change from 0 to 512 [ 269.863014][T12771] EXT4-fs: Project quota feature not enabled. Cannot enable project quota enforcement. [ 270.134738][ T29] kauditd_printk_skb: 4517 callbacks suppressed [ 270.134758][ T29] audit: type=1326 audit(270.110:74309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12755 comm="syz.0.3331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f71b78bab19 code=0x7ffc0000 [ 270.280211][ T29] audit: type=1326 audit(270.140:74311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12777 comm="syz.1.3339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f51335b58e7 code=0x7ffc0000 [ 270.303345][ T29] audit: type=1326 audit(270.140:74312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12777 comm="syz.1.3339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f513355ab19 code=0x7ffc0000 [ 270.326293][ T29] audit: type=1326 audit(270.140:74310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12777 comm="syz.1.3339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51335be929 code=0x7ffc0000 [ 270.349403][ T29] audit: type=1326 audit(270.140:74313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12777 comm="syz.1.3339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f51335be929 code=0x7ffc0000 [ 270.372465][ T29] audit: type=1326 audit(270.140:74314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12777 comm="syz.1.3339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f51335be929 code=0x7ffc0000 [ 270.395351][ T29] audit: type=1326 audit(270.140:74315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12777 comm="syz.1.3339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51335be929 code=0x7ffc0000 [ 270.418409][ T29] audit: type=1326 audit(270.140:74316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12777 comm="syz.1.3339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51335be929 code=0x7ffc0000 [ 270.441512][ T29] audit: type=1326 audit(270.140:74317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12755 comm="syz.0.3331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f71b78bab19 code=0x7ffc0000 [ 270.464568][ T29] audit: type=1326 audit(270.140:74318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12755 comm="syz.0.3331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f71b78bab19 code=0x7ffc0000 [ 271.422637][ T10] usb 3-1: enqueue for inactive port 0 [ 271.428190][ T10] usb 3-1: enqueue for inactive port 0 [ 271.562248][ T2960] usb 5-1: enqueue for inactive port 0 [ 271.567825][ T2960] usb 5-1: enqueue for inactive port 0 [ 271.663523][ T2960] vhci_hcd: vhci_device speed not set [ 271.837391][T12791] loop3: detected capacity change from 0 to 512 [ 271.908260][T12796] __nla_validate_parse: 3 callbacks suppressed [ 271.908282][T12796] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3345'. [ 271.943249][T12791] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 271.974639][T12791] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #2: comm syz.3.3342: corrupted inode contents [ 271.974941][T12791] EXT4-fs error (device loop3): ext4_dirty_inode:6459: inode #2: comm syz.3.3342: mark_inode_dirty error [ 271.975087][T12791] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #2: comm syz.3.3342: corrupted inode contents [ 271.975320][T12791] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #2: comm syz.3.3342: mark_inode_dirty error [ 272.085538][T12799] loop4: detected capacity change from 0 to 512 [ 272.085754][T12799] ext4: Unknown parameter 'smackfshat' [ 272.184954][T11909] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 272.452610][ T10] vhci_hcd: vhci_device speed not set [ 272.660453][T12820] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3354'. [ 272.669566][T12820] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3354'. [ 272.678601][T12820] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3354'. [ 272.689831][T12820] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3354'. [ 272.698850][T12820] netlink: 'syz.3.3354': attribute type 6 has an invalid length. [ 272.755967][T12824] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3356'. [ 272.800503][T12824] loop3: detected capacity change from 0 to 512 [ 272.827352][T12824] ext4: Unknown parameter 'smackfshat' [ 272.928346][T12837] xt_hashlimit: max too large, truncated to 1048576 [ 273.027444][T12849] loop4: detected capacity change from 0 to 512 [ 273.035487][T12849] EXT4-fs: Project quota feature not enabled. Cannot enable project quota enforcement. [ 273.145291][T12857] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3371'. [ 273.154437][T12857] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3371'. [ 273.163488][T12857] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3371'. [ 273.178091][T12857] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3371'. [ 273.187147][T12857] netlink: 'syz.0.3371': attribute type 6 has an invalid length. [ 273.303044][T12867] loop4: detected capacity change from 0 to 256 [ 273.368591][T12865] xt_hashlimit: max too large, truncated to 1048576 [ 273.433224][T12874] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 274.125299][T12891] netlink: 'syz.3.3382': attribute type 6 has an invalid length. [ 274.686585][T12905] netlink: 'syz.1.3386': attribute type 4 has an invalid length. [ 275.137649][T12913] loop4: detected capacity change from 0 to 256 [ 275.161681][ T29] kauditd_printk_skb: 1296 callbacks suppressed [ 275.161696][ T29] audit: type=1400 audit(275.130:75615): avc: denied { read write } for pid=12908 comm="syz.2.3388" name="virtual_nci" dev="devtmpfs" ino=132 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 275.191473][ T29] audit: type=1400 audit(275.130:75616): avc: denied { open } for pid=12908 comm="syz.2.3388" path="/dev/virtual_nci" dev="devtmpfs" ino=132 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 276.221841][T12935] loop3: detected capacity change from 0 to 512 [ 276.247368][T12935] EXT4-fs: Project quota feature not enabled. Cannot enable project quota enforcement. [ 276.315012][ T29] audit: type=1326 audit(276.290:75617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12943 comm="syz.2.3398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2a1dce929 code=0x7ffc0000 [ 276.338092][ T29] audit: type=1326 audit(276.290:75618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12943 comm="syz.2.3398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7fe2a1dce929 code=0x7ffc0000 [ 276.375048][T12946] loop3: detected capacity change from 0 to 764 [ 276.392544][T12946] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 276.411189][T12946] audit: audit_backlog=65 > audit_backlog_limit=64 [ 276.417872][T12946] audit: audit_lost=5 audit_rate_limit=0 audit_backlog_limit=64 [ 276.425559][T12946] audit: backlog limit exceeded [ 276.456060][T12946] audit: audit_backlog=65 > audit_backlog_limit=64 [ 276.462646][T12946] audit: audit_lost=6 audit_rate_limit=0 audit_backlog_limit=64 [ 276.470334][T12946] audit: backlog limit exceeded [ 276.514132][T12948] vxcan1: tx address claim with dlc 0 [ 276.548659][T12946] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.625461][T12946] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.705892][T12946] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.765847][T12946] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.821490][T12946] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 276.833855][T12946] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 276.845687][T12946] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 276.860680][T12946] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 277.543249][T12979] vhci_hcd: invalid port number 96 [ 279.125109][T12994] loop4: detected capacity change from 0 to 764 [ 279.152535][T12994] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 279.174085][T12994] vxcan1: tx address claim with dlc 0 [ 279.221976][T12994] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.323653][T12994] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.422488][T12994] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.514675][T12994] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.592739][T12994] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.617971][T12994] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.629843][T12994] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.642044][T12994] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.739721][T13016] loop4: detected capacity change from 0 to 128 [ 279.760886][T13016] FAT-fs (loop4): error, invalid access to FAT (entry 0x0fff0101) [ 279.768950][T13016] FAT-fs (loop4): Filesystem has been set read-only [ 279.830438][T13021] __nla_validate_parse: 5 callbacks suppressed [ 279.830455][T13021] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3426'. [ 279.845758][T13021] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3426'. [ 279.854888][T13021] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3426'. [ 279.887683][T13021] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3426'. [ 279.896809][T13021] netlink: 'syz.1.3426': attribute type 6 has an invalid length. [ 279.920882][T13022] netlink: 'syz.4.3424': attribute type 4 has an invalid length. [ 280.148267][T13032] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3430'. [ 280.168930][ T29] kauditd_printk_skb: 2211 callbacks suppressed [ 280.168949][ T29] audit: type=1326 audit(280.140:77830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12999 comm="syz.2.3418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fe2a1d6ab19 code=0x7ffc0000 [ 280.169081][ T29] audit: type=1326 audit(280.140:77831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12999 comm="syz.2.3418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fe2a1dc58e7 code=0x7ffc0000 [ 280.169162][ T29] audit: type=1326 audit(280.140:77832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12999 comm="syz.2.3418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fe2a1d6ab19 code=0x7ffc0000 [ 280.169195][ T29] audit: type=1326 audit(280.140:77833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12999 comm="syz.2.3418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fe2a1d6ab19 code=0x7ffc0000 [ 280.169228][ T29] audit: type=1326 audit(280.140:77834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12999 comm="syz.2.3418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fe2a1d6ab19 code=0x7ffc0000 [ 280.169372][ T29] audit: type=1326 audit(280.140:77835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12999 comm="syz.2.3418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fe2a1d6ab19 code=0x7ffc0000 [ 280.169466][ T29] audit: type=1326 audit(280.140:77836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12999 comm="syz.2.3418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fe2a1d6ab19 code=0x7ffc0000 [ 280.169496][ T29] audit: type=1326 audit(280.140:77837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12999 comm="syz.2.3418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fe2a1d6ab19 code=0x7ffc0000 [ 280.170444][ T29] audit: type=1326 audit(280.140:77838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13024 comm="syz.0.3427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f71b79158e7 code=0x7ffc0000 [ 280.220833][T13033] loop3: detected capacity change from 0 to 512 [ 280.252505][ T29] audit: type=1326 audit(280.160:77839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12999 comm="syz.2.3418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fe2a1d6ab19 code=0x7ffc0000 [ 280.274965][T13030] vxcan1: tx address claim with dlc 0 [ 280.292168][T13033] ext4: Unknown parameter 'smackfshat' [ 280.428312][T13030] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 280.485933][T13030] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 280.551049][T13030] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 280.646335][T13030] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 280.724369][T13030] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.807621][T13038] loop3: detected capacity change from 0 to 256 [ 280.823996][T13030] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.868360][T13030] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.941978][T13030] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.685050][T13053] loop4: detected capacity change from 0 to 764 [ 281.718086][T13053] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 281.786368][T13053] vxcan1: tx address claim with dlc 0 [ 281.809574][T13057] xt_hashlimit: max too large, truncated to 1048576 [ 281.824353][T13053] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 281.904374][T13053] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 281.954014][T13053] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.014610][T13053] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.326085][T13072] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3446'. [ 282.335149][T13072] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3446'. [ 282.344544][T13072] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3446'. [ 282.373799][T13072] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3446'. [ 282.382867][T13072] netlink: 'syz.2.3446': attribute type 6 has an invalid length. [ 282.477753][T13078] vxcan1: tx address claim with dlc 0 [ 282.491426][T13078] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.578000][T13078] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.696086][T13078] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.809887][T13078] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.941994][T13078] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.959694][T13078] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.971897][T13078] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.984283][T13078] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.417050][T13109] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3457'. [ 283.428649][T13109] netlink: 'syz.3.3457': attribute type 6 has an invalid length. [ 283.501272][T13113] xt_hashlimit: max too large, truncated to 1048576 [ 284.179113][T13053] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 284.191164][T13053] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 284.206856][T13053] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 284.224980][T13053] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 285.399213][T13157] __nla_validate_parse: 3 callbacks suppressed [ 285.399230][T13157] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3476'. [ 285.414581][T13157] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3476'. [ 285.423614][T13157] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3476'. [ 285.552499][T13157] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3476'. [ 285.561751][T13157] netlink: 'syz.0.3476': attribute type 6 has an invalid length. [ 285.575582][T13162] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3478'. [ 285.640710][T13162] loop4: detected capacity change from 0 to 512 [ 285.656399][T13162] ext4: Unknown parameter 'smackfshat' [ 285.664326][ T29] kauditd_printk_skb: 8366 callbacks suppressed [ 285.664340][ T29] audit: type=1326 audit(285.600:86206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13164 comm="syz.3.3479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb10a3ee929 code=0x7ffc0000 [ 285.693975][ T29] audit: type=1326 audit(285.610:86207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13164 comm="syz.3.3479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7fb10a3ee929 code=0x7ffc0000 [ 285.716953][ T29] audit: type=1326 audit(285.610:86208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13164 comm="syz.3.3479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb10a3ee929 code=0x7ffc0000 [ 285.739990][ T29] audit: type=1326 audit(285.610:86209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13164 comm="syz.3.3479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7fb10a3ee929 code=0x7ffc0000 [ 285.763182][ T29] audit: type=1326 audit(285.610:86210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13164 comm="syz.3.3479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb10a3ee929 code=0x7ffc0000 [ 285.786199][ T29] audit: type=1326 audit(285.610:86211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13164 comm="syz.3.3479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=278 compat=0 ip=0x7fb10a3ee929 code=0x7ffc0000 [ 285.809266][ T29] audit: type=1326 audit(285.610:86212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13164 comm="syz.3.3479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb10a3ee929 code=0x7ffc0000 [ 285.832717][ T29] audit: type=1326 audit(285.610:86213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13164 comm="syz.3.3479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7fb10a3ee929 code=0x7ffc0000 [ 285.855790][ T29] audit: type=1326 audit(285.610:86214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13164 comm="syz.3.3479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb10a3ee929 code=0x7ffc0000 [ 285.878824][ T29] audit: type=1326 audit(285.610:86215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13164 comm="syz.3.3479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7fb10a3ee929 code=0x7ffc0000 [ 286.192881][T13175] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3483'. [ 286.310266][T13175] loop4: detected capacity change from 0 to 512 [ 286.342520][T13175] ext4: Unknown parameter 'smackfshat' [ 286.449256][T13177] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(0) [ 286.455956][T13177] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 286.463906][T13177] vhci_hcd vhci_hcd.0: Device attached [ 286.576488][T13190] vxcan1: tx address claim with dlc 0 [ 286.594286][T13191] loop4: detected capacity change from 0 to 512 [ 286.602872][T13191] EXT4-fs (loop4): external journal device major/minor numbers have changed [ 286.653492][ T1036] vhci_hcd: vhci_device speed not set [ 286.660804][T13194] 9pnet_fd: Insufficient options for proto=fd [ 286.684313][T13191] EXT4-fs (loop4): failed to open journal device unknown-block(11,131) -6 [ 286.713310][ T1036] usb 1-1: new full-speed USB device number 2 using vhci_hcd [ 287.000835][T13184] vhci_hcd: connection reset by peer [ 287.008629][ T9344] vhci_hcd: stop threads [ 287.012957][ T9344] vhci_hcd: release socket [ 287.017419][ T9344] vhci_hcd: disconnect device [ 287.027042][T13211] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3496'. [ 287.217577][T13217] netlink: 'syz.1.3497': attribute type 4 has an invalid length. [ 287.496912][T13224] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3500'. [ 287.506009][T13224] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3500'. [ 287.515062][T13224] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3500'. [ 287.641099][T13224] netlink: 'syz.2.3500': attribute type 6 has an invalid length. [ 288.186490][T13229] 9pnet_fd: Insufficient options for proto=fd [ 288.267439][T13231] xt_hashlimit: max too large, truncated to 1048576 [ 288.933477][T13245] loop3: detected capacity change from 0 to 512 [ 288.942933][T13245] ext4: Unknown parameter 'smackfshat' [ 289.055798][T13255] 9pnet_fd: Insufficient options for proto=fd [ 289.073363][T13251] vhci_hcd: invalid port number 96 [ 289.199448][T13271] 9pnet_fd: Insufficient options for proto=fd [ 289.241121][T13274] loop4: detected capacity change from 0 to 512 [ 289.248908][T13274] EXT4-fs (loop4): external journal device major/minor numbers have changed [ 289.299130][T13274] EXT4-fs (loop4): failed to open journal device unknown-block(11,131) -6 [ 289.521783][T13282] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(1) [ 289.528366][T13282] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 289.535874][T13282] vhci_hcd vhci_hcd.0: Device attached [ 289.722630][ T2960] vhci_hcd: vhci_device speed not set [ 289.782627][ T2960] usb 3-1: new full-speed USB device number 3 using vhci_hcd [ 290.044255][T13296] vhci_hcd: invalid port number 96 [ 290.072384][T13301] loop4: detected capacity change from 0 to 128 [ 290.089893][T13301] FAT-fs (loop4): error, invalid access to FAT (entry 0x0fff0101) [ 290.091835][T13283] vhci_hcd: connection reset by peer [ 290.097851][T13301] FAT-fs (loop4): Filesystem has been set read-only [ 290.110001][ T9343] vhci_hcd: stop threads [ 290.114321][ T9343] vhci_hcd: release socket [ 290.118776][ T9343] vhci_hcd: disconnect device [ 290.311160][T13318] netlink: 'syz.4.3529': attribute type 4 has an invalid length. [ 290.440358][T13325] vhci_hcd: invalid port number 96 [ 290.606643][T13329] __nla_validate_parse: 6 callbacks suppressed [ 290.606660][T13329] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3540'. [ 290.622281][T13329] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3540'. [ 290.631443][T13329] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3540'. [ 290.645905][T13329] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3540'. [ 290.654946][T13329] netlink: 'syz.0.3540': attribute type 6 has an invalid length. [ 290.834337][T13342] loop3: detected capacity change from 0 to 512 [ 290.847445][T13342] EXT4-fs: Project quota feature not enabled. Cannot enable project quota enforcement. [ 290.882459][T13346] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3549'. [ 290.962317][T13348] loop3: detected capacity change from 0 to 512 [ 290.979646][T13346] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3549'. [ 290.998973][T13348] EXT4-fs: Project quota feature not enabled. Cannot enable project quota enforcement. [ 291.066383][ T29] kauditd_printk_skb: 4234 callbacks suppressed [ 291.066399][ T29] audit: type=1326 audit(291.040:90450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13351 comm="syz.1.3551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51335be929 code=0x7ffc0000 [ 291.126501][ T29] audit: type=1326 audit(291.040:90451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13351 comm="syz.1.3551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51335be929 code=0x7ffc0000 [ 291.149889][ T29] audit: type=1326 audit(291.070:90452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13351 comm="syz.1.3551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f51335be929 code=0x7ffc0000 [ 291.172916][ T29] audit: type=1326 audit(291.070:90453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13351 comm="syz.1.3551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51335be929 code=0x7ffc0000 [ 291.196011][ T29] audit: type=1326 audit(291.070:90454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13351 comm="syz.1.3551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51335be929 code=0x7ffc0000 [ 291.219262][ T29] audit: type=1326 audit(291.080:90455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13353 comm="syz.3.3552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb10a3ee929 code=0x7ffc0000 [ 291.242356][ T29] audit: type=1326 audit(291.080:90456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13353 comm="syz.3.3552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=68 compat=0 ip=0x7fb10a3ee929 code=0x7ffc0000 [ 291.265339][ T29] audit: type=1326 audit(291.080:90457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13353 comm="syz.3.3552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb10a3ee929 code=0x7ffc0000 [ 291.288503][ T29] audit: type=1326 audit(291.080:90458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13351 comm="syz.1.3551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7f51335be929 code=0x7ffc0000 [ 291.311616][ T29] audit: type=1326 audit(291.080:90459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13351 comm="syz.1.3551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51335be929 code=0x7ffc0000 [ 291.648571][T13375] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3557'. [ 291.657777][T13375] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3557'. [ 291.666864][T13375] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3557'. [ 291.745011][ T1036] usb 1-1: enqueue for inactive port 0 [ 291.750664][ T1036] usb 1-1: enqueue for inactive port 0 [ 291.847735][ T1036] vhci_hcd: vhci_device speed not set [ 292.008273][T13385] vxcan1: tx address claim with dlc 0 [ 292.059986][T13396] loop4: detected capacity change from 0 to 512 [ 292.067437][T13396] EXT4-fs (loop4): external journal device major/minor numbers have changed [ 292.119617][T13396] EXT4-fs (loop4): failed to open journal device unknown-block(11,131) -6 [ 292.215438][T13406] loop4: detected capacity change from 0 to 512 [ 292.226227][T13406] EXT4-fs: Project quota feature not enabled. Cannot enable project quota enforcement. [ 292.477871][T13420] loop4: detected capacity change from 0 to 512 [ 292.487856][T13420] EXT4-fs: Project quota feature not enabled. Cannot enable project quota enforcement. [ 292.545818][T13418] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(1) [ 292.547302][T13425] loop4: detected capacity change from 0 to 512 [ 292.552378][T13418] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 292.552445][T13418] vhci_hcd vhci_hcd.0: Device attached [ 292.563768][T13425] EXT4-fs: Project quota feature not enabled. Cannot enable project quota enforcement. [ 292.910842][T13442] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3585'. [ 292.924096][T13442] netlink: 'syz.2.3585': attribute type 6 has an invalid length. [ 293.146879][T13427] vhci_hcd: connection closed [ 293.147432][ T9343] vhci_hcd: stop threads [ 293.156743][ T9343] vhci_hcd: release socket [ 293.161252][ T9343] vhci_hcd: disconnect device [ 293.902840][T13491] loop4: detected capacity change from 0 to 512 [ 293.914637][T13491] ext4: Unknown parameter 'smackfshat' [ 294.180231][T13517] loop4: detected capacity change from 0 to 256 [ 294.863031][ T2960] usb 3-1: enqueue for inactive port 0 [ 294.868607][ T2960] usb 3-1: enqueue for inactive port 0 [ 294.939227][T13537] loop3: detected capacity change from 0 to 512 [ 294.950586][T13537] ext4: Unknown parameter 'smackfshat' [ 294.952628][ T2960] vhci_hcd: vhci_device speed not set [ 295.282620][T13553] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(1) [ 295.289286][T13553] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 295.296819][T13553] vhci_hcd vhci_hcd.0: Device attached [ 295.492689][ T3386] vhci_hcd: vhci_device speed not set [ 295.562698][ T3386] usb 5-1: new full-speed USB device number 3 using vhci_hcd [ 295.850564][T13554] vhci_hcd: connection reset by peer [ 295.858580][ T9346] vhci_hcd: stop threads [ 295.862910][ T9346] vhci_hcd: release socket [ 295.867456][ T9346] vhci_hcd: disconnect device [ 295.975084][T13571] __nla_validate_parse: 14 callbacks suppressed [ 295.975104][T13571] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3632'. [ 296.208861][T13581] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3635'. [ 296.558542][T13593] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(1) [ 296.565156][T13593] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 296.572711][T13593] vhci_hcd vhci_hcd.0: Device attached [ 297.309494][T13597] vhci_hcd: connection closed [ 297.465003][T13615] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3647'. [ 297.545539][ T9343] vhci_hcd: stop threads [ 297.549900][ T9343] vhci_hcd: release socket [ 297.554439][ T9343] vhci_hcd: disconnect device [ 297.612666][ T1036] vhci_hcd: vhci_device speed not set [ 297.638069][T13615] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3647'. [ 297.676184][T13619] xt_hashlimit: max too large, truncated to 1048576 [ 297.995751][T13627] loop3: detected capacity change from 0 to 512 [ 298.005063][T13627] EXT4-fs: Project quota feature not enabled. Cannot enable project quota enforcement. [ 298.168322][T13634] loop3: detected capacity change from 0 to 512 [ 298.241908][T13634] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 298.342639][ T29] kauditd_printk_skb: 9304 callbacks suppressed [ 298.342693][ T29] audit: type=1326 audit(298.310:99764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13645 comm="syz.2.3659" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe2a1dce929 code=0x0 [ 298.374779][T13644] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3658'. [ 298.386986][T13634] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #2: comm syz.3.3655: corrupted inode contents [ 298.414929][T13634] EXT4-fs error (device loop3): ext4_dirty_inode:6459: inode #2: comm syz.3.3655: mark_inode_dirty error [ 298.427906][T13634] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #2: comm syz.3.3655: corrupted inode contents [ 298.450141][ T29] audit: type=1326 audit(298.420:99765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13645 comm="syz.2.3659" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe2a1dce929 code=0x0 [ 298.473698][T13653] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3658'. [ 298.485134][T13634] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #2: comm syz.3.3655: mark_inode_dirty error [ 298.538737][T11909] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 298.611128][T13671] loop3: detected capacity change from 0 to 512 [ 298.619741][T13667] loop4: detected capacity change from 0 to 512 [ 298.631410][T13671] EXT4-fs: Project quota feature not enabled. Cannot enable project quota enforcement. [ 298.642383][T13667] EXT4-fs: Project quota feature not enabled. Cannot enable project quota enforcement. [ 300.773066][T13688] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3672'. [ 300.877731][ T3386] usb 5-1: enqueue for inactive port 0 [ 300.883370][ T3386] usb 5-1: enqueue for inactive port 0 [ 300.961150][ T3386] vhci_hcd: vhci_device speed not set [ 300.973865][T13695] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3672'. [ 301.449175][ T29] audit: type=1326 audit(301.420:99766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13715 comm="syz.4.3683" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fae220658e7 code=0x7ffc0000 [ 301.472645][ T29] audit: type=1326 audit(301.420:99767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13715 comm="syz.4.3683" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fae2200ab19 code=0x7ffc0000 [ 301.495970][ T29] audit: type=1326 audit(301.420:99768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13715 comm="syz.4.3683" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fae220658e7 code=0x7ffc0000 [ 301.518990][ T29] audit: type=1326 audit(301.420:99769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13715 comm="syz.4.3683" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fae2200ab19 code=0x7ffc0000 [ 301.542055][ T29] audit: type=1326 audit(301.420:99770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13715 comm="syz.4.3683" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fae220658e7 code=0x7ffc0000 [ 301.565142][ T29] audit: type=1326 audit(301.420:99771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13715 comm="syz.4.3683" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fae2200ab19 code=0x7ffc0000 [ 301.588277][ T29] audit: type=1326 audit(301.420:99772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13715 comm="syz.4.3683" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fae220658e7 code=0x7ffc0000 [ 301.611444][ T29] audit: type=1326 audit(301.420:99773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13715 comm="syz.4.3683" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fae2200ab19 code=0x7ffc0000 [ 302.076394][T13738] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3691'. [ 302.255046][T13739] loop3: detected capacity change from 0 to 512 [ 302.311424][T13739] ext4: Unknown parameter 'smackfshat' [ 302.694964][T13752] loop3: detected capacity change from 0 to 128 [ 302.709613][T13752] FAT-fs (loop3): error, invalid access to FAT (entry 0x0fff0101) [ 302.717638][T13752] FAT-fs (loop3): Filesystem has been set read-only [ 302.809312][T13758] netlink: 'syz.3.3696': attribute type 4 has an invalid length. [ 303.203866][T13769] loop4: detected capacity change from 0 to 512 [ 303.230073][T13769] EXT4-fs: Project quota feature not enabled. Cannot enable project quota enforcement. [ 303.372036][T13771] loop4: detected capacity change from 0 to 512 [ 303.402791][T13771] EXT4-fs: Project quota feature not enabled. Cannot enable project quota enforcement. [ 303.522675][T13773] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3704'. [ 303.585687][T13773] loop4: detected capacity change from 0 to 512 [ 303.592233][T13773] ext4: Unknown parameter 'smackfshat' [ 303.701946][T13792] xt_hashlimit: max too large, truncated to 1048576 [ 303.856619][T13799] loop3: detected capacity change from 0 to 512 [ 303.865247][T13802] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(1) [ 303.871836][T13802] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 303.879574][T13802] vhci_hcd vhci_hcd.0: Device attached [ 303.879832][T13799] EXT4-fs: Project quota feature not enabled. Cannot enable project quota enforcement. [ 304.063872][ T3386] vhci_hcd: vhci_device speed not set [ 304.469288][T13803] vhci_hcd: connection closed [ 304.478519][T13816] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3719'. [ 304.532770][ T9357] vhci_hcd: stop threads [ 304.537089][ T9357] vhci_hcd: release socket [ 304.541592][ T9357] vhci_hcd: disconnect device [ 304.587628][T13818] 9pnet_fd: Insufficient options for proto=fd [ 304.877577][T13825] xt_hashlimit: max too large, truncated to 1048576 [ 304.946748][T13830] xt_hashlimit: max too large, truncated to 1048576 [ 305.011832][T13834] netlink: 'syz.1.3725': attribute type 4 has an invalid length. [ 305.034950][T13833] loop3: detected capacity change from 0 to 512 [ 305.046429][T13833] EXT4-fs: Project quota feature not enabled. Cannot enable project quota enforcement. [ 305.088447][ T3386] usb 5-1: new full-speed USB device number 4 using vhci_hcd [ 305.096015][ T3386] usb 5-1: enqueue for inactive port 0 [ 305.101618][ T3386] usb 5-1: enqueue for inactive port 0 [ 305.107201][ T3386] usb 5-1: enqueue for inactive port 0 [ 305.182640][ T3386] vhci_hcd: vhci_device speed not set [ 305.190619][T13837] loop4: detected capacity change from 0 to 764 [ 305.219750][T13837] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 305.276691][T13837] vxcan1: tx address claim with dlc 0 [ 305.307876][T13844] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(1) [ 305.314438][T13844] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 305.322036][T13844] vhci_hcd vhci_hcd.0: Device attached [ 305.335191][T13837] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 305.394508][T13837] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 305.485542][T13837] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 305.544173][T13837] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 305.611223][T13837] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 305.635744][T13837] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 305.658216][T13837] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 305.682614][ T3386] vhci_hcd: vhci_device speed not set [ 305.694993][T13837] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 305.729036][T13852] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3732'. [ 305.898612][T13847] vhci_hcd: connection closed [ 305.898950][ T9346] vhci_hcd: stop threads [ 305.908129][ T9346] vhci_hcd: release socket [ 305.912685][ T9346] vhci_hcd: disconnect device [ 305.918177][ T29] kauditd_printk_skb: 154 callbacks suppressed [ 305.918191][ T29] audit: type=1326 audit(305.890:99928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13862 comm="syz.0.3736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71b791e929 code=0x7ffc0000 [ 305.952838][ T29] audit: type=1326 audit(305.930:99929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13862 comm="syz.0.3736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71b791e929 code=0x7ffc0000 [ 305.976175][ T29] audit: type=1326 audit(305.930:99930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13862 comm="syz.0.3736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f71b791e929 code=0x7ffc0000 [ 305.976232][T13866] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(1) [ 305.999615][ T29] audit: type=1326 audit(305.930:99931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13862 comm="syz.0.3736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71b791e929 code=0x7ffc0000 [ 306.005655][T13866] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 306.005854][T13866] vhci_hcd vhci_hcd.0: Device attached [ 306.033303][ T29] audit: type=1326 audit(305.930:99932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13862 comm="syz.0.3736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71b791e929 code=0x7ffc0000 [ 306.069966][ T3386] usb 5-1: enqueue for inactive port 0 [ 306.075657][ T3386] usb 5-1: enqueue for inactive port 0 [ 306.078277][ T29] audit: type=1326 audit(306.020:99933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13862 comm="syz.0.3736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f71b791e929 code=0x7ffc0000 [ 306.081197][ T3386] usb 5-1: enqueue for inactive port 0 [ 306.109768][ T29] audit: type=1326 audit(306.020:99934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13862 comm="syz.0.3736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71b791e929 code=0x7ffc0000 [ 306.132843][ T29] audit: type=1326 audit(306.020:99935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13862 comm="syz.0.3736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71b791e929 code=0x7ffc0000 [ 306.156568][ T29] audit: type=1326 audit(306.080:99936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13862 comm="syz.0.3736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f71b791e929 code=0x7ffc0000 [ 306.179620][ T29] audit: type=1326 audit(306.080:99937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13862 comm="syz.0.3736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71b791e929 code=0x7ffc0000 [ 306.182289][ T3386] vhci_hcd: vhci_device speed not set [ 306.222657][T11249] vhci_hcd: vhci_device speed not set [ 306.282606][T11249] usb 9-1: new full-speed USB device number 2 using vhci_hcd [ 306.325917][T13873] loop3: detected capacity change from 0 to 512 [ 306.335822][T13873] EXT4-fs: Project quota feature not enabled. Cannot enable project quota enforcement. [ 306.444285][T13876] loop3: detected capacity change from 0 to 512 [ 306.452855][T13876] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 306.476677][T13876] loop3: detected capacity change from 0 to 512 [ 306.493373][T13876] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 306.503431][T13876] EXT4-fs (loop3): orphan cleanup on readonly fs [ 306.511005][T13876] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.3739: bg 0: block 248: padding at end of block bitmap is not set [ 306.526576][T13876] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.3739: Failed to acquire dquot type 1 [ 306.539765][T13876] EXT4-fs (loop3): 1 truncate cleaned up [ 306.546360][T13876] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 306.568461][T13875] ext4: Unknown parameter '00000010' [ 306.602805][T11909] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 306.793016][T13889] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3744'. [ 306.819346][T13892] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(0) [ 306.825919][T13892] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 306.833443][T13892] vhci_hcd vhci_hcd.0: Device attached [ 307.237170][T13868] vhci_hcd: connection reset by peer [ 307.274978][ T9357] vhci_hcd: stop threads [ 307.279309][ T9357] vhci_hcd: release socket [ 307.283923][ T9357] vhci_hcd: disconnect device [ 307.442601][T13893] vhci_hcd: connection closed [ 307.472843][ T9357] vhci_hcd: stop threads [ 307.481952][ T9357] vhci_hcd: release socket [ 307.486432][ T9357] vhci_hcd: disconnect device [ 307.835638][T13922] xt_hashlimit: max too large, truncated to 1048576 [ 307.945107][ T1036] vhci_hcd: vhci_device speed not set [ 308.067258][T13926] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3757'. [ 308.542917][T13934] loop3: detected capacity change from 0 to 512 [ 308.550273][T13934] EXT4-fs: Project quota feature not enabled. Cannot enable project quota enforcement. [ 308.743298][T13948] 9pnet_fd: Insufficient options for proto=fd [ 308.765631][T13950] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3767'. [ 308.846176][T13953] loop3: detected capacity change from 0 to 128 [ 309.094517][T13966] vxcan1: tx address claim with dlc 0 [ 309.115131][T13966] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.296049][T13966] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.395354][T13966] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.475537][T13966] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.568225][T13966] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 309.637049][T13966] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 309.708081][T13966] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 309.775830][T13966] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 309.966704][T13974] vxcan1: tx address claim with dlc 0 [ 309.995973][T13974] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 310.074641][T13974] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 310.164666][T13974] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 310.244194][T13974] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 310.922664][ T29] kauditd_printk_skb: 3784 callbacks suppressed [ 310.922734][ T29] audit: type=1326 audit(310.900:103720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13989 comm="syz.1.3781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f513355ab19 code=0x7ffc0000 [ 310.983831][ T29] audit: type=1326 audit(310.930:103721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13989 comm="syz.1.3781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f513355ab19 code=0x7ffc0000 [ 311.007036][ T29] audit: type=1326 audit(310.930:103722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13989 comm="syz.1.3781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f513355ab19 code=0x7ffc0000 [ 311.030710][ T29] audit: type=1326 audit(310.930:103723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13989 comm="syz.1.3781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f51335b58e7 code=0x7ffc0000 [ 311.053883][ T29] audit: type=1326 audit(310.930:103724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13989 comm="syz.1.3781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f513355ab19 code=0x7ffc0000 [ 311.076922][ T29] audit: type=1326 audit(310.930:103725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13989 comm="syz.1.3781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f513355ab19 code=0x7ffc0000 [ 311.100031][ T29] audit: type=1326 audit(310.930:103726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13989 comm="syz.1.3781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f513355ab19 code=0x7ffc0000 [ 311.123168][ T29] audit: type=1326 audit(310.930:103727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13989 comm="syz.1.3781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f513355ab19 code=0x7ffc0000 [ 311.146187][ T29] audit: type=1326 audit(310.930:103728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13989 comm="syz.1.3781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f51335b58e7 code=0x7ffc0000 [ 311.169260][ T29] audit: type=1326 audit(310.930:103729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13989 comm="syz.1.3781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f513355ab19 code=0x7ffc0000 [ 311.352619][T11249] usb 9-1: enqueue for inactive port 0 [ 311.368212][T11249] usb 9-1: enqueue for inactive port 0 [ 311.452720][T11249] vhci_hcd: vhci_device speed not set [ 311.864089][T14017] FAULT_INJECTION: forcing a failure. [ 311.864089][T14017] name failslab, interval 1, probability 0, space 0, times 0 [ 311.876876][T14017] CPU: 0 UID: 0 PID: 14017 Comm: syz.1.3791 Not tainted 6.16.0-rc5-syzkaller-00053-g8c2e52ebbe88 #0 PREEMPT(voluntary) [ 311.877029][T14017] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 311.877045][T14017] Call Trace: [ 311.877053][T14017] [ 311.877061][T14017] __dump_stack+0x1d/0x30 [ 311.877083][T14017] dump_stack_lvl+0xe8/0x140 [ 311.877131][T14017] dump_stack+0x15/0x1b [ 311.877153][T14017] should_fail_ex+0x265/0x280 [ 311.877198][T14017] should_failslab+0x8c/0xb0 [ 311.877269][T14017] kmem_cache_alloc_noprof+0x50/0x310 [ 311.877302][T14017] ? audit_log_start+0x365/0x6c0 [ 311.877341][T14017] audit_log_start+0x365/0x6c0 [ 311.877400][T14017] audit_seccomp+0x48/0x100 [ 311.877487][T14017] ? __seccomp_filter+0x68c/0x10d0 [ 311.877539][T14017] __seccomp_filter+0x69d/0x10d0 [ 311.877567][T14017] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 311.877612][T14017] ? vfs_write+0x75e/0x8e0 [ 311.877650][T14017] ? __rcu_read_unlock+0x4f/0x70 [ 311.877678][T14017] ? __fget_files+0x184/0x1c0 [ 311.877701][T14017] __secure_computing+0x82/0x150 [ 311.877722][T14017] syscall_trace_enter+0xcf/0x1e0 [ 311.877801][T14017] do_syscall_64+0xac/0x200 [ 311.877834][T14017] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 311.877908][T14017] ? clear_bhb_loop+0x40/0x90 [ 311.877965][T14017] ? clear_bhb_loop+0x40/0x90 [ 311.878074][T14017] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 311.878101][T14017] RIP: 0033:0x7f51335be929 [ 311.878121][T14017] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 311.878144][T14017] RSP: 002b:00007f5131c27038 EFLAGS: 00000246 ORIG_RAX: 000000000000011e [ 311.878163][T14017] RAX: ffffffffffffffda RBX: 00007f51337e5fa0 RCX: 00007f51335be929 [ 311.878213][T14017] RDX: 0000200000000080 RSI: 0000000000000003 RDI: 0000000000000004 [ 311.878289][T14017] RBP: 00007f5131c27090 R08: 0000000000000000 R09: 0000000000000000 [ 311.878307][T14017] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 311.878324][T14017] R13: 0000000000000000 R14: 00007f51337e5fa0 R15: 00007ffe1b26b498 [ 311.878349][T14017] [ 312.657140][T14034] loop4: detected capacity change from 0 to 128 [ 312.706717][T14034] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 312.767859][T14034] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 312.827002][T14038] xt_hashlimit: max too large, truncated to 1048576 [ 313.284407][ T9341] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 313.565362][T13974] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 313.591136][T13974] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 313.617775][T13974] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 313.643730][T13974] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 313.996056][T14069] vxcan1: tx address claim with dlc 0 [ 314.007615][T14071] vxcan1: tx address claim with dlc 0 [ 314.015439][T14069] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 314.033718][T14071] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 314.064389][T14069] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 314.114129][T14071] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 314.154197][T14069] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 314.194187][T14071] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 314.234042][T14069] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 314.255098][T14071] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 314.284847][T14078] 9pnet_fd: Insufficient options for proto=fd [ 314.310280][T14069] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 314.325277][T14069] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 314.342250][T14071] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 314.344065][T14082] FAULT_INJECTION: forcing a failure. [ 314.344065][T14082] name failslab, interval 1, probability 0, space 0, times 0 [ 314.354558][T14071] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 314.363283][T14082] CPU: 0 UID: 0 PID: 14082 Comm: syz.2.3816 Not tainted 6.16.0-rc5-syzkaller-00053-g8c2e52ebbe88 #0 PREEMPT(voluntary) [ 314.363327][T14082] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 314.363345][T14082] Call Trace: [ 314.363366][T14082] [ 314.363379][T14082] __dump_stack+0x1d/0x30 [ 314.363408][T14082] dump_stack_lvl+0xe8/0x140 [ 314.363436][T14082] dump_stack+0x15/0x1b [ 314.363460][T14082] should_fail_ex+0x265/0x280 [ 314.363520][T14082] should_failslab+0x8c/0xb0 [ 314.363590][T14082] kmem_cache_alloc_noprof+0x50/0x310 [ 314.363626][T14082] ? getname_flags+0x80/0x3b0 [ 314.363657][T14082] getname_flags+0x80/0x3b0 [ 314.363688][T14082] do_sys_openat2+0x60/0x110 [ 314.363802][T14082] __x64_sys_open+0xe6/0x110 [ 314.363839][T14082] x64_sys_call+0x14d4/0x2fb0 [ 314.363872][T14082] do_syscall_64+0xd2/0x200 [ 314.363926][T14082] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 314.363962][T14082] ? clear_bhb_loop+0x40/0x90 [ 314.364023][T14082] ? clear_bhb_loop+0x40/0x90 [ 314.364135][T14082] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 314.364240][T14082] RIP: 0033:0x7fe2a1dce929 [ 314.364263][T14082] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 314.364289][T14082] RSP: 002b:00007fe2a0437038 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 314.364316][T14082] RAX: ffffffffffffffda RBX: 00007fe2a1ff5fa0 RCX: 00007fe2a1dce929 [ 314.364405][T14082] RDX: 0000000000000061 RSI: 0000000000000000 RDI: 00002000000002c0 [ 314.364422][T14082] RBP: 00007fe2a0437090 R08: 0000000000000000 R09: 0000000000000000 [ 314.364440][T14082] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 314.364457][T14082] R13: 0000000000000000 R14: 00007fe2a1ff5fa0 R15: 00007ffd4df7e0d8 [ 314.364483][T14082] [ 314.556685][T14069] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 314.568642][T14069] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 314.581208][T14071] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 314.621823][T14071] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 314.656318][T14092] FAULT_INJECTION: forcing a failure. [ 314.656318][T14092] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 314.669658][T14092] CPU: 0 UID: 0 PID: 14092 Comm: syz.1.3820 Not tainted 6.16.0-rc5-syzkaller-00053-g8c2e52ebbe88 #0 PREEMPT(voluntary) [ 314.669687][T14092] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 314.669700][T14092] Call Trace: [ 314.669709][T14092] [ 314.669718][T14092] __dump_stack+0x1d/0x30 [ 314.669743][T14092] dump_stack_lvl+0xe8/0x140 [ 314.669878][T14092] dump_stack+0x15/0x1b [ 314.669900][T14092] should_fail_ex+0x265/0x280 [ 314.669934][T14092] should_fail+0xb/0x20 [ 314.669960][T14092] should_fail_usercopy+0x1a/0x20 [ 314.670014][T14092] _copy_to_user+0x20/0xa0 [ 314.670040][T14092] simple_read_from_buffer+0xb5/0x130 [ 314.670080][T14092] proc_fail_nth_read+0x100/0x140 [ 314.670208][T14092] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 314.670250][T14092] vfs_read+0x1a0/0x6f0 [ 314.670304][T14092] ? __rcu_read_unlock+0x4f/0x70 [ 314.670325][T14092] ? __rcu_read_unlock+0x4f/0x70 [ 314.670376][T14092] ? __fget_files+0x184/0x1c0 [ 314.670403][T14092] ksys_read+0xda/0x1a0 [ 314.670508][T14092] __x64_sys_read+0x40/0x50 [ 314.670553][T14092] x64_sys_call+0x2d77/0x2fb0 [ 314.670593][T14092] do_syscall_64+0xd2/0x200 [ 314.670629][T14092] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 314.670663][T14092] ? clear_bhb_loop+0x40/0x90 [ 314.670762][T14092] ? clear_bhb_loop+0x40/0x90 [ 314.670811][T14092] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 314.670832][T14092] RIP: 0033:0x7f51335bd33c [ 314.670850][T14092] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 314.670874][T14092] RSP: 002b:00007f5131c27030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 314.670898][T14092] RAX: ffffffffffffffda RBX: 00007f51337e5fa0 RCX: 00007f51335bd33c [ 314.670915][T14092] RDX: 000000000000000f RSI: 00007f5131c270a0 RDI: 0000000000000006 [ 314.670990][T14092] RBP: 00007f5131c27090 R08: 0000000000000000 R09: 0000000000000000 [ 314.671002][T14092] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 314.671016][T14092] R13: 0000000000000000 R14: 00007f51337e5fa0 R15: 00007ffe1b26b498 [ 314.671080][T14092] [ 315.508529][T14108] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3826'. [ 315.535768][T14108] loop3: detected capacity change from 0 to 512 [ 315.542517][T14108] ext4: Unknown parameter 'smackfshat' [ 315.572165][T14110] 9pnet_fd: Insufficient options for proto=fd [ 315.685501][T14114] FAULT_INJECTION: forcing a failure. [ 315.685501][T14114] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 315.698734][T14114] CPU: 1 UID: 0 PID: 14114 Comm: syz.3.3829 Not tainted 6.16.0-rc5-syzkaller-00053-g8c2e52ebbe88 #0 PREEMPT(voluntary) [ 315.698764][T14114] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 315.698777][T14114] Call Trace: [ 315.698784][T14114] [ 315.698844][T14114] __dump_stack+0x1d/0x30 [ 315.698869][T14114] dump_stack_lvl+0xe8/0x140 [ 315.698895][T14114] dump_stack+0x15/0x1b [ 315.698917][T14114] should_fail_ex+0x265/0x280 [ 315.698994][T14114] should_fail+0xb/0x20 [ 315.699031][T14114] should_fail_usercopy+0x1a/0x20 [ 315.699079][T14114] _copy_from_user+0x1c/0xb0 [ 315.699098][T14114] ___sys_sendmsg+0xc1/0x1d0 [ 315.699149][T14114] __x64_sys_sendmsg+0xd4/0x160 [ 315.699193][T14114] x64_sys_call+0x2999/0x2fb0 [ 315.699243][T14114] do_syscall_64+0xd2/0x200 [ 315.699284][T14114] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 315.699369][T14114] ? clear_bhb_loop+0x40/0x90 [ 315.699397][T14114] ? clear_bhb_loop+0x40/0x90 [ 315.699426][T14114] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 315.699508][T14114] RIP: 0033:0x7fb10a3ee929 [ 315.699527][T14114] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 315.699546][T14114] RSP: 002b:00007fb108a57038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 315.699568][T14114] RAX: ffffffffffffffda RBX: 00007fb10a615fa0 RCX: 00007fb10a3ee929 [ 315.699628][T14114] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000008 [ 315.699660][T14114] RBP: 00007fb108a57090 R08: 0000000000000000 R09: 0000000000000000 [ 315.699671][T14114] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 315.699684][T14114] R13: 0000000000000000 R14: 00007fb10a615fa0 R15: 00007ffd2ff16b08 [ 315.699708][T14114] [ 315.966789][T14118] loop3: detected capacity change from 0 to 512 [ 316.014984][T14118] EXT4-fs: Project quota feature not enabled. Cannot enable project quota enforcement. [ 316.507639][T14139] xt_hashlimit: max too large, truncated to 1048576 [ 316.805661][ T29] kauditd_printk_skb: 3095 callbacks suppressed [ 316.805681][ T29] audit: type=1326 audit(316.780:106823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14156 comm="syz.2.3845" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe2a1dce929 code=0x0 [ 316.906665][ T29] audit: type=1326 audit(316.880:106824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14156 comm="syz.2.3845" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe2a1dce929 code=0x0 [ 319.300972][T14197] netlink: 'syz.2.3855': attribute type 4 has an invalid length. [ 319.378211][T14198] loop3: detected capacity change from 0 to 512 [ 319.438662][T14198] EXT4-fs: Project quota feature not enabled. Cannot enable project quota enforcement. [ 319.758643][ T29] audit: type=1326 audit(319.730:106825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14214 comm="syz.4.3863" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fae2206e929 code=0x0 [ 319.837414][ T29] audit: type=1326 audit(319.810:106826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14214 comm="syz.4.3863" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fae2206e929 code=0x0 [ 319.916967][T14220] loop3: detected capacity change from 0 to 256 [ 321.986565][ T29] audit: type=1400 audit(321.960:106827): avc: denied { setopt } for pid=14248 comm="syz.4.3873" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 322.017064][T14249] loop4: detected capacity change from 0 to 2048 [ 322.026472][T14249] EXT4-fs (loop4): couldn't mount as ext3 due to feature incompatibilities [ 322.097243][T14253] xt_hashlimit: max too large, truncated to 1048576 [ 322.161283][T14258] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 322.171062][ T29] audit: type=1400 audit(322.130:106828): avc: denied { ioctl } for pid=14257 comm="syz.2.3877" path="/dev/raw-gadget" dev="devtmpfs" ino=142 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 322.207397][T14258] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 322.223119][T14258] netlink: 'syz.2.3877': attribute type 10 has an invalid length. [ 322.287614][T14265] netlink: 'syz.2.3877': attribute type 10 has an invalid length. [ 322.403795][T14258] team0: Port device dummy0 added [ 322.410643][T14265] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 322.851342][T14249] xt_hashlimit: max too large, truncated to 1048576 [ 323.066783][T14275] loop4: detected capacity change from 0 to 764 [ 323.074283][T14275] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 323.724205][T14278] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(1) [ 323.730818][T14278] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 323.738442][T14278] vhci_hcd vhci_hcd.0: Device attached [ 323.749755][T14275] vxcan1: tx address claim with dlc 0 [ 323.755499][T14279] usbip_core: unknown command [ 323.760241][T14279] vhci_hcd: unknown pdu 1668249189 [ 323.765433][T14279] usbip_core: unknown command [ 324.066400][T14275] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 324.737884][ T9357] vhci_hcd: stop threads [ 324.742224][ T9357] vhci_hcd: release socket [ 324.746995][ T9357] vhci_hcd: disconnect device [ 324.768018][ T29] audit: type=1326 audit(324.740:106829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14281 comm="syz.3.3883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb10a3ee929 code=0x7ffc0000 [ 324.791189][ T29] audit: type=1326 audit(324.740:106830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14281 comm="syz.3.3883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb10a3ee929 code=0x7ffc0000 [ 324.814386][ T29] audit: type=1326 audit(324.740:106831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14281 comm="syz.3.3883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=68 compat=0 ip=0x7fb10a3ee929 code=0x7ffc0000 [ 324.837388][ T29] audit: type=1326 audit(324.740:106832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14281 comm="syz.3.3883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb10a3ee929 code=0x7ffc0000 [ 324.860635][ T29] audit: type=1326 audit(324.740:106833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14281 comm="syz.3.3883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb10a3ee929 code=0x7ffc0000 [ 324.883836][ T29] audit: type=1326 audit(324.740:106834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14281 comm="syz.3.3883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb10a3ee929 code=0x7ffc0000 [ 324.907011][ T29] audit: type=1326 audit(324.740:106835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14281 comm="syz.3.3883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb10a3ee929 code=0x7ffc0000 [ 324.930213][ T29] audit: type=1326 audit(324.740:106836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14281 comm="syz.3.3883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb10a3ee929 code=0x7ffc0000 [ 325.173465][T14275] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.200305][ T2960] vhci_hcd: vhci_device speed not set [ 325.245384][T14275] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.324739][T14275] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.367039][T14304] 9pnet_fd: Insufficient options for proto=fd [ 325.391243][T14275] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 325.414181][T14275] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 325.444023][T14275] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 325.461893][T14275] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 325.555475][T14317] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3893'. [ 325.564601][T14317] netlink: 9 bytes leftover after parsing attributes in process `syz.0.3893'. [ 325.726672][T14323] loop4: detected capacity change from 0 to 512 [ 325.803570][T14325] loop3: detected capacity change from 0 to 256 [ 325.835311][T14323] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 326.300597][T14323] loop4: detected capacity change from 0 to 512 [ 326.404214][T14323] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 326.492111][T14323] EXT4-fs (loop4): orphan cleanup on readonly fs [ 326.544446][T14323] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.3896: bg 0: block 248: padding at end of block bitmap is not set [ 326.583329][T14323] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.3896: Failed to acquire dquot type 1 [ 326.609875][T14323] EXT4-fs (loop4): 1 truncate cleaned up [ 326.680534][T14342] 9pnet_fd: Insufficient options for proto=fd [ 326.699314][T14323] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 326.802221][T14316] ext4: Unknown parameter '00000010' [ 326.950384][T11482] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 327.000539][ T29] kauditd_printk_skb: 104 callbacks suppressed [ 327.000585][ T29] audit: type=1400 audit(326.970:106939): avc: denied { write } for pid=14357 comm="syz.0.3910" name="kcm" dev="proc" ino=4026533467 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 327.053855][ T29] audit: type=1326 audit(327.010:106940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14357 comm="syz.0.3910" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f71b79158e7 code=0x7ffc0000 [ 327.076968][ T29] audit: type=1326 audit(327.010:106941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14357 comm="syz.0.3910" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f71b78bab19 code=0x7ffc0000 [ 327.100273][ T29] audit: type=1326 audit(327.010:106942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14357 comm="syz.0.3910" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f71b79158e7 code=0x7ffc0000 [ 327.123581][ T29] audit: type=1326 audit(327.010:106943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14357 comm="syz.0.3910" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f71b78bab19 code=0x7ffc0000 [ 327.146583][ T29] audit: type=1326 audit(327.010:106944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14357 comm="syz.0.3910" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71b791e929 code=0x7ffc0000 [ 327.169689][ T29] audit: type=1326 audit(327.010:106945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14357 comm="syz.0.3910" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71b791e929 code=0x7ffc0000 [ 327.192858][ T29] audit: type=1326 audit(327.010:106946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14357 comm="syz.0.3910" exe="/root/syz-executor" sig=0 arch=c000003e syscall=61 compat=0 ip=0x7f71b791e929 code=0x7ffc0000 [ 327.215866][ T29] audit: type=1326 audit(327.010:106947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14357 comm="syz.0.3910" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71b791e929 code=0x7ffc0000 [ 327.239035][ T29] audit: type=1326 audit(327.010:106948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14357 comm="syz.0.3910" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71b791e929 code=0x7ffc0000 [ 327.328312][T14365] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3912'. [ 327.342127][T14369] ================================================================== [ 327.342166][T14369] BUG: KCSAN: data-race in set_console / set_console [ 327.356963][T14369] [ 327.356973][T14369] write to 0xffffffff86a1c1cc of 4 bytes by task 14367 on cpu 1: [ 327.367076][T14369] set_console+0x118/0x150 [ 327.367113][T14369] vt_ioctl+0x167f/0x1880 [ 327.367137][T14369] tty_ioctl+0x7db/0xb80 [ 327.380192][T14369] __se_sys_ioctl+0xce/0x140 [ 327.380230][T14369] __x64_sys_ioctl+0x43/0x50 [ 327.380260][T14369] x64_sys_call+0x19a8/0x2fb0 [ 327.380281][T14369] do_syscall_64+0xd2/0x200 [ 327.398705][T14369] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 327.404627][T14369] [ 327.406964][T14369] write to 0xffffffff86a1c1cc of 4 bytes by task 14369 on cpu 0: [ 327.414785][T14369] set_console+0x118/0x150 [ 327.419226][T14369] vt_ioctl+0x167f/0x1880 [ 327.423676][T14369] tty_ioctl+0x7db/0xb80 [ 327.428051][T14369] __se_sys_ioctl+0xce/0x140 [ 327.432677][T14369] __x64_sys_ioctl+0x43/0x50 [ 327.437473][T14369] x64_sys_call+0x19a8/0x2fb0 [ 327.442281][T14369] do_syscall_64+0xd2/0x200 [ 327.446909][T14369] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 327.452819][T14369] [ 327.455167][T14369] value changed: 0xffffffff -> 0x00000003 [ 327.460923][T14369] [ 327.463347][T14369] Reported by Kernel Concurrency Sanitizer on: [ 327.469512][T14369] CPU: 0 UID: 0 PID: 14369 Comm: syz.0.3914 Not tainted 6.16.0-rc5-syzkaller-00053-g8c2e52ebbe88 #0 PREEMPT(voluntary) [ 327.482033][T14369] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 327.492110][T14369] ================================================================== [ 327.513857][T14365] loop3: detected capacity change from 0 to 512 [ 327.520431][T14365] ext4: Unknown parameter 'smackfshat'