last executing test programs: 2.517943442s ago: executing program 1 (id=964): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000610025484008851a670000000000000000009500000000000000c7d6eba58d285d94f2f2b99ba87c90b05b8e864eea586d19521fe55692cda05fda49617076fd97b31eee1f79701bcb47246f78ec1c4baf60188193c810d922c6bffd59f57aff"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'syztnl1\x00', &(0x7f00000001c0)={'ip6tnl0\x00', 0x0, 0x2, 0xd7, 0x8c, 0x1ff, 0x61, @local, @mcast2, 0x40, 0x1, 0xfffffff9, 0x80000003}}) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a010100000004"], 0x57) r3 = socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0x8, &(0x7f0000000000)={0xfffffffffffffffb, 0xfffffffffffffffc}, 0x0) getrlimit(0x5, &(0x7f00000000c0)) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffc0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000100)='sched_switch\x00', r4, 0x0, 0x2}, 0x18) r5 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="0c0100001000130428bd700000000000e0000001000000000000000000000000000000000000000000000000000000014e2100004e2400000200202000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc020000000000000000000000000001000000003c0000000a0101000000000000000000000000000400000000000000060000000000000002000000000000000400000000004000ffffffffffffffff03000000000000007f00000000000000000000000000000000000000000000000800150000000000cc000000000000000000000000000000f600000000000000000000002abd7000000000000200010500000000000000001c00040002004e2100270000fe880000000000000000000000000101"], 0x10c}}, 0x804) r7 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) ioctl$USBDEVFS_IOCTL(r7, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r7, 0x80045505, &(0x7f0000000040)=@usbdevfs_connect) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1d459d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x183, 0x6}, 0x6025, 0x4005, 0xb, 0x0, 0x1, 0x1, 0xb, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$USBDEVFS_SETCONFIGURATION(r7, 0x80045505, &(0x7f0000000000)=0x1) write$binfmt_aout(r5, &(0x7f00000000c0)=ANY=[], 0x20) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) syz_clone(0x630c1100, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000a40)={0x8, 0x80, 0x0, 0x4, 0x0, 0x7, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x4}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x2, 0x0, 0x2, 0x0, 0x8000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d00)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r8, 0x0, 0x2}, 0x18) r9 = syz_genetlink_get_family_id$gtp(&(0x7f0000000a00), r5) sendmsg$GTP_CMD_ECHOREQ(r3, &(0x7f0000000b40)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x38, r9, 0x400, 0x70bd25, 0x25dfdbff, {}, [@GTPA_I_TEI={0x8, 0x8, 0x1}, @GTPA_MS_ADDR6={0x14, 0xc, @mcast2}, @GTPA_LINK={0x8, 0x1, r1}]}, 0x38}}, 0x20008800) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x500, &(0x7f0000000380)={[{@errors_remount}, {@discard}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5e}}, {@noauto_da_alloc}, {@bsdgroups}, {@jqfmt_vfsv1}, {@abort}, {@data_err_ignore}]}, 0x1, 0x476, &(0x7f0000000540)="$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") writev(r3, &(0x7f00000003c0)=[{&(0x7f0000000380)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fdd411efc40800040000000000000000", 0x39}], 0x1) 2.292895154s ago: executing program 0 (id=967): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) timer_settime(r1, 0x0, 0x0, 0x0) r2 = mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x0, 0x0) mq_timedreceive(r2, &(0x7f0000036600)=""/102378, 0x18fea, 0x3, 0x0) 1.951718828s ago: executing program 3 (id=980): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000740)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYBLOB="010702000000000000006700000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900a60500002f00000008003c0100"], 0x30}}, 0x0) 1.951183878s ago: executing program 3 (id=981): mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) creat(&(0x7f00000000c0)='./file0\x00', 0xf4) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) syz_clone(0x41200100, 0x0, 0x0, 0x0, 0x0, 0x0) 1.948504949s ago: executing program 1 (id=982): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000610025484008851a670000000000000000009500000000000000c7d6eba58d285d94f2f2b99ba87c90b05b8e864eea586d19521fe55692cda05fda49617076fd97b31eee1f79701bcb47246f78ec1c4baf60188193c810d922c6bffd59f57aff"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'syztnl1\x00', &(0x7f00000001c0)={'ip6tnl0\x00', 0x0, 0x2, 0xd7, 0x8c, 0x1ff, 0x61, @local, @mcast2, 0x40, 0x1, 0xfffffff9, 0x80000003}}) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a010100000004"], 0x57) r3 = socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0x8, &(0x7f0000000000)={0xfffffffffffffffb, 0xfffffffffffffffc}, 0x0) getrlimit(0x5, &(0x7f00000000c0)) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffc0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000100)='sched_switch\x00', r4, 0x0, 0x2}, 0x18) r5 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="0c0100001000130428bd700000000000e0000001000000000000000000000000000000000000000000000000000000014e2100004e2400000200202000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB], 0x10c}}, 0x804) r7 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) ioctl$USBDEVFS_IOCTL(r7, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r7, 0x80045505, &(0x7f0000000040)=@usbdevfs_connect) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1d459d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x183, 0x6}, 0x6025, 0x4005, 0xb, 0x0, 0x1, 0x1, 0xb, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$USBDEVFS_SETCONFIGURATION(r7, 0x80045505, &(0x7f0000000000)=0x1) write$binfmt_aout(r5, &(0x7f00000000c0)=ANY=[], 0x20) r8 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r8, 0x0) syz_clone(0x630c1100, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000a40)={0x8, 0x80, 0x0, 0x4, 0x0, 0x7, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x4}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x2, 0x0, 0x2, 0x0, 0x8000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d00)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r9, 0x0, 0x2}, 0x18) r10 = syz_genetlink_get_family_id$gtp(&(0x7f0000000a00), r5) sendmsg$GTP_CMD_ECHOREQ(r3, &(0x7f0000000b40)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x38, r10, 0x400, 0x70bd25, 0x25dfdbff, {}, [@GTPA_I_TEI={0x8, 0x8, 0x1}, @GTPA_MS_ADDR6={0x14, 0xc, @mcast2}, @GTPA_LINK={0x8, 0x1, r1}]}, 0x38}}, 0x20008800) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x500, &(0x7f0000000380)={[{@errors_remount}, {@discard}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5e}}, {@noauto_da_alloc}, {@bsdgroups}, {@jqfmt_vfsv1}, {@abort}, {@data_err_ignore}]}, 0x1, 0x476, &(0x7f0000000540)="$eJzs3M1vFOUfAPDvzLblx2v7Q3wBUavE2PjS0oLKwYtGEw8YTfSAN2tbCKFQQ2sihEg1Bi8mhkTP6tHEv8CbF6OeTLzq3ZAQ5QJ6qpnZmbK7dLctLLuF/XySZZ9n5pl9nm9nnp1n5pklgJ41nP2TRGyLiN8jYrCarS8wXH27duXc1D9Xzk0lsbT05l9JXu7qlXNTZdFyu61FZiSNSD9JikrqzZ85e2JydnbmdJEfWzj53tj8mbPPHD85eWzm2MypiUOHDh4Yf/65iWfbEmcW19U9H87t3f3q2xdfmzpy8d2fv8vau61YXxtHg00N72s2nAX+91JueWFafXt83RFsbNtr0klfFxvCulQiIttd/Xn/H4xKXN95g/HKx11tHHBbZeemFie2xSXgLpZEt1sAdEd5os+uf8tXh4YeG8LlF6sXQFnc14pXdU1feameXxttv031D0fEkcV/v8pe0fo+BABAW3w29eXheHql8V8a99WU21HMoQxFxP8jYmdE3BMRuyLi3oi87P0R8cDqVaa1mcapoRvHP+mlmw5uDbLx3wvF3Fb9+G+5mUOVIrc9j78/OXp8dmZ/8TcZif5NWX68RR0/vPzb583W1Y7/sldWfzkWLNpxqa/hBt305MJkPihtg8sfRezpWyn+ZHkmIImI3RGxZ30fvaNMHH/y273NCq0efwttmGda+ibiier+X4yG+EtJ6/nJsf/F7Mz+sfKouNEvv154o1n9txR/G2T7f0v98d9YZCipna+dX38dF/74tOk1zc0e/wPJW/m2A8WyDyYXFk6PRwwkh/N83fKJ69uW+bJ8Fv/IvpX7/85imyz+ByMiO4gfioiHI+KRou2PRsRjEbGvRfw/vdR8XX38m7d1Y/9PN3z/bc7XLB//Dft//YnKiR+/X7n2r99Z2/4/mKdGiiX5998q1trAW/zzAQAAwB0hzZ+BT9LR5XSajo5Wn+HfFVvS2bn5haeOzr1/arr6rPxQ9Kflna7Bmvuh48li8YnV/ERxr7hcf6C4b/xFZXOeH52am53ucuzQ67Y26f+ZPyvdbh1w2600jzYx0IWGAB3X2P/T+uz51zvZGKCjmj5Hs6Wz7QA6b5Xn6NJOtQPoPP9fC/Sulfr/+Ya8uQC4Ozn/Q+/S/6F36f/Qu/R/6Emr/Ui+cou//Ze44xLJ2gpH2v2mboxEf0S05QMHNkQ4RaLb30wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADt8V8AAAD//5qI6jE=") writev(r3, &(0x7f00000003c0)=[{&(0x7f0000000380)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fdd411efc40800040000000000000000", 0x39}], 0x1) 1.435845139s ago: executing program 0 (id=985): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='kfree\x00', r1, 0x0, 0x10000001}, 0x18) fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) 1.387821674s ago: executing program 0 (id=986): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xf, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r1}, 0x10) syz_emit_ethernet(0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="0180c2000001a21428c6"], 0x0) 1.387017373s ago: executing program 0 (id=987): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000610025484008851a670000000000000000009500000000000000c7d6eba58d285d94f2f2b99ba87c90b05b8e864eea586d19521fe55692cda05fda49617076fd97b31eee1f79701bcb47246f78ec1c4baf60188193c810d922c6bffd59f57aff"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'syztnl1\x00', &(0x7f00000001c0)={'ip6tnl0\x00', 0x0, 0x2, 0xd7, 0x8c, 0x1ff, 0x61, @local, @mcast2, 0x40, 0x1, 0xfffffff9, 0x80000003}}) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a010100000004"], 0x57) r3 = socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0x8, &(0x7f0000000000)={0xfffffffffffffffb, 0xfffffffffffffffc}, 0x0) getrlimit(0x5, &(0x7f00000000c0)) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffc0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000100)='sched_switch\x00', r4, 0x0, 0x2}, 0x18) r5 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="0c0100001000130428bd700000000000e0000001000000000000000000000000000000000000000000000000000000014e2100004e2400000200202000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc020000000000000000000000000001000000003c0000000a0101000000000000000000000000000400000000000000060000000000000002000000000000000400000000004000ffffffffffffffff03000000000000007f00000000000000000000000000000000000000000000000800150000000000cc000000000000000000000000000000f600000000000000000000002abd7000000000000200010500000000000000001c00040002004e2100270000fe880000000000000000000000000101"], 0x10c}}, 0x804) r7 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) ioctl$USBDEVFS_IOCTL(r7, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r7, 0x80045505, &(0x7f0000000040)=@usbdevfs_connect) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1d459d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x183, 0x6}, 0x6025, 0x4005, 0xb, 0x0, 0x1, 0x1, 0xb, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$USBDEVFS_SETCONFIGURATION(r7, 0x80045505, &(0x7f0000000000)=0x1) write$binfmt_aout(r5, &(0x7f00000000c0)=ANY=[], 0x20) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, 0xffffffffffffffff, 0x0) syz_clone(0x630c1100, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000a40)={0x8, 0x80, 0x0, 0x4, 0x0, 0x7, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x4}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x2, 0x0, 0x2, 0x0, 0x8000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d00)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r8, 0x0, 0x2}, 0x18) r9 = syz_genetlink_get_family_id$gtp(&(0x7f0000000a00), r5) sendmsg$GTP_CMD_ECHOREQ(r3, &(0x7f0000000b40)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x38, r9, 0x400, 0x70bd25, 0x25dfdbff, {}, [@GTPA_I_TEI={0x8, 0x8, 0x1}, @GTPA_MS_ADDR6={0x14, 0xc, @mcast2}, @GTPA_LINK={0x8, 0x1, r1}]}, 0x38}}, 0x20008800) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x500, &(0x7f0000000380)={[{@errors_remount}, {@discard}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5e}}, {@noauto_da_alloc}, {@bsdgroups}, {@jqfmt_vfsv1}, {@abort}, {@data_err_ignore}]}, 0x1, 0x476, &(0x7f0000000540)="$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") writev(r3, &(0x7f00000003c0)=[{&(0x7f0000000380)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fdd411efc40800040000000000000000", 0x39}], 0x1) 1.355603807s ago: executing program 1 (id=989): r0 = socket(0x10, 0x2, 0x0) flistxattr(r0, &(0x7f00000004c0)=""/144, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='kfree\x00'}, 0x18) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000280)='kmem_cache_free\x00', r4, 0x0, 0x200000000000006}, 0x18) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r5, &(0x7f0000004440)={&(0x7f0000000ec0)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x2}}, 0x10, &(0x7f0000004340)=[{&(0x7f0000000f00)="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", 0xd64}, {0x0, 0x4000}, {0x0}, {0x0}, {&(0x7f00000020c0), 0x500}], 0x5}, 0x0) r6 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r6) getsockname$packet(r6, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r7, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x2c, 0x24, 0x5820a61ca228651, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000005880)=@newtfilter={0x3c, 0x28, 0x575ac7824d421509, 0x70bd2a, 0x4, {0x0, 0x0, 0x0, r7, {}, {0x1}, {0x4, 0x3d}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_CLASSID={0x8, 0x1, {0xd, 0x1}}]}}]}, 0x3c}}, 0x40) r9 = socket$inet_tcp(0x2, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="050000002000011826bd7000ffffffff0a00000000000007000000002d000100ff00000001"], 0x30}, 0x1, 0x0, 0x0, 0x40814}, 0x4000004) sendto$inet(r9, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYRES16=r8], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='kfree\x00', r11}, 0x10) fcntl$notify(0xffffffffffffffff, 0x402, 0x29) syz_open_procfs(0x0, &(0x7f0000000040)='map_files\x00') 1.291258213s ago: executing program 1 (id=991): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth1_vlan\x00', 0x0}) bind$packet(r0, &(0x7f0000000040)={0x11, 0x1, r1, 0x1, 0x9}, 0x14) r2 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@getchain={0x24, 0x11, 0x1, 0x70bd2a, 0x2000001, {0x0, 0x0, 0x0, r1, {0x7, 0xa}, {0xd, 0xffe0}, {0x8, 0x9}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x20048054) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020641700000000002020007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syncfs(r3) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="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"], &(0x7f00000005c0)=""/234, 0x11f, 0xea, 0x0, 0xdd57, 0x10000}, 0x28) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1c, 0xb, &(0x7f0000000240)=ANY=[@ANYRES32=r2, @ANYRESDEC=r1], &(0x7f0000000200)='GPL\x00', 0xa, 0x0, 0x0, 0x41100, 0x0, '\x00', r1, @fallback, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r6 = gettid() timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)=0x0) timer_settime(r7, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b70800000000ebff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r9}, 0x10) perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x1400, 0x0, 0x63cf80fb, 0x4, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x80001000, 0x0, 0x0, &(0x7f0000000000), 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe9, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r10, 0x8927, &(0x7f0000000080)='\x804\x01v\xaa\xd5\x10\x90\x94\xcf\xf3:,\x03\b$\xcfs\xf8l\xf0\x86Q\t3\x03^d7\xab=&\b\x00\x00\x00\x00\x00\x00\xe7\xc4\x16\xd7tE;\xe5\xfd\x17\x8b\nl\x19\x91\xd9\xd9\xc9\n\x00\n\xe63\xe6\xdd\x19FR') r11 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000000021007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040), 0x2, 0x6}}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r5}, 0x18) 1.108776991s ago: executing program 2 (id=995): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x4, &(0x7f0000000980)=ANY=[@ANYBLOB="1801000000000000000000006dfeff00850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='kfree\x00', r0, 0x0, 0x401}, 0x11) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000004400)=@deltfilter={0xa2c, 0x2d, 0x129, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xf, 0xfff1}, {0xd, 0x7}, {0x6d78d3777756dd7b, 0x37ae65b5598aa3de}}, [@filter_kind_options=@f_u32={{0x8}, {0x73c, 0x2, [@TCA_U32_CLASSID={0x8, 0x1, {0x1, 0xc}}, @TCA_U32_INDEV={0x14, 0x8, 'xfrm0\x00'}, @TCA_U32_HASH={0x8, 0x2, 0x7}, @TCA_U32_SEL={0x504, 0x5, {0xd, 0x1, 0x0, 0x40, 0x7, 0x7, 0x5, 0x6000, [{0x5, 0x40, 0x101}, {0x5, 0x1, 0x40, 0xfffff7e4}, {0x1d, 0x100, 0x4, 0xffffffff}, {0x3, 0x4, 0x8, 0x5}, {0x2, 0x9, 0x0, 0x100}, {0x7, 0x3, 0x2002, 0x2}, {0x12, 0x401, 0x5, 0x6}, {0xffffffff, 0x4, 0x5, 0x1}, {0x7, 0x4, 0x578}, {0x8, 0x9, 0xfffffffc, 0x5}, {0x9, 0x6, 0x8001, 0x200}, {0x4, 0xfffffc63, 0x2, 0x5}, {0x2, 0x1, 0xd, 0xa}, {0x4, 0x5, 0x96c8, 0x3}, {0xd8ad, 0x8, 0x1, 0x6}, {0x2, 0x10001, 0x4, 0xb50c}, {0x3, 0xf62, 0x4, 0x7}, {0x6, 0x9, 0x5, 0x3}, {0x101, 0x5, 0x4, 0x4}, {0x10, 0x4, 0x6, 0x400}, {0x1, 0x7, 0x40, 0x8}, {0x8, 0x2, 0x7, 0xb}, {0x400, 0x6, 0x200, 0x2}, {0x34, 0xb8000000, 0x0, 0x80000}, {0x9, 0x6, 0x2}, {0x4, 0x1ff, 0x7, 0x3}, {0x4, 0x7, 0x5, 0x7}, {0xb, 0xe97, 0x8, 0x4}, {0x3, 0x400, 0xea2d, 0x100}, {0x9, 0x5, 0x2}, {0x5, 0x1, 0xffffffff, 0x8001}, {0x1, 0x7, 0x0, 0x4}, {0xda6b1d0b, 0xa, 0x1, 0x4}, {0xfffffffb, 0x9, 0x5, 0x7}, {0x4, 0xbb10, 0xf9, 0x8000}, {0x1, 0x1, 0x2, 0x377}, {0xfffffff8, 0x5, 0xf, 0x5}, {0x1, 0x3, 0x7fffffff, 0x2}, {0xfffffff3, 0x40, 0x4, 0x7}, {0x0, 0x0, 0x5, 0x1f}, {0x4, 0x7, 0x1, 0x3}, {0x7fff, 0x7, 0x800, 0x7}, {0x4, 0x4, 0xfffffff8, 0x10}, {0x4, 0x10000, 0xfffffff9, 0x9}, {0x4, 0x233, 0x1, 0x9}, {0xffffffff, 0xba49, 0x5b, 0x8001}, {0xc9, 0x6, 0x101, 0xffffff85}, {0xffffffff, 0x3, 0x7fffffff, 0x5}, {0xffffffff, 0x4f4a, 0x8, 0x3}, {0xfffff088, 0xfffffff7, 0x1, 0xffffffff}, {0xe0, 0x1ff, 0x3, 0xfff}, {0x1, 0xffffff7f, 0x2, 0x37}, {0xe2b, 0x0, 0x1, 0x8}, {0x2, 0x1ff, 0x4446d290, 0x9}, {0xb, 0x3, 0x8, 0xff}, {0xc348, 0x9, 0x4, 0x81}, {0x0, 0x4, 0x8, 0x6}, {0x6, 0x80000001, 0xde, 0x9}, {0x7fff, 0x3, 0x7, 0x4aa}, {0x10, 0x400, 0x9}, {0x7fffffff, 0xfffffc01, 0x5f, 0xf}, {0x4, 0x8, 0x9, 0x4}, {0x9, 0x2, 0x6, 0x9}, {0x4, 0x7, 0x6, 0x5}, {0x5, 0x5, 0xff, 0x25e}, {0x3, 0x3b1d, 0x7af, 0x4}, {0x5, 0x5, 0x381, 0x4}, {0x7, 0x7, 0x9, 0x9}, {0x3, 0x0, 0x2, 0x4}, {0xfff, 0x8, 0xfffffff9, 0x7}, {0x1, 0x7, 0x2, 0xe7b2}, {0x7, 0x200, 0x10001, 0x40000000}, {0x9, 0xf, 0x3, 0x5}, {0x59c, 0x8, 0x401}, {0x3ff, 0x9, 0x0, 0x5}, {0x3, 0x0, 0x0, 0x6}, {0xfffffff7, 0x9, 0x10abb2d4, 0x1204}, {0x6, 0x0, 0xfffff14a, 0xe8}, {0x3, 0x1ff, 0x0, 0x8}]}}, @TCA_U32_ACT={0x208, 0x7, [@m_simple={0xf8, 0x9, 0x0, 0x0, {{0xb}, {0x14, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0xe, 0x3, 'nolazytime'}]}, {0xbc, 0x6, "44d479e10637a85d480784c552fe4862bf49c64453045fbdea005536e481a0fcb23e2de8ba7ee6f2500e495dc4aadec63dff7c4945b75e1dc00e54a6a2d5738a661f325ff545d9d65c9de53d60ad40005cff36ece6907d90ab028c0e73c813844a882e9aa99af4b256d8af29a1a9bb19648e0518c51a4969d539e738449d374111fac1d308929ae89a74b17f00b3f93793044e570aef453d890582ab9c2e029a27e5ebc6212da4faf02900b2d7b8cd272468f0dc5f9f02f9"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_vlan={0x10c, 0x18, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x3}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0xfffffeff, 0xa, 0x2, 0x9, 0x8000}, 0x1}}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x8100}]}, {0xb4, 0x6, "440e905cf0bc1d9bffad8f5e20c6b9a44a418bc0a71139e0cab710e02ab919742d827a9fc857009c97eeb7214df0c61ec84c1b3213eb41389f2c88c57eabc8ffa3011112073fe07b1ab58910c1ef98b33c4595b67078c9d6f616c4c68d3632cf71e7d784d56cb5afcfae7759b5f771579c4a05554d131daacce7c7b0b82624eeaf92255e9d0447a9f5cc51fc376c7050b338826f4eb2b4add6fed282b2f63a19ff9d7edb4711eb8dd1b1a1de8d742828"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x5e07c0d609a68d1d}}}}]}, @TCA_U32_CLASSID={0x8, 0x1, {0xfff2, 0x42f63fc522b7047a}}]}}, @TCA_RATE={0x6, 0x5, {0x1, 0x2}}, @filter_kind_options=@f_flow={{0x9}, {0x23c, 0x2, [@TCA_FLOW_ADDEND={0x8, 0x5, 0xb}, @TCA_FLOW_KEYS={0x8, 0x1, 0xec8}, @TCA_FLOW_BASECLASS={0x8, 0x3, {0x8}}, @TCA_FLOW_DIVISOR={0x8, 0x8, 0x9}, @TCA_FLOW_EMATCHES={0x200, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x4c58}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x8}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x8}}, @TCA_EMATCH_TREE_LIST={0x124, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0x7, 0x7, 0x1}, {{0x1, 0x1}, {0x1ffffff7, 0x0, 0x0, 0x1}}}}, @TCF_EM_IPT={0xc0, 0x3, 0x0, 0x0, {{0x1, 0x9, 0xde}, [@TCA_EM_IPT_MATCH_DATA={0xaa, 0x5, "f92f7b8595b1146026eabb4980b12f18bb0f3428e19b4909bd6a157b82c4de6eb3af303ca28dd06209263d284ba8e35d0408d89d564ea2ca5e97c447f853652b613fb0e3923bdfbdd530bafea5ff7207f1aaf67df008cfa5b590f313acb2ba96cc5c77321604b7be74237db22eb0ac89f0d185f53816efcb472f33e0e9afd4c9a7960e5aad8c5537e0cc71a4ac2d6a5eab388dc5e83aca9022c9bbcbdd5faa947c16047071af"}, @TCA_EM_IPT_MATCH_REVISION={0x5}]}}, @TCF_EM_META={0x38, 0x1, 0x0, 0x0, {{0x3, 0x4, 0x6}, [@TCA_EM_META_LVALUE={0x4}, @TCA_EM_META_LVALUE={0x4}, @TCA_EM_META_RVALUE={0x11, 0x3, [@TCF_META_TYPE_VAR="72a0", @TCF_META_TYPE_VAR="e17fe5", @TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_INT=0x2]}, @TCA_EM_META_LVALUE={0xf, 0x2, [@TCF_META_TYPE_INT=0x4, @TCF_META_TYPE_VAR="bb28b97b4f3ba3"]}]}}, @TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0x2, 0x7, 0x40}, {{0x0, 0x0, 0x0, 0x1}, {0x4}}}}]}, @TCA_EMATCH_TREE_LIST={0xc0, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0xa4, 0x3, 0x0, 0x0, {{0x4, 0x0, 0xde1e}, "094dd4b4bc4d3d8258a0699540993e5a74695cd1196d04a58196631db38916f3a7724dbf5498f4347a0cc58c84d0c3cf3052349201f4bbe3c55623d36529872bc32bd31dbd429013d5c7dfb9d1103c521a1b7cc7882af1599189c269d8e53c78e2ec7372c6fb504fb4fe7c111f62732cf49003a0d65b781addc78dc44b776ebe82b94f7278f40f0e8f08628a0bfe6315ae79680cb245f7"}}, @TCF_EM_CMP={0x18, 0x3, 0x0, 0x0, {{0x3}, {0xd, 0x6, 0xe6, 0x7, 0x2, 0x2}}}]}]}, @TCA_FLOW_ADDEND={0x8, 0x5, 0x3ff}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_ADDEND={0x8, 0x5, 0x3}]}}, @TCA_RATE={0x6, 0x5, {0x40, 0x2}}, @filter_kind_options=@f_flower={{0xb}, {0x58, 0x2, [@TCA_FLOWER_KEY_ICMPV4_CODE_MASK={0x5}, @TCA_FLOWER_KEY_ETH_DST={0xa}, @TCA_FLOWER_KEY_ENC_IPV6_SRC={0x14, 0x1f, @rand_addr=' \x01\x00'}, @TCA_FLOWER_KEY_ENC_IPV6_SRC={0x14, 0x1f, @mcast2}, @TCA_FLOWER_KEY_ARP_TIP_MASK={0x8}, @TCA_FLOWER_KEY_IPV4_DST={0x8, 0xc, @local}, @TCA_FLOWER_KEY_ENC_IPV4_SRC_MASK={0x8, 0x1c, 0x2fd265f5dab3e8f3}]}}, @TCA_CHAIN={0x8, 0xb, 0xfff}]}, 0xa2c}, 0x1, 0x0, 0x0, 0x40}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x6) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0}, 0x0, 0x10000, 0xda, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket(0x15, 0x5, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x4000000000002fe, 0x61, 0x0) bpf$BPF_PROG_DETACH(0x1c, &(0x7f00000006c0)=ANY=[@ANYRES64=r2], 0x20) ppoll(&(0x7f0000000540)=[{}], 0x5b, 0x0, 0x0, 0x0) r3 = io_uring_setup(0x5594, &(0x7f0000000100)={0x0, 0x10000000, 0x1, 0x1, 0x1d2}) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x0, &(0x7f0000000500)={[{@block_validity}, {@errors_remount}, {@dioread_lock}, {@nolazytime}, {@bsdgroups}, {@inode_readahead_blks}], [{@fowner_lt}, {@obj_user}, {@audit}]}, 0x1, 0x793, &(0x7f0000002700)="$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") openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000240), 0x208e24b) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, 0x0}, 0x0) write(0xffffffffffffffff, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r6) getsockname$packet(r6, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r7, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=@delchain={0x3c, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r7, {0xffe0, 0xb}, {0xfff3, 0xffff}, {0xf, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x8, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x4}]}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40044}, 0x4804) 1.087563763s ago: executing program 3 (id=996): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r2, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYRES8=r2, @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r4}, 0x10) r5 = mq_open(&(0x7f0000000a00)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb\x00\x00\x00\x00\x00', 0x42, 0x1f0, 0x0) mq_unlink(&(0x7f0000000000)='eth0\x00') close(r5) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x18, 0x7, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000e50003000000000085100000fcffffff250000001000000007000000faffffff95"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4c}, 0x94) 1.056170806s ago: executing program 3 (id=997): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth1_vlan\x00', 0x0}) bind$packet(r0, &(0x7f0000000040)={0x11, 0x1, r1, 0x1, 0x9}, 0x14) socket(0x400000000010, 0x3, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020641700000000002020007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="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"], &(0x7f00000005c0)=""/234, 0x11f, 0xea, 0x0, 0xdd57, 0x10000}, 0x28) gettid() bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00'}, 0x10) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040)={0xffffffffffffffff}, 0x2, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000080)=0x1, r3, 0x0, 0x2, 0x4}}, 0x20) 1.042407888s ago: executing program 0 (id=998): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, 0x0, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'syztnl1\x00', &(0x7f00000001c0)={'ip6tnl0\x00', 0x0, 0x2, 0xd7, 0x8c, 0x1ff, 0x61, @local, @mcast2, 0x40, 0x1, 0xfffffff9, 0x80000003}}) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a010100000004"], 0x57) r2 = socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0x8, &(0x7f0000000000)={0xfffffffffffffffb, 0xfffffffffffffffc}, 0x0) getrlimit(0x5, &(0x7f00000000c0)) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffc0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="0c0100001000130428bd700000000000e0000001000000000000000000000000000000000000000000000000000000014e2100004e2400000200202000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc020000000000000000000000000001000000003c0000000a0101000000000000000000000000000400000000000000060000000000000002000000000000000400000000004000ffffffffffffffff03000000000000007f00000000000000000000000000000000000000000000000800150000000000cc000000000000000000000000000000f600000000000000000000002abd7000000000000200010500000000000000001c00040002004e2100270000fe880000000000000000000000000101"], 0x10c}}, 0x804) r5 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r5, 0x80045505, &(0x7f0000000040)=@usbdevfs_connect) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1d459d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x183, 0x6}, 0x6025, 0x4005, 0xb, 0x0, 0x1, 0x1, 0xb, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$USBDEVFS_SETCONFIGURATION(r5, 0x80045505, &(0x7f0000000000)=0x1) write$binfmt_aout(r3, &(0x7f00000000c0)=ANY=[], 0x20) r6 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r6, 0x0) syz_clone(0x630c1100, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000a40)={0x8, 0x80, 0x0, 0x4, 0x0, 0x7, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x4}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x2, 0x0, 0x2, 0x0, 0x8000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d00)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r7, 0x0, 0x2}, 0x18) syz_genetlink_get_family_id$gtp(&(0x7f0000000a00), r3) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x500, &(0x7f0000000380)={[{@errors_remount}, {@discard}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5e}}, {@noauto_da_alloc}, {@bsdgroups}, {@jqfmt_vfsv1}, {@abort}, {@data_err_ignore}]}, 0x1, 0x476, &(0x7f0000000540)="$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") writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000380)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fdd411efc40800040000000000000000", 0x39}], 0x1) 1.005723341s ago: executing program 4 (id=999): perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$nl_audit(0x10, 0x3, 0x9) bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1b00000000000000005f4b44117d5f7d4e000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x3a5543, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x25, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2000000}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) r4 = socket$inet_sctp(0x2, 0x5, 0x84) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000040c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c0000000c0a010100000000000000000a0000070900020073797a31000000000900010073797a3100000000100003800c000080080003400000000214000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x24000850}, 0x40) close_range(r4, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="180009d500000000000000004b64ffec850000005000850000000f000000950000"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000140)='kfree\x00', r6, 0x0, 0xfffffffffffffff8}, 0x18) r7 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000006c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x24}, 0x94) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r9}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) sendmsg$inet(r10, &(0x7f0000000d40)={0x0, 0x7000000, &(0x7f00000023c0)=[{&(0x7f0000000b40)='?', 0x1}, {0x0, 0x1}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x20001) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="006b6c8a4e80aacad80200"/28, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x149, 0x0, 0x48, 0x0, &(0x7f0000000000)='\x00', 0x0}, 0x48) 1.003965671s ago: executing program 3 (id=1000): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000610025484008851a670000000000000000009500000000000000c7d6eba58d285d94f2f2b99ba87c90b05b8e864eea586d19521fe55692cda05fda49617076fd97b31eee1f79701bcb47246f78ec1c4baf60188193c810d922c6bffd59f57aff"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'syztnl1\x00', &(0x7f00000001c0)={'ip6tnl0\x00', 0x0, 0x2, 0xd7, 0x8c, 0x1ff, 0x61, @local, @mcast2, 0x40, 0x1, 0xfffffff9, 0x80000003}}) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a010100000004"], 0x57) r3 = socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0x8, &(0x7f0000000000)={0xfffffffffffffffb, 0xfffffffffffffffc}, 0x0) getrlimit(0x5, &(0x7f00000000c0)) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffc0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000100)='sched_switch\x00', r4, 0x0, 0x2}, 0x18) r5 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="0c0100001000130428bd700000000000e0000001000000000000000000000000000000000000000000000000000000014e2100004e2400000200202000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB], 0x10c}}, 0x804) r7 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) ioctl$USBDEVFS_IOCTL(r7, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r7, 0x80045505, &(0x7f0000000040)=@usbdevfs_connect) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1d459d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x183, 0x6}, 0x6025, 0x4005, 0xb, 0x0, 0x1, 0x1, 0xb, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$USBDEVFS_SETCONFIGURATION(r7, 0x80045505, &(0x7f0000000000)=0x1) write$binfmt_aout(r5, &(0x7f00000000c0)=ANY=[], 0x20) r8 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r8, 0x0) syz_clone(0x630c1100, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000a40)={0x8, 0x80, 0x0, 0x4, 0x0, 0x7, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x4}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x2, 0x0, 0x2, 0x0, 0x8000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d00)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r9, 0x0, 0x2}, 0x18) r10 = syz_genetlink_get_family_id$gtp(&(0x7f0000000a00), r5) sendmsg$GTP_CMD_ECHOREQ(r3, &(0x7f0000000b40)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x38, r10, 0x400, 0x70bd25, 0x25dfdbff, {}, [@GTPA_I_TEI={0x8, 0x8, 0x1}, @GTPA_MS_ADDR6={0x14, 0xc, @mcast2}, @GTPA_LINK={0x8, 0x1, r1}]}, 0x38}}, 0x20008800) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x500, &(0x7f0000000380)={[{@errors_remount}, {@discard}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5e}}, {@noauto_da_alloc}, {@bsdgroups}, {@jqfmt_vfsv1}, {@abort}, {@data_err_ignore}]}, 0x1, 0x476, &(0x7f0000000540)="$eJzs3M1vFOUfAPDvzLblx2v7Q3wBUavE2PjS0oLKwYtGEw8YTfSAN2tbCKFQQ2sihEg1Bi8mhkTP6tHEv8CbF6OeTLzq3ZAQ5QJ6qpnZmbK7dLctLLuF/XySZZ9n5pl9nm9nnp1n5pklgJ41nP2TRGyLiN8jYrCarS8wXH27duXc1D9Xzk0lsbT05l9JXu7qlXNTZdFyu61FZiSNSD9JikrqzZ85e2JydnbmdJEfWzj53tj8mbPPHD85eWzm2MypiUOHDh4Yf/65iWfbEmcW19U9H87t3f3q2xdfmzpy8d2fv8vau61YXxtHg00N72s2nAX+91JueWFafXt83RFsbNtr0klfFxvCulQiIttd/Xn/H4xKXN95g/HKx11tHHBbZeemFie2xSXgLpZEt1sAdEd5os+uf8tXh4YeG8LlF6sXQFnc14pXdU1feameXxttv031D0fEkcV/v8pe0fo+BABAW3w29eXheHql8V8a99WU21HMoQxFxP8jYmdE3BMRuyLi3oi87P0R8cDqVaa1mcapoRvHP+mlmw5uDbLx3wvF3Fb9+G+5mUOVIrc9j78/OXp8dmZ/8TcZif5NWX68RR0/vPzb583W1Y7/sldWfzkWLNpxqa/hBt305MJkPihtg8sfRezpWyn+ZHkmIImI3RGxZ30fvaNMHH/y273NCq0efwttmGda+ibiier+X4yG+EtJ6/nJsf/F7Mz+sfKouNEvv154o1n9txR/G2T7f0v98d9YZCipna+dX38dF/74tOk1zc0e/wPJW/m2A8WyDyYXFk6PRwwkh/N83fKJ69uW+bJ8Fv/IvpX7/85imyz+ByMiO4gfioiHI+KRou2PRsRjEbGvRfw/vdR8XX38m7d1Y/9PN3z/bc7XLB//Dft//YnKiR+/X7n2r99Z2/4/mKdGiiX5998q1trAW/zzAQAAwB0hzZ+BT9LR5XSajo5Wn+HfFVvS2bn5haeOzr1/arr6rPxQ9Kflna7Bmvuh48li8YnV/ERxr7hcf6C4b/xFZXOeH52am53ucuzQ67Y26f+ZPyvdbh1w2600jzYx0IWGAB3X2P/T+uz51zvZGKCjmj5Hs6Wz7QA6b5Xn6NJOtQPoPP9fC/Sulfr/+Ya8uQC4Ozn/Q+/S/6F36f/Qu/R/6Emr/Ui+cou//Ze44xLJ2gpH2v2mboxEf0S05QMHNkQ4RaLb30wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADt8V8AAAD//5qI6jE=") writev(r3, &(0x7f00000003c0)=[{&(0x7f0000000380)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fdd411efc40800040000000000000000", 0x39}], 0x1) 972.640264ms ago: executing program 1 (id=1001): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0, 0xffffffffffffffff}, 0x0, &(0x7f0000000040)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='kfree\x00', r2, 0x0, 0x10000001}, 0x18) syz_read_part_table(0x5d4, &(0x7f0000000000)="$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") 865.468565ms ago: executing program 4 (id=1002): r0 = socket(0x10, 0x2, 0x0) flistxattr(r0, &(0x7f00000004c0)=""/144, 0x90) socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000280)='kmem_cache_free\x00', r1, 0x0, 0x200000000000006}, 0x18) r2 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fcntl$notify(r2, 0x402, 0x29) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='map_files\x00') getdents64(r3, 0x0, 0x0) 864.932605ms ago: executing program 4 (id=1003): socket$netlink(0x10, 0x3, 0x10) r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) openat(0xffffffffffffff9c, 0x0, 0x4040, 0x1) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r2}, 0x10) unshare(0x20060400) r3 = syz_io_uring_setup(0x70ad, &(0x7f0000000240)={0x0, 0x5a36, 0x3180, 0x0, 0x40024f}, &(0x7f0000000340)=0x0, &(0x7f00000004c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_MSG_RING={0x28, 0x6, 0x0, r3, 0x0, 0x0, 0x0, 0x2}) io_uring_enter(r3, 0x627, 0x4c1, 0x43, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f00000002c0)='kmem_cache_free\x00', r6}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r7 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x4, 0x3, 0x3}, 0x10) r8 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r8, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) sendmsg$tipc(r8, &(0x7f0000000280)={&(0x7f0000000040), 0x10, 0x0}, 0x0) 815.10928ms ago: executing program 1 (id=1004): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000610025484008851a670000000000000000009500000000000000c7d6eba58d285d94f2f2b99ba87c90b05b8e864eea586d19521fe55692cda05fda49617076fd97b31eee1f79701bcb47246f78ec1c4baf60188193c810d922c6bffd59f57aff"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'syztnl1\x00', &(0x7f00000001c0)={'ip6tnl0\x00', 0x0, 0x2, 0xd7, 0x8c, 0x1ff, 0x61, @local, @mcast2, 0x40, 0x1, 0xfffffff9, 0x80000003}}) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a010100000004"], 0x57) r3 = socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0x8, &(0x7f0000000000)={0xfffffffffffffffb, 0xfffffffffffffffc}, 0x0) getrlimit(0x5, &(0x7f00000000c0)) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffc0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000100)='sched_switch\x00', r4, 0x0, 0x2}, 0x18) r5 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="0c0100001000130428bd700000000000e0000001000000000000000000000000000000000000000000000000000000014e2100004e2400000200202000000000", @ANYRES32=0x0, @ANYRES32=0x0], 0x10c}}, 0x804) r7 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) ioctl$USBDEVFS_IOCTL(r7, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r7, 0x80045505, &(0x7f0000000040)=@usbdevfs_connect) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1d459d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x183, 0x6}, 0x6025, 0x4005, 0xb, 0x0, 0x1, 0x1, 0xb, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$USBDEVFS_SETCONFIGURATION(r7, 0x80045505, &(0x7f0000000000)=0x1) write$binfmt_aout(r5, &(0x7f00000000c0)=ANY=[], 0x20) r8 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r8, 0x0) syz_clone(0x630c1100, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000a40)={0x8, 0x80, 0x0, 0x4, 0x0, 0x7, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x4}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x2, 0x0, 0x2, 0x0, 0x8000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d00)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r9, 0x0, 0x2}, 0x18) r10 = syz_genetlink_get_family_id$gtp(&(0x7f0000000a00), r5) sendmsg$GTP_CMD_ECHOREQ(r3, &(0x7f0000000b40)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x38, r10, 0x400, 0x70bd25, 0x25dfdbff, {}, [@GTPA_I_TEI={0x8, 0x8, 0x1}, @GTPA_MS_ADDR6={0x14, 0xc, @mcast2}, @GTPA_LINK={0x8, 0x1, r1}]}, 0x38}}, 0x20008800) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x500, &(0x7f0000000380)={[{@errors_remount}, {@discard}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5e}}, {@noauto_da_alloc}, {@bsdgroups}, {@jqfmt_vfsv1}, {@abort}, {@data_err_ignore}]}, 0x1, 0x476, &(0x7f0000000540)="$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") writev(r3, &(0x7f00000003c0)=[{&(0x7f0000000380)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fdd411efc40800040000000000000000", 0x39}], 0x1) 673.634524ms ago: executing program 4 (id=1005): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xd, &(0x7f0000000780)=ANY=[@ANYBLOB="18000000000000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback=0x36e084fcb6392193, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x78, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_MATCH_NAME={0x8, 0x1, 'udp\x00'}, @NFTA_MATCH_INFO={0xe, 0x3, "7acc6338a90000b03bd9"}, @NFTA_MATCH_REV={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_COMPAT={0x14, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV4={0x8}, @NFTA_RULE_COMPAT_FLAGS={0x8}]}]}], {0x14}}, 0xa0}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 622.357749ms ago: executing program 4 (id=1006): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth1_vlan\x00', 0x0}) bind$packet(r0, &(0x7f0000000040)={0x11, 0x1, r1, 0x1, 0x9}, 0x14) r2 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@getchain={0x24, 0x11, 0x1, 0x70bd2a, 0x2000001, {0x0, 0x0, 0x0, r1, {0x7, 0xa}, {0xd, 0xffe0}, {0x8, 0x9}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x20048054) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020641700000000002020007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syncfs(r3) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="9feb010018000000000000000401000004010000030000000e0000000000001018000000090000000600000f02000000050000009c0200000300000001000000ff07000008000000040000000100010009000000050000000300000003000000030000000200000063090000030000004b070000c194e931dc730f000000010000040500000006000000010000000249ad8f2fe4a7adcab9af41322cdfbb000000020000000500000f0200000001000000fcffffff0000000002000000008000005800000003000000010000800600000004000000ff030000020000000400000000000000070000008713100000000000000c02000000020000000000000c01000000080000000000000e0200000000000000040000000100000501000000"], &(0x7f00000005c0)=""/234, 0x11f, 0xea, 0x0, 0xdd57, 0x10000}, 0x28) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1c, 0xb, &(0x7f0000000240)=ANY=[@ANYRES32=r2, @ANYRESDEC=r1], &(0x7f0000000200)='GPL\x00', 0xa, 0x0, 0x0, 0x41100, 0x0, '\x00', r1, @fallback, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r6 = gettid() timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)=0x0) timer_settime(r7, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b70800000000ebff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r9}, 0x10) perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x1400, 0x0, 0x63cf80fb, 0x4, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe9, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r10, 0x8927, &(0x7f0000000080)='\x804\x01v\xaa\xd5\x10\x90\x94\xcf\xf3:,\x03\b$\xcfs\xf8l\xf0\x86Q\t3\x03^d7\xab=&\b\x00\x00\x00\x00\x00\x00\xe7\xc4\x16\xd7tE;\xe5\xfd\x17\x8b\nl\x19\x91\xd9\xd9\xc9\n\x00\n\xe63\xe6\xdd\x19FR') r11 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000000021007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040), 0x2, 0x6}}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r5}, 0x18) 594.163421ms ago: executing program 3 (id=1007): mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0700000004000000080000000100000000000000", @ANYRES32, @ANYBLOB], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) syz_clone(0x41200100, 0x0, 0x0, 0x0, 0x0, 0x0) 574.690163ms ago: executing program 2 (id=1008): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xf, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r1}, 0x10) syz_emit_ethernet(0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="0180c2000001a21428c6c085"], 0x0) 547.609976ms ago: executing program 0 (id=1009): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000610025484008851a670000000000000000009500000000000000c7d6eba58d285d94f2f2b99ba87c90b05b8e864eea586d19521fe55692cda05fda49617076fd97b31eee1f79701bcb47246f78ec1c4baf60188193c810d922c6bffd59f57aff"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'syztnl1\x00', &(0x7f00000001c0)={'ip6tnl0\x00', 0x0, 0x2, 0xd7, 0x8c, 0x1ff, 0x61, @local, @mcast2, 0x40, 0x1, 0xfffffff9, 0x80000003}}) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a010100000004"], 0x57) r3 = socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0x8, &(0x7f0000000000)={0xfffffffffffffffb, 0xfffffffffffffffc}, 0x0) getrlimit(0x5, &(0x7f00000000c0)) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffc0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000100)='sched_switch\x00', r4, 0x0, 0x2}, 0x18) r5 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="0c0100001000130428bd700000000000e0000001000000000000000000000000000000000000000000000000000000014e2100004e2400000200202000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc020000000000000000000000000001000000003c0000000a0101000000000000000000000000000400000000000000060000000000000002000000000000000400000000004000ffffffffffffffff03000000000000007f00000000000000000000000000000000000000000000000800150000000000cc000000000000000000000000000000f600000000000000000000002abd7000000000000200010500000000000000001c00040002004e2100270000fe880000000000000000000000000101"], 0x10c}}, 0x804) r7 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) ioctl$USBDEVFS_IOCTL(r7, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r7, 0x80045505, &(0x7f0000000040)=@usbdevfs_connect) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1d459d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x183, 0x6}, 0x6025, 0x4005, 0xb, 0x0, 0x1, 0x1, 0xb, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$USBDEVFS_SETCONFIGURATION(r7, 0x80045505, &(0x7f0000000000)=0x1) write$binfmt_aout(r5, &(0x7f00000000c0)=ANY=[], 0x20) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, 0xffffffffffffffff, 0x0) syz_clone(0x630c1100, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000a40)={0x8, 0x80, 0x0, 0x4, 0x0, 0x7, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x4}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x2, 0x0, 0x2, 0x0, 0x8000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d00)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r8, 0x0, 0x2}, 0x18) r9 = syz_genetlink_get_family_id$gtp(&(0x7f0000000a00), r5) sendmsg$GTP_CMD_ECHOREQ(r3, &(0x7f0000000b40)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x38, r9, 0x400, 0x70bd25, 0x25dfdbff, {}, [@GTPA_I_TEI={0x8, 0x8, 0x1}, @GTPA_MS_ADDR6={0x14, 0xc, @mcast2}, @GTPA_LINK={0x8, 0x1, r1}]}, 0x38}}, 0x20008800) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x500, &(0x7f0000000380)={[{@errors_remount}, {@discard}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5e}}, {@noauto_da_alloc}, {@bsdgroups}, {@jqfmt_vfsv1}, {@abort}, {@data_err_ignore}]}, 0x1, 0x476, &(0x7f0000000540)="$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") writev(r3, &(0x7f00000003c0)=[{&(0x7f0000000380)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fdd411efc40800040000000000000000", 0x39}], 0x1) 536.811827ms ago: executing program 2 (id=1010): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth1_vlan\x00', 0x0}) bind$packet(r0, &(0x7f0000000040)={0x11, 0x1, r1, 0x1, 0x9}, 0x14) socket(0x400000000010, 0x3, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020641700000000002020007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="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"], &(0x7f00000005c0)=""/234, 0x11f, 0xea, 0x0, 0xdd57, 0x10000}, 0x28) gettid() bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00'}, 0x10) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040)={0xffffffffffffffff}, 0x2, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000080)=0x1, r3, 0x0, 0x2, 0x4}}, 0x20) 465.546314ms ago: executing program 2 (id=1011): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xd, &(0x7f0000000780)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000001b80)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback=0x36e084fcb6392193, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x78, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_MATCH_NAME={0x8, 0x1, 'udp\x00'}, @NFTA_MATCH_INFO={0xe, 0x3, "7acc6338a90000b03bd9"}, @NFTA_MATCH_REV={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_COMPAT={0x14, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV4={0x8}, @NFTA_RULE_COMPAT_FLAGS={0x8}]}]}], {0x14}}, 0xa0}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 238.832366ms ago: executing program 2 (id=1012): syz_read_part_table(0x5d4, &(0x7f0000000000)="$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") creat(&(0x7f0000000100)='./bus\x00', 0x8c) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, 0x0, 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0xe340, 0x103) preadv2(r0, &(0x7f0000000040)=[{&(0x7f0000002200)=""/4096, 0x1000}], 0x1, 0x2200, 0x0, 0x19) 32.333567ms ago: executing program 2 (id=1013): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x0) execveat(r1, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x7, 0x0, 0x0, 0x100, 0x74, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0xd00, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) write$binfmt_script(r0, 0x0, 0x0) 0s ago: executing program 4 (id=1014): mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) creat(0x0, 0xf4) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18) syz_clone(0x41200100, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x200000a, 0x1, 0x8}) io_uring_setup(0x7d98, &(0x7f00000003c0)={0x0, 0xdf07, 0x2, 0x1, 0x105}) kernel console output (not intermixed with test programs): EXT4-fs error (device loop1): ext4_xattr_inode_iget:446: comm syz.1.352: error while reading EA inode 32 err=-116 [ 54.956789][ T4696] EXT4-fs (loop1): Remounting filesystem read-only [ 54.965129][ T4696] EXT4-fs warning (device loop1): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 54.975478][ T4696] EXT4-fs (loop1): 1 orphan inode deleted [ 54.995378][ T4699] hub 1-0:1.0: USB hub found [ 55.000888][ T4699] hub 1-0:1.0: 8 ports detected [ 55.032288][ T4699] lo speed is unknown, defaulting to 1000 [ 55.103264][ T4706] program syz.1.356 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 55.149614][ T29] kauditd_printk_skb: 426 callbacks suppressed [ 55.149627][ T29] audit: type=1400 audit(1761219673.801:1452): avc: denied { prog_load } for pid=4698 comm="syz.4.353" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 55.174863][ T29] audit: type=1400 audit(1761219673.801:1453): avc: denied { bpf } for pid=4698 comm="syz.4.353" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 55.174891][ T29] audit: type=1400 audit(1761219673.801:1454): avc: denied { perfmon } for pid=4698 comm="syz.4.353" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 55.176458][ T4709] loop4: detected capacity change from 0 to 512 [ 55.220306][ T29] audit: type=1400 audit(1761219673.831:1455): avc: denied { read write } for pid=4698 comm="syz.4.353" name="loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 55.246732][ T29] audit: type=1400 audit(1761219673.831:1456): avc: denied { open } for pid=4698 comm="syz.4.353" path="/dev/loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 55.270556][ T29] audit: type=1400 audit(1761219673.831:1457): avc: denied { ioctl } for pid=4698 comm="syz.4.353" path="/dev/loop4" dev="devtmpfs" ino=104 ioctlcmd=0x4c00 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 55.279420][ T4709] EXT4-fs error (device loop4): ext4_xattr_inode_iget:446: comm syz.4.353: error while reading EA inode 32 err=-116 [ 55.307868][ T29] audit: type=1400 audit(1761219673.881:1458): avc: denied { mounton } for pid=4698 comm="syz.4.353" path="/64/file0" dev="tmpfs" ino=367 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 55.308528][ T4709] EXT4-fs (loop4): Remounting filesystem read-only [ 55.330587][ T29] audit: type=1400 audit(1761219673.901:1459): avc: denied { create } for pid=4710 comm="syz.0.358" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 55.330609][ T29] audit: type=1400 audit(1761219673.911:1460): avc: denied { module_request } for pid=4710 comm="syz.0.358" kmod="net-pf-2-proto-1-type-1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 55.337174][ T4709] EXT4-fs warning (device loop4): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 55.356597][ T29] audit: type=1400 audit(1761219673.961:1461): avc: denied { map_create } for pid=4710 comm="syz.0.358" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 55.412078][ T4709] EXT4-fs (loop4): 1 orphan inode deleted [ 55.464048][ T4699] netlink: 'syz.4.353': attribute type 4 has an invalid length. [ 55.490100][ T4711] loop0: detected capacity change from 0 to 1024 [ 55.504376][ T4711] EXT4-fs: Ignoring removed nomblk_io_submit option [ 55.520828][ T4723] hub 1-0:1.0: USB hub found [ 55.525595][ T4723] hub 1-0:1.0: 8 ports detected [ 55.541001][ T4725] x_tables: ip_tables: udp match: only valid for protocol 17 [ 55.594849][ T4723] lo speed is unknown, defaulting to 1000 [ 55.647524][ T4740] loop4: detected capacity change from 0 to 2048 [ 55.674129][ T4746] loop1: detected capacity change from 0 to 512 [ 55.727513][ T4746] EXT4-fs error (device loop1): ext4_xattr_inode_iget:446: comm syz.1.361: error while reading EA inode 32 err=-116 [ 55.744679][ T4754] loop2: detected capacity change from 0 to 128 [ 55.772514][ T4746] EXT4-fs (loop1): Remounting filesystem read-only [ 55.779098][ T4746] EXT4-fs warning (device loop1): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 55.779671][ T4732] loop3: detected capacity change from 0 to 1024 [ 55.789548][ T4746] EXT4-fs (loop1): 1 orphan inode deleted [ 55.809427][ T4760] hub 1-0:1.0: USB hub found [ 55.814203][ T4760] hub 1-0:1.0: 8 ports detected [ 55.852520][ T4732] EXT4-fs: Ignoring removed nomblk_io_submit option [ 55.873264][ T4723] netlink: 'syz.1.361': attribute type 4 has an invalid length. [ 55.890213][ T4760] lo speed is unknown, defaulting to 1000 [ 55.951518][ T4767] loop4: detected capacity change from 0 to 512 [ 55.973946][ T4766] hub 1-0:1.0: USB hub found [ 55.990497][ T4766] hub 1-0:1.0: 8 ports detected [ 56.037084][ T4766] lo speed is unknown, defaulting to 1000 [ 56.129327][ T4767] EXT4-fs error (device loop4): ext4_xattr_inode_iget:446: comm syz.4.370: error while reading EA inode 32 err=-116 [ 56.326549][ T4767] EXT4-fs (loop4): Remounting filesystem read-only [ 56.398517][ T4767] EXT4-fs warning (device loop4): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 56.496042][ T4767] EXT4-fs (loop4): 1 orphan inode deleted [ 56.512311][ T4766] loop3: detected capacity change from 0 to 512 [ 56.535075][ T4766] EXT4-fs error (device loop3): ext4_xattr_inode_iget:446: comm syz.3.373: error while reading EA inode 32 err=-116 [ 56.564467][ T4781] loop0: detected capacity change from 0 to 1024 [ 56.575032][ T4781] EXT4-fs: Ignoring removed nomblk_io_submit option [ 56.581782][ T4766] EXT4-fs (loop3): Remounting filesystem read-only [ 56.588330][ T4766] EXT4-fs warning (device loop3): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 56.600170][ T4766] EXT4-fs (loop3): 1 orphan inode deleted [ 56.650082][ T4766] netlink: 'syz.3.373': attribute type 4 has an invalid length. [ 56.669525][ T4760] netlink: 'syz.4.370': attribute type 4 has an invalid length. [ 56.729582][ T4797] __nla_validate_parse: 4 callbacks suppressed [ 56.729596][ T4797] netlink: 4 bytes leftover after parsing attributes in process `syz.2.380'. [ 56.749132][ T4801] program syz.4.382 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 56.752133][ T4797] netlink: 4 bytes leftover after parsing attributes in process `syz.2.380'. [ 56.776223][ T4797] netlink: 12 bytes leftover after parsing attributes in process `syz.2.380'. [ 56.797459][ T4805] x_tables: ip_tables: udp match: only valid for protocol 17 [ 56.821429][ T4807] netlink: 4 bytes leftover after parsing attributes in process `syz.3.384'. [ 56.843518][ T4807] netlink: 4 bytes leftover after parsing attributes in process `syz.3.384'. [ 56.873560][ T4807] netlink: 12 bytes leftover after parsing attributes in process `syz.3.384'. [ 56.886868][ T4812] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4812 comm=syz.2.386 [ 56.910613][ T4812] loop2: detected capacity change from 0 to 512 [ 56.923449][ T4812] EXT4-fs error (device loop2): ext4_xattr_inode_iget:446: comm syz.2.386: error while reading EA inode 32 err=-116 [ 56.937274][ T4812] EXT4-fs (loop2): Remounting filesystem read-only [ 56.951793][ T4812] EXT4-fs warning (device loop2): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 56.961951][ T4812] EXT4-fs (loop2): 1 orphan inode deleted [ 56.966490][ T4815] netlink: 12 bytes leftover after parsing attributes in process `syz.1.387'. [ 57.070341][ T4809] loop0: detected capacity change from 0 to 1024 [ 57.077266][ T4809] EXT4-fs: Ignoring removed nomblk_io_submit option [ 57.085850][ T4838] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4838 comm=syz.1.391 [ 57.102443][ T4843] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4843 comm=syz.4.393 [ 57.207858][ T4825] loop2: detected capacity change from 0 to 1024 [ 57.215108][ T4823] loop3: detected capacity change from 0 to 1024 [ 57.215832][ T4825] EXT4-fs: Ignoring removed nomblk_io_submit option [ 57.322300][ T4823] EXT4-fs: Ignoring removed nomblk_io_submit option [ 57.346444][ T4856] lo speed is unknown, defaulting to 1000 [ 57.694958][ T4864] x_tables: ip_tables: udp match: only valid for protocol 17 [ 57.730841][ T4868] hub 1-0:1.0: USB hub found [ 57.735835][ T4868] hub 1-0:1.0: 8 ports detected [ 57.737382][ T4866] siw: device registration error -23 [ 57.756521][ T4868] lo speed is unknown, defaulting to 1000 [ 57.813662][ T4875] netlink: 12 bytes leftover after parsing attributes in process `syz.2.401'. [ 57.854185][ T4878] loop3: detected capacity change from 0 to 512 [ 57.864627][ T4878] EXT4-fs error (device loop3): ext4_xattr_inode_iget:446: comm syz.3.397: error while reading EA inode 32 err=-116 [ 57.877325][ T4878] EXT4-fs (loop3): Remounting filesystem read-only [ 57.885515][ T4878] EXT4-fs warning (device loop3): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 57.896209][ T4878] EXT4-fs (loop3): 1 orphan inode deleted [ 57.907761][ T4868] netlink: 'syz.3.397': attribute type 4 has an invalid length. [ 57.953019][ T4887] loop3: detected capacity change from 0 to 128 [ 58.078314][ T4894] lo speed is unknown, defaulting to 1000 [ 58.392076][ T4905] loop2: detected capacity change from 0 to 2048 [ 58.422442][ T4909] netlink: 12 bytes leftover after parsing attributes in process `syz.3.412'. [ 58.426349][ T4911] loop1: detected capacity change from 0 to 512 [ 58.451850][ T4909] netlink: 16 bytes leftover after parsing attributes in process `syz.3.412'. [ 58.477935][ T4911] EXT4-fs (loop1): 1 orphan inode deleted [ 58.555065][ T4926] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4926 comm=syz.0.415 [ 58.684358][ T4932] lo speed is unknown, defaulting to 1000 [ 58.724427][ T4934] loop3: detected capacity change from 0 to 1024 [ 58.731372][ T4934] EXT4-fs: Ignoring removed nomblk_io_submit option [ 58.742508][ T4934] /dev/loop3: Can't open blockdev [ 58.832290][ T4918] loop2: detected capacity change from 0 to 1024 [ 58.882976][ T4918] EXT4-fs: Ignoring removed nomblk_io_submit option [ 58.974674][ T4942] tipc: Started in network mode [ 58.979596][ T4942] tipc: Node identity ac14140f, cluster identity 4711 [ 58.986813][ T4942] tipc: New replicast peer: 255.255.255.255 [ 58.992965][ T4942] tipc: Enabled bearer , priority 10 [ 59.022922][ T4944] hub 1-0:1.0: USB hub found [ 59.029528][ T4944] hub 1-0:1.0: 8 ports detected [ 59.050248][ T4944] lo speed is unknown, defaulting to 1000 [ 59.358927][ T4950] lo speed is unknown, defaulting to 1000 [ 59.704593][ T4955] hub 1-0:1.0: USB hub found [ 59.723668][ T4955] hub 1-0:1.0: 8 ports detected [ 59.758151][ T4955] lo speed is unknown, defaulting to 1000 [ 59.843464][ T4957] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4957 comm=syz.1.424 [ 59.857709][ T4957] loop1: detected capacity change from 0 to 512 [ 59.867699][ T4957] EXT4-fs error (device loop1): ext4_xattr_inode_iget:446: comm syz.1.424: error while reading EA inode 32 err=-116 [ 59.891009][ T4957] EXT4-fs (loop1): Remounting filesystem read-only [ 59.909823][ T4957] EXT4-fs warning (device loop1): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 59.923992][ T4957] EXT4-fs (loop1): 1 orphan inode deleted [ 59.937422][ T4955] netlink: 'syz.1.424': attribute type 4 has an invalid length. [ 59.991569][ T4972] loop1: detected capacity change from 0 to 2048 [ 60.111809][ T3401] tipc: Node number set to 2886997007 [ 60.161827][ T29] kauditd_printk_skb: 265 callbacks suppressed [ 60.161842][ T29] audit: type=1326 audit(1761219678.821:1727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4952 comm="syz.0.423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f8025465e67 code=0x7ffc0000 [ 60.219085][ T4982] lo speed is unknown, defaulting to 1000 [ 60.523042][ T29] audit: type=1326 audit(1761219678.851:1728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4952 comm="syz.0.423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f802540b099 code=0x7ffc0000 [ 60.546392][ T29] audit: type=1326 audit(1761219678.851:1729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4952 comm="syz.0.423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f8025465e67 code=0x7ffc0000 [ 60.569672][ T29] audit: type=1326 audit(1761219678.851:1730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4952 comm="syz.0.423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f802540b099 code=0x7ffc0000 [ 60.592943][ T29] audit: type=1326 audit(1761219678.851:1731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4952 comm="syz.0.423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f802546efc9 code=0x7ffc0000 [ 60.616306][ T29] audit: type=1326 audit(1761219678.851:1732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4952 comm="syz.0.423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f8025465e67 code=0x7ffc0000 [ 60.639650][ T29] audit: type=1326 audit(1761219678.851:1733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4952 comm="syz.0.423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f802540b099 code=0x7ffc0000 [ 60.662870][ T29] audit: type=1326 audit(1761219678.851:1734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4952 comm="syz.0.423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f802546efc9 code=0x7ffc0000 [ 60.686272][ T29] audit: type=1326 audit(1761219678.961:1735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4952 comm="syz.0.423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f8025465e67 code=0x7ffc0000 [ 60.709602][ T29] audit: type=1326 audit(1761219678.961:1736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4952 comm="syz.0.423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f802540b099 code=0x7ffc0000 [ 60.760309][ T4993] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4993 comm=syz.2.433 [ 60.802571][ T4990] loop0: detected capacity change from 0 to 2048 [ 60.811739][ T4990] ext4: Unknown parameter 'fowner<00000000000000000000' [ 60.899536][ T5009] siw: device registration error -23 [ 60.979456][ T5015] netlink: 'syz.0.441': attribute type 21 has an invalid length. [ 60.990939][ T5013] SELinux: ebitmap: truncated map [ 61.000355][ T5013] SELinux: failed to load policy [ 61.088992][ T5028] loop0: detected capacity change from 0 to 2048 [ 61.188342][ T5035] loop0: detected capacity change from 0 to 2048 [ 61.195391][ T5035] ext4: Unknown parameter 'fowner<00000000000000000000' [ 61.261133][ T5039] siw: device registration error -23 [ 61.311837][ T5040] lo speed is unknown, defaulting to 1000 [ 61.318352][ T5042] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5042 comm=syz.0.451 [ 61.345316][ T5042] loop0: detected capacity change from 0 to 512 [ 61.392657][ T5042] EXT4-fs error (device loop0): ext4_xattr_inode_iget:446: comm syz.0.451: error while reading EA inode 32 err=-116 [ 61.406694][ T5042] EXT4-fs (loop0): Remounting filesystem read-only [ 61.438200][ T5042] EXT4-fs warning (device loop0): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 61.453070][ T5046] hub 1-0:1.0: USB hub found [ 61.460127][ T5046] hub 1-0:1.0: 8 ports detected [ 61.465530][ T5042] EXT4-fs (loop0): 1 orphan inode deleted [ 61.489665][ T5046] lo speed is unknown, defaulting to 1000 [ 61.597731][ T5049] SELinux: ebitmap: truncated map [ 61.603724][ T5049] SELinux: failed to load policy [ 61.739111][ T5053] __nla_validate_parse: 20 callbacks suppressed [ 61.739128][ T5053] netlink: 4 bytes leftover after parsing attributes in process `syz.0.456'. [ 61.792042][ T5055] netlink: 4 bytes leftover after parsing attributes in process `syz.0.456'. [ 61.836944][ T5058] loop3: detected capacity change from 0 to 128 [ 61.843741][ T5053] netlink: 12 bytes leftover after parsing attributes in process `syz.0.456'. [ 61.845148][ T5058] /dev/loop3: Can't open blockdev [ 61.862811][ T5060] program syz.4.458 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 61.915826][ T5062] loop2: detected capacity change from 0 to 128 [ 61.929016][ T5062] bio_check_eod: 116 callbacks suppressed [ 61.929028][ T5062] syz.2.459: attempt to access beyond end of device [ 61.929028][ T5062] loop2: rw=2049, sector=154, nr_sectors = 6 limit=128 [ 61.952548][ T5062] syz.2.459: attempt to access beyond end of device [ 61.952548][ T5062] loop2: rw=2049, sector=158, nr_sectors = 2 limit=128 [ 61.965983][ T5062] buffer_io_error: 74 callbacks suppressed [ 61.965995][ T5062] Buffer I/O error on dev loop2, logical block 79, lost async page write [ 61.985123][ T5062] syz.2.459: attempt to access beyond end of device [ 61.985123][ T5062] loop2: rw=2049, sector=160, nr_sectors = 2 limit=128 [ 61.998495][ T5062] Buffer I/O error on dev loop2, logical block 80, lost async page write [ 62.007575][ T5062] syz.2.459: attempt to access beyond end of device [ 62.007575][ T5062] loop2: rw=2049, sector=162, nr_sectors = 6 limit=128 [ 62.089103][ T5064] loop0: detected capacity change from 0 to 2048 [ 62.101971][ T5062] syz.2.459: attempt to access beyond end of device [ 62.101971][ T5062] loop2: rw=2049, sector=166, nr_sectors = 2 limit=128 [ 62.115303][ T5062] Buffer I/O error on dev loop2, logical block 83, lost async page write [ 62.131685][ T5062] syz.2.459: attempt to access beyond end of device [ 62.131685][ T5062] loop2: rw=2049, sector=168, nr_sectors = 2 limit=128 [ 62.145143][ T5062] Buffer I/O error on dev loop2, logical block 84, lost async page write [ 62.159986][ T5064] ext4: Unknown parameter 'fowner<00000000000000000000' [ 62.172095][ T5062] syz.2.459: attempt to access beyond end of device [ 62.172095][ T5062] loop2: rw=2049, sector=186, nr_sectors = 6 limit=128 [ 62.175303][ T5064] netlink: 24 bytes leftover after parsing attributes in process `syz.0.460'. [ 62.197055][ T5062] syz.2.459: attempt to access beyond end of device [ 62.197055][ T5062] loop2: rw=2049, sector=190, nr_sectors = 2 limit=128 [ 62.210564][ T5062] Buffer I/O error on dev loop2, logical block 95, lost async page write [ 62.219622][ T5062] syz.2.459: attempt to access beyond end of device [ 62.219622][ T5062] loop2: rw=2049, sector=192, nr_sectors = 2 limit=128 [ 62.233168][ T5062] Buffer I/O error on dev loop2, logical block 96, lost async page write [ 62.242289][ T5062] syz.2.459: attempt to access beyond end of device [ 62.242289][ T5062] loop2: rw=2049, sector=194, nr_sectors = 6 limit=128 [ 62.242330][ T5066] loop1: detected capacity change from 0 to 2048 [ 62.242628][ T5066] ext4: Unknown parameter 'fowner<00000000000000000000' [ 62.260350][ T5062] Buffer I/O error on dev loop2, logical block 99, lost async page write [ 62.277969][ T5062] Buffer I/O error on dev loop2, logical block 100, lost async page write [ 62.292059][ T5070] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5070 comm=syz.4.462 [ 62.303567][ T5066] netlink: 24 bytes leftover after parsing attributes in process `syz.1.461'. [ 62.316806][ T5062] Buffer I/O error on dev loop2, logical block 111, lost async page write [ 62.325862][ T5062] Buffer I/O error on dev loop2, logical block 112, lost async page write [ 62.329826][ T5072] x_tables: ip_tables: udp match: only valid for protocol 17 [ 62.468045][ T5080] lo speed is unknown, defaulting to 1000 [ 62.642146][ T5082] loop3: detected capacity change from 0 to 1024 [ 62.676085][ T5082] EXT4-fs: Ignoring removed nomblk_io_submit option [ 62.824873][ T5092] loop2: detected capacity change from 0 to 512 [ 62.828069][ T5087] hub 1-0:1.0: USB hub found [ 62.836433][ T5087] hub 1-0:1.0: 8 ports detected [ 62.847232][ T5092] ext4 filesystem being mounted at /92/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 62.879607][ T5087] lo speed is unknown, defaulting to 1000 [ 62.982580][ T5088] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5088 comm=syz.1.467 [ 62.998419][ T5088] loop1: detected capacity change from 0 to 512 [ 63.015291][ T5088] EXT4-fs error (device loop1): ext4_xattr_inode_iget:446: comm syz.1.467: error while reading EA inode 32 err=-116 [ 63.028006][ T5088] EXT4-fs (loop1): Remounting filesystem read-only [ 63.035312][ T5088] EXT4-fs warning (device loop1): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 63.067086][ T5100] netlink: 'syz.4.469': attribute type 21 has an invalid length. [ 63.073931][ T5088] EXT4-fs (loop1): 1 orphan inode deleted [ 63.074983][ T5100] netlink: 156 bytes leftover after parsing attributes in process `syz.4.469'. [ 63.089538][ T5100] netlink: 4 bytes leftover after parsing attributes in process `syz.4.469'. [ 63.115099][ T5087] netlink: 'syz.1.467': attribute type 4 has an invalid length. [ 63.163260][ T5102] hub 1-0:1.0: USB hub found [ 63.168870][ T5102] hub 1-0:1.0: 8 ports detected [ 63.191415][ T5104] hub 1-0:1.0: USB hub found [ 63.196387][ T5104] hub 1-0:1.0: 8 ports detected [ 63.208460][ T5106] program syz.0.472 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 63.214862][ T5102] lo speed is unknown, defaulting to 1000 [ 63.241036][ T5104] lo speed is unknown, defaulting to 1000 [ 63.289124][ T5102] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5102 comm=syz.4.470 [ 63.304645][ T5102] loop4: detected capacity change from 0 to 512 [ 63.313910][ T5102] EXT4-fs error (device loop4): ext4_xattr_inode_iget:446: comm syz.4.470: error while reading EA inode 32 err=-116 [ 63.326662][ T5102] EXT4-fs (loop4): Remounting filesystem read-only [ 63.333343][ T5102] EXT4-fs warning (device loop4): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 63.343657][ T5102] EXT4-fs (loop4): 1 orphan inode deleted [ 63.353292][ T5102] netlink: 'syz.4.470': attribute type 4 has an invalid length. [ 63.362441][ T5111] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5111 comm=syz.1.471 [ 63.377913][ T5111] loop1: detected capacity change from 0 to 512 [ 63.386235][ T5111] EXT4-fs error (device loop1): ext4_xattr_inode_iget:446: comm syz.1.471: error while reading EA inode 32 err=-116 [ 63.398846][ T5111] EXT4-fs (loop1): Remounting filesystem read-only [ 63.405542][ T5111] EXT4-fs warning (device loop1): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 63.416369][ T5111] EXT4-fs (loop1): 1 orphan inode deleted [ 63.432130][ T5104] netlink: 'syz.1.471': attribute type 4 has an invalid length. [ 63.480628][ T5120] netlink: 20 bytes leftover after parsing attributes in process `syz.4.476'. [ 63.501018][ T5122] loop1: detected capacity change from 0 to 512 [ 63.507906][ T5122] EXT4-fs: Ignoring removed bh option [ 63.514481][ T5122] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 63.524422][ T5122] EXT4-fs (loop1): 1 truncate cleaned up [ 63.542026][ T5125] netlink: 12 bytes leftover after parsing attributes in process `syz.4.478'. [ 63.568981][ T5118] loop0: detected capacity change from 0 to 2048 [ 63.580048][ T5125] netlink: 16 bytes leftover after parsing attributes in process `syz.4.478'. [ 63.594124][ T5118] ext4: Unknown parameter 'fowner<00000000000000000000' [ 63.646570][ T5132] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5132 comm=syz.1.479 [ 63.753366][ T5139] lo speed is unknown, defaulting to 1000 [ 63.889688][ T5142] loop4: detected capacity change from 0 to 2048 [ 63.981207][ T5134] loop0: detected capacity change from 0 to 1024 [ 64.047061][ T5134] EXT4-fs: Ignoring removed nomblk_io_submit option [ 64.148535][ T5149] x_tables: ip_tables: udp match: only valid for protocol 17 [ 64.188691][ T5151] program syz.0.485 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 64.205486][ T5153] x_tables: ip_tables: udp match: only valid for protocol 17 [ 64.251272][ T5157] loop4: detected capacity change from 0 to 128 [ 64.395841][ T5159] hub 1-0:1.0: USB hub found [ 64.400637][ T5159] hub 1-0:1.0: 8 ports detected [ 64.419170][ T5159] lo speed is unknown, defaulting to 1000 [ 64.556971][ T5173] bridge0: entered promiscuous mode [ 64.564708][ T5173] macsec0: entered promiscuous mode [ 64.629193][ T5180] program syz.2.498 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 64.629596][ T5159] loop4: detected capacity change from 0 to 512 [ 64.646492][ T5169] loop1: detected capacity change from 0 to 2048 [ 64.661996][ T5169] ext4: Unknown parameter 'fowner<00000000000000000000' [ 64.669595][ T5159] EXT4-fs error (device loop4): ext4_xattr_inode_iget:446: comm syz.4.489: error while reading EA inode 32 err=-116 [ 64.684522][ T5176] loop0: detected capacity change from 0 to 512 [ 64.691079][ T5176] EXT4-fs: Ignoring removed bh option [ 64.694310][ T5159] EXT4-fs (loop4): Remounting filesystem read-only [ 64.703255][ T5176] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 64.712085][ T5159] EXT4-fs warning (device loop4): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 64.724876][ T5159] EXT4-fs (loop4): 1 orphan inode deleted [ 64.731472][ T5176] EXT4-fs (loop0): 1 truncate cleaned up [ 64.771442][ T5159] netlink: 'syz.4.489': attribute type 4 has an invalid length. [ 64.800485][ T5192] program syz.0.502 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 64.817658][ T5194] x_tables: ip_tables: udp match: only valid for protocol 17 [ 64.856612][ T5198] hub 1-0:1.0: USB hub found [ 64.861384][ T5198] hub 1-0:1.0: 8 ports detected [ 64.894786][ T5198] lo speed is unknown, defaulting to 1000 [ 65.659924][ T5212] lo speed is unknown, defaulting to 1000 [ 65.709401][ T29] kauditd_printk_skb: 542 callbacks suppressed [ 65.709477][ T29] audit: type=1400 audit(1761219684.361:2279): avc: denied { sqpoll } for pid=5206 comm="syz.2.510" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 65.751455][ T5216] lo speed is unknown, defaulting to 1000 [ 65.784754][ T3323] EXT4-fs unmount: 109 callbacks suppressed [ 65.784779][ T3323] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.823553][ T5217] hub 1-0:1.0: USB hub found [ 65.835673][ T5217] hub 1-0:1.0: 8 ports detected [ 65.881281][ T5211] lo speed is unknown, defaulting to 1000 [ 65.903446][ T5229] x_tables: ip_tables: udp match: only valid for protocol 17 [ 65.913849][ T29] audit: type=1400 audit(1761219684.571:2280): avc: denied { create } for pid=5222 comm="syz.3.512" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 65.933408][ T29] audit: type=1400 audit(1761219684.571:2281): avc: denied { ioctl } for pid=5222 comm="syz.3.512" path="socket:[11139]" dev="sockfs" ino=11139 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 65.958133][ T29] audit: type=1400 audit(1761219684.571:2282): avc: denied { module_request } for pid=5222 comm="syz.3.512" kmod=6E65746465762D19 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 66.009464][ T29] audit: type=1400 audit(1761219684.591:2283): avc: denied { sys_module } for pid=5222 comm="syz.3.512" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 66.030476][ T29] audit: type=1400 audit(1761219684.601:2284): avc: denied { load_policy } for pid=5222 comm="syz.3.512" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 66.060761][ T5227] loop4: detected capacity change from 0 to 512 [ 66.067825][ T5232] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5232 comm=syz.0.511 [ 66.080788][ T5227] EXT4-fs: Ignoring removed bh option [ 66.107730][ T5227] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 66.110520][ T5241] netlink: 'syz.3.518': attribute type 21 has an invalid length. [ 66.130366][ T5240] x_tables: ip_tables: udp match: only valid for protocol 17 [ 66.140780][ T5211] loop0: detected capacity change from 0 to 512 [ 66.149212][ T5227] EXT4-fs (loop4): 1 truncate cleaned up [ 66.167624][ T5227] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 66.202724][ T5211] EXT4-fs error (device loop0): ext4_xattr_inode_iget:446: comm syz.0.511: error while reading EA inode 32 err=-116 [ 66.216447][ T5211] EXT4-fs (loop0): Remounting filesystem read-only [ 66.224313][ T5211] EXT4-fs warning (device loop0): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 66.234678][ T5211] EXT4-fs (loop0): 1 orphan inode deleted [ 66.245482][ T5249] x_tables: ip_tables: udp match: only valid for protocol 17 [ 66.248933][ T5211] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 66.255999][ T5246] 8021q: adding VLAN 0 to HW filter on device bond1 [ 66.272098][ T5211] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.282272][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.305397][ T5246] bond1 (unregistering): Released all slaves [ 66.313696][ T5211] netlink: 'syz.0.511': attribute type 4 has an invalid length. [ 66.356042][ T29] audit: type=1400 audit(1761219685.011:2285): avc: denied { create } for pid=5245 comm="syz.1.520" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 66.375571][ T29] audit: type=1400 audit(1761219685.011:2286): avc: denied { ioctl } for pid=5245 comm="syz.1.520" path="socket:[11157]" dev="sockfs" ino=11157 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 66.413964][ T5256] loop4: detected capacity change from 0 to 512 [ 66.426471][ T5256] EXT4-fs (loop4): 1 orphan inode deleted [ 66.432778][ T5256] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 66.513539][ T5266] lo speed is unknown, defaulting to 1000 [ 66.602877][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.615584][ T5265] loop2: detected capacity change from 0 to 2048 [ 66.654695][ T5272] FAULT_INJECTION: forcing a failure. [ 66.654695][ T5272] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 66.667782][ T5272] CPU: 0 UID: 0 PID: 5272 Comm: syz.1.529 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 66.667837][ T5272] Tainted: [W]=WARN [ 66.667843][ T5272] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 66.667852][ T5272] Call Trace: [ 66.667858][ T5272] [ 66.667867][ T5272] __dump_stack+0x1d/0x30 [ 66.667935][ T5272] dump_stack_lvl+0xe8/0x140 [ 66.667951][ T5272] dump_stack+0x15/0x1b [ 66.667968][ T5272] should_fail_ex+0x265/0x280 [ 66.668065][ T5272] should_fail+0xb/0x20 [ 66.668129][ T5272] should_fail_usercopy+0x1a/0x20 [ 66.668146][ T5272] _copy_from_user+0x1c/0xb0 [ 66.668170][ T5272] ___sys_sendmsg+0xc1/0x1d0 [ 66.668205][ T5272] __x64_sys_sendmsg+0xd4/0x160 [ 66.668402][ T5272] x64_sys_call+0x191e/0x3000 [ 66.668419][ T5272] do_syscall_64+0xd2/0x200 [ 66.668434][ T5272] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 66.668455][ T5272] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 66.668487][ T5272] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 66.668508][ T5272] RIP: 0033:0x7f8cad0fefc9 [ 66.668642][ T5272] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 66.668659][ T5272] RSP: 002b:00007f8cabb67038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 66.668788][ T5272] RAX: ffffffffffffffda RBX: 00007f8cad355fa0 RCX: 00007f8cad0fefc9 [ 66.668799][ T5272] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 66.668809][ T5272] RBP: 00007f8cabb67090 R08: 0000000000000000 R09: 0000000000000000 [ 66.668819][ T5272] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 66.668829][ T5272] R13: 00007f8cad356038 R14: 00007f8cad355fa0 R15: 00007fff034d5618 [ 66.668919][ T5272] [ 66.881510][ T5270] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 66.897252][ T5270] SELinux: failed to load policy [ 66.911885][ T29] audit: type=1400 audit(1761219685.551:2287): avc: denied { read } for pid=5278 comm="syz.1.532" dev="nsfs" ino=4026532754 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 66.933115][ T29] audit: type=1400 audit(1761219685.551:2288): avc: denied { open } for pid=5278 comm="syz.1.532" path="net:[4026532754]" dev="nsfs" ino=4026532754 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 66.961193][ T5281] loop2: detected capacity change from 0 to 512 [ 66.972703][ T5283] loop4: detected capacity change from 0 to 512 [ 66.978915][ T5281] EXT4-fs: Ignoring removed bh option [ 67.004842][ T5281] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 67.009104][ T5283] EXT4-fs (loop4): 1 orphan inode deleted [ 67.034022][ T5281] EXT4-fs (loop2): 1 truncate cleaned up [ 67.044088][ T5283] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 67.061895][ T5291] loop1: detected capacity change from 0 to 2048 [ 67.062306][ T5281] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 67.068690][ T5291] ext4: Unknown parameter 'fowner<00000000000000000000' [ 67.112270][ T5291] __nla_validate_parse: 13 callbacks suppressed [ 67.112284][ T5291] netlink: 24 bytes leftover after parsing attributes in process `syz.1.538'. [ 67.139080][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.154908][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.204860][ T5299] hub 1-0:1.0: USB hub found [ 67.210099][ T5299] hub 1-0:1.0: 8 ports detected [ 67.215258][ T5295] loop0: detected capacity change from 0 to 512 [ 67.222013][ T5298] usb usb1: usbfs: interface 0 claimed by hub while 'syz.2.539' sets config #1 [ 67.225490][ T5295] EXT4-fs: Ignoring removed bh option [ 67.252737][ T5295] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 67.263696][ T5299] lo speed is unknown, defaulting to 1000 [ 67.280933][ T5301] loop3: detected capacity change from 0 to 512 [ 67.287654][ T5301] EXT4-fs: Ignoring removed bh option [ 67.298127][ T5301] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 67.312293][ T5295] EXT4-fs (loop0): 1 truncate cleaned up [ 67.318391][ T5295] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 67.320561][ T5298] lo speed is unknown, defaulting to 1000 [ 67.344217][ T5317] loop4: detected capacity change from 0 to 512 [ 67.351091][ T5301] EXT4-fs (loop3): 1 truncate cleaned up [ 67.371832][ T5301] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 67.374493][ T5317] EXT4-fs error (device loop4): ext4_xattr_inode_iget:446: comm syz.4.540: error while reading EA inode 32 err=-116 [ 67.407917][ T5324] loop1: detected capacity change from 0 to 512 [ 67.423862][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.434222][ T5317] EXT4-fs (loop4): Remounting filesystem read-only [ 67.440895][ T5317] EXT4-fs warning (device loop4): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 67.446418][ T5325] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5325 comm=syz.2.539 [ 67.451436][ T5317] EXT4-fs (loop4): 1 orphan inode deleted [ 67.475419][ T3323] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.485361][ T5324] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 67.501505][ T5317] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 67.515572][ T5298] loop2: detected capacity change from 0 to 512 [ 67.523626][ T5324] ext4 filesystem being mounted at /116/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 67.537230][ T5317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.554220][ T5298] EXT4-fs error (device loop2): ext4_xattr_inode_iget:446: comm syz.2.539: error while reading EA inode 32 err=-116 [ 67.557953][ T5335] loop0: detected capacity change from 0 to 512 [ 67.573608][ T5298] EXT4-fs (loop2): Remounting filesystem read-only [ 67.583229][ T5298] EXT4-fs warning (device loop2): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 67.584736][ T5335] EXT4-fs: Ignoring removed bh option [ 67.596191][ T5298] EXT4-fs (loop2): 1 orphan inode deleted [ 67.607469][ T5333] loop3: detected capacity change from 0 to 2048 [ 67.609402][ T5298] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 67.626828][ T5298] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.647193][ T5298] netlink: 'syz.2.539': attribute type 4 has an invalid length. [ 67.680490][ T5335] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 67.712192][ T5335] EXT4-fs (loop0): 1 truncate cleaned up [ 67.718335][ T5335] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 67.748216][ T5299] netlink: 'syz.4.540': attribute type 4 has an invalid length. [ 67.783061][ T5341] netlink: 12 bytes leftover after parsing attributes in process `syz.3.552'. [ 67.817998][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.848043][ T5343] program syz.3.554 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 67.887061][ T5347] loop4: detected capacity change from 0 to 512 [ 67.895954][ T5350] netlink: 4 bytes leftover after parsing attributes in process `syz.0.553'. [ 67.905902][ T5350] netlink: 4 bytes leftover after parsing attributes in process `syz.0.553'. [ 67.915155][ T5350] netlink: 12 bytes leftover after parsing attributes in process `syz.0.553'. [ 67.925464][ T5347] EXT4-fs: Ignoring removed bh option [ 67.933069][ T5347] EXT4-fs: Ignoring removed orlov option [ 67.946432][ T5347] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 67.960837][ T5347] EXT4-fs (loop4): orphan cleanup on readonly fs [ 67.981571][ T5357] netlink: 8 bytes leftover after parsing attributes in process `syz.0.558'. [ 67.991495][ T5347] EXT4-fs warning (device loop4): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 67.999488][ T5357] bridge0: entered promiscuous mode [ 68.006892][ T5347] EXT4-fs (loop4): Cannot turn on quotas: error -117 [ 68.011495][ T5357] macsec0: entered promiscuous mode [ 68.023710][ T5347] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.556: bg 0: block 40: padding at end of block bitmap is not set [ 68.038493][ T5347] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 68.050782][ T5359] loop2: detected capacity change from 0 to 512 [ 68.057484][ T5359] EXT4-fs: Ignoring removed bh option [ 68.064288][ T5347] EXT4-fs (loop4): 1 truncate cleaned up [ 68.070815][ T5359] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 68.074818][ T5347] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 68.099649][ T5359] EXT4-fs (loop2): 1 truncate cleaned up [ 68.106159][ T5364] netlink: 4 bytes leftover after parsing attributes in process `syz.0.561'. [ 68.113888][ T5359] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 68.151609][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.162998][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.206763][ T5373] loop2: detected capacity change from 0 to 2048 [ 68.227355][ T5378] loop4: detected capacity change from 0 to 2048 [ 68.249738][ T3327] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.266339][ T5382] netlink: 12 bytes leftover after parsing attributes in process `syz.3.566'. [ 68.296799][ T5386] x_tables: ip_tables: udp match: only valid for protocol 17 [ 68.335645][ T5388] netlink: 4 bytes leftover after parsing attributes in process `syz.4.569'. [ 68.345214][ T5388] netlink: 4 bytes leftover after parsing attributes in process `syz.4.569'. [ 68.382235][ T5392] loop2: detected capacity change from 0 to 128 [ 68.402858][ T5392] bio_check_eod: 74 callbacks suppressed [ 68.402870][ T5392] syz.2.571: attempt to access beyond end of device [ 68.402870][ T5392] loop2: rw=2049, sector=154, nr_sectors = 6 limit=128 [ 68.438732][ T5393] lo speed is unknown, defaulting to 1000 [ 68.567280][ T5392] syz.2.571: attempt to access beyond end of device [ 68.567280][ T5392] loop2: rw=2049, sector=158, nr_sectors = 2 limit=128 [ 68.580672][ T5392] buffer_io_error: 46 callbacks suppressed [ 68.580689][ T5392] Buffer I/O error on dev loop2, logical block 79, lost async page write [ 68.600862][ T5392] syz.2.571: attempt to access beyond end of device [ 68.600862][ T5392] loop2: rw=2049, sector=160, nr_sectors = 2 limit=128 [ 68.614436][ T5392] Buffer I/O error on dev loop2, logical block 80, lost async page write [ 68.683330][ T5392] syz.2.571: attempt to access beyond end of device [ 68.683330][ T5392] loop2: rw=2049, sector=162, nr_sectors = 6 limit=128 [ 68.702831][ T5392] syz.2.571: attempt to access beyond end of device [ 68.702831][ T5392] loop2: rw=2049, sector=166, nr_sectors = 2 limit=128 [ 68.716226][ T5392] Buffer I/O error on dev loop2, logical block 83, lost async page write [ 68.727501][ T5392] syz.2.571: attempt to access beyond end of device [ 68.727501][ T5392] loop2: rw=2049, sector=168, nr_sectors = 2 limit=128 [ 68.740862][ T5392] Buffer I/O error on dev loop2, logical block 84, lost async page write [ 68.750376][ T5392] syz.2.571: attempt to access beyond end of device [ 68.750376][ T5392] loop2: rw=2049, sector=186, nr_sectors = 6 limit=128 [ 68.764686][ T5392] syz.2.571: attempt to access beyond end of device [ 68.764686][ T5392] loop2: rw=2049, sector=190, nr_sectors = 2 limit=128 [ 68.778033][ T5392] Buffer I/O error on dev loop2, logical block 95, lost async page write [ 68.779668][ T5400] bridge0: entered promiscuous mode [ 68.787101][ T5392] syz.2.571: attempt to access beyond end of device [ 68.787101][ T5392] loop2: rw=2049, sector=192, nr_sectors = 2 limit=128 [ 68.794012][ T5400] macsec0: entered promiscuous mode [ 68.805011][ T5392] Buffer I/O error on dev loop2, logical block 96, lost async page write [ 68.805595][ T5392] syz.2.571: attempt to access beyond end of device [ 68.805595][ T5392] loop2: rw=2049, sector=194, nr_sectors = 6 limit=128 [ 68.840220][ T5392] Buffer I/O error on dev loop2, logical block 99, lost async page write [ 68.849724][ T5392] Buffer I/O error on dev loop2, logical block 100, lost async page write [ 68.865039][ T5392] Buffer I/O error on dev loop2, logical block 111, lost async page write [ 68.902066][ T5392] Buffer I/O error on dev loop2, logical block 112, lost async page write [ 68.906604][ T5405] lo speed is unknown, defaulting to 1000 [ 68.971165][ T5412] loop4: detected capacity change from 0 to 512 [ 68.993775][ T5412] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 69.006409][ T5412] ext4 filesystem being mounted at /107/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 69.013740][ T5409] loop0: detected capacity change from 0 to 512 [ 69.023425][ T5409] EXT4-fs: Ignoring removed bh option [ 69.030322][ T5409] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 69.039111][ T5409] EXT4-fs (loop0): 1 truncate cleaned up [ 69.045211][ T5409] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 69.103566][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.183258][ T5425] siw: device registration error -23 [ 69.216425][ T5423] lo speed is unknown, defaulting to 1000 [ 69.280881][ T5429] bridge0: entered promiscuous mode [ 69.295690][ T5429] macsec1: entered promiscuous mode [ 69.632891][ T5449] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5449 comm=syz.0.587 [ 69.645707][ T5442] hub 1-0:1.0: USB hub found [ 69.650826][ T5442] hub 1-0:1.0: 8 ports detected [ 69.684230][ T5442] lo speed is unknown, defaulting to 1000 [ 69.746494][ T5452] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5452 comm=syz.1.586 [ 69.780317][ T5454] lo speed is unknown, defaulting to 1000 [ 69.891929][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.001339][ T5442] loop1: detected capacity change from 0 to 512 [ 70.069353][ T5442] EXT4-fs error (device loop1): ext4_xattr_inode_iget:446: comm syz.1.586: error while reading EA inode 32 err=-116 [ 70.094172][ T5442] EXT4-fs (loop1): Remounting filesystem read-only [ 70.101703][ T5442] EXT4-fs warning (device loop1): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 70.120998][ T5442] EXT4-fs (loop1): 1 orphan inode deleted [ 70.142172][ T5442] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 70.156054][ T5442] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.174572][ T5471] hub 1-0:1.0: USB hub found [ 70.177938][ T5442] netlink: 'syz.1.586': attribute type 4 has an invalid length. [ 70.179554][ T5471] hub 1-0:1.0: 8 ports detected [ 70.214011][ T5471] lo speed is unknown, defaulting to 1000 [ 70.225308][ T5472] loop3: detected capacity change from 0 to 1024 [ 70.234607][ T5472] EXT4-fs: Ignoring removed nomblk_io_submit option [ 70.259457][ T5474] lo speed is unknown, defaulting to 1000 [ 70.272248][ T5472] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 70.307924][ T5471] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5471 comm=syz.4.593 [ 70.331844][ T5471] loop4: detected capacity change from 0 to 512 [ 70.343104][ T5471] EXT4-fs error (device loop4): ext4_xattr_inode_iget:446: comm syz.4.593: error while reading EA inode 32 err=-116 [ 70.357013][ T5471] EXT4-fs (loop4): Remounting filesystem read-only [ 70.364856][ T5471] EXT4-fs warning (device loop4): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 70.375241][ T5471] EXT4-fs (loop4): 1 orphan inode deleted [ 70.381381][ T5471] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 70.398879][ T5471] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.431040][ T5471] netlink: 'syz.4.593': attribute type 4 has an invalid length. [ 70.488222][ T5488] loop2: detected capacity change from 0 to 512 [ 70.500118][ T5488] EXT4-fs (loop2): 1 orphan inode deleted [ 70.513103][ T5488] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 70.536234][ T5494] hub 1-0:1.0: USB hub found [ 70.537537][ T5496] loop4: detected capacity change from 0 to 512 [ 70.540997][ T5494] hub 1-0:1.0: 8 ports detected [ 70.585275][ T5496] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 70.605809][ T5494] lo speed is unknown, defaulting to 1000 [ 70.635796][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.678108][ T5503] loop2: detected capacity change from 0 to 2048 [ 70.719156][ T5494] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5494 comm=syz.1.600 [ 70.734881][ T5494] loop1: detected capacity change from 0 to 512 [ 70.762954][ T29] kauditd_printk_skb: 256 callbacks suppressed [ 70.762968][ T29] audit: type=1326 audit(1761219689.421:2544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5495 comm="syz.4.601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=77 compat=0 ip=0x7fbdc691efc9 code=0x7ffc0000 [ 70.800453][ T5494] EXT4-fs error (device loop1): ext4_xattr_inode_iget:446: comm syz.1.600: error while reading EA inode 32 err=-116 [ 70.812706][ T29] audit: type=1400 audit(1761219689.451:2545): avc: denied { write } for pid=5495 comm="syz.4.601" name="memory.events.local" dev="loop4" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 70.835677][ T29] audit: type=1326 audit(1761219689.451:2546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5495 comm="syz.4.601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdc691efc9 code=0x7ffc0000 [ 70.858998][ T29] audit: type=1326 audit(1761219689.451:2547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5495 comm="syz.4.601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbdc691efc9 code=0x7ffc0000 [ 70.870988][ T5494] EXT4-fs (loop1): Remounting filesystem read-only [ 70.882392][ T29] audit: type=1326 audit(1761219689.451:2548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5495 comm="syz.4.601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdc691efc9 code=0x7ffc0000 [ 70.912269][ T29] audit: type=1326 audit(1761219689.451:2549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5495 comm="syz.4.601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdc691efc9 code=0x7ffc0000 [ 70.935573][ T29] audit: type=1326 audit(1761219689.451:2550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5495 comm="syz.4.601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbdc691efc9 code=0x7ffc0000 [ 70.939805][ T5494] EXT4-fs warning (device loop1): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 70.959483][ T29] audit: type=1326 audit(1761219689.621:2551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5495 comm="syz.4.601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdc691efc9 code=0x7ffc0000 [ 70.972782][ T5512] program syz.0.605 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 70.992444][ T29] audit: type=1326 audit(1761219689.621:2552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5495 comm="syz.4.601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdc691efc9 code=0x7ffc0000 [ 71.011810][ T5494] EXT4-fs (loop1): 1 orphan inode deleted [ 71.032557][ T5511] netlink: 'syz.2.604': attribute type 21 has an invalid length. [ 71.037360][ T29] audit: type=1326 audit(1761219689.691:2553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5495 comm="syz.4.601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=328 compat=0 ip=0x7fbdc691efc9 code=0x7ffc0000 [ 71.064137][ T5494] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 71.083003][ T5494] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.098412][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.128206][ T5516] FAULT_INJECTION: forcing a failure. [ 71.128206][ T5516] name failslab, interval 1, probability 0, space 0, times 0 [ 71.140974][ T5516] CPU: 0 UID: 0 PID: 5516 Comm: syz.4.607 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 71.141006][ T5516] Tainted: [W]=WARN [ 71.141013][ T5516] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 71.141026][ T5516] Call Trace: [ 71.141033][ T5516] [ 71.141068][ T5516] __dump_stack+0x1d/0x30 [ 71.141090][ T5516] dump_stack_lvl+0xe8/0x140 [ 71.141111][ T5516] dump_stack+0x15/0x1b [ 71.141185][ T5516] should_fail_ex+0x265/0x280 [ 71.141216][ T5516] ? assoc_array_insert+0x2e0/0x1990 [ 71.141286][ T5516] should_failslab+0x8c/0xb0 [ 71.141314][ T5516] __kmalloc_cache_noprof+0x4c/0x4a0 [ 71.141380][ T5516] assoc_array_insert+0x2e0/0x1990 [ 71.141470][ T5516] ? avc_has_perm+0xf7/0x180 [ 71.141492][ T5516] __key_link_begin+0x8a/0x140 [ 71.141519][ T5516] __key_create_or_update+0x30f/0x750 [ 71.141543][ T5516] ? key_validate+0xad/0xd0 [ 71.141630][ T5516] key_create_or_update+0x42/0x60 [ 71.141681][ T5516] __se_sys_add_key+0x29b/0x350 [ 71.141718][ T5516] __x64_sys_add_key+0x67/0x80 [ 71.141743][ T5516] x64_sys_call+0x28c8/0x3000 [ 71.141763][ T5516] do_syscall_64+0xd2/0x200 [ 71.141780][ T5516] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 71.141844][ T5516] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 71.141942][ T5516] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 71.141963][ T5516] RIP: 0033:0x7fbdc691efc9 [ 71.141979][ T5516] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 71.142017][ T5516] RSP: 002b:00007fbdc537f038 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 71.142037][ T5516] RAX: ffffffffffffffda RBX: 00007fbdc6b75fa0 RCX: 00007fbdc691efc9 [ 71.142069][ T5516] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000200000000200 [ 71.142082][ T5516] RBP: 00007fbdc537f090 R08: 00000000350ac78b R09: 0000000000000000 [ 71.142095][ T5516] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 71.142109][ T5516] R13: 00007fbdc6b76038 R14: 00007fbdc6b75fa0 R15: 00007ffc548d92f8 [ 71.142127][ T5516] [ 71.144455][ T5494] netlink: 'syz.1.600': attribute type 4 has an invalid length. [ 71.491107][ T5527] lo speed is unknown, defaulting to 1000 [ 71.738569][ T5539] loop0: detected capacity change from 0 to 128 [ 71.792136][ T5531] loop1: detected capacity change from 0 to 1024 [ 71.803958][ T5531] EXT4-fs: Ignoring removed nomblk_io_submit option [ 71.832736][ T5531] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 71.865893][ T3327] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.890670][ T5544] loop1: detected capacity change from 0 to 2048 [ 71.970381][ T5548] hub 1-0:1.0: USB hub found [ 71.978795][ T5548] hub 1-0:1.0: 8 ports detected [ 72.013115][ T5554] siw: device registration error -23 [ 72.013838][ T5548] lo speed is unknown, defaulting to 1000 [ 72.103870][ T5548] loop0: detected capacity change from 0 to 512 [ 72.112629][ T5548] EXT4-fs error (device loop0): ext4_xattr_inode_iget:446: comm syz.0.616: error while reading EA inode 32 err=-116 [ 72.125213][ T5548] EXT4-fs (loop0): Remounting filesystem read-only [ 72.131901][ T5548] EXT4-fs warning (device loop0): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 72.142126][ T5548] EXT4-fs (loop0): 1 orphan inode deleted [ 72.148283][ T5548] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 72.161123][ T5548] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.176193][ T5548] netlink: 'syz.0.616': attribute type 4 has an invalid length. [ 72.286010][ T5572] loop0: detected capacity change from 0 to 512 [ 72.294222][ T5572] EXT4-fs: Ignoring removed bh option [ 72.313541][ T5572] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 72.326245][ T5572] EXT4-fs (loop0): 1 truncate cleaned up [ 72.332483][ T5572] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 72.428023][ T5575] __nla_validate_parse: 12 callbacks suppressed [ 72.428034][ T5575] netlink: 4 bytes leftover after parsing attributes in process `syz.4.627'. [ 72.444740][ T5575] netlink: 4 bytes leftover after parsing attributes in process `syz.4.627'. [ 72.453911][ T5575] netlink: 12 bytes leftover after parsing attributes in process `syz.4.627'. [ 72.565955][ T5580] lo speed is unknown, defaulting to 1000 [ 72.966479][ T5587] hub 1-0:1.0: USB hub found [ 72.971148][ T5587] hub 1-0:1.0: 8 ports detected [ 72.990569][ T5587] lo speed is unknown, defaulting to 1000 [ 73.071128][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.083926][ T3323] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.090085][ T5592] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5592 comm=syz.1.632 [ 73.115359][ T5592] loop1: detected capacity change from 0 to 512 [ 73.129814][ T5596] x_tables: ip_tables: udp match: only valid for protocol 17 [ 73.137814][ T5597] x_tables: ip_tables: udp match: only valid for protocol 17 [ 73.145741][ T5592] EXT4-fs error (device loop1): ext4_xattr_inode_iget:446: comm syz.1.632: error while reading EA inode 32 err=-116 [ 73.158477][ T5592] EXT4-fs (loop1): Remounting filesystem read-only [ 73.165221][ T5592] EXT4-fs warning (device loop1): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 73.175557][ T5592] EXT4-fs (loop1): 1 orphan inode deleted [ 73.181492][ T5592] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 73.197933][ T5592] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.218748][ T5603] program syz.2.638 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 73.232019][ T5587] netlink: 'syz.1.632': attribute type 4 has an invalid length. [ 73.279686][ T5605] loop0: detected capacity change from 0 to 128 [ 73.304853][ T5607] loop1: detected capacity change from 0 to 512 [ 73.316563][ T5607] EXT4-fs (loop1): filesystem is read-only [ 73.325615][ T5607] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 73.360535][ T5607] EXT4-fs (loop1): filesystem is read-only [ 73.366490][ T5607] EXT4-fs (loop1): orphan cleanup on readonly fs [ 73.373678][ T5607] EXT4-fs error (device loop1): ext4_orphan_get:1392: inode #16: comm syz.1.640: iget: bad i_size value: 648518346341360424 [ 73.386815][ T5607] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.640: couldn't read orphan inode 16 (err -117) [ 73.399223][ T5607] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 73.477433][ T5607] netlink: 14 bytes leftover after parsing attributes in process `syz.1.640'. [ 73.489904][ T5616] loop0: detected capacity change from 0 to 512 [ 73.538117][ T5616] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.559220][ T5607] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 73.568367][ T5616] ext4 filesystem being mounted at /134/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 73.592016][ T5607] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 73.600770][ T5628] loop4: detected capacity change from 0 to 1024 [ 73.607688][ T5629] loop2: detected capacity change from 0 to 2048 [ 73.608609][ T5607] bond0 (unregistering): Released all slaves [ 73.620438][ T5628] EXT4-fs: Ignoring removed nomblk_io_submit option [ 73.636304][ T5628] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 73.642431][ T5629] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 73.670557][ T5626] hub 1-0:1.0: USB hub found [ 73.675472][ T5626] hub 1-0:1.0: 8 ports detected [ 73.686558][ T5629] lo speed is unknown, defaulting to 1000 [ 73.712431][ T5626] lo speed is unknown, defaulting to 1000 [ 73.741130][ T3327] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.808241][ T5626] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5626 comm=syz.3.645 [ 73.840795][ T5626] loop3: detected capacity change from 0 to 512 [ 73.857495][ T5626] /dev/loop3: Can't open blockdev [ 73.872983][ T5626] netlink: 'syz.3.645': attribute type 4 has an invalid length. [ 73.916925][ T5647] lo speed is unknown, defaulting to 1000 [ 73.949041][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.973885][ T5652] netlink: 4 bytes leftover after parsing attributes in process `syz.2.652'. [ 73.984968][ T5652] netlink: 4 bytes leftover after parsing attributes in process `syz.2.652'. [ 73.994512][ T5652] netlink: 12 bytes leftover after parsing attributes in process `syz.2.652'. [ 74.110154][ T5660] FAULT_INJECTION: forcing a failure. [ 74.110154][ T5660] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 74.123328][ T5660] CPU: 0 UID: 0 PID: 5660 Comm: syz.3.657 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 74.123424][ T5660] Tainted: [W]=WARN [ 74.123430][ T5660] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 74.123496][ T5660] Call Trace: [ 74.123502][ T5660] [ 74.123511][ T5660] __dump_stack+0x1d/0x30 [ 74.123530][ T5660] dump_stack_lvl+0xe8/0x140 [ 74.123549][ T5660] dump_stack+0x15/0x1b [ 74.123628][ T5660] should_fail_ex+0x265/0x280 [ 74.123656][ T5660] should_fail+0xb/0x20 [ 74.123707][ T5660] should_fail_usercopy+0x1a/0x20 [ 74.123724][ T5660] _copy_from_user+0x1c/0xb0 [ 74.123818][ T5660] kstrtouint_from_user+0x69/0xf0 [ 74.123834][ T5660] ? 0xffffffff81000000 [ 74.123845][ T5660] ? selinux_file_permission+0x1e4/0x320 [ 74.123875][ T5660] proc_fail_nth_write+0x50/0x160 [ 74.123920][ T5660] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 74.124137][ T5660] vfs_write+0x269/0x960 [ 74.124159][ T5660] ? vfs_read+0x4e6/0x770 [ 74.124186][ T5660] ? __rcu_read_unlock+0x4f/0x70 [ 74.124265][ T5660] ? __fget_files+0x184/0x1c0 [ 74.124291][ T5660] ksys_write+0xda/0x1a0 [ 74.124390][ T5660] __x64_sys_write+0x40/0x50 [ 74.124414][ T5660] x64_sys_call+0x2802/0x3000 [ 74.124436][ T5660] do_syscall_64+0xd2/0x200 [ 74.124454][ T5660] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 74.124475][ T5660] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 74.124537][ T5660] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 74.124661][ T5660] RIP: 0033:0x7f87ce2ada7f [ 74.124676][ T5660] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 74.124693][ T5660] RSP: 002b:00007f87ccd17030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 74.124712][ T5660] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f87ce2ada7f [ 74.124725][ T5660] RDX: 0000000000000001 RSI: 00007f87ccd170a0 RDI: 0000000000000007 [ 74.124737][ T5660] RBP: 00007f87ccd17090 R08: 0000000000000000 R09: 0000000000000010 [ 74.124818][ T5660] R10: 00000000200007fd R11: 0000000000000293 R12: 0000000000000001 [ 74.124831][ T5660] R13: 00007f87ce506038 R14: 00007f87ce505fa0 R15: 00007fff2c449798 [ 74.124850][ T5660] [ 74.362899][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.418833][ T5664] netlink: 4 bytes leftover after parsing attributes in process `syz.0.659'. [ 74.467302][ T5672] x_tables: ip_tables: udp match: only valid for protocol 17 [ 74.484588][ T5662] netlink: 24 bytes leftover after parsing attributes in process `syz.3.658'. [ 74.504101][ T5668] loop2: detected capacity change from 0 to 512 [ 74.514876][ T5668] EXT4-fs: Ignoring removed bh option [ 74.520592][ T5668] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 74.529795][ T5668] EXT4-fs (loop2): 1 truncate cleaned up [ 74.536548][ T5668] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 74.549598][ T5675] hub 1-0:1.0: USB hub found [ 74.564590][ T5675] hub 1-0:1.0: 8 ports detected [ 74.570546][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.625353][ T5684] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5684 comm=syz.0.663 [ 74.627697][ T5685] program syz.2.667 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 74.646920][ T5684] loop0: detected capacity change from 0 to 512 [ 74.662088][ T5684] EXT4-fs error (device loop0): ext4_xattr_inode_iget:446: comm syz.0.663: error while reading EA inode 32 err=-116 [ 74.692129][ T5684] EXT4-fs (loop0): Remounting filesystem read-only [ 74.698712][ T5684] EXT4-fs warning (device loop0): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 74.709197][ T5684] EXT4-fs (loop0): 1 orphan inode deleted [ 74.715849][ T5684] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 74.723579][ T5692] lo speed is unknown, defaulting to 1000 [ 74.734378][ T5684] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.742389][ T5690] netlink: '+}[@': attribute type 16 has an invalid length. [ 74.750614][ T5690] netlink: 156 bytes leftover after parsing attributes in process `+}[@'. [ 74.774671][ T5675] netlink: 'syz.0.663': attribute type 4 has an invalid length. [ 74.845972][ T5702] x_tables: ip_tables: udp match: only valid for protocol 17 [ 74.953974][ T5711] loop1: detected capacity change from 0 to 2048 [ 74.978205][ T5716] loop0: detected capacity change from 0 to 2048 [ 75.082143][ T5728] loop1: detected capacity change from 0 to 512 [ 75.091938][ T5728] EXT4-fs: Ignoring removed bh option [ 75.102836][ T5728] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 75.112833][ T5728] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 75.120884][ T5728] EXT4-fs (loop1): orphan cleanup on readonly fs [ 75.128103][ T5728] EXT4-fs (loop1): 1 truncate cleaned up [ 75.144593][ T5728] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 75.189746][ T5732] lo speed is unknown, defaulting to 1000 [ 75.509541][ T3327] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.685516][ T5742] program syz.3.687 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 75.918290][ T5744] x_tables: ip_tables: udp match: only valid for protocol 17 [ 75.991282][ T5754] loop3: detected capacity change from 0 to 2048 [ 76.006913][ T5756] loop0: detected capacity change from 0 to 512 [ 76.027172][ T5756] EXT4-fs (loop0): 1 orphan inode deleted [ 76.054029][ T5760] hub 1-0:1.0: USB hub found [ 76.059259][ T5760] hub 1-0:1.0: 8 ports detected [ 76.083309][ T5762] x_tables: ip_tables: udp match: only valid for protocol 17 [ 76.087862][ T5760] lo speed is unknown, defaulting to 1000 [ 76.129335][ T5765] loop0: detected capacity change from 0 to 128 [ 76.146799][ T5765] bio_check_eod: 116 callbacks suppressed [ 76.146866][ T5765] syz.0.697: attempt to access beyond end of device [ 76.146866][ T5765] loop0: rw=2049, sector=154, nr_sectors = 6 limit=128 [ 76.169969][ T5765] syz.0.697: attempt to access beyond end of device [ 76.169969][ T5765] loop0: rw=2049, sector=158, nr_sectors = 2 limit=128 [ 76.183338][ T5765] buffer_io_error: 74 callbacks suppressed [ 76.183353][ T5765] Buffer I/O error on dev loop0, logical block 79, lost async page write [ 76.197653][ T5765] syz.0.697: attempt to access beyond end of device [ 76.197653][ T5765] loop0: rw=2049, sector=160, nr_sectors = 2 limit=128 [ 76.202870][ T5768] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5768 comm=syz.3.695 [ 76.211158][ T5765] Buffer I/O error on dev loop0, logical block 80, lost async page write [ 76.232145][ T5765] syz.0.697: attempt to access beyond end of device [ 76.232145][ T5765] loop0: rw=2049, sector=162, nr_sectors = 6 limit=128 [ 76.238045][ T5768] loop3: detected capacity change from 0 to 512 [ 76.245911][ T5765] syz.0.697: attempt to access beyond end of device [ 76.245911][ T5765] loop0: rw=2049, sector=166, nr_sectors = 2 limit=128 [ 76.265220][ T5765] Buffer I/O error on dev loop0, logical block 83, lost async page write [ 76.272295][ T5769] hub 1-0:1.0: USB hub found [ 76.274139][ T5765] syz.0.697: attempt to access beyond end of device [ 76.274139][ T5765] loop0: rw=2049, sector=168, nr_sectors = 2 limit=128 [ 76.278847][ T5769] hub 1-0:1.0: 8 ports detected [ 76.291591][ T5765] Buffer I/O error on dev loop0, logical block 84, lost async page write [ 76.294501][ T5765] syz.0.697: attempt to access beyond end of device [ 76.294501][ T5765] loop0: rw=2049, sector=186, nr_sectors = 6 limit=128 [ 76.306579][ T5768] EXT4-fs error (device loop3): ext4_xattr_inode_iget:446: comm syz.3.695: error while reading EA inode 32 err=-116 [ 76.318934][ T5765] syz.0.697: attempt to access beyond end of device [ 76.318934][ T5765] loop0: rw=2049, sector=190, nr_sectors = 2 limit=128 [ 76.343581][ T5771] lo speed is unknown, defaulting to 1000 [ 76.343785][ T5765] Buffer I/O error on dev loop0, logical block 95, lost async page write [ 76.359610][ T5765] syz.0.697: attempt to access beyond end of device [ 76.359610][ T5765] loop0: rw=2049, sector=192, nr_sectors = 2 limit=128 [ 76.373136][ T5765] Buffer I/O error on dev loop0, logical block 96, lost async page write [ 76.382603][ T5765] syz.0.697: attempt to access beyond end of device [ 76.382603][ T5765] loop0: rw=2049, sector=194, nr_sectors = 6 limit=128 [ 76.387214][ T5768] EXT4-fs (loop3): Remounting filesystem read-only [ 76.396401][ T5765] Buffer I/O error on dev loop0, logical block 99, lost async page write [ 76.410278][ T5768] EXT4-fs warning (device loop3): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 76.411032][ T5765] Buffer I/O error on dev loop0, logical block 100, lost async page write [ 76.421336][ T5768] EXT4-fs (loop3): 1 orphan inode deleted [ 76.430143][ T5765] Buffer I/O error on dev loop0, logical block 111, lost async page write [ 76.443843][ T5765] Buffer I/O error on dev loop0, logical block 112, lost async page write [ 76.465129][ T5769] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5769 comm=syz.2.698 [ 76.482784][ T5760] netlink: 'syz.3.695': attribute type 4 has an invalid length. [ 76.484529][ T5769] loop2: detected capacity change from 0 to 512 [ 76.517325][ T5769] EXT4-fs error (device loop2): ext4_xattr_inode_iget:446: comm syz.2.698: error while reading EA inode 32 err=-116 [ 76.538185][ T5769] EXT4-fs (loop2): Remounting filesystem read-only [ 76.544991][ T5769] EXT4-fs warning (device loop2): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 76.555215][ T5769] EXT4-fs (loop2): 1 orphan inode deleted [ 76.567528][ T5769] netlink: 'syz.2.698': attribute type 4 has an invalid length. [ 76.596238][ T5779] loop3: detected capacity change from 0 to 512 [ 76.605036][ T5779] EXT4-fs (loop3): 1 orphan inode deleted [ 76.626849][ T5783] siw: device registration error -23 [ 76.649424][ T5788] loop4: detected capacity change from 0 to 1024 [ 76.656523][ T5788] EXT4-fs: Ignoring removed nomblk_io_submit option [ 76.748432][ T29] kauditd_printk_skb: 426 callbacks suppressed [ 76.748503][ T29] audit: type=1400 audit(1761219696.405:2980): avc: denied { create } for pid=5803 comm="syz.0.710" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 76.755427][ T5804] can: request_module (can-proto-5) failed. [ 76.789842][ T5800] loop1: detected capacity change from 0 to 512 [ 76.805011][ T29] audit: type=1400 audit(1761219696.435:2981): avc: granted { setsecparam } for pid=5796 comm="syz.3.707" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 76.842792][ T29] audit: type=1326 audit(1761219696.505:2982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5795 comm="syz.1.706" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8cad0fefc9 code=0x7ffc0000 [ 76.868005][ T5811] loop3: detected capacity change from 0 to 512 [ 76.875078][ T5804] loop0: detected capacity change from 0 to 512 [ 76.879537][ T29] audit: type=1326 audit(1761219696.505:2983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5795 comm="syz.1.706" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f8cad0fefc9 code=0x7ffc0000 [ 76.882748][ T5804] ext4: Bad value for 'max_batch_time' [ 76.904671][ T29] audit: type=1326 audit(1761219696.505:2984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5795 comm="syz.1.706" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8cad0fefc9 code=0x7ffc0000 [ 76.933501][ T29] audit: type=1326 audit(1761219696.505:2985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5795 comm="syz.1.706" exe="/root/syz-executor" sig=0 arch=c000003e syscall=86 compat=0 ip=0x7f8cad0fefc9 code=0x7ffc0000 [ 76.956780][ T29] audit: type=1326 audit(1761219696.505:2986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5795 comm="syz.1.706" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8cad0fefc9 code=0x7ffc0000 [ 76.980088][ T29] audit: type=1326 audit(1761219696.505:2987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5795 comm="syz.1.706" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f8cad0fefc9 code=0x7ffc0000 [ 77.003403][ T29] audit: type=1326 audit(1761219696.505:2988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5795 comm="syz.1.706" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8cad0fefc9 code=0x7ffc0000 [ 77.027104][ T29] audit: type=1326 audit(1761219696.565:2989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5795 comm="syz.1.706" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8cad0fefc9 code=0x7ffc0000 [ 77.060517][ T5811] ext4 filesystem being mounted at /138/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 77.076374][ T5814] loop2: detected capacity change from 0 to 512 [ 77.083550][ T5814] EXT4-fs: Ignoring removed oldalloc option [ 77.097376][ T5817] loop1: detected capacity change from 0 to 512 [ 77.098340][ T5814] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 77.125499][ T5817] EXT4-fs (loop1): 1 orphan inode deleted [ 77.134009][ T5814] EXT4-fs (loop2): 1 truncate cleaned up [ 77.167834][ T5821] hub 1-0:1.0: USB hub found [ 77.176003][ T5821] hub 1-0:1.0: 8 ports detected [ 77.203489][ T5825] FAULT_INJECTION: forcing a failure. [ 77.203489][ T5825] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 77.203758][ T5823] FAULT_INJECTION: forcing a failure. [ 77.203758][ T5823] name failslab, interval 1, probability 0, space 0, times 0 [ 77.216809][ T5825] CPU: 0 UID: 0 PID: 5825 Comm: syz.2.716 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 77.216885][ T5825] Tainted: [W]=WARN [ 77.216892][ T5825] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 77.216904][ T5825] Call Trace: [ 77.216912][ T5825] [ 77.216921][ T5825] __dump_stack+0x1d/0x30 [ 77.216943][ T5825] dump_stack_lvl+0xe8/0x140 [ 77.216968][ T5825] dump_stack+0x15/0x1b [ 77.217027][ T5825] should_fail_ex+0x265/0x280 [ 77.217056][ T5825] should_fail+0xb/0x20 [ 77.217071][ T5825] should_fail_usercopy+0x1a/0x20 [ 77.217151][ T5825] strncpy_from_user+0x25/0x230 [ 77.217175][ T5825] ? __kmalloc_cache_noprof+0x249/0x4a0 [ 77.217208][ T5825] getname_flags+0x230/0x3b0 [ 77.217288][ T5825] do_mq_open+0xd9/0x4f0 [ 77.217319][ T5825] ? __rcu_read_unlock+0x4f/0x70 [ 77.217360][ T5825] ? __fget_files+0x184/0x1c0 [ 77.217386][ T5825] __x64_sys_mq_open+0xcb/0x100 [ 77.217415][ T5825] x64_sys_call+0x8c6/0x3000 [ 77.217516][ T5825] do_syscall_64+0xd2/0x200 [ 77.217533][ T5825] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 77.217620][ T5825] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 77.217643][ T5825] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 77.217691][ T5825] RIP: 0033:0x7fc08840efc9 [ 77.217705][ T5825] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 77.217722][ T5825] RSP: 002b:00007fc086e6f038 EFLAGS: 00000246 ORIG_RAX: 00000000000000f0 [ 77.217740][ T5825] RAX: ffffffffffffffda RBX: 00007fc088665fa0 RCX: 00007fc08840efc9 [ 77.217752][ T5825] RDX: 00000000000001f0 RSI: 0000000000000042 RDI: 0000200000000a00 [ 77.217764][ T5825] RBP: 00007fc086e6f090 R08: 0000000000000000 R09: 0000000000000000 [ 77.217825][ T5825] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 77.217838][ T5825] R13: 00007fc088666038 R14: 00007fc088665fa0 R15: 00007fff8a6ecd48 [ 77.217854][ T5825] [ 77.245762][ T5826] lo speed is unknown, defaulting to 1000 [ 77.254854][ T5823] CPU: 1 UID: 0 PID: 5823 Comm: syz.1.715 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 77.254882][ T5823] Tainted: [W]=WARN [ 77.254887][ T5823] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 77.254898][ T5823] Call Trace: [ 77.254914][ T5823] [ 77.254922][ T5823] __dump_stack+0x1d/0x30 [ 77.254944][ T5823] dump_stack_lvl+0xe8/0x140 [ 77.254964][ T5823] dump_stack+0x15/0x1b [ 77.254980][ T5823] should_fail_ex+0x265/0x280 [ 77.255049][ T5823] should_failslab+0x8c/0xb0 [ 77.255074][ T5823] kmem_cache_alloc_noprof+0x50/0x480 [ 77.255135][ T5823] ? security_inode_alloc+0x37/0x100 [ 77.255157][ T5823] security_inode_alloc+0x37/0x100 [ 77.255211][ T5823] inode_init_always_gfp+0x4b7/0x500 [ 77.255236][ T5823] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 77.255256][ T5823] alloc_inode+0x58/0x170 [ 77.255277][ T5823] new_inode+0x1d/0xe0 [ 77.255381][ T5823] shmem_get_inode+0x244/0x750 [ 77.255402][ T5823] __shmem_file_setup+0x113/0x210 [ 77.255435][ T5823] shmem_file_setup+0x3b/0x50 [ 77.255453][ T5823] __se_sys_memfd_create+0x2c3/0x590 [ 77.255536][ T5823] __x64_sys_memfd_create+0x31/0x40 [ 77.255556][ T5823] x64_sys_call+0x2ac2/0x3000 [ 77.255603][ T5823] do_syscall_64+0xd2/0x200 [ 77.255620][ T5823] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 77.255685][ T5823] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 77.255719][ T5823] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 77.255739][ T5823] RIP: 0033:0x7f8cad0fefc9 [ 77.255755][ T5823] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 77.255809][ T5823] RSP: 002b:00007f8cabb66e18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 77.255827][ T5823] RAX: ffffffffffffffda RBX: 00000000000005ad RCX: 00007f8cad0fefc9 [ 77.255839][ T5823] RDX: 00007f8cabb66ef0 RSI: 0000000000000000 RDI: 00007f8cad182960 [ 77.255855][ T5823] RBP: 0000200000000180 R08: 00007f8cabb66bb7 R09: 00007f8cabb66e40 [ 77.255867][ T5823] R10: 000000000000000a R11: 0000000000000202 R12: 0000200000000040 [ 77.255879][ T5823] R13: 00007f8cabb66ef0 R14: 00007f8cabb66eb0 R15: 0000200000000940 [ 77.255896][ T5823] [ 77.444538][ T5830] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5830 comm=syz.3.714 [ 77.469727][ T5828] siw: device registration error -23 [ 77.511482][ T5833] __nla_validate_parse: 18 callbacks suppressed [ 77.511496][ T5833] netlink: 20 bytes leftover after parsing attributes in process `syz.1.718'. [ 77.518565][ T5826] loop3: detected capacity change from 0 to 512 [ 77.617062][ T5837] netlink: 12 bytes leftover after parsing attributes in process `syz.1.720'. [ 77.639684][ T5826] EXT4-fs error (device loop3): ext4_xattr_inode_iget:446: comm syz.3.714: error while reading EA inode 32 err=-116 [ 77.681608][ T5841] netlink: 4 bytes leftover after parsing attributes in process `syz.2.721'. [ 77.693256][ T5826] EXT4-fs (loop3): Remounting filesystem read-only [ 77.722483][ T5826] EXT4-fs warning (device loop3): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 77.732824][ T5826] EXT4-fs (loop3): 1 orphan inode deleted [ 77.741258][ T5841] netlink: 4 bytes leftover after parsing attributes in process `syz.2.721'. [ 77.750451][ T5841] netlink: 12 bytes leftover after parsing attributes in process `syz.2.721'. [ 77.771995][ T5821] netlink: 'syz.3.714': attribute type 4 has an invalid length. [ 77.827526][ T5847] loop3: detected capacity change from 0 to 512 [ 77.844472][ T5851] loop2: detected capacity change from 0 to 2048 [ 77.854747][ T5847] EXT4-fs: Ignoring removed bh option [ 77.862608][ T5850] loop1: detected capacity change from 0 to 2048 [ 77.869124][ T5847] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 77.870793][ T5850] ext4: Unknown parameter 'fowner<00000000000000000000' [ 77.878300][ T5847] EXT4-fs (loop3): 1 truncate cleaned up [ 77.887815][ T5850] netlink: 24 bytes leftover after parsing attributes in process `syz.1.724'. [ 77.954515][ T5856] loop3: detected capacity change from 0 to 512 [ 77.981975][ T5856] ext4 filesystem being mounted at /142/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 78.000949][ T5865] siw: device registration error -23 [ 78.031500][ T5867] loop2: detected capacity change from 0 to 2048 [ 78.038608][ T5869] loop1: detected capacity change from 0 to 2048 [ 78.112278][ T5872] loop2: detected capacity change from 0 to 128 [ 78.168983][ T5876] netlink: 4 bytes leftover after parsing attributes in process `syz.1.736'. [ 78.178887][ T5876] netlink: 4 bytes leftover after parsing attributes in process `syz.1.736'. [ 78.230035][ T5877] netlink: 12 bytes leftover after parsing attributes in process `syz.1.736'. [ 78.285306][ T5883] netlink: 14 bytes leftover after parsing attributes in process `syz.1.739'. [ 78.315936][ T5887] loop1: detected capacity change from 0 to 128 [ 78.330750][ T5885] loop2: detected capacity change from 0 to 2048 [ 78.338057][ T5885] ext4: Unknown parameter 'fowner<00000000000000000000' [ 78.423165][ T5894] hub 1-0:1.0: USB hub found [ 78.427839][ T5894] hub 1-0:1.0: 8 ports detected [ 78.446219][ T5894] lo speed is unknown, defaulting to 1000 [ 78.467617][ T5896] netlink: 'syz.1.745': attribute type 21 has an invalid length. [ 78.513671][ T5901] loop1: detected capacity change from 0 to 2048 [ 78.546252][ T5902] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5902 comm=syz.2.744 [ 78.562042][ T5902] loop2: detected capacity change from 0 to 512 [ 78.582851][ T5902] EXT4-fs error (device loop2): ext4_xattr_inode_iget:446: comm syz.2.744: error while reading EA inode 32 err=-116 [ 78.596849][ T5902] EXT4-fs (loop2): Remounting filesystem read-only [ 78.603670][ T5902] EXT4-fs warning (device loop2): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 78.613837][ T5902] EXT4-fs (loop2): 1 orphan inode deleted [ 78.638833][ T5894] netlink: 'syz.2.744': attribute type 4 has an invalid length. [ 78.650771][ T5907] loop1: detected capacity change from 0 to 128 [ 78.730434][ T5910] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5910 comm=syz.2.750 [ 78.841403][ T5918] loop3: detected capacity change from 0 to 512 [ 78.864915][ T5916] loop1: detected capacity change from 0 to 2048 [ 78.872853][ T5916] ext4: Unknown parameter 'fowner<00000000000000000000' [ 78.924774][ T5922] loop1: detected capacity change from 0 to 128 [ 78.966338][ T5924] hub 1-0:1.0: USB hub found [ 78.971031][ T5924] hub 1-0:1.0: 8 ports detected [ 78.988063][ T5924] lo speed is unknown, defaulting to 1000 [ 79.073938][ T5926] loop3: detected capacity change from 0 to 512 [ 79.082628][ T5926] EXT4-fs error (device loop3): ext4_xattr_inode_iget:446: comm syz.3.756: error while reading EA inode 32 err=-116 [ 79.093851][ T5929] loop1: detected capacity change from 0 to 512 [ 79.095189][ T5926] EXT4-fs (loop3): Remounting filesystem read-only [ 79.108170][ T5926] EXT4-fs warning (device loop3): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 79.118311][ T5926] EXT4-fs (loop3): 1 orphan inode deleted [ 79.130403][ T5924] netlink: 'syz.3.756': attribute type 4 has an invalid length. [ 79.247435][ T5939] x_tables: ip_tables: udp match: only valid for protocol 17 [ 79.291140][ T5944] loop3: detected capacity change from 0 to 512 [ 79.301355][ T5944] EXT4-fs (loop3): 1 orphan inode deleted [ 79.326578][ T5948] loop1: detected capacity change from 0 to 512 [ 79.337882][ T5948] EXT4-fs (loop1): filesystem is read-only [ 79.348003][ T5948] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 79.359803][ T5948] EXT4-fs (loop1): filesystem is read-only [ 79.365739][ T5948] EXT4-fs (loop1): orphan cleanup on readonly fs [ 79.372699][ T5948] EXT4-fs error (device loop1): ext4_orphan_get:1392: inode #16: comm syz.1.765: iget: bad i_size value: 648518346341360424 [ 79.386128][ T5948] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.765: couldn't read orphan inode 16 (err -117) [ 79.390288][ T5951] loop3: detected capacity change from 0 to 2048 [ 79.428156][ T5953] loop1: detected capacity change from 0 to 512 [ 79.459469][ T5953] ext4 filesystem being mounted at /172/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 79.497052][ T5959] hub 1-0:1.0: USB hub found [ 79.502654][ T5959] hub 1-0:1.0: 8 ports detected [ 79.525495][ T5959] lo speed is unknown, defaulting to 1000 [ 79.658821][ T5972] loop3: detected capacity change from 0 to 512 [ 79.665956][ T5971] hub 1-0:1.0: USB hub found [ 79.670939][ T5971] hub 1-0:1.0: 8 ports detected [ 79.678661][ T5972] EXT4-fs error (device loop3): ext4_xattr_inode_iget:446: comm syz.3.769: error while reading EA inode 32 err=-116 [ 79.705804][ T5971] lo speed is unknown, defaulting to 1000 [ 79.712269][ T5972] EXT4-fs (loop3): Remounting filesystem read-only [ 79.718783][ T5972] EXT4-fs warning (device loop3): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 79.732054][ T5972] EXT4-fs (loop3): 1 orphan inode deleted [ 79.745838][ T5959] netlink: 'syz.3.769': attribute type 4 has an invalid length. [ 79.768856][ T5965] loop4: detected capacity change from 0 to 1024 [ 79.775609][ T5965] EXT4-fs: Ignoring removed nomblk_io_submit option [ 79.818322][ T5971] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5971 comm=syz.2.773 [ 79.869079][ T5971] loop2: detected capacity change from 0 to 512 [ 79.884915][ T5986] hub 1-0:1.0: USB hub found [ 79.889641][ T5986] hub 1-0:1.0: 8 ports detected [ 79.921022][ T5986] lo speed is unknown, defaulting to 1000 [ 79.927456][ T5971] EXT4-fs error (device loop2): ext4_xattr_inode_iget:446: comm syz.2.773: error while reading EA inode 32 err=-116 [ 79.981867][ T5986] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5986 comm=syz.4.776 [ 80.009490][ T5971] EXT4-fs (loop2): Remounting filesystem read-only [ 80.028542][ T5986] loop4: detected capacity change from 0 to 512 [ 80.034875][ T5971] EXT4-fs warning (device loop2): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 80.068094][ T5986] EXT4-fs error (device loop4): ext4_xattr_inode_iget:446: comm syz.4.776: error while reading EA inode 32 err=-116 [ 80.085555][ T5971] EXT4-fs (loop2): 1 orphan inode deleted [ 80.099680][ T5986] EXT4-fs (loop4): Remounting filesystem read-only [ 80.106461][ T5986] EXT4-fs warning (device loop4): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 80.119559][ T5971] netlink: 'syz.2.773': attribute type 4 has an invalid length. [ 80.127570][ T5986] EXT4-fs (loop4): 1 orphan inode deleted [ 80.144059][ T6006] pim6reg1: entered promiscuous mode [ 80.149377][ T6006] pim6reg1: entered allmulticast mode [ 80.167288][ T5986] netlink: 'syz.4.776': attribute type 4 has an invalid length. [ 80.213167][ T6013] hub 1-0:1.0: USB hub found [ 80.218661][ T6013] hub 1-0:1.0: 8 ports detected [ 80.240384][ T6013] lo speed is unknown, defaulting to 1000 [ 80.301062][ T6023] loop4: detected capacity change from 0 to 512 [ 80.309845][ T6023] EXT4-fs: Ignoring removed bh option [ 80.311013][ T6024] loop0: detected capacity change from 0 to 512 [ 80.327007][ T6026] x_tables: ip_tables: udp match: only valid for protocol 17 [ 80.334782][ T6023] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 80.348924][ T6023] EXT4-fs (loop4): 1 truncate cleaned up [ 80.400230][ T6013] loop2: detected capacity change from 0 to 512 [ 80.406830][ T6035] loop1: detected capacity change from 0 to 512 [ 80.411892][ T6013] EXT4-fs error (device loop2): ext4_xattr_inode_iget:446: comm syz.2.786: error while reading EA inode 32 err=-116 [ 80.432258][ T6013] EXT4-fs (loop2): Remounting filesystem read-only [ 80.450020][ T6038] x_tables: ip_tables: udp match: only valid for protocol 17 [ 80.459653][ T6013] EXT4-fs warning (device loop2): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 80.477191][ T6013] EXT4-fs (loop2): 1 orphan inode deleted [ 80.485911][ T6035] ext4 filesystem being mounted at /176/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 80.519827][ T6013] netlink: 'syz.2.786': attribute type 4 has an invalid length. [ 80.590039][ T6047] loop2: detected capacity change from 0 to 2048 [ 80.694272][ T6055] loop0: detected capacity change from 0 to 512 [ 80.743849][ T6062] x_tables: ip_tables: udp match: only valid for protocol 17 [ 80.758567][ T6065] x_tables: ip_tables: udp match: only valid for protocol 17 [ 80.796441][ T6055] EXT4-fs (loop0): filesystem is read-only [ 80.809105][ T6055] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 80.830603][ T6055] EXT4-fs (loop0): filesystem is read-only [ 80.836499][ T6055] EXT4-fs (loop0): orphan cleanup on readonly fs [ 80.844014][ T6055] EXT4-fs error (device loop0): ext4_orphan_get:1392: inode #16: comm syz.0.801: iget: bad i_size value: 648518346341360424 [ 80.861412][ T6055] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.801: couldn't read orphan inode 16 (err -117) [ 80.876975][ T6071] hub 1-0:1.0: USB hub found [ 80.905630][ T6071] hub 1-0:1.0: 8 ports detected [ 80.938939][ T6074] lo speed is unknown, defaulting to 1000 [ 80.979367][ T6077] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 81.016524][ T6077] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 81.082665][ T6077] bond0 (unregistering): Released all slaves [ 81.150761][ T6082] loop4: detected capacity change from 0 to 512 [ 81.166629][ T6081] loop3: detected capacity change from 0 to 2048 [ 81.185809][ T6082] EXT4-fs error (device loop4): ext4_xattr_inode_iget:446: comm syz.4.809: error while reading EA inode 32 err=-116 [ 81.236181][ T6081] ext4: Unknown parameter 'fowner<00000000000000000000' [ 81.247567][ T6082] EXT4-fs (loop4): Remounting filesystem read-only [ 81.268523][ T6082] EXT4-fs warning (device loop4): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 81.282478][ T6082] EXT4-fs (loop4): 1 orphan inode deleted [ 81.299314][ T6080] lo speed is unknown, defaulting to 1000 [ 81.484210][ T6098] loop4: detected capacity change from 0 to 128 [ 81.502948][ T6098] bio_check_eod: 200 callbacks suppressed [ 81.502962][ T6098] syz.4.816: attempt to access beyond end of device [ 81.502962][ T6098] loop4: rw=2049, sector=154, nr_sectors = 6 limit=128 [ 81.529707][ T6099] lo speed is unknown, defaulting to 1000 [ 81.531601][ T6098] syz.4.816: attempt to access beyond end of device [ 81.531601][ T6098] loop4: rw=2049, sector=158, nr_sectors = 2 limit=128 [ 81.548788][ T6098] buffer_io_error: 130 callbacks suppressed [ 81.548800][ T6098] Buffer I/O error on dev loop4, logical block 79, lost async page write [ 81.563506][ T6098] syz.4.816: attempt to access beyond end of device [ 81.563506][ T6098] loop4: rw=2049, sector=160, nr_sectors = 2 limit=128 [ 81.576949][ T6098] Buffer I/O error on dev loop4, logical block 80, lost async page write [ 81.613129][ T6098] syz.4.816: attempt to access beyond end of device [ 81.613129][ T6098] loop4: rw=2049, sector=162, nr_sectors = 6 limit=128 [ 81.626849][ T6098] syz.4.816: attempt to access beyond end of device [ 81.626849][ T6098] loop4: rw=2049, sector=166, nr_sectors = 2 limit=128 [ 81.640191][ T6098] Buffer I/O error on dev loop4, logical block 83, lost async page write [ 81.657934][ T6098] syz.4.816: attempt to access beyond end of device [ 81.657934][ T6098] loop4: rw=2049, sector=168, nr_sectors = 2 limit=128 [ 81.671248][ T6098] Buffer I/O error on dev loop4, logical block 84, lost async page write [ 81.680135][ T6098] syz.4.816: attempt to access beyond end of device [ 81.680135][ T6098] loop4: rw=2049, sector=186, nr_sectors = 6 limit=128 [ 81.702494][ T6098] syz.4.816: attempt to access beyond end of device [ 81.702494][ T6098] loop4: rw=2049, sector=190, nr_sectors = 2 limit=128 [ 81.715840][ T6098] Buffer I/O error on dev loop4, logical block 95, lost async page write [ 81.757364][ T6104] x_tables: ip_tables: udp match: only valid for protocol 17 [ 81.831804][ T6098] syz.4.816: attempt to access beyond end of device [ 81.831804][ T6098] loop4: rw=2049, sector=192, nr_sectors = 2 limit=128 [ 81.845368][ T6098] Buffer I/O error on dev loop4, logical block 96, lost async page write [ 81.854208][ T29] kauditd_printk_skb: 56 callbacks suppressed [ 81.854261][ T29] audit: type=1400 audit(1761219701.485:3046): avc: denied { create } for pid=6107 comm="syz.1.820" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 81.879760][ T29] audit: type=1400 audit(1761219701.485:3047): avc: denied { ioctl } for pid=6106 comm="syz.0.821" path="user:[4026531837]" dev="nsfs" ino=4026531837 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 81.907412][ T6098] syz.4.816: attempt to access beyond end of device [ 81.907412][ T6098] loop4: rw=2049, sector=194, nr_sectors = 6 limit=128 [ 81.921482][ T6098] Buffer I/O error on dev loop4, logical block 99, lost async page write [ 81.930263][ T6098] Buffer I/O error on dev loop4, logical block 100, lost async page write [ 81.946480][ T29] audit: type=1400 audit(1761219701.605:3048): avc: denied { ioctl } for pid=6106 comm="syz.0.821" path="socket:[15946]" dev="sockfs" ino=15946 ioctlcmd=0x8982 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 81.974371][ T6098] Buffer I/O error on dev loop4, logical block 111, lost async page write [ 81.983347][ T6098] Buffer I/O error on dev loop4, logical block 112, lost async page write [ 81.992104][ T29] audit: type=1400 audit(1761219701.635:3049): avc: denied { write } for pid=6107 comm="syz.1.820" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 82.033964][ T29] audit: type=1326 audit(1761219701.685:3050): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6106 comm="syz.0.821" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f802546efc9 code=0x7ffc0000 [ 82.057439][ T29] audit: type=1326 audit(1761219701.685:3051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6106 comm="syz.0.821" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f802546efc9 code=0x7ffc0000 [ 82.080818][ T29] audit: type=1326 audit(1761219701.685:3052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6106 comm="syz.0.821" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f802546efc9 code=0x7ffc0000 [ 82.104233][ T29] audit: type=1326 audit(1761219701.685:3053): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6106 comm="syz.0.821" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f802546efc9 code=0x7ffc0000 [ 82.127631][ T29] audit: type=1326 audit(1761219701.685:3054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6106 comm="syz.0.821" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f802546efc9 code=0x7ffc0000 [ 82.150974][ T29] audit: type=1326 audit(1761219701.685:3055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6106 comm="syz.0.821" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f802546efc9 code=0x7ffc0000 [ 82.218173][ T6119] x_tables: ip_tables: udp match: only valid for protocol 17 [ 82.259982][ T6121] loop1: detected capacity change from 0 to 2048 [ 82.282371][ T6127] loop3: detected capacity change from 0 to 128 [ 82.310889][ T6123] loop2: detected capacity change from 0 to 2048 [ 82.324317][ T6123] ext4: Unknown parameter 'fowner<00000000000000000000' [ 82.373054][ T6136] x_tables: ip_tables: udp match: only valid for protocol 17 [ 82.389904][ T6137] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 82.465635][ T6148] loop1: detected capacity change from 0 to 2048 [ 82.515980][ T6153] loop3: detected capacity change from 0 to 512 [ 82.534148][ T6155] hub 1-0:1.0: USB hub found [ 82.538908][ T6155] hub 1-0:1.0: 8 ports detected [ 82.539082][ T6153] EXT4-fs: Ignoring removed bh option [ 82.549276][ T6153] EXT4-fs: Ignoring removed mblk_io_submit option [ 82.563705][ T6155] lo speed is unknown, defaulting to 1000 [ 82.602799][ T6158] lo speed is unknown, defaulting to 1000 [ 82.634097][ T6153] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 82.679297][ T6159] lo speed is unknown, defaulting to 1000 [ 82.738065][ T6162] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6162 comm=syz.1.841 [ 82.760764][ T6153] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 82.785504][ T6153] EXT4-fs (loop3): orphan cleanup on readonly fs [ 82.829960][ T6153] EXT4-fs error (device loop3): ext4_acquire_dquot:6945: comm syz.3.840: Failed to acquire dquot type 1 [ 82.919949][ T6153] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:483: comm syz.3.840: Invalid block bitmap block 0 in block_group 0 [ 82.942701][ T6153] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:483: comm syz.3.840: Invalid block bitmap block 0 in block_group 0 [ 82.962518][ T6155] validate_nla: 1 callbacks suppressed [ 82.962530][ T6155] netlink: 'syz.1.841': attribute type 4 has an invalid length. [ 82.971730][ T6153] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:483: comm syz.3.840: Invalid block bitmap block 0 in block_group 0 [ 82.993609][ T6153] EXT4-fs error (device loop3): ext4_acquire_dquot:6945: comm syz.3.840: Failed to acquire dquot type 1 [ 83.009612][ T6153] EXT4-fs error (device loop3): ext4_acquire_dquot:6945: comm syz.3.840: Failed to acquire dquot type 1 [ 83.041812][ T6153] EXT4-fs (loop3): 1 orphan inode deleted [ 83.106647][ T6153] syz.3.840 (6153) used greatest stack depth: 8992 bytes left [ 83.313037][ T6171] loop3: detected capacity change from 0 to 1024 [ 83.329968][ T6171] EXT4-fs: Ignoring removed nomblk_io_submit option [ 83.394004][ T6191] netlink: 'syz.0.849': attribute type 21 has an invalid length. [ 83.401945][ T6191] __nla_validate_parse: 29 callbacks suppressed [ 83.401959][ T6191] netlink: 156 bytes leftover after parsing attributes in process `syz.0.849'. [ 83.417175][ T6191] netlink: 4 bytes leftover after parsing attributes in process `syz.0.849'. [ 83.417702][ T6189] loop4: detected capacity change from 0 to 2048 [ 83.433492][ T6189] ext4: Unknown parameter 'fowner<00000000000000000000' [ 83.476184][ T6189] netlink: 24 bytes leftover after parsing attributes in process `syz.4.848'. [ 83.512337][ T6197] netlink: 28 bytes leftover after parsing attributes in process `syz.0.852'. [ 83.524414][ T6195] loop3: detected capacity change from 0 to 2048 [ 83.558546][ T6199] loop0: detected capacity change from 0 to 512 [ 83.585007][ T6199] EXT4-fs (loop0): filesystem is read-only [ 83.605942][ T6199] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 83.631214][ T6202] loop4: detected capacity change from 0 to 512 [ 83.639801][ T6202] EXT4-fs: Ignoring removed bh option [ 83.645985][ T6199] EXT4-fs (loop0): filesystem is read-only [ 83.648417][ T6202] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 83.651904][ T6199] EXT4-fs (loop0): orphan cleanup on readonly fs [ 83.667878][ T6199] EXT4-fs error (device loop0): ext4_orphan_get:1392: inode #16: comm syz.0.853: iget: bad i_size value: 648518346341360424 [ 83.682772][ T6199] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.853: couldn't read orphan inode 16 (err -117) [ 83.685189][ T6202] EXT4-fs (loop4): 1 truncate cleaned up [ 83.707648][ T6208] netlink: 4 bytes leftover after parsing attributes in process `syz.3.858'. [ 83.803617][ T6230] netlink: 14 bytes leftover after parsing attributes in process `syz.0.853'. [ 83.859729][ T6237] x_tables: ip_tables: udp match: only valid for protocol 17 [ 83.868906][ T6234] loop0: detected capacity change from 0 to 2048 [ 83.875901][ T6234] ext4: Unknown parameter 'fowner<00000000000000000000' [ 83.886557][ T6234] netlink: 24 bytes leftover after parsing attributes in process `syz.0.865'. [ 83.918190][ T6241] loop2: detected capacity change from 0 to 1024 [ 83.943096][ T6241] EXT4-fs: Ignoring removed nomblk_io_submit option [ 84.011468][ T6248] hub 1-0:1.0: USB hub found [ 84.027039][ T6248] hub 1-0:1.0: 8 ports detected [ 84.032323][ T6250] netlink: 4 bytes leftover after parsing attributes in process `syz.0.870'. [ 84.059738][ T6243] usb usb1: usbfs: interface 0 claimed by hub while 'syz.4.868' sets config #1 [ 84.083791][ T6248] lo speed is unknown, defaulting to 1000 [ 84.090109][ T6243] lo speed is unknown, defaulting to 1000 [ 84.178849][ T6263] netlink: 12 bytes leftover after parsing attributes in process `syz.1.872'. [ 84.187962][ T6243] loop4: detected capacity change from 0 to 512 [ 84.209147][ T6243] EXT4-fs error (device loop4): ext4_xattr_inode_iget:446: comm syz.4.868: error while reading EA inode 32 err=-116 [ 84.231052][ T6273] x_tables: ip_tables: udp match: only valid for protocol 17 [ 84.238903][ T6243] EXT4-fs (loop4): Remounting filesystem read-only [ 84.239133][ T6248] loop2: detected capacity change from 0 to 512 [ 84.245545][ T6243] EXT4-fs warning (device loop4): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 84.262634][ T6243] EXT4-fs (loop4): 1 orphan inode deleted [ 84.285114][ T6248] EXT4-fs error (device loop2): ext4_xattr_inode_iget:446: comm syz.2.869: error while reading EA inode 32 err=-116 [ 84.294886][ T6243] netlink: 'syz.4.868': attribute type 4 has an invalid length. [ 84.315530][ T6281] x_tables: ip_tables: udp match: only valid for protocol 17 [ 84.324417][ T6248] EXT4-fs (loop2): Remounting filesystem read-only [ 84.331577][ T6248] EXT4-fs warning (device loop2): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 84.349345][ T6248] EXT4-fs (loop2): 1 orphan inode deleted [ 84.380255][ T6248] netlink: 'syz.2.869': attribute type 4 has an invalid length. [ 84.391873][ T6288] loop0: detected capacity change from 0 to 128 [ 84.537962][ T6298] loop0: detected capacity change from 0 to 512 [ 84.545822][ T6298] EXT4-fs (loop0): filesystem is read-only [ 84.554298][ T6301] loop4: detected capacity change from 0 to 1024 [ 84.561373][ T6303] loop1: detected capacity change from 0 to 512 [ 84.567847][ T6298] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 84.584264][ T6298] EXT4-fs (loop0): filesystem is read-only [ 84.590107][ T6298] EXT4-fs (loop0): orphan cleanup on readonly fs [ 84.596910][ T6298] EXT4-fs error (device loop0): ext4_orphan_get:1392: inode #16: comm syz.0.878: iget: bad i_size value: 648518346341360424 [ 84.616381][ T6301] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.635630][ T6298] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.878: couldn't read orphan inode 16 (err -117) [ 84.674510][ T6301] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.692306][ T6295] loop2: detected capacity change from 0 to 1024 [ 84.699981][ T6317] netlink: 14 bytes leftover after parsing attributes in process `syz.0.878'. [ 84.700471][ T6295] EXT4-fs: Ignoring removed nomblk_io_submit option [ 84.744689][ T6301] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.761856][ T6321] loop3: detected capacity change from 0 to 1024 [ 84.769172][ T6321] EXT4-fs: Ignoring removed nomblk_io_submit option [ 84.806697][ T6301] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.896888][ T6328] loop0: detected capacity change from 0 to 2048 [ 84.969249][ T6329] lo speed is unknown, defaulting to 1000 [ 85.041947][ T2214] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.056382][ T2214] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.072252][ T6343] hub 1-0:1.0: USB hub found [ 85.076983][ T6343] hub 1-0:1.0: 8 ports detected [ 85.088686][ T2214] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.114041][ T2214] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.119264][ T6349] loop0: detected capacity change from 0 to 512 [ 85.133041][ T6349] EXT4-fs (loop0): filesystem is read-only [ 85.151740][ T6349] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 85.156264][ T6343] lo speed is unknown, defaulting to 1000 [ 85.169443][ T6352] loop4: detected capacity change from 0 to 512 [ 85.177813][ T6349] EXT4-fs (loop0): filesystem is read-only [ 85.183709][ T6349] EXT4-fs (loop0): orphan cleanup on readonly fs [ 85.190759][ T6349] EXT4-fs error (device loop0): ext4_orphan_get:1392: inode #16: comm syz.0.896: iget: bad i_size value: 648518346341360424 [ 85.216096][ T6349] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.896: couldn't read orphan inode 16 (err -117) [ 85.243256][ T6343] loop2: detected capacity change from 0 to 512 [ 85.261896][ T6343] EXT4-fs error (device loop2): ext4_xattr_inode_iget:446: comm syz.2.893: error while reading EA inode 32 err=-116 [ 85.274851][ T6343] EXT4-fs (loop2): Remounting filesystem read-only [ 85.281433][ T6343] EXT4-fs warning (device loop2): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 85.291751][ T6343] EXT4-fs (loop2): 1 orphan inode deleted [ 85.315838][ T6360] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 85.318753][ T6343] netlink: 'syz.2.893': attribute type 4 has an invalid length. [ 85.387670][ T6362] loop0: detected capacity change from 0 to 512 [ 85.392726][ T6364] netlink: 'syz.2.900': attribute type 21 has an invalid length. [ 85.403206][ T6362] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 85.424385][ T6362] ext4 filesystem being mounted at /193/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 85.543327][ T6381] hub 1-0:1.0: USB hub found [ 85.548830][ T6385] xt_check_match: 3 callbacks suppressed [ 85.548844][ T6385] x_tables: ip_tables: udp match: only valid for protocol 17 [ 85.552038][ T6381] hub 1-0:1.0: 8 ports detected [ 85.570119][ T6387] loop4: detected capacity change from 0 to 128 [ 85.593897][ T6381] lo speed is unknown, defaulting to 1000 [ 85.667707][ T6394] netlink: 'syz.1.912': attribute type 21 has an invalid length. [ 85.692288][ T6397] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6397 comm=syz.0.906 [ 85.727972][ T6397] loop0: detected capacity change from 0 to 512 [ 85.746796][ T6397] EXT4-fs error (device loop0): ext4_xattr_inode_iget:446: comm syz.0.906: error while reading EA inode 32 err=-116 [ 85.770478][ T6397] EXT4-fs (loop0): Remounting filesystem read-only [ 85.781375][ T6397] EXT4-fs warning (device loop0): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 85.794549][ T6397] EXT4-fs (loop0): 1 orphan inode deleted [ 85.843643][ T6381] netlink: 'syz.0.906': attribute type 4 has an invalid length. [ 85.925923][ T6424] loop2: detected capacity change from 0 to 128 [ 86.006935][ T6431] loop1: detected capacity change from 0 to 512 [ 86.083635][ T6435] lo speed is unknown, defaulting to 1000 [ 86.749903][ T6451] loop4: detected capacity change from 0 to 512 [ 86.772588][ T6451] EXT4-fs: Ignoring removed bh option [ 86.852023][ T6451] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 86.892454][ T6451] EXT4-fs (loop4): 1 truncate cleaned up [ 86.899697][ T6431] ext4 filesystem being mounted at /200/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 86.955365][ T6458] loop0: detected capacity change from 0 to 512 [ 86.962363][ T6458] EXT4-fs: Ignoring removed bh option [ 86.978657][ T6458] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 87.000655][ T29] kauditd_printk_skb: 636 callbacks suppressed [ 87.000669][ T29] audit: type=1326 audit(1761219706.655:3682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6459 comm="syz.2.940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc08840efc9 code=0x7ffc0000 [ 87.038776][ T6460] loop2: detected capacity change from 0 to 8192 [ 87.046694][ T29] audit: type=1326 audit(1761219706.655:3683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6459 comm="syz.2.940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=288 compat=0 ip=0x7fc08840efc9 code=0x7ffc0000 [ 87.057638][ T6458] EXT4-fs (loop0): 1 truncate cleaned up [ 87.070098][ T29] audit: type=1326 audit(1761219706.665:3684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6459 comm="syz.2.940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc08840efc9 code=0x7ffc0000 [ 87.099100][ T29] audit: type=1326 audit(1761219706.665:3685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6459 comm="syz.2.940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fc08840efc9 code=0x7ffc0000 [ 87.122438][ T29] audit: type=1326 audit(1761219706.665:3686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6459 comm="syz.2.940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc08840efc9 code=0x7ffc0000 [ 87.145882][ T29] audit: type=1326 audit(1761219706.665:3687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6459 comm="syz.2.940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc08840efc9 code=0x7ffc0000 [ 87.169197][ T29] audit: type=1326 audit(1761219706.665:3688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6459 comm="syz.2.940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc08840efc9 code=0x7ffc0000 [ 87.192491][ T29] audit: type=1326 audit(1761219706.665:3689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6459 comm="syz.2.940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc08840efc9 code=0x7ffc0000 [ 87.216009][ T29] audit: type=1326 audit(1761219706.665:3690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6459 comm="syz.2.940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc08840efc9 code=0x7ffc0000 [ 87.239452][ T29] audit: type=1326 audit(1761219706.665:3691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6459 comm="syz.2.940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc08840efc9 code=0x7ffc0000 [ 87.292656][ T6460] loop2: p1 p3 p4 < > [ 87.297294][ T6460] loop2: p1 start 4261412864 is beyond EOD, truncated [ 87.304128][ T6460] loop2: p3 start 2164260864 is beyond EOD, truncated [ 87.316149][ T6471] loop0: detected capacity change from 0 to 128 [ 87.333110][ T6473] siw: device registration error -23 [ 87.343575][ T6475] program syz.1.944 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 87.383552][ T6477] hub 1-0:1.0: USB hub found [ 87.400036][ T6477] hub 1-0:1.0: 8 ports detected [ 87.426429][ T6477] lo speed is unknown, defaulting to 1000 [ 87.468384][ T6483] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6483 comm=syz.2.947 [ 87.537010][ T6490] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6490 comm=syz.4.945 [ 87.555114][ T6477] loop4: detected capacity change from 0 to 512 [ 87.567215][ T6477] EXT4-fs error (device loop4): ext4_xattr_inode_iget:446: comm syz.4.945: error while reading EA inode 32 err=-116 [ 87.585119][ T6477] EXT4-fs (loop4): Remounting filesystem read-only [ 87.591976][ T6477] EXT4-fs warning (device loop4): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 87.602140][ T6477] EXT4-fs (loop4): 1 orphan inode deleted [ 87.636630][ T6477] netlink: 'syz.4.945': attribute type 4 has an invalid length. [ 87.717037][ T6500] lo speed is unknown, defaulting to 1000 [ 87.813848][ T6516] loop4: detected capacity change from 0 to 128 [ 87.828259][ T6500] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6500 comm=syz.3.953 [ 87.846288][ T6516] bio_check_eod: 74 callbacks suppressed [ 87.846301][ T6516] syz.4.962: attempt to access beyond end of device [ 87.846301][ T6516] loop4: rw=2049, sector=154, nr_sectors = 6 limit=128 [ 87.865745][ T6516] syz.4.962: attempt to access beyond end of device [ 87.865745][ T6516] loop4: rw=2049, sector=158, nr_sectors = 2 limit=128 [ 87.879076][ T6516] buffer_io_error: 46 callbacks suppressed [ 87.879090][ T6516] Buffer I/O error on dev loop4, logical block 79, lost async page write [ 87.896774][ T6518] loop0: detected capacity change from 0 to 512 [ 87.903193][ T6500] loop3: detected capacity change from 0 to 512 [ 87.911975][ T6500] EXT4-fs error (device loop3): ext4_xattr_inode_iget:446: comm syz.3.953: error while reading EA inode 32 err=-116 [ 87.915413][ T6518] EXT4-fs (loop0): filesystem is read-only [ 87.924553][ T6500] EXT4-fs (loop3): Remounting filesystem read-only [ 87.936652][ T6516] syz.4.962: attempt to access beyond end of device [ 87.936652][ T6516] loop4: rw=2049, sector=160, nr_sectors = 2 limit=128 [ 87.950111][ T6516] Buffer I/O error on dev loop4, logical block 80, lost async page write [ 87.950295][ T6500] EXT4-fs warning (device loop3): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 87.959322][ T6516] syz.4.962: attempt to access beyond end of device [ 87.959322][ T6516] loop4: rw=2049, sector=162, nr_sectors = 6 limit=128 [ 87.983409][ T6516] syz.4.962: attempt to access beyond end of device [ 87.983409][ T6516] loop4: rw=2049, sector=166, nr_sectors = 2 limit=128 [ 87.993160][ T6518] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 87.996729][ T6516] Buffer I/O error on dev loop4, logical block 83, lost async page write [ 88.014893][ T6500] EXT4-fs (loop3): 1 orphan inode deleted [ 88.016126][ T6516] syz.4.962: attempt to access beyond end of device [ 88.016126][ T6516] loop4: rw=2049, sector=168, nr_sectors = 2 limit=128 [ 88.035113][ T6516] Buffer I/O error on dev loop4, logical block 84, lost async page write [ 88.046584][ T6516] syz.4.962: attempt to access beyond end of device [ 88.046584][ T6516] loop4: rw=2049, sector=186, nr_sectors = 6 limit=128 [ 88.046809][ T6518] EXT4-fs (loop0): filesystem is read-only [ 88.060284][ T6516] syz.4.962: attempt to access beyond end of device [ 88.060284][ T6516] loop4: rw=2049, sector=190, nr_sectors = 2 limit=128 [ 88.065779][ T6518] EXT4-fs (loop0): orphan cleanup on readonly fs [ 88.079034][ T6516] Buffer I/O error on dev loop4, logical block 95, lost async page write [ 88.094399][ T6516] syz.4.962: attempt to access beyond end of device [ 88.094399][ T6516] loop4: rw=2049, sector=192, nr_sectors = 2 limit=128 [ 88.107735][ T6516] Buffer I/O error on dev loop4, logical block 96, lost async page write [ 88.116399][ T6518] EXT4-fs error (device loop0): ext4_orphan_get:1392: inode #16: comm syz.0.961: iget: bad i_size value: 648518346341360424 [ 88.116873][ T6516] syz.4.962: attempt to access beyond end of device [ 88.116873][ T6516] loop4: rw=2049, sector=194, nr_sectors = 6 limit=128 [ 88.132887][ T6500] netlink: 'syz.3.953': attribute type 4 has an invalid length. [ 88.143108][ T6516] Buffer I/O error on dev loop4, logical block 99, lost async page write [ 88.158819][ T6516] Buffer I/O error on dev loop4, logical block 100, lost async page write [ 88.165260][ T6518] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.961: couldn't read orphan inode 16 (err -117) [ 88.168555][ T6516] Buffer I/O error on dev loop4, logical block 111, lost async page write [ 88.187618][ T6516] Buffer I/O error on dev loop4, logical block 112, lost async page write [ 88.203777][ T6524] hub 1-0:1.0: USB hub found [ 88.209938][ T6524] hub 1-0:1.0: 8 ports detected [ 88.244754][ T6524] lo speed is unknown, defaulting to 1000 [ 88.408182][ T6551] loop4: detected capacity change from 0 to 512 [ 88.415301][ T6551] EXT4-fs: Ignoring removed bh option [ 88.426964][ T6551] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 88.438933][ T6524] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6524 comm=syz.1.964 [ 88.472454][ T6524] loop1: detected capacity change from 0 to 512 [ 88.472559][ T6554] __nla_validate_parse: 16 callbacks suppressed [ 88.472661][ T6554] netlink: 12 bytes leftover after parsing attributes in process `syz.2.977'. [ 88.485121][ T6555] loop3: detected capacity change from 0 to 2048 [ 88.495588][ T6551] EXT4-fs (loop4): 1 truncate cleaned up [ 88.508591][ T6524] EXT4-fs error (device loop1): ext4_xattr_inode_iget:446: comm syz.1.964: error while reading EA inode 32 err=-116 [ 88.522285][ T6524] EXT4-fs (loop1): Remounting filesystem read-only [ 88.528876][ T6524] EXT4-fs warning (device loop1): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 88.552427][ T6524] EXT4-fs (loop1): 1 orphan inode deleted [ 88.568322][ T6524] netlink: 'syz.1.964': attribute type 4 has an invalid length. [ 88.582155][ T6559] loop2: detected capacity change from 0 to 512 [ 88.597759][ T6559] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 88.633658][ T6568] netlink: 28 bytes leftover after parsing attributes in process `syz.1.982'. [ 88.636706][ T6559] ext4 filesystem being mounted at /207/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 88.656268][ T6571] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6571 comm=syz.4.979 [ 88.674275][ T6568] hub 1-0:1.0: USB hub found [ 88.679010][ T6568] hub 1-0:1.0: 8 ports detected [ 88.708369][ T6568] lo speed is unknown, defaulting to 1000 [ 88.806699][ T6576] lo speed is unknown, defaulting to 1000 [ 88.967036][ T6568] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6568 comm=syz.1.982 [ 88.996260][ T6580] lo speed is unknown, defaulting to 1000 [ 89.035644][ T6581] pimreg: entered allmulticast mode [ 89.043256][ T6568] loop1: detected capacity change from 0 to 512 [ 89.075219][ T6568] EXT4-fs error (device loop1): ext4_xattr_inode_iget:446: comm syz.1.982: error while reading EA inode 32 err=-116 [ 89.088803][ T6568] EXT4-fs (loop1): Remounting filesystem read-only [ 89.105020][ T6579] pimreg: left allmulticast mode [ 89.106874][ T6568] EXT4-fs warning (device loop1): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 89.126250][ T6568] EXT4-fs (loop1): 1 orphan inode deleted [ 89.152135][ T6568] netlink: 'syz.1.982': attribute type 4 has an invalid length. [ 89.193412][ T6588] hub 1-0:1.0: USB hub found [ 89.209932][ T6588] hub 1-0:1.0: 8 ports detected [ 89.231603][ T6592] netlink: 12 bytes leftover after parsing attributes in process `syz.1.989'. [ 89.237123][ T6594] loop2: detected capacity change from 0 to 2048 [ 89.264675][ T6588] lo speed is unknown, defaulting to 1000 [ 89.303377][ T6596] netlink: 4 bytes leftover after parsing attributes in process `syz.1.991'. [ 89.313751][ T6599] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6599 comm=syz.0.987 [ 89.347997][ T6588] loop0: detected capacity change from 0 to 512 [ 89.360425][ T6588] EXT4-fs error (device loop0): ext4_xattr_inode_iget:446: comm syz.0.987: error while reading EA inode 32 err=-116 [ 89.373090][ T6588] EXT4-fs (loop0): Remounting filesystem read-only [ 89.379765][ T6588] EXT4-fs warning (device loop0): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 89.390246][ T6588] EXT4-fs (loop0): 1 orphan inode deleted [ 89.415096][ T6588] netlink: 'syz.0.987': attribute type 4 has an invalid length. [ 89.486627][ T6610] loop4: detected capacity change from 0 to 2048 [ 89.546454][ T6619] hub 1-0:1.0: USB hub found [ 89.570883][ T6619] hub 1-0:1.0: 8 ports detected [ 89.578419][ T6622] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1000'. [ 89.603607][ T6622] hub 1-0:1.0: USB hub found [ 89.608326][ T6622] hub 1-0:1.0: 8 ports detected [ 89.619511][ T6619] lo speed is unknown, defaulting to 1000 [ 89.660788][ T6627] loop1: detected capacity change from 0 to 2048 [ 89.687494][ T6628] loop2: detected capacity change from 0 to 2048 [ 89.700370][ T6622] lo speed is unknown, defaulting to 1000 [ 89.708494][ T6628] ext4: Unknown parameter 'fowner<00000000000000000000' [ 89.737923][ T6619] loop0: detected capacity change from 0 to 512 [ 89.773717][ T6636] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1004'. [ 89.784195][ T6612] netlink: 24 bytes leftover after parsing attributes in process `syz.2.995'. [ 89.784198][ T6619] EXT4-fs error (device loop0): ext4_xattr_inode_iget:446: comm syz.0.998: error while reading EA inode 32 err=-116 [ 89.804180][ T6622] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6622 comm=syz.3.1000 [ 89.825983][ T6622] loop3: detected capacity change from 0 to 512 [ 89.836695][ T6619] EXT4-fs (loop0): Remounting filesystem read-only [ 89.843395][ T6619] EXT4-fs warning (device loop0): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 89.853584][ T6619] EXT4-fs (loop0): 1 orphan inode deleted [ 89.879955][ T6622] EXT4-fs error (device loop3): ext4_xattr_inode_iget:446: comm syz.3.1000: error while reading EA inode 32 err=-116 [ 89.895087][ T6642] x_tables: ip_tables: udp match: only valid for protocol 17 [ 89.902054][ T6619] netlink: 'syz.0.998': attribute type 4 has an invalid length. [ 89.913540][ T6622] EXT4-fs (loop3): Remounting filesystem read-only [ 89.920145][ T6622] EXT4-fs warning (device loop3): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 89.930517][ T6622] EXT4-fs (loop3): 1 orphan inode deleted [ 89.947412][ T6622] netlink: 'syz.3.1000': attribute type 4 has an invalid length. [ 89.973442][ T6636] hub 1-0:1.0: USB hub found [ 89.982617][ T6636] hub 1-0:1.0: 8 ports detected [ 89.988138][ T6644] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1006'. [ 90.033942][ T6652] hub 1-0:1.0: USB hub found [ 90.056837][ T6636] lo speed is unknown, defaulting to 1000 [ 90.072526][ T6652] hub 1-0:1.0: 8 ports detected [ 90.112239][ T6660] x_tables: ip_tables: udp match: only valid for protocol 17 [ 90.141914][ T6658] lo speed is unknown, defaulting to 1000 [ 90.256469][ T6664] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6664 comm=syz.1.1004 [ 90.307558][ T6665] loop0: detected capacity change from 0 to 512 [ 90.402081][ T6669] loop2: detected capacity change from 0 to 2048 [ 90.425585][ T6665] EXT4-fs error (device loop0): ext4_xattr_inode_iget:446: comm syz.0.1009: error while reading EA inode 32 err=-116 [ 90.441208][ T6670] loop1: detected capacity change from 0 to 512 [ 90.450227][ T6657] lo speed is unknown, defaulting to 1000 [ 90.464343][ T6665] EXT4-fs (loop0): Remounting filesystem read-only [ 90.472677][ T6670] EXT4-fs error (device loop1): ext4_xattr_inode_iget:446: comm syz.1.1004: error while reading EA inode 32 err=-116 [ 90.486080][ T6665] EXT4-fs warning (device loop0): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 90.502812][ T6665] EXT4-fs (loop0): 1 orphan inode deleted [ 90.512648][ T6670] EXT4-fs (loop1): Remounting filesystem read-only [ 90.524582][ T6670] EXT4-fs warning (device loop1): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 90.535566][ T6670] EXT4-fs (loop1): 1 orphan inode deleted [ 90.567774][ T6676] process 'syz.2.1013' launched '/dev/fd/4' with NULL argv: empty string added [ 90.583036][ T6652] netlink: 'syz.0.1009': attribute type 4 has an invalid length. [ 90.595173][ T3544] ================================================================== [ 90.603274][ T3544] BUG: KCSAN: data-race in fill_mg_cmtime / shmem_mknod [ 90.610230][ T3544] [ 90.612553][ T3544] write to 0xffff8881023abb14 of 4 bytes by task 3504 on cpu 1: [ 90.620268][ T3544] shmem_mknod+0x137/0x180 [ 90.624692][ T3544] shmem_create+0x34/0x50 [ 90.629032][ T3544] path_openat+0x1105/0x2170 [ 90.633712][ T3544] do_filp_open+0x109/0x230 [ 90.638211][ T3544] do_sys_openat2+0xa6/0x110 [ 90.642796][ T3544] __x64_sys_openat+0xf2/0x120 [ 90.647546][ T3544] x64_sys_call+0x2eab/0x3000 [ 90.652215][ T3544] do_syscall_64+0xd2/0x200 [ 90.656702][ T3544] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 90.662583][ T3544] [ 90.664891][ T3544] read to 0xffff8881023abb14 of 4 bytes by task 3544 on cpu 0: [ 90.672420][ T3544] fill_mg_cmtime+0x5b/0x260 [ 90.676997][ T3544] generic_fillattr+0x24a/0x340 [ 90.681923][ T3544] shmem_getattr+0x181/0x200 [ 90.686498][ T3544] vfs_getattr_nosec+0x146/0x1e0 [ 90.691421][ T3544] vfs_statx+0x113/0x390 [ 90.695649][ T3544] vfs_fstatat+0x115/0x170 [ 90.700068][ T3544] __se_sys_newfstatat+0x55/0x260 [ 90.705099][ T3544] __x64_sys_newfstatat+0x55/0x70 [ 90.710120][ T3544] x64_sys_call+0x135a/0x3000 [ 90.714788][ T3544] do_syscall_64+0xd2/0x200 [ 90.719272][ T3544] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 90.725149][ T3544] [ 90.727472][ T3544] value changed: 0x0f7fe94d -> 0x0f84aebf [ 90.733181][ T3544] [ 90.735487][ T3544] Reported by Kernel Concurrency Sanitizer on: [ 90.741621][ T3544] CPU: 0 UID: 0 PID: 3544 Comm: udevd Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 90.752459][ T3544] Tainted: [W]=WARN [ 90.756243][ T3544] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 90.766281][ T3544] ================================================================== [ 90.774708][ T6636] netlink: 'syz.1.1004': attribute type 4 has an invalid length. [ 91.085205][ T6681] lo speed is unknown, defaulting to 1000