last executing test programs: 18.509505423s ago: executing program 2 (id=1065): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000180)={r0}, 0x4) socket$nl_rdma(0x10, 0x3, 0x14) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000400)={'erspan0\x00', &(0x7f00000004c0)={'gretap0\x00', 0x0, 0x700, 0x10, 0x4, 0x9, {{0x1e, 0x4, 0x2, 0x8, 0x78, 0x64, 0x0, 0x3, 0x4, 0x0, @rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@end, @timestamp={0x44, 0x14, 0x20, 0x0, 0x6, [0x1, 0x2, 0x31fc9664, 0x8]}, @rr={0x7, 0x13, 0x92, [@loopback, @private=0xa010100, @broadcast, @dev={0xac, 0x14, 0x14, 0xf}]}, @timestamp_addr={0x44, 0x2c, 0xe0, 0x1, 0x6, [{@multicast2}, {@local, 0x9}, {@dev={0xac, 0x14, 0x14, 0x16}, 0x9}, {@empty, 0x100}, {@multicast1, 0x4}]}, @rr={0x7, 0xf, 0x55, [@local, @private=0xa010100, @remote]}]}}}}}) r1 = gettid() timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x40000) readv(r2, &(0x7f0000000080)=[{&(0x7f0000000380)=""/79, 0x4f}], 0x1) 17.658845164s ago: executing program 2 (id=1069): write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000003680)='sched_switch\x00', r0}, 0x10) socket$kcm(0x10, 0x2, 0x0) socket$packet(0x11, 0x3, 0x300) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket(0x22, 0x2, 0x3) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="000400"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x1f, 0xc, &(0x7f00000006c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xbed}, [@map_val={0x18, 0x8, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffd}, @generic={0x9, 0x0, 0x2, 0x5}, @exit, @alu={0x4, 0x1, 0x4, 0xb, 0x2, 0x8, 0x8}, @cb_func={0x18, 0x3, 0x4, 0x0, 0x7}, @jmp={0x5, 0x0, 0x7, 0x4, 0x3, 0xfffffffffffffff8, 0x4}]}, &(0x7f0000000180)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41100, 0x34, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup(r2) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet6_sctp(0xa, 0x5, 0x84) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$xdp(0x2c, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket$netlink(0x10, 0x3, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000280)=@raw={'raw\x00', 0x41, 0x3, 0x240, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x1a8, 0x1f0, 0x1f0, 0x1a8, 0x1f0, 0x3, 0x0, {[{{@ip={@dev, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'wlan1\x00', 'wg1\x00', {}, {}, 0x6, 0x0, 0x5c}, 0x0, 0x70, 0xd8, 0x0, {0x0, 0xffffffffa0028000}}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x2, 0x8001, 0x9, 0x2, '\x00', 'syz1\x00', {0x8}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'vlan0\x00'}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x16], 0x0, 0x1000}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2a0) socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) 17.572410785s ago: executing program 2 (id=1070): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000000)={[{@errors_continue}]}, 0x1, 0x4cc, &(0x7f0000001380)="$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") socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8e7, @void, @value}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000700), &(0x7f0000000540), 0x103, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000a00)='./bus\x00', 0x0, &(0x7f0000000080)={[{@errors_remount}, {@resuid}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1ff}}, {@noblock_validity}]}, 0x3, 0x488, &(0x7f0000001340)="$eJzs3M1vFOUfAPDvTLuF/oBfq+ILL2oVjQ1qSwGVgwc1mnjAxEQPGk9NWwhSqKE1EUIUjMGTMSbejUf/BU96MUYvJl71bkiI6QXw4prZnWl3l90tLbtdYD+fZOB55qXP99uZZ/eZeXYbQN8ay/5JIrZHxB8RMVKt1u8wVv3v2vL5mevL52eSKJff+jup7Hd1+fxMsWtx3La8Mp5GpJ8lsadJu4tnz52cnp+fO5PXJ5dOfTC5ePbcsydOTR+fOz53+uCRI4cPTb3w/MHnmgc+tL48s5iu7v54Ye+u19/96o2jX9Tl35BHh4y12/hkudzh5nprR005GexhIKzLQERkp6tU6f8jMRCrJ28kXvu0p8EBXVUul8vbWm++UG6QNq4A7mBJ1Ndv6PLAXap4o8/uf4ulcRDwUveGHz135eXqDVCW97V8qW4ZjDTfp9Rwf9tJYxHxzoV/vsmW6M5zCACAOj9k459nmo3/0nigZr//53NDoxFxT0TcGxH3RcTOiLg/orLvgxHxUOXIWBk7raVxkuTG8U96+ZYSXEM2/nsxn9sazsZ/pZV2i8LoQF7bUcm/lBw7MT93IP+djEdpS1afatPGj6/+/mWrbbXjv2zJ4ijGgnkclwe31B8zO700vfGM6125GLF7sMi1dvybrMwEJBGxKyJ2b7CNE/u/29tq29r5t9GBeabytxFPVc//hViuz7+QtJ+fnNwa83MHJour4ka//HbpzVbtV/Lfv8H8OyA7///Lr/9rzfMfTWrnaxfX38alPz9veU+z0et/KHm7Ui6mgT+aXlo6MxUxlBytBl27/uDqsUW92D/Lf3xfs/zTymtc8ZvYExHZRfxwRDwSEY/msT8WEY9HxL42+f/8yhPvN92Q3uL13wFZ/rPrOv+rhaFoXNO8MHDyp+/rGh1dLeb5X29//g9XSuP5mpt5/buZuDZ2NQMAAMCdJ42I7ZGkEyvlNJ2YqH5efmdEOr+wuPT0sYUPT89WvyMwGqW0eNI1UvM8dCq/ra/WL0ZE9aMFxfZD+XPjrweGK/WJmYX52V4nD31uW4v+n/lroNfRAV3n+1rQv/R/6F/N+v/WHsQBbD7v/9C/mvT/4V7EAWy+Zu//n7Q/5N9uxQJsrob+b9oP+sj67/9/fa8rgQCbrmX/v5v/8g9Q4fk/9KXF4Vj7S/JtC8VP2uDht0shiYiO/sAo3RZ53XqhnDQ9uZFmhdLtEKFCFwq9fV0CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADolP8CAAD//3fv18M=") r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$FS_IOC_GETFSMAP(r2, 0xc0c0583b, &(0x7f0000000340)={0x0, 0x2904c, 0x0, 0x10003, '\x00', [{0x0, 0x5, 0x0, 0xfffffffffffffffb}, {0xffffffff, 0xddd4, 0x9, 0x100000000002}]}) 17.480727937s ago: executing program 2 (id=1074): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000", @ANYBLOB, @ANYRES32=0x0], 0x48) io_setup(0x23, 0x0) io_submit(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x4}, 0x4110, 0x6, 0x7, 0x9, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0x80000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f00000001c0)='cpu&00\t&&') syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x3000000, &(0x7f0000000200)={[{@nobarrier}, {@dioread_nolock}]}, 0x1, 0x527, &(0x7f0000019580)="$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") r1 = open(&(0x7f0000000180)='./file1\x00', 0x0, 0x104) ioctl$EXT4_IOC_GROUP_ADD(r1, 0xc0185879, &(0x7f0000000100)={0x8003, 0x1000, 0x2000, 0x0, 0x0, 0x0, 0x2401}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1345, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) writev(r2, &(0x7f0000000140)=[{&(0x7f0000000100)="89e7ee0000000000000004c988a8", 0xe}], 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$netlink(0x10, 0x3, 0x8000000004) setreuid(0x0, 0x0) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) request_key(&(0x7f00000003c0)='asymmetric\x00', &(0x7f0000000400)={'syz', 0x3}, 0x0, 0xfffffffffffffffe) ptrace(0x11, r6) unshare(0x2040400) writev(r5, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000200040010000800014004000000", 0x58}], 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00000005000000020000000400000005000000", @ANYRES32, @ANYBLOB="000000000005", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) ioctl$sock_inet_SIOCSIFNETMASK(r4, 0x891c, &(0x7f0000000000)={'macvlan0\x00', {0x2, 0x4e22, @local}}) socket$packet(0x11, 0x2, 0x300) 16.851573524s ago: executing program 2 (id=1078): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_SET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000c00)=ANY=[@ANYBLOB="ac020000", @ANYRES16=r1, @ANYBLOB="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"], 0x2ac}}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)=@newtfilter={0x54, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r5, {0x5, 0x7}, {0x0, 0xfff1}, {0xa, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x20, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x1c, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x2}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x8}]}]}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x200c0e9}, 0x20000004) 15.70351386s ago: executing program 2 (id=1085): r0 = socket$packet(0x11, 0x3, 0x300) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRESOCT=r1, @ANYBLOB="0000000000000000b7080080000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703b7040000000000008500000001000000950000000000005be1c3496977f6c9e9cd40cf4d97a854770023fa7227f9f15a221d5fa7052bff4e9e8dea35"], &(0x7f0000001b80)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x101900, 0x0) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f0000000080)) ioctl$PPPIOCSMAXCID(r3, 0x40047451, &(0x7f0000000100)=0xffff0000) ioctl$PPPIOCSMAXCID(r3, 0x40047451, &(0x7f0000002540)=0x1) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req={0x8000, 0xb4f, 0x300, 0x1daf6}, 0x10) unshare(0x8000400) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/rcu_expedited', 0x200000, 0x0) copy_file_range(r4, 0x0, r4, 0x0, 0x7, 0x700) syz_emit_ethernet(0x5a, &(0x7f0000000680)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000008004500004c0000000000069078ac1414bbac1414aa4e2000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="ec0800e88f78000013020034fba73f0324d7d80284224a8765f81d1291d785d58954605c802acf9f965fe399"], 0x0) io_setup(0x6, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000000)={r4, &(0x7f00000003c0)="afae0d7f4acef884a3ddba024fdfc5900501e74e233e311e15eaaabbc1abb983662085193668b538205696e38f7e62457aace5b2fd960a1e4ebc827e172ffb0aeed69b98073da34ffa363ac0c586b90c67babdb4c4e1e7ee2e8870f89fc547d89710f04b23bb807770e6fcf664ad3e44cac8b243b8342ca00ea168231e7d3f9184285350c8a2f7a1a4f4eea602280a10ebc06353c2b9de9d50338395abf416d17a8f55899a18dff79e029904def884c9f05605449afa823fd8880be3747860d0055ba0", &(0x7f0000000580)=""/157}, 0x20) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000140)=ANY=[@ANYRESDEC=r0, @ANYRES32, @ANYRES32], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x2d) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) 15.6776888s ago: executing program 32 (id=1085): r0 = socket$packet(0x11, 0x3, 0x300) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRESOCT=r1, @ANYBLOB="0000000000000000b7080080000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703b7040000000000008500000001000000950000000000005be1c3496977f6c9e9cd40cf4d97a854770023fa7227f9f15a221d5fa7052bff4e9e8dea35"], &(0x7f0000001b80)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x101900, 0x0) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f0000000080)) ioctl$PPPIOCSMAXCID(r3, 0x40047451, &(0x7f0000000100)=0xffff0000) ioctl$PPPIOCSMAXCID(r3, 0x40047451, &(0x7f0000002540)=0x1) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req={0x8000, 0xb4f, 0x300, 0x1daf6}, 0x10) unshare(0x8000400) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/rcu_expedited', 0x200000, 0x0) copy_file_range(r4, 0x0, r4, 0x0, 0x7, 0x700) syz_emit_ethernet(0x5a, &(0x7f0000000680)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000008004500004c0000000000069078ac1414bbac1414aa4e2000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="ec0800e88f78000013020034fba73f0324d7d80284224a8765f81d1291d785d58954605c802acf9f965fe399"], 0x0) io_setup(0x6, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000000)={r4, &(0x7f00000003c0)="afae0d7f4acef884a3ddba024fdfc5900501e74e233e311e15eaaabbc1abb983662085193668b538205696e38f7e62457aace5b2fd960a1e4ebc827e172ffb0aeed69b98073da34ffa363ac0c586b90c67babdb4c4e1e7ee2e8870f89fc547d89710f04b23bb807770e6fcf664ad3e44cac8b243b8342ca00ea168231e7d3f9184285350c8a2f7a1a4f4eea602280a10ebc06353c2b9de9d50338395abf416d17a8f55899a18dff79e029904def884c9f05605449afa823fd8880be3747860d0055ba0", &(0x7f0000000580)=""/157}, 0x20) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000140)=ANY=[@ANYRESDEC=r0, @ANYRES32, @ANYRES32], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x2d) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) 2.124150183s ago: executing program 0 (id=1275): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x8, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000059c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='sched_switch\x00', r1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8c}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x8) mount$bind(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)='./control\x00', 0x0, 0x2000, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) 1.890543396s ago: executing program 0 (id=1277): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x26) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r1}, 0x18) r3 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) writev(r3, &(0x7f0000000040)=[{&(0x7f0000002500)='\f7', 0x2}, {&(0x7f0000000000)='0', 0x1}], 0x2) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f0000000180)={0x0, 0x0}) fcntl$lock(r2, 0x25, &(0x7f0000000200)={0x0, 0x3, 0x2, 0x48, r4}) 1.843121317s ago: executing program 0 (id=1278): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000180)={r0}, 0x4) socket$nl_rdma(0x10, 0x3, 0x14) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000400)={'erspan0\x00', &(0x7f00000004c0)={'gretap0\x00', 0x0, 0x700, 0x10, 0x4, 0x9, {{0x1f, 0x4, 0x2, 0x8, 0x7c, 0x64, 0x0, 0x3, 0x4, 0x0, @rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@end, @ra={0x94, 0x4}, @timestamp={0x44, 0x14, 0x20, 0x0, 0x6, [0x1, 0x2, 0x31fc9664, 0x8]}, @rr={0x7, 0x13, 0x92, [@loopback, @private=0xa010100, @broadcast, @dev={0xac, 0x14, 0x14, 0xf}]}, @timestamp_addr={0x44, 0x2c, 0xe0, 0x1, 0x6, [{@multicast2}, {@local, 0x9}, {@dev={0xac, 0x14, 0x14, 0x16}, 0x9}, {@empty, 0x100}, {@multicast1, 0x4}]}, @rr={0x7, 0xf, 0x55, [@local, @private=0xa010100, @remote]}]}}}}}) r1 = gettid() timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000000040)) timer_settime(0x0, 0x0, 0x0, 0x0) r2 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x40000) readv(r2, &(0x7f0000000080)=[{&(0x7f0000000380)=""/79, 0x4f}], 0x1) 1.539188111s ago: executing program 1 (id=1284): bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x11ff, &(0x7f0000001280)="$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") r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000002c0)='kfree\x00', r1}, 0x10) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000000c0)="d800000018008103e00312ba0d8105040a600300ff0f040b067c55a1bc000900b80006990700000015000500fef32702d3001500030001400200000901ac040098007f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04000000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b66bce0b42a9ecbee5de6ccd40dd6e4edef3d93452a92307f00000e970300"/216, 0xd8}], 0x1}, 0x48002) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[], 0x48) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28, 0x7ff}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r6, {0x8, 0x7}, {}, {0xa, 0xfff2}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x10, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x30, 0x1}]}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) socket$inet6(0xa, 0x5, 0x7c2) r7 = gettid() perf_event_open(&(0x7f0000000140)={0x4, 0x80, 0x68, 0x0, 0xff, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x0, 0x8, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x11, 0x800000000004, @tid=r7}, &(0x7f0000bbdffc)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_netfilter(0x10, 0x3, 0xc) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 1.285223224s ago: executing program 5 (id=1290): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='stack\x00') (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) writev(r1, &(0x7f00000002c0)=[{&(0x7f0000001600)="5627352e0624e8eb3fe63341ab46a4ff4ae379eb0597e7fe941dd23d40c11cd56fdada937860c5d001474db12af6842d7d127e1515beea19421210cd348a6a03d718db42b6372e791c8e58e570982efb73497543372c696637434c73f1b4b3ce042a0fcb4b084d22edfc35a0ad9b97d3bb9228722fd168c99f8224e8d85fecd29f04bcd9a710202b08e7eac869b5d2202eb10339f73c34a1989049bbfc6b0c4cbd9a31c8c5f527e6a822d006a0505cb3e0e6d82dd1d909e99df648b8e771698b32914e3cbd709511bd92ffef64bde6ff37fc451726f7959a0253aa6623e69d26b437fd8c9cbdbb144d6fb6e2cae3e815bf4a94e256ef85ba6ab9046f613d3b4a98872e9f93dee50a19bd2ddc6806617f7beece52a103e40655d86c6bba06eedcec5c1fb1796b19f823cfa112f0636938798203009c9cf56b67908b4755833b5643a2ef675da3a77e6182c144d79e0a559c90fa6b1947a63eace47080bf3620deb276091793477ca8a6d9262cf97b5dd28e723c395e9737d2c1cd7bc6fa03d40bb3dd2dfb20679e8af1f245b2aa3dc5cc5206136a4b76289524adc5cb65ff37e34aaee4f272c5727c54258bbbea704c156dad90f7e76d8c6e3c71042b60e7159014682caf3953a302bbc262e7088ec429990cc94633d8685fd3a713cfed7c2337c1201e08b1003b8273a689b419c77c39c60bf543fb2d53d92977e45b95f1c19732940da59bb94d920543446cca4f3ec3fe25cc69071077acf5a5249ae434c6e5d58d91366362a94209150f118d01dae6c340c3d3ae6016df41164ebb7bcca68206dace623a12e1e0607bc3b788a326df5d553a13ebd37a5a57452d90398d4f607cd2bf008f0233e624df251cc764356ac22c620fae7b4611c6781667ed1650cdad6805b49a236838190f7fa5bd7e31511e31f343ba0a80e19c01bf793d14409ce42e49caa17aef45237d92366393fbaa2dc0f21b1edc2caabfa1987c709d3e50407d78dcff348f7a6b7211b2c6f8bad1223ddb5b80a11d4285dfaa3a46f460632e56e6705653037046be6f7d85bf9d51e8c5591544e6a1d312bc62852026133ad4f8d3bb382314fbfbfa7e84acf2a5a27e0bc2de7fa5a2eb894efb2bde34db71554c6289d99c22343ff4948957cb33fee11ba4b72ef9fdac95b47c32f72b278e1dc0cd5f906974634ef7f8189e63e266cd9abd2452c0cd4b9964ea25f5c3edbe678bf4cdf2d0dd9418842195979b0dca4e4b246003740988be904bdf22b54022c7e1dedb7ac77369e1678b07ca574fc950b068a1518f8ecfc9a457d429f8d574f40e9951e66289e2645e4696184769dd2ddf99631247b89b2994fd526c8371ad2137d785629b84d283e6cd92f7cd70ccc27cb7d67436065147e6390bb69a046eae5039fbc21f2b0e35ca9255780cc1b36a42c031e67fe9281e0b89d57cbca3e800ccb8ccdbb762f5f89e784cf56c3b81e764efba29c592516c0025de6cc182b90baabafb3222a85eadeb3504b9a25d747d1e93956242fbf5dc52c481067b02f41e002356b76a7c70531f6895f97465ee9a1303c98de4439edb32538e0a60fb14fada4059dea052d38fded1b5753387ebe433f4fcdd697cd3393c1e06c95e80e257df8288c3adb7129dcda2d9e1fc9b03638ab48c3c90a6b4802f2306d471da55a41e13a3b4326fef4a8c5ce0784fd832ca2e22842460bce02891ef7f2467a7e6afede02965452ddd7b4eb0c4b6a2ee33da83468500a8ad4a4b9a4dbaa8489a1d35c83151fadc6f2060c78cf68ae7ec23a0a193f3064300c80ff444cf69b8a9a6e1b30c61abd6c40da5b041ed697767d0a8f2e7d7a907612296911be8ea34bc7cfe6041eeefb83ffdc47eb3ecd62692a5f6e6063a9c4f652d3e58267bf91a068cca638eeae966b342b34cd04941a3cceaba7816673d593d8f2db5a488bb0cae39e66dce3ceda1e03e9959b7ff80af027a1fbdb8bffe808bdc218a0aafe950a4dd3846bdce99ff9ebbc8cec576d2fc5c62fdfc97b081c1594dc619009a04088bb9c430ea45f6b1f4f4ac7948c16ab6d7a7f062436663827e095435b251a4650e3fbebefb155402f4d4654926861a3232f531d34ee39e6ecdec6ec72ed27af7c4b515b85fc14d74128eb2d7a11812f712eace9e6a82e189ac38c5b79cb5ef5f5ce13139f2795590266426558b5d16d295d6857b161ea86471eea1a303ae70da25880880784a732ddae408632313b65a007ff8b537b525f50a87e4fd896987db9441f530e1c95ac85d9af7d0ad9e88bacd70ce8a947569d28ed14e3d214c05e48bcdb77345f11fa04e362da6019af4f78d969ed527f7017ff24d3fbf3723c103680d24d9b8eae2a6df39c8568ec35247c422fbcbdc1f1095f57a0e8c4fcbf1d4f17b6220534f1afd32ad6c2faff90e69f725ccc7fa7729394fcf27ff07522266cad28230bb2106b6550de825eb27852b51f373b2bbd97ed1d62e118450efe49b148ad5b45b129156816bba10a00fcf16fa2740c9459b51f32892bdd5de7689ed4db609e1411eb55178f7c521971405c791260f54be17da12714ef615d5b0c5beb944c365a47c63d641ed3c5267b9505f0e000c4e0679f22077257f561ecb5b517736472a07319295166a4e70f3135074fe34e28923e80c5a906c8f3c9f17573160af24dbec404b2edf3482902a8ac46cb533bf9e4aeef980c2e5c8488febceb1738bf7dfc416b0407db6cbf2ab0e4a54a85ff32b14553a48d41d92eed287de59d48f858ab6c586c4d7a9c6ded5916ebebeacf4788890a8588c5f6211b86b05bda2dd929b03e7180a78e829deff880124e0ea903bf0baa292927698f2d5d4772a08893a308154d81d8c9efcd7fa22ec41fd12876d65ddd3eba44885baaaa5185ad0be582a0f3c4c46e8d50c0597482c61943d194c47a5a0335bcd2c77733b7a140750e50b69131acfe7d6981c9cefe2f7b3eb18124943ea31c3afb46b24e2b1141523b86c0f53ed04ae2afd216e31c36d3c45d4b2ace8ba3ecedb22ea26e372ac55306ed502797833bfb6c21b99b6eaed07e62a3bfa95a5bd1c81d7853e9b65eaf5bdb438e9bd1cd365cb48eb5b4546cf306c412e95e90cbac761b4545b33eade959e90d5f46e1d97e2cced408d5a42abcaa31a1aff1f98149525e6e82bda75f98b751f3a6aa730f78fba0663abad63935440b2ba9305660b57b7a76102c18b6a3105c34926d26181cb5bcc27b6271c3b4c0455165092e9ce989b2a4ca2ecf7debc6033dabc80da0598117735b3b90e0f7f9d8652a139759c1610d51358b9aff734176dd46d4e5cf54143f2179ff867cb077b03a0e4e8e4f0fdf85ae90c808bf781899f7424da9a6c9c7dc0557af4f9ac3c55edfe07614716976cffdb97f71e1024452716d16239333593fdbafe2baa04d364842cecdd8ce981b5cc97cb5e74a332cb4bcfb75d6be6aa59d33f3f8efa74ea010cbab1dbde94f9e42167b7b797bd057896485f287e222515d1a768aca7e8137827b3bd01c9ad0472088c57e48ba25aee7e065a4a4e784817b51073f0472a2d4b1469286428f3dc5703954f795ed71f4b2077d04345e3c222aa53704c1534ca2531d89e601a359e5e499faf9480f0cbd18e0bdcd656c0775f7900dd11aab58ab1d9bb6b65d86765fa2230a0b977b1ec12398a3aba43ee853feed59c59dd8fe1c4525d8f0fe0ef6cd936c7ec1623705441ac84f4bd06718ef9cf550cf9c2880a08f70451f7c63eb422386bfa934eca6b957ffc3a54a72feca3729723c359b34d3d916fbb72969401620b71f67840b254b870ee3f07ac73c01ad26887ae56278e4add9512a28f2f965fc4f821f0a31098a36d1b0d9ee08dbef60590997b25d303d92a43301a664dfe48fff78adb59fd19814d2a2d36358964c78da24241d19389852a789bff086af91f9cf3abd8da3ce8e183fd2745378ebf25435fda95498f436079b660ddfe0d45777706865a2babd25afa2646bcf7fd018b9ed7f9f1404a93e5eb8d2b74ebece65e47a5da520b352ba9eb44639b5c68226b5ecedd044dcbf29fcccc8fa0c69aa62da0f19627c40f95a50d7830f190ac4a3901ecef08526f74aa58fd17dd8b9e0cb945724103d77fe93de3b3842cfd5e4f2c57eb2408a2ce67f1e82136b0f1bd3fc1b7ca50d2bb8dcabb12ffbd1868d7d8f37aaa6a5d44482e575854d724f7a96c1b03dfe912a6d8b12ebf0270ac0e2cac57b43fec1b9cdf6586a1757d55b577fabed19d87b78b49192bf0fca56a4e9ce0fc02fe2335df2c629eae3a07ba1fb63e305f5901b7e5035fd454e2d607e6b3c3cc5fdc82a64dc53df49c34d906d93173e08cfb1672534e08daa8d9dedf002422161fdfb32e433e23fa0eb828106afc6f0a18f6bb85949b3912eb46d879ec34039b6fba95217d3981401314a88b8f38c02501ad483cdb6c1613169d0fd58489bd5180103eab5b8e35c67eacd84a262f0a94d8b08170f91d4103b534d36d9e03fd86b92284ecb96130c2f94e195d946358725cf8a59bba8fe1a07c22dc799e76fd2e9653242e629d521c18a20e9e07d4b10ebb67c18dce9989dadc4c11dd9586a33c700fd8ab9bb0e1a83311fa36ebc34ee4c2aed23be50775e582dcca2585a11b6c55f560e16ad987ab9bab6e3bff4fffec6df87764e834e5d28cee41b32ee0d01199e60858de744e3d6a678565367d1388c580cc25b6e568ab10aad3b9939727787125763b455728331ed9f4452cfe6c220eaabb0c2b5cc071253cee5d99cec3fdad5b388d181d20648a8746e1e3e554a08f1b93705d661b043e3b59e01a4e5d0384db4391cb1fcd90c9777b0ee2ca003557076a69572ee830edc569d04728baa96bd2a1c1bb8c022d91e0a8bf598461442b94759021e40a1b065cea75c6b6cfb74039fcf267ad2fae6c0cc3a21445a39d202d7ae83df842609449939f4a510db2fbaa7013fd4243e2d7f32a9c7ba140e9aeb212b02a84edc45cb83df7943aefa5d0e7b775094df95d07b88cbbe3c562d237a5c81c6f34949aaa58c4d613d7437997d756bbac168b3d266312395d9afbd4f182f9ae3090a20e3fda149392e3d4c7c8b19c68051c6b0a208eff88318e55f915f8dd01855f83182fc34443e10dfa6f2132e09a398dfa6eab2cf60e14d8ff2356ae121d9178f27446618e2d94a7b2b37c11c1e0359b5ab739174132118d2feafe9b4d97e0d4f9756aa7567b3205e01f150a35ada87a29f6e815d5d3ccb733d39f2757365cf49fed73695994f35d20d1ffc1b6f3c9a3251e30aee879ae86dbd0658876d75f7ec0454b7ce1472bd29624ad5ed9d67673bfc10d6d93bace54e5e6627c1b69303e46f816ab60c9a07828f90c339ecb115b46e6137615d25bedad4c9e76837205eaed757fe3322b32e0f4f9255cd32bb9c151ad3db9f6cbaac4e6fee05865245436f1678a3740a8c000d66be3ca2e955e1239d51f3910ff57e0c797769bec81707a02eee6ebb384294cfbaaee76da48db0d0a1ec49dff4393e1fa68689896c8ce1e5f875dede024eee5e9980a5f06f192e0b55cdccbc7c4aaa7307733493678c59e476b610cd0d5ca3906a01074d693ef0807184f5fec83799f27efc9d017610a68ec4e32d7726ea290b4e02fd8b470537d592975ba4b3d7a47feafec93311359e4a76359898e02c70c8a60aca81a41f72c0f89bcc68ac3112b07ee2b18c830055fa3ac86763ddbe389fd50b8043dd6f6336bd7d8bf6aba4d02bd538d81c3c0b01c774d43fdebdc882ba5ed869a68ea1f34995a8142854670d57d1427a0441123fc22e5", 0x1000}], 0x1) (async) r2 = socket$kcm(0x2, 0x3, 0x2) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000200)={'bond0\x00', &(0x7f0000000640)=@ethtool_ts_info={0x41, 0x0, 0x500}}) (async) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b00)={0x11, 0x1b, &(0x7f0000000bc0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x7ff}, {}, {}, [@map_fd={0x18, 0x5, 0x1, 0x0, r1}, @map_fd={0x18, 0x0, 0x1, 0x0, r1}, @jmp={0x5, 0x0, 0x5, 0x8, 0x4, 0x100}, @cb_func={0x18, 0x8, 0x4, 0x0, 0xfffffffffffffff8}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}, @jmp={0x5, 0x0, 0x1, 0x4, 0x0, 0x6, 0xfffffffffffffffc}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}}}, &(0x7f0000000480)='GPL\x00', 0x0, 0xb3, &(0x7f00000004c0)=""/179, 0x41100, 0x21, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000840)={0x7, 0x2}, 0x8, 0x10, &(0x7f0000000880)={0x1, 0x5, 0xd4c2, 0x10}, 0x10, 0x0, 0x0, 0x2, &(0x7f00000008c0)=[r1, r1], &(0x7f0000000900)=[{0x2, 0x1, 0x3}, {0x1, 0x5, 0x9, 0xc}], 0x10, 0x7, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000980)='xprtrdma_createmrs\x00', r3, 0x0, 0x1000}, 0x18) preadv(r1, &(0x7f0000000440)=[{&(0x7f00000041c0)=""/4096, 0x1000}], 0x1, 0x1e, 0x20704513) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'macsec0\x00', 0xc201}) r4 = socket(0xa, 0x3, 0x3a) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) (async) recvmmsg(r4, &(0x7f0000001580)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}, 0xe}], 0x2, 0x2, 0x0) (async) r5 = socket$kcm(0x2, 0xa, 0x2) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000a3850000007000000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r6, 0x0, 0x6}, 0x18) (async) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000940)={0x0, 0x1400, &(0x7f0000000180)=[{&(0x7f00000001c0)="d80000001c0081064e81f782db44b9040a1d08040e00000000000aa1180002000600142603600e1208000f0000810401a8001605200001400200000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a985162756aa5e8d7ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) (async) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001"], 0xfdef) (async) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file1\x00', 0x4402, &(0x7f0000000ac0)=ANY=[@ANYRES16=0x0], 0x1, 0x288, &(0x7f0000000580)="$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") 1.179642215s ago: executing program 5 (id=1291): perf_event_open(&(0x7f0000000140)={0x3, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x8000, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3fffc, 0x2, @perf_config_ext={0xf60, 0x1}, 0x1100, 0x7, 0x3a65, 0x5, 0x0, 0x5, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) futex(&(0x7f0000000000), 0xc, 0x0, &(0x7f0000000040)={0x77359400}, &(0x7f0000000080), 0x1) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r1}, 0x10) ptrace$getregset(0x4204, r0, 0x202, &(0x7f0000000140)={0x0}) 1.178631615s ago: executing program 5 (id=1292): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x30, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0, 0x0, 0x9135}, 0x18) r1 = socket$inet_dccp(0x2, 0x6, 0x0) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000240)) setsockopt(r1, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) 1.174050015s ago: executing program 5 (id=1293): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c250000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r0}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x18, 0x7, &(0x7f0000000280)=ANY=[@ANYRES64=r1, @ANYRESOCT=0x0, @ANYRES16=r0, @ANYRESOCT=r0], &(0x7f0000000200)='GPL\x00', 0x4, 0x0, 0x0, 0x41100, 0x12, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000240)='fsi_master_aspeed_opb_error\x00', r3, 0x0, 0x6}, 0x18) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000000000000000000a9000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000500)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ec0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000a3850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r6}, 0x10) r7 = creat(&(0x7f0000000300)='./file0\x00', 0xe5) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x70, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, @void, @value}, 0x94) write$qrtrtun(r7, &(0x7f0000001880)="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", 0x45c) r9 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r8, 0x0, 0x30, 0xe1515f8735398fb, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000003c0)=[0x45c], 0x0, 0x0, 0x1, 0x1}}, 0x40) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000005c0)={r9, 0x0, 0x0}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r5}, 0x10) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f0000000140)) ioctl$PPPIOCSPASS(r4, 0x40107447, &(0x7f0000000180)={0x1, &(0x7f0000000000)=[{0x48, 0x0, 0x5, 0xe}]}) sendmsg$NFT_BATCH(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYRES16=r8], 0x250}, 0x1, 0x0, 0x0, 0x8000085}, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) r10 = getpid() madvise(&(0x7f0000a5e000/0x1000)=nil, 0x1000, 0x16) process_vm_readv(r10, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xc1d}}, './file0\x00'}) 1.032240457s ago: executing program 1 (id=1298): socket(0x10, 0x3, 0x0) r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x5, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x1100, 0x5dd8, 0x0, 0x0, 0x0, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffdfffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = openat$selinux_member(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$selinux_access(r2, &(0x7f00000004c0)=ANY=[@ANYBLOB="73797374656d5f753a6f626a6563745f723a7570647077645f657865635f742073797374656d5f753a73797374656d5f723afaffffffffff"], 0x56) 991.862617ms ago: executing program 5 (id=1300): socket$nl_netfilter(0x10, 0x3, 0xc) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x410003, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) r0 = io_uring_setup(0x1581, &(0x7f0000000a40)={0x0, 0x2000000, 0x40, 0x1000, 0x3bd}) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x62, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r2}, 0x10) r3 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r3, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) listen(r3, 0x3) r4 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r4, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r6) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet6(r1, &(0x7f0000000280)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f00000002c0)="9e", 0x1, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback, 0xe}, 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000300)={0x0, 0x200002, 0x30}, 0xc) sendmsg$inet6(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)='h', 0x34000}], 0x1}, 0x0) writev(r1, &(0x7f0000000100)=[{&(0x7f0000000040)=',', 0xfdef}], 0x1) close_range(r0, 0xffffffffffffffff, 0x0) 923.401198ms ago: executing program 4 (id=1301): bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000540)={0xffffffffffffffff, 0xe0, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, &(0x7f0000000380)=[0x0, 0x0, 0x0], &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x1a, &(0x7f0000000440)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000480), &(0x7f00000004c0), 0x8, 0x19, 0x8, 0x8, &(0x7f0000000500)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000006c0)=ANY=[@ANYRES16=r0, @ANYRES32, @ANYBLOB="00007f3a948e09e09e41cbcf17d73506d4bb000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x39, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sys_enter\x00', r2}, 0x10) (async) r3 = getpid() (async) r4 = gettid() tgkill(r3, r4, 0x3c) (async) socket$netlink(0x10, 0x3, 0x2) (async) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') (async) r5 = fsopen(&(0x7f0000000180)='ntfs3\x00', 0x0) r6 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000580)=ANY=[@ANYBLOB, @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={r6, &(0x7f0000000340), &(0x7f00000001c0)=@tcp}, 0x20) r7 = fsmount(r5, 0x1, 0x70) (async) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r8}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2000008, &(0x7f00000003c0), 0x0, 0x52e, &(0x7f0000000f00)="$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") (async) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r9, &(0x7f0000000080)={0x10, 0x0, 0x0, 0xfffffffffffffffd}, 0xc) (async) r10 = socket$inet6(0xa, 0x2, 0x0) (async) r11 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0) (async) sendto$inet6(r10, 0x0, 0xffffff89, 0x8810, &(0x7f0000000080)={0xa, 0x4ea0, 0x4, @loopback={0xff00000000000000}, 0x2ab8f1b6}, 0x1c) (async) write$cgroup_subtree(r7, &(0x7f00000002c0)={[{0x2b, 'net_cls'}, {0x2b, 'pids'}, {0x2b, 'cpu'}, {0x41b0673ed1a83648, 'pids'}, {0x2d, 'io'}, {0x2b, 'perf_event'}, {0x2d, 'net_prio'}, {0x2d, 'blkio'}, {0x2b, 'rlimit'}, {0x2d, 'freezer'}]}, 0x4c) 922.806189ms ago: executing program 0 (id=1302): r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x22018, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000010c00)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) close(r0) r1 = perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0xb0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x18020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={&(0x7f0000000300), 0x1}, 0x800, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x65, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000a00), 0x1, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000007c0)=ANY=[], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r3, 0x0, 0x80000}, 0x18) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x402440, 0xc4) openat(r4, 0x0, 0x230000, 0xc) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) bind$inet(0xffffffffffffffff, 0x0, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f00000000c0)='{', 0x1, 0x41, 0x0, 0x0) ppoll(&(0x7f0000000040), 0x0, 0x0, 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r7, 0x0, 0x2}, 0x18) ioctl$TIOCL_SETSEL(r5, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x101, 0x300, 0x0, 0x101, 0x300}}) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r8 = io_uring_setup(0x3454, &(0x7f0000000340)={0x0, 0xffffeffe, 0x18, 0x2, 0x400}) io_uring_register$IORING_REGISTER_BUFFERS(r8, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) 861.467439ms ago: executing program 4 (id=1303): perf_event_open(&(0x7f0000000140)={0x3, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x8000, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3fffc, 0x2, @perf_config_ext={0xf60, 0x1}, 0x1100, 0x7, 0x3a65, 0x5, 0x0, 0x5, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) futex(&(0x7f0000000000), 0xc, 0x0, &(0x7f0000000040)={0x77359400}, &(0x7f0000000080), 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r1}, 0x10) ptrace$getregset(0x4204, r0, 0x202, &(0x7f0000000140)={0x0}) 832.99759ms ago: executing program 4 (id=1304): openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x200001, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x68, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x800000, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) 759.516921ms ago: executing program 1 (id=1305): ioperm(0x0, 0x5, 0x6) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x300) bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) r1 = bpf$TOKEN_CREATE(0x24, &(0x7f00000002c0)={0x0, r0}, 0x8) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x5, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x9, 0x4}]}]}, {0x0, [0x30, 0x2e, 0x0]}}, &(0x7f0000000780)=""/217, 0x31, 0xd9, 0x1, 0x3, 0x10000, @value=r1}, 0x28) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000200180000000000000000000850000007b00000095"], &(0x7f00000003c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x5, &(0x7f00000027c0)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='sys_enter\x00', r4}, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xa, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{r5}, &(0x7f0000000180), &(0x7f0000000200)=r6}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='itimer_state\x00', r7}, 0x10) setitimer(0x0, 0x0, 0x0) getgroups(0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={r3, 0xe0, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x9, &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000900)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xe3, &(0x7f0000000640)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000000680), &(0x7f00000006c0), 0x8, 0xb7, 0x8, 0x8, &(0x7f0000000700)}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000880)=r8, 0x4) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000001000/0x4000)=nil) brk(0x200000001000) 695.695131ms ago: executing program 1 (id=1306): prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) unshare(0x2c020400) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x0) pselect6(0x0, 0x0, 0x0, &(0x7f0000000240)={0x1f, 0x0, 0x0, 0x0, 0x0, 0x10}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) 602.643922ms ago: executing program 1 (id=1307): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014fa0000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r1}, 0x18) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r2) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000000400000008000200"], 0x24}}, 0x0) 576.992113ms ago: executing program 1 (id=1308): bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x11ff, &(0x7f0000001280)="$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") r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000002c0)='kfree\x00', r1}, 0x10) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000000c0)="d800000018008103e00312ba0d8105040a600300ff0f040b067c55a1bc000900b80006990700000015000500fef32702d3001500030001400200000901ac040098007f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04000000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b66bce0b42a9ecbee5de6ccd40dd6e4edef3d93452a92307f00000e970300"/216, 0xd8}], 0x1}, 0x48002) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[], 0x48) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28, 0x7ff}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r6, {0x8, 0x7}, {}, {0xa, 0xfff2}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x10, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x30, 0x1}]}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) socket$inet6(0xa, 0x5, 0x7c2) r7 = gettid() perf_event_open(&(0x7f0000000140)={0x4, 0x80, 0x68, 0x0, 0xff, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x0, 0x8, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x11, 0x800000000004, @tid=r7}, &(0x7f0000bbdffc)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_netfilter(0x10, 0x3, 0xc) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 525.764634ms ago: executing program 3 (id=1310): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x28c000, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f00000002c0)={&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000080)=""/232, 0xe8, 0x0, &(0x7f0000000200)=""/165, 0xa5}, &(0x7f0000000300)=0x40) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x0, 0x7, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000009000000000000001500000095000000000000003d7800000000000018190000", @ANYRES32=0x1, @ANYBLOB="0000000000000000950000000000000074f79be81446b877f3c1701bbd897f49f14ecb14e00979bacc8b297948e266d28983a4567cc86ce7224ebe07ebad6918c43fe26e65718ce73d21809a"], &(0x7f00000003c0)='syzkaller\x00', 0x3, 0x3e, &(0x7f0000000400)=""/62, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000440)={0x9, 0x3}, 0x8, 0x10, &(0x7f0000000480)={0x2, 0xe, 0x200, 0x7ff}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1], 0x0, 0x10, 0x6, @void, @value}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)=ANY=[@ANYBLOB="1400000000"], 0x14}, 0x1, 0x0, 0x0, 0x8044}, 0x4000000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000340)='objagg_obj_root_create\x00', r2, 0x0, 0x3}, 0x18) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x2) r3 = syz_open_procfs(0x0, &(0x7f0000000700)='net/rt_acct\x00') r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r4, 0x29, 0x2, &(0x7f0000000100)=0x2, 0x4) setsockopt$inet6_int(r4, 0x29, 0x42, &(0x7f0000000040)=0xf2b, 0x4) getsockopt$inet6_buf(r4, 0x29, 0x6, 0xfffffffffffffffd, &(0x7f0000000480)) fchdir(r3) r5 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='.\x00', 0x0, 0x0) lseek(r0, 0x548, 0x0) getdents(r5, 0x0, 0x58) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r7 = openat$cgroup_devices(r6, &(0x7f0000000100)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r7, &(0x7f00000000c0)=ANY=[@ANYBLOB='c *:* rwo'], 0xa) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000030000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000007c0)='GPL\x00', 0xfffffffe, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='kfree\x00', r9, 0x0, 0x2}, 0x18) r10 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$PIO_UNIMAP(r10, 0x4b67, &(0x7f0000000280)={0x1, &(0x7f00000001c0)=[{0xe9, 0x7}]}) readv(r0, &(0x7f0000000000)=[{&(0x7f0000001300)=""/244, 0x940}], 0x1) socket$inet_udp(0x2, 0x2, 0x0) 521.595554ms ago: executing program 4 (id=1311): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0x5, &(0x7f0000000180)=0xa, 0x4) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000740)='scsi_dispatch_cmd_start\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000740)='scsi_dispatch_cmd_start\x00', r3}, 0x10) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) r4 = getpid() r5 = socket$nl_generic(0x10, 0x3, 0x10) mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2, &(0x7f0000000140)=0x800, 0x0, 0x4) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r6, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r4}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x0) 390.059085ms ago: executing program 3 (id=1312): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = socket(0x1e, 0x4, 0x0) r2 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f00000003c0)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1, 0x0, 0x0, 0x10000000}}], 0x400000000000181, 0x9200000000000000) r3 = dup3(r2, r1, 0x0) recvmmsg$unix(r3, &(0x7f00000082c0)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000480)=""/4081, 0xff1}], 0x1}}], 0x1, 0x0, 0x0) 340.567606ms ago: executing program 3 (id=1313): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffdc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) open(&(0x7f0000000040)='./file0\x00', 0x248000, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000500)=@gcm_128={{0x303}, "a959fc5ec5071900", "8e083700daf38a6d69e9b5e9c2f133d7", "e2739528", "12772541f8ebfebb"}, 0x28) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000000), 0xffffff6a) sendfile(r3, r4, 0x0, 0xffffffff004) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=ANY=[@ANYBLOB="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"], 0x118}}, 0x0) shmget(0x1, 0x3000, 0x200, &(0x7f0000002000/0x3000)=nil) newfstatat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', &(0x7f0000000180), 0x100) r5 = getegid() getresuid(&(0x7f00000004c0)=0x0, &(0x7f0000000500), &(0x7f0000000540)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000580)={0x0, 0x0, 0x0}, &(0x7f00000005c0)=0xc) r8 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001940)=ANY=[@ANYBLOB="38000000031401002abd7000fedbdf250900020073727a3100000000080041007369770014003300626f6e643000000000", @ANYRESOCT], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x0) r9 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b70300000000"], &(0x7f0000001480)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000600)='kfree\x00', r10}, 0x18) creat(&(0x7f0000000040)='./bus\x00', 0x8) mount(&(0x7f0000000100), &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000300)='trans=rdma,') sendmsg$unix(0xffffffffffffffff, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000240)="a50769f9b1", 0x5}], 0x1, &(0x7f0000001780)=ANY=[@ANYBLOB="1c0000000000000001000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32=r5, @ANYBLOB="0000000028000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=r6, @ANYRES32=r7, @ANYBLOB="000000001c000000000000000100000001000000496afc8d2cfc93f01bdfa83630db9fccda96c0a8422bcfdcdf189ebbcd5d2ca6b067c8c6e2f3af0ad7e8b3ffbce475bf23cf0d820830e787153fcb11bca559ebb6fb783a8d2ef63bc0a3690ec906dba4926cce21c84fa830494ab57e4a06a285fb107f521dcb63b1a0584e583e2535609e17610a4b66d3eba491360777a4eecfd2e97d4693d362f19e7c485cbff724282a67c7616f08b665541c3e20b5a6701920445242f7cf1d264eb93fdc5f1253fff8d0b79c2763f8fef42bc2fe385c", @ANYRES32, @ANYRES32=r8, @ANYRES32, @ANYBLOB="000000002c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32=r9, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="0000000010000000000000000100000001000000"], 0xe8, 0x200400d1}, 0x80) getuid() 179.907218ms ago: executing program 3 (id=1314): r0 = socket(0x2, 0x5, 0x0) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{&(0x7f0000002e40)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000200)="f9", 0x1}], 0x1, 0x0, 0x0, 0x80020}], 0x1, 0x40c0) sendmmsg$inet_sctp(r0, &(0x7f0000000bc0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000001c0)=[{0x0}], 0x1, &(0x7f0000000140)=ANY=[@ANYBLOB, @ANYRES32=0x0], 0x30}], 0x1, 0x0) 123.613359ms ago: executing program 4 (id=1315): socket(0x10, 0x3, 0x0) r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x5, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x1100, 0x5dd8, 0x0, 0x0, 0x0, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffdfffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = openat$selinux_member(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$selinux_access(r2, &(0x7f00000004c0)=ANY=[@ANYBLOB="73797374656d5f753a6f626a6563745f723a7570647077645f657865635f742073797374656d5f753a73797374656d5f723afaffffffffff"], 0x56) 87.118859ms ago: executing program 0 (id=1316): perf_event_open(&(0x7f0000000140)={0x3, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x8000, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3fffc, 0x2, @perf_config_ext={0xf60, 0x1}, 0x1100, 0x7, 0x3a65, 0x5, 0x0, 0x5, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) futex(&(0x7f0000000000), 0xc, 0x0, &(0x7f0000000040)={0x77359400}, &(0x7f0000000080), 0x1) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r1}, 0x10) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ptrace$getregset(0x4204, r0, 0x202, &(0x7f0000000140)={0x0}) 84.144699ms ago: executing program 4 (id=1317): prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) unshare(0x2c020400) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x1}, 0x0, 0x0, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) 70.080029ms ago: executing program 3 (id=1318): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014fa0000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r1}, 0x18) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r2) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000000400000008000200"], 0x24}}, 0x0) 36.647909ms ago: executing program 0 (id=1319): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = creat(&(0x7f0000000040)='./file1\x00', 0xecf86c37d53048ec) fstat(r0, &(0x7f0000000100)) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) listen(r0, 0x2) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000008da4b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r2}, 0x10) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r5}, 0x10) r6 = socket(0x11, 0x3, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) bind$packet(r6, &(0x7f0000000080)={0x11, 0x0, r8, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt$packet_int(r6, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4) sendmsg$netlink(r6, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000440)=ANY=[@ANYBLOB="02011400012918000e3580009f0001140000002f0600ac141414e0000003808a8972bd0b72e41082b1a3d2061fd7fdfe4b88942a31f48597e36e039b1c599db6e466749c2d4c8303a0f7fbda34fb8825f80200e3c0aba61f6304a80500ffffca88faca"], 0xdd12}], 0x1}, 0x44040) sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="20010000120013070000000000000000e0000001000000000000000000000000fc00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000072c42572f64a264410b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fbc18c8582fc7800000000000000000000000050019000000000028001a"], 0x120}}, 0x0) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000f00)='kfree\x00', r9, 0x0, 0x8000000}, 0x18) r10 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r10, 0x6, 0x0, 0x0, 0x0) r11 = fsmount(r10, 0x0, 0x20) symlinkat(&(0x7f0000000000)='.\x00', r11, &(0x7f0000000140)='./file0\x00') openat(r11, &(0x7f00000000c0)='./file0\x00', 0x515a02, 0x52abe154ad664fa4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1], 0x0, 0x6ce, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r12 = getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) sendmmsg$unix(r13, &(0x7f00000081c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001fc0)=[@cred={{0x1c, 0x1, 0x2, {r12, 0xee00, 0xee01}}}], 0x20}}], 0x1, 0x48800) 10.18296ms ago: executing program 5 (id=1320): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd']) bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000300)=ANY=[@ANYBLOB="1b00004da9db9079976af2000020"], 0x48) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000080)=0x474c, 0x4) r3 = syz_open_dev$usbfs(&(0x7f0000000080), 0x70, 0x101301) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000200)) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002100)={0x18, 0x4, &(0x7f0000000000)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r4}, 0x18) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) setsockopt$inet_int(r2, 0x0, 0x14, &(0x7f00000000c0)=0x80, 0x4) connect$inet(r2, &(0x7f0000000440)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r6 = getpgrp(0x0) sched_getaffinity(r6, 0x8, &(0x7f0000000180)) recvmmsg(r1, &(0x7f0000001dc0)=[{{&(0x7f0000000900)=@phonet, 0x80, &(0x7f0000000a00)=[{&(0x7f0000000980)=""/99, 0x63}], 0x1, &(0x7f0000000a40)=""/129, 0x81}, 0x2}, {{&(0x7f0000000b00)=@hci, 0x80, &(0x7f0000000cc0)=[{&(0x7f0000000b80)=""/232, 0xe8}, {&(0x7f0000000c80)=""/13, 0xd}], 0x2, &(0x7f0000000d00)=""/137, 0x89}, 0x1}, {{&(0x7f0000000dc0)=@in6={0xa, 0x0, 0x0, @local}, 0x80, &(0x7f0000001140)=[{&(0x7f0000000e40)=""/197, 0xc5}, {&(0x7f0000000f40)=""/207, 0xcf}, {&(0x7f0000001040)=""/193, 0xc1}], 0x3, &(0x7f0000001200)=""/106, 0x6a}, 0xffffff45}, {{&(0x7f0000001280)=@can, 0x80, &(0x7f00000013c0)=[{&(0x7f0000001180)=""/7, 0x7}, {&(0x7f0000001300)=""/173, 0xad}], 0x2, &(0x7f0000001400)=""/198, 0xc6}, 0x4}, {{&(0x7f0000001500)=@nfc_llcp, 0x80, &(0x7f00000016c0)=[{&(0x7f0000001580)=""/94, 0x5e}, {&(0x7f0000001600)=""/153, 0x99}], 0x2, &(0x7f0000001fc0)=""/85, 0x55}, 0x100}, {{&(0x7f0000001780)=@nfc, 0x80, &(0x7f0000001c40)=[{&(0x7f0000001800)=""/94, 0x5e}, {&(0x7f0000001880)=""/156, 0x9c}, {&(0x7f0000001940)=""/152, 0x98}, {&(0x7f0000001a00)=""/136, 0x88}, {&(0x7f0000001ac0)=""/222, 0xde}, {&(0x7f0000001bc0)=""/91, 0x5b}], 0x6, &(0x7f0000001cc0)=""/182, 0xb6}, 0x6}], 0x6, 0x125, &(0x7f0000001f40)={0x77359400}) recvmmsg(r2, &(0x7f00000011c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=""/71, 0x47}, 0xffffff40}], 0x1, 0x2020, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESDEC=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x38, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) close(0x3) bpf$PROG_BIND_MAP(0x23, &(0x7f00000008c0)={r7, r0}, 0xc) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x3000010, &(0x7f0000000000)={[{@errors_remount}, {@nobh}]}, 0x1, 0x513, &(0x7f0000000380)="$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") statfs(&(0x7f0000000180)='./file1\x00', 0x0) 0s ago: executing program 3 (id=1321): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008f00850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180), &(0x7f0000000280), 0x7, r2}, 0x38) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='tlb_flush\x00', r3}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r4}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='net_dev_xmit\x00', r1}, 0x10) kernel console output (not intermixed with test programs): 57 (4424) used greatest stack depth: 6208 bytes left [ 60.072316][ T4459] siw: device registration error -23 [ 60.086840][ T4461] netlink: 'syz.4.372': attribute type 12 has an invalid length. [ 60.138851][ T4463] loop1: detected capacity change from 0 to 256 [ 60.154516][ T4463] FAT-fs (loop1): bogus sectors per cluster 0 [ 60.160620][ T4463] FAT-fs (loop1): Can't find a valid FAT filesystem [ 60.289844][ T4473] netlink: 8 bytes leftover after parsing attributes in process `syz.1.379'. [ 60.304148][ T4471] hub 2-0:1.0: USB hub found [ 60.309453][ T4471] hub 2-0:1.0: 8 ports detected [ 60.383648][ T29] kauditd_printk_skb: 237 callbacks suppressed [ 60.383678][ T29] audit: type=1326 audit(1745757622.702:1223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4470 comm="syz.3.378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2e01be969 code=0x7ffc0000 [ 60.413369][ T29] audit: type=1326 audit(1745757622.702:1224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4470 comm="syz.3.378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2e01be969 code=0x7ffc0000 [ 60.441098][ T29] audit: type=1326 audit(1745757622.752:1225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4470 comm="syz.3.378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=111 compat=0 ip=0x7fb2e01be969 code=0x7ffc0000 [ 60.464889][ T29] audit: type=1326 audit(1745757622.752:1226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4470 comm="syz.3.378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2e01be969 code=0x7ffc0000 [ 60.488654][ T29] audit: type=1326 audit(1745757622.752:1227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4470 comm="syz.3.378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2e01be969 code=0x7ffc0000 [ 60.512091][ T29] audit: type=1326 audit(1745757622.752:1228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4470 comm="syz.3.378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=204 compat=0 ip=0x7fb2e01be969 code=0x7ffc0000 [ 60.535409][ T29] audit: type=1326 audit(1745757622.752:1229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4470 comm="syz.3.378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2e01be969 code=0x7ffc0000 [ 60.558921][ T29] audit: type=1326 audit(1745757622.752:1230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4470 comm="syz.3.378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7fb2e01be969 code=0x7ffc0000 [ 60.564058][ T4480] loop3: detected capacity change from 0 to 512 [ 60.582203][ T29] audit: type=1326 audit(1745757622.752:1231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4470 comm="syz.3.378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2e01be969 code=0x7ffc0000 [ 60.611802][ T29] audit: type=1326 audit(1745757622.752:1232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4470 comm="syz.3.378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7fb2e01be969 code=0x7ffc0000 [ 60.651493][ T4480] EXT4-fs: Ignoring removed nobh option [ 60.674225][ T4480] EXT4-fs error (device loop3): ext4_do_update_inode:5211: inode #16: comm syz.3.378: corrupted inode contents [ 60.692201][ T4480] EXT4-fs (loop3): Remounting filesystem read-only [ 60.719340][ T4480] EXT4-fs (loop3): 1 truncate cleaned up [ 60.729977][ T4480] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 60.742952][ T37] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 60.753516][ T37] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 60.771148][ T4480] ext4 filesystem being mounted at /65/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 60.792314][ T37] EXT4-fs (loop3): Quota write (off=8, len=24) cancelled because transaction is not started [ 60.792327][ T4489] netlink: 'syz.0.385': attribute type 14 has an invalid length. [ 60.821621][ T4480] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.920640][ T4496] siw: device registration error -23 [ 60.993319][ T4500] loop3: detected capacity change from 0 to 164 [ 61.023178][ T4500] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 61.139390][ T4469] netem: incorrect ge model size [ 61.144729][ T4469] netem: change failed [ 61.578777][ T4505] netlink: 8 bytes leftover after parsing attributes in process `syz.3.390'. [ 61.773254][ T4514] netlink: 16 bytes leftover after parsing attributes in process `syz.1.395'. [ 61.860142][ T4520] netlink: 'syz.2.397': attribute type 14 has an invalid length. [ 61.939824][ T4514] wireguard0: entered promiscuous mode [ 61.945358][ T4514] wireguard0: entered allmulticast mode [ 62.479547][ T4537] loop3: detected capacity change from 0 to 8192 [ 62.515537][ T4532] netem: incorrect ge model size [ 62.520822][ T4532] netem: change failed [ 62.743690][ T4554] loop3: detected capacity change from 0 to 256 [ 62.931483][ T4556] loop1: detected capacity change from 0 to 512 [ 63.081850][ T4561] hub 2-0:1.0: USB hub found [ 63.097193][ T4561] hub 2-0:1.0: 8 ports detected [ 63.161749][ T4554] FAT-fs (loop3): bogus sectors per cluster 0 [ 63.167873][ T4554] FAT-fs (loop3): Can't find a valid FAT filesystem [ 63.201432][ T4556] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 63.221224][ T4556] ext4 filesystem being mounted at /92/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 63.231295][ T4562] loop0: detected capacity change from 0 to 512 [ 63.251393][ T4562] EXT4-fs: Ignoring removed nobh option [ 63.285186][ T4562] EXT4-fs error (device loop0): ext4_do_update_inode:5211: inode #16: comm syz.0.412: corrupted inode contents [ 63.286921][ T4562] EXT4-fs (loop0): Remounting filesystem read-only [ 63.286980][ T4562] EXT4-fs (loop0): 1 truncate cleaned up [ 63.287419][ T4562] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 63.287498][ T4562] ext4 filesystem being mounted at /70/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 63.288005][ T4562] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.288127][ T51] EXT4-fs (loop0): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 63.288152][ T51] EXT4-fs (loop0): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 63.288176][ T51] EXT4-fs (loop0): Quota write (off=8, len=24) cancelled because transaction is not started [ 63.317528][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.326580][ T4543] syz.4.405 (4543) used greatest stack depth: 6192 bytes left [ 63.391663][ T4570] netlink: 'syz.1.413': attribute type 14 has an invalid length. [ 63.495440][ T4576] loop1: detected capacity change from 0 to 164 [ 63.508428][ T4576] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 63.566938][ T4584] netlink: 16 bytes leftover after parsing attributes in process `syz.3.419'. [ 63.594806][ T4584] wireguard0: entered promiscuous mode [ 63.600297][ T4584] wireguard0: entered allmulticast mode [ 63.788534][ T4588] loop2: detected capacity change from 0 to 8192 [ 63.810133][ T4579] netem: incorrect ge model size [ 63.815472][ T4579] netem: change failed [ 64.140733][ T4606] netlink: 'syz.0.427': attribute type 14 has an invalid length. [ 64.342239][ T4614] loop0: detected capacity change from 0 to 256 [ 64.350591][ T4614] FAT-fs (loop0): bogus sectors per cluster 0 [ 64.356762][ T4614] FAT-fs (loop0): Can't find a valid FAT filesystem [ 64.857523][ T4635] siw: device registration error -23 [ 65.557559][ T29] kauditd_printk_skb: 221 callbacks suppressed [ 65.557601][ T29] audit: type=1326 audit(1745757627.872:1442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4657 comm="syz.2.448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72764ee969 code=0x7ffc0000 [ 65.596255][ T29] audit: type=1326 audit(1745757627.912:1443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4657 comm="syz.2.448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72764ee969 code=0x7ffc0000 [ 65.619637][ T29] audit: type=1326 audit(1745757627.912:1444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4657 comm="syz.2.448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f72764ee969 code=0x7ffc0000 [ 65.643044][ T29] audit: type=1326 audit(1745757627.912:1445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4657 comm="syz.2.448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72764ee969 code=0x7ffc0000 [ 65.666677][ T29] audit: type=1326 audit(1745757627.912:1446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4657 comm="syz.2.448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72764ee969 code=0x7ffc0000 [ 65.690076][ T29] audit: type=1326 audit(1745757627.922:1447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4657 comm="syz.2.448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f72764ee969 code=0x7ffc0000 [ 65.713456][ T29] audit: type=1326 audit(1745757627.922:1448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4657 comm="syz.2.448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72764ee969 code=0x7ffc0000 [ 65.736821][ T29] audit: type=1326 audit(1745757627.922:1449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4657 comm="syz.2.448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72764ee969 code=0x7ffc0000 [ 65.760132][ T29] audit: type=1326 audit(1745757627.932:1450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4657 comm="syz.2.448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f72764ee969 code=0x7ffc0000 [ 65.783449][ T29] audit: type=1326 audit(1745757627.932:1451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4657 comm="syz.2.448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72764ee969 code=0x7ffc0000 [ 66.703167][ T4697] netlink: 'syz.2.465': attribute type 14 has an invalid length. [ 66.729546][ T4701] loop1: detected capacity change from 0 to 512 [ 66.754210][ T4701] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 66.767201][ T4701] ext4 filesystem being mounted at /104/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 66.841517][ T4712] loop2: detected capacity change from 0 to 164 [ 66.846809][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.866306][ T4712] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 66.917237][ T4722] loop3: detected capacity change from 0 to 256 [ 66.928268][ T4722] FAT-fs (loop3): bogus sectors per cluster 0 [ 66.934394][ T4722] FAT-fs (loop3): Can't find a valid FAT filesystem [ 67.033298][ T4731] netlink: 'syz.4.480': attribute type 12 has an invalid length. [ 67.890725][ T4761] loop1: detected capacity change from 0 to 164 [ 67.920232][ T4761] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 67.967099][ T4765] netlink: 'syz.4.496': attribute type 12 has an invalid length. [ 68.670707][ T4794] netlink: 'syz.2.507': attribute type 14 has an invalid length. [ 68.804430][ T4804] loop0: detected capacity change from 0 to 164 [ 68.816494][ T4804] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 69.267063][ T4810] loop2: detected capacity change from 0 to 8192 [ 69.279291][ T4807] netem: incorrect ge model size [ 69.284685][ T4807] netem: change failed [ 69.382644][ T4827] netlink: 'syz.4.524': attribute type 12 has an invalid length. [ 69.492095][ T4835] netlink: 16 bytes leftover after parsing attributes in process `syz.1.527'. [ 69.514224][ T4835] wireguard0: entered promiscuous mode [ 69.519745][ T4835] wireguard0: entered allmulticast mode [ 69.671600][ T4842] loop3: detected capacity change from 0 to 164 [ 69.679803][ T4842] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 70.368929][ T4861] loop1: detected capacity change from 0 to 512 [ 70.445117][ T4861] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 70.464425][ T4861] ext4 filesystem being mounted at /114/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 70.465568][ T4869] netlink: 'syz.4.539': attribute type 12 has an invalid length. [ 70.510159][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.587578][ T4878] loop1: detected capacity change from 0 to 256 [ 70.612392][ T4878] FAT-fs (loop1): bogus sectors per cluster 0 [ 70.618539][ T4878] FAT-fs (loop1): Can't find a valid FAT filesystem [ 70.715630][ T4886] netlink: 16 bytes leftover after parsing attributes in process `syz.2.547'. [ 70.738162][ T4886] wireguard0: entered promiscuous mode [ 70.743753][ T4886] wireguard0: entered allmulticast mode [ 71.042523][ T4895] loop0: detected capacity change from 0 to 8192 [ 71.122718][ T4895] netem: incorrect ge model size [ 71.127776][ T4895] netem: change failed [ 71.299908][ T4902] netlink: 'syz.0.552': attribute type 14 has an invalid length. [ 71.674635][ T4911] netlink: 8 bytes leftover after parsing attributes in process `syz.0.555'. [ 71.758018][ T4926] loop1: detected capacity change from 0 to 164 [ 71.807372][ T4928] netlink: 'syz.3.564': attribute type 14 has an invalid length. [ 71.838787][ T4926] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 72.160651][ T4938] netlink: 16 bytes leftover after parsing attributes in process `syz.3.567'. [ 72.177274][ T4938] wireguard0: entered promiscuous mode [ 72.182815][ T4938] wireguard0: entered allmulticast mode [ 72.641913][ T4953] loop0: detected capacity change from 0 to 256 [ 72.659779][ T4953] FAT-fs (loop0): bogus sectors per cluster 0 [ 72.665900][ T4953] FAT-fs (loop0): Can't find a valid FAT filesystem [ 72.739588][ T29] kauditd_printk_skb: 152 callbacks suppressed [ 72.739599][ T29] audit: type=1326 audit(1745757635.052:1604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4960 comm="syz.0.575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb00ff1e969 code=0x7ffc0000 [ 72.769378][ T29] audit: type=1326 audit(1745757635.072:1605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4960 comm="syz.0.575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb00ff1e969 code=0x7ffc0000 [ 72.792822][ T29] audit: type=1326 audit(1745757635.072:1606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4960 comm="syz.0.575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb00ff1e969 code=0x7ffc0000 [ 72.816246][ T29] audit: type=1326 audit(1745757635.072:1607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4960 comm="syz.0.575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb00ff1e969 code=0x7ffc0000 [ 72.839619][ T29] audit: type=1326 audit(1745757635.072:1608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4960 comm="syz.0.575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb00ff1e969 code=0x7ffc0000 [ 72.862951][ T29] audit: type=1326 audit(1745757635.072:1609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4960 comm="syz.0.575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb00ff1e969 code=0x7ffc0000 [ 72.886311][ T29] audit: type=1326 audit(1745757635.072:1610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4960 comm="syz.0.575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb00ff1e969 code=0x7ffc0000 [ 72.909740][ T29] audit: type=1326 audit(1745757635.072:1611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4960 comm="syz.0.575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb00ff1e969 code=0x7ffc0000 [ 72.933282][ T29] audit: type=1326 audit(1745757635.072:1612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4960 comm="syz.0.575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb00ff1e969 code=0x7ffc0000 [ 72.956861][ T29] audit: type=1326 audit(1745757635.072:1613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4960 comm="syz.0.575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb00ff1e969 code=0x7ffc0000 [ 73.020711][ T4969] loop3: detected capacity change from 0 to 164 [ 73.038256][ T4969] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 73.332638][ T4980] netlink: 'syz.1.583': attribute type 14 has an invalid length. [ 73.608545][ T4986] netlink: 8 bytes leftover after parsing attributes in process `syz.2.585'. [ 73.990146][ T4997] loop2: detected capacity change from 0 to 512 [ 74.016702][ T4997] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.029408][ T4997] ext4 filesystem being mounted at /104/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 74.120697][ T4964] loop0: detected capacity change from 0 to 8192 [ 74.133667][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.195220][ T4964] netem: incorrect ge model size [ 74.200771][ T4964] netem: change failed [ 74.289626][ T5021] netlink: 8 bytes leftover after parsing attributes in process `syz.0.598'. [ 75.013999][ T5039] loop1: detected capacity change from 0 to 512 [ 75.069901][ T5039] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 75.112129][ T5039] ext4 filesystem being mounted at /127/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 75.196187][ T5042] netlink: 44 bytes leftover after parsing attributes in process `syz.2.594'. [ 75.246524][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.266781][ T5044] loop0: detected capacity change from 0 to 164 [ 75.304847][ T5044] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 75.371779][ T5052] netlink: 8 bytes leftover after parsing attributes in process `syz.3.611'. [ 75.533279][ T5069] loop0: detected capacity change from 0 to 512 [ 75.592391][ T5069] EXT4-fs (loop0): 1 orphan inode deleted [ 75.600475][ T5069] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 75.624370][ T5069] ext4 filesystem being mounted at /105/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 75.624725][ T296] EXT4-fs error (device loop0): ext4_release_dquot:6971: comm kworker/u8:5: Failed to release dquot type 1 [ 75.660164][ T5069] EXT4-fs: Cannot change journaled quota options when quota turned on [ 76.049515][ T5091] netlink: 8 bytes leftover after parsing attributes in process `syz.1.626'. [ 76.286295][ T5100] loop2: detected capacity change from 0 to 164 [ 76.294763][ T5100] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 76.456840][ T5113] netlink: 'syz.3.636': attribute type 14 has an invalid length. [ 76.506320][ T5114] netlink: 44 bytes leftover after parsing attributes in process `syz.1.628'. [ 76.631291][ T5120] loop2: detected capacity change from 0 to 512 [ 76.842324][ T5120] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 76.858132][ T5120] ext4 filesystem being mounted at /114/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 76.952322][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.005619][ T3308] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.033118][ T52] EXT4-fs error (device loop0): ext4_release_dquot:6971: comm kworker/u8:4: Failed to release dquot type 1 [ 77.067927][ T5129] loop2: detected capacity change from 0 to 164 [ 77.171298][ T5129] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 77.482989][ T5108] netem: incorrect ge model size [ 77.488354][ T5108] netem: change failed [ 77.600652][ T5147] netlink: 'syz.3.649': attribute type 13 has an invalid length. [ 77.845701][ T5156] 9pnet: Could not find request transport: f [ 77.886879][ T5156] hub 2-0:1.0: USB hub found [ 77.906185][ T5156] hub 2-0:1.0: 8 ports detected [ 78.168657][ T29] kauditd_printk_skb: 73 callbacks suppressed [ 78.168670][ T29] audit: type=1326 audit(1745757640.482:1685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5155 comm="syz.3.653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2e01be969 code=0x7ffc0000 [ 78.208022][ T5166] loop3: detected capacity change from 0 to 512 [ 78.214550][ T29] audit: type=1326 audit(1745757640.492:1686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5155 comm="syz.3.653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=111 compat=0 ip=0x7fb2e01be969 code=0x7ffc0000 [ 78.237981][ T29] audit: type=1326 audit(1745757640.492:1687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5155 comm="syz.3.653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2e01be969 code=0x7ffc0000 [ 78.252508][ T5166] EXT4-fs: Ignoring removed nobh option [ 78.261368][ T29] audit: type=1326 audit(1745757640.492:1688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5155 comm="syz.3.653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2e01be969 code=0x7ffc0000 [ 78.290172][ T29] audit: type=1326 audit(1745757640.492:1689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5155 comm="syz.3.653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=204 compat=0 ip=0x7fb2e01be969 code=0x7ffc0000 [ 78.313489][ T29] audit: type=1326 audit(1745757640.492:1690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5155 comm="syz.3.653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2e01be969 code=0x7ffc0000 [ 78.336791][ T29] audit: type=1326 audit(1745757640.492:1691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5155 comm="syz.3.653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2e01be969 code=0x7ffc0000 [ 78.357494][ T5169] netlink: 44 bytes leftover after parsing attributes in process `syz.1.655'. [ 78.360120][ T29] audit: type=1326 audit(1745757640.492:1692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5155 comm="syz.3.653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7fb2e01be969 code=0x7ffc0000 [ 78.392254][ T29] audit: type=1326 audit(1745757640.492:1693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5155 comm="syz.3.653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2e01be969 code=0x7ffc0000 [ 78.415604][ T29] audit: type=1326 audit(1745757640.492:1694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5155 comm="syz.3.653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7fb2e01be969 code=0x7ffc0000 [ 78.484185][ T5166] EXT4-fs error (device loop3): ext4_do_update_inode:5211: inode #16: comm syz.3.653: corrupted inode contents [ 78.533522][ T5166] EXT4-fs (loop3): Remounting filesystem read-only [ 78.554107][ T5166] EXT4-fs (loop3): 1 truncate cleaned up [ 78.650805][ T5166] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 78.732300][ T5166] ext4 filesystem being mounted at /115/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 78.761649][ T296] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 78.772244][ T296] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 78.785400][ T5180] loop2: detected capacity change from 0 to 164 [ 78.805734][ T5178] siw: device registration error -23 [ 78.829968][ T5166] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.852330][ T296] EXT4-fs (loop3): Quota write (off=8, len=24) cancelled because transaction is not started [ 78.943872][ T5180] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 79.157437][ T5189] netlink: 'syz.2.663': attribute type 13 has an invalid length. [ 79.239026][ T5194] loop2: detected capacity change from 0 to 256 [ 79.256978][ T5194] FAT-fs (loop2): bogus sectors per cluster 0 [ 79.263112][ T5194] FAT-fs (loop2): Can't find a valid FAT filesystem [ 79.275092][ T5192] loop0: detected capacity change from 0 to 8192 [ 79.330926][ T5192] netem: incorrect ge model size [ 79.330938][ T5192] netem: change failed [ 79.877427][ T5214] 9pnet_fd: Insufficient options for proto=fd [ 79.939678][ T5214] hub 2-0:1.0: USB hub found [ 79.961404][ T5214] hub 2-0:1.0: 8 ports detected [ 80.034444][ T5221] loop3: detected capacity change from 0 to 512 [ 80.042499][ T5221] EXT4-fs: Ignoring removed nobh option [ 80.056401][ T5221] EXT4-fs error (device loop3): ext4_do_update_inode:5211: inode #16: comm syz.3.671: corrupted inode contents [ 80.118208][ T5221] EXT4-fs (loop3): Remounting filesystem read-only [ 80.139070][ T5221] EXT4-fs (loop3): 1 truncate cleaned up [ 80.151735][ T5221] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 80.165317][ T37] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 80.175959][ T37] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 80.194053][ T5228] netlink: 'syz.1.675': attribute type 13 has an invalid length. [ 80.202208][ T5221] ext4 filesystem being mounted at /117/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 80.212906][ T37] EXT4-fs (loop3): Quota write (off=8, len=24) cancelled because transaction is not started [ 80.223700][ T5221] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.493233][ T5238] loop3: detected capacity change from 0 to 8192 [ 80.533618][ T5233] netem: incorrect ge model size [ 80.538927][ T5233] netem: change failed [ 80.715261][ T5249] netlink: 16 bytes leftover after parsing attributes in process `syz.2.684'. [ 80.728773][ T5249] wireguard0: entered promiscuous mode [ 80.734367][ T5249] wireguard0: entered allmulticast mode [ 81.270581][ T5264] 9pnet_fd: Insufficient options for proto=fd [ 81.279765][ T5266] netlink: 'syz.1.690': attribute type 14 has an invalid length. [ 81.788215][ T5295] netlink: 44 bytes leftover after parsing attributes in process `syz.1.692'. [ 81.812394][ T5294] netlink: 'syz.4.702': attribute type 12 has an invalid length. [ 81.914547][ T5300] 9pnet_fd: Insufficient options for proto=fd [ 81.967507][ T5300] hub 2-0:1.0: USB hub found [ 81.976301][ T5300] hub 2-0:1.0: 8 ports detected [ 82.050074][ T5307] loop2: detected capacity change from 0 to 512 [ 82.075570][ T5307] EXT4-fs: Ignoring removed nobh option [ 82.103228][ T5307] EXT4-fs error (device loop2): ext4_do_update_inode:5211: inode #16: comm syz.2.704: corrupted inode contents [ 82.116950][ T5307] EXT4-fs (loop2): Remounting filesystem read-only [ 82.133809][ T5307] EXT4-fs (loop2): 1 truncate cleaned up [ 82.145573][ T5307] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 82.159932][ T296] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 82.170525][ T296] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 82.181541][ T5307] ext4 filesystem being mounted at /129/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 82.192239][ T296] EXT4-fs (loop2): Quota write (off=8, len=24) cancelled because transaction is not started [ 82.204351][ T5307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.375430][ T5320] loop0: detected capacity change from 0 to 256 [ 82.397788][ T5320] FAT-fs (loop0): bogus sectors per cluster 0 [ 82.403924][ T5320] FAT-fs (loop0): Can't find a valid FAT filesystem [ 82.570564][ T5329] netlink: 'syz.4.715': attribute type 12 has an invalid length. [ 82.739082][ T5341] 9pnet_fd: Insufficient options for proto=fd [ 82.923260][ T5346] netlink: 44 bytes leftover after parsing attributes in process `syz.3.720'. [ 83.343195][ T5359] netlink: 'syz.4.728': attribute type 12 has an invalid length. [ 83.623651][ T5369] netlink: 16 bytes leftover after parsing attributes in process `syz.2.732'. [ 83.649575][ T5369] wireguard0: entered promiscuous mode [ 83.655244][ T5369] wireguard0: entered allmulticast mode [ 83.671993][ T5367] loop0: detected capacity change from 0 to 8192 [ 83.674247][ T5372] 9pnet_fd: Insufficient options for proto=fd [ 83.714460][ T5367] netem: incorrect ge model size [ 83.719437][ T5367] netem: change failed [ 83.733822][ T5372] hub 2-0:1.0: USB hub found [ 83.741092][ T5372] hub 2-0:1.0: 8 ports detected [ 83.796429][ T5378] loop0: detected capacity change from 0 to 256 [ 83.805404][ T29] kauditd_printk_skb: 199 callbacks suppressed [ 83.805414][ T29] audit: type=1326 audit(1745757646.122:1876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5371 comm="syz.3.733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2e01be969 code=0x7ffc0000 [ 83.836306][ T5378] FAT-fs (loop0): bogus sectors per cluster 0 [ 83.842519][ T5378] FAT-fs (loop0): Can't find a valid FAT filesystem [ 83.849447][ T5379] loop3: detected capacity change from 0 to 512 [ 83.872514][ T5379] EXT4-fs: Ignoring removed nobh option [ 83.890855][ T29] audit: type=1326 audit(1745757646.152:1877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5371 comm="syz.3.733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=111 compat=0 ip=0x7fb2e01be969 code=0x7ffc0000 [ 83.914219][ T29] audit: type=1326 audit(1745757646.152:1878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5371 comm="syz.3.733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2e01be969 code=0x7ffc0000 [ 83.937540][ T29] audit: type=1326 audit(1745757646.152:1879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5371 comm="syz.3.733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=204 compat=0 ip=0x7fb2e01be969 code=0x7ffc0000 [ 83.960828][ T29] audit: type=1326 audit(1745757646.152:1880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5371 comm="syz.3.733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2e01be969 code=0x7ffc0000 [ 83.984278][ T29] audit: type=1326 audit(1745757646.152:1881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5371 comm="syz.3.733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7fb2e01be969 code=0x7ffc0000 [ 84.007698][ T29] audit: type=1326 audit(1745757646.152:1882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5371 comm="syz.3.733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2e01be969 code=0x7ffc0000 [ 84.031096][ T29] audit: type=1326 audit(1745757646.152:1883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5371 comm="syz.3.733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7fb2e01be969 code=0x7ffc0000 [ 84.054500][ T29] audit: type=1326 audit(1745757646.152:1884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5371 comm="syz.3.733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2e01be969 code=0x7ffc0000 [ 84.077857][ T29] audit: type=1326 audit(1745757646.152:1885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5371 comm="syz.3.733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb2e01be969 code=0x7ffc0000 [ 84.107451][ T5384] wireguard0: entered promiscuous mode [ 84.113010][ T5384] wireguard0: entered allmulticast mode [ 84.130354][ T5379] EXT4-fs error (device loop3): ext4_do_update_inode:5211: inode #16: comm syz.3.733: corrupted inode contents [ 84.145045][ T5379] EXT4-fs (loop3): Remounting filesystem read-only [ 84.155933][ T5379] EXT4-fs (loop3): 1 truncate cleaned up [ 84.162949][ T5379] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 84.175542][ T296] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 84.186081][ T296] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 84.187673][ T5379] ext4 filesystem being mounted at /125/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 84.209342][ T5379] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.215141][ T296] EXT4-fs (loop3): Quota write (off=8, len=24) cancelled because transaction is not started [ 84.299478][ T5390] loop3: detected capacity change from 0 to 512 [ 84.323457][ T5390] EXT4-fs (loop3): 1 orphan inode deleted [ 84.329538][ T5390] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 84.345294][ T37] EXT4-fs error (device loop3): ext4_release_dquot:6971: comm kworker/u8:2: Failed to release dquot type 1 [ 84.351278][ T5390] ext4 filesystem being mounted at /126/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 84.378933][ T5390] EXT4-fs: Cannot change journaled quota options when quota turned on [ 84.488808][ T5395] loop2: detected capacity change from 0 to 512 [ 84.528232][ T5395] EXT4-fs (loop2): 1 orphan inode deleted [ 84.544725][ T296] EXT4-fs error (device loop2): ext4_release_dquot:6971: comm kworker/u8:5: Failed to release dquot type 1 [ 84.553950][ T5395] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 84.581414][ T5395] ext4 filesystem being mounted at /134/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 84.705060][ T5395] EXT4-fs: Cannot change journaled quota options when quota turned on [ 84.976129][ T5407] netlink: 8 bytes leftover after parsing attributes in process `syz.0.744'. [ 85.081414][ T5414] loop0: detected capacity change from 0 to 256 [ 85.108059][ T5414] FAT-fs (loop0): bogus sectors per cluster 0 [ 85.114390][ T5414] FAT-fs (loop0): Can't find a valid FAT filesystem [ 85.278610][ T5418] 9pnet_fd: Insufficient options for proto=fd [ 85.325091][ T5418] hub 2-0:1.0: USB hub found [ 85.329801][ T5418] hub 2-0:1.0: 8 ports detected [ 85.403385][ T5422] loop0: detected capacity change from 0 to 512 [ 85.423349][ T5422] EXT4-fs: Ignoring removed nobh option [ 85.504649][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.514920][ T51] EXT4-fs error (device loop2): ext4_release_dquot:6971: comm kworker/u8:3: Failed to release dquot type 1 [ 85.532332][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.542129][ T51] EXT4-fs error (device loop3): ext4_release_dquot:6971: comm kworker/u8:3: Failed to release dquot type 1 [ 85.556889][ T5422] EXT4-fs error (device loop0): ext4_do_update_inode:5211: inode #16: comm syz.0.748: corrupted inode contents [ 85.600311][ T5422] EXT4-fs (loop0): Remounting filesystem read-only [ 85.626402][ T5422] EXT4-fs (loop0): 1 truncate cleaned up [ 85.632483][ T5422] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 85.651071][ T5422] ext4 filesystem being mounted at /132/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 85.752762][ T5422] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.791188][ T51] EXT4-fs (loop0): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 85.801841][ T51] EXT4-fs (loop0): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 85.836632][ T51] EXT4-fs (loop0): Quota write (off=8, len=24) cancelled because transaction is not started [ 86.008419][ T5437] netlink: 8 bytes leftover after parsing attributes in process `syz.0.755'. [ 86.072213][ T5441] loop1: detected capacity change from 0 to 256 [ 86.105884][ T5441] FAT-fs (loop1): bogus sectors per cluster 0 [ 86.112090][ T5441] FAT-fs (loop1): Can't find a valid FAT filesystem [ 86.522764][ T5459] 9pnet_fd: Insufficient options for proto=fd [ 86.548800][ T5464] loop3: detected capacity change from 0 to 512 [ 86.726798][ T5459] hub 2-0:1.0: USB hub found [ 86.733170][ T5459] hub 2-0:1.0: 8 ports detected [ 86.833755][ T5464] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 86.883024][ T5464] ext4 filesystem being mounted at /129/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 86.926030][ T5459] loop0: detected capacity change from 0 to 512 [ 86.936642][ T5459] EXT4-fs: Ignoring removed nobh option [ 86.975016][ T5459] EXT4-fs error (device loop0): ext4_do_update_inode:5211: inode #16: comm syz.0.765: corrupted inode contents [ 87.074117][ T5459] EXT4-fs (loop0): Remounting filesystem read-only [ 87.089291][ T5459] EXT4-fs (loop0): 1 truncate cleaned up [ 87.105970][ T5459] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 87.142865][ T5459] ext4 filesystem being mounted at /136/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 87.181258][ T52] EXT4-fs (loop0): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 87.191816][ T52] EXT4-fs (loop0): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 87.202929][ T5459] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.241638][ T52] EXT4-fs (loop0): Quota write (off=8, len=24) cancelled because transaction is not started [ 87.252612][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.325313][ T5486] netlink: 'syz.1.775': attribute type 14 has an invalid length. [ 87.342575][ T5489] netlink: 16 bytes leftover after parsing attributes in process `syz.0.774'. [ 87.436486][ T5489] wireguard0: entered promiscuous mode [ 87.442225][ T5489] wireguard0: entered allmulticast mode [ 87.605654][ T5477] netlink: 28 bytes leftover after parsing attributes in process `syz.2.769'. [ 88.221453][ T5519] 9pnet_fd: Insufficient options for proto=fd [ 88.329064][ T5522] netlink: 'syz.1.786': attribute type 14 has an invalid length. [ 88.349743][ T5519] hub 2-0:1.0: USB hub found [ 88.356572][ T5519] hub 2-0:1.0: 8 ports detected [ 88.465124][ T5525] loop0: detected capacity change from 0 to 512 [ 88.488012][ T5525] EXT4-fs: Ignoring removed nobh option [ 88.530503][ T5529] loop2: detected capacity change from 0 to 512 [ 88.551224][ T5525] EXT4-fs error (device loop0): ext4_do_update_inode:5211: inode #16: comm syz.0.785: corrupted inode contents [ 88.579269][ T5525] EXT4-fs (loop0): Remounting filesystem read-only [ 88.588897][ T5525] EXT4-fs (loop0): 1 truncate cleaned up [ 88.599784][ T5525] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 88.612594][ T5525] ext4 filesystem being mounted at /138/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 88.613287][ T296] EXT4-fs (loop0): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 88.633694][ T296] EXT4-fs (loop0): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 88.673497][ T5525] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.673943][ T296] EXT4-fs (loop0): Quota write (off=8, len=24) cancelled because transaction is not started [ 88.693487][ T5529] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 88.720315][ T5529] ext4 filesystem being mounted at /141/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 88.788414][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.810668][ T5538] netlink: 28 bytes leftover after parsing attributes in process `syz.4.791'. [ 88.847577][ T5540] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 88.959395][ T5547] netlink: 16 bytes leftover after parsing attributes in process `syz.0.795'. [ 88.973122][ T5547] wireguard0: entered promiscuous mode [ 88.978596][ T5547] wireguard0: entered allmulticast mode [ 89.149387][ T5556] netlink: 'syz.4.797': attribute type 12 has an invalid length. [ 89.572304][ T5579] netlink: 28 bytes leftover after parsing attributes in process `syz.1.806'. [ 90.194181][ T29] kauditd_printk_skb: 185 callbacks suppressed [ 90.194264][ T29] audit: type=1326 audit(1745757652.512:2043): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5581 comm="syz.0.808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb00ff1e969 code=0x7ffc0000 [ 90.375189][ T29] audit: type=1326 audit(1745757652.542:2044): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5581 comm="syz.0.808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb00ff1e969 code=0x7ffc0000 [ 90.409221][ T29] audit: type=1326 audit(1745757652.722:2045): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5581 comm="syz.0.808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb00ff1e969 code=0x7ffc0000 [ 90.432603][ T29] audit: type=1326 audit(1745757652.722:2046): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5581 comm="syz.0.808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb00ff1e969 code=0x7ffc0000 [ 90.455952][ T29] audit: type=1326 audit(1745757652.722:2047): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5581 comm="syz.0.808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb00ff1e969 code=0x7ffc0000 [ 90.479382][ T29] audit: type=1326 audit(1745757652.722:2048): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5581 comm="syz.0.808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb00ff1e969 code=0x7ffc0000 [ 90.502922][ T29] audit: type=1326 audit(1745757652.722:2049): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5581 comm="syz.0.808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb00ff1e969 code=0x7ffc0000 [ 90.526352][ T29] audit: type=1326 audit(1745757652.722:2050): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5581 comm="syz.0.808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb00ff1e969 code=0x7ffc0000 [ 90.549910][ T29] audit: type=1326 audit(1745757652.722:2051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5581 comm="syz.0.808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb00ff1e969 code=0x7ffc0000 [ 90.574515][ T29] audit: type=1326 audit(1745757652.722:2052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5581 comm="syz.0.808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb00ff1e969 code=0x7ffc0000 [ 90.634870][ T5584] netlink: 'syz.0.809': attribute type 13 has an invalid length. [ 90.754641][ T5595] loop0: detected capacity change from 0 to 512 [ 90.778571][ T5596] xt_hashlimit: max too large, truncated to 1048576 [ 90.817763][ T5595] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 90.835872][ T5595] ext4 filesystem being mounted at /144/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 90.841880][ T5605] 9pnet_fd: Insufficient options for proto=fd [ 90.886133][ T3308] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.939251][ T5605] hub 2-0:1.0: USB hub found [ 90.945657][ T5605] hub 2-0:1.0: 8 ports detected [ 90.954942][ T5609] loop0: detected capacity change from 0 to 512 [ 90.986498][ T5609] EXT4-fs (loop0): 1 orphan inode deleted [ 91.022695][ T296] EXT4-fs error (device loop0): ext4_release_dquot:6971: comm kworker/u8:5: Failed to release dquot type 1 [ 91.037607][ T5609] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 91.062126][ T5609] ext4 filesystem being mounted at /145/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 91.113945][ T5605] loop1: detected capacity change from 0 to 512 [ 91.133031][ T5609] EXT4-fs: Cannot change journaled quota options when quota turned on [ 91.156508][ T5605] EXT4-fs: Ignoring removed nobh option [ 91.195050][ T5605] EXT4-fs error (device loop1): ext4_do_update_inode:5211: inode #16: comm syz.1.818: corrupted inode contents [ 91.229906][ T5605] EXT4-fs (loop1): Remounting filesystem read-only [ 91.251274][ T5605] EXT4-fs (loop1): 1 truncate cleaned up [ 91.277311][ T37] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 91.287983][ T37] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 91.299227][ T5605] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 91.344302][ T5605] ext4 filesystem being mounted at /169/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 91.365160][ T37] EXT4-fs (loop1): Quota write (off=8, len=24) cancelled because transaction is not started [ 91.403963][ T5605] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.614697][ T5627] netlink: 'syz.1.825': attribute type 13 has an invalid length. [ 91.830117][ T5630] loop1: detected capacity change from 0 to 8192 [ 91.920477][ T5630] netem: incorrect ge model size [ 91.925479][ T5630] netem: change failed [ 92.054899][ T5611] netem: incorrect ge model size [ 92.060279][ T5611] netem: change failed [ 92.089980][ T5634] xt_hashlimit: max too large, truncated to 1048576 [ 92.125380][ T3308] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.134726][ T51] EXT4-fs error (device loop0): ext4_release_dquot:6971: comm kworker/u8:3: Failed to release dquot type 1 [ 92.248866][ T5651] netlink: 'syz.4.836': attribute type 12 has an invalid length. [ 92.304418][ T5656] 9pnet_fd: Insufficient options for proto=fd [ 92.360742][ T5656] hub 2-0:1.0: USB hub found [ 92.366748][ T5656] hub 2-0:1.0: 8 ports detected [ 92.760420][ T5663] loop3: detected capacity change from 0 to 512 [ 92.860485][ T5663] EXT4-fs: Ignoring removed nobh option [ 92.990932][ T5663] EXT4-fs error (device loop3): ext4_do_update_inode:5211: inode #16: comm syz.3.838: corrupted inode contents [ 93.097448][ T5663] EXT4-fs (loop3): Remounting filesystem read-only [ 93.115796][ T5663] EXT4-fs (loop3): 1 truncate cleaned up [ 93.131518][ T3838] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 93.142133][ T3838] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 93.155433][ T5663] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 93.175028][ T5663] ext4 filesystem being mounted at /137/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 93.185525][ T3838] EXT4-fs (loop3): Quota write (off=8, len=24) cancelled because transaction is not started [ 93.197193][ T5663] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.203763][ T5678] loop0: detected capacity change from 0 to 512 [ 93.291309][ T5684] netlink: 'syz.1.849': attribute type 14 has an invalid length. [ 93.300160][ T5678] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 93.324646][ T5678] ext4 filesystem being mounted at /151/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 93.411279][ T3308] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.457797][ T5694] loop1: detected capacity change from 0 to 512 [ 93.538037][ T5694] EXT4-fs (loop1): 1 orphan inode deleted [ 93.554892][ T5694] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 93.571214][ T3838] EXT4-fs error (device loop1): ext4_release_dquot:6971: comm kworker/u8:7: Failed to release dquot type 1 [ 93.577934][ T5694] ext4 filesystem being mounted at /182/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 93.604694][ T5694] EXT4-fs: Cannot change journaled quota options when quota turned on [ 93.650742][ T5699] loop0: detected capacity change from 0 to 8192 [ 93.666056][ T5665] netem: incorrect ge model size [ 93.672726][ T5665] netem: change failed [ 93.708684][ T5693] netem: incorrect ge model size [ 93.715946][ T5693] netem: change failed [ 93.796024][ T5712] netlink: 16 bytes leftover after parsing attributes in process `syz.3.861'. [ 93.829374][ T5712] wireguard0: entered promiscuous mode [ 93.834912][ T5712] wireguard0: entered allmulticast mode [ 93.855183][ T5717] loop0: detected capacity change from 0 to 512 [ 93.883897][ T5717] EXT4-fs (loop0): 1 orphan inode deleted [ 93.890187][ T5717] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 93.904600][ T5717] ext4 filesystem being mounted at /154/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 93.919660][ T5717] EXT4-fs: Cannot change journaled quota options when quota turned on [ 93.921791][ T37] EXT4-fs error (device loop0): ext4_release_dquot:6971: comm kworker/u8:2: Failed to release dquot type 1 [ 94.211387][ T5734] loop2: detected capacity change from 0 to 164 [ 94.222480][ T5734] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 94.427966][ T5737] loop2: detected capacity change from 0 to 8192 [ 94.443681][ T5736] netem: incorrect ge model size [ 94.449180][ T5736] netem: change failed [ 94.475471][ T3838] EXT4-fs error (device loop1): ext4_release_dquot:6971: comm kworker/u8:7: Failed to release dquot type 1 [ 94.516885][ T5743] 9pnet_fd: Insufficient options for proto=fd [ 94.791363][ T3308] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.800569][ T37] EXT4-fs error (device loop0): ext4_release_dquot:6971: comm kworker/u8:2: Failed to release dquot type 1 [ 94.821943][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.885647][ T5755] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 94.915566][ T5758] loop1: detected capacity change from 0 to 256 [ 94.926031][ T5758] FAT-fs (loop1): bogus sectors per cluster 0 [ 94.932164][ T5758] FAT-fs (loop1): Can't find a valid FAT filesystem [ 94.950860][ T5762] loop0: detected capacity change from 0 to 512 [ 94.986693][ T5762] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 95.040567][ T5762] ext4 filesystem being mounted at /156/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 95.093103][ T5772] netlink: 16 bytes leftover after parsing attributes in process `syz.4.884'. [ 95.132685][ T5772] wireguard0: entered promiscuous mode [ 95.138257][ T5772] wireguard0: entered allmulticast mode [ 95.176356][ T5773] loop2: detected capacity change from 0 to 8192 [ 95.209482][ T5766] netem: incorrect ge model size [ 95.214829][ T5766] netem: change failed [ 95.240475][ T3308] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.358230][ T5790] siw: device registration error -23 [ 95.679095][ T29] kauditd_printk_skb: 189 callbacks suppressed [ 95.679108][ T29] audit: type=1326 audit(1745757657.992:2224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5803 comm="syz.2.895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72764ee969 code=0x7ffc0000 [ 95.735765][ T5802] hub 2-0:1.0: USB hub found [ 95.740559][ T5802] hub 2-0:1.0: 8 ports detected [ 95.785802][ T29] audit: type=1326 audit(1745757658.032:2225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5803 comm="syz.2.895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f72764ee969 code=0x7ffc0000 [ 95.809243][ T29] audit: type=1326 audit(1745757658.042:2226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5803 comm="syz.2.895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72764ee969 code=0x7ffc0000 [ 95.832621][ T29] audit: type=1326 audit(1745757658.042:2227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5803 comm="syz.2.895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f72764ee969 code=0x7ffc0000 [ 95.855956][ T29] audit: type=1326 audit(1745757658.042:2228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5803 comm="syz.2.895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72764ee969 code=0x7ffc0000 [ 95.879334][ T29] audit: type=1326 audit(1745757658.042:2229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5803 comm="syz.2.895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f72764ee969 code=0x7ffc0000 [ 95.902653][ T29] audit: type=1326 audit(1745757658.042:2230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5803 comm="syz.2.895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72764ee969 code=0x7ffc0000 [ 95.925997][ T29] audit: type=1326 audit(1745757658.042:2231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5803 comm="syz.2.895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f72764ee969 code=0x7ffc0000 [ 95.949366][ T29] audit: type=1326 audit(1745757658.042:2232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5803 comm="syz.2.895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72764ee969 code=0x7ffc0000 [ 95.972682][ T29] audit: type=1326 audit(1745757658.042:2233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5803 comm="syz.2.895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72764ee969 code=0x7ffc0000 [ 96.162226][ T5802] loop3: detected capacity change from 0 to 512 [ 96.188724][ T5811] loop2: detected capacity change from 0 to 8192 [ 96.205007][ T5802] EXT4-fs: Ignoring removed nobh option [ 96.254256][ T5802] EXT4-fs error (device loop3): ext4_do_update_inode:5211: inode #16: comm syz.3.896: corrupted inode contents [ 96.284571][ T5809] netem: incorrect ge model size [ 96.289900][ T5809] netem: change failed [ 96.339859][ T5802] EXT4-fs (loop3): Remounting filesystem read-only [ 96.349606][ T5802] EXT4-fs (loop3): 1 truncate cleaned up [ 96.361211][ T5802] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 96.371189][ T52] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 96.384205][ T52] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 96.414616][ T5802] ext4 filesystem being mounted at /146/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 96.706818][ T52] EXT4-fs (loop3): Quota write (off=8, len=24) cancelled because transaction is not started [ 96.734890][ T5802] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 96.808611][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.006049][ T5868] loop2: detected capacity change from 0 to 512 [ 98.053597][ T5868] EXT4-fs (loop2): 1 orphan inode deleted [ 98.059724][ T5868] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 98.072330][ T51] EXT4-fs error (device loop2): ext4_release_dquot:6971: comm kworker/u8:3: Failed to release dquot type 1 [ 98.184746][ T5868] ext4 filesystem being mounted at /166/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 98.207082][ T5868] EXT4-fs: Cannot change journaled quota options when quota turned on [ 98.281499][ T5877] netlink: 'syz.4.924': attribute type 13 has an invalid length. [ 98.357408][ T5879] loop3: detected capacity change from 0 to 256 [ 98.385058][ T5879] FAT-fs (loop3): bogus sectors per cluster 0 [ 98.391223][ T5879] FAT-fs (loop3): Can't find a valid FAT filesystem [ 98.429068][ T5853] loop1: detected capacity change from 0 to 8192 [ 98.493396][ T5853] netem: incorrect ge model size [ 98.499144][ T5853] netem: change failed [ 98.559376][ T5885] loop3: detected capacity change from 0 to 512 [ 98.664356][ T5885] EXT4-fs (loop3): 1 orphan inode deleted [ 98.673949][ T5885] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 98.688692][ T3838] EXT4-fs error (device loop3): ext4_release_dquot:6971: comm kworker/u8:7: Failed to release dquot type 1 [ 98.712653][ T5885] ext4 filesystem being mounted at /151/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 98.799924][ T5885] EXT4-fs: Cannot change journaled quota options when quota turned on [ 99.172072][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.186758][ T31] EXT4-fs error (device loop2): ext4_release_dquot:6971: comm kworker/u8:1: Failed to release dquot type 1 [ 99.326170][ T5904] 9pnet_fd: Insufficient options for proto=fd [ 99.372307][ T5904] hub 2-0:1.0: USB hub found [ 99.379039][ T5904] hub 2-0:1.0: 8 ports detected [ 99.463190][ T5907] loop0: detected capacity change from 0 to 512 [ 99.482606][ T5907] EXT4-fs: Ignoring removed nobh option [ 99.512823][ T5907] EXT4-fs error (device loop0): ext4_do_update_inode:5211: inode #16: comm syz.0.934: corrupted inode contents [ 99.545276][ T5907] EXT4-fs (loop0): Remounting filesystem read-only [ 99.562078][ T5907] EXT4-fs (loop0): 1 truncate cleaned up [ 99.581352][ T5907] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 99.594178][ T37] EXT4-fs (loop0): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 99.604750][ T37] EXT4-fs (loop0): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 99.651279][ T5907] ext4 filesystem being mounted at /163/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 99.656125][ T37] EXT4-fs (loop0): Quota write (off=8, len=24) cancelled because transaction is not started [ 99.681328][ T5907] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.690367][ T5915] loop1: detected capacity change from 0 to 256 [ 99.758460][ T5915] FAT-fs (loop1): bogus sectors per cluster 0 [ 99.764706][ T5915] FAT-fs (loop1): Can't find a valid FAT filesystem [ 99.787845][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.842824][ T37] EXT4-fs error (device loop3): ext4_release_dquot:6971: comm kworker/u8:2: Failed to release dquot type 1 [ 100.613173][ T5938] loop0: detected capacity change from 0 to 164 [ 100.642661][ T5938] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 100.681043][ T29] kauditd_printk_skb: 126 callbacks suppressed [ 100.681055][ T29] audit: type=1326 audit(1745757662.992:2344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5937 comm="syz.0.946" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fb00ff1e969 code=0x7ffc0000 [ 100.737521][ T29] audit: type=1326 audit(1745757663.032:2345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5937 comm="syz.0.946" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb00ff1e969 code=0x7ffc0000 [ 100.760908][ T29] audit: type=1326 audit(1745757663.032:2346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5937 comm="syz.0.946" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb00ff1e969 code=0x7ffc0000 [ 100.784305][ T29] audit: type=1326 audit(1745757663.032:2347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5937 comm="syz.0.946" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb00ff1e969 code=0x7ffc0000 [ 100.807679][ T29] audit: type=1326 audit(1745757663.032:2348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5937 comm="syz.0.946" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb00ff1e969 code=0x7ffc0000 [ 100.831003][ T29] audit: type=1326 audit(1745757663.032:2349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5937 comm="syz.0.946" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb00ff1e969 code=0x7ffc0000 [ 100.854372][ T29] audit: type=1326 audit(1745757663.032:2350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5937 comm="syz.0.946" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fb00ff1e969 code=0x7ffc0000 [ 100.877542][ T29] audit: type=1326 audit(1745757663.032:2351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5937 comm="syz.0.946" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb00ff1e969 code=0x7ffc0000 [ 100.901012][ T29] audit: type=1326 audit(1745757663.032:2352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5937 comm="syz.0.946" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb00ff1e969 code=0x7ffc0000 [ 101.734144][ T5964] loop3: detected capacity change from 0 to 256 [ 101.752568][ T5964] FAT-fs (loop3): bogus sectors per cluster 0 [ 101.758723][ T5964] FAT-fs (loop3): Can't find a valid FAT filesystem [ 101.890579][ T5970] loop3: detected capacity change from 0 to 512 [ 101.923328][ T5940] loop2: detected capacity change from 0 to 8192 [ 101.947626][ T5970] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 101.971719][ T29] audit: type=1404 audit(1745757664.292:2353): enforcing=1 old_enforcing=0 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 102.012755][ T5970] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.044226][ T5940] netem: incorrect ge model size [ 102.051125][ T5940] netem: change failed [ 102.103260][ T5970] loop3: detected capacity change from 0 to 512 [ 102.118259][ T5970] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 102.204823][ T5970] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.960: bg 0: block 384: padding at end of block bitmap is not set [ 102.246219][ T5970] EXT4-fs (loop3): Remounting filesystem read-only [ 102.264595][ T5996] loop1: detected capacity change from 0 to 256 [ 102.273065][ T5970] EXT4-fs (loop3): 1 truncate cleaned up [ 102.294791][ T5970] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 102.327436][ T5996] FAT-fs (loop1): bogus sectors per cluster 0 [ 102.333573][ T5996] FAT-fs (loop1): Can't find a valid FAT filesystem [ 102.403722][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.528088][ T6004] loop1: detected capacity change from 0 to 512 [ 102.575655][ T6004] EXT4-fs (loop1): 1 orphan inode deleted [ 102.583137][ T6004] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 102.595795][ T296] EXT4-fs error (device loop1): ext4_release_dquot:6971: comm kworker/u8:5: Failed to release dquot type 1 [ 102.624118][ T6004] ext4 filesystem being mounted at /204/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 102.672586][ T6004] EXT4-fs: Cannot change journaled quota options when quota turned on [ 102.922319][ T6016] loop3: detected capacity change from 0 to 512 [ 102.947949][ T6016] EXT4-fs (loop3): 1 orphan inode deleted [ 102.961526][ T3838] EXT4-fs error (device loop3): ext4_release_dquot:6971: comm kworker/u8:7: Failed to release dquot type 1 [ 102.965107][ T6016] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 103.000850][ T6016] ext4 filesystem being mounted at /160/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 103.028261][ T6016] EXT4-fs: Cannot change journaled quota options when quota turned on [ 103.513448][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.531271][ T37] EXT4-fs error (device loop1): ext4_release_dquot:6971: comm kworker/u8:2: Failed to release dquot type 1 [ 103.613150][ T6031] netlink: 16 bytes leftover after parsing attributes in process `syz.4.982'. [ 103.667491][ T6031] wireguard0: entered promiscuous mode [ 103.673039][ T6031] wireguard0: entered allmulticast mode [ 103.784270][ T6022] loop0: detected capacity change from 0 to 8192 [ 103.823552][ T6022] netem: incorrect ge model size [ 103.829031][ T6022] netem: change failed [ 103.998270][ T6052] netlink: 4 bytes leftover after parsing attributes in process `syz.2.991'. [ 104.151113][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.196070][ T52] EXT4-fs error (device loop3): ext4_release_dquot:6971: comm kworker/u8:4: Failed to release dquot type 1 [ 104.830654][ T6086] FAULT_INJECTION: forcing a failure. [ 104.830654][ T6086] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 104.843808][ T6086] CPU: 1 UID: 0 PID: 6086 Comm: syz.1.1005 Not tainted 6.15.0-rc3-syzkaller-00342-g5bc1018675ec #0 PREEMPT(voluntary) [ 104.843839][ T6086] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 104.843850][ T6086] Call Trace: [ 104.843855][ T6086] [ 104.843861][ T6086] __dump_stack+0x1d/0x30 [ 104.843879][ T6086] dump_stack_lvl+0xe8/0x140 [ 104.843958][ T6086] dump_stack+0x15/0x1b [ 104.844049][ T6086] should_fail_ex+0x265/0x280 [ 104.844081][ T6086] should_fail+0xb/0x20 [ 104.844109][ T6086] should_fail_usercopy+0x1a/0x20 [ 104.844264][ T6086] _copy_from_user+0x1c/0xb0 [ 104.844325][ T6086] ___sys_sendmsg+0xc1/0x1d0 [ 104.844358][ T6086] __x64_sys_sendmsg+0xd4/0x160 [ 104.844384][ T6086] x64_sys_call+0x2999/0x2fb0 [ 104.844408][ T6086] do_syscall_64+0xd0/0x1a0 [ 104.844496][ T6086] ? clear_bhb_loop+0x25/0x80 [ 104.844520][ T6086] ? clear_bhb_loop+0x25/0x80 [ 104.844574][ T6086] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.844607][ T6086] RIP: 0033:0x7fd61746e969 [ 104.844622][ T6086] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 104.844640][ T6086] RSP: 002b:00007fd615ad7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 104.844675][ T6086] RAX: ffffffffffffffda RBX: 00007fd617695fa0 RCX: 00007fd61746e969 [ 104.844688][ T6086] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000006 [ 104.844697][ T6086] RBP: 00007fd615ad7090 R08: 0000000000000000 R09: 0000000000000000 [ 104.844707][ T6086] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 104.844717][ T6086] R13: 0000000000000000 R14: 00007fd617695fa0 R15: 00007ffd13eaba88 [ 104.844731][ T6086] [ 104.849374][ T6087] usb usb1: usbfs: process 6087 (syz.3.1006) did not claim interface 0 before use [ 105.033084][ T6088] netlink: 'syz.3.1006': attribute type 2 has an invalid length. [ 105.083020][ T6090] loop1: detected capacity change from 0 to 512 [ 105.145664][ T6090] EXT4-fs (loop1): 1 orphan inode deleted [ 105.171337][ T3838] EXT4-fs error (device loop1): ext4_release_dquot:6971: comm kworker/u8:7: Failed to release dquot type 1 [ 105.181473][ T6090] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 105.228959][ T6098] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 105.271355][ T6090] ext4 filesystem being mounted at /211/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 105.324864][ T6090] EXT4-fs: Cannot change journaled quota options when quota turned on [ 105.361555][ T6107] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1013'. [ 105.385037][ T6107] SELinux: Context system_u:object_r:var_lib_t:s0 is not valid (left unmapped). [ 105.423160][ T6108] netlink: 228 bytes leftover after parsing attributes in process `syz.3.1012'. [ 105.443613][ T6108] loop3: detected capacity change from 0 to 512 [ 105.494773][ T6108] EXT4-fs error (device loop3): ext4_iget_extra_inode:4693: inode #15: comm syz.3.1012: corrupted in-inode xattr: invalid ea_ino [ 105.622856][ T6108] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.1012: couldn't read orphan inode 15 (err -117) [ 105.660092][ T6128] hub 9-0:1.0: USB hub found [ 105.669153][ T6128] hub 9-0:1.0: 8 ports detected [ 105.676213][ T6108] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 105.723313][ T6108] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(12) [ 105.729928][ T6108] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 105.737390][ T6108] vhci_hcd vhci_hcd.0: Device attached [ 105.835918][ T6136] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(15) [ 105.842592][ T6136] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 105.850155][ T6136] vhci_hcd vhci_hcd.0: Device attached [ 105.882156][ T6108] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 105.904557][ T6108] vhci_hcd vhci_hcd.0: pdev(3) rhport(3) sockfd(19) [ 105.911169][ T6108] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 105.918636][ T6108] vhci_hcd vhci_hcd.0: Device attached [ 105.921033][ T1053] vhci_hcd: vhci_device speed not set [ 105.953764][ T6136] vhci_hcd vhci_hcd.0: pdev(3) rhport(4) sockfd(22) [ 105.960394][ T6136] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 105.967985][ T6136] vhci_hcd vhci_hcd.0: Device attached [ 105.981030][ T1053] usb 7-1: new low-speed USB device number 2 using vhci_hcd [ 106.060955][ T6090] syz.1.1007 (6090) used greatest stack depth: 6032 bytes left [ 106.083573][ T29] kauditd_printk_skb: 292 callbacks suppressed [ 106.083586][ T29] audit: type=1400 audit(1745757668.402:2641): avc: denied { unmount } for pid=3304 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 106.110016][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.124820][ T52] Quota error (device loop1): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 106.134629][ T52] EXT4-fs error (device loop1): ext4_release_dquot:6971: comm kworker/u8:4: Failed to release dquot type 1 [ 106.189666][ T6148] vhci_hcd: connection closed [ 106.189966][ T3838] vhci_hcd: stop threads [ 106.198948][ T3838] vhci_hcd: release socket [ 106.203456][ T3838] vhci_hcd: disconnect device [ 106.218523][ T6144] vhci_hcd: connection closed [ 106.218927][ T6131] vhci_hcd: connection reset by peer [ 106.229054][ T6140] vhci_hcd: connection closed [ 106.231167][ T3838] vhci_hcd: stop threads [ 106.240164][ T3838] vhci_hcd: release socket [ 106.244650][ T3838] vhci_hcd: disconnect device [ 106.277232][ T3838] vhci_hcd: stop threads [ 106.281522][ T3838] vhci_hcd: release socket [ 106.285958][ T3838] vhci_hcd: disconnect device [ 106.294001][ T3838] vhci_hcd: stop threads [ 106.298261][ T3838] vhci_hcd: release socket [ 106.302709][ T3838] vhci_hcd: disconnect device [ 106.408023][ T29] audit: type=1400 audit(1745757668.722:2642): avc: denied { sqpoll } for pid=6157 comm="syz.1.1029" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 106.577264][ T29] audit: type=1400 audit(1745757668.892:2643): avc: denied { create } for pid=6166 comm="syz.0.1032" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 106.583474][ T6133] loop2: detected capacity change from 0 to 8192 [ 106.649007][ T6133] netem: incorrect ge model size [ 106.655886][ T6133] netem: change failed [ 106.681047][ T29] audit: type=1400 audit(1745757668.952:2644): avc: denied { mount } for pid=6132 comm="syz.2.1021" name="/" dev="loop2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 106.703089][ T29] audit: type=1400 audit(1745757668.962:2645): avc: denied { create } for pid=6132 comm="syz.2.1021" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 106.722482][ T29] audit: type=1400 audit(1745757668.962:2646): avc: denied { execmem } for pid=6170 comm="syz.0.1033" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 106.741771][ T29] audit: type=1400 audit(1745757668.982:2647): avc: denied { setopt } for pid=6132 comm="syz.2.1021" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 106.803600][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.836426][ T6175] FAULT_INJECTION: forcing a failure. [ 106.836426][ T6175] name failslab, interval 1, probability 0, space 0, times 1 [ 106.849083][ T6175] CPU: 1 UID: 0 PID: 6175 Comm: syz.3.1035 Not tainted 6.15.0-rc3-syzkaller-00342-g5bc1018675ec #0 PREEMPT(voluntary) [ 106.849175][ T6175] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 106.849216][ T6175] Call Trace: [ 106.849221][ T6175] [ 106.849227][ T6175] __dump_stack+0x1d/0x30 [ 106.849246][ T6175] dump_stack_lvl+0xe8/0x140 [ 106.849268][ T6175] dump_stack+0x15/0x1b [ 106.849287][ T6175] should_fail_ex+0x265/0x280 [ 106.849437][ T6175] should_failslab+0x8c/0xb0 [ 106.849468][ T6175] kmem_cache_alloc_lru_noprof+0x55/0x310 [ 106.849497][ T6175] ? __d_alloc+0x3d/0x350 [ 106.849553][ T6175] __d_alloc+0x3d/0x350 [ 106.849630][ T6175] ? __rcu_read_unlock+0x4f/0x70 [ 106.849645][ T6175] ? __rcu_read_unlock+0x4f/0x70 [ 106.849665][ T6175] d_alloc_pseudo+0x1e/0x80 [ 106.849709][ T6175] alloc_file_pseudo+0x71/0x160 [ 106.849791][ T6175] sock_alloc_file+0x9c/0x1e0 [ 106.849832][ T6175] __sys_socketpair+0x23d/0x430 [ 106.849890][ T6175] __x64_sys_socketpair+0x52/0x60 [ 106.849918][ T6175] x64_sys_call+0x23f2/0x2fb0 [ 106.849935][ T6175] do_syscall_64+0xd0/0x1a0 [ 106.849994][ T6175] ? clear_bhb_loop+0x25/0x80 [ 106.850016][ T6175] ? clear_bhb_loop+0x25/0x80 [ 106.850111][ T6175] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 106.850133][ T6175] RIP: 0033:0x7fb2e01be969 [ 106.850147][ T6175] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 106.850166][ T6175] RSP: 002b:00007fb2de827038 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 106.850191][ T6175] RAX: ffffffffffffffda RBX: 00007fb2e03e5fa0 RCX: 00007fb2e01be969 [ 106.850204][ T6175] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 000000000000001e [ 106.850216][ T6175] RBP: 00007fb2de827090 R08: 0000000000000000 R09: 0000000000000000 [ 106.850229][ T6175] R10: 0000200000000940 R11: 0000000000000246 R12: 0000000000000001 [ 106.850328][ T6175] R13: 0000000000000000 R14: 00007fb2e03e5fa0 R15: 00007ffe02030568 [ 106.850347][ T6175] [ 106.881037][ T29] audit: type=1400 audit(1745757669.012:2648): avc: denied { unmount } for pid=3306 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 106.926549][ T6178] loop2: detected capacity change from 0 to 1024 [ 106.930786][ T29] audit: type=1400 audit(1745757669.152:2649): avc: denied { create } for pid=6174 comm="syz.3.1035" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 107.047095][ T6163] loop1: detected capacity change from 0 to 512 [ 107.172653][ T6163] EXT4-fs (loop1): orphan cleanup on readonly fs [ 107.220334][ T6163] EXT4-fs warning (device loop1): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 107.243895][ T6185] loop3: detected capacity change from 0 to 512 [ 107.272260][ T6191] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 107.310528][ T6185] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 107.346773][ T6185] EXT4-fs (loop3): 1 truncate cleaned up [ 107.359077][ T6163] EXT4-fs (loop1): Cannot turn on quotas: error -117 [ 107.372860][ T6185] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 107.411783][ T6163] EXT4-fs (loop1): 1 truncate cleaned up [ 107.417912][ T6163] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 107.526851][ T6198] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.534194][ T6198] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.542717][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.543042][ T6198] bridge0: entered allmulticast mode [ 107.562322][ T6198] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.568403][ T6203] loop0: detected capacity change from 0 to 1024 [ 107.569507][ T6198] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.576249][ T6203] EXT4-fs: Ignoring removed mblk_io_submit option [ 107.583075][ T6198] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.596561][ T6198] bridge0: port 1(bridge_slave_0) entered forwarding state [ 107.598838][ T6203] EXT4-fs: Ignoring removed nobh option [ 107.605461][ T6198] bridge0: entered promiscuous mode [ 107.609363][ T6203] EXT4-fs: Ignoring removed bh option [ 107.632203][ T6203] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 107.671018][ T6209] loop3: detected capacity change from 0 to 512 [ 107.679616][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.692736][ T6209] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 107.729573][ T6209] EXT4-fs (loop3): 1 truncate cleaned up [ 107.740217][ T6209] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 107.837094][ T6222] loop1: detected capacity change from 0 to 512 [ 107.906890][ T6222] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 107.949986][ T6222] ext4 filesystem being mounted at /216/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 107.986035][ T6231] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 108.051951][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 109.288255][ T6227] netem: incorrect ge model size [ 109.293814][ T6227] netem: change failed [ 110.158825][ T6267] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 110.171475][ T6267] xt_CT: You must specify a L4 protocol and not use inversions on it [ 110.190141][ T6269] loop2: detected capacity change from 0 to 512 [ 110.215203][ T6269] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 110.243522][ T6269] ext4 filesystem being mounted at /202/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 110.274223][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.299891][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.342122][ T6278] xt_connbytes: Forcing CT accounting to be enabled [ 110.361533][ T6278] Cannot find add_set index 0 as target [ 110.414976][ T6282] siw: device registration error -23 [ 110.504332][ T6284] loop2: detected capacity change from 0 to 512 [ 110.525602][ T6284] EXT4-fs (loop2): 1 orphan inode deleted [ 110.534663][ T6284] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 110.547966][ T52] EXT4-fs error (device loop2): ext4_release_dquot:6971: comm kworker/u8:4: Failed to release dquot type 1 [ 110.670224][ T6284] ext4 filesystem being mounted at /203/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 110.885016][ T3306] EXT4-fs error (device loop2): ext4_readdir:264: inode #11: block 4: comm syz-executor: path /203/file1/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=7947, rec_len=12, size=4096 fake=1 [ 110.917667][ T3306] EXT4-fs error (device loop2): ext4_empty_dir:3086: inode #11: block 4: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=7947, rec_len=12, size=4096 fake=1 [ 111.063801][ T1053] usb 7-1: enqueue for inactive port 0 [ 111.069282][ T1053] usb 7-1: enqueue for inactive port 0 [ 111.074926][ T3306] EXT4-fs warning (device loop2): ext4_empty_dir:3088: inode #11: comm syz-executor: directory missing '.' [ 111.086519][ T3306] EXT4-fs error (device loop2): ext4_readdir:264: inode #11: block 4: comm syz-executor: path /203/file1/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=7947, rec_len=12, size=4096 fake=1 [ 111.110500][ T3306] EXT4-fs error (device loop2): ext4_empty_dir:3086: inode #11: block 4: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=7947, rec_len=12, size=4096 fake=1 [ 111.130189][ T3306] EXT4-fs warning (device loop2): ext4_empty_dir:3088: inode #11: comm syz-executor: directory missing '.' [ 111.141226][ T1053] vhci_hcd: vhci_device speed not set [ 111.143124][ T3306] EXT4-fs error (device loop2): ext4_readdir:264: inode #11: block 4: comm syz-executor: path /203/file1/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=7947, rec_len=12, size=4096 fake=1 [ 111.169375][ T3306] EXT4-fs error (device loop2): ext4_empty_dir:3086: inode #11: block 4: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=7947, rec_len=12, size=4096 fake=1 [ 111.191984][ T3306] EXT4-fs warning (device loop2): ext4_empty_dir:3088: inode #11: comm syz-executor: directory missing '.' [ 111.204840][ T3306] EXT4-fs error (device loop2): ext4_readdir:264: inode #11: block 4: comm syz-executor: path /203/file1/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=7947, rec_len=12, size=4096 fake=1 [ 111.226036][ T29] kauditd_printk_skb: 41 callbacks suppressed [ 111.226072][ T29] audit: type=1400 audit(1745757673.601:2689): avc: denied { block_suspend } for pid=6299 comm="syz.1.1080" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 111.254136][ T3306] EXT4-fs error (device loop2): ext4_empty_dir:3086: inode #11: block 4: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=7947, rec_len=12, size=4096 fake=1 [ 111.272861][ T3306] EXT4-fs warning (device loop2): ext4_empty_dir:3088: inode #11: comm syz-executor: directory missing '.' [ 111.284526][ T3306] EXT4-fs error (device loop2): ext4_readdir:264: inode #11: block 4: comm syz-executor: path /203/file1/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=7947, rec_len=12, size=4096 fake=1 [ 111.306678][ T3306] EXT4-fs warning (device loop2): ext4_empty_dir:3088: inode #11: comm syz-executor: directory missing '.' [ 111.319842][ T3306] EXT4-fs warning (device loop2): ext4_empty_dir:3088: inode #11: comm syz-executor: directory missing '.' [ 111.332721][ T3306] EXT4-fs warning (device loop2): ext4_empty_dir:3088: inode #11: comm syz-executor: directory missing '.' [ 111.344596][ T3306] EXT4-fs warning (device loop2): ext4_empty_dir:3088: inode #11: comm syz-executor: directory missing '.' [ 111.356671][ T3306] EXT4-fs warning (device loop2): ext4_empty_dir:3088: inode #11: comm syz-executor: directory missing '.' [ 111.368564][ T3306] EXT4-fs warning (device loop2): ext4_empty_dir:3088: inode #11: comm syz-executor: directory missing '.' [ 111.449117][ T6306] FAULT_INJECTION: forcing a failure. [ 111.449117][ T6306] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 111.462255][ T6306] CPU: 0 UID: 0 PID: 6306 Comm: syz.3.1083 Not tainted 6.15.0-rc3-syzkaller-00342-g5bc1018675ec #0 PREEMPT(voluntary) [ 111.462277][ T6306] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 111.462290][ T6306] Call Trace: [ 111.462295][ T6306] [ 111.462375][ T6306] __dump_stack+0x1d/0x30 [ 111.462396][ T6306] dump_stack_lvl+0xe8/0x140 [ 111.462416][ T6306] dump_stack+0x15/0x1b [ 111.462430][ T6306] should_fail_ex+0x265/0x280 [ 111.462505][ T6306] should_fail+0xb/0x20 [ 111.462535][ T6306] should_fail_usercopy+0x1a/0x20 [ 111.462555][ T6306] _copy_to_user+0x20/0xa0 [ 111.462645][ T6306] simple_read_from_buffer+0xb5/0x130 [ 111.462671][ T6306] proc_fail_nth_read+0x100/0x140 [ 111.462693][ T6306] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 111.462712][ T6306] vfs_read+0x19d/0x6f0 [ 111.462730][ T6306] ? __rcu_read_unlock+0x4f/0x70 [ 111.462751][ T6306] ? __fget_files+0x184/0x1c0 [ 111.462776][ T6306] ksys_read+0xda/0x1a0 [ 111.462869][ T6306] __x64_sys_read+0x40/0x50 [ 111.462894][ T6306] x64_sys_call+0x2d77/0x2fb0 [ 111.462911][ T6306] do_syscall_64+0xd0/0x1a0 [ 111.462960][ T6306] ? clear_bhb_loop+0x25/0x80 [ 111.462981][ T6306] ? clear_bhb_loop+0x25/0x80 [ 111.463002][ T6306] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.463019][ T6306] RIP: 0033:0x7fb2e01bd37c [ 111.463030][ T6306] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 111.463050][ T6306] RSP: 002b:00007fb2de827030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 111.463132][ T6306] RAX: ffffffffffffffda RBX: 00007fb2e03e5fa0 RCX: 00007fb2e01bd37c [ 111.463144][ T6306] RDX: 000000000000000f RSI: 00007fb2de8270a0 RDI: 0000000000000006 [ 111.463153][ T6306] RBP: 00007fb2de827090 R08: 0000000000000000 R09: 0000000000000000 [ 111.463207][ T6306] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 111.463218][ T6306] R13: 0000000000000000 R14: 00007fb2e03e5fa0 R15: 00007ffe02030568 [ 111.463276][ T6306] [ 111.683693][ T29] audit: type=1400 audit(1745757674.061:2690): avc: denied { write } for pid=6308 comm="syz.3.1084" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 111.684414][ T6309] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 111.707935][ T29] audit: type=1400 audit(1745757674.061:2691): avc: denied { ioctl } for pid=6308 comm="syz.3.1084" path="/dev/raw-gadget" dev="devtmpfs" ino=142 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 111.716943][ T6309] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 112.025435][ T3838] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.052182][ T6294] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.061558][ T37] Quota error (device loop2): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 112.084224][ T3838] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.123065][ T3838] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.134266][ T29] audit: type=1400 audit(1745757674.511:2692): avc: denied { mounton } for pid=6312 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 112.188252][ T3838] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.270022][ T3838] bridge_slave_1: left allmulticast mode [ 112.275728][ T3838] bridge_slave_1: left promiscuous mode [ 112.281491][ T3838] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.294564][ T29] audit: type=1400 audit(1745757674.671:2693): avc: denied { read } for pid=3044 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 112.328965][ T3838] bridge_slave_0: left allmulticast mode [ 112.334671][ T3838] bridge_slave_0: left promiscuous mode [ 112.340342][ T3838] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.385993][ T6330] 9pnet_fd: Insufficient options for proto=fd [ 112.401465][ T29] audit: type=1400 audit(1745757674.781:2694): avc: denied { create } for pid=6331 comm="syz.4.1090" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 112.419482][ T6332] atomic_op ffff88811928bd28 conn xmit_atomic 0000000000000000 [ 112.421259][ T29] audit: type=1400 audit(1745757674.781:2695): avc: denied { bind } for pid=6331 comm="syz.4.1090" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 112.447680][ T29] audit: type=1400 audit(1745757674.781:2696): avc: denied { write } for pid=6331 comm="syz.4.1090" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 112.557097][ T29] audit: type=1400 audit(1745757674.911:2697): avc: denied { ioctl } for pid=6331 comm="syz.4.1090" path="socket:[14628]" dev="sockfs" ino=14628 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 112.615861][ T6330] loop3: detected capacity change from 0 to 512 [ 112.626525][ T6330] EXT4-fs: Ignoring removed nobh option [ 112.654510][ T6330] EXT4-fs error (device loop3): ext4_do_update_inode:5211: inode #16: comm syz.3.1089: corrupted inode contents [ 112.667530][ T6330] EXT4-fs (loop3): Remounting filesystem read-only [ 112.674454][ T6330] EXT4-fs (loop3): 1 truncate cleaned up [ 112.682346][ T6330] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 112.696745][ T51] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 112.707340][ T51] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 112.722580][ T3838] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 112.734392][ T3838] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 112.743193][ T6330] ext4 filesystem being mounted at /174/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 112.756095][ T3838] bond0 (unregistering): Released all slaves [ 112.762370][ T51] EXT4-fs (loop3): Quota write (off=8, len=24) cancelled because transaction is not started [ 112.776915][ T6330] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.824634][ T6312] chnl_net:caif_netlink_parms(): no params data found [ 112.887146][ T3838] hsr_slave_0: left promiscuous mode [ 112.895076][ T3838] hsr_slave_1: left promiscuous mode [ 112.900691][ T3838] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 112.908159][ T3838] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 112.937677][ T3838] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 112.945167][ T3838] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 112.958629][ T3838] veth1_macvtap: left promiscuous mode [ 112.970022][ T3838] veth0_macvtap: left promiscuous mode [ 112.981102][ T3838] veth1_vlan: left promiscuous mode [ 112.986519][ T3838] veth0_vlan: left promiscuous mode [ 113.064260][ T3308] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.078321][ T3838] team0 (unregistering): Port device team_slave_1 removed [ 113.088216][ T3838] team0 (unregistering): Port device team_slave_0 removed [ 113.296573][ T6312] bridge0: port 1(bridge_slave_0) entered blocking state [ 113.303677][ T6312] bridge0: port 1(bridge_slave_0) entered disabled state [ 113.315961][ T6312] bridge_slave_0: entered allmulticast mode [ 113.336422][ T6312] bridge_slave_0: entered promiscuous mode [ 113.345348][ T6352] SELinux: ebitmap start bit (9) is not a multiple of the map unit size (64) [ 113.350371][ T6312] bridge0: port 2(bridge_slave_1) entered blocking state [ 113.361300][ T6312] bridge0: port 2(bridge_slave_1) entered disabled state [ 113.387627][ T6352] SELinux: failed to load policy [ 113.391114][ T6312] bridge_slave_1: entered allmulticast mode [ 113.399148][ T6312] bridge_slave_1: entered promiscuous mode [ 113.497557][ T6312] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 113.540880][ T6312] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 113.655064][ T6312] team0: Port device team_slave_0 added [ 113.664772][ T6312] team0: Port device team_slave_1 added [ 113.782712][ T6312] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 113.789676][ T6312] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 113.815643][ T6312] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 113.975940][ T6312] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 113.982943][ T6312] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 114.008912][ T6312] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 114.049671][ T807] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 114.057155][ T807] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 114.064639][ T807] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 114.072117][ T807] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 114.079532][ T807] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 114.086931][ T807] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 114.094446][ T807] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 114.101910][ T807] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 114.109291][ T807] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 114.116735][ T807] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 114.124164][ T807] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 114.193566][ T6411] pim6reg: entered allmulticast mode [ 114.200744][ T6312] hsr_slave_0: entered promiscuous mode [ 114.212651][ T6312] hsr_slave_1: entered promiscuous mode [ 114.218629][ T807] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 114.226136][ T807] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 114.230844][ T6312] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 114.233644][ T807] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 114.248631][ T807] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 114.256307][ T807] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 114.263744][ T807] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 114.271232][ T807] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 114.278633][ T807] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 114.286110][ T807] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 114.293577][ T807] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 114.301065][ T807] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 114.308470][ T807] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 114.315921][ T807] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 114.323329][ T807] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 114.330707][ T807] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 114.341065][ T6312] Cannot create hsr debugfs directory [ 114.357086][ T807] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz0] on syz1 [ 114.493688][ T6423] loop3: detected capacity change from 0 to 8192 [ 114.497235][ T6312] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 114.535002][ T6312] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 114.549509][ T6312] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 114.570646][ T6423] IPv6: Can't replace route, no match found [ 114.577197][ T6312] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 114.634901][ T6442] loop0: detected capacity change from 0 to 512 [ 114.659544][ T6312] 8021q: adding VLAN 0 to HW filter on device bond0 [ 114.685560][ T6442] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 114.701379][ T6312] 8021q: adding VLAN 0 to HW filter on device team0 [ 114.709296][ T6442] ext4 filesystem being mounted at /195/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 114.730317][ T6451] loop1: detected capacity change from 0 to 512 [ 114.732607][ T296] bridge0: port 1(bridge_slave_0) entered blocking state [ 114.743612][ T296] bridge0: port 1(bridge_slave_0) entered forwarding state [ 114.752917][ T6451] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 114.777833][ T296] bridge0: port 2(bridge_slave_1) entered blocking state [ 114.783273][ T6423] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1103'. [ 114.784949][ T296] bridge0: port 2(bridge_slave_1) entered forwarding state [ 114.803807][ T6451] EXT4-fs (loop1): 1 truncate cleaned up [ 114.808185][ T3308] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.819343][ T6451] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 114.835174][ T6451] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.869136][ T6462] netlink: 100 bytes leftover after parsing attributes in process `syz.4.1109'. [ 114.914680][ T6312] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 115.144407][ T6312] veth0_vlan: entered promiscuous mode [ 115.163815][ T6312] veth1_vlan: entered promiscuous mode [ 115.184525][ T6312] veth0_macvtap: entered promiscuous mode [ 115.193777][ T6312] veth1_macvtap: entered promiscuous mode [ 115.208754][ T6312] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 115.219304][ T6312] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.229130][ T6312] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 115.239768][ T6312] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.249587][ T6312] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 115.260323][ T6312] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.270298][ T6312] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 115.280753][ T6312] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.312271][ T6312] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 115.327587][ T6312] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 115.338164][ T6312] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.344643][ T6511] loop0: detected capacity change from 0 to 8192 [ 115.348024][ T6312] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 115.364726][ T6312] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.374556][ T6312] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 115.385003][ T6312] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.394983][ T6312] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 115.405423][ T6312] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.438301][ T6312] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 115.445979][ T6498] netem: incorrect ge model size [ 115.453447][ T6498] netem: change failed [ 115.473532][ T6312] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.482296][ T6312] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.491020][ T6312] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.499786][ T6312] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.546145][ T6526] loop0: detected capacity change from 0 to 512 [ 115.583437][ T6526] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 115.649451][ T6540] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 115.673077][ T6526] ext4 filesystem being mounted at /200/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 115.741368][ T3308] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.886942][ T6567] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1128'. [ 115.966389][ T6569] loop3: detected capacity change from 0 to 512 [ 116.005584][ T6569] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 116.026131][ T6569] ext4 filesystem being mounted at /185/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 116.098491][ T6573] loop1: detected capacity change from 0 to 8192 [ 116.129050][ T6567] loop5: detected capacity change from 0 to 2048 [ 116.129484][ T6569] EXT4-fs error (device loop3): ext4_do_update_inode:5211: inode #2: comm syz.3.1129: corrupted inode contents [ 116.167354][ T6573] IPv6: Can't replace route, no match found [ 116.192237][ T6569] EXT4-fs error (device loop3): ext4_dirty_inode:6103: inode #2: comm syz.3.1129: mark_inode_dirty error [ 116.231032][ T29] kauditd_printk_skb: 181 callbacks suppressed [ 116.231046][ T29] audit: type=1400 audit(1745757678.601:2873): avc: denied { execmem } for pid=6572 comm="syz.1.1130" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 116.290759][ T6569] EXT4-fs error (device loop3): ext4_do_update_inode:5211: inode #2: comm syz.3.1129: corrupted inode contents [ 116.303276][ T29] audit: type=1400 audit(1745757678.611:2874): avc: denied { append } for pid=6565 comm="syz.5.1128" name="001" dev="devtmpfs" ino=147 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 116.326255][ T29] audit: type=1400 audit(1745757678.651:2875): avc: denied { sys_chroot } for pid=6596 comm="dhcpcd" capability=18 scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=capability permissive=1 [ 116.348058][ T29] audit: type=1400 audit(1745757678.651:2876): avc: denied { setgid } for pid=6596 comm="dhcpcd" capability=6 scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=capability permissive=1 [ 116.368905][ T29] audit: type=1400 audit(1745757678.651:2877): avc: denied { setuid } for pid=6596 comm="dhcpcd" capability=7 scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=capability permissive=1 [ 116.389954][ T29] audit: type=1400 audit(1745757678.651:2878): avc: denied { setrlimit } for pid=6596 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=process permissive=1 [ 116.421035][ T6569] EXT4-fs error (device loop3): __ext4_ext_dirty:207: inode #2: comm syz.3.1129: mark_inode_dirty error [ 116.453844][ T6569] EXT4-fs error (device loop3): ext4_do_update_inode:5211: inode #2: comm syz.3.1129: corrupted inode contents [ 116.465710][ T29] audit: type=1400 audit(1745757678.821:2879): avc: denied { create } for pid=6568 comm="syz.3.1129" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 116.485782][ T29] audit: type=1400 audit(1745757678.831:2880): avc: denied { setattr } for pid=6568 comm="syz.3.1129" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 116.507628][ T29] audit: type=1400 audit(1745757678.841:2881): avc: denied { create } for pid=6600 comm="syz.0.1135" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 116.527126][ T29] audit: type=1400 audit(1745757678.841:2882): avc: denied { setopt } for pid=6600 comm="syz.0.1135" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 116.564409][ T6569] EXT4-fs error (device loop3): ext4_dirty_inode:6103: inode #2: comm syz.3.1129: mark_inode_dirty error [ 116.593302][ T6569] EXT4-fs error (device loop3): ext4_do_update_inode:5211: inode #2: comm syz.3.1129: corrupted inode contents [ 116.619400][ T6601] loop0: detected capacity change from 0 to 128 [ 116.628029][ T6589] EXT4-fs error (device loop3): ext4_do_update_inode:5211: inode #2: comm syz.3.1129: corrupted inode contents [ 116.643743][ T6589] EXT4-fs error (device loop3): add_dirent_to_buf:2155: inode #2: comm syz.3.1129: mark_inode_dirty error [ 116.656288][ T6573] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1130'. [ 116.706684][ T6601] syz.0.1135: attempt to access beyond end of device [ 116.706684][ T6601] loop0: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 116.707850][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.735558][ T6601] syz.0.1135: attempt to access beyond end of device [ 116.735558][ T6601] loop0: rw=524288, sector=145, nr_sectors = 224 limit=128 [ 116.750042][ T6601] syz.0.1135: attempt to access beyond end of device [ 116.750042][ T6601] loop0: rw=0, sector=145, nr_sectors = 8 limit=128 [ 116.763638][ T6601] syz.0.1135: attempt to access beyond end of device [ 116.763638][ T6601] loop0: rw=0, sector=145, nr_sectors = 8 limit=128 [ 116.778449][ T6601] syz.0.1135: attempt to access beyond end of device [ 116.778449][ T6601] loop0: rw=0, sector=145, nr_sectors = 8 limit=128 [ 116.793933][ T6601] syz.0.1135: attempt to access beyond end of device [ 116.793933][ T6601] loop0: rw=0, sector=145, nr_sectors = 8 limit=128 [ 116.807356][ T6601] syz.0.1135: attempt to access beyond end of device [ 116.807356][ T6601] loop0: rw=0, sector=145, nr_sectors = 8 limit=128 [ 116.820599][ T6601] syz.0.1135: attempt to access beyond end of device [ 116.820599][ T6601] loop0: rw=0, sector=145, nr_sectors = 8 limit=128 [ 116.835226][ T6601] syz.0.1135: attempt to access beyond end of device [ 116.835226][ T6601] loop0: rw=0, sector=145, nr_sectors = 8 limit=128 [ 116.848581][ T6601] syz.0.1135: attempt to access beyond end of device [ 116.848581][ T6601] loop0: rw=0, sector=145, nr_sectors = 8 limit=128 [ 117.190317][ T6638] siw: device registration error -23 [ 117.384834][ T6642] loop0: detected capacity change from 0 to 2048 [ 117.431680][ T4281] loop0: p1 < > p4 [ 117.437206][ T4281] loop0: p4 size 8388608 extends beyond EOD, truncated [ 117.454846][ T6642] loop0: p1 < > p4 [ 117.466323][ T6647] 9pnet_fd: Insufficient options for proto=fd [ 117.481363][ T6642] loop0: p4 size 8388608 extends beyond EOD, truncated [ 117.744366][ T4685] IPVS: starting estimator thread 0... [ 117.749962][ T6665] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 117.841397][ T6666] IPVS: using max 2832 ests per chain, 141600 per kthread [ 117.931960][ T6675] loop1: detected capacity change from 0 to 8192 [ 117.971654][ T6671] netem: incorrect ge model size [ 117.976748][ T6671] netem: change failed [ 118.563919][ T6718] loop0: detected capacity change from 0 to 8192 [ 118.633981][ T6717] netem: incorrect ge model size [ 118.639289][ T6717] netem: change failed [ 118.715024][ T6728] loop0: detected capacity change from 0 to 512 [ 118.843062][ T6738] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1181'. [ 118.853541][ T6728] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 118.866355][ T6728] ext4 filesystem being mounted at /209/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 118.893693][ T3308] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.017232][ T6744] loop0: detected capacity change from 0 to 256 [ 119.044923][ T6744] FAT-fs (loop0): bogus sectors per cluster 0 [ 119.051124][ T6744] FAT-fs (loop0): Can't find a valid FAT filesystem [ 119.636365][ T6757] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.1188'. [ 119.868394][ T6766] geneve2: entered promiscuous mode [ 119.873673][ T6766] geneve2: entered allmulticast mode [ 120.006416][ T6780] loop1: detected capacity change from 0 to 128 [ 120.651509][ T6798] 9pnet_fd: Insufficient options for proto=fd [ 120.694824][ T6798] hub 2-0:1.0: USB hub found [ 120.711314][ T6798] hub 2-0:1.0: 8 ports detected [ 120.809747][ T6814] loop1: detected capacity change from 0 to 512 [ 120.821653][ T6814] EXT4-fs: Ignoring removed nobh option [ 120.894504][ T6814] EXT4-fs error (device loop1): ext4_do_update_inode:5211: inode #16: comm syz.1.1204: corrupted inode contents [ 120.926650][ T6814] EXT4-fs (loop1): Remounting filesystem read-only [ 120.933503][ T6814] EXT4-fs (loop1): 1 truncate cleaned up [ 120.939498][ T6814] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 120.952245][ T1663] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 120.962778][ T1663] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 120.973433][ T1663] EXT4-fs (loop1): Quota write (off=8, len=24) cancelled because transaction is not started [ 120.977224][ T6814] ext4 filesystem being mounted at /253/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 120.999580][ T6814] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.042544][ T6838] FAULT_INJECTION: forcing a failure. [ 121.042544][ T6838] name failslab, interval 1, probability 0, space 0, times 0 [ 121.055284][ T6838] CPU: 1 UID: 0 PID: 6838 Comm: syz.3.1220 Not tainted 6.15.0-rc3-syzkaller-00342-g5bc1018675ec #0 PREEMPT(voluntary) [ 121.055312][ T6838] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 121.055325][ T6838] Call Trace: [ 121.055330][ T6838] [ 121.055348][ T6838] __dump_stack+0x1d/0x30 [ 121.055369][ T6838] dump_stack_lvl+0xe8/0x140 [ 121.055389][ T6838] dump_stack+0x15/0x1b [ 121.055406][ T6838] should_fail_ex+0x265/0x280 [ 121.055439][ T6838] should_failslab+0x8c/0xb0 [ 121.055493][ T6838] __kmalloc_node_track_caller_noprof+0xa4/0x410 [ 121.055515][ T6838] ? sidtab_sid2str_get+0xa0/0x130 [ 121.055553][ T6838] kmemdup_noprof+0x2b/0x70 [ 121.055572][ T6838] sidtab_sid2str_get+0xa0/0x130 [ 121.055602][ T6838] security_sid_to_context_core+0x1eb/0x2e0 [ 121.055637][ T6838] security_sid_to_context+0x27/0x40 [ 121.055662][ T6838] avc_audit_post_callback+0x10f/0x520 [ 121.055694][ T6838] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 121.055841][ T6838] common_lsm_audit+0x1b8/0x230 [ 121.055910][ T6838] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 121.055941][ T6838] ? avc_denied+0xe4/0x100 [ 121.055986][ T6838] slow_avc_audit+0x104/0x140 [ 121.056092][ T6838] avc_has_perm+0x128/0x150 [ 121.056121][ T6838] sel_write_validatetrans+0xe3/0x370 [ 121.056150][ T6838] ? __pfx_sel_write_validatetrans+0x10/0x10 [ 121.056169][ T6838] vfs_write+0x266/0x8d0 [ 121.056260][ T6838] ? __rcu_read_unlock+0x4f/0x70 [ 121.056300][ T6838] ? __fget_files+0x184/0x1c0 [ 121.056329][ T6838] ksys_write+0xda/0x1a0 [ 121.056452][ T6838] __x64_sys_write+0x40/0x50 [ 121.056475][ T6838] x64_sys_call+0x2cdd/0x2fb0 [ 121.056495][ T6838] do_syscall_64+0xd0/0x1a0 [ 121.056514][ T6838] ? clear_bhb_loop+0x25/0x80 [ 121.056615][ T6838] ? clear_bhb_loop+0x25/0x80 [ 121.056637][ T6838] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 121.056729][ T6838] RIP: 0033:0x7fb2e01be969 [ 121.056744][ T6838] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 121.056763][ T6838] RSP: 002b:00007fb2de827038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 121.056822][ T6838] RAX: ffffffffffffffda RBX: 00007fb2e03e5fa0 RCX: 00007fb2e01be969 [ 121.056835][ T6838] RDX: 000000000000007b RSI: 0000200000000280 RDI: 0000000000000006 [ 121.056848][ T6838] RBP: 00007fb2de827090 R08: 0000000000000000 R09: 0000000000000000 [ 121.056860][ T6838] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 121.056926][ T6838] R13: 0000000000000000 R14: 00007fb2e03e5fa0 R15: 00007ffe02030568 [ 121.056950][ T6838] [ 121.350319][ T6843] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1222'. [ 121.848815][ T6856] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 121.855066][ T29] kauditd_printk_skb: 269 callbacks suppressed [ 121.855081][ T29] audit: type=1400 audit(1745757684.221:3146): avc: denied { ioctl } for pid=6850 comm="syz.5.1226" path="/dev/sg0" dev="devtmpfs" ino=135 ioctlcmd=0x5309 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 121.912973][ T29] audit: type=1400 audit(1745757684.291:3147): avc: denied { write } for pid=6857 comm="syz.0.1227" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 121.935874][ T29] audit: type=1400 audit(1745757684.291:3148): avc: denied { connect } for pid=6857 comm="syz.0.1227" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 121.955502][ T29] audit: type=1400 audit(1745757684.291:3149): avc: denied { name_connect } for pid=6857 comm="syz.0.1227" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 121.975818][ T29] audit: type=1400 audit(1745757684.291:3150): avc: denied { shutdown } for pid=6857 comm="syz.0.1227" lport=34604 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 121.999998][ T6858] loop0: detected capacity change from 0 to 128 [ 122.047994][ T29] audit: type=1326 audit(1745757684.421:3151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6861 comm="syz.5.1228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff93d0ee969 code=0x7ffc0000 [ 122.071529][ T29] audit: type=1326 audit(1745757684.421:3152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6861 comm="syz.5.1228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff93d0ee969 code=0x7ffc0000 [ 122.095016][ T29] audit: type=1326 audit(1745757684.421:3153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6861 comm="syz.5.1228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7ff93d0ee969 code=0x7ffc0000 [ 122.118552][ T29] audit: type=1326 audit(1745757684.421:3154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6861 comm="syz.5.1228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff93d0ee969 code=0x7ffc0000 [ 122.142208][ T29] audit: type=1326 audit(1745757684.421:3155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6861 comm="syz.5.1228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff93d0ee969 code=0x7ffc0000 [ 122.215766][ T6867] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1229'. [ 122.267264][ T6872] batadv0 speed is unknown, defaulting to 1000 [ 122.277629][ T6874] FAULT_INJECTION: forcing a failure. [ 122.277629][ T6874] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 122.290786][ T6874] CPU: 1 UID: 0 PID: 6874 Comm: syz.1.1233 Not tainted 6.15.0-rc3-syzkaller-00342-g5bc1018675ec #0 PREEMPT(voluntary) [ 122.290810][ T6874] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 122.290820][ T6874] Call Trace: [ 122.290825][ T6874] [ 122.290852][ T6874] __dump_stack+0x1d/0x30 [ 122.290918][ T6874] dump_stack_lvl+0xe8/0x140 [ 122.290940][ T6874] dump_stack+0x15/0x1b [ 122.290959][ T6874] should_fail_ex+0x265/0x280 [ 122.291040][ T6874] should_fail+0xb/0x20 [ 122.291092][ T6874] should_fail_usercopy+0x1a/0x20 [ 122.291111][ T6874] _copy_from_iter+0xcf/0xdd0 [ 122.291130][ T6874] ? __build_skb_around+0x1a0/0x200 [ 122.291211][ T6874] ? __alloc_skb+0x223/0x320 [ 122.291244][ T6874] netlink_sendmsg+0x471/0x6b0 [ 122.291309][ T6874] ? __pfx_netlink_sendmsg+0x10/0x10 [ 122.291357][ T6874] __sock_sendmsg+0x142/0x180 [ 122.291462][ T6874] ____sys_sendmsg+0x31e/0x4e0 [ 122.291541][ T6874] ___sys_sendmsg+0x17b/0x1d0 [ 122.291575][ T6874] __x64_sys_sendmsg+0xd4/0x160 [ 122.291643][ T6874] x64_sys_call+0x2999/0x2fb0 [ 122.291661][ T6874] do_syscall_64+0xd0/0x1a0 [ 122.291680][ T6874] ? clear_bhb_loop+0x25/0x80 [ 122.291743][ T6874] ? clear_bhb_loop+0x25/0x80 [ 122.291767][ T6874] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 122.291790][ T6874] RIP: 0033:0x7fd61746e969 [ 122.291802][ T6874] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 122.291846][ T6874] RSP: 002b:00007fd615ad7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 122.291884][ T6874] RAX: ffffffffffffffda RBX: 00007fd617695fa0 RCX: 00007fd61746e969 [ 122.291897][ T6874] RDX: 0000000020040814 RSI: 0000200000000840 RDI: 0000000000000006 [ 122.291910][ T6874] RBP: 00007fd615ad7090 R08: 0000000000000000 R09: 0000000000000000 [ 122.291923][ T6874] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 122.291936][ T6874] R13: 0000000000000000 R14: 00007fd617695fa0 R15: 00007ffd13eaba88 [ 122.291956][ T6874] [ 122.386700][ T6872] batadv0 speed is unknown, defaulting to 1000 [ 122.497834][ T6872] batadv0 speed is unknown, defaulting to 1000 [ 122.504918][ T6888] vhci_hcd: default hub control req: 0000 v0000 i0000 l31125 [ 122.520375][ T6872] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 122.552453][ T6891] loop5: detected capacity change from 0 to 512 [ 122.643970][ T6891] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 122.664921][ T6872] batadv0 speed is unknown, defaulting to 1000 [ 122.678109][ T6872] batadv0 speed is unknown, defaulting to 1000 [ 122.685423][ T6891] ext4 filesystem being mounted at /19/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 122.699588][ T6898] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 122.714044][ T6872] batadv0 speed is unknown, defaulting to 1000 [ 122.732711][ T6872] batadv0 speed is unknown, defaulting to 1000 [ 123.062614][ T6312] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 123.230371][ T6899] batadv0 speed is unknown, defaulting to 1000 [ 123.324268][ T6872] batadv0 speed is unknown, defaulting to 1000 [ 123.390018][ T6910] SELinux: policydb version 468990111 does not match my version range 15-34 [ 123.404223][ T6910] SELinux: failed to load policy [ 123.730370][ T6922] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1244'. [ 124.029205][ T6925] 9pnet: p9_errstr2errno: server reported unknown error [ 124.068601][ T6919] loop3: detected capacity change from 0 to 8192 [ 124.110176][ T6919] netem: incorrect ge model size [ 124.115270][ T6919] netem: change failed [ 124.220233][ T6930] loop1: detected capacity change from 0 to 8192 [ 124.272746][ T6927] netem: incorrect ge model size [ 124.278916][ T6927] netem: change failed [ 124.340562][ T6942] loop0: detected capacity change from 0 to 764 [ 124.676609][ T6960] batadv0 speed is unknown, defaulting to 1000 [ 124.871967][ T6959] Symlink component flag not implemented [ 124.898336][ T6959] Symlink component flag not implemented (7) [ 125.326608][ T6970] loop0: detected capacity change from 0 to 256 [ 125.352907][ T6970] FAT-fs (loop0): bogus sectors per cluster 0 [ 125.359100][ T6970] FAT-fs (loop0): Can't find a valid FAT filesystem [ 125.519063][ T6929] netem: incorrect ge model size [ 125.524502][ T6929] netem: change failed [ 125.577556][ T6988] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1272'. [ 125.638487][ T6992] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1274'. [ 126.049966][ T7020] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1280'. [ 126.063661][ T7020] 9pnet_fd: Insufficient options for proto=fd [ 126.293075][ T7030] loop1: detected capacity change from 0 to 8192 [ 126.304402][ T7030] IPv6: Can't replace route, no match found [ 126.494475][ T7053] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1289'. [ 126.537019][ T7053] wireguard0: entered promiscuous mode [ 126.542578][ T7053] wireguard0: entered allmulticast mode [ 126.871112][ T29] kauditd_printk_skb: 187 callbacks suppressed [ 126.871127][ T29] audit: type=1400 audit(1745757689.241:3343): avc: denied { create } for pid=7082 comm="syz.4.1301" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 126.921051][ T29] audit: type=1400 audit(1745757689.291:3344): avc: denied { create } for pid=7092 comm="syz.3.1295" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 126.976358][ T7093] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1295'. [ 126.981064][ T29] audit: type=1400 audit(1745757689.351:3345): avc: denied { cpu } for pid=7092 comm="syz.3.1295" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 126.985424][ T7093] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1295'. [ 127.046527][ T29] audit: type=1400 audit(1745757689.421:3346): avc: denied { sys_module } for pid=7092 comm="syz.3.1295" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 127.071862][ T29] audit: type=1400 audit(1745757689.451:3347): avc: denied { read } for pid=7092 comm="syz.3.1295" dev="nsfs" ino=4026532619 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 127.093117][ T29] audit: type=1400 audit(1745757689.451:3348): avc: denied { open } for pid=7092 comm="syz.3.1295" path="net:[4026532619]" dev="nsfs" ino=4026532619 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 127.093145][ T29] audit: type=1400 audit(1745757689.451:3349): avc: denied { create } for pid=7092 comm="syz.3.1295" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 127.094518][ T29] audit: type=1400 audit(1745757689.451:3350): avc: denied { ioctl } for pid=7092 comm="syz.3.1295" path="socket:[17581]" dev="sockfs" ino=17581 ioctlcmd=0x48f0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 127.179980][ T7107] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1307'. [ 127.239857][ T7109] loop1: detected capacity change from 0 to 8192 [ 127.258548][ T7109] IPv6: Can't replace route, no match found [ 127.268089][ T29] audit: type=1400 audit(1745757689.631:3351): avc: denied { bind } for pid=7112 comm="syz.4.1311" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 127.288432][ T29] audit: type=1400 audit(1745757689.631:3352): avc: denied { setopt } for pid=7112 comm="syz.4.1311" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 127.309743][ T7113] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.375084][ T7113] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.423978][ T7113] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.474140][ T7113] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.503288][ T7122] siw: device registration error -23 [ 127.531049][ T7113] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.543661][ T7113] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.555958][ T7113] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.577221][ T7113] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.723582][ T7146] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1318'. [ 127.756043][ T7151] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1319'. [ 127.778195][ T7155] 9pnet_fd: Insufficient options for proto=fd [ 127.786306][ T7143] ================================================================== [ 127.794381][ T7143] BUG: KCSAN: data-race in alloc_pid / copy_process [ 127.800967][ T7143] [ 127.803290][ T7143] read-write to 0xffffffff8685f030 of 4 bytes by task 7156 on cpu 1: [ 127.811343][ T7143] alloc_pid+0x539/0x720 [ 127.815579][ T7143] copy_process+0xe0e/0x1f90 [ 127.820164][ T7143] kernel_clone+0x16c/0x5b0 [ 127.824666][ T7143] __se_sys_clone3+0x1c2/0x200 [ 127.829444][ T7143] __x64_sys_clone3+0x31/0x40 [ 127.834118][ T7143] x64_sys_call+0x10c9/0x2fb0 [ 127.838792][ T7143] do_syscall_64+0xd0/0x1a0 [ 127.843309][ T7143] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.849199][ T7143] [ 127.851519][ T7143] read to 0xffffffff8685f030 of 4 bytes by task 7143 on cpu 0: [ 127.859052][ T7143] copy_process+0x1790/0x1f90 [ 127.863722][ T7143] kernel_clone+0x16c/0x5b0 [ 127.868226][ T7143] __x64_sys_clone+0xe6/0x120 [ 127.872907][ T7143] x64_sys_call+0x2c59/0x2fb0 [ 127.877578][ T7143] do_syscall_64+0xd0/0x1a0 [ 127.882080][ T7143] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.887968][ T7143] [ 127.890283][ T7143] value changed: 0x800000d7 -> 0x800000d8 [ 127.895985][ T7143] [ 127.898298][ T7143] Reported by Kernel Concurrency Sanitizer on: [ 127.904449][ T7143] CPU: 0 UID: 0 PID: 7143 Comm: dhcpcd-run-hook Not tainted 6.15.0-rc3-syzkaller-00342-g5bc1018675ec #0 PREEMPT(voluntary) [ 127.917284][ T7143] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 127.927334][ T7143] ================================================================== [ 127.968480][ T7155] hub 2-0:1.0: USB hub found [ 127.975543][ T7155] hub 2-0:1.0: 8 ports detected [ 128.052416][ T7171] loop5: detected capacity change from 0 to 512 [ 128.063598][ T7171] EXT4-fs: Ignoring removed nobh option [ 128.083782][ T7171] EXT4-fs error (device loop5): ext4_do_update_inode:5211: inode #16: comm syz.5.1320: corrupted inode contents [ 128.111414][ T7171] EXT4-fs (loop5): Remounting filesystem read-only [ 128.118071][ T7171] EXT4-fs (loop5): 1 truncate cleaned up [ 128.124266][ T7171] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 128.136938][ T296] EXT4-fs (loop5): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 128.147554][ T296] EXT4-fs (loop5): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 128.159752][ T7171] ext4 filesystem being mounted at /34/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 128.160539][ T296] EXT4-fs (loop5): Quota write (off=8, len=24) cancelled because transaction is not started [ 128.183527][ T7171] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.