last executing test programs: 3m48.545920208s ago: executing program 1 (id=1618): ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(0xffffffffffffffff, 0x8004587d, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x16, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x41, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r1}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='kfree\x00', r2}, 0x9) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newtaction={0xe68, 0x30, 0x871a15abc695fa3d, 0x70bd27, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{}, 0x93, 0xfc}, [{0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {}, {0x1, 0x0, 0x0, 0x4000000, 0x7, 0x80000}, {0x8, 0x5, 0x0, 0xfffffffc, 0x5}, {}, {0x0, 0x0, 0x0, 0x0, 0x6}, {0x0, 0xc3}, {0x0, 0x5}, {0x5}, {}, {0x0, 0x10}, {0x0, 0x4, 0x0, 0x8000000}, {0x0, 0xffffffff, 0x0, 0x0, 0xfffffffd}, {0x2, 0x0, 0x400000, 0x0, 0x6}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8000000}, {}, {0x0, 0x0, 0x0, 0x0, 0x20}, {0xfffffffd}, {}, {0x0, 0x0, 0x0, 0xfffffffc}, {0x0, 0x2000}, {0x0, 0x0, 0x0, 0x805}, {0x0, 0x7, 0x0, 0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0x2, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x0, 0x5, 0xfffffffd}, {0xffffffff}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {0xffffffff}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0xffffffff, 0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {0x0, 0x9, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x81}, {0x0, 0x0, 0x0, 0x1}, {0x80}, {0x0, 0x0, 0x0, 0x5}, {}, {0x0, 0x0, 0x8}, {0x0, 0x0, 0x0, 0x0, 0x9}, {0x0, 0x0, 0x0, 0x0, 0x3}, {}, {}, {0x0, 0x15, 0x0, 0x48510}, {0x4}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xd, 0xffffffff}, {}, {}, {0x0, 0xfffefffd}, {0x0, 0x0, 0x0, 0x1}, {}, {0x5}, {}, {0x0, 0x0, 0x0, 0xd8, 0x40000000}, {}, {0x0, 0x7, 0x0, 0x0, 0x0, 0x400000}, {0x4, 0x0, 0x200}, {}, {}, {0x5}, {}, {0x0, 0x0, 0x0, 0x4309, 0x0, 0xfb4}, {}, {0x0, 0x101, 0x0, 0x0, 0x0, 0xffffffff}, {0x0, 0x4}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x3, 0x4, 0x9}, {0xfffffffe}, {0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x2}, {}, {}, {}, {0x800000, 0x0, 0x0, 0x0, 0x0, 0x56}, {0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffefffff}, {}, {0x0, 0x0, 0x6, 0x0, 0x4}, {}, {}, {0x0, 0xfffffffd}, {0x4ccc}, {0x7f}, {}, {0x2}, {0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {0x2, 0x0, 0x20000000}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x7ff}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x292}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {0x0, 0x0, 0x0, 0xa9}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, {0x0, 0x5, 0x0, 0x0, 0x1}, {0x0, 0x5}, {0x0, 0x0, 0x3d8, 0x0, 0x7}, {0x10000000, 0x0, 0x0, 0x0, 0x4}, {0x0, 0x2e9c}, {0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0x3}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {}, {}, {0xfffffffe, 0x0, 0x0, 0x0, 0x8000}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {}, {0x0, 0x8000}, {0x0, 0x0, 0x10000, 0x0, 0xfffffffc}, {0x0, 0x80000000, 0x0, 0x7dff800}], [{}, {}, {}, {}, {}, {0x3}, {}, {0x0, 0x1}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {0x1}, {}, {}, {}, {0x0, 0x1}, {}, {0x4, 0x1}, {}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x1}, {}, {}, {}, {}, {}, {0x3}, {0x0, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {0x4}, {0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x0, 0x1}, {}, {}, {0x1, 0x1}, {}, {}, {0x1}, {}, {0x5}, {}, {0x3}, {0x0, 0x1}, {}, {}, {}, {0x5}, {0x2, 0x1}, {}, {}, {}, {0x3}, {0x0, 0x1}, {}, {}, {}, {0x2}, {}, {}, {0x4}, {0x3}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0) 3m48.545072628s ago: executing program 1 (id=1619): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000840)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x20, 0x16, 0xa, 0x801, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}]}], {0x14}}, 0x48}}, 0x24040880) 3m48.495682189s ago: executing program 1 (id=1620): bind$tipc(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000003, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) bpf$MAP_CREATE(0x0, 0x0, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0xf4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r3 = dup2(r0, r0) ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x200000a, 0x1, 0x8}) ioctl$BLKTRACESETUP(r3, 0x1276, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000040), 0x400000011ff, 0x101301) ioctl$USBDEVFS_SUBMITURB(r4, 0x8038550a, &(0x7f0000000280)=@urb_type_control={0x2, {}, 0xfffffff8, 0x40, &(0x7f0000000000)={0x4b5a9da54893e123, 0x1, 0x8, 0xfffd}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0}) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) r5 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) r6 = fsmount(r5, 0x0, 0x0) fchdir(r6) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYRES64=r2], 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r7, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r8}, 0x18) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x38, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_bp={0x0, 0xd}, 0x0, 0x10000, 0x1, 0x1, 0x8, 0x20005, 0x2b, 0x0, 0x0, 0x0, 0xffffffffffffff7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x80) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x29}, './file0\x00'}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) 3m47.472323726s ago: executing program 1 (id=1632): syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x0, &(0x7f00000000c0)={[{@nouid32}]}, 0x1, 0x3e2, &(0x7f0000000c80)="$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") socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) syz_io_uring_setup(0x19d1, &(0x7f00000003c0)={0x0, 0x0, 0x10100, 0x8000000, 0x8000000}, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, 0x0, 0x0) socket$inet6_icmp(0xa, 0x2, 0x3a) pipe(&(0x7f0000000080)) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b708000002001e007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000000)='ext4_da_write_pages\x00', r4, 0x0, 0x1}, 0x18) syz_open_dev$evdev(&(0x7f0000000040), 0xf7b, 0x20a000) socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) socket$inet_udp(0x2, 0x2, 0x0) r5 = socket(0x10, 0x803, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r6, 0x29, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="3c34000000000000040100c910fc02000000000000000000000000000107", @ANYRES32=r5], 0x1b0) setsockopt$inet6_IPV6_HOPOPTS(r6, 0x29, 0x36, 0x0, 0x0) io_setup(0x1, &(0x7f00000004c0)) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101042, 0x0) unlink(&(0x7f0000000000)='./file1\x00') r7 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r7) 3m47.280893839s ago: executing program 1 (id=1636): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000000c0)='kfree\x00', r1, 0x0, 0xfffffffffffffffd}, 0x18) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x240, 0x0) read(r2, &(0x7f0000000200)=""/202, 0xca) 3m47.015040744s ago: executing program 1 (id=1642): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000840)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x20, 0x16, 0xa, 0x801, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}]}], {0x14}}, 0x48}}, 0x24040880) 3m47.014710744s ago: executing program 32 (id=1642): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000840)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x20, 0x16, 0xa, 0x801, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}]}], {0x14}}, 0x48}}, 0x24040880) 3.005073529s ago: executing program 2 (id=4229): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3cefda00fe8c6b58, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f3bbb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1089d8b8588d72ec29c48b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68000000000000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d40224edc5465a932b77a74e802a0dc6bf25d8a242bc6099ad2300000480006ef6c1ff0900ff0000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767192361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80af740b5b7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae616b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48bc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f57000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1f001b2cd3170400000085be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe760e717a04becff0f719197724f4fce1093b62d7e8c7123d890cec55bf404e4e1f74b7eed82571be54c72d978cf906df08f11f1c4042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f871b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9f0390a6f01e3e483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5eaff07000000000000b99c9cc0ad1857216f000000009191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a798de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df98674152f94e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270b939b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f0868afc4294859323e7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf01cfaed9ef0ce21d69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546bb2e51935ab9067ec3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab40743b2a428f1da1f626602111b40e761fd21081920382f14d12ca3c471c7868e7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df902aeec50e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec743af930cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd6d89f80a4377b1b1292a893a516dab183ee65744fb8fc4f9ce2242e0f000000000100000000d77480e0345effff6413258d1f6eb190aa28cbb4bafe3436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fb03b84f63e022fe755f4007a4a899eaf52c4f491f1e97c862e29e4570600000091c691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104d74dc07748f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c7167d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c2499ce3ffe2fef03f7cdd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426cfce471fef821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ada08f5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba3c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63e4581d5cc41cbde2ba66adc1168070c8c6e18a6a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c514b37c668554d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c3340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a39938613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b909006f19eecb87e39175e85e17000000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f1400010000ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1b0100448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae05025040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483d02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1098e40550a1cfd80e918d685a7b099a4f8ed654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732ab916a781b9912160a3fd2a2e74dd690c57bdfdc1f069f949170ef8cb9c13c12138116bca7a8c59363799be7005c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2c74664d60a4b9423f3297bc8eb91b4ee1d73272abbef3e7a828a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece58e752b47e6f677eff7c5c568a89d6e36b165c39132a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae1676384ff799783f55d7e5a1a0920300000000000000d98440c355927629f2bcf9dc405a18ca0264400abf38e90000000000000000008faf2cddffbfa69bf32eb718e88ec75603ed7c7a8825ce0f27a114bd7a4ab74d0c7b8d90ccc1c3ca6620def782e24d75aed70eb676437f62677a69e0994cd82d72e95493c830fe9515329f40b7025326dec33a527c5d999298eaa3690fd0d38a02fc6e0bc16dbe19f353027edc014411e1138087221492f5d5e5cc9d0a1acd3f581eda9a807aa0e609f935f626d96351e0ff116686cbeb8939feecd5dac8cf45101942cc7cec21b7f337df5431bcf7e504b7c427f70a10e1cb8993a661306a0576b638a0171e6800b5b35589d676eb30ed1a72e8f7b057eb281c4504195635b6b285ebaba019913a2520e43ed790231f047f7d3789c10ae7d724929f77aec1d33d9587580268ee14396f71e7ef588cb2560d6bd0795a9b97281229eb16de086553469fad7214ffc3e416f8b8e442dce1d37f9b1c88a5d8a8d9f2fe45bd8df213ecb4194c8554aea13cadcd502e51f6fec80418e772b5bd8d0228949058038b185909ee542848680f9ad43f4057d676d5e21ae3d7e0e4a28c04f112a94707f032b35915e42993ff148291b8babe026646ee41905992db217561b90811c4702a14f312fe5d2ae7257db6be1034cc1c346b76a853ce274bf0435e18f7e86c660c18c80f30505dd4cf2ae2a1893b83c62d61bfeadc1f913e4cab2b897e096dd3fe3525090410cb23bab36cdf200a36014032cf6e5121803c5a0c4a273a19f340163fc6265425d513a1294b8439276394945d94a589708e32a1cb30f1fa4b2f08e01dc5e8c6732e6dc59b5c8cb400000000000000592c9b68f09c8f5ddb20b4ae08b4d9df548e5ed6cd47b91a4bea8b6aa52edf64576aef1e43f2958437fdc20fbbd0d4e13d8cce1193b2f9b4f107e25af178d056e1b1e40bd75b013f7484fae0bc447b1ffaf34819fe3ad1a634c94345e26e1e68dec08723a37b05d1594a66a4718a51d4d67fc880c9d640f4eacc509873f1a103c87f69"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f00000001c0)='w\xde\xa3\x05\xff\a\x00\x00\x00\x00\x00\x00\x8f\xc0\x9b\x86\xef\\\xc0\x89\av\x9f\xd6\xd1\x98,\xc8\x18E/\x8c\x1a\xe3\xbd') mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/vlan/vlan1\x00') r2 = socket(0x2, 0x2, 0x1) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r2, 0x8983, &(0x7f0000000000)={0x1, 'vlan1\x00', {}, 0xc2c}) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x200000, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) r3 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) write$selinux_validatetrans(r3, &(0x7f0000000280)=ANY=[@ANYBLOB="73797374656d5f753a6f626a6563745f723a667361646d5f6c6f675f743a7330b37a1dc59046de96a5bcd12073797374656d5f753a6f626a6563745f723a62696e5f743a733020303006"], 0x60) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() request_key(&(0x7f00000003c0)='asymmetric\x00', &(0x7f0000000400)={'syz', 0x3}, 0x0, 0xfffffffffffffffe) keyctl$set_reqkey_keyring(0xe, 0x2) sched_setscheduler(r4, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x26, 0x1, 0x0, 0x1, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000300000000000800"/28], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000018110000000000000000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000070000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000820000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r8}, 0x10) socket$unix(0x1, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x4000) r9 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r9, 0x6, 0x0, 0x0, 0x0) 1.945359117s ago: executing program 2 (id=4243): bind$tipc(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000003, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) bpf$MAP_CREATE(0x0, 0x0, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0xf4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = dup2(r0, r0) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x200000a, 0x1, 0x8}) ioctl$BLKTRACESETUP(r2, 0x1276, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000040), 0x400000011ff, 0x101301) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f0000000280)=@urb_type_control={0x2, {}, 0xfffffff8, 0x40, &(0x7f0000000000)={0x4b5a9da54893e123, 0x1, 0x8, 0xfffd}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0}) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) r4 = fsopen(0x0, 0x0) openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) r5 = fsmount(r4, 0x0, 0x0) fchdir(r5) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r7}, 0x18) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x80) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x0, 0x0) r8 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x40, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r8, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x29}, './file0\x00'}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) 1.622154773s ago: executing program 0 (id=4251): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002980)={0x0, 0x30}, 0x1, 0x0, 0x0, 0x4040000}, 0x20000004) ioctl$TIOCL_GETKMSGREDIRECT(0xffffffffffffffff, 0x541c, &(0x7f0000000280)) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000180)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_emit_ethernet(0x3a, &(0x7f0000000440)={@multicast, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x3, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x4, 0x0, @empty, @empty}, {0x0, 0x0, 0x18, 0x0, @wg=@data={0x4, 0x1}}}}}}, 0x0) 1.582107493s ago: executing program 0 (id=4253): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3cefda00fe8c6b58, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f00000001c0)='w\xde\xa3\x05\xff\a\x00\x00\x00\x00\x00\x00\x8f\xc0\x9b\x86\xef\\\xc0\x89\av\x9f\xd6\xd1\x98,\xc8\x18E/\x8c\x1a\xe3\xbd') mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/vlan/vlan1\x00') r2 = socket(0x2, 0x2, 0x1) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r2, 0x8983, &(0x7f0000000000)={0x1, 'vlan1\x00', {}, 0xc2c}) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x200000, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) r3 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) write$selinux_validatetrans(r3, &(0x7f0000000280)=ANY=[@ANYBLOB="73797374656d5f753a6f626a6563745f723a667361646d5f6c6f675f743a7330b37a1dc59046de96a5bcd12073797374656d5f753a6f626a6563745f723a62696e5f743a733020303006"], 0x60) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() request_key(&(0x7f00000003c0)='asymmetric\x00', &(0x7f0000000400)={'syz', 0x3}, 0x0, 0xfffffffffffffffe) keyctl$set_reqkey_keyring(0xe, 0x2) sched_setscheduler(r4, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x26, 0x1, 0x0, 0x1, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000300000000000800"/28], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000018110000000000000000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000070000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000820000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r8}, 0x10) socket$unix(0x1, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x4000) r9 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r9, 0x6, 0x0, 0x0, 0x0) 1.315094008s ago: executing program 4 (id=4255): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x18, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000660000000000"], 0x0, 0x7ff}, 0x13) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = dup(r3) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}], [], 0x6b}}) 1.292273898s ago: executing program 4 (id=4257): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000240)={0x2, &(0x7f0000000400)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x6, 0x0, 0x0, 0x6}]}, 0x10) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/wakeup_count', 0xa00, 0xb) r2 = syz_open_dev$loop(&(0x7f0000000440), 0x81, 0x2a82) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f0000000140)={r1, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x6, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd6447a4b4e00d9683dda1af1ea09de2b7fb0a0100000000000000000300", "2809e8dbe108598927875397bab22d0000b420a9c81f40f05f819e01177d3d458dac00000000000000000000003b00000000000000000200", "aebe8b1c000000ba0951f2857be47dc3f900", [0x200000004, 0x3fffffffffffff]}}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x68}, 0x94) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') setgroups(0x1, &(0x7f0000000080)=[0x0]) read$msr(r5, &(0x7f0000000d40)=""/43, 0x2b) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000f00)='kfree\x00', r4}, 0x18) ioctl$KDSKBSENT(r3, 0x4b49, &(0x7f0000000b00)={0xff, "810a3e6466ebc96a44e1c6af948e8f1c87fe0c97a067f6ab17a49158d8754880045e66c4f1eb5dc084fce79d297bfa39c1123c09ab79b4c605693601d0dc438c6874e31639d475b5b6cff30a9dbb7a0205ac12dea5f21fbcba82f4defc30fc3e267078af3fbe9c63b5a56d8c27d0118691ad55c90713e73dd14136e0c8715fc5387e90f4428a8128662472568e1c89270c12c978bbb93840e5111d7bcd50ab0831ba7fa54fb21dabf3a0abd862532603cd0216f2451ca3c1265b2e1b98c1cc78e267cf433dfce69c376a6c145019978bc117cfbf9b3b038f361e9a040bbac372645fd9eebdfc498db8c96325415cb89e535a3f05a443c1090731d1a4334a220a8fc31c8af26d3ca63674f6a20cff739de05badf4c6bd984388a9e92aa20030a06efeea1f54adda95256359ab4dd8a838aadd49ef36e448f1b3e95da38e29c3d4925e0b2697d727f2c4a716bcbc77d97bc4406103b1122bbb911e7ad1596f093c05b96e7a255953dba05afe9cb6d159d99010ab0291414146cfdab4b0a9c02609969adb986b437b8591275b3c3f5330e53736a3b8d4cfcf2206f5b72c895da822dc249d1371da996540ba64e272fbdcde1652be8eba8885aeea6ff82b9420ac81f5c706342b86fecb1838bff2d8c0ec226ca3988919237f377e7f1b87f9d02c0099cfa5db0c9a32b9848de87d29d67394fea65a8cb5c0be66a19ea0448b585bdd"}) bpf$MAP_CREATE(0x0, &(0x7f00000016c0)=ANY=[@ANYBLOB="0b00000005000000000400000d00000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000de18110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_opts(r6, 0x0, 0x4, 0x0, 0x0) 1.17008512s ago: executing program 4 (id=4259): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3, &(0x7f0000000440)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x5, 0x2, 0x7, 0x0, 0x1, 0xffffffff}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='rxrpc_recvmsg\x00', r1}, 0x18) r2 = socket$kcm(0x21, 0x2, 0x2) recvmsg$kcm(r2, &(0x7f0000001a80)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) 1.138053511s ago: executing program 4 (id=4260): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x2}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x63, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) lgetxattr(0x0, &(0x7f0000000040)=@known='trusted.overlay.upper\x00', 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x1, 0xc, 0x9}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180), &(0x7f0000000380), 0x84, r2}, 0x38) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='rxrpc_recvmsg\x00', r3}, 0x18) r4 = socket$kcm(0x21, 0x2, 0x2) recvmsg$kcm(r4, &(0x7f0000001a80)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) 969.054004ms ago: executing program 4 (id=4261): r0 = socket$tipc(0x1e, 0x5, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x3d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2000000}, 0x94) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41, 0x0, 0x4}}, 0x10) ioctl$BTRFS_IOC_START_SYNC(r2, 0x80089418, &(0x7f0000000380)=0x0) ioctl$BTRFS_IOC_RM_DEV_V2(r1, 0x5000943a, &(0x7f0000000640)={{r0}, r3, 0x10, @unused=[0x1, 0x5, 0x0, 0x6], @name="ea813263f4dd62eeb4fbe12b081bc1d2293c1d434984a75476afe57eaecd531f6d7df28f3b02bd857388927cbe39b789b79c8923cc4d07d17e4091a121cb661dd755e968f5191652c88c32abb791b1ad3011aecbb07e32096ed72978b717b29fc35eb8ed97ea1625243c8b1753663eb2e58d04e3173c605bf284bd007bff2476da0109f546fbec90fcef67c6aa0389b79f354e2f990901f8e490dd1c77f3ce6eaa24622595e52cd6bab40444da4f619eeb1997e438473c0c2f3c539bb5f1c921f7fb34411bcb166a2d2b3ab7390f014d45338c6433eab449a645e5846649717db130a379274d4dec95905d169c312b41881558366672dfa70536f269cd23e2b584445a2c30c69160d503c809f32d71c8f90c3abe352d574a02f59e2dbbfa9b6aff457b21540c6471fb4906019811f6154d3f072158ffa7b9910b24691d5cff417218fcf5a1f9143efb3f9081be7f4d217a3c8bae69c669075899b8ad0e4a4518f98626f3ccf1f143118180e82de20896e1655e9606cb6d0c9b4c483e3bb1b74c5476b7d37574f819d4224ff5704a7011c1e6b93b1c93c7964af96fd1574fea157bfaad1861506c6f84f4288b140515d00ae4e972b0a96af6a261b438bfeed1b604a049d20bd9ad0585ad79feb80f2f3afdcece3594558022b955609125abdae10375a0a15d3d31f8c59a4e2bbb0aaa0884cfde9bf2e640b6de215c7e931f444edb7fbad00e6bfabe0378dec3692f74e31091abf335ba3e74d12a6d0c9c077c72c536c3fabb3b092746b9fa981e0b320f881d5cd71f0104190b22507df3d4f0d1c57b6a1238b15f744cb63c6e36b36b1738d04591705a505fa771b654ab553438a2ac9f7f8bcbb51d023ac4c1c9d01c6f5516c96f78734668f2f7002fb681027514d3f59a99c451e1942dc90678f23a6fe8de9a83207d45765966c471c0d6674867aa4eaf5532e68f227da5276308fc1a2729c55d979359db47ad6ddfa2c7a5d82ec3d2805dc6cf8e322e79079ffda0b6440884610f6b349f8a43aef4fedd85093c07c4153181e67d11211b0a94ae63791651a53aaa5e361589a2b6c51e8979552de6f573801fbdfb6ae36537cef4be30677263f2174a7729fb561394b532516cdf45d2c6bf4c256b9f0be1a71b9e54c1a5529bf6e56f84af6c2c3d61e29089e3402c9784256ced9aaa6838edae1e1679e71db2d084175865ab3e2009911869f05c93fd765702ba2563707ba9811d1e2e44dd6bd5ace316b812a16880bc643a1cb4d1371e7bdde541b1f9f89840ac9650b41bf44e99407de2edb897e7637834ad88e4d43b7d35bc40b6eae782f00ef7e185f258b876be393e28db2ab372a920f6a14d1c914f88d76a5cc7969ac2aa5d863e8d59d84ccbd26adb7b6db4b85749f52dfbdbf9d5078509c2da391e3f6eef47f0f543e0a8f817317681f2735a7ec3de73c469078a16cdba0ab12ecbcb335a83391659a51deb155f5c1f1c24269fabc2d0b1456fcbc550fcd77455cca3e46d4e3aad7b671b3f6edec1009d0653f580573746f3f83416684949ba57f86c8d980eb21ec78a6a6523ccbb07e7cb0df36df1f8a1eec03b7ed65bdd8901893906fc79810786323196768c50d17c17b0fe8fe46407d72610b50a5d710d3a878cee73c23a11a8571f80f7f1640277ec6c317e5bcc1f2d2cfff9b5ca992927ce9acf906d7dce764596ce9463b26c3e93d825479a8e2571e4842bdc3c79ed9df4838e18760c6abd950595f0ca625cf74c1bc52071593427f29c9dac6798a581e5a7f2c731d4c77ffc771b7edf6f874bf9f5a6b756f13fa498128e873aae1ca8567b5799eb083922019ae4f214677791d192700c89470b97b66bec7a488dd526bb22c655f0cb551354db0065da40856953aa29eea956fec3ace802bc8000dd0b31b5b66f97a8dd819e566a2bf2ec00807682e5e2c5f4a79247a927618eaf213eb5c0cb23d5645c94060ab2a8d2b2f11db7bb8a72dbbf53cd457f56021698317897b605c0353700febc9694657789af6f1c1715d2b4efd295cdc40c1aa1599def260a83ab65797eefb244585e6008b933b8e603bfec007b45ce4750f4f8d32d15c0b0f7538b77fafa1ec79be3eedee16d5958beabcc4744893972ebd7a2c35bf537f9b215d58d4d82c1331a7f9a202f8de55ddb9f4f16a802fd31335c34c9570a3c08ed883c484af71b574ccdb015d9d01aff9c4d3a3825cb7189724f4edcfe12537ceff64a17a0e4e3813e5656c3fb8adf126bbc82eba74fe85c600928b579a4a9c29970de9f99de6ba400333301f25065b07994e25b12e40cb4242535a31acb4ca9dd681cdb4e4daf33bf87beadcc4564546b8ef486a9cc60cb5aaf7f4707bdc19b29d9ad883bbbe984ed35c3163538cb8d365cf87c2bf833d2fedeaf32e1a8dbaab02484d2b65cff33e7d9d6a94068fc197774a407683e2b301bb43cea0a426cbfe27d40f386ad7664bedd44c94f45c6be40dcb8934e200ad3d2f855fc1868f948cc81e5ddf09ba8b969dc3ba43b476269770de1f5bb7982bbe8e418c447fd27b4ee491d1e8ded98ccc6970fa108eae3614f871761ba2e7c463388469db2cd54a9171259a5f6bad1077a3cb1abd34a2e189c614f7f3f9281812ea5eefb45e031d2d99d904a6ba3c604da4078af0073994f79ef621d4432f1fa2c3ae14fa949cbbc4a649c1c7d137ff0a6388dad35ec5dbcb567af277304b89cad081593d387672ba95c594999fda7603135ef05b05a67ea89d22fab4ce7a4eb416e35a02167ed81fccd05d5fec94e9dfef1cbafb2572ac08c75182c65fe0627947588f7e7f529c73d4cd8009b6e49ded9ed662d07c1fef632bd3d94c1cc2ccc66d4757641e7fccb7f7513b8920bb69f384981046b35800f1a8170b773be5fb5d30b36d8936151e514dd875fe46dbeda1948edd2f7ffe42b73da4998635c34e9c0be6a3cb7c99adbb5dbfe115bd8f6172a2266270b0c261254e4599e2e2f2cbcde1d000ca00b44e02e72ef9d0100c69b00c8c51e882b3e0d7129b4394c69d5fa600f09cfba3c7b86d7b638ac155f893dc7dc4fbb20c448670a859dc2e7ef9df13ff5158bbf89684db3007e500c5686f6f203cc101eb39ad3e82c4701988259086959eb69a9591d005b6872c98ab78ca41e757028f087186616df2918b90a7e73c33394e67bff010829a85167791531c6ae5223543c4c49955631d382cdfb3aa48d58346eeac95d28cfdf46784faa511a022aebaaaf0d75322777f23eb1c5ddb57de77c63ac46df30339e54261472f2468ea9b47641907ac959b8e4ef9e109ed98e5633f71563bfc7a8b4ced046dac0f2c60587ba827d87dbb76e6f4d3166acc90f7f1e7f900554f3933ac24a39d7e995991ac23b530374bcee0f67ab1683bbae80198d0c1cb0df2c568f474126e5359b916fb112ba9d9ecb0eee18f3db91a6bdc50e7a0288746d5f79642a937cb8f6182ef1a1e9d6eda105af037fbde38dd7b49ce1ff12f0508574707976b3a45f873448e209ebdc43a996f0bd85b6fb7bb2b9de00c51971bc4462cbb3fba62b38fb25ab50e1cad2d9bcb76fd9d0c46c32b1decec3e6f7dca477f3f1b07a6d80745c6cd97d5ee5c852b4e7faff8a9260f495928937ca0d129c8f72002d4cf0070063dba649972fbad7066ca54ccbb9251a9a86bc17a09b6c6a57b71632b97f5ee7ee77c6f4833ab9135af185e6488f9c73a627c73c7cc9a27e480651ca270158e705e413918389b410146e7403f23508998cbca1cff2569da5e88999756f4c18d55ed5f76deb840c00db5307a028ab9e5bcff659fbac68db547854a70c0073ccd2a8d0df2c35860eaf86c244d30259c3a975d5352ffd42f51aced0789fa081bea929d87d61ff883d2f5df79e25b2c31c7959e74451b2c42858ca804d296a9b1685b879962ebbe5deb9234ee76875e396c92a3b1ac1dca0533b276fb7ee29dd1bf229a4e19bd305aa77775f2039b113efd97cc6c5c4e6073ee6530f4f6dc8144aed98b408f95fbb942a03a551294506fb8673260f3b2f122ebbdf3015f7b344ce56e148d9df6bdde7b6ffade9e9b4867b988b7cd0fb626e04173c2ad0cc5f9839ed8ea852b3e72bd617b1707e4309d8c7359d83cc8ff42fcf9440480dc82a06a8fadf1b66554533e6176e41417d650e5db7afec2c2a6501e8cbc78407d5706f855e4e96fce1b62fe5632f30c2165931da789bb850fdabc58b63a219fc061e3b30ac3f0eeff86b514569d6bce0df4ab7057a57a9f20b6d1b381c5cb486e567d8a95115ea57f5646c62c624d86f651c462cbc427e87103144594b199db212fcf29b8de1592cbcabb28ef540d77337ac0c6af3a7c585e0adc4552febe8d996ec5672760ec4a8cfb0c34be87d43cdd523c48ffca677b5cd13d077d88ccf594dd0713ff7ab1f77f00502ebea724f09e5bc20767f34b00cc0d648825fa9f05d635634fad80465fa2ee02bc0b8fe36295b5fbf8dcf8017e01dc0f9c8658ab29dca3411d82a1143cc63beae07d600e695d8814f2142819c3207f1b29e3ecf8473fafdc3f54c2f75e1af651e1542bc4d6a50640ce32c8615d278aa58ae2e6a80fae918b119df5daf49d48660d69fd1171dee3c26d4bd69e0dde24e08f62df37032502c638c63504f17de8f7a1c14706355af91053379476ee6045d3fc0db1acbe56fd9e819d58d22aabd9640f4e00d5e71b46bc09b106217882affa0cd5cc5b87613b86ab694cc25278568eaf4b326890e8b5a08d0cb5e52165a94d81b1569ca6c38703a4947763ca671b3f18a9b277438cf30663a6932c6e05391583d125a2a3d33c3d712a024164bdfc580bffabfc9290f77460e779eca2ae0361f1113c84ea3f16fa9ad258388103fd85423cc0bdbdce2d030974b51217efc76ed6ae60715de491d50a6028b5b7c9ee5d8689eecb86e2781785b81c80070431d6936516c8c19cae99efa71d5d8c8baa48070609ee8c404c2e0e7b662293e3e0456f416e8dfdf48f5e421b4d8d0352316341f656f34ed975e891a3b4f7c797cdf7845e4997738c51f1764810f434f9d3343a2f00bdde23ea1b360b58ede1f568322a397f90a648ff09c6cda1f520ff37b450aa419a598c0cabde50d3ebe3095a1a1075068ad6f7564035ae5b6b6487ac6f69f40edd830887f9df68cc5fe4dd7b60c3da339d98634c1ccf41cc25e828b061f4e7ee9cd62ea402dcbb965a9f7f8a41bafabe398601665e9bd1c3b469adaa482078f579624c7b6ffa6549d3856230f502daf9b6428ac530f27426ac91184ff61d7dd3610fb9a6994d0dbb3971b52e66838128f4a1cc55b7b5060e6c22f516fde22348796e7788a766d7a89b5f589b36ce5fa123bb2f9159a0bf9fa2f8dfced0b2df4fd7db761981627a3510bd726d6b473efe9e22fea5a54d549b1312cdf9bf4ba013104c79dd20243ea97e2bcf9f6e2710d7106c6fbf0ba93be64d8b2a6b659c275ae17f8a1b6c55ad6bafd345efb7272fd144bf5c5245721365d559cc00fbdb677b3bd5c017a987ca2549dbaa6b987d1b90bd3480971997384ae70bce417aaec4a01aa8ef2f55ddc57334b88822cd47c133760e01a54f6c297df8c2f60e398cfd634f124ba1e35b51c6f52a02eb3c0977059c3cf9502ff471d9143a90a159aec5424d33459138e7959084b1ca3dd3c7432087444be727b34f4f1fe76e1d3a662f7dbb959930c6af3ee2b11a36570"}) listen(r0, 0x0) r4 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r4, &(0x7f0000002300)={&(0x7f0000000040)=@id={0x1e, 0x3, 0x0, {0x4e22, 0x1}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x44}, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000400)='ext4_sync_file_exit\x00', 0xffffffffffffffff, 0x0, 0x4}, 0x18) sendmsg$tipc(r4, &(0x7f00000002c0)={&(0x7f0000000080)=@nameseq={0x1e, 0x2, 0x0, {0x41}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x480c0}, 0x0) accept4(r0, 0x0, 0x0, 0x400000000000000) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000300)="2e00000010008188000080ec59acbc0413a181014100000000010000000000000e000a000f0000000280020012d4", 0x2e}, {&(0x7f0000000040)}, {&(0x7f0000000140)="8bbb44823e53071c9d902d1f73fa995548e3189e75ad1b45d45598ff2bf509ee9e4c61296ead98cb498e5b07e8edb318c74b12b80f2de41bd8f5fdee93ce6407a65df6290d21cabfa5fad935b4330ddfb548c962cfcb6e38f6318f277c2bb743ca76e9cd604f802d79bc855b10f04f3f9ddbc3ee96bb3904a93aa7073b67c74da5695f439cd91520762c63cd033016a67eb960927c6946304321b98cd1397ae81340a34c90f27fa82d1b3e0310c2e0caa7d2571c196228c22dd1", 0xba}, {&(0x7f0000000200)="c3a4fb0b979bd6a09ec68ae960606c7d2dc73629c050ef1c5d82ba5d6435c401d14ff105d02c7b6293b3674c551444004173110813a8bfb52bf0e342a200dd183483f675280cb3245d510ea29129ce915cbbb97930ca376fce71ec4a0cb731264ccba9bafc806990a5e68bc35b78ca32b6636e8b1098adf78e21029b39c4108a1385cacba7ff347b14815565b5303a26a066c9797e3cab1d593d71dcd6d300533ab40b4f2735566d72cbdfb5306d14f80a46447bf3084536a36196061dadf778bef368f28bcb217c", 0xc8}], 0x4}, 0x30004000) 929.838594ms ago: executing program 4 (id=4262): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) madvise(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0xf) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0xfffffffffffff001}, 0x18) r2 = openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$selinux_user(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="73797374656d5f753a6f626a6563745f723a7365b3696e75785f636f6e6669675f743a73302072"], 0x2b) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x8, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000040), 0x400, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)=0x0) timer_settime(r4, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[], &(0x7f0000000180), 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x200000000000000) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000002000095"], &(0x7f00000001c0)='syzkaller\x00'}, 0x94) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'veth1_to_hsr\x00'}) 797.378447ms ago: executing program 2 (id=4263): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r0}, &(0x7f0000000240), &(0x7f0000000280)=r1}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r1}, 0x18) preadv2(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}], 0x1, 0x0, 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x20002) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffc, 0x6, 0x0, @buffer={0x2, 0x41001, &(0x7f00000000c0)=""/81}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x0, 0x0, 0x0, 0x0}) 746.135628ms ago: executing program 2 (id=4264): socket$unix(0x1, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0100000003000000e20e00000100000000010000", @ANYRES32, @ANYBLOB="00000100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="8100000003060300000012000000000003008519f70000"], 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x40) socket$inet6_sctp(0xa, 0x1, 0x84) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000680)=@mangle={'mangle\x00', 0x64, 0x6, 0x600, 0x0, 0x0, 0x1d0, 0x0, 0x1d0, 0x530, 0x530, 0x530, 0x530, 0x530, 0x6, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @multicast2}, [], [], 'vcan0\x00', 'veth1_virt_wifi\x00'}, 0x0, 0xa8, 0xe8, 0x0, {0x7a00000000000000}}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x0, 0x9}}}, {{@ipv6={@mcast1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'syzkaller1\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@private0}}}, {{@ipv6={@rand_addr=' \x01\x00', @mcast2, [], [], 'veth1_to_batadv\x00', 'vlan1\x00'}, 0x0, 0xf8, 0x140, 0x0, {}, [@common=@inet=@ecn={{0x28}}, @common=@ipv6header={{0x28}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@empty}}}, {{@ipv6={@private0, @mcast2, [], [], 'veth1_to_team\x00', 'veth0_macvtap\x00'}, 0x0, 0xf0, 0x130, 0x0, {}, [@common=@hbh={{0x48}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@remote}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv4=@local}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x660) r3 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) keyctl$setperm(0x5, r3, 0x1c243811) r4 = socket$kcm(0x10, 0x400000002, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000003c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0xf72, 0x6, 0x1}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040001}, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newtfilter={0x24, 0x2c, 0xd27, 0x30bd29, 0x21dfdbfc, {0x0, 0x0, 0x0, r10, {0x0, 0xf}, {}, {0x7}}}, 0x24}, 0x1, 0x0, 0x0, 0x24000014}, 0x200c4004) sendmsg$inet(r4, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000140)="600000002e000d190a762d7f089e", 0xfca2}, {&(0x7f0000000280)="68cabf2dfb58fc0a1d6b689866f05d490d010088a8ffff0200258f2e4409b8f9e6aaeb88bea123dc2c6726e89b1ae2f6e8bcb5ee52dcd7298d39093c510293bca0b646a3ce904f6e6b788b3204c233e60ddc", 0x52}], 0x2}, 0x0) 604.26647ms ago: executing program 2 (id=4265): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b70500000800000085"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x5, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) creat(0x0, 0x48) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r2 = dup(r1) write$P9_RLERRORu(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085"], 0x0, 0x101, 0x0, 0x0, 0x41100, 0x59}, 0x94) write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r3}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) r4 = creat(&(0x7f00000003c0)='./file0\x00', 0x36) write$RDMA_USER_CM_CMD_SET_OPTION(r4, &(0x7f0000000700)={0xe, 0x18, 0xfa16, @id_afonly={0x0}}, 0x20) 551.239931ms ago: executing program 2 (id=4267): bind$tipc(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000003, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) bpf$MAP_CREATE(0x0, 0x0, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0xf4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r3 = dup2(r0, r0) ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x200000a, 0x1, 0x8}) ioctl$BLKTRACESETUP(r3, 0x1276, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000040), 0x400000011ff, 0x101301) ioctl$USBDEVFS_SUBMITURB(r4, 0x8038550a, &(0x7f0000000280)=@urb_type_control={0x2, {}, 0xfffffff8, 0x40, &(0x7f0000000000)={0x4b5a9da54893e123, 0x1, 0x8, 0xfffd}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0}) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) r5 = fsopen(0x0, 0x0) openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) r6 = fsmount(r5, 0x0, 0x0) fchdir(r6) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYRES64=r2], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, 0x0, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r7}, 0x18) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x80) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x0, 0x0) r8 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x40, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r8, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x29}, './file0\x00'}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) 538.428571ms ago: executing program 3 (id=4268): r0 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000000c0)='kfree\x00', r1, 0x0, 0xfffffffffffffffd}, 0x18) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)=ANY=[@ANYBLOB="02030003110000002cbd7000fcdbdf2503000900800000001cdc0dca1d9f68846960e56de42944af05000600000000000a0000000000000000000000000000000000000000000001020000000000000002000100000000000000070c0000000005000500000000"], 0x88}, 0x1, 0x7}, 0x0) 485.288322ms ago: executing program 3 (id=4270): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) write$cgroup_subtree(r0, 0x0, 0xffbf) 459.736743ms ago: executing program 5 (id=4272): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x2}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x63, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x1, 0xc, 0x9}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180), &(0x7f0000000380), 0x84, r2}, 0x38) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='rxrpc_recvmsg\x00', r3}, 0x18) r4 = socket$kcm(0x21, 0x2, 0x2) recvmsg$kcm(r4, &(0x7f0000001a80)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) 429.859733ms ago: executing program 5 (id=4273): r0 = socket$tipc(0x1e, 0x5, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x3d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2000000}, 0x94) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41, 0x0, 0x4}}, 0x10) ioctl$BTRFS_IOC_START_SYNC(r2, 0x80089418, &(0x7f0000000380)=0x0) ioctl$BTRFS_IOC_RM_DEV_V2(r1, 0x5000943a, &(0x7f0000000640)={{r0}, r3, 0x10, @unused=[0x1, 0x5, 0x0, 0x6], @name="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"}) listen(r0, 0x0) r4 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r4, &(0x7f0000002300)={&(0x7f0000000040)=@id={0x1e, 0x3, 0x0, {0x4e22, 0x1}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x44}, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000400)='ext4_sync_file_exit\x00', 0xffffffffffffffff, 0x0, 0x4}, 0x18) sendmsg$tipc(r4, &(0x7f00000002c0)={&(0x7f0000000080)=@nameseq={0x1e, 0x2, 0x0, {0x41}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x480c0}, 0x0) accept4(r0, 0x0, 0x0, 0x400000000000000) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000300)="2e00000010008188000080ec59acbc0413a181014100000000010000000000000e000a000f0000000280020012d4", 0x2e}, {&(0x7f0000000040)}, {&(0x7f0000000140)="8bbb44823e53071c9d902d1f73fa995548e3189e75ad1b45d45598ff2bf509ee9e4c61296ead98cb498e5b07e8edb318c74b12b80f2de41bd8f5fdee93ce6407a65df6290d21cabfa5fad935b4330ddfb548c962cfcb6e38f6318f277c2bb743ca76e9cd604f802d79bc855b10f04f3f9ddbc3ee96bb3904a93aa7073b67c74da5695f439cd91520762c63cd033016a67eb960927c6946304321b98cd1397ae81340a34c90f27fa82d1b3e0310c2e0caa7d2571c196228c22dd1", 0xba}, {&(0x7f0000000200)="c3a4fb0b979bd6a09ec68ae960606c7d2dc73629c050ef1c5d82ba5d6435c401d14ff105d02c7b6293b3674c551444004173110813a8bfb52bf0e342a200dd183483f675280cb3245d510ea29129ce915cbbb97930ca376fce71ec4a0cb731264ccba9bafc806990a5e68bc35b78ca32b6636e8b1098adf78e21029b39c4108a1385cacba7ff347b14815565b5303a26a066c9797e3cab1d593d71dcd6d300533ab40b4f2735566d72cbdfb5306d14f80a46447bf3084536a36196061dadf778bef368f28bcb217c", 0xc8}], 0x4}, 0x30004000) 425.116353ms ago: executing program 3 (id=4274): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r0}, &(0x7f0000000240), &(0x7f0000000280)=r1}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) preadv2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x20002) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffc, 0x6, 0x0, @buffer={0x2, 0x41001, &(0x7f00000000c0)=""/81}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x0, 0x0, 0x0, 0x0}) 399.222923ms ago: executing program 5 (id=4275): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000012c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={0x0, r1}, 0x18) r2 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x14, r2, 0x1}, 0x14}}, 0x0) sendmsg$SMC_PNETID_DEL(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000700)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="270e28bd71000000000004"], 0x14}, 0x1, 0x40030000000000}, 0x4000) 387.571394ms ago: executing program 3 (id=4276): r0 = fsopen(&(0x7f0000000480)='binder\x00', 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) close(r1) r2 = socket$kcm(0x10, 0x100000000002, 0x4) sendmsg$kcm(r2, &(0x7f00000002c0)={0x0, 0xfffffffffffffe78, &(0x7f0000000300)=[{&(0x7f0000000e00)="39000000140081ae00002c000500015601618575e285af01800000000d1300883795c04a31ba377a1b2cc37fffffffffffffffffffffffffff", 0x39}], 0x1, 0x0, 0x0, 0xc00e}, 0x2000c814) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r0, 0x0, 0x0) fchdir(r3) ioctl$RNDADDTOENTCNT(r3, 0x40045201, &(0x7f0000000000)=0x9) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000280)='batadv0\x00', &(0x7f00000002c0)='@@[\x00', 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="680000080906010200000000000000000100000040000880100007800c001840fffffffffffffff8100007800c0019b000000000000000090c0007800800084000000040100007800c0019400000040000007a9f05000100070000000900020073797a3000"], 0x68}, 0x1, 0x0, 0x0, 0xd24f4d5778621d46}, 0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020700000000091082030207b1af8ff00000000bfa100000400000007010000f8ffffffb702000000000000b703000000000100850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000440)='kfree\x00', r5, 0x0, 0x7fffffff}, 0x18) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x81, 0x0, 0x7fff7ffc}]}) close_range(r7, 0xffffffffffffffff, 0x0) 362.114884ms ago: executing program 0 (id=4277): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000d0000000000010000000000000001410000001c0017"], 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x0) (fail_nth: 4) 357.378054ms ago: executing program 5 (id=4278): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b70500000800000085"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x5, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) creat(&(0x7f00000000c0)='./file0\x00', 0x48) pipe2$9p(0x0, 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r0 = dup(0xffffffffffffffff) write$P9_RLERRORu(r0, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085"], 0x0, 0x101, 0x0, 0x0, 0x41100, 0x59}, 0x94) write$binfmt_elf64(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r1}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x36) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000700)={0xe, 0x18, 0xfa16, @id_afonly={0x0}}, 0x20) 329.887415ms ago: executing program 3 (id=4279): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) syz_emit_ethernet(0x0, 0x0, 0x0) r1 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r1, 0x1, 0x8, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0}, 0x18) socket$inet_sctp(0x2, 0x5, 0x84) sendmsg(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x208}, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000340)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000080], 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0000000000000000000000000000000000001fb195d574202b200000000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff00000000"]}, 0x108) close_range(r0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x7, 0x4, 0x8, 0xd9}, 0x50) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) 69.059659ms ago: executing program 5 (id=4280): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x18, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000660000000000"], 0x0, 0x7ff}, 0x13) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = dup(r3) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}], [], 0x6b}}) 65.981149ms ago: executing program 3 (id=4281): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) write$cgroup_subtree(r0, &(0x7f0000000380)=ANY=[], 0xffbf) 28.72872ms ago: executing program 0 (id=4282): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002980)={0x0, 0x30}, 0x1, 0x0, 0x0, 0x4040000}, 0x20000004) ioctl$TIOCL_GETKMSGREDIRECT(0xffffffffffffffff, 0x541c, &(0x7f0000000280)) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x18) syz_emit_ethernet(0x3a, &(0x7f0000000440)={@multicast, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x3, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x4, 0x0, @empty, @empty}, {0x0, 0x0, 0x18, 0x0, @wg=@data={0x4, 0x1}}}}}}, 0x0) 28.14358ms ago: executing program 0 (id=4283): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x2}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x63, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x1, 0xc, 0x9}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180), &(0x7f0000000380), 0x84, r2}, 0x38) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='rxrpc_recvmsg\x00', r3}, 0x18) r4 = socket$kcm(0x21, 0x2, 0x2) recvmsg$kcm(r4, &(0x7f0000001a80)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) 7.88013ms ago: executing program 0 (id=4284): mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x4000002, 0x3032, 0xffffffffffffffff, 0x2a1cf000) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bond_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@newqdisc={0x38, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x84}, 0x44080) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x18) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000001c0)={'veth1_to_hsr\x00', 0x0}) setsockopt$packet_int(r6, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) socket$packet(0x11, 0xa, 0x300) sendto$packet(r6, &(0x7f00000000c0)="3f031c000302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r7, 0x1, 0x0, 0x6, @multicast}, 0x14) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) r9 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0), 0x800, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)={0x2, 0x4, 0x8, 0x1, 0x80, r8, 0xffffff81, '\x00', r3, r9, 0x4, 0x0, 0x3}, 0x50) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xd0f, 0x70bd26, 0x25dfdbfd, {0x60, 0x0, 0x0, r3, {0x0, 0xa}, {0x2, 0xa}}}, 0x24}}, 0x800) 0s ago: executing program 5 (id=4285): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000ff0f000007"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_TABLE(r2, 0x0, 0xcf, &(0x7f0000000ac0)=0xfd, 0x4) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000300b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000300)='fib6_table_lookup\x00', r4}, 0x10) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x4010, r4, 0xaf590000) r5 = socket$netlink(0x10, 0x3, 0x1) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) ptrace$getregset(0x4205, r6, 0x202, &(0x7f0000000240)={&(0x7f0000000180)=""/120, 0xffffffffffffff28}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000e80)={0x11, 0x11, &(0x7f0000000c00)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7fd, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@alu={0x7, 0x1, 0x6, 0x6, 0x0, 0xfffffffffffffff4, 0xd}, @jmp={0x5, 0x1, 0xb, 0x2, 0x7, 0xfffffffffffffffc, 0x4}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000cc0)='syzkaller\x00', 0x2, 0x2f, &(0x7f0000000d00)=""/47, 0x41100, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000d40)={0x2, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0xa, &(0x7f0000000d80)=[r0], &(0x7f0000000dc0)=[{0x3, 0x3, 0x10}, {0x1, 0x1, 0xa, 0x7}, {0x0, 0x5, 0xb, 0x8}, {0x1, 0x4, 0x4, 0x8}, {0x5, 0x6, 0xa, 0x3}, {0x3, 0x1, 0x2, 0x3}, {0x0, 0x2, 0xa}, {0x0, 0x5, 0x3, 0x1}, {0x2, 0x2, 0xb, 0xb}, {0x4, 0x1, 0x9, 0x5}], 0x10, 0xf}, 0x94) fcntl$lock(r5, 0x6, &(0x7f0000000bc0)={0x2, 0x4, 0x2, 0x2, r6}) r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000004000), &(0x7f0000004040)}, 0x20) faccessat(0xffffffffffffffff, 0x0, 0x100) io_setup(0x30, &(0x7f00000001c0)=0x0) r9 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) r10 = eventfd(0x400) io_submit(r8, 0x1, &(0x7f00000004c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x7fff, r9, 0x0, 0x0, 0x6, 0x0, 0x3, r10}]) r11 = open(&(0x7f0000000640)='./file0\x00', 0x8000, 0x0) r12 = eventfd2(0x3, 0x0) r13 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r13, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r14 = eventfd2(0x10000, 0x80800) r15 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) fcntl$lock(r7, 0x26, &(0x7f0000000000)) io_submit(r8, 0x9, &(0x7f0000000a40)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2, 0xa0, r0, &(0x7f0000000180)="4e0646c0693df7fbd79db0e19f2b2f9c9389858c849ef451137602171effd4a87316c070bf7f169728c0e7d5cde2be9ac2f340b0cfeff426d6b801f0c6df", 0x3e, 0x1, 0x0, 0x2, r7}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x7, 0x0, r0, &(0x7f0000000280)="78e932451099f1598588c6e9cdb2abeb093bd20943b92e4cc731e3ed66e98401a2fe62cde70b55f69b8244eec46c9fe5f62613e75ceb24bad02fc39752c0d3a40dcd1ab1ca963464601334927954b15cfbadc1ab2e23c2f1d2412b3ef8af6c8ba7df1798ea9742d0da1d9d5d9f67f8f059cbfad892c1d508514e2bc322f9d7a19fadf86139dfb942ae6f7548851b2846be8d5f1c8b3bf4e36da2ef12c2f2227e3400f71087ff0bcdf73688174d318c111b519941d2db3aae6ec9f2b0cbd2", 0xbe, 0xfe57, 0x0, 0x2, r0}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x8, 0x3, 0xffffffffffffffff, &(0x7f0000000340)="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", 0xff, 0x6c4}, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x3, 0x9, r0, &(0x7f0000000500)="0792a62e9df29022911cad004496c5cda4efca6f9ebfb46aa03ec7a1cc1ff648726a2f8f36ca4cee38075ee5e06c1abc984661476f11abf5e5372f651c441f38a49efb4c131f07b0f6161a1e6d94ce15496e1809467e5da59c57a745bdf8f0723c0bc98193867b83ca05b5b880b5990904c57566403bf092dfc6424eed2fa55e51c8ba38", 0x84, 0x5, 0x0, 0x2}, &(0x7f0000000680)={0x0, 0x0, 0x0, 0xb, 0x4, r0, &(0x7f0000000600)="a589a0809679c45aae1870b565c8a8ffad6f521967212bfb1aec7fcefc70431088f8a14d00ecad8c2e1737", 0x2b, 0x0, 0x0, 0x2, r11}, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x5, 0x6, r7, &(0x7f00000006c0)="02d02c711883cf717470d522452414840a6482bd44fb42b0f7eb822a7f2341ae9b99826b796470a85feb02fbd3463b0c3f630147441c8e8b4120532555b475c94e90149c2a2147f90d10c817b0e7", 0x4e, 0x2}, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x3, 0xfff, r7, &(0x7f0000000780)="5fd6205622655b36a244c838a912badfd3cedbc295a284f712da1a4044bbe8d545bf9fc94cc586aeef05bd553ca90010692e628f334361b03b2415db1f41c534ea6d896d76e45ab7a6506bf7846f03480b4ef3e8de80e7c7c5b0d95078d6e8044b784d5a45f691d10bc29216672641ac462e4c2a92d5d2a9490e2f51", 0x7c, 0xfffffffffffffffc, 0x0, 0x0, r12}, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x3, 0x4, r13, &(0x7f0000000840)="fa7c12561ff29daf17f5b334bcbc1666690bb53772a50f722b", 0x19, 0x5, 0x0, 0x2, r14}, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x8, 0xa989, r7, &(0x7f00000008c0)="ed46ed1e2ed836cd7ba6bdbc9becbe174a10f2a79dd4737bf80ff405e8dfc57ca30a5d72b47fecec8fc2af8850cf5bd5dcdbb3f578accae52fd47a6c8b4bbf850b936d911c6c58d555c61eb74a0b1c94e0823d9bc31752f921c80679caddd1fb4f29521bd4ab85c0e2313e8d1412cc0a78d429d141780afacb28962d2f6a4882c65a622108b0242ddd6b146aff87595452cb17ba7ff7f5b52a48583414afad13f6a38a5913107a674d0929f04b93616f1f37d5e1d1851789ddaf8cfc9e1198db6b09f85abab544d7f448df1ccd38b897ad6369fcbb438aae89f4fba720929d74d312b9b8b2153dd32cac6664d84a8d92", 0xf0, 0xa9, 0x0, 0x0, r15}]) kernel console output (not intermixed with test programs): 2b83e9a9 code=0x7ffc0000 [ 287.596279][ T29] audit: type=1326 audit(1753792814.412:22392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12990 comm="syz.5.3182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b27fee9a9 code=0x7ffc0000 [ 287.620430][ T29] audit: type=1326 audit(1753792814.412:22393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12990 comm="syz.5.3182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b27fee9a9 code=0x7ffc0000 [ 287.874211][ T29] audit: type=1401 audit(1753792814.772:22394): op=security_bounded_transition seresult=denied oldcontext=root:sysadm_r:sysadm_t newcontext=system_u:object_r:hugetlbfs_t [ 287.923364][ T29] audit: type=1400 audit(1753792814.822:22395): avc: denied { sqpoll } for pid=13039 comm="syz.3.3198" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 288.001838][ T29] audit: type=1400 audit(1753792814.902:22396): avc: denied { read write } for pid=13039 comm="syz.3.3198" name="rdma_cm" dev="devtmpfs" ino=251 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 288.028928][ T29] audit: type=1400 audit(1753792814.902:22397): avc: denied { open } for pid=13039 comm="syz.3.3198" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=251 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 288.061440][T13021] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 288.069434][T13021] vhci_hcd: invalid port number 253 [ 288.074833][T13021] vhci_hcd: invalid port number 253 [ 288.290277][T13052] hub 6-0:1.0: USB hub found [ 288.296753][T13052] hub 6-0:1.0: 8 ports detected [ 288.369298][ T1052] hid-generic 0000:0000:0000.0022: unknown main item tag 0x1 [ 288.376866][ T1052] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0 [ 288.384570][ T1052] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0 [ 288.392275][ T1052] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0 [ 288.399888][ T1052] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0 [ 288.407689][ T1052] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0 [ 288.423381][ T1052] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0 [ 288.432206][ T1052] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0 [ 288.440030][ T1052] hid-generic 0000:0000:0000.0022: unknown main item tag 0x2 [ 288.447793][ T1052] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0 [ 288.456305][ T1052] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0 [ 288.464364][ T1052] hid-generic 0000:0000:0000.0022: unknown main item tag 0x4 [ 288.472782][ T1052] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0 [ 288.480947][ T1052] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0 [ 288.488430][ T1052] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0 [ 288.496008][ T1052] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0 [ 288.503700][ T1052] hid-generic 0000:0000:0000.0022: unknown main item tag 0x2 [ 288.511367][ T1052] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0 [ 288.518885][ T1052] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0 [ 288.526607][ T1052] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0 [ 288.534283][ T1052] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0 [ 288.541770][ T1052] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0 [ 288.549377][ T1052] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0 [ 288.556931][ T1052] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0 [ 288.564637][ T1052] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0 [ 288.572846][ T1052] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0 [ 288.580364][ T1052] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0 [ 288.588835][ T1052] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0 [ 288.596841][ T1052] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0 [ 288.604658][ T1052] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0 [ 288.613935][ T1052] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0 [ 288.621894][ T1052] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0 [ 288.629657][ T1052] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0 [ 288.637687][ T1052] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0 [ 288.645347][ T1052] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0 [ 288.652945][ T1052] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0 [ 288.660477][ T1052] hid-generic 0000:0000:0000.0022: unknown main item tag 0x1 [ 288.671345][ T1052] hid-generic 0000:0000:0000.0022: hidraw0: HID v0.00 Device [syz0] on syz1 [ 288.684340][ T2989] udevd[2989]: worker [11390] terminated by signal 33 (Unknown signal 33) [ 288.693203][ T2989] udevd[2989]: worker [11390] failed while handling '/devices/virtual/misc/uhid/0000:0000:0000.0022/hidraw/hidraw0' [ 288.808323][T13062] 9pnet_fd: Insufficient options for proto=fd [ 288.902571][ T29] audit: type=1400 audit(1753792815.802:22398): avc: denied { map } for pid=13039 comm="syz.3.3198" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=37431 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 288.927391][ T29] audit: type=1400 audit(1753792815.802:22399): avc: denied { read write } for pid=13039 comm="syz.3.3198" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=37431 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 288.995311][T13072] __nla_validate_parse: 1 callbacks suppressed [ 288.995327][T13072] netlink: 60 bytes leftover after parsing attributes in process `syz.5.3212'. [ 289.030123][T13074] xt_TPROXY: Can be used only with -p tcp or -p udp [ 289.046263][T13074] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3208'. [ 289.705609][T13110] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3228'. [ 289.793142][T13113] smc: net device bond0 applied user defined pnetid SYZ0 [ 289.800618][T13113] smc: net device bond0 erased user defined pnetid SYZ0 [ 289.832730][T13115] smc: net device bond0 applied user defined pnetid SYZ0 [ 289.846302][T13115] smc: net device bond0 erased user defined pnetid SYZ0 [ 289.884875][T13117] program syz.3.3231 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 289.897062][T13117] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 290.203982][T13124] loop5: detected capacity change from 0 to 8192 [ 290.236412][T13124] netlink: 48 bytes leftover after parsing attributes in process `syz.5.3234'. [ 290.254160][T13124] syz.5.3234: attempt to access beyond end of device [ 290.254160][T13124] loop5: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 290.267711][T13124] Buffer I/O error on dev loop5, logical block 57847, async page read [ 290.375369][T13126] loop0: detected capacity change from 0 to 8192 [ 290.453038][T13126] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3235'. [ 290.496666][T13126] syz.0.3235: attempt to access beyond end of device [ 290.496666][T13126] loop0: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 290.510184][T13126] Buffer I/O error on dev loop0, logical block 57847, async page read [ 290.617353][T13138] program syz.5.3242 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 290.628722][T13136] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3240'. [ 290.634707][T13138] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 290.740241][T13147] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3245'. [ 290.748236][T13153] program syz.4.3247 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 290.758742][T13153] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 290.767521][T13154] netlink: 'syz.2.3244': attribute type 10 has an invalid length. [ 290.795639][T13156] program syz.0.3248 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 290.799551][T13158] smc: net device bond0 applied user defined pnetid SYZ0 [ 290.812135][T13156] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 290.815175][T13158] smc: net device bond0 erased user defined pnetid SYZ0 [ 290.874198][T13160] hub 6-0:1.0: USB hub found [ 290.880235][T13160] hub 6-0:1.0: 8 ports detected [ 291.007915][T13179] loop5: detected capacity change from 0 to 8192 [ 291.017961][T13178] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3259'. [ 291.044038][T13179] syz.5.3258: attempt to access beyond end of device [ 291.044038][T13179] loop5: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 291.057552][T13179] Buffer I/O error on dev loop5, logical block 57847, async page read [ 291.071111][T13183] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3260'. [ 291.122006][T13185] program syz.3.3262 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 291.131536][T13185] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 291.193298][T13193] xt_TPROXY: Can be used only with -p tcp or -p udp [ 291.203559][T13191] openvswitch: netlink: Message has 6 unknown bytes. [ 291.216524][T13193] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3264'. [ 291.330555][T13202] hub 6-0:1.0: USB hub found [ 291.339763][T13202] hub 6-0:1.0: 8 ports detected [ 291.688931][T11052] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 291.738083][T13206] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 291.757476][T13206] vhci_hcd: invalid port number 253 [ 291.762798][T13206] vhci_hcd: invalid port number 253 [ 291.766579][T13214] chnl_net:caif_netlink_parms(): no params data found [ 291.886341][T11052] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 291.901094][T13250] program syz.2.3286 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 291.940784][T13250] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 291.964613][T11052] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 291.982313][T13214] bridge0: port 1(bridge_slave_0) entered blocking state [ 291.989584][T13214] bridge0: port 1(bridge_slave_0) entered disabled state [ 291.997436][T13214] bridge_slave_0: entered allmulticast mode [ 292.003960][T13214] bridge_slave_0: entered promiscuous mode [ 292.010887][T13214] bridge0: port 2(bridge_slave_1) entered blocking state [ 292.018142][T13214] bridge0: port 2(bridge_slave_1) entered disabled state [ 292.025577][T13214] bridge_slave_1: entered allmulticast mode [ 292.033412][T13214] bridge_slave_1: entered promiscuous mode [ 292.047717][T13259] smc: net device bond0 applied user defined pnetid SYZ0 [ 292.056724][T11052] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 292.068592][T13259] smc: net device bond0 erased user defined pnetid SYZ0 [ 292.088647][T13214] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 292.108520][T13214] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 292.172471][T13214] team0: Port device team_slave_0 added [ 292.195526][T13214] team0: Port device team_slave_1 added [ 292.220611][T11052] dummy0: left allmulticast mode [ 292.225982][T11052] bridge0: port 3(dummy0) entered disabled state [ 292.242268][T11052] bridge_slave_1: left allmulticast mode [ 292.247974][T11052] bridge_slave_1: left promiscuous mode [ 292.253799][T11052] bridge0: port 2(bridge_slave_1) entered disabled state [ 292.262567][T11052] bridge_slave_0: left promiscuous mode [ 292.268369][T11052] bridge0: port 1(bridge_slave_0) entered disabled state [ 292.350361][T13281] program syz.2.3295 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 292.359844][T13281] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 292.372512][T11052] bond0 (unregistering): (slave geneve1): Releasing backup interface [ 292.542280][T13282] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 292.549847][T13282] vhci_hcd: invalid port number 253 [ 292.555153][T13282] vhci_hcd: invalid port number 253 [ 292.644486][T13286] loop5: detected capacity change from 0 to 8192 [ 292.665583][T11052] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 292.675489][T13286] syz.5.3298: attempt to access beyond end of device [ 292.675489][T13286] loop5: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 292.689004][T13286] Buffer I/O error on dev loop5, logical block 57847, async page read [ 292.702818][T11052] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 292.715791][T13288] loop0: detected capacity change from 0 to 512 [ 292.716609][T11052] bond0 (unregistering): Released all slaves [ 292.737895][T13288] __quota_error: 4 callbacks suppressed [ 292.737908][T13288] Quota error (device loop0): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 292.753713][T13288] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 292.763671][T13288] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.3299: Failed to acquire dquot type 1 [ 292.777077][T13288] EXT4-fs (loop0): 1 truncate cleaned up [ 292.777918][T13214] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 292.790212][T13214] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 292.796467][T13288] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 292.816306][T13214] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 292.840457][T13288] ext4 filesystem being mounted at /134/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 292.861368][ T29] audit: type=1400 audit(1753792819.762:22404): avc: denied { search } for pid=3028 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 292.882962][ T29] audit: type=1400 audit(1753792819.762:22405): avc: denied { search } for pid=3028 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 292.904727][ T29] audit: type=1400 audit(1753792819.762:22406): avc: denied { search } for pid=3028 comm="dhcpcd" name="data" dev="tmpfs" ino=13 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 292.926736][ T29] audit: type=1400 audit(1753792819.762:22407): avc: denied { read } for pid=3028 comm="dhcpcd" name="n61" dev="tmpfs" ino=9302 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 292.948587][ T29] audit: type=1400 audit(1753792819.762:22408): avc: denied { open } for pid=3028 comm="dhcpcd" path="/run/udev/data/n61" dev="tmpfs" ino=9302 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 292.972962][ T29] audit: type=1400 audit(1753792819.872:22409): avc: denied { getattr } for pid=3028 comm="dhcpcd" path="/run/udev/data/n61" dev="tmpfs" ino=9302 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 293.005000][T13214] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 293.012124][T13214] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 293.038163][T13214] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 293.081984][ T29] audit: type=1326 audit(1753792819.982:22410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13305 comm="syz.4.3306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f0cb1e9a9 code=0x7ffc0000 [ 293.105839][ T29] audit: type=1326 audit(1753792819.982:22411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13305 comm="syz.4.3306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f0cb1e9a9 code=0x7ffc0000 [ 293.130317][T11052] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 293.130355][T11052] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 293.133747][T11052] veth1_macvtap: left promiscuous mode [ 293.133768][T11052] veth0_macvtap: left promiscuous mode [ 293.218593][T11052] team0 (unregistering): Port device team_slave_1 removed [ 293.228336][T11052] team0 (unregistering): Port device team_slave_0 removed [ 293.323419][T13291] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 248: padding at end of block bitmap is not set [ 293.347480][T13214] hsr_slave_0: entered promiscuous mode [ 293.374314][T11340] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 293.391196][T13214] hsr_slave_1: entered promiscuous mode [ 293.397196][T13214] debugfs: 'hsr0' already exists in 'hsr' [ 293.403011][T13214] Cannot create hsr debugfs directory [ 293.645427][T11052] IPVS: stop unused estimator thread 0... [ 293.655795][T13355] xt_TPROXY: Can be used only with -p tcp or -p udp [ 293.709828][T13315] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 293.730985][T13315] vhci_hcd: invalid port number 253 [ 293.736354][T13315] vhci_hcd: invalid port number 253 [ 293.857679][T13214] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 293.901152][T13214] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 293.923118][T13214] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 293.943040][T13214] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 294.028215][T13405] __nla_validate_parse: 9 callbacks suppressed [ 294.028240][T13405] netlink: 100 bytes leftover after parsing attributes in process `syz.2.3326'. [ 294.054945][T13214] 8021q: adding VLAN 0 to HW filter on device bond0 [ 294.102461][T13214] 8021q: adding VLAN 0 to HW filter on device team0 [ 294.121987][T11107] bridge0: port 1(bridge_slave_0) entered blocking state [ 294.129694][T11107] bridge0: port 1(bridge_slave_0) entered forwarding state [ 294.169693][T11107] bridge0: port 2(bridge_slave_1) entered blocking state [ 294.176811][T11107] bridge0: port 2(bridge_slave_1) entered forwarding state [ 294.203597][T13432] netlink: 'syz.4.3334': attribute type 10 has an invalid length. [ 294.213518][T13214] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 294.224029][T13214] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 294.266450][T13436] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3336'. [ 294.309786][T13436] netlink: 100 bytes leftover after parsing attributes in process `syz.2.3336'. [ 294.341096][T13446] netlink: 100 bytes leftover after parsing attributes in process `syz.4.3339'. [ 294.354443][T13214] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 294.456673][T13214] veth0_vlan: entered promiscuous mode [ 294.469423][T13214] veth1_vlan: entered promiscuous mode [ 294.529426][T13214] veth0_macvtap: entered promiscuous mode [ 294.542794][T13214] veth1_macvtap: entered promiscuous mode [ 294.569882][T13214] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 294.614818][T13214] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 294.625346][T13214] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 294.634265][T13214] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 294.642993][T13214] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 294.651818][T13214] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 294.728778][T13480] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3350'. [ 294.749053][T13484] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3349'. [ 294.765527][ T36] hid-generic 0000:0000:0000.0023: unknown main item tag 0x1 [ 294.773087][ T36] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 294.780603][ T36] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 294.788042][ T36] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 294.795567][ T36] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 294.803181][ T36] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 294.823145][T13431] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 294.830924][ T36] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 294.833190][T13431] vhci_hcd: invalid port number 253 [ 294.838428][ T36] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 294.843777][T13431] vhci_hcd: invalid port number 253 [ 294.851361][ T36] hid-generic 0000:0000:0000.0023: unknown main item tag 0x2 [ 294.864237][ T36] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 294.871774][ T36] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 294.879183][ T36] hid-generic 0000:0000:0000.0023: unknown main item tag 0x4 [ 294.886622][ T36] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 294.894056][ T36] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 294.901508][ T36] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 294.909104][ T36] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 294.916611][ T36] hid-generic 0000:0000:0000.0023: unknown main item tag 0x2 [ 294.924224][ T36] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 294.931867][ T36] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 294.939256][ T36] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 294.946737][ T36] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 294.954175][ T36] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 294.961638][ T36] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 294.969017][ T36] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 294.976533][ T36] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 294.983959][ T36] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 294.991439][ T36] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 294.998847][ T36] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 295.006329][ T36] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 295.013751][ T36] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 295.021275][ T36] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 295.028768][ T36] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 295.036193][ T36] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 295.043694][ T36] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 295.051203][ T36] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 295.058680][ T36] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 295.066124][ T36] hid-generic 0000:0000:0000.0023: unknown main item tag 0x1 [ 295.074604][ T36] hid-generic 0000:0000:0000.0023: hidraw0: HID v0.00 Device [syz0] on syz1 [ 295.100098][T13489] fido_id[13489]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 295.112674][T13491] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3353'. [ 295.130935][T13491] netlink: 100 bytes leftover after parsing attributes in process `syz.2.3353'. [ 295.203370][T13497] loop0: detected capacity change from 0 to 128 [ 295.263531][T13497] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 295.308320][T13505] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3360'. [ 295.308355][T13497] ext4 filesystem being mounted at /143/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 295.386476][T13517] smc: net device bond0 applied user defined pnetid SYZ0 [ 295.394282][T13517] smc: net device bond0 erased user defined pnetid SYZ0 [ 295.412402][T13497] hub 6-0:1.0: USB hub found [ 295.417328][T13497] hub 6-0:1.0: 8 ports detected [ 295.449652][T11340] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 295.593496][T13528] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3368'. [ 295.801679][T13547] loop0: detected capacity change from 0 to 512 [ 295.818361][T13549] program syz.4.3377 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 295.829690][T13549] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 295.840778][T13547] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.3386: Failed to acquire dquot type 1 [ 295.842453][T13545] hub 6-0:1.0: USB hub found [ 295.859600][T13547] EXT4-fs (loop0): 1 truncate cleaned up [ 295.860093][T13545] hub 6-0:1.0: 8 ports detected [ 295.865959][T13547] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 295.887541][T13547] ext4 filesystem being mounted at /147/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 295.913222][T13553] smc: net device bond0 applied user defined pnetid SYZ0 [ 295.928507][T13553] smc: net device bond0 erased user defined pnetid SYZ0 [ 295.993975][T11340] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 296.154882][T13572] xt_TPROXY: Can be used only with -p tcp or -p udp [ 296.210441][T13555] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 296.218815][T13555] vhci_hcd: invalid port number 253 [ 296.224088][T13555] vhci_hcd: invalid port number 253 [ 296.262750][T13576] program syz.4.3389 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 296.273594][T13577] loop5: detected capacity change from 0 to 512 [ 296.291504][T13577] /dev/loop5: Can't open blockdev [ 296.312757][T13576] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 296.534409][T13591] loop5: detected capacity change from 0 to 512 [ 296.579822][T13591] EXT4-fs error (device loop5): ext4_acquire_dquot:6933: comm syz.5.3393: Failed to acquire dquot type 1 [ 296.637004][T13591] EXT4-fs (loop5): 1 truncate cleaned up [ 296.646557][T13591] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 296.659567][T13591] ext4 filesystem being mounted at /294/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 296.683291][T13608] xt_TPROXY: Can be used only with -p tcp or -p udp [ 296.733326][T13612] xt_TPROXY: Can be used only with -p tcp or -p udp [ 296.828627][ T7744] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 296.841148][T13617] smc: net device bond0 applied user defined pnetid SYZ0 [ 296.848451][T13617] smc: net device bond0 erased user defined pnetid SYZ0 [ 296.852521][T13620] 9pnet_fd: Insufficient options for proto=fd [ 296.993800][T13629] SELinux: syz.5.3405 (13629) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 297.056392][T13633] loop0: detected capacity change from 0 to 512 [ 297.135127][T13633] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.3413: Failed to acquire dquot type 1 [ 297.148264][T13633] EXT4-fs (loop0): 1 truncate cleaned up [ 297.155005][T13633] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 297.167903][T13633] ext4 filesystem being mounted at /154/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 297.248308][T13650] loop3: detected capacity change from 0 to 128 [ 297.274995][T13650] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 297.289058][T13650] ext4 filesystem being mounted at /19/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 297.342215][T11340] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 297.360769][T13650] hub 6-0:1.0: USB hub found [ 297.367414][T13650] hub 6-0:1.0: 8 ports detected [ 297.395518][T13214] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 297.877317][T13675] smc: net device bond0 applied user defined pnetid SYZ0 [ 297.885354][T13675] smc: net device bond0 erased user defined pnetid SYZ0 [ 298.006657][ T3394] hid-generic 0000:0000:0000.0024: unknown main item tag 0x1 [ 298.014110][ T3394] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 298.021655][ T3394] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 298.029161][ T3394] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 298.036679][ T3394] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 298.044163][ T3394] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 298.054882][ T3394] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 298.062597][ T3394] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 298.070116][ T3394] hid-generic 0000:0000:0000.0024: unknown main item tag 0x2 [ 298.077632][ T3394] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 298.085155][ T3394] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 298.092616][ T3394] hid-generic 0000:0000:0000.0024: unknown main item tag 0x4 [ 298.100139][ T3394] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 298.107667][ T3394] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 298.115100][ T3394] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 298.122561][ T3394] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 298.130158][ T3394] hid-generic 0000:0000:0000.0024: unknown main item tag 0x2 [ 298.137666][ T3394] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 298.145208][ T3394] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 298.152648][ T3394] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 298.160102][ T3394] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 298.167537][ T3394] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 298.174979][ T3394] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 298.182441][ T3394] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 298.189154][T13679] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 298.189819][ T3394] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 298.204577][ T3394] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 298.206743][T13679] vhci_hcd: invalid port number 253 [ 298.212036][ T3394] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 298.212061][ T3394] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 298.212082][ T3394] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 298.217271][T13679] vhci_hcd: invalid port number 253 [ 298.225083][ T3394] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 298.252569][ T3394] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 298.259964][ T3394] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 298.267418][ T3394] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 298.274884][ T3394] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 298.282325][ T3394] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 298.289784][ T3394] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 298.297282][ T3394] hid-generic 0000:0000:0000.0024: unknown main item tag 0x1 [ 298.336193][ T3394] hid-generic 0000:0000:0000.0024: hidraw0: HID v0.00 Device [syz0] on syz1 [ 298.375237][T13689] fido_id[13689]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 298.410116][ T29] kauditd_printk_skb: 366 callbacks suppressed [ 298.410135][ T29] audit: type=1326 audit(1753792825.302:22772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13676 comm="syz.0.3429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1605ee9a9 code=0x7ffc0000 [ 298.461235][ T29] audit: type=1326 audit(1753792825.302:22773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13676 comm="syz.0.3429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1605ee9a9 code=0x7ffc0000 [ 298.516082][T13700] batadv_slave_0: entered promiscuous mode [ 298.535312][T13700] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 298.553738][T13704] netlink: 'syz.4.3439': attribute type 10 has an invalid length. [ 298.569888][T13700] batadv_slave_0 (unregistering): left promiscuous mode [ 298.577304][T13700] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 298.588833][T13708] xt_TPROXY: Can be used only with -p tcp or -p udp [ 298.609109][T13710] 9pnet_fd: Insufficient options for proto=fd [ 298.711479][T13720] smc: net device bond0 applied user defined pnetid SYZ0 [ 298.719054][T13720] smc: net device bond0 erased user defined pnetid SYZ0 [ 298.837269][T13734] loop0: detected capacity change from 0 to 512 [ 298.847561][T13736] loop3: detected capacity change from 0 to 512 [ 298.862764][T13734] Quota error (device loop0): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 298.872852][T13734] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 298.882776][T13734] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.3451: Failed to acquire dquot type 1 [ 298.894256][T13736] Quota error (device loop3): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 298.904483][T13736] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 298.914803][T13736] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.3453: Failed to acquire dquot type 1 [ 298.958410][ T29] audit: type=1326 audit(1753792825.852:22774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13741 comm="syz.4.3454" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f0cb1e9a9 code=0x7ffc0000 [ 298.982238][ T29] audit: type=1326 audit(1753792825.852:22775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13741 comm="syz.4.3454" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f0cb1e9a9 code=0x7ffc0000 [ 299.006008][ T29] audit: type=1326 audit(1753792825.852:22776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13741 comm="syz.4.3454" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1f0cb1e9a9 code=0x7ffc0000 [ 299.029782][ T29] audit: type=1326 audit(1753792825.852:22777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13741 comm="syz.4.3454" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f0cb1e9a9 code=0x7ffc0000 [ 299.060190][T13742] __nla_validate_parse: 21 callbacks suppressed [ 299.060205][T13742] netlink: 100 bytes leftover after parsing attributes in process `syz.4.3454'. [ 299.061332][T13734] EXT4-fs (loop0): 1 truncate cleaned up [ 299.082565][T13736] EXT4-fs (loop3): 1 truncate cleaned up [ 299.088542][T13736] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 299.101179][T13736] ext4 filesystem being mounted at /26/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 299.120385][T13734] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 299.234284][T13745] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3453'. [ 299.239525][T13734] ext4 filesystem being mounted at /166/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 299.301806][T13734] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3451'. [ 299.351733][T13214] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 299.393209][T11340] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 299.480391][T13751] loop0: detected capacity change from 0 to 8192 [ 299.502357][T13751] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3457'. [ 299.514897][T13751] syz.0.3457: attempt to access beyond end of device [ 299.514897][T13751] loop0: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 299.528403][T13751] Buffer I/O error on dev loop0, logical block 57847, async page read [ 299.556355][T13753] loop3: detected capacity change from 0 to 8192 [ 299.587282][T13753] syz.3.3458: attempt to access beyond end of device [ 299.587282][T13753] loop3: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 299.600793][T13753] Buffer I/O error on dev loop3, logical block 57847, async page read [ 299.616015][T13755] loop0: detected capacity change from 0 to 512 [ 299.632533][T13755] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.3459: Failed to acquire dquot type 1 [ 299.671493][T13755] EXT4-fs (loop0): 1 truncate cleaned up [ 299.677715][T13755] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 299.692219][T13755] ext4 filesystem being mounted at /168/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 299.802725][T13769] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3459'. [ 299.833879][T13771] smc: net device bond0 applied user defined pnetid SYZ0 [ 299.841480][T13771] smc: net device bond0 erased user defined pnetid SYZ0 [ 299.863456][T11340] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 299.895253][T13779] program syz.2.3470 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 299.907023][T13777] smc: net device bond0 applied user defined pnetid SYZ0 [ 299.908875][T13779] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 299.914889][T13777] smc: net device bond0 erased user defined pnetid SYZ0 [ 300.246314][T13803] xt_TPROXY: Can be used only with -p tcp or -p udp [ 300.288302][T13808] smc: net device bond0 applied user defined pnetid SYZ0 [ 300.310581][T13809] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3480'. [ 300.320590][T13808] smc: net device bond0 erased user defined pnetid SYZ0 [ 300.370013][T13811] loop0: detected capacity change from 0 to 128 [ 300.418237][T13811] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 300.441211][T13811] ext4 filesystem being mounted at /174/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 300.475006][T13814] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3478'. [ 300.529044][T13816] program syz.2.3484 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 300.559009][T13816] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 300.579488][T13811] hub 6-0:1.0: USB hub found [ 300.591160][T13811] hub 6-0:1.0: 8 ports detected [ 300.630310][T11340] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 300.650186][ T3394] hid-generic 0000:0000:0000.0025: unknown main item tag 0x1 [ 300.657759][ T3394] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0 [ 300.665277][ T3394] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0 [ 300.672715][ T3394] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0 [ 300.680129][ T3394] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0 [ 300.687566][ T3394] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0 [ 300.698141][ T3394] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0 [ 300.705623][ T3394] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0 [ 300.713206][ T3394] hid-generic 0000:0000:0000.0025: unknown main item tag 0x2 [ 300.720835][ T3394] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0 [ 300.728263][ T3394] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0 [ 300.735938][ T3394] hid-generic 0000:0000:0000.0025: unknown main item tag 0x4 [ 300.743352][ T3394] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0 [ 300.750961][ T3394] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0 [ 300.758360][ T3394] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0 [ 300.765831][ T3394] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0 [ 300.773376][ T3394] hid-generic 0000:0000:0000.0025: unknown main item tag 0x2 [ 300.780861][ T3394] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0 [ 300.788281][ T3394] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0 [ 300.795872][ T3394] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0 [ 300.803389][ T3394] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0 [ 300.810931][ T3394] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0 [ 300.818328][ T3394] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0 [ 300.825797][ T3394] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0 [ 300.833219][ T3394] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0 [ 300.840637][ T3394] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0 [ 300.848167][ T3394] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0 [ 300.855661][ T3394] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0 [ 300.863256][ T3394] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0 [ 300.870827][ T3394] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0 [ 300.878394][ T3394] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0 [ 300.886061][ T3394] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0 [ 300.893480][ T3394] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0 [ 300.900900][ T3394] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0 [ 300.908335][ T3394] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0 [ 300.916311][ T3394] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0 [ 300.924632][ T3394] hid-generic 0000:0000:0000.0025: unknown main item tag 0x1 [ 300.932870][ T3394] hid-generic 0000:0000:0000.0025: hidraw0: HID v0.00 Device [syz0] on syz1 [ 300.975138][T13823] fido_id[13823]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 301.033960][T13834] loop0: detected capacity change from 0 to 512 [ 301.052834][T13834] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.3493: Failed to acquire dquot type 1 [ 301.064998][T13834] EXT4-fs (loop0): 1 truncate cleaned up [ 301.071446][T13834] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 301.076678][T13835] hub 6-0:1.0: USB hub found [ 301.085218][T13834] ext4 filesystem being mounted at /176/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 301.099381][T13835] hub 6-0:1.0: 8 ports detected [ 301.106350][T13839] netlink: 'syz.2.3489': attribute type 10 has an invalid length. [ 301.156110][T13845] smc: net device bond0 applied user defined pnetid SYZ0 [ 301.163641][T13845] smc: net device bond0 erased user defined pnetid SYZ0 [ 301.199850][T13849] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3493'. [ 301.252922][T11340] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 301.292264][T13854] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3499'. [ 301.327553][T13853] hub 6-0:1.0: USB hub found [ 301.343334][T13853] hub 6-0:1.0: 8 ports detected [ 301.396375][T13868] netlink: 'syz.4.3506': attribute type 10 has an invalid length. [ 301.448047][T13876] program syz.0.3510 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 301.459623][T13876] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 301.588491][T13889] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3516'. [ 301.694368][T13899] netlink: 'syz.3.3520': attribute type 10 has an invalid length. [ 301.714361][T13899] geneve1: entered promiscuous mode [ 301.724747][T13899] bond0: (slave geneve1): Enslaving as an active interface with an up link [ 301.797767][ T36] hid-generic 0000:0000:0000.0026: unknown main item tag 0x1 [ 301.805280][ T36] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 301.812745][ T36] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 301.820156][ T36] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 301.827622][ T36] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 301.835147][ T36] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 301.847913][ T36] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 301.855394][ T36] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 301.863033][ T36] hid-generic 0000:0000:0000.0026: unknown main item tag 0x2 [ 301.870561][ T36] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 301.878081][ T36] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 301.885788][ T36] hid-generic 0000:0000:0000.0026: unknown main item tag 0x4 [ 301.893736][ T36] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 301.901202][ T36] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 301.908627][ T36] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 301.916293][ T36] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 301.923731][ T36] hid-generic 0000:0000:0000.0026: unknown main item tag 0x2 [ 301.931151][ T36] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 301.938586][ T36] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 301.946029][ T36] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 301.953531][ T36] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 301.961122][ T36] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 301.964128][T13912] loop0: detected capacity change from 0 to 8192 [ 301.968614][ T36] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 301.982411][ T36] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 301.989960][ T36] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 301.994002][T13912] syz.0.3525: attempt to access beyond end of device [ 301.994002][T13912] loop0: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 301.997412][ T36] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 302.010854][T13912] Buffer I/O error on dev loop0, logical block 57847, async page read [ 302.018258][ T36] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 302.034059][ T36] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 302.041565][ T36] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 302.048993][ T36] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 302.056492][ T36] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 302.063933][ T36] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 302.071411][ T36] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 302.078808][ T36] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 302.086288][ T36] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 302.093804][ T36] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 302.101244][ T36] hid-generic 0000:0000:0000.0026: unknown main item tag 0x1 [ 302.120165][ T36] hid-generic 0000:0000:0000.0026: hidraw0: HID v0.00 Device [syz0] on syz1 [ 302.140827][T13914] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 302.148160][T13914] vhci_hcd: invalid port number 253 [ 302.153489][T13914] vhci_hcd: invalid port number 253 [ 302.227207][T13919] fido_id[13919]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 302.808300][T13942] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 302.825109][T13942] vhci_hcd: invalid port number 253 [ 302.830360][T13942] vhci_hcd: invalid port number 253 [ 303.562626][T13956] netlink: 'syz.3.3542': attribute type 10 has an invalid length. [ 303.607399][ T29] kauditd_printk_skb: 85 callbacks suppressed [ 303.607414][ T29] audit: type=1326 audit(1753792830.502:22859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13957 comm="syz.2.3543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc22b83e9a9 code=0x7ffc0000 [ 303.669058][ T29] audit: type=1326 audit(1753792830.532:22860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13957 comm="syz.2.3543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc22b83e9a9 code=0x7ffc0000 [ 303.692951][ T29] audit: type=1326 audit(1753792830.532:22861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13957 comm="syz.2.3543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc22b83e9a9 code=0x7ffc0000 [ 303.716936][ T29] audit: type=1326 audit(1753792830.532:22862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13957 comm="syz.2.3543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc22b83e9a9 code=0x7ffc0000 [ 303.740613][ T29] audit: type=1326 audit(1753792830.532:22863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13957 comm="syz.2.3543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc22b83e9a9 code=0x7ffc0000 [ 303.764433][ T29] audit: type=1326 audit(1753792830.542:22864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13957 comm="syz.2.3543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc22b83e9a9 code=0x7ffc0000 [ 303.788103][ T29] audit: type=1326 audit(1753792830.542:22865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13957 comm="syz.2.3543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc22b83e9a9 code=0x7ffc0000 [ 303.811852][ T29] audit: type=1326 audit(1753792830.542:22866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13957 comm="syz.2.3543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc22b83e9a9 code=0x7ffc0000 [ 303.835511][ T29] audit: type=1326 audit(1753792830.542:22867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13957 comm="syz.2.3543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc22b83e9a9 code=0x7ffc0000 [ 303.859101][ T29] audit: type=1326 audit(1753792830.542:22868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13957 comm="syz.2.3543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc22b83e9a9 code=0x7ffc0000 [ 304.005987][T13976] xt_TPROXY: Can be used only with -p tcp or -p udp [ 304.088080][T13976] __nla_validate_parse: 8 callbacks suppressed [ 304.088122][T13976] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3546'. [ 304.092883][T13984] netlink: 'syz.2.3554': attribute type 10 has an invalid length. [ 304.119160][T13948] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 304.127129][T13948] vhci_hcd: invalid port number 253 [ 304.132444][T13948] vhci_hcd: invalid port number 253 [ 304.137755][T13971] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 304.151071][T13971] vhci_hcd: invalid port number 253 [ 304.156556][T13971] vhci_hcd: invalid port number 253 [ 304.166355][T13989] xt_TPROXY: Can be used only with -p tcp or -p udp [ 304.179725][T13989] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3557'. [ 304.196963][T13992] xt_TPROXY: Can be used only with -p tcp or -p udp [ 304.267969][T13992] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3558'. [ 304.310658][T14003] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3561'. [ 304.340246][T14003] netlink: 100 bytes leftover after parsing attributes in process `syz.2.3561'. [ 304.392734][T14005] program syz.3.3562 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 304.409803][T14005] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 304.444099][T14008] 9pnet_fd: Insufficient options for proto=fd [ 304.514122][T14015] netlink: 'syz.5.3567': attribute type 10 has an invalid length. [ 304.575860][T14020] xt_TPROXY: Can be used only with -p tcp or -p udp [ 304.836731][T14039] netlink: 'syz.5.3579': attribute type 10 has an invalid length. [ 304.985391][T14051] 9pnet_fd: Insufficient options for proto=fd [ 305.012469][T14050] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3583'. [ 305.103141][T14054] loop5: detected capacity change from 0 to 8192 [ 305.122242][T14054] syz.5.3584: attempt to access beyond end of device [ 305.122242][T14054] loop5: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 305.135794][T14054] Buffer I/O error on dev loop5, logical block 57847, async page read [ 305.154175][T14061] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3585'. [ 305.396168][T14037] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 305.417994][T14074] smc: net device bond0 applied user defined pnetid SYZ0 [ 305.424734][T14037] vhci_hcd: invalid port number 253 [ 305.430294][T14037] vhci_hcd: invalid port number 253 [ 305.450914][T14074] smc: net device bond0 erased user defined pnetid SYZ0 [ 305.538148][T14077] netlink: 60 bytes leftover after parsing attributes in process `syz.5.3591'. [ 305.785981][T14082] hub 6-0:1.0: USB hub found [ 305.809560][T14082] hub 6-0:1.0: 8 ports detected [ 306.033267][T14092] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3597'. [ 306.506134][T14100] hub 6-0:1.0: USB hub found [ 306.549816][T14100] hub 6-0:1.0: 8 ports detected [ 306.881119][T14102] xt_TPROXY: Can be used only with -p tcp or -p udp [ 307.040041][T14105] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 307.110608][T14105] vhci_hcd: invalid port number 253 [ 307.115955][T14105] vhci_hcd: invalid port number 253 [ 307.143630][T14108] 9pnet_fd: Insufficient options for proto=fd [ 307.813513][T14120] loop3: detected capacity change from 0 to 8192 [ 307.849216][T14120] syz.3.3607: attempt to access beyond end of device [ 307.849216][T14120] loop3: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 307.862697][T14120] Buffer I/O error on dev loop3, logical block 57847, async page read [ 307.872723][T14114] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 307.880111][T14114] vhci_hcd: invalid port number 253 [ 307.885396][T14114] vhci_hcd: invalid port number 253 [ 307.976750][T14127] xt_TPROXY: Can be used only with -p tcp or -p udp [ 308.015129][T14128] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3609'. [ 308.112234][T14141] program syz.3.3613 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 308.131462][T14141] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 308.252325][T14149] loop3: detected capacity change from 0 to 8192 [ 308.279506][T14149] syz.3.3617: attempt to access beyond end of device [ 308.279506][T14149] loop3: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 308.293076][T14149] Buffer I/O error on dev loop3, logical block 57847, async page read [ 308.437188][T14158] program syz.5.3620 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 308.456651][T14158] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 308.560853][T14164] loop3: detected capacity change from 0 to 8192 [ 308.595639][T14164] syz.3.3623: attempt to access beyond end of device [ 308.595639][T14164] loop3: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 308.609107][T14164] Buffer I/O error on dev loop3, logical block 57847, async page read [ 308.624754][ T29] kauditd_printk_skb: 112 callbacks suppressed [ 308.624769][ T29] audit: type=1326 audit(1753792835.522:22981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14175 comm="syz.0.3627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1605ee9a9 code=0x7ffc0000 [ 308.686270][ T29] audit: type=1326 audit(1753792835.522:22982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14175 comm="syz.0.3627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd1605ee9a9 code=0x7ffc0000 [ 308.710019][ T29] audit: type=1326 audit(1753792835.522:22983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14175 comm="syz.0.3627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1605ee9a9 code=0x7ffc0000 [ 308.733721][ T29] audit: type=1326 audit(1753792835.522:22984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14175 comm="syz.0.3627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd1605ee9a9 code=0x7ffc0000 [ 308.757211][ T29] audit: type=1326 audit(1753792835.522:22985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14175 comm="syz.0.3627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1605ee9a9 code=0x7ffc0000 [ 308.781538][ T29] audit: type=1326 audit(1753792835.522:22986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14175 comm="syz.0.3627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd1605ee9a9 code=0x7ffc0000 [ 308.805159][ T29] audit: type=1326 audit(1753792835.522:22987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14175 comm="syz.0.3627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1605ee9a9 code=0x7ffc0000 [ 308.829338][ T29] audit: type=1326 audit(1753792835.522:22988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14175 comm="syz.0.3627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd1605ee9a9 code=0x7ffc0000 [ 308.853129][ T29] audit: type=1326 audit(1753792835.522:22989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14175 comm="syz.0.3627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1605ee9a9 code=0x7ffc0000 [ 308.876878][ T29] audit: type=1326 audit(1753792835.522:22990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14175 comm="syz.0.3627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd1605ee9a9 code=0x7ffc0000 [ 308.907323][T14192] 9pnet_fd: Insufficient options for proto=fd [ 308.934780][T14198] program syz.3.3637 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 308.947651][T14198] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 309.108659][T14206] loop0: detected capacity change from 0 to 8192 [ 309.147690][T14206] syz.0.3641: attempt to access beyond end of device [ 309.147690][T14206] loop0: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 309.161287][T14206] Buffer I/O error on dev loop0, logical block 57847, async page read [ 309.258894][T14218] __nla_validate_parse: 4 callbacks suppressed [ 309.258906][T14218] netlink: 100 bytes leftover after parsing attributes in process `syz.0.3645'. [ 309.322530][T14202] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 309.329867][T14202] vhci_hcd: invalid port number 253 [ 309.335130][T14202] vhci_hcd: invalid port number 253 [ 309.537241][T14214] blktrace: Concurrent blktraces are not allowed on loop7 [ 309.547081][T14228] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3648'. [ 309.888835][T14214] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 309.900886][T14214] vhci_hcd: invalid port number 253 [ 309.906117][T14214] vhci_hcd: invalid port number 253 [ 310.007383][T14251] loop0: detected capacity change from 0 to 512 [ 310.030090][T14253] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3658'. [ 310.050309][T14251] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.3656: Failed to acquire dquot type 1 [ 310.103741][T14251] EXT4-fs (loop0): 1 truncate cleaned up [ 310.109731][T14251] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 310.125317][T14251] ext4 filesystem being mounted at /211/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 310.137989][T14260] netlink: 'syz.2.3660': attribute type 10 has an invalid length. [ 310.202392][T14251] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3656'. [ 310.263008][T11340] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 310.273901][T14274] xt_TPROXY: Can be used only with -p tcp or -p udp [ 310.347629][T14274] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3665'. [ 310.387881][T14269] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 310.396438][T14289] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3670'. [ 310.435433][T14269] vhci_hcd: invalid port number 253 [ 310.440681][T14269] vhci_hcd: invalid port number 253 [ 310.451467][T14293] 9pnet_fd: Insufficient options for proto=fd [ 310.586262][T14298] netlink: 'syz.0.3673': attribute type 10 has an invalid length. [ 310.760884][T14302] hub 6-0:1.0: USB hub found [ 310.767003][T14302] hub 6-0:1.0: 8 ports detected [ 310.872184][T14308] loop0: detected capacity change from 0 to 512 [ 310.989947][T14308] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.3677: Failed to acquire dquot type 1 [ 311.037942][T14308] EXT4-fs (loop0): 1 truncate cleaned up [ 311.046474][T14308] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 311.063947][T14308] ext4 filesystem being mounted at /216/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 311.287749][T14312] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 311.302873][T14308] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3677'. [ 311.355936][T14312] vhci_hcd: invalid port number 253 [ 311.361236][T14312] vhci_hcd: invalid port number 253 [ 311.414497][T11340] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 312.234029][T14314] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 312.250996][T14314] vhci_hcd: invalid port number 253 [ 312.256321][T14314] vhci_hcd: invalid port number 253 [ 312.438548][T14333] netlink: 'syz.3.3686': attribute type 10 has an invalid length. [ 312.455116][T14332] netlink: 100 bytes leftover after parsing attributes in process `syz.0.3685'. [ 312.533559][T14341] smc: net device bond0 applied user defined pnetid SYZ0 [ 312.551344][T14338] hub 6-0:1.0: USB hub found [ 312.556121][T14338] hub 6-0:1.0: 8 ports detected [ 312.562455][T14341] smc: net device bond0 erased user defined pnetid SYZ0 [ 312.581282][T14343] hub 6-0:1.0: USB hub found [ 312.589262][T14343] hub 6-0:1.0: 8 ports detected [ 312.664528][T14349] smc: net device bond0 applied user defined pnetid SYZ0 [ 312.692042][T14349] smc: net device bond0 erased user defined pnetid SYZ0 [ 312.729628][T14356] xt_TPROXY: Can be used only with -p tcp or -p udp [ 312.770860][T14356] netlink: 60 bytes leftover after parsing attributes in process `syz.5.3697'. [ 312.823708][T14365] netlink: 100 bytes leftover after parsing attributes in process `syz.2.3700'. [ 312.981219][T14380] smc: net device bond0 applied user defined pnetid SYZ0 [ 312.988578][T14380] smc: net device bond0 erased user defined pnetid SYZ0 [ 313.013414][T14378] hub 6-0:1.0: USB hub found [ 313.019629][T14378] hub 6-0:1.0: 8 ports detected [ 313.061560][T14345] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 313.079436][T14345] vhci_hcd: invalid port number 253 [ 313.084756][T14345] vhci_hcd: invalid port number 253 [ 313.111676][T14392] smc: net device bond0 applied user defined pnetid SYZ0 [ 313.124374][T14392] smc: net device bond0 erased user defined pnetid SYZ0 [ 313.229495][T14402] loop5: detected capacity change from 0 to 512 [ 313.263968][T14402] EXT4-fs error (device loop5): ext4_acquire_dquot:6933: comm syz.5.3715: Failed to acquire dquot type 1 [ 313.285967][T14402] EXT4-fs (loop5): 1 truncate cleaned up [ 313.292035][T14402] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 313.305465][T14402] ext4 filesystem being mounted at /338/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 313.429383][T14426] smc: net device bond0 applied user defined pnetid SYZ0 [ 313.442122][ T7744] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 313.452132][T14426] smc: net device bond0 erased user defined pnetid SYZ0 [ 313.546178][T14433] loop0: detected capacity change from 0 to 8192 [ 313.563416][T14433] syz.0.3730: attempt to access beyond end of device [ 313.563416][T14433] loop0: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 313.576940][T14433] Buffer I/O error on dev loop0, logical block 57847, async page read [ 313.687905][T14441] program syz.0.3733 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 313.727399][T14441] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 313.743717][T14448] SELinux: syz.2.3737 (14448) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 313.862283][T14452] loop0: detected capacity change from 0 to 8192 [ 313.876319][T14452] syz.0.3738: attempt to access beyond end of device [ 313.876319][T14452] loop0: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 313.889796][T14452] Buffer I/O error on dev loop0, logical block 57847, async page read [ 314.013398][T14459] loop0: detected capacity change from 0 to 512 [ 314.044396][T14459] __quota_error: 164 callbacks suppressed [ 314.044413][T14459] Quota error (device loop0): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 314.060327][T14459] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 314.070258][T14459] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.3740: Failed to acquire dquot type 1 [ 314.088877][T14462] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 314.096867][T14459] EXT4-fs (loop0): 1 truncate cleaned up [ 314.105603][T14459] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 314.116995][T14462] vhci_hcd: invalid port number 253 [ 314.118254][T14459] ext4 filesystem being mounted at /236/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 314.123440][T14462] vhci_hcd: invalid port number 253 [ 314.227516][T11340] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 314.265200][ T29] audit: type=1326 audit(1753792841.162:23149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14465 comm="syz.0.3741" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1605ee9a9 code=0x7ffc0000 [ 314.296059][T14466] __nla_validate_parse: 10 callbacks suppressed [ 314.296073][T14466] netlink: 100 bytes leftover after parsing attributes in process `syz.0.3741'. [ 314.326360][ T29] audit: type=1326 audit(1753792841.162:23150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14465 comm="syz.0.3741" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd1605ee9a9 code=0x7ffc0000 [ 314.350039][ T29] audit: type=1326 audit(1753792841.162:23151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14465 comm="syz.0.3741" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1605ee9a9 code=0x7ffc0000 [ 314.373665][ T29] audit: type=1326 audit(1753792841.162:23152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14465 comm="syz.0.3741" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd1605ee9a9 code=0x7ffc0000 [ 314.397265][ T29] audit: type=1326 audit(1753792841.162:23153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14465 comm="syz.0.3741" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1605ee9a9 code=0x7ffc0000 [ 314.420887][ T29] audit: type=1326 audit(1753792841.162:23154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14465 comm="syz.0.3741" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd1605ee9a9 code=0x7ffc0000 [ 314.444477][ T29] audit: type=1326 audit(1753792841.192:23155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14465 comm="syz.0.3741" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1605ee9a9 code=0x7ffc0000 [ 314.468082][ T29] audit: type=1326 audit(1753792841.192:23156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14465 comm="syz.0.3741" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1605ee9a9 code=0x7ffc0000 [ 314.489549][T14468] xt_TPROXY: Can be used only with -p tcp or -p udp [ 314.526790][T14468] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3742'. [ 314.608308][T14472] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3744'. [ 314.871867][T14491] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 314.879212][T14491] vhci_hcd: invalid port number 253 [ 314.884459][T14491] vhci_hcd: invalid port number 253 [ 314.901530][T14493] loop0: detected capacity change from 0 to 512 [ 314.951873][T14493] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.3751: Failed to acquire dquot type 1 [ 314.972585][T14493] EXT4-fs (loop0): 1 truncate cleaned up [ 314.978751][T14493] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 314.994906][T14493] ext4 filesystem being mounted at /242/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 315.062820][T14493] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3751'. [ 315.124079][T11340] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 315.166474][T14501] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3752'. [ 315.182262][T14501] netlink: 100 bytes leftover after parsing attributes in process `syz.0.3752'. [ 315.200947][T14499] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3753'. [ 315.237350][T14504] loop0: detected capacity change from 0 to 512 [ 315.253845][T14504] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.3754: Failed to acquire dquot type 1 [ 315.266720][T14504] EXT4-fs (loop0): 1 truncate cleaned up [ 315.274135][T14504] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 315.286955][T14504] ext4 filesystem being mounted at /244/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 315.347317][T11340] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 315.880390][T14520] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 315.990390][T14520] vhci_hcd: invalid port number 253 [ 315.995754][T14520] vhci_hcd: invalid port number 253 [ 316.733253][T14529] hub 6-0:1.0: USB hub found [ 316.751543][T14529] hub 6-0:1.0: 8 ports detected [ 316.829208][T14537] netlink: 'syz.4.3765': attribute type 10 has an invalid length. [ 316.861048][T14539] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3766'. [ 316.903639][T14539] netlink: 100 bytes leftover after parsing attributes in process `syz.0.3766'. [ 317.047053][T14546] loop0: detected capacity change from 0 to 512 [ 317.098395][T14546] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.3769: Failed to acquire dquot type 1 [ 317.133540][T14552] netlink: 60 bytes leftover after parsing attributes in process `syz.5.3772'. [ 317.150374][T14546] EXT4-fs (loop0): 1 truncate cleaned up [ 317.160411][T14546] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 317.173504][T14546] ext4 filesystem being mounted at /249/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 317.251201][T14531] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 317.258886][T14531] vhci_hcd: invalid port number 253 [ 317.264206][T14531] vhci_hcd: invalid port number 253 [ 317.350991][T11340] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 317.634301][T14587] program syz.4.3786 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 317.654660][T14587] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 317.702064][T14585] openvswitch: netlink: Message has 6 unknown bytes. [ 317.754467][T14597] loop3: detected capacity change from 0 to 512 [ 317.792239][T14597] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.3792: Failed to acquire dquot type 1 [ 317.836320][T14597] EXT4-fs (loop3): 1 truncate cleaned up [ 317.860462][T14597] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 317.890657][T14597] ext4 filesystem being mounted at /94/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 317.926440][T14613] xt_TPROXY: Can be used only with -p tcp or -p udp [ 318.002804][T13214] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 318.093656][T14620] hub 6-0:1.0: USB hub found [ 318.098813][T14620] hub 6-0:1.0: 8 ports detected [ 318.259638][T14616] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 318.290739][T14616] vhci_hcd: invalid port number 253 [ 318.295996][T14616] vhci_hcd: invalid port number 253 [ 318.364613][T14634] loop3: detected capacity change from 0 to 512 [ 318.389365][T14634] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.3806: Failed to acquire dquot type 1 [ 318.427130][T14634] EXT4-fs (loop3): 1 truncate cleaned up [ 318.459399][T14634] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 318.482701][T14634] ext4 filesystem being mounted at /99/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 318.591542][T13214] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 318.666618][T14643] loop3: detected capacity change from 0 to 512 [ 318.673966][T14625] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 318.681512][T14625] vhci_hcd: invalid port number 253 [ 318.686737][T14625] vhci_hcd: invalid port number 253 [ 318.718075][T14643] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.3809: Failed to acquire dquot type 1 [ 318.751057][T14643] EXT4-fs (loop3): 1 truncate cleaned up [ 318.757265][T14643] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 318.791604][T14643] ext4 filesystem being mounted at /101/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 318.945191][T14653] hub 6-0:1.0: USB hub found [ 318.951070][T13214] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 318.960159][T14653] hub 6-0:1.0: 8 ports detected [ 318.968665][T14656] program syz.0.3815 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 318.999176][T14658] netlink: 'syz.3.3814': attribute type 10 has an invalid length. [ 319.000807][T14656] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 319.043460][T14662] program syz.0.3817 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 319.059984][T14662] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 319.205821][ T29] kauditd_printk_skb: 338 callbacks suppressed [ 319.205854][ T29] audit: type=1326 audit(1753792846.102:23483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14673 comm="syz.3.3822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7367f5e9a9 code=0x7ffc0000 [ 319.274269][T14680] smc: net device bond0 applied user defined pnetid SYZ0 [ 319.283681][ T29] audit: type=1326 audit(1753792846.132:23484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14673 comm="syz.3.3822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7367f5e9a9 code=0x7ffc0000 [ 319.307323][ T29] audit: type=1326 audit(1753792846.132:23485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14673 comm="syz.3.3822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7367f5e9a9 code=0x7ffc0000 [ 319.331102][ T29] audit: type=1326 audit(1753792846.132:23486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14673 comm="syz.3.3822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7367f5e9a9 code=0x7ffc0000 [ 319.354765][ T29] audit: type=1326 audit(1753792846.132:23487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14673 comm="syz.3.3822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7367f5e9a9 code=0x7ffc0000 [ 319.378387][ T29] audit: type=1326 audit(1753792846.132:23488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14673 comm="syz.3.3822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7367f5e9a9 code=0x7ffc0000 [ 319.381070][T14680] smc: net device bond0 erased user defined pnetid SYZ0 [ 319.402028][ T29] audit: type=1326 audit(1753792846.132:23489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14673 comm="syz.3.3822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7367f5e9a9 code=0x7ffc0000 [ 319.432468][ T29] audit: type=1400 audit(1753792846.132:23490): avc: denied { tracepoint } for pid=14671 comm="syz.0.3823" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 319.452473][ T29] audit: type=1326 audit(1753792846.132:23491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14673 comm="syz.3.3822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f7367f5e9a9 code=0x7ffc0000 [ 319.476031][ T29] audit: type=1326 audit(1753792846.132:23492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14673 comm="syz.3.3822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7367f5e9a9 code=0x7ffc0000 [ 319.551935][T14675] __nla_validate_parse: 16 callbacks suppressed [ 319.551951][T14675] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3824'. [ 319.617842][T14690] smc: net device bond0 applied user defined pnetid SYZ0 [ 319.651852][T14690] smc: net device bond0 erased user defined pnetid SYZ0 [ 319.698742][T14694] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3831'. [ 319.825237][T14706] hub 6-0:1.0: USB hub found [ 319.830564][T14706] hub 6-0:1.0: 8 ports detected [ 319.853731][T14711] xt_TPROXY: Can be used only with -p tcp or -p udp [ 319.864700][T14711] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3839'. [ 320.037631][T14724] program syz.0.3844 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 320.048617][T14724] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 320.072014][T14716] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3841'. [ 320.083235][T14702] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 320.101292][T14702] vhci_hcd: invalid port number 253 [ 320.106549][T14702] vhci_hcd: invalid port number 253 [ 320.153281][T14729] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 320.183636][T14729] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 320.255682][T14738] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3849'. [ 320.294985][T14743] netlink: 'syz.0.3850': attribute type 10 has an invalid length. [ 320.340568][T14747] netlink: 'syz.0.3861': attribute type 10 has an invalid length. [ 320.394543][T14755] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3854'. [ 320.415245][T14753] xt_TPROXY: Can be used only with -p tcp or -p udp [ 320.426593][T14755] netlink: 100 bytes leftover after parsing attributes in process `syz.0.3854'. [ 320.427768][T14753] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3855'. [ 320.439779][T14757] loop3: detected capacity change from 0 to 512 [ 320.473376][T14757] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.3856: Failed to acquire dquot type 1 [ 320.474761][T14759] netlink: 'syz.0.3857': attribute type 29 has an invalid length. [ 320.486805][T14757] EXT4-fs (loop3): 1 truncate cleaned up [ 320.496886][T14759] netlink: 'syz.0.3857': attribute type 29 has an invalid length. [ 320.499888][T14757] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 320.520020][T14757] ext4 filesystem being mounted at /109/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 320.550014][T14757] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3856'. [ 320.585941][T13214] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 320.615338][T14773] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3862'. [ 320.640632][T14777] SELinux: syz.2.3863 (14777) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 320.687578][T14781] netlink: 'syz.0.3865': attribute type 10 has an invalid length. [ 320.757269][T14792] FAULT_INJECTION: forcing a failure. [ 320.757269][T14792] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 320.770608][T14792] CPU: 0 UID: 0 PID: 14792 Comm: syz.3.3870 Not tainted 6.16.0-syzkaller-01056-gae388edd4a8f #0 PREEMPT(voluntary) [ 320.770637][T14792] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 320.770655][T14792] Call Trace: [ 320.770661][T14792] [ 320.770666][T14792] __dump_stack+0x1d/0x30 [ 320.770720][T14792] dump_stack_lvl+0xe8/0x140 [ 320.770738][T14792] dump_stack+0x15/0x1b [ 320.770829][T14792] should_fail_ex+0x265/0x280 [ 320.770852][T14792] should_fail+0xb/0x20 [ 320.770874][T14792] should_fail_usercopy+0x1a/0x20 [ 320.770957][T14792] _copy_from_user+0x1c/0xb0 [ 320.771023][T14792] ___sys_sendmsg+0xc1/0x1d0 [ 320.771058][T14792] __sys_sendmmsg+0x178/0x300 [ 320.771110][T14792] __x64_sys_sendmmsg+0x57/0x70 [ 320.771142][T14792] x64_sys_call+0x1c4a/0x2ff0 [ 320.771161][T14792] do_syscall_64+0xd2/0x200 [ 320.771221][T14792] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 320.771242][T14792] ? clear_bhb_loop+0x40/0x90 [ 320.771263][T14792] ? clear_bhb_loop+0x40/0x90 [ 320.771285][T14792] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 320.771301][T14792] RIP: 0033:0x7f7367f5e9a9 [ 320.771319][T14792] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 320.771352][T14792] RSP: 002b:00007f73665bf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 320.771390][T14792] RAX: ffffffffffffffda RBX: 00007f7368185fa0 RCX: 00007f7367f5e9a9 [ 320.771403][T14792] RDX: 0000000000000002 RSI: 0000200000000f40 RDI: 0000000000000006 [ 320.771416][T14792] RBP: 00007f73665bf090 R08: 0000000000000000 R09: 0000000000000000 [ 320.771428][T14792] R10: 000000002400c042 R11: 0000000000000246 R12: 0000000000000001 [ 320.771441][T14792] R13: 0000000000000000 R14: 00007f7368185fa0 R15: 00007ffdb0576e88 [ 320.771457][T14792] [ 321.156876][T14811] netlink: 'syz.5.3878': attribute type 10 has an invalid length. [ 321.277895][T14822] xt_TPROXY: Can be used only with -p tcp or -p udp [ 321.477149][T14844] loop5: detected capacity change from 0 to 2048 [ 321.494219][T14844] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 321.508293][T14844] FAULT_INJECTION: forcing a failure. [ 321.508293][T14844] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 321.521494][T14844] CPU: 1 UID: 0 PID: 14844 Comm: syz.5.3893 Not tainted 6.16.0-syzkaller-01056-gae388edd4a8f #0 PREEMPT(voluntary) [ 321.521566][T14844] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 321.521628][T14844] Call Trace: [ 321.521635][T14844] [ 321.521643][T14844] __dump_stack+0x1d/0x30 [ 321.521666][T14844] dump_stack_lvl+0xe8/0x140 [ 321.521683][T14844] dump_stack+0x15/0x1b [ 321.521696][T14844] should_fail_ex+0x265/0x280 [ 321.521718][T14844] should_fail+0xb/0x20 [ 321.521808][T14844] should_fail_usercopy+0x1a/0x20 [ 321.521908][T14844] strncpy_from_user+0x25/0x230 [ 321.521923][T14844] ? __es_insert_extent+0xc27/0xee0 [ 321.521982][T14844] strncpy_from_user_nofault+0x68/0xf0 [ 321.522008][T14844] bpf_probe_read_compat_str+0xb4/0x130 [ 321.522035][T14844] bpf_prog_597e1462992804d8+0x46/0x4c [ 321.522108][T14844] bpf_trace_run2+0x107/0x1c0 [ 321.522128][T14844] ? ext4_ext_map_blocks+0x2666/0x38a0 [ 321.522154][T14844] ? ext4_ext_map_blocks+0x2666/0x38a0 [ 321.522179][T14844] kfree+0x27b/0x320 [ 321.522236][T14844] ext4_ext_map_blocks+0x2666/0x38a0 [ 321.522268][T14844] ? do_user_addr_fault+0xdaf/0x1090 [ 321.522293][T14844] ? css_rstat_updated+0xcd/0x5b0 [ 321.522363][T14844] ext4_map_query_blocks+0xa8/0x480 [ 321.522390][T14844] ext4_map_blocks+0x3a1/0xd70 [ 321.522452][T14844] ? ext4_get_group_desc+0x16b/0x190 [ 321.522474][T14844] ? __ext4_journal_start_sb+0x131/0x300 [ 321.522523][T14844] ext4_iomap_begin+0x93a/0xe00 [ 321.522550][T14844] ? __pfx_ext4_iomap_begin+0x10/0x10 [ 321.522569][T14844] iomap_iter+0x32f/0x730 [ 321.522593][T14844] ? should_failslab+0x8c/0xb0 [ 321.522689][T14844] __iomap_dio_rw+0x708/0x1250 [ 321.522757][T14844] ? ext4_journal_check_start+0x11a/0x1b0 [ 321.522785][T14844] iomap_dio_rw+0x40/0x90 [ 321.522859][T14844] ext4_file_write_iter+0xad9/0xf00 [ 321.522885][T14844] do_iter_readv_writev+0x41e/0x4c0 [ 321.522904][T14844] vfs_writev+0x2df/0x8b0 [ 321.522993][T14844] __se_sys_pwritev2+0xfc/0x1c0 [ 321.523005][T14844] __x64_sys_pwritev2+0x67/0x80 [ 321.523016][T14844] x64_sys_call+0x2c55/0x2ff0 [ 321.523145][T14844] do_syscall_64+0xd2/0x200 [ 321.523158][T14844] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 321.523173][T14844] ? clear_bhb_loop+0x40/0x90 [ 321.523185][T14844] ? clear_bhb_loop+0x40/0x90 [ 321.523248][T14844] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 321.523260][T14844] RIP: 0033:0x7f0b27fee9a9 [ 321.523269][T14844] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 321.523320][T14844] RSP: 002b:00007f0b26657038 EFLAGS: 00000246 ORIG_RAX: 0000000000000148 [ 321.523363][T14844] RAX: ffffffffffffffda RBX: 00007f0b28215fa0 RCX: 00007f0b27fee9a9 [ 321.523370][T14844] RDX: 0000000000000001 RSI: 0000200000000240 RDI: 0000000000000004 [ 321.523377][T14844] RBP: 00007f0b26657090 R08: 0000000000000000 R09: 0000000000000000 [ 321.523383][T14844] R10: 0000000000003400 R11: 0000000000000246 R12: 0000000000000001 [ 321.523390][T14844] R13: 0000000000000000 R14: 00007f0b28215fa0 R15: 00007fffe3ba81c8 [ 321.523401][T14844] [ 321.842129][ T7744] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 321.860621][T14851] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 321.867184][T14851] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 321.874861][T14851] vhci_hcd vhci_hcd.0: Device attached [ 321.884377][T14855] xt_TPROXY: Can be used only with -p tcp or -p udp [ 321.967694][T14859] loop5: detected capacity change from 0 to 512 [ 321.989716][T14859] EXT4-fs error (device loop5): ext4_acquire_dquot:6933: comm syz.5.3898: Failed to acquire dquot type 1 [ 322.006557][T14859] EXT4-fs (loop5): 1 truncate cleaned up [ 322.013308][T14859] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 322.026141][T14859] ext4 filesystem being mounted at /362/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 322.043017][T14852] vhci_hcd: connection closed [ 322.043255][T11052] vhci_hcd: stop threads [ 322.052385][T11052] vhci_hcd: release socket [ 322.056852][T11052] vhci_hcd: disconnect device [ 322.070886][ T9] vhci_hcd: vhci_device speed not set [ 322.122710][ T7744] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 322.247804][T14880] loop5: detected capacity change from 0 to 512 [ 322.277788][T14880] EXT4-fs error (device loop5): ext4_acquire_dquot:6933: comm syz.5.3906: Failed to acquire dquot type 1 [ 322.289978][T14880] EXT4-fs (loop5): 1 truncate cleaned up [ 322.296021][T14880] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 322.308625][T14880] ext4 filesystem being mounted at /364/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 322.361648][T14887] loop3: detected capacity change from 0 to 8192 [ 322.386350][T14887] syz.3.3908: attempt to access beyond end of device [ 322.386350][T14887] loop3: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 322.399931][T14887] Buffer I/O error on dev loop3, logical block 57847, async page read [ 322.419426][ T7744] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 322.488279][T14895] loop3: detected capacity change from 0 to 512 [ 322.502650][T14895] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.3912: Failed to acquire dquot type 1 [ 322.514838][T14895] EXT4-fs (loop3): 1 truncate cleaned up [ 322.521300][T14895] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 322.533954][T14895] ext4 filesystem being mounted at /128/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 322.575368][T14899] loop5: detected capacity change from 0 to 512 [ 322.674376][T13214] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 322.806450][T14922] program syz.5.3922 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 322.895241][T14926] loop5: detected capacity change from 0 to 512 [ 322.922542][T14926] EXT4-fs error (device loop5): ext4_acquire_dquot:6933: comm syz.5.3924: Failed to acquire dquot type 1 [ 322.936165][T14926] EXT4-fs (loop5): 1 truncate cleaned up [ 322.942555][T14926] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 322.955195][T14926] ext4 filesystem being mounted at /372/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 323.009994][ T7744] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 323.168413][T14959] program syz.0.3937 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 323.178118][T14959] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 323.284478][T14972] loop5: detected capacity change from 0 to 512 [ 323.311918][T14972] EXT4-fs error (device loop5): ext4_acquire_dquot:6933: comm syz.5.3942: Failed to acquire dquot type 1 [ 323.333430][T14972] EXT4-fs (loop5): 1 truncate cleaned up [ 323.340569][T14972] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 323.354244][T14972] ext4 filesystem being mounted at /380/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 323.460373][ T7744] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 323.565295][T15003] smc: net device bond0 applied user defined pnetid SYZ0 [ 323.581005][T15003] smc: net device bond0 erased user defined pnetid SYZ0 [ 323.688307][T15016] 9pnet_fd: Insufficient options for proto=fd [ 323.893846][T15033] netlink: 'syz.4.3968': attribute type 29 has an invalid length. [ 323.921716][T15033] netlink: 'syz.4.3968': attribute type 29 has an invalid length. [ 324.098872][T15041] smc: net device bond0 applied user defined pnetid SYZ0 [ 324.106215][T15041] smc: net device bond0 erased user defined pnetid SYZ0 [ 324.215536][T15050] netlink: 'syz.4.3975': attribute type 10 has an invalid length. [ 324.244246][ T29] kauditd_printk_skb: 508 callbacks suppressed [ 324.244261][ T29] audit: type=1326 audit(1753792851.142:23989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15000 comm="syz.5.3954" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b27fee9a9 code=0x7ffc0000 [ 324.324434][ T29] audit: type=1326 audit(1753792851.172:23990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15000 comm="syz.5.3954" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b27fee9a9 code=0x7ffc0000 [ 324.529203][ T29] audit: type=1326 audit(1753792851.422:23991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15062 comm="syz.4.3980" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f0cb1e9a9 code=0x7ffc0000 [ 324.553009][ T29] audit: type=1326 audit(1753792851.422:23992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15062 comm="syz.4.3980" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f0cb1e9a9 code=0x7ffc0000 [ 324.589869][T15063] __nla_validate_parse: 30 callbacks suppressed [ 324.589881][T15063] netlink: 100 bytes leftover after parsing attributes in process `syz.4.3980'. [ 324.596626][T15061] loop5: detected capacity change from 0 to 8192 [ 324.614559][T15061] syz.5.3979: attempt to access beyond end of device [ 324.614559][T15061] loop5: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 324.628081][T15061] Buffer I/O error on dev loop5, logical block 57847, async page read [ 324.650873][ T29] audit: type=1326 audit(1753792851.482:23993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15062 comm="syz.4.3980" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1f0cb1e9a9 code=0x7ffc0000 [ 324.674609][ T29] audit: type=1326 audit(1753792851.482:23994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15062 comm="syz.4.3980" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f0cb1e9a9 code=0x7ffc0000 [ 324.698345][ T29] audit: type=1326 audit(1753792851.482:23995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15062 comm="syz.4.3980" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f0cb1e9a9 code=0x7ffc0000 [ 324.721977][ T29] audit: type=1326 audit(1753792851.482:23996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15062 comm="syz.4.3980" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1f0cb1e9a9 code=0x7ffc0000 [ 324.745804][ T29] audit: type=1326 audit(1753792851.482:23997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15062 comm="syz.4.3980" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f0cb1e9a9 code=0x7ffc0000 [ 324.769406][ T29] audit: type=1326 audit(1753792851.482:23998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15062 comm="syz.4.3980" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f0cb1e9a9 code=0x7ffc0000 [ 324.851934][T15070] program syz.3.3983 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 324.870946][T15070] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 324.932545][T15076] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3985'. [ 324.998025][T15080] netlink: 'syz.0.3986': attribute type 10 has an invalid length. [ 325.048922][T15069] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 325.056588][T15069] vhci_hcd: invalid port number 253 [ 325.061912][T15069] vhci_hcd: invalid port number 253 [ 325.120474][T15096] 9pnet_fd: Insufficient options for proto=fd [ 325.212518][T15098] program syz.4.3995 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 325.259996][T15098] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 325.299182][T15100] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3996'. [ 325.327524][T15100] netlink: 100 bytes leftover after parsing attributes in process `syz.4.3996'. [ 325.350931][T15089] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 325.358795][T15089] vhci_hcd: invalid port number 253 [ 325.364076][T15089] vhci_hcd: invalid port number 253 [ 325.376648][T15103] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3997'. [ 325.406383][T15103] netlink: 100 bytes leftover after parsing attributes in process `syz.5.3997'. [ 325.450855][T15106] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3998'. [ 325.657041][T15119] netlink: 'syz.4.4002': attribute type 10 has an invalid length. [ 325.785021][T15122] loop3: detected capacity change from 0 to 512 [ 325.801244][T15132] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4005'. [ 325.836709][T15135] program syz.2.4006 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 325.861715][T15135] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 325.999502][T15143] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4009'. [ 326.008938][T15144] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4010'. [ 326.054091][T15139] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 326.094700][T15139] vhci_hcd: invalid port number 253 [ 326.100023][T15139] vhci_hcd: invalid port number 253 [ 326.153225][T15152] xt_TPROXY: Can be used only with -p tcp or -p udp [ 326.299850][T15167] smc: net device bond0 applied user defined pnetid SYZ0 [ 326.309436][T15167] smc: net device bond0 erased user defined pnetid SYZ0 [ 326.335214][T15123] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 326.350554][T15123] vhci_hcd: invalid port number 253 [ 326.355855][T15123] vhci_hcd: invalid port number 253 [ 326.390615][T15171] program syz.0.4021 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 326.420475][T15171] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 326.473207][T15184] 9pnet_fd: Insufficient options for proto=fd [ 326.500902][T15186] loop3: detected capacity change from 0 to 512 [ 326.532808][T15188] netlink: 'syz.0.4028': attribute type 10 has an invalid length. [ 326.573474][T15191] xt_TPROXY: Can be used only with -p tcp or -p udp [ 326.576982][T15186] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.4027: Failed to acquire dquot type 1 [ 326.603634][T15186] EXT4-fs (loop3): 1 truncate cleaned up [ 326.611146][T15186] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 326.631889][T15186] ext4 filesystem being mounted at /144/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 326.827019][T13214] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 326.879277][T15216] smc: net device bond0 applied user defined pnetid SYZ0 [ 326.913476][T15216] smc: net device bond0 erased user defined pnetid SYZ0 [ 326.932407][T15223] program syz.4.4038 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 326.943553][T15223] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 326.986092][T15227] netlink: 'syz.0.4039': attribute type 10 has an invalid length. [ 327.034492][T15229] loop3: detected capacity change from 0 to 512 [ 327.085132][T15229] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.4042: Failed to acquire dquot type 1 [ 327.132235][T15229] EXT4-fs (loop3): 1 truncate cleaned up [ 327.138295][T15229] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 327.151001][T15229] ext4 filesystem being mounted at /146/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 327.197181][T15236] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 327.204653][T15236] vhci_hcd: invalid port number 253 [ 327.209916][T15236] vhci_hcd: invalid port number 253 [ 327.397939][T13214] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 327.433523][T15259] netlink: 'syz.0.4053': attribute type 10 has an invalid length. [ 327.467951][T15261] smc: net device bond0 applied user defined pnetid SYZ0 [ 327.478006][T15263] loop3: detected capacity change from 0 to 512 [ 327.494841][T15261] smc: net device bond0 erased user defined pnetid SYZ0 [ 327.505912][T15263] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.4051: Failed to acquire dquot type 1 [ 327.541962][T15263] EXT4-fs (loop3): 1 truncate cleaned up [ 327.548136][T15263] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 327.574916][T15269] smc: net device bond0 applied user defined pnetid SYZ0 [ 327.591676][T15263] ext4 filesystem being mounted at /147/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 327.603257][T15269] smc: net device bond0 erased user defined pnetid SYZ0 [ 327.610326][T15271] smc: net device bond0 applied user defined pnetid SYZ0 [ 327.634163][T15271] smc: net device bond0 erased user defined pnetid SYZ0 [ 327.711422][T13214] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 327.833963][T15299] FAULT_INJECTION: forcing a failure. [ 327.833963][T15299] name failslab, interval 1, probability 0, space 0, times 0 [ 327.846725][T15299] CPU: 0 UID: 0 PID: 15299 Comm: syz.2.4066 Not tainted 6.16.0-syzkaller-01056-gae388edd4a8f #0 PREEMPT(voluntary) [ 327.846755][T15299] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 327.846767][T15299] Call Trace: [ 327.846774][T15299] [ 327.846782][T15299] __dump_stack+0x1d/0x30 [ 327.846804][T15299] dump_stack_lvl+0xe8/0x140 [ 327.846897][T15299] dump_stack+0x15/0x1b [ 327.846915][T15299] should_fail_ex+0x265/0x280 [ 327.846940][T15299] should_failslab+0x8c/0xb0 [ 327.846963][T15299] kmem_cache_alloc_lru_noprof+0x55/0x310 [ 327.847037][T15299] ? __d_alloc+0x3d/0x340 [ 327.847061][T15299] __d_alloc+0x3d/0x340 [ 327.847083][T15299] d_alloc_parallel+0x53/0xc60 [ 327.847145][T15299] ? __d_lookup+0x316/0x340 [ 327.847170][T15299] ? lookup_noperm_common+0x1be/0x2a0 [ 327.847241][T15299] ? d_lookup+0xb2/0xd0 [ 327.847265][T15299] proc_fill_cache+0x158/0x240 [ 327.847293][T15299] ? __pfx_proc_map_files_instantiate+0x10/0x10 [ 327.847386][T15299] proc_map_files_readdir+0x500/0x680 [ 327.847425][T15299] iterate_dir+0x111/0x330 [ 327.847464][T15299] ? mutex_lock+0xd/0x30 [ 327.847495][T15299] __se_sys_getdents64+0x88/0x1b0 [ 327.847575][T15299] ? __pfx_filldir64+0x10/0x10 [ 327.847606][T15299] __x64_sys_getdents64+0x43/0x50 [ 327.847642][T15299] x64_sys_call+0x2d9f/0x2ff0 [ 327.847695][T15299] do_syscall_64+0xd2/0x200 [ 327.847718][T15299] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 327.847744][T15299] ? clear_bhb_loop+0x40/0x90 [ 327.847765][T15299] ? clear_bhb_loop+0x40/0x90 [ 327.847793][T15299] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 327.847841][T15299] RIP: 0033:0x7fc22b83e9a9 [ 327.847861][T15299] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 327.847897][T15299] RSP: 002b:00007fc229ea7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9 [ 327.847917][T15299] RAX: ffffffffffffffda RBX: 00007fc22ba65fa0 RCX: 00007fc22b83e9a9 [ 327.847932][T15299] RDX: 0000000000000ff6 RSI: 0000200000001fc0 RDI: 0000000000000007 [ 327.847946][T15299] RBP: 00007fc229ea7090 R08: 0000000000000000 R09: 0000000000000000 [ 327.847958][T15299] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 327.847971][T15299] R13: 0000000000000000 R14: 00007fc22ba65fa0 R15: 00007ffe98efaa18 [ 327.847990][T15299] [ 327.865386][T15303] loop5: detected capacity change from 0 to 8192 [ 328.098930][T15303] syz.5.4068: attempt to access beyond end of device [ 328.098930][T15303] loop5: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 328.099401][T15297] syzkaller1: entered promiscuous mode [ 328.112461][T15303] Buffer I/O error on dev loop5, logical block 57847, async page read [ 328.126212][T15297] syzkaller1: entered allmulticast mode [ 328.128974][T15303] syz.5.4068: attempt to access beyond end of device [ 328.128974][T15303] loop5: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 328.145280][T15303] Buffer I/O error on dev loop5, logical block 57847, async page read [ 328.189399][T15312] loop9: detected capacity change from 0 to 7 [ 328.205340][T10940] Buffer I/O error on dev loop9, logical block 0, async page read [ 328.213555][T10940] Buffer I/O error on dev loop9, logical block 0, async page read [ 328.221487][T10940] loop9: unable to read partition table [ 328.228716][T15312] Buffer I/O error on dev loop9, logical block 0, async page read [ 328.237027][T15312] Buffer I/O error on dev loop9, logical block 0, async page read [ 328.244886][T15312] loop9: unable to read partition table [ 328.259187][T15312] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 328.259187][T15312] ) failed (rc=-5) [ 328.272910][T10940] Buffer I/O error on dev loop9, logical block 0, async page read [ 328.285141][T10940] Buffer I/O error on dev loop9, logical block 0, async page read [ 328.293328][T15322] 9pnet_fd: Insufficient options for proto=fd [ 328.298151][T10940] Buffer I/O error on dev loop9, logical block 0, async page read [ 328.312280][T10940] Buffer I/O error on dev loop9, logical block 0, async page read [ 328.339309][ T2989] udevd[2989]: worker [10940] terminated by signal 33 (Unknown signal 33) [ 328.481953][T15345] loop3: detected capacity change from 0 to 512 [ 328.514863][T15345] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.4081: Failed to acquire dquot type 1 [ 328.577569][T15345] EXT4-fs (loop3): 1 truncate cleaned up [ 328.583900][T15345] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 328.597846][T15345] ext4 filesystem being mounted at /153/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 328.807080][T15361] xt_TPROXY: Can be used only with -p tcp or -p udp [ 328.847129][T13214] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 328.944590][T15368] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 328.952074][T15368] vhci_hcd: invalid port number 253 [ 328.957468][T15368] vhci_hcd: invalid port number 253 [ 329.129303][T15387] loop3: detected capacity change from 0 to 764 [ 329.299484][T15402] loop3: detected capacity change from 0 to 512 [ 329.383746][T15402] __quota_error: 493 callbacks suppressed [ 329.383762][T15402] Quota error (device loop3): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 329.399570][T15402] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 329.409567][T15402] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.4099: Failed to acquire dquot type 1 [ 329.422791][T15402] EXT4-fs (loop3): 1 truncate cleaned up [ 329.429140][T15402] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 329.442836][T15402] ext4 filesystem being mounted at /159/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 329.451250][ T29] audit: type=1326 audit(1753792856.352:24484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15349 comm="syz.0.4083" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1605ee9a9 code=0x7ffc0000 [ 329.533899][ T29] audit: type=1326 audit(1753792856.352:24485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15349 comm="syz.0.4083" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1605ee9a9 code=0x7ffc0000 [ 329.575229][ T29] audit: type=1326 audit(1753792856.472:24486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15409 comm="syz.5.4102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b27fee9a9 code=0x7ffc0000 [ 329.621525][T13214] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 329.641344][ T29] audit: type=1326 audit(1753792856.472:24487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15409 comm="syz.5.4102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f0b27fee9a9 code=0x7ffc0000 [ 329.665034][ T29] audit: type=1326 audit(1753792856.472:24488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15409 comm="syz.5.4102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b27fee9a9 code=0x7ffc0000 [ 329.688691][ T29] audit: type=1326 audit(1753792856.472:24489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15409 comm="syz.5.4102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=288 compat=0 ip=0x7f0b27fee9a9 code=0x7ffc0000 [ 329.712346][ T29] audit: type=1326 audit(1753792856.472:24490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15409 comm="syz.5.4102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b27fee9a9 code=0x7ffc0000 [ 329.736156][ T29] audit: type=1326 audit(1753792856.472:24491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15409 comm="syz.5.4102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0b27fee9a9 code=0x7ffc0000 [ 329.877351][T15429] __nla_validate_parse: 32 callbacks suppressed [ 329.877365][T15429] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4108'. [ 329.977072][T15439] 9pnet_fd: Insufficient options for proto=fd [ 329.989596][T15443] loop9: detected capacity change from 0 to 7 [ 330.020990][T15443] loop9: unable to read partition table [ 330.030829][T15443] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 330.030829][T15443] ) failed (rc=-5) [ 330.058787][T15432] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 330.085508][T15432] vhci_hcd: invalid port number 253 [ 330.090781][T15432] vhci_hcd: invalid port number 253 [ 330.099679][T15449] xt_TPROXY: Can be used only with -p tcp or -p udp [ 330.114388][T15449] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4114'. [ 330.229361][T15456] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4118'. [ 330.250276][T15462] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4119'. [ 330.269777][T15456] netlink: 100 bytes leftover after parsing attributes in process `syz.2.4118'. [ 330.295546][T15462] netlink: 100 bytes leftover after parsing attributes in process `syz.0.4119'. [ 330.340853][T15466] SELinux: syz.0.4122 (15466) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 330.369801][T15469] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4123'. [ 330.536472][T15478] netlink: 100 bytes leftover after parsing attributes in process `syz.4.4126'. [ 330.539402][T15480] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4127'. [ 330.614001][T15485] xt_TPROXY: Can be used only with -p tcp or -p udp [ 330.628842][T15485] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4130'. [ 330.677290][T15488] loop5: detected capacity change from 0 to 512 [ 330.713756][T15488] EXT4-fs error (device loop5): ext4_acquire_dquot:6933: comm syz.5.4131: Failed to acquire dquot type 1 [ 330.727815][T15488] EXT4-fs (loop5): 1 truncate cleaned up [ 330.786714][T15488] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 330.874405][T15488] ext4 filesystem being mounted at /397/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 330.979421][ T7744] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 331.028419][T15513] loop5: detected capacity change from 0 to 2048 [ 331.065068][T15513] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 331.077662][T15511] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 331.091018][T15515] loop3: detected capacity change from 0 to 8192 [ 331.097974][T15511] vhci_hcd: invalid port number 253 [ 331.100041][T15515] syz.3.4143: attempt to access beyond end of device [ 331.100041][T15515] loop3: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 331.103228][T15511] vhci_hcd: invalid port number 253 [ 331.125171][T15524] loop9: detected capacity change from 0 to 7 [ 331.131589][T15524] loop9: unable to read partition table [ 331.137339][T15524] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 331.137339][T15524] ) failed (rc=-5) [ 331.243727][T15525] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 331.248288][T15531] netlink: 'syz.4.4148': attribute type 10 has an invalid length. [ 331.259280][T15525] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 331.278912][T15525] EXT4-fs (loop5): This should not happen!! Data will be lost [ 331.278912][T15525] [ 331.288621][T15525] EXT4-fs (loop5): Total free blocks count 0 [ 331.294699][T15525] EXT4-fs (loop5): Free/Dirty block details [ 331.300638][T15525] EXT4-fs (loop5): free_blocks=2415919104 [ 331.306432][T15525] EXT4-fs (loop5): dirty_blocks=2384 [ 331.311962][T15525] EXT4-fs (loop5): Block reservation details [ 331.317971][T15525] EXT4-fs (loop5): i_reserved_data_blocks=149 [ 331.420307][T11107] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 6 with max blocks 2 with error 28 [ 331.483800][T15550] 9pnet_fd: Insufficient options for proto=fd [ 331.665672][T15557] loop3: detected capacity change from 0 to 8192 [ 331.675500][T15557] syz.3.4157: attempt to access beyond end of device [ 331.675500][T15557] loop3: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 331.707211][T15562] netlink: 'syz.2.4160': attribute type 10 has an invalid length. [ 332.801218][T15656] FAULT_INJECTION: forcing a failure. [ 332.801218][T15656] name failslab, interval 1, probability 0, space 0, times 0 [ 332.813913][T15656] CPU: 0 UID: 0 PID: 15656 Comm: syz.5.4203 Not tainted 6.16.0-syzkaller-01056-gae388edd4a8f #0 PREEMPT(voluntary) [ 332.813941][T15656] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 332.813952][T15656] Call Trace: [ 332.813959][T15656] [ 332.813966][T15656] __dump_stack+0x1d/0x30 [ 332.813986][T15656] dump_stack_lvl+0xe8/0x140 [ 332.814078][T15656] dump_stack+0x15/0x1b [ 332.814095][T15656] should_fail_ex+0x265/0x280 [ 332.814117][T15656] should_failslab+0x8c/0xb0 [ 332.814134][T15656] __kmalloc_node_track_caller_noprof+0xa4/0x410 [ 332.814158][T15656] ? __request_module+0x1c4/0x3e0 [ 332.814179][T15656] ? __request_module+0x1df/0x3e0 [ 332.814199][T15656] ? should_failslab+0x8c/0xb0 [ 332.814220][T15656] kstrdup+0x3e/0xd0 [ 332.814323][T15656] __request_module+0x1df/0x3e0 [ 332.814344][T15656] ? capable+0x7c/0xb0 [ 332.814363][T15656] ? security_capable+0x83/0x90 [ 332.814408][T15656] dev_load+0x61/0xc0 [ 332.814426][T15656] dev_ioctl+0x777/0x960 [ 332.814447][T15656] sock_ioctl+0x593/0x610 [ 332.814501][T15656] ? __pfx_sock_ioctl+0x10/0x10 [ 332.814522][T15656] __se_sys_ioctl+0xcb/0x140 [ 332.814609][T15656] __x64_sys_ioctl+0x43/0x50 [ 332.814701][T15656] x64_sys_call+0x1816/0x2ff0 [ 332.814722][T15656] do_syscall_64+0xd2/0x200 [ 332.814744][T15656] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 332.814843][T15656] ? clear_bhb_loop+0x40/0x90 [ 332.814864][T15656] ? clear_bhb_loop+0x40/0x90 [ 332.814955][T15656] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 332.814975][T15656] RIP: 0033:0x7f0b27fee9a9 [ 332.815035][T15656] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 332.815053][T15656] RSP: 002b:00007f0b26657038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 332.815072][T15656] RAX: ffffffffffffffda RBX: 00007f0b28215fa0 RCX: 00007f0b27fee9a9 [ 332.815084][T15656] RDX: 00002000000003c0 RSI: 00000000000089f2 RDI: 0000000000000003 [ 332.815097][T15656] RBP: 00007f0b26657090 R08: 0000000000000000 R09: 0000000000000000 [ 332.815108][T15656] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 332.815154][T15656] R13: 0000000000000000 R14: 00007f0b28215fa0 R15: 00007fffe3ba81c8 [ 332.815168][T15656] [ 333.056221][T15663] loop5: detected capacity change from 0 to 512 [ 333.063231][T15663] EXT4-fs: Ignoring removed mblk_io_submit option [ 333.083166][T15663] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 333.100968][T15663] EXT4-fs warning (device loop5): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 333.115273][T15663] EXT4-fs (loop5): 1 truncate cleaned up [ 333.123116][T15663] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 333.172410][ T7744] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 333.408878][T15690] 9pnet_fd: Insufficient options for proto=fd [ 334.048348][T15718] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 334.061922][T15718] vhci_hcd: invalid port number 253 [ 334.067255][T15718] vhci_hcd: invalid port number 253 [ 334.088216][T15725] 9pnet_fd: Insufficient options for proto=fd [ 334.559477][ T29] kauditd_printk_skb: 479 callbacks suppressed [ 334.559491][ T29] audit: type=1326 audit(1753792861.452:24967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15730 comm="syz.5.4231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b27fee9a9 code=0x7ffc0000 [ 334.612388][ T29] audit: type=1326 audit(1753792861.492:24968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15730 comm="syz.5.4231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0b27fee9a9 code=0x7ffc0000 [ 334.636108][ T29] audit: type=1326 audit(1753792861.492:24969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15730 comm="syz.5.4231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b27fee9a9 code=0x7ffc0000 [ 334.659780][ T29] audit: type=1326 audit(1753792861.492:24970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15730 comm="syz.5.4231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b27fee9a9 code=0x7ffc0000 [ 334.683543][ T29] audit: type=1326 audit(1753792861.492:24971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15730 comm="syz.5.4231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0b27fee9a9 code=0x7ffc0000 [ 334.707214][ T29] audit: type=1326 audit(1753792861.492:24972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15730 comm="syz.5.4231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b27fee9a9 code=0x7ffc0000 [ 334.730883][ T29] audit: type=1326 audit(1753792861.492:24973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15730 comm="syz.5.4231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0b27fee9a9 code=0x7ffc0000 [ 334.754675][ T29] audit: type=1326 audit(1753792861.492:24974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15730 comm="syz.5.4231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b27fee9a9 code=0x7ffc0000 [ 334.778339][ T29] audit: type=1326 audit(1753792861.492:24975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15730 comm="syz.5.4231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f0b27fee9a9 code=0x7ffc0000 [ 334.802169][ T29] audit: type=1326 audit(1753792861.492:24976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15730 comm="syz.5.4231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b27fee9a9 code=0x7ffc0000 [ 334.868108][T15738] xt_TPROXY: Can be used only with -p tcp or -p udp [ 334.883306][T15738] __nla_validate_parse: 32 callbacks suppressed [ 334.883323][T15738] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4234'. [ 334.904821][T15740] netlink: 100 bytes leftover after parsing attributes in process `syz.4.4235'. [ 334.977771][T15736] loop5: detected capacity change from 0 to 8192 [ 335.023026][T15750] netlink: 'syz.3.4240': attribute type 10 has an invalid length. [ 335.037799][T15752] loop5: detected capacity change from 0 to 512 [ 335.068296][T15754] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4241'. [ 335.079991][T15752] EXT4-fs error (device loop5): ext4_acquire_dquot:6933: comm syz.5.4239: Failed to acquire dquot type 1 [ 335.092692][T15752] EXT4-fs (loop5): 1 truncate cleaned up [ 335.098789][T15752] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 335.112727][T15752] ext4 filesystem being mounted at /418/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 335.186690][T15752] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4239'. [ 335.220402][ T7744] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 335.323732][T15771] xt_TPROXY: Can be used only with -p tcp or -p udp [ 335.345432][T15771] netlink: 60 bytes leftover after parsing attributes in process `syz.5.4247'. [ 335.437973][T15759] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 335.445457][T15759] vhci_hcd: invalid port number 253 [ 335.450662][T15759] vhci_hcd: invalid port number 253 [ 335.524083][T15786] 9pnet_fd: Insufficient options for proto=fd [ 335.611990][T15761] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 335.636920][T15761] vhci_hcd: invalid port number 253 [ 335.642207][T15761] vhci_hcd: invalid port number 253 [ 335.799652][T15797] loop9: detected capacity change from 0 to 7 [ 335.821036][T15797] buffer_io_error: 7 callbacks suppressed [ 335.821051][T15797] Buffer I/O error on dev loop9, logical block 0, async page read [ 335.858368][T15797] Buffer I/O error on dev loop9, logical block 0, async page read [ 335.866383][T15797] loop9: unable to read partition table [ 335.876656][T15797] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 335.876656][T15797] ) failed (rc=-5) [ 335.993266][T15809] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 336.015961][T15809] vhci_hcd: invalid port number 253 [ 336.021249][T15809] vhci_hcd: invalid port number 253 [ 336.034574][T15788] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 336.051743][T15788] vhci_hcd: invalid port number 253 [ 336.057060][T15788] vhci_hcd: invalid port number 253 [ 336.139061][T15812] netlink: 'syz.4.4261': attribute type 10 has an invalid length. [ 336.179284][T15814] SELinux: syz.4.4262 (15814) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 336.371228][T15821] xt_TPROXY: Can be used only with -p tcp or -p udp [ 336.412040][T15821] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4264'. [ 336.666983][T15840] netlink: 'syz.5.4273': attribute type 10 has an invalid length. [ 336.756523][T15849] 9pnet_fd: Insufficient options for proto=fd [ 336.777466][T15851] FAULT_INJECTION: forcing a failure. [ 336.777466][T15851] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 336.790598][T15851] CPU: 1 UID: 0 PID: 15851 Comm: syz.0.4277 Not tainted 6.16.0-syzkaller-01056-gae388edd4a8f #0 PREEMPT(voluntary) [ 336.790669][T15851] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 336.790680][T15851] Call Trace: [ 336.790687][T15851] [ 336.790699][T15851] __dump_stack+0x1d/0x30 [ 336.790720][T15851] dump_stack_lvl+0xe8/0x140 [ 336.790736][T15851] dump_stack+0x15/0x1b [ 336.790750][T15851] should_fail_ex+0x265/0x280 [ 336.790844][T15851] should_fail+0xb/0x20 [ 336.790890][T15851] should_fail_usercopy+0x1a/0x20 [ 336.790911][T15851] _copy_from_iter+0xcf/0xe40 [ 336.790942][T15851] ? __build_skb_around+0x1a0/0x200 [ 336.790959][T15851] ? __alloc_skb+0x223/0x320 [ 336.790977][T15851] netlink_sendmsg+0x471/0x6b0 [ 336.791026][T15851] ? __pfx_netlink_sendmsg+0x10/0x10 [ 336.791047][T15851] __sock_sendmsg+0x142/0x180 [ 336.791073][T15851] ____sys_sendmsg+0x31e/0x4e0 [ 336.791094][T15851] ___sys_sendmsg+0x17b/0x1d0 [ 336.791141][T15851] __x64_sys_sendmsg+0xd4/0x160 [ 336.791164][T15851] x64_sys_call+0x191e/0x2ff0 [ 336.791184][T15851] do_syscall_64+0xd2/0x200 [ 336.791206][T15851] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 336.791250][T15851] ? clear_bhb_loop+0x40/0x90 [ 336.791269][T15851] ? clear_bhb_loop+0x40/0x90 [ 336.791350][T15851] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 336.791367][T15851] RIP: 0033:0x7fd1605ee9a9 [ 336.791426][T15851] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 336.791442][T15851] RSP: 002b:00007fd15ec57038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 336.791458][T15851] RAX: ffffffffffffffda RBX: 00007fd160815fa0 RCX: 00007fd1605ee9a9 [ 336.791469][T15851] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000003 [ 336.791480][T15851] RBP: 00007fd15ec57090 R08: 0000000000000000 R09: 0000000000000000 [ 336.791535][T15851] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 336.791570][T15851] R13: 0000000000000000 R14: 00007fd160815fa0 R15: 00007fff49122038 [ 336.791586][T15851] [ 337.106211][T15866] ================================================================== [ 337.114326][T15866] BUG: KCSAN: data-race in dequeue_signal / ptrace_check_attach [ 337.121958][T15866] [ 337.124268][T15866] read-write to 0xffff888103fca5b8 of 8 bytes by task 15868 on cpu 1: [ 337.132417][T15866] dequeue_signal+0x309/0x3b0 [ 337.137108][T15866] get_signal+0x377/0xf70 [ 337.141440][T15866] arch_do_signal_or_restart+0x96/0x480 [ 337.147004][T15866] exit_to_user_mode_loop+0x7a/0x100 [ 337.152302][T15866] do_syscall_64+0x1d6/0x200 [ 337.156907][T15866] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 337.162903][T15866] [ 337.165226][T15866] read to 0xffff888103fca5b8 of 8 bytes by task 15866 on cpu 0: [ 337.172842][T15866] ptrace_check_attach+0xaa/0x290 [ 337.177897][T15866] __se_sys_ptrace+0xd3/0x2b0 [ 337.182588][T15866] __x64_sys_ptrace+0x55/0x70 [ 337.187347][T15866] x64_sys_call+0x286c/0x2ff0 [ 337.192176][T15866] do_syscall_64+0xd2/0x200 [ 337.196785][T15866] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 337.202687][T15866] [ 337.205095][T15866] value changed: 0x0000000000000000 -> 0x0000000008010000 [ 337.212197][T15866] [ 337.214509][T15866] Reported by Kernel Concurrency Sanitizer on: [ 337.220660][T15866] CPU: 0 UID: 0 PID: 15866 Comm: syz.5.4285 Not tainted 6.16.0-syzkaller-01056-gae388edd4a8f #0 PREEMPT(voluntary) [ 337.232827][T15866] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 337.242896][T15866] ================================================================== [ 337.265303][T15827] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 337.272767][T15827] vhci_hcd: invalid port number 253 [ 337.277991][T15827] vhci_hcd: invalid port number 253