last executing test programs: 3.383394566s ago: executing program 2 (id=16608): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x3, 0x2, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x7}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0xfffffffb, 0xb, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="6000000002060103000000000000000000000004050001000700000013000300686173683a6e65742c696661636500000900020073797a30000000000500040000000000050005000a00000014000780050015000000000008001240"], 0x60}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) getsockname$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010000507000000000000000016000000", @ANYRES32=r4, @ANYBLOB="0000000200000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r6) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@delchain={0x40, 0x2c, 0xf31, 0x600, 0x25dfcbfb, {0x0, 0x0, 0x0, r7, {}, {0xfff2, 0xffff}, {0xffff, 0x1}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_FLAGS={0x8, 0x3, 0x2}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4008844}, 0x4010) 3.164583508s ago: executing program 4 (id=16609): fgetxattr(0xffffffffffffffff, &(0x7f00000003c0)=@known='security.selinux\x00', 0x0, 0x0) 3.093368205s ago: executing program 4 (id=16610): mkdir(0x0, 0x820009408200a5fe) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x50, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x50}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000002030000000900020073797a310000000005000100070000004c0007801800018014000240fe800000"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) 2.94570152s ago: executing program 1 (id=16614): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x3, 0x2, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x7}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0xfffffffb, 0xb, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010000507000000000000000016000000", @ANYRES32=r2, @ANYBLOB="0000000200000000280012000c000100766574"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@delchain={0x40, 0x2c, 0xf31, 0x600, 0x25dfcbfb, {0x0, 0x0, 0x0, r5, {}, {0xfff2, 0xffff}, {0xffff, 0x1}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_FLAGS={0x8, 0x3, 0x2}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4008844}, 0x4010) 2.778103376s ago: executing program 1 (id=16617): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000580)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r2 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x170, 0xffffffff, 0xffffffff, 0x170, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000500)={0xa, 0x2, 0x0, @empty}, 0x1c) listen(r3, 0x7ff) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r4}, 0x18) lsetxattr$security_evm(&(0x7f0000000200)='./file1\x00', &(0x7f0000000280), 0x0, 0x0, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=@newtfilter={0x24, 0x11, 0x1, 0x691522eb, 0x0, {0x0, 0x0, 0x74, 0x0, {0x10, 0x4}, {0xfff3}, {0x4}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) 2.626435551s ago: executing program 1 (id=16619): setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, 0xffffffffffffffff, 0x0) syz_usb_connect(0x3, 0x1c, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000001, 0x31, 0xffffffffffffffff, 0xffffd000) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x1, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) mbind(&(0x7f00004c9000/0x3000)=nil, 0x3000, 0x8000, 0x0, 0x20, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bf"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000005700)={0x18, 0xc, &(0x7f00000000c0)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c3000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x76, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffc000) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) getpid() madvise(&(0x7f0000a5e000/0x1000)=nil, 0x1000, 0x17) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = syz_io_uring_setup(0x63f2, &(0x7f0000000240)={0x0, 0x86e1, 0x1, 0x2}, &(0x7f0000010080), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000140)=[{0x0}, {0x0}], 0x2) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000340), 0xa002a0}], &(0x7f00000005c0), 0x2}, 0x20) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x48, &(0x7f00000000c0), 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='rpc_call_rpcerror\x00', r1}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095", @ANYRESOCT=0x0], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000880)={[{@block_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@test_dummy_encryption_v1}, {@dax_always}, {@noauto_da_alloc}, {@norecovery}], [{@func={'func', 0x3d, 'PATH_CHECK'}}, {@obj_user={'obj_user', 0x3d, '::[@\xe0+\"[T\xa5\xc15\xe3\vY\xbb\xfd\x9f\xa3\x83\x9e\x85\xc0\v\x86J\x86\x1b\x7f\xba\xa5y\t\xfbG*v\x1b\x85\x19\x03\x10Vw<9i\x90\x05P\x96\"j&C\xb6\xd0\xbb\b\x82\xce\x147~\x98&=f\xb2'}}, {@fsmagic={'fsmagic', 0x3d, 0x4}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'bsddf'}}, {@fowner_gt}, {@fsname={'fsname', 0x3d, 'uid'}}, {@uid_eq}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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") 1.804133822s ago: executing program 2 (id=16624): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB], 0x48) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) r1 = memfd_create(&(0x7f0000000bc0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\t\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010000507000000000000000016000000", @ANYRES32=r2, @ANYBLOB="0000000200000000280012000c000100766574"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@delchain={0x40, 0x2c, 0xf31, 0x600, 0x25dfcbfb, {0x0, 0x0, 0x0, r5, {}, {0xfff2, 0xffff}, {0xffff, 0x1}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_FLAGS={0x8, 0x3, 0x2}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4008844}, 0x4010) 1.653764987s ago: executing program 2 (id=16628): pipe2(&(0x7f0000001cc0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', 0x0, 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',access=', @ANYRES32, @ANYBLOB=',\x00']) 1.6201926s ago: executing program 3 (id=16629): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000580)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r2 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x170, 0xffffffff, 0xffffffff, 0x170, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000500)={0xa, 0x2, 0x0, @empty}, 0x1c) listen(r3, 0x7ff) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r4}, 0x18) lsetxattr$security_evm(&(0x7f0000000200)='./file1\x00', &(0x7f0000000280), 0x0, 0x0, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=@newtfilter={0x24, 0x11, 0x1, 0x691522eb, 0x0, {0x0, 0x0, 0x74, 0x0, {0x10, 0x4}, {0xfff3}, {0x4}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) 1.615178881s ago: executing program 2 (id=16630): unshare(0x68040200) r0 = socket$nl_rdma(0x10, 0x3, 0x14) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="01000000040000000400000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = syz_io_uring_setup(0x4175, &(0x7f0000000180)={0x0, 0x136f, 0x10000, 0x2, 0x2d0}, &(0x7f0000000440), &(0x7f0000000400)) io_uring_enter(r2, 0x7b20, 0xe93c, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r2, 0x13, &(0x7f0000000000)=[0x2, 0x9a800000], 0x2) r3 = memfd_secret(0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0600000004000000fd0f0000"], 0x50) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) pipe2(&(0x7f0000000300), 0x84800) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x10001, 0x0}, 0x8) sendmsg$nl_route_sched_retired(r3, 0x0, 0x4040) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='net/igmp6\x00') preadv(r5, &(0x7f0000000000), 0x0, 0x3ab3, 0x3) openat(r2, 0x0, 0x10201, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r6}, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000191c0)=ANY=[@ANYBLOB="010000000b000000050010000200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=r8, @ANYRES32, @ANYBLOB="0000000002"], 0x48) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) sendmsg$RDMA_NLDEV_CMD_DELLINK(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="18000000041401002dbd7000fedbdf250800010000000000ba30b28e994c1a08d1ca4eb6b8b4889cdd4e786eb807e04eb88b935d785f3d3201c58033c88e160d2745a91b08363bcc34006d0009788455ec9ad10b24"], 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000040)=0x14) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0x1, 0x803, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="3c0000001000030425bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=r12, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x20000804}, 0x8000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)=@ipv4_getnexthop={0x44, 0x6a, 0x1, 0x70bd28, 0x25dfdbff, {}, [@NHA_FDB={0x4}, @NHA_GROUPS={0x4}, @NHA_MASTER={0x8, 0xa, 0x2}, @NHA_OIF={0x8, 0x5, r9}, @NHA_FDB={0x4}, @NHA_OIF={0x8, 0x5, r12}, @NHA_MASTER={0x8, 0xa, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x20040844}, 0x44044) 1.534906409s ago: executing program 3 (id=16631): bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0x1f, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x10000000, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000300)='kfree\x00', 0xffffffffffffffff, 0x0, 0x8}, 0x18) r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) write$selinux_attr(r0, &(0x7f0000000080)='system_u:object_r:ping_exec_t:s0\x00', 0x21) 1.451585267s ago: executing program 3 (id=16632): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000fa540000850000008200000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x18) socket(0xa, 0x3, 0x3a) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYRES16], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r3}, 0x10) symlink(&(0x7f00000003c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000cc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x7ff, 0x510, 0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0x10000, 0x0, 0x1, 0xa, 0x20008, 0xb, 0x0, 0x0, 0x0, 0x7fffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000600)='./file0\x00', 0xc8d0, &(0x7f0000000140)=ANY=[@ANYRES8=0x0], 0x1, 0x30e, &(0x7f0000000f00)="$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") lstat(&(0x7f0000000280)='./file2\x00', &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$ext4(&(0x7f0000000040)='ext3\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000fc0)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@block_validity}, {@data_err_ignore}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4}}, {@nodelalloc}, {@grpquota}, {@mblk_io_submit}, {@nodiscard}, {@bh}, {@dioread_nolock}], [{@subj_type={'subj_type', 0x3d, 'data_err=abort'}}, {@fsname={'fsname', 0x3d, '/@'}}, {@measure}, {@uid_gt={'uid>', r4}}, {@dont_appraise}]}, 0x1, 0x553, &(0x7f0000000a40)="$eJzs3d9rW1UcAPDvTdv91nUwhopIYQ9O5tK19ccEH+aj6HCg7zO0d2U0WUaTjrUO3B7ciy8yBBEH4ru++zj8B/wrBjoYMoo++BK56U2XrUmbddnSmc8Hbjkn9ybnfnPv9/TcnBsSwNCayP4UIl6OiG+SiIMRkeTrRiNfObG23er9q7PZkkSj8elfSXO7rN56rdbz9ueVlyLit68ijhc2tltbXlkolcvpYl6frFcuTdaWV05cqJTm0/n04vTMzKm3Z6bfe/edvsX6xtl/vv/k9oenvj66+t0vdw/dTOJ0HMjXtcfxBK61VyZiIn9PxuL0IxtO9aGxnSQZ9A6wLSN5no9F1gccjJE864H/vy8jogEMqUT+w5BqjQNa1/Z9ug5+btz7YO0CaGP8o2ufjcSe5rXRvtXkoSuj7Hp3vA/tZ238+uetm9kS/fscAmBL165HxMnR0Y39X5L3f9t3sodtHm1D/wfPzu1s/PNmp/FPYX38Ex3GP/s75O52bJ3/hbt9aKarbPz3fsfx7/qk1fhIXnuhOeYbS85fKKdZ3/ZiRByLsd1ZfbP5nFOrdxrd1rWP/7Ila781Fsz34+7o7oefM1eql54k5nb3rke80nH8m6wf/6TD8c/ej7M9tnEkvfVat3Vbx/90NX6KeL3j8X8wo5VsPj852TwfJltnxUZ/3zjye7f2Bx1/dvz3bR7/eNI+X1t7/DZ+3PNv2m3dQ/FH7+f/ruSzZnlX/tiVUr2+OBWxK/l44+PTD57bqre2z+I/dnTz/q/T+b83Ij7vMf4bh39+taf4B3T85x7r+D9+4c5HX/zQrf3e+r+3mqVj+SO99H+97uCTvHcAAAAAAACw0xQi4kAkheJ6uVAoFtfu7zgc+wrlaq1+/Hx16eJcNL8rOx5jhdZM98G2+yGm8vthW/XpR+ozEXEoIr4d2dusF2er5blBBw8AAAAAAAAAAAAAAAAAAAA7xP4u3//P/DEy6L0Dnjo/+Q3Da8v878cvPQE7kv//MLzkPwwv+Q/DS/7D8JL/MLzkPwwv+Q/DS/4DAAAAAAAAAAAAAAAAAAAAAAAAAABAX509cyZbGqv3r85m9bnLy0sL1csn5tLaQrGyNFucrS5eKs5Xq/PltDhbrWz1euVq9dLUdCxdmayntfpkbXnlXKW6dLF+7kKlNJ+eS8eeSVQAAAAAAAAAAAAAAAAAAADwfKktryyUyuV0UUFhW4XRnbEbCn0uDLpnAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAH/gsAAP//6AY3sQ==") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x1000) syz_emit_ethernet(0x6a, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000003aaaaaaaaaaaa08004503005c00000000002f907000000000ffffffff0000883e00489078030000000300000090c7205b89c6ba79f201fb2a7ccdec3f092308bf4d1ae19911da928cceb7f2257669a73e935ab02244656cfe8638fefb94440b907850c38e"], 0x0) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r6 = fsopen(&(0x7f00000003c0)='bpf\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r6, 0x2, 0x0, 0x0, 0x0) r7 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE(r7, &(0x7f0000000a00)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000500)=""/18, 0x12, 0x3, 0x3, 0x0, 0x0, 0xc04}}, 0x120) readv(r7, &(0x7f0000000140)=[{&(0x7f0000000080)=""/155, 0x9b}, {0x0, 0x4}], 0x2) write$UHID_DESTROY(r7, &(0x7f0000000040), 0x4) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r5, 0xc0189374, &(0x7f0000000240)={{0x1, 0x1, 0x1018, 0xffffffffffffffff, {0x29}}, './file0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = gettid() process_vm_writev(r8, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) 1.441361448s ago: executing program 2 (id=16633): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18efffffffffe04b00000000000088d924d8dac4", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x7fff}, 0x18) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4], 0x3c}}, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5c0100001000130780fffffffcdbdf252001000000000000000000000000000020010000000000000000000000000001000000004e210002000000006c000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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", @ANYRES32=r4], 0x15c}, 0x1, 0x0, 0x0, 0x880}, 0x2000) 1.373806235s ago: executing program 2 (id=16634): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x3, 0x2, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x7}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0xfffffffb, 0xb, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="6000000002060103000000000000000000000004050001000700000013000300686173683a6e65742c696661636500000900020073797a30000000000500040000000000050005000a00000014000780050015000000000008001240"], 0x60}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) getsockname$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010000507000000000000000016000000", @ANYRES32=r4, @ANYBLOB="0000000200000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r6) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@delchain={0x40, 0x2c, 0xf31, 0x600, 0x25dfcbfb, {0x0, 0x0, 0x0, r7, {}, {0xfff2, 0xffff}, {0xffff, 0x1}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_FLAGS={0x8, 0x3, 0x2}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4008844}, 0x4010) 1.198264402s ago: executing program 1 (id=16637): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB], 0x48) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) r4 = memfd_create(&(0x7f0000000bc0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\t\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00x0}) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000300)=0x1, 0x4) bind$xdp(r0, &(0x7f0000000180)={0x2c, 0xa, r2}, 0x10) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000140)=0x1001020, 0x4) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x3000000, &(0x7f00000006c0), 0x1, 0x512, &(0x7f0000000c40)="$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") prctl$PR_SET_NAME(0xf, &(0x7f00000001c0)='GPL\x00') fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xf3a, 0x0) write(r4, &(0x7f0000000240), 0x0) tee(r3, 0xffffffffffffffff, 0x8f5, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0xd9) write(0xffffffffffffffff, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x18) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r7, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port1\x00', 0x72, 0x11cfa, 0x0, 0xc000007, 0x3, 0x24, 0x1, 0x0, 0x6, 0x3}) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000001c0)="d8000000150081044e81f782db44b9040a78080206000000040000a118000300ff05000006000e1208000f0100810401a80016eaa400010000005f54c92011148ed08734843cb12b00000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5e835913b06218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f52eb4edbb57a5025ccca9e00360d8bcc00400040fad95667e00600000000d5e1cace81b341139fe3cd4032e8edb12d1d2eb0c0ed0bfffdccf85df947e5e0", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) close(r7) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r9, &(0x7f0000000080)="b1", 0x1, 0x4000050, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) 621.644899ms ago: executing program 1 (id=16648): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x1d0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, 0xffffffffffffffff, 0x0) syz_usb_connect(0x3, 0x1c, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000001, 0x31, 0xffffffffffffffff, 0xffffd000) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x1, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) bpf$MAP_CREATE(0x0, 0x0, 0x50) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffc000) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) getpid() madvise(&(0x7f0000a5e000/0x1000)=nil, 0x1000, 0x17) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = syz_io_uring_setup(0x63f2, &(0x7f0000000240)={0x0, 0x86e1, 0x1, 0x2}, &(0x7f0000010080), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000140)=[{0x0}, {0x0}], 0x2) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000340), 0xa002a0}], &(0x7f00000005c0), 0x2}, 0x20) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xac5) syz_clone3(&(0x7f0000000300)={0x23800000, &(0x7f0000000040), 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) 426.124588ms ago: executing program 4 (id=16649): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB], 0x48) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) r1 = memfd_create(&(0x7f0000000bc0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\t\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00(\x00'], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x24000000) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000006c0)=@delchain={0x34, 0x64, 0xf31, 0xfffffffb, 0x400, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xfff3, 0xffff}, {0xa, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4008051}, 0x4000) 143.701546ms ago: executing program 0 (id=16652): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000280)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r1, 0x0, 0x0) 65.671244ms ago: executing program 0 (id=16653): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000680)={0x0, 0x0, 0x0}, 0x10) 65.364604ms ago: executing program 0 (id=16654): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18efffffffffe04b00000000000088d924d8dac4", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x7fff}, 0x18) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000020000001c0012000c0001"], 0x3c}}, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5c0100001000130780fffffffcdbdf252001000000000000000000000000000020010000000000000000000000000001000000004e210002000000006c000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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", @ANYRES32=r4], 0x15c}, 0x1, 0x0, 0x0, 0x880}, 0x2000) 31.080107ms ago: executing program 0 (id=16655): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000700)='mm_lru_insertion\x00', r2}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r3, &(0x7f0000000180), 0x40010) r4 = creat(&(0x7f0000000300)='./file0\x00', 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0xe, 0x14, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x80000000}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@initr0={0x18, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x9}, @alu={0x4, 0x1, 0x6, 0x4, 0xa, 0xfffffffffffffff8, 0xfffffffffffffffc}, @map_idx={0x18, 0x9, 0x5, 0x0, 0xb}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000200)='GPL\x00', 0x9, 0x3e, &(0x7f0000000240)=""/62, 0x41000, 0x4, '\x00', 0x0, @sk_skb=0x5, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000002c0)={0x1, 0x3, 0xce, 0xff}, 0x10, 0x0, r1, 0x5, &(0x7f0000000340)=[r3, r4], &(0x7f0000000380)=[{0x4, 0x1, 0xb, 0x1}, {0x0, 0x1, 0x2, 0xd}, {0x3, 0x2, 0xe, 0x3}, {0x2, 0x1, 0x3, 0x6}, {0x4, 0x2, 0x1, 0x8}], 0x10, 0x2}, 0x94) 0s ago: executing program 0 (id=16656): setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, 0xffffffffffffffff, 0x0) syz_usb_connect(0x3, 0x1c, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000001, 0x31, 0xffffffffffffffff, 0xffffd000) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x1, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) mbind(&(0x7f00004c9000/0x3000)=nil, 0x3000, 0x8000, 0x0, 0x20, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bf"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000005700)={0x18, 0xc, &(0x7f00000000c0)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c3000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x76, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffc000) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x63f2, &(0x7f0000000240)={0x0, 0x86e1, 0x1, 0x2}, &(0x7f0000010080), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000140)=[{0x0}, {0x0}], 0x2) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000340), 0xa002a0}], &(0x7f00000005c0), 0x2}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095", @ANYRESOCT=0x0], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000880)={[{@block_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@test_dummy_encryption_v1}, {@dax_always}, {@noauto_da_alloc}, {@norecovery}], [{@func={'func', 0x3d, 'PATH_CHECK'}}, {@obj_user={'obj_user', 0x3d, '::[@\xe0+\"[T\xa5\xc15\xe3\vY\xbb\xfd\x9f\xa3\x83\x9e\x85\xc0\v\x86J\x86\x1b\x7f\xba\xa5y\t\xfbG*v\x1b\x85\x19\x03\x10Vw<9i\x90\x05P\x96\"j&C\xb6\xd0\xbb\b\x82\xce\x147~\x98&=f\xb2'}}, {@fsmagic={'fsmagic', 0x3d, 0x4}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'bsddf'}}, {@fowner_gt}, {@fsname={'fsname', 0x3d, 'uid'}}, {@uid_eq}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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") kernel console output (not intermixed with test programs): Linux: policydb version 0 does not match my version range 15-35 [ 715.663903][T14107] SELinux: failed to load policy [ 715.711511][T14113] loop1: detected capacity change from 0 to 128 [ 715.747703][ T10] hid-generic 0003:0003:0000.0084: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 715.803142][T14120] loop4: detected capacity change from 0 to 512 [ 715.826950][T14123] netlink: 4 bytes leftover after parsing attributes in process `syz.2.15678'. [ 715.848219][T14120] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 715.949543][T11676] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 716.043348][T14139] loop3: detected capacity change from 0 to 1024 [ 716.061730][ T29] audit: type=1326 audit(716.047:47573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14141 comm="syz.1.15682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13dacaeec9 code=0x7ffc0000 [ 716.084996][ T29] audit: type=1326 audit(716.047:47574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14141 comm="syz.1.15682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13dacaeec9 code=0x7ffc0000 [ 716.110244][ T29] audit: type=1326 audit(716.087:47575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14141 comm="syz.1.15682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f13dacaeec9 code=0x7ffc0000 [ 716.133851][ T29] audit: type=1326 audit(716.087:47576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14141 comm="syz.1.15682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13dacaeec9 code=0x7ffc0000 [ 716.157460][ T29] audit: type=1326 audit(716.087:47577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14141 comm="syz.1.15682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13dacaeec9 code=0x7ffc0000 [ 716.285769][T14157] SELinux: policydb version 4376 does not match my version range 15-35 [ 716.295641][T14157] SELinux: failed to load policy [ 716.339121][T14163] netlink: 12 bytes leftover after parsing attributes in process `syz.1.15690'. [ 716.340989][T14161] loop3: detected capacity change from 0 to 512 [ 716.357105][T14161] EXT4-fs (loop3): orphan cleanup on readonly fs [ 716.364372][T14161] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.15689: bg 0: block 248: padding at end of block bitmap is not set [ 716.379628][T14161] EXT4-fs error (device loop3): ext4_acquire_dquot:6945: comm syz.3.15689: Failed to acquire dquot type 1 [ 716.391561][T14161] EXT4-fs (loop3): 1 truncate cleaned up [ 716.436581][T14171] loop1: detected capacity change from 0 to 128 [ 716.454200][T32148] hid-generic 0003:0003:0000.0085: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 716.783388][T14174] netlink: 48 bytes leftover after parsing attributes in process `syz.1.15694'. [ 716.923918][T14193] SELinux: policydb version 4376 does not match my version range 15-35 [ 716.933013][T14193] SELinux: failed to load policy [ 716.972595][T14195] netlink: 12 bytes leftover after parsing attributes in process `syz.0.15702'. [ 717.276800][T14212] netlink: 4 bytes leftover after parsing attributes in process `syz.0.15705'. [ 717.388449][T14218] loop4: detected capacity change from 0 to 512 [ 717.395908][T14218] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 717.432432][T14218] EXT4-fs error (device loop4): ext4_xattr_block_get:597: inode #15: comm syz.4.15707: corrupted xattr block 19: overlapping e_value [ 717.531330][T14218] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=15 [ 717.556121][T14229] netlink: 12 bytes leftover after parsing attributes in process `syz.1.15708'. [ 717.572447][T14218] EXT4-fs error (device loop4): ext4_xattr_block_get:597: inode #15: comm syz.4.15707: corrupted xattr block 19: overlapping e_value [ 717.634421][T14218] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=15 [ 717.705831][T14232] netlink: 16 bytes leftover after parsing attributes in process `syz.1.15709'. [ 717.732366][T14218] EXT4-fs error (device loop4): ext4_xattr_block_find:1874: inode #15: comm syz.4.15707: corrupted xattr block 19: overlapping e_value [ 717.800583][T14235] FAULT_INJECTION: forcing a failure. [ 717.800583][T14235] name failslab, interval 1, probability 0, space 0, times 0 [ 717.813988][T14235] CPU: 1 UID: 0 PID: 14235 Comm: syz.1.15710 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 717.814027][T14235] Tainted: [W]=WARN [ 717.814034][T14235] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 717.814048][T14235] Call Trace: [ 717.814053][T14235] [ 717.814066][T14235] __dump_stack+0x1d/0x30 [ 717.814091][T14235] dump_stack_lvl+0xe8/0x140 [ 717.814152][T14235] dump_stack+0x15/0x1b [ 717.814190][T14235] should_fail_ex+0x265/0x280 [ 717.814227][T14235] should_failslab+0x8c/0xb0 [ 717.814271][T14235] kmem_cache_alloc_noprof+0x50/0x480 [ 717.814305][T14235] ? audit_log_start+0x342/0x720 [ 717.814455][T14235] audit_log_start+0x342/0x720 [ 717.814474][T14235] ? kstrtouint+0x76/0xc0 [ 717.814512][T14235] audit_seccomp+0x48/0x100 [ 717.814552][T14235] ? __seccomp_filter+0x82d/0x1250 [ 717.814665][T14235] __seccomp_filter+0x83e/0x1250 [ 717.814702][T14235] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 717.814742][T14235] ? vfs_write+0x7e8/0x960 [ 717.814781][T14235] __secure_computing+0x82/0x150 [ 717.814850][T14235] syscall_trace_enter+0xcf/0x1e0 [ 717.814879][T14235] do_syscall_64+0xac/0x200 [ 717.814962][T14235] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 717.814997][T14235] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 717.815024][T14235] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 717.815045][T14235] RIP: 0033:0x7f13dacaeec9 [ 717.815066][T14235] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 717.815138][T14235] RSP: 002b:00007f13d970f038 EFLAGS: 00000246 ORIG_RAX: 000000000000013c [ 717.815164][T14235] RAX: ffffffffffffffda RBX: 00007f13daf05fa0 RCX: 00007f13dacaeec9 [ 717.815178][T14235] RDX: ffffffffffffff9c RSI: 00002000000000c0 RDI: ffffffffffffff9c [ 717.815191][T14235] RBP: 00007f13d970f090 R08: 0000000000000000 R09: 0000000000000000 [ 717.815203][T14235] R10: 0000200000000440 R11: 0000000000000246 R12: 0000000000000001 [ 717.815264][T14235] R13: 00007f13daf06038 R14: 00007f13daf05fa0 R15: 00007ffdcf0e4108 [ 717.815293][T14235] [ 718.045358][T14235] netlink: 16 bytes leftover after parsing attributes in process `syz.1.15710'. [ 718.308293][T14255] sd 0:0:1:0: device reset [ 718.477801][T14260] loop4: detected capacity change from 0 to 512 [ 718.485284][T14260] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 718.535711][T14260] EXT4-fs error (device loop4): ext4_xattr_block_get:597: inode #15: comm syz.4.15721: corrupted xattr block 19: overlapping e_value [ 718.535865][T14266] 9pnet: Could not find request transport: r [ 718.585538][T14260] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=15 [ 718.595210][T14260] EXT4-fs error (device loop4): ext4_xattr_block_get:597: inode #15: comm syz.4.15721: corrupted xattr block 19: overlapping e_value [ 718.679584][T14260] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=15 [ 718.691470][T14260] EXT4-fs error (device loop4): ext4_xattr_block_find:1874: inode #15: comm syz.4.15721: corrupted xattr block 19: overlapping e_value [ 718.810543][T14288] sd 0:0:1:0: device reset [ 718.890683][T14295] FAULT_INJECTION: forcing a failure. [ 718.890683][T14295] name failslab, interval 1, probability 0, space 0, times 0 [ 718.903868][T14295] CPU: 1 UID: 0 PID: 14295 Comm: syz.4.15734 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 718.903932][T14295] Tainted: [W]=WARN [ 718.903941][T14295] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 718.903959][T14295] Call Trace: [ 718.903966][T14295] [ 718.903974][T14295] __dump_stack+0x1d/0x30 [ 718.904002][T14295] dump_stack_lvl+0xe8/0x140 [ 718.904029][T14295] dump_stack+0x15/0x1b [ 718.904097][T14295] should_fail_ex+0x265/0x280 [ 718.904136][T14295] should_failslab+0x8c/0xb0 [ 718.904172][T14295] kmem_cache_alloc_noprof+0x50/0x480 [ 718.904208][T14295] ? audit_log_start+0x342/0x720 [ 718.904289][T14295] ? avc_has_perm_noaudit+0x1b1/0x200 [ 718.904325][T14295] audit_log_start+0x342/0x720 [ 718.904348][T14295] selinux_inode_setxattr+0x613/0x6e0 [ 718.904434][T14295] ? mntput+0x4b/0x80 [ 718.904471][T14295] security_inode_setxattr+0x13a/0x1b0 [ 718.904571][T14295] __vfs_setxattr_locked+0x83/0x1d0 [ 718.904725][T14295] vfs_setxattr+0x132/0x270 [ 718.904759][T14295] file_setxattr+0x139/0x1b0 [ 718.904785][T14295] path_setxattrat+0x290/0x310 [ 718.904840][T14295] __x64_sys_fsetxattr+0x6b/0x80 [ 718.904923][T14295] x64_sys_call+0x1ced/0x3000 [ 718.904979][T14295] do_syscall_64+0xd2/0x200 [ 718.905004][T14295] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 718.905100][T14295] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 718.905201][T14295] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 718.905230][T14295] RIP: 0033:0x7f5138a4eec9 [ 718.905250][T14295] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 718.905275][T14295] RSP: 002b:00007f51374af038 EFLAGS: 00000246 ORIG_RAX: 00000000000000be [ 718.905295][T14295] RAX: ffffffffffffffda RBX: 00007f5138ca5fa0 RCX: 00007f5138a4eec9 [ 718.905368][T14295] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000005 [ 718.905488][T14295] RBP: 00007f51374af090 R08: 0000000000000000 R09: 0000000000000000 [ 718.905502][T14295] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 718.905519][T14295] R13: 00007f5138ca6038 R14: 00007f5138ca5fa0 R15: 00007ffd4da77fb8 [ 718.905550][T14295] [ 719.252609][T14304] loop4: detected capacity change from 0 to 512 [ 719.262023][T14304] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 719.360928][T14304] EXT4-fs error (device loop4): ext4_xattr_block_get:597: inode #15: comm syz.4.15738: corrupted xattr block 19: overlapping e_value [ 719.378675][T14304] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=15 [ 719.399639][T14304] EXT4-fs error (device loop4): ext4_xattr_block_get:597: inode #15: comm syz.4.15738: corrupted xattr block 19: overlapping e_value [ 719.460994][T14304] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=15 [ 719.499981][T14345] sd 0:0:1:0: device reset [ 719.504909][T14304] EXT4-fs error (device loop4): ext4_xattr_block_find:1874: inode #15: comm syz.4.15738: corrupted xattr block 19: overlapping e_value [ 719.608773][T14355] SELinux: policydb version 4376 does not match my version range 15-35 [ 719.649532][T14355] SELinux: failed to load policy [ 719.677492][T14317] loop1: detected capacity change from 0 to 1024 [ 719.685292][T14317] EXT4-fs: test_dummy_encryption option not supported [ 719.945468][T14377] sd 0:0:1:0: device reset [ 719.950449][T14374] IPVS: set_ctl: invalid protocol: 46 100.1.1.2:20001 [ 719.989541][T14379] loop4: detected capacity change from 0 to 128 [ 720.501384][T14389] __nla_validate_parse: 2 callbacks suppressed [ 720.501400][T14389] netlink: 12 bytes leftover after parsing attributes in process `syz.0.15763'. [ 720.610047][T14396] netlink: 28 bytes leftover after parsing attributes in process `syz.0.15766'. [ 720.619453][T14396] netlink: 28 bytes leftover after parsing attributes in process `syz.0.15766'. [ 720.703811][T14403] netlink: 12 bytes leftover after parsing attributes in process `syz.3.15769'. [ 720.755275][ T29] kauditd_printk_skb: 272 callbacks suppressed [ 720.755296][ T29] audit: type=1400 audit(720.737:47844): avc: denied { create } for pid=14404 comm="syz.0.15770" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 720.769292][T14405] netlink: 28 bytes leftover after parsing attributes in process `syz.0.15770'. [ 720.790743][T14405] netlink: 108 bytes leftover after parsing attributes in process `syz.0.15770'. [ 720.801683][T14408] SELinux: policydb version 4376 does not match my version range 15-35 [ 720.808884][T14405] netlink: 28 bytes leftover after parsing attributes in process `syz.0.15770'. [ 720.811269][T14408] SELinux: failed to load policy [ 720.826123][T14405] netlink: 108 bytes leftover after parsing attributes in process `syz.0.15770'. [ 720.835498][T14405] netlink: 84 bytes leftover after parsing attributes in process `syz.0.15770'. [ 720.862751][ T29] audit: type=1326 audit(720.847:47845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14386 comm="syz.1.15762" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13dacaeec9 code=0x7ffc0000 [ 720.903043][T14401] loop1: detected capacity change from 0 to 1024 [ 720.920648][T14401] EXT4-fs: test_dummy_encryption option not supported [ 720.935649][ T29] audit: type=1326 audit(720.867:47846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14386 comm="syz.1.15762" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f13dacaeec9 code=0x7ffc0000 [ 720.959489][ T29] audit: type=1326 audit(720.877:47847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14386 comm="syz.1.15762" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13dacaeec9 code=0x7ffc0000 [ 720.982647][ T29] audit: type=1326 audit(720.877:47848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14386 comm="syz.1.15762" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13dacaeec9 code=0x7ffc0000 [ 721.006754][ T29] audit: type=1326 audit(720.877:47849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14386 comm="syz.1.15762" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f13dacaeec9 code=0x7ffc0000 [ 721.030576][ T29] audit: type=1326 audit(720.877:47850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14386 comm="syz.1.15762" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f13dacaef03 code=0x7ffc0000 [ 721.054104][ T29] audit: type=1326 audit(720.877:47851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14386 comm="syz.1.15762" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f13dacad97f code=0x7ffc0000 [ 721.077920][ T29] audit: type=1326 audit(720.887:47852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14386 comm="syz.1.15762" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f13dacaef57 code=0x7ffc0000 [ 721.102158][ T29] audit: type=1326 audit(720.887:47853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14386 comm="syz.1.15762" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f13dacad710 code=0x7ffc0000 [ 721.151615][T14415] loop3: detected capacity change from 0 to 128 [ 721.244334][ T3267] hid_parser_main: 44 callbacks suppressed [ 721.244356][ T3267] hid-generic 0003:0003:0000.0086: unknown main item tag 0x0 [ 721.257768][ T3267] hid-generic 0003:0003:0000.0086: unknown main item tag 0x0 [ 721.265419][ T3267] hid-generic 0003:0003:0000.0086: unknown main item tag 0x0 [ 721.272983][ T3267] hid-generic 0003:0003:0000.0086: unknown main item tag 0x0 [ 721.280493][ T3267] hid-generic 0003:0003:0000.0086: unknown main item tag 0x0 [ 721.288137][ T3267] hid-generic 0003:0003:0000.0086: unknown main item tag 0x0 [ 721.295938][ T3267] hid-generic 0003:0003:0000.0086: unknown main item tag 0x0 [ 721.303804][ T3267] hid-generic 0003:0003:0000.0086: unknown main item tag 0x0 [ 721.311311][ T3267] hid-generic 0003:0003:0000.0086: unknown main item tag 0x0 [ 721.319314][ T3267] hid-generic 0003:0003:0000.0086: unknown main item tag 0x0 [ 721.381732][ T3267] hid-generic 0003:0003:0000.0086: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 721.819927][T14444] block device autoloading is deprecated and will be removed. [ 721.905163][T14449] SELinux: policydb version 4376 does not match my version range 15-35 [ 721.917176][T14449] SELinux: failed to load policy [ 722.076026][T14463] loop4: detected capacity change from 0 to 128 [ 722.105775][ T3388] hid-generic 0003:0003:0000.0087: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 722.211476][T14469] loop1: detected capacity change from 0 to 512 [ 722.219008][T14466] loop3: detected capacity change from 0 to 1024 [ 722.227984][T14469] EXT4-fs (loop1): orphan cleanup on readonly fs [ 722.235624][T14466] EXT4-fs: test_dummy_encryption option not supported [ 722.236667][T14469] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.15793: bg 0: block 248: padding at end of block bitmap is not set [ 722.257885][T14469] EXT4-fs error (device loop1): ext4_acquire_dquot:6945: comm syz.1.15793: Failed to acquire dquot type 1 [ 722.270056][T14469] EXT4-fs (loop1): 1 truncate cleaned up [ 722.276681][T14469] EXT4-fs mount: 10 callbacks suppressed [ 722.276698][T14469] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 722.283913][T14472] netlink: 'syz.4.15794': attribute type 3 has an invalid length. [ 722.598727][T14490] netlink: 48 bytes leftover after parsing attributes in process `syz.2.15802'. [ 722.856565][T14494] loop3: detected capacity change from 0 to 128 [ 722.892673][ T3408] hid-generic 0003:0003:0000.0088: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 722.934526][T14501] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 722.941827][T14501] IPv6: NLM_F_CREATE should be set when creating new route [ 723.037157][T14506] loop2: detected capacity change from 0 to 512 [ 723.045008][T11172] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 723.056763][T14506] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 723.085819][T14506] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 723.120107][T14506] EXT4-fs error (device loop2): ext4_xattr_block_get:597: inode #15: comm syz.2.15808: corrupted xattr block 19: overlapping e_value [ 723.151460][T14506] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 723.163194][T14506] EXT4-fs error (device loop2): ext4_xattr_block_get:597: inode #15: comm syz.2.15808: corrupted xattr block 19: overlapping e_value [ 723.186132][T14506] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 723.208224][T14527] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 723.215966][T14527] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 723.223813][T14506] EXT4-fs error (device loop2): ext4_xattr_block_find:1874: inode #15: comm syz.2.15808: corrupted xattr block 19: overlapping e_value [ 723.241717][T14527] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 723.249363][T14527] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 723.267792][T14534] SELinux: policydb version 4376 does not match my version range 15-35 [ 723.283919][T14534] SELinux: failed to load policy [ 723.388761][T13352] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 723.435563][T14542] loop4: detected capacity change from 0 to 1024 [ 723.465334][T14542] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 723.488000][T14544] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=14544 comm=syz.2.15821 [ 723.576231][T11676] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 723.590160][T14554] loop1: detected capacity change from 0 to 128 [ 723.628614][ T1037] hid-generic 0003:0003:0000.0089: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 723.644877][T14532] loop3: detected capacity change from 0 to 1024 [ 723.660317][T14532] EXT4-fs: test_dummy_encryption option not supported [ 723.760266][T14565] IPv6: NLM_F_CREATE should be specified when creating new route [ 723.837107][T14570] loop2: detected capacity change from 0 to 512 [ 723.845041][T14570] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 723.865972][T14570] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 723.881886][T14570] EXT4-fs error (device loop2): ext4_xattr_block_get:597: inode #15: comm syz.2.15832: corrupted xattr block 19: overlapping e_value [ 723.896604][T14570] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 723.905714][T14570] EXT4-fs error (device loop2): ext4_xattr_block_get:597: inode #15: comm syz.2.15832: corrupted xattr block 19: overlapping e_value [ 723.922989][T14570] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 723.948148][T14570] EXT4-fs error (device loop2): ext4_xattr_block_find:1874: inode #15: comm syz.2.15832: corrupted xattr block 19: overlapping e_value [ 724.005952][T14584] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=14584 comm=syz.1.15836 [ 724.020497][T13352] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 724.056166][T14592] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=14592 comm=syz.2.15838 [ 724.116261][T14603] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 724.123737][T14603] IPv6: NLM_F_CREATE should be set when creating new route [ 724.430353][T14638] loop3: detected capacity change from 0 to 1024 [ 724.462582][T14638] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 724.650828][ T9031] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 724.803936][T14656] loop1: detected capacity change from 0 to 1024 [ 724.822838][T14656] EXT4-fs: test_dummy_encryption option not supported [ 725.026433][T14655] loop3: detected capacity change from 0 to 1024 [ 725.033829][T14655] EXT4-fs: test_dummy_encryption option not supported [ 725.077748][T14653] loop4: detected capacity change from 0 to 1024 [ 725.085031][T14653] EXT4-fs: test_dummy_encryption option not supported [ 725.283740][T14668] SELinux: policydb version 4376 does not match my version range 15-35 [ 725.293244][T14668] SELinux: failed to load policy [ 725.426208][T14680] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=34 sclass=netlink_tcpdiag_socket pid=14680 comm=syz.1.15875 [ 725.671160][T14693] __nla_validate_parse: 4 callbacks suppressed [ 725.671176][T14693] netlink: 12 bytes leftover after parsing attributes in process `syz.0.15880'. [ 725.861395][T14695] loop3: detected capacity change from 0 to 512 [ 725.884759][T14695] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 726.055571][ T29] kauditd_printk_skb: 337 callbacks suppressed [ 726.055586][ T29] audit: type=1400 audit(726.037:48189): avc: denied { ioctl } for pid=14694 comm="syz.3.15881" path="/347/file1/file0/file0" dev="loop3" ino=13 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 726.110775][T14695] vti0: entered allmulticast mode [ 726.337811][T14711] netlink: 'syz.2.15886': attribute type 3 has an invalid length. [ 726.365233][ T9031] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 726.554693][ T3267] hid_parser_main: 62 callbacks suppressed [ 726.554711][ T3267] hid-generic 0003:0003:0000.008A: unknown main item tag 0x0 [ 726.568358][ T3267] hid-generic 0003:0003:0000.008A: unknown main item tag 0x0 [ 726.576075][ T3267] hid-generic 0003:0003:0000.008A: unknown main item tag 0x0 [ 726.583706][ T3267] hid-generic 0003:0003:0000.008A: unknown main item tag 0x0 [ 726.591572][ T3267] hid-generic 0003:0003:0000.008A: unknown main item tag 0x0 [ 726.599328][ T3267] hid-generic 0003:0003:0000.008A: unknown main item tag 0x0 [ 726.606773][ T3267] hid-generic 0003:0003:0000.008A: unknown main item tag 0x0 [ 726.614475][ T3267] hid-generic 0003:0003:0000.008A: unknown main item tag 0x0 [ 726.622429][ T3267] hid-generic 0003:0003:0000.008A: unknown main item tag 0x0 [ 726.630080][ T3267] hid-generic 0003:0003:0000.008A: unknown main item tag 0x0 [ 726.651749][T14728] netlink: 24 bytes leftover after parsing attributes in process `syz.2.15890'. [ 726.718979][ T3267] hid-generic 0003:0003:0000.008A: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 726.733810][T14720] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=14720 comm=syz.2.15890 [ 726.838492][T14706] loop4: detected capacity change from 0 to 1024 [ 726.845686][ T29] audit: type=1326 audit(726.817:48190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14701 comm="syz.4.15883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5138a4eec9 code=0x7ffc0000 [ 726.869307][ T29] audit: type=1326 audit(726.817:48191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14701 comm="syz.4.15883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5138a4eec9 code=0x7ffc0000 [ 726.893004][ T29] audit: type=1326 audit(726.817:48192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14701 comm="syz.4.15883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5138a4eec9 code=0x7ffc0000 [ 726.916746][ T29] audit: type=1326 audit(726.817:48193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14701 comm="syz.4.15883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f5138a4eec9 code=0x7ffc0000 [ 726.940177][ T29] audit: type=1326 audit(726.817:48194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14701 comm="syz.4.15883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f5138a4ef03 code=0x7ffc0000 [ 726.963281][ T29] audit: type=1326 audit(726.817:48195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14701 comm="syz.4.15883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f5138a4d97f code=0x7ffc0000 [ 726.986411][ T29] audit: type=1326 audit(726.817:48196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14701 comm="syz.4.15883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f5138a4ef57 code=0x7ffc0000 [ 727.009831][ T29] audit: type=1326 audit(726.817:48197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14701 comm="syz.4.15883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f5138a4d710 code=0x7ffc0000 [ 727.033588][ T29] audit: type=1326 audit(726.817:48198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14701 comm="syz.4.15883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f5138a4eacb code=0x7ffc0000 [ 727.040362][T14706] EXT4-fs: test_dummy_encryption option not supported [ 727.113157][T14735] netlink: 12 bytes leftover after parsing attributes in process `syz.1.15895'. [ 727.185646][T14740] netlink: 12 bytes leftover after parsing attributes in process `syz.3.15896'. [ 727.315089][T14761] netlink: 20 bytes leftover after parsing attributes in process `syz.0.15897'. [ 727.475516][T14767] loop3: detected capacity change from 0 to 512 [ 727.512992][T14767] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 727.555767][ T9031] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 727.605327][T14777] netlink: 12 bytes leftover after parsing attributes in process `syz.1.15909'. [ 727.624157][T14776] loop3: detected capacity change from 0 to 1024 [ 727.631514][T14776] EXT4-fs: Ignoring removed mblk_io_submit option [ 727.638222][T14776] EXT4-fs: Ignoring removed bh option [ 727.644668][T14776] ext3: Unknown parameter 'subj_type' [ 727.676093][ T3388] hid-generic 0003:0003:0000.008B: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 727.775048][T14783] netlink: 12 bytes leftover after parsing attributes in process `syz.1.15911'. [ 727.866462][T14790] netlink: 'syz.4.15914': attribute type 3 has an invalid length. [ 728.104171][T14807] loop2: detected capacity change from 0 to 1024 [ 728.106845][T14802] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(12) [ 728.118021][T14802] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 728.126271][T14802] vhci_hcd vhci_hcd.0: Device attached [ 728.170493][T14808] vhci_hcd: connection closed [ 728.171823][T14807] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 728.181019][T14083] vhci_hcd: stop threads [ 728.193264][T14083] vhci_hcd: release socket [ 728.197819][T14083] vhci_hcd: disconnect device [ 728.219625][T14820] netlink: 'syz.0.15925': attribute type 3 has an invalid length. [ 728.234054][T14822] loop1: detected capacity change from 0 to 1024 [ 728.243167][T14822] EXT4-fs: Ignoring removed mblk_io_submit option [ 728.250034][T14822] EXT4-fs: Ignoring removed bh option [ 728.256067][T14822] ext3: Unknown parameter 'subj_type' [ 728.268185][ T10] hid-generic 0003:0003:0000.008C: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 728.321078][T14827] netlink: 12 bytes leftover after parsing attributes in process `syz.0.15927'. [ 728.499308][T14838] loop1: detected capacity change from 0 to 512 [ 728.506996][T14838] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 728.536896][T14838] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 728.562457][T14838] EXT4-fs error (device loop1): ext4_xattr_block_get:597: inode #15: comm syz.1.15931: corrupted xattr block 19: overlapping e_value [ 728.577613][T14838] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=15 [ 728.587004][T14838] EXT4-fs error (device loop1): ext4_xattr_block_get:597: inode #15: comm syz.1.15931: corrupted xattr block 19: overlapping e_value [ 728.601895][T14838] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=15 [ 728.613090][T14838] EXT4-fs error (device loop1): ext4_xattr_block_find:1874: inode #15: comm syz.1.15931: corrupted xattr block 19: overlapping e_value [ 728.662153][T11172] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 728.821434][T14863] netlink: 12 bytes leftover after parsing attributes in process `syz.3.15939'. [ 728.949736][T13352] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 729.016927][T14876] loop1: detected capacity change from 0 to 128 [ 729.031190][T14872] loop4: detected capacity change from 0 to 512 [ 729.038976][T14872] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 729.054954][T14877] loop3: detected capacity change from 0 to 1024 [ 729.064725][T14877] EXT4-fs: Ignoring removed mblk_io_submit option [ 729.071355][T14877] EXT4-fs: Ignoring removed bh option [ 729.078428][T14877] ext3: Unknown parameter 'subj_type' [ 729.086510][T14872] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 729.091760][ T1037] hid-generic 0003:0003:0000.008D: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 729.117915][T14872] EXT4-fs error (device loop4): ext4_xattr_block_get:597: inode #15: comm syz.4.15945: corrupted xattr block 19: overlapping e_value [ 729.156617][T14872] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=15 [ 729.166526][T14872] EXT4-fs error (device loop4): ext4_xattr_block_get:597: inode #15: comm syz.4.15945: corrupted xattr block 19: overlapping e_value [ 729.214296][T14872] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=15 [ 729.233937][T14872] EXT4-fs error (device loop4): ext4_xattr_block_find:1874: inode #15: comm syz.4.15945: corrupted xattr block 19: overlapping e_value [ 729.294729][T11676] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 729.326058][T14904] netlink: 12 bytes leftover after parsing attributes in process `syz.2.15955'. [ 729.454809][T14909] loop4: detected capacity change from 0 to 1024 [ 729.493341][T14909] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 729.650066][T11676] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 729.940183][T14946] SELinux: policydb version 4376 does not match my version range 15-35 [ 729.949705][T14946] SELinux: failed to load policy [ 730.069571][T14954] loop4: detected capacity change from 0 to 1024 [ 730.122910][T14954] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 730.260575][T11676] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 730.384335][T14975] SELinux: policydb version 4376 does not match my version range 15-35 [ 730.411667][T14975] SELinux: failed to load policy [ 730.834357][T15003] loop3: detected capacity change from 0 to 512 [ 730.842296][T15003] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 730.866483][T15001] loop1: detected capacity change from 0 to 1024 [ 730.882641][T15003] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 730.912225][T15001] EXT4-fs: test_dummy_encryption option not supported [ 730.996294][ T9031] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 731.121459][ T29] kauditd_printk_skb: 94 callbacks suppressed [ 731.121479][ T29] audit: type=1326 audit(731.107:48293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14992 comm="syz.2.15987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1071f1eec9 code=0x7ffc0000 [ 731.151702][T14993] loop2: detected capacity change from 0 to 1024 [ 731.159199][T14993] EXT4-fs: test_dummy_encryption option not supported [ 731.175240][ T29] audit: type=1326 audit(731.107:48294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14992 comm="syz.2.15987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1071f1eec9 code=0x7ffc0000 [ 731.198843][ T29] audit: type=1326 audit(731.107:48295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14992 comm="syz.2.15987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1071f1eec9 code=0x7ffc0000 [ 731.222327][ T29] audit: type=1326 audit(731.107:48296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14992 comm="syz.2.15987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1071f1eec9 code=0x7ffc0000 [ 731.246107][ T29] audit: type=1326 audit(731.107:48297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14992 comm="syz.2.15987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f1071f1eec9 code=0x7ffc0000 [ 731.270113][ T29] audit: type=1326 audit(731.107:48298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14992 comm="syz.2.15987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f1071f1ef03 code=0x7ffc0000 [ 731.293365][ T29] audit: type=1326 audit(731.107:48299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14992 comm="syz.2.15987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f1071f1d97f code=0x7ffc0000 [ 731.316738][ T29] audit: type=1326 audit(731.107:48300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14992 comm="syz.2.15987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f1071f1ef57 code=0x7ffc0000 [ 731.340432][ T29] audit: type=1326 audit(731.137:48301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14992 comm="syz.2.15987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f1071f1d710 code=0x7ffc0000 [ 731.364276][ T29] audit: type=1326 audit(731.137:48302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14992 comm="syz.2.15987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f1071f1eacb code=0x7ffc0000 [ 731.553905][ T1037] hid-generic 0003:0003:0000.008E: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 732.182647][T15041] __nla_validate_parse: 3 callbacks suppressed [ 732.182664][T15041] netlink: 24 bytes leftover after parsing attributes in process `syz.1.16004'. [ 732.349759][T15047] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=15047 comm=syz.1.16004 [ 733.292678][T15084] netlink: 24 bytes leftover after parsing attributes in process `syz.1.16022'. [ 733.364537][T15086] loop4: detected capacity change from 0 to 128 [ 733.440002][ T10] hid_parser_main: 80 callbacks suppressed [ 733.440026][ T10] hid-generic 0003:0003:0000.008F: unknown main item tag 0x0 [ 733.453766][ T10] hid-generic 0003:0003:0000.008F: unknown main item tag 0x0 [ 733.461556][ T10] hid-generic 0003:0003:0000.008F: unknown main item tag 0x0 [ 733.469612][ T10] hid-generic 0003:0003:0000.008F: unknown main item tag 0x0 [ 733.477254][ T10] hid-generic 0003:0003:0000.008F: unknown main item tag 0x0 [ 733.485042][ T10] hid-generic 0003:0003:0000.008F: unknown main item tag 0x0 [ 733.492851][ T10] hid-generic 0003:0003:0000.008F: unknown main item tag 0x0 [ 733.500820][ T10] hid-generic 0003:0003:0000.008F: unknown main item tag 0x0 [ 733.508487][ T10] hid-generic 0003:0003:0000.008F: unknown main item tag 0x0 [ 733.516160][ T10] hid-generic 0003:0003:0000.008F: unknown main item tag 0x0 [ 733.525244][T15089] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=15089 comm=syz.1.16022 [ 733.586189][T15091] loop3: detected capacity change from 0 to 512 [ 733.601613][T15091] EXT4-fs: EXT4-fs: inode_readahead_blks must be 0 or a power of 2 smaller than 2^31 [ 733.721470][ T10] hid-generic 0003:0003:0000.008F: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 733.751458][T15073] loop2: detected capacity change from 0 to 1024 [ 733.759516][T15073] EXT4-fs: test_dummy_encryption option not supported [ 733.848643][T15107] sd 0:0:1:0: device reset [ 733.955428][T15114] tipc: Started in network mode [ 733.960359][T15114] tipc: Node identity ac14140f, cluster identity 4711 [ 734.028621][T15114] tipc: Enabled bearer , priority 10 [ 734.064058][T15122] loop4: detected capacity change from 0 to 512 [ 734.103406][T15122] EXT4-fs (loop4): orphan cleanup on readonly fs [ 734.130939][T15122] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.16037: bg 0: block 248: padding at end of block bitmap is not set [ 734.151727][T15122] EXT4-fs error (device loop4): ext4_acquire_dquot:6945: comm syz.4.16037: Failed to acquire dquot type 1 [ 734.175103][T15122] EXT4-fs (loop4): 1 truncate cleaned up [ 734.187799][T15122] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 734.326370][T15130] loop3: detected capacity change from 0 to 512 [ 734.345242][T15130] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 734.387277][T15130] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 734.405124][T15130] EXT4-fs error (device loop3): ext4_xattr_block_get:597: inode #15: comm syz.3.16039: corrupted xattr block 19: overlapping e_value [ 734.407928][T15141] netlink: 24 bytes leftover after parsing attributes in process `syz.0.16042'. [ 734.435666][T15130] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 734.445488][T15130] EXT4-fs error (device loop3): ext4_xattr_block_get:597: inode #15: comm syz.3.16039: corrupted xattr block 19: overlapping e_value [ 734.460775][T15130] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 734.471334][T15130] EXT4-fs error (device loop3): ext4_xattr_block_find:1874: inode #15: comm syz.3.16039: corrupted xattr block 19: overlapping e_value [ 734.540081][ T9031] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 734.582401][T15141] netlink: 'syz.0.16042': attribute type 17 has an invalid length. [ 734.625105][T15159] netlink: 4 bytes leftover after parsing attributes in process `syz.2.16048'. [ 734.639734][ T1037] hid-generic 0003:0003:0000.0090: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 734.750276][T15164] loop2: detected capacity change from 0 to 512 [ 734.760431][T15164] EXT4-fs error (device loop2): ext4_xattr_inode_iget:446: comm syz.2.16048: error while reading EA inode 32 err=-116 [ 734.778528][T15164] EXT4-fs (loop2): Remounting filesystem read-only [ 734.786534][T15164] EXT4-fs warning (device loop2): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 734.797701][T15164] EXT4-fs (loop2): 1 orphan inode deleted [ 734.805384][T15164] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 734.819764][T15164] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 734.929890][T15177] tipc: Started in network mode [ 734.935109][T15177] tipc: Node identity ac14140f, cluster identity 4711 [ 734.942987][T15177] tipc: Enabled bearer , priority 10 [ 735.056998][T11676] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 735.141803][ T10] tipc: Node number set to 2886997007 [ 735.256395][T15199] SELinux: policydb version 4376 does not match my version range 15-35 [ 735.266458][T15199] SELinux: failed to load policy [ 735.459496][T15205] loop1: detected capacity change from 0 to 1024 [ 735.483105][T15205] EXT4-fs: test_dummy_encryption option not supported [ 735.525975][T15217] tipc: Enabling of bearer rejected, already enabled [ 735.610111][T15226] SELinux: policydb version 4376 does not match my version range 15-35 [ 735.640653][T15226] SELinux: failed to load policy [ 735.716299][T15239] sd 0:0:1:0: device reset [ 735.759587][T15242] netlink: 12 bytes leftover after parsing attributes in process `syz.0.16078'. [ 735.785001][T15246] netlink: 24 bytes leftover after parsing attributes in process `syz.4.16079'. [ 735.796084][T15249] netlink: 24 bytes leftover after parsing attributes in process `syz.3.16080'. [ 735.849762][T15253] tipc: Enabling of bearer rejected, already enabled [ 735.890213][T15259] netlink: 4 bytes leftover after parsing attributes in process `syz.0.16085'. [ 735.978243][T15269] SELinux: policydb version 4376 does not match my version range 15-35 [ 735.988275][T15269] SELinux: failed to load policy [ 736.060951][ T10] tipc: Node number set to 2886997007 [ 736.127035][T15274] loop3: detected capacity change from 0 to 512 [ 736.136511][T15274] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 736.144335][ T29] kauditd_printk_skb: 760 callbacks suppressed [ 736.144356][ T29] audit: type=1326 audit(736.117:49061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15257 comm="syz.0.16085" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f3dae975d67 code=0x7ffc0000 [ 736.184898][T15274] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 736.188814][ T29] audit: type=1326 audit(736.157:49062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15257 comm="syz.0.16085" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f3dae91af79 code=0x7ffc0000 [ 736.221495][ T29] audit: type=1326 audit(736.157:49063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15257 comm="syz.0.16085" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f3dae975d67 code=0x7ffc0000 [ 736.244866][ T29] audit: type=1326 audit(736.157:49064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15257 comm="syz.0.16085" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f3dae91af79 code=0x7ffc0000 [ 736.268077][ T29] audit: type=1326 audit(736.157:49065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15257 comm="syz.0.16085" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f3dae97eec9 code=0x7ffc0000 [ 736.291898][ T29] audit: type=1326 audit(736.167:49066): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15257 comm="syz.0.16085" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f3dae975d67 code=0x7ffc0000 [ 736.315021][ T29] audit: type=1326 audit(736.167:49067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15257 comm="syz.0.16085" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f3dae91af79 code=0x7ffc0000 [ 736.338636][ T29] audit: type=1326 audit(736.167:49068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15257 comm="syz.0.16085" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f3dae97eec9 code=0x7ffc0000 [ 736.390274][T15274] EXT4-fs error (device loop3): ext4_xattr_block_get:597: inode #15: comm syz.3.16089: corrupted xattr block 19: overlapping e_value [ 736.412148][T15274] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 736.423210][T15274] EXT4-fs error (device loop3): ext4_xattr_block_get:597: inode #15: comm syz.3.16089: corrupted xattr block 19: overlapping e_value [ 736.438770][ T29] audit: type=1326 audit(736.337:49069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15257 comm="syz.0.16085" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f3dae975d67 code=0x7ffc0000 [ 736.462520][ T29] audit: type=1326 audit(736.337:49070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15257 comm="syz.0.16085" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f3dae91af79 code=0x7ffc0000 [ 736.501251][T15274] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 736.511075][T15274] EXT4-fs error (device loop3): ext4_xattr_block_find:1874: inode #15: comm syz.3.16089: corrupted xattr block 19: overlapping e_value [ 736.676865][T15293] tipc: Started in network mode [ 736.681971][T15293] tipc: Node identity ac14140f, cluster identity 4711 [ 736.697472][T15293] tipc: Enabled bearer , priority 10 [ 736.753673][ T9031] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 737.810959][ T3408] tipc: Node number set to 2886997007 [ 737.962181][T15304] netlink: 24 bytes leftover after parsing attributes in process `syz.2.16100'. [ 738.028278][T15304] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=15304 comm=syz.2.16100 [ 738.516500][T15316] loop3: detected capacity change from 0 to 1024 [ 738.708656][T15316] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 738.809340][T15323] netlink: 12 bytes leftover after parsing attributes in process `syz.2.16104'. [ 738.834012][T15325] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 738.841419][T15325] IPv6: NLM_F_CREATE should be set when creating new route [ 738.903407][ T9031] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 739.333313][T15343] netlink: 4 bytes leftover after parsing attributes in process `syz.3.16106'. [ 739.679786][T15345] loop3: detected capacity change from 0 to 512 [ 739.717301][T15345] EXT4-fs error (device loop3): ext4_xattr_inode_iget:446: comm syz.3.16106: error while reading EA inode 32 err=-116 [ 739.891096][T15345] EXT4-fs (loop3): Remounting filesystem read-only [ 739.911866][T15345] EXT4-fs warning (device loop3): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 739.966982][T15345] EXT4-fs (loop3): 1 orphan inode deleted [ 739.988002][T15345] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 740.025346][T15340] loop4: detected capacity change from 0 to 1024 [ 740.050950][T15345] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 740.088216][T15340] EXT4-fs: test_dummy_encryption option not supported [ 740.387815][T15369] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 740.395327][T15369] IPv6: NLM_F_CREATE should be set when creating new route [ 740.637246][T15380] netlink: 24 bytes leftover after parsing attributes in process `syz.2.16123'. [ 740.749158][T15387] tipc: Started in network mode [ 740.754390][T15387] tipc: Node identity ac14140f, cluster identity 4711 [ 740.782608][T15387] tipc: Enabled bearer , priority 10 [ 740.827486][T15390] netlink: 24 bytes leftover after parsing attributes in process `syz.3.16129'. [ 740.902695][T15390] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=15390 comm=syz.3.16129 [ 741.223540][ T29] kauditd_printk_skb: 249 callbacks suppressed [ 741.223560][ T29] audit: type=1326 audit(741.207:49320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15423 comm="syz.2.16142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1071f1eec9 code=0x7ffc0000 [ 741.288576][ T29] audit: type=1326 audit(741.237:49321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15423 comm="syz.2.16142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1071f1eec9 code=0x7ffc0000 [ 741.311981][ T29] audit: type=1326 audit(741.237:49322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15423 comm="syz.2.16142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1071f1eec9 code=0x7ffc0000 [ 741.335428][ T29] audit: type=1326 audit(741.237:49323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15423 comm="syz.2.16142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1071f1eec9 code=0x7ffc0000 [ 741.358877][ T29] audit: type=1326 audit(741.237:49324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15423 comm="syz.2.16142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1071f1eec9 code=0x7ffc0000 [ 741.382382][ T29] audit: type=1326 audit(741.237:49325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15423 comm="syz.2.16142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1071f1eec9 code=0x7ffc0000 [ 741.405972][ T29] audit: type=1326 audit(741.237:49326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15423 comm="syz.2.16142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1071f1eec9 code=0x7ffc0000 [ 741.429550][ T29] audit: type=1326 audit(741.237:49327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15423 comm="syz.2.16142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1071f1eec9 code=0x7ffc0000 [ 741.452955][ T29] audit: type=1326 audit(741.237:49328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15423 comm="syz.2.16142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1071f1eec9 code=0x7ffc0000 [ 741.476088][ T29] audit: type=1326 audit(741.237:49329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15423 comm="syz.2.16142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f1071f1eec9 code=0x7ffc0000 [ 741.725298][T15445] netlink: 12 bytes leftover after parsing attributes in process `syz.2.16149'. [ 741.799678][T15455] netlink: 28 bytes leftover after parsing attributes in process `syz.4.16153'. [ 741.809659][T15453] FAULT_INJECTION: forcing a failure. [ 741.809659][T15453] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 741.822825][T15453] CPU: 0 UID: 0 PID: 15453 Comm: syz.0.16152 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 741.822859][T15453] Tainted: [W]=WARN [ 741.822882][T15453] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 741.822899][T15453] Call Trace: [ 741.822907][T15453] [ 741.822915][T15453] __dump_stack+0x1d/0x30 [ 741.822938][T15453] dump_stack_lvl+0xe8/0x140 [ 741.822965][T15453] dump_stack+0x15/0x1b [ 741.822987][T15453] should_fail_ex+0x265/0x280 [ 741.823103][T15453] should_fail+0xb/0x20 [ 741.823135][T15453] should_fail_usercopy+0x1a/0x20 [ 741.823156][T15453] _copy_from_user+0x1c/0xb0 [ 741.823185][T15453] __sys_connect+0xd0/0x2b0 [ 741.823286][T15453] __x64_sys_connect+0x3f/0x50 [ 741.823336][T15453] x64_sys_call+0x2c0c/0x3000 [ 741.823372][T15453] do_syscall_64+0xd2/0x200 [ 741.823401][T15453] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 741.823459][T15453] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 741.823486][T15453] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 741.823514][T15453] RIP: 0033:0x7f3dae97eec9 [ 741.823535][T15453] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 741.823559][T15453] RSP: 002b:00007f3dad3df038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 741.823583][T15453] RAX: ffffffffffffffda RBX: 00007f3daebd5fa0 RCX: 00007f3dae97eec9 [ 741.823634][T15453] RDX: 000000000000001c RSI: 0000200000000080 RDI: 0000000000000003 [ 741.823646][T15453] RBP: 00007f3dad3df090 R08: 0000000000000000 R09: 0000000000000000 [ 741.823659][T15453] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 741.823675][T15453] R13: 00007f3daebd6038 R14: 00007f3daebd5fa0 R15: 00007ffdf9c5ce88 [ 741.823699][T15453] [ 742.008714][T15413] loop3: detected capacity change from 0 to 1024 [ 742.016100][ T3267] tipc: Node number set to 2886997007 [ 742.025416][T15434] loop1: detected capacity change from 0 to 1024 [ 742.027976][T15413] EXT4-fs: test_dummy_encryption option not supported [ 742.042073][T15434] EXT4-fs: test_dummy_encryption option not supported [ 742.084666][T15460] loop2: detected capacity change from 0 to 512 [ 742.097138][T15460] EXT4-fs (loop2): orphan cleanup on readonly fs [ 742.109927][T15460] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.16155: bg 0: block 248: padding at end of block bitmap is not set [ 742.124869][T15462] wireguard0: entered promiscuous mode [ 742.130369][T15462] wireguard0: entered allmulticast mode [ 742.171395][T15460] EXT4-fs error (device loop2): ext4_acquire_dquot:6945: comm syz.2.16155: Failed to acquire dquot type 1 [ 742.191429][T15460] EXT4-fs (loop2): 1 truncate cleaned up [ 742.198753][T15467] sd 0:0:1:0: device reset [ 742.204161][T15460] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 742.751541][T15482] netlink: 12 bytes leftover after parsing attributes in process `syz.1.16162'. [ 742.803382][T15486] loop1: detected capacity change from 0 to 512 [ 742.812806][T15486] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 742.981797][T13352] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 743.007867][T15486] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 743.183779][T15486] EXT4-fs error (device loop1): ext4_xattr_block_get:597: inode #15: comm syz.1.16163: corrupted xattr block 19: overlapping e_value [ 743.262695][T15486] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=15 [ 743.324763][T15486] EXT4-fs error (device loop1): ext4_xattr_block_get:597: inode #15: comm syz.1.16163: corrupted xattr block 19: overlapping e_value [ 743.396320][T15486] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=15 [ 743.450479][T15486] EXT4-fs error (device loop1): ext4_xattr_block_find:1874: inode #15: comm syz.1.16163: corrupted xattr block 19: overlapping e_value [ 743.571720][T11172] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 744.135974][T15521] netlink: 12 bytes leftover after parsing attributes in process `syz.1.16174'. [ 744.182098][T15523] sd 0:0:1:0: device reset [ 744.297626][T15529] SELinux: policydb version 4376 does not match my version range 15-35 [ 744.337852][T15529] SELinux: failed to load policy [ 744.366495][T15533] sd 0:0:1:0: device reset [ 744.377582][T15535] netlink: 12 bytes leftover after parsing attributes in process `syz.2.16179'. [ 744.822980][T15551] loop3: detected capacity change from 0 to 128 [ 744.859135][T32148] hid_parser_main: 26 callbacks suppressed [ 744.859154][T32148] hid-generic 0003:0003:0000.0091: unknown main item tag 0x0 [ 744.872994][T32148] hid-generic 0003:0003:0000.0091: unknown main item tag 0x0 [ 744.880454][T32148] hid-generic 0003:0003:0000.0091: unknown main item tag 0x0 [ 744.888023][T32148] hid-generic 0003:0003:0000.0091: unknown main item tag 0x0 [ 744.895792][T32148] hid-generic 0003:0003:0000.0091: unknown main item tag 0x0 [ 744.903304][T32148] hid-generic 0003:0003:0000.0091: unknown main item tag 0x0 [ 744.910739][T32148] hid-generic 0003:0003:0000.0091: unknown main item tag 0x0 [ 744.918276][T32148] hid-generic 0003:0003:0000.0091: unknown main item tag 0x0 [ 744.925803][T32148] hid-generic 0003:0003:0000.0091: unknown main item tag 0x0 [ 744.933691][T32148] hid-generic 0003:0003:0000.0091: unknown main item tag 0x0 [ 744.942647][T32148] hid-generic 0003:0003:0000.0091: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 745.250635][T15567] netlink: 12 bytes leftover after parsing attributes in process `syz.2.16187'. [ 745.428082][T15576] SELinux: policydb version 4376 does not match my version range 15-35 [ 745.451594][T15576] SELinux: failed to load policy [ 745.525783][T15577] lo speed is unknown, defaulting to 1000 [ 745.532377][T15577] lo speed is unknown, defaulting to 1000 [ 745.540676][T15577] lo speed is unknown, defaulting to 1000 [ 745.556703][T15577] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 745.579890][T15565] loop3: detected capacity change from 0 to 1024 [ 745.588497][T15565] EXT4-fs: test_dummy_encryption option not supported [ 745.602171][T15588] netlink: 28 bytes leftover after parsing attributes in process `syz.2.16194'. [ 745.617119][T15577] lo speed is unknown, defaulting to 1000 [ 745.633885][T15590] sd 0:0:1:0: device reset [ 745.639358][T15577] lo speed is unknown, defaulting to 1000 [ 745.647188][T15577] lo speed is unknown, defaulting to 1000 [ 745.655570][T15577] lo speed is unknown, defaulting to 1000 [ 745.663097][T15577] lo speed is unknown, defaulting to 1000 [ 745.669613][T15577] lo speed is unknown, defaulting to 1000 [ 745.676911][T15592] netlink: 12 bytes leftover after parsing attributes in process `syz.1.16199'. [ 745.745129][T15595] loop2: detected capacity change from 0 to 128 [ 745.759508][T15598] netlink: 4 bytes leftover after parsing attributes in process `syz.4.16202'. [ 745.779323][ T3267] hid-generic 0003:0003:0000.0092: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 745.928631][T15607] loop4: detected capacity change from 0 to 512 [ 745.952512][T15607] EXT4-fs error (device loop4): ext4_xattr_inode_iget:446: comm syz.4.16202: error while reading EA inode 32 err=-116 [ 745.966887][T15611] bond13: option updelay: invalid value (18446744073709531912) [ 745.974888][T15611] bond13: option updelay: allowed values 0 - 2147483647 [ 745.982124][T15607] EXT4-fs (loop4): Remounting filesystem read-only [ 745.989090][T15607] EXT4-fs warning (device loop4): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 745.999631][T15607] EXT4-fs (loop4): 1 orphan inode deleted [ 746.001619][T15611] bond13 (unregistering): Released all slaves [ 746.010048][T15607] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 746.030230][T15618] netlink: 28 bytes leftover after parsing attributes in process `syz.0.16207'. [ 746.040643][T15607] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 746.233697][T15633] netlink: 24 bytes leftover after parsing attributes in process `syz.1.16213'. [ 746.234125][ T29] kauditd_printk_skb: 324 callbacks suppressed [ 746.234143][ T29] audit: type=1326 audit(746.217:49652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15597 comm="syz.4.16202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f5138a45d67 code=0x7ffc0000 [ 746.244465][T15633] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=15633 comm=syz.1.16213 [ 746.249209][ T29] audit: type=1326 audit(746.217:49653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15597 comm="syz.4.16202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f51389eaf79 code=0x7ffc0000 [ 746.249250][ T29] audit: type=1326 audit(746.217:49654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15597 comm="syz.4.16202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f5138a4eec9 code=0x7ffc0000 [ 746.346267][ T29] audit: type=1326 audit(746.257:49655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15597 comm="syz.4.16202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f5138a45d67 code=0x7ffc0000 [ 746.369966][ T29] audit: type=1326 audit(746.257:49656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15597 comm="syz.4.16202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f51389eaf79 code=0x7ffc0000 [ 746.393706][ T29] audit: type=1326 audit(746.257:49657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15597 comm="syz.4.16202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f5138a4eec9 code=0x7ffc0000 [ 746.417003][ T29] audit: type=1326 audit(746.257:49658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15597 comm="syz.4.16202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f5138a45d67 code=0x7ffc0000 [ 746.440351][ T29] audit: type=1326 audit(746.257:49659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15597 comm="syz.4.16202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f51389eaf79 code=0x7ffc0000 [ 746.463997][ T29] audit: type=1326 audit(746.257:49660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15597 comm="syz.4.16202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f5138a4eec9 code=0x7ffc0000 [ 746.487445][ T29] audit: type=1326 audit(746.267:49661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15597 comm="syz.4.16202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f5138a45d67 code=0x7ffc0000 [ 746.553802][T14066] Bluetooth: hci0: Frame reassembly failed (-84) [ 746.610018][T15621] loop2: detected capacity change from 0 to 1024 [ 746.618631][T15621] EXT4-fs: test_dummy_encryption option not supported [ 746.740463][T15654] SELinux: policydb version 4376 does not match my version range 15-35 [ 746.758607][T15654] SELinux: failed to load policy [ 746.839164][T15660] loop1: detected capacity change from 0 to 128 [ 746.843899][T15643] loop3: detected capacity change from 0 to 1024 [ 746.853900][T15643] EXT4-fs: test_dummy_encryption option not supported [ 746.854173][T15662] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 746.875071][T32148] hid-generic 0003:0003:0000.0093: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 747.202080][T15668] loop2: detected capacity change from 0 to 164 [ 747.209456][T15668] iso9660: Unknown parameter 'unhiOe' [ 747.277286][T15672] netlink: 8 bytes leftover after parsing attributes in process `syz.2.16227'. [ 747.428095][T15675] netlink: 24 bytes leftover after parsing attributes in process `syz.3.16228'. [ 747.439233][T15675] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=15675 comm=syz.3.16228 [ 747.681094][T15693] SELinux: policydb version 4376 does not match my version range 15-35 [ 747.701239][T15689] loop4: detected capacity change from 0 to 128 [ 747.709533][T15693] SELinux: failed to load policy [ 747.717183][T15690] loop2: detected capacity change from 0 to 512 [ 747.736946][T15690] EXT4-fs error (device loop2): ext4_xattr_inode_iget:446: comm syz.2.16230: error while reading EA inode 32 err=-116 [ 747.750302][ T3388] hid-generic 0003:0003:0000.0094: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 747.751221][T15690] EXT4-fs (loop2): Remounting filesystem read-only [ 747.766986][T15690] EXT4-fs warning (device loop2): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 747.777812][T15690] EXT4-fs (loop2): 1 orphan inode deleted [ 747.784573][T15690] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 747.801431][T15690] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 747.865975][T15698] loop1: detected capacity change from 0 to 512 [ 747.880206][T15698] EXT4-fs (loop1): orphan cleanup on readonly fs [ 747.888082][T15698] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.16236: bg 0: block 248: padding at end of block bitmap is not set [ 747.903853][T15698] EXT4-fs error (device loop1): ext4_acquire_dquot:6945: comm syz.1.16236: Failed to acquire dquot type 1 [ 747.920207][T15698] EXT4-fs (loop1): 1 truncate cleaned up [ 747.931888][T15698] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 748.016724][T15707] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 748.139887][T15709] loop3: detected capacity change from 0 to 1024 [ 748.147657][T15709] EXT4-fs: test_dummy_encryption option not supported [ 748.456426][T15719] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=15719 comm=syz.2.16243 [ 748.601378][ T6467] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 748.606862][T15729] SELinux: policydb version 4376 does not match my version range 15-35 [ 748.607723][T11231] Bluetooth: hci0: command 0x1003 tx timeout [ 748.617365][T15729] SELinux: failed to load policy [ 748.759339][T11172] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 748.812597][T15738] loop1: detected capacity change from 0 to 128 [ 748.833888][ T10] hid-generic 0003:0003:0000.0095: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 749.456601][T15751] __nla_validate_parse: 4 callbacks suppressed [ 749.456622][T15751] netlink: 4 bytes leftover after parsing attributes in process `syz.0.16253'. [ 749.730826][T15759] netlink: 12 bytes leftover after parsing attributes in process `syz.4.16256'. [ 750.153397][T15781] netlink: 24 bytes leftover after parsing attributes in process `syz.4.16261'. [ 750.282385][T15777] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=15777 comm=syz.4.16261 [ 750.867591][T15809] SELinux: policydb version 4376 does not match my version range 15-35 [ 750.890352][T15809] SELinux: failed to load policy [ 751.061903][T15822] sd 0:0:1:0: device reset [ 751.198812][T15828] loop2: detected capacity change from 0 to 128 [ 751.236496][ T3388] hid_parser_main: 80 callbacks suppressed [ 751.236517][ T3388] hid-generic 0003:0003:0000.0096: unknown main item tag 0x0 [ 751.250017][ T3388] hid-generic 0003:0003:0000.0096: unknown main item tag 0x0 [ 751.257609][ T3388] hid-generic 0003:0003:0000.0096: unknown main item tag 0x0 [ 751.265213][ T3388] hid-generic 0003:0003:0000.0096: unknown main item tag 0x0 [ 751.272672][ T3388] hid-generic 0003:0003:0000.0096: unknown main item tag 0x0 [ 751.273267][T15790] loop1: detected capacity change from 0 to 1024 [ 751.280353][ T3388] hid-generic 0003:0003:0000.0096: unknown main item tag 0x0 [ 751.280386][ T3388] hid-generic 0003:0003:0000.0096: unknown main item tag 0x0 [ 751.301200][ T29] kauditd_printk_skb: 476 callbacks suppressed [ 751.301223][ T29] audit: type=1326 audit(751.237:50136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15787 comm="syz.1.16267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13dacaeec9 code=0x7ffc0000 [ 751.301678][ T3388] hid-generic 0003:0003:0000.0096: unknown main item tag 0x0 [ 751.307949][ T29] audit: type=1326 audit(751.237:50137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15787 comm="syz.1.16267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13dacaeec9 code=0x7ffc0000 [ 751.331137][ T3388] hid-generic 0003:0003:0000.0096: unknown main item tag 0x0 [ 751.331171][ T3388] hid-generic 0003:0003:0000.0096: unknown main item tag 0x0 [ 751.338657][ T29] audit: type=1326 audit(751.237:50138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15787 comm="syz.1.16267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f13dacaeec9 code=0x7ffc0000 [ 751.365174][T15790] EXT4-fs: test_dummy_encryption option not supported [ 751.369304][ T29] audit: type=1326 audit(751.237:50139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15787 comm="syz.1.16267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13dacaeec9 code=0x7ffc0000 [ 751.389757][ T3388] hid-generic 0003:0003:0000.0096: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 751.400250][ T29] audit: type=1326 audit(751.247:50140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15787 comm="syz.1.16267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f13dacaeec9 code=0x7ffc0000 [ 751.400345][ T29] audit: type=1326 audit(751.247:50141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15787 comm="syz.1.16267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f13dacaef03 code=0x7ffc0000 [ 751.487141][ T29] audit: type=1326 audit(751.247:50142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15787 comm="syz.1.16267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f13dacad97f code=0x7ffc0000 [ 751.510723][ T29] audit: type=1326 audit(751.257:50143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15787 comm="syz.1.16267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f13dacaef57 code=0x7ffc0000 [ 751.519440][T15833] lo speed is unknown, defaulting to 1000 [ 751.534313][ T29] audit: type=1326 audit(751.257:50144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15787 comm="syz.1.16267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f13dacad710 code=0x7ffc0000 [ 751.553408][T15833] lo speed is unknown, defaulting to 1000 [ 751.563756][ T29] audit: type=1326 audit(751.257:50145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15787 comm="syz.1.16267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f13dacaeacb code=0x7ffc0000 [ 751.593376][T15833] lo speed is unknown, defaulting to 1000 [ 751.597800][T15833] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 751.634254][T15833] lo speed is unknown, defaulting to 1000 [ 751.640810][T15833] lo speed is unknown, defaulting to 1000 [ 751.647706][T15833] lo speed is unknown, defaulting to 1000 [ 751.654661][T15833] lo speed is unknown, defaulting to 1000 [ 751.661421][T15833] lo speed is unknown, defaulting to 1000 [ 751.668073][T15833] lo speed is unknown, defaulting to 1000 [ 751.768226][T15845] loop4: detected capacity change from 0 to 1024 [ 751.817640][T15845] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 751.868633][T15849] lo speed is unknown, defaulting to 1000 [ 751.875102][T15857] sd 0:0:1:0: device reset [ 751.996333][T11676] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 752.055725][T15868] loop4: detected capacity change from 0 to 512 [ 752.066540][T15868] EXT4-fs (loop4): orphan cleanup on readonly fs [ 752.095563][T15868] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.16293: bg 0: block 248: padding at end of block bitmap is not set [ 752.152684][T15868] EXT4-fs error (device loop4): ext4_acquire_dquot:6945: comm syz.4.16293: Failed to acquire dquot type 1 [ 752.197728][T15868] EXT4-fs (loop4): 1 truncate cleaned up [ 752.218720][T15868] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 752.454705][T15883] lo speed is unknown, defaulting to 1000 [ 752.603174][T15883] siw: device registration error -23 [ 752.679306][T15897] SELinux: policydb version 4376 does not match my version range 15-35 [ 752.698916][T15897] SELinux: failed to load policy [ 752.710651][T15899] netlink: 4 bytes leftover after parsing attributes in process `syz.1.16302'. [ 752.772273][T15904] siw: device registration error -23 [ 752.776711][T15902] lo speed is unknown, defaulting to 1000 [ 752.904914][T11676] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 752.931241][T15905] loop1: detected capacity change from 0 to 512 [ 752.962725][T15905] EXT4-fs error (device loop1): ext4_xattr_inode_iget:446: comm syz.1.16302: error while reading EA inode 32 err=-116 [ 752.991736][T15905] EXT4-fs (loop1): Remounting filesystem read-only [ 753.018064][T15905] EXT4-fs warning (device loop1): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 753.052607][T15905] EXT4-fs (loop1): 1 orphan inode deleted [ 753.073004][T15905] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 753.089418][T15905] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 753.240619][T15922] loop2: detected capacity change from 0 to 1024 [ 753.255798][T15922] EXT4-fs: test_dummy_encryption option not supported [ 753.323618][T15932] lo speed is unknown, defaulting to 1000 [ 753.736161][T15937] loop1: detected capacity change from 0 to 164 [ 753.783209][T15937] bio_check_eod: 2 callbacks suppressed [ 753.783255][T15937] syz.1.16314: attempt to access beyond end of device [ 753.783255][T15937] loop1: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 753.856198][T15937] syz.1.16314: attempt to access beyond end of device [ 753.856198][T15937] loop1: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 754.022450][T15940] loop1: detected capacity change from 0 to 512 [ 754.037980][T15938] loop3: detected capacity change from 0 to 1024 [ 754.053053][T15940] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 754.062487][T15940] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 754.082525][T15938] EXT4-fs: test_dummy_encryption option not supported [ 754.134715][T15944] loop2: detected capacity change from 0 to 128 [ 754.151295][T15940] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 754.164451][T15940] System zones: 0-2, 18-18, 34-35 [ 754.177959][T15940] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 754.194613][ T3267] hid-generic 0003:0003:0000.0097: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 754.227372][T15940] EXT4-fs (loop1): warning: mounting unchecked fs, running e2fsck is recommended [ 754.271392][T15940] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 754.292206][T15940] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 754.363549][T15940] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 754.530664][T15940] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 754.637416][T15940] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 754.706933][T15940] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 754.791143][T15949] loop2: detected capacity change from 0 to 1024 [ 754.799497][T15949] EXT4-fs: test_dummy_encryption option not supported [ 754.892768][T14083] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 754.911965][T14083] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 754.931097][T14083] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 754.948159][T14083] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 754.958860][T11172] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 755.080939][T11231] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 755.080995][ T6467] Bluetooth: hci0: command 0x1003 tx timeout [ 755.172719][T15961] netlink: 12 bytes leftover after parsing attributes in process `syz.4.16321'. [ 755.195178][T15964] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=15964 comm=syz.3.16323 [ 755.256193][T15968] netlink: 4 bytes leftover after parsing attributes in process `syz.1.16324'. [ 755.298803][T15974] netlink: 8 bytes leftover after parsing attributes in process `syz.0.16325'. [ 755.308929][T15974] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 755.423461][T15977] loop1: detected capacity change from 0 to 512 [ 755.438979][T15977] EXT4-fs error (device loop1): ext4_xattr_inode_iget:446: comm syz.1.16324: error while reading EA inode 32 err=-116 [ 755.454711][T15977] EXT4-fs (loop1): Remounting filesystem read-only [ 755.462412][T15977] EXT4-fs warning (device loop1): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 755.473579][T15977] EXT4-fs (loop1): 1 orphan inode deleted [ 755.480099][T15977] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 755.497009][T15977] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 755.568879][ T6411] Bluetooth: hci0: Frame reassembly failed (-84) [ 755.779815][T15973] loop4: detected capacity change from 0 to 1024 [ 755.796418][T15973] EXT4-fs: test_dummy_encryption option not supported [ 755.926351][T16010] lo speed is unknown, defaulting to 1000 [ 756.245251][T16015] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=16015 comm=syz.1.16338 [ 756.423236][T16017] loop1: detected capacity change from 0 to 512 [ 756.467829][T16017] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 756.512643][T16019] SELinux: policydb version 4376 does not match my version range 15-35 [ 756.548319][T16019] SELinux: failed to load policy [ 756.592897][T16017] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 756.627282][T16017] EXT4-fs error (device loop1): ext4_xattr_block_get:597: inode #15: comm syz.1.16339: corrupted xattr block 19: overlapping e_value [ 756.661240][T16017] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=15 [ 756.677421][T16017] EXT4-fs error (device loop1): ext4_xattr_block_get:597: inode #15: comm syz.1.16339: corrupted xattr block 19: overlapping e_value [ 756.712581][T16017] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=15 [ 756.746057][T16017] EXT4-fs error (device loop1): ext4_xattr_block_find:1874: inode #15: comm syz.1.16339: corrupted xattr block 19: overlapping e_value [ 756.825449][T11172] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 756.863310][T16035] loop4: detected capacity change from 0 to 128 [ 756.903153][ T3388] hid_parser_main: 26 callbacks suppressed [ 756.903175][ T3388] hid-generic 0003:0003:0000.0098: unknown main item tag 0x0 [ 756.916754][ T3388] hid-generic 0003:0003:0000.0098: unknown main item tag 0x0 [ 756.924506][ T3388] hid-generic 0003:0003:0000.0098: unknown main item tag 0x0 [ 756.932479][ T3388] hid-generic 0003:0003:0000.0098: unknown main item tag 0x0 [ 756.939999][ T3388] hid-generic 0003:0003:0000.0098: unknown main item tag 0x0 [ 756.947728][ T3388] hid-generic 0003:0003:0000.0098: unknown main item tag 0x0 [ 756.955167][ T3388] hid-generic 0003:0003:0000.0098: unknown main item tag 0x0 [ 756.962705][ T3388] hid-generic 0003:0003:0000.0098: unknown main item tag 0x0 [ 756.970276][ T3388] hid-generic 0003:0003:0000.0098: unknown main item tag 0x0 [ 756.977762][ T3388] hid-generic 0003:0003:0000.0098: unknown main item tag 0x0 [ 756.995740][ T3388] hid-generic 0003:0003:0000.0098: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 757.222346][T16045] netlink: 8 bytes leftover after parsing attributes in process `syz.1.16349'. [ 757.239145][T16047] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 757.261559][T16045] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 757.274350][T16049] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 757.346293][T16053] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=16053 comm=syz.3.16353 [ 757.461271][T16063] loop3: detected capacity change from 0 to 164 [ 757.535770][T16067] netlink: 4 bytes leftover after parsing attributes in process `syz.1.16360'. [ 757.553123][ T29] kauditd_printk_skb: 561 callbacks suppressed [ 757.553138][ T29] audit: type=1326 audit(757.537:50705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16068 comm="syz.4.16361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5138a4eec9 code=0x7ffc0000 [ 757.601609][T16069] netlink: 4 bytes leftover after parsing attributes in process `syz.4.16361'. [ 757.636545][ T29] audit: type=1326 audit(757.567:50706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16068 comm="syz.4.16361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5138a4eec9 code=0x7ffc0000 [ 757.660759][ T29] audit: type=1326 audit(757.567:50707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16068 comm="syz.4.16361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f5138a4eec9 code=0x7ffc0000 [ 757.685099][ T29] audit: type=1326 audit(757.567:50708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16068 comm="syz.4.16361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5138a4eec9 code=0x7ffc0000 [ 757.709174][ T29] audit: type=1326 audit(757.567:50709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16068 comm="syz.4.16361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f5138a4eec9 code=0x7ffc0000 [ 757.732398][ T29] audit: type=1326 audit(757.577:50710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16070 comm="syz.4.16361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f5138a81785 code=0x7ffc0000 [ 757.755837][ T29] audit: type=1326 audit(757.577:50711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16068 comm="syz.4.16361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5138a4eec9 code=0x7ffc0000 [ 757.779486][ T29] audit: type=1326 audit(757.577:50712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16068 comm="syz.4.16361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5138a4eec9 code=0x7ffc0000 [ 757.803210][ T29] audit: type=1326 audit(757.577:50713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16068 comm="syz.4.16361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7f5138a4eec9 code=0x7ffc0000 [ 757.827276][ T29] audit: type=1326 audit(757.577:50714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16068 comm="syz.4.16361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5138a4eec9 code=0x7ffc0000 [ 757.854390][ T6467] Bluetooth: hci0: command 0x1003 tx timeout [ 757.860502][T11231] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 757.870074][T16072] loop1: detected capacity change from 0 to 164 [ 757.883762][T16072] iso9660: Unknown parameter 'unhiOe' [ 758.049182][T16076] loop4: detected capacity change from 0 to 512 [ 758.060427][T16085] loop2: detected capacity change from 0 to 128 [ 758.078568][T16088] loop3: detected capacity change from 0 to 128 [ 758.104674][T16076] EXT4-fs error (device loop4): ext4_xattr_inode_iget:446: comm syz.4.16361: error while reading EA inode 32 err=-116 [ 758.132481][ T3267] hid-generic 0003:0003:0000.0099: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 758.150329][T16076] EXT4-fs (loop4): Remounting filesystem read-only [ 758.158479][T16093] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=16093 comm=syz.1.16369 [ 758.177925][ T3267] hid-generic 0003:0003:0000.009A: hidraw1: USB HID v0.00 Device [syz0] on syz1 [ 758.180112][T16095] netlink: 28 bytes leftover after parsing attributes in process `syz.0.16370'. [ 758.197088][T16076] EXT4-fs warning (device loop4): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 758.237740][T16076] EXT4-fs (loop4): 1 orphan inode deleted [ 758.258328][T16076] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 758.302889][T16076] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 758.327075][T16103] sd 0:0:1:0: device reset [ 758.479331][T16114] loop3: detected capacity change from 0 to 512 [ 758.516646][T16114] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 758.534820][T16114] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 758.622406][T16114] EXT4-fs error (device loop3): ext4_xattr_block_get:597: inode #15: comm syz.3.16378: corrupted xattr block 19: overlapping e_value [ 758.658219][T16124] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=16124 comm=syz.4.16381 [ 758.709623][T16114] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 758.803244][T16114] EXT4-fs error (device loop3): ext4_xattr_block_get:597: inode #15: comm syz.3.16378: corrupted xattr block 19: overlapping e_value [ 758.835194][T16128] lo speed is unknown, defaulting to 1000 [ 758.868621][T16114] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 758.899124][T16130] loop1: detected capacity change from 0 to 1024 [ 758.912491][T16130] EXT4-fs: test_dummy_encryption option not supported [ 758.932916][T16114] EXT4-fs error (device loop3): ext4_xattr_block_find:1874: inode #15: comm syz.3.16378: corrupted xattr block 19: overlapping e_value [ 759.007348][ T9031] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 759.059555][T16144] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 759.084451][T16143] netlink: 24 bytes leftover after parsing attributes in process `syz.3.16387'. [ 759.173415][T16150] lo speed is unknown, defaulting to 1000 [ 759.208863][T16154] loop4: detected capacity change from 0 to 1024 [ 759.292049][T16154] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 759.323532][T16155] siw: device registration error -23 [ 759.372994][T16170] lo speed is unknown, defaulting to 1000 [ 759.379251][T16171] loop3: detected capacity change from 0 to 512 [ 759.389984][T16173] netlink: 4 bytes leftover after parsing attributes in process `syz.2.16400'. [ 759.400628][T16171] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 759.423158][T16171] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 759.451978][T11676] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 759.470843][T16171] EXT4-fs error (device loop3): ext4_xattr_block_get:597: inode #15: comm syz.3.16398: corrupted xattr block 19: overlapping e_value [ 759.488007][T16171] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 759.506384][T16171] EXT4-fs error (device loop3): ext4_xattr_block_get:597: inode #15: comm syz.3.16398: corrupted xattr block 19: overlapping e_value [ 759.531196][T16171] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 759.571661][T16171] EXT4-fs error (device loop3): ext4_xattr_block_find:1874: inode #15: comm syz.3.16398: corrupted xattr block 19: overlapping e_value [ 759.669131][ T9031] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 759.737029][T16198] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 759.929151][ T10] hid-generic 0003:0003:0000.009B: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 760.099174][T16207] netlink: 40 bytes leftover after parsing attributes in process `syz.3.16411'. [ 760.119867][T16207] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=16207 comm=syz.3.16411 [ 760.240182][T16213] loop3: detected capacity change from 0 to 128 [ 760.262411][T32148] hid-generic 0003:0003:0000.009C: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 760.504590][T16223] loop3: detected capacity change from 0 to 512 [ 760.520362][T16223] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 760.549707][T16223] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 760.571366][T16223] EXT4-fs error (device loop3): ext4_xattr_block_get:597: inode #15: comm syz.3.16417: corrupted xattr block 19: overlapping e_value [ 760.591379][T16223] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 760.611515][ T10] hid-generic 0003:0003:0000.009D: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 760.619487][T16223] EXT4-fs error (device loop3): ext4_xattr_block_get:597: inode #15: comm syz.3.16417: corrupted xattr block 19: overlapping e_value [ 760.636379][T16223] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 760.651190][T16223] EXT4-fs error (device loop3): ext4_xattr_block_find:1874: inode #15: comm syz.3.16417: corrupted xattr block 19: overlapping e_value [ 760.671888][T16219] loop2: detected capacity change from 0 to 1024 [ 760.679619][T16219] EXT4-fs: test_dummy_encryption option not supported [ 760.714836][ T9031] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 760.790049][T16241] netlink: 4 bytes leftover after parsing attributes in process `syz.4.16421'. [ 760.816916][T16239] lo speed is unknown, defaulting to 1000 [ 760.951240][T16247] loop4: detected capacity change from 0 to 512 [ 760.957813][T14033] Bluetooth: hci0: Frame reassembly failed (-84) [ 760.968584][T16247] EXT4-fs error (device loop4): ext4_xattr_inode_iget:446: comm syz.4.16421: error while reading EA inode 32 err=-116 [ 760.984701][T16247] EXT4-fs (loop4): Remounting filesystem read-only [ 760.992165][T16247] EXT4-fs warning (device loop4): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 761.003880][T16247] EXT4-fs (loop4): 1 orphan inode deleted [ 761.010677][T16247] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 761.025134][T16247] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 761.136717][T16259] loop1: detected capacity change from 0 to 128 [ 761.165707][T32148] hid-generic 0003:0003:0000.009E: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 761.386374][T16268] netlink: 40 bytes leftover after parsing attributes in process `syz.2.16430'. [ 761.413390][T16268] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=16268 comm=syz.2.16430 [ 761.492784][T16272] loop2: detected capacity change from 0 to 128 [ 761.538760][T32148] hid-generic 0003:0003:0000.009F: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 761.923058][T16296] netlink: 40 bytes leftover after parsing attributes in process `syz.2.16442'. [ 761.940935][T16296] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=16296 comm=syz.2.16442 [ 761.969085][T16302] bond14: option updelay: invalid value (18446744073709531912) [ 761.976827][T16302] bond14: option updelay: allowed values 0 - 2147483647 [ 761.995361][T16302] bond14 (unregistering): Released all slaves [ 762.044095][T16306] loop2: detected capacity change from 0 to 128 [ 762.095944][T32148] hid_parser_main: 134 callbacks suppressed [ 762.095981][T32148] hid-generic 0003:0003:0000.00A0: unknown main item tag 0x0 [ 762.110331][T32148] hid-generic 0003:0003:0000.00A0: unknown main item tag 0x0 [ 762.117980][T32148] hid-generic 0003:0003:0000.00A0: unknown main item tag 0x0 [ 762.125540][T32148] hid-generic 0003:0003:0000.00A0: unknown main item tag 0x0 [ 762.133119][T32148] hid-generic 0003:0003:0000.00A0: unknown main item tag 0x0 [ 762.141014][T32148] hid-generic 0003:0003:0000.00A0: unknown main item tag 0x0 [ 762.148477][T32148] hid-generic 0003:0003:0000.00A0: unknown main item tag 0x0 [ 762.156196][T32148] hid-generic 0003:0003:0000.00A0: unknown main item tag 0x0 [ 762.163943][T32148] hid-generic 0003:0003:0000.00A0: unknown main item tag 0x0 [ 762.171537][T32148] hid-generic 0003:0003:0000.00A0: unknown main item tag 0x0 [ 762.186141][T32148] hid-generic 0003:0003:0000.00A0: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 762.207803][T16313] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.16448'. [ 762.218174][T16313] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 762.372971][T16320] netlink: 12 bytes leftover after parsing attributes in process `syz.1.16451'. [ 762.502621][T16331] SELinux: Context system_u:object_r:ping_exec_t:s0 is not valid (left unmapped). [ 762.650155][T16334] lo speed is unknown, defaulting to 1000 [ 762.804236][ T29] kauditd_printk_skb: 521 callbacks suppressed [ 762.804292][ T29] audit: type=1326 audit(762.787:51236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16326 comm="syz.3.16455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa834dceec9 code=0x7ffc0000 [ 762.821606][T16337] loop3: detected capacity change from 0 to 1024 [ 762.834010][ T29] audit: type=1326 audit(762.787:51237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16326 comm="syz.3.16455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa834dceec9 code=0x7ffc0000 [ 762.920099][T16343] SELinux: failed to load policy [ 762.942371][ T29] audit: type=1326 audit(762.787:51238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16326 comm="syz.3.16455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa834dceec9 code=0x7ffc0000 [ 762.965855][ T29] audit: type=1326 audit(762.787:51239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16326 comm="syz.3.16455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa834dceec9 code=0x7ffc0000 [ 762.977641][T16337] EXT4-fs: test_dummy_encryption option not supported [ 762.989454][ T29] audit: type=1326 audit(762.787:51240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16326 comm="syz.3.16455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa834dceec9 code=0x7ffc0000 [ 763.019981][ T29] audit: type=1326 audit(762.787:51241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16326 comm="syz.3.16455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fa834dceec9 code=0x7ffc0000 [ 763.043787][ T29] audit: type=1326 audit(762.787:51242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16326 comm="syz.3.16455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fa834dcef03 code=0x7ffc0000 [ 763.067142][ T29] audit: type=1326 audit(762.787:51243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16326 comm="syz.3.16455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fa834dcd97f code=0x7ffc0000 [ 763.091272][ T29] audit: type=1326 audit(762.787:51244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16326 comm="syz.3.16455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7fa834dcef57 code=0x7ffc0000 [ 763.115005][ T29] audit: type=1326 audit(762.807:51245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16326 comm="syz.3.16455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa834dcd710 code=0x7ffc0000 [ 763.121160][ T6467] Bluetooth: hci0: command 0x1003 tx timeout [ 763.144672][T11231] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 763.163756][T16348] bond6: option updelay: invalid value (18446744073709531912) [ 763.171368][T16348] bond6: option updelay: allowed values 0 - 2147483647 [ 763.180241][T16348] bond6 (unregistering): Released all slaves [ 763.203209][T16352] bond9: option updelay: invalid value (18446744073709531912) [ 763.211019][T16352] bond9: option updelay: allowed values 0 - 2147483647 [ 763.221212][T16352] bond9 (unregistering): Released all slaves [ 763.274375][T16355] netlink: 12 bytes leftover after parsing attributes in process `syz.2.16465'. [ 763.376639][T16362] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=16362 comm=syz.2.16468 [ 763.392809][T16364] loop4: detected capacity change from 0 to 128 [ 763.425819][ T10] hid-generic 0003:0003:0000.00A1: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 763.433019][T16367] loop2: detected capacity change from 0 to 512 [ 763.442964][T16367] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 763.463716][T16367] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 763.477887][T16367] EXT4-fs error (device loop2): ext4_xattr_block_get:597: inode #15: comm syz.2.16470: corrupted xattr block 19: overlapping e_value [ 763.492910][T16367] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 763.503807][T16367] EXT4-fs error (device loop2): ext4_xattr_block_get:597: inode #15: comm syz.2.16470: corrupted xattr block 19: overlapping e_value [ 763.518393][T16367] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 763.529446][T16367] EXT4-fs error (device loop2): ext4_xattr_block_find:1874: inode #15: comm syz.2.16470: corrupted xattr block 19: overlapping e_value [ 763.578854][T13352] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 763.601384][T16376] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 763.667497][T16382] netlink: 4 bytes leftover after parsing attributes in process `syz.4.16474'. [ 763.785447][T16386] netlink: 4 bytes leftover after parsing attributes in process `syz.0.16475'. [ 763.863989][T16389] loop4: detected capacity change from 0 to 512 [ 763.988129][T16389] EXT4-fs error (device loop4): ext4_xattr_inode_iget:446: comm syz.4.16474: error while reading EA inode 32 err=-116 [ 764.045880][T16399] loop3: detected capacity change from 0 to 1024 [ 764.066697][T16389] EXT4-fs (loop4): Remounting filesystem read-only [ 764.088085][T16389] EXT4-fs warning (device loop4): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 764.115782][T16402] loop1: detected capacity change from 0 to 512 [ 764.142002][T16389] EXT4-fs (loop4): 1 orphan inode deleted [ 764.151021][T16389] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 764.151553][T16399] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 764.176318][T16389] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 764.195613][T16402] EXT4-fs (loop1): orphan cleanup on readonly fs [ 764.203821][T16402] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.16478: bg 0: block 248: padding at end of block bitmap is not set [ 764.219800][T16402] EXT4-fs error (device loop1): ext4_acquire_dquot:6945: comm syz.1.16478: Failed to acquire dquot type 1 [ 764.240848][T16402] EXT4-fs (loop1): 1 truncate cleaned up [ 764.248467][T16402] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 764.280691][ T9031] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 764.317568][T16409] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=16409 comm=syz.3.16480 [ 764.414902][T16413] loop2: detected capacity change from 0 to 1024 [ 764.433944][T16413] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 764.463379][T13352] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 764.564844][T16425] lo speed is unknown, defaulting to 1000 [ 764.666022][T16433] netlink: 24 bytes leftover after parsing attributes in process `syz.3.16487'. [ 764.690240][T16425] siw: device registration error -23 [ 764.697876][T16425] netlink: 28 bytes leftover after parsing attributes in process `syz.4.16486'. [ 764.713473][T16427] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=16427 comm=syz.3.16487 [ 764.727020][T16436] loop2: detected capacity change from 0 to 1024 [ 764.780471][T16436] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 764.797460][T16440] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=16440 comm=syz.0.16492 [ 764.924110][T13352] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 764.927011][T16455] 9p: Unknown access argument ÿÿÿÿ: -22 [ 764.948868][T11172] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 764.987548][ T3267] hid-generic 0003:0003:0000.00A2: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 765.016894][T16465] loop1: detected capacity change from 0 to 512 [ 765.025779][T16465] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 765.086412][T16465] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 765.108356][T16458] loop3: detected capacity change from 0 to 512 [ 765.152989][T16458] EXT4-fs error (device loop3): ext4_xattr_inode_iget:446: comm syz.3.16494: error while reading EA inode 32 err=-116 [ 765.173355][T16465] EXT4-fs error (device loop1): ext4_xattr_block_get:597: inode #15: comm syz.1.16498: corrupted xattr block 19: overlapping e_value [ 765.211811][T16458] EXT4-fs (loop3): Remounting filesystem read-only [ 765.218677][T16458] EXT4-fs warning (device loop3): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 765.238444][T16465] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=15 [ 765.259315][T16465] EXT4-fs error (device loop1): ext4_xattr_block_get:597: inode #15: comm syz.1.16498: corrupted xattr block 19: overlapping e_value [ 765.280989][T16458] EXT4-fs (loop3): 1 orphan inode deleted [ 765.281388][T16465] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=15 [ 765.288303][T16458] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 765.313327][T16458] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 765.352168][T16465] EXT4-fs error (device loop1): ext4_xattr_block_find:1874: inode #15: comm syz.1.16498: corrupted xattr block 19: overlapping e_value [ 765.395406][T11172] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 765.431122][T16484] loop4: detected capacity change from 0 to 512 [ 765.463224][T16494] loop1: detected capacity change from 0 to 128 [ 765.466910][T16493] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=16493 comm=syz.0.16504 [ 765.491036][ T3267] hid-generic 0003:0003:0000.00A3: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 765.507219][T16484] EXT4-fs error (device loop4): ext4_xattr_inode_iget:446: comm syz.4.16501: error while reading EA inode 32 err=-116 [ 765.529417][T16484] EXT4-fs (loop4): Remounting filesystem read-only [ 765.539018][T16484] EXT4-fs warning (device loop4): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 765.550008][T16484] EXT4-fs (loop4): 1 orphan inode deleted [ 765.557361][T16484] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 765.573863][T16484] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 765.712799][T16499] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 765.767213][T16497] loop2: detected capacity change from 0 to 1024 [ 765.776169][T16497] EXT4-fs: test_dummy_encryption option not supported [ 765.795855][T16501] loop1: detected capacity change from 0 to 1024 [ 765.817285][T16501] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 765.842844][T16505] __nla_validate_parse: 10 callbacks suppressed [ 765.842863][T16505] netlink: 24 bytes leftover after parsing attributes in process `syz.3.16508'. [ 765.880223][T16505] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=16505 comm=syz.3.16508 [ 765.938483][T11172] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 766.048012][T16525] loop1: detected capacity change from 0 to 128 [ 766.085176][T16529] loop4: detected capacity change from 0 to 128 [ 766.116869][T32148] hid-generic 0003:0003:0000.00A4: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 766.134650][ T10] hid-generic 0003:0003:0000.00A5: hidraw1: USB HID v0.00 Device [syz0] on syz1 [ 766.231104][T16542] netlink: 24 bytes leftover after parsing attributes in process `syz.0.16523'. [ 766.263560][T16542] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=16542 comm=syz.0.16523 [ 766.316051][T16549] netlink: 28 bytes leftover after parsing attributes in process `syz.1.16525'. [ 766.343645][T16548] bond14: option updelay: invalid value (18446744073709531912) [ 766.351498][T16548] bond14: option updelay: allowed values 0 - 2147483647 [ 766.362109][T16548] bond14 (unregistering): Released all slaves [ 766.397608][T16552] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 766.405071][T16552] IPv6: NLM_F_CREATE should be set when creating new route [ 766.498600][T16561] SELinux: security_context_str_to_sid (†) failed with errno=-22 [ 766.557356][T16568] loop3: detected capacity change from 0 to 512 [ 766.565534][T16568] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 766.573077][T16571] netlink: 20 bytes leftover after parsing attributes in process `syz.0.16535'. [ 766.592022][T16572] loop4: detected capacity change from 0 to 128 [ 766.594023][T16571] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 766.605879][T16571] IPv6: NLM_F_CREATE should be set when creating new route [ 766.617111][ T3267] hid-generic 0003:0003:0000.00A6: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 766.634456][T16568] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 766.662217][T16568] EXT4-fs error (device loop3): ext4_xattr_block_get:597: inode #15: comm syz.3.16532: corrupted xattr block 19: overlapping e_value [ 766.701492][T16568] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 766.727208][T16568] EXT4-fs error (device loop3): ext4_xattr_block_get:597: inode #15: comm syz.3.16532: corrupted xattr block 19: overlapping e_value [ 766.743154][T16568] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 766.764641][T16568] EXT4-fs error (device loop3): ext4_xattr_block_find:1874: inode #15: comm syz.3.16532: corrupted xattr block 19: overlapping e_value [ 766.819348][T16564] loop1: detected capacity change from 0 to 1024 [ 766.826832][T16564] EXT4-fs: test_dummy_encryption option not supported [ 766.882822][ T9031] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 766.892715][T32148] hid-generic 0003:0003:0000.00A7: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 766.904242][T16588] netlink: 24 bytes leftover after parsing attributes in process `syz.4.16540'. [ 766.926324][T16588] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=16588 comm=syz.4.16540 [ 766.994818][T16596] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 767.015842][T16598] bond14: option updelay: invalid value (18446744073709531912) [ 767.023567][T16598] bond14: option updelay: allowed values 0 - 2147483647 [ 767.041808][T16598] bond14 (unregistering): Released all slaves [ 767.087219][T16605] FAULT_INJECTION: forcing a failure. [ 767.087219][T16605] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 767.100925][T16605] CPU: 0 UID: 0 PID: 16605 Comm: syz.4.16547 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 767.100967][T16605] Tainted: [W]=WARN [ 767.100976][T16605] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 767.100993][T16605] Call Trace: [ 767.101002][T16605] [ 767.101013][T16605] __dump_stack+0x1d/0x30 [ 767.101118][T16605] dump_stack_lvl+0xe8/0x140 [ 767.101173][T16605] dump_stack+0x15/0x1b [ 767.101194][T16605] should_fail_ex+0x265/0x280 [ 767.101251][T16605] should_fail+0xb/0x20 [ 767.101287][T16605] should_fail_usercopy+0x1a/0x20 [ 767.101314][T16605] _copy_from_user+0x1c/0xb0 [ 767.101370][T16605] get_nodes+0x104/0x290 [ 767.101400][T16605] __se_sys_migrate_pages+0x75/0x320 [ 767.101439][T16605] __x64_sys_migrate_pages+0x55/0x70 [ 767.101545][T16605] x64_sys_call+0x24d6/0x3000 [ 767.101592][T16605] do_syscall_64+0xd2/0x200 [ 767.101630][T16605] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 767.101695][T16605] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 767.101721][T16605] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 767.101813][T16605] RIP: 0033:0x7f5138a4eec9 [ 767.101828][T16605] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 767.101868][T16605] RSP: 002b:00007f51374af038 EFLAGS: 00000246 ORIG_RAX: 0000000000000100 [ 767.101894][T16605] RAX: ffffffffffffffda RBX: 00007f5138ca5fa0 RCX: 00007f5138a4eec9 [ 767.101907][T16605] RDX: 0000000000000000 RSI: 00000000000000fc RDI: 0000000000000000 [ 767.101919][T16605] RBP: 00007f51374af090 R08: 0000000000000000 R09: 0000000000000000 [ 767.101962][T16605] R10: 0000200000000240 R11: 0000000000000246 R12: 0000000000000001 [ 767.101979][T16605] R13: 00007f5138ca6038 R14: 00007f5138ca5fa0 R15: 00007ffd4da77fb8 [ 767.102008][T16605] [ 767.328219][T16611] loop3: detected capacity change from 0 to 164 [ 767.335453][T16611] iso9660: Unknown parameter 'unhiOe' [ 767.339618][T16610] 9pnet_fd: Insufficient options for proto=fd [ 767.408617][T16611] netlink: 8 bytes leftover after parsing attributes in process `syz.3.16550'. [ 767.436644][T16619] netlink: 24 bytes leftover after parsing attributes in process `syz.4.16554'. [ 767.481156][T16623] lo speed is unknown, defaulting to 1000 [ 767.482952][T16619] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=16619 comm=syz.4.16554 [ 767.562764][T16628] siw: device registration error -23 [ 767.581332][T16628] netlink: 28 bytes leftover after parsing attributes in process `syz.2.16555'. [ 767.610688][T16632] loop3: detected capacity change from 0 to 512 [ 767.642473][T16632] EXT4-fs error (device loop3): ext4_xattr_inode_iget:446: comm syz.3.16559: error while reading EA inode 32 err=-116 [ 767.648428][T16634] loop2: detected capacity change from 0 to 512 [ 767.669621][T16632] EXT4-fs (loop3): Remounting filesystem read-only [ 767.676444][T16632] EXT4-fs warning (device loop3): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 767.687424][T16632] EXT4-fs (loop3): 1 orphan inode deleted [ 767.694031][T16632] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 767.709780][T16632] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 767.719318][T16634] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 767.786598][T16634] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 767.809853][T16643] 9pnet_fd: Insufficient options for proto=fd [ 767.831532][T16634] EXT4-fs error (device loop2): ext4_xattr_block_get:597: inode #15: comm syz.2.16561: corrupted xattr block 19: overlapping e_value [ 767.854068][T16634] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 767.863482][T16634] EXT4-fs error (device loop2): ext4_xattr_block_get:597: inode #15: comm syz.2.16561: corrupted xattr block 19: overlapping e_value [ 767.877824][T16634] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 767.897857][T16634] EXT4-fs error (device loop2): ext4_xattr_block_find:1874: inode #15: comm syz.2.16561: corrupted xattr block 19: overlapping e_value [ 767.969280][T16657] loop4: detected capacity change from 0 to 164 [ 768.000962][ T29] kauditd_printk_skb: 887 callbacks suppressed [ 768.000984][ T29] audit: type=1400 audit(767.967:52131): avc: denied { setopt } for pid=16653 comm="syz.1.16566" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 768.002959][T13352] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 768.044864][T16657] syz.4.16568: attempt to access beyond end of device [ 768.044864][T16657] loop4: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 768.061060][T16657] syz.4.16568: attempt to access beyond end of device [ 768.061060][T16657] loop4: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 768.081541][T16657] netlink: 28 bytes leftover after parsing attributes in process `syz.4.16568'. [ 768.082563][T16664] netlink: 24 bytes leftover after parsing attributes in process `syz.1.16572'. [ 768.114954][ T29] audit: type=1326 audit(768.097:52132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16625 comm="syz.0.16557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3dae97eec9 code=0x7ffc0000 [ 768.138442][ T29] audit: type=1326 audit(768.097:52133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16625 comm="syz.0.16557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3dae97eec9 code=0x7ffc0000 [ 768.162294][ T29] audit: type=1326 audit(768.097:52134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16625 comm="syz.0.16557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3dae97eec9 code=0x7ffc0000 [ 768.190066][T16664] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=16664 comm=syz.1.16572 [ 768.196341][ T29] audit: type=1326 audit(768.097:52135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16625 comm="syz.0.16557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f3dae97eec9 code=0x7ffc0000 [ 768.228541][ T29] audit: type=1326 audit(768.097:52136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16625 comm="syz.0.16557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f3dae97ef03 code=0x7ffc0000 [ 768.252444][ T29] audit: type=1326 audit(768.097:52137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16625 comm="syz.0.16557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f3dae97d97f code=0x7ffc0000 [ 768.275871][ T29] audit: type=1326 audit(768.097:52138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16625 comm="syz.0.16557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f3dae97ef57 code=0x7ffc0000 [ 768.299246][ T29] audit: type=1326 audit(768.117:52139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16625 comm="syz.0.16557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f3dae97d710 code=0x7ffc0000 [ 768.322877][ T29] audit: type=1326 audit(768.117:52140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16625 comm="syz.0.16557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f3dae97db2a code=0x7ffc0000 [ 768.457509][T16683] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 768.464894][T16683] IPv6: NLM_F_CREATE should be set when creating new route [ 768.532256][T16688] loop1: detected capacity change from 0 to 512 [ 768.541221][T16688] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 768.564360][T16688] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 768.591212][T16688] EXT4-fs error (device loop1): ext4_xattr_block_get:597: inode #15: comm syz.1.16579: corrupted xattr block 19: overlapping e_value [ 768.605788][T16688] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=15 [ 768.609353][T16662] loop3: detected capacity change from 0 to 1024 [ 768.621385][T16693] bond10: option updelay: invalid value (18446744073709531912) [ 768.624282][T16662] EXT4-fs: test_dummy_encryption option not supported [ 768.629918][T16693] bond10: option updelay: allowed values 0 - 2147483647 [ 768.630377][T16688] EXT4-fs error (device loop1): ext4_xattr_block_get:597: inode #15: comm syz.1.16579: corrupted xattr block 19: overlapping e_value [ 768.659734][T16693] bond10 (unregistering): Released all slaves [ 768.661714][T16688] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=15 [ 768.679186][T16688] EXT4-fs error (device loop1): ext4_xattr_block_find:1874: inode #15: comm syz.1.16579: corrupted xattr block 19: overlapping e_value [ 768.706658][T11172] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 768.781384][T16702] bond10: option updelay: invalid value (18446744073709531912) [ 768.789051][T16702] bond10: option updelay: allowed values 0 - 2147483647 [ 768.798604][T16702] bond10 (unregistering): Released all slaves [ 768.911070][T16709] loop1: detected capacity change from 0 to 128 [ 768.920631][T16712] dummy0: entered allmulticast mode [ 768.947735][ T3267] hid_parser_main: 134 callbacks suppressed [ 768.947808][ T3267] hid-generic 0003:0003:0000.00A8: unknown main item tag 0x0 [ 768.961779][ T3267] hid-generic 0003:0003:0000.00A8: unknown main item tag 0x0 [ 768.969571][ T3267] hid-generic 0003:0003:0000.00A8: unknown main item tag 0x0 [ 768.977270][ T3267] hid-generic 0003:0003:0000.00A8: unknown main item tag 0x0 [ 768.985169][ T3267] hid-generic 0003:0003:0000.00A8: unknown main item tag 0x0 [ 768.992793][ T3267] hid-generic 0003:0003:0000.00A8: unknown main item tag 0x0 [ 768.994354][T16717] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=16717 comm=syz.4.16587 [ 769.000667][ T3267] hid-generic 0003:0003:0000.00A8: unknown main item tag 0x0 [ 769.022292][ T3267] hid-generic 0003:0003:0000.00A8: unknown main item tag 0x0 [ 769.029880][ T3267] hid-generic 0003:0003:0000.00A8: unknown main item tag 0x0 [ 769.037616][ T3267] hid-generic 0003:0003:0000.00A8: unknown main item tag 0x0 [ 769.054592][ T3267] hid-generic 0003:0003:0000.00A8: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 769.172409][T16720] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 769.179753][T16720] IPv6: NLM_F_CREATE should be set when creating new route [ 769.344580][T16734] loop2: detected capacity change from 0 to 164 [ 769.371301][T16734] syz.2.16595: attempt to access beyond end of device [ 769.371301][T16734] loop2: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 769.406211][T16734] syz.2.16595: attempt to access beyond end of device [ 769.406211][T16734] loop2: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 769.557667][T16746] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=16746 comm=syz.2.16600 [ 769.727222][T16761] loop2: detected capacity change from 0 to 512 [ 769.756275][T16754] loop4: detected capacity change from 0 to 1024 [ 769.764458][T16754] EXT4-fs: test_dummy_encryption option not supported [ 769.781437][T16761] EXT4-fs error (device loop2): ext4_xattr_inode_iget:446: comm syz.2.16605: error while reading EA inode 32 err=-116 [ 769.796059][T16761] EXT4-fs (loop2): Remounting filesystem read-only [ 769.803116][T16761] EXT4-fs warning (device loop2): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 769.813827][T16761] EXT4-fs (loop2): 1 orphan inode deleted [ 769.820569][T16761] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 769.834164][T16761] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 769.899110][T16767] loop2: detected capacity change from 0 to 164 [ 769.911338][T16767] syz.2.16606: attempt to access beyond end of device [ 769.911338][T16767] loop2: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 769.926006][T16767] syz.2.16606: attempt to access beyond end of device [ 769.926006][T16767] loop2: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 769.965208][T16748] loop3: detected capacity change from 0 to 1024 [ 769.972786][T16748] EXT4-fs: test_dummy_encryption option not supported [ 769.985553][T16770] loop2: detected capacity change from 0 to 128 [ 770.005759][ T1037] hid-generic 0003:0003:0000.00A9: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 770.219547][T16774] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=16774 comm=syz.2.16608 [ 770.646296][T16786] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=16786 comm=syz.1.16614 [ 770.848030][T16797] lo speed is unknown, defaulting to 1000 [ 770.962881][T16800] __nla_validate_parse: 15 callbacks suppressed [ 770.962897][T16800] netlink: 28 bytes leftover after parsing attributes in process `syz.0.16618'. [ 771.059124][T16806] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 771.288553][T16811] netlink: 4 bytes leftover after parsing attributes in process `syz.0.16622'. [ 771.452769][T16813] loop1: detected capacity change from 0 to 1024 [ 771.468846][T16813] EXT4-fs: test_dummy_encryption option not supported [ 771.665458][T16818] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 771.737124][T16779] netlink: 48 bytes leftover after parsing attributes in process `syz.4.16610'. [ 771.754780][T16820] loop2: detected capacity change from 0 to 164 [ 771.755349][T16822] netlink: 12 bytes leftover after parsing attributes in process `syz.3.16625'. [ 771.781321][T16820] syz.2.16624: attempt to access beyond end of device [ 771.781321][T16820] loop2: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 771.805111][T16820] syz.2.16624: attempt to access beyond end of device [ 771.805111][T16820] loop2: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 771.824497][T16826] netlink: 24 bytes leftover after parsing attributes in process `syz.3.16627'. [ 771.850483][T16826] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=16826 comm=syz.3.16627 [ 771.971089][T16833] lo speed is unknown, defaulting to 1000 [ 772.001255][T16835] siw: device registration error -23 [ 772.011708][T16835] netlink: 28 bytes leftover after parsing attributes in process `syz.2.16630'. [ 772.048577][T16824] loop4: detected capacity change from 0 to 1024 [ 772.066009][T16824] EXT4-fs: test_dummy_encryption option not supported [ 772.094235][T16841] loop3: detected capacity change from 0 to 128 [ 772.096307][T16842] netlink: 28 bytes leftover after parsing attributes in process `syz.2.16633'. [ 772.127055][ T3388] hid-generic 0003:0003:0000.00AA: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 772.164471][T16846] netlink: 12 bytes leftover after parsing attributes in process `syz.0.16635'. [ 772.213493][T16851] netlink: 12 bytes leftover after parsing attributes in process `syz.0.16636'. [ 772.234525][T16850] netlink: 24 bytes leftover after parsing attributes in process `syz.2.16634'. [ 772.341805][T16855] loop1: detected capacity change from 0 to 164 [ 772.377899][T16850] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=16850 comm=syz.2.16634 [ 772.430528][T16859] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=16859 comm=syz.0.16639 [ 772.486728][T16855] syz.1.16637: attempt to access beyond end of device [ 772.486728][T16855] loop1: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 772.520403][T16855] syz.1.16637: attempt to access beyond end of device [ 772.520403][T16855] loop1: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 772.570353][T16863] loop3: detected capacity change from 0 to 512 [ 772.587808][T16863] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 772.718214][T16863] EXT4-fs (loop3): 1 truncate cleaned up [ 772.725566][T16863] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 772.755358][ T9031] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 772.902139][T16874] loop4: detected capacity change from 0 to 512 [ 772.913051][ T1037] hid-generic 0003:0003:0000.00AB: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 772.944955][T16874] EXT4-fs (loop4): 1 orphan inode deleted [ 772.970734][T16874] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 773.245631][T16885] lo speed is unknown, defaulting to 1000 [ 773.716293][ T6411] __quota_error: 508 callbacks suppressed [ 773.716319][ T6411] Quota error (device loop4): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 773.732394][ T6411] EXT4-fs error (device loop4): ext4_release_dquot:6981: comm kworker/u8:69: Failed to release dquot type 1 [ 773.761082][T16879] ================================================================== [ 773.769665][T16879] BUG: KCSAN: data-race in __lru_add_drain_all / folio_add_lru [ 773.777434][T16879] [ 773.779772][T16879] read-write to 0xffff888237c25ee8 of 1 bytes by task 16901 on cpu 0: [ 773.788037][T16879] folio_add_lru+0xa5/0x1f0 [ 773.792579][T16879] shmem_get_folio_gfp+0x7ab/0xd60 [ 773.798085][T16879] shmem_fault+0xf6/0x250 [ 773.802705][T16879] __do_fault+0xbc/0x200 [ 773.807053][T16879] handle_mm_fault+0xf78/0x2be0 [ 773.812015][T16879] __get_user_pages+0x102a/0x1ed0 [ 773.817190][T16879] __mm_populate+0x243/0x3a0 [ 773.821793][T16879] vm_mmap_pgoff+0x232/0x2e0 [ 773.826419][T16879] ksys_mmap_pgoff+0xc2/0x310 [ 773.831224][T16879] x64_sys_call+0x14a3/0x3000 [ 773.836006][T16879] do_syscall_64+0xd2/0x200 [ 773.840623][T16879] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 773.846620][T16879] [ 773.849031][T16879] read to 0xffff888237c25ee8 of 1 bytes by task 16879 on cpu 1: [ 773.856762][T16879] __lru_add_drain_all+0x17e/0x450 [ 773.862082][T16879] lru_cache_disable+0x1f/0x30 [ 773.866970][T16879] __se_sys_mbind+0x496/0xac0 [ 773.872130][T16879] __x64_sys_mbind+0x78/0x90 [ 773.876755][T16879] x64_sys_call+0x2936/0x3000 [ 773.882143][T16879] do_syscall_64+0xd2/0x200 [ 773.886971][T16879] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 773.892972][T16879] [ 773.895308][T16879] value changed: 0x00 -> 0x01 [ 773.900007][T16879] [ 773.902341][T16879] Reported by Kernel Concurrency Sanitizer on: [ 773.908586][T16879] CPU: 1 UID: 0 PID: 16879 Comm: syz.1.16648 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 773.920159][T16879] Tainted: [W]=WARN [ 773.924159][T16879] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 773.934282][T16879] ================================================================== [ 773.986780][T11676] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 774.074976][T16906] loop4: detected capacity change from 0 to 164