last executing test programs: 3.245689532s ago: executing program 0 (id=2432): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) capset(&(0x7f0000000080)={0x20071026}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r3}, 0x10) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) io_setup(0x8f0, &(0x7f0000002400)) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000600)='./file0\x00', 0x0, &(0x7f0000000640), 0x1, 0x5a8, &(0x7f0000000680)="$eJzs3U1sHFcdAPD/rO18OAl2AxWlSGBRBJGi+iNGZINAJD0hFaM2BS5FDUuysd2svZZ3LdUuh0SotDdUxKXqCVk58CWlUhEtFKkSoohD4cAJgcK9qqlUviQQWjSzs6kbb+yETTyV/ftJTzPzZnfff/Y/M5k3b+INYNcaiYiTEdEXEUcjYiivL+UlLrZL+rrVySszaUmi1XrkrSSSiHh28spM57OSfHog/4B9EXF6NaL01MZ2G8srFyq1WnUxXx5rzi2MNZZX7p+dq0xXp6vz5XJ5vFw+fmLi9m3ro4f3H37u11/4z89f++6Hv/K93zyZxnswX7d+O26XkRjJv5OB2Luuvj+JOH+7GytIut/0RzvXN+Pu6nd+eYdD4iZ9/geXSkXHAABsv/QC4HBEfCy7/h+KvuxqLuLkoa+9PRT/fLzo+AAAAIDetYaG4nPpFAAAANixStkzsElpNH8W4GCUSqOj7Wd4PxCDpVq90Tx6vr40f679rOxwDJTOz9aq4/mzwsMxkKTLE9n8O8vHrluejIi7IuKZof3Z8ujZeu1c0Tc/AAAAYIc7GHH10W+9/MEDN+j/p/48VHSUAAAAQC/S/v+hq4PZn+r6u34+AAAA7Ehp///tb//1t6H/DwAAADtWp///0NRUPDQ11VrNf/9qvj49e2Fm4cSx8dG5pbOjZ+uLC6PT9fp09j/257b+3Fq9vjBxLJaeGGtWG82xxvLKmbn60nzzTPa7XmeqA9uwbcDWHj55tlp0DAAAwPa566Ov/jGJiIuf2Z+V1J58nb467Gx+ABx2r76iAwAK0190AEBh9PGBZIv1+2604uLtjwUAALgzPvkh4/+wWxn/h93L+D/sXsb/YffSxweM/wMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwNZarSRaAAAAwI7WWF65UKnVqotmzJgxc22m6DuTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALyXPTt5ZaZTtqvNV36xXS1xI2unImK4nf/VvLTX9Me+bLovBiJi8G9J9K97XxIRfT22/e97IkbisSdfbF1+KS2R74c9fiy34OKliLin2/GfpLtFDOd7wfX5L2V7Rm9+8sM0/6u/W18n/9url/wP9tj2yx9J8//g3evr5H/3uPfhoiOgSL9/pugIKNIf1oqOgCKdfqToCCjSlz5ddAQU6fm3io6AV09FxHi3/l8p7RZe6+Vf3//ry+4Q9ebISNr/e/ro+rqN/b/SGz02wybWTkV8NiJWN9z/K3VeMtyXLx3K7gcMJOdna9XxiHhfmsMY2JsuT2zSxuUzS491q3/wdJr/Kz9d+NMLP+uUtP10+s6rSm/07333+85VmpVet5u2tUsR9/Z3y39y7f5vcoP7v++/yTZmXv/G493qJ3+V5v+V5zfPP3dS6/sRn+h6/CfXXpPOjTXnFsYayyv3z85VpqvT1flyuTxeLh8/MTGWnQ7GOieFLobWDny1W/3XH0jz/98p+S9OevwPbp7/7PzfWF65UKnVqouNW2/jX2++vtqt/vBTaf4f+Ob/c/7fk3w5C3BPXvdEpdlcnIjYk3xxY/2xW495p+p8H53vK83/kfu6//vfuf5rn/9LG+7/D+fTdP3IJm0OHH/h6W71H78vG/+7+mLr8kuO/2Kk+T+3xfGfvOv4v/WZ5/7yjx91a/vHe9P8v/ZmZ/w3LWn7nbHgtvT4/1QWzJG8xvXf1m42QUXHCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6/0vAAD//wqlOeU=") r6 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) 2.831793712s ago: executing program 1 (id=2436): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x3000010, &(0x7f0000000340)={[{@errors_remount}, {@nodioread_nolock}]}, 0x1, 0x512, &(0x7f0000000380)="$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") 2.54637402s ago: executing program 3 (id=2439): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x5, 0x18, &(0x7f0000000000)=@raw=[@alu={0xc0d30f7f577c45e3, 0x1, 0x1, 0x0, 0x6, 0x4, 0x10}, @printk={@llx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x400}}, @map_idx_val={0x18, 0xa, 0x6, 0x0, 0x9, 0x0, 0x0, 0x0, 0x2}, @generic={0x8, 0x8, 0x8}, @initr0={0x18, 0x0, 0x0, 0x0, 0x37, 0x0, 0x0, 0x0, 0x9}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}], &(0x7f0000000100)='syzkaller\x00', 0x9, 0x0, &(0x7f0000000140), 0x41100, 0x38, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x3, 0x5}, 0x8, 0x10, &(0x7f00000001c0)={0x1, 0xb, 0x3}, 0x10, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)=[0x1, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1], &(0x7f0000000240)=[{0x0, 0x4, 0xf, 0x4}, {0x0, 0x2, 0x0, 0x7}, {0x1, 0x3, 0xe, 0x8}, {0x2, 0x4, 0x3, 0xa}, {0x3, 0x2, 0x4, 0x8}, {0x2, 0x5, 0x5, 0x6}, {0x0, 0x2, 0x6, 0x2}, {0x4, 0x1, 0x7}], 0x10, 0x4}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000380)=r0, 0x4) r1 = signalfd4(r0, &(0x7f0000000140)={[0xadb5]}, 0x8, 0x80000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b00)={0x11, 0x2, &(0x7f0000000440)=@raw=[@map_val={0x18, 0xa, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0xa3f9}], &(0x7f0000000480)='GPL\x00', 0xfffffffd, 0x80, &(0x7f0000000a00)=""/128, 0x8e17cd7603ac5808, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000a80)={0x5, 0x5}, 0x8, 0x10, &(0x7f0000000ac0)={0x3, 0x4, 0x49c, 0xfffffffe}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xc00000}, 0x94) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000580)={'bridge_slave_1\x00', {0x2, 0x4e23, @empty}}) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x800000, &(0x7f00000002c0)={[{@noauto_da_alloc}, {@jqfmt_vfsold}, {@noquota}, {@norecovery}, {}]}, 0x1, 0x4be, &(0x7f0000000540)="$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") utimes(&(0x7f0000000100)='./file3\x00', 0x0) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000004c0)='memory.stat\x00', 0x275a, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) r2 = io_uring_setup(0xad5, &(0x7f00000003c0)={0x0, 0xc45e, 0x8, 0x0, 0x1000}) close(r2) getrandom(&(0x7f0000000040)=""/133, 0xfffffffffffffdde, 0x2) socket(0x10, 0x2, 0x9) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000004"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) io_submit(0x0, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x2002000000, 0x4, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}]) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="4000000010000003000000000000000000000010", @ANYRES32=0x0, @ANYBLOB="0000000000000000200012800b0001006272696467650000100002800c0021"], 0x40}, 0x1, 0x0, 0x0, 0x34041043}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00"], 0x50}}, 0x4008840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff2}, {0xffff, 0x4}, {0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x38, 0x1403, 0x1, 0x70bd2c, 0x25dfdbfc, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) 2.227197332s ago: executing program 0 (id=2445): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000c40)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) sync() 2.159694708s ago: executing program 2 (id=2446): r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x28, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x18) pread64(0xffffffffffffffff, 0x0, 0x0, 0xac8c) preadv(0xffffffffffffffff, &(0x7f0000000640)=[{&(0x7f0000000140)=""/134, 0x86}], 0x1, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='kfree\x00', r3, 0x0, 0x9d}, 0x18) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f00000013c0)=@newtaction={0x898, 0x30, 0x937, 0x0, 0x0, {}, [{0x884, 0x1, [@m_police={0x880, 0x1, 0x0, 0x0, {{0xb}, {0x854, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x1, 0x0, 0x0, 0x400, 0x0, 0x0, 0x3, 0x0, 0x0, 0x80000000, 0x0, 0x5, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x9, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x3, 0x0, 0x80, 0x5, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0xfffffffc, 0x9, 0x4, 0x4, 0x0, 0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff35, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3ffffffc, 0x0, 0x0, 0x1, 0x3, 0x2, 0x0, 0x0, 0x5, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10200, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x1, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x3, 0x0, 0x1]}], [@TCA_POLICE_RATE={0x404, 0x2, [0x7, 0x6, 0xffffffff, 0x7f, 0x401, 0x2, 0x0, 0x2, 0x80000000, 0x7fffffff, 0x5, 0x8, 0x0, 0x7fff, 0x75ba, 0x7fffffff, 0x5, 0xffffffff, 0x7ff, 0x2, 0x9, 0x2, 0x0, 0x1000, 0x1, 0x3, 0x6, 0x0, 0xfa, 0x4, 0x0, 0xf, 0x80000001, 0x7, 0xfffffffb, 0x1, 0x20, 0x3, 0x8, 0x1, 0x2f2, 0x7fff, 0x0, 0x81, 0x206, 0x1ff, 0x7, 0x3, 0x5, 0x3, 0x9, 0x1000, 0x401, 0x1, 0x6, 0x7, 0x2, 0x4, 0x7f, 0x5, 0xfffffffb, 0x1, 0x4, 0x5, 0x8, 0x2000009, 0x9, 0x10, 0x9, 0x7, 0xffffff00, 0x97, 0x0, 0x4, 0x8, 0x8, 0x1, 0x958, 0x0, 0x4, 0x6, 0x7, 0x80, 0x5, 0xe53, 0x0, 0xfffffffe, 0x4, 0x8, 0x9, 0x7fff, 0x30, 0x8, 0xfffffff5, 0x4, 0x9, 0x1, 0x4, 0x7, 0x9, 0x5, 0x7, 0x6, 0x0, 0x7, 0x2, 0x7, 0x3, 0xcdd, 0x2, 0xd67, 0x7, 0x4, 0x25, 0x9dc5, 0x7, 0xfffffff7, 0x2, 0x400, 0x8, 0x0, 0x7, 0x5, 0x9, 0xa, 0xa, 0x9, 0x5, 0xdb5, 0x101, 0x7, 0x74e4, 0x7fff, 0x7, 0x7ff, 0x1, 0xd70, 0x1, 0x8, 0xa, 0x800007, 0x1, 0x82, 0x52e, 0x7, 0x1, 0x5, 0x26, 0x1, 0x1b2a, 0x81, 0x7, 0x1c, 0x767, 0x7, 0x9, 0x10, 0xc2a, 0xff, 0x7, 0x6, 0x7, 0x8003, 0xfffffff4, 0x8, 0x3, 0xfff, 0x8, 0x2, 0x5, 0x6, 0x3, 0xd7c3, 0x2, 0x10000, 0x7fff, 0x5, 0x5, 0x0, 0xfffffff7, 0x4, 0x2, 0x0, 0x6ee1847d, 0x10001, 0x7ff, 0x1, 0xf0, 0x7, 0x2, 0x7, 0x4, 0x6, 0x4, 0x7, 0x0, 0x0, 0x1, 0x4, 0x3, 0xfff, 0x80000001, 0x7, 0x676, 0x3, 0x9, 0x4, 0x4, 0x7fff, 0x4a5, 0x27, 0x6, 0x9, 0x8, 0x4000000, 0x8000, 0xa, 0x9, 0xca000000, 0x2, 0x6, 0x3, 0x7, 0x9, 0x7, 0x65fe, 0x9, 0x6, 0x4, 0x80000000, 0x5, 0x801, 0xb848, 0x6, 0x6, 0x800, 0x7, 0x1, 0xb, 0x80, 0x2, 0x3, 0x6, 0x9, 0x4, 0x4, 0xc, 0x80000001, 0x5, 0x5, 0x10000002, 0xb, 0x7, 0x5, 0x2, 0x4]}], [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x1ff}], [@TCA_POLICE_TBF={0x3c, 0x1, {0x3, 0x1, 0x7, 0x4, 0x1, {0x7, 0x0, 0x3, 0x7, 0x7, 0x80000001}, {0x4, 0x2, 0x1, 0xa, 0x1ff, 0x1c0000}, 0x9, 0xbc, 0xdf72c67}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x898}}, 0x0) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0xfffffffffffffffd, 0xfffffffffffffffd, 0x1) 2.125091451s ago: executing program 1 (id=2447): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x18, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000180), &(0x7f00000001c0)}, 0x20) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000640)={0xffffffffffffffff, 0xe0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000040)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0xa, 0x3, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000380)=[0x0, 0x0, 0x0], 0x0, 0x5d, &(0x7f00000003c0)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000400), &(0x7f00000004c0), 0x8, 0xe3, 0x8, 0x8, &(0x7f0000000500)}}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) membarrier(0x10, 0x0) 2.091596165s ago: executing program 2 (id=2448): futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='pagemap\x00') pread64(r0, 0x0, 0x0, 0x1000000000) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1, 0x0, 0xfffffffffffffffc}, 0x18) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) clock_getres(0x4, &(0x7f0000000080)) write$binfmt_script(r0, &(0x7f0000002040)={'#! ', './file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0', [{0x20, '#'}, {0x20, '$].:#y:V[+}#]+@\xcd{^'}, {0x20, 'c#'}, {0x20, '/dev/ptp0\x00'}, {0x20, '/dev/ptp0\x00'}, {0x20, 'kmem_cache_free\x00'}, {0x20, 'pagemap\x00'}, {0x20, '@.-'}, {0x20, 'pagemap\x00'}], 0xa, "228e9c11ad535d84ec275ba412e105ecf969f6dc93dc7001dfef9568aa62f2547a2d9165efb1d54e7aeeaaccca4f39f17848d3def7f9eaea74ec9521731e06d2265f8e126d13ec68c6497b2557e11f4f4c543e2feef9ab1aeb4f8de05dba0a07c833cf2cea8eee3c2f0d9611c5bebc9e316e14986b101c95ccb2f176dd71a4274460e83616b1758637bbfbef9dc5acde78e81989f1650471ef1dffb358fa96766225bb0e27e2a7f0521b8e7aa1fe1256b4350be71a16ed32a3db4678775750211013caf2ab32d43f59f8f96d3e"}, 0x1124) socket$packet(0x11, 0xa, 0x300) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000240)={'syz_tun\x00', 0x0}) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r6, &(0x7f0000000240)={0x0, 0x810100, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1, 0x0, 0x0, 0x3}, 0x0) bind$packet(r4, &(0x7f0000000300)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @remote}, 0x14) syz_emit_ethernet(0x4a, &(0x7f0000000280)=ANY=[], 0x0) 2.051710249s ago: executing program 0 (id=2449): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c30000"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x7fff}, 0x18) r2 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$selinux_load(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e7578"], 0x65) 1.973188716s ago: executing program 1 (id=2451): bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a500850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) syz_mount_image$iso9660(&(0x7f0000000140), &(0x7f0000000800)='./file0\x00', 0x800, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"/269], 0x2, 0x6b1, &(0x7f0000001100)="$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") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000580)='host1x_channel_submit_complete\x00'}, 0x18) unshare(0x62040200) syz_mount_image$msdos(&(0x7f0000000180), &(0x7f00000006c0)='.\x00', 0x1a4243c, &(0x7f0000000700)=ANY=[@ANYRES16, @ANYRESDEC, @ANYRESHEX, @ANYRES8, @ANYRES32, @ANYRES8, @ANYRES64, @ANYRES8=0x0, @ANYRES64, @ANYRES8], 0x0, 0x0, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f00000007c0)={0xffffffffffffffff, &(0x7f0000000500)="3c0dde00624a494f517016914ee4d27f2c3f31eba781fe9918aa70df3497c5ac763e48", &(0x7f00000017c0)=""/4096}, 0x20) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x30044f1, &(0x7f0000000440)=ANY=[@ANYRES64, @ANYRES8, @ANYRES64, @ANYRES64, @ANYRES8=0x0, @ANYRESOCT], 0x0, 0x23e, &(0x7f0000000bc0)="$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") mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0xa02000000000000, 0x60, &(0x7f0000000000)={'filter\x00', 0xb001, 0x4, 0x3e8, 0x0, 0x0, 0x130, 0x300, 0x300, 0x300, 0x7fffffe, 0x0, {[{{@arp={@local, @empty=0xffffff7f, 0x0, 0x0, 0x0, 0x0, {}, {@mac=@local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'pimreg\x00', 'veth0_to_bridge\x00'}, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f67b23ffdfa27f907a03732da3acbc6518e62a77ca06f258762e88c0d9f9d2f413b94a105f4bdf01425ce81c5d000000000000000500ffffffff00"}}}, {{@arp={@multicast2, @empty, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_to_team\x00', 'ip6tnl0\x00'}, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) 1.969037237s ago: executing program 0 (id=2452): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB='\v\x00\x00\x00\a\x00\x00\x00\b\x00\x00\x00\b\x00\x00\x00'], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000000080), &(0x7f0000000280)=@udp}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000000)={[{@errors_remount}, {@grpquota}]}, 0x4, 0x4f2, &(0x7f0000000c80)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) fallocate(r3, 0x0, 0x0, 0x8000c62) pwrite64(r2, &(0x7f0000000140)='2', 0xfdef, 0xfecc) 1.83302333s ago: executing program 4 (id=2455): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/vmallocinfo\x00', 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xd, &(0x7f0000000780)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback=0x36e084fcb6392193, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) pread64(r0, &(0x7f00000001c0)=""/200, 0xc8, 0x0) 1.557690207s ago: executing program 1 (id=2456): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_JOIN_IBSS(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000080)) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=@newlink={0x3c, 0x10, 0x40d, 0x70bd2d, 0x20000000, {0x0, 0x0, 0x0, 0x0, 0x50504}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x5}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40040}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001400)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x44}}, 0x0) r4 = socket$nl_rdma(0x10, 0x3, 0x14) socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="06c97340a15d8007a06d17de07f1a84f9728424ae45cfdd6044eaec0f3fac8587fbf90d26f11d6d222255d52be51f5f4938d7f912d546765130e91a8d2dda2848986fda755bb6db00dd5ccb0a166983be7a62df6af91882abbd00ed4a874989aa12b8c0e446e32c29af5bba4192c384d325ce7646e7969868535723287d151db1d67a1f7000000008d0a1cfc7128215d63a83df7a07b79a53ccc0c577f66fa5d6a13d09eba3be68666a35dc0dbc4a817f5d1116b15f540e3cc617d450a85aa8fdc82452253fd6347250774c37b8c77e13e5c00"/226, @ANYRES16=0x0, @ANYBLOB="0000fdfffffffbdbdf250b000000"], 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x20008084) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140604000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x38, 0x1403, 0xc23, 0x70bd2a, 0x25dfdbff, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'syz_tun\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x48845}, 0x4000) semget$private(0x0, 0x4, 0x81) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x40000000007, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x40, 0x6}, 0x2, 0xffff, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='net/netstat\x00') preadv(r6, &(0x7f0000000600)=[{&(0x7f0000000780)=""/219, 0xdb}], 0x1, 0x3b, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x4, 0x4, 0x12}, 0x48) 1.53441723s ago: executing program 3 (id=2457): sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c30000"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) syz_clone(0x41aa1000, 0x0, 0x0, 0x0, 0x0, 0x0) 1.380300384s ago: executing program 4 (id=2458): bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000000001000001"], 0x50) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='kfree\x00', r0, 0x0, 0x7}, 0x18) syz_mount_image$iso9660(&(0x7f0000000180), &(0x7f0000000280)='./file0\x00', 0x14806, &(0x7f00000000c0)=ANY=[@ANYRES32=0x0], 0x0, 0x70a, &(0x7f00000232c0)="$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") 1.376593955s ago: executing program 1 (id=2459): syz_emit_ethernet(0xf87, &(0x7f0000001180)=ANY=[@ANYBLOB="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"], 0x0) syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x202) r0 = syz_mount_image$msdos(&(0x7f0000000080), &(0x7f0000000a80)='./file1\x00', 0x2800810, &(0x7f00000025c0)=ANY=[@ANYBLOB="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"], 0x2, 0x15d, &(0x7f0000000f00)="$eJzs27+KE1EUB+AzJmrUJrVYDNhYBbWyVCSCOKAoKbRSiDaJBEwzWgWfxNaHEyRVCuGKzpLshoRl/8zO7ub7mhz4ccM9xZ3LGZj3dz6PhpPpp8mreXSyLNqPI49FFt24Eq2ozAIAuEwWKcXvlFK6PosbPyKl1PSOAIC6uf8BYPccev8/amhjAEBtzP8AsHvevH334klR9F/neSfi16wclIPqt8qfPS/69/P/uqtV87IctJb5gyrPD+ZX4+Ze/nBjfi3u3a3yf9nTl8VafiuG9bcPAAAAO6GXL22c73u9bXlV7Xs/sDa/t+N2+8zaAACOYPr12+jDePzxi0JxQYs/KaVjLP/+szoC56SL0y2yiDjZ/zT9ZALqtjr0Te8EAAAAAAAAAAAAAADYpt6vkVpNtwcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAb/Q0AAP//LjxONw==") writev(0xffffffffffffffff, &(0x7f0000001740)=[{&(0x7f0000000040)="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", 0x495}], 0x1) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdirat(r2, &(0x7f0000000000)='./bus/file0\x00', 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000480)={'vlan1\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x60000080}, 0x20000000) ioctl$BTRFS_IOC_SCRUB_CANCEL(r3, 0x941c, 0x0) renameat2(r2, &(0x7f0000000240)='./bus/file0\x00', r2, &(0x7f00000001c0)='./file0\x00', 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000202300800000000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r4, 0x0, 0x10001}, 0x18) set_robust_list(&(0x7f0000000100)={0x0, 0x1}, 0x18) mmap(&(0x7f000011f000/0x3000)=nil, 0x3000, 0x100000c, 0x11012, r0, 0xc2237000) r5 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r5, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r5, &(0x7f0000006b80)=[{{0x0, 0x0, 0x0}, 0x6}, {{&(0x7f0000000500)=@ethernet={0x0, @remote}, 0x80, &(0x7f00000022c0)=[{&(0x7f0000000580)=""/17, 0x11}, {&(0x7f00000005c0)=""/48, 0x30}, {&(0x7f0000002240)=""/16, 0x10}, {&(0x7f0000000640)=""/80, 0x50}, {&(0x7f00000006c0)=""/249, 0xf9}, {&(0x7f0000002140)=""/158, 0x9e}, {&(0x7f00000007c0)=""/123, 0x7b}, {&(0x7f0000006dc0)=""/196, 0xc4}], 0x8, &(0x7f0000002740)=""/4096, 0x1000}, 0x100}, {{0x0, 0x0, &(0x7f0000003940)=[{&(0x7f0000002340)=""/125, 0x7d}, {&(0x7f00000023c0)=""/50, 0x32}, {&(0x7f0000002200)=""/39, 0x27}, {&(0x7f0000002440)=""/117, 0x75}, {&(0x7f00000024c0)=""/179, 0xb3}, {&(0x7f0000003740)=""/248, 0xf8}, {&(0x7f0000002580)}, {&(0x7f0000000600)=""/36, 0x24}, {&(0x7f0000003880)=""/179, 0xb3}], 0x9, &(0x7f0000003a00)=""/184, 0xb8}, 0x7}, {{&(0x7f0000003ac0)=@xdp, 0x80, &(0x7f0000004b80)=[{&(0x7f0000003b40)=""/16, 0x10}, {&(0x7f0000006ec0)=""/4096, 0x1000}], 0x2, &(0x7f0000004bc0)=""/86, 0x56}, 0x3}, {{&(0x7f0000004c40)=@qipcrtr, 0x80, &(0x7f0000005200)=[{&(0x7f0000004cc0)=""/213, 0xd5}, {&(0x7f0000003b80)=""/216, 0xd8}, {&(0x7f0000006d00)=""/134, 0x86}, {&(0x7f0000004f40)=""/29, 0x1d}, {&(0x7f0000004f80)=""/167, 0xa7}, {&(0x7f0000005040)=""/74, 0x4a}, {&(0x7f0000005340)=""/52, 0x34}, {&(0x7f0000005100)=""/242, 0xf2}], 0x8, &(0x7f0000005380)=""/250, 0xfa}, 0x6}, {{0x0, 0x0, &(0x7f0000006a00)=[{&(0x7f0000005280)=""/192, 0xc0}, {&(0x7f0000005480)=""/102, 0x66}, {&(0x7f0000005500)=""/4096, 0x1000}, {&(0x7f0000006500)=""/77, 0x4d}, {&(0x7f0000003c80)=""/147, 0x93}, {&(0x7f0000006640)=""/61, 0x3d}, {&(0x7f0000006680)=""/141, 0x8d}, {&(0x7f0000006740)=""/146, 0x92}, {&(0x7f0000006800)=""/238, 0xee}, {&(0x7f0000006900)=""/240, 0xf0}], 0xa, &(0x7f0000006ac0)=""/150, 0x96}, 0x2}], 0x6, 0x1, 0x0) ioctl$SIOCGSTAMPNS(r5, 0x8907, 0x0) sendto$inet6(r5, 0x0, 0x0, 0x20000001, &(0x7f0000000300)={0xa, 0x4e20, 0x5, @mcast1}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x18, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x43, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe834}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000840)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x5, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.295547483s ago: executing program 4 (id=2460): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f00000047c0)={0x60, r1, 0x405, 0x70bd2b, 0x25dfdbfe, {}, [{{0x8, 0x1, r2}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x44084) (fail_nth: 1) 1.077154534s ago: executing program 0 (id=2461): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x18, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000180), &(0x7f00000001c0)}, 0x20) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000640)={0xffffffffffffffff, 0xe0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000040)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0xa, 0x3, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000380)=[0x0, 0x0, 0x0], 0x0, 0x5d, &(0x7f00000003c0)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000400), &(0x7f00000004c0), 0x8, 0xe3, 0x8, 0x8, &(0x7f0000000500)}}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) membarrier(0x10, 0x0) 1.02131243s ago: executing program 4 (id=2462): socket$inet_udp(0x2, 0x2, 0x0) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10208}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00'}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x0, 0x1000000}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2) 771.127715ms ago: executing program 0 (id=2463): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$bt_hci(r3, &(0x7f0000000000)={0x27}, 0x74) sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x14, 0x0, 0x9, 0x801, 0x0, 0x0, {0x0, 0x0, 0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x801}, 0x2000000) 730.421528ms ago: executing program 2 (id=2464): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="611230000000000061134c0000000000bf2000000000000015000200071b1750bd030100000000009500000000000000bc26080000000000bf67000000000000070300000fff0700670200000300000016060a000ee600f0bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a82983d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf719506d2d6b05fe7030586"], &(0x7f0000000100)='GPL\x00'}, 0x48) 641.386157ms ago: executing program 2 (id=2465): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000410"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000000c0)='kmem_cache_free\x00', r1}, 0x18) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000140)={0x28, 0x0, 0x0, @host}, 0x10) 640.386467ms ago: executing program 4 (id=2466): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000240000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r0}, 0x18) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000000180)={0x7a2a, 0x9, 0x5a}, 0x8) sendmsg$inet_sctp(r1, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000640)="0c4a522d120d68306fc7e0f85f124d89a52a6a68d513ab1f0be2e6a230779569dcafbb154e94e72f47a2f08f31b0508665f7c8377d09adf4b06173d31011a9112f1b78bd", 0x44}], 0x1, 0x0, 0x0, 0x2804c044}, 0x0) shutdown(r1, 0x1) 533.414758ms ago: executing program 2 (id=2467): perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000001a80)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4001}}, {{&(0x7f0000000240)=@abs={0x1, 0x0, 0x4e23}, 0x6e, 0x0, 0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18, 0x8000}}], 0x2, 0x0) mq_notify(0xffffffffffffffff, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = dup(r1) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="640000000206030000000000fffff0000000000016000300686173683a6e65742c706f72742c6e6574000000050004000000000005000500020000000900020073797a3200000000050001000700000014000780080013400000000008001240"], 0x64}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x1c, 0x3, 0x6, 0x101, 0x0, 0x0, {0x2, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000800}, 0x4) 521.680969ms ago: executing program 4 (id=2468): syz_open_dev$usbfs(0x0, 0x204, 0x2) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000001040)=@raw={'raw\x00', 0x8, 0x3, 0x2c8, 0x130, 0xa, 0xd0e0000, 0x0, 0x100, 0x230, 0x1d8, 0x1d8, 0x230, 0x1d8, 0x3, 0x0, {[{{@ip={@local, @multicast1, 0xffffffff, 0xff, 'batadv0\x00', 'veth1_to_team\x00', {}, {0xff}, 0x1, 0x3, 0x10}, 0x0, 0xd0, 0x130, 0x0, {}, [@common=@unspec=@quota={{0x38}, {0x0, 0x0, 0x7, {0xb}}}, @common=@icmp={{0x28}, {0x8, "1cdf", 0x1}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @empty, 0x7008, 0x4, [0x22, 0x38, 0x16, 0x35, 0x14, 0x8, 0x3, 0x8, 0x1f, 0x6, 0x2b, 0x1, 0xa, 0x22, 0x15, 0x23], 0x2, 0xb, 0x40000007}}}, {{@uncond, 0x3202, 0xc0, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x2}}, @inet=@rpfilter={{0x28}, {0x6}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x10, 0x7, {0x7}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x328) r2 = socket(0x10, 0x3, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r3, 0x541c, &(0x7f00000000c0)={0x2, {0x2, 0x0, 0x300, 0x0, 0x8, 0x300}}) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="400000001000030400"/19, @ANYRES64=r4, @ANYRES16=r4, @ANYRES32=r4], 0x40}}, 0x0) ppoll(&(0x7f0000000400)=[{r4, 0x4011}], 0x1, 0x0, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002a00)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000001a00)=""/4090, 0xffa}, {&(0x7f0000000040)=""/17, 0x11}, {&(0x7f0000000140)=""/34, 0x22}, {&(0x7f0000000280)=""/183, 0xb7}], 0x4}, 0x60}], 0x1, 0x10042, 0x0) 495.547041ms ago: executing program 3 (id=2469): syz_open_procfs(0x0, &(0x7f0000000180)='net/vlan/vlan0\x00') syz_open_procfs(0x0, &(0x7f0000000000)='net/vlan/vlan0\x00') socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x19}, 0x94) (async) socket(0x1e, 0x1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='kmem_cache_free\x00', r2, 0x0, 0x3}, 0x18) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0x4, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8}, [@generic={0x81, 0x1, 0x1, 0xbe}]}, &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r0, 0x8982, &(0x7f0000002800)={0x1, 'vlan0\x00'}) 451.437395ms ago: executing program 1 (id=2470): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x5, 0x1d, &(0x7f0000000000)=@raw=[@alu={0xc0d30f7f577c45e3, 0x1, 0x1, 0x0, 0x6, 0x4, 0x10}, @printk={@llx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x400}}, @map_idx_val={0x18, 0xa, 0x6, 0x0, 0x9, 0x0, 0x0, 0x0, 0x2}, @generic={0x8, 0x8, 0x8}, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x37, 0x0, 0x0, 0x0, 0x9}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}], &(0x7f0000000100)='syzkaller\x00', 0x9, 0x0, &(0x7f0000000140), 0x41100, 0x38, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x3, 0x5}, 0x8, 0x10, &(0x7f00000001c0)={0x1, 0xb, 0x3}, 0x10, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)=[0x1, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1], &(0x7f0000000240)=[{0x0, 0x4, 0xf, 0x4}, {0x0, 0x2, 0x0, 0x7}, {0x1, 0x3, 0xe, 0x8}, {0x2, 0x4, 0x3, 0xa}, {0x3, 0x2, 0x4, 0x8}, {0x2, 0x5, 0x5, 0x6}, {0x0, 0x2, 0x6, 0x2}, {0x4, 0x1, 0x7}], 0x10, 0x4}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) r1 = signalfd4(r0, &(0x7f0000000140)={[0xadb5]}, 0x8, 0x80000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b00)={0x11, 0x2, &(0x7f0000000440)=@raw=[@map_val={0x18, 0xa, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0xa3f9}], &(0x7f0000000480)='GPL\x00', 0xfffffffd, 0x80, &(0x7f0000000a00)=""/128, 0x8e17cd7603ac5808, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000a80)={0x5, 0x5}, 0x8, 0x10, &(0x7f0000000ac0)={0x3, 0x4, 0x49c, 0xfffffffe}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xc00000}, 0x94) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000580)={'bridge_slave_1\x00', {0x2, 0x4e23, @empty}}) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x800000, &(0x7f00000002c0)={[{@noauto_da_alloc}, {@jqfmt_vfsold}, {@noquota}, {@norecovery}, {}]}, 0x1, 0x4be, &(0x7f0000000540)="$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") utimes(&(0x7f0000000100)='./file3\x00', 0x0) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000004c0)='memory.stat\x00', 0x275a, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) r3 = io_uring_setup(0xad5, &(0x7f00000003c0)={0x0, 0xc45e, 0x8, 0x0, 0x1000}) close(r3) getrandom(&(0x7f0000000040)=""/133, 0xfffffffffffffdde, 0x2) socket(0x10, 0x2, 0x9) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000004"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r4}, 0x10) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) io_submit(0x0, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x2002000000, 0x4, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}]) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="4000000010000003000000000000000000000010", @ANYRES32=0x0, @ANYBLOB="0000000000000000200012800b0001006272696467650000100002800c0021"], 0x40}, 0x1, 0x0, 0x0, 0x34041043}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00"], 0x50}}, 0x4008840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff2}, {0xffff, 0x4}, {0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) r7 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x38, 0x1403, 0x1, 0x70bd2c, 0x25dfdbfc, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) sendmsg$RDMA_NLDEV_CMD_SET(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="24000000028403000000000000dbdf250900020073797a30000000000800010000200000"], 0x24}, 0x1, 0x0, 0x0, 0x24000841}, 0x20000000) 279.136962ms ago: executing program 2 (id=2471): r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x1f0519, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x3}, 0x6025, 0x4005, 0xb, 0x3, 0x2, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x4000011, r0, 0x0) perf_event_open(&(0x7f0000000140)={0x3, 0x80, 0x26, 0x1, 0x0, 0x4, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x1, @perf_config_ext={0x8, 0x6}, 0x120, 0x10000, 0x33f8, 0x1, 0x8, 0x20007, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xfffffffffffffffb, r0, 0x2) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000001c0)={&(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fee000/0x12000)=nil, &(0x7f0000ff3000/0x2000)=nil, 0x0, 0x0, r1}, 0x68) r2 = openat$selinux_policy(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETFILTEREBPF(0xffffffffffffffff, 0x800454e1, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) r3 = accept$phonet_pipe(r2, &(0x7f0000000080), &(0x7f0000000240)=0x10) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r3, 0x8982, &(0x7f0000000300)={0x3, 'bond_slave_1\x00', {0x6}, 0x1}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x2c2b01, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='rss_stat\x00', r6}, 0x10) r7 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0x12, r7, 0x0) r8 = msgget$private(0x0, 0x0) msgsnd(r8, &(0x7f0000000480)=ANY=[], 0x2000, 0x0) msgrcv(r8, &(0x7f0000001080)={0x0, ""/1}, 0x2000, 0x2, 0x3000) 156.203595ms ago: executing program 3 (id=2472): perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000001a80)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4001}}, {{&(0x7f0000000240)=@abs={0x1, 0x0, 0x4e23}, 0x6e, 0x0, 0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18, 0x8000}}], 0x2, 0x0) mq_notify(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1d459d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x183, 0x6}, 0x6025, 0x4005, 0xb, 0x0, 0x1, 0x1, 0xb, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000002040)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) dup(0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='kfree\x00', r2}, 0x18) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05000000000000000000070000010900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000050c0200000c0a01030000000000000000070000080900020073797a31000000000900010073797a3000000000e0010380dc010080080003400000000273000b802c0001800a0001006c696d69740000001c0002800c00014000000000000000030c000240000000000000000e14000180090001006c617374"], 0x290}}, 0x0) 72.381333ms ago: executing program 3 (id=2473): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020148100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r1) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x14, r2, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@void, @void}}}, 0x14}}, 0x4000054) unshare(0x2c020400) mq_timedsend(0xffffffffffffffff, 0x0, 0x44, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="8b332ebd700000000000150000000c0004000080"], 0x28}}, 0x40000) 0s ago: executing program 3 (id=2474): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, &(0x7f00000000c0)}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000001850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) setresuid(0x0, 0xee00, 0x0) 0s ago: executing program 3 (id=2475): bpf$TOKEN_CREATE(0x24, &(0x7f0000000200), 0x8) (async) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000f7850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) (async) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff}, 0x84000) (async) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) (async) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000040)="3700000013000318680907070000000f0000ff3f13000000170a001700000000040037000d00030001362564aa58b9a6c011f6bbf44dc4", 0x37}], 0x1) (async) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000004c0)=@bpf_lsm={0x1d, 0x5, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x246d}, [@call={0x85, 0x0, 0x0, 0x11}, @call={0x85, 0x0, 0x0, 0xc0}]}, &(0x7f0000000340)='syzkaller\x00', 0xfff, 0x53, &(0x7f0000000380)=""/83, 0x40f00, 0x0, '\x00', 0x0, 0x1b, r2, 0x8, &(0x7f0000000400)={0x2, 0x3}, 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x0, &(0x7f0000000440)=[{0x3, 0x1, 0x5}, {0x4, 0x4, 0x8, 0xa}, {0x4, 0x4, 0x7, 0x4}, {0x4, 0x3, 0xa, 0x7}, {0x4, 0x2, 0x7, 0x7}], 0x10, 0x9}, 0x94) ioctl$TUNSETFILTEREBPF(r2, 0x800454e1, &(0x7f0000000580)=r4) kernel console output (not intermixed with test programs): 338] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 146.770258][ T8339] Unable to read rock-ridge attributes [ 146.781442][ T8339] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 146.966045][ T8349] loop3: detected capacity change from 0 to 164 [ 146.989354][ T8349] Unable to read rock-ridge attributes [ 147.025328][ T10] hid-generic 0000:0000:0000.001F: hidraw0: HID v0.00 Device [sy] on syz0 [ 147.067827][ T8349] lo speed is unknown, defaulting to 1000 [ 147.075085][ T8356] Unable to read rock-ridge attributes [ 147.093312][ T8357] loop0: detected capacity change from 0 to 512 [ 147.097767][ T8354] fido_id[8354]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 147.113460][ T8358] loop4: detected capacity change from 0 to 512 [ 147.123118][ T8357] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 147.138190][ T8356] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 147.211583][ T8358] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 147.213462][ T8357] ext4 filesystem being mounted at /348/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 147.239495][ T8358] EXT4-fs (loop4): orphan cleanup on readonly fs [ 147.251820][ T8369] hub 9-0:1.0: USB hub found [ 147.294625][ T8357] EXT4-fs error (device loop0): __ext4_new_inode:1279: comm syz.0.1712: failed to insert inode 16: doubly allocated? [ 147.295695][ T8369] hub 9-0:1.0: 8 ports detected [ 147.335643][ T8371] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1716'. [ 147.345944][ T8371] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1716'. [ 147.367304][ T8358] EXT4-fs error (device loop4): ext4_do_update_inode:5632: inode #16: comm syz.4.1707: corrupted inode contents [ 147.562692][ T8358] EXT4-fs (loop4): Remounting filesystem read-only [ 147.570664][ T8378] siw: device registration error -23 [ 147.598112][ T8358] EXT4-fs (loop4): 1 truncate cleaned up [ 147.604378][ T6328] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 147.615063][ T6328] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 147.627774][ T8381] loop2: detected capacity change from 0 to 512 [ 147.635391][ T6328] EXT4-fs (loop4): Quota write (off=8, len=24) cancelled because transaction is not started [ 147.645969][ T8381] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 147.687430][ T8381] ext4 filesystem being mounted at /336/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 147.706567][ T8381] EXT4-fs error (device loop2): __ext4_new_inode:1279: comm syz.2.1719: failed to insert inode 16: doubly allocated? [ 147.783514][ T8388] lo speed is unknown, defaulting to 1000 [ 147.934575][ T8391] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1719'. [ 147.943554][ T8391] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1719'. [ 148.051340][ T8391] siw: device registration error -23 [ 148.519148][ T3419] hid-generic 0000:0000:0000.0020: hidraw0: HID v0.00 Device [sy] on syz0 [ 148.528351][ T8401] netlink: 'syz.2.1723': attribute type 10 has an invalid length. [ 148.563600][ T8401] rdma_rxe: rxe_newlink: failed to add syz_tun [ 148.579322][ T8402] fido_id[8402]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 149.072271][ T8418] hub 9-0:1.0: USB hub found [ 149.095471][ T8418] hub 9-0:1.0: 8 ports detected [ 149.520721][ T8428] loop3: detected capacity change from 0 to 512 [ 149.529248][ T8428] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 149.557213][ T8428] ext4 filesystem being mounted at /365/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 149.579906][ T8428] EXT4-fs error (device loop3): __ext4_new_inode:1279: comm syz.3.1734: failed to insert inode 16: doubly allocated? [ 149.754796][ T8448] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1734'. [ 149.763784][ T8448] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1734'. [ 149.895504][ T8448] siw: device registration error -23 [ 150.046880][ T8457] loop4: detected capacity change from 0 to 512 [ 150.248681][ T8461] loop2: detected capacity change from 0 to 512 [ 150.374103][ T8461] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 150.408425][ T29] kauditd_printk_skb: 124 callbacks suppressed [ 150.408444][ T29] audit: type=1326 audit(1760907016.103:3954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8464 comm="syz.1.1746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f2aaeefc9 code=0x7ffc0000 [ 150.434611][ T8461] ext4 filesystem being mounted at /344/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 150.438984][ T29] audit: type=1326 audit(1760907016.103:3955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8464 comm="syz.1.1746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f2aaeefc9 code=0x7ffc0000 [ 150.474599][ T29] audit: type=1326 audit(1760907016.153:3956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8464 comm="syz.1.1746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9f2aaeefc9 code=0x7ffc0000 [ 150.498862][ T29] audit: type=1326 audit(1760907016.153:3957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8464 comm="syz.1.1746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f2aaeefc9 code=0x7ffc0000 [ 150.522381][ T29] audit: type=1326 audit(1760907016.153:3958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8464 comm="syz.1.1746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f2aaeefc9 code=0x7ffc0000 [ 150.547002][ T29] audit: type=1326 audit(1760907016.153:3959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8464 comm="syz.1.1746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9f2aaeefc9 code=0x7ffc0000 [ 150.570461][ T29] audit: type=1326 audit(1760907016.153:3960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8464 comm="syz.1.1746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f2aaeefc9 code=0x7ffc0000 [ 150.594792][ T29] audit: type=1326 audit(1760907016.153:3961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8464 comm="syz.1.1746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f2aaeefc9 code=0x7ffc0000 [ 150.618273][ T29] audit: type=1326 audit(1760907016.153:3962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8464 comm="syz.1.1746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f9f2aaeefc9 code=0x7ffc0000 [ 150.642278][ T29] audit: type=1326 audit(1760907016.153:3963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8464 comm="syz.1.1746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f2aaeefc9 code=0x7ffc0000 [ 150.643026][ T8461] EXT4-fs error (device loop2): __ext4_new_inode:1279: comm syz.2.1744: failed to insert inode 16: doubly allocated? [ 150.750456][ T8468] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1744'. [ 150.759422][ T8468] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1744'. [ 150.769283][ T8468] siw: device registration error -23 [ 150.787701][ T8474] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1747'. [ 150.820463][ T8474] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1747'. [ 150.880961][ T8482] loop0: detected capacity change from 0 to 164 [ 150.899373][ T8482] Unable to read rock-ridge attributes [ 150.922334][ T8480] loop4: detected capacity change from 0 to 2048 [ 150.932896][ T8485] SELinux: policydb version 0 does not match my version range 15-35 [ 150.955762][ T8482] lo speed is unknown, defaulting to 1000 [ 150.964488][ T8485] SELinux: failed to load policy [ 150.983841][ T8489] Unable to read rock-ridge attributes [ 150.989782][ T8489] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 151.029667][ T8491] hub 9-0:1.0: USB hub found [ 151.034436][ T8491] hub 9-0:1.0: 8 ports detected [ 151.144440][ T8493] loop1: detected capacity change from 0 to 764 [ 151.164889][ T8493] iso9660: Unknown parameter 'ÿÿÿÿÿÿÿÿ01777777777777777777777' [ 151.250240][ T8498] netlink: 'syz.3.1758': attribute type 10 has an invalid length. [ 151.278220][ T8498] rdma_rxe: rxe_newlink: failed to add syz_tun [ 152.353836][ T8511] loop2: detected capacity change from 0 to 512 [ 152.362848][ T8510] loop1: detected capacity change from 0 to 512 [ 152.719757][ T8540] loop2: detected capacity change from 0 to 1024 [ 152.738771][ T8540] EXT4-fs (loop2): unsupported inode size: 143 [ 152.745023][ T8540] EXT4-fs (loop2): blocksize: 1024 [ 152.842294][ T8546] lo speed is unknown, defaulting to 1000 [ 152.913175][ T8549] loop0: detected capacity change from 0 to 512 [ 152.965000][ T8550] loop1: detected capacity change from 0 to 128 [ 152.980408][ T3597] hid_parser_main: 150 callbacks suppressed [ 152.980430][ T3597] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0 [ 152.993831][ T3597] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0 [ 153.001308][ T3597] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0 [ 153.009517][ T3597] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0 [ 153.016970][ T3597] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0 [ 153.024412][ T3597] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0 [ 153.031814][ T3597] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0 [ 153.040028][ T3597] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0 [ 153.047486][ T3597] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0 [ 153.054911][ T3597] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0 [ 153.246144][ T3597] hid-generic 0000:0000:0000.0021: hidraw0: HID v0.00 Device [sy] on syz0 [ 153.279444][ T8558] fido_id[8558]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 153.467569][ T8567] hub 9-0:1.0: USB hub found [ 153.472357][ T8567] hub 9-0:1.0: 8 ports detected [ 153.541329][ T3597] hid-generic 0000:0000:0000.0022: hidraw0: HID v0.00 Device [sy] on syz0 [ 153.599376][ T8574] fido_id[8574]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 153.643080][ T8581] loop0: detected capacity change from 0 to 164 [ 153.653489][ T8581] Unable to read rock-ridge attributes [ 153.659998][ T8581] Unable to read rock-ridge attributes [ 153.666065][ T8581] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 153.742897][ T8584] loop0: detected capacity change from 0 to 2048 [ 153.770213][ T8584] __nla_validate_parse: 2 callbacks suppressed [ 153.770234][ T8584] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1784'. [ 153.788978][ T8584] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1784'. [ 153.839444][ T8587] loop2: detected capacity change from 0 to 512 [ 154.276322][ T8596] loop0: detected capacity change from 0 to 512 [ 154.284857][ T8596] msdos: Unknown parameter 'nodot' [ 154.309787][ T8598] hub 9-0:1.0: USB hub found [ 154.316259][ T8598] hub 9-0:1.0: 8 ports detected [ 154.326550][ T8596] mmap: syz.0.1787 (8596) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 154.595262][ T8609] loop3: detected capacity change from 0 to 512 [ 154.783726][ T1031] hid-generic 0000:0000:0000.0023: hidraw0: HID v0.00 Device [sy] on syz0 [ 154.907907][ T8615] fido_id[8615]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 154.992381][ T8622] loop0: detected capacity change from 0 to 764 [ 154.998196][ T8620] lo speed is unknown, defaulting to 1000 [ 155.054308][ T8623] loop4: detected capacity change from 0 to 512 [ 155.071161][ T8622] iso9660: Unknown parameter 'ÿÿÿÿÿÿÿÿ01777777777777777777777' [ 155.227884][ T8625] loop1: detected capacity change from 0 to 2048 [ 155.351164][ T8625] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1797'. [ 155.401035][ T8625] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1797'. [ 155.501094][ T8638] loop0: detected capacity change from 0 to 1024 [ 155.545018][ T8638] EXT4-fs: Ignoring removed orlov option [ 155.646694][ T29] kauditd_printk_skb: 49 callbacks suppressed [ 155.646711][ T29] audit: type=1400 audit(1760907021.343:4013): avc: denied { write } for pid=8637 comm="syz.0.1799" name="urandom" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 155.783456][ T8665] hub 9-0:1.0: USB hub found [ 155.796105][ T8638] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4193: comm syz.0.1799: Allocating blocks 449-513 which overlap fs metadata [ 155.813793][ T8665] hub 9-0:1.0: 8 ports detected [ 155.840473][ T8638] EXT4-fs (loop0): pa ffff888106ddca80: logic 256, phys. 385, len 8 [ 155.848605][ T8638] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:5444: group 0, free 0, pa_free 4 [ 156.126228][ T8691] loop1: detected capacity change from 0 to 512 [ 156.155015][ T8691] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 156.191492][ T8691] EXT4-fs (loop1): orphan cleanup on readonly fs [ 156.199786][ T8691] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #16: comm syz.1.1802: corrupted inode contents [ 156.229865][ T8691] EXT4-fs (loop1): Remounting filesystem read-only [ 156.272538][ T8691] EXT4-fs (loop1): 1 truncate cleaned up [ 156.279558][ T6345] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 156.290153][ T6345] Quota error (device loop1): write_blk: dquota write failed [ 156.297555][ T6345] Quota error (device loop1): remove_free_dqentry: Can't write block (5) with free entries [ 156.308235][ T6345] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 156.318884][ T6345] Quota error (device loop1): write_blk: dquota write failed [ 156.326310][ T6345] Quota error (device loop1): free_dqentry: Can't move quota data block (5) to free list [ 156.481687][ T8724] SELinux: policydb version 0 does not match my version range 15-35 [ 156.511597][ T8724] SELinux: failed to load policy [ 156.517037][ T9] hid-generic 0000:0000:0000.0024: hidraw0: HID v0.00 Device [sy] on syz0 [ 156.539637][ T6345] EXT4-fs (loop1): Quota write (off=8, len=24) cancelled because transaction is not started [ 156.550577][ T6345] Quota error (device loop1): v2_write_file_info: Can't write info structure [ 156.570861][ T8736] fido_id[8736]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 156.612509][ T29] audit: type=1326 audit(1760907022.303:4014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8738 comm="syz.4.1808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a8c61efc9 code=0x7ffc0000 [ 156.636856][ T29] audit: type=1326 audit(1760907022.303:4015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8738 comm="syz.4.1808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7f8a8c61efc9 code=0x7ffc0000 [ 156.643341][ T6345] Quota error (device loop1): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 156.660376][ T29] audit: type=1326 audit(1760907022.303:4016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8738 comm="syz.4.1808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a8c61efc9 code=0x7ffc0000 [ 156.739472][ T8749] loop3: detected capacity change from 0 to 1024 [ 156.760889][ T8749] EXT4-fs: Ignoring removed bh option [ 156.838222][ T8754] loop4: detected capacity change from 0 to 1024 [ 156.869878][ T8749] EXT4-fs: inline encryption not supported [ 156.879037][ T8754] EXT4-fs: Ignoring removed bh option [ 156.904480][ T8749] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 156.914361][ T8749] EXT4-fs (loop3): group descriptors corrupted! [ 156.923465][ T8754] EXT4-fs: inline encryption not supported [ 156.940475][ T8754] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 156.950336][ T8754] EXT4-fs (loop4): group descriptors corrupted! [ 156.977623][ T8750] wg2: entered promiscuous mode [ 156.982536][ T8750] wg2: entered allmulticast mode [ 157.016012][ T8744] wg2: left promiscuous mode [ 157.020674][ T8744] wg2: left allmulticast mode [ 157.039227][ T8759] hub 9-0:1.0: USB hub found [ 157.049334][ T8744] wg2: entered promiscuous mode [ 157.054962][ T8744] wg2: entered allmulticast mode [ 157.057912][ T8759] hub 9-0:1.0: 8 ports detected [ 157.126948][ T1031] hid-generic 0000:0000:0000.0025: hidraw0: HID v0.00 Device [sy] on syz0 [ 157.218563][ T8771] loop3: detected capacity change from 0 to 512 [ 157.249987][ T8771] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 157.300704][ T8776] fido_id[8776]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 157.345711][ T8778] loop4: detected capacity change from 0 to 512 [ 157.362597][ T8771] ext4 filesystem being mounted at /387/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 157.509780][ T8771] EXT4-fs error (device loop3): __ext4_new_inode:1279: comm syz.3.1818: failed to insert inode 16: doubly allocated? [ 157.730789][ T8771] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1818'. [ 157.739878][ T8771] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1818'. [ 157.757143][ T8771] siw: device registration error -23 [ 157.790417][ T8790] loop1: detected capacity change from 0 to 764 [ 157.831916][ T8790] iso9660: Unknown parameter 'ÿÿÿÿÿÿÿÿ01777777777777777777777' [ 157.994409][ T8787] loop0: detected capacity change from 0 to 512 [ 158.022350][ T8787] ext4 filesystem being mounted at /376/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 158.028426][ T8800] netlink: 256 bytes leftover after parsing attributes in process `wÞ£ÿ'. [ 158.310104][ T9] hid_parser_main: 150 callbacks suppressed [ 158.310128][ T9] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 158.323607][ T9] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 158.331075][ T9] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 158.338558][ T9] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 158.345972][ T9] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 158.353400][ T9] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 158.360897][ T9] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 158.368335][ T9] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 158.375782][ T9] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 158.383257][ T9] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 158.629879][ T9] hid-generic 0000:0000:0000.0026: hidraw0: HID v0.00 Device [sy] on syz0 [ 158.803196][ T8836] loop2: detected capacity change from 0 to 164 [ 158.820571][ T8836] Unable to read rock-ridge attributes [ 158.849895][ T8838] loop4: detected capacity change from 0 to 256 [ 158.893331][ T8839] loop0: detected capacity change from 0 to 164 [ 158.904506][ T8839] Unable to read rock-ridge attributes [ 158.908322][ T8836] lo speed is unknown, defaulting to 1000 [ 158.949809][ T8842] Unable to read rock-ridge attributes [ 158.959813][ T8839] lo speed is unknown, defaulting to 1000 [ 158.963925][ T8842] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 158.984885][ T8846] loop1: detected capacity change from 0 to 164 [ 158.993677][ T8847] Unable to read rock-ridge attributes [ 159.004389][ T8847] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 159.023594][ T8846] Unable to read rock-ridge attributes [ 159.438358][ T8862] loop1: detected capacity change from 0 to 512 [ 159.480132][ T8862] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 159.616959][ T8862] EXT4-fs (loop1): orphan cleanup on readonly fs [ 159.659263][ T9] hid-generic 0000:0000:0000.0027: hidraw0: HID v0.00 Device [sy] on syz0 [ 159.670413][ T8862] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #16: comm syz.1.1839: corrupted inode contents [ 159.728275][ T8862] EXT4-fs (loop1): Remounting filesystem read-only [ 159.737588][ T8873] fido_id[8873]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 159.760465][ T8861] loop3: detected capacity change from 0 to 512 [ 159.779203][ T8862] EXT4-fs (loop1): 1 truncate cleaned up [ 159.786849][ T6316] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 159.798245][ T6316] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 159.846867][ T8861] EXT4-fs mount: 41 callbacks suppressed [ 159.846887][ T8861] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 159.860726][ T6316] EXT4-fs (loop1): Quota write (off=8, len=24) cancelled because transaction is not started [ 159.875471][ T8877] hub 9-0:1.0: USB hub found [ 159.889036][ T8877] hub 9-0:1.0: 8 ports detected [ 159.894099][ T8862] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 159.911390][ T8861] ext4 filesystem being mounted at /389/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 160.090283][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 160.186318][ T8884] loop2: detected capacity change from 0 to 512 [ 160.226876][ T8884] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 160.744843][ T8894] loop4: detected capacity change from 0 to 512 [ 160.751820][ T8894] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 160.795193][ T8894] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 160.823583][ T8894] ext4 filesystem being mounted at /335/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 160.847027][ T8894] EXT4-fs error (device loop4): __ext4_new_inode:1279: comm syz.4.1850: failed to insert inode 16: doubly allocated? [ 160.930238][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.042856][ T8907] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1850'. [ 161.043800][ T3598] hid-generic 0000:0000:0000.0028: hidraw0: HID v0.00 Device [sy] on syz0 [ 161.051903][ T8907] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1850'. [ 161.091886][ T29] kauditd_printk_skb: 177 callbacks suppressed [ 161.091904][ T29] audit: type=1326 audit(1760907026.783:4188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8911 comm="syz.0.1855" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e960befc9 code=0x7ffc0000 [ 161.122339][ T8910] fido_id[8910]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 161.163290][ T29] audit: type=1326 audit(1760907026.813:4189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8911 comm="syz.0.1855" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e960befc9 code=0x7ffc0000 [ 161.186788][ T29] audit: type=1326 audit(1760907026.813:4190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8911 comm="syz.0.1855" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f1e960befc9 code=0x7ffc0000 [ 161.210310][ T29] audit: type=1326 audit(1760907026.813:4191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8911 comm="syz.0.1855" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e960befc9 code=0x7ffc0000 [ 161.233747][ T29] audit: type=1326 audit(1760907026.813:4192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8911 comm="syz.0.1855" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e960befc9 code=0x7ffc0000 [ 161.257211][ T29] audit: type=1326 audit(1760907026.813:4193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8911 comm="syz.0.1855" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1e960befc9 code=0x7ffc0000 [ 161.280661][ T29] audit: type=1326 audit(1760907026.813:4194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8911 comm="syz.0.1855" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e960befc9 code=0x7ffc0000 [ 161.304204][ T29] audit: type=1326 audit(1760907026.813:4195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8911 comm="syz.0.1855" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e960befc9 code=0x7ffc0000 [ 161.327706][ T29] audit: type=1326 audit(1760907026.813:4196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8911 comm="syz.0.1855" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1e960befc9 code=0x7ffc0000 [ 161.351189][ T29] audit: type=1326 audit(1760907026.843:4197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8911 comm="syz.0.1855" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e960befc9 code=0x7ffc0000 [ 161.386102][ T3318] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.446383][ T8917] loop1: detected capacity change from 0 to 128 [ 161.494867][ T8917] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 161.549232][ T8917] ext4 filesystem being mounted at /376/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 161.628611][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.658608][ T3318] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 161.707336][ T8933] loop4: detected capacity change from 0 to 764 [ 161.719639][ T8933] iso9660: Unknown parameter 'ÿÿÿÿÿÿÿÿ01777777777777777777777' [ 161.734282][ T8935] hub 9-0:1.0: USB hub found [ 161.739051][ T8935] hub 9-0:1.0: 8 ports detected [ 161.944363][ T8939] loop1: detected capacity change from 0 to 512 [ 162.009458][ T8939] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 162.121815][ T8943] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1866'. [ 162.158200][ T8943] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1866'. [ 162.409991][ T8952] FAULT_INJECTION: forcing a failure. [ 162.409991][ T8952] name failslab, interval 1, probability 0, space 0, times 0 [ 162.422715][ T8952] CPU: 0 UID: 0 PID: 8952 Comm: syz.4.1870 Not tainted syzkaller #0 PREEMPT(voluntary) [ 162.422838][ T8952] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 162.422853][ T8952] Call Trace: [ 162.422861][ T8952] [ 162.422873][ T8952] __dump_stack+0x1d/0x30 [ 162.422901][ T8952] dump_stack_lvl+0xe8/0x140 [ 162.422927][ T8952] dump_stack+0x15/0x1b [ 162.422950][ T8952] should_fail_ex+0x265/0x280 [ 162.422996][ T8952] should_failslab+0x8c/0xb0 [ 162.423099][ T8952] __kmalloc_noprof+0xa5/0x570 [ 162.423136][ T8952] ? security_sk_alloc+0x52/0x120 [ 162.423161][ T8952] ? should_failslab+0x8c/0xb0 [ 162.423230][ T8952] security_sk_alloc+0x52/0x120 [ 162.423338][ T8952] sk_prot_alloc+0xc2/0x190 [ 162.423397][ T8952] sk_alloc+0x34/0x360 [ 162.423434][ T8952] bpf_prog_test_run_skb+0x251/0xbf0 [ 162.423499][ T8952] ? __rcu_read_unlock+0x4f/0x70 [ 162.423534][ T8952] ? __fget_files+0x184/0x1c0 [ 162.423612][ T8952] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 162.423649][ T8952] bpf_prog_test_run+0x22a/0x390 [ 162.423674][ T8952] __sys_bpf+0x4c0/0x7c0 [ 162.423726][ T8952] __x64_sys_bpf+0x41/0x50 [ 162.423788][ T8952] x64_sys_call+0x2aee/0x3000 [ 162.423818][ T8952] do_syscall_64+0xd2/0x200 [ 162.423847][ T8952] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 162.423882][ T8952] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 162.423935][ T8952] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 162.423963][ T8952] RIP: 0033:0x7f8a8c61efc9 [ 162.423996][ T8952] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 162.424019][ T8952] RSP: 002b:00007f8a8b07f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 162.424111][ T8952] RAX: ffffffffffffffda RBX: 00007f8a8c875fa0 RCX: 00007f8a8c61efc9 [ 162.424127][ T8952] RDX: 000000000000002c RSI: 0000200000000080 RDI: 000000000000000a [ 162.424143][ T8952] RBP: 00007f8a8b07f090 R08: 0000000000000000 R09: 0000000000000000 [ 162.424159][ T8952] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 162.424224][ T8952] R13: 00007f8a8c876038 R14: 00007f8a8c875fa0 R15: 00007fff73f99478 [ 162.424248][ T8952] [ 162.697710][ T3318] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.703615][ T8956] loop3: detected capacity change from 0 to 512 [ 162.720689][ T8956] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 162.746915][ T8956] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 162.763313][ T8956] ext4 filesystem being mounted at /394/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 162.806740][ T8964] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1876'. [ 162.818147][ T8956] EXT4-fs error (device loop3): __ext4_new_inode:1279: comm syz.3.1872: failed to insert inode 16: doubly allocated? [ 162.832147][ T8964] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1876'. [ 162.880901][ T8971] loop1: detected capacity change from 0 to 256 [ 162.999994][ T8975] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1872'. [ 163.009002][ T8975] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1872'. [ 163.018738][ T8975] siw: device registration error -23 [ 163.561297][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.630430][ T8986] SELinux: policydb version 0 does not match my version range 15-35 [ 163.640521][ T8986] SELinux: failed to load policy [ 163.666077][ T8990] hub 9-0:1.0: USB hub found [ 163.670908][ T8990] hub 9-0:1.0: 8 ports detected [ 163.764113][ T9000] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1888'. [ 163.775457][ T9000] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1888'. [ 163.912343][ T9005] hub 9-0:1.0: USB hub found [ 163.917268][ T9005] hub 9-0:1.0: 8 ports detected [ 164.246691][ T9024] FAULT_INJECTION: forcing a failure. [ 164.246691][ T9024] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 164.260572][ T9024] CPU: 1 UID: 0 PID: 9024 Comm: syz.1.1897 Not tainted syzkaller #0 PREEMPT(voluntary) [ 164.260609][ T9024] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 164.260627][ T9024] Call Trace: [ 164.260636][ T9024] [ 164.260647][ T9024] __dump_stack+0x1d/0x30 [ 164.260675][ T9024] dump_stack_lvl+0xe8/0x140 [ 164.260701][ T9024] dump_stack+0x15/0x1b [ 164.260796][ T9024] should_fail_ex+0x265/0x280 [ 164.260842][ T9024] should_fail+0xb/0x20 [ 164.260919][ T9024] should_fail_usercopy+0x1a/0x20 [ 164.260943][ T9024] fpu__restore_sig+0x12d/0xaa0 [ 164.260987][ T9024] ? should_fail_ex+0xdb/0x280 [ 164.261186][ T9024] __ia32_sys_rt_sigreturn+0x29f/0x350 [ 164.261231][ T9024] x64_sys_call+0x2d4b/0x3000 [ 164.261257][ T9024] do_syscall_64+0xd2/0x200 [ 164.261283][ T9024] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 164.261318][ T9024] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 164.261379][ T9024] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 164.261408][ T9024] RIP: 0033:0x7f9f2aaeefc7 [ 164.261428][ T9024] Code: ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 <0f> 05 48 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 [ 164.261453][ T9024] RSP: 002b:00007f9f29557038 EFLAGS: 00000246 [ 164.261532][ T9024] RAX: 0000000000000116 RBX: 00007f9f2ad45fa0 RCX: 00007f9f2aaeefc9 [ 164.261550][ T9024] RDX: 0000000000000001 RSI: 0000200000000080 RDI: 0000000000000004 [ 164.261566][ T9024] RBP: 00007f9f29557090 R08: 0000000000000000 R09: 0000000000000000 [ 164.261713][ T9024] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 164.261730][ T9024] R13: 00007f9f2ad46038 R14: 00007f9f2ad45fa0 R15: 00007ffe1a8cd058 [ 164.261756][ T9024] [ 164.488067][ T9037] usb usb1: check_ctrlrecip: process 9037 (syz.1.1902) requesting ep 01 but needs 81 [ 164.497744][ T9037] usb usb1: usbfs: process 9037 (syz.1.1902) did not claim interface 0 before use [ 164.526192][ T9033] loop4: detected capacity change from 0 to 512 [ 164.545689][ T9033] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 164.692497][ T9033] EXT4-fs (loop4): orphan cleanup on readonly fs [ 164.734723][ T9033] EXT4-fs error (device loop4): ext4_do_update_inode:5632: inode #16: comm syz.4.1892: corrupted inode contents [ 164.763911][ T9033] EXT4-fs (loop4): Remounting filesystem read-only [ 164.770639][ T9033] EXT4-fs (loop4): 1 truncate cleaned up [ 164.779259][ T6319] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 164.789907][ T6319] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 164.889826][ T6319] EXT4-fs (loop4): Quota write (off=8, len=24) cancelled because transaction is not started [ 164.921642][ T9033] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 164.964474][ T9058] lo speed is unknown, defaulting to 1000 [ 165.254021][ T9064] lo speed is unknown, defaulting to 1000 [ 166.357491][ T9091] loop0: detected capacity change from 0 to 764 [ 166.369229][ T9091] iso9660: Unknown parameter 'ÿÿÿÿÿÿÿÿ01777777777777777777777' [ 166.379673][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.390992][ T29] kauditd_printk_skb: 153 callbacks suppressed [ 166.391066][ T29] audit: type=1326 audit(1760907032.093:4345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9089 comm="syz.0.1920" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e960befc9 code=0x7ffc0000 [ 166.420769][ T29] audit: type=1326 audit(1760907032.093:4346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9089 comm="syz.0.1920" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e960befc9 code=0x7ffc0000 [ 166.459058][ T29] audit: type=1326 audit(1760907032.153:4347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9089 comm="syz.0.1920" exe="/root/syz-executor" sig=0 arch=c000003e syscall=162 compat=0 ip=0x7f1e960befc9 code=0x7ffc0000 [ 166.513542][ T9096] loop4: detected capacity change from 0 to 2048 [ 166.584030][ T29] audit: type=1326 audit(1760907032.263:4348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9089 comm="syz.0.1920" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e960befc9 code=0x7ffc0000 [ 166.607558][ T29] audit: type=1326 audit(1760907032.263:4349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9089 comm="syz.0.1920" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e960befc9 code=0x7ffc0000 [ 166.653700][ T9104] hub 9-0:1.0: USB hub found [ 166.661517][ T9104] hub 9-0:1.0: 8 ports detected [ 166.687266][ T9106] loop0: detected capacity change from 0 to 164 [ 166.694615][ T9106] Unable to read rock-ridge attributes [ 166.711964][ T9106] lo speed is unknown, defaulting to 1000 [ 166.797883][ T9096] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 166.858858][ T9096] __nla_validate_parse: 1 callbacks suppressed [ 166.858878][ T9096] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1921'. [ 166.876161][ T9114] Unable to read rock-ridge attributes [ 166.882139][ T9114] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 166.910581][ T9096] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1921'. [ 167.057585][ T9118] SELinux: policydb version 0 does not match my version range 15-35 [ 167.073371][ T9118] SELinux: failed to load policy [ 167.099736][ T9120] lo speed is unknown, defaulting to 1000 [ 167.144402][ T9124] netlink: 'syz.1.1931': attribute type 10 has an invalid length. [ 167.158127][ T29] audit: type=1400 audit(1760907032.853:4350): avc: denied { read } for pid=9121 comm="syz.2.1930" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 167.212686][ T9125] rdma_rxe: rxe_newlink: failed to add syz_tun [ 167.219232][ T9127] loop0: detected capacity change from 0 to 2048 [ 167.228622][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.240792][ T9127] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 167.242716][ T9129] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1930'. [ 167.310921][ T9127] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1932'. [ 167.323129][ T9127] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1932'. [ 167.485130][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.555784][ T9151] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1939'. [ 167.565164][ T9147] loop0: detected capacity change from 0 to 2048 [ 167.567409][ T29] audit: type=1326 audit(1760907033.273:4351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9150 comm="syz.1.1939" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f2aaeefc9 code=0x7ffc0000 [ 167.597087][ T29] audit: type=1326 audit(1760907033.273:4352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9150 comm="syz.1.1939" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f2aaeefc9 code=0x7ffc0000 [ 167.620588][ T29] audit: type=1326 audit(1760907033.273:4353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9150 comm="syz.1.1939" exe="/root/syz-executor" sig=0 arch=c000003e syscall=94 compat=0 ip=0x7f9f2aaeefc9 code=0x7ffc0000 [ 167.644139][ T29] audit: type=1326 audit(1760907033.273:4354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9150 comm="syz.1.1939" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f2aaeefc9 code=0x7ffc0000 [ 167.677169][ T9153] hub 9-0:1.0: USB hub found [ 167.682037][ T9153] hub 9-0:1.0: 8 ports detected [ 167.683592][ T9147] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 167.706175][ T9147] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1936'. [ 167.717318][ T9147] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1936'. [ 167.854819][ T9157] loop3: detected capacity change from 0 to 164 [ 167.866769][ T9157] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 167.891798][ T9157] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1941'. [ 167.926703][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.975224][ T9166] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1946'. [ 167.994792][ T9164] loop2: detected capacity change from 0 to 128 [ 168.003117][ T9171] loop0: detected capacity change from 0 to 164 [ 168.027286][ T9171] Unable to read rock-ridge attributes [ 168.055839][ T9171] lo speed is unknown, defaulting to 1000 [ 168.076884][ T9177] loop3: detected capacity change from 0 to 512 [ 168.087393][ T9177] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 168.096843][ T9180] Unable to read rock-ridge attributes [ 168.102987][ T9180] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 168.116236][ T9177] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 168.133402][ T9177] ext4 filesystem being mounted at /407/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 168.173732][ T9177] EXT4-fs error (device loop3): __ext4_new_inode:1279: comm syz.3.1948: failed to insert inode 16: doubly allocated? [ 168.326913][ T9188] siw: device registration error -23 [ 168.354267][ T10] hid_parser_main: 86 callbacks suppressed [ 168.354355][ T10] hid-generic 0000:0000:0000.0029: unknown main item tag 0x0 [ 168.367653][ T10] hid-generic 0000:0000:0000.0029: unknown main item tag 0x0 [ 168.375173][ T10] hid-generic 0000:0000:0000.0029: unknown main item tag 0x0 [ 168.382812][ T10] hid-generic 0000:0000:0000.0029: unknown main item tag 0x0 [ 168.390649][ T10] hid-generic 0000:0000:0000.0029: unknown main item tag 0x0 [ 168.398101][ T10] hid-generic 0000:0000:0000.0029: unknown main item tag 0x0 [ 168.405558][ T10] hid-generic 0000:0000:0000.0029: unknown main item tag 0x0 [ 168.413050][ T10] hid-generic 0000:0000:0000.0029: unknown main item tag 0x0 [ 168.420513][ T10] hid-generic 0000:0000:0000.0029: unknown main item tag 0x0 [ 168.428013][ T10] hid-generic 0000:0000:0000.0029: unknown main item tag 0x0 [ 168.437076][ T10] hid-generic 0000:0000:0000.0029: hidraw0: HID v0.00 Device [sy] on syz0 [ 168.463895][ T9193] fido_id[9193]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 168.566188][ T9197] loop0: detected capacity change from 0 to 2048 [ 168.591749][ T9197] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 168.816111][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 168.849753][ T9201] hub 9-0:1.0: USB hub found [ 168.855873][ T9201] hub 9-0:1.0: 8 ports detected [ 168.957744][ T9207] loop1: detected capacity change from 0 to 128 [ 168.996793][ T9207] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 169.010284][ T9207] ext4 filesystem being mounted at /398/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 169.034933][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 169.107035][ T3318] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 169.145378][ T9218] loop3: detected capacity change from 0 to 2048 [ 169.177638][ T9220] loop4: detected capacity change from 0 to 764 [ 169.216172][ T9220] iso9660: Unknown parameter 'ÿÿÿÿÿÿÿÿ01777777777777777777777' [ 169.229820][ T9218] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 169.485262][ T9239] loop2: detected capacity change from 0 to 1024 [ 169.582537][ T9239] EXT4-fs (loop2): unsupported inode size: 143 [ 169.588822][ T9239] EXT4-fs (loop2): blocksize: 1024 [ 169.676660][ T9244] loop0: detected capacity change from 0 to 512 [ 169.717957][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 169.791901][ T9244] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 169.835568][ T9244] EXT4-fs (loop0): orphan cleanup on readonly fs [ 169.910738][ T9244] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #16: comm syz.0.1959: corrupted inode contents [ 170.016112][ T9244] EXT4-fs (loop0): Remounting filesystem read-only [ 170.058436][ T9244] EXT4-fs (loop0): 1 truncate cleaned up [ 170.065197][ T6319] EXT4-fs (loop0): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 170.075907][ T6319] EXT4-fs (loop0): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 170.103328][ T6319] EXT4-fs (loop0): Quota write (off=8, len=24) cancelled because transaction is not started [ 170.124725][ T9244] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 170.179557][ T6322] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 170.188627][ T6322] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 170.197403][ T6322] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 170.207232][ T6322] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 170.350345][ T9254] loop4: detected capacity change from 0 to 512 [ 170.403950][ T9254] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 170.411387][ T9272] loop1: detected capacity change from 0 to 764 [ 170.441105][ T9271] loop2: detected capacity change from 0 to 2048 [ 170.448002][ T9272] iso9660: Unknown parameter 'ÿÿÿÿÿÿÿÿ01777777777777777777777' [ 170.486190][ T9254] ext4 filesystem being mounted at /355/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 170.505683][ T9271] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 170.644934][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 170.873084][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.021872][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.171188][ T9291] loop1: detected capacity change from 0 to 512 [ 171.195270][ T9291] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 171.203473][ T9291] EXT4-fs (loop1): orphan cleanup on readonly fs [ 171.301346][ T9299] loop0: detected capacity change from 0 to 512 [ 171.694672][ T9300] loop4: detected capacity change from 0 to 512 [ 171.702312][ T9291] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #16: comm syz.1.1986: corrupted inode contents [ 171.717209][ T9291] EXT4-fs (loop1): Remounting filesystem read-only [ 171.724035][ T9291] EXT4-fs (loop1): 1 truncate cleaned up [ 171.733613][ T6320] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 171.744210][ T6320] __quota_error: 370 callbacks suppressed [ 171.744225][ T6320] Quota error (device loop1): write_blk: dquota write failed [ 171.757583][ T6320] Quota error (device loop1): remove_free_dqentry: Can't write block (5) with free entries [ 171.767779][ T6320] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 171.778523][ T6320] Quota error (device loop1): write_blk: dquota write failed [ 171.785938][ T6320] Quota error (device loop1): free_dqentry: Can't move quota data block (5) to free list [ 171.857555][ T6320] EXT4-fs (loop1): Quota write (off=8, len=24) cancelled because transaction is not started [ 171.868403][ T6320] Quota error (device loop1): v2_write_file_info: Can't write info structure [ 171.877301][ T6320] Quota error (device loop1): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 171.883685][ T9300] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 171.887878][ T9291] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 171.895304][ T9300] EXT4-fs (loop4): orphan cleanup on readonly fs [ 171.916526][ T9300] EXT4-fs error (device loop4): ext4_do_update_inode:5632: inode #16: comm syz.4.1988: corrupted inode contents [ 171.928882][ T9300] EXT4-fs (loop4): Remounting filesystem read-only [ 171.935586][ T9300] EXT4-fs (loop4): 1 truncate cleaned up [ 171.942425][ T9299] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 171.943565][ T6316] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 171.965485][ T6316] Quota error (device loop4): write_blk: dquota write failed [ 171.972874][ T6316] Quota error (device loop4): remove_free_dqentry: Can't write block (5) with free entries [ 171.982963][ T6316] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 171.993524][ T6316] Quota error (device loop4): write_blk: dquota write failed [ 172.000954][ T6316] Quota error (device loop4): free_dqentry: Can't move quota data block (5) to free list [ 172.029048][ T6316] EXT4-fs (loop4): Quota write (off=8, len=24) cancelled because transaction is not started [ 172.039749][ T9300] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 172.134002][ T3577] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 172.221952][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 172.233633][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 172.256457][ T9313] netlink: 'syz.2.1994': attribute type 10 has an invalid length. [ 172.301388][ T9315] loop4: detected capacity change from 0 to 512 [ 172.308585][ T9313] rdma_rxe: rxe_newlink: failed to add syz_tun [ 172.335486][ T9315] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 172.358046][ T9319] SELinux: policydb version 0 does not match my version range 15-35 [ 172.367090][ T9319] SELinux: failed to load policy [ 172.385667][ T9315] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 172.424011][ T9315] ext4 filesystem being mounted at /358/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 172.461415][ T9315] EXT4-fs error (device loop4): __ext4_new_inode:1279: comm syz.4.1996: failed to insert inode 16: doubly allocated? [ 172.632655][ T9332] __nla_validate_parse: 12 callbacks suppressed [ 172.632672][ T9332] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2001'. [ 172.693947][ T9335] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1996'. [ 172.702848][ T9335] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1996'. [ 172.959388][ T9342] loop2: detected capacity change from 0 to 512 [ 173.094244][ T9342] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 173.776937][ T9346] lo speed is unknown, defaulting to 1000 [ 173.853630][ T3515] printk: udevd: 2 output lines suppressed due to ratelimiting [ 173.895594][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 173.930443][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 174.027913][ T3318] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 174.094905][ T9367] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2007'. [ 174.106032][ T9365] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2013'. [ 174.115240][ T9368] loop1: detected capacity change from 0 to 512 [ 174.124195][ T9368] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 174.164288][ T9365] IPVS: Error connecting to the multicast addr [ 174.179965][ T9370] loop4: detected capacity change from 0 to 512 [ 174.266131][ T9370] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 174.299955][ T9372] loop2: detected capacity change from 0 to 1024 [ 174.308645][ T9372] EXT4-fs (loop2): unsupported inode size: 143 [ 174.314961][ T9372] EXT4-fs (loop2): blocksize: 1024 [ 174.323094][ T9368] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 174.368995][ T9368] ext4 filesystem being mounted at /406/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 174.392136][ T9368] EXT4-fs error (device loop1): __ext4_new_inode:1279: comm syz.1.2011: failed to insert inode 16: doubly allocated? [ 174.521663][ T9382] loop3: detected capacity change from 0 to 512 [ 174.562811][ T9368] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2011'. [ 174.571765][ T9368] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2011'. [ 174.582828][ T9368] siw: device registration error -23 [ 174.583759][ T9382] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 174.618238][ T3318] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 174.621180][ T9382] ext4 filesystem being mounted at /423/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 174.655265][ T9382] EXT4-fs error (device loop3): ext4_empty_dir:3080: inode #12: comm syz.3.2016: Directory hole found for htree leaf block 0 [ 174.800997][ T9395] SELinux: policydb magic number 0x80 does not match expected magic number 0xf97cff8c [ 174.811561][ T9395] SELinux: failed to load policy [ 174.838389][ T9397] netlink: 'syz.2.2020': attribute type 10 has an invalid length. [ 174.847428][ T9397] rdma_rxe: rxe_newlink: failed to add syz_tun [ 174.932595][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 174.984630][ T9398] loop0: detected capacity change from 0 to 512 [ 175.005172][ T9403] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 175.027356][ T9398] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 175.083363][ T9398] EXT4-fs (loop0): orphan cleanup on readonly fs [ 175.111081][ T9398] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #16: comm syz.0.2018: corrupted inode contents [ 175.233012][ T9398] EXT4-fs (loop0): Remounting filesystem read-only [ 175.247054][ T9398] EXT4-fs (loop0): 1 truncate cleaned up [ 175.449808][ T6316] EXT4-fs (loop0): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 175.461203][ T6316] EXT4-fs (loop0): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 175.534259][ T6316] EXT4-fs (loop0): Quota write (off=8, len=24) cancelled because transaction is not started [ 175.575296][ T9398] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 175.859774][ T9411] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2025'. [ 175.889932][ T9390] syz.3.2016 (9390) used greatest stack depth: 6184 bytes left [ 175.899340][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 175.995638][ T9421] loop3: detected capacity change from 0 to 128 [ 176.025853][ T10] hid_parser_main: 22 callbacks suppressed [ 176.025893][ T10] hid-generic 0000:0000:0000.002A: unknown main item tag 0x0 [ 176.039239][ T10] hid-generic 0000:0000:0000.002A: unknown main item tag 0x0 [ 176.046710][ T10] hid-generic 0000:0000:0000.002A: unknown main item tag 0x0 [ 176.054221][ T10] hid-generic 0000:0000:0000.002A: unknown main item tag 0x0 [ 176.061658][ T10] hid-generic 0000:0000:0000.002A: unknown main item tag 0x0 [ 176.069147][ T10] hid-generic 0000:0000:0000.002A: unknown main item tag 0x0 [ 176.076651][ T10] hid-generic 0000:0000:0000.002A: unknown main item tag 0x0 [ 176.084077][ T10] hid-generic 0000:0000:0000.002A: unknown main item tag 0x0 [ 176.091510][ T10] hid-generic 0000:0000:0000.002A: unknown main item tag 0x0 [ 176.098917][ T10] hid-generic 0000:0000:0000.002A: unknown main item tag 0x0 [ 176.124035][ T9427] bond2: entered promiscuous mode [ 176.155195][ T9427] netlink: 'syz.2.2032': attribute type 10 has an invalid length. [ 176.163514][ T9427] rdma_rxe: rxe_newlink: failed to add syz_tun [ 176.186592][ T10] hid-generic 0000:0000:0000.002A: hidraw0: HID v0.00 Device [sy] on syz0 [ 176.198706][ T9431] loop2: detected capacity change from 0 to 164 [ 176.205663][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 176.215346][ T9431] Unable to read rock-ridge attributes [ 176.228765][ T9431] lo speed is unknown, defaulting to 1000 [ 176.246257][ T1031] hid-generic 0000:0000:0000.002B: hidraw1: HID v0.00 Device [sy] on syz0 [ 176.281604][ T9434] Unable to read rock-ridge attributes [ 176.292564][ T9434] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 176.480514][ T9451] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2040'. [ 176.497061][ T9454] loop2: detected capacity change from 0 to 1024 [ 176.509969][ T9454] EXT4-fs: Ignoring removed bh option [ 176.515979][ T9454] EXT4-fs: inline encryption not supported [ 176.522907][ T9454] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 176.532739][ T9454] EXT4-fs (loop2): group descriptors corrupted! [ 176.542170][ T9451] hsr_slave_1 (unregistering): left promiscuous mode [ 176.552287][ T9455] bridge_slave_1: entered promiscuous mode [ 176.569565][ T9447] wg2: left promiscuous mode [ 176.574973][ T9447] wg2: left allmulticast mode [ 176.598446][ T9447] wg2: entered promiscuous mode [ 176.604046][ T9447] wg2: entered allmulticast mode [ 176.640516][ T9462] bond3: entered promiscuous mode [ 176.660409][ T9465] bond2: entered promiscuous mode [ 176.674842][ T9462] netlink: 'syz.2.2043': attribute type 10 has an invalid length. [ 176.682863][ T9465] netlink: 'syz.0.2044': attribute type 10 has an invalid length. [ 176.682947][ T9462] rdma_rxe: rxe_newlink: failed to add syz_tun [ 176.691208][ T9465] syz1: rxe_newlink: already configured on syz_tun [ 176.869702][ T29] kauditd_printk_skb: 87 callbacks suppressed [ 176.869721][ T29] audit: type=1326 audit(1760907042.563:4798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9480 comm="syz.3.2049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85e6f9efc9 code=0x7ffc0000 [ 176.899379][ T29] audit: type=1326 audit(1760907042.563:4799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9480 comm="syz.3.2049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85e6f9efc9 code=0x7ffc0000 [ 176.922849][ T29] audit: type=1326 audit(1760907042.563:4800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9480 comm="syz.3.2049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f85e6f9efc9 code=0x7ffc0000 [ 176.946351][ T29] audit: type=1326 audit(1760907042.563:4801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9480 comm="syz.3.2049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85e6f9efc9 code=0x7ffc0000 [ 176.969825][ T29] audit: type=1326 audit(1760907042.563:4802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9480 comm="syz.3.2049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f85e6f9efc9 code=0x7ffc0000 [ 176.993573][ T29] audit: type=1326 audit(1760907042.563:4803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9480 comm="syz.3.2049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85e6f9efc9 code=0x7ffc0000 [ 177.017040][ T29] audit: type=1326 audit(1760907042.563:4804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9480 comm="syz.3.2049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f85e6f9efc9 code=0x7ffc0000 [ 177.040494][ T29] audit: type=1326 audit(1760907042.563:4805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9480 comm="syz.3.2049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85e6f9efc9 code=0x7ffc0000 [ 177.064028][ T29] audit: type=1326 audit(1760907042.563:4806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9480 comm="syz.3.2049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f85e6f9efc9 code=0x7ffc0000 [ 177.109812][ T9485] loop1: detected capacity change from 0 to 1024 [ 177.116930][ T9485] EXT4-fs (loop1): unsupported inode size: 143 [ 177.123182][ T9485] EXT4-fs (loop1): blocksize: 1024 [ 177.163523][ T29] audit: type=1326 audit(1760907042.853:4807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9480 comm="syz.3.2049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85e6f9efc9 code=0x7ffc0000 [ 177.209812][ T9483] lo speed is unknown, defaulting to 1000 [ 177.706024][ T9496] loop0: detected capacity change from 0 to 8192 [ 177.802346][ T9501] bond4: entered promiscuous mode [ 177.839932][ T9501] netlink: 'syz.2.2057': attribute type 10 has an invalid length. [ 177.944005][ T9501] rdma_rxe: rxe_newlink: failed to add syz_tun [ 178.017035][ T9508] loop3: detected capacity change from 0 to 128 [ 178.083408][ T9513] loop0: detected capacity change from 0 to 164 [ 178.091097][ T9513] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 178.288735][ T9522] loop2: detected capacity change from 0 to 2048 [ 178.332047][ T9522] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 178.372493][ T9522] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2065'. [ 178.384666][ T9522] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2065'. [ 178.431681][ T9520] loop1: detected capacity change from 0 to 512 [ 178.445000][ T9520] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 178.457677][ T9520] ext4 filesystem being mounted at /410/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 178.598669][ T3318] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 178.643064][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 178.747211][ T9543] loop4: detected capacity change from 0 to 512 [ 178.774313][ T9543] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 178.814015][ T9543] EXT4-fs (loop4): orphan cleanup on readonly fs [ 178.914232][ T9543] EXT4-fs error (device loop4): ext4_do_update_inode:5632: inode #16: comm syz.4.2069: corrupted inode contents [ 178.960603][ T9543] EXT4-fs (loop4): Remounting filesystem read-only [ 179.644177][ T9543] EXT4-fs (loop4): 1 truncate cleaned up [ 179.662513][ T6319] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 179.673347][ T6319] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 179.684255][ T9555] loop0: detected capacity change from 0 to 164 [ 179.987782][ T9555] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 180.174771][ T6319] EXT4-fs (loop4): Quota write (off=8, len=24) cancelled because transaction is not started [ 180.194274][ T9543] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 180.452841][ T9569] loop1: detected capacity change from 0 to 164 [ 180.460557][ T9569] Unable to read rock-ridge attributes [ 180.480085][ T9569] lo speed is unknown, defaulting to 1000 [ 180.559161][ T9572] Unable to read rock-ridge attributes [ 180.713361][ T9573] loop0: detected capacity change from 0 to 512 [ 180.775512][ T9573] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 180.840174][ T9572] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 180.986802][ T9583] hub 9-0:1.0: USB hub found [ 180.991643][ T9583] hub 9-0:1.0: 8 ports detected [ 181.037505][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 181.302596][ T9594] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2087'. [ 181.312455][ T9594] netlink: 348 bytes leftover after parsing attributes in process `syz.1.2087'. [ 181.321608][ T9594] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2087'. [ 181.330620][ T9594] netlink: 348 bytes leftover after parsing attributes in process `syz.1.2087'. [ 181.340729][ T9594] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2087'. [ 181.343016][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 181.396839][ T9597] bond2 (unregistering): Released all slaves [ 181.409754][ T9602] loop2: detected capacity change from 0 to 164 [ 181.417160][ T9602] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 181.511089][ T9608] loop3: detected capacity change from 0 to 164 [ 181.518003][ T9612] netlink: 'syz.1.2094': attribute type 12 has an invalid length. [ 181.526676][ T9612] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2094'. [ 181.541120][ T9608] Unable to read rock-ridge attributes [ 181.552432][ T9614] bond5: entered promiscuous mode [ 181.560803][ T9614] netlink: 'syz.2.2095': attribute type 10 has an invalid length. [ 181.571971][ T9614] rdma_rxe: rxe_newlink: failed to add syz_tun [ 181.588938][ T9612] lo speed is unknown, defaulting to 1000 [ 181.611140][ T9619] loop0: detected capacity change from 0 to 512 [ 181.620828][ T9608] lo speed is unknown, defaulting to 1000 [ 181.627241][ T9617] loop4: detected capacity change from 0 to 4096 [ 181.628323][ T9621] Unable to read rock-ridge attributes [ 181.638674][ T9620] netlink: 'syz.1.2094': attribute type 21 has an invalid length. [ 181.640845][ T9621] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 181.670013][ T9617] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 181.689111][ T9619] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 181.735146][ T9619] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 181.765866][ T9619] ext4 filesystem being mounted at /450/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 181.813608][ T9619] EXT4-fs error (device loop0): __ext4_new_inode:1279: comm syz.0.2097: failed to insert inode 16: doubly allocated? [ 181.835707][ T9631] loop1: detected capacity change from 0 to 164 [ 181.864174][ T9631] Unable to read rock-ridge attributes [ 181.911674][ T29] kauditd_printk_skb: 220 callbacks suppressed [ 181.911761][ T29] audit: type=1326 audit(1760907047.603:5022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9623 comm="syz.2.2098" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a31c4efc9 code=0x7ffc0000 [ 181.925398][ T9631] lo speed is unknown, defaulting to 1000 [ 181.958565][ T29] audit: type=1326 audit(1760907047.643:5023): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9623 comm="syz.2.2098" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a31c4efc9 code=0x7ffc0000 [ 181.959562][ T9633] Unable to read rock-ridge attributes [ 181.982067][ T29] audit: type=1326 audit(1760907047.643:5024): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9623 comm="syz.2.2098" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7a31c4efc9 code=0x7ffc0000 [ 182.011661][ T29] audit: type=1326 audit(1760907047.643:5025): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9623 comm="syz.2.2098" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a31c4efc9 code=0x7ffc0000 [ 182.035747][ T29] audit: type=1326 audit(1760907047.643:5026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9623 comm="syz.2.2098" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a31c4efc9 code=0x7ffc0000 [ 182.059186][ T29] audit: type=1326 audit(1760907047.643:5027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9623 comm="syz.2.2098" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7a31c4efc9 code=0x7ffc0000 [ 182.074146][ T9628] random: crng reseeded on system resumption [ 182.083502][ T29] audit: type=1326 audit(1760907047.643:5028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9623 comm="syz.2.2098" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a31c4efc9 code=0x7ffc0000 [ 182.112699][ T29] audit: type=1326 audit(1760907047.643:5029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9623 comm="syz.2.2098" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7a31c4efc9 code=0x7ffc0000 [ 182.123318][ T9633] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 182.137076][ T29] audit: type=1326 audit(1760907047.643:5030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9623 comm="syz.2.2098" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a31c4efc9 code=0x7ffc0000 [ 182.167172][ T29] audit: type=1326 audit(1760907047.643:5031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9623 comm="syz.2.2098" exe="/root/syz-executor" sig=0 arch=c000003e syscall=285 compat=0 ip=0x7f7a31c4efc9 code=0x7ffc0000 [ 182.201388][ T9636] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2097'. [ 182.210394][ T9636] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2097'. [ 182.227935][ T9617] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=9617 comm=syz.4.2096 [ 182.306338][ T9636] siw: device registration error -23 [ 182.380545][ T9645] netlink: 'syz.2.2102': attribute type 10 has an invalid length. [ 182.395677][ T9645] rdma_rxe: rxe_newlink: failed to add syz_tun [ 182.564435][ T9659] loop4: detected capacity change from 0 to 164 [ 182.591271][ T9659] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 182.759305][ T9676] loop1: detected capacity change from 0 to 512 [ 182.786285][ T9676] ext4 filesystem being mounted at /419/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 182.829219][ T9684] loop2: detected capacity change from 0 to 512 [ 182.836314][ T9684] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 182.865863][ T9684] ext4 filesystem being mounted at /423/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 182.906116][ T9684] EXT4-fs error (device loop2): __ext4_new_inode:1279: comm syz.2.2116: failed to insert inode 16: doubly allocated? [ 183.040725][ T9700] loop4: detected capacity change from 0 to 164 [ 183.048412][ T9700] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 183.098092][ T9703] siw: device registration error -23 [ 183.119047][ T9705] loop4: detected capacity change from 0 to 164 [ 183.126732][ T9705] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 183.179833][ T9713] netlink: 'syz.3.2126': attribute type 10 has an invalid length. [ 183.188693][ T9713] rdma_rxe: rxe_newlink: failed to add syz_tun [ 183.217499][ T3597] hid_parser_main: 54 callbacks suppressed [ 183.217536][ T3597] hid-generic 0000:0000:0000.002C: unknown main item tag 0x0 [ 183.230925][ T3597] hid-generic 0000:0000:0000.002C: unknown main item tag 0x0 [ 183.239057][ T3597] hid-generic 0000:0000:0000.002C: unknown main item tag 0x0 [ 183.246571][ T3597] hid-generic 0000:0000:0000.002C: unknown main item tag 0x0 [ 183.254093][ T3597] hid-generic 0000:0000:0000.002C: unknown main item tag 0x0 [ 183.261575][ T3597] hid-generic 0000:0000:0000.002C: unknown main item tag 0x0 [ 183.269855][ T3597] hid-generic 0000:0000:0000.002C: unknown main item tag 0x0 [ 183.277477][ T3597] hid-generic 0000:0000:0000.002C: unknown main item tag 0x0 [ 183.284915][ T3597] hid-generic 0000:0000:0000.002C: unknown main item tag 0x0 [ 183.292334][ T3597] hid-generic 0000:0000:0000.002C: unknown main item tag 0x0 [ 183.301345][ T3597] hid-generic 0000:0000:0000.002C: hidraw0: HID v0.00 Device [sy] on syz0 [ 183.458120][ T9735] loop3: detected capacity change from 0 to 164 [ 183.465521][ T9735] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 183.495362][ T9737] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 183.506406][ T9737] SELinux: failed to load policy [ 183.543501][ T9740] loop3: detected capacity change from 0 to 164 [ 183.550644][ T9740] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 183.689222][ T9743] loop0: detected capacity change from 0 to 512 [ 183.762604][ T9746] lo speed is unknown, defaulting to 1000 [ 183.858937][ T9747] loop3: detected capacity change from 0 to 512 [ 184.244436][ T3419] hid-generic 0000:0000:0000.002D: hidraw0: HID v0.00 Device [sy] on syz0 [ 184.251526][ T9758] lo speed is unknown, defaulting to 1000 [ 184.284716][ T9763] __nla_validate_parse: 6 callbacks suppressed [ 184.284735][ T9763] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2142'. [ 184.300940][ T9763] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2142'. [ 184.316596][ T9763] FAULT_INJECTION: forcing a failure. [ 184.316596][ T9763] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 184.330416][ T9763] CPU: 1 UID: 0 PID: 9763 Comm: syz.4.2142 Not tainted syzkaller #0 PREEMPT(voluntary) [ 184.330452][ T9763] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 184.330473][ T9763] Call Trace: [ 184.330482][ T9763] [ 184.330532][ T9763] __dump_stack+0x1d/0x30 [ 184.330555][ T9763] dump_stack_lvl+0xe8/0x140 [ 184.330581][ T9763] dump_stack+0x15/0x1b [ 184.330602][ T9763] should_fail_ex+0x265/0x280 [ 184.330706][ T9763] should_fail+0xb/0x20 [ 184.330737][ T9763] should_fail_usercopy+0x1a/0x20 [ 184.330764][ T9763] _copy_from_user+0x1c/0xb0 [ 184.330841][ T9763] ___sys_sendmsg+0xc1/0x1d0 [ 184.330899][ T9763] __x64_sys_sendmsg+0xd4/0x160 [ 184.330946][ T9763] x64_sys_call+0x191e/0x3000 [ 184.330997][ T9763] do_syscall_64+0xd2/0x200 [ 184.331031][ T9763] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 184.331068][ T9763] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 184.331096][ T9763] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 184.331185][ T9763] RIP: 0033:0x7f8a8c61efc9 [ 184.331200][ T9763] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 184.331229][ T9763] RSP: 002b:00007f8a8b07f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 184.331255][ T9763] RAX: ffffffffffffffda RBX: 00007f8a8c875fa0 RCX: 00007f8a8c61efc9 [ 184.331271][ T9763] RDX: 0000000000000000 RSI: 0000200000000340 RDI: 0000000000000003 [ 184.331286][ T9763] RBP: 00007f8a8b07f090 R08: 0000000000000000 R09: 0000000000000000 [ 184.331302][ T9763] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 184.331317][ T9763] R13: 00007f8a8c876038 R14: 00007f8a8c875fa0 R15: 00007fff73f99478 [ 184.331403][ T9763] [ 184.392154][ T9764] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2140'. [ 184.684594][ T3597] hid-generic 0000:0000:0000.002E: hidraw0: HID v0.00 Device [sy] on syz0 [ 184.872557][ T9791] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2154'. [ 184.883119][ T9790] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2155'. [ 185.160342][ T9801] loop3: detected capacity change from 0 to 512 [ 185.236771][ T9802] lo speed is unknown, defaulting to 1000 [ 185.338159][ T9803] loop0: detected capacity change from 0 to 512 [ 185.660502][ T9812] netlink: 'syz.2.2160': attribute type 10 has an invalid length. [ 185.691064][ T9812] rdma_rxe: rxe_newlink: failed to add syz_tun [ 185.863109][ T3597] hid-generic 0000:0000:0000.002F: hidraw0: HID v0.00 Device [sy] on syz0 [ 185.986367][ T9824] xt_CT: You must specify a L4 protocol and not use inversions on it [ 186.034309][ T9818] lo speed is unknown, defaulting to 1000 [ 186.144348][ T9830] loop1: detected capacity change from 0 to 512 [ 186.144814][ T9834] SELinux: policydb version 0 does not match my version range 15-35 [ 186.160351][ T9830] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 186.169327][ T9834] SELinux: failed to load policy [ 186.204143][ T9830] ext4 filesystem being mounted at /426/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 186.225794][ T9836] loop4: detected capacity change from 0 to 164 [ 186.242582][ T9836] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 186.292824][ T9830] EXT4-fs error (device loop1): __ext4_new_inode:1279: comm syz.1.2167: failed to insert inode 16: doubly allocated? [ 186.312392][ T9843] netlink: 'syz.2.2173': attribute type 10 has an invalid length. [ 186.350323][ T9843] rdma_rxe: rxe_newlink: failed to add syz_tun [ 186.497780][ T9830] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2167'. [ 186.506750][ T9830] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2167'. [ 186.516731][ T9830] siw: device registration error -23 [ 186.580798][ T9856] lo speed is unknown, defaulting to 1000 [ 186.732316][ T9861] loop0: detected capacity change from 0 to 512 [ 186.812218][ T9865] lo speed is unknown, defaulting to 1000 [ 186.924896][ T9866] loop1: detected capacity change from 0 to 512 [ 186.937892][ T9861] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 186.946904][ T9861] EXT4-fs (loop0): orphan cleanup on readonly fs [ 186.957345][ T9861] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #16: comm syz.0.2178: corrupted inode contents [ 186.969602][ T9861] EXT4-fs (loop0): Remounting filesystem read-only [ 186.977072][ T9861] EXT4-fs (loop0): 1 truncate cleaned up [ 187.084292][ T6319] EXT4-fs (loop0): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 187.094882][ T6319] __quota_error: 143 callbacks suppressed [ 187.094896][ T6319] Quota error (device loop0): write_blk: dquota write failed [ 187.108000][ T6319] Quota error (device loop0): remove_free_dqentry: Can't write block (5) with free entries [ 187.118675][ T6319] EXT4-fs (loop0): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 187.129235][ T6319] Quota error (device loop0): write_blk: dquota write failed [ 187.136709][ T6319] Quota error (device loop0): free_dqentry: Can't move quota data block (5) to free list [ 187.182397][ T9845] loop3: detected capacity change from 0 to 512 [ 187.215996][ T9845] ext4 filesystem being mounted at /455/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 187.243743][ T6319] EXT4-fs (loop0): Quota write (off=8, len=24) cancelled because transaction is not started [ 187.254134][ T6319] Quota error (device loop0): v2_write_file_info: Can't write info structure [ 187.263247][ T6319] Quota error (device loop0): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 187.360404][ T9875] SELinux: policydb version 0 does not match my version range 15-35 [ 187.369218][ T9875] SELinux: failed to load policy [ 187.454747][ T9876] loop2: detected capacity change from 0 to 512 [ 187.844588][ T9876] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 187.853032][ T9876] EXT4-fs (loop2): orphan cleanup on readonly fs [ 187.938562][ T9876] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #16: comm syz.2.2180: corrupted inode contents [ 187.953101][ T9876] EXT4-fs (loop2): Remounting filesystem read-only [ 187.959817][ T9876] EXT4-fs (loop2): 1 truncate cleaned up [ 187.965963][ T6345] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 187.976611][ T6345] Quota error (device loop2): write_blk: dquota write failed [ 187.984009][ T6345] Quota error (device loop2): remove_free_dqentry: Can't write block (5) with free entries [ 187.994144][ T6345] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 188.004696][ T6345] Quota error (device loop2): write_blk: dquota write failed [ 188.012131][ T6345] Quota error (device loop2): free_dqentry: Can't move quota data block (5) to free list [ 188.034539][ T6345] EXT4-fs (loop2): Quota write (off=8, len=24) cancelled because transaction is not started [ 188.065234][ T9878] lo speed is unknown, defaulting to 1000 [ 188.100423][ T9884] loop3: detected capacity change from 0 to 1024 [ 188.123273][ T9884] EXT4-fs (loop3): unsupported inode size: 143 [ 188.129510][ T9884] EXT4-fs (loop3): blocksize: 1024 [ 188.169042][ T9887] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2186'. [ 188.178149][ T9887] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2186'. [ 188.189421][ T9887] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 188.335775][ T9895] loop2: detected capacity change from 0 to 512 [ 188.536513][ T9901] loop2: detected capacity change from 0 to 164 [ 188.552944][ T9901] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 188.704917][ T9913] loop4: detected capacity change from 0 to 2048 [ 188.740317][ T9913] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2197'. [ 188.870650][ T9923] loop2: detected capacity change from 0 to 512 [ 188.930591][ T9921] bond2: entered promiscuous mode [ 189.020544][ T9921] netlink: 'syz.1.2199': attribute type 10 has an invalid length. [ 189.047933][ T9923] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 189.056098][ T9923] EXT4-fs (loop2): orphan cleanup on readonly fs [ 189.066019][ T9923] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #16: comm syz.2.2194: corrupted inode contents [ 189.079104][ T9923] EXT4-fs (loop2): Remounting filesystem read-only [ 189.085732][ T9923] EXT4-fs (loop2): 1 truncate cleaned up [ 189.148306][ T9921] rdma_rxe: rxe_newlink: failed to add syz_tun [ 189.214798][ T6345] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 189.226154][ T6345] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 189.243825][ T9929] hub 9-0:1.0: USB hub found [ 189.268878][ T9929] hub 9-0:1.0: 8 ports detected [ 189.298866][ T6345] EXT4-fs (loop2): Quota write (off=8, len=24) cancelled because transaction is not started [ 189.359863][ T9914] loop3: detected capacity change from 0 to 512 [ 189.701559][ T9942] loop2: detected capacity change from 0 to 1024 [ 189.728830][ T9942] EXT4-fs (loop2): unsupported inode size: 143 [ 189.735258][ T9942] EXT4-fs (loop2): blocksize: 1024 [ 190.593165][ T3315] EXT4-fs unmount: 29 callbacks suppressed [ 190.599823][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 190.675654][ T9955] loop4: detected capacity change from 0 to 512 [ 190.714827][ T9955] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 190.722896][ T9955] EXT4-fs (loop4): orphan cleanup on readonly fs [ 190.732060][ T9972] loop3: detected capacity change from 0 to 512 [ 190.744269][ T9972] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 190.755225][ T9955] EXT4-fs error (device loop4): ext4_do_update_inode:5632: inode #16: comm syz.4.2210: corrupted inode contents [ 190.769442][ T9974] loop0: detected capacity change from 0 to 164 [ 190.776993][ T9974] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 190.785848][ T9955] EXT4-fs (loop4): Remounting filesystem read-only [ 190.792469][ T9955] EXT4-fs (loop4): 1 truncate cleaned up [ 190.798758][ T6322] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 190.809449][ T6322] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 190.831007][ T9972] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 190.845621][ T6322] EXT4-fs (loop4): Quota write (off=8, len=24) cancelled because transaction is not started [ 190.865053][ T9978] loop0: detected capacity change from 0 to 164 [ 190.871476][ T9972] ext4 filesystem being mounted at /458/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 190.883227][ T9978] Unable to read rock-ridge attributes [ 190.933918][ T9955] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 190.948040][ T9972] EXT4-fs error (device loop3): __ext4_new_inode:1279: comm syz.3.2214: failed to insert inode 16: doubly allocated? [ 190.970368][ T9978] lo speed is unknown, defaulting to 1000 [ 190.991320][ T9984] Unable to read rock-ridge attributes [ 190.997262][ T9984] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 191.008791][ T9983] __nla_validate_parse: 1 callbacks suppressed [ 191.008810][ T9983] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2219'. [ 191.078574][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 191.126370][ T9990] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2214'. [ 191.136161][ T9990] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2214'. [ 191.182252][ T9992] loop4: detected capacity change from 0 to 164 [ 191.192041][ T9990] siw: device registration error -23 [ 191.275526][ T9992] Unable to read rock-ridge attributes [ 191.366934][ T9997] Unable to read rock-ridge attributes [ 191.388759][ T9992] lo speed is unknown, defaulting to 1000 [ 191.428827][ T9997] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 191.622951][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 191.660185][T10009] loop1: detected capacity change from 0 to 164 [ 191.676397][T10009] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 191.791585][T10010] lo speed is unknown, defaulting to 1000 [ 191.794379][T10018] loop1: detected capacity change from 0 to 1024 [ 191.804674][T10018] EXT4-fs (loop1): unsupported inode size: 143 [ 191.810936][T10018] EXT4-fs (loop1): blocksize: 1024 [ 191.831338][T10020] loop0: detected capacity change from 0 to 512 [ 191.839065][T10019] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2228'. [ 191.875204][T10020] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 191.929969][T10027] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2229'. [ 191.996016][ T3419] hid_parser_main: 118 callbacks suppressed [ 191.996039][ T3419] hid-generic 0000:0000:0000.0030: unknown main item tag 0x0 [ 192.010088][ T3419] hid-generic 0000:0000:0000.0030: unknown main item tag 0x0 [ 192.017633][ T3419] hid-generic 0000:0000:0000.0030: unknown main item tag 0x0 [ 192.025106][ T3419] hid-generic 0000:0000:0000.0030: unknown main item tag 0x0 [ 192.031901][T10031] loop1: detected capacity change from 0 to 512 [ 192.032567][ T3419] hid-generic 0000:0000:0000.0030: unknown main item tag 0x0 [ 192.047010][ T3419] hid-generic 0000:0000:0000.0030: unknown main item tag 0x0 [ 192.054180][T10031] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 192.054449][ T3419] hid-generic 0000:0000:0000.0030: unknown main item tag 0x0 [ 192.062648][T10031] EXT4-fs (loop1): orphan cleanup on readonly fs [ 192.069700][ T3419] hid-generic 0000:0000:0000.0030: unknown main item tag 0x0 [ 192.069731][ T3419] hid-generic 0000:0000:0000.0030: unknown main item tag 0x0 [ 192.079892][T10031] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #16: comm syz.1.2234: corrupted inode contents [ 192.084317][ T3419] hid-generic 0000:0000:0000.0030: unknown main item tag 0x0 [ 192.085090][ T3419] hid-generic 0000:0000:0000.0030: hidraw0: HID v0.00 Device [sy] on syz0 [ 192.092126][T10031] EXT4-fs (loop1): Remounting filesystem read-only [ 192.127746][T10031] EXT4-fs (loop1): 1 truncate cleaned up [ 192.133847][ T6316] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 192.144401][ T6316] __quota_error: 61 callbacks suppressed [ 192.144437][ T6316] Quota error (device loop1): write_blk: dquota write failed [ 192.157726][ T6316] Quota error (device loop1): remove_free_dqentry: Can't write block (5) with free entries [ 192.167804][ T6316] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 192.178520][ T6316] Quota error (device loop1): write_blk: dquota write failed [ 192.185998][ T6316] Quota error (device loop1): free_dqentry: Can't move quota data block (5) to free list [ 192.196004][ T6316] EXT4-fs (loop1): Quota write (off=8, len=24) cancelled because transaction is not started [ 192.206179][ T6316] Quota error (device loop1): v2_write_file_info: Can't write info structure [ 192.215088][ T6316] Quota error (device loop1): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 192.227773][T10031] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 192.259909][ T3318] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 192.548241][T10038] loop1: detected capacity change from 0 to 512 [ 192.626022][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 192.711786][T10038] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 192.788641][T10046] loop3: detected capacity change from 0 to 128 [ 192.793444][T10038] ext4 filesystem being mounted at /443/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 192.812012][T10045] bond2: entered promiscuous mode [ 192.829082][T10045] netlink: 'syz.4.2239': attribute type 10 has an invalid length. [ 192.837814][T10045] rdma_rxe: rxe_newlink: failed to add syz_tun [ 192.897446][T10046] netlink: 'syz.3.2238': attribute type 1 has an invalid length. [ 192.911741][ T3318] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 192.922442][ T29] audit: type=1400 audit(1760907058.623:5222): avc: denied { write } for pid=10044 comm="syz.3.2238" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 192.941958][ T29] audit: type=1400 audit(1760907058.623:5223): avc: denied { create } for pid=10044 comm="syz.3.2238" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 192.962089][ T29] audit: type=1400 audit(1760907058.623:5224): avc: denied { write } for pid=10044 comm="syz.3.2238" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 193.925671][T10065] netlink: 'syz.2.2246': attribute type 10 has an invalid length. [ 193.934963][T10065] rdma_rxe: rxe_newlink: failed to add syz_tun [ 194.046885][T10062] loop0: detected capacity change from 0 to 512 [ 194.065519][T10062] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 194.073682][T10062] EXT4-fs (loop0): orphan cleanup on readonly fs [ 194.084373][T10062] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #16: comm syz.0.2245: corrupted inode contents [ 194.097231][T10062] EXT4-fs (loop0): Remounting filesystem read-only [ 194.103994][T10062] EXT4-fs (loop0): 1 truncate cleaned up [ 194.111944][ T6344] EXT4-fs (loop0): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 194.122524][ T6344] Quota error (device loop0): write_blk: dquota write failed [ 194.130601][ T6344] EXT4-fs (loop0): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 194.150518][ T6344] EXT4-fs (loop0): Quota write (off=8, len=24) cancelled because transaction is not started [ 194.162246][T10062] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 194.244562][T10077] loop1: detected capacity change from 0 to 164 [ 194.261399][T10077] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 194.262902][T10080] loop3: detected capacity change from 0 to 512 [ 194.301439][T10080] ext4: Unknown parameter 'noacl' [ 194.310379][T10080] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2251'. [ 194.319308][T10080] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2251'. [ 194.332939][T10080] loop3: detected capacity change from 0 to 128 [ 194.339820][T10080] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 194.352875][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 194.362183][T10067] loop2: detected capacity change from 0 to 512 [ 194.362954][T10080] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 194.402519][T10067] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 194.418319][T10067] EXT4-fs (loop2): orphan cleanup on readonly fs [ 194.427406][T10092] loop3: detected capacity change from 0 to 164 [ 194.432041][T10093] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2249'. [ 194.435074][T10067] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #16: comm syz.2.2247: corrupted inode contents [ 194.456096][T10092] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 194.465003][T10067] EXT4-fs (loop2): Remounting filesystem read-only [ 194.477040][T10067] EXT4-fs (loop2): 1 truncate cleaned up [ 194.482977][ T6319] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 194.494326][ T6319] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 194.505379][ T6319] EXT4-fs (loop2): Quota write (off=8, len=24) cancelled because transaction is not started [ 194.527261][T10067] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 194.653443][T10088] loop0: detected capacity change from 0 to 512 [ 194.661958][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 194.687556][T10088] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 194.703000][T10088] ext4 filesystem being mounted at /480/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 194.849663][T10103] loop2: detected capacity change from 0 to 128 [ 194.949971][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 194.998287][T10111] loop3: detected capacity change from 0 to 164 [ 195.006136][T10111] Unable to read rock-ridge attributes [ 195.021072][T10111] Unable to read rock-ridge attributes [ 195.027278][T10111] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 195.318767][T10125] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2264'. [ 195.327709][T10125] netlink: 348 bytes leftover after parsing attributes in process `syz.4.2264'. [ 195.342381][T10127] loop3: detected capacity change from 0 to 4096 [ 195.351212][T10127] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 195.735974][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 195.910183][T10144] loop4: detected capacity change from 0 to 2048 [ 195.916883][T10142] hub 9-0:1.0: USB hub found [ 195.929970][T10142] hub 9-0:1.0: 8 ports detected [ 195.940607][T10144] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 196.001504][T10138] loop2: detected capacity change from 0 to 512 [ 196.031693][T10138] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 196.122388][T10138] ext4 filesystem being mounted at /448/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 196.206967][T10158] loop1: detected capacity change from 0 to 4096 [ 196.219988][T10158] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 196.236472][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 196.288968][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 196.326681][T10164] loop4: detected capacity change from 0 to 1024 [ 196.351272][T10164] EXT4-fs (loop4): unsupported inode size: 143 [ 196.357533][T10164] EXT4-fs (loop4): blocksize: 1024 [ 196.555613][ T3318] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 196.628812][T10181] loop0: detected capacity change from 0 to 164 [ 196.641851][T10181] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 196.696419][T10184] loop4: detected capacity change from 0 to 2048 [ 196.731051][ T3419] hid-generic 0000:0000:0000.0031: hidraw0: HID v0.00 Device [sy] on syz0 [ 196.875580][T10184] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 196.896636][T10196] hub 9-0:1.0: USB hub found [ 196.924019][T10196] hub 9-0:1.0: 8 ports detected [ 196.961194][T10184] __nla_validate_parse: 6 callbacks suppressed [ 196.961214][T10184] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2290'. [ 197.086951][T10202] loop1: detected capacity change from 0 to 2048 [ 197.134731][T10205] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2290'. [ 197.166381][T10202] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 197.207388][T10202] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2295'. [ 197.238996][T10202] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2295'. [ 197.414561][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 197.464883][T10215] loop4: detected capacity change from 0 to 164 [ 197.492669][T10215] Unable to read rock-ridge attributes [ 197.501289][T10216] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2298'. [ 197.526085][T10215] lo speed is unknown, defaulting to 1000 [ 197.608261][T10217] Unable to read rock-ridge attributes [ 197.633612][T10217] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 197.685490][T10219] loop2: detected capacity change from 0 to 4096 [ 197.717360][T10219] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 197.755865][ T3318] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 197.779134][T10225] loop4: detected capacity change from 0 to 512 [ 197.795348][T10225] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 197.815459][T10219] random: crng reseeded on system resumption [ 197.815582][T10225] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 197.834334][T10225] ext4 filesystem being mounted at /426/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 197.845717][ T29] kauditd_printk_skb: 97 callbacks suppressed [ 197.845742][ T29] audit: type=1326 audit(1760907063.553:5311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10218 comm="syz.2.2300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a31c4efc9 code=0x7ffc0000 [ 197.852957][T10225] EXT4-fs error (device loop4): __ext4_new_inode:1279: comm syz.4.2302: failed to insert inode 16: doubly allocated? [ 197.876220][ T29] audit: type=1326 audit(1760907063.553:5312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10218 comm="syz.2.2300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a31c4efc9 code=0x7ffc0000 [ 197.892272][T10219] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=10219 comm=syz.2.2300 [ 197.912212][ T29] audit: type=1326 audit(1760907063.593:5313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10218 comm="syz.2.2300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7a31c4efc9 code=0x7ffc0000 [ 197.948127][ T29] audit: type=1326 audit(1760907063.593:5314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10218 comm="syz.2.2300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a31c4efc9 code=0x7ffc0000 [ 197.971671][ T29] audit: type=1326 audit(1760907063.593:5315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10218 comm="syz.2.2300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a31c4efc9 code=0x7ffc0000 [ 197.995892][ T29] audit: type=1326 audit(1760907063.593:5316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10218 comm="syz.2.2300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7a31c4efc9 code=0x7ffc0000 [ 198.019441][ T29] audit: type=1326 audit(1760907063.593:5317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10218 comm="syz.2.2300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a31c4efc9 code=0x7ffc0000 [ 198.043783][ T29] audit: type=1326 audit(1760907063.593:5318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10218 comm="syz.2.2300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f7a31c4efc9 code=0x7ffc0000 [ 198.067452][ T29] audit: type=1326 audit(1760907063.593:5319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10218 comm="syz.2.2300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a31c4efc9 code=0x7ffc0000 [ 198.091741][ T29] audit: type=1326 audit(1760907063.593:5320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10218 comm="syz.2.2300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7a31c4efc9 code=0x7ffc0000 [ 198.167064][T10231] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2303'. [ 198.195247][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 198.216499][T10235] loop3: detected capacity change from 0 to 128 [ 198.267945][T10238] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2302'. [ 198.277645][T10238] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2302'. [ 198.310191][T10243] bond6: entered promiscuous mode [ 198.317504][T10243] netlink: 'syz.2.2307': attribute type 10 has an invalid length. [ 198.325928][T10243] rdma_rxe: rxe_newlink: failed to add syz_tun [ 198.356432][T10246] hub 9-0:1.0: USB hub found [ 198.361138][T10246] hub 9-0:1.0: 8 ports detected [ 198.598443][T10257] loop2: detected capacity change from 0 to 164 [ 198.606856][T10257] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 198.698646][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 198.762566][T10264] netlink: 'syz.4.2314': attribute type 10 has an invalid length. [ 198.771603][T10264] rdma_rxe: rxe_newlink: failed to add syz_tun [ 198.926302][T10267] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2316'. [ 199.190972][T10274] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2317'. [ 199.736652][T10290] loop3: detected capacity change from 0 to 164 [ 199.751503][T10290] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 199.811221][T10293] loop3: detected capacity change from 0 to 164 [ 199.834419][T10293] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 199.964821][T10300] loop4: detected capacity change from 0 to 128 [ 200.003014][T10305] loop3: detected capacity change from 0 to 164 [ 200.010414][T10305] Unable to read rock-ridge attributes [ 200.026688][T10305] lo speed is unknown, defaulting to 1000 [ 200.093127][T10308] Unable to read rock-ridge attributes [ 200.100216][T10308] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 200.138186][T10315] FAULT_INJECTION: forcing a failure. [ 200.138186][T10315] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 200.151329][T10315] CPU: 1 UID: 0 PID: 10315 Comm: syz.2.2333 Not tainted syzkaller #0 PREEMPT(voluntary) [ 200.151356][T10315] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 200.151369][T10315] Call Trace: [ 200.151375][T10315] [ 200.151383][T10315] __dump_stack+0x1d/0x30 [ 200.151459][T10315] dump_stack_lvl+0xe8/0x140 [ 200.151484][T10315] dump_stack+0x15/0x1b [ 200.151505][T10315] should_fail_ex+0x265/0x280 [ 200.151558][T10315] should_fail+0xb/0x20 [ 200.151597][T10315] should_fail_usercopy+0x1a/0x20 [ 200.151696][T10315] _copy_from_user+0x1c/0xb0 [ 200.151730][T10315] ___sys_sendmsg+0xc1/0x1d0 [ 200.151803][T10315] __x64_sys_sendmsg+0xd4/0x160 [ 200.151858][T10315] x64_sys_call+0x191e/0x3000 [ 200.151882][T10315] do_syscall_64+0xd2/0x200 [ 200.151910][T10315] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 200.152005][T10315] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 200.152100][T10315] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 200.152122][T10315] RIP: 0033:0x7f7a31c4efc9 [ 200.152137][T10315] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 200.152160][T10315] RSP: 002b:00007f7a306af038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 200.152218][T10315] RAX: ffffffffffffffda RBX: 00007f7a31ea5fa0 RCX: 00007f7a31c4efc9 [ 200.152230][T10315] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000005 [ 200.152246][T10315] RBP: 00007f7a306af090 R08: 0000000000000000 R09: 0000000000000000 [ 200.152262][T10315] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 200.152275][T10315] R13: 00007f7a31ea6038 R14: 00007f7a31ea5fa0 R15: 00007fffff6c78e8 [ 200.152295][T10315] [ 200.569382][T10338] hub 9-0:1.0: USB hub found [ 200.574142][T10338] hub 9-0:1.0: 8 ports detected [ 200.649468][T10341] loop3: detected capacity change from 0 to 164 [ 200.656763][T10341] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 200.837050][T10347] loop3: detected capacity change from 0 to 164 [ 200.874311][T10347] Unable to read rock-ridge attributes [ 200.952608][T10347] lo speed is unknown, defaulting to 1000 [ 201.011915][T10353] Unable to read rock-ridge attributes [ 201.043512][T10352] loop0: detected capacity change from 0 to 2048 [ 201.083530][T10353] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 201.110194][T10352] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 201.403678][T10373] loop4: detected capacity change from 0 to 1024 [ 201.410721][T10373] EXT4-fs (loop4): unsupported inode size: 143 [ 201.417026][T10373] EXT4-fs (loop4): blocksize: 1024 [ 201.554742][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 201.581240][T10377] loop3: detected capacity change from 0 to 128 [ 201.705256][T10398] loop4: detected capacity change from 0 to 1024 [ 201.711968][T10398] EXT4-fs: Ignoring removed orlov option [ 201.717773][T10398] EXT4-fs: Ignoring removed mblk_io_submit option [ 201.730748][T10398] EXT4-fs (loop4): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 201.802919][T10398] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 201.835385][T10398] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 202.012493][T10410] __nla_validate_parse: 27 callbacks suppressed [ 202.012513][T10410] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2371'. [ 202.027847][T10411] loop2: detected capacity change from 0 to 4096 [ 202.036368][T10411] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 202.060798][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 202.142204][T10414] lo speed is unknown, defaulting to 1000 [ 202.240554][T10416] loop1: detected capacity change from 0 to 512 [ 202.285951][T10416] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 202.510237][T10411] random: crng reseeded on system resumption [ 202.546243][T10411] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=10411 comm=syz.2.2372 [ 202.603029][T10423] loop0: detected capacity change from 0 to 164 [ 202.625923][T10423] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 202.753865][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 202.848830][T10441] loop4: detected capacity change from 0 to 512 [ 202.962464][T10441] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 203.056806][ T3318] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 203.390221][ T29] kauditd_printk_skb: 242 callbacks suppressed [ 203.390323][ T29] audit: type=1326 audit(1760907069.083:5563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10437 comm="syz.0.2381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e960befc9 code=0x7ffc0000 [ 203.487754][ T29] audit: type=1326 audit(1760907069.123:5564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10437 comm="syz.0.2381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e960befc9 code=0x7ffc0000 [ 203.654137][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 203.664025][T10454] hub 9-0:1.0: USB hub found [ 203.710474][T10454] hub 9-0:1.0: 8 ports detected [ 203.742112][ T29] audit: type=1326 audit(1760907069.213:5565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10437 comm="syz.0.2381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1e960befc9 code=0x7ffc0000 [ 203.766502][ T29] audit: type=1326 audit(1760907069.223:5566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10437 comm="syz.0.2381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e960befc9 code=0x7ffc0000 [ 203.790013][ T29] audit: type=1326 audit(1760907069.223:5567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10437 comm="syz.0.2381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e960befc9 code=0x7ffc0000 [ 203.814156][ T29] audit: type=1326 audit(1760907069.223:5568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10437 comm="syz.0.2381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1e960befc9 code=0x7ffc0000 [ 203.837677][ T29] audit: type=1326 audit(1760907069.223:5569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10437 comm="syz.0.2381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e960befc9 code=0x7ffc0000 [ 203.861846][ T29] audit: type=1326 audit(1760907069.223:5570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10437 comm="syz.0.2381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e960befc9 code=0x7ffc0000 [ 203.886081][ T29] audit: type=1326 audit(1760907069.233:5571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10437 comm="syz.0.2381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1e960befc9 code=0x7ffc0000 [ 203.909587][ T29] audit: type=1326 audit(1760907069.233:5572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10437 comm="syz.0.2381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e960befc9 code=0x7ffc0000 [ 204.057088][T10467] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2390'. [ 204.066148][T10467] netlink: 348 bytes leftover after parsing attributes in process `syz.2.2390'. [ 204.075264][T10467] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2390'. [ 204.084204][T10467] netlink: 348 bytes leftover after parsing attributes in process `syz.2.2390'. [ 204.103298][T10467] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2390'. [ 204.209521][T10477] loop4: detected capacity change from 0 to 512 [ 204.359776][T10484] lo speed is unknown, defaulting to 1000 [ 204.658841][T10477] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 204.903110][T10477] EXT4-fs (loop4): orphan cleanup on readonly fs [ 204.936179][T10477] EXT4-fs error (device loop4): ext4_do_update_inode:5632: inode #16: comm syz.4.2385: corrupted inode contents [ 204.984367][T10477] EXT4-fs (loop4): Remounting filesystem read-only [ 204.999357][T10477] EXT4-fs (loop4): 1 truncate cleaned up [ 205.009614][T10496] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2400'. [ 205.029516][ T6345] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 205.040210][ T6345] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 205.094109][ T6345] EXT4-fs (loop4): Quota write (off=8, len=24) cancelled because transaction is not started [ 205.113711][T10477] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 205.145925][T10499] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2401'. [ 205.154860][T10499] netlink: 348 bytes leftover after parsing attributes in process `syz.3.2401'. [ 205.163952][T10499] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2401'. [ 205.351939][T10504] netlink: 'syz.3.2403': attribute type 10 has an invalid length. [ 205.373808][T10504] rdma_rxe: rxe_newlink: failed to add syz_tun [ 205.521114][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 205.571395][T10515] bond2: entered promiscuous mode [ 205.718972][T10531] loop1: detected capacity change from 0 to 164 [ 205.735196][T10515] netlink: 'syz.3.2406': attribute type 10 has an invalid length. [ 205.747838][T10515] rdma_rxe: rxe_newlink: failed to add syz_tun [ 205.758604][T10533] loop0: detected capacity change from 0 to 164 [ 205.765808][T10531] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 205.765841][T10533] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 206.064753][T10546] hub 9-0:1.0: USB hub found [ 206.116528][T10546] hub 9-0:1.0: 8 ports detected [ 206.185321][T10551] loop1: detected capacity change from 0 to 164 [ 206.213010][T10551] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 206.265779][T10560] loop2: detected capacity change from 0 to 164 [ 206.273101][T10561] bond3: entered promiscuous mode [ 206.278534][T10560] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 206.315413][T10561] netlink: 'syz.0.2428': attribute type 10 has an invalid length. [ 206.326172][T10566] loop2: detected capacity change from 0 to 164 [ 206.336364][T10561] syz1: rxe_newlink: already configured on syz_tun [ 206.390900][T10547] loop4: detected capacity change from 0 to 512 [ 206.406227][T10566] Unable to read rock-ridge attributes [ 206.437339][T10566] lo speed is unknown, defaulting to 1000 [ 206.455454][T10547] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 206.543573][T10547] ext4 filesystem being mounted at /444/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 206.628692][T10576] Unable to read rock-ridge attributes [ 206.654766][T10576] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 206.695544][T10582] loop0: detected capacity change from 0 to 512 [ 206.766185][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 207.098236][T10582] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 207.164555][T10592] loop3: detected capacity change from 0 to 512 [ 207.195406][T10592] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 207.211837][T10596] loop2: detected capacity change from 0 to 164 [ 207.223422][T10596] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 207.240260][T10592] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 207.268872][T10586] loop1: detected capacity change from 0 to 512 [ 207.288697][T10592] ext4 filesystem being mounted at /500/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 207.308340][T10592] EXT4-fs error (device loop3): __ext4_new_inode:1279: comm syz.3.2439: failed to insert inode 16: doubly allocated? [ 207.322714][T10586] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 207.333098][T10586] EXT4-fs (loop1): orphan cleanup on readonly fs [ 207.345930][T10606] bond7: entered promiscuous mode [ 207.352494][T10586] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #16: comm syz.1.2436: corrupted inode contents [ 207.365412][T10586] EXT4-fs (loop1): Remounting filesystem read-only [ 207.372084][T10586] EXT4-fs (loop1): 1 truncate cleaned up [ 207.377958][ T6316] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 207.388569][ T6316] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 207.400039][ T6316] EXT4-fs (loop1): Quota write (off=8, len=24) cancelled because transaction is not started [ 207.412333][T10586] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 207.416109][T10606] netlink: 'syz.2.2442': attribute type 10 has an invalid length. [ 207.435482][T10606] rdma_rxe: rxe_newlink: failed to add syz_tun [ 207.443056][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 207.490174][ T3318] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 207.582706][T10623] SELinux: policydb version 0 does not match my version range 15-35 [ 207.610753][T10623] SELinux: failed to load policy [ 207.625451][T10627] loop1: detected capacity change from 0 to 164 [ 207.633591][T10627] Unable to read rock-ridge attributes [ 207.658590][T10630] __nla_validate_parse: 7 callbacks suppressed [ 207.658606][T10630] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2439'. [ 207.674457][T10630] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2439'. [ 207.683782][T10627] lo speed is unknown, defaulting to 1000 [ 207.694675][T10632] Unable to read rock-ridge attributes [ 207.756839][T10632] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 207.822187][T10630] siw: device registration error -23 [ 208.094292][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 208.114968][T10644] bond3: entered promiscuous mode [ 208.163785][T10644] netlink: 'syz.1.2456': attribute type 10 has an invalid length. [ 208.183578][T10644] rdma_rxe: rxe_newlink: failed to add syz_tun [ 208.233088][T10635] loop0: detected capacity change from 0 to 512 [ 208.256801][T10635] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 208.278361][T10654] loop4: detected capacity change from 0 to 164 [ 208.284789][T10635] ext4 filesystem being mounted at /522/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 208.296702][T10654] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 208.306495][T10655] loop1: detected capacity change from 0 to 128 [ 208.342096][T10658] FAULT_INJECTION: forcing a failure. [ 208.342096][T10658] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 208.356040][T10658] CPU: 1 UID: 0 PID: 10658 Comm: syz.4.2460 Not tainted syzkaller #0 PREEMPT(voluntary) [ 208.356076][T10658] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 208.356091][T10658] Call Trace: [ 208.356099][T10658] [ 208.356108][T10658] __dump_stack+0x1d/0x30 [ 208.356178][T10658] dump_stack_lvl+0xe8/0x140 [ 208.356245][T10658] dump_stack+0x15/0x1b [ 208.356269][T10658] should_fail_ex+0x265/0x280 [ 208.356393][T10658] should_fail+0xb/0x20 [ 208.356485][T10658] should_fail_usercopy+0x1a/0x20 [ 208.356505][T10658] _copy_from_user+0x1c/0xb0 [ 208.356544][T10658] ___sys_sendmsg+0xc1/0x1d0 [ 208.356644][T10658] __x64_sys_sendmsg+0xd4/0x160 [ 208.356718][T10658] x64_sys_call+0x191e/0x3000 [ 208.356790][T10658] do_syscall_64+0xd2/0x200 [ 208.356816][T10658] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 208.356844][T10658] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 208.356907][T10658] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 208.356936][T10658] RIP: 0033:0x7f8a8c61efc9 [ 208.356955][T10658] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 208.356980][T10658] RSP: 002b:00007f8a8b07f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 208.357076][T10658] RAX: ffffffffffffffda RBX: 00007f8a8c875fa0 RCX: 00007f8a8c61efc9 [ 208.357089][T10658] RDX: 0000000000044084 RSI: 0000200000004bc0 RDI: 0000000000000003 [ 208.357101][T10658] RBP: 00007f8a8b07f090 R08: 0000000000000000 R09: 0000000000000000 [ 208.357161][T10658] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 208.357178][T10658] R13: 00007f8a8c876038 R14: 00007f8a8c875fa0 R15: 00007fff73f99478 [ 208.357196][T10658] [ 208.556662][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 208.565270][T10660] lo speed is unknown, defaulting to 1000 [ 209.067193][ T29] kauditd_printk_skb: 219 callbacks suppressed [ 209.067208][ T29] audit: type=1326 audit(1760907074.763:5780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10679 comm="syz.2.2467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a31c4efc9 code=0x7ffc0000 [ 209.097638][ T29] audit: type=1326 audit(1760907074.763:5781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10679 comm="syz.2.2467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a31c4efc9 code=0x7ffc0000 [ 209.127098][ T29] audit: type=1326 audit(1760907074.813:5782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10679 comm="syz.2.2467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7f7a31c4efc9 code=0x7ffc0000 [ 209.150745][ T29] audit: type=1326 audit(1760907074.813:5783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10679 comm="syz.2.2467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a31c4efc9 code=0x7ffc0000 [ 209.174654][ T29] audit: type=1326 audit(1760907074.813:5784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10679 comm="syz.2.2467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a31c4efc9 code=0x7ffc0000 [ 209.198235][ T29] audit: type=1326 audit(1760907074.823:5785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10679 comm="syz.2.2467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f7a31c4efc9 code=0x7ffc0000 [ 209.222093][ T29] audit: type=1326 audit(1760907074.823:5786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10679 comm="syz.2.2467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a31c4efc9 code=0x7ffc0000 [ 209.245885][ T29] audit: type=1326 audit(1760907074.823:5787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10679 comm="syz.2.2467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f7a31c4efc9 code=0x7ffc0000 [ 209.269423][ T29] audit: type=1326 audit(1760907074.823:5788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10679 comm="syz.2.2467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a31c4efc9 code=0x7ffc0000 [ 209.292992][ T29] audit: type=1326 audit(1760907074.823:5789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10679 comm="syz.2.2467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=244 compat=0 ip=0x7f7a31c4efc9 code=0x7ffc0000 [ 209.321267][T10682] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2468'. [ 209.338928][T10687] loop1: detected capacity change from 0 to 512 [ 209.347298][T10687] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 209.365585][T10687] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 209.379072][T10687] ext4 filesystem being mounted at /485/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 209.396688][T10687] EXT4-fs error (device loop1): __ext4_new_inode:1279: comm syz.1.2470: failed to insert inode 16: doubly allocated? [ 209.433472][T10696] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2472'. [ 209.442435][T10696] netlink: 348 bytes leftover after parsing attributes in process `syz.3.2472'. [ 209.451672][T10696] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2472'. [ 209.460628][T10696] netlink: 348 bytes leftover after parsing attributes in process `syz.3.2472'. [ 209.470537][T10696] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2472'. [ 209.576584][T10701] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2470'. [ 209.585539][T10701] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2470'. [ 209.595283][T10701] siw: device registration error -23 [ 209.652868][T10706] ================================================================== [ 209.660987][T10706] BUG: KCSAN: data-race in mas_state_walk / mas_wr_store_entry [ 209.668552][T10706] [ 209.670883][T10706] write to 0xffff888106ab3d00 of 8 bytes by task 10704 on cpu 1: [ 209.678605][T10706] mas_wr_store_entry+0x1d98/0x26e0 [ 209.683822][T10706] mas_store_prealloc+0x74d/0xa80 [ 209.688860][T10706] vma_iter_store_new+0x1c5/0x200 [ 209.693902][T10706] vma_complete+0x125/0x580 [ 209.698414][T10706] __split_vma+0x591/0x650 [ 209.702850][T10706] vma_modify+0x21e/0xc80 [ 209.707210][T10706] vma_modify_flags+0x101/0x130 [ 209.712077][T10706] mprotect_fixup+0x2cc/0x570 [ 209.716773][T10706] do_mprotect_pkey+0x6d6/0x980 [ 209.721648][T10706] __x64_sys_mprotect+0x48/0x60 [ 209.726510][T10706] x64_sys_call+0x2752/0x3000 [ 209.731197][T10706] do_syscall_64+0xd2/0x200 [ 209.735718][T10706] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 209.741624][T10706] [ 209.743964][T10706] read to 0xffff888106ab3d00 of 8 bytes by task 10706 on cpu 0: [ 209.751610][T10706] mas_state_walk+0x485/0x650 [ 209.756322][T10706] mas_walk+0x60/0x150 [ 209.760424][T10706] lock_vma_under_rcu+0x95/0x170 [ 209.765384][T10706] do_user_addr_fault+0x233/0x1080 [ 209.770513][T10706] exc_page_fault+0x62/0xa0 [ 209.775026][T10706] asm_exc_page_fault+0x26/0x30 [ 209.779888][T10706] [ 209.782214][T10706] value changed: 0xffff888106ab300e -> 0xffff888106ab3d00 [ 209.789370][T10706] [ 209.791807][T10706] Reported by Kernel Concurrency Sanitizer on: [ 209.797972][T10706] CPU: 0 UID: 0 PID: 10706 Comm: syz.3.2475 Not tainted syzkaller #0 PREEMPT(voluntary) [ 209.807786][T10706] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 209.817877][T10706] ================================================================== SYZFAIL: failed to send rpc fd=3 want=25936 sent=0 n=-1 (errno 32: Broken pipe) [ 210.206401][ T6322] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 210.217466][ T6322] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.238880][ T3598] syz1: Port: 1 Link DOWN [ 210.307855][ T6322] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 210.318959][ T6322] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.372008][T10698] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 210.426442][ T6322] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 210.436754][ T6322] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.526827][ T6322] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 210.537206][ T6322] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.626977][ T6322] bridge_slave_1: left allmulticast mode [ 210.632641][ T6322] bridge_slave_1: left promiscuous mode [ 210.638300][ T6322] bridge0: port 2(bridge_slave_1) entered disabled state [ 210.646679][ T6322] bridge_slave_0: left allmulticast mode [ 210.652325][ T6322] bridge_slave_0: left promiscuous mode [ 210.658044][ T6322] bridge0: port 1(bridge_slave_0) entered disabled state [ 210.707289][ T6322] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 210.825954][ T6322] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 210.835693][ T6322] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 210.845018][ T6322] bond0 (unregistering): Released all slaves [ 210.853623][ T6322] bond1 (unregistering): Released all slaves [ 210.862036][ T6322] bond2 (unregistering): Released all slaves [ 210.870381][ T6322] bond3 (unregistering): Released all slaves [ 210.878854][ T6322] bond4 (unregistering): Released all slaves [ 210.887444][ T6322] bond5 (unregistering): Released all slaves [ 210.895929][ T6322] bond6 (unregistering): Released all slaves [ 210.904597][ T6322] bond7 (unregistering): Released all slaves [ 210.958390][ T6322] hsr_slave_0: left promiscuous mode [ 210.964093][ T6322] hsr_slave_1: left promiscuous mode [ 210.969775][ T6322] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 210.977270][ T6322] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 210.985114][ T6322] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 210.992495][ T6322] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 211.003601][ T6322] veth1_macvtap: left promiscuous mode [ 211.009109][ T6322] veth0_macvtap: left promiscuous mode [ 211.014708][ T6322] veth1_vlan: left promiscuous mode [ 211.019998][ T6322] veth0_vlan: left promiscuous mode [ 211.079007][ T6322] team0 (unregistering): Port device team_slave_0 removed [ 211.378951][ T6322] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.455609][ T6322] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.496036][ T6322] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.555899][ T6322] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.638351][ T6322] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.696380][ T6322] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.736080][ T6322] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.776232][ T6322] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.838456][ T6322] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.885805][ T6322] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.946356][ T6322] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.005474][ T6322] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.059597][ T6322] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.116275][ T6322] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.165661][ T6322] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.216020][ T6322] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.297581][ T6322] bridge_slave_1: left allmulticast mode [ 212.303291][ T6322] bridge_slave_1: left promiscuous mode [ 212.308979][ T6322] bridge0: port 2(bridge_slave_1) entered disabled state [ 212.316855][ T6322] bridge_slave_0: left allmulticast mode [ 212.322494][ T6322] bridge_slave_0: left promiscuous mode [ 212.328776][ T6322] bridge0: port 1(bridge_slave_0) entered disabled state [ 212.336959][ T6322] bridge_slave_1: left allmulticast mode [ 212.342601][ T6322] bridge_slave_1: left promiscuous mode [ 212.348311][ T6322] bridge0: port 2(bridge_slave_1) entered disabled state [ 212.355994][ T6322] bridge_slave_0: left allmulticast mode [ 212.361631][ T6322] bridge_slave_0: left promiscuous mode [ 212.367476][ T6322] bridge0: port 1(bridge_slave_0) entered disabled state [ 212.376085][ T6322] bridge_slave_1: left allmulticast mode [ 212.381725][ T6322] bridge_slave_1: left promiscuous mode [ 212.388075][ T6322] bridge0: port 2(bridge_slave_1) entered disabled state [ 212.395902][ T6322] bridge_slave_0: left allmulticast mode [ 212.401625][ T6322] bridge_slave_0: left promiscuous mode [ 212.407341][ T6322] bridge0: port 1(bridge_slave_0) entered disabled state [ 212.499766][ T6322] bond1 (unregistering): (slave ip6gretap1): Removing an active aggregator [ 212.509231][ T6322] bond1 (unregistering): (slave ip6gretap1): Releasing backup interface [ 212.533903][ T6322] dvmrp1 (unregistering): left allmulticast mode [ 212.547001][ T6322] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 212.595815][ T6322] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 212.606006][ T6322] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 212.615537][ T6322] bond0 (unregistering): Released all slaves [ 212.624147][ T6322] bond1 (unregistering): Released all slaves [ 212.632421][ T6322] bond2 (unregistering): Released all slaves [ 212.658259][ T6322] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 212.775773][ T6322] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 212.785438][ T6322] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 212.794954][ T6322] bond0 (unregistering): Released all slaves [ 212.804002][ T6322] bond1 (unregistering): Released all slaves [ 212.812126][ T6322] bond2 (unregistering): Released all slaves [ 212.820606][ T6322] bond3 (unregistering): Released all slaves [ 212.845088][ T6322] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 212.853831][ T6322] bridge0 (unregistering): left promiscuous mode [ 212.860178][ T6322] bridge0 (unregistering): left allmulticast mode [ 212.895041][ T6322] bond0 (unregistering): left promiscuous mode [ 212.901224][ T6322] bond_slave_0: left promiscuous mode [ 212.906748][ T6322] bond_slave_1: left promiscuous mode [ 212.912936][ T6322] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 212.922156][ T6322] bond_slave_0: left allmulticast mode [ 212.929015][ T6322] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 212.938621][ T6322] bond_slave_1: left allmulticast mode [ 212.944970][ T6322] bond0 (unregistering): Released all slaves [ 212.953559][ T6322] bond1 (unregistering): Released all slaves [ 212.961689][ T6322] bond2 (unregistering): Released all slaves [ 212.969877][ T6322] bond3 (unregistering): Released all slaves [ 213.115247][ T6322] $Hÿ (unregistering): (slave bond_slave_0): Releasing backup interface [ 213.123971][ T6322] bond_slave_0: left promiscuous mode [ 213.130612][ T6322] $Hÿ (unregistering): (slave bond_slave_1): Releasing backup interface [ 213.139407][ T6322] bond_slave_1: left promiscuous mode [ 213.145791][ T6322] $Hÿ (unregistering): Released all slaves [ 213.153909][ T6322] bond0 (unregistering): Released all slaves [ 213.162363][ T6322] bond1 (unregistering): Released all slaves [ 213.170906][ T6322] bond2 (unregistering): Released all slaves [ 213.245807][ T6322] hsr_slave_0: left promiscuous mode [ 213.251663][ T6322] hsr_slave_1: left promiscuous mode [ 213.257430][ T6322] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 213.264832][ T6322] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 213.272370][ T6322] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 213.279929][ T6322] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 213.289930][ T6322] hsr_slave_0: left promiscuous mode [ 213.295768][ T6322] hsr_slave_1: left promiscuous mode [ 213.301370][ T6322] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 213.308873][ T6322] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 213.316427][ T6322] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 213.323983][ T6322] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 213.332044][ T6322] batadv0: left promiscuous mode [ 213.339200][ T6322] hsr_slave_0: left promiscuous mode [ 213.345106][ T6322] hsr_slave_1: left promiscuous mode [ 213.350727][ T6322] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 213.358237][ T6322] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 213.365845][ T6322] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 213.373277][ T6322] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 213.382440][ T6322] hsr_slave_0: left promiscuous mode [ 213.388222][ T6322] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 213.395637][ T6322] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 213.403260][ T6322] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 213.410816][ T6322] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 213.430266][ T6322] veth1_macvtap: left promiscuous mode [ 213.435795][ T6322] veth0_macvtap: left promiscuous mode [ 213.441353][ T6322] veth1_vlan: left promiscuous mode [ 213.446577][ T6322] veth0_vlan: left promiscuous mode [ 213.452231][ T6322] veth1_macvtap: left promiscuous mode [ 213.457767][ T6322] veth0_macvtap: left promiscuous mode [ 213.463290][ T6322] veth1_vlan: left promiscuous mode [ 213.468526][ T6322] veth0_vlan: left promiscuous mode [ 213.474311][ T6322] veth1_macvtap: left promiscuous mode [ 213.479776][ T6322] veth0_macvtap: left promiscuous mode [ 213.485324][ T6322] veth1_vlan: left promiscuous mode [ 213.490548][ T6322] veth0_vlan: left promiscuous mode [ 213.496351][ T6322] veth1_macvtap: left promiscuous mode [ 213.501825][ T6322] veth0_macvtap: left promiscuous mode [ 213.507560][ T6322] veth1_vlan: left promiscuous mode [ 213.512773][ T6322] veth0_vlan: left promiscuous mode [ 213.669957][ T6322] team0 (unregistering): Port device team_slave_1 removed [ 213.679677][ T6322] team0 (unregistering): Port device team_slave_0 removed [ 213.736362][ T6322] team0 (unregistering): Port device team_slave_1 removed [ 213.745549][ T6322] team0 (unregistering): Port device team_slave_0 removed [ 213.802217][ T6322] team0 (unregistering): Port device team_slave_1 removed [ 213.811865][ T6322] team0 (unregistering): Port device team_slave_0 removed [ 213.864306][ T6322] team0 (unregistering): Port device team_slave_1 removed [ 213.874135][ T6322] team0 (unregistering): Port device team_slave_0 removed [ 213.906704][ T9] lo speed is unknown, defaulting to 1000 [ 213.912473][ T9] infiniband syz2: ib_query_port failed (-19)