last executing test programs: 4.910102224s ago: executing program 4 (id=988): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000060000000500000000"], 0x48) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001780)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000000}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_GET(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000580)={0x0, 0x60}, 0x1, 0x0, 0x0, 0x4008000}, 0x20044011) ioctl$TIOCL_UNBLANKSCREEN(r0, 0x541c, &(0x7f0000000180)) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000ebff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000540)='GPL\x00', 0xfffffffd, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x2642, 0x0) writev(r5, &(0x7f0000000180)=[{&(0x7f0000000040)="93d90400000300", 0x7}, {&(0x7f0000000140)="139776ff030370", 0x7}], 0x2) 4.06027712s ago: executing program 1 (id=997): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x11, 0x7, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = open(&(0x7f00000000c0)='.\x00', 0x800, 0x50) r1 = openat(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x42, 0x0) pwrite64(r1, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) rename(&(0x7f0000000000)='./file1\x00', &(0x7f0000000080)='./file2\x00') getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000001000), r2) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000002, 0x13, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00'}, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f00000010c0)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001180)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x16}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62418c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f0000000300)="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", 0xcb3}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) recvmsg$unix(r5, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x2}, 0x40000100) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) 4.015574841s ago: executing program 3 (id=998): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000fdffffff85000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) 2.968249072s ago: executing program 3 (id=1006): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000060000000500000000"], 0x48) syz_open_dev$tty20(0xc, 0x4, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001780)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000000}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_GET(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000580)={0x0, 0x60}, 0x1, 0x0, 0x0, 0x4008000}, 0x20044011) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_clone(0x6a020000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000ebff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000540)='GPL\x00', 0xfffffffd, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x2642, 0x0) writev(r5, &(0x7f0000000180)=[{&(0x7f0000000040)="93d90400000300", 0x7}, {&(0x7f0000000140)="139776ff030370", 0x7}], 0x2) 2.964529912s ago: executing program 4 (id=1007): perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x4, 0x0, 0xfffffffc, 0x4, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_setup(0x22f, &(0x7f0000000a80)={0x0, 0x6b57, 0x10000, 0x0, 0x108002ce}, &(0x7f0000000000), &(0x7f0000000a00)) socket$key(0xf, 0x3, 0x2) r0 = mq_open(&(0x7f0000000a00)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb\x00\x00\x00\x00\x00', 0x42, 0x1f0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) recvmsg(r1, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000700000045000000a000020095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000003c0)='kfree\x00', r3}, 0x10) pipe2(&(0x7f0000000180)={0xffffffffffffffff}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x15, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sk_reuseport=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4000, 0x0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) mq_unlink(&(0x7f0000000000)='eth0\x00') close(r0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x800c88, &(0x7f0000000600), 0x1, 0x5a0, &(0x7f0000000640)="$eJzs3U9rHOUfAPDvs9mkf9L+kv4Qau3BQMEW1KRJK4oItlhvHvxT8CQYk7SUbtvQRLC1Ygv1HegLELx5EY9FpKgXr94EX4AUi7S5eBAis5mJm3Z3mya7mdr5fGCa55lnh+8zu/3uM/vszGwAlTWW/VOL2BcR8ylipKWtHnnj2Mrj7t65MrN058pMiuXld/5MkfJ1xeNT/nc433h7RPzyQ4r/D9wfd+HS5bPTjcbcxbw+sXhufmLh0uXnz5ybPj13eu781OSLky8cPTJ19HBP9nN3RPw0fqJ+/dRr+7+Z+WrPp999fSPFsdiVt7fsR70nAZvP7djqc9IqC/BSr4KUbCDfn9aXOPXsGaTfitdvMCL2xkgMtPz3H4nP3iq1c0BfLaeIZaCikvyHiiqOA7LPv8VS7hEJsFVuH1+ZALibVub2llbzv74yNxjbm3MDO5fSmomxFBG9mJnLYsw/k0ayJe6ZTwT66+q1iHiy3fifmrk52pzFz/K/tib/axHxZv43W//2BuOP3VOX/7B1NpP/77fk/wcbjC//AQAAAAAAoHduHo+I59p9/1dbPf8n2pz/MxwRx3oQ/8Hf/9Vu9SAM0Mbt4xGvRERx7t9SS/7nRgfy2u7m+QCD6dSZxtzhiPhfRByKwW1ZfbJLjLH9Pw92bGs5/y9bsvjFuYB5P27Vt63dZnZ6cXoz+wysuH0t4ql6u/xPq+N/ajP+Z+8H8+uMsXzi1R87tT04/4F+Wf4y4mDb8f/fO1ek7vfnmGgeD0wURwX3+/i9G992ii//oTzZ+L+ze/6Pptb79Sw8fIxP/vhtE/nf/vh/KJ1s3nJmKF/30fTi4sXJiKH0xv3rpx6+z/A4KvKhyJcs/w8daP/5v9vx/46IuLrOmCe/f/16pzbjP5Qny//Zhxr/VwvFqNymaW3hwLtf/NUp/vrG/6PNMf1Qvsb8H3TXJR3XFMruJwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD8F9UiYlek2vhquVYbH48YjognYmetcWFh8dlTFz48P5u1NX//v1b80u/ISj0Vv/8/2lKfuqd+JCL2RMTnAzua9fGZC43ZsnceAAAAAAAAAAAAAAAAAAAAHhHDHa7/z/w+UHbvgL6rl90BoDTyH6pL/kN1rTf/z/a5H8DWM/5Ddcl/qC75D9Ul/6G65D9Ul/wHAAAAAIDHyp6nb/6aIuLqyzuaS2YobxsstWdAv9XK7gBQGrf4gepy6g9UVyq7A0DpHvQ+sH3DWwIAAAAAAAAAAAAAvXJwn+v/oapc/w/V1fn6f3cGgMed6/+hunzGB1z/DwAAAAAAAAAAAACPvoVLl89ONxpzFzda2La5zRUU8sLeKCX631sYK1IPMm6LCmW/MwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIV/AgAA//+z//MZ") r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r5, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @ib_path={0x0, r6, 0x1, 0x2}}, 0x20) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000001c00)=0x0) stat(&(0x7f0000001c40)='./file0\x00', &(0x7f0000001c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r9 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)={0x38, 0x1403, 0x1, 0x70bd2d, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0xffaf}, 0x1, 0x0, 0x0, 0x854}, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001d40)={&(0x7f0000000040)=@proc={0x10, 0x0, 0x25dfdbfd, 0x40}, 0xc, &(0x7f0000001b80), 0x0, &(0x7f0000001d00)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r5]}}, @cred={{0x1c, 0x1, 0x2, {r7, 0x0, r8}}}], 0x40, 0x24040094}, 0x812) ptrace(0x28, r7) 2.795137216s ago: executing program 0 (id=1008): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x8, 0x6}, 0x0, 0x0, 0x800000, 0x6, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read(r0, &(0x7f0000000040)=""/148, 0xffffff96) socket(0x2, 0x80805, 0x0) perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x4, 0x0, 0xfffffffc, 0x4, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x36, 0x1, 0x0, 0x0, 0x0, 0x7, 0x514, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x4, @perf_config_ext={0x9, 0x7}, 0x0, 0x10000, 0xfffffff9, 0x7, 0x0, 0x7, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000840)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x97a3}, 0x18) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a0b040000000000000000020000000900010073797a30000000000900020073797a320000000014000000110001"], 0x54}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000002580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000080a01010000000000000000020000000900010073797a300000000038000000060a17d50000000000000000020000000900020073797a32000000000900010073797a30000000000c0003400000000000000002"], 0xcdc}}, 0x0) socket(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f0, 0x0) r5 = openat$selinux_relabel(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) write$selinux_access(r5, &(0x7f00000004c0)=ANY=[@ANYBLOB="73797374656d5f753a6f626a6563745f723a7570647077645f657865635f742073797374656d5f753a73797374656d5f723afaffffffffffffff3a73302030"], 0x56) syz_io_uring_submit(0x0, 0x0, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xffffffffffffff31}) io_uring_enter(0xffffffffffffffff, 0x7a98, 0x0, 0x0, 0x0, 0x0) 2.436215073s ago: executing program 4 (id=1009): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) syz_mount_image$iso9660(&(0x7f0000000180), &(0x7f0000000280)='./file0\x00', 0xc14002, &(0x7f0000000340)=ANY=[], 0x0, 0x729, &(0x7f0000001340)="$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") r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000400000000000000000000850000005000000085000000d000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r0}, 0xe) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$VT_RESIZE(r1, 0x5609, &(0x7f0000000080)={0x8, 0x4690, 0x4}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x7}, {0xffff, 0xe}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0x8, 0x2, 0x9}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x8}]}, 0x48}}, 0xc1) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(0xffffffffffffffff, 0x84, 0x74, &(0x7f00000006c0)=""/16, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r3, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f00000000c0)={0x2, 0x4e20, @empty}, 0x10) getsockopt$sock_buf(r4, 0x1, 0x37, &(0x7f00000003c0)=""/125, &(0x7f0000000300)=0x7d) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x1000, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) ioctl$KDSKBENT(r1, 0x4b47, &(0x7f0000000780)={0x0, 0x5, 0xa498}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3}, 0x94) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r6}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r5, &(0x7f0000000740)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x10000, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f0000000240)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000dd0000000000003b810000850000006d000000a50000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='kfree\x00', r8}, 0x10) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nfc(&(0x7f0000000000), r9) sendmsg$NFC_CMD_DEP_LINK_UP(r9, &(0x7f0000000600)={0x0, 0xffffffffffffff24, &(0x7f00000005c0)={&(0x7f0000000700)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="01002abd7000fbdbdf250400000005000a0000000000080001"], 0x3c}, 0x1, 0x0, 0x0, 0x26040041}, 0x40) 2.315264215s ago: executing program 1 (id=1010): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001380)={0x11, 0xb, &(0x7f0000000200)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socket$vsock_stream(0x28, 0x1, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r1, 0x0, 0x100000000000000}, 0x18) sendmsg$nl_route(r0, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000001c0)=ANY=[@ANYBLOB="8c000000130005"], 0x8c}}, 0x0) 2.045566531s ago: executing program 3 (id=1012): bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000), 0x4) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000140), 0xfc, 0x560, &(0x7f00000008c0)="$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") open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000d00), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)={0x44, r1, 0x1, 0x70bd29, 0x0, {}, [@ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_FEATURES_WANTED={0x18, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x20008850) sendmsg$nl_route_sched(r3, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000002700)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0x7}, {}, {0x7}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_HASH={0x8, 0x2, 0xffefffff}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0) ioprio_get$pid(0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000000000000001000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000002080)=@newtaction={0xe98, 0x30, 0x25, 0x0, 0x0, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x30, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x4}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {}, {0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x6}, {0x1000}, {}, {}, {}, {0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x20000}, {}, {}, {}, {0x1}, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {0x0, 0x0, 0x7}, {0x0, 0x7}, {0x0, 0x0, 0x0, 0xfffffffd}, {}, {0x0, 0x2, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {0xfffffffc}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x4}, {}, {}, {}, {0x0, 0x0, 0x10000000}, {0x0, 0x1, 0x0, 0x0, 0x0, 0x2}, {0x7}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {}, {}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x800000}, {}, {}, {}, {0x0, 0x0, 0x2}, {0x4, 0xc000000}, {}, {0x0, 0x80000000}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, {}, {0x0, 0x23}, {0x0, 0x0, 0x0, 0x404}, {0x0, 0x0, 0x0, 0x2, 0xfffffffd}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x100000}, {}, {}, {}, {0x0, 0x0, 0x9f, 0x0, 0x0, 0x1}, {0x20000, 0x0, 0x9}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0xfffffffd}, {}, {}, {0x0, 0x0, 0x1, 0x0, 0x747}, {0x8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x6}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xb}, {}, {}, {0x0, 0x78}, {0x0, 0x5}, {}, {0x0, 0x0, 0x0, 0x2}], [{0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {0x1}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {}, {0x0, 0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}}, 0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f00000003c0)={0x0, 0x0, 0x80, 0x7}) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000001180)=@newtaction={0x898, 0x30, 0x12f, 0x0, 0x0, {}, [{0x884, 0x1, [@m_police={0x880, 0x1, 0x0, 0x0, {{0xb}, {0x854, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}, {0x7, 0x0, 0x2, 0x0, 0x0, 0x7}}}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3, 0x247ecded, 0x0, 0x80000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x3, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xb, 0x37, 0x4, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0xffffff35, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0xb, 0x0, 0x0, 0x9, 0xfffffffd, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4f, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x5, 0x0, 0x0, 0x0, 0x9, 0x5, 0x0, 0x0, 0x3, 0x0, 0x1]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x10000004a56}, @TCA_POLICE_RATE={0x404, 0x2, [0x1, 0x0, 0x5, 0x0, 0x2, 0xb, 0xfffffffb, 0x0, 0x7, 0xfea7, 0x1, 0xffff8000, 0x90, 0x9fd, 0x2, 0xb8, 0xca2, 0x6, 0x3c, 0x7, 0x1, 0xa89c, 0x400, 0xc, 0x492217a0, 0xff, 0x5, 0x3, 0x1ff, 0xe5, 0x2d, 0xd, 0x3, 0xa, 0x3, 0x1, 0x9, 0x11, 0x188, 0x6, 0x3ff, 0x7, 0xd, 0x3, 0xc0000, 0x8, 0x8, 0xffffff40, 0x100, 0x3, 0x5, 0x7, 0xe0b2, 0x1, 0x8fc, 0xbf0, 0x9, 0x3, 0x9, 0x7ffffffd, 0x6, 0x0, 0x8, 0x800, 0x9, 0x4, 0x100, 0x401, 0x8, 0x3, 0xb5, 0x10001, 0x401, 0x1, 0x7f, 0x0, 0x8, 0x2, 0x7f, 0x0, 0x2, 0x4, 0x0, 0x1000004, 0x8000, 0x0, 0x9, 0x80, 0x7, 0x5, 0x1, 0x0, 0x7, 0xeb22, 0xd, 0x8000, 0xfffffff7, 0x0, 0x4, 0x3ff, 0x400000, 0x10, 0x5, 0x3, 0x10000, 0x5, 0x1, 0x0, 0x2, 0x6, 0x5, 0x6, 0xe5a, 0x4, 0x2, 0x81, 0xd44, 0x10, 0x6, 0x7fff, 0x800, 0xfffffff4, 0x10000, 0x5, 0x8, 0xba, 0x2, 0x89, 0x2, 0x6, 0x6, 0x9, 0xffffa3e0, 0x86b9, 0xff, 0x1, 0x2, 0xf, 0x24b9, 0x3a, 0xe01, 0x1, 0x6430, 0xd, 0x8, 0x0, 0x3, 0x7eb6, 0x3, 0x0, 0x200, 0xfffffeff, 0x9, 0xff, 0xa, 0x6, 0x7, 0x100, 0x1, 0x8001, 0x100, 0xffff9c71, 0x8, 0x101, 0x6, 0x2, 0xfffffc00, 0x81, 0x81, 0x200, 0x80000001, 0x1, 0xfffffffd, 0x9, 0x7, 0x4, 0xb, 0x80, 0x0, 0x0, 0x0, 0x5, 0x2, 0x65, 0x4, 0xfffffa0c, 0x3, 0x0, 0x2, 0x4, 0x35bc0, 0x9, 0xfffffffa, 0x7, 0x5, 0x3, 0x0, 0x6, 0x8, 0x28, 0x2, 0x5, 0x10001, 0x2, 0xf, 0xffffffff, 0x1, 0x723, 0x0, 0x9, 0x9, 0x4, 0x6, 0x7, 0x200, 0xfffffbff, 0x7, 0x3, 0x8, 0x5, 0xfffffffb, 0x2, 0x7f, 0x2, 0x80000002, 0x0, 0x9, 0x1ff, 0xfffffffe, 0x928, 0x4, 0xffffffff, 0x5, 0x6042, 0xb85, 0x6, 0x8d8d, 0x55, 0x101, 0x3, 0x64e8, 0x8, 0x82f, 0x772, 0x80a, 0xffe, 0x6, 0x3f7, 0x4, 0x8, 0x8, 0x1, 0x5d, 0x9, 0xd, 0x80]}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x3}}}}]}]}, 0x898}, 0x1, 0x0, 0x0, 0x50}, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x1c5042, 0x12) write(r8, &(0x7f0000004200)='t', 0x1) socket$nl_xfrm(0x10, 0x3, 0x6) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001100)=@migrate={0xec, 0x21, 0x1, 0x0, 0x25dfdbfb, {{@in6=@private2, @in=@rand_addr=0x64010102, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@migrate={0x9c, 0x11, [{@in6=@remote, @in=@loopback, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@local, 0x3c, 0x4, 0x0, 0x2, 0xa, 0xa}, {@in6=@private2, @in6=@private2, @in=@rand_addr=0x64010102, @in6=@mcast2, 0x3c, 0x4, 0x0, 0x0, 0x8, 0x2}]}]}, 0xec}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 1.969839002s ago: executing program 2 (id=1013): bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32, @ANYBLOB], 0x0}, 0x94) gettid() r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000dd0000000000003b810000850000006d000000a50000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x30046, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdd2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) mount(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000080)='proc\x00', 0x189, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x90) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000300)=0x2) ioctl$PPPIOCSACTIVE(r1, 0x40047459, &(0x7f0000000080)={0xfffffffffffffe43, 0x0}) read(r1, 0x0, 0x0) 1.953434452s ago: executing program 0 (id=1014): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x18) creat(&(0x7f00000000c0)='./file0\x00', 0x48) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff"], 0x15) r3 = dup(r2) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB, @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) 1.846252474s ago: executing program 0 (id=1015): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000740), 0x1, r0}, 0x38) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f0000000080)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xb, &(0x7f0000000b80)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r2}, 0x18) close(r1) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/pm_wakeup_irq', 0x0, 0xb) socket$nl_generic(0x10, 0x3, 0x10) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r4}, 0x10) socket$tipc(0x1e, 0x5, 0x0) socket(0x10, 0x803, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="660a0000180000006111980000000000180006080000000000000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00'}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x0, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180200000000000000000000d9bb000085000000b500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = syz_open_dev$loop(&(0x7f0000000440), 0x81, 0x0) ioctl$LOOP_CONFIGURE(r5, 0x4c0a, &(0x7f0000000140)={r3, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x20, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd6447a4b4e00d9683dda1af1ea09de2b7fb0a0100000000000000000300", "2809e8dbe108598927875397bab22d0000b420a9c81f40f05f819e01177d3d458dac00000000000000000000003b00000000000000000200", "90be8b1c5512406c7f00", [0x4, 0x40000000000000]}}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) r6 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000d40)=@newqdisc={0x44, 0x24, 0xd0f, 0x3, 0x0, {0x60, 0x0, 0x0, r7, {0x0, 0x2}, {0xffff, 0xffff}, {0x4}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_TARGET={0x8, 0x8, 0x1000}, @TCA_CAKE_RTT={0x8, 0x7, 0x9e}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40001d4}, 0x8840) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x4100, 0x0) ioctl$TUNSETIFINDEX(r8, 0x400454da, &(0x7f00000000c0)=r7) 1.785005205s ago: executing program 1 (id=1016): socket(0xa, 0x3, 0x8) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000080), 0xff, 0x485, &(0x7f0000001040)="$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") open(&(0x7f0000000000)='./file1\x00', 0x109042, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$kcm(0xa, 0x5, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x14, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000740), 0x1, r3}, 0x38) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r4, 0x0, 0x2}, 0x18) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) r6 = socket(0x2c, 0x3, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xff}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r7, &(0x7f0000000140), &(0x7f0000000080)=@udp6=r6}, 0x20) close_range(r5, 0xffffffffffffffff, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r8}, 0x10) setsockopt$sock_attach_bpf(r1, 0x0, 0x2e, 0x0, 0x108) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000900)=@updsa={0x144, 0x1a, 0xffffffffffffffff, 0x70bd2a, 0x3, {{@in=@private=0xa010101, @in6=@loopback, 0x0, 0x0, 0x4e24, 0x0, 0x0, 0x20, 0xa0, 0x11}, {@in=@multicast1, 0x4d4, 0x6c}, @in6=@private1, {0x9, 0x0, 0x10001, 0xfffffffffffffffd, 0x7ff, 0xfffffffffffffffc, 0xfffffffffffffffd}, {0x0, 0x0, 0xfffffffffffffffe, 0xa6}, {0x936d, 0x3d49, 0x4000}, 0x0, 0x3503, 0xa, 0x0, 0x4, 0x60}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @sec_ctx={0xc, 0x8, {0x8}}]}, 0x144}}, 0x0) 1.717785117s ago: executing program 3 (id=1017): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000fdffffff850000002d0000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) 1.692602397s ago: executing program 0 (id=1018): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000060000000500000000"], 0x48) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001780)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000000}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_GET(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000580)={0x0, 0x60}, 0x1, 0x0, 0x0, 0x4008000}, 0x20044011) ioctl$TIOCL_UNBLANKSCREEN(r0, 0x541c, &(0x7f0000000180)) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000ebff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000540)='GPL\x00', 0xfffffffd, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x2642, 0x0) writev(r5, &(0x7f0000000180)=[{&(0x7f0000000040)="93d90400000300", 0x7}, {&(0x7f0000000140)="139776ff030370", 0x7}], 0x2) 1.55153267s ago: executing program 1 (id=1019): bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000), 0x4) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000140), 0xfc, 0x560, &(0x7f00000008c0)="$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") open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000d00), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)={0x44, r1, 0x1, 0x70bd29, 0x0, {}, [@ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_FEATURES_WANTED={0x18, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x20008850) sendmsg$nl_route_sched(r3, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000002700)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0x7}, {}, {0x7}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_HASH={0x8, 0x2, 0xffefffff}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0) ioprio_get$pid(0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000000000000001000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000002080)=@newtaction={0xe98, 0x30, 0x25, 0x0, 0x0, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x30, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x4}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {}, {0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x6}, {0x1000}, {}, {}, {}, {0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x20000}, {}, {}, {}, {0x1}, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {0x0, 0x0, 0x7}, {0x0, 0x7}, {0x0, 0x0, 0x0, 0xfffffffd}, {}, {0x0, 0x2, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {0xfffffffc}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x4}, {}, {}, {}, {0x0, 0x0, 0x10000000}, {0x0, 0x1, 0x0, 0x0, 0x0, 0x2}, {0x7}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {}, {}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x800000}, {}, {}, {}, {0x0, 0x0, 0x2}, {0x4, 0xc000000}, {}, {0x0, 0x80000000}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, {}, {0x0, 0x23}, {0x0, 0x0, 0x0, 0x404}, {0x0, 0x0, 0x0, 0x2, 0xfffffffd}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x100000}, {}, {}, {}, {0x0, 0x0, 0x9f, 0x0, 0x0, 0x1}, {0x20000, 0x0, 0x9}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0xfffffffd}, {}, {}, {0x0, 0x0, 0x1, 0x0, 0x747}, {0x8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x6}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xb}, {}, {}, {0x0, 0x78}, {0x0, 0x5}, {}, {0x0, 0x0, 0x0, 0x2}], [{0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {0x1}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {}, {0x0, 0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}}, 0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f00000003c0)={0x0, 0x0, 0x80, 0x7}) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000001180)=@newtaction={0x898, 0x30, 0x12f, 0x0, 0x0, {}, [{0x884, 0x1, [@m_police={0x880, 0x1, 0x0, 0x0, {{0xb}, {0x854, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}, {0x7, 0x0, 0x2, 0x0, 0x0, 0x7}}}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3, 0x247ecded, 0x0, 0x80000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x3, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xb, 0x37, 0x4, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0xffffff35, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0xb, 0x0, 0x0, 0x9, 0xfffffffd, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4f, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x5, 0x0, 0x0, 0x0, 0x9, 0x5, 0x0, 0x0, 0x3, 0x0, 0x1]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x10000004a56}, @TCA_POLICE_RATE={0x404, 0x2, [0x1, 0x0, 0x5, 0x0, 0x2, 0xb, 0xfffffffb, 0x0, 0x7, 0xfea7, 0x1, 0xffff8000, 0x90, 0x9fd, 0x2, 0xb8, 0xca2, 0x6, 0x3c, 0x7, 0x1, 0xa89c, 0x400, 0xc, 0x492217a0, 0xff, 0x5, 0x3, 0x1ff, 0xe5, 0x2d, 0xd, 0x3, 0xa, 0x3, 0x1, 0x9, 0x11, 0x188, 0x6, 0x3ff, 0x7, 0xd, 0x3, 0xc0000, 0x8, 0x8, 0xffffff40, 0x100, 0x3, 0x5, 0x7, 0xe0b2, 0x1, 0x8fc, 0xbf0, 0x9, 0x3, 0x9, 0x7ffffffd, 0x6, 0x0, 0x8, 0x800, 0x9, 0x4, 0x100, 0x401, 0x8, 0x3, 0xb5, 0x10001, 0x401, 0x1, 0x7f, 0x0, 0x8, 0x2, 0x7f, 0x0, 0x2, 0x4, 0x0, 0x1000004, 0x8000, 0x0, 0x9, 0x80, 0x7, 0x5, 0x1, 0x0, 0x7, 0xeb22, 0xd, 0x8000, 0xfffffff7, 0x0, 0x4, 0x3ff, 0x400000, 0x10, 0x5, 0x3, 0x10000, 0x5, 0x1, 0x0, 0x2, 0x6, 0x5, 0x6, 0xe5a, 0x4, 0x2, 0x81, 0xd44, 0x10, 0x6, 0x7fff, 0x800, 0xfffffff4, 0x10000, 0x5, 0x8, 0xba, 0x2, 0x89, 0x2, 0x6, 0x6, 0x9, 0xffffa3e0, 0x86b9, 0xff, 0x1, 0x2, 0xf, 0x24b9, 0x3a, 0xe01, 0x1, 0x6430, 0xd, 0x8, 0x0, 0x3, 0x7eb6, 0x3, 0x0, 0x200, 0xfffffeff, 0x9, 0xff, 0xa, 0x6, 0x7, 0x100, 0x1, 0x8001, 0x100, 0xffff9c71, 0x8, 0x101, 0x6, 0x2, 0xfffffc00, 0x81, 0x81, 0x200, 0x80000001, 0x1, 0xfffffffd, 0x9, 0x7, 0x4, 0xb, 0x80, 0x0, 0x0, 0x0, 0x5, 0x2, 0x65, 0x4, 0xfffffa0c, 0x3, 0x0, 0x2, 0x4, 0x35bc0, 0x9, 0xfffffffa, 0x7, 0x5, 0x3, 0x0, 0x6, 0x8, 0x28, 0x2, 0x5, 0x10001, 0x2, 0xf, 0xffffffff, 0x1, 0x723, 0x0, 0x9, 0x9, 0x4, 0x6, 0x7, 0x200, 0xfffffbff, 0x7, 0x3, 0x8, 0x5, 0xfffffffb, 0x2, 0x7f, 0x2, 0x80000002, 0x0, 0x9, 0x1ff, 0xfffffffe, 0x928, 0x4, 0xffffffff, 0x5, 0x6042, 0xb85, 0x6, 0x8d8d, 0x55, 0x101, 0x3, 0x64e8, 0x8, 0x82f, 0x772, 0x80a, 0xffe, 0x6, 0x3f7, 0x4, 0x8, 0x8, 0x1, 0x5d, 0x9, 0xd, 0x80]}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x3}}}}]}]}, 0x898}, 0x1, 0x0, 0x0, 0x50}, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x1c5042, 0x12) write(r8, &(0x7f0000004200)='t', 0x1) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in6=@loopback, 0x0, 0x8, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000002}}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x2, 0x4, 0x3}]}]}, 0xfc}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001100)=@migrate={0xec, 0x21, 0x1, 0x0, 0x25dfdbfb, {{@in6=@private2, @in=@rand_addr=0x64010102, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@migrate={0x9c, 0x11, [{@in6=@remote, @in=@loopback, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@local, 0x3c, 0x4, 0x0, 0x2, 0xa, 0xa}, {@in6=@private2, @in6=@private2, @in=@rand_addr=0x64010102, @in6=@mcast2, 0x3c, 0x4, 0x0, 0x0, 0x8, 0x2}]}]}, 0xec}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 1.417956893s ago: executing program 4 (id=1020): r0 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000a3850000007000000095"], &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) symlinkat(&(0x7f0000000400)='./file0/../file0\x00', r1, &(0x7f0000000080)='./file0\x00') 1.075067959s ago: executing program 4 (id=1021): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$inet(0x2, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x800) socket$inet(0x10, 0x3, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000380)={0x2, 0x4e22, @empty}, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r2, 0x29, 0x1a, &(0x7f0000000100)=0x401, 0x4) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty, 0xffffffff}, 0x1c) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000080)={0xa, 0x14e22, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) r4 = socket$can_bcm(0x1d, 0x2, 0x2) io_setup(0x8, &(0x7f0000000240)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r6, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r6, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "87ee8ac6c46dad33", "2607080d7f4fcf00fd4ef2dece6c7c58", '\x00', '#\x00'}, 0x28) setsockopt$sock_int(r6, 0x1, 0xa, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000240)='n', 0x1}], 0x1}, 0x0) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "000037d7009400", "c0b6c5b29ca2b838d41ac2fc7ddf972d", "e9be1eae", "bb10000000000001"}, 0x28) io_submit(r5, 0x1, &(0x7f0000000100)=[&(0x7f00000002c0)={0x400000, 0x0, 0x0, 0x0, 0x0, r4, &(0x7f0000000200)="05", 0x1}]) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000080000000000000000000850000007d00000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000001c0)='kfree\x00', r8}, 0x10) sendmsg$nl_route_sched(r7, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x94, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, 0x0, {0x0, 0xfff3}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x64, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x6, 0x0, 0x4, 0x0, 0x1, 0x0, 0xf], 0x0, [0x7, 0x4, 0x22, 0x1, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x7ff}]}}]}, 0x94}}, 0x0) 994.977051ms ago: executing program 1 (id=1022): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000027"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) unshare(0x22020400) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r2, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000180)=[{0x28, 0x0, 0x0, 0x80000000}, {0x6}]}, 0x10) 830.644764ms ago: executing program 2 (id=1023): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0xa, 0x3, 0x9, 0xd3, 0x180, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x1, 0xffffffff}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0xc, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, [@ringbuf_output={{0x18, 0x2, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xc}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x43}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x54, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000001640)='kfree\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r3 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r3, 0x0) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x20000009, 0x0, &(0x7f0000000240)={0x0, 0x0, 0xfffc, 0x360}, 0x8, 0x9, 0x80, 0x0, 0x0, 0x101, 0x0}) creat(&(0x7f00000002c0)='./file0\x00', 0xe0) r4 = inotify_init() inotify_add_watch(r4, &(0x7f00000000c0)='./file0\x00', 0x50000004) lsetxattr$system_posix_acl(&(0x7f0000000100)='./file0\x00', &(0x7f0000000440)='system.posix_acl_access\x00', &(0x7f0000000580)=ANY=[@ANYBLOB="02"], 0x4, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) r5 = socket$igmp(0x2, 0x3, 0x2) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000680)=@security={'security\x00', 0xe, 0x4, 0x298, 0xffffffff, 0x190, 0x190, 0x190, 0xffffffff, 0xffffffff, 0x278, 0x278, 0x278, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0xb0}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x9, 0x3a, "e67c9ad905e28699efc7a14c0fc157edccab972b9bde56dbdf7c96ce20cc"}}}, {{@ip={@private=0xa010102, @empty, 0xffffffff, 0xffffffff, 'xfrm0\x00', 'geneve1\x00', {}, {}, 0x33, 0x1}, 0x0, 0x90, 0xb8, 0x0, {}, [@common=@socket0={{0x20}}]}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x0, 0x1, 0x1}, {0x1, 0x0, 0x2}}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x5, 0x2}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2f8) socket$inet_udp(0x2, 0x2, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000d80)=ANY=[@ANYBLOB="fc000000190001000000000000000000e0000002000000000000000000000000ac1414aa00000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0xfc}}, 0x0) 743.740406ms ago: executing program 1 (id=1024): bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32, @ANYBLOB], 0x0}, 0x94) r0 = gettid() r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000dd0000000000003b810000850000006d000000a50000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x30046, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdd2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, 0x0, 0x845) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r4) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x38, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, @perf_bp={0x0}, 0x10238d, 0x10003, 0x1, 0x1, 0x8, 0x20005, 0x2b, 0x0, 0x0, 0x0, 0xffffffffffffff7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) getxattr(0x0, &(0x7f00000002c0)=@known='system.posix_acl_default\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000080)='proc\x00', 0x189, 0x0) r5 = syz_open_procfs(r3, &(0x7f0000000000)='map_files\x00') fchdir(r5) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x90) getdents(r6, &(0x7f0000000040)=""/61, 0x3d) getdents64(r6, &(0x7f0000000f80)=""/4096, 0x1000) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r7, 0xc004743e, &(0x7f0000000300)=0x2) ioctl$PPPIOCSACTIVE(r7, 0x40047459, &(0x7f0000000080)={0xfffffffffffffe43, 0x0}) read(r7, 0x0, 0x0) 500.603151ms ago: executing program 0 (id=1025): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x18) creat(&(0x7f00000000c0)='./file0\x00', 0x48) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff"], 0x15) r3 = dup(r2) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB, @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) 452.500792ms ago: executing program 0 (id=1026): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000fdffffff850000002d0000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x141081, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) io_setup(0x8, &(0x7f0000004200)) 408.919323ms ago: executing program 2 (id=1027): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001380)={0x11, 0xb, &(0x7f0000000200)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socket$vsock_stream(0x28, 0x1, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r1, 0x0, 0x100000000000000}, 0x18) sendmsg$nl_route(r0, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000001c0)=ANY=[@ANYBLOB="8c000000130005"], 0x8c}}, 0x0) 180.596237ms ago: executing program 3 (id=1028): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x8, 0x6}, 0x0, 0x0, 0x800000, 0x6, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read(r0, &(0x7f0000000040)=""/148, 0xffffff96) socket(0x2, 0x80805, 0x0) perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x4, 0x0, 0xfffffffc, 0x4, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x36, 0x1, 0x0, 0x0, 0x0, 0x7, 0x514, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x4, @perf_config_ext={0x9, 0x7}, 0x0, 0x10000, 0xfffffff9, 0x7, 0x0, 0x7, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000840)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x97a3}, 0x18) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a0b040000000000000000020000000900010073797a30000000000900020073797a320000000014000000110001"], 0x54}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000002580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000080a01010000000000000000020000000900010073797a300000000038000000060a17d50000000000000000020000000900020073797a32000000000900010073797a30000000000c0003400000000000000002"], 0xcdc}}, 0x0) socket(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f0, 0x0) openat$selinux_relabel(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) r5 = syz_io_uring_setup(0x22f, &(0x7f0000000a80)={0x0, 0x6b57, 0x10000, 0x0, 0x108002ce}, &(0x7f0000000000)=0x0, &(0x7f0000000a00)=0x0) syz_io_uring_submit(r6, r7, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xffffffffffffff31}) io_uring_enter(r5, 0x7a98, 0x0, 0x0, 0x0, 0x0) 138.848818ms ago: executing program 2 (id=1029): add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x52ba, 0xffffffffffffffff) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000680)=@mangle={'mangle\x00', 0x64, 0x6, 0x5d8, 0x0, 0x0, 0x1d0, 0x0, 0x1d0, 0x530, 0x530, 0x530, 0x530, 0x530, 0x6, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @multicast2}, [], [], 'vcan0\x00', 'veth1_virt_wifi\x00'}, 0x0, 0xa8, 0xe8, 0x0, {0x7a00000000000000}}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x0, 0x9}}}, {{@ipv6={@mcast1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'syzkaller1\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@private0}}}, {{@ipv6={@rand_addr=' \x01\x00', @mcast2, [], [], 'veth1_to_batadv\x00', 'vlan1\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@inet=@ecn={{0x28}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@empty}}}, {{@ipv6={@private0, @mcast2, [], [], 'veth1_to_team\x00', 'veth0_macvtap\x00'}, 0x0, 0xf0, 0x130, 0x0, {}, [@common=@hbh={{0x48}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@remote}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv4=@local}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x638) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000200)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYRES32=r1], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet_sctp(0x2, 0x5, 0x84) r4 = socket$pppoe(0x18, 0x1, 0x0) ioctl$PPPIOCGMRU(r4, 0x80047453, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sched_switch\x00', r3}, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="a5fdad8800000000180012800e0001007769726567756172640000000400028008000a00", @ANYRES32], 0x40}, 0x1, 0x300000000000000, 0x0, 0x4004}, 0x0) syz_emit_ethernet(0x2175, &(0x7f0000000d00)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @gre={{0xd, 0x4, 0x3, 0x8, 0x2167, 0x65, 0x0, 0x1, 0x2f, 0x0, @loopback, @broadcast, {[@lsrr={0x83, 0x7, 0x32, [@dev={0xac, 0x14, 0x14, 0x1d}]}, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0x7, 0x7a, [@initdev={0xac, 0x1e, 0x1, 0x0}]}, @end, @timestamp_addr={0x44, 0xc, 0x62, 0x1, 0x9, [{@dev={0xac, 0x14, 0x14, 0x1b}, 0x2}]}]}}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x880b, 0xc2, 0x3, [0x5], "493e45e1bbc13386158e4a0860ea7e4d1bf66b45e64548a3d2a391df695f5a461e250cd5db793deecf832548d0e3a295f2a591b9717f694b285704a4f99a131685137060dfd7892b4c00c5bb4fd769b44f2f9389fa95a2345782f767f6acc33254a27de1df4ce7d501a4ea7000f9a6995b487f5aff3bf03ffa02d3ba7606a5f4f96edbd3c3e824014a7d491f789b84fd1bf42a554dc6baf6a63f7cf3b1d73c43437c97ab74c2de73a8d15f2fb3ec2afc1b1e4c63f26e241384cf3d96caff0cc9294a"}, {0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x800, [0x2], "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"}, {0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x86dd, [0x7, 0x1, 0xfff9], "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"}, {0x8, 0x88be, 0x2, {{0x1, 0x1, 0x81, 0x3, 0x0, 0x0, 0x3, 0x81}, 0x1, {0xd}}}, {0x8, 0x22eb, 0x0, {{0x8, 0x2, 0xe1, 0x1, 0x0, 0x2, 0x7, 0x3}, 0x2, {0xc15, 0x6, 0x1, 0x1a, 0x0, 0x0, 0x1, 0x1}}}, {0x8, 0x6558, 0x4, "c59053960a3fbc4fa1d1e2e08e926201656f0310431f0cf464b93417fd77aa313ce89e4feb4b7e"}}}}}}, 0x0) r6 = socket$nl_rdma(0x10, 0x3, 0x14) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x12, 0x8, 0x4, 0x7cb4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x48) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x38}, 0x1, 0x0, 0x0, 0xc080}, 0x20000010) 88.805139ms ago: executing program 2 (id=1030): perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x4, 0x0, 0xfffffffc, 0x4, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x36, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x4, @perf_config_ext={0x5, 0x7}, 0x0, 0x10000, 0xfffffff9, 0x7, 0x0, 0x7, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_setup(0x22f, 0x0, &(0x7f0000000000), &(0x7f0000000a00)) socket$key(0xf, 0x3, 0x2) r0 = mq_open(&(0x7f0000000a00)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb\x00\x00\x00\x00\x00', 0x42, 0x1f0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) recvmsg(r1, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000700000045000000a000020095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000003c0)='kfree\x00', r3}, 0x10) pipe2(&(0x7f0000000180)={0xffffffffffffffff}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x15, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sk_reuseport=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4000, 0x0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) mq_unlink(&(0x7f0000000000)='eth0\x00') close(r0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x800c88, &(0x7f0000000600), 0x1, 0x5a0, &(0x7f0000000640)="$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") r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r5, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @ib_path={0x0, r6, 0x1, 0x2}}, 0x20) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000001c00)=0x0) stat(&(0x7f0000001c40)='./file0\x00', &(0x7f0000001c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r9 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)={0x38, 0x1403, 0x1, 0x70bd2d, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0xffaf}, 0x1, 0x0, 0x0, 0x854}, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001d40)={&(0x7f0000000040)=@proc={0x10, 0x0, 0x25dfdbfd, 0x40}, 0xc, &(0x7f0000001b80), 0x0, &(0x7f0000001d00)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r5]}}, @cred={{0x1c, 0x1, 0x2, {r7, 0x0, r8}}}], 0x40, 0x24040094}, 0x812) ptrace(0x28, r7) 33.92342ms ago: executing program 4 (id=1031): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0xa101, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f00000000c0)={0x4e00, 0x0, 0x730, 0xbdff, 0x10}) write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x3, 0x0, 0x0, "0062ba7d82000000000000000000f7fffeff00"}) r1 = syz_open_pts(r0, 0x8182) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0x17) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000580)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x90, 0x90, 0x6, [@enum64={0xb, 0x4, 0x0, 0x13, 0x0, 0x6, [{0xa, 0x6, 0x1}, {0x1, 0x0, 0x100}, {0x7, 0x8}, {0x10, 0x2, 0x4}]}, @var={0x3, 0x0, 0x0, 0xe, 0x4, 0x1}, @int={0xb, 0x0, 0x0, 0x1, 0x0, 0x79, 0x0, 0x3a, 0x1}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x5, 0x4, 0x9}}, @func={0x9, 0x0, 0x0, 0xc, 0x5}, @var={0x4, 0x0, 0x0, 0xe, 0x3}]}, {0x0, [0x1e, 0x30, 0x2e, 0x0]}}, &(0x7f0000000780)=""/210, 0xae, 0xd2, 0x1, 0xfffffffd, 0x10000, @value=r2}, 0x28) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0xfffffffe, 0x0, 0x0, 0x0, 0x63, '\x00', 0x0, @fallback, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10) 1.511421ms ago: executing program 2 (id=1032): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x8, 0x6}, 0x0, 0x0, 0x800000, 0x6, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read(r0, &(0x7f0000000040)=""/148, 0xffffff96) socket(0x2, 0x80805, 0x0) perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x4, 0x0, 0xfffffffc, 0x4, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x36, 0x1, 0x0, 0x0, 0x0, 0x7, 0x514, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x4, @perf_config_ext={0x9, 0x7}, 0x0, 0x10000, 0xfffffff9, 0x7, 0x0, 0x7, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000840)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x97a3}, 0x18) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a0b040000000000000000020000000900010073797a30000000000900020073797a320000000014000000110001"], 0x54}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000002580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000080a01010000000000000000020000000900010073797a300000000038000000060a17d50000000000000000020000000900020073797a32000000000900010073797a30000000000c0003400000000000000002"], 0xcdc}}, 0x0) socket(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f0, 0x0) r5 = openat$selinux_relabel(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) write$selinux_access(r5, &(0x7f00000004c0)=ANY=[@ANYBLOB="73797374656d5f753a6f626a6563745f723a7570647077645f657865635f742073797374656d5f753a73797374656d5f723afaffffffffffffff3a73302030"], 0x56) r6 = syz_io_uring_setup(0x22f, &(0x7f0000000a80)={0x0, 0x6b57, 0x10000, 0x0, 0x108002ce}, &(0x7f0000000000), &(0x7f0000000a00)) io_uring_enter(r6, 0x7a98, 0x0, 0x0, 0x0, 0x0) 0s ago: executing program 3 (id=1033): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x11, 0x7, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = open(&(0x7f00000000c0)='.\x00', 0x800, 0x50) r1 = openat(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x42, 0x0) pwrite64(r1, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) rename(&(0x7f0000000000)='./file1\x00', &(0x7f0000000080)='./file2\x00') getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000001000), r2) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000002, 0x13, 0xffffffffffffffff, 0x0) writev(0xffffffffffffffff, &(0x7f0000001340)=[{0x0}], 0x1) r3 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYRES16=0x0], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], 0x0, 0x2, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r4}, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f00000010c0)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001180)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc", 0xae}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911b4e82ea800ad7afe03c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x16}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62418c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f0000000300)="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", 0xcb3}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) recvmsg$unix(r7, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x2}, 0x40000100) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): fer I/O error on dev loop9, logical block 0, async page read [ 93.151469][ T3297] Buffer I/O error on dev loop9, logical block 0, async page read [ 93.162426][ T3297] Buffer I/O error on dev loop9, logical block 0, async page read [ 93.240327][ T4768] loop2: detected capacity change from 0 to 1024 [ 93.293741][ T4770] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(7) [ 93.302280][ T4770] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 93.316409][ T4770] vhci_hcd vhci_hcd.0: Device attached [ 93.421349][ T4772] vhci_hcd: connection closed [ 93.421747][ T51] vhci_hcd: stop threads [ 93.431752][ T51] vhci_hcd: release socket [ 93.436888][ T51] vhci_hcd: disconnect device [ 93.493831][ T4775] loop9: detected capacity change from 0 to 7 [ 93.503019][ T3506] Buffer I/O error on dev loop9, logical block 0, async page read [ 93.513411][ T3506] Buffer I/O error on dev loop9, logical block 0, async page read [ 93.522111][ T3506] loop9: unable to read partition table [ 93.595193][ T4775] Buffer I/O error on dev loop9, logical block 0, async page read [ 93.623632][ T4775] loop9: unable to read partition table [ 93.738874][ T4775] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 93.738874][ T4775] ) failed (rc=-5) [ 93.790074][ T4786] netlink: 108 bytes leftover after parsing attributes in process `syz.0.414'. [ 94.059193][ T4790] lo speed is unknown, defaulting to 1000 [ 94.974601][ T4794] lo speed is unknown, defaulting to 1000 [ 95.762385][ T4802] netlink: 4 bytes leftover after parsing attributes in process `syz.0.418'. [ 95.832287][ T29] kauditd_printk_skb: 145 callbacks suppressed [ 95.832306][ T29] audit: type=1400 audit(1751758020.345:1637): avc: denied { sys_module } for pid=4795 comm="syz.0.418" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 96.128987][ T4803] lo speed is unknown, defaulting to 1000 [ 96.557793][ T4803] syz.2.419 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 97.171906][ T29] audit: type=1326 audit(1751758021.685:1638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4807 comm="syz.1.420" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b312be929 code=0x7ffc0000 [ 97.211277][ T29] audit: type=1326 audit(1751758021.685:1639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4807 comm="syz.1.420" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b312be929 code=0x7ffc0000 [ 97.240013][ T29] audit: type=1326 audit(1751758021.685:1640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4807 comm="syz.1.420" exe="/root/syz-executor" sig=0 arch=c000003e syscall=303 compat=0 ip=0x7f6b312be929 code=0x7ffc0000 [ 97.271749][ T29] audit: type=1326 audit(1751758021.685:1641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4807 comm="syz.1.420" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b312be929 code=0x7ffc0000 [ 97.305397][ T29] audit: type=1326 audit(1751758021.685:1642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4807 comm="syz.1.420" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b312be929 code=0x7ffc0000 [ 97.891385][ T29] audit: type=1400 audit(1751758022.354:1643): avc: denied { name_bind } for pid=4810 comm="syz.0.421" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 97.918000][ T29] audit: type=1400 audit(1751758022.354:1644): avc: denied { node_bind } for pid=4810 comm="syz.0.421" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 97.947324][ T29] audit: type=1400 audit(1751758022.354:1645): avc: denied { create } for pid=4810 comm="syz.0.421" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 97.975706][ T29] audit: type=1400 audit(1751758022.364:1646): avc: denied { read } for pid=4810 comm="syz.0.421" path="socket:[9467]" dev="sockfs" ino=9467 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 98.021498][ T4811] wireguard0: entered promiscuous mode [ 98.028148][ T4811] wireguard0: entered allmulticast mode [ 98.045096][ T4819] netlink: 28 bytes leftover after parsing attributes in process `syz.4.423'. [ 98.117087][ T4827] loop2: detected capacity change from 0 to 1024 [ 98.141702][ T4819] loop4: detected capacity change from 0 to 764 [ 98.187885][ T4819] iso9660: Unknown parameter '' [ 98.310415][ T4829] loop2: detected capacity change from 0 to 1024 [ 98.384347][ T4829] siw: device registration error -23 [ 98.439835][ T4831] loop3: detected capacity change from 0 to 512 [ 98.511286][ T4833] loop4: detected capacity change from 0 to 1024 [ 98.528856][ T4831] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 98.548834][ T4831] ext4 filesystem being mounted at /74/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 98.553354][ T4838] loop2: detected capacity change from 0 to 1024 [ 98.612263][ T4833] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.429: Failed to acquire dquot type 0 [ 98.659543][ T4833] EXT4-fs (loop4): 1 truncate cleaned up [ 98.688988][ T4833] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 98.714076][ T4844] vhci_hcd: invalid port number 96 [ 98.720939][ T4844] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 98.742301][ T4833] siw: device registration error -23 [ 98.890781][ T4846] wireguard0: entered promiscuous mode [ 98.897732][ T4846] wireguard0: entered allmulticast mode [ 98.980954][ T4844] netlink: 68 bytes leftover after parsing attributes in process `syz.2.433'. [ 98.992889][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.063007][ T4852] netlink: 108 bytes leftover after parsing attributes in process `syz.0.434'. [ 99.354532][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.466267][ T4854] vhci_hcd: invalid port number 96 [ 99.472477][ T4854] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 99.911380][ T4865] loop3: detected capacity change from 0 to 164 [ 99.945926][ T4857] netlink: 68 bytes leftover after parsing attributes in process `syz.2.436'. [ 99.969608][ T4865] iso9660: Unknown parameter '' [ 99.996068][ T4869] loop9: detected capacity change from 0 to 7 [ 100.018728][ T4869] buffer_io_error: 6 callbacks suppressed [ 100.018744][ T4869] Buffer I/O error on dev loop9, logical block 0, async page read [ 100.042159][ T4867] loop0: detected capacity change from 0 to 764 [ 100.051456][ T4867] iso9660: Unknown parameter '' [ 100.066955][ T4869] Buffer I/O error on dev loop9, logical block 0, async page read [ 100.077078][ T4869] loop9: unable to read partition table [ 100.132124][ T4869] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 100.132124][ T4869] ) failed (rc=-5) [ 100.154569][ T3493] Buffer I/O error on dev loop9, logical block 0, async page read [ 100.170820][ T3493] Buffer I/O error on dev loop9, logical block 0, async page read [ 100.201550][ T4873] netlink: 24 bytes leftover after parsing attributes in process `syz.3.437'. [ 100.203876][ T3493] Buffer I/O error on dev loop9, logical block 0, async page read [ 100.259639][ T3493] Buffer I/O error on dev loop9, logical block 0, async page read [ 100.278470][ T3493] Buffer I/O error on dev loop9, logical block 0, async page read [ 100.399906][ T4881] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 100.683391][ T4887] vhci_hcd: invalid port number 96 [ 100.690603][ T4887] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 100.725687][ T4889] loop1: detected capacity change from 0 to 512 [ 100.765622][ T4889] EXT4-fs error (device loop1): ext4_orphan_get:1393: inode #15: comm syz.1.447: iget: bad extended attribute block 1 [ 100.860990][ T4889] EXT4-fs error (device loop1): ext4_orphan_get:1398: comm syz.1.447: couldn't read orphan inode 15 (err -117) [ 100.891529][ T29] kauditd_printk_skb: 152 callbacks suppressed [ 100.891549][ T29] audit: type=1326 audit(1751758025.404:1797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4891 comm="syz.0.448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f840d93e929 code=0x7ffc0000 [ 100.945873][ T4889] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 100.999381][ T29] audit: type=1326 audit(1751758025.404:1798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4891 comm="syz.0.448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f840d93e929 code=0x7ffc0000 [ 101.031403][ T29] audit: type=1326 audit(1751758025.404:1799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4891 comm="syz.0.448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=303 compat=0 ip=0x7f840d93e929 code=0x7ffc0000 [ 101.060638][ T29] audit: type=1326 audit(1751758025.404:1800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4891 comm="syz.0.448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f840d93e929 code=0x7ffc0000 [ 101.087610][ T29] audit: type=1326 audit(1751758025.404:1801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4891 comm="syz.0.448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f840d93e929 code=0x7ffc0000 [ 101.116881][ T29] audit: type=1326 audit(1751758025.484:1802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4893 comm="syz.0.449" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f840d93e929 code=0x7ffc0000 [ 101.150597][ T29] audit: type=1326 audit(1751758025.484:1803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4893 comm="syz.0.449" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f840d93e929 code=0x7ffc0000 [ 101.182988][ T29] audit: type=1326 audit(1751758025.484:1804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4893 comm="syz.0.449" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f840d93e929 code=0x7ffc0000 [ 101.211736][ T29] audit: type=1326 audit(1751758025.484:1805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4893 comm="syz.0.449" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f840d93e929 code=0x7ffc0000 [ 101.239618][ T29] audit: type=1326 audit(1751758025.484:1806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4893 comm="syz.0.449" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f840d93e929 code=0x7ffc0000 [ 101.331759][ T4898] loop3: detected capacity change from 0 to 512 [ 101.340876][ T4899] netlink: 108 bytes leftover after parsing attributes in process `syz.0.449'. [ 101.360672][ T4887] netlink: 68 bytes leftover after parsing attributes in process `syz.2.446'. [ 101.378822][ T4898] EXT4-fs error (device loop3): ext4_orphan_get:1393: inode #15: comm syz.3.450: iget: bad extended attribute block 1 [ 101.405062][ T4889] xt_CT: You must specify a L4 protocol and not use inversions on it [ 101.414938][ T4898] EXT4-fs error (device loop3): ext4_orphan_get:1398: comm syz.3.450: couldn't read orphan inode 15 (err -117) [ 101.517903][ T4898] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 101.548380][ T3308] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.631619][ T4898] xt_CT: You must specify a L4 protocol and not use inversions on it [ 101.650802][ T4904] netlink: 28 bytes leftover after parsing attributes in process `syz.2.452'. [ 101.714894][ T4904] loop2: detected capacity change from 0 to 764 [ 101.732315][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.736307][ T4904] iso9660: Unknown parameter '' [ 101.757421][ T4909] loop9: detected capacity change from 0 to 7 [ 101.780223][ T4909] Buffer I/O error on dev loop9, logical block 0, async page read [ 101.804856][ T4909] Buffer I/O error on dev loop9, logical block 0, async page read [ 101.820121][ T4909] loop9: unable to read partition table [ 101.958844][ T4909] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 101.958844][ T4909] ) failed (rc=-5) [ 101.978792][ T3295] Buffer I/O error on dev loop9, logical block 0, async page read [ 102.031433][ T4916] loop2: detected capacity change from 0 to 512 [ 102.062970][ T4916] xt_CT: You must specify a L4 protocol and not use inversions on it [ 102.288601][ T4923] lo speed is unknown, defaulting to 1000 [ 102.636468][ T4922] loop2: detected capacity change from 0 to 164 [ 102.653982][ T4922] iso9660: Unknown parameter '' [ 102.952343][ T4932] vhci_hcd: invalid port number 96 [ 102.959070][ T4932] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 102.998070][ T4933] netlink: 24 bytes leftover after parsing attributes in process `syz.2.460'. [ 103.281865][ T4941] loop3: detected capacity change from 0 to 512 [ 103.337610][ T4941] EXT4-fs error (device loop3): ext4_orphan_get:1393: inode #15: comm syz.3.465: iget: bad extended attribute block 1 [ 103.401428][ T4941] EXT4-fs error (device loop3): ext4_orphan_get:1398: comm syz.3.465: couldn't read orphan inode 15 (err -117) [ 103.479026][ T4941] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 103.556736][ T4941] xt_CT: You must specify a L4 protocol and not use inversions on it [ 103.598817][ T4952] siw: device registration error -23 [ 103.720470][ T4953] lo speed is unknown, defaulting to 1000 [ 103.900631][ T4932] netlink: 68 bytes leftover after parsing attributes in process `syz.0.462'. [ 103.928122][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.535295][ T4962] loop2: detected capacity change from 0 to 512 [ 104.572617][ T4961] loop9: detected capacity change from 0 to 7 [ 104.588120][ T4962] xt_CT: You must specify a L4 protocol and not use inversions on it [ 104.600926][ T4961] loop9: unable to read partition table [ 104.611013][ T4961] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 104.611013][ T4961] ) failed (rc=-5) [ 105.082819][ T4977] wireguard0: entered promiscuous mode [ 105.091096][ T4977] wireguard0: entered allmulticast mode [ 106.099107][ T29] kauditd_printk_skb: 186 callbacks suppressed [ 106.099127][ T29] audit: type=1400 audit(1751758030.603:1993): avc: denied { mounton } for pid=4982 comm="syz.1.478" path="/100/file0" dev="tmpfs" ino=569 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 106.471980][ T4979] lo speed is unknown, defaulting to 1000 [ 106.634058][ T29] audit: type=1400 audit(1751758031.153:1994): avc: denied { create } for pid=4987 comm="syz.1.480" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 106.685862][ T4988] loop1: detected capacity change from 0 to 1024 [ 106.709603][ T29] audit: type=1326 audit(1751758031.223:1995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4991 comm="syz.3.483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02ee51e929 code=0x7ffc0000 [ 106.742713][ T29] audit: type=1326 audit(1751758031.223:1996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4991 comm="syz.3.483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02ee51e929 code=0x7ffc0000 [ 106.811108][ T4988] Quota error (device loop1): find_tree_dqentry: Cycle in quota tree detected: block 4 index 0 [ 106.829330][ T4988] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 0 [ 106.840029][ T4988] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.480: Failed to acquire dquot type 0 [ 106.873431][ T4988] EXT4-fs (loop1): 1 truncate cleaned up [ 106.881494][ T29] audit: type=1326 audit(1751758031.303:1997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4991 comm="syz.3.483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=303 compat=0 ip=0x7f02ee51e929 code=0x7ffc0000 [ 106.900488][ T4988] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 106.923086][ T29] audit: type=1326 audit(1751758031.303:1998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4991 comm="syz.3.483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02ee51e929 code=0x7ffc0000 [ 106.982838][ T4994] wireguard0: entered promiscuous mode [ 106.991305][ T4994] wireguard0: entered allmulticast mode [ 107.044327][ T29] audit: type=1400 audit(1751758031.553:1999): avc: denied { read } for pid=5000 comm="syz.0.485" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 107.144039][ T29] audit: type=1400 audit(1751758031.623:2000): avc: denied { read write } for pid=4987 comm="syz.1.480" name="rdma_cm" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 107.210852][ T5005] loop0: detected capacity change from 0 to 512 [ 107.224738][ T5004] loop9: detected capacity change from 0 to 7 [ 107.256676][ T5004] buffer_io_error: 11 callbacks suppressed [ 107.256695][ T5004] Buffer I/O error on dev loop9, logical block 0, async page read [ 107.294705][ T5007] loop2: detected capacity change from 0 to 512 [ 107.317725][ T3308] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.321947][ T5004] Buffer I/O error on dev loop9, logical block 0, async page read [ 107.376363][ T5004] loop9: unable to read partition table [ 107.398892][ T5009] xt_CT: You must specify a L4 protocol and not use inversions on it [ 107.434903][ T5005] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 107.474469][ T5004] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 107.474469][ T5004] ) failed (rc=-5) [ 107.523928][ T5005] ext4 filesystem being mounted at /103/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 107.913897][ T5030] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 107.963419][ T5031] lo speed is unknown, defaulting to 1000 [ 108.256289][ T3304] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.916865][ T5041] wireguard0: entered promiscuous mode [ 108.933386][ T5041] wireguard0: entered allmulticast mode [ 109.057628][ T5047] loop3: detected capacity change from 0 to 764 [ 109.085665][ T5049] loop1: detected capacity change from 0 to 512 [ 109.099712][ T5047] iso9660: Unknown parameter '' [ 109.137994][ T5049] EXT4-fs error (device loop1): ext4_orphan_get:1393: inode #15: comm syz.1.500: iget: bad extended attribute block 1 [ 109.355188][ T5049] EXT4-fs error (device loop1): ext4_orphan_get:1398: comm syz.1.500: couldn't read orphan inode 15 (err -117) [ 109.390294][ T5049] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 109.501558][ T5049] xt_CT: You must specify a L4 protocol and not use inversions on it [ 109.536777][ T3308] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.627973][ T5059] lo speed is unknown, defaulting to 1000 [ 110.806994][ T5075] lo speed is unknown, defaulting to 1000 [ 111.635482][ T5088] loop0: detected capacity change from 0 to 164 [ 111.656269][ T29] kauditd_printk_skb: 25 callbacks suppressed [ 111.656285][ T29] audit: type=1400 audit(1751758036.173:2026): avc: denied { create } for pid=5070 comm="syz.3.507" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 111.764421][ T29] audit: type=1400 audit(1751758036.233:2027): avc: denied { setopt } for pid=5070 comm="syz.3.507" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 111.806212][ T5088] iso9660: Unknown parameter '' [ 111.945742][ T5096] netlink: 24 bytes leftover after parsing attributes in process `syz.0.513'. [ 112.570196][ T29] audit: type=1326 audit(1751758037.083:2028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5099 comm="syz.0.514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f840d93e929 code=0x7ffc0000 [ 112.598193][ T29] audit: type=1326 audit(1751758037.083:2029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5099 comm="syz.0.514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f840d93e929 code=0x7ffc0000 [ 112.635314][ T29] audit: type=1326 audit(1751758037.083:2030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5099 comm="syz.0.514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=443 compat=0 ip=0x7f840d93e929 code=0x7ffc0000 [ 112.672490][ T29] audit: type=1326 audit(1751758037.083:2031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5099 comm="syz.0.514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f840d93e929 code=0x7ffc0000 [ 112.719530][ T29] audit: type=1326 audit(1751758037.083:2032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5099 comm="syz.0.514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f840d93e929 code=0x7ffc0000 [ 112.896684][ T29] audit: type=1400 audit(1751758037.143:2033): avc: denied { ioctl } for pid=5101 comm="syz.0.515" path="socket:[8957]" dev="sockfs" ino=8957 ioctlcmd=0x8922 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 112.966892][ T5106] loop2: detected capacity change from 0 to 764 [ 112.976689][ T5106] iso9660: Unknown parameter '' [ 113.135059][ T5097] lo speed is unknown, defaulting to 1000 [ 113.200474][ T5113] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 114.281906][ T5121] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 115.636510][ T5145] loop4: detected capacity change from 0 to 764 [ 115.637752][ T5143] wireguard0: entered promiscuous mode [ 115.652093][ T5145] iso9660: Unknown parameter '' [ 115.656492][ T5143] wireguard0: entered allmulticast mode [ 115.915961][ T29] audit: type=1326 audit(1751758040.432:2034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5152 comm="syz.4.531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2cf0be929 code=0x7ffc0000 [ 115.953539][ T29] audit: type=1326 audit(1751758040.432:2035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5152 comm="syz.4.531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2cf0be929 code=0x7ffc0000 [ 116.050721][ T5157] loop3: detected capacity change from 0 to 512 [ 116.116552][ T5157] EXT4-fs error (device loop3): ext4_orphan_get:1393: inode #15: comm syz.3.532: iget: bad extended attribute block 1 [ 116.184036][ T5157] EXT4-fs error (device loop3): ext4_orphan_get:1398: comm syz.3.532: couldn't read orphan inode 15 (err -117) [ 116.237479][ T5162] loop1: detected capacity change from 0 to 512 [ 116.293454][ T5162] EXT4-fs error (device loop1): ext4_orphan_get:1393: inode #15: comm syz.1.534: iget: bad extended attribute block 1 [ 116.300692][ T5157] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 116.392141][ T5162] EXT4-fs error (device loop1): ext4_orphan_get:1398: comm syz.1.534: couldn't read orphan inode 15 (err -117) [ 116.432255][ T5162] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 116.511450][ T5153] xt_CT: You must specify a L4 protocol and not use inversions on it [ 116.522750][ T5162] xt_CT: You must specify a L4 protocol and not use inversions on it [ 116.560092][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.572901][ T3308] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.755004][ T5177] siw: device registration error -23 [ 116.797352][ T5176] vhci_hcd: invalid port number 96 [ 116.803096][ T5176] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 116.862560][ T5179] loop3: detected capacity change from 0 to 764 [ 116.890995][ T5179] iso9660: Unknown parameter '' [ 116.900970][ T5182] wireguard0: entered promiscuous mode [ 116.910437][ T5182] wireguard0: entered allmulticast mode [ 116.965161][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 116.965177][ T29] audit: type=1400 audit(1751758041.482:2039): avc: denied { create } for pid=5175 comm="syz.0.539" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 117.013722][ T29] audit: type=1400 audit(1751758041.482:2040): avc: denied { setopt } for pid=5175 comm="syz.0.539" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 117.038106][ T29] audit: type=1400 audit(1751758041.482:2041): avc: denied { open } for pid=5175 comm="syz.0.539" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 117.062383][ T29] audit: type=1400 audit(1751758041.482:2042): avc: denied { perfmon } for pid=5175 comm="syz.0.539" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 117.088575][ T29] audit: type=1400 audit(1751758041.482:2043): avc: denied { kernel } for pid=5175 comm="syz.0.539" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 117.112017][ T29] audit: type=1400 audit(1751758041.492:2044): avc: denied { create } for pid=5178 comm="syz.3.540" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 117.137188][ T29] audit: type=1400 audit(1751758041.492:2045): avc: denied { write } for pid=5178 comm="syz.3.540" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 117.232826][ T29] audit: type=1400 audit(1751758041.582:2046): avc: denied { read write } for pid=3308 comm="syz-executor" name="loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 117.276196][ T29] audit: type=1400 audit(1751758041.582:2047): avc: denied { open } for pid=3308 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 117.315349][ T29] audit: type=1400 audit(1751758041.582:2048): avc: denied { ioctl } for pid=3308 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=101 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 117.483444][ T5189] loop3: detected capacity change from 0 to 512 [ 117.596146][ T5189] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 117.636856][ T5189] ext4 filesystem being mounted at /96/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 117.836146][ T5198] loop1: detected capacity change from 0 to 512 [ 117.869718][ T5198] EXT4-fs error (device loop1): ext4_orphan_get:1393: inode #15: comm syz.1.547: iget: bad extended attribute block 1 [ 117.890589][ T5198] EXT4-fs error (device loop1): ext4_orphan_get:1398: comm syz.1.547: couldn't read orphan inode 15 (err -117) [ 117.914354][ T5198] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 117.989004][ T5198] xt_CT: You must specify a L4 protocol and not use inversions on it [ 118.018790][ T5207] loop2: detected capacity change from 0 to 512 [ 118.018988][ T5205] vhci_hcd: invalid port number 96 [ 118.033357][ T5205] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 118.073663][ T3308] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.228994][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.757651][ T5205] netlink: 68 bytes leftover after parsing attributes in process `syz.0.550'. [ 119.189696][ T5236] loop9: detected capacity change from 0 to 7 [ 119.197215][ T5236] Buffer I/O error on dev loop9, logical block 0, async page read [ 119.207514][ T5236] Buffer I/O error on dev loop9, logical block 0, async page read [ 119.217448][ T5236] loop9: unable to read partition table [ 119.239839][ T5236] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 119.239839][ T5236] ) failed (rc=-5) [ 119.259649][ T3506] Buffer I/O error on dev loop9, logical block 0, async page read [ 119.357357][ T3506] Buffer I/O error on dev loop9, logical block 0, async page read [ 119.380797][ T3506] Buffer I/O error on dev loop9, logical block 0, async page read [ 119.390655][ T3506] Buffer I/O error on dev loop9, logical block 0, async page read [ 119.399138][ T3506] Buffer I/O error on dev loop9, logical block 0, async page read [ 119.399641][ T5239] loop4: detected capacity change from 0 to 512 [ 119.596766][ T5239] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 119.611449][ T5239] ext4 filesystem being mounted at /99/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 119.719580][ T5246] lo speed is unknown, defaulting to 1000 [ 120.240815][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.603335][ T5260] loop1: detected capacity change from 0 to 764 [ 120.629176][ T5260] iso9660: Unknown parameter '' [ 120.704396][ T5265] wireguard0: entered promiscuous mode [ 120.710679][ T5265] wireguard0: entered allmulticast mode [ 121.170901][ T5274] lo speed is unknown, defaulting to 1000 [ 121.684695][ T5280] loop0: detected capacity change from 0 to 512 [ 121.724276][ T5284] netlink: 28 bytes leftover after parsing attributes in process `syz.2.578'. [ 121.729289][ T5280] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 121.769320][ T5284] loop2: detected capacity change from 0 to 764 [ 121.807064][ T5284] iso9660: Unknown parameter '' [ 121.818110][ T5280] ext4 filesystem being mounted at /117/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 121.973451][ T29] kauditd_printk_skb: 137 callbacks suppressed [ 121.973470][ T29] audit: type=1400 audit(1751758046.491:2186): avc: denied { execmem } for pid=5287 comm="syz.3.579" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 122.281855][ T29] audit: type=1400 audit(1751758046.801:2187): avc: denied { read write } for pid=3307 comm="syz-executor" name="loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 122.344028][ T29] audit: type=1400 audit(1751758046.801:2188): avc: denied { open } for pid=3307 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 122.372566][ T29] audit: type=1400 audit(1751758046.801:2189): avc: denied { ioctl } for pid=3307 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=104 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 122.402478][ T29] audit: type=1400 audit(1751758046.831:2190): avc: denied { map_create } for pid=5292 comm="syz.4.580" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 122.427240][ T29] audit: type=1400 audit(1751758046.831:2191): avc: denied { bpf } for pid=5292 comm="syz.4.580" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 122.457287][ T29] audit: type=1400 audit(1751758046.831:2192): avc: denied { map_read map_write } for pid=5292 comm="syz.4.580" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 122.481069][ T29] audit: type=1400 audit(1751758046.831:2193): avc: denied { prog_load } for pid=5292 comm="syz.4.580" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 122.501932][ T29] audit: type=1400 audit(1751758046.841:2194): avc: denied { create } for pid=5292 comm="syz.4.580" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 122.523679][ T29] audit: type=1400 audit(1751758046.861:2195): avc: denied { setopt } for pid=5292 comm="syz.4.580" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 122.552161][ T3304] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 122.578327][ T5293] loop9: detected capacity change from 0 to 7 [ 122.599031][ T5293] Buffer I/O error on dev loop9, logical block 0, async page read [ 122.615433][ T5293] Buffer I/O error on dev loop9, logical block 0, async page read [ 122.624343][ T5293] loop9: unable to read partition table [ 122.633851][ T5293] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 122.633851][ T5293] ) failed (rc=-5) [ 122.639580][ T3493] Buffer I/O error on dev loop9, logical block 0, async page read [ 122.875085][ T5303] loop4: detected capacity change from 0 to 512 [ 122.908098][ T5303] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 122.949675][ T5308] loop1: detected capacity change from 0 to 764 [ 122.979468][ T5303] ext4 filesystem being mounted at /102/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 122.998517][ T5308] iso9660: Unknown parameter '' [ 123.740168][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 123.993923][ T5331] loop3: detected capacity change from 0 to 512 [ 124.043758][ T5331] EXT4-fs error (device loop3): ext4_orphan_get:1393: inode #15: comm syz.3.593: iget: bad extended attribute block 1 [ 124.103269][ T5331] EXT4-fs error (device loop3): ext4_orphan_get:1398: comm syz.3.593: couldn't read orphan inode 15 (err -117) [ 124.149324][ T5331] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 124.233076][ T5331] xt_CT: You must specify a L4 protocol and not use inversions on it [ 124.287127][ T5335] loop9: detected capacity change from 0 to 7 [ 124.293960][ T5335] buffer_io_error: 4 callbacks suppressed [ 124.294016][ T5335] Buffer I/O error on dev loop9, logical block 0, async page read [ 124.313476][ T5335] Buffer I/O error on dev loop9, logical block 0, async page read [ 124.322915][ T5335] loop9: unable to read partition table [ 124.333633][ T5335] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 124.333633][ T5335] ) failed (rc=-5) [ 124.335438][ T3506] Buffer I/O error on dev loop9, logical block 0, async page read [ 124.363910][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 124.378700][ T3506] Buffer I/O error on dev loop9, logical block 0, async page read [ 124.397654][ T3506] Buffer I/O error on dev loop9, logical block 0, async page read [ 124.411374][ T3506] Buffer I/O error on dev loop9, logical block 0, async page read [ 124.428982][ T3506] Buffer I/O error on dev loop9, logical block 0, async page read [ 124.504379][ T5343] loop4: detected capacity change from 0 to 1024 [ 124.513543][ T5343] EXT4-fs: Ignoring removed bh option [ 124.675398][ T5343] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 124.970451][ T5349] wireguard0: entered promiscuous mode [ 124.976277][ T5349] wireguard0: entered allmulticast mode [ 124.999006][ T5353] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 127.082092][ T5378] lo speed is unknown, defaulting to 1000 [ 127.953861][ T5384] loop3: detected capacity change from 0 to 512 [ 128.062735][ T5384] EXT4-fs error (device loop3): ext4_orphan_get:1393: inode #15: comm syz.3.607: iget: bad extended attribute block 1 [ 128.118437][ T5384] EXT4-fs error (device loop3): ext4_orphan_get:1398: comm syz.3.607: couldn't read orphan inode 15 (err -117) [ 128.261812][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.275226][ T5384] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 128.281624][ T5393] loop1: detected capacity change from 0 to 764 [ 128.298495][ T5393] iso9660: Unknown parameter '' [ 128.334666][ T29] kauditd_printk_skb: 143 callbacks suppressed [ 128.334681][ T29] audit: type=1400 audit(1751758052.851:2339): avc: denied { connect } for pid=5383 comm="syz.3.607" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 128.383299][ T5384] xt_CT: You must specify a L4 protocol and not use inversions on it [ 128.408173][ T5399] loop4: detected capacity change from 0 to 512 [ 128.427871][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.491463][ T5399] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 128.635252][ T5399] ext4 filesystem being mounted at /105/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 128.668847][ T29] audit: type=1326 audit(1751758053.181:2340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5403 comm="syz.3.613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02ee51e929 code=0x7ffc0000 [ 128.695778][ T29] audit: type=1326 audit(1751758053.181:2341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5403 comm="syz.3.613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02ee51e929 code=0x7ffc0000 [ 128.721924][ T29] audit: type=1326 audit(1751758053.181:2342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5403 comm="syz.3.613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=163 compat=0 ip=0x7f02ee51e929 code=0x7ffc0000 [ 128.751731][ T29] audit: type=1326 audit(1751758053.181:2343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5403 comm="syz.3.613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02ee51e929 code=0x7ffc0000 [ 128.777565][ T29] audit: type=1326 audit(1751758053.181:2344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5403 comm="syz.3.613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02ee51e929 code=0x7ffc0000 [ 128.987294][ T29] audit: type=1400 audit(1751758053.501:2345): avc: denied { create } for pid=5405 comm="syz.3.614" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 129.031751][ T29] audit: type=1400 audit(1751758053.501:2346): avc: denied { ioctl } for pid=5405 comm="syz.3.614" path="socket:[10624]" dev="sockfs" ino=10624 ioctlcmd=0x8922 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 129.168914][ T29] audit: type=1400 audit(1751758053.661:2347): avc: denied { write } for pid=5405 comm="syz.3.614" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 129.242577][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.365713][ T5410] loop3: detected capacity change from 0 to 1024 [ 129.373564][ T5410] EXT4-fs: Ignoring removed bh option [ 129.400337][ T5410] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 129.602348][ T5415] netlink: 28 bytes leftover after parsing attributes in process `syz.4.616'. [ 129.760697][ T5415] loop4: detected capacity change from 0 to 764 [ 129.812380][ T5415] iso9660: Unknown parameter '' [ 130.047209][ T29] audit: type=1400 audit(1751758054.561:2348): avc: denied { create } for pid=5414 comm="syz.4.616" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 130.578953][ T5420] loop1: detected capacity change from 0 to 1024 [ 130.632532][ T5424] loop2: detected capacity change from 0 to 512 [ 130.884260][ T5420] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.618: Failed to acquire dquot type 0 [ 130.929858][ T5424] xt_CT: You must specify a L4 protocol and not use inversions on it [ 130.948943][ T5420] EXT4-fs (loop1): 1 truncate cleaned up [ 130.956661][ T5420] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 131.134018][ T5432] wireguard0: entered promiscuous mode [ 131.140749][ T5432] wireguard0: entered allmulticast mode [ 131.173221][ T5437] loop2: detected capacity change from 0 to 512 [ 131.234507][ T5437] xt_CT: You must specify a L4 protocol and not use inversions on it [ 131.311247][ T5439] loop2: detected capacity change from 0 to 164 [ 131.331264][ T5439] iso9660: Unknown parameter '' [ 131.499194][ T5444] 9pnet_fd: Insufficient options for proto=fd [ 131.591477][ T3308] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.632335][ T5447] loop0: detected capacity change from 0 to 164 [ 131.634613][ T5445] netlink: 24 bytes leftover after parsing attributes in process `syz.2.627'. [ 131.674854][ T5447] iso9660: Unknown parameter '' [ 131.731282][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.801409][ T5449] loop9: detected capacity change from 0 to 7 [ 131.810315][ T5449] Buffer I/O error on dev loop9, logical block 0, async page read [ 131.837939][ T5449] Buffer I/O error on dev loop9, logical block 0, async page read [ 131.848580][ T5449] loop9: unable to read partition table [ 131.881134][ T5449] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 131.881134][ T5449] ) failed (rc=-5) [ 131.902594][ T3295] Buffer I/O error on dev loop9, logical block 0, async page read [ 131.918116][ T5454] netlink: 24 bytes leftover after parsing attributes in process `syz.0.630'. [ 131.926286][ T3295] Buffer I/O error on dev loop9, logical block 0, async page read [ 132.005511][ T3295] Buffer I/O error on dev loop9, logical block 0, async page read [ 132.054775][ T3295] Buffer I/O error on dev loop9, logical block 0, async page read [ 132.073838][ T5456] loop3: detected capacity change from 0 to 1024 [ 132.090164][ T3295] Buffer I/O error on dev loop9, logical block 0, async page read [ 132.143477][ T5456] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.631: Failed to acquire dquot type 0 [ 132.157145][ T5462] wireguard0: entered promiscuous mode [ 132.163138][ T5462] wireguard0: entered allmulticast mode [ 132.171954][ T5456] EXT4-fs (loop3): 1 truncate cleaned up [ 132.179095][ T5456] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 132.255870][ T5456] siw: device registration error -23 [ 132.353540][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.474871][ T5475] loop9: detected capacity change from 0 to 7 [ 132.497083][ T3506] Buffer I/O error on dev loop9, logical block 0, async page read [ 132.523918][ T3506] Buffer I/O error on dev loop9, logical block 0, async page read [ 132.533789][ T3506] loop9: unable to read partition table [ 132.560076][ T3506] Buffer I/O error on dev loop9, logical block 0, async page read [ 132.669961][ T5475] loop9: unable to read partition table [ 132.765809][ T5475] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 132.765809][ T5475] ) failed (rc=-5) [ 132.888752][ T5493] loop2: detected capacity change from 0 to 764 [ 132.927171][ T5493] iso9660: Unknown parameter '' [ 133.093156][ T5498] loop2: detected capacity change from 0 to 1024 [ 133.111901][ T5498] siw: device registration error -23 [ 133.332706][ T5507] loop3: detected capacity change from 0 to 512 [ 133.354019][ T5505] wireguard0: entered promiscuous mode [ 133.359959][ T5505] wireguard0: entered allmulticast mode [ 133.364491][ T5507] EXT4-fs error (device loop3): ext4_orphan_get:1393: inode #15: comm syz.3.652: iget: bad extended attribute block 1 [ 133.410173][ T5507] EXT4-fs error (device loop3): ext4_orphan_get:1398: comm syz.3.652: couldn't read orphan inode 15 (err -117) [ 133.432268][ T5507] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 133.465715][ T5507] xt_CT: You must specify a L4 protocol and not use inversions on it [ 133.497265][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.560102][ T29] kauditd_printk_skb: 96 callbacks suppressed [ 133.560116][ T29] audit: type=1326 audit(1751758058.070:2441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5515 comm="syz.2.655" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f457b16e929 code=0x7ffc0000 [ 133.612625][ T5514] loop1: detected capacity change from 0 to 764 [ 133.630843][ T29] audit: type=1326 audit(1751758058.070:2442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5515 comm="syz.2.655" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f457b16e929 code=0x7ffc0000 [ 133.664133][ T29] audit: type=1326 audit(1751758058.080:2443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5515 comm="syz.2.655" exe="/root/syz-executor" sig=0 arch=c000003e syscall=443 compat=0 ip=0x7f457b16e929 code=0x7ffc0000 [ 133.665934][ T5514] iso9660: Unknown parameter '' [ 133.694530][ T29] audit: type=1326 audit(1751758058.080:2444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5515 comm="syz.2.655" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f457b16e929 code=0x7ffc0000 [ 133.844741][ T5526] netlink: 28 bytes leftover after parsing attributes in process `syz.0.660'. [ 133.905079][ T5526] loop0: detected capacity change from 0 to 764 [ 133.917131][ T5526] iso9660: Unknown parameter '' [ 133.939749][ T29] audit: type=1400 audit(1751758058.450:2445): avc: denied { create } for pid=5525 comm="syz.0.660" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 133.963179][ T29] audit: type=1400 audit(1751758058.450:2446): avc: denied { read } for pid=5510 comm="syz.3.653" path="/dev/ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 133.992731][ T29] audit: type=1400 audit(1751758058.450:2447): avc: denied { write } for pid=5525 comm="syz.0.660" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 134.102745][ T29] audit: type=1400 audit(1751758058.550:2448): avc: denied { map_create } for pid=5532 comm="syz.1.662" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 134.127194][ T29] audit: type=1400 audit(1751758058.550:2449): avc: denied { bpf } for pid=5532 comm="syz.1.662" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 134.150137][ T29] audit: type=1400 audit(1751758058.550:2450): avc: denied { map_read map_write } for pid=5532 comm="syz.1.662" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 134.301904][ T5536] loop1: detected capacity change from 0 to 512 [ 134.324148][ T5536] EXT4-fs error (device loop1): ext4_orphan_get:1393: inode #15: comm syz.1.663: iget: bad extended attribute block 1 [ 134.353630][ T5536] EXT4-fs error (device loop1): ext4_orphan_get:1398: comm syz.1.663: couldn't read orphan inode 15 (err -117) [ 134.374637][ T5536] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 134.409001][ T5536] xt_CT: You must specify a L4 protocol and not use inversions on it [ 134.469568][ T3308] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.500777][ T5539] wireguard0: entered promiscuous mode [ 134.510396][ T5539] wireguard0: entered allmulticast mode [ 134.655950][ T5544] loop1: detected capacity change from 0 to 1024 [ 134.663721][ T5544] EXT4-fs: Ignoring removed bh option [ 134.788957][ T5544] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 135.085345][ T5550] loop3: detected capacity change from 0 to 164 [ 135.160776][ T5550] iso9660: Unknown parameter '' [ 135.689140][ T5556] vhci_hcd: invalid port number 96 [ 135.695425][ T5556] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 135.849583][ T5563] loop0: detected capacity change from 0 to 1024 [ 135.889598][ T5564] netlink: 24 bytes leftover after parsing attributes in process `syz.3.667'. [ 135.926885][ T5563] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.672: Failed to acquire dquot type 0 [ 136.005271][ T5563] EXT4-fs (loop0): 1 truncate cleaned up [ 136.060575][ T5563] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 136.140524][ T5563] siw: device registration error -23 [ 136.162448][ T5567] loop9: detected capacity change from 0 to 7 [ 136.181093][ T5567] loop9: unable to read partition table [ 136.196289][ T5567] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 136.196289][ T5567] ) failed (rc=-5) [ 136.274068][ T3304] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.365374][ T5570] loop3: detected capacity change from 0 to 512 [ 136.389572][ T5570] EXT4-fs error (device loop3): ext4_orphan_get:1393: inode #15: comm syz.3.675: iget: bad extended attribute block 1 [ 136.430585][ T5570] EXT4-fs error (device loop3): ext4_orphan_get:1398: comm syz.3.675: couldn't read orphan inode 15 (err -117) [ 136.460008][ T5570] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 136.497728][ T5570] xt_CT: You must specify a L4 protocol and not use inversions on it [ 136.558808][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.889610][ T3308] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.913664][ T5583] loop3: detected capacity change from 0 to 1024 [ 136.931146][ T5583] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.677: Failed to acquire dquot type 0 [ 136.978468][ T5590] netlink: 28 bytes leftover after parsing attributes in process `syz.0.682'. [ 137.023318][ T5583] EXT4-fs (loop3): 1 truncate cleaned up [ 137.044884][ T5583] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 137.066616][ T5590] loop0: detected capacity change from 0 to 764 [ 137.103288][ T5590] iso9660: Unknown parameter '' [ 137.211370][ T5583] siw: device registration error -23 [ 137.471072][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.723420][ T5601] loop9: detected capacity change from 0 to 7 [ 137.737815][ T5601] buffer_io_error: 13 callbacks suppressed [ 137.737831][ T5601] Buffer I/O error on dev loop9, logical block 0, async page read [ 137.785279][ T5601] Buffer I/O error on dev loop9, logical block 0, async page read [ 137.808950][ T5601] loop9: unable to read partition table [ 137.822126][ T5601] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 137.822126][ T5601] ) failed (rc=-5) [ 137.823770][ T3506] Buffer I/O error on dev loop9, logical block 0, async page read [ 137.887148][ T3506] Buffer I/O error on dev loop9, logical block 0, async page read [ 137.906804][ T3506] Buffer I/O error on dev loop9, logical block 0, async page read [ 137.926956][ T3506] Buffer I/O error on dev loop9, logical block 0, async page read [ 137.948236][ T3506] Buffer I/O error on dev loop9, logical block 0, async page read [ 138.031826][ T5607] wireguard0: entered promiscuous mode [ 138.038596][ T5607] wireguard0: entered allmulticast mode [ 138.290665][ T5619] loop0: detected capacity change from 0 to 764 [ 138.300060][ T5619] iso9660: Unknown parameter '' [ 138.367469][ T5624] wireguard0: entered promiscuous mode [ 138.373724][ T5624] wireguard0: entered allmulticast mode [ 138.471800][ T5633] loop9: detected capacity change from 0 to 7 [ 138.559352][ T3506] Buffer I/O error on dev loop9, logical block 0, async page read [ 138.571790][ T3506] Buffer I/O error on dev loop9, logical block 0, async page read [ 138.580186][ T3506] loop9: unable to read partition table [ 138.588394][ T29] kauditd_printk_skb: 118 callbacks suppressed [ 138.588413][ T29] audit: type=1326 audit(1751758063.069:2565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5623 comm="syz.4.696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2cf0be929 code=0x7ffc0000 [ 138.598673][ T3506] Buffer I/O error on dev loop9, logical block 0, async page read [ 138.624155][ T29] audit: type=1326 audit(1751758063.069:2566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5623 comm="syz.4.696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2cf0be929 code=0x7ffc0000 [ 138.661320][ T29] audit: type=1326 audit(1751758063.179:2567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5623 comm="syz.4.696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7ff2cf0be929 code=0x7ffc0000 [ 138.661432][ T5633] loop9: unable to read partition table [ 138.661469][ T29] audit: type=1326 audit(1751758063.179:2568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5623 comm="syz.4.696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2cf0be929 code=0x7ffc0000 [ 138.689726][ T5633] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 138.689726][ T5633] ) failed (rc=-5) [ 138.764366][ T29] audit: type=1326 audit(1751758063.179:2569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5623 comm="syz.4.696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2cf0be929 code=0x7ffc0000 [ 138.792025][ T29] audit: type=1326 audit(1751758063.209:2570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5623 comm="syz.4.696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff2cf0be929 code=0x7ffc0000 [ 138.819443][ T29] audit: type=1326 audit(1751758063.209:2571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5623 comm="syz.4.696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2cf0be929 code=0x7ffc0000 [ 138.845561][ T29] audit: type=1326 audit(1751758063.209:2572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5623 comm="syz.4.696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7ff2cf0be929 code=0x7ffc0000 [ 138.875054][ T29] audit: type=1326 audit(1751758063.209:2573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5623 comm="syz.4.696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2cf0be929 code=0x7ffc0000 [ 138.905621][ T29] audit: type=1326 audit(1751758063.209:2574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5623 comm="syz.4.696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2cf0be929 code=0x7ffc0000 [ 139.048516][ T5642] loop2: detected capacity change from 0 to 1024 [ 139.091142][ T5642] siw: device registration error -23 [ 139.162313][ T5647] loop4: detected capacity change from 0 to 764 [ 139.204220][ T5647] iso9660: Unknown parameter '' [ 139.242697][ T5649] wireguard0: entered promiscuous mode [ 139.251337][ T5649] wireguard0: entered allmulticast mode [ 139.607451][ T5659] loop3: detected capacity change from 0 to 764 [ 139.622414][ T5659] iso9660: Unknown parameter '' [ 139.740148][ T5663] wireguard0: entered promiscuous mode [ 139.747753][ T5663] wireguard0: entered allmulticast mode [ 140.050857][ T5672] loop3: detected capacity change from 0 to 512 [ 140.088706][ T5672] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 140.188228][ T5672] ext4 filesystem being mounted at /137/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 140.280524][ T5681] loop4: detected capacity change from 0 to 1024 [ 140.346530][ T5681] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.716: Failed to acquire dquot type 0 [ 140.448992][ T5681] EXT4-fs (loop4): 1 truncate cleaned up [ 140.457424][ T5681] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 140.493341][ T5681] siw: device registration error -23 [ 140.630511][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.910129][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.945697][ T5696] loop4: detected capacity change from 0 to 764 [ 140.955012][ T5696] iso9660: Unknown parameter '' [ 141.292792][ T5699] loop4: detected capacity change from 0 to 512 [ 141.387389][ T5699] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 141.491948][ T5699] ext4 filesystem being mounted at /129/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 141.531723][ T5703] loop9: detected capacity change from 0 to 7 [ 141.606418][ T5703] loop9: unable to read partition table [ 141.613209][ T5703] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 141.613209][ T5703] ) failed (rc=-5) [ 141.665299][ T5699] EXT4-fs error (device loop4): ext4_do_update_inode:5568: inode #2: comm syz.4.723: corrupted inode contents [ 141.735456][ T5699] EXT4-fs error (device loop4): ext4_dirty_inode:6459: inode #2: comm syz.4.723: mark_inode_dirty error [ 141.768844][ T5699] EXT4-fs error (device loop4): ext4_do_update_inode:5568: inode #2: comm syz.4.723: corrupted inode contents [ 141.799052][ T5711] 9pnet_fd: Insufficient options for proto=fd [ 141.833297][ T5712] lo speed is unknown, defaulting to 1000 [ 141.846262][ T5699] EXT4-fs error (device loop4): ext4_do_update_inode:5568: inode #2: comm syz.4.723: corrupted inode contents [ 141.887934][ T5699] EXT4-fs error (device loop4): ext4_dirty_inode:6459: inode #2: comm syz.4.723: mark_inode_dirty error [ 141.892645][ T5720] loop3: detected capacity change from 0 to 1024 [ 141.920684][ T5699] EXT4-fs error (device loop4): ext4_do_update_inode:5568: inode #2: comm syz.4.723: corrupted inode contents [ 141.998254][ T5699] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #2: comm syz.4.723: mark_inode_dirty error [ 142.027982][ T5699] EXT4-fs error (device loop4): ext4_do_update_inode:5568: inode #2: comm syz.4.723: corrupted inode contents [ 142.055615][ T5720] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.729: Failed to acquire dquot type 0 [ 142.074630][ T5699] EXT4-fs error (device loop4): ext4_dirty_inode:6459: inode #2: comm syz.4.723: mark_inode_dirty error [ 142.075048][ T5720] EXT4-fs (loop3): 1 truncate cleaned up [ 142.100202][ T5726] vhci_hcd: invalid port number 96 [ 142.105741][ T5726] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 142.113987][ T5720] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 142.181922][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.185082][ T5720] siw: device registration error -23 [ 142.255454][ T5729] loop4: detected capacity change from 0 to 164 [ 142.275517][ T5729] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 142.291417][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.383973][ T5731] 9pnet_fd: Insufficient options for proto=fd [ 142.682773][ T5743] loop9: detected capacity change from 0 to 7 [ 142.689971][ T5743] loop9: unable to read partition table [ 142.697260][ T5743] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 142.697260][ T5743] ) failed (rc=-5) [ 142.770336][ T5747] loop2: detected capacity change from 0 to 1024 [ 142.796083][ T5747] FAULT_INJECTION: forcing a failure. [ 142.796083][ T5747] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 142.812074][ T5747] CPU: 1 UID: 0 PID: 5747 Comm: syz.2.739 Not tainted 6.16.0-rc4-syzkaller-00319-g05df91921da6 #0 PREEMPT(voluntary) [ 142.812120][ T5747] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 142.812138][ T5747] Call Trace: [ 142.812147][ T5747] [ 142.812157][ T5747] __dump_stack+0x1d/0x30 [ 142.812181][ T5747] dump_stack_lvl+0xe8/0x140 [ 142.812201][ T5747] dump_stack+0x15/0x1b [ 142.812217][ T5747] should_fail_ex+0x265/0x280 [ 142.812269][ T5747] should_fail+0xb/0x20 [ 142.812307][ T5747] should_fail_usercopy+0x1a/0x20 [ 142.812349][ T5747] _copy_from_iter+0xcf/0xe40 [ 142.812399][ T5747] ? __build_skb_around+0x1a0/0x200 [ 142.812442][ T5747] ? __alloc_skb+0x223/0x320 [ 142.812478][ T5747] netlink_sendmsg+0x471/0x6b0 [ 142.812509][ T5747] ? __pfx_netlink_sendmsg+0x10/0x10 [ 142.812536][ T5747] __sock_sendmsg+0x142/0x180 [ 142.812758][ T5747] ____sys_sendmsg+0x31e/0x4e0 [ 142.812806][ T5747] ___sys_sendmsg+0x17b/0x1d0 [ 142.812926][ T5747] __x64_sys_sendmsg+0xd4/0x160 [ 142.812955][ T5747] x64_sys_call+0x2999/0x2fb0 [ 142.812983][ T5747] do_syscall_64+0xd2/0x200 [ 142.813006][ T5747] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 142.813101][ T5747] ? clear_bhb_loop+0x40/0x90 [ 142.813139][ T5747] ? clear_bhb_loop+0x40/0x90 [ 142.813175][ T5747] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.813223][ T5747] RIP: 0033:0x7f457b16e929 [ 142.813243][ T5747] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 142.813321][ T5747] RSP: 002b:00007f45797d7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 142.813347][ T5747] RAX: ffffffffffffffda RBX: 00007f457b395fa0 RCX: 00007f457b16e929 [ 142.813364][ T5747] RDX: 0000000000000000 RSI: 0000200000000940 RDI: 0000000000000003 [ 142.813428][ T5747] RBP: 00007f45797d7090 R08: 0000000000000000 R09: 0000000000000000 [ 142.813442][ T5747] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 142.813454][ T5747] R13: 0000000000000000 R14: 00007f457b395fa0 R15: 00007ffdab64fa98 [ 142.813475][ T5747] [ 143.096317][ T5749] vhci_hcd: invalid port number 96 [ 143.101860][ T5749] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 143.289435][ T5751] netlink: 108 bytes leftover after parsing attributes in process `syz.0.741'. [ 143.711235][ T5773] loop9: detected capacity change from 0 to 7 [ 143.733290][ T3506] buffer_io_error: 15 callbacks suppressed [ 143.733309][ T3506] Buffer I/O error on dev loop9, logical block 0, async page read [ 143.752636][ T3506] Buffer I/O error on dev loop9, logical block 0, async page read [ 143.762439][ T3506] loop9: unable to read partition table [ 143.781852][ T5773] Buffer I/O error on dev loop9, logical block 0, async page read [ 143.799120][ T5776] loop3: detected capacity change from 0 to 1024 [ 143.813743][ T5776] __quota_error: 107 callbacks suppressed [ 143.813766][ T5776] Quota error (device loop3): find_tree_dqentry: Cycle in quota tree detected: block 4 index 0 [ 143.833879][ T5776] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 0 [ 143.846104][ T5776] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.750: Failed to acquire dquot type 0 [ 143.860915][ T5773] Buffer I/O error on dev loop9, logical block 0, async page read [ 143.869378][ T5773] loop9: unable to read partition table [ 143.876623][ T5773] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 143.876623][ T5773] ) failed (rc=-5) [ 143.878634][ T3506] Buffer I/O error on dev loop9, logical block 0, async page read [ 143.925374][ T3506] Buffer I/O error on dev loop9, logical block 0, async page read [ 143.939154][ T5776] EXT4-fs (loop3): 1 truncate cleaned up [ 143.940495][ T3506] Buffer I/O error on dev loop9, logical block 0, async page read [ 143.961719][ T5776] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 143.961917][ T3506] Buffer I/O error on dev loop9, logical block 0, async page read [ 144.010089][ T29] audit: type=1400 audit(1751758068.519:2678): avc: denied { read write } for pid=5782 comm="syz.0.752" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 144.010757][ T5783] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 144.063045][ T3506] Buffer I/O error on dev loop9, logical block 0, async page read [ 144.077351][ T5776] siw: device registration error -23 [ 144.078212][ T5783] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 144.156972][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.180750][ T29] audit: type=1400 audit(1751758068.519:2679): avc: denied { open } for pid=5782 comm="syz.0.752" path="/dev/raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 144.224571][ T29] audit: type=1400 audit(1751758068.519:2680): avc: denied { ioctl } for pid=5782 comm="syz.0.752" path="/dev/raw-gadget" dev="devtmpfs" ino=142 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 144.260862][ T29] audit: type=1400 audit(1751758068.649:2681): avc: denied { setopt } for pid=5782 comm="syz.0.752" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 144.347881][ T5791] tipc: Can't bind to reserved service type 0 [ 144.359348][ T29] audit: type=1400 audit(1751758068.859:2682): avc: denied { bind } for pid=5786 comm="syz.4.756" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 144.383356][ T29] audit: type=1400 audit(1751758068.859:2683): avc: denied { setopt } for pid=5786 comm="syz.4.756" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 144.656378][ T5796] siw: device registration error -23 [ 144.766680][ T5800] loop4: detected capacity change from 0 to 512 [ 144.787889][ T5800] EXT4-fs error (device loop4): ext4_orphan_get:1393: inode #15: comm syz.4.758: iget: bad extended attribute block 1 [ 144.805101][ T5800] EXT4-fs error (device loop4): ext4_orphan_get:1398: comm syz.4.758: couldn't read orphan inode 15 (err -117) [ 144.818835][ T5800] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 144.836974][ T29] audit: type=1400 audit(1751758069.349:2684): avc: denied { create } for pid=5797 comm="syz.4.758" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 144.871270][ T5800] xt_CT: You must specify a L4 protocol and not use inversions on it [ 144.895012][ T29] audit: type=1400 audit(1751758069.369:2685): avc: denied { setopt } for pid=5797 comm="syz.4.758" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 144.920972][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.946052][ T5804] loop0: detected capacity change from 0 to 512 [ 144.973884][ T5804] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 145.004696][ T5804] ext4 filesystem being mounted at /152/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 145.019757][ T3410] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 145.028734][ T3410] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 145.072631][ T3410] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 145.081038][ T3410] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 145.089386][ T3410] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 145.098086][ T3410] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 145.106427][ T3410] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 145.114856][ T3410] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 145.123253][ T3410] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 145.131917][ T3410] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 145.141318][ T3410] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 145.149949][ T3410] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 145.158933][ T3410] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 145.167242][ T3410] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 145.175659][ T3410] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 145.186026][ T3410] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 145.194608][ T3410] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 145.202565][ T3410] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 145.210934][ T3410] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 145.223114][ T3410] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 145.230748][ T5809] lo speed is unknown, defaulting to 1000 [ 145.232106][ T3410] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 145.247944][ T3410] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 145.261447][ T3410] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 145.272631][ T3410] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 145.282059][ T3410] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 145.290497][ T3410] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 145.304478][ T3410] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 145.320741][ T5815] loop2: detected capacity change from 0 to 512 [ 145.355166][ T5812] loop9: detected capacity change from 0 to 7 [ 145.365961][ T5812] Buffer I/O error on dev loop9, logical block 0, async page read [ 145.381218][ T5812] loop9: unable to read partition table [ 145.415164][ T5812] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 145.415164][ T5812] ) failed (rc=-5) [ 145.428240][ T3410] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz0] on syz1 [ 145.498554][ T5816] fido_id[5816]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 145.557149][ T5819] wireguard0: entered promiscuous mode [ 145.564121][ T5819] wireguard0: entered allmulticast mode [ 145.656606][ T5826] loop4: detected capacity change from 0 to 764 [ 145.683064][ T5826] iso9660: Unknown parameter '' [ 145.712681][ T3304] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.936291][ T5844] loop4: detected capacity change from 0 to 164 [ 145.975317][ T5844] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 147.173454][ T5862] wireguard0: entered promiscuous mode [ 147.180124][ T5862] wireguard0: entered allmulticast mode [ 147.322159][ T5868] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 147.600643][ T5873] loop9: detected capacity change from 0 to 7 [ 147.637359][ T5873] loop9: unable to read partition table [ 147.699275][ T5873] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 147.699275][ T5873] ) failed (rc=-5) [ 147.801637][ T5878] netlink: 40 bytes leftover after parsing attributes in process `syz.0.787'. [ 148.696728][ T5889] loop1: detected capacity change from 0 to 1024 [ 148.712283][ T5889] EXT4-fs: Ignoring removed bh option [ 148.791580][ T5889] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 148.827881][ T29] kauditd_printk_skb: 17 callbacks suppressed [ 148.827903][ T29] audit: type=1400 audit(1751758073.338:2703): avc: denied { create } for pid=5884 comm="syz.1.790" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 149.222690][ T5895] lo speed is unknown, defaulting to 1000 [ 149.996131][ T29] audit: type=1400 audit(1751758073.378:2704): avc: denied { write open } for pid=5884 comm="syz.1.790" path="/152/file1/bus" dev="loop1" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 150.218669][ T29] audit: type=1400 audit(1751758074.728:2705): avc: denied { create } for pid=5906 comm="syz.0.795" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 150.328812][ T29] audit: type=1400 audit(1751758074.758:2706): avc: denied { setopt } for pid=5906 comm="syz.0.795" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 150.350432][ T29] audit: type=1400 audit(1751758074.768:2707): avc: denied { bind } for pid=5906 comm="syz.0.795" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 150.373816][ T29] audit: type=1400 audit(1751758074.778:2708): avc: denied { write } for pid=5906 comm="syz.0.795" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 150.395026][ T29] audit: type=1400 audit(1751758074.778:2709): avc: denied { connect } for pid=5906 comm="syz.0.795" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 150.417902][ T29] audit: type=1400 audit(1751758074.778:2710): avc: denied { name_connect } for pid=5906 comm="syz.0.795" dest=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 150.678687][ T5909] wireguard0: entered promiscuous mode [ 150.684849][ T5909] wireguard0: entered allmulticast mode [ 150.831799][ T5914] loop2: detected capacity change from 0 to 512 [ 150.869186][ T5914] xt_CT: You must specify a L4 protocol and not use inversions on it [ 151.028777][ T5919] loop0: detected capacity change from 0 to 164 [ 151.072677][ T5919] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 151.141190][ T3308] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 151.182629][ T5923] wireguard0: entered promiscuous mode [ 151.189144][ T5923] wireguard0: entered allmulticast mode [ 151.221359][ T5927] loop9: detected capacity change from 0 to 7 [ 151.229802][ T5927] buffer_io_error: 13 callbacks suppressed [ 151.229818][ T5927] Buffer I/O error on dev loop9, logical block 0, async page read [ 151.262830][ T5927] Buffer I/O error on dev loop9, logical block 0, async page read [ 151.271585][ T5927] loop9: unable to read partition table [ 151.278759][ T5927] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 151.278759][ T5927] ) failed (rc=-5) [ 151.279886][ T3506] Buffer I/O error on dev loop9, logical block 0, async page read [ 151.328129][ T3506] Buffer I/O error on dev loop9, logical block 0, async page read [ 151.339286][ T3506] Buffer I/O error on dev loop9, logical block 0, async page read [ 151.350063][ T3506] Buffer I/O error on dev loop9, logical block 0, async page read [ 151.361279][ T3506] Buffer I/O error on dev loop9, logical block 0, async page read [ 151.441434][ T5934] loop0: detected capacity change from 0 to 512 [ 151.536071][ T5938] loop1: detected capacity change from 0 to 164 [ 151.548323][ T5938] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 151.631148][ T5934] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 151.674563][ T5934] ext4 filesystem being mounted at /163/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 151.698509][ T29] audit: type=1400 audit(1751758076.198:2711): avc: denied { bind } for pid=5942 comm="syz.4.810" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 151.778160][ T5934] EXT4-fs error (device loop0): ext4_do_update_inode:5568: inode #2: comm syz.0.806: corrupted inode contents [ 151.818357][ T5934] EXT4-fs error (device loop0): ext4_dirty_inode:6459: inode #2: comm syz.0.806: mark_inode_dirty error [ 151.869788][ T5934] EXT4-fs error (device loop0): ext4_do_update_inode:5568: inode #2: comm syz.0.806: corrupted inode contents [ 151.921283][ T3304] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 151.970286][ T5955] loop0: detected capacity change from 0 to 512 [ 152.111409][ T5955] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 152.127335][ T5955] ext4 filesystem being mounted at /164/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 152.142127][ T5955] EXT4-fs error (device loop0): ext4_do_update_inode:5568: inode #2: comm syz.0.814: corrupted inode contents [ 152.157665][ T5955] EXT4-fs error (device loop0): ext4_dirty_inode:6459: inode #2: comm syz.0.814: mark_inode_dirty error [ 152.178140][ T5962] netlink: 'syz.3.816': attribute type 21 has an invalid length. [ 152.186995][ T5962] netlink: 20 bytes leftover after parsing attributes in process `syz.3.816'. [ 152.197856][ T5962] bond0: option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 152.210509][ T5962] netlink: 24 bytes leftover after parsing attributes in process `syz.3.816'. [ 152.226279][ T5955] EXT4-fs error (device loop0): ext4_do_update_inode:5568: inode #2: comm syz.0.814: corrupted inode contents [ 152.241904][ T29] audit: type=1400 audit(1751758076.718:2712): avc: denied { write } for pid=5961 comm="syz.3.816" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 152.321073][ T5968] loop9: detected capacity change from 0 to 7 [ 152.331189][ T3506] Buffer I/O error on dev loop9, logical block 0, async page read [ 152.344918][ T3506] Buffer I/O error on dev loop9, logical block 0, async page read [ 152.354186][ T3506] loop9: unable to read partition table [ 152.378625][ T3304] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 152.396453][ T5968] Buffer I/O error on dev loop9, logical block 0, async page read [ 152.410156][ T5968] loop9: unable to read partition table [ 152.417881][ T5968] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 152.417881][ T5968] ) failed (rc=-5) [ 152.557488][ T5975] loop0: detected capacity change from 0 to 164 [ 152.564852][ T5975] iso9660: Unknown parameter '' [ 152.587669][ T5973] 9pnet: Could not find request transport: fd0x0000000000000006 [ 152.671156][ T5981] loop3: detected capacity change from 0 to 512 [ 152.686008][ T5983] loop2: detected capacity change from 0 to 764 [ 152.693761][ T5983] iso9660: Unknown parameter '' [ 152.714592][ T5984] netlink: 24 bytes leftover after parsing attributes in process `syz.0.820'. [ 152.727712][ T5981] EXT4-fs error (device loop3): ext4_orphan_get:1393: inode #15: comm syz.3.823: iget: bad extended attribute block 1 [ 152.767567][ T5987] netlink: 28 bytes leftover after parsing attributes in process `syz.1.824'. [ 152.793445][ T5981] EXT4-fs error (device loop3): ext4_orphan_get:1398: comm syz.3.823: couldn't read orphan inode 15 (err -117) [ 152.829859][ T5987] loop1: detected capacity change from 0 to 764 [ 152.846394][ T5981] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 152.877049][ T5987] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 152.938727][ T5991] loop4: detected capacity change from 0 to 512 [ 152.983025][ T5981] xt_CT: You must specify a L4 protocol and not use inversions on it [ 153.023013][ T5991] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 153.047263][ T5991] ext4 filesystem being mounted at /155/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 153.054064][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 153.122270][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 153.133833][ T6002] siw: device registration error -23 [ 153.159001][ T6003] loop1: detected capacity change from 0 to 1024 [ 153.221345][ T6008] loop2: detected capacity change from 0 to 512 [ 153.242373][ T6008] xt_CT: You must specify a L4 protocol and not use inversions on it [ 153.314463][ T6003] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 153.363545][ T6003] netlink: 132 bytes leftover after parsing attributes in process `syz.1.831'. [ 153.437843][ T6015] loop4: detected capacity change from 0 to 764 [ 153.459038][ T3308] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 153.478476][ T6015] iso9660: Unknown parameter '' [ 153.992369][ T6026] loop1: detected capacity change from 0 to 764 [ 154.008301][ T29] kauditd_printk_skb: 101 callbacks suppressed [ 154.008321][ T29] audit: type=1326 audit(1751758078.498:2814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6001 comm="syz.3.829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02ee51e929 code=0x7ffc0000 [ 154.043607][ T29] audit: type=1326 audit(1751758078.498:2815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6001 comm="syz.3.829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02ee51e929 code=0x7ffc0000 [ 154.115155][ T6026] iso9660: Unknown parameter '' [ 154.301174][ T6031] loop3: detected capacity change from 0 to 512 [ 154.341789][ T6033] 9pnet_fd: Insufficient options for proto=fd [ 154.409065][ T6031] EXT4-fs error (device loop3): ext4_orphan_get:1393: inode #15: comm syz.3.841: iget: bad extended attribute block 1 [ 154.431160][ T6031] EXT4-fs error (device loop3): ext4_orphan_get:1398: comm syz.3.841: couldn't read orphan inode 15 (err -117) [ 154.445406][ T29] audit: type=1326 audit(1751758078.958:2816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6038 comm="syz.0.844" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f840d93e929 code=0x7ffc0000 [ 154.471859][ T29] audit: type=1326 audit(1751758078.958:2817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6038 comm="syz.0.844" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f840d93e929 code=0x7ffc0000 [ 154.508606][ T6031] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 154.561134][ T29] audit: type=1326 audit(1751758078.958:2818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6038 comm="syz.0.844" exe="/root/syz-executor" sig=0 arch=c000003e syscall=303 compat=0 ip=0x7f840d93e929 code=0x7ffc0000 [ 154.589202][ T29] audit: type=1326 audit(1751758078.958:2819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6038 comm="syz.0.844" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f840d93e929 code=0x7ffc0000 [ 154.617510][ T29] audit: type=1400 audit(1751758079.038:2820): avc: denied { create } for pid=6028 comm="syz.1.840" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 154.618480][ T6031] xt_CT: You must specify a L4 protocol and not use inversions on it [ 154.640751][ T29] audit: type=1400 audit(1751758079.038:2821): avc: denied { setopt } for pid=6028 comm="syz.1.840" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 154.640787][ T29] audit: type=1400 audit(1751758079.048:2822): avc: denied { write } for pid=6041 comm="syz.2.845" name="001" dev="devtmpfs" ino=162 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 154.757737][ T29] audit: type=1400 audit(1751758079.238:2823): avc: denied { watch } for pid=6041 comm="syz.2.845" path="/188/file0" dev="tmpfs" ino=1047 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 154.786444][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 154.982919][ T6053] loop4: detected capacity change from 0 to 764 [ 155.017731][ T6053] iso9660: Unknown parameter '' [ 155.038930][ T6055] loop3: detected capacity change from 0 to 764 [ 155.082556][ T6055] iso9660: Unknown parameter '' [ 155.164193][ T6059] loop1: detected capacity change from 0 to 512 [ 155.195953][ T6059] EXT4-fs error (device loop1): ext4_orphan_get:1393: inode #15: comm syz.1.852: iget: bad extended attribute block 1 [ 155.256325][ T6059] EXT4-fs error (device loop1): ext4_orphan_get:1398: comm syz.1.852: couldn't read orphan inode 15 (err -117) [ 155.271123][ T6059] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 155.340665][ T6059] xt_CT: You must specify a L4 protocol and not use inversions on it [ 155.406270][ T3308] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 155.436953][ T6063] FAULT_INJECTION: forcing a failure. [ 155.436953][ T6063] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 155.452021][ T6063] CPU: 0 UID: 0 PID: 6063 Comm: syz.1.853 Not tainted 6.16.0-rc4-syzkaller-00319-g05df91921da6 #0 PREEMPT(voluntary) [ 155.452096][ T6063] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 155.452114][ T6063] Call Trace: [ 155.452123][ T6063] [ 155.452134][ T6063] __dump_stack+0x1d/0x30 [ 155.452161][ T6063] dump_stack_lvl+0xe8/0x140 [ 155.452186][ T6063] dump_stack+0x15/0x1b [ 155.452202][ T6063] should_fail_ex+0x265/0x280 [ 155.452281][ T6063] should_fail+0xb/0x20 [ 155.452318][ T6063] should_fail_usercopy+0x1a/0x20 [ 155.452441][ T6063] _copy_from_iter+0xcf/0xe40 [ 155.452553][ T6063] ? __build_skb_around+0x1a0/0x200 [ 155.452594][ T6063] ? __alloc_skb+0x223/0x320 [ 155.452668][ T6063] netlink_sendmsg+0x471/0x6b0 [ 155.452709][ T6063] ? __pfx_netlink_sendmsg+0x10/0x10 [ 155.452733][ T6063] __sock_sendmsg+0x142/0x180 [ 155.452765][ T6063] ____sys_sendmsg+0x31e/0x4e0 [ 155.452832][ T6063] ___sys_sendmsg+0x17b/0x1d0 [ 155.452888][ T6063] __x64_sys_sendmsg+0xd4/0x160 [ 155.452917][ T6063] x64_sys_call+0x2999/0x2fb0 [ 155.452972][ T6063] do_syscall_64+0xd2/0x200 [ 155.453006][ T6063] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 155.453073][ T6063] ? clear_bhb_loop+0x40/0x90 [ 155.453095][ T6063] ? clear_bhb_loop+0x40/0x90 [ 155.453121][ T6063] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 155.453197][ T6063] RIP: 0033:0x7f6b312be929 [ 155.453266][ T6063] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 155.453306][ T6063] RSP: 002b:00007f6b2f927038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 155.453330][ T6063] RAX: ffffffffffffffda RBX: 00007f6b314e5fa0 RCX: 00007f6b312be929 [ 155.453352][ T6063] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 155.453368][ T6063] RBP: 00007f6b2f927090 R08: 0000000000000000 R09: 0000000000000000 [ 155.453383][ T6063] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 155.453479][ T6063] R13: 0000000000000000 R14: 00007f6b314e5fa0 R15: 00007fff2a8dd338 [ 155.453502][ T6063] [ 155.721243][ T6065] 9pnet_fd: Insufficient options for proto=fd [ 155.810877][ T6073] loop1: detected capacity change from 0 to 164 [ 155.820685][ T6073] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 155.905324][ T6076] loop2: detected capacity change from 0 to 764 [ 155.910468][ T6080] loop0: detected capacity change from 0 to 164 [ 155.921450][ T6076] iso9660: Unknown parameter '' [ 155.949323][ T6080] iso9660: Unknown parameter '' [ 156.133791][ T6089] netlink: 24 bytes leftover after parsing attributes in process `syz.0.860'. [ 156.369675][ T6098] 9pnet_fd: Insufficient options for proto=fd [ 156.422418][ T6100] loop2: detected capacity change from 0 to 764 [ 156.463574][ T6100] iso9660: Unknown parameter '' [ 156.530792][ T6100] netlink: 28 bytes leftover after parsing attributes in process `syz.2.869'. [ 156.803942][ T6109] lo speed is unknown, defaulting to 1000 [ 157.249634][ T6114] loop0: detected capacity change from 0 to 512 [ 157.317846][ T6114] EXT4-fs error (device loop0): ext4_orphan_get:1393: inode #15: comm syz.0.873: casefold flag without casefold feature [ 157.361491][ T6114] EXT4-fs error (device loop0): ext4_orphan_get:1398: comm syz.0.873: couldn't read orphan inode 15 (err -117) [ 157.453776][ T6114] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 157.516336][ T3304] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 157.689377][ T6126] loop2: detected capacity change from 0 to 512 [ 157.815189][ T6136] lo speed is unknown, defaulting to 1000 [ 158.114141][ T6133] lo speed is unknown, defaulting to 1000 [ 158.386886][ T6141] vhci_hcd: invalid port number 96 [ 158.392642][ T6141] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 158.523990][ T6149] loop3: detected capacity change from 0 to 1024 [ 158.780050][ T6149] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 158.955095][ T6157] siw: device registration error -23 [ 159.299718][ T6160] loop0: detected capacity change from 0 to 512 [ 159.324791][ T6160] EXT4-fs error (device loop0): ext4_orphan_get:1393: inode #15: comm syz.0.886: iget: bad extended attribute block 1 [ 159.377985][ T6146] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 159.414846][ T6164] loop4: detected capacity change from 0 to 764 [ 159.426641][ T6160] EXT4-fs error (device loop0): ext4_orphan_get:1398: comm syz.0.886: couldn't read orphan inode 15 (err -117) [ 159.451844][ T6164] iso9660: Unknown parameter '' [ 159.523772][ T6160] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 159.553186][ T29] kauditd_printk_skb: 121 callbacks suppressed [ 159.553205][ T29] audit: type=1400 audit(1751758084.057:2945): avc: denied { create } for pid=6162 comm="syz.4.888" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 159.677467][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 159.718406][ T6160] xt_CT: You must specify a L4 protocol and not use inversions on it [ 159.764504][ T29] audit: type=1400 audit(1751758084.107:2946): avc: denied { write } for pid=6162 comm="syz.4.888" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 159.787950][ T29] audit: type=1400 audit(1751758084.157:2947): avc: denied { unmount } for pid=3317 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 159.810375][ T29] audit: type=1400 audit(1751758084.157:2948): avc: denied { mount } for pid=6158 comm="syz.0.886" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 159.836106][ T29] audit: type=1400 audit(1751758084.157:2949): avc: denied { read write } for pid=6158 comm="syz.0.886" name="loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 159.863844][ T29] audit: type=1400 audit(1751758084.157:2950): avc: denied { open } for pid=6158 comm="syz.0.886" path="/dev/loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 159.890716][ T29] audit: type=1400 audit(1751758084.167:2951): avc: denied { create } for pid=6158 comm="syz.0.886" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 159.912010][ T29] audit: type=1400 audit(1751758084.197:2952): avc: denied { setopt } for pid=6158 comm="syz.0.886" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 159.933333][ T29] audit: type=1400 audit(1751758084.197:2953): avc: denied { connect } for pid=6158 comm="syz.0.886" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 159.956242][ T29] audit: type=1400 audit(1751758084.197:2954): avc: denied { map_create } for pid=6158 comm="syz.0.886" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 160.165815][ T3304] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 160.326939][ T6176] 9pnet_fd: Insufficient options for proto=fd [ 160.455150][ T6180] loop9: detected capacity change from 0 to 7 [ 160.474610][ T3506] buffer_io_error: 6 callbacks suppressed [ 160.474629][ T3506] Buffer I/O error on dev loop9, logical block 0, async page read [ 160.544679][ T3506] Buffer I/O error on dev loop9, logical block 0, async page read [ 160.553496][ T3506] loop9: unable to read partition table [ 160.613130][ T6180] Buffer I/O error on dev loop9, logical block 0, async page read [ 160.624008][ T6180] Buffer I/O error on dev loop9, logical block 0, async page read [ 160.633827][ T6180] loop9: unable to read partition table [ 160.675544][ T6180] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 160.675544][ T6180] ) failed (rc=-5) [ 160.692432][ T3506] Buffer I/O error on dev loop9, logical block 0, async page read [ 160.723617][ T3506] Buffer I/O error on dev loop9, logical block 0, async page read [ 160.742992][ T3506] Buffer I/O error on dev loop9, logical block 0, async page read [ 160.763555][ T3506] Buffer I/O error on dev loop9, logical block 0, async page read [ 160.772318][ T3506] Buffer I/O error on dev loop9, logical block 0, async page read [ 160.891806][ T6188] loop3: detected capacity change from 0 to 1024 [ 160.907412][ T6188] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.896: Failed to acquire dquot type 0 [ 160.964489][ T6188] EXT4-fs (loop3): 1 truncate cleaned up [ 160.972058][ T6188] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 161.006567][ T6188] siw: device registration error -23 [ 161.051255][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.076769][ T6174] random: crng reseeded on system resumption [ 161.291877][ T6197] loop1: detected capacity change from 0 to 512 [ 161.311849][ T6197] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 161.329658][ T6197] ext4 filesystem being mounted at /177/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 161.366669][ T6197] EXT4-fs error (device loop1): ext4_do_update_inode:5568: inode #2: comm syz.1.899: corrupted inode contents [ 161.422516][ T6201] lo speed is unknown, defaulting to 1000 [ 161.644766][ T6197] EXT4-fs error (device loop1): ext4_dirty_inode:6459: inode #2: comm syz.1.899: mark_inode_dirty error [ 161.832933][ T6197] EXT4-fs error (device loop1): ext4_do_update_inode:5568: inode #2: comm syz.1.899: corrupted inode contents [ 161.855991][ T6207] loop2: detected capacity change from 0 to 512 [ 161.920463][ T6197] EXT4-fs error (device loop1): ext4_do_update_inode:5568: inode #2: comm syz.1.899: corrupted inode contents [ 161.960849][ T6197] EXT4-fs error (device loop1): ext4_dirty_inode:6459: inode #2: comm syz.1.899: mark_inode_dirty error [ 161.973208][ T6215] netlink: 28 bytes leftover after parsing attributes in process `syz.2.902'. [ 161.985121][ T6215] netlink: 28 bytes leftover after parsing attributes in process `syz.2.902'. [ 162.050073][ T6197] EXT4-fs error (device loop1): ext4_do_update_inode:5568: inode #2: comm syz.1.899: corrupted inode contents [ 162.114607][ T6197] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #2: comm syz.1.899: mark_inode_dirty error [ 162.149778][ T6197] EXT4-fs error (device loop1): ext4_do_update_inode:5568: inode #2: comm syz.1.899: corrupted inode contents [ 162.226051][ T6197] EXT4-fs error (device loop1): ext4_dirty_inode:6459: inode #2: comm syz.1.899: mark_inode_dirty error [ 162.285942][ T3308] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.845751][ T6223] netlink: 108 bytes leftover after parsing attributes in process `syz.4.906'. [ 163.329225][ T6242] wireguard0: entered promiscuous mode [ 163.339285][ T6242] wireguard0: entered allmulticast mode [ 163.455647][ T6247] lo speed is unknown, defaulting to 1000 [ 163.984946][ T6258] 9pnet_fd: Insufficient options for proto=fd [ 163.999576][ T6256] loop4: detected capacity change from 0 to 512 [ 164.009499][ T6251] loop3: detected capacity change from 0 to 512 [ 164.024848][ T6251] EXT4-fs error (device loop3): ext4_orphan_get:1393: inode #15: comm syz.3.914: iget: bad extended attribute block 1 [ 164.077784][ T6251] EXT4-fs error (device loop3): ext4_orphan_get:1398: comm syz.3.914: couldn't read orphan inode 15 (err -117) [ 164.099853][ T6251] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 164.117149][ T6256] EXT4-fs error (device loop4): ext4_orphan_get:1393: inode #15: comm syz.4.916: iget: bad extended attribute block 1 [ 164.133912][ T6256] EXT4-fs error (device loop4): ext4_orphan_get:1398: comm syz.4.916: couldn't read orphan inode 15 (err -117) [ 164.134453][ T6256] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 164.204752][ T6251] xt_CT: You must specify a L4 protocol and not use inversions on it [ 164.205075][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.225114][ T6268] lo speed is unknown, defaulting to 1000 [ 164.260684][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.398525][ T6276] loop2: detected capacity change from 0 to 512 [ 164.449380][ T6276] xt_CT: You must specify a L4 protocol and not use inversions on it [ 164.611198][ T6285] netlink: 108 bytes leftover after parsing attributes in process `syz.3.922'. [ 164.625084][ T6284] loop2: detected capacity change from 0 to 1024 [ 164.644515][ T6284] siw: device registration error -23 [ 164.774497][ T6290] netlink: 200 bytes leftover after parsing attributes in process `+}[@'. [ 164.791001][ T29] kauditd_printk_skb: 68 callbacks suppressed [ 164.791017][ T29] audit: type=1400 audit(1751758089.296:3021): avc: denied { create } for pid=6289 comm="+}[@" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 164.828210][ T29] audit: type=1400 audit(1751758089.326:3022): avc: denied { read } for pid=6289 comm="kmem_cache_free" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 164.852488][ T29] audit: type=1400 audit(1751758089.336:3023): avc: denied { create } for pid=6289 comm="kmem_cache_free" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 164.874176][ T6294] loop3: detected capacity change from 0 to 512 [ 164.874702][ T29] audit: type=1400 audit(1751758089.336:3024): avc: denied { watch watch_reads } for pid=6289 comm="kmem_cache_free" path="/209" dev="tmpfs" ino=1159 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 164.952086][ T6292] loop9: detected capacity change from 0 to 7 [ 164.960564][ T29] audit: type=1400 audit(1751758089.466:3025): avc: denied { mounton } for pid=6298 comm="syz.2.933" path="/proc/549/task" dev="proc" ino=13990 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 164.985698][ T29] audit: type=1400 audit(1751758089.466:3026): avc: denied { mount } for pid=6298 comm="syz.2.933" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 165.011457][ T6292] Buffer I/O error on dev loop9, logical block 0, async page read [ 165.038041][ T6292] loop9: unable to read partition table [ 165.045722][ T6292] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 165.045722][ T6292] ) failed (rc=-5) [ 165.094020][ T29] audit: type=1326 audit(1751758089.596:3027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6302 comm="syz.2.934" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f457b16e929 code=0x7ffc0000 [ 165.094148][ T29] audit: type=1326 audit(1751758089.596:3028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6302 comm="syz.2.934" exe="/root/syz-executor" sig=0 arch=c000003e syscall=229 compat=0 ip=0x7f457b16e929 code=0x7ffc0000 [ 165.094258][ T29] audit: type=1326 audit(1751758089.596:3029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6302 comm="syz.2.934" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f457b16e929 code=0x7ffc0000 [ 165.094299][ T29] audit: type=1326 audit(1751758089.596:3030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6302 comm="syz.2.934" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f457b16e929 code=0x7ffc0000 [ 165.110636][ T6307] loop0: detected capacity change from 0 to 164 [ 165.118526][ T6307] iso9660: Unknown parameter '' [ 165.244224][ T6297] loop1: detected capacity change from 0 to 512 [ 165.248185][ T6294] EXT4-fs error (device loop3): ext4_orphan_get:1393: inode #15: comm syz.3.931: iget: bad extended attribute block 1 [ 165.248677][ T6294] EXT4-fs error (device loop3): ext4_orphan_get:1398: comm syz.3.931: couldn't read orphan inode 15 (err -117) [ 165.249160][ T6294] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 165.305596][ T6309] netlink: 24 bytes leftover after parsing attributes in process `syz.0.935'. [ 165.315529][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.316412][ T6297] EXT4-fs error (device loop1): ext4_orphan_get:1393: inode #15: comm syz.1.932: iget: bad extended attribute block 1 [ 165.316659][ T6297] EXT4-fs error (device loop1): ext4_orphan_get:1398: comm syz.1.932: couldn't read orphan inode 15 (err -117) [ 165.317492][ T6297] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 165.320358][ T6297] xt_CT: You must specify a L4 protocol and not use inversions on it [ 165.391797][ T3308] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.415138][ T6312] loop9: detected capacity change from 0 to 7 [ 165.415500][ T6312] loop9: unable to read partition table [ 165.415546][ T6312] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 165.415546][ T6312] ) failed (rc=-5) [ 165.475097][ T6314] siw: device registration error -23 [ 165.642216][ T6323] loop3: detected capacity change from 0 to 764 [ 165.642562][ T6323] iso9660: Unknown parameter '' [ 165.652733][ T6323] netlink: 20 bytes leftover after parsing attributes in process `syz.3.940'. [ 165.860179][ T6325] loop1: detected capacity change from 0 to 1024 [ 165.997533][ T6331] 9pnet_fd: Insufficient options for proto=fd [ 166.035878][ T6325] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.941: Failed to acquire dquot type 0 [ 166.080042][ T6334] loop3: detected capacity change from 0 to 164 [ 166.101036][ T6325] EXT4-fs (loop1): 1 truncate cleaned up [ 166.108483][ T6325] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 166.175905][ T6340] loop4: detected capacity change from 0 to 512 [ 166.224061][ T6334] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 166.245225][ T6340] EXT4-fs error (device loop4): ext4_orphan_get:1393: inode #15: comm syz.4.946: iget: bad extended attribute block 1 [ 166.297486][ T6340] EXT4-fs error (device loop4): ext4_orphan_get:1398: comm syz.4.946: couldn't read orphan inode 15 (err -117) [ 166.341568][ T6340] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 166.342330][ T3308] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.410278][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.466569][ T6345] loop3: detected capacity change from 0 to 164 [ 166.475675][ T6345] iso9660: Unknown parameter '' [ 166.531881][ T6347] loop1: detected capacity change from 0 to 512 [ 166.607334][ T6347] EXT4-fs error (device loop1): ext4_orphan_get:1393: inode #15: comm syz.1.947: iget: bad extended attribute block 1 [ 166.625263][ T6347] EXT4-fs error (device loop1): ext4_orphan_get:1398: comm syz.1.947: couldn't read orphan inode 15 (err -117) [ 166.673649][ T6347] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 166.693256][ T6353] netlink: 24 bytes leftover after parsing attributes in process `syz.3.948'. [ 166.763364][ T6347] xt_CT: You must specify a L4 protocol and not use inversions on it [ 166.830229][ T3308] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.353902][ T6357] FAULT_INJECTION: forcing a failure. [ 167.353902][ T6357] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 167.368056][ T6357] CPU: 1 UID: 0 PID: 6357 Comm: syz.0.951 Not tainted 6.16.0-rc4-syzkaller-00319-g05df91921da6 #0 PREEMPT(voluntary) [ 167.368086][ T6357] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 167.368158][ T6357] Call Trace: [ 167.368167][ T6357] [ 167.368177][ T6357] __dump_stack+0x1d/0x30 [ 167.368264][ T6357] dump_stack_lvl+0xe8/0x140 [ 167.368286][ T6357] dump_stack+0x15/0x1b [ 167.368302][ T6357] should_fail_ex+0x265/0x280 [ 167.368374][ T6357] should_fail+0xb/0x20 [ 167.368407][ T6357] should_fail_usercopy+0x1a/0x20 [ 167.368449][ T6357] _copy_from_user+0x1c/0xb0 [ 167.368509][ T6357] ___sys_sendmsg+0xc1/0x1d0 [ 167.368559][ T6357] __x64_sys_sendmsg+0xd4/0x160 [ 167.368585][ T6357] x64_sys_call+0x2999/0x2fb0 [ 167.368691][ T6357] do_syscall_64+0xd2/0x200 [ 167.368715][ T6357] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 167.368749][ T6357] ? clear_bhb_loop+0x40/0x90 [ 167.368807][ T6357] ? clear_bhb_loop+0x40/0x90 [ 167.368835][ T6357] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 167.368859][ T6357] RIP: 0033:0x7f840d93e929 [ 167.368951][ T6357] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 167.368971][ T6357] RSP: 002b:00007f840bfa7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 167.369037][ T6357] RAX: ffffffffffffffda RBX: 00007f840db65fa0 RCX: 00007f840d93e929 [ 167.369053][ T6357] RDX: 0000000004000000 RSI: 0000200000000280 RDI: 000000000000000c [ 167.369069][ T6357] RBP: 00007f840bfa7090 R08: 0000000000000000 R09: 0000000000000000 [ 167.369085][ T6357] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 167.369122][ T6357] R13: 0000000000000000 R14: 00007f840db65fa0 R15: 00007ffec44e3478 [ 167.369147][ T6357] [ 167.622040][ T6366] netlink: 'syz.0.952': attribute type 2 has an invalid length. [ 167.630697][ T6366] netlink: 'syz.0.952': attribute type 11 has an invalid length. [ 167.639419][ T6366] netlink: 132 bytes leftover after parsing attributes in process `syz.0.952'. [ 167.759736][ T6370] loop3: detected capacity change from 0 to 164 [ 167.787895][ T6372] FAULT_INJECTION: forcing a failure. [ 167.787895][ T6372] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 167.803480][ T6372] CPU: 1 UID: 0 PID: 6372 Comm: syz.0.955 Not tainted 6.16.0-rc4-syzkaller-00319-g05df91921da6 #0 PREEMPT(voluntary) [ 167.803586][ T6372] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 167.803601][ T6372] Call Trace: [ 167.803610][ T6372] [ 167.803620][ T6372] __dump_stack+0x1d/0x30 [ 167.803675][ T6372] dump_stack_lvl+0xe8/0x140 [ 167.803703][ T6372] dump_stack+0x15/0x1b [ 167.803725][ T6372] should_fail_ex+0x265/0x280 [ 167.803778][ T6372] should_fail+0xb/0x20 [ 167.803845][ T6372] should_fail_usercopy+0x1a/0x20 [ 167.803888][ T6372] _copy_from_user+0x1c/0xb0 [ 167.803983][ T6372] core_sys_select+0x34a/0x6e0 [ 167.804045][ T6372] ? set_user_sigmask+0x84/0x190 [ 167.804075][ T6372] __se_sys_pselect6+0x216/0x280 [ 167.804187][ T6372] __x64_sys_pselect6+0x78/0x90 [ 167.804269][ T6372] x64_sys_call+0x1caa/0x2fb0 [ 167.804296][ T6372] do_syscall_64+0xd2/0x200 [ 167.804525][ T6372] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 167.804558][ T6372] ? clear_bhb_loop+0x40/0x90 [ 167.804603][ T6372] ? clear_bhb_loop+0x40/0x90 [ 167.804633][ T6372] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 167.804663][ T6372] RIP: 0033:0x7f840d93e929 [ 167.804687][ T6372] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 167.804720][ T6372] RSP: 002b:00007f840bfa7038 EFLAGS: 00000246 ORIG_RAX: 000000000000010e [ 167.804746][ T6372] RAX: ffffffffffffffda RBX: 00007f840db65fa0 RCX: 00007f840d93e929 [ 167.804784][ T6372] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000040 [ 167.804801][ T6372] RBP: 00007f840bfa7090 R08: 0000200000000280 R09: 0000000000000000 [ 167.804818][ T6372] R10: 0000200000000240 R11: 0000000000000246 R12: 0000000000000001 [ 167.804832][ T6372] R13: 0000000000000000 R14: 00007f840db65fa0 R15: 00007ffec44e3478 [ 167.804876][ T6372] [ 167.812764][ T6370] iso9660: Unknown parameter '' [ 168.303139][ T6382] lo speed is unknown, defaulting to 1000 [ 168.318454][ T6387] netlink: 24 bytes leftover after parsing attributes in process `syz.3.954'. [ 169.262400][ T6394] loop2: detected capacity change from 0 to 764 [ 169.293166][ T6394] iso9660: Unknown parameter '' [ 169.850070][ T29] kauditd_printk_skb: 165 callbacks suppressed [ 169.850095][ T29] audit: type=1400 audit(1751758094.356:3194): avc: denied { create } for pid=6399 comm="syz.0.964" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 169.881758][ T6401] loop0: detected capacity change from 0 to 164 [ 169.901618][ T6402] loop4: detected capacity change from 0 to 164 [ 169.932922][ T29] audit: type=1400 audit(1751758094.436:3195): avc: denied { execmem } for pid=6403 comm="syz.2.966" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 169.956579][ T29] audit: type=1400 audit(1751758094.456:3196): avc: denied { mounton } for pid=6399 comm="syz.0.964" path="/188/file0" dev="tmpfs" ino=1041 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 169.986700][ T6401] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 169.997805][ T6402] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 170.043326][ T29] audit: type=1400 audit(1751758094.536:3197): avc: denied { mount } for pid=6399 comm="syz.0.964" name="/" dev="loop0" ino=1792 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 170.067834][ T29] audit: type=1400 audit(1751758094.536:3198): avc: denied { read } for pid=6399 comm="syz.0.964" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 170.094678][ T29] audit: type=1400 audit(1751758094.536:3199): avc: denied { open } for pid=6399 comm="syz.0.964" path="/dev/autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 170.121122][ T29] audit: type=1400 audit(1751758094.536:3200): avc: denied { ioctl } for pid=6399 comm="syz.0.964" path="/dev/autofs" dev="devtmpfs" ino=91 ioctlcmd=0x937e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 170.200444][ T29] audit: type=1400 audit(1751758094.666:3201): avc: denied { unmount } for pid=3304 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 170.222186][ T29] audit: type=1400 audit(1751758094.686:3202): avc: denied { open } for pid=6407 comm="syz.0.969" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 170.245342][ T29] audit: type=1400 audit(1751758094.686:3203): avc: denied { kernel } for pid=6407 comm="syz.0.969" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 170.432375][ T6423] loop3: detected capacity change from 0 to 2048 [ 170.469294][ T6423] EXT4-fs: Ignoring removed mblk_io_submit option [ 170.512101][ T6423] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 170.779726][ T3334] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm kworker/u8:6: bg 0: block 234: padding at end of block bitmap is not set [ 170.824875][ T6433] loop0: detected capacity change from 0 to 512 [ 170.846513][ T3334] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 482 with error 28 [ 170.861217][ T3334] EXT4-fs (loop3): This should not happen!! Data will be lost [ 170.861217][ T3334] [ 170.872677][ T3334] EXT4-fs (loop3): Total free blocks count 0 [ 170.879255][ T3334] EXT4-fs (loop3): Free/Dirty block details [ 170.885545][ T3334] EXT4-fs (loop3): free_blocks=0 [ 170.890988][ T3334] EXT4-fs (loop3): dirty_blocks=496 [ 170.896836][ T3334] EXT4-fs (loop3): Block reservation details [ 170.903393][ T3334] EXT4-fs (loop3): i_reserved_data_blocks=31 [ 170.911336][ T6433] EXT4-fs error (device loop0): ext4_orphan_get:1393: inode #15: comm syz.0.974: iget: bad extended attribute block 1 [ 170.962716][ T6431] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 482 with max blocks 2 with error 28 [ 170.971623][ T6433] EXT4-fs error (device loop0): ext4_orphan_get:1398: comm syz.0.974: couldn't read orphan inode 15 (err -117) [ 171.049692][ T6433] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 171.108061][ T6433] xt_CT: You must specify a L4 protocol and not use inversions on it [ 171.186992][ T3304] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.203467][ T6436] SELinux: Context is not valid (left unmapped). [ 171.308300][ T6440] loop3: detected capacity change from 0 to 764 [ 171.339051][ T6440] iso9660: Unknown parameter '' [ 171.430022][ T6444] loop0: detected capacity change from 0 to 764 [ 171.459028][ T6444] iso9660: Unknown parameter '' [ 171.625900][ T6450] syzkaller1: entered promiscuous mode [ 171.632356][ T6450] syzkaller1: entered allmulticast mode [ 171.750329][ T6450] 9pnet_fd: Insufficient options for proto=fd [ 171.847120][ T6463] loop4: detected capacity change from 0 to 512 [ 171.886441][ T6463] EXT4-fs error (device loop4): ext4_orphan_get:1393: inode #15: comm syz.4.986: iget: bad extended attribute block 1 [ 171.952874][ T6463] EXT4-fs error (device loop4): ext4_orphan_get:1398: comm syz.4.986: couldn't read orphan inode 15 (err -117) [ 171.970243][ T6463] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 172.004456][ T6463] xt_CT: You must specify a L4 protocol and not use inversions on it [ 172.057296][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 172.062289][ T6467] loop1: detected capacity change from 0 to 764 [ 172.075822][ T6467] iso9660: Unknown parameter '' [ 172.139740][ T6473] loop2: detected capacity change from 0 to 164 [ 172.148646][ T6471] loop1: detected capacity change from 0 to 512 [ 172.165879][ T6471] EXT4-fs error (device loop1): ext4_orphan_get:1393: inode #15: comm syz.1.989: casefold flag without casefold feature [ 172.181406][ T6473] iso9660: Unknown parameter '' [ 172.191187][ T6471] EXT4-fs error (device loop1): ext4_orphan_get:1398: comm syz.1.989: couldn't read orphan inode 15 (err -117) [ 172.266771][ T6471] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 172.326559][ T6479] loop0: detected capacity change from 0 to 164 [ 172.350459][ T6480] netlink: 24 bytes leftover after parsing attributes in process `syz.2.990'. [ 172.369649][ T6479] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 172.471489][ T3308] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 172.504319][ T6484] loop9: detected capacity change from 0 to 7 [ 172.512622][ T6484] buffer_io_error: 8 callbacks suppressed [ 172.512646][ T6484] Buffer I/O error on dev loop9, logical block 0, async page read [ 172.535060][ T6484] Buffer I/O error on dev loop9, logical block 0, async page read [ 172.543910][ T6484] loop9: unable to read partition table [ 172.550627][ T6484] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 172.550627][ T6484] ) failed (rc=-5) [ 172.566572][ T3506] Buffer I/O error on dev loop9, logical block 0, async page read [ 172.579409][ T3506] Buffer I/O error on dev loop9, logical block 0, async page read [ 172.600315][ T6487] loop1: detected capacity change from 0 to 512 [ 172.607355][ T3506] Buffer I/O error on dev loop9, logical block 0, async page read [ 172.616394][ T3506] Buffer I/O error on dev loop9, logical block 0, async page read [ 172.646689][ T3506] Buffer I/O error on dev loop9, logical block 0, async page read [ 172.666567][ T6487] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 172.694486][ T6487] ext4 filesystem being mounted at /196/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 172.748843][ T6487] EXT4-fs error (device loop1): ext4_do_update_inode:5568: inode #2: comm syz.1.995: corrupted inode contents [ 172.763649][ T6487] EXT4-fs error (device loop1): ext4_dirty_inode:6459: inode #2: comm syz.1.995: mark_inode_dirty error [ 172.778175][ T6487] EXT4-fs error (device loop1): ext4_do_update_inode:5568: inode #2: comm syz.1.995: corrupted inode contents [ 172.795495][ T6487] EXT4-fs error (device loop1): ext4_do_update_inode:5568: inode #2: comm syz.1.995: corrupted inode contents [ 172.810053][ T6487] EXT4-fs error (device loop1): ext4_dirty_inode:6459: inode #2: comm syz.1.995: mark_inode_dirty error [ 172.822721][ T6487] EXT4-fs error (device loop1): ext4_do_update_inode:5568: inode #2: comm syz.1.995: corrupted inode contents [ 172.837155][ T6487] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #2: comm syz.1.995: mark_inode_dirty error [ 172.851002][ T6487] EXT4-fs error (device loop1): ext4_do_update_inode:5568: inode #2: comm syz.1.995: corrupted inode contents [ 172.863926][ T6487] EXT4-fs error (device loop1): ext4_dirty_inode:6459: inode #2: comm syz.1.995: mark_inode_dirty error [ 172.904756][ T3308] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 173.027901][ T6500] loop2: detected capacity change from 0 to 764 [ 173.035834][ T6500] iso9660: Unknown parameter '' [ 173.332434][ T6506] loop9: detected capacity change from 0 to 7 [ 173.365602][ T6506] Buffer I/O error on dev loop9, logical block 0, async page read [ 173.392881][ T6506] Buffer I/O error on dev loop9, logical block 0, async page read [ 173.402220][ T6506] loop9: unable to read partition table [ 173.437050][ T6506] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 173.437050][ T6506] ) failed (rc=-5) [ 173.588031][ T6515] netlink: 200 bytes leftover after parsing attributes in process `+}[@'. [ 174.086809][ T6523] loop4: detected capacity change from 0 to 1024 [ 174.130154][ T6523] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.1007: Failed to acquire dquot type 0 [ 174.145508][ T6523] EXT4-fs (loop4): 1 truncate cleaned up [ 174.153797][ T6523] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 174.172852][ T6523] siw: device registration error -23 [ 174.253996][ T6527] lo speed is unknown, defaulting to 1000 [ 174.475319][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 174.689856][ T6534] loop4: detected capacity change from 0 to 164 [ 174.735626][ T6534] iso9660: Unknown parameter '' [ 174.893968][ T6540] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1009'. [ 174.964052][ T6542] loop3: detected capacity change from 0 to 1024 [ 175.021682][ T6542] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 175.035271][ T6536] netlink: 108 bytes leftover after parsing attributes in process `syz.1.1010'. [ 175.146256][ T6542] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 175.174159][ T6551] loop9: detected capacity change from 0 to 7 [ 175.180867][ T6551] Buffer I/O error on dev loop9, logical block 0, async page read [ 175.189659][ T6551] loop9: unable to read partition table [ 175.199377][ T6553] loop1: detected capacity change from 0 to 512 [ 175.201204][ T6551] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 175.201204][ T6551] ) failed (rc=-5) [ 175.228990][ T6553] EXT4-fs error (device loop1): ext4_orphan_get:1393: inode #15: comm syz.1.1016: casefold flag without casefold feature [ 175.255014][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 175.259548][ T6553] EXT4-fs error (device loop1): ext4_orphan_get:1398: comm syz.1.1016: couldn't read orphan inode 15 (err -117) [ 175.281099][ T6553] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 175.412108][ T3308] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 175.442974][ T6561] loop1: detected capacity change from 0 to 1024 [ 175.459691][ T6561] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 175.564282][ T6561] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 175.601412][ T29] kauditd_printk_skb: 238 callbacks suppressed [ 175.601431][ T29] audit: type=1400 audit(1751758100.105:3440): avc: denied { mount } for pid=6567 comm="syz.4.1020" name="/" dev="ramfs" ino=15511 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 175.974613][ T3308] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 176.008779][ T29] audit: type=1400 audit(1751758100.505:3441): avc: denied { module_request } for pid=6570 comm="syz.4.1021" kmod="net-pf-2-proto-0-type-3" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 176.080147][ T29] audit: type=1400 audit(1751758100.555:3442): avc: denied { name_bind } for pid=6570 comm="syz.4.1021" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 176.104187][ T29] audit: type=1400 audit(1751758100.565:3443): avc: denied { node_bind } for pid=6570 comm="syz.4.1021" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 176.133766][ T29] audit: type=1400 audit(1751758100.565:3444): avc: denied { create } for pid=6570 comm="syz.4.1021" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 176.159894][ T29] audit: type=1400 audit(1751758100.565:3445): avc: denied { read } for pid=6570 comm="syz.4.1021" path="socket:[14982]" dev="sockfs" ino=14982 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 176.189626][ T29] audit: type=1400 audit(1751758100.575:3446): avc: denied { write } for pid=6574 comm="syz.2.1023" name="001" dev="devtmpfs" ino=162 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 176.225406][ T6579] vhci_hcd: invalid port number 96 [ 176.230951][ T6579] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 176.268356][ T29] audit: type=1400 audit(1751758100.675:3447): avc: denied { map } for pid=6574 comm="syz.2.1023" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=162 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 176.293794][ T29] audit: type=1400 audit(1751758100.755:3448): avc: denied { watch } for pid=6574 comm="syz.2.1023" path="/228/file0" dev="tmpfs" ino=1264 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 176.317012][ T29] audit: type=1400 audit(1751758100.765:3449): avc: denied { mounton } for pid=6580 comm="syz.1.1024" path="/proc/547/task" dev="proc" ino=15000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 176.360570][ T6579] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1023'. [ 176.753463][ T6588] netlink: 108 bytes leftover after parsing attributes in process `syz.2.1027'. [ 176.893834][ T6598] loop2: detected capacity change from 0 to 1024 [ 176.902058][ T6598] siw: device registration error -23 [ 177.107508][ T6604] ================================================================== [ 177.118220][ T6604] BUG: KCSAN: data-race in mem_cgroup_flush_stats_ratelimited / tick_do_update_jiffies64 [ 177.128983][ T6604] [ 177.131606][ T6604] read-write to 0xffffffff868099c0 of 8 bytes by interrupt on cpu 1: [ 177.140487][ T6604] tick_do_update_jiffies64+0x113/0x1c0 [ 177.147160][ T6604] tick_nohz_handler+0x7f/0x2d0 [ 177.155153][ T6604] __hrtimer_run_queues+0x20f/0x5a0 [ 177.160596][ T6604] hrtimer_interrupt+0x21a/0x460 [ 177.165947][ T6604] __sysvec_apic_timer_interrupt+0x5f/0x1d0 [ 177.174083][ T6604] sysvec_apic_timer_interrupt+0x6f/0x80 [ 177.180085][ T6604] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 177.186564][ T6604] kcsan_setup_watchpoint+0x415/0x430 [ 177.192967][ T6604] vma_interval_tree_iter_next+0x71/0x230 [ 177.202476][ T6604] __rmap_walk_file+0x23d/0x2b0 [ 177.207939][ T6604] folio_mkclean+0x1bc/0x210 [ 177.212646][ T6604] folio_clear_dirty_for_io+0xa5/0x3d0 [ 177.218436][ T6604] mpage_submit_folio+0x4e/0x170 [ 177.224306][ T6604] mpage_process_page_bufs+0x39b/0x4a0 [ 177.230869][ T6604] mpage_prepare_extent_to_map+0x741/0xaa0 [ 177.237016][ T6604] ext4_do_writepages+0x6ea/0x21c0 [ 177.242194][ T6604] ext4_writepages+0x176/0x300 [ 177.247382][ T6604] do_writepages+0x1c3/0x310 [ 177.252339][ T6604] __writeback_single_inode+0x80/0x7c0 [ 177.258377][ T6604] writeback_sb_inodes+0x480/0xa20 [ 177.263811][ T6604] __writeback_inodes_wb+0x94/0x1a0 [ 177.269083][ T6604] wb_writeback+0x266/0x5c0 [ 177.275046][ T6604] wb_workfn+0x4c9/0x910 [ 177.279597][ T6604] process_scheduled_works+0x4cb/0x9d0 [ 177.285577][ T6604] worker_thread+0x582/0x770 [ 177.290770][ T6604] kthread+0x489/0x510 [ 177.295156][ T6604] ret_from_fork+0xda/0x150 [ 177.299995][ T6604] ret_from_fork_asm+0x1a/0x30 [ 177.304997][ T6604] [ 177.307339][ T6604] read to 0xffffffff868099c0 of 8 bytes by task 6604 on cpu 0: [ 177.315245][ T6604] mem_cgroup_flush_stats_ratelimited+0x29/0x70 [ 177.322341][ T6604] count_shadow_nodes+0x6a/0x230 [ 177.329967][ T6604] do_shrink_slab+0x63/0x680 [ 177.335477][ T6604] shrink_slab+0x448/0x760 [ 177.340971][ T6604] shrink_node+0x6c3/0x2120 [ 177.345943][ T6604] do_try_to_free_pages+0x3f6/0xcd0 [ 177.351265][ T6604] try_to_free_mem_cgroup_pages+0x1ab/0x410 [ 177.357848][ T6604] try_charge_memcg+0x358/0x9e0 [ 177.363088][ T6604] obj_cgroup_charge_pages+0xa6/0x150 [ 177.368525][ T6604] __memcg_kmem_charge_page+0x9f/0x170 [ 177.374030][ T6604] __alloc_frozen_pages_noprof+0x188/0x360 [ 177.380068][ T6604] alloc_pages_mpol+0xb3/0x250 [ 177.384982][ T6604] alloc_pages_noprof+0x90/0x130 [ 177.390342][ T6604] __vmalloc_node_range_noprof+0x6f2/0xe00 [ 177.396513][ T6604] __kvmalloc_node_noprof+0x30f/0x4e0 [ 177.402415][ T6604] ip_set_alloc+0x1f/0x30 [ 177.407680][ T6604] hash_netiface_create+0x282/0x740 [ 177.413894][ T6604] ip_set_create+0x3cc/0x960 [ 177.418760][ T6604] nfnetlink_rcv_msg+0x4c3/0x590 [ 177.424022][ T6604] netlink_rcv_skb+0x123/0x220 [ 177.429034][ T6604] nfnetlink_rcv+0x16b/0x1690 [ 177.434478][ T6604] netlink_unicast+0x59e/0x670 [ 177.439878][ T6604] netlink_sendmsg+0x58b/0x6b0 [ 177.445969][ T6604] __sock_sendmsg+0x142/0x180 [ 177.450975][ T6604] ____sys_sendmsg+0x31e/0x4e0 [ 177.457154][ T6604] ___sys_sendmsg+0x17b/0x1d0 [ 177.462974][ T6604] __x64_sys_sendmsg+0xd4/0x160 [ 177.467949][ T6604] x64_sys_call+0x2999/0x2fb0 [ 177.474171][ T6604] do_syscall_64+0xd2/0x200 [ 177.479109][ T6604] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 177.485744][ T6604] [ 177.488460][ T6604] value changed: 0x00000000ffffcfbf -> 0x00000000ffffcfc0 [ 177.496588][ T6604] [ 177.499383][ T6604] Reported by Kernel Concurrency Sanitizer on: [ 177.507336][ T6604] CPU: 0 UID: 0 PID: 6604 Comm: syz.3.1033 Not tainted 6.16.0-rc4-syzkaller-00319-g05df91921da6 #0 PREEMPT(voluntary) [ 177.520772][ T6604] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 177.533301][ T6604] ==================================================================