last executing test programs: 1.762973276s ago: executing program 0 (id=403): r0 = socket$nl_rdma(0x10, 0x3, 0x14) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r3, 0x0, 0x400000008000f28, 0x0) splice(r2, 0x0, r1, 0x0, 0x114, 0xe) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=ANY=[], 0x100}, 0x1, 0x0, 0x0, 0x24060024}, 0x0) 1.161290535s ago: executing program 2 (id=422): bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[], 0x50) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x9, 0x0, 0x10000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0}, 0xa100, 0xc8, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b703000010000000850000001b000000b700000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, 0x0, 0x0) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x0, &(0x7f0000000080)}, 0x10) syz_io_uring_setup(0xbc3, 0x0, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r2}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00'}, 0x18) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000) r3 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r3, &(0x7f0000000200)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r4 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r4, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}}, 0x5c) 1.161132435s ago: executing program 1 (id=423): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)=ANY=[@ANYBLOB], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) 1.159712705s ago: executing program 2 (id=425): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40000100, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x800, 0xfffffffc, 0x7, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x20000000000002b8, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x8000, 0x0, 0x0, 0x41000}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={0x0}, 0x18) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000003c0)={0x9c9, 0x0, 0x0, 'queue1\x00', 0x200000}) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r2, 0x40605346, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) openat$sndseq(0xffffffffffffff9c, 0x0, 0x28002) ioctl$SG_GET_VERSION_NUM(0xffffffffffffffff, 0x2284, &(0x7f0000000080)) 1.114676919s ago: executing program 1 (id=428): ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000000c0)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socket$nl_generic(0x11, 0x3, 0x10) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x100, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000180)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000000240)="8a", 0x1, 0x51, &(0x7f0000000080)={0xa, 0x3, 0x1, @local, 0x9}, 0x1c) socket(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000000100000100000028"], 0x50) socket$inet6(0xa, 0x805, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0xff, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0xe}, 0x100002, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2000000}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.049368974s ago: executing program 2 (id=429): r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000280), 0x101000, 0x0) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000300)={'wpan3\x00'}) close_range(r0, r1, 0x2) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x14, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7020000080000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x42, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000), 0xc, 0x0, 0x1, 0x0, 0x0, 0x20040844}, 0x0) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r6, 0x0) getsockopt$inet6_mptcp_buf(r6, 0x11c, 0x2, &(0x7f0000000000)=""/126, &(0x7f0000000080)=0x7e) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000002c0000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x62, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffeb1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r7}, 0x10) r9 = io_uring_setup(0x6edd, &(0x7f0000000600)={0x0, 0x41002c1c, 0x10003, 0x1, 0x188}) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)=@o_path={&(0x7f0000000000)='./file0\x00', 0x0, 0x8, r8}, 0x18) r10 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r10, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) close_range(r9, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) r11 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) shmget$private(0x0, 0xfffffffffeffffff, 0x0, &(0x7f0000ffc000/0x3000)=nil) preadv(r11, &(0x7f00000011c0)=[{&(0x7f0000001000)=""/237, 0xed}, {0x0}], 0x2, 0x3, 0x9b35) 1.049009754s ago: executing program 3 (id=430): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40000100, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x800, 0xfffffffc, 0x7, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x20000000000002b8, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x8000, 0x0, 0x0, 0x41000}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000280)='kfree\x00', r3}, 0x18) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f00000003c0)={0x9c9, 0x0, 0x0, 'queue1\x00', 0x200000}) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000000)={&(0x7f0000000300)="ed8727332c022ac9a63a163bdd6028b24887d84a1e887ac9b3a3fc8e0ca78616a12e16ae307c154dd5b82688142df43543efd1c580b36237fa606e021c3c1a951a77a6268d70c1545be1aeca1c356afea8df8fac3a92e6ed53727491c0c2850f667f24986a25e5c993b01c230233e74902cecb744be5bff0e0afdef21e0729119534242dda6b78d784d47097cfc5b7d37f3cf25e5bac27a7a7c597224ba0e60cc7009ee853363d9e", &(0x7f0000000800)=""/221, &(0x7f0000000680)="7f085fa60b7484f2ef1a2b6b61a734466d5bf571904f2771ef9a5a528bc49640c573c5da4dc3aa90227e2a6b93d5a664acf0a73d934ae8f3da4e74f25423f6e5279e68149161236a82e8174ca15dc13c87f306e755cf30980d27bd863ebbbff17cfa2b62e04628f226f9566d1733caba961d24ecf4d57173ed9e1d150391dacb59dd3687064d6340b5174c3566a2d9fa2599f88ed3d04d08dbb9", &(0x7f0000000580)="5919ac6859c000fb192d1a336b7c8f8c1c0307bbff2a347f439ad277ea06ac14474340790851f41a5c503e4521e607fff63f30811e71e72b7f60752463bc7b604e96dbf1e2c2e620f8b97667f1098abd2181fe1822283066add0688533ef40ce65fbbc686419e0f36fff63d22b76b8838dd419b1ba", 0x9, r2, 0x4}, 0x38) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r4, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x0, 0x0, 0x40000000, 0x0, 0x3}, 0x8}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x200000000000002f, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000500), 0x28002) write$sndseq(r5, 0x0, 0x0) r6 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_GET_VERSION_NUM(r6, 0x2284, &(0x7f0000000080)) 1.046615454s ago: executing program 3 (id=431): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000001850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8f}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000f00)=@base={0x5, 0x4, 0xfff, 0x7}, 0x50) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x15, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000080850000008200000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f00000021c0)={r6, 0x0, 0x0}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r3}, 0x10) r7 = creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7ffc1ffb}]}) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000001000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r8}, 0x10) readlink(0x0, 0x0, 0x0) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x8080) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="09000000070000002a0000000500000000000000", @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000004ac0c817b7f0e88b979acd6aa5b3446fb4571ee01ce5123534f1139a9f02ea346f0330818ecedc645767500100007e96628d577f6a13b67613b4ca3f6d6bdba3e29ae9d547479ef7a51cf8de24686353b8b721b118720c5a28573fe65c3bb53899c03c176a8381671ac34b0cf93867", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r7) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000400)={&(0x7f0000000a00)={0x18c, r11, 0x200, 0x70bd27, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_VHT_CAPABILITY_MASK={0x10, 0xb0, {0x200000, {0x4, 0x0, 0x3, 0xb}}}, @NL80211_ATTR_IE={0x15c, 0x2a, [@ibss={0x6, 0x2, 0x4}, @random={0x25, 0xc0, "99ad922f670a356ce290bab47c673a947f70de1d3cc567504e5d191b78c26ff14b5d102ffc7ae78329ff48489e7df8f5d2a7145e60d9dbf9a7d9fccfc375048ed086366a3426c0893ca246beded74eaded926c450e6f868b87b5aa1cc0020b1c314d231cf95f4305b00e086d1755d2ae0a3bbeb2e2c145ab9fb63a98d91347ff74aabdcc56e5de1460eacebe94a9a7364ad329fcc9dad4236d9a232d639ab5896626239cc4bd1bc23e7d6cd358edee811a35eec3380efa95ac4ff456cb3e0554"}, @ext_channel_switch={0x3c, 0x4, {0x1, 0x5, 0x6c, 0x19}}, @preq={0x82, 0x2b, {{0x0, 0x0, 0x0, 0x0, 0x1}, 0x1, 0x9, 0x3, @broadcast, 0x10001, @value, 0x6, 0x4, 0x1, [{{0x0, 0x0, 0x1}, @device_b, 0x2}]}}, @supported_rates={0x1, 0x2, [{0x1b}, {0x3, 0x1}]}, @ext_channel_switch={0x3c, 0x4, {0x1, 0xe, 0x2c, 0xfe}}, @rann={0x7e, 0x15, {{0x0, 0x5}, 0x4, 0x1, @device_b, 0xc8, 0x8, 0x101}}, @measure_req={0x26, 0x36, {0xfa, 0x5, 0x7f, "3be4e43e2dd14c82c430df0fba6b1a68e22363cb120e5767e55dabc377253dffbd5dad5e88f33b3645b0c650350c02abe25480"}}, @ext_channel_switch={0x3c, 0x4, {0x0, 0x7f, 0x39, 0x7}}]}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x18c}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r10}, 0x10) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r12, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x68, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x2c, 0x11, 0x0, 0x1, @limit={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x3}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x101}]}}}]}, @NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}, {0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xf8}}, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) 976.74546ms ago: executing program 3 (id=432): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x208, 0xd9}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000181200", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r1}, 0x18) capset(&(0x7f0000000380)={0x20080522}, &(0x7f0000000040)={0x200000, 0x40200003, 0x0, 0x6, 0x7}) setrlimit(0x40000000000008, &(0x7f0000000080)={0x0, 0x6}) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) fremovexattr(0xffffffffffffffff, &(0x7f0000000480)=@random={'os2.', '-&)(\\+$[*\x00'}) sendmmsg$inet(r2, &(0x7f0000000780)=[{{&(0x7f0000000040)={0x2, 0x4e21, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac1414aaffffffff0000000010000000000000000000000007"], 0x30}}], 0x1, 0x4008804) 947.268002ms ago: executing program 3 (id=433): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0xc0080, 0x0) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) r2 = accept4$nfc_llcp(0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000100)=0x60, 0x80000) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000140)=[r0, r0, r0, r2, r3], 0x5) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000001c0)={'ipvlan0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000200)={'team0\x00', 0x0}) sendmsg$GTP_CMD_NEWPDP(r1, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x5fd714d4413fd74c}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x50, 0x0, 0x8, 0x70bd28, 0x25dfdbff, {}, [@GTPA_MS_ADDR6={0x14, 0xc, @private2}, @GTPA_LINK={0x8, 0x1, r4}, @GTPA_FAMILY={0x5, 0xd, 0x1e}, @GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x3}, @GTPA_LINK={0x8, 0x1, r5}]}, 0x50}, 0x1, 0x0, 0x0, 0x84}, 0x40804) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000340)=@assoc_value={0x0}, &(0x7f0000000380)=0x8) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, &(0x7f00000003c0)={r6, 0x95, "5c6ed9e69f06500f31c7c1d07db48b35629dd2a520e64efa484f9d72033cf0b357c698d2986030f5866fd62118fda3893496a4073a23fc7e8ab083890721cd2aba96cf6006bda8828300def3f87dae70d65a3012821bb6cdd3548cf277c770eca46e86b288770db9d293e068b8fb968e19871c1832c0dbde64f85931bf4d1f90d1c4ebe035a0d1d111380d131cc6da848c8f520c5e"}, &(0x7f0000000480)=0x9d) epoll_pwait(r1, &(0x7f00000004c0)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x7, &(0x7f0000000540)={[0x2]}, 0x8) r7 = dup(r3) sendmsg$NL80211_CMD_DISASSOCIATE(r7, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x20, 0x0, 0x8, 0x70bd2d, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @random="ddb73d04b91f"}]}, 0x20}}, 0x14048081) syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), r7) r8 = syz_genetlink_get_family_id$smc(&(0x7f0000000700), r7) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x2c, r8, 0x300, 0x70bd2c, 0x25dfdbfc, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8d0}, 0x10000) ioctl$sock_SIOCGIFBR(r7, 0x8940, &(0x7f0000000880)=@get={0x1, &(0x7f0000000800)=""/107, 0x92}) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000900), r7) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r7, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x14, r9, 0x200, 0x70bd2c, 0x25dfdbff, {{}, {@void, @void}}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x0) recvmsg$unix(r7, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000a00), 0x0, &(0x7f0000000a40)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0}}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x138}, 0x40000000) openat$procfs(0xffffffffffffff9c, &(0x7f0000000bc0)='/proc/stat\x00', 0x0, 0x0) ioctl$BLKFLSBUF(r13, 0x1261, &(0x7f0000000c00)=0x2) socket$nl_rdma(0x10, 0x3, 0x14) ioctl$BTRFS_IOC_FS_INFO(r12, 0x8400941f, &(0x7f0000000c40)) r16 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_INTERFACE(r16, &(0x7f0000001100)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000010c0)={&(0x7f0000001080)={0x14, r9, 0x100, 0x70bd29, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x8000054) fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r13, 0xc020f509, &(0x7f0000001140)={r11, 0x7, 0x0, 0x9}) setsockopt$inet_IP_XFRM_POLICY(r15, 0x0, 0x11, &(0x7f0000001180)={{{@in=@local, @in6=@local, 0x4e21, 0x80, 0x4e21, 0x2, 0xa, 0x80, 0x80, 0x2f, r5, r10}, {0xfffffffffffffff9, 0x7, 0x475c8b00, 0x5b, 0x9, 0x8, 0x0, 0x5}, {0x6, 0x5, 0x5, 0x6}, 0xc, 0x6e6bb4, 0x3, 0x0, 0x3, 0x3}, {{@in=@rand_addr=0x64010101, 0x4d4, 0x6c}, 0x2, @in6=@local, 0x34ff, 0x3, 0x3, 0x40, 0x3, 0xd19, 0xed2}}, 0xe8) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r14, 0x80047210, &(0x7f0000001280)) 932.586934ms ago: executing program 4 (id=434): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x2000000, &(0x7f0000000180), 0x1, 0x51b, &(0x7f0000001340)="$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") (fail_nth: 5) 838.987001ms ago: executing program 0 (id=435): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000006"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kfree\x00', r0, 0x0, 0xffffffffffffffff}, 0x18) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0xc2d41, 0x0) 637.899078ms ago: executing program 2 (id=436): r0 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x20, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES64=r0, @ANYBLOB="0000000000000000b704000008"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x73cea2d47785b264, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000200)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x0) r2 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r2, 0x6, 0x0, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x36, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2010008, &(0x7f00000001c0), 0xff, 0x52e, &(0x7f0000000640)="$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") sendmsg$key(0xffffffffffffffff, &(0x7f0000000400)={0x10000000, 0x0, &(0x7f0000000040)={&(0x7f0000000840)=ANY=[@ANYBLOB="020e0080150000000000000000000000030005000000000002004e24ac1e00010000000000000000030006003c000000020000fc34000000000000000000000001001800000000000800120000000200fcffffff000000000600330000000000000000000000eafffd8000000000000000000000000000aa000000000000000000000000000000000400"], 0xa8}}, 0x2) r5 = fsmount(r2, 0x0, 0x0) r6 = openat$cgroup_subtree(r5, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r6, &(0x7f0000000300)=ANY=[@ANYBLOB='-cpu'], 0x5) write$cgroup_subtree(r6, &(0x7f0000000140)={[{0x2b, 'cpu'}]}, 0x5) bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000400)='locks_get_lock_context\x00', r7}, 0x10) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) fcntl$lock(r8, 0x26, &(0x7f0000000000)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='sched_switch\x00'}, 0x18) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000010001fff000000000000000000060000", @ANYRES32=0x0, @ANYRES8], 0x40}}, 0x0) 593.547521ms ago: executing program 4 (id=437): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000f00)=@base={0x5, 0x4, 0xfff, 0x7}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x15, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000080850000008200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f00000021c0)={r2, 0x0, 0x0}, 0x10) 435.729194ms ago: executing program 4 (id=438): bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[], 0x48) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r0}, 0x18) r1 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) 363.04681ms ago: executing program 4 (id=439): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240), 0x401, 0x0) ioctl$TCSBRKP(r0, 0x5425, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xe) ioctl$TCSETSW2(r1, 0x5408, &(0x7f0000000000)={0x300, 0x0, 0x0, 0xfffffffe, 0x0, "2cf155f1d8b4d0441f0246e09537aa82dc1ecf", 0x2}) ioctl$TIOCGPGRP(r1, 0x5437, 0x0) 314.855284ms ago: executing program 0 (id=440): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x400c84, &(0x7f0000000100)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2000000}}]}, 0x1, 0x791, &(0x7f0000000800)="$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") r0 = creat(&(0x7f0000000040)='./bus/file0\x00', 0x10b) fcntl$setstatus(r0, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) prctl$PR_GET_FPEXC(0xb, &(0x7f0000000080)) ftruncate(r0, 0x81fd) io_submit(r1, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x4000, 0xa00}]) 283.139127ms ago: executing program 1 (id=441): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40000100, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x800, 0xfffffffc, 0x7, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x20000000000002b8, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x8000, 0x0, 0x0, 0x41000}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000280)='kfree\x00', r3}, 0x18) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f00000003c0)={0x9c9, 0x0, 0x0, 'queue1\x00', 0x200000}) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000000)={&(0x7f0000000300)="ed8727332c022ac9a63a163bdd6028b24887d84a1e887ac9b3a3fc8e0ca78616a12e16ae307c154dd5b82688142df43543efd1c580b36237fa606e021c3c1a951a77a6268d70c1545be1aeca1c356afea8df8fac3a92e6ed53727491c0c2850f667f24986a25e5c993b01c230233e74902cecb744be5bff0e0afdef21e0729119534242dda6b78d784d47097cfc5b7d37f3cf25e5bac27a7a7c597224ba0e60cc7009ee853363d9e", &(0x7f0000000800)=""/221, &(0x7f0000000680)="7f085fa60b7484f2ef1a2b6b61a734466d5bf571904f2771ef9a5a528bc49640c573c5da4dc3aa90227e2a6b93d5a664acf0a73d934ae8f3da4e74f25423f6e5279e68149161236a82e8174ca15dc13c87f306e755cf30980d27bd863ebbbff17cfa2b62e04628f226f9566d1733caba961d24ecf4d57173ed9e1d150391dacb59dd3687064d6340b5174c3566a2d9fa2599f88ed3d04d08dbb9", &(0x7f0000000580)="5919ac6859c000fb192d1a336b7c8f8c1c0307bbff2a347f439ad277ea06ac14474340790851f41a5c503e4521e607fff63f30811e71e72b7f60752463bc7b604e96dbf1e2c2e620f8b97667f1098abd2181fe1822283066add0688533ef40ce65fbbc686419e0f36fff63d22b76b8838dd419b1ba", 0x9, r2, 0x4}, 0x38) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r4, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x0, 0x0, 0x40000000, 0x0, 0x3}, 0x8}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x200000000000002f, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000500), 0x28002) write$sndseq(r5, 0x0, 0x0) r6 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_GET_VERSION_NUM(r6, 0x2284, &(0x7f0000000080)) 252.414589ms ago: executing program 1 (id=442): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$kcm(0x29, 0x2, 0x0) r2 = gettid() timer_create(0x2, &(0x7f000049efa0)={0x0, 0x7, 0x4, @tid=r2}, &(0x7f0000044000)) timer_create(0x2, 0x0, &(0x7f00000001c0)=0x0) timer_settime(r3, 0x1, &(0x7f0000000180)={{}, {0x77359400}}, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x22650, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) sendmsg$kcm(r1, &(0x7f0000002080)={0x0, 0x0, &(0x7f0000002000)=[{&(0x7f0000000880)="1a", 0x100000}], 0x1}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000c80)={'lo\x00'}) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f0000000200)=ANY=[@ANYBLOB="1606020900000000fc0000000000000000e0ffffff00000000000000000000000000ffffac1414aafc000000000000000000000000000000a6c2cbcc9f7a79265652a7c4952d9f84911a12638fcc815d9a1d00a01a507226a582d21dacc3a23bc524d0319f46ed20e08e1a0229f08a64a6785a736146066cec60b20b2c1f33e02e7286335c7222262cb0837a0c93674025f000916d43"], 0x38) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000050000000000000000000024000a20000000000a1f000000000000000000010000000900010073797a300000000058000000030a0104000000000000000001000000090003803d2175fbe782c2002c00048008000240172af2e40800014000000003080002401c791e7108000240423930ce08000140000000030900010073797a300000000088000000060a010400000000000000000100000008000b400000000014000480100001800b0001006e756d67656e00000900010073797a3000"], 0x122}}, 0x4008090) 251.511199ms ago: executing program 2 (id=443): sendmsg(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f00000004c0)="40cf98ee", 0x4}], 0x1, 0x0, 0x0, 0x11000000}, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000280)={0x1, &(0x7f0000000780)=[{0x200000000006, 0xf, 0x6, 0x7ffc1ffb}]}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x18) r3 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000380)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@data_err_ignore}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@data_err_ignore}, {@grpquota}, {@nobh}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000000a40)="$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") ioperm(0x5, 0xa, 0x100000000000) r4 = socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x9) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x50) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={&(0x7f0000000880)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x8, [@float={0xe, 0x0, 0x0, 0x10, 0x8}, @union={0x1, 0x1, 0x0, 0x5, 0x0, 0x40, [{0x8, 0x1, 0x6}]}]}, {0x0, [0x5f, 0x5f, 0x0, 0x0, 0x61, 0x5c]}}, &(0x7f0000000900)=""/157, 0x44, 0x9d, 0x0, 0x7}, 0x28) r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x81000) renameat2(r7, &(0x7f0000000140)='./file1\x00', r7, &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000fc0)={0x3, 0xc, &(0x7f00000009c0)=ANY=[@ANYRESDEC=r3, @ANYBLOB="25bdf26a4473a41243112dcd9b4c8e74b4bcf114bb91f6ec6704f2ea452c76869b1c4c0073b63aa24eca4c3c89030a5c1368c03ff0d1f953fe7036f236af94d9f1c022287068dfb2fbb4e597b29d0648ce99fa21357bb426fc45a8a72d92264de0e186476cbe8c", @ANYRES32=r5, @ANYRES8=r5], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x7, '\x00', 0x0, 0x25, r6, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r8}, 0x10) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=@newtaction={0x8c, 0x30, 0x1, 0x0, 0x0, {}, [{0x78, 0x1, [@m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x4}, {0x4, 0x2}, {0xc}, {0xc}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0xfffffffffffffffe}}}]}, {0x25}, {0xc}, {0xc}}}]}]}, 0x8c}}, 0x0) ptrace(0x10, r0) unshare(0x20000400) r9 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000001fd8)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0xffffffbc, 0x10}, [@ldst={0x7, 0xff05, 0x0, 0x0, 0xa}]}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xff06, &(0x7f000000cf3d)=""/195}, 0x48) close(r9) r10 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x141a00, 0x0) r11 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000500)={0x3, 0x4, 0x4, 0xa, 0x0, r10, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000280)={r5, 0x58, &(0x7f00000001c0)}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r11}, &(0x7f0000000080), &(0x7f0000000380)=r9}, 0x20) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000540)) ptrace$cont(0x20, r0, 0x0, 0x0) 141.417068ms ago: executing program 0 (id=444): bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[], 0x48) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYRES32=r0, @ANYRESDEC=r0, @ANYRESDEC], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r3, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port0\x00', 0x62, 0x51cfa, 0x0, 0x8000008, 0x3, 0xfffffffe, 0x1, 0x0, 0x7cce8c743ee810df}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r3, 0x40505330, &(0x7f00000001c0)={0x800100, 0xfffffffd, 0x22, 0x6, 0x1101, 0x1}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r3, 0x40505330, &(0x7f0000000500)={0x800000, 0x210002, 0x8, 0x7, 0x8, 0x29}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r1}, &(0x7f0000000000), &(0x7f00000005c0)=r2}, 0x20) r4 = socket(0x10, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup/syz1\x00', 0x200002, 0x0) fchdir(r5) mkdir(&(0x7f0000000100)='./control\x00', 0x0) rmdir(&(0x7f0000000040)='./control\x00') write(r4, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) recvmmsg(r4, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r0}, 0x18) fsopen(&(0x7f0000000000)='efs\x00', 0x1) symlink(&(0x7f0000000080)='.\x00', &(0x7f0000000340)='./control\x00') r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f00000000c0), r6) chmod(&(0x7f0000000100)='./file0\x00', 0x35b) open(&(0x7f0000000280)='./file0\x00', 0x60840, 0x15c) openat$selinux_load(0xffffffffffffff9c, &(0x7f00000005c0), 0x2, 0x0) r7 = openat$selinux_policy(0xffffff9c, &(0x7f0000000300), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r7, 0x0) r8 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r8, 0x1, 0x11, 0x0, &(0x7f0000000480)) 129.230809ms ago: executing program 1 (id=445): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x5, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x1, 0x5, 0x8, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='kfree\x00'}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r1}, &(0x7f0000000500), &(0x7f00000002c0)=r0}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r1}, &(0x7f00000006c0), &(0x7f0000000700)=r0}, 0x20) 99.914912ms ago: executing program 2 (id=446): r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000280), 0x101000, 0x0) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000300)={'wpan3\x00'}) close_range(r0, r1, 0x2) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x14, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x42, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000), 0xc, 0x0, 0x1, 0x0, 0x0, 0x20040844}, 0x0) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r6, 0x0) getsockopt$inet6_mptcp_buf(r6, 0x11c, 0x2, &(0x7f0000000000)=""/126, &(0x7f0000000080)=0x7e) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000002c0000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x62, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffeb1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r7}, 0x10) r9 = io_uring_setup(0x6edd, &(0x7f0000000600)={0x0, 0x41002c1c, 0x10003, 0x1, 0x188}) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)=@o_path={&(0x7f0000000000)='./file0\x00', 0x0, 0x8, r8}, 0x18) r10 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r10, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) close_range(r9, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) r11 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) shmget$private(0x0, 0xfffffffffeffffff, 0x0, &(0x7f0000ffc000/0x3000)=nil) preadv(r11, &(0x7f00000011c0)=[{&(0x7f0000001000)=""/237, 0xed}, {0x0}], 0x2, 0x3, 0x9b35) 56.495095ms ago: executing program 3 (id=447): munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0x44, 0x10, 0x403, 0xffffffff, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @random="51eace3ab7dd"}]}, 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x300000c, 0x50032, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_clone(0x20000000, 0x0, 0xf, 0x0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r2}, 0x10) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0xfffff000) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) vmsplice(r3, &(0x7f00000005c0)=[{&(0x7f0000001cc0)="b7", 0x1}], 0x1, 0x0) 56.109095ms ago: executing program 0 (id=448): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000f00)=@base={0x5, 0x4, 0xfff, 0x7}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x15, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000080850000008200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f00000021c0)={r2, 0x0, 0x0}, 0x10) 55.894565ms ago: executing program 3 (id=449): syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000a40), 0x1, 0x55e, &(0x7f0000000a80)="$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") madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r0 = open(0x0, 0x64842, 0x389b0d52417bb201) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x6a000}], 0x1, 0x701c, 0x0, 0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$sock_bt_hidp_HIDPCONNADD(0xffffffffffffffff, 0x400448c8, &(0x7f0000000340)={r1, r1, 0x8, 0x0, 0x0, 0x9, 0x1, 0xc45, 0x1012, 0xc7, 0x2, 0x7, 'syz0\x00'}) r2 = io_uring_setup(0x5ea4, &(0x7f0000019080)={0x0, 0xdf4, 0x2, 0x0, 0x32a}) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c0000003800800000000000000000000a000001080042000a010102"], 0x1c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, &(0x7f0000000100)='GPL\x00'}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00'/12, @ANYRES32, @ANYBLOB="0d00ff0000000000830000000000000045"], 0x0}, 0x90) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="d800000018007bf6e00212ba0d8105040a600000000f040b067c55a1bc0009001e0006990600000015000500fe800000000000000300014002000c0901ac04000bd67f6f94007100a007a288747f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d345ef464095cae8c9010000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3099ad8ffd5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd601edef3d93452a92307f00000e97031e9f05e9f16e9cb5000000000000", 0xd8}], 0x1, 0x0, 0x0, 0x2663}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'sit0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x89f3, &(0x7f0000000080)) timerfd_create(0x8, 0x0) 31.457717ms ago: executing program 4 (id=450): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0xfe, 0x7ffc0002}]}) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000080)={0x0, &(0x7f00000002c0)}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001c80)=@newtaction={0x18, 0x30, 0x871a15abc695fb3d, 0x0, 0x80000, {}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000044}, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2) 24.557928ms ago: executing program 0 (id=451): syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x0) r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f00000001c0)={r2, 0xbda}, &(0x7f0000000240)=0x8) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x31, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x33, &(0x7f000002eff0)={0x85c, &(0x7f0000000000)=[{}]}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1c, 0x3, &(0x7f0000000740)=ANY=[@ANYRESDEC=r1], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = memfd_create(&(0x7f0000000180)='\b\x9dF\xd8\b\xb3~u\xa5\"\xdc\xfdq\xf6c\r;\xfcO\x8c=\x81\xb1\xfa\x8b\x8aWpA\xd4\x98\x85K\x89>N\x8ar\x17O\x0fKR\xe2{mn\xcc\xbf2\xc0\xa7\x14\xd0\xd4\xfe/m\xdf\xb6]\xc2\xaa\x86\xec(\xf7\xcd\xa6\xd9n^.\x13*\xd4\xb8\xe8\xc4\xefb\x14Vx\xc6\xfe\x9e\xee\xe7\xd7E\xe9\t\x83\xdeNX\xec\xe66\x1b\x97$\xee\x845n,B\xd5?\xe5E:+Pm\x1d\xb4\xb8\xeb\xe8Op2\x82\xc7\x0e\x97\x03\xef\x1a\xa5\x00.\x89\b!m\f\xd9\x8b$}\x9f\fX\x81\xa8\xf6\x94\xbc\xed\x80|l]\xe9\xca\xd3\xc9\xa3\x9e\x9cJI\xf1\xa2\xa0\xc4:\x00\x00\x00\x00\x00\x00\b\xfey\bJ\x86\x8d\xdf\x16\xbb3\x85\xf5\xe0zYe\xc2\n\x0f\x87\xc4\x8f\x8e\xec\xee\xcd\f\xe9\xc8\xbc\x97,\xb7!\xf2\x93\xd3\t\xd9=\x93\x1d\x945\x97\x1e\x9d\xa6\xe9\xa6\xf9p,\xf7v>\xcd\xd9\xc4\x1b\x9c(\xb8\x90\xdeg\xbf[n\x82\x96\xaev\xd4\xac \x14\xf0\x18@\xc3\xf1\xe2\x14\x1c\x0f\xa4-\xde\xae\xfa;\xaf\xae\x06\x9ag\x02\x98\xd0C2\xe7?\xfb\xb01\x9d\xf8\xd3Q\xb3\xb2\x18V\xe8\x8c\x87\xf4\t\x1c\x85\xa4\xc1\xb1\xf4k!G\xf5\xbb\xbbs&\xeac\xb3\xafW\x846\v\xb3\xca\xeb\xb7\x9e\x9e#]\x10lj\xaf\xaf\xd1\'{\x11\xaa,\x0f\xc5OY\"\x82\x84\xb6:J\x8c\xf37\x1d\xca\xf1\xef\x9f\xcf\a\xcf\xcb', 0x0) unshare(0x22020400) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r5) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r4}, 0x10) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r7 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000700)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000540), 0x84) mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x12, r7, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000200)={{r6}, &(0x7f0000000080), &(0x7f0000000340)='%pS \x00'}, 0x20) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) semop(0x0, &(0x7f00000000c0)=[{0x4}], 0x1) semctl$GETZCNT(0x0, 0x4, 0xf, 0x0) umount2(&(0x7f0000000580)='./file0\x00', 0x3) io_cancel(0x0, 0x0, 0x0) r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000500)=0xffffffffffffffff, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000600)=ANY=[@ANYBLOB="1808000000000085100000000000001800000001000000000000000400000000000000000000001800000000000000000000000000000095000000000000000070000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7f913293133a807e6020000080000006e8c1cbd80f98a2477046cedb50a00000100000085000000060000009500"/172, @ANYRESOCT=r4], &(0x7f0000000300)='GPL\x00', 0xc, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x0, r8}, 0x94) setreuid(0x0, 0xee00) 3.949989ms ago: executing program 1 (id=452): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00'}, 0x10) rt_sigpending(0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00'}) syz_genetlink_get_family_id$mptcp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e20, @local}}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000ac0)="ee", 0xfffffdb8}, {0x0, 0x2}], 0x2, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 0s ago: executing program 4 (id=453): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40000100, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x800, 0xfffffffc, 0x7, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x20000000000002b8, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x8000, 0x0, 0x0, 0x41000}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000280)='kfree\x00', r3}, 0x18) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f00000003c0)={0x9c9, 0x0, 0x0, 'queue1\x00', 0x200000}) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000000)={&(0x7f0000000300)="ed8727332c022ac9a63a163bdd6028b24887d84a1e887ac9b3a3fc8e0ca78616a12e16ae307c154dd5b82688142df43543efd1c580b36237fa606e021c3c1a951a77a6268d70c1545be1aeca1c356afea8df8fac3a92e6ed53727491c0c2850f667f24986a25e5c993b01c230233e74902cecb744be5bff0e0afdef21e0729119534242dda6b78d784d47097cfc5b7d37f3cf25e5bac27a7a7c597224ba0e60cc7009ee853363d9e", &(0x7f0000000800)=""/221, &(0x7f0000000680)="7f085fa60b7484f2ef1a2b6b61a734466d5bf571904f2771ef9a5a528bc49640c573c5da4dc3aa90227e2a6b93d5a664acf0a73d934ae8f3da4e74f25423f6e5279e68149161236a82e8174ca15dc13c87f306e755cf30980d27bd863ebbbff17cfa2b62e04628f226f9566d1733caba961d24ecf4d57173ed9e1d150391dacb59dd3687064d6340b5174c3566a2d9fa2599f88ed3d04d08dbb9", &(0x7f0000000580)="5919ac6859c000fb192d1a336b7c8f8c1c0307bbff2a347f439ad277ea06ac14474340790851f41a5c503e4521e607fff63f30811e71e72b7f60752463bc7b604e96dbf1e2c2e620f8b97667f1098abd2181fe1822283066add0688533ef40ce65fbbc686419e0f36fff63d22b76b8838dd419b1ba", 0x9, r2, 0x4}, 0x38) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r4, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x0, 0x0, 0x40000000, 0x0, 0x3}, 0x8}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x200000000000002f, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000500), 0x28002) write$sndseq(r5, 0x0, 0x0) r6 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_GET_VERSION_NUM(r6, 0x2284, &(0x7f0000000080)) kernel console output (not intermixed with test programs): syzkaller syzkaller login: [ 14.602474][ T29] kauditd_printk_skb: 44 callbacks suppressed [ 14.602488][ T29] audit: type=1400 audit(1756582147.539:57): avc: denied { transition } for pid=3179 comm="sshd-session" path="/bin/sh" dev="sda1" ino=90 scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 14.607545][ T29] audit: type=1400 audit(1756582147.539:58): avc: denied { noatsecure } for pid=3179 comm="sshd-session" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 14.610627][ T29] audit: type=1400 audit(1756582147.539:59): avc: denied { write } for pid=3179 comm="sh" path="pipe:[2367]" dev="pipefs" ino=2367 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 14.614012][ T29] audit: type=1400 audit(1756582147.539:60): avc: denied { rlimitinh } for pid=3179 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 14.616858][ T29] audit: type=1400 audit(1756582147.539:61): avc: denied { siginh } for pid=3179 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 Warning: Permanently added '10.128.0.191' (ED25519) to the list of known hosts. [ 21.595444][ T29] audit: type=1400 audit(1756582154.529:62): avc: denied { mounton } for pid=3290 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 21.596197][ T3290] cgroup: Unknown subsys name 'net' [ 21.618273][ T29] audit: type=1400 audit(1756582154.529:63): avc: denied { mount } for pid=3290 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 21.645923][ T29] audit: type=1400 audit(1756582154.559:64): avc: denied { unmount } for pid=3290 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 21.821924][ T3290] cgroup: Unknown subsys name 'cpuset' [ 21.827967][ T3290] cgroup: Unknown subsys name 'rlimit' [ 21.976545][ T29] audit: type=1400 audit(1756582154.909:65): avc: denied { setattr } for pid=3290 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 21.999907][ T29] audit: type=1400 audit(1756582154.909:66): avc: denied { create } for pid=3290 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 22.020459][ T29] audit: type=1400 audit(1756582154.909:67): avc: denied { write } for pid=3290 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 22.040935][ T29] audit: type=1400 audit(1756582154.909:68): avc: denied { read } for pid=3290 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 22.044745][ T3296] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 22.061474][ T29] audit: type=1400 audit(1756582154.919:69): avc: denied { mounton } for pid=3290 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 22.094954][ T29] audit: type=1400 audit(1756582154.919:70): avc: denied { mount } for pid=3290 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 22.108267][ T3290] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 22.118343][ T29] audit: type=1400 audit(1756582154.999:71): avc: denied { relabelto } for pid=3296 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 23.290725][ T3308] chnl_net:caif_netlink_parms(): no params data found [ 23.323307][ T3303] chnl_net:caif_netlink_parms(): no params data found [ 23.371026][ T3302] chnl_net:caif_netlink_parms(): no params data found [ 23.392268][ T3308] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.399388][ T3308] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.406702][ T3308] bridge_slave_0: entered allmulticast mode [ 23.412997][ T3308] bridge_slave_0: entered promiscuous mode [ 23.424243][ T3311] chnl_net:caif_netlink_parms(): no params data found [ 23.437146][ T3308] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.444566][ T3308] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.451768][ T3308] bridge_slave_1: entered allmulticast mode [ 23.458325][ T3308] bridge_slave_1: entered promiscuous mode [ 23.474276][ T3303] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.481429][ T3303] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.488585][ T3303] bridge_slave_0: entered allmulticast mode [ 23.494898][ T3303] bridge_slave_0: entered promiscuous mode [ 23.525755][ T3303] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.532923][ T3303] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.540089][ T3303] bridge_slave_1: entered allmulticast mode [ 23.546725][ T3303] bridge_slave_1: entered promiscuous mode [ 23.553814][ T3308] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 23.566710][ T3308] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 23.605480][ T3308] team0: Port device team_slave_0 added [ 23.614739][ T3303] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 23.626469][ T3303] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 23.639637][ T3308] team0: Port device team_slave_1 added [ 23.654146][ T3309] chnl_net:caif_netlink_parms(): no params data found [ 23.671292][ T3302] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.678366][ T3302] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.685583][ T3302] bridge_slave_0: entered allmulticast mode [ 23.692123][ T3302] bridge_slave_0: entered promiscuous mode [ 23.706782][ T3311] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.713865][ T3311] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.721102][ T3311] bridge_slave_0: entered allmulticast mode [ 23.727646][ T3311] bridge_slave_0: entered promiscuous mode [ 23.740696][ T3302] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.747840][ T3302] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.755121][ T3302] bridge_slave_1: entered allmulticast mode [ 23.761568][ T3302] bridge_slave_1: entered promiscuous mode [ 23.768222][ T3308] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 23.775386][ T3308] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 23.801538][ T3308] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 23.812236][ T3311] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.819451][ T3311] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.826681][ T3311] bridge_slave_1: entered allmulticast mode [ 23.832937][ T3311] bridge_slave_1: entered promiscuous mode [ 23.846929][ T3303] team0: Port device team_slave_0 added [ 23.857903][ T3308] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 23.864870][ T3308] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 23.890869][ T3308] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 23.910791][ T3303] team0: Port device team_slave_1 added [ 23.923885][ T3302] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 23.943671][ T3302] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 23.962960][ T3311] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 23.978156][ T3303] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 23.985176][ T3303] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 24.011250][ T3303] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 24.027450][ T3311] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 24.045761][ T3303] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 24.053066][ T3303] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 24.079067][ T3303] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 24.091333][ T3308] hsr_slave_0: entered promiscuous mode [ 24.097652][ T3308] hsr_slave_1: entered promiscuous mode [ 24.113599][ T3302] team0: Port device team_slave_0 added [ 24.122210][ T3302] team0: Port device team_slave_1 added [ 24.136562][ T3309] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.143729][ T3309] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.150875][ T3309] bridge_slave_0: entered allmulticast mode [ 24.157345][ T3309] bridge_slave_0: entered promiscuous mode [ 24.163870][ T3309] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.170906][ T3309] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.178052][ T3309] bridge_slave_1: entered allmulticast mode [ 24.184760][ T3309] bridge_slave_1: entered promiscuous mode [ 24.200439][ T3302] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 24.207468][ T3302] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 24.233421][ T3302] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 24.244853][ T3311] team0: Port device team_slave_0 added [ 24.250734][ T3302] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 24.257709][ T3302] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 24.283970][ T3302] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 24.319068][ T3311] team0: Port device team_slave_1 added [ 24.333338][ T3309] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 24.353692][ T3303] hsr_slave_0: entered promiscuous mode [ 24.359475][ T3303] hsr_slave_1: entered promiscuous mode [ 24.365353][ T3303] debugfs: 'hsr0' already exists in 'hsr' [ 24.371072][ T3303] Cannot create hsr debugfs directory [ 24.379998][ T3309] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 24.389253][ T3311] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 24.396417][ T3311] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 24.422616][ T3311] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 24.456364][ T3311] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 24.463421][ T3311] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 24.489654][ T3311] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 24.529702][ T3302] hsr_slave_0: entered promiscuous mode [ 24.535640][ T3302] hsr_slave_1: entered promiscuous mode [ 24.541395][ T3302] debugfs: 'hsr0' already exists in 'hsr' [ 24.547107][ T3302] Cannot create hsr debugfs directory [ 24.557474][ T3309] team0: Port device team_slave_0 added [ 24.577668][ T3309] team0: Port device team_slave_1 added [ 24.627725][ T3309] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 24.634694][ T3309] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 24.660644][ T3309] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 24.671989][ T3309] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 24.679107][ T3309] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 24.705070][ T3309] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 24.717797][ T3311] hsr_slave_0: entered promiscuous mode [ 24.723874][ T3311] hsr_slave_1: entered promiscuous mode [ 24.729759][ T3311] debugfs: 'hsr0' already exists in 'hsr' [ 24.735536][ T3311] Cannot create hsr debugfs directory [ 24.766585][ T3308] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 24.794618][ T3308] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 24.804288][ T3308] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 24.818721][ T3309] hsr_slave_0: entered promiscuous mode [ 24.824747][ T3309] hsr_slave_1: entered promiscuous mode [ 24.830508][ T3309] debugfs: 'hsr0' already exists in 'hsr' [ 24.836239][ T3309] Cannot create hsr debugfs directory [ 24.848555][ T3308] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 24.915310][ T3303] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 24.931306][ T3303] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 24.942635][ T3303] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 24.957915][ T3303] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 24.993171][ T3302] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 25.003311][ T3302] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 25.033354][ T3302] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 25.053110][ T3302] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 25.067994][ T3303] 8021q: adding VLAN 0 to HW filter on device bond0 [ 25.079189][ T3308] 8021q: adding VLAN 0 to HW filter on device bond0 [ 25.091293][ T3311] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 25.100981][ T3311] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 25.110303][ T3311] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 25.126960][ T3311] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 25.141304][ T3303] 8021q: adding VLAN 0 to HW filter on device team0 [ 25.149416][ T3308] 8021q: adding VLAN 0 to HW filter on device team0 [ 25.170201][ T2206] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.177351][ T2206] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.186171][ T2206] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.193331][ T2206] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.202279][ T2206] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.209367][ T2206] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.223027][ T3309] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 25.232527][ T2206] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.240037][ T2206] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.254995][ T3309] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 25.265092][ T3309] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 25.276756][ T3309] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 25.359781][ T3302] 8021q: adding VLAN 0 to HW filter on device bond0 [ 25.385165][ T3311] 8021q: adding VLAN 0 to HW filter on device bond0 [ 25.398579][ T3303] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 25.411550][ T3308] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 25.422865][ T3311] 8021q: adding VLAN 0 to HW filter on device team0 [ 25.435313][ T41] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.442615][ T41] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.458994][ T3302] 8021q: adding VLAN 0 to HW filter on device team0 [ 25.472097][ T2206] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.479162][ T2206] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.500468][ T3309] 8021q: adding VLAN 0 to HW filter on device bond0 [ 25.513928][ T354] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.521058][ T354] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.545162][ T354] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.552286][ T354] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.588926][ T3309] 8021q: adding VLAN 0 to HW filter on device team0 [ 25.603342][ T3302] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 25.613911][ T3302] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 25.653594][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.660766][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.676164][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.683429][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.727606][ T3308] veth0_vlan: entered promiscuous mode [ 25.747384][ T3308] veth1_vlan: entered promiscuous mode [ 25.760210][ T3309] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 25.780519][ T3303] veth0_vlan: entered promiscuous mode [ 25.789821][ T3311] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 25.806148][ T3303] veth1_vlan: entered promiscuous mode [ 25.815008][ T3302] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 25.827710][ T3308] veth0_macvtap: entered promiscuous mode [ 25.851746][ T3303] veth0_macvtap: entered promiscuous mode [ 25.866079][ T3303] veth1_macvtap: entered promiscuous mode [ 25.873688][ T3308] veth1_macvtap: entered promiscuous mode [ 25.885044][ T3309] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 25.899987][ T3308] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 25.914269][ T3303] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 25.923478][ T3308] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 25.937441][ T3303] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 25.950032][ T41] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 25.966911][ T41] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 25.978614][ T3311] veth0_vlan: entered promiscuous mode [ 25.987101][ T41] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.005974][ T31] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.018244][ T3311] veth1_vlan: entered promiscuous mode [ 26.048451][ T31] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.064126][ T3303] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 26.067444][ T3302] veth0_vlan: entered promiscuous mode [ 26.096062][ T66] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.107120][ T3311] veth0_macvtap: entered promiscuous mode [ 26.141620][ T3311] veth1_macvtap: entered promiscuous mode [ 26.153626][ T3311] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 26.163381][ T3311] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 26.229346][ T66] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.239279][ T66] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.253619][ T3302] veth1_vlan: entered promiscuous mode [ 26.283536][ T66] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.570414][ T66] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.595865][ T66] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.949463][ T3484] atomic_op ffff888119ec7528 conn xmit_atomic 0000000000000000 [ 26.957338][ T29] kauditd_printk_skb: 32 callbacks suppressed [ 26.957365][ T29] audit: type=1400 audit(1756582159.879:104): avc: denied { write } for pid=3469 comm="syz.4.5" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 27.095641][ T3486] atomic_op ffff888119cdad28 conn xmit_atomic 0000000000000000 [ 27.109389][ T3309] veth0_vlan: entered promiscuous mode [ 27.309828][ T3309] veth1_vlan: entered promiscuous mode [ 27.324741][ T3302] veth0_macvtap: entered promiscuous mode [ 27.336565][ T66] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.592091][ T29] audit: type=1400 audit(1756582159.919:105): avc: denied { ioctl } for pid=3479 comm="syz.2.3" path="/dev/loop-control" dev="devtmpfs" ino=99 ioctlcmd=0x4c80 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 27.619175][ T29] audit: type=1400 audit(1756582160.549:106): avc: denied { create } for pid=3477 comm="syz.0.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 27.650640][ T3392] IPVS: starting estimator thread 0... [ 27.660163][ T3489] loop4: detected capacity change from 0 to 512 [ 27.668740][ T29] audit: type=1400 audit(1756582160.579:107): avc: denied { read } for pid=3488 comm="syz.4.6" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 27.692023][ T29] audit: type=1400 audit(1756582160.579:108): avc: denied { open } for pid=3488 comm="syz.4.6" path="/dev/sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 27.693009][ T3490] loop2: detected capacity change from 0 to 128 [ 27.715751][ T29] audit: type=1400 audit(1756582160.579:109): avc: denied { setopt } for pid=3477 comm="syz.0.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 27.725154][ T3489] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 27.741251][ T29] audit: type=1400 audit(1756582160.579:110): avc: denied { create } for pid=3487 comm="syz.2.7" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 27.754328][ T3489] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 27.781485][ T3491] IPVS: using max 2784 ests per chain, 139200 per kthread [ 27.784899][ T29] audit: type=1400 audit(1756582160.579:111): avc: denied { ioctl } for pid=3488 comm="syz.4.6" path="/dev/sg0" dev="devtmpfs" ino=135 ioctlcmd=0x2285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 27.817872][ T3490] ======================================================= [ 27.817872][ T3490] WARNING: The mand mount option has been deprecated and [ 27.817872][ T3490] and is ignored by this kernel. Remove the mand [ 27.817872][ T3490] option from the mount to silence this warning. [ 27.817872][ T3490] ======================================================= [ 27.854229][ T3489] EXT4-fs (loop4): 1 truncate cleaned up [ 27.861030][ T3302] veth1_macvtap: entered promiscuous mode [ 27.861522][ T3490] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 27.874365][ T3309] veth0_macvtap: entered promiscuous mode [ 27.885069][ T3490] ext4 filesystem being mounted at /1/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 27.885381][ T3489] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 27.898070][ T29] audit: type=1400 audit(1756582160.819:112): avc: denied { mount } for pid=3487 comm="syz.2.7" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 27.941002][ T3309] veth1_macvtap: entered promiscuous mode [ 27.958128][ T3302] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 27.966973][ T29] audit: type=1400 audit(1756582160.899:113): avc: denied { create } for pid=3487 comm="syz.2.7" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 27.990924][ T3309] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 28.003946][ T3302] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 28.012676][ T3309] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 28.027098][ T2206] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.048420][ T2206] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.078846][ T2206] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.088839][ T3311] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 28.120089][ T2206] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.175481][ T2206] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.208538][ T2206] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.230239][ T2206] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.242214][ T2206] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.341112][ T3510] syzkaller0: entered promiscuous mode [ 28.346896][ T3510] syzkaller0: entered allmulticast mode [ 28.476627][ T3516] atomic_op ffff88811bbdc128 conn xmit_atomic 0000000000000000 [ 28.859012][ T3522] loop0: detected capacity change from 0 to 512 [ 28.897006][ T3522] EXT4-fs warning (device loop0): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 28.937507][ T3522] EXT4-fs (loop0): mount failed [ 29.076221][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 29.091635][ T3527] FAULT_INJECTION: forcing a failure. [ 29.091635][ T3527] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 29.104951][ T3527] CPU: 1 UID: 0 PID: 3527 Comm: syz.3.11 Not tainted syzkaller #0 PREEMPT(voluntary) [ 29.105010][ T3527] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 29.105023][ T3527] Call Trace: [ 29.105029][ T3527] [ 29.105037][ T3527] __dump_stack+0x1d/0x30 [ 29.105062][ T3527] dump_stack_lvl+0xe8/0x140 [ 29.105081][ T3527] dump_stack+0x15/0x1b [ 29.105099][ T3527] should_fail_ex+0x265/0x280 [ 29.105120][ T3527] should_fail+0xb/0x20 [ 29.105207][ T3527] should_fail_usercopy+0x1a/0x20 [ 29.105289][ T3527] _copy_from_user+0x1c/0xb0 [ 29.105322][ T3527] vt_ioctl+0x98f/0x1880 [ 29.105374][ T3527] tty_ioctl+0x7db/0xb80 [ 29.105406][ T3527] ? __pfx_tty_ioctl+0x10/0x10 [ 29.105436][ T3527] __se_sys_ioctl+0xce/0x140 [ 29.105490][ T3527] __x64_sys_ioctl+0x43/0x50 [ 29.105523][ T3527] x64_sys_call+0x1816/0x2ff0 [ 29.105596][ T3527] do_syscall_64+0xd2/0x200 [ 29.105627][ T3527] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 29.105668][ T3527] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 29.105694][ T3527] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 29.105750][ T3527] RIP: 0033:0x7f1dd259ebe9 [ 29.105768][ T3527] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 29.105787][ T3527] RSP: 002b:00007f1dd0fbd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 29.105806][ T3527] RAX: ffffffffffffffda RBX: 00007f1dd27d6180 RCX: 00007f1dd259ebe9 [ 29.105818][ T3527] RDX: 0000200000000080 RSI: 0000000000004b72 RDI: 0000000000000005 [ 29.105829][ T3527] RBP: 00007f1dd0fbd090 R08: 0000000000000000 R09: 0000000000000000 [ 29.105840][ T3527] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 29.105915][ T3527] R13: 00007f1dd27d6218 R14: 00007f1dd27d6180 R15: 00007fff6e9fe528 [ 29.105938][ T3527] [ 29.303389][ T3531] ALSA: seq fatal error: cannot create timer (-22) [ 29.310863][ T3531] sd 0:0:1:0: device reset [ 29.330466][ T3532] capability: warning: `syz.1.14' uses 32-bit capabilities (legacy support in use) [ 29.377971][ T3535] Zero length message leads to an empty skb [ 29.399609][ T3539] loop0: detected capacity change from 0 to 512 [ 29.426962][ T3539] EXT4-fs error (device loop0): ext4_orphan_get:1392: inode #15: comm syz.0.17: casefold flag without casefold feature [ 29.487051][ C1] hrtimer: interrupt took 55761 ns [ 29.514643][ T3539] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.17: couldn't read orphan inode 15 (err -117) [ 29.577200][ T3539] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 29.615042][ T3549] netem: incorrect gi model size [ 29.620038][ T3549] netem: change failed [ 29.676364][ T3308] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 29.736333][ T3557] loop1: detected capacity change from 0 to 512 [ 29.807858][ T3557] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 29.852152][ T3557] EXT4-fs (loop1): 1 truncate cleaned up [ 29.878184][ T3557] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 29.906893][ T3562] FAULT_INJECTION: forcing a failure. [ 29.906893][ T3562] name failslab, interval 1, probability 0, space 0, times 1 [ 29.919684][ T3562] CPU: 0 UID: 0 PID: 3562 Comm: syz.2.25 Not tainted syzkaller #0 PREEMPT(voluntary) [ 29.919722][ T3562] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 29.919733][ T3562] Call Trace: [ 29.919741][ T3562] [ 29.919748][ T3562] __dump_stack+0x1d/0x30 [ 29.919769][ T3562] dump_stack_lvl+0xe8/0x140 [ 29.919786][ T3562] dump_stack+0x15/0x1b [ 29.919805][ T3562] should_fail_ex+0x265/0x280 [ 29.919828][ T3562] should_failslab+0x8c/0xb0 [ 29.919985][ T3562] kmem_cache_alloc_noprof+0x50/0x310 [ 29.920009][ T3562] ? security_file_alloc+0x32/0x100 [ 29.920038][ T3562] security_file_alloc+0x32/0x100 [ 29.920067][ T3562] init_file+0x5c/0x1d0 [ 29.920119][ T3562] alloc_empty_file+0x8b/0x200 [ 29.920148][ T3562] path_openat+0x68/0x2170 [ 29.920230][ T3562] ? mntput+0x4b/0x80 [ 29.920308][ T3562] ? terminate_walk+0x27f/0x2a0 [ 29.920338][ T3562] ? path_openat+0x1bf8/0x2170 [ 29.920354][ T3562] ? _parse_integer_limit+0x170/0x190 [ 29.920376][ T3562] do_filp_open+0x109/0x230 [ 29.920405][ T3562] do_open_execat+0xd8/0x260 [ 29.920427][ T3562] alloc_bprm+0x25/0x350 [ 29.920451][ T3562] do_execveat_common+0x12e/0x750 [ 29.920476][ T3562] ? getname_flags+0x154/0x3b0 [ 29.920502][ T3562] __x64_sys_execveat+0x73/0x90 [ 29.920548][ T3562] x64_sys_call+0x1fec/0x2ff0 [ 29.920567][ T3562] do_syscall_64+0xd2/0x200 [ 29.920592][ T3562] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 29.920631][ T3562] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 29.920660][ T3562] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 29.920722][ T3562] RIP: 0033:0x7f069387ebe9 [ 29.920738][ T3562] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 29.920758][ T3562] RSP: 002b:00007f06922e7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 29.920781][ T3562] RAX: ffffffffffffffda RBX: 00007f0693ab5fa0 RCX: 00007f069387ebe9 [ 29.920796][ T3562] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 29.920810][ T3562] RBP: 00007f06922e7090 R08: 0000000000001000 R09: 0000000000000000 [ 29.920824][ T3562] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 29.920845][ T3562] R13: 00007f0693ab6038 R14: 00007f0693ab5fa0 R15: 00007fff41117f38 [ 29.920860][ T3562] [ 30.153445][ T3563] loop4: detected capacity change from 0 to 1024 [ 30.216291][ T3563] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 30.302726][ T3572] atomic_op ffff88811bb40528 conn xmit_atomic 0000000000000000 [ 30.350614][ T3563] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=56 sclass=netlink_route_socket pid=3563 comm=syz.4.26 [ 30.591746][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 30.725564][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 30.763931][ T3584] loop3: detected capacity change from 0 to 512 [ 30.778518][ T3584] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 30.805774][ T3584] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 30.841873][ T3584] EXT4-fs (loop3): 1 truncate cleaned up [ 30.850808][ T3584] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 30.887806][ T3587] atomic_op ffff888119ef6928 conn xmit_atomic 0000000000000000 [ 31.002958][ T3309] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 31.444537][ T3594] atomic_op ffff888119ef6928 conn xmit_atomic 0000000000000000 [ 31.497537][ T3595] atomic_op ffff888119ef3d28 conn xmit_atomic 0000000000000000 [ 31.823604][ T3598] loop3: detected capacity change from 0 to 512 [ 31.879185][ T3598] EXT4-fs error (device loop3): ext4_orphan_get:1392: inode #15: comm gtp: casefold flag without casefold feature [ 31.900824][ T3598] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm gtp: couldn't read orphan inode 15 (err -117) [ 31.915573][ T3598] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 31.938006][ T3601] loop1: detected capacity change from 0 to 512 [ 31.969800][ T3601] __quota_error: 245 callbacks suppressed [ 31.969811][ T3601] Quota error (device loop1): v2_read_file_info: Free block number 1 out of range (1, 6). [ 31.991730][ T29] audit: type=1400 audit(1756582164.929:358): avc: denied { read } for pid=3597 comm="gtp" path="/4/file0/file1" dev="loop3" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 32.025230][ T29] audit: type=1400 audit(1756582164.929:359): avc: denied { append } for pid=3597 comm="gtp" path="/4/file0/bus" dev="loop3" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 32.047351][ T29] audit: type=1400 audit(1756582164.929:360): avc: denied { create } for pid=3597 comm="gtp" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 32.066411][ T29] audit: type=1400 audit(1756582164.929:361): avc: denied { setopt } for pid=3597 comm="gtp" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 32.066602][ T3601] EXT4-fs warning (device loop1): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 32.128434][ T3309] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.140634][ T3601] EXT4-fs (loop1): mount failed [ 32.176128][ T29] audit: type=1400 audit(1756582165.109:362): avc: denied { read } for pid=3607 comm="syz.3.38" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 32.198924][ T29] audit: type=1400 audit(1756582165.109:363): avc: denied { open } for pid=3607 comm="syz.3.38" path="/dev/snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 32.250380][ T29] audit: type=1326 audit(1756582165.139:364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3602 comm="syz.4.36" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07237febe9 code=0x7ffc0000 [ 32.273899][ T29] audit: type=1326 audit(1756582165.139:365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3602 comm="syz.4.36" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07237febe9 code=0x7ffc0000 [ 32.308079][ T29] audit: type=1400 audit(1756582165.239:366): avc: denied { create } for pid=3607 comm="syz.3.38" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 32.337848][ T3614] loop4: detected capacity change from 0 to 1024 [ 32.393016][ T3614] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 32.444597][ T3623] ALSA: seq fatal error: cannot create timer (-22) [ 32.464803][ T3623] sd 0:0:1:0: device reset [ 32.551913][ T3619] syz.3.41 (3619) used greatest stack depth: 9224 bytes left [ 32.570740][ T3631] netlink: 240 bytes leftover after parsing attributes in process `syz.0.44'. [ 32.643725][ T3614] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=56 sclass=netlink_route_socket pid=3614 comm=syz.4.39 [ 32.672974][ T3639] loop1: detected capacity change from 0 to 512 [ 32.693417][ T3639] EXT4-fs error (device loop1): ext4_orphan_get:1392: inode #15: comm gtp: casefold flag without casefold feature [ 32.729414][ T3639] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm gtp: couldn't read orphan inode 15 (err -117) [ 32.755764][ T3639] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 32.778337][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.884261][ T3644] atomic_op ffff888119ef2528 conn xmit_atomic 0000000000000000 [ 33.070834][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.273320][ T3658] ALSA: seq fatal error: cannot create timer (-22) [ 33.291901][ T3658] sd 0:0:1:0: device reset [ 33.322823][ T3655] loop2: detected capacity change from 0 to 512 [ 33.353102][ T3655] EXT4-fs warning (device loop2): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 33.379476][ T3655] EXT4-fs (loop2): mount failed [ 33.446766][ T3677] netlink: 240 bytes leftover after parsing attributes in process `syz.4.58'. [ 33.512292][ T3678] loop2: detected capacity change from 0 to 512 [ 33.579454][ T3679] loop3: detected capacity change from 0 to 512 [ 33.592010][ T3683] loop4: detected capacity change from 0 to 128 [ 33.603484][ T3678] EXT4-fs warning (device loop2): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 33.635907][ T3679] EXT4-fs error (device loop3): ext4_orphan_get:1392: inode #15: comm gtp: casefold flag without casefold feature [ 33.652789][ T3678] EXT4-fs (loop2): mount failed [ 33.659375][ T3683] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 33.664170][ T3679] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm gtp: couldn't read orphan inode 15 (err -117) [ 33.686963][ T3679] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 33.700498][ T3683] ext4 filesystem being mounted at /13/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 33.729629][ T3309] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.762386][ T3690] atomic_op ffff88811a3bfd28 conn xmit_atomic 0000000000000000 [ 33.805543][ T3678] netlink: 32 bytes leftover after parsing attributes in process `syz.2.62'. [ 33.833914][ T3303] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 33.874231][ T3697] ALSA: seq fatal error: cannot create timer (-22) [ 33.899954][ T3697] sd 0:0:1:0: device reset [ 33.922485][ T3701] random: crng reseeded on system resumption [ 34.168664][ T3718] loop2: detected capacity change from 0 to 512 [ 34.216711][ T3718] EXT4-fs error (device loop2): ext4_orphan_get:1392: inode #15: comm gtp: casefold flag without casefold feature [ 34.302957][ T3718] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm gtp: couldn't read orphan inode 15 (err -117) [ 34.366557][ T3723] atomic_op ffff888119ef2928 conn xmit_atomic 0000000000000000 [ 34.389270][ T3724] loop4: detected capacity change from 0 to 128 [ 34.408701][ T3718] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 34.533184][ T3726] loop1: detected capacity change from 0 to 512 [ 34.552617][ T3724] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 34.634471][ T3311] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.664001][ T3726] EXT4-fs warning (device loop1): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 34.680794][ T3724] ext4 filesystem being mounted at /17/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 34.713255][ T3731] ALSA: seq fatal error: cannot create timer (-22) [ 34.728554][ T3731] sd 0:0:1:0: device reset [ 34.736395][ T3726] EXT4-fs (loop1): mount failed [ 34.788220][ T3303] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 34.853439][ T3738] syzkaller0: entered promiscuous mode [ 34.859040][ T3738] syzkaller0: entered allmulticast mode [ 35.159009][ T3758] loop0: detected capacity change from 0 to 512 [ 35.185012][ T3758] EXT4-fs error (device loop0): ext4_orphan_get:1392: inode #15: comm gtp: casefold flag without casefold feature [ 35.237138][ T3758] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm gtp: couldn't read orphan inode 15 (err -117) [ 35.256779][ T3763] atomic_op ffff88811a39c928 conn xmit_atomic 0000000000000000 [ 35.452904][ T3766] ALSA: seq fatal error: cannot create timer (-22) [ 35.626110][ T3769] atomic_op ffff88811a39c528 conn xmit_atomic 0000000000000000 [ 35.654331][ T3758] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 35.671979][ T3766] sd 0:0:1:0: device reset [ 35.726094][ T3772] ALSA: seq fatal error: cannot create timer (-22) [ 35.778380][ T3772] sd 0:0:1:0: device reset [ 35.825350][ T3774] netlink: 'syz.2.94': attribute type 21 has an invalid length. [ 35.833075][ T3774] netlink: 128 bytes leftover after parsing attributes in process `syz.2.94'. [ 36.017861][ T3774] netlink: 'syz.2.94': attribute type 5 has an invalid length. [ 36.025640][ T3774] netlink: 'syz.2.94': attribute type 6 has an invalid length. [ 36.033242][ T3774] netlink: 3 bytes leftover after parsing attributes in process `syz.2.94'. [ 36.050165][ T3308] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.108046][ T3781] netlink: 240 bytes leftover after parsing attributes in process `syz.3.98'. [ 36.219585][ T3786] loop4: detected capacity change from 0 to 512 [ 36.226569][ T3788] random: crng reseeded on system resumption [ 36.343548][ T3793] atomic_op ffff88811a3a1d28 conn xmit_atomic 0000000000000000 [ 36.773632][ T3786] EXT4-fs warning (device loop4): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 36.789584][ T3802] ALSA: seq fatal error: cannot create timer (-22) [ 36.790295][ T3786] EXT4-fs (loop4): mount failed [ 36.802969][ T3802] sd 0:0:1:0: device reset [ 36.838776][ T3804] loop3: detected capacity change from 0 to 512 [ 36.852827][ T3804] EXT4-fs error (device loop3): ext4_orphan_get:1392: inode #15: comm gtp: casefold flag without casefold feature [ 36.873633][ T3804] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm gtp: couldn't read orphan inode 15 (err -117) [ 36.894697][ T3807] ALSA: seq fatal error: cannot create timer (-22) [ 36.902403][ T3807] sd 0:0:1:0: device reset [ 36.941047][ T3804] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 36.954838][ T3809] netlink: 240 bytes leftover after parsing attributes in process `syz.1.109'. [ 36.980632][ T3811] loop0: detected capacity change from 0 to 512 [ 37.006837][ T3813] ALSA: seq fatal error: cannot create timer (-22) [ 37.019271][ T3811] __quota_error: 539 callbacks suppressed [ 37.019286][ T3811] Quota error (device loop0): v2_read_file_info: Free block number 1 out of range (1, 6). [ 37.097309][ T3811] EXT4-fs warning (device loop0): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 37.122266][ T3309] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.168348][ T3811] EXT4-fs (loop0): mount failed [ 37.203719][ T3811] netlink: 32 bytes leftover after parsing attributes in process `syz.0.107'. [ 37.258176][ T3827] syzkaller0: entered promiscuous mode [ 37.263738][ T3827] syzkaller0: entered allmulticast mode [ 37.279003][ T3828] atomic_op ffff88811b811d28 conn xmit_atomic 0000000000000000 [ 37.391546][ T29] audit: type=1326 audit(1756582170.299:902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3824 comm="syz.3.112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1dd259ebe9 code=0x7ffc0000 [ 37.415096][ T29] audit: type=1326 audit(1756582170.299:903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3824 comm="syz.3.112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1dd259ebe9 code=0x7ffc0000 [ 37.438689][ T29] audit: type=1326 audit(1756582170.299:904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3824 comm="syz.3.112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1dd259ebe9 code=0x7ffc0000 [ 37.462351][ T29] audit: type=1326 audit(1756582170.299:905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3824 comm="syz.3.112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1dd259ebe9 code=0x7ffc0000 [ 37.485773][ T29] audit: type=1326 audit(1756582170.299:906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3824 comm="syz.3.112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1dd259ebe9 code=0x7ffc0000 [ 37.509152][ T29] audit: type=1326 audit(1756582170.299:907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3824 comm="syz.3.112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1dd259ebe9 code=0x7ffc0000 [ 37.532487][ T29] audit: type=1326 audit(1756582170.299:908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3824 comm="syz.3.112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1dd259ebe9 code=0x7ffc0000 [ 37.555996][ T29] audit: type=1326 audit(1756582170.299:909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3824 comm="syz.3.112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1dd259ebe9 code=0x7ffc0000 [ 37.579413][ T29] audit: type=1326 audit(1756582170.299:910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3824 comm="syz.3.112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1dd259ebe9 code=0x7ffc0000 [ 37.657710][ T3837] ALSA: seq fatal error: cannot create timer (-22) [ 37.665490][ T3837] sd 0:0:1:0: device reset [ 37.682981][ T3839] ALSA: seq fatal error: cannot create timer (-22) [ 37.693626][ T3839] sd 0:0:1:0: device reset [ 37.725039][ T3845] random: crng reseeded on system resumption [ 37.737669][ T3844] loop0: detected capacity change from 0 to 512 [ 37.757534][ T3849] loop3: detected capacity change from 0 to 512 [ 37.757925][ T3847] ALSA: seq fatal error: cannot create timer (-22) [ 37.772821][ T3849] EXT4-fs error (device loop3): ext4_orphan_get:1392: inode #15: comm gtp: casefold flag without casefold feature [ 37.802980][ T3849] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm gtp: couldn't read orphan inode 15 (err -117) [ 37.815116][ T3849] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 37.831699][ T3844] EXT4-fs warning (device loop0): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 37.863398][ T3844] EXT4-fs (loop0): mount failed [ 37.869862][ T3309] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.043263][ T3862] loop1: detected capacity change from 0 to 1024 [ 38.117646][ T3868] atomic_op ffff88811b812128 conn xmit_atomic 0000000000000000 [ 38.212995][ T3870] ALSA: seq fatal error: cannot create timer (-22) [ 38.232384][ T3870] sd 0:0:1:0: device reset [ 38.257250][ T3871] netlink: 'syz.0.128': attribute type 21 has an invalid length. [ 38.265411][ T3871] netlink: 128 bytes leftover after parsing attributes in process `syz.0.128'. [ 38.340162][ T3871] netlink: 'syz.0.128': attribute type 5 has an invalid length. [ 38.348012][ T3871] netlink: 'syz.0.128': attribute type 6 has an invalid length. [ 38.355734][ T3871] netlink: 3 bytes leftover after parsing attributes in process `syz.0.128'. [ 38.492909][ T3862] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 38.516225][ T3879] ALSA: seq fatal error: cannot create timer (-22) [ 38.536051][ T3879] sd 0:0:1:0: device reset [ 38.592744][ T3886] ALSA: seq fatal error: cannot create timer (-22) [ 38.619534][ T3888] loop2: detected capacity change from 0 to 512 [ 38.628292][ T3890] random: crng reseeded on system resumption [ 38.637167][ T3888] EXT4-fs error (device loop2): ext4_orphan_get:1392: inode #15: comm gtp: casefold flag without casefold feature [ 38.670464][ T3888] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm gtp: couldn't read orphan inode 15 (err -117) [ 38.740327][ T3888] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.745138][ T3894] loop3: detected capacity change from 0 to 512 [ 38.796156][ T3894] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 38.822136][ T3311] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.834263][ T3894] EXT4-fs (loop3): 1 truncate cleaned up [ 38.846252][ T3894] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 38.887260][ T3862] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=56 sclass=netlink_route_socket pid=3862 comm=syz.1.126 [ 38.949531][ T3309] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.999989][ T3904] loop2: detected capacity change from 0 to 128 [ 39.046348][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.055999][ T3904] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 39.091022][ T3906] ALSA: seq fatal error: cannot create timer (-22) [ 39.113706][ T3904] ext4 filesystem being mounted at /29/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 39.136071][ T3906] sd 0:0:1:0: device reset [ 39.233593][ T3915] ALSA: seq fatal error: cannot create timer (-22) [ 39.271096][ T3915] sd 0:0:1:0: device reset [ 39.280877][ T3311] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 39.305592][ T3922] ALSA: seq fatal error: cannot create timer (-22) [ 39.429687][ T3929] loop0: detected capacity change from 0 to 512 [ 39.460097][ T3929] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 39.528869][ T3933] atomic_op ffff88811be2d928 conn xmit_atomic 0000000000000000 [ 39.616652][ T3929] EXT4-fs (loop0): 1 truncate cleaned up [ 39.626658][ T3929] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 39.776460][ T3937] ALSA: seq fatal error: cannot create timer (-22) [ 39.794368][ T3308] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.810774][ T3939] loop1: detected capacity change from 0 to 1024 [ 39.819591][ T3937] sd 0:0:1:0: device reset [ 39.849408][ T3939] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 40.036175][ T3951] loop3: detected capacity change from 0 to 128 [ 40.052821][ T3951] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 40.072541][ T3951] ext4 filesystem being mounted at /37/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 40.083585][ T3955] ALSA: seq fatal error: cannot create timer (-22) [ 40.112418][ T3955] sd 0:0:1:0: device reset [ 40.149638][ T3959] netlink: 'syz.0.160': attribute type 21 has an invalid length. [ 40.157643][ T3959] netlink: 128 bytes leftover after parsing attributes in process `syz.0.160'. [ 40.173668][ T3959] netlink: 'syz.0.160': attribute type 5 has an invalid length. [ 40.181391][ T3959] netlink: 'syz.0.160': attribute type 6 has an invalid length. [ 40.189146][ T3959] netlink: 3 bytes leftover after parsing attributes in process `syz.0.160'. [ 40.229537][ T3309] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 40.249503][ T3964] loop4: detected capacity change from 0 to 512 [ 40.279057][ T3939] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=56 sclass=netlink_route_socket pid=3939 comm=syz.1.152 [ 40.360371][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.370985][ T3964] EXT4-fs warning (device loop4): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 40.382847][ T3970] random: crng reseeded on system resumption [ 40.391850][ T3964] EXT4-fs (loop4): mount failed [ 40.459648][ T3971] atomic_op ffff88811be2c528 conn xmit_atomic 0000000000000000 [ 40.587777][ T3964] netlink: 32 bytes leftover after parsing attributes in process `syz.4.163'. [ 40.619951][ T3976] ALSA: seq fatal error: cannot create timer (-22) [ 40.681584][ T3976] sd 0:0:1:0: device reset [ 40.786911][ T3981] loop4: detected capacity change from 0 to 512 [ 40.856876][ T3981] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 40.944617][ T3981] EXT4-fs (loop4): 1 truncate cleaned up [ 40.956023][ T3981] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 40.981104][ T3989] ALSA: seq fatal error: cannot create timer (-22) [ 41.004486][ T3989] sd 0:0:1:0: device reset [ 41.141407][ T3992] atomic_op ffff88811bc04128 conn xmit_atomic 0000000000000000 [ 41.214051][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.492815][ T3997] atomic_op ffff88811bbff528 conn xmit_atomic 0000000000000000 [ 41.548089][ T3993] syzkaller0: entered promiscuous mode [ 41.553663][ T3993] syzkaller0: entered allmulticast mode [ 41.899301][ T4005] loop4: detected capacity change from 0 to 128 [ 41.930762][ T4005] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 41.986651][ T4013] random: crng reseeded on system resumption [ 42.029109][ T4005] ext4 filesystem being mounted at /35/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 42.110570][ T4016] loop3: detected capacity change from 0 to 512 [ 42.124788][ T4016] __quota_error: 496 callbacks suppressed [ 42.124806][ T4016] Quota error (device loop3): v2_read_file_info: Free block number 1 out of range (1, 6). [ 42.146267][ T4016] EXT4-fs warning (device loop3): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 42.175493][ T4020] loop2: detected capacity change from 0 to 512 [ 42.178412][ T4016] EXT4-fs (loop3): mount failed [ 42.196856][ T29] audit: type=1326 audit(1756582175.119:1405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4021 comm="syz.1.179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1439bebe9 code=0x7ffc0000 [ 42.220854][ T29] audit: type=1326 audit(1756582175.119:1406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4021 comm="syz.1.179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1439bebe9 code=0x7ffc0000 [ 42.223180][ T3303] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 42.244747][ T29] audit: type=1326 audit(1756582175.119:1407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4021 comm="syz.1.179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fe1439bebe9 code=0x7ffc0000 [ 42.273184][ T4020] Quota error (device loop2): v2_read_file_info: Free block number 1 out of range (1, 6). [ 42.277205][ T29] audit: type=1326 audit(1756582175.119:1408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4021 comm="syz.1.179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1439bebe9 code=0x7ffc0000 [ 42.287434][ T4020] EXT4-fs warning (device loop2): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 42.310897][ T29] audit: type=1326 audit(1756582175.119:1409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4021 comm="syz.1.179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1439bebe9 code=0x7ffc0000 [ 42.310932][ T29] audit: type=1326 audit(1756582175.119:1410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4021 comm="syz.1.179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe1439bebe9 code=0x7ffc0000 [ 42.326906][ T4020] EXT4-fs (loop2): mount failed [ 42.348888][ T29] audit: type=1326 audit(1756582175.119:1411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4021 comm="syz.1.179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1439bebe9 code=0x7ffc0000 [ 42.348917][ T29] audit: type=1326 audit(1756582175.119:1412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4021 comm="syz.1.179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe1439bebe9 code=0x7ffc0000 [ 42.486342][ T4032] random: crng reseeded on system resumption [ 42.531325][ T4034] loop4: detected capacity change from 0 to 512 [ 42.612293][ T4040] netlink: 32 bytes leftover after parsing attributes in process `syz.3.177'. [ 42.641982][ T4034] EXT4-fs error (device loop4): ext4_orphan_get:1392: inode #15: comm gtp: casefold flag without casefold feature [ 42.665794][ T4034] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm gtp: couldn't read orphan inode 15 (err -117) [ 42.686756][ T4034] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.815418][ T4047] atomic_op ffff88811b82f528 conn xmit_atomic 0000000000000000 [ 42.913202][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.063826][ T4055] loop3: detected capacity change from 0 to 128 [ 43.076827][ T4053] loop1: detected capacity change from 0 to 1024 [ 43.122426][ T4055] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 43.143145][ T4055] ext4 filesystem being mounted at /45/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 43.175380][ T4053] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 43.203372][ T4060] syzkaller0: entered promiscuous mode [ 43.208891][ T4060] syzkaller0: entered allmulticast mode [ 43.248751][ T3309] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 43.321951][ T4073] loop0: detected capacity change from 0 to 512 [ 43.342635][ T4077] loop4: detected capacity change from 0 to 512 [ 43.358780][ T4073] EXT4-fs warning (device loop0): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 43.382388][ T4081] loop3: detected capacity change from 0 to 512 [ 43.419085][ T4077] EXT4-fs warning (device loop4): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 43.444361][ T4081] EXT4-fs error (device loop3): ext4_orphan_get:1392: inode #15: comm gtp: casefold flag without casefold feature [ 43.476758][ T4073] EXT4-fs (loop0): mount failed [ 43.482345][ T4081] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm gtp: couldn't read orphan inode 15 (err -117) [ 43.494632][ T4077] EXT4-fs (loop4): mount failed [ 43.516253][ T4081] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.538084][ T4053] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=56 sclass=netlink_route_socket pid=4053 comm=syz.1.189 [ 43.602753][ T4077] netlink: 32 bytes leftover after parsing attributes in process `syz.4.197'. [ 43.623018][ T3309] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.641805][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.756329][ T4107] random: crng reseeded on system resumption [ 43.819624][ T4108] syzkaller0: entered promiscuous mode [ 43.825290][ T4108] syzkaller0: entered allmulticast mode [ 43.910331][ T4114] loop0: detected capacity change from 0 to 512 [ 43.932655][ T4114] EXT4-fs warning (device loop0): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 43.949037][ T4114] EXT4-fs (loop0): mount failed [ 44.015036][ T4123] atomic_op ffff88811b82d528 conn xmit_atomic 0000000000000000 [ 44.391183][ T4126] loop2: detected capacity change from 0 to 512 [ 44.425268][ T4128] loop4: detected capacity change from 0 to 512 [ 44.452276][ T4132] loop0: detected capacity change from 0 to 1024 [ 44.466836][ T4132] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 44.479935][ T4126] EXT4-fs error (device loop2): ext4_orphan_get:1392: inode #15: comm gtp: casefold flag without casefold feature [ 44.500489][ T4126] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm gtp: couldn't read orphan inode 15 (err -117) [ 44.529033][ T4128] EXT4-fs warning (device loop4): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 44.547567][ T4126] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.595323][ T3311] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.642625][ T4128] EXT4-fs (loop4): mount failed [ 44.653045][ T4132] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=56 sclass=netlink_route_socket pid=4132 comm=syz.0.215 [ 44.726009][ T4128] netlink: 32 bytes leftover after parsing attributes in process `syz.4.214'. [ 44.775253][ T4154] random: crng reseeded on system resumption [ 44.802403][ T3308] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.913191][ T4164] loop4: detected capacity change from 0 to 512 [ 44.943258][ T4164] EXT4-fs warning (device loop4): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 44.967562][ T4167] loop3: detected capacity change from 0 to 512 [ 44.969488][ T4164] EXT4-fs (loop4): mount failed [ 45.048901][ T4167] EXT4-fs error (device loop3): ext4_orphan_get:1392: inode #15: comm gtp: casefold flag without casefold feature [ 45.073762][ T4167] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm gtp: couldn't read orphan inode 15 (err -117) [ 45.094833][ T4167] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.146187][ T4185] loop1: detected capacity change from 0 to 512 [ 45.186212][ T4187] loop4: detected capacity change from 0 to 1024 [ 45.205271][ T4188] atomic_op ffff888118dd0528 conn xmit_atomic 0000000000000000 [ 45.261630][ T4185] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 45.283275][ T3309] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.305028][ T4190] netlink: 'syz.0.235': attribute type 21 has an invalid length. [ 45.312996][ T4190] netlink: 128 bytes leftover after parsing attributes in process `syz.0.235'. [ 45.377786][ T4187] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 45.423974][ T4185] EXT4-fs (loop1): 1 truncate cleaned up [ 45.448700][ T4190] netlink: 'syz.0.235': attribute type 5 has an invalid length. [ 45.456591][ T4190] netlink: 'syz.0.235': attribute type 6 has an invalid length. [ 45.464265][ T4190] netlink: 3 bytes leftover after parsing attributes in process `syz.0.235'. [ 45.478718][ T4185] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 45.574010][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.614589][ T4198] loop1: detected capacity change from 0 to 512 [ 45.645280][ T4198] EXT4-fs warning (device loop1): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 45.697729][ T4198] EXT4-fs (loop1): mount failed [ 45.721242][ T4187] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=56 sclass=netlink_route_socket pid=4187 comm=syz.4.233 [ 45.790281][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.818070][ T4198] netlink: 32 bytes leftover after parsing attributes in process `syz.1.236'. [ 46.072753][ T4221] loop3: detected capacity change from 0 to 512 [ 46.130883][ T4221] EXT4-fs warning (device loop3): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 46.179768][ T4225] loop1: detected capacity change from 0 to 512 [ 46.211717][ T4221] EXT4-fs (loop3): mount failed [ 46.231954][ T4225] EXT4-fs error (device loop1): ext4_orphan_get:1392: inode #15: comm gtp: casefold flag without casefold feature [ 46.244443][ T4229] ALSA: seq fatal error: cannot create timer (-22) [ 46.255511][ T4225] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm gtp: couldn't read orphan inode 15 (err -117) [ 46.273137][ T4229] sd 0:0:1:0: device reset [ 46.291293][ T4225] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.370220][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.410150][ T4240] loop1: detected capacity change from 0 to 1024 [ 46.493656][ T4240] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 46.697253][ T4248] atomic_op ffff88811bb44d28 conn xmit_atomic 0000000000000000 [ 46.797491][ T4249] atomic_op ffff88811bb46128 conn xmit_atomic 0000000000000000 [ 46.965959][ T4251] loop0: detected capacity change from 0 to 512 [ 47.025404][ T4251] EXT4-fs warning (device loop0): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 47.060417][ T4251] EXT4-fs (loop0): mount failed [ 47.079195][ T4257] ALSA: seq fatal error: cannot create timer (-22) [ 47.164401][ T4245] atomic_op ffff88811bb47d28 conn xmit_atomic 0000000000000000 [ 47.375654][ T4260] ALSA: seq fatal error: cannot create timer (-22) [ 47.402642][ T4260] sd 0:0:1:0: device reset [ 47.469140][ T4265] loop3: detected capacity change from 0 to 512 [ 47.489156][ T4265] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 47.526648][ T4267] loop4: detected capacity change from 0 to 512 [ 47.527443][ T4265] EXT4-fs (loop3): 1 truncate cleaned up [ 47.555564][ T4267] EXT4-fs error (device loop4): ext4_orphan_get:1392: inode #15: comm gtp: casefold flag without casefold feature [ 47.568313][ T4265] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 47.588626][ T4251] netlink: 32 bytes leftover after parsing attributes in process `syz.0.254'. [ 47.598203][ T4240] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=56 sclass=netlink_route_socket pid=4240 comm=syz.1.249 [ 47.611199][ T4267] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm gtp: couldn't read orphan inode 15 (err -117) [ 47.638755][ T4267] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.653358][ T3309] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.682070][ T4273] loop0: detected capacity change from 0 to 512 [ 47.713311][ T29] kauditd_printk_skb: 753 callbacks suppressed [ 47.713327][ T29] audit: type=1326 audit(1756582180.649:2158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4276 comm="syz.3.262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1dd259ebe9 code=0x7ffc0000 [ 47.743050][ T29] audit: type=1326 audit(1756582180.649:2159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4276 comm="syz.3.262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1dd259ebe9 code=0x7ffc0000 [ 47.767201][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.779175][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.787455][ T29] audit: type=1326 audit(1756582180.699:2160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4276 comm="syz.3.262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f1dd259ebe9 code=0x7ffc0000 [ 47.811570][ T29] audit: type=1326 audit(1756582180.699:2161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4276 comm="syz.3.262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1dd259ebe9 code=0x7ffc0000 [ 47.835038][ T29] audit: type=1326 audit(1756582180.699:2162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4276 comm="syz.3.262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1dd259ebe9 code=0x7ffc0000 [ 47.858737][ T29] audit: type=1326 audit(1756582180.699:2163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4276 comm="syz.3.262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1dd259ebe9 code=0x7ffc0000 [ 47.882205][ T29] audit: type=1326 audit(1756582180.699:2164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4276 comm="syz.3.262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1dd259ebe9 code=0x7ffc0000 [ 47.905980][ T29] audit: type=1326 audit(1756582180.699:2165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4276 comm="syz.3.262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1dd259ebe9 code=0x7ffc0000 [ 47.929493][ T29] audit: type=1326 audit(1756582180.699:2166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4276 comm="syz.3.262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1dd259ebe9 code=0x7ffc0000 [ 47.933303][ T4281] netlink: 'syz.4.263': attribute type 21 has an invalid length. [ 47.953194][ T29] audit: type=1326 audit(1756582180.699:2167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4276 comm="syz.3.262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1dd259ebe9 code=0x7ffc0000 [ 47.961015][ T4281] netlink: 128 bytes leftover after parsing attributes in process `syz.4.263'. [ 47.984744][ T4281] netlink: 'syz.4.263': attribute type 5 has an invalid length. [ 48.001600][ T4281] netlink: 'syz.4.263': attribute type 6 has an invalid length. [ 48.009250][ T4281] netlink: 3 bytes leftover after parsing attributes in process `syz.4.263'. [ 48.045972][ T4273] EXT4-fs warning (device loop0): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 48.161996][ T4273] EXT4-fs (loop0): mount failed [ 48.204120][ T4290] loop3: detected capacity change from 0 to 512 [ 48.283792][ T4295] atomic_op ffff88811bbde128 conn xmit_atomic 0000000000000000 [ 48.343091][ T4290] EXT4-fs warning (device loop3): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 48.367581][ T4301] loop0: detected capacity change from 0 to 512 [ 48.372739][ T4290] EXT4-fs (loop3): mount failed [ 48.403555][ T4301] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 48.416399][ T4301] EXT4-fs (loop0): 1 truncate cleaned up [ 48.497405][ T4305] loop2: detected capacity change from 0 to 512 [ 48.556151][ T4301] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 48.705658][ T4305] EXT4-fs warning (device loop2): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 48.721065][ T3308] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.739541][ T4309] loop3: detected capacity change from 0 to 512 [ 48.801517][ T4305] EXT4-fs (loop2): mount failed [ 48.806525][ T4309] EXT4-fs error (device loop3): ext4_orphan_get:1392: inode #15: comm gtp: casefold flag without casefold feature [ 48.845658][ T4309] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm gtp: couldn't read orphan inode 15 (err -117) [ 48.858058][ T4309] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.867842][ T4312] syzkaller0: entered promiscuous mode [ 48.876137][ T4312] syzkaller0: entered allmulticast mode [ 48.895847][ T4314] netlink: 32 bytes leftover after parsing attributes in process `syz.2.271'. [ 48.951973][ T3309] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.034531][ T4320] loop2: detected capacity change from 0 to 1024 [ 49.090494][ T4320] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 49.110929][ T4326] loop3: detected capacity change from 0 to 512 [ 49.153377][ T4331] loop0: detected capacity change from 0 to 128 [ 49.183516][ T4326] EXT4-fs warning (device loop3): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 49.201845][ T4331] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 49.231664][ T4331] ext4 filesystem being mounted at /48/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 49.242439][ T4326] EXT4-fs (loop3): mount failed [ 49.363488][ T3308] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 49.495801][ T4346] loop0: detected capacity change from 0 to 512 [ 49.531817][ T4320] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=56 sclass=netlink_route_socket pid=4320 comm=syz.2.275 [ 49.563712][ T4346] EXT4-fs error (device loop0): ext4_orphan_get:1392: inode #15: comm gtp: casefold flag without casefold feature [ 49.594131][ T4346] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm gtp: couldn't read orphan inode 15 (err -117) [ 49.634497][ T4353] atomic_op ffff88811bb5a528 conn xmit_atomic 0000000000000000 [ 49.659263][ T4352] ALSA: seq fatal error: cannot create timer (-22) [ 49.737333][ T4354] sd 0:0:1:0: device reset [ 49.776306][ T4346] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.891044][ T3311] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.992431][ T3308] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.074462][ T4366] loop0: detected capacity change from 0 to 128 [ 50.121008][ T4366] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 50.139795][ T4372] loop2: detected capacity change from 0 to 512 [ 50.153066][ T4366] ext4 filesystem being mounted at /52/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 50.171539][ T4372] EXT4-fs warning (device loop2): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 50.187401][ T4372] EXT4-fs (loop2): mount failed [ 50.204787][ T3308] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 50.370194][ T4389] loop0: detected capacity change from 0 to 1024 [ 50.424046][ T4394] loop2: detected capacity change from 0 to 512 [ 50.447523][ T4389] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 50.473085][ T4394] EXT4-fs error (device loop2): ext4_orphan_get:1392: inode #15: comm gtp: casefold flag without casefold feature [ 50.501718][ T4394] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm gtp: couldn't read orphan inode 15 (err -117) [ 50.514125][ T4394] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.568901][ T4398] atomic_op ffff88811bbdf528 conn xmit_atomic 0000000000000000 [ 50.729493][ T4403] netlink: 40 bytes leftover after parsing attributes in process `syz.3.302'. [ 50.775117][ T4389] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=56 sclass=netlink_route_socket pid=4389 comm=syz.0.298 [ 50.835385][ T4411] loop3: detected capacity change from 0 to 128 [ 50.877619][ T4411] ext4 filesystem being mounted at /71/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 51.047566][ T4427] loop3: detected capacity change from 0 to 512 [ 51.066783][ T4427] EXT4-fs warning (device loop3): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 51.143495][ T4432] atomic_op ffff88811a3a3128 conn xmit_atomic 0000000000000000 [ 51.386098][ T4427] EXT4-fs (loop3): mount failed [ 51.645450][ T4444] loop4: detected capacity change from 0 to 1024 [ 51.674327][ T4448] loop3: detected capacity change from 0 to 128 [ 51.712568][ T4448] ext4 filesystem being mounted at /74/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 51.951596][ T4469] netlink: 40 bytes leftover after parsing attributes in process `syz.3.321'. [ 52.056498][ T4470] atomic_op ffff88811b828528 conn xmit_atomic 0000000000000000 [ 52.072492][ T4444] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=56 sclass=netlink_route_socket pid=4444 comm=syz.4.316 [ 52.142941][ T4479] ALSA: seq fatal error: cannot create timer (-22) [ 52.161084][ T4479] sd 0:0:1:0: device reset [ 52.214170][ T4482] ALSA: seq fatal error: cannot create timer (-22) [ 52.239940][ T4482] sd 0:0:1:0: device reset [ 52.285539][ T4487] loop0: detected capacity change from 0 to 512 [ 52.316182][ T4491] loop4: detected capacity change from 0 to 512 [ 52.324488][ T4487] EXT4-fs warning (device loop0): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 52.354048][ T4491] EXT4-fs warning (device loop4): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 52.380726][ T4487] EXT4-fs (loop0): mount failed [ 52.386326][ T4491] EXT4-fs (loop4): mount failed [ 52.456865][ T4500] loop3: detected capacity change from 0 to 128 [ 52.473797][ T4491] netlink: 32 bytes leftover after parsing attributes in process `syz.4.330'. [ 52.483138][ T4500] ext4 filesystem being mounted at /77/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 52.530647][ T4507] random: crng reseeded on system resumption [ 52.583964][ T4512] ALSA: seq fatal error: cannot create timer (-22) [ 52.596596][ T4512] sd 0:0:1:0: device reset [ 52.601669][ T4514] loop3: detected capacity change from 0 to 1024 [ 52.625257][ T4518] ALSA: seq fatal error: cannot create timer (-22) [ 52.644533][ T4518] sd 0:0:1:0: device reset [ 52.859342][ T29] kauditd_printk_skb: 583 callbacks suppressed [ 52.859358][ T29] audit: type=1326 audit(1756582185.789:2743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4526 comm="syz.2.342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f069387ebe9 code=0x7ffc0000 [ 52.897910][ T29] audit: type=1326 audit(1756582185.819:2744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4526 comm="syz.2.342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f069387ebe9 code=0x7ffc0000 [ 52.922098][ T29] audit: type=1326 audit(1756582185.819:2745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4526 comm="syz.2.342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f069387ebe9 code=0x7ffc0000 [ 52.945666][ T29] audit: type=1326 audit(1756582185.819:2746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4526 comm="syz.2.342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f069387ebe9 code=0x7ffc0000 [ 52.969010][ T29] audit: type=1326 audit(1756582185.819:2747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4526 comm="syz.2.342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f069387ebe9 code=0x7ffc0000 [ 52.993016][ T29] audit: type=1326 audit(1756582185.819:2748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4526 comm="syz.2.342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f069387ebe9 code=0x7ffc0000 [ 53.016552][ T29] audit: type=1326 audit(1756582185.819:2749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4526 comm="syz.2.342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f069387ebe9 code=0x7ffc0000 [ 53.036229][ T4531] atomic_op ffff88811bf56528 conn xmit_atomic 0000000000000000 [ 53.039994][ T29] audit: type=1326 audit(1756582185.819:2750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4526 comm="syz.2.342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f069387ebe9 code=0x7ffc0000 [ 53.070852][ T29] audit: type=1326 audit(1756582185.819:2751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4526 comm="syz.2.342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f069387ebe9 code=0x7ffc0000 [ 53.094272][ T29] audit: type=1326 audit(1756582185.819:2752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4526 comm="syz.2.342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f069387ebe9 code=0x7ffc0000 [ 53.136183][ T4514] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=56 sclass=netlink_route_socket pid=4514 comm=syz.3.337 [ 53.164830][ T4534] loop0: detected capacity change from 0 to 512 [ 53.183494][ T4534] EXT4-fs warning (device loop0): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 53.208167][ T4534] EXT4-fs (loop0): mount failed [ 53.213085][ T4542] loop2: detected capacity change from 0 to 512 [ 53.243640][ T4542] EXT4-fs warning (device loop2): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 53.259515][ T4542] EXT4-fs (loop2): mount failed [ 53.295951][ T4548] loop0: detected capacity change from 0 to 128 [ 53.308018][ T4550] ALSA: seq fatal error: cannot create timer (-22) [ 53.316540][ T4550] sd 0:0:1:0: device reset [ 53.327486][ T4542] netlink: 32 bytes leftover after parsing attributes in process `syz.2.345'. [ 53.342467][ T4548] ext4 filesystem being mounted at /63/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 53.364468][ T4555] ALSA: seq fatal error: cannot create timer (-22) [ 53.364962][ T4554] random: crng reseeded on system resumption [ 53.375663][ T4555] sd 0:0:1:0: device reset [ 53.687371][ T4576] loop2: detected capacity change from 0 to 512 [ 53.697457][ T4560] atomic_op ffff888119cf5d28 conn xmit_atomic 0000000000000000 [ 53.761939][ T4577] atomic_op ffff88811b812128 conn xmit_atomic 0000000000000000 [ 53.892662][ T4576] EXT4-fs warning (device loop2): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 54.015997][ T4576] EXT4-fs (loop2): mount failed [ 54.234376][ T4587] syzkaller0: entered promiscuous mode [ 54.239904][ T4587] syzkaller0: entered allmulticast mode [ 54.292768][ T4590] ALSA: seq fatal error: cannot create timer (-22) [ 54.319730][ T4590] sd 0:0:1:0: device reset [ 54.332747][ T4593] ALSA: seq fatal error: cannot create timer (-22) [ 54.340419][ T4593] sd 0:0:1:0: device reset [ 54.387244][ T4597] random: crng reseeded on system resumption [ 54.410522][ T4598] loop2: detected capacity change from 0 to 128 [ 54.439771][ T4598] ext4 filesystem being mounted at /69/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 54.440711][ T4603] loop4: detected capacity change from 0 to 512 [ 54.535787][ T4613] loop1: detected capacity change from 0 to 512 [ 54.576602][ T4603] EXT4-fs warning (device loop4): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 54.610738][ T4603] EXT4-fs (loop4): mount failed [ 54.618802][ T4613] EXT4-fs warning (device loop1): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 54.636261][ T4613] EXT4-fs (loop1): mount failed [ 54.680830][ T4622] atomic_op ffff8881227a1928 conn xmit_atomic 0000000000000000 [ 55.213571][ T4631] ALSA: seq fatal error: cannot create timer (-22) [ 55.222891][ T4631] sd 0:0:1:0: device reset [ 55.229940][ T4603] netlink: 32 bytes leftover after parsing attributes in process `syz.4.366'. [ 55.401680][ T4643] atomic_op ffff88811be2fd28 conn xmit_atomic 0000000000000000 [ 55.442905][ T4645] random: crng reseeded on system resumption [ 55.487214][ T4649] loop0: detected capacity change from 0 to 1024 [ 55.569867][ T4655] random: crng reseeded on system resumption [ 55.602270][ T4649] EXT4-fs: Ignoring removed nobh option [ 55.753304][ T4649] netlink: 28 bytes leftover after parsing attributes in process `syz.0.382'. [ 55.787913][ T4663] loop2: detected capacity change from 0 to 512 [ 55.800178][ T4634] loop4: detected capacity change from 0 to 32768 [ 55.819420][ T4662] loop1: detected capacity change from 0 to 512 [ 55.855666][ T4663] EXT4-fs warning (device loop2): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 55.872261][ T4663] EXT4-fs (loop2): mount failed [ 55.903086][ T3293] loop4: p1 p3 < > [ 55.926409][ T4634] loop4: p1 p3 < > [ 55.931031][ T4662] EXT4-fs warning (device loop1): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 55.975161][ T4662] EXT4-fs (loop1): mount failed [ 56.050477][ T4662] netlink: 32 bytes leftover after parsing attributes in process `syz.1.387'. [ 56.319427][ T4681] loop1: detected capacity change from 0 to 1024 [ 56.334054][ T3293] udevd[3293]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 56.349398][ T4681] EXT4-fs: Ignoring removed nobh option [ 56.355016][ T4681] EXT4-fs: Ignoring removed bh option [ 56.414390][ T4688] random: crng reseeded on system resumption [ 56.474063][ T4681] netlink: 28 bytes leftover after parsing attributes in process `syz.1.390'. [ 56.483012][ T4681] netlink: 28 bytes leftover after parsing attributes in process `syz.1.390'. [ 56.522516][ T4699] FAULT_INJECTION: forcing a failure. [ 56.522516][ T4699] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 56.535963][ T4699] CPU: 0 UID: 0 PID: 4699 Comm: syz.4.398 Not tainted syzkaller #0 PREEMPT(voluntary) [ 56.535991][ T4699] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 56.536004][ T4699] Call Trace: [ 56.536010][ T4699] [ 56.536017][ T4699] __dump_stack+0x1d/0x30 [ 56.536042][ T4699] dump_stack_lvl+0xe8/0x140 [ 56.536062][ T4699] dump_stack+0x15/0x1b [ 56.536152][ T4699] should_fail_ex+0x265/0x280 [ 56.536173][ T4699] should_fail_alloc_page+0xf2/0x100 [ 56.536271][ T4699] __alloc_frozen_pages_noprof+0xff/0x360 [ 56.536443][ T4699] alloc_pages_mpol+0xb3/0x250 [ 56.536588][ T4699] alloc_pages_noprof+0x90/0x130 [ 56.536621][ T4699] pte_alloc_one+0x2d/0x120 [ 56.536688][ T4699] __pte_alloc+0x32/0x2b0 [ 56.536794][ T4699] handle_mm_fault+0x1c55/0x2c20 [ 56.536875][ T4699] ? check_vma_flags+0x26e/0x340 [ 56.536901][ T4699] __get_user_pages+0x102e/0x1fa0 [ 56.536932][ T4699] __gup_longterm_locked+0x8f4/0xe60 [ 56.536997][ T4699] ? exc_page_fault+0x62/0xa0 [ 56.537045][ T4699] ? should_fail_ex+0xdb/0x280 [ 56.537068][ T4699] pin_user_pages_remote+0x7e/0xb0 [ 56.537093][ T4699] process_vm_rw+0x484/0x960 [ 56.537139][ T4699] __x64_sys_process_vm_writev+0x78/0x90 [ 56.537187][ T4699] x64_sys_call+0x2a7c/0x2ff0 [ 56.537209][ T4699] do_syscall_64+0xd2/0x200 [ 56.537236][ T4699] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 56.537260][ T4699] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 56.537351][ T4699] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 56.537373][ T4699] RIP: 0033:0x7f07237febe9 [ 56.537391][ T4699] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 56.537408][ T4699] RSP: 002b:00007f072225f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000137 [ 56.537477][ T4699] RAX: ffffffffffffffda RBX: 00007f0723a35fa0 RCX: 00007f07237febe9 [ 56.537490][ T4699] RDX: 0000000000000001 RSI: 0000200000000000 RDI: 00000000000000c3 [ 56.537547][ T4699] RBP: 00007f072225f090 R08: 000000000000023a R09: 0000000000000000 [ 56.537559][ T4699] R10: 0000200000121000 R11: 0000000000000246 R12: 0000000000000001 [ 56.537572][ T4699] R13: 00007f0723a36038 R14: 00007f0723a35fa0 R15: 00007ffc21f36fd8 [ 56.537592][ T4699] [ 56.811988][ T4703] loop4: detected capacity change from 0 to 512 [ 56.829963][ T4701] loop3: detected capacity change from 0 to 512 [ 56.838089][ T4703] EXT4-fs warning (device loop4): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 56.870773][ T4707] sd 0:0:1:0: device reset [ 56.902917][ T4701] EXT4-fs warning (device loop3): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 56.932105][ T4703] EXT4-fs (loop4): mount failed [ 56.951470][ T4701] EXT4-fs (loop3): mount failed [ 56.994250][ T4718] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.011229][ T4703] netlink: 32 bytes leftover after parsing attributes in process `syz.4.400'. [ 57.042507][ T4725] random: crng reseeded on system resumption [ 57.068839][ T4718] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.210628][ T4728] atomic_op ffff88811bf55928 conn xmit_atomic 0000000000000000 [ 57.230119][ T4743] sd 0:0:1:0: device reset [ 57.237267][ T4718] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.304842][ T4718] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.325786][ T4751] loop4: detected capacity change from 0 to 512 [ 57.345551][ T4751] EXT4-fs warning (device loop4): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 57.360916][ T4751] EXT4-fs (loop4): mount failed [ 57.401123][ T66] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.420491][ T4759] loop3: detected capacity change from 0 to 512 [ 57.427000][ T66] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.436373][ T66] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.442276][ T4751] netlink: 32 bytes leftover after parsing attributes in process `syz.4.417'. [ 57.445500][ T66] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.467043][ T4759] EXT4-fs warning (device loop3): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 57.493339][ T4759] EXT4-fs (loop3): mount failed [ 57.505704][ T4768] random: crng reseeded on system resumption [ 57.595706][ T4778] sd 0:0:1:0: device reset [ 57.630408][ T4786] ALSA: seq fatal error: cannot create timer (-22) [ 57.638285][ T4786] sd 0:0:1:0: device reset [ 57.723004][ T4780] atomic_op ffff88811b828928 conn xmit_atomic 0000000000000000 [ 57.809760][ T4798] FAULT_INJECTION: forcing a failure. [ 57.809760][ T4798] name failslab, interval 1, probability 0, space 0, times 0 [ 57.822611][ T4798] CPU: 1 UID: 0 PID: 4798 Comm: syz.4.434 Not tainted syzkaller #0 PREEMPT(voluntary) [ 57.822641][ T4798] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 57.822666][ T4798] Call Trace: [ 57.822672][ T4798] [ 57.822709][ T4798] __dump_stack+0x1d/0x30 [ 57.822733][ T4798] dump_stack_lvl+0xe8/0x140 [ 57.822777][ T4798] dump_stack+0x15/0x1b [ 57.822792][ T4798] should_fail_ex+0x265/0x280 [ 57.822819][ T4798] should_failslab+0x8c/0xb0 [ 57.822843][ T4798] kmem_cache_alloc_lru_noprof+0x55/0x310 [ 57.822947][ T4798] ? __d_alloc+0x3d/0x340 [ 57.822979][ T4798] __d_alloc+0x3d/0x340 [ 57.823058][ T4798] ? mpol_shared_policy_init+0xbd/0x4c0 [ 57.823086][ T4798] d_alloc_pseudo+0x1e/0x80 [ 57.823109][ T4798] alloc_file_pseudo+0x71/0x160 [ 57.823136][ T4798] __shmem_file_setup+0x1de/0x210 [ 57.823226][ T4798] shmem_file_setup+0x3b/0x50 [ 57.823270][ T4798] __se_sys_memfd_create+0x2c3/0x590 [ 57.823289][ T4798] __x64_sys_memfd_create+0x31/0x40 [ 57.823364][ T4798] x64_sys_call+0x2abe/0x2ff0 [ 57.823382][ T4798] do_syscall_64+0xd2/0x200 [ 57.823469][ T4798] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 57.823559][ T4798] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 57.823581][ T4798] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 57.823600][ T4798] RIP: 0033:0x7f07237febe9 [ 57.823615][ T4798] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 57.823630][ T4798] RSP: 002b:00007f072225ee18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 57.823648][ T4798] RAX: ffffffffffffffda RBX: 000000000000051b RCX: 00007f07237febe9 [ 57.823734][ T4798] RDX: 00007f072225eef0 RSI: 0000000000000000 RDI: 00007f07238827e8 [ 57.823745][ T4798] RBP: 0000200000001340 R08: 00007f072225ebb7 R09: 00007f072225ee40 [ 57.823756][ T4798] R10: 000000000000000a R11: 0000000000000202 R12: 0000200000000200 [ 57.823766][ T4798] R13: 00007f072225eef0 R14: 00007f072225eeb0 R15: 0000200000000180 [ 57.823847][ T4798] [ 58.084351][ T29] kauditd_printk_skb: 986 callbacks suppressed [ 58.084392][ T29] audit: type=1326 audit(1756582191.009:3728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4803 comm="syz.4.437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07237febe9 code=0x7ffc0000 [ 58.114016][ T29] audit: type=1326 audit(1756582191.009:3729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4803 comm="syz.4.437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07237febe9 code=0x7ffc0000 [ 58.137539][ T29] audit: type=1326 audit(1756582191.009:3730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4803 comm="syz.4.437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f07237febe9 code=0x7ffc0000 [ 58.160874][ T29] audit: type=1326 audit(1756582191.009:3731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4803 comm="syz.4.437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07237febe9 code=0x7ffc0000 [ 58.184360][ T29] audit: type=1326 audit(1756582191.009:3732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4803 comm="syz.4.437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07237febe9 code=0x7ffc0000 [ 58.207883][ T29] audit: type=1326 audit(1756582191.009:3733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4803 comm="syz.4.437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f07237febe9 code=0x7ffc0000 [ 58.231406][ T29] audit: type=1326 audit(1756582191.009:3734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4803 comm="syz.4.437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07237febe9 code=0x7ffc0000 [ 58.243540][ T4806] loop2: detected capacity change from 0 to 512 [ 58.254776][ T29] audit: type=1326 audit(1756582191.009:3735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4803 comm="syz.4.437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f07237febe9 code=0x7ffc0000 [ 58.284404][ T29] audit: type=1326 audit(1756582191.009:3736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4803 comm="syz.4.437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07237febe9 code=0x7ffc0000 [ 58.307766][ T29] audit: type=1326 audit(1756582191.009:3737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4803 comm="syz.4.437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f07237febe9 code=0x7ffc0000 [ 58.314736][ T4810] random: crng reseeded on system resumption [ 58.344645][ T4806] EXT4-fs warning (device loop2): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 58.363119][ T4806] EXT4-fs (loop2): mount failed [ 58.409153][ T4817] loop0: detected capacity change from 0 to 2048 [ 58.432646][ T4820] ALSA: seq fatal error: cannot create timer (-22) [ 58.440369][ T4820] sd 0:0:1:0: device reset [ 58.486494][ T4826] loop2: detected capacity change from 0 to 1024 [ 58.496893][ T4826] EXT4-fs: Ignoring removed nobh option [ 58.502695][ T4826] EXT4-fs: Ignoring removed bh option [ 58.515310][ T4829] netlink: 76 bytes leftover after parsing attributes in process `syz.1.442'. [ 58.557827][ T4826] netlink: 28 bytes leftover after parsing attributes in process `syz.2.443'. [ 58.566947][ T4826] netlink: 28 bytes leftover after parsing attributes in process `syz.2.443'. [ 58.661123][ T4844] loop3: detected capacity change from 0 to 1024 [ 58.732039][ T2994] ================================================================== [ 58.740162][ T2994] BUG: KCSAN: data-race in d_delete / step_into [ 58.746447][ T2994] [ 58.748790][ T2994] read-write to 0xffff888106ec4a80 of 4 bytes by task 4252 on cpu 1: [ 58.756873][ T2994] d_delete+0x15a/0x180 [ 58.761058][ T2994] d_delete_notify+0x32/0x100 [ 58.765755][ T2994] vfs_unlink+0x30b/0x420 [ 58.770108][ T2994] do_unlinkat+0x24e/0x480 [ 58.774645][ T2994] __x64_sys_unlink+0x2e/0x40 [ 58.779337][ T2994] x64_sys_call+0x2dc0/0x2ff0 [ 58.784018][ T2994] do_syscall_64+0xd2/0x200 [ 58.788539][ T2994] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 58.794448][ T2994] [ 58.796786][ T2994] read to 0xffff888106ec4a80 of 4 bytes by task 2994 on cpu 0: [ 58.804329][ T2994] step_into+0x12f/0x820 [ 58.808579][ T2994] walk_component+0x162/0x220 [ 58.813261][ T2994] path_lookupat+0xfe/0x2a0 [ 58.817767][ T2994] filename_lookup+0x147/0x340 [ 58.822552][ T2994] do_readlinkat+0x7d/0x320 [ 58.827077][ T2994] __x64_sys_readlink+0x47/0x60 [ 58.831945][ T2994] x64_sys_call+0x28da/0x2ff0 [ 58.836802][ T2994] do_syscall_64+0xd2/0x200 [ 58.841328][ T2994] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 58.847320][ T2994] [ 58.849831][ T2994] value changed: 0x00300180 -> 0x00004080 [ 58.855549][ T2994] [ 58.857870][ T2994] Reported by Kernel Concurrency Sanitizer on: [ 58.864020][ T2994] CPU: 0 UID: 0 PID: 2994 Comm: udevd Not tainted syzkaller #0 PREEMPT(voluntary) [ 58.873511][ T2994] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 58.883563][ T2994] ================================================================== [ 58.921811][ T4856] ALSA: seq fatal error: cannot create timer (-22) [ 58.946098][ T4856] sd 0:0:1:0: device reset [ 58.981248][ T4861] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=56 sclass=netlink_route_socket pid=4861 comm=syz.3.449