last executing test programs: 4.212184749s ago: executing program 2 (id=2980): bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b702000014800000b7030000000000008500000083000000bf"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000000400000004000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000440)=0x3) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace$poke(0x420e, r3, 0x0, 0xfffffffffffffffe) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETKEYCODE(r2, 0x4b4d, &(0x7f0000000000)={0x0, 0x17}) ioctl$VT_DISALLOCATE(r4, 0x5608) dup(r4) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f00000001c0), 0x1, 0x5d8, &(0x7f0000000c00)="$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") r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r6, &(0x7f0000004200)='t', 0x1) sendfile(r6, r5, 0x0, 0x3ffff) sendfile(r6, r5, 0x0, 0x7ffff000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) 3.858808846s ago: executing program 2 (id=2982): r0 = socket$packet(0x11, 0x2, 0x300) sendmmsg$sock(r0, &(0x7f0000003cc0)=[{{&(0x7f0000000000)=@hci={0x1f, 0x4, 0x3}, 0x80, 0x0}}], 0x1, 0x8840) 3.745175659s ago: executing program 2 (id=2983): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=@ipv4_newrule={0x2c, 0x20, 0x301, 0x0, 0xfffffffe, {0x2, 0x14}, [@FRA_DST={0x8, 0x1, @loopback}, @FRA_FLOW={0x8, 0xb, 0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24004041}, 0x80d4) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000080000000c"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="1c0000003e000701fcfffffffedbdf25017c0000060004"], 0x1c}, 0x1, 0x0, 0x0, 0x20044854}, 0xc000) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r3}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000440)='./file1\x00', 0x4000, &(0x7f0000000480), 0x1, 0x3d0, &(0x7f00000004c0)="$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") r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) pwritev2(r5, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5412, 0x0, 0x0) write$P9_RLERROR(r5, &(0x7f0000000000)={0xe, 0x7, 0x2, {0x5, 'ext4\x00'}}, 0xe) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r6, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r6, 0x0, 0x0, 0x22048854, &(0x7f0000000200)={0x2, 0x4e23, @empty}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r8 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x1000000, {0x60, 0x0, 0x0, r9, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x18, 0x2, [@TCA_CAKE_BASE_RATE64={0xc, 0x2, 0xfff}, @TCA_CAKE_ACK_FILTER={0x8, 0x10, 0x1}]}}]}, 0x48}}, 0x0) syz_emit_ethernet(0x86, &(0x7f00000002c0)=ANY=[@ANYBLOB="ffffffffffffbbbbbbbbbbbb08004500007800000000000190780a010102ac1414aa03049078010000004700000000000000001100000000000000000000440c0001ac1414bb4e210000443c0001e000000158000000000000000000000000ac1414000000000000000000000000000000000000000000ac1e000100000000ac14140000000000"], 0x0) sendto$inet(r6, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba78600a34f65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03859bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b037511bf746bec66ba", 0xd000, 0x11, 0x0, 0x27) r10 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x0) preadv2(r10, &(0x7f0000001040)=[{&(0x7f0000001900)=""/4096, 0x1000}], 0x1, 0xd, 0x4005, 0x8) r11 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r4, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f0000000980)={0x30, r11, 0x1, 0x70bd28, 0x0, {}, [@ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}]}, @ETHTOOL_A_FEATURES_WANTED={0x4}]}, 0x30}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 3.527113143s ago: executing program 2 (id=2988): r0 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0x0, 0xac14140c}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)}], 0x1, 0x0, 0x0, 0x900}, 0x60) 3.413147085s ago: executing program 2 (id=2990): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) iopl(0x3) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000180), 0x59d802, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f00000004c0)=ANY=[@ANYBLOB="1809000000000000000000000001000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{}, &(0x7f0000000540), &(0x7f0000000580)=r7}, 0x20) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000240)={[{@nobarrier}, {@barrier}, {@noauto_da_alloc}, {@noload}, {@nobarrier}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x40}}]}, 0xfe, 0x44e, &(0x7f00000010c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0x40942, 0x0) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./bus\x00', 0x0, 0x1000, 0x0) r8 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r8, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x400, 0x0, 0x0, 0x1, 0x0, "ef35af413bb901527fe4d0ce5d29c3ee5e5c3676345a41499db7aac63a01000000000000004faa2ae2c084a0ea0000000000000000000c00002000", "036c47c67808200400000000000000335263bdbcef549ba197fce47ddfdd753abd950100002a00ffffffffffffffff00000000e8f20000000200", "b7326736181c208220000000b9000000000000000000f0fffffffff2ff00", [0x4]}) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x8880, 0x84) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={0xffffffffffffffff, &(0x7f0000000780)}, 0x20) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000002c0)={'gretap0\x00', &(0x7f00000001c0)={'ip_vti0\x00', 0x0, 0x8722c36b897864e1, 0x1, 0x0, 0xfffffff9, {{0x21, 0x4, 0x3, 0x1, 0x84, 0x65, 0x0, 0x9, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0xf}, @multicast1, {[@noop, @noop, @generic={0x89, 0xc, "bdedb78b3a3e5590775d"}, @timestamp_addr={0x44, 0x1c, 0x4e, 0x1, 0x2, [{@private=0xa010102, 0xe17}, {@multicast2, 0x1}, {@rand_addr=0x64010102, 0x7}]}, @timestamp_prespec={0x44, 0x44, 0xd9, 0x3, 0xd, [{@remote, 0x8}, {@local, 0x8}, {@dev={0xac, 0x14, 0x14, 0xf}, 0x9}, {@local, 0x7}, {@remote, 0x5}, {@empty, 0x400}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x170}, {@local, 0x3}]}]}}}}}) sendmsg$can_raw(r4, &(0x7f0000000440)={&(0x7f0000000300)={0x1d, r9}, 0x10, &(0x7f0000000400)={&(0x7f0000000380)=@can={{0x1, 0x0, 0x0, 0x1}, 0x1, 0x0, 0x0, 0x0, "37a2e28dfb72fe2f"}, 0x10}, 0x1, 0x0, 0x0, 0x8050}, 0x4000810) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x14, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b70800000ce6ff007b8af0ff00000000bfa1000000000000071300000000ffffbfa4000000000000b70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70400000800000085000000950000009500000000000000"], 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r10}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40000) 3.249003458s ago: executing program 1 (id=2992): r0 = mq_open(&(0x7f0000001600)='eth0\x00#~\x02\x00\x00\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfd\x05\x00\x00\x00\x00\x00\x80\x00\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94uu_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18A\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x05\x00\x00\x000\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xce\x00\x00\x00\xe8\vq+\xbb\xc7\xaf\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000500000002"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000001850000001b000000b70000000000070095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r2}, 0x18) syz_usb_connect(0x0, 0x24, &(0x7f0000000340)={{0x12, 0x1, 0x0, 0xf0, 0x8f, 0xd, 0x40, 0x4b4, 0x6830, 0x86cf, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x88, 0x63, 0xc1}}]}}]}}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='kmem_cache_free\x00', r3}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000002c0)=[{0x200000000006, 0x4, 0x0, 0x7ffc1ffb}]}) readlinkat(0xffffffffffffffff, 0x0, 0x0, 0x0) socket(0x11, 0x3, 0x0) mq_timedsend(r0, &(0x7f0000000600)="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", 0xa62, 0x6, 0x0) mq_timedreceive(r0, &(0x7f000001d600)=""/102389, 0x18ff5, 0x0, 0x0) 2.819250686s ago: executing program 2 (id=2997): r0 = socket(0x10, 0x803, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001640)=@newtfilter={0x1800, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0xf}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x38, 0x2, [@TCA_U32_SEL={0x34, 0x5, {0x5, 0xd, 0x3, 0x1, 0x4, 0x2, 0x6, 0x9, [{0x200, 0x500, 0x3, 0x6}, {0x0, 0x53, 0xa9, 0x1}]}}]}}, @filter_kind_options=@f_matchall={{0xd}, {0x178c, 0x2, [@TCA_MATCHALL_ACT={0x474, 0x2, [@m_simple={0x11c, 0xa, 0x0, 0x0, {{0xb}, {0x4}, {0xed, 0x6, "333db1d958c7b29254e08a5238495f8a79cb51128fdf56b86bd16062c9118063767ff17fe0fd118cc81752eef777d8e32c11644d5eaf9797d984d8ea413d21fef4f6534dadccaaf9ffbacdbe010750fbb15565ed881a90f64b4b3483864627b863d7b0592eb64496fffb959632ab0c19b75a44779a680083b5e901eed3c8bae5e55cc90e1ae8b302120ead97073a78184b95febe00d66db68317ffd1e6c1ce3e88671ac2891385059ab2010aa642f19147c80191102a3bd060f78df4ea8ac8fb36a2f1566e7590d664b3ca84fa4b629b5a6040ba3ec7f1b60d2225afb5ece0f816749f63517b505d48"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_nat={0xb4, 0x1e, 0x0, 0x0, {{0x8}, {0x4}, {0x89, 0x6, "ad594ea4ef5a860c92babb0c5cda1652456f3eacc13f38024633cc4b7a28498bdfe58e536e64cb06af2c13c40e367d1eca592f7d5a59f8ca05d9bbd24dd22bfda78cd04704e3c353aeb70406af2b72664a5efd09a4da9ad2c9039338088629b6d5400a679203ff84a532f6e529d626b3122a0dfbb4833eaf16ecaa750648caf794a0713fe9"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_connmark={0x10c, 0x15, 0x0, 0x0, {{0xd}, {0x58, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xe, 0x3, 0x4, 0x6, 0xffffffff}, 0x81d7}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x8a5d, 0x6, 0x1, 0x554e9cb, 0x5}, 0x3}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x7, 0x3, 0x3, 0xffffffff, 0x400}, 0x80}}]}, {0x86, 0x6, "44723166567aaaa6b6cf6a9e37673b024c4b31ae9ba2ef94358b357523261af10277847f9216a64d02444e0cd2cb7d2cc136bcfc22ceae1cb7c4821ffe5e8fd94b9c55b8650337de4bd6ad468d79d86c0f7881b5c0b96877867261f9545f9790862b38ba776a59d2edfc441fcb1841e7d222c3b275d4b391c0d1c972cac4c6532847"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_skbmod={0x108, 0x1d, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [@TCA_SKBMOD_SMAC={0xa, 0x4, @broadcast}, @TCA_SKBMOD_DMAC={0xa, 0x3, @local}, @TCA_SKBMOD_SMAC={0xa, 0x4, @broadcast}, @TCA_SKBMOD_DMAC={0xa, 0x3, @multicast}, @TCA_SKBMOD_DMAC={0xa, 0x3, @broadcast}]}, {0x9e, 0x6, "bef855f32a81cbc318e7024e6abde4de2008325ed243cb353480e9f7219eaeee48c21640cf16912ebaa9e030f2a57798061720c87fe365c93e117082b8cf6fe18669b7c1e10dac9f5bc6286fed9cb2e0bcff5b68ace2d072317568be6206b062eb91cd9926a71ab9312aa927cacf3e8d78e97255c4f6f63668a7fe0f1ab1337d5f2e3347268b953813fc80bf5a2eac80a5004bcef68aa832301f"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_skbmod={0x8c, 0x10, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBMOD_DMAC={0xa, 0x3, @remote}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x6}, @TCA_SKBMOD_DMAC={0xa, 0x3, @broadcast}]}, {0x40, 0x6, "d9911cb9ac55230f0449edcf5db27a8303b83f6e2ebb0c4e32c5f05b4e480414237469b0292a49a8fcc28f6496d1b1d1fd7fc133c0b6b493fe11ee5b"}, {0xc}, {0xc, 0x8, {0x2}}}}]}, @TCA_MATCHALL_ACT={0x1178, 0x2, [@m_ct={0x1058, 0x14, 0x0, 0x0, {{0x7}, {0x30, 0x2, 0x0, 0x1, [@TCA_CT_LABELS={0x14, 0x7, "0efdb53832641a2a3f5b1d4971ca90a3"}, @TCA_CT_PARMS={0x18, 0x1, {0x6, 0x8, 0x20000008, 0x3, 0xfca}}]}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}, @m_skbmod={0x98, 0x0, 0x0, 0x0, {{0xb}, {0x3c, 0x2, 0x0, 0x1, [@TCA_SKBMOD_SMAC={0xa, 0x4, @random="df3561812221"}, @TCA_SKBMOD_DMAC={0xa, 0x3, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2f}}, @TCA_SKBMOD_DMAC={0xa, 0x3, @multicast}, @TCA_SKBMOD_DMAC={0xa, 0x3, @remote}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0xea46}]}, {0x34, 0x6, "fe8d907d78479c8c52ccedec75d97177990e78672e2f88ada17e747f2381cf3715ea7c39ac02896c13b53e0bf848e3c0"}, {0xc}, {0xc, 0x8, {0x3}}}}, @m_ctinfo={0x84, 0xe, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x9}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x9}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x7}]}, {0x3f, 0x6, "a9f77c0bf2cf36ce9f1edbb2fd889819aad1b1b5c1f5e9ed80478c0bd4fae19998fabd9123bdf82e0c3be09d8e8bc3b1a6a3a47f3235297c3ecc9a"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}, @TCA_MATCHALL_ACT={0x194, 0x2, [@m_connmark={0x190, 0x1c, 0x0, 0x0, {{0xd}, {0xc8, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1, 0x80000001, 0x4, 0x231, 0x3}, 0xa19c}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xfffffffa, 0x4, 0x0, 0x0, 0x8}, 0x8}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x8, 0x3, 0x3, 0x38, 0x800}, 0x1}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1, 0x800, 0x10000000, 0xa85, 0xa}, 0x1}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x6, 0x28a481fa, 0x8, 0x3, 0xc}, 0x4}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x5, 0xfffffff9, 0x5, 0x8, 0x9}, 0xf752}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x8, 0x10, 0x4, 0x4, 0x2}}}]}, {0x9a, 0x6, "33680eb7e9d2e5027c341788edf02a1a80f81c957d5457eca4a1b5cf11dbab7d8a0724e46b4327488241e2c33d018be61573460b54333658cdba56787a5b2772b2e875f6c09370ce07b19f8505501cedc7104fdb759ed23820e859af6ff28d7639831b9db4bd64f3f1b3646ea90428a4f9d04dec19924e16a5faca596492e33d8c06e292496622064e91431b609d8b2f297ce55b37da"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}, @TCA_MATCHALL_FLAGS={0x8}]}}]}, 0x1800}}, 0x24040084) 2.739683498s ago: executing program 4 (id=2998): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000240)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) acct(0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000004180)=ANY=[@ANYBLOB="020000000400000007000000020000000010"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sys_enter\x00', r1}, 0x10) openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x0) fcntl$setlease(r2, 0x400, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x103000, 0x8d) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/locks\x00', 0x0, 0x0) pread64(r3, &(0x7f0000001440)=""/126, 0x7e, 0x41) r4 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000200), 0x35c, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) readv(r5, &(0x7f00000016c0)=[{&(0x7f0000001200)=""/147, 0x93}], 0x1) ioctl$TCSETS(r5, 0x40045431, &(0x7f00000000c0)={0x0, 0xffffffff, 0x0, 0x9, 0x0, "0006000000df0066952e0d16c708db720800"}) r6 = syz_open_pts(r5, 0x42) r7 = dup3(r6, r5, 0x0) write$UHID_INPUT(r7, &(0x7f00000001c0)={0xd, {"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", 0x1000}}, 0xffffff5c) readv(r4, &(0x7f00000007c0)=[{&(0x7f0000000700)=""/67, 0x43}], 0x1) 2.735667878s ago: executing program 0 (id=2999): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=@ipv4_newrule={0x2c, 0x20, 0x301, 0x0, 0xfffffffe, {0x2, 0x14}, [@FRA_DST={0x8, 0x1, @loopback}, @FRA_FLOW={0x8, 0xb, 0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24004041}, 0x80d4) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000080000000c"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0}, 0x18) sendmsg$nl_generic(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="1c0000003e000701fcfffffffedbdf25017c0000060004"], 0x1c}, 0x1, 0x0, 0x0, 0x20044854}, 0xc000) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r3}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000440)='./file1\x00', 0x4000, &(0x7f0000000480), 0x1, 0x3d0, &(0x7f00000004c0)="$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") r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) pwritev2(r5, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5412, 0x0, 0x0) write$P9_RLERROR(r5, &(0x7f0000000000)={0xe, 0x7, 0x2, {0x5, 'ext4\x00'}}, 0xe) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r6, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r6, 0x0, 0x0, 0x22048854, &(0x7f0000000200)={0x2, 0x4e23, @empty}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r8 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x1000000, {0x60, 0x0, 0x0, r9, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x18, 0x2, [@TCA_CAKE_BASE_RATE64={0xc, 0x2, 0xfff}, @TCA_CAKE_ACK_FILTER={0x8, 0x10, 0x1}]}}]}, 0x48}}, 0x0) syz_emit_ethernet(0x86, &(0x7f00000002c0)=ANY=[@ANYBLOB="ffffffffffffbbbbbbbbbbbb08004500007800000000000190780a010102ac1414aa03049078010000004700000000000000001100000000000000000000440c0001ac1414bb4e210000443c0001e000000158000000000000000000000000ac1414000000000000000000000000000000000000000000ac1e000100000000ac14140000000000"], 0x0) sendto$inet(r6, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba78600a34f65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03859bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b037511bf746bec66ba", 0xd000, 0x11, 0x0, 0x27) r10 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x0) preadv2(r10, &(0x7f0000001040)=[{&(0x7f0000001900)=""/4096, 0x1000}], 0x1, 0xd, 0x4005, 0x8) r11 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r4, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f0000000980)={0x30, r11, 0x1, 0x70bd28, 0x0, {}, [@ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}]}, @ETHTOOL_A_FEATURES_WANTED={0x4}]}, 0x30}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 2.586613681s ago: executing program 0 (id=3000): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b702000014800000b7030000000000008500000083000000bf"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000440)=0x3) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace$poke(0x420e, r3, 0x0, 0xfffffffffffffffe) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETKEYCODE(r2, 0x4b4d, &(0x7f0000000000)={0x0, 0x17}) ioctl$VT_DISALLOCATE(r4, 0x5608) dup(r4) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f00000001c0), 0x1, 0x5d8, &(0x7f0000000c00)="$eJzs3c9vFFUcAPDvbH/QUrSFGBUP0sQYSJSWFjDEeICrIQ3+iBcvVloQKdDQGi2aUBK8mBgvxph48iD+F0rkyklPHrx4MiREDUcT18x2pnTb2ZYubacyn0+y9M17O7w33X773r6+NxtAZQ2m/9Qi9kbEdBLRn8wvlnVGVji48Lx7f39yOn0kUa+/8WcSSZaXPz/JvvZlJ/dExM8/JbGnY2W9M3NXzo9PTU1ezo6HZy9MD8/MXTl47sL42cmzkxdHXxo9dvTI0WMjh9q6rqsFeSevv/9h/2djb3/3zT/JyPe/jSVxPF7Nnrj0OjbKYAw2vifJyqK+YxtdWUk6sp+TpS9x0llig1iX/PXrioinoj864v6L1x+fvlZq44BNVU8i6kBFJeIfKiofB+Tv7Ze/D66VMioBtsLdEwsTACvjv3NhbjB6GnMDO+8lsXRaJ4mI9mbmmu2KiNu3xq6fuTV2PTZpHg4oNn8tIp4uiv+kEf8D0RMDjfivNcV/Oi44lX1N819vs/7lU8XiH7bOQvz3rBr/0SL+31kS/++2Wf/g/eR7vU3x39vuJQEAAAAAAEBl3TwRES8W/f2/trj+JwrW//RFxPENqH9w2fHKv//X7mxANUCBuyciXilc/1vLV/8OdGSpxxrrAbqSM+emJg9FxOMRcSC6dqTHI6vUcfDzPV+3KhvM1v/lj7T+29lawKwddzp3NJ8zMT47/rDXDUTcvRbxTOH632Sx/08K+v/098H0A9ax5/kbp1qVrR3/wGapfxuxv7D/v3/XimT1+3MMN8YDw/moYKVnP/7ih1b1txv/bjEBDy/t/3euHv8DydL79cysv47Dc531VmXtjv+7kzcbt5zpzvI+Gp+dvTwS0Z2c7Ehzm/JH199meBTl8ZDHSxr/B55bff6vaPzfGxHzy/7v5K/mPcW5J//t+71Ve4z/oTxp/E+sq/9ff2L0xsCPrep/sP7/SKOvP5DlmP+DBV/lYdrdnF8Qjp1FRVvdXgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4FNQiYlcktaHFdK02NBTRFxFPxM7a1KWZ2RfOXPrg4kRa1vj8/1r+Sb/9C8dJ/vn/A0uOR5cdH46I3RHxZUdv43jo9KWpibIvHgAAAAAAAAAAAAAAAAAAALaJvhb7/1N/dJTdOmDTdZbdAKA0BfH/SxntALae/h+qS/xDdYl/qC7xD9Ul/qG6xD9Ul/iH6hL/AAAAAADwSNm97+avSUTMv9zbeKS6s7KuUlsGbLZa2Q0ASuMWP1Bdlv5AdXmPDyRrlPe0PGmtM1czffohTgYAAAAAAAAAAACAytm/1/5/qCr7/6G67P+H6sr3/+8ruR3A1vMeH4g1dvIX7v9f8ywAAAAAAAAAAAAAYCPNzF05Pz41NXlZ4q3t0YytTNTr9avpT8F2ac//PJEvhd8u7VmWyPf6PdhZ5f1OAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAmv0XAAD//xYSJMU=") r5 = openat(0xffffffffffffff9c, 0x0, 0x4040, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r6, &(0x7f0000004200)='t', 0x1) sendfile(r6, r5, 0x0, 0x3ffff) sendfile(r6, r5, 0x0, 0x7ffff000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) 2.393410264s ago: executing program 1 (id=3001): r0 = socket$unix(0x1, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="010000000400000008000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x14, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_clone(0x63081180, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'ipvlan0\x00'}) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x0, 0x4, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0xd, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x18, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r4}, 0x10) syz_clone(0x630c1100, 0x0, 0x0, 0x0, 0x0, 0x0) 2.177201208s ago: executing program 0 (id=3002): r0 = mq_open(&(0x7f0000001600)='eth0\x00#~\x02\x00\x00\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfd\x05\x00\x00\x00\x00\x00\x80\x00\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94uu_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18A\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x05\x00\x00\x000\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xce\x00\x00\x00\xe8\vq+\xbb\xc7\xaf\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000500000002"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00'}, 0x18) syz_usb_connect(0x0, 0x24, &(0x7f0000000340)={{0x12, 0x1, 0x0, 0xf0, 0x8f, 0xd, 0x40, 0x4b4, 0x6830, 0x86cf, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x88, 0x63, 0xc1}}]}}]}}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000002c0)=[{0x200000000006, 0x4, 0x0, 0x7ffc1ffb}]}) readlinkat(0xffffffffffffffff, 0x0, 0x0, 0x0) socket(0x11, 0x3, 0x0) mq_timedsend(r0, &(0x7f0000000600)="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", 0xa62, 0x6, 0x0) mq_timedreceive(r0, &(0x7f000001d600)=""/102389, 0x18ff5, 0x0, 0x0) 1.876945144s ago: executing program 4 (id=3003): r0 = mq_open(&(0x7f0000001600)='eth0\x00#~\x02\x00\x00\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfd\x05\x00\x00\x00\x00\x00\x80\x00\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94uu_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18A\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x05\x00\x00\x000\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xce\x00\x00\x00\xe8\vq+\xbb\xc7\xaf\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000500000002"], 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000001850000001b000000b70000000000070095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r3}, 0x18) syz_usb_connect(0x0, 0x24, &(0x7f0000000340)={{0x12, 0x1, 0x0, 0xf0, 0x8f, 0xd, 0x40, 0x4b4, 0x6830, 0x86cf, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x88, 0x63, 0xc1}}]}}]}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000002c0)=[{0x200000000006, 0x4, 0x0, 0x7ffc1ffb}]}) readlinkat(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, 0x0}, 0x94) r4 = socket(0x11, 0x3, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x3, &(0x7f0000000440)=@framed, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r5}, 0x10) r6 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) writev(r6, &(0x7f0000000940)=[{&(0x7f0000000200)='\f7', 0x2}, {&(0x7f0000000100)='0', 0x1}], 0x2) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000005c0)={'ip6gretap0\x00', 0x0}) bind$packet(r4, &(0x7f0000000180)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @remote}, 0x14) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000000)=0xe9, 0x4) sendmsg$netlink(r4, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)=ANY=[@ANYBLOB="3f011906a5a318"], 0xdd12}], 0x1}, 0x20040051) mq_timedsend(r0, &(0x7f0000000600)="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", 0xa62, 0x6, 0x0) mq_timedreceive(r0, &(0x7f000001d600)=""/102389, 0x18ff5, 0x0, 0x0) 1.57324429s ago: executing program 3 (id=3005): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000700000000000000000000850000002300000095"], 0x0, 0x4, 0x8f, &(0x7f00000002c0)=""/143}, 0x94) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) socketpair(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000240)=0x14) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000e000000c500000001f0ffff95"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r3}, 0x10) sendmmsg(r0, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r2}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) 1.552407551s ago: executing program 3 (id=3006): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000400)='net_dev_start_xmit\x00', r1}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 1.483524222s ago: executing program 1 (id=3007): r0 = memfd_create(&(0x7f0000000000)='\xff\x00l\x1e\xa0,\xc1\x8d\\Rxt\'\xb6\xbf\xc8*\n\xaf\x1b\xec\xfd\xbbY\x99\xb3\x06c\xd6\xf6\xb0\xcd=\xf3\x03`\x93\xff\x05e\xaa$\x00\xeaw\xd9\x10\x0f\x1d\x888\x8cS\x12?R\x99\xda7\xce)\x8f\xcc\x87\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xd32J\xd7\x9f\xea:=\xcc\x17(|L\xda\xc3\x1ca\xe8s\xb6\xebw\xc7\xabS\xd7pJ\xd2\xa1\xcf\xae\x1f2\x9f\x98\xa80\r\x85\xb4\x86\xbc\xd0\xea\xbf\xb1Z\xb7e$\xcf<\ra\x9b\xa5\xdc\v\x1e\xfd\xc7\x91\xf22\xcf\x96\x99\xc1\xbb\xa1j\xe5\xa8\x7f\a\xa9\xa7G\xad\xa3\x8b\xf1\xdb\\]R\x8cf\xac1\xd7V\xaf\xb5\x8e\x10\x95\x9f=2\xd0-\xe1K:\xc3b\x89\x15OS\xa5\x98Ky\x12\xe7Qt#\xeb\x99\a\x10\x1c\xb3N\x85\xeb\x80\x05\x82_\x15\xdc\xbc\xf93\xdd\xf5g\x98\xd4\x8az\xe4`\xa5\x00\x00\x00\x00\xcd\x13\xfc+\xac\xe5\x8bI\f\xd6\x89\xc7HY\xcf\x00O\x88\xe6\x8b\x8bF/\x82u\xffCnG\x02\x82\xfc\xe9Od\x92\x06\xdeg@y\xa6=4\xb1}\xa8Yr\xad9\xb9b)\xec}\x87=\x91:IV\xab\xdf\xa2\xba+6D\x1fuf\xdeJYw$L\xa1\x83NH\xe3\xf2\x91\x8cW\xb7\b\x04\x12\x8b\x8bV\x19\xf1\r\xcb\x94\xa3\xf4\xe4\x97$\x99c\rG\xd7#\xe2\xfd\x80\xadR\x83\xdc\xb8d\x15|\xac\xb8g$\x0f@\xca3\x9f\xb1\xea\xc6vQ\x1b\xdb#\xa3\"\x9f\x9e\xd8\xba\x13d\x9bx\x9a\xbf\xee\xf2kQ\xe0\xc4/~7\xcd\xd1\x06\xe5\x17\x9b\bW|\xbc\x86D\x05\xaf<\xdfy,I2f\xa7G\xe3Qp<\'6 x\n\x94f\xf8\xa2\xea\xf4\xa5\x9eY\xf80C\x91\x7f\x16u\x8c(Xl\x90\xd2\x9f\xa9\xb9kJy[\x93\xfe{\xe5\x1a\xe9\xb7T\x19;\xb9\t\xe7\x0ei\xfaZ\xfbS:\x9b\xc1r\xcbM.\xf8\xb8wR\xb3p~b\xcb\v1-\a-\x8a#\xaa1\xa9\x9a\x88\a\xc5\xb9*\xd3?\xac\n\x9c\xcd\xe2\xc9\xbd\xeb\xb3\xf65\xbdaP\t\xd6\x06\x1c\xeeNg\x92>\x92>\xaf\b3\x05\xfdM\xd2F\v\xbd\xeb\x83 \x9d\x90S\x11w\xefg\\\xca\xe2\xfc~w\xbe\xefh#\x96\xa5h\xec\xbfr\xc8Bi\x90\"(\xf2\xc6\xcc\xfbX\x14{\x9e5\x87\x91\xe2\x9b\xd4\xc6\xc2whk+\x0f\x82\xca\xc1@\xcb~P\xe4\x18\xf9E\'\xab\xc7z\xd7\x05V{\xa1X\xa3\x10\x13.]tlz\x12\xde\xf2\xa43\xee#\x92J~\xda \x9b\xc4\xc0V\xb3\x9dCO\x1fu\x1c4\x1d\v}\x1b\xe5>w\xfbsm\xa3\fI|\x96-p\x86\xd3O\xfa\x9a\x8f\xb2\x8e\x88qGEG', 0x6) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2000001, 0x4c092, r0, 0x0) fallocate(r0, 0x3, 0x100000000000005, 0xfffffffb) r1 = socket(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000400)='thermal_power_cpu_limit\x00'}, 0x18) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$USBDEVFS_GET_SPEED(0xffffffffffffffff, 0x551f) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x1f, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) statx(0xffffffffffffffff, 0x0, 0x6000, 0x4, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002"], 0xfc}}, 0x0) splice(r4, 0x0, r1, 0x0, 0x9, 0x4) write$P9_RWRITE(r6, &(0x7f0000000040)={0xb}, 0x11000) read(r5, &(0x7f0000032440)=""/102364, 0x18fdc) getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x4, 0x0, &(0x7f0000000040)) socket$netlink(0x10, 0x3, 0xe) r9 = openat(0xffffffffffffff9c, 0x0, 0x1c1002, 0x0) write(r9, &(0x7f0000004200)='t', 0x1) syz_open_dev$tty1(0xc, 0x4, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYRES16], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000800000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x681}, 0x94) 1.481538242s ago: executing program 3 (id=3008): r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f00000000c0)={0x2, 0x4e24, @rand_addr=0x64010101}, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x32, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x4, "d57e190d001e6e1d16c1711bbd8adbf65bd846957b378a02340c68117aa1b390", "b0b4170e157cddfb9792c8e37bafb99e319950347e93f4d34870ee24c0ea06d56270e45c8d3e7d708161ba81dd33c54b", "01acae6f69ea1443db8d53af54944d4894a87f20c65bfb8e0c8cfb67", {"38f5e54b3dc7c070b4d66f0f9565df74", "d2653a13d554fee0e7be27c873db314d"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x43}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x42}, 0xe0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0xf5ffffff, &(0x7f0000000000)='%', 0x0, 0xd01, 0xbe02, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x7, 0x4, 0x8, 0xd9}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000840)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$inet6(0xa, 0x805, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000000)={'ip6_vti0\x00', &(0x7f0000000140)={'syztnl1\x00', 0x0, 0x29, 0x9, 0x0, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2e}}, @loopback={0x30000, 0xffff888101827518}, 0x20, 0x0, 0x38dc586a}}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r3, 0x0, 0xfffffffffffffffc}, 0x18) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000240000002400000002000000000000000000000903000000000000000000000d008d0f61"], &(0x7f0000000100)=""/223, 0x3e, 0xdf, 0x1}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x0, 0x1c, &(0x7f0000000340)=ANY=[@ANYBLOB="05000000000000009500000000000000b7080000000000007b8af8", @ANYRES32, @ANYBLOB="0000000000002000b70500f7ffffff0085000000a5000000b7080000000000007b8af8ff00000000b7080000050000007b8af0ff00000000bfa100000000000007010000f8"], 0x0, 0x1, 0x93, &(0x7f0000000480)=""/147, 0x41000, 0x0, '\x00', 0x0, @fallback=0x32, r5, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x4, 0x0, &(0x7f0000000980)=[{0x40001, 0x1, 0x2000007}, {0x5, 0x0, 0xf, 0xa}, {0x5, 0x2, 0xe, 0x9}, {0x0, 0x3, 0x0, 0x7}], 0x10, 0x7}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000005000000090000008b00000044"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000240), 0x800, r6}, 0x38) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, 0x0, &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000140)='kmem_cache_free\x00', r8, 0x0, 0x8}, 0x18) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x3, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="180000000000000000000000000000009110aa000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1e}, 0x94) 1.442124123s ago: executing program 1 (id=3009): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=@ipv4_newrule={0x2c, 0x20, 0x301, 0x0, 0xfffffffe, {0x2, 0x14}, [@FRA_DST={0x8, 0x1, @loopback}, @FRA_FLOW={0x8, 0xb, 0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24004041}, 0x80d4) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000080000000c"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0}, 0x18) sendmsg$nl_generic(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="1c0000003e000701fcfffffffedbdf25017c0000060004"], 0x1c}, 0x1, 0x0, 0x0, 0x20044854}, 0xc000) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r3}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000440)='./file1\x00', 0x4000, &(0x7f0000000480), 0x1, 0x3d0, &(0x7f00000004c0)="$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") r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) pwritev2(r5, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5412, 0x0, 0x0) write$P9_RLERROR(r5, &(0x7f0000000000)={0xe, 0x7, 0x2, {0x5, 'ext4\x00'}}, 0xe) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r6, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r6, 0x0, 0x0, 0x22048854, &(0x7f0000000200)={0x2, 0x4e23, @empty}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r8 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x1000000, {0x60, 0x0, 0x0, r9, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x18, 0x2, [@TCA_CAKE_BASE_RATE64={0xc, 0x2, 0xfff}, @TCA_CAKE_ACK_FILTER={0x8, 0x10, 0x1}]}}]}, 0x48}}, 0x0) syz_emit_ethernet(0x86, &(0x7f00000002c0)=ANY=[@ANYBLOB="ffffffffffffbbbbbbbbbbbb08004500007800000000000190780a010102ac1414aa03049078010000004700000000000000001100000000000000000000440c0001ac1414bb4e210000443c0001e000000158000000000000000000000000ac1414000000000000000000000000000000000000000000ac1e000100000000ac14140000000000"], 0x0) sendto$inet(r6, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba78600a34f65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03859bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b037511bf746bec66ba", 0xd000, 0x11, 0x0, 0x27) r10 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x0) preadv2(r10, &(0x7f0000001040)=[{&(0x7f0000001900)=""/4096, 0x1000}], 0x1, 0xd, 0x4005, 0x8) r11 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r4, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f0000000980)={0x30, r11, 0x1, 0x70bd28, 0x0, {}, [@ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}]}, @ETHTOOL_A_FEATURES_WANTED={0x4}]}, 0x30}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 1.373149784s ago: executing program 0 (id=3010): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000080)='kfree\x00', r0}, 0x18) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x68, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x2c, 0x11, 0x0, 0x1, @limit={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x3}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x101}]}}}]}, @NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}, {0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xf8}}, 0x0) 1.337621855s ago: executing program 0 (id=3011): r0 = mq_open(&(0x7f0000001600)='eth0\x00#~\x02\x00\x00\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfd\x05\x00\x00\x00\x00\x00\x80\x00\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94uu_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18A\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x05\x00\x00\x000\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xce\x00\x00\x00\xe8\vq+\xbb\xc7\xaf\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000500000002"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000001850000001b000000b70000000000070095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r2}, 0x18) syz_usb_connect(0x0, 0x24, &(0x7f0000000340)={{0x12, 0x1, 0x0, 0xf0, 0x8f, 0xd, 0x40, 0x4b4, 0x6830, 0x86cf, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x88, 0x63, 0xc1}}]}}]}}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='kmem_cache_free\x00', r3}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000002c0)=[{0x200000000006, 0x4, 0x0, 0x7ffc1ffb}]}) readlinkat(0xffffffffffffffff, 0x0, 0x0, 0x0) socket(0x11, 0x3, 0x0) mq_timedsend(r0, &(0x7f0000000600)="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", 0xa62, 0x6, 0x0) mq_timedreceive(r0, &(0x7f000001d600)=""/102389, 0x18ff5, 0x0, 0x0) 1.291361716s ago: executing program 1 (id=3012): perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x2, 0x2, 0x5, 0x2, 0x0, 0x4, 0xc0803, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x2, @perf_bp={&(0x7f0000000040)}, 0x1000, 0x100000000, 0x8, 0x3, 0x400, 0x10001, 0x9, 0x0, 0x5, 0x0, 0xfffffffffffffffd}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0x8) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000010"], 0x50) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000340)='system.posix_acl_default\x00', &(0x7f0000000340)=ANY=[], 0xfe44, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000580)='./file1\x00', 0x10000, &(0x7f0000000500)={[{@lazytime}, {}]}, 0x1, 0x4e1, &(0x7f0000001140)="$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") openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x181242, 0x148) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000080000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ff"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41002, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x14, &(0x7f0000000940)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_route(0x10, 0x3, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000480)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex_waitv(&(0x7f0000001080)=[{0x3, &(0x7f0000001040)=0x3, 0x82}], 0x1, 0x0, &(0x7f0000001100)={0x77359400}, 0x1) 1.249550986s ago: executing program 4 (id=3013): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r2, &(0x7f0000000600)={&(0x7f0000000040)={0x2, 0x2400, @rand_addr=0x64010101}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000640)="080024c0c64cd8", 0x7}], 0x1, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000007000000810b040a0101027f07000100000000001c000000000000000000000008"], 0x40}, 0x0) 1.234495777s ago: executing program 3 (id=3014): r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x70, 0x103301) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c3000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2, 0x0, 0x100000001}, 0x18) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000200)) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) 1.217567037s ago: executing program 4 (id=3015): socket$unix(0x1, 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0100000004000000080000000b"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0xd, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000008002b0000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x18, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r4}, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) syz_clone(0x630c1100, 0x0, 0x0, 0x0, 0x0, 0x0) 1.159579168s ago: executing program 3 (id=3016): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000240)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) acct(0x0) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sys_enter\x00', r1}, 0x10) r2 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) write$selinux_validatetrans(r2, &(0x7f0000000680)=ANY=[@ANYBLOB="73797374656d5f753a6f626a6563745f723a6175646974645f657865635f743a7330207378737465f4fa94027574f18afcc6685e99f04f6d5f753a6f626a6563745f723a667573655f6465766963655f743a73302030303030303030303030303030303030303030392073"], 0x79) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x0) fcntl$setlease(r3, 0x400, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x103000, 0x8d) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/locks\x00', 0x0, 0x0) pread64(r4, &(0x7f0000001440)=""/126, 0x7e, 0x41) 596.901239ms ago: executing program 0 (id=3017): r0 = socket$unix(0x1, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="010000000400000008000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x14, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_clone(0x63081180, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'ipvlan0\x00'}) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x0, 0x4, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0xd, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x18, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r4}, 0x10) syz_clone(0x630c1100, 0x0, 0x0, 0x0, 0x0, 0x0) 151.597908ms ago: executing program 4 (id=3018): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000700000000000000000000850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x4}, 0x94) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) socketpair(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000240)=0x14) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000e000000c500000001f0ffff95"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r3}, 0x10) sendmmsg(r0, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r2}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) 120.482358ms ago: executing program 3 (id=3019): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000400)='net_dev_start_xmit\x00', r1}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 295.14µs ago: executing program 1 (id=3020): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002000000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000deab44f4850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) mmap(&(0x7f0000000000/0x400000)=nil, 0x1e9000, 0x4, 0x200000006c832, 0xffffffffffffffff, 0x1000000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000280)='sys_enter\x00', r0}, 0x10) memfd_secret(0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0b00000005000000050000000900000001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000b43d8f480c70118f87d9c2343b5e960abc11bd6812f4271ad4366522edffe1f5e31f22b11b8467a1002a2570ea1283fd23443d4f2bdcf18d"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="180000", @ANYRESOCT=0x0], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x60, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa2c"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b80)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x4, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xc}, 0x94) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000240)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x1300, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000003c0)='kmem_cache_free\x00', r3}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r1, 0xffffffffffffffff}, &(0x7f0000000200), &(0x7f0000000240)}, 0x20) r5 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) write$binfmt_aout(r5, &(0x7f00000000c0)=ANY=[], 0x20) r6 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r6, 0x0) perf_event_open(&(0x7f0000000180)={0x8, 0x80, 0x0, 0x4, 0x0, 0x7, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x4}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r7 = syz_open_dev$usbfs(0x0, 0x204, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r7, 0x108000) r8 = open$dir(&(0x7f0000000080)='./file0\x00', 0x804000, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r10, 0x0, 0x9}, 0x18) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3, 0x12, r8, 0x0) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xd, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000ff7fffff000000000000000018110000", @ANYRES32=r4, @ANYBLOB="000000ef2fb1410000000000b7080000000000007b8af8ff00000000bfa200020000000007000008000000b7040000000000008500000003000000850000000700000095000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r11}, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) 0s ago: executing program 4 (id=3021): socket$netlink(0x10, 0x3, 0x10) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xb, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000000000000020000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='kfree\x00', r1}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x3, 0xff, 0x4e, 0x54, 0x0, 0xcb2, 0x89008, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x2, @perf_config_ext={0x9de, 0x7ff}, 0x403a, 0x81, 0x800, 0x6, 0x8, 0x4002, 0x77c, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE(r2, &(0x7f0000000780)={0x0, {'syz0\x00', 'syz0\x00', 'syz1\x00', &(0x7f00000000c0)=""/43, 0x2b, 0x0, 0x0, 0x0, 0x800}}, 0x120) write$UHID_DESTROY(r2, &(0x7f0000000080), 0x4) listen(r0, 0xfffffffc) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/vmstat\x00', 0x0, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_int(r7, 0x11, 0x1, &(0x7f0000000000)=0x507, 0x4) sendmmsg$inet(r7, &(0x7f0000005d40)=[{{&(0x7f0000000600)={0x2, 0x4e24, @local}, 0x10, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="10000000000000000000c0"], 0x10}}], 0x1, 0x400c0) sendfile(r7, r6, 0x0, 0x20000023893) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r4, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0) kernel console output (not intermixed with test programs): 338999.361:8422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10498 comm="syz.0.2153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f8f3227eec9 code=0x7ffc0000 [ 248.478020][T10545] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 248.517122][T10545] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 248.594145][T10508] loop0: detected capacity change from 0 to 32768 [ 248.646227][T10508] loop0: p1 p3 < > [ 248.847653][T10557] loop1: detected capacity change from 0 to 512 [ 248.890896][T10557] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 249.033711][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 249.059531][T10563] loop1: detected capacity change from 0 to 512 [ 249.085181][T10563] EXT4-fs warning (device loop1): ext4_enable_quotas:7178: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 249.111570][T10563] EXT4-fs (loop1): mount failed [ 249.125117][T10567] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 249.132624][T10567] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 249.140615][T10567] vhci_hcd vhci_hcd.0: Device attached [ 249.169551][T10568] vhci_hcd: connection closed [ 249.169884][ T4050] vhci_hcd: stop threads [ 249.179232][ T4050] vhci_hcd: release socket [ 249.183766][ T4050] vhci_hcd: disconnect device [ 250.006260][T10581] Restarting kernel threads ... [ 250.026044][T10581] Done restarting kernel threads. [ 250.056404][T10498] syz.0.2153 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 250.069720][T10498] CPU: 1 UID: 0 PID: 10498 Comm: syz.0.2153 Not tainted syzkaller #0 PREEMPT(voluntary) [ 250.069762][T10498] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 250.069845][T10498] Call Trace: [ 250.069866][T10498] [ 250.069877][T10498] __dump_stack+0x1d/0x30 [ 250.069903][T10498] dump_stack_lvl+0xe8/0x140 [ 250.069928][T10498] dump_stack+0x15/0x1b [ 250.069948][T10498] dump_header+0x81/0x220 [ 250.069989][T10498] oom_kill_process+0x342/0x400 [ 250.070066][T10498] out_of_memory+0x979/0xb80 [ 250.070101][T10498] try_charge_memcg+0x5e6/0x9e0 [ 250.070150][T10498] charge_memcg+0x51/0xc0 [ 250.070225][T10498] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 250.070257][T10498] __read_swap_cache_async+0x1df/0x350 [ 250.070367][T10498] swap_cluster_readahead+0x376/0x3e0 [ 250.070429][T10498] swapin_readahead+0xde/0x6f0 [ 250.070465][T10498] ? __filemap_get_folio+0x4f7/0x6b0 [ 250.070531][T10498] ? __rcu_read_unlock+0x34/0x70 [ 250.070562][T10498] ? swap_cache_get_folio+0x77/0x200 [ 250.070591][T10498] do_swap_page+0x301/0x2430 [ 250.070626][T10498] ? css_rstat_updated+0xb7/0x240 [ 250.070676][T10498] ? __pfx_default_wake_function+0x10/0x10 [ 250.070730][T10498] handle_mm_fault+0x9a5/0x2c20 [ 250.070776][T10498] do_user_addr_fault+0x630/0x1080 [ 250.070806][T10498] exc_page_fault+0x62/0xa0 [ 250.070911][T10498] asm_exc_page_fault+0x26/0x30 [ 250.070934][T10498] RIP: 0033:0x7f8f3215f6bc [ 250.070953][T10498] Code: 8d 42 f8 48 89 43 38 8b 43 28 83 c0 08 89 43 28 4c 89 62 f8 41 8d 56 01 41 39 ee 0f 83 8d 00 00 00 41 89 d6 48 8b 3c 24 89 ea <4d> 8b 65 40 44 29 f2 4c 03 24 d7 48 83 7b 50 07 77 08 48 c7 43 50 [ 250.071045][T10498] RSP: 002b:00007fff76b668f0 EFLAGS: 00010293 [ 250.071063][T10498] RAX: 0000000000020010 RBX: 00007f8f33005720 RCX: 0000000000000000 [ 250.071114][T10498] RDX: 00000000000008ce RSI: 0000000000000008 RDI: 00007f8f31cef008 [ 250.071127][T10498] RBP: 00000000000008ce R08: 00007f8f31cef060 R09: 00007f8f324c2000 [ 250.071141][T10498] R10: 00007f8f31cef008 R11: 0000000000000002 R12: ffffffff81ec8ae3 [ 250.071152][T10498] R13: 00007f8f324d6038 R14: 00000000000001c7 R15: fffffffffffdfff8 [ 250.071165][T10498] ? _copy_from_iter+0x33/0xe80 [ 250.071277][T10498] [ 250.071297][T10498] memory: usage 307200kB, limit 307200kB, failcnt 5598 [ 250.227750][T10587] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2181'. [ 250.245067][T10498] memory+swap: usage 333668kB, limit 9007199254740988kB, failcnt 0 [ 250.303102][T10588] sch_tbf: burst 2976 is lower than device lo mtu (65550) ! [ 250.308466][T10498] kmem: usage 307200kB, limit 9007199254740988kB, failcnt 0 [ 250.340223][T10498] Memory cgroup stats for /syz0: [ 250.387563][T10498] cache 0 [ 250.396492][T10498] rss 0 [ 250.400317][T10498] shmem 0 [ 250.403467][T10498] mapped_file 0 [ 250.407122][T10498] dirty 0 [ 250.410070][T10498] writeback 0 [ 250.413818][T10498] workingset_refault_anon 264 [ 250.418639][T10498] workingset_refault_file 2264 [ 250.423633][T10498] swap 27103232 [ 250.427124][T10498] swapcached 0 [ 250.430891][T10498] pgpgin 358879 [ 250.434806][T10498] pgpgout 358879 [ 250.438734][T10498] pgfault 399302 [ 250.442315][T10498] pgmajfault 139 [ 250.445903][T10498] inactive_anon 0 [ 250.449549][T10498] active_anon 0 [ 250.453074][T10498] inactive_file 0 [ 250.456916][T10498] active_file 0 [ 250.460552][T10498] unevictable 0 [ 250.464160][T10498] hierarchical_memory_limit 314572800 [ 250.469548][T10498] hierarchical_memsw_limit 9223372036854771712 [ 250.475872][T10498] total_cache 0 [ 250.479455][T10498] total_rss 0 [ 250.482827][T10498] total_shmem 0 [ 250.486443][T10498] total_mapped_file 0 [ 250.490649][T10498] total_dirty 0 [ 250.494493][T10498] total_writeback 0 [ 250.498392][T10498] total_workingset_refault_anon 264 [ 250.503635][T10498] total_workingset_refault_file 2264 [ 250.509025][T10498] total_swap 27103232 [ 250.513342][T10498] total_swapcached 0 [ 250.517634][T10498] total_pgpgin 358879 [ 250.521941][T10498] total_pgpgout 358879 [ 250.526240][T10498] total_pgfault 399302 [ 250.530514][T10498] total_pgmajfault 139 [ 250.534668][T10498] total_inactive_anon 0 [ 250.539276][T10498] total_active_anon 0 [ 250.543405][T10498] total_inactive_file 0 [ 250.547586][T10498] total_active_file 0 [ 250.551788][T10498] total_unevictable 0 [ 250.556495][T10498] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.2153,pid=10498,uid=0 [ 250.572546][T10498] Memory cgroup out of memory: Killed process 10498 (syz.0.2153) total-vm:100372kB, anon-rss:1268kB, file-rss:26540kB, shmem-rss:176kB, UID:0 pgtables:164kB oom_score_adj:1000 [ 251.140985][T10611] loop0: detected capacity change from 0 to 512 [ 251.253010][T10611] EXT4-fs warning (device loop0): ext4_enable_quotas:7178: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 251.275001][T10611] EXT4-fs (loop0): mount failed [ 251.443166][T10621] Restarting kernel threads ... [ 251.448361][T10621] Done restarting kernel threads. [ 251.640721][T10634] loop3: detected capacity change from 0 to 512 [ 251.650990][T10634] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 251.703528][T10637] vhci_hcd: invalid port number 96 [ 251.708805][T10637] vhci_hcd: default hub control req: 0314 vfffa i0060 l0 [ 251.765033][T10642] 9pnet_fd: Insufficient options for proto=fd [ 251.794494][T10644] loop1: detected capacity change from 0 to 1024 [ 251.801596][T10644] EXT4-fs: quotafile must be on filesystem root [ 251.906491][T10644] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2201'. [ 251.969952][T10647] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 251.978900][T10647] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 252.053261][T10649] Restarting kernel threads ... [ 252.058863][T10649] Done restarting kernel threads. [ 252.110538][T10659] IPv6: Can't replace route, no match found [ 252.183181][T10663] vhci_hcd: invalid port number 96 [ 252.188366][T10663] vhci_hcd: default hub control req: 0314 vfffa i0060 l0 [ 252.241055][T10665] hub 2-0:1.0: USB hub found [ 252.247406][T10665] hub 2-0:1.0: 8 ports detected [ 252.256607][T10671] loop0: detected capacity change from 0 to 512 [ 252.279172][T10671] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 252.292880][T10671] ext4 filesystem being mounted at /433/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 252.418065][T10687] loop2: detected capacity change from 0 to 512 [ 252.434107][T10687] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 252.442537][T10687] EXT4-fs (loop2): orphan cleanup on readonly fs [ 252.451315][T10687] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #16: comm syz.2.2219: corrupted inode contents [ 252.470444][T10687] EXT4-fs (loop2): Remounting filesystem read-only [ 252.478149][ T29] kauditd_printk_skb: 601 callbacks suppressed [ 252.478179][ T29] audit: type=1400 audit(1759339003.681:9022): avc: denied { unmount } for pid=3301 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 252.478606][T10687] EXT4-fs (loop2): 1 truncate cleaned up [ 252.511672][ T31] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 252.522296][ T31] Quota error (device loop2): write_blk: dquota write failed [ 252.529797][ T31] Quota error (device loop2): remove_free_dqentry: Can't write block (5) with free entries [ 252.540146][ T31] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 252.550768][ T31] Quota error (device loop2): write_blk: dquota write failed [ 252.558361][ T31] Quota error (device loop2): free_dqentry: Can't move quota data block (5) to free list [ 252.564507][ T29] audit: type=1400 audit(1759339003.721:9023): avc: denied { read } for pid=10693 comm="syz.4.2222" dev="nsfs" ino=4026532491 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 252.569855][ T31] EXT4-fs (loop2): Quota write (off=8, len=24) cancelled because transaction is not started [ 252.591305][ T29] audit: type=1400 audit(1759339003.731:9024): avc: denied { open } for pid=10693 comm="syz.4.2222" path="net:[4026532491]" dev="nsfs" ino=4026532491 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 252.601590][ T31] Quota error (device loop2): v2_write_file_info: Can't write info structure [ 252.601924][ T31] Quota error (device loop2): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 252.651767][ T29] audit: type=1400 audit(1759339003.841:9025): avc: denied { write } for pid=10695 comm="syz.1.2223" name="001" dev="devtmpfs" ino=162 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 252.679667][T10696] vhci_hcd: invalid port number 96 [ 252.680651][T10698] netlink: 'syz.3.2221': attribute type 1 has an invalid length. [ 252.685211][T10696] vhci_hcd: default hub control req: 0314 vfffa i0060 l0 [ 252.693473][T10698] netlink: 'syz.3.2221': attribute type 4 has an invalid length. [ 252.708592][T10698] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.2221'. [ 252.745215][T10698] netlink: 'syz.3.2221': attribute type 1 has an invalid length. [ 252.753446][T10698] netlink: 'syz.3.2221': attribute type 4 has an invalid length. [ 252.755202][T10701] loop1: detected capacity change from 0 to 1024 [ 252.761330][T10698] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.2221'. [ 252.794510][T10701] loop1: detected capacity change from 0 to 512 [ 252.824684][T10704] loop4: detected capacity change from 0 to 1024 [ 252.831727][T10708] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10708 comm=syz.2.2224 [ 253.291330][T10830] netlink: 'syz.1.2233': attribute type 1 has an invalid length. [ 253.306361][T10726] loop3: detected capacity change from 0 to 512 [ 253.380415][T10830] 8021q: adding VLAN 0 to HW filter on device bond1 [ 253.404581][T10832] bond1 (unregistering): Released all slaves [ 253.529820][T10835] loop4: detected capacity change from 0 to 164 [ 253.538109][T10838] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 253.541168][T10835] iso9660: Unknown parameter '' [ 253.547066][T10838] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 253.561605][T10839] loop3: detected capacity change from 0 to 1024 [ 253.577018][T10839] EXT4-fs: quotafile must be on filesystem root [ 253.597429][T10839] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2236'. [ 253.691790][T10847] loop3: detected capacity change from 0 to 512 [ 253.695207][T10848] SELinux: Context #! ./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 253.699285][T10847] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 253.840198][T10853] RDS: rds_bind could not find a transport for ::ffff:100.1.1.1, load rds_tcp or rds_rdma? [ 253.854572][T10847] EXT4-fs (loop3): 1 orphan inode deleted [ 253.865321][T10847] ext4 filesystem being mounted at /479/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 253.882776][ T4314] EXT4-fs error (device loop3): ext4_release_dquot:6979: comm kworker/u8:9: Failed to release dquot type 1 [ 253.978693][T10860] Restarting kernel threads ... [ 253.984072][T10860] Done restarting kernel threads. [ 254.079590][T10876] loop3: detected capacity change from 0 to 512 [ 254.094673][T10876] ext4 filesystem being mounted at /483/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 254.125264][T10879] loop4: detected capacity change from 0 to 512 [ 254.159496][T10882] geneve0: entered allmulticast mode [ 254.491246][ T3306] EXT4-fs unmount: 13 callbacks suppressed [ 254.491276][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 254.631793][T11003] loop1: detected capacity change from 0 to 1024 [ 254.639351][T11003] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 254.656447][T11003] 9pnet_fd: Insufficient options for proto=fd [ 254.736700][T11117] pim6reg: entered allmulticast mode [ 254.747263][T11119] loop4: detected capacity change from 0 to 512 [ 254.756487][T11119] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 254.918265][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 254.962433][T11238] loop4: detected capacity change from 0 to 164 [ 254.971603][T11238] ISOFS: unable to read i-node block [ 254.985926][T11238] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 255.061420][T11239] loop1: detected capacity change from 0 to 512 [ 255.069041][T11239] msdos: Unknown parameter 'sodots' [ 255.293522][T11242] loop0: detected capacity change from 0 to 512 [ 255.349652][T11242] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 255.439078][T11242] EXT4-fs (loop0): 1 orphan inode deleted [ 255.447577][T11242] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 255.490793][T11242] ext4 filesystem being mounted at /436/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 255.495529][ T2655] EXT4-fs error (device loop0): ext4_release_dquot:6979: comm kworker/u8:6: Failed to release dquot type 1 [ 255.549667][ T3299] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 256.755484][T11273] loop4: detected capacity change from 0 to 1024 [ 256.941866][T11273] EXT4-fs: Ignoring removed bh option [ 256.984399][T11283] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2283'. [ 257.159124][T11273] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 257.333075][T11273] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e84ce018, mo2=0000] [ 257.341211][T11273] System zones: 0-1, 3-12 [ 257.453702][T11273] EXT4-fs error (device loop4): ext4_map_blocks:814: inode #3: block 1: comm syz.4.2281: lblock 1 mapped to illegal pblock 1 (length 1) [ 257.468553][T11273] EXT4-fs error (device loop4): ext4_acquire_dquot:6943: comm syz.4.2281: Failed to acquire dquot type 0 [ 257.498734][T11273] EXT4-fs error (device loop4): ext4_free_blocks:6696: comm syz.4.2281: Freeing blocks not in datazone - block = 0, count = 4096 [ 257.513937][T11273] EXT4-fs error (device loop4): ext4_read_inode_bitmap:139: comm syz.4.2281: Invalid inode bitmap blk 0 in block_group 0 [ 257.528550][T11273] EXT4-fs error (device loop4) in ext4_free_inode:361: Corrupt filesystem [ 257.538466][ T2655] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:6: lblock 1 mapped to illegal pblock 1 (length 1) [ 257.554810][T11273] EXT4-fs (loop4): 1 orphan inode deleted [ 257.557986][T11302] netlink: 'syz.2.2290': attribute type 4 has an invalid length. [ 257.562944][T11273] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 257.572050][ T2655] __quota_error: 319 callbacks suppressed [ 257.572070][ T2655] Quota error (device loop4): remove_tree: Can't read quota data block 1 [ 257.599375][ T2655] EXT4-fs error (device loop4): ext4_release_dquot:6979: comm kworker/u8:6: Failed to release dquot type 0 [ 257.632078][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 257.664744][ T29] audit: type=1400 audit(1759339008.861:9341): avc: denied { read write } for pid=11301 comm="syz.2.2290" name="rdma_cm" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 257.690645][ T29] audit: type=1400 audit(1759339008.861:9342): avc: denied { open } for pid=11301 comm="syz.2.2290" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 257.730255][T11307] pim6reg: entered allmulticast mode [ 257.744442][T11306] pim6reg: left allmulticast mode [ 257.785584][ T29] audit: type=1326 audit(1759339008.981:9343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11312 comm="syz.2.2294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d55c9eec9 code=0x7ffc0000 [ 257.809707][ T29] audit: type=1326 audit(1759339008.981:9344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11312 comm="syz.2.2294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d55c9eec9 code=0x7ffc0000 [ 257.855272][ T29] audit: type=1326 audit(1759339008.981:9345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11312 comm="syz.2.2294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f3d55c9d97f code=0x7ffc0000 [ 257.879143][ T29] audit: type=1326 audit(1759339008.981:9346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11312 comm="syz.2.2294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d55c9eec9 code=0x7ffc0000 [ 257.903412][ T29] audit: type=1326 audit(1759339008.981:9347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11312 comm="syz.2.2294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3d55c9eec9 code=0x7ffc0000 [ 257.927687][ T29] audit: type=1326 audit(1759339008.981:9348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11312 comm="syz.2.2294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d55c9eec9 code=0x7ffc0000 [ 257.952109][ T29] audit: type=1326 audit(1759339008.981:9349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11312 comm="syz.2.2294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d55c9eec9 code=0x7ffc0000 [ 257.991574][T11316] netlink: 'syz.4.2295': attribute type 1 has an invalid length. [ 257.999628][T11316] netlink: 'syz.4.2295': attribute type 4 has an invalid length. [ 258.007454][T11316] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.2295'. [ 258.021487][T11316] netlink: 'syz.4.2295': attribute type 1 has an invalid length. [ 258.030585][T11316] netlink: 'syz.4.2295': attribute type 4 has an invalid length. [ 258.039111][T11316] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.2295'. [ 258.155554][T11329] loop1: detected capacity change from 0 to 736 [ 258.225124][T11330] loop2: detected capacity change from 0 to 1024 [ 258.234718][T11330] EXT4-fs: Ignoring removed mblk_io_submit option [ 258.241470][T11330] EXT4-fs: dax option not supported [ 259.039432][T11461] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2312'. [ 259.542075][T11478] loop0: detected capacity change from 0 to 736 [ 260.043799][T11485] loop4: detected capacity change from 0 to 736 [ 261.174677][T11518] loop2: detected capacity change from 0 to 1024 [ 261.186145][T11518] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 261.747907][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 261.775667][T11533] loop2: detected capacity change from 0 to 512 [ 261.803697][T11533] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 261.885595][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 261.917922][T11540] loop2: detected capacity change from 0 to 512 [ 261.925938][T11542] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 261.925968][T11540] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 261.935867][T11542] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 261.956363][T11540] EXT4-fs (loop2): 1 orphan inode deleted [ 261.962901][T11540] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 261.981150][T11540] ext4 filesystem being mounted at /441/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 262.026494][ T4050] EXT4-fs error (device loop2): ext4_release_dquot:6979: comm kworker/u8:8: Failed to release dquot type 1 [ 262.041999][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 262.798663][ T29] kauditd_printk_skb: 191 callbacks suppressed [ 262.798683][ T29] audit: type=1400 audit(1759339013.851:9540): avc: denied { allowed } for pid=11566 comm="syz.0.2345" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 262.825872][ T29] audit: type=1400 audit(1759339013.861:9541): avc: denied { create } for pid=11566 comm="syz.0.2345" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 262.848953][ T29] audit: type=1400 audit(1759339013.861:9542): avc: denied { map } for pid=11566 comm="syz.0.2345" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=33485 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 262.875559][ T29] audit: type=1400 audit(1759339013.871:9543): avc: denied { read write } for pid=11566 comm="syz.0.2345" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=33485 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 262.902357][ T29] audit: type=1400 audit(1759339013.871:9544): avc: denied { execmem } for pid=11568 comm="syz.4.2346" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 263.174980][ T29] audit: type=1400 audit(1759339014.361:9545): avc: denied { read } for pid=11566 comm="syz.0.2345" dev="nsfs" ino=4026532384 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 263.197017][ T29] audit: type=1400 audit(1759339014.361:9546): avc: denied { open } for pid=11566 comm="syz.0.2345" path="net:[4026532384]" dev="nsfs" ino=4026532384 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 263.220745][ T29] audit: type=1400 audit(1759339014.371:9547): avc: denied { create } for pid=11566 comm="syz.0.2345" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 263.374975][ T29] audit: type=1400 audit(1759339014.441:9548): avc: denied { create } for pid=11672 comm="syz.3.2347" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 263.394900][ T29] audit: type=1400 audit(1759339014.441:9549): avc: denied { setopt } for pid=11672 comm="syz.3.2347" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 263.759482][T11691] loop0: detected capacity change from 0 to 32768 [ 263.813108][T11691] loop0: p1 p3 < > [ 264.296533][T11705] loop4: detected capacity change from 0 to 736 [ 264.937123][T11814] loop2: detected capacity change from 0 to 512 [ 265.067578][T11814] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 265.097370][T11921] loop1: detected capacity change from 0 to 1024 [ 265.123860][T11921] EXT4-fs: Ignoring removed mblk_io_submit option [ 265.158752][T11921] EXT4-fs: dax option not supported [ 265.357695][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 266.033116][T11932] loop2: detected capacity change from 0 to 32768 [ 266.107074][T11932] loop2: p1 p3 < > [ 266.118187][T11949] loop4: detected capacity change from 0 to 736 [ 266.754946][T11963] loop0: detected capacity change from 0 to 8192 [ 266.806384][T11963] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 266.815016][T11963] FAT-fs (loop0): Filesystem has been set read-only [ 266.823739][T11963] netlink: 464 bytes leftover after parsing attributes in process `syz.0.2376'. [ 266.872387][T11970] loop0: detected capacity change from 0 to 512 [ 266.881487][T11970] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 266.936501][ T3299] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 266.993097][T11977] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 267.002245][T11977] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 267.024847][T11979] loop4: detected capacity change from 0 to 512 [ 267.033365][T11979] EXT4-fs: Ignoring removed nobh option [ 267.045733][T11979] EXT4-fs error (device loop4): ext4_orphan_get:1392: inode #15: comm syz.4.2381: iget: bad i_size value: 38620345925642 [ 267.070433][T11979] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.2381: couldn't read orphan inode 15 (err -117) [ 267.098399][T11979] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 267.129767][T11979] EXT4-fs (loop4): shut down requested (2) [ 267.152010][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 267.268740][T11986] loop4: detected capacity change from 0 to 1024 [ 267.278566][T11986] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 267.384362][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 267.420317][T12093] netlink: 'syz.4.2385': attribute type 1 has an invalid length. [ 267.428255][T12093] netlink: 'syz.4.2385': attribute type 4 has an invalid length. [ 267.436742][T12093] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.2385'. [ 267.446690][T12093] netlink: 'syz.4.2385': attribute type 1 has an invalid length. [ 267.454897][T12093] netlink: 'syz.4.2385': attribute type 4 has an invalid length. [ 267.462806][T12093] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.2385'. [ 267.805345][ T29] kauditd_printk_skb: 323 callbacks suppressed [ 267.805365][ T29] audit: type=1326 audit(1759339019.001:9873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12196 comm="syz.0.2388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f8f32275d67 code=0x7ffc0000 [ 267.837094][ T29] audit: type=1326 audit(1759339019.031:9874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12196 comm="syz.0.2388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f8f3221af79 code=0x7ffc0000 [ 267.863671][ T29] audit: type=1326 audit(1759339019.031:9875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12196 comm="syz.0.2388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f8f32275d67 code=0x7ffc0000 [ 267.889075][ T29] audit: type=1326 audit(1759339019.031:9876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12196 comm="syz.0.2388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f8f3221af79 code=0x7ffc0000 [ 267.913138][ T29] audit: type=1326 audit(1759339019.031:9877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12196 comm="syz.0.2388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=449 compat=0 ip=0x7f8f3227eec9 code=0x7ffc0000 [ 267.937664][ T29] audit: type=1326 audit(1759339019.061:9878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12196 comm="syz.0.2388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f8f32275d67 code=0x7ffc0000 [ 267.961788][ T29] audit: type=1326 audit(1759339019.061:9879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12196 comm="syz.0.2388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f8f3221af79 code=0x7ffc0000 [ 267.986704][ T29] audit: type=1326 audit(1759339019.061:9880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12196 comm="syz.0.2388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=449 compat=0 ip=0x7f8f3227eec9 code=0x7ffc0000 [ 268.012379][ T29] audit: type=1326 audit(1759339019.061:9881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12196 comm="syz.0.2388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f8f32275d67 code=0x7ffc0000 [ 268.036397][ T29] audit: type=1326 audit(1759339019.061:9882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12196 comm="syz.0.2388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f8f3221af79 code=0x7ffc0000 [ 268.214244][T12413] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2393'. [ 268.533699][T12418] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2395'. [ 268.643378][T12421] netlink: 'syz.0.2396': attribute type 1 has an invalid length. [ 268.651307][T12421] netlink: 'syz.0.2396': attribute type 4 has an invalid length. [ 268.659488][T12421] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.2396'. [ 268.670208][T12421] netlink: 'syz.0.2396': attribute type 1 has an invalid length. [ 268.678229][T12421] netlink: 'syz.0.2396': attribute type 4 has an invalid length. [ 268.686215][T12421] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.2396'. [ 268.763207][T12423] Restarting kernel threads ... [ 268.769070][T12423] Done restarting kernel threads. [ 268.792370][T12428] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 268.801581][T12428] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 269.006709][T12432] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 269.011965][T12431] team_slave_0: entered promiscuous mode [ 269.015838][T12432] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 269.022876][T12431] team_slave_0: left promiscuous mode [ 269.159148][T12538] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 269.168449][T12538] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 269.393479][T12541] serio: Serial port ptm0 [ 269.584644][T12547] netlink: 'syz.1.2407': attribute type 1 has an invalid length. [ 269.592921][T12547] netlink: 'syz.1.2407': attribute type 4 has an invalid length. [ 269.601020][T12547] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.2407'. [ 269.611284][T12547] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.2407'. [ 269.673209][T12550] Restarting kernel threads ... [ 269.678305][T12550] Done restarting kernel threads. [ 269.715312][T12562] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 269.724478][T12562] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 269.750273][T12558] loop2: detected capacity change from 0 to 512 [ 269.759398][T12558] EXT4-fs: Ignoring removed mblk_io_submit option [ 269.766777][T12558] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 269.784456][T12558] EXT4-fs (loop2): 1 truncate cleaned up [ 269.791212][T12558] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 269.838036][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 269.926960][T12678] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.2420'. [ 269.979981][T12682] loop2: detected capacity change from 0 to 512 [ 269.988020][T12682] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 270.004940][T12682] EXT4-fs (loop2): 1 orphan inode deleted [ 270.011780][T12682] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 270.026448][ T31] EXT4-fs error (device loop2): ext4_release_dquot:6979: comm kworker/u8:1: Failed to release dquot type 1 [ 270.038720][T12682] ext4 filesystem being mounted at /463/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 270.063341][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 270.079121][T12786] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 270.087907][T12786] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 270.243701][T12791] Restarting kernel threads ... [ 270.248972][T12791] Done restarting kernel threads. [ 270.674151][T12812] loop4: detected capacity change from 0 to 512 [ 270.693335][T12812] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 270.708346][T12812] EXT4-fs (loop4): 1 orphan inode deleted [ 270.715278][T12812] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 270.728108][ T2655] EXT4-fs error (device loop4): ext4_release_dquot:6979: comm kworker/u8:6: Failed to release dquot type 1 [ 270.773044][T12812] ext4 filesystem being mounted at /480/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 270.839746][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 270.948568][T12822] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 270.965993][T12824] loop4: detected capacity change from 0 to 512 [ 270.973458][T12822] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 270.983088][T12824] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 271.001426][T12824] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 271.099052][T12827] loop4: detected capacity change from 0 to 1024 [ 271.147274][T12827] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 271.233363][T12827] EXT4-fs (loop4): shut down requested (2) [ 271.266563][T12833] IPVS: sync thread started: state = MASTER, mcast_ifn = vcan0, syncid = 0, id = 0 [ 271.387533][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 271.510886][T12838] loop4: detected capacity change from 0 to 736 [ 271.695637][T12844] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 271.704408][T12844] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 271.823128][T12941] loop2: detected capacity change from 0 to 2048 [ 271.873286][T12941] Alternate GPT is invalid, using primary GPT. [ 271.879962][T12941] loop2: p2 p3 p7 [ 272.039184][T13061] loop0: detected capacity change from 0 to 512 [ 272.048150][T13061] EXT4-fs (loop0): orphan cleanup on readonly fs [ 272.061387][T13061] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #11: block 1728053262: comm syz.0.2451: lblock 0 mapped to illegal pblock 1728053262 (length 1) [ 272.083135][T13061] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 272.096548][T13061] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #15: comm syz.0.2451: corrupted inode contents [ 272.113450][T13064] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 272.113567][T13061] EXT4-fs error (device loop0): ext4_dirty_inode:6538: inode #15: comm syz.0.2451: mark_inode_dirty error [ 272.122249][T13064] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 272.148815][T13061] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #15: comm syz.0.2451: corrupted inode contents [ 272.165569][T13061] EXT4-fs error (device loop0): ext4_xattr_delete_inode:2991: inode #15: comm syz.0.2451: mark_inode_dirty error [ 272.177938][T13061] EXT4-fs error (device loop0): ext4_xattr_delete_inode:2994: inode #15: comm syz.0.2451: mark inode dirty (error -117) [ 272.191204][T13061] EXT4-fs warning (device loop0): ext4_evict_inode:274: xattr delete (err -117) [ 272.200713][T13061] EXT4-fs (loop0): 1 orphan inode deleted [ 272.207164][T13061] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 272.280536][ T3299] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 272.292868][T13067] __nla_validate_parse: 5 callbacks suppressed [ 272.292887][T13067] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.2453'. [ 272.308991][T13067] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.2453'. [ 272.965031][ T29] kauditd_printk_skb: 864 callbacks suppressed [ 272.965099][ T29] audit: type=1326 audit(1759339024.161:10745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13087 comm="syz.3.2459" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effe121eec9 code=0x7ffc0000 [ 273.012658][ T29] audit: type=1326 audit(1759339024.161:10746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13087 comm="syz.3.2459" exe="/root/syz-executor" sig=0 arch=c000003e syscall=173 compat=0 ip=0x7effe121eec9 code=0x7ffc0000 [ 273.039013][ T29] audit: type=1326 audit(1759339024.161:10747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13087 comm="syz.3.2459" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effe121eec9 code=0x7ffc0000 [ 273.063138][ T29] audit: type=1326 audit(1759339024.161:10748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13087 comm="syz.3.2459" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effe121eec9 code=0x7ffc0000 [ 273.128088][T13092] loop4: detected capacity change from 0 to 1024 [ 273.143684][T13096] loop2: detected capacity change from 0 to 512 [ 273.154886][ T29] audit: type=1400 audit(1759339024.281:10749): avc: denied { read write } for pid=13091 comm="syz.4.2461" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 273.179039][ T29] audit: type=1400 audit(1759339024.281:10750): avc: denied { open } for pid=13091 comm="syz.4.2461" path="/dev/ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 273.203193][ T29] audit: type=1400 audit(1759339024.281:10751): avc: denied { ioctl } for pid=13091 comm="syz.4.2461" path="/dev/ppp" dev="devtmpfs" ino=140 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 273.229280][ T29] audit: type=1400 audit(1759339024.331:10752): avc: denied { accept } for pid=13094 comm="syz.2.2462" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 273.250707][ T29] audit: type=1400 audit(1759339024.331:10753): avc: denied { kernel } for pid=13094 comm="syz.2.2462" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 273.271027][ T29] audit: type=1400 audit(1759339024.331:10754): avc: denied { open } for pid=13094 comm="syz.2.2462" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 273.369233][T13092] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 273.383079][T13096] EXT4-fs warning (device loop2): ext4_enable_quotas:7178: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 273.398640][T13105] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 273.432073][T13105] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 273.440320][T13096] EXT4-fs (loop2): mount failed [ 273.545313][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 273.594052][T13207] loop4: detected capacity change from 0 to 1024 [ 273.603318][T13207] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 273.640087][T13213] RDS: rds_bind could not find a transport for ::ffff:100.1.1.1, load rds_tcp or rds_rdma? [ 273.795183][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 273.838983][T13319] loop4: detected capacity change from 0 to 512 [ 273.874044][T13319] EXT4-fs warning (device loop4): ext4_enable_quotas:7178: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 273.889650][T13319] EXT4-fs (loop4): mount failed [ 273.926294][T13327] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 273.935838][T13327] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 274.038566][T13333] hub 2-0:1.0: USB hub found [ 274.043335][T13333] hub 2-0:1.0: 8 ports detected [ 274.523668][T13349] Restarting kernel threads ... [ 274.528943][T13349] Done restarting kernel threads. [ 274.670144][T13354] RDS: rds_bind could not find a transport for ::ffff:100.1.1.1, load rds_tcp or rds_rdma? [ 274.886476][T13465] netlink: 3 bytes leftover after parsing attributes in process `syz.4.2484'. [ 274.899728][T13465] batadv0: entered promiscuous mode [ 274.905211][T13465] batadv0: entered allmulticast mode [ 274.918846][T13467] loop0: detected capacity change from 0 to 736 [ 274.994149][T13476] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 275.003628][T13476] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 275.177311][T13585] RDS: rds_bind could not find a transport for ::ffff:100.1.1.1, load rds_tcp or rds_rdma? [ 276.200178][T13801] ref_ctr increment failed for inode: 0xa0a offset: 0x5 ref_ctr_offset: 0x1000 of mm: 0xffff8881041ded40 [ 276.321342][T13915] team_slave_0: entered promiscuous mode [ 276.328095][T13915] ipvlan0: entered promiscuous mode [ 276.334492][T13915] ipvlan0: left promiscuous mode [ 276.339726][T13915] team_slave_0: left promiscuous mode [ 276.375147][T13917] kernel profiling enabled (shift: 7) [ 276.462149][T13921] 8021q: adding VLAN 0 to HW filter on device bond1 [ 276.487846][T13921] bridge0: port 3(bond1) entered blocking state [ 276.494305][T13921] bridge0: port 3(bond1) entered disabled state [ 276.503138][T13921] bond1: entered allmulticast mode [ 276.509834][T13921] bond1: entered promiscuous mode [ 276.515828][T13921] bridge0: port 3(bond1) entered blocking state [ 276.522462][T13921] bridge0: port 3(bond1) entered forwarding state [ 276.535986][ T12] bridge0: port 3(bond1) entered disabled state [ 276.557027][T13930] loop0: detected capacity change from 0 to 512 [ 276.573521][T13930] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 276.598721][T13930] EXT4-fs (loop0): 1 orphan inode deleted [ 276.605351][T13930] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 276.618400][ T12] EXT4-fs error (device loop0): ext4_release_dquot:6979: comm kworker/u8:0: Failed to release dquot type 1 [ 276.631416][T13930] ext4 filesystem being mounted at /482/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 276.656072][ T3299] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 277.391343][T14054] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2516'. [ 277.680522][T14059] loop4: detected capacity change from 0 to 512 [ 277.687648][T14059] EXT4-fs: Mount option(s) incompatible with ext3 [ 277.869500][T14071] validate_nla: 18 callbacks suppressed [ 277.869519][T14071] netlink: 'syz.0.2523': attribute type 10 has an invalid length. [ 277.886187][T14071] 8021q: adding VLAN 0 to HW filter on device team0 [ 277.894781][T14071] bond0: (slave team0): Enslaving as an active interface with an up link [ 278.152685][ T29] kauditd_printk_skb: 633 callbacks suppressed [ 278.152766][ T29] audit: type=1400 audit(1759339029.321:11385): avc: denied { write } for pid=14175 comm="syz.0.2526" name="001" dev="devtmpfs" ino=162 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 278.494412][ T29] audit: type=1400 audit(1759339029.691:11386): avc: denied { read } for pid=14184 comm="syz.2.2528" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 278.537261][ T29] audit: type=1400 audit(1759339029.721:11387): avc: denied { create } for pid=14184 comm="syz.2.2528" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 278.557747][ T29] audit: type=1400 audit(1759339029.721:11388): avc: denied { write } for pid=14184 comm="syz.2.2528" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 278.577535][ T29] audit: type=1400 audit(1759339029.721:11389): avc: denied { connect } for pid=14184 comm="syz.2.2528" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 278.597799][ T29] audit: type=1400 audit(1759339029.721:11390): avc: denied { name_connect } for pid=14184 comm="syz.2.2528" dest=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 278.667581][ T29] audit: type=1400 audit(1759339029.731:11391): avc: denied { setopt } for pid=14184 comm="syz.2.2528" laddr=fe80::b lport=38149 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 278.811151][ T29] audit: type=1400 audit(1759339029.991:11392): avc: denied { bind } for pid=14199 comm="syz.3.2530" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 278.823714][T14302] pimreg: entered allmulticast mode [ 278.830964][ T29] audit: type=1400 audit(1759339029.991:11393): avc: denied { name_bind } for pid=14199 comm="syz.3.2530" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 278.838838][T14302] pimreg: left allmulticast mode [ 278.858935][ T29] audit: type=1400 audit(1759339029.991:11394): avc: denied { node_bind } for pid=14199 comm="syz.3.2530" saddr=::ffff:10.1.1.1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 278.902521][T14305] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 278.912510][T14305] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 278.980071][T14307] loop4: detected capacity change from 0 to 2048 [ 279.984186][T14427] loop2: detected capacity change from 0 to 512 [ 279.992041][T14427] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 280.096155][T14427] EXT4-fs (loop2): 1 orphan inode deleted [ 280.103413][T14427] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 280.116562][ T4314] EXT4-fs error (device loop2): ext4_release_dquot:6979: comm kworker/u8:9: Failed to release dquot type 1 [ 280.245202][T14427] ext4 filesystem being mounted at /486/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 280.378899][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 280.508489][T14559] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 280.539653][T14559] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 281.689910][T14772] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2557'. [ 281.769238][T14778] loop0: detected capacity change from 0 to 1024 [ 281.781007][T14778] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 281.795161][T14780] loop2: detected capacity change from 0 to 1024 [ 281.828194][T14780] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 281.845767][T14786] netlink: 'syz.1.2560': attribute type 39 has an invalid length. [ 282.164465][T14901] 9pnet_virtio: no channels available for device ÿÿÿÿ [ 282.164465][T14901] [ 282.193782][T14901] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2563'. [ 282.213100][T14903] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 282.226050][T14903] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2566'. [ 282.244643][ T3299] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 282.257425][T14903] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2566'. [ 282.345979][T14911] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 282.372765][T14911] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 282.415146][T14906] loop0: detected capacity change from 0 to 8192 [ 282.457884][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 282.490375][T14906] FAULT_INJECTION: forcing a failure. [ 282.490375][T14906] name failslab, interval 1, probability 0, space 0, times 0 [ 282.503402][T14906] CPU: 1 UID: 0 PID: 14906 Comm: wÞ¡ÿ Not tainted syzkaller #0 PREEMPT(voluntary) [ 282.503474][T14906] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 282.503486][T14906] Call Trace: [ 282.503493][T14906] [ 282.503502][T14906] __dump_stack+0x1d/0x30 [ 282.503529][T14906] dump_stack_lvl+0xe8/0x140 [ 282.503554][T14906] dump_stack+0x15/0x1b [ 282.503647][T14906] should_fail_ex+0x265/0x280 [ 282.503673][T14906] should_failslab+0x8c/0xb0 [ 282.503692][T14906] kmem_cache_alloc_noprof+0x50/0x310 [ 282.503775][T14906] ? audit_log_start+0x342/0x720 [ 282.503837][T14906] audit_log_start+0x342/0x720 [ 282.503946][T14906] ? kstrtouint+0x76/0xc0 [ 282.503973][T14906] audit_seccomp+0x48/0x100 [ 282.504009][T14906] ? __seccomp_filter+0x82d/0x1250 [ 282.504051][T14906] __seccomp_filter+0x83e/0x1250 [ 282.504163][T14906] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 282.504193][T14906] ? vfs_write+0x7e8/0x960 [ 282.504233][T14906] ? __rcu_read_unlock+0x4f/0x70 [ 282.504289][T14906] ? __fget_files+0x184/0x1c0 [ 282.504317][T14906] __secure_computing+0x82/0x150 [ 282.504350][T14906] syscall_trace_enter+0xcf/0x1e0 [ 282.504384][T14906] do_syscall_64+0xac/0x200 [ 282.504434][T14906] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 282.504462][T14906] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 282.504489][T14906] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 282.504584][T14906] RIP: 0033:0x7f8f3227eec9 [ 282.504603][T14906] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 282.504625][T14906] RSP: 002b:00007f8f30ce7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 282.504650][T14906] RAX: ffffffffffffffda RBX: 00007f8f324d5fa0 RCX: 00007f8f3227eec9 [ 282.504662][T14906] RDX: 0000000004009010 RSI: 0000200000000380 RDI: 000000000000000c [ 282.504673][T14906] RBP: 00007f8f30ce7090 R08: 0000000000000000 R09: 0000000000000000 [ 282.504686][T14906] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 282.504701][T14906] R13: 00007f8f324d6038 R14: 00007f8f324d5fa0 R15: 00007fff76b66848 [ 282.504726][T14906] [ 282.505767][T14906] rdma_rxe: rxe_newlink: failed to add dummy0 [ 283.394355][ T29] kauditd_printk_skb: 249 callbacks suppressed [ 283.394370][ T29] audit: type=1400 audit(1759339034.591:11641): avc: denied { sys_module } for pid=14922 comm="syz.0.2572" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 283.779278][ T29] audit: type=1400 audit(1759339034.971:11642): avc: denied { create } for pid=15178 comm="syz.2.2577" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 283.813052][T15179] loop2: detected capacity change from 0 to 764 [ 283.825868][ T29] audit: type=1400 audit(1759339035.001:11643): avc: denied { create } for pid=15143 comm="syz.4.2579" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 283.846269][ T29] audit: type=1400 audit(1759339035.021:11644): avc: denied { mounton } for pid=15180 comm="syz.0.2578" path="/496/file0" dev="tmpfs" ino=2668 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 283.907708][T15179] rock: directory entry would overflow storage [ 283.914497][T15179] rock: sig=0x4f50, size=4, remaining=3 [ 283.920626][T15179] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 283.929024][ T29] audit: type=1400 audit(1759339035.071:11645): avc: denied { create } for pid=15252 comm="syz.4.2581" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 283.949683][ T29] audit: type=1400 audit(1759339035.071:11646): avc: denied { mount } for pid=15178 comm="syz.2.2577" name="/" dev="loop2" ino=1792 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 283.973763][ T29] audit: type=1400 audit(1759339035.071:11647): avc: denied { write } for pid=15252 comm="syz.4.2581" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 283.999351][ T29] audit: type=1400 audit(1759339035.191:11648): avc: denied { read write } for pid=14939 comm="syz.1.2575" name="sg0" dev="devtmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 284.027915][ T29] audit: type=1400 audit(1759339035.191:11649): avc: denied { open } for pid=14939 comm="syz.1.2575" path="/dev/sg0" dev="devtmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 284.052941][ T29] audit: type=1400 audit(1759339035.191:11650): avc: denied { ioctl } for pid=14939 comm="syz.1.2575" path="/dev/sg0" dev="devtmpfs" ino=137 ioctlcmd=0x2285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 284.254201][T15269] loop2: detected capacity change from 0 to 512 [ 284.265947][T15269] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 284.295259][T15269] EXT4-fs (loop2): 1 orphan inode deleted [ 284.302079][T15269] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 284.315394][ T4314] EXT4-fs error (device loop2): ext4_release_dquot:6979: comm kworker/u8:9: Failed to release dquot type 1 [ 284.329936][T15269] ext4 filesystem being mounted at /492/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 284.405334][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 284.432854][T15377] RDS: rds_bind could not find a transport for ::ffff:100.1.1.1, load rds_tcp or rds_rdma? [ 284.732708][T15392] netlink: 'syz.2.2593': attribute type 4 has an invalid length. [ 284.761815][T15392] netlink: 'syz.2.2593': attribute type 4 has an invalid length. [ 284.786217][T15395] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2595'. [ 285.032392][T15508] loop4: detected capacity change from 0 to 512 [ 285.051763][T15510] loop2: detected capacity change from 0 to 512 [ 285.061271][T15508] EXT4-fs warning (device loop4): ext4_enable_quotas:7178: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 285.077734][T15510] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 285.101980][T15508] EXT4-fs (loop4): mount failed [ 285.134089][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 286.078809][T15538] loop4: detected capacity change from 0 to 1024 [ 286.095229][T15538] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 286.319461][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 286.812691][T15762] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2617'. [ 286.861671][T15772] loop0: detected capacity change from 0 to 1024 [ 286.868735][T15772] EXT4-fs: Ignoring removed mblk_io_submit option [ 286.875802][T15772] EXT4-fs: dax option not supported [ 286.918140][T15774] loop4: detected capacity change from 0 to 1024 [ 286.952901][T15774] EXT4-fs: Ignoring removed mblk_io_submit option [ 286.972647][T15774] EXT4-fs: dax option not supported [ 287.855127][T15812] vhci_hcd: invalid port number 96 [ 287.860450][T15812] vhci_hcd: default hub control req: 0314 vfffa i0060 l0 [ 287.891415][T15815] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2632'. [ 288.992517][ T29] kauditd_printk_skb: 95 callbacks suppressed [ 288.998951][ T29] audit: type=1400 audit(1759339040.181:11744): avc: denied { validate_trans } for pid=15934 comm="syz.4.2639" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 289.032719][ T29] audit: type=1400 audit(1759339040.221:11745): avc: denied { mount } for pid=15937 comm="syz.3.2640" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 289.078245][T15933] loop1: detected capacity change from 0 to 1024 [ 289.106431][T15933] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 289.164013][T16046] vhci_hcd: invalid port number 96 [ 289.169226][T16046] vhci_hcd: default hub control req: 0314 vfffa i0060 l0 [ 289.405108][T16155] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 289.412678][ T29] audit: type=1400 audit(1759339040.601:11746): avc: denied { read write } for pid=16154 comm="syz.4.2646" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 289.437854][ T29] audit: type=1400 audit(1759339040.601:11747): avc: denied { open } for pid=16154 comm="syz.4.2646" path="/dev/raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 289.461984][ T29] audit: type=1400 audit(1759339040.601:11748): avc: denied { ioctl } for pid=16154 comm="syz.4.2646" path="/dev/raw-gadget" dev="devtmpfs" ino=142 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 289.579339][T16155] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 289.607389][ T29] audit: type=1326 audit(1759339040.801:11749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16154 comm="syz.4.2646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f631c63eec9 code=0x7ffc0000 [ 289.631205][ T29] audit: type=1326 audit(1759339040.801:11750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16154 comm="syz.4.2646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=267 compat=0 ip=0x7f631c63eec9 code=0x7ffc0000 [ 289.655400][ T29] audit: type=1326 audit(1759339040.801:11751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16154 comm="syz.4.2646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f631c63eec9 code=0x7ffc0000 [ 289.679576][ T29] audit: type=1326 audit(1759339040.801:11752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16154 comm="syz.4.2646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f631c63eec9 code=0x7ffc0000 [ 289.703470][ T29] audit: type=1326 audit(1759339040.801:11753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16154 comm="syz.4.2646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f631c63eec9 code=0x7ffc0000 [ 289.999416][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 290.383491][T16178] vhci_hcd: invalid port number 96 [ 290.388699][T16178] vhci_hcd: default hub control req: 0314 vfffa i0060 l0 [ 290.499464][T16284] loop4: detected capacity change from 0 to 736 [ 291.480844][T16499] loop4: detected capacity change from 0 to 256 [ 291.514901][T16501] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2663'. [ 291.526052][T16499] msdos: Bad value for 'fmask' [ 291.614366][T16581] netlink: 14528 bytes leftover after parsing attributes in process `syz.1.2663'. [ 291.809830][T16606] loop0: detected capacity change from 0 to 512 [ 291.925176][T16606] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 291.950141][T16715] loop4: detected capacity change from 0 to 736 [ 292.237830][T16606] EXT4-fs (loop0): 1 orphan inode deleted [ 292.262868][ T2655] EXT4-fs error (device loop0): ext4_release_dquot:6979: comm kworker/u8:6: Failed to release dquot type 1 [ 292.286503][T16606] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 292.443935][T16606] ext4 filesystem being mounted at /504/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 292.744938][ T3299] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 292.899842][T16828] Ÿë: port 1(veth0_to_team) entered blocking state [ 292.906806][T16828] Ÿë: port 1(veth0_to_team) entered disabled state [ 292.984893][T16837] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2676'. [ 293.092773][T16828] veth0_to_team: entered allmulticast mode [ 293.575840][T16828] veth0_to_team: entered promiscuous mode [ 294.166171][ T29] kauditd_printk_skb: 149 callbacks suppressed [ 294.166187][ T29] audit: type=1400 audit(1759339045.361:11902): avc: denied { ioctl } for pid=16956 comm="syz.0.2682" path="socket:[36744]" dev="sockfs" ino=36744 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 294.233881][ T29] audit: type=1400 audit(1759339045.411:11903): avc: denied { create } for pid=16952 comm="syz.3.2681" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 294.261778][T17015] loop1: detected capacity change from 0 to 512 [ 294.269141][T17015] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 294.316988][T17015] EXT4-fs (loop1): 1 orphan inode deleted [ 294.327185][T16957] loop0: detected capacity change from 0 to 512 [ 294.333829][T17015] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 294.347245][ T2655] Quota error (device loop1): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 294.357235][ T2655] EXT4-fs error (device loop1): ext4_release_dquot:6979: comm kworker/u8:6: Failed to release dquot type 1 [ 294.393460][T17015] ext4 filesystem being mounted at /548/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 294.425895][T17070] loop2: detected capacity change from 0 to 512 [ 294.463869][T17070] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 294.482033][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 294.503294][T16957] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 294.527503][ T29] audit: type=1400 audit(1759339045.711:11904): avc: denied { add_name } for pid=17069 comm="syz.2.2687" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 294.549313][ T29] audit: type=1400 audit(1759339045.711:11905): avc: denied { create } for pid=17069 comm="syz.2.2687" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 294.607702][T17097] loop1: detected capacity change from 0 to 512 [ 294.650494][ T29] audit: type=1400 audit(1759339045.781:11906): avc: denied { read write } for pid=17069 comm="syz.2.2687" name="file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 294.674882][ T29] audit: type=1400 audit(1759339045.781:11907): avc: denied { open } for pid=17069 comm="syz.2.2687" path="/517/file1/file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 294.700030][ T29] audit: type=1400 audit(1759339045.801:11908): avc: denied { accept } for pid=17091 comm="syz.1.2689" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 294.721389][ T29] audit: type=1400 audit(1759339045.801:11909): avc: denied { kernel } for pid=17091 comm="syz.1.2689" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 294.741443][ T29] audit: type=1400 audit(1759339045.801:11910): avc: denied { open } for pid=17091 comm="syz.1.2689" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 294.765264][T17097] EXT4-fs warning (device loop1): ext4_enable_quotas:7178: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 294.805058][ T3299] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 294.823064][T17097] EXT4-fs (loop1): mount failed [ 295.049232][T17289] netlink: 209812 bytes leftover after parsing attributes in process `syz.4.2693'. [ 295.289424][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 295.419032][T17446] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 295.461462][T17460] loop4: detected capacity change from 0 to 512 [ 295.483989][T17460] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 295.484511][T17469] netlink: 'syz.1.2701': attribute type 1 has an invalid length. [ 295.502989][T17446] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 295.542067][T17469] 8021q: adding VLAN 0 to HW filter on device bond1 [ 295.577749][T17469] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2701'. [ 295.644190][T17469] bond1 (unregistering): Released all slaves [ 295.674661][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 296.729394][T17693] loop2: detected capacity change from 0 to 1024 [ 296.796147][T17693] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 296.866073][T16953] syz.3.2681 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=0 [ 296.880161][T16953] CPU: 0 UID: 0 PID: 16953 Comm: syz.3.2681 Not tainted syzkaller #0 PREEMPT(voluntary) [ 296.880193][T16953] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 296.880209][T16953] Call Trace: [ 296.880218][T16953] [ 296.880293][T16953] __dump_stack+0x1d/0x30 [ 296.880313][T16953] dump_stack_lvl+0xe8/0x140 [ 296.880476][T16953] dump_stack+0x15/0x1b [ 296.880495][T16953] dump_header+0x81/0x220 [ 296.880531][T16953] oom_kill_process+0x342/0x400 [ 296.880575][T16953] out_of_memory+0x979/0xb80 [ 296.880686][T16953] try_charge_memcg+0x5e6/0x9e0 [ 296.880729][T16953] obj_cgroup_charge_pages+0xa6/0x150 [ 296.880758][T16953] __memcg_kmem_charge_page+0x9f/0x170 [ 296.880811][T16953] __alloc_frozen_pages_noprof+0x188/0x360 [ 296.880917][T16953] alloc_pages_mpol+0xb3/0x250 [ 296.880967][T16953] alloc_pages_noprof+0x90/0x130 [ 296.880996][T16953] __vmalloc_node_range_noprof+0x6f2/0xe00 [ 296.881037][T16953] __kvmalloc_node_noprof+0x30f/0x4e0 [ 296.881064][T16953] ? ip_set_alloc+0x1f/0x30 [ 296.881118][T16953] ? ip_set_alloc+0x1f/0x30 [ 296.881137][T16953] ? __kmalloc_cache_noprof+0x189/0x320 [ 296.881212][T16953] ip_set_alloc+0x1f/0x30 [ 296.881232][T16953] hash_netiface_create+0x282/0x740 [ 296.881257][T16953] ? __pfx_hash_netiface_create+0x10/0x10 [ 296.881280][T16953] ip_set_create+0x3c9/0x960 [ 296.881360][T16953] ? __nla_parse+0x40/0x60 [ 296.881434][T16953] nfnetlink_rcv_msg+0x4c6/0x590 [ 296.881490][T16953] netlink_rcv_skb+0x123/0x220 [ 296.881513][T16953] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 296.881603][T16953] nfnetlink_rcv+0x16b/0x1690 [ 296.881638][T16953] ? nlmon_xmit+0x4f/0x60 [ 296.881678][T16953] ? consume_skb+0x49/0x150 [ 296.881699][T16953] ? nlmon_xmit+0x4f/0x60 [ 296.881730][T16953] ? dev_hard_start_xmit+0x3b0/0x3e0 [ 296.881829][T16953] ? __dev_queue_xmit+0x1200/0x2000 [ 296.881854][T16953] ? __dev_queue_xmit+0x182/0x2000 [ 296.881881][T16953] ? ref_tracker_free+0x37d/0x3e0 [ 296.881912][T16953] ? __netlink_deliver_tap+0x4dc/0x500 [ 296.881993][T16953] netlink_unicast+0x5bd/0x690 [ 296.882017][T16953] netlink_sendmsg+0x58b/0x6b0 [ 296.882045][T16953] ? __pfx_netlink_sendmsg+0x10/0x10 [ 296.882107][T16953] __sock_sendmsg+0x142/0x180 [ 296.882144][T16953] ____sys_sendmsg+0x31e/0x4e0 [ 296.882213][T16953] ___sys_sendmsg+0x17b/0x1d0 [ 296.882286][T16953] __x64_sys_sendmsg+0xd4/0x160 [ 296.882324][T16953] x64_sys_call+0x191e/0x3000 [ 296.882425][T16953] do_syscall_64+0xd2/0x200 [ 296.882458][T16953] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 296.882504][T16953] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 296.882541][T16953] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 296.882571][T16953] RIP: 0033:0x7effe121eec9 [ 296.882678][T16953] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 296.882703][T16953] RSP: 002b:00007effdfc87038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 296.882797][T16953] RAX: ffffffffffffffda RBX: 00007effe1475fa0 RCX: 00007effe121eec9 [ 296.882814][T16953] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000003 [ 296.882830][T16953] RBP: 00007effe12a1f91 R08: 0000000000000000 R09: 0000000000000000 [ 296.882846][T16953] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 296.882862][T16953] R13: 00007effe1476038 R14: 00007effe1475fa0 R15: 00007ffcb0ae1638 [ 296.882892][T16953] [ 297.219592][T16953] memory: usage 307200kB, limit 307200kB, failcnt 13635 [ 297.226979][T16953] memory+swap: usage 309800kB, limit 9007199254740988kB, failcnt 0 [ 297.235024][T16953] kmem: usage 296692kB, limit 9007199254740988kB, failcnt 0 [ 297.242789][T16953] Memory cgroup stats for /syz3: [ 297.243043][T16953] cache 9916416 [ 297.251682][T16953] rss 839680 [ 297.255040][T16953] shmem 9912320 [ 297.258605][T16953] mapped_file 9584640 [ 297.262989][T16953] dirty 4096 [ 297.266328][T16953] writeback 0 [ 297.269789][T16953] workingset_refault_anon 863 [ 297.274636][T16953] workingset_refault_file 4266 [ 297.279518][T16953] swap 2662400 [ 297.283285][T16953] swapcached 24576 [ 297.287219][T16953] pgpgin 426566 [ 297.290701][T16953] pgpgout 423939 [ 297.294547][T16953] pgfault 463155 [ 297.298978][T16953] pgmajfault 320 [ 297.302548][T16953] inactive_anon 1040384 [ 297.306862][T16953] active_anon 9715712 [ 297.310885][T16953] inactive_file 4096 [ 297.316660][T16953] active_file 0 [ 297.320137][T16953] unevictable 0 [ 297.323635][T16953] hierarchical_memory_limit 314572800 [ 297.329035][T16953] hierarchical_memsw_limit 9223372036854771712 [ 297.335343][T16953] total_cache 9916416 [ 297.339686][T16953] total_rss 839680 [ 297.343505][T16953] total_shmem 9912320 [ 297.347502][T16953] total_mapped_file 9584640 [ 297.352118][T16953] total_dirty 4096 [ 297.355981][T16953] total_writeback 0 [ 297.359809][T16953] total_workingset_refault_anon 863 [ 297.365127][T16953] total_workingset_refault_file 4266 [ 297.370612][T16953] total_swap 2662400 [ 297.374609][T16953] total_swapcached 24576 [ 297.379040][T16953] total_pgpgin 426566 [ 297.383146][T16953] total_pgpgout 423939 [ 297.387236][T16953] total_pgfault 463155 [ 297.391409][T16953] total_pgmajfault 320 [ 297.395761][T16953] total_inactive_anon 1040384 [ 297.400468][T16953] total_active_anon 9715712 [ 297.405059][T16953] total_inactive_file 4096 [ 297.409598][T16953] total_active_file 0 [ 297.413613][T16953] total_unevictable 0 [ 297.417736][T16953] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.522,pid=5219,uid=0 [ 297.432503][T16953] Memory cgroup out of memory: Killed process 5219 (syz.3.522) total-vm:93824kB, anon-rss:1272kB, file-rss:20736kB, shmem-rss:0kB, UID:0 pgtables:100kB oom_score_adj:1000 [ 297.451037][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 297.539615][T16953] syz.3.2681 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=0 [ 297.553808][T16953] CPU: 1 UID: 0 PID: 16953 Comm: syz.3.2681 Not tainted syzkaller #0 PREEMPT(voluntary) [ 297.553836][T16953] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 297.553848][T16953] Call Trace: [ 297.553856][T16953] [ 297.553864][T16953] __dump_stack+0x1d/0x30 [ 297.553918][T16953] dump_stack_lvl+0xe8/0x140 [ 297.553944][T16953] dump_stack+0x15/0x1b [ 297.553966][T16953] dump_header+0x81/0x220 [ 297.554057][T16953] oom_kill_process+0x342/0x400 [ 297.554111][T16953] out_of_memory+0x979/0xb80 [ 297.554140][T16953] try_charge_memcg+0x5e6/0x9e0 [ 297.554294][T16953] obj_cgroup_charge_pages+0xa6/0x150 [ 297.554331][T16953] __memcg_kmem_charge_page+0x9f/0x170 [ 297.554359][T16953] __alloc_frozen_pages_noprof+0x188/0x360 [ 297.554392][T16953] alloc_pages_mpol+0xb3/0x250 [ 297.554458][T16953] alloc_pages_noprof+0x90/0x130 [ 297.554494][T16953] __vmalloc_node_range_noprof+0x6f2/0xe00 [ 297.554546][T16953] __kvmalloc_node_noprof+0x30f/0x4e0 [ 297.554637][T16953] ? ip_set_alloc+0x1f/0x30 [ 297.554661][T16953] ? ip_set_alloc+0x1f/0x30 [ 297.554685][T16953] ? __kmalloc_cache_noprof+0x189/0x320 [ 297.554718][T16953] ip_set_alloc+0x1f/0x30 [ 297.554740][T16953] hash_netiface_create+0x282/0x740 [ 297.554808][T16953] ? __pfx_hash_netiface_create+0x10/0x10 [ 297.554837][T16953] ip_set_create+0x3c9/0x960 [ 297.554880][T16953] ? __nla_parse+0x40/0x60 [ 297.554911][T16953] nfnetlink_rcv_msg+0x4c6/0x590 [ 297.555005][T16953] netlink_rcv_skb+0x123/0x220 [ 297.555029][T16953] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 297.555103][T16953] nfnetlink_rcv+0x16b/0x1690 [ 297.555144][T16953] ? nlmon_xmit+0x4f/0x60 [ 297.555172][T16953] ? consume_skb+0x49/0x150 [ 297.555196][T16953] ? nlmon_xmit+0x4f/0x60 [ 297.555254][T16953] ? dev_hard_start_xmit+0x3b0/0x3e0 [ 297.555287][T16953] ? __dev_queue_xmit+0x1200/0x2000 [ 297.555385][T16953] ? __dev_queue_xmit+0x182/0x2000 [ 297.555418][T16953] ? ref_tracker_free+0x37d/0x3e0 [ 297.555456][T16953] ? __netlink_deliver_tap+0x4dc/0x500 [ 297.555492][T16953] netlink_unicast+0x5bd/0x690 [ 297.555531][T16953] netlink_sendmsg+0x58b/0x6b0 [ 297.555560][T16953] ? __pfx_netlink_sendmsg+0x10/0x10 [ 297.555593][T16953] __sock_sendmsg+0x142/0x180 [ 297.555634][T16953] ____sys_sendmsg+0x31e/0x4e0 [ 297.555677][T16953] ___sys_sendmsg+0x17b/0x1d0 [ 297.555724][T16953] __x64_sys_sendmsg+0xd4/0x160 [ 297.555774][T16953] x64_sys_call+0x191e/0x3000 [ 297.555803][T16953] do_syscall_64+0xd2/0x200 [ 297.555896][T16953] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 297.555969][T16953] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 297.556007][T16953] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 297.556102][T16953] RIP: 0033:0x7effe121eec9 [ 297.556123][T16953] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 297.556146][T16953] RSP: 002b:00007effdfc87038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 297.556166][T16953] RAX: ffffffffffffffda RBX: 00007effe1475fa0 RCX: 00007effe121eec9 [ 297.556178][T16953] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000003 [ 297.556189][T16953] RBP: 00007effe12a1f91 R08: 0000000000000000 R09: 0000000000000000 [ 297.556202][T16953] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 297.556278][T16953] R13: 00007effe1476038 R14: 00007effe1475fa0 R15: 00007ffcb0ae1638 [ 297.556310][T16953] [ 297.556358][T16953] memory: usage 307200kB, limit 307200kB, failcnt 13746 [ 297.616174][T16953] memory+swap: usage 309648kB, limit 9007199254740988kB, failcnt 0 [ 297.911231][T16953] kmem: usage 296424kB, limit 9007199254740988kB, failcnt 0 [ 297.919465][T16953] Memory cgroup stats for /syz3: [ 297.942769][T16953] cache 10194944 [ 297.951711][T16953] rss 839680 [ 297.955030][T16953] shmem 9912320 [ 297.958511][T16953] mapped_file 9646080 [ 297.962930][T16953] dirty 0 [ 297.966070][T16953] writeback 0 [ 297.969532][T16953] workingset_refault_anon 863 [ 297.974517][T16953] workingset_refault_file 4335 [ 297.979377][T16953] swap 2506752 [ 297.982913][T16953] swapcached 20480 [ 297.986830][T16953] pgpgin 426635 [ 297.990327][T16953] pgpgout 423941 [ 297.994018][T16953] pgfault 463161 [ 297.997683][T16953] pgmajfault 321 [ 298.001245][T16953] inactive_anon 1040384 [ 298.005527][T16953] active_anon 9711616 [ 298.009695][T16953] inactive_file 0 [ 298.013419][T16953] active_file 282624 [ 298.017589][T16953] unevictable 0 [ 298.021146][T16953] hierarchical_memory_limit 314572800 [ 298.026663][T16953] hierarchical_memsw_limit 9223372036854771712 [ 298.033142][T16953] total_cache 10194944 [ 298.037371][T16953] total_rss 839680 [ 298.041456][T16953] total_shmem 9912320 [ 298.045688][T16953] total_mapped_file 9646080 [ 298.050311][T16953] total_dirty 0 [ 298.053847][T16953] total_writeback 0 [ 298.057853][T16953] total_workingset_refault_anon 863 [ 298.063134][T16953] total_workingset_refault_file 4335 [ 298.068521][T16953] total_swap 2506752 [ 298.072493][T16953] total_swapcached 20480 [ 298.077034][T16953] total_pgpgin 426635 [ 298.081180][T16953] total_pgpgout 423941 [ 298.085412][T16953] total_pgfault 463161 [ 298.089497][T16953] total_pgmajfault 321 [ 298.093788][T16953] total_inactive_anon 1040384 [ 298.098620][T16953] total_active_anon 9711616 [ 298.103406][T16953] total_inactive_file 0 [ 298.107672][T16953] total_active_file 282624 [ 298.112281][T16953] total_unevictable 0 [ 298.116423][T16953] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.1924,pid=9597,uid=0 [ 298.131329][T16953] Memory cgroup out of memory: Killed process 9597 (syz.3.1924) total-vm:93956kB, anon-rss:1308kB, file-rss:20736kB, shmem-rss:0kB, UID:0 pgtables:100kB oom_score_adj:1000 [ 298.212917][T18124] loop1: detected capacity change from 0 to 1024 [ 298.253328][T18124] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 298.298505][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 298.591865][T18139] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2725'. [ 298.726468][T18256] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 298.761429][T18256] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 298.853199][T18265] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 298.861922][T18265] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 298.871559][T18263] loop4: detected capacity change from 0 to 512 [ 298.884040][T18263] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 299.104319][T18263] EXT4-fs (loop4): 1 orphan inode deleted [ 299.185151][T18263] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 299.203183][T17455] __quota_error: 121 callbacks suppressed [ 299.203200][T17455] Quota error (device loop4): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 299.206847][ T29] audit: type=1400 audit(1759339050.401:12031): avc: denied { create } for pid=18253 comm="syz.0.2731" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 299.209139][T17455] EXT4-fs error (device loop4): ext4_release_dquot:6979: comm kworker/u8:17: Failed to release dquot type 1 [ 299.233238][T18263] ext4 filesystem being mounted at /570/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 299.241795][ T29] audit: type=1400 audit(1759339050.431:12032): avc: denied { mount } for pid=18262 comm="syz.4.2735" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 299.334261][ T29] audit: type=1400 audit(1759339050.451:12033): avc: denied { read write } for pid=18262 comm="syz.4.2735" name="loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 299.358889][ T29] audit: type=1400 audit(1759339050.451:12034): avc: denied { open } for pid=18262 comm="syz.4.2735" path="/dev/loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 299.402098][ T29] audit: type=1326 audit(1759339050.591:12035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18275 comm="syz.3.2737" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effe121eec9 code=0x7ffc0000 [ 299.426886][ T29] audit: type=1326 audit(1759339050.591:12036): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18275 comm="syz.3.2737" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effe121eec9 code=0x7ffc0000 [ 299.450744][ T29] audit: type=1326 audit(1759339050.591:12037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18275 comm="syz.3.2737" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7effe121eec9 code=0x7ffc0000 [ 299.474792][ T29] audit: type=1326 audit(1759339050.591:12038): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18275 comm="syz.3.2737" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effe121eec9 code=0x7ffc0000 [ 299.498970][ T29] audit: type=1326 audit(1759339050.591:12039): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18277 comm="syz.3.2737" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7effe1251785 code=0x7ffc0000 [ 299.525075][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 299.548115][T18279] loop1: detected capacity change from 0 to 512 [ 299.556008][T18279] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 299.584651][T18279] EXT4-fs (loop1): 1 orphan inode deleted [ 299.593324][T18279] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 299.606438][ T12] EXT4-fs error (device loop1): ext4_release_dquot:6979: comm kworker/u8:0: Failed to release dquot type 1 [ 299.625947][T18279] ext4 filesystem being mounted at /559/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 299.655753][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 299.730812][T18367] loop1: detected capacity change from 0 to 512 [ 299.758868][T18367] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 299.775162][T18285] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2740'. [ 300.042489][T18513] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 300.051307][T18513] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 300.581982][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 300.768714][T18536] loop4: detected capacity change from 0 to 512 [ 300.778743][T18536] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 300.866041][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 300.969421][T18553] loop2: detected capacity change from 0 to 512 [ 300.998374][T18553] EXT4-fs warning (device loop2): ext4_enable_quotas:7178: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 301.014228][T18553] EXT4-fs (loop2): mount failed [ 301.038835][T18556] loop4: detected capacity change from 0 to 1024 [ 301.046407][T18556] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 301.110743][T18563] bridge0: entered promiscuous mode [ 301.160316][T18565] loop4: detected capacity change from 0 to 1024 [ 301.170076][T18565] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 301.311174][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 301.526600][T18772] loop0: detected capacity change from 0 to 1024 [ 301.537136][T18772] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 301.659028][T18789] openvswitch: netlink: Message has 6 unknown bytes. [ 301.667922][T18783] Ÿë: port 1(veth0_to_team) entered blocking state [ 301.674718][T18783] Ÿë: port 1(veth0_to_team) entered disabled state [ 301.681822][T18789] loop4: detected capacity change from 0 to 1024 [ 301.682388][T18783] veth0_to_team: entered allmulticast mode [ 301.689890][T18789] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 301.695933][T18783] veth0_to_team: entered promiscuous mode [ 301.895606][ T3299] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 301.960967][T18803] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=18803 comm=syz.4.2784 [ 302.451336][T18924] Ÿë: port 1(veth0_to_team) entered blocking state [ 302.458078][T18924] Ÿë: port 1(veth0_to_team) entered disabled state [ 302.498409][T18924] veth0_to_team: entered allmulticast mode [ 302.523920][T18924] veth0_to_team: entered promiscuous mode [ 302.812461][T18942] loop4: detected capacity change from 0 to 512 [ 302.849859][T18942] EXT4-fs warning (device loop4): ext4_enable_quotas:7178: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 302.885428][T18942] EXT4-fs (loop4): mount failed [ 303.099790][T18956] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 303.108734][T18956] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 303.241384][T18962] RDS: rds_bind could not find a transport for ::ffff:100.1.1.1, load rds_tcp or rds_rdma? [ 303.473548][T18969] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2802'. [ 304.250089][T19101] RDS: rds_bind could not find a transport for ::ffff:100.1.1.1, load rds_tcp or rds_rdma? [ 304.392682][ T29] kauditd_printk_skb: 1150 callbacks suppressed [ 304.392700][ T29] audit: type=1400 audit(1759339055.581:13187): avc: denied { create } for pid=19210 comm="syz.1.2816" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 304.426366][ T29] audit: type=1400 audit(1759339055.621:13188): avc: denied { connect } for pid=19210 comm="syz.1.2816" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 304.454023][ T29] audit: type=1400 audit(1759339055.641:13189): avc: denied { ioctl } for pid=19210 comm="syz.1.2816" path="socket:[38538]" dev="sockfs" ino=38538 ioctlcmd=0xb100 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 304.479341][ T29] audit: type=1400 audit(1759339055.641:13190): avc: denied { create } for pid=19210 comm="syz.1.2816" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 304.499561][ T29] audit: type=1400 audit(1759339055.651:13191): avc: denied { connect } for pid=19210 comm="syz.1.2816" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 304.507738][T19209] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2815'. [ 304.520698][ T29] audit: type=1400 audit(1759339055.651:13192): avc: denied { setopt } for pid=19210 comm="syz.1.2816" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 304.661717][T19215] loop2: detected capacity change from 0 to 512 [ 304.667952][ T29] audit: type=1326 audit(1759339055.851:13193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19214 comm="syz.2.2818" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d55c9eec9 code=0x7ffc0000 [ 304.692481][ T29] audit: type=1326 audit(1759339055.851:13194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19214 comm="syz.2.2818" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d55c9eec9 code=0x7ffc0000 [ 304.754639][T19215] Quota error (device loop2): v2_read_file_info: Block with free entry 4278190085 out of range (1, 6). [ 304.889258][ T29] audit: type=1400 audit(1759339056.081:13195): avc: denied { bind } for pid=19319 comm="syz.0.2819" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 304.910393][T19215] EXT4-fs warning (device loop2): ext4_enable_quotas:7178: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 304.934743][T19327] loop0: detected capacity change from 0 to 512 [ 304.982138][T19215] EXT4-fs (loop2): mount failed [ 305.011764][T19327] EXT4-fs: inline encryption not supported [ 305.038640][T19327] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 305.113721][T19327] EXT4-fs (loop0): 1 truncate cleaned up [ 305.125569][T19327] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 305.206067][T19327] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 305.525985][T19444] loop2: detected capacity change from 0 to 512 [ 305.533464][T19444] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 305.552478][T19438] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2824'. [ 305.554465][T19444] EXT4-fs (loop2): 1 orphan inode deleted [ 305.578488][T19444] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 305.591843][ T12] EXT4-fs error (device loop2): ext4_release_dquot:6979: comm kworker/u8:0: Failed to release dquot type 1 [ 305.613030][T19444] ext4 filesystem being mounted at /547/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 305.712501][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 305.886718][T19462] netlink: 60 bytes leftover after parsing attributes in process `wÞ£ÿ'. [ 305.905163][T19462] IPVS: Unknown mcast interface: vetN1_ma [ 306.024989][T19439] chnl_net:caif_netlink_parms(): no params data found [ 306.110295][T19473] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 306.118916][T19473] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 306.161844][T19439] bridge0: port 1(bridge_slave_0) entered blocking state [ 306.169181][T19439] bridge0: port 1(bridge_slave_0) entered disabled state [ 306.182848][T19439] bridge_slave_0: entered allmulticast mode [ 306.196755][T19439] bridge_slave_0: entered promiscuous mode [ 306.211347][T19439] bridge0: port 2(bridge_slave_1) entered blocking state [ 306.218507][T19439] bridge0: port 2(bridge_slave_1) entered disabled state [ 306.239351][T19439] bridge_slave_1: entered allmulticast mode [ 306.250427][T19439] bridge_slave_1: entered promiscuous mode [ 306.286432][T19439] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 306.304551][T19439] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 306.343789][T19439] team0: Port device team_slave_0 added [ 306.361251][T19439] team0: Port device team_slave_1 added [ 306.399190][T19439] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 306.406327][T19439] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 306.432792][T19439] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 306.455076][ T12] smc: removing ib device syz1 [ 306.461366][T19439] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 306.468437][T19439] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 306.494413][T19439] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 306.566653][ T10] syz1: Port: 1 Link DOWN [ 306.595880][T19439] hsr_slave_0: entered promiscuous mode [ 306.602233][T19439] hsr_slave_1: entered promiscuous mode [ 306.608414][T19439] debugfs: 'hsr0' already exists in 'hsr' [ 306.614353][T19439] Cannot create hsr debugfs directory [ 306.784786][T19439] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 306.879319][T19439] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 306.945298][T19439] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 307.031771][T19439] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 307.105213][T19519] loop2: detected capacity change from 0 to 256 [ 307.165036][T19519] loop2: detected capacity change from 0 to 1024 [ 307.274362][T19519] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 307.285526][T19519] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 307.297482][T19519] JBD2: no valid journal superblock found [ 307.303421][T19519] EXT4-fs (loop2): Could not load journal inode [ 307.332469][T19439] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 307.354906][T19439] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 307.437755][T19439] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 307.496064][T19439] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 307.636193][T19512] Set syz1 is full, maxelem 65536 reached [ 307.716993][T19439] 8021q: adding VLAN 0 to HW filter on device bond0 [ 307.737762][T19439] 8021q: adding VLAN 0 to HW filter on device team0 [ 307.752444][ T2655] bridge0: port 1(bridge_slave_0) entered blocking state [ 307.759590][ T2655] bridge0: port 1(bridge_slave_0) entered forwarding state [ 307.794685][T19439] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 307.805315][T19439] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 307.818818][ T2655] bridge0: port 2(bridge_slave_1) entered blocking state [ 307.826015][ T2655] bridge0: port 2(bridge_slave_1) entered forwarding state [ 307.854711][T19558] loop0: detected capacity change from 0 to 1024 [ 307.861530][T19558] EXT4-fs: quotafile must be on filesystem root [ 307.877136][T19558] loop0: detected capacity change from 0 to 512 [ 307.893841][T19558] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 307.902108][T19558] EXT4-fs (loop0): orphan cleanup on readonly fs [ 307.917241][T19558] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #16: comm syz.0.2858: corrupted inode contents [ 307.927045][T19439] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 307.937205][T19558] EXT4-fs error (device loop0): ext4_dirty_inode:6538: inode #16: comm syz.0.2858: mark_inode_dirty error [ 307.949846][T19558] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #16: comm syz.0.2858: corrupted inode contents [ 307.962263][T19558] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #16: comm syz.0.2858: mark_inode_dirty error [ 307.974562][T19558] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #16: comm syz.0.2858: corrupted inode contents [ 307.988210][T19558] EXT4-fs error (device loop0) in ext4_orphan_del:305: Corrupt filesystem [ 308.000324][T19558] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #16: comm syz.0.2858: corrupted inode contents [ 308.016240][T19558] EXT4-fs error (device loop0): ext4_truncate:4666: inode #16: comm syz.0.2858: mark_inode_dirty error [ 308.028354][T19558] EXT4-fs error (device loop0) in ext4_process_orphan:347: Corrupt filesystem [ 308.038066][T19558] EXT4-fs (loop0): 1 truncate cleaned up [ 308.050902][T17449] EXT4-fs error (device loop0): ext4_release_dquot:6979: comm kworker/u8:16: Failed to release dquot type 1 [ 308.064009][T19558] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 308.077442][T19558] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 308.516106][T19439] veth0_vlan: entered promiscuous mode [ 308.524683][T19439] veth1_vlan: entered promiscuous mode [ 308.548892][T19439] veth0_macvtap: entered promiscuous mode [ 308.565053][T19439] veth1_macvtap: entered promiscuous mode [ 308.586143][T19439] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 308.605049][T19439] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 308.629953][ T564] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 308.640068][ T564] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 308.649771][ T564] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 308.674014][T17449] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 309.611385][ T29] kauditd_printk_skb: 180 callbacks suppressed [ 309.611403][ T29] audit: type=1326 audit(1759339060.801:13374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19588 comm="syz.0.2864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f8f3227eec9 code=0x7ffc0000 [ 309.693920][T19609] vhci_hcd: invalid port number 96 [ 309.699091][T19609] vhci_hcd: default hub control req: 0314 vfffa i0060 l0 [ 309.754459][ T29] audit: type=1326 audit(1759339060.841:13375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19588 comm="syz.0.2864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f3227eec9 code=0x7ffc0000 [ 309.779607][ T29] audit: type=1326 audit(1759339060.841:13376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19588 comm="syz.0.2864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f3227eec9 code=0x7ffc0000 [ 309.804801][ T29] audit: type=1326 audit(1759339060.841:13377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19588 comm="syz.0.2864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=311 compat=0 ip=0x7f8f3227eec9 code=0x7ffc0000 [ 309.829148][ T29] audit: type=1326 audit(1759339060.881:13378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19597 comm="syz.4.2821" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c8d6feec9 code=0x7ffc0000 [ 309.853744][ T29] audit: type=1326 audit(1759339060.881:13379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19597 comm="syz.4.2821" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c8d6feec9 code=0x7ffc0000 [ 309.905299][ T29] audit: type=1326 audit(1759339061.101:13380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19597 comm="syz.4.2821" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3c8d6feec9 code=0x7ffc0000 [ 309.952730][ T29] audit: type=1326 audit(1759339061.101:13381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19597 comm="syz.4.2821" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c8d6feec9 code=0x7ffc0000 [ 309.978489][ T29] audit: type=1326 audit(1759339061.101:13382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19597 comm="syz.4.2821" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c8d6feec9 code=0x7ffc0000 [ 309.992958][T19591] loop0: detected capacity change from 0 to 32768 [ 310.003930][ T29] audit: type=1326 audit(1759339061.131:13383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19597 comm="syz.4.2821" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3c8d6feec9 code=0x7ffc0000 [ 310.142007][T19591] loop0: p1 p3 < > [ 311.036768][T19670] loop0: detected capacity change from 0 to 1024 [ 311.059472][T19670] EXT4-fs: Ignoring removed mblk_io_submit option [ 311.086263][T19670] EXT4-fs: dax option not supported [ 311.092147][T19672] loop2: detected capacity change from 0 to 512 [ 311.130474][T19672] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 311.184343][T19672] EXT4-fs (loop2): 1 orphan inode deleted [ 311.191805][T19672] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 311.206217][ T2655] EXT4-fs error (device loop2): ext4_release_dquot:6979: comm kworker/u8:6: Failed to release dquot type 1 [ 311.218860][T19672] ext4 filesystem being mounted at /568/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 311.246866][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 311.258363][T19681] loop4: detected capacity change from 0 to 2048 [ 311.298211][T19681] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 311.310032][T19688] loop2: detected capacity change from 0 to 1024 [ 311.317325][T19688] EXT4-fs: Ignoring removed mblk_io_submit option [ 311.324400][T19688] EXT4-fs: dax option not supported [ 311.349587][T19439] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz-executor: bg 0: block 234: padding at end of block bitmap is not set [ 311.365531][T19439] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 311.383318][T19439] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 312.136671][T19721] loop1: detected capacity change from 0 to 8192 [ 312.178975][T19725] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 312.187618][T19725] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 312.217249][T19721] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 312.226317][T19721] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 314.210296][T19789] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2925'. [ 314.273405][T19796] bridge0: port 1(bridge_slave_0) entered disabled state [ 314.296258][T19796] bridge0: port 2(bridge_slave_1) entered disabled state [ 314.442437][T19750] loop1: detected capacity change from 0 to 32768 [ 314.541324][T19750] loop1: p1 p3 < > [ 314.613426][ T29] kauditd_printk_skb: 301 callbacks suppressed [ 314.613444][ T29] audit: type=1400 audit(1759339065.811:13684): avc: denied { firmware_load } for pid=19817 comm="syz.4.2936" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 314.702691][ T29] audit: type=1400 audit(1759339065.871:13685): avc: denied { read write } for pid=19815 comm="syz.0.2935" name="rdma_cm" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 314.727605][ T29] audit: type=1400 audit(1759339065.871:13686): avc: denied { open } for pid=19815 comm="syz.0.2935" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 314.845206][T19819] loop0: detected capacity change from 0 to 8192 [ 314.922527][T19821] loop2: detected capacity change from 0 to 8192 [ 315.006271][ T29] audit: type=1326 audit(1759339066.201:13687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19826 comm="syz.3.2937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effe121eec9 code=0x7ffc0000 [ 315.030340][ T29] audit: type=1326 audit(1759339066.201:13688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19826 comm="syz.3.2937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effe121eec9 code=0x7ffc0000 [ 315.215511][T19833] loop1: detected capacity change from 0 to 2048 [ 315.259836][T19833] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 315.269277][ T29] audit: type=1326 audit(1759339066.251:13689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19826 comm="syz.3.2937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=242 compat=0 ip=0x7effe121eec9 code=0x7ffc0000 [ 315.296621][ T29] audit: type=1326 audit(1759339066.251:13690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19826 comm="syz.3.2937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effe121eec9 code=0x7ffc0000 [ 315.320388][ T29] audit: type=1326 audit(1759339066.251:13691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19826 comm="syz.3.2937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effe121eec9 code=0x7ffc0000 [ 315.344169][ T29] audit: type=1400 audit(1759339066.351:13692): avc: denied { bind } for pid=19832 comm="syz.1.2938" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 315.363982][ T29] audit: type=1400 audit(1759339066.351:13693): avc: denied { name_bind } for pid=19832 comm="syz.1.2938" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 315.393752][T19833] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 315.518030][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 315.681143][T19864] loop1: detected capacity change from 0 to 1024 [ 315.906446][T19864] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 316.286226][T19879] loop2: detected capacity change from 0 to 512 [ 316.293455][T19879] msdos: Unknown parameter 'sodots' [ 316.661614][T19887] netlink: 'syz.3.2956': attribute type 16 has an invalid length. [ 316.669540][T19887] netlink: 'syz.3.2956': attribute type 17 has an invalid length. [ 316.742763][T19887] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 316.873442][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 316.931166][T19894] loop2: detected capacity change from 0 to 2048 [ 317.044158][T19894] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 317.183507][T19894] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 317.473465][T19911] chnl_net:caif_netlink_parms(): no params data found [ 317.660256][T19911] bridge0: port 1(bridge_slave_0) entered blocking state [ 317.667668][T19911] bridge0: port 1(bridge_slave_0) entered disabled state [ 317.695975][T19937] loop2: detected capacity change from 0 to 512 [ 317.719217][T19911] bridge_slave_0: entered allmulticast mode [ 317.773262][T19911] bridge_slave_0: entered promiscuous mode [ 317.814335][T19911] bridge0: port 2(bridge_slave_1) entered blocking state [ 317.821642][T19911] bridge0: port 2(bridge_slave_1) entered disabled state [ 317.836698][T19911] bridge_slave_1: entered allmulticast mode [ 317.845470][T19937] EXT4-fs warning (device loop2): ext4_enable_quotas:7178: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 317.861825][T19911] bridge_slave_1: entered promiscuous mode [ 317.886199][T19937] EXT4-fs (loop2): mount failed [ 317.914296][T19911] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 317.942407][T19911] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 318.003679][T19911] team0: Port device team_slave_0 added [ 318.022532][T19911] team0: Port device team_slave_1 added [ 318.180697][T19946] Invalid option length (1048484) for dns_resolver key [ 318.189492][T19948] netlink: 460 bytes leftover after parsing attributes in process `syz.4.2973'. [ 318.199259][T19948] netlink: 460 bytes leftover after parsing attributes in process `syz.4.2973'. [ 318.208335][T19948] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2973'. [ 318.218144][T19911] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 318.225300][T19911] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 318.251604][T19911] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 318.291945][T19946] team_slave_0: entered promiscuous mode [ 318.297867][T19946] team_slave_1: entered promiscuous mode [ 318.304323][T19946] dummy0: entered promiscuous mode [ 318.316741][T19953] RDS: rds_bind could not find a transport for ::ffff:100.1.1.1, load rds_tcp or rds_rdma? [ 318.319980][T19946] vlan0: entered promiscuous mode [ 318.332349][T19946] team0: entered promiscuous mode [ 318.338324][T19946] vlan2: entered promiscuous mode [ 318.407120][T19911] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 318.414218][T19911] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 318.440475][T19911] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 318.555518][T19911] hsr_slave_0: entered promiscuous mode [ 318.561817][T19911] hsr_slave_1: entered promiscuous mode [ 318.571176][T19911] debugfs: 'hsr0' already exists in 'hsr' [ 318.577308][T19911] Cannot create hsr debugfs directory [ 318.619571][T19965] loop2: detected capacity change from 0 to 1024 [ 318.630919][T19965] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 318.675850][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 318.704582][T19911] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 318.715018][T19911] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 318.770175][T19971] loop2: detected capacity change from 0 to 1024 [ 318.781464][T19971] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 318.814729][T19911] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 318.825113][T19911] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 318.876963][T19911] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 318.887508][T19911] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 319.034465][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 319.046596][T19911] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.057088][T19911] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 319.142438][T19983] loop2: detected capacity change from 0 to 512 [ 319.183767][T19983] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 319.193298][T19911] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 319.205139][T19911] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 319.224884][T19911] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 319.244998][T19911] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 319.340012][T19911] 8021q: adding VLAN 0 to HW filter on device bond0 [ 319.365391][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 319.365730][T19911] 8021q: adding VLAN 0 to HW filter on device team0 [ 319.395572][T17449] bridge0: port 1(bridge_slave_0) entered blocking state [ 319.402772][T17449] bridge0: port 1(bridge_slave_0) entered forwarding state [ 319.442938][ T2655] bridge0: port 2(bridge_slave_1) entered blocking state [ 319.450243][ T2655] bridge0: port 2(bridge_slave_1) entered forwarding state [ 319.475341][T20005] loop2: detected capacity change from 0 to 512 [ 319.477210][T20003] loop4: detected capacity change from 0 to 1024 [ 319.515572][T20003] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 319.539208][T20005] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 319.557446][T20005] EXT4-fs error (device loop2): ext4_orphan_get:1392: inode #15: comm syz.2.2990: iget: bad extended attribute block 851968 [ 319.589758][T20005] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.2990: couldn't read orphan inode 15 (err -117) [ 319.616905][T19439] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 319.639441][T20005] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 319.661925][T20014] RDS: rds_bind could not find a transport for ::ffff:100.1.1.1, load rds_tcp or rds_rdma? [ 319.672524][ T29] kauditd_printk_skb: 113 callbacks suppressed [ 319.672542][ T29] audit: type=1326 audit(1759339070.861:13806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20004 comm="syz.2.2990" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f3d55c9d710 code=0x7ffc0000 [ 319.708466][T19911] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 319.726128][T20017] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 319.726508][ T29] audit: type=1326 audit(1759339070.861:13807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20004 comm="syz.2.2990" exe="/root/syz-executor" sig=0 arch=c000003e syscall=80 compat=0 ip=0x7f3d55c9dc17 code=0x7ffc0000 [ 319.737755][T20017] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 319.759642][ T29] audit: type=1326 audit(1759339070.861:13808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20004 comm="syz.2.2990" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f3d55c9d710 code=0x7ffc0000 [ 319.791532][ T29] audit: type=1326 audit(1759339070.871:13809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20004 comm="syz.2.2990" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d55c9eec9 code=0x7ffc0000 [ 319.815600][ T29] audit: type=1326 audit(1759339070.871:13810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20004 comm="syz.2.2990" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d55c9eec9 code=0x7ffc0000 [ 319.852752][ T29] audit: type=1326 audit(1759339070.931:13811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20004 comm="syz.2.2990" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f3d55c9eec9 code=0x7ffc0000 [ 319.876835][ T29] audit: type=1326 audit(1759339070.931:13812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20004 comm="syz.2.2990" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d55c9eec9 code=0x7ffc0000 [ 319.900863][ T29] audit: type=1326 audit(1759339070.931:13813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20004 comm="syz.2.2990" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d55c9eec9 code=0x7ffc0000 [ 319.924914][ T29] audit: type=1326 audit(1759339071.031:13814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20016 comm="syz.1.2992" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f805701eec9 code=0x7ffc0000 [ 319.949182][ T29] audit: type=1326 audit(1759339071.031:13815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20016 comm="syz.1.2992" exe="/root/syz-executor" sig=0 arch=c000003e syscall=267 compat=0 ip=0x7f805701eec9 code=0x7ffc0000 [ 320.001765][T20005] loop2: detected capacity change from 512 to 0 [ 320.053691][ T3312] EXT4-fs warning (device loop2): ext4_empty_dir:3080: inode #11: lblock 0: comm syz-executor: error -5 reading directory block [ 320.079799][ T3312] EXT4-fs warning (device loop2): ext4_empty_dir:3080: inode #11: lblock 0: comm syz-executor: error -5 reading directory block [ 320.093978][ T3312] EXT4-fs warning (device loop2): ext4_empty_dir:3080: inode #11: lblock 0: comm syz-executor: error -5 reading directory block [ 320.108404][ T3312] EXT4-fs warning (device loop2): ext4_empty_dir:3080: inode #11: lblock 0: comm syz-executor: error -5 reading directory block [ 320.123498][ T3312] EXT4-fs warning (device loop2): ext4_empty_dir:3080: inode #11: lblock 0: comm syz-executor: error -5 reading directory block [ 320.142269][T19911] veth0_vlan: entered promiscuous mode [ 320.156691][ T3312] EXT4-fs warning (device loop2): ext4_empty_dir:3080: inode #11: lblock 0: comm syz-executor: error -5 reading directory block [ 320.160129][T19911] veth1_vlan: entered promiscuous mode [ 320.176723][ T3312] EXT4-fs warning (device loop2): ext4_empty_dir:3080: inode #11: lblock 0: comm syz-executor: error -5 reading directory block [ 320.186356][T19911] veth0_macvtap: entered promiscuous mode [ 320.196779][ T3312] EXT4-fs warning (device loop2): ext4_empty_dir:3080: inode #11: lblock 0: comm syz-executor: error -5 reading directory block [ 320.202466][T19911] veth1_macvtap: entered promiscuous mode [ 320.216224][T20037] loop0: detected capacity change from 0 to 512 [ 320.224759][T20037] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 320.226036][T19911] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 320.237808][ T3312] EXT4-fs warning (device loop2): ext4_empty_dir:3080: inode #11: lblock 0: comm syz-executor: error -5 reading directory block [ 320.258566][ T3312] EXT4-fs warning (device loop2): ext4_empty_dir:3080: inode #11: lblock 0: comm syz-executor: error -5 reading directory block [ 320.260862][T19911] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 320.304522][ T3299] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 320.354440][ T2655] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 320.370227][ T2655] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 320.387197][ T2655] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 320.427769][T20042] loop0: detected capacity change from 0 to 1024 [ 320.436865][ T2655] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 320.449874][T20042] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 320.666599][ T3299] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 320.687015][T20053] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 320.696105][T20053] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 321.073013][T20058] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 321.081881][T20058] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 321.091016][ T9805] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 321.100712][ T9805] Buffer I/O error on dev loop2, logical block 1, lost sync page write [ 321.109371][ T9805] EXT4-fs (loop2): I/O error while writing superblock [ 321.413900][T20076] RDS: rds_bind could not find a transport for ::ffff:100.1.1.1, load rds_tcp or rds_rdma? [ 321.456511][T20079] loop1: detected capacity change from 0 to 512 [ 321.466446][T20079] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 321.586930][T20086] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 321.598100][T20086] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 321.603865][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 321.627956][T20060] chnl_net:caif_netlink_parms(): no params data found [ 321.645885][T20089] loop1: detected capacity change from 0 to 512 [ 321.675718][T20089] EXT4-fs warning (device loop1): ext4_enable_quotas:7178: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 321.691514][T20089] EXT4-fs (loop1): mount failed [ 321.703122][T20093] hub 2-0:1.0: USB hub found [ 321.708039][T20093] hub 2-0:1.0: 8 ports detected [ 321.747630][T20060] bridge0: port 1(bridge_slave_0) entered blocking state [ 321.755327][T20060] bridge0: port 1(bridge_slave_0) entered disabled state [ 321.764593][T20060] bridge_slave_0: entered allmulticast mode [ 321.771216][T20060] bridge_slave_0: entered promiscuous mode [ 321.778565][T20060] bridge0: port 2(bridge_slave_1) entered blocking state [ 321.785713][T20060] bridge0: port 2(bridge_slave_1) entered disabled state [ 321.794746][T20060] bridge_slave_1: entered allmulticast mode [ 321.801875][T20060] bridge_slave_1: entered promiscuous mode [ 321.820725][T20060] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 321.832161][T20060] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 321.876001][T20060] team0: Port device team_slave_0 added [ 321.885266][T20060] team0: Port device team_slave_1 added [ 322.016209][T20060] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 322.023647][T20060] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 322.050640][T20060] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 322.065969][T20060] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 322.073023][T20060] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 322.099592][T20060] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 322.158885][T20060] hsr_slave_0: entered promiscuous mode [ 322.166525][T20060] hsr_slave_1: entered promiscuous mode [ 322.173349][T20060] debugfs: 'hsr0' already exists in 'hsr' [ 322.179520][T20060] Cannot create hsr debugfs directory [ 322.258712][T20060] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 322.269195][T20060] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 322.328959][T20060] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 322.339599][T20060] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 322.390338][T20060] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 322.400976][T20060] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 322.798379][T20060] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 322.808797][T20060] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 322.896539][T20122] ================================================================== [ 322.904676][T20122] BUG: KCSAN: data-race in memcpy_and_pad / release_task [ 322.911812][T20122] [ 322.914139][T20122] write to 0xffff88811e5484c8 of 8 bytes by task 19911 on cpu 1: [ 322.921859][T20122] release_task+0x6f9/0xb60 [ 322.926582][T20122] wait_consider_task+0x114a/0x1660 [ 322.932231][T20122] __do_wait+0xfa/0x510 [ 322.936701][T20122] do_wait+0xb7/0x250 [ 322.940797][T20122] kernel_wait4+0x16b/0x1e0 [ 322.945415][T20122] __x64_sys_wait4+0x91/0x120 [ 322.950462][T20122] x64_sys_call+0x2a6a/0x3000 [ 322.955553][T20122] do_syscall_64+0xd2/0x200 [ 322.960262][T20122] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 322.966449][T20122] [ 322.968796][T20122] read to 0xffff88811e548000 of 3264 bytes by task 20122 on cpu 0: [ 322.976876][T20122] memcpy_and_pad+0x48/0x80 [ 322.981487][T20122] arch_dup_task_struct+0x2c/0x40 [ 322.986790][T20122] dup_task_struct+0x83/0x6a0 [ 322.991659][T20122] copy_process+0x399/0x2000 [ 322.996266][T20122] kernel_clone+0x16c/0x5c0 [ 323.000783][T20122] __se_sys_clone3+0x1c2/0x200 [ 323.005575][T20122] __x64_sys_clone3+0x31/0x40 [ 323.010451][T20122] x64_sys_call+0x1fc9/0x3000 [ 323.015136][T20122] do_syscall_64+0xd2/0x200 [ 323.019773][T20122] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 323.025869][T20122] [ 323.028372][T20122] Reported by Kernel Concurrency Sanitizer on: [ 323.034626][T20122] CPU: 0 UID: 0 PID: 20122 Comm: syz.4.3021 Not tainted syzkaller #0 PREEMPT(voluntary) [ 323.044548][T20122] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 323.055493][T20122] ================================================================== SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 323.092335][ T1094] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 323.100140][ T1094] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 323.107936][ T1094] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 323.217160][ T1094] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 323.224972][ T1094] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 323.232429][ T1094] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 323.239975][ T1094] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 323.247495][ T1094] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 323.255037][ T1094] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 323.262554][ T1094] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 323.356680][ T1094] hid-generic 0000:0000:0000.0001: hidraw0: HID v8.00 Device [syz0] on syz0 [ 323.838439][ T2655] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 323.906023][ T2655] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 323.975180][ T2655] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 324.087398][ T2655] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 324.208991][ T2655] bridge_slave_1: left allmulticast mode [ 324.216265][ T2655] bridge_slave_1: left promiscuous mode [ 324.222103][ T2655] bridge0: port 2(bridge_slave_1) entered disabled state [ 324.230257][ T2655] bridge_slave_0: left allmulticast mode [ 324.236045][ T2655] bridge_slave_0: left promiscuous mode [ 324.242004][ T2655] bridge0: port 1(bridge_slave_0) entered disabled state [ 324.250408][ T2655] bridge_slave_1: left allmulticast mode [ 324.256210][ T2655] bridge_slave_1: left promiscuous mode [ 324.262059][ T2655] bridge0: port 2(bridge_slave_1) entered disabled state [ 324.269988][ T2655] bridge_slave_0: left allmulticast mode [ 324.275666][ T2655] bridge_slave_0: left promiscuous mode [ 324.281462][ T2655] bridge0: port 1(bridge_slave_0) entered disabled state [ 324.365141][ T2655] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 324.375607][ T2655] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 324.385493][ T2655] bond0 (unregistering): Released all slaves [ 324.454653][ T2655] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 324.464607][ T2655] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 324.474245][ T2655] bond0 (unregistering): Released all slaves [ 324.531220][ T2655] hsr_slave_0: left promiscuous mode [ 324.537140][ T2655] hsr_slave_1: left promiscuous mode [ 324.542817][ T2655] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 324.550292][ T2655] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 324.558364][ T2655] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 324.566254][ T2655] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 324.576271][ T2655] hsr_slave_0: left promiscuous mode [ 324.582107][ T2655] hsr_slave_1: left promiscuous mode [ 324.587916][ T2655] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 324.595740][ T2655] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 324.606665][ T2655] veth1_macvtap: left promiscuous mode [ 324.612707][ T2655] veth0_macvtap: left promiscuous mode [ 324.618373][ T2655] veth1_vlan: left promiscuous mode [ 324.623696][ T2655] veth0_vlan: left promiscuous mode [ 324.688778][ T2655] team0 (unregistering): Port device team_slave_1 removed [ 324.698774][ T2655] team0 (unregistering): Port device team_slave_0 removed [ 324.753349][ T2655] team0 (unregistering): Port device team_slave_1 removed [ 324.763568][ T2655] team0 (unregistering): Port device team_slave_0 removed [ 325.267345][ T2655] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.305535][ T2655] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.345648][ T2655] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.395580][ T2655] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.456750][ T2655] bridge_slave_1: left allmulticast mode [ 325.462427][ T2655] bridge_slave_1: left promiscuous mode [ 325.468233][ T2655] bridge0: port 2(bridge_slave_1) entered disabled state [ 325.476742][ T2655] bridge_slave_0: left allmulticast mode [ 325.482534][ T2655] bridge_slave_0: left promiscuous mode [ 325.488327][ T2655] bridge0: port 1(bridge_slave_0) entered disabled state [ 325.497023][ T2655] veth0_to_team: left allmulticast mode [ 325.502656][ T2655] veth0_to_team: left promiscuous mode [ 325.508407][ T2655] Ÿë: port 1(veth0_to_team) entered disabled state [ 325.516318][ T2655] bridge_slave_1: left allmulticast mode [ 325.522103][ T2655] bridge_slave_1: left promiscuous mode [ 325.527895][ T2655] bridge0: port 2(bridge_slave_1) entered disabled state [ 325.536104][ T2655] bridge_slave_0: left allmulticast mode [ 325.541955][ T2655] bridge_slave_0: left promiscuous mode [ 325.547729][ T2655] bridge0: port 1(bridge_slave_0) entered disabled state [ 325.556723][ T2655] tipc: Resetting bearer [ 325.654892][ T2655] tipc: Disabling bearer [ 325.754701][ T2655] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 325.764818][ T2655] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 325.774317][ T2655] bond0 (unregistering): Released all slaves [ 325.834982][ T2655] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 325.845371][ T2655] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 325.855195][ T2655] bond0 (unregistering): Released all slaves [ 325.935815][ T2655] tipc: Disabling bearer [ 325.941329][ T2655] tipc: Left network mode [ 325.947880][ T2655] hsr_slave_0: left promiscuous mode [ 325.953683][ T2655] hsr_slave_1: left promiscuous mode [ 325.961040][ T2655] hsr_slave_0: left promiscuous mode [ 325.966937][ T2655] hsr_slave_1: left promiscuous mode [ 325.972745][ T2655] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 325.980448][ T2655] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 325.988246][ T2655] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 325.995852][ T2655] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 326.009202][ T2655] veth0_macvtap: left promiscuous mode [ 326.015924][ T2655] veth1_macvtap: left promiscuous mode [ 326.021655][ T2655] veth0_macvtap: left promiscuous mode [ 326.027338][ T2655] veth1_vlan: left promiscuous mode [ 326.032736][ T2655] veth0_vlan: left promiscuous mode [ 326.107166][ T2655] team0 (unregistering): Port device team_slave_1 removed [ 326.116922][ T2655] team0 (unregistering): Port device team_slave_0 removed [ 326.170589][ T2655] team0 (unregistering): Port device team_slave_1 removed [ 326.180148][ T2655] team0 (unregistering): Port device team_slave_0 removed