last executing test programs: 3.145289908s ago: executing program 0 (id=4260): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r0}, 0x10) ioprio_get$pid(0x2, 0x0) 3.075753s ago: executing program 0 (id=4262): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000000040)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000200), 0x4) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f00000005c0)={{0x1, 0x1, 0x18, r2, {r2}}, './file0\x00'}) flistxattr(r3, &(0x7f00000006c0)=""/89, 0x59) r4 = socket$rds(0x15, 0x5, 0x0) bind$rds(r4, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r4, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @private=0xa010102}, 0x10, 0x0, 0x0, &(0x7f0000000b40)=[@mask_fadd={0x58, 0x114, 0x8, {{0x401, 0x4}, &(0x7f00000004c0), 0x0, 0xffffffffffffffff, 0x80000000, 0x8, 0x8, 0x13, 0x100000001}}, @mask_cswp={0x58, 0x114, 0x9, {{0x8, 0x5}, 0x0, 0x0, 0x402, 0x5, 0x7, 0x200000004, 0x10, 0x7}}], 0xb0}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r7, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}, 0x1, 0xfffc}, 0x4000800) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000003080)=@delchain={0x48, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xfff3, 0xffff}, {0x0, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_INDEV={0x14, 0x2, 'bridge_slave_0\x00'}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_NET_GET(r9, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(r9, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)=ANY=[], 0x24}}, 0x0) mq_notify(0xffffffffffffffff, &(0x7f0000000000)={0x110c230000, 0x3, 0x2}) timer_settime(r1, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) sendfile(r3, r3, &(0x7f0000000080)=0x1ff, 0x8) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) sigaltstack(0x0, 0x0) 2.942390832s ago: executing program 2 (id=4264): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000002d40)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = gettid() sendmsg$unix(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000007c0)='>', 0x1}], 0x1, &(0x7f0000001040)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r2, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000030000000000000000100000001000000", @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r1, @ANYBLOB="1c000000000000000100000402000000", @ANYRES32, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r0, @ANYBLOB="e5ffff6e18"], 0xa0}, 0x4004881) r3 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x95, 0x3}, 0x100002, 0x0, 0xfffffffc, 0x3, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0xe}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r4}, 0x0, &(0x7f00000001c0)=r3}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r5}, 0x10) recvmsg(r0, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x160) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x8042, 0x0) fcntl$getflags(r6, 0x401) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x2, 0xc, 0x1400}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='rss_stat\x00', r8}, 0x10) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) statx(0xffffffffffffffff, &(0x7f0000000000)='./cgroup\x00', 0x800, 0x40, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) statx(0xffffffffffffffff, &(0x7f0000000080)='./cgroup\x00', 0x800, 0x4, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r11 = getgid() setresgid(r9, r10, r11) chown(&(0x7f0000000040)='./cgroup\x00', 0x0, 0x0) 2.894593753s ago: executing program 2 (id=4265): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) writev(r1, &(0x7f0000000840)=[{&(0x7f0000000540)="2e9b3d0007e03dd65193dfb6c575963f86dd", 0x12}], 0x12) unshare(0x22020400) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000002d40)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = gettid() sendmsg$unix(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000007c0)='>', 0x1}], 0x1, &(0x7f0000001040)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r4, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000030000000000000000100000001000000", @ANYRES32=r3, @ANYRES32=r2, @ANYRES32=r2, @ANYRES32=r3, @ANYRES32=r2, @ANYRES32=r3, @ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="1c000000000000000100000402000000", @ANYRES32, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r2, @ANYBLOB="e5ffff6e18"], 0xa0}, 0x4004881) r6 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000180), 0x4) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x18, 0x4, &(0x7f00000001c0)=ANY=[@ANYRESOCT=r5], &(0x7f0000000100)='syzkaller\x00', 0x100000, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, r6, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='kfree\x00', r7, 0x0, 0x3}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2010800, 0x0, 0x0, 0x0, &(0x7f0000000000)) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1c08ac963f", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_uring_enter(0xffffffffffffffff, 0x5ddb, 0xf3cd, 0x4a655ec10deb0804, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r8}, 0x10) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r9, @ANYBLOB="2c7766646e6f3dc9af47eeb6f8a3d4263bd4c9d64c68b7989dfd93c1c0f63406e4e54b4174927bc962d0d1dc36fc0496e9cd8777f5420e44386fe4416de1cd883f9b4a152e434ab6fdef10299a45369a57bc1b259a77f59d04a08e02573a2122c9efbd27a8e88e38acd8fc9f951b5add5e07", @ANYRESHEX=r10, @ANYBLOB=',version=9p2000,\x00']) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x160) 2.776371446s ago: executing program 1 (id=4266): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r3, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4804}, 0x4c000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x18) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[], 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000580)='kmem_cache_free\x00', r5}, 0x18) syz_emit_ethernet(0x82, &(0x7f0000000100)={@multicast, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x74, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x1, 0x0, 0x3, 0x61, 0x0, {0x16, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x2f, 0x9, @dev={0xac, 0x14, 0x14, 0x10}, @remote, {[@timestamp_addr={0x44, 0x44, 0x0, 0x1, 0x0, [{@rand_addr=0x86dd}, {@remote}, {@dev={0xac, 0x14, 0x14, 0x32}}, {@rand_addr, 0x4f}, {@multicast2}, {@loopback}, {@local, 0x4}, {@multicast1}]}]}}}}}}}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000002f40)={[{@nodelalloc}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x5}}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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") r6 = socket$netlink(0x10, 0x3, 0x4) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="8c00c4ef0000000000000000"], 0x48) r8 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) readv(r8, &(0x7f00000003c0)=[{&(0x7f0000000c80)=""/198, 0xc6}, {&(0x7f0000000800)=""/114, 0x72}, {0x0}], 0x3) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x200000a, 0x13, r7, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f000001fa80), 0x8}, 0x94) syz_mount_image$vfat(&(0x7f0000001200), &(0x7f0000001240)='./bus\x00', 0x0, &(0x7f0000002480)=ANY=[], 0x1, 0x11f4, &(0x7f0000001280)="$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") sendmmsg$unix(r9, &(0x7f00000bd000), 0x318, 0x3ec0) capset(&(0x7f0000000340)={0x20080522}, &(0x7f0000000300)={0x0, 0x0, 0x5f22}) writev(r6, &(0x7f0000000300)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560aff820fffff5bab003a0000002058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100030c100000000000224e0000", 0x58}], 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_timeval(r10, 0x1, 0x43, 0x0, &(0x7f0000000040)=0x47) chmod(&(0x7f0000000140)='./file0\x00', 0x4) 2.738340446s ago: executing program 2 (id=4268): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000200)={[{@init_itable_val}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@user_xattr}, {@errors_remount}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) mknodat(0xffffffffffffff9c, 0x0, 0x21c0, 0x103) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000280)=0x6, 0x4) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x10) setpriority(0x0, r0, 0x7) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r5, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) 2.487277711s ago: executing program 1 (id=4271): r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000005c0), 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000bc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='kfree\x00', r2}, 0x9) write$selinux_load(r0, &(0x7f0000000000)={0xf97cff8c, 0x8}, 0x10) 2.193620027s ago: executing program 0 (id=4272): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffff05850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a00)={&(0x7f0000000d00)='sched_switch\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0xfecd, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe, 0x4}}}, 0x24}}, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000080000000000000004850000006d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000080)='kfree\x00', r3, 0x0, 0xffffffffffffffff}, 0x18) r4 = socket(0x10, 0x3, 0x4) sendmsg$nl_route_sched(r4, 0x0, 0x0) r5 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r5, &(0x7f0000000880)=[{0x0, 0x0, &(0x7f00000004c0)}], 0x1, 0x0) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) r6 = creat(&(0x7f00000000c0)='./file0\x00', 0x1c0) fcntl$F_SET_RW_HINT(r6, 0x40c, &(0x7f0000000100)=0x3) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x6, 0x3, &(0x7f0000002200)=@raw=[@btf_id={0x18, 0x7, 0x3, 0x0, 0x1}, @jmp={0x5, 0x1, 0x2, 0xa, 0x2, 0xfffffffffffffff0, 0xffffffffffffffec}], 0x0, 0x3, 0xf4, &(0x7f00000006c0)=""/244, 0x41000, 0x8, '\x00', 0x0, 0x25, r6, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f00000008c0)=[{0x100001, 0x8001, 0xb, 0x7}, {0x2, 0x1, 0x1, 0x1}, {0x2, 0x2, 0xf, 0x1}, {0x1, 0x1, 0x8, 0x3}, {0x2, 0x3, 0x6, 0x5}, {0x9, 0x2, 0x8, 0x7}, {0x1, 0x3, 0xd, 0x9}, {0x5, 0x5, 0x3}]}, 0x94) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000002c0)='./file0\x00', 0x2010008, &(0x7f00000001c0), 0xff, 0x53b, &(0x7f0000000b80)="$eJzs3cFvHFcZAPBvNl7HSZzaBQ5QqaWiRUkF2Y1r2locSpEQnCohyj0Ye2NZWXste93GVgXrvwAJIUDiBBcuSPwBSCgSF44IKRKcQSoCIUhBggN00OzO2mY9a2/SjTde/37SZN6b2Znvexu/2Zmdp9kAzq3nI+KNiPggTdOXImImX17Kp2h1pux17z94dymbkkjTt/6WRJIv6+4ryedX8s2mIuJrX4n4ZnI07tbO7p3Fer22mderzbWN6tbO7o3VtcWV2kptfX5+7tWF1xZeWbg5lHZejYjXv/Sn73/np19+/ZeffeePt/5y/VtZWtP5+sPteEgTx63sNL18capng81HDPYkytpT7lYuDbbN3mPMBwCA/rJz/I9ExKci4qWYiQvHn84CAAAAZ1D6hen4TxKRFpvssxwAAAA4Q0rtMbBJqZKPBZiOUqlS6Yzh/VhcLtUbW83P3G5sry93xsrORrl0e7Veu5mPFZ6NcpLV59rlg/rLPfX5iHg6Ir43c6ldryw16suj/vIDAAAAzokrPdf//5zpXP8DAAAAY2Z21AkAAAAAj53rfwAAABh/rv8BAABgrH31zTezKe3+/vXy2zvbdxpv31iubd2prG0vVZYamxuVlUZjpf3MvrWT9ldvNDY+F+vbd6vN2lazenVn99ZaY3u9eWs1pk6lQQAAAMART3/y3u+TiGh9/lJ7ykyOOingVEzsl5J8XtD7//BUZ/7eKSUFnIoLA7zmvYvFy50nwNk20bugT18Hxk951AkAI5ecsL7v4J3fdGalIecDAAAM37VPFN//P/l8vuWUH844nRjOr577/+nMqBIBTl37/v+gA3mcLMBYKQ80AhAYZx/2/v/J0vShEgIAAIZuuj0lpUr+9d50lEqVSsTV9s8ClJPbq/XazYh4KiJ+N1O+mNXn2lsmJ14zAAAAAAAAAAAAAAAAAAAAAAAAAAAdaZpECgAAAIy1iNKfk191nuV/bebF6d7vByaTf7d/EngyIt750Vs/uLvYbG7OZcv/vr+8+cN8+cuj+AYDAAAA6NW9Tm/P/zXqbAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYN+8/eHepOw3w8kvDivvXL0bEbFH8iZhqz6eiHBGX/5HExKHtkoi4MIT4rb2I+HhR/CRLaz9kUfxhvAmtvaSVthXGj9n8XSiKf2UI8eE8u5cdf94o6v+leL49L+5/ExH/V39U/Y9/sX/8u9Cn/18dMMYz939e7Rt/L+KZieLjXzd+0if+CwPG/8bXd3f7rUt/HHGt+/nTPuIdjnBQqjbXNqpbO7s3VtcWV2ortfX5+blXF15beGXhZvX2ar2W/1sY47vP/uKD49p/ufDzL8mz6d/+Fwv2V/SZ9N/7dx98tFtpHY1//YWC+L/+Sf6Ko/FLeZxP5+Vs/bVuudUpH/bcz3773HHtXz5of/lh/v+v99tpryMd5dlB/3QAgMdga2f3zmK9Xtsc20J2lf4EpPEohcl4ItIY38K3s8L9Ye0wTdM061MFq+5FxCD7SWLILS0V53NQ6HsEGPWRCQAAGLaDk/5RZwIAAAAAAAAAAAAAAAAAAADn12k8Za035sEjkJNhPEIbAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAo/hcAAP//Yw3Xfw==") bpf$MAP_LOOKUP_ELEM(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) msync(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) creat(&(0x7f0000000100)='./bus\x00', 0x8c) open(&(0x7f0000000080)='./bus\x00', 0x147842, 0x49) preadv2(r5, &(0x7f0000000040)=[{&(0x7f0000001200)=""/4081, 0xff1}], 0x1, 0x2200, 0x0, 0x0) timer_settime(0x0, 0x1, &(0x7f0000001480)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) read(r2, &(0x7f00000003c0)=""/4082, 0xff2) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 1.974386972s ago: executing program 1 (id=4273): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000000040)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000200), 0x4) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f00000005c0)={{0x1, 0x1, 0x18, r2, {r2}}, './file0\x00'}) bind$rds(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, 0x0, 0x0) getsockname$packet(r5, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}, 0x1, 0xfffc}, 0x4000800) sendmsg$TIPC_NL_NET_GET(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)=ANY=[], 0x24}}, 0x0) mq_notify(0xffffffffffffffff, &(0x7f0000000000)={0x110c230000, 0x3, 0x2}) timer_settime(r1, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) sendfile(r3, r3, &(0x7f0000000080)=0x1ff, 0x8) 1.811025725s ago: executing program 2 (id=4278): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) writev(r1, &(0x7f0000000840)=[{&(0x7f0000000540)="2e9b3d0007e03dd65193dfb6c575963f86dd", 0x12}], 0x12) unshare(0x22020400) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000002d40)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = gettid() sendmsg$unix(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000007c0)='>', 0x1}], 0x1, &(0x7f0000001040)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r4, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000030000000000000000100000001000000", @ANYRES32=r3, @ANYRES32=r2, @ANYRES32=r2, @ANYRES32=r3, @ANYRES32=r2, @ANYRES32=r3, @ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="1c000000000000000100000402000000", @ANYRES32, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r2, @ANYBLOB="e5ffff6e18"], 0xa0}, 0x4004881) r6 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000180), 0x4) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x18, 0x4, &(0x7f00000001c0)=ANY=[@ANYRESOCT=r5], &(0x7f0000000100)='syzkaller\x00', 0x100000, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, r6, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='kfree\x00', r7, 0x0, 0x3}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2010800, 0x0, 0x0, 0x0, &(0x7f0000000000)) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1c08ac963fa19b", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_uring_enter(0xffffffffffffffff, 0x5ddb, 0xf3cd, 0x4a655ec10deb0804, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r8}, 0x10) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r9, @ANYBLOB="2c7766646e6f3dc9af47eeb6f8a3d4263bd4c9d64c68b7989dfd93c1c0f63406e4e54b4174927bc962d0d1dc36fc0496e9cd8777f5420e44386fe4416de1cd883f9b4a152e434ab6fdef10299a45369a57bc1b259a77f59d04a08e02573a2122c9efbd27a8e88e38acd8fc9f951b5add5e07", @ANYRESHEX=r10, @ANYBLOB=',version=9p2000,\x00']) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x160) 1.713705396s ago: executing program 2 (id=4281): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffff05850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a00)={&(0x7f0000000d00)='sched_switch\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0xfecd, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe, 0x4}}}, 0x24}}, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000080000000000000004850000006d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000080)='kfree\x00', r3, 0x0, 0xffffffffffffffff}, 0x18) r4 = socket(0x10, 0x3, 0x4) sendmsg$nl_route_sched(r4, 0x0, 0x0) r5 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r5, &(0x7f0000000880)=[{0x0, 0x0, &(0x7f00000004c0)}], 0x1, 0x0) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) r6 = creat(&(0x7f00000000c0)='./file0\x00', 0x1c0) fcntl$F_SET_RW_HINT(r6, 0x40c, &(0x7f0000000100)=0x3) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x6, 0x3, &(0x7f0000002200)=@raw=[@btf_id={0x18, 0x7, 0x3, 0x0, 0x1}, @jmp={0x5, 0x1, 0x2, 0xa, 0x2, 0xfffffffffffffff0, 0xffffffffffffffec}], 0x0, 0x3, 0xf4, &(0x7f00000006c0)=""/244, 0x41000, 0x8, '\x00', 0x0, 0x25, r6, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f00000008c0)=[{0x100001, 0x8001, 0xb, 0x7}, {0x2, 0x1, 0x1, 0x1}, {0x2, 0x2, 0xf, 0x1}, {0x1, 0x1, 0x8, 0x3}, {0x2, 0x3, 0x6, 0x5}, {0x9, 0x2, 0x8, 0x7}, {0x1, 0x3, 0xd, 0x9}, {0x5, 0x5, 0x3}]}, 0x94) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000002c0)='./file0\x00', 0x2010008, &(0x7f00000001c0), 0xff, 0x53b, &(0x7f0000000b80)="$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") bpf$MAP_LOOKUP_ELEM(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) msync(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x147842, 0x49) preadv2(r5, &(0x7f0000000040)=[{&(0x7f0000001200)=""/4081, 0xff1}], 0x1, 0x2200, 0x0, 0x0) timer_settime(0x0, 0x1, &(0x7f0000001480)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) read(r2, &(0x7f00000003c0)=""/4082, 0xff2) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 1.595450389s ago: executing program 4 (id=4282): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xc94284a3061bb7fe, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000ac0)={&(0x7f0000000b00)='kmem_cache_free\x00', r0, 0x0, 0x1034}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0xff, 0x7ffc1ffd}]}) setgid(0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000001040)=ANY=[], 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7ec9}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x4000, 0x2) 1.53686191s ago: executing program 3 (id=4283): r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000005c0), 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000bc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='kfree\x00', r2}, 0x9) write$selinux_load(r0, &(0x7f0000000000)={0xf97cff8c, 0x8}, 0x10) 1.51492165s ago: executing program 3 (id=4284): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r0 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x128}, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000002c0)={r1, 0xffffffffffffffff, 0x25, 0x0, @val=@iter={0x0}}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="2100000000000000000000000000100000"], 0x48) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x200000a, 0x13, r2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x0, 0x0, 0x0, 0x4}, 0x94) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r3, &(0x7f0000000200)=[{&(0x7f0000033a80)=""/102386, 0x18ff2}, {&(0x7f0000004bc0)=""/4090, 0xffa}, {&(0x7f00000001c0)=""/47, 0x2f}, {&(0x7f0000003bc0)=""/4096, 0x1000}], 0x4, 0x709c, 0x0) r4 = gettid() process_vm_writev(r4, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0x7ffff000}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{}, &(0x7f00000001c0), &(0x7f0000000200)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000380)='timer_start\x00', r5}, 0x18) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000940)) flock(r0, 0x5) r6 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) flock(r6, 0x1) 1.386058563s ago: executing program 3 (id=4285): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x9, 0x3, 0x8, 0x4, 0x2}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000d80)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4000000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000180)='percpu_create_chunk\x00', r2}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0a00000001010000ff7f0000cc"], 0x50) 1.322819204s ago: executing program 3 (id=4286): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xc94284a3061bb7fe, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000ac0)={&(0x7f0000000b00)='kmem_cache_free\x00', r0, 0x0, 0x1034}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0xff, 0x7ffc1ffd}]}) setgid(0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000001040)=ANY=[], 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7ec9}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x4000, 0x2) 1.306921484s ago: executing program 0 (id=4287): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffff05850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a00)={&(0x7f0000000d00)='sched_switch\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0xfecd, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe, 0x4}}}, 0x24}}, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000080000000000000004850000006d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000080)='kfree\x00', r3, 0x0, 0xffffffffffffffff}, 0x18) r4 = socket(0x10, 0x3, 0x4) sendmsg$nl_route_sched(r4, 0x0, 0x0) r5 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r5, &(0x7f0000000880)=[{0x0, 0x0, &(0x7f00000004c0)}], 0x1, 0x0) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) r6 = creat(&(0x7f00000000c0)='./file0\x00', 0x1c0) fcntl$F_SET_RW_HINT(r6, 0x40c, &(0x7f0000000100)=0x3) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x6, 0x3, &(0x7f0000002200)=@raw=[@btf_id={0x18, 0x7, 0x3, 0x0, 0x1}, @jmp={0x5, 0x1, 0x2, 0xa, 0x2, 0xfffffffffffffff0, 0xffffffffffffffec}], 0x0, 0x3, 0xf4, &(0x7f00000006c0)=""/244, 0x41000, 0x8, '\x00', 0x0, 0x25, r6, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f00000008c0)=[{0x100001, 0x8001, 0xb, 0x7}, {0x2, 0x1, 0x1, 0x1}, {0x2, 0x2, 0xf, 0x1}, {0x1, 0x1, 0x8, 0x3}, {0x2, 0x3, 0x6, 0x5}, {0x9, 0x2, 0x8, 0x7}, {0x1, 0x3, 0xd, 0x9}, {0x5, 0x5, 0x3}]}, 0x94) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000002c0)='./file0\x00', 0x2010008, &(0x7f00000001c0), 0xff, 0x53b, &(0x7f0000000b80)="$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") bpf$MAP_LOOKUP_ELEM(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) msync(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x147842, 0x49) preadv2(r5, &(0x7f0000000040)=[{&(0x7f0000001200)=""/4081, 0xff1}], 0x1, 0x2200, 0x0, 0x0) timer_settime(0x0, 0x1, &(0x7f0000001480)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) read(r2, &(0x7f00000003c0)=""/4082, 0xff2) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 1.126504578s ago: executing program 1 (id=4288): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000200)={[{@init_itable_val}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@user_xattr}, {@errors_remount}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) mknodat(0xffffffffffffff9c, 0x0, 0x21c0, 0x103) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000280)=0x6, 0x4) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x0, 0x6}, {0xffff, 0xffff}, {0xc, 0x9}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x17, 0x2, {{0x3, 0x1, 0x0, 0x2, 0x7}, 0x2, 0x0, 0x0, 0x6, 0x10000, 0x0, 0xb, 0xe, 0x3, 0x9, {0x10001, 0x7, 0x2, 0x47, 0x2, 0x7fffffff}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x4c840}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x10) setpriority(0x0, r0, 0x7) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r5, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) 1.0277818s ago: executing program 4 (id=4289): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000740), 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1b, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1004}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r1, 0x0, 0x4}, 0x18) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x109942, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, 0x0) ioctl$PPPIOCSPASS(r2, 0x40107447, &(0x7f0000000400)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x12, 0x9}]}) 1.00630454s ago: executing program 4 (id=4290): bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="19000000040000000400000002"], 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) socket$packet(0x11, 0x3, 0x300) r1 = syz_io_uring_setup(0x10cf, &(0x7f0000000480)={0x0, 0x7734, 0x80, 0x0, 0x28d}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2f, 0x0, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_FILES_UPDATE={0x14, 0x68, 0x0, 0x0, 0x7fffffff, 0x0}) io_uring_enter(r1, 0x47bc, 0x0, 0x0, 0x0, 0xfffffffffffffd6b) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000300)='kfree\x00', r0, 0x0, 0xfffffffffffffffd}, 0x18) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffff9, {0x0, 0x0, 0x0, r7, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@newtfilter={0x54, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0xb, 0xfff3}, {}, {0xfff1, 0x300}}, [@filter_kind_options=@f_flow={{0x9}, {0x24, 0x2, [@TCA_FLOW_PERTURB={0x8, 0xc, 0xf}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_BASECLASS={0x8, 0x3, {0xfff2, 0xa}}, @TCA_FLOW_KEYS={0x8, 0x1, 0x13486}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x404d090}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) openat$rfkill(0xffffffffffffff9c, &(0x7f00000005c0), 0x840, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r10}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r9}, &(0x7f0000000380), &(0x7f00000003c0)=r10}, 0x20) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r11, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)=ANY=[@ANYBLOB="40009b92", @ANYRES16=r12, @ANYBLOB="8b332abd7000000000001500000008000300", @ANYBLOB="10001d800c00008008000d8004000300"], 0x2c}}, 0x0) r13 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r13, &(0x7f0000000080)={0x0, 0x6, &(0x7f0000000100)=[{&(0x7f0000000380)="5c00000012006bab9a3fe3d86e17aa0a076b876c1d0048007ea60864160af36504001d0038001d00e517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb000011d600a0680d4bbd6df1db6f1078bc", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) close_range(r8, 0xffffffffffffffff, 0x0) 643.871737ms ago: executing program 3 (id=4291): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) writev(r1, &(0x7f0000000840)=[{&(0x7f0000000540)="2e9b3d0007e03dd65193dfb6c575963f86dd", 0x12}], 0x12) unshare(0x22020400) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000002d40)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = gettid() sendmsg$unix(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000007c0)='>', 0x1}], 0x1, &(0x7f0000001040)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r4, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000030000000000000000100000001000000", @ANYRES32=r3, @ANYRES32=r2, @ANYRES32=r2, @ANYRES32=r3, @ANYRES32=r2, @ANYRES32=r3, @ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="1c000000000000000100000402000000", @ANYRES32, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r2, @ANYBLOB="e5ffff6e18"], 0xa0}, 0x4004881) r6 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000180), 0x4) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x18, 0x4, &(0x7f00000001c0)=ANY=[@ANYRESOCT=r5], &(0x7f0000000100)='syzkaller\x00', 0x100000, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, r6, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='kfree\x00', r7, 0x0, 0x3}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2010800, 0x0, 0x0, 0x0, &(0x7f0000000000)) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1c08ac963fa19b", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_uring_enter(0xffffffffffffffff, 0x5ddb, 0xf3cd, 0x4a655ec10deb0804, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r8}, 0x10) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r9, @ANYBLOB="2c7766646e6f3dc9af47eeb6f8a3d4263bd4c9d64c68b7989dfd93c1c0f63406e4e54b4174927bc962d0d1dc36fc0496e9cd8777f5420e44386fe4416de1cd883f9b4a152e434ab6fdef10299a45369a57bc1b259a77f59d04a08e02573a2122c9efbd27a8e88e38acd8fc9f951b5add5e07", @ANYRESHEX=r10, @ANYBLOB=',version=9p2000,\x00']) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x160) 572.830349ms ago: executing program 4 (id=4292): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r1, 0x800448d3, &(0x7f0000000e40)="6b15247633b5aee122a0f4e131cf81ba4f3ec169e180812c3b2cce8596ce9a80f978b32cbf8366f0d90474b29a36b1866f53338b0a3eee245275cb928de2142e3e19318a55663891c3ac444fd2847de7633709fa9d9042e6b02cb898d9c99423901f95efe9872a1eb8f15ad8e863330577c05221471b653f285cccc2e3f307ec9cba57629900151ff0e695822394aff841721d751a2eacc600382336f9") r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) r3 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) r4 = syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000200)={[{@init_itable_val}, {@init_itable}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6e}}, {@user_xattr}, {@errors_remount}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f0000000300), &(0x7f0000000000)=ANY=[], 0xfe37, 0x0) unlink(&(0x7f0000000180)='./file1\x00') r5 = socket$inet6_udp(0xa, 0x2, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x11, 0x18, &(0x7f0000000700)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xff}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000440)='syzkaller\x00', 0x25, 0x71, &(0x7f0000000500)=""/113, 0x41000, 0x6, '\x00', 0x0, 0x0, r3, 0x8, &(0x7f00000007c0)={0x9, 0x2}, 0x8, 0x10, &(0x7f0000000800)={0x0, 0xe, 0x3b5, 0x64ea}, 0x10, 0x0, 0x0, 0x7, 0x0, &(0x7f0000000840)=[{0x5, 0x4, 0x10, 0x3}, {0x2, 0x1, 0x8, 0x1}, {0x3, 0x1, 0xb, 0x2}, {0x1, 0x1, 0x9, 0x2}, {0x4, 0x4, 0x8, 0xb}, {0x0, 0x5, 0xe, 0xb}, {0x3, 0x3, 0xe, 0x9}], 0x10, 0xc}, 0x94) r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000380)='kvm_test_age_hva\x00', r6, 0x0, 0xffffffffffffff81}, 0x18) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r9 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/resume', 0x169a82, 0x109) sendfile(r9, r9, 0x0, 0xb) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000001400090500000000fddbdf25021f00cb", @ANYRES32=r10, @ANYBLOB="080008100002000008000200ffffffff0800090006000000080009000000180008000200ac1414aa080009"], 0x48}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x73, 0x11, 0x3d}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0xab}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) sendmsg$nl_route(r10, &(0x7f0000000200)={0x0, 0xed, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[], 0x70}, 0x1, 0x0, 0x0, 0x4080}, 0x0) ioctl$FIDEDUPERANGE(r7, 0xc0189436, &(0x7f00000005c0)={0x8, 0x9, 0x9, 0x0, 0x0, [{{r8}, 0x100000000}, {{r3}, 0x9}, {{r2}, 0x80}, {{r5}, 0x79}, {{r4}, 0x9}, {{r3}, 0xfffffffffffffff8}, {{r9}, 0x7}, {{r5}, 0x800}, {{r10}}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000f00)='kfree\x00', r8}, 0x18) sendmmsg$inet(r5, &(0x7f0000005f40)=[{{&(0x7f0000000d00)={0x2, 0x4e22, @local}, 0x10, 0x0, 0x0, &(0x7f0000003400)=ANY=[@ANYBLOB="20000000000000000000000007000000440cd1700000000700000e0f940401001400000000000000000600000200000002000000000000001100000000000000000000000100000009000000000000001400000000000000eaffffff0100000006000000000000001400000000000000000000000200000006"], 0x80}}, {{&(0x7f00000010c0)={0x2, 0x4e22, @local}, 0x10, 0x0, 0x0, &(0x7f00000012c0)=ANY=[], 0x28}}], 0x2, 0x4000004) r11 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000001240)={'syztnl0\x00', &(0x7f00000011c0)={'syztnl1\x00', 0x0, 0x2f, 0x0, 0x1, 0x26, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @loopback, 0x7, 0x10, 0x7, 0x100}}) sendmsg$ETHTOOL_MSG_WOL_SET(r5, &(0x7f0000001dc0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001d40)={&(0x7f0000001280)={0xa90, 0x0, 0x4, 0x70bd29, 0x25dfdbfc, {}, [@ETHTOOL_A_WOL_MODES={0x3a4, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0xa8, 0x5, "134404c85b043780ac687f8e978988834bc18b8e01d4deac3868e356b6b575b2bc6c019dd76ed66c35b08bb8b266e30777825489c9c131c6c012d6f8812c298578ac4b4f30a37429084b5a89b83d076e5f65cd387fd74595f2976e6183ac0d93144d030d341d2f98d8de88a5baefe58cd88387afb15e0f3df35248575347a7b14cce50d452f9c409af83472210c9f72b3112bf51733bfb9d74b152c763edbb0c6a3acfab"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xffffffff}, @ETHTOOL_A_BITSET_BITS={0x5c, 0x3, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'kfree\x00'}]}, {0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'kfree\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x400}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x71}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_BITS={0xcc, 0x3, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x10000}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '+[/\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0x11, 0x2, ':+*{^*-]\'\\^.\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffffff9}, @ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, '$+//&#-$\'\x00'}]}, {0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x1a, 0x2, 'trusted.overlay.upper\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffffff7}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_MASK={0xb0, 0x5, "314ff6b534d3cb32d19f5b86495b9640c070b56a256d0fafac9e621394121c6bb02ba4391ca9c055a9fac60f766b813d998e5b1608f83c78c25c61542b5230e0a290c814f5c5c136a47c970245d00c45f4880c8fb184b4bca4ba48da19b695af49d873cf3f38ff62b158f61752138dca1553ac81e006e5a9d69ba49a4f3403c4857320574221b72023b62a61f94b5c3fba590b5072404d754f2bb4cce2f2ea68aeef1f602fafcc4d9e1da1d5"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x8}, @ETHTOOL_A_BITSET_VALUE={0xfd, 0x4, "424226bbdbe1f81541074b2a9e9dafd51d160e33855b08b92666ad74d2880ed986951845f4c662731a93bb9c8926affaedbd1be2f3a6654703b10352e9dd0fee0c5f840711611aab76624986ff0a8692733d2bd82c24a299556aced96a6e7cb51614132fe5fe781cd6b41130d27a55c4cc7b0b66334e6ea026b68c29dfe07a6bd3dc0b5d5369545426f08dfa873a055a75bf3bb54c8669c609f65adc232e5024c4dc78f695e2ad28fbdf5f67ac191689dd2f175fdc2a82115bfa3e9f29d4daa2b31fd29980225e75591393bf73f629864c791104c3664d36ea1151b653668798cd419336861aff6e667bc0291cacb9f1c5bef912ad2a52f5ab"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x80000001}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_WOL_HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_WOL_MODES={0x220, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x7c, 0x3, 0x0, 0x1, [{0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xf9}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '[\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '%(\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '$&\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x10000}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xbf52}, @ETHTOOL_A_BITSET_VALUE={0xcf, 0x4, "82e3dcf27a57d1bb69a768deb59e3d5319d55e1bb0066a5e67159b614f779c66a8fec6d2f34ff469eb62083dc681911fc7fdca2e4a7f04172aca491734938baae4c1be3d1d0dae732917a3511fe96c1c84f3a7d87581382d7cddd7a183df6f3ea17dbd87debd2b6dd7aa195b930a3d8fc84a172d18c84e2b000ca5bcfa423d1ca8fb1309a8832aa39feb5d7fab8efc4a4530e23e51b945095ec0038a6f7144262f85c1b010ac089b2f38c1964f0c88c5f47e1a3039fe7243facc1649605abe7f1072d43879d8b61e1cc040"}, @ETHTOOL_A_BITSET_MASK={0xc3, 0x5, "0a2c88104ae00dc5d4ba6beceaf778090e0f32b0722870f7e8f87fb8feb3088486f80234d45ac0d2e07fccb6a70316008f04e9dd52d4c2f218d01b670f28895ef318035ca5ff8df0d3a2a3e1dd8e7caf66e08d3de88c791d87c0c550fe79bee3985aa42d600130d3b4df67c4e94b1e827c6e09b8dd8166ada839502a268fd86e91464fad655cc21f6b431ce07814845fbeb107dc8de59dc58a43712efb7a0e806c5fab629c332b2c8e7190661f5ffe2d1d69718f969eaea73ed6cacbef10ea"}]}, @ETHTOOL_A_WOL_HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_WOL_MODES={0x244, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x54, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'ethtool\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4c}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '()&:\x00'}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_BITS={0xfc, 0x3, 0x0, 0x1, [{0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xee51}, @ETHTOOL_A_BITSET_BIT_NAME={0x15, 0x2, '[/[))]@\'.%+--{-}\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x1a, 0x2, 'debug_want_extra_isize'}, @ETHTOOL_A_BITSET_BIT_NAME={0x14, 0x2, 'kmem_cache_free\x00'}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x10, 0x2, '/dev/rfkill\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'ethtool\x00'}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, ']\x00'}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2d77}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, '+$#\'@(\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'quota'}, @ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, 'user_xattr'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x4}, @ETHTOOL_A_BITSET_MASK={0xdf, 0x5, "5bd95a739f9d9f2d83689103f4e10139c7da433c5d32fdb5ac74ac4c43801811ee58341706ea5ff9acdb881f2f01adc6cf06e1742e7119af686b4982978492dd038dfdab969445df37074be1ae4ee44335a94864cda84d8693d2fdbbabc09ca61d3f1555895ebddde3f040d13203a95b420e06b7d0ca08266fb0aaeea96d896fbe222ff1624c675ae234eca3a9952388c7e81addab718b1720828a127cd3401dbc21adb05efd7aaa894fa0fa30fb35975f838cdbc6b5a963e71112036c7efc23fd7463223845084ba7089d19ea86320c829e79e196655d305f1ad3"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x4}]}, @ETHTOOL_A_WOL_HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}]}, @ETHTOOL_A_WOL_SOPASS={0x5c, 0x3, "803599dde2d0c7ad806c417332abf74b353afd0e360a9460435d22b988a7987a127df7d6e787c52431ec2c95fd2b139da79225f3934b45e46fb98457c8d453d0043593d831fcbcef4ce6eead1b6d142282d2b13e47092f78"}, @ETHTOOL_A_WOL_MODES={0x130, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0xe8, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '{\x00'}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'ext4\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x40}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, 'user_xattr'}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '&!\xb2#\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x15, 0x2, 'errors=remount-ro'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7ff}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8001}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'kfree\x00'}]}]}, @ETHTOOL_A_BITSET_MASK={0x3f, 0x5, "167bc5e03df73fe7f2e28a0b81f955e4649cec2aca4e1dedae0049834e98091176e8303b49715964c2d1193dd53e4a96a935cbe45226a0ea995548"}]}]}, 0xa90}, 0x1, 0x0, 0x0, 0x4008}, 0x0) r13 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000001d80), 0x80800, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r13, 0x5201) ioctl$RFKILL_IOCTL_NOINPUT(r13, 0x5201) r14 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r11, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r14, @ANYBLOB="010000000ccc3b000180000066000000000000000000f5d7014138ee7da9dcb50576c578fb9bc5430a165420aa71458ef66abd91a5ad464ef06177badc0983e8a2a768fddcc33ac5ed1708269b21ed32b10fe635f817eb2f8f865d5e074857ed7705ce2900"/113], 0x1c}}, 0x0) 572.327039ms ago: executing program 2 (id=4293): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='rss_stat\x00', r0}, 0x10) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x10000, 0x84e}, 0x110d41, 0x2000, 0x7fd, 0x5, 0x0, 0x3, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r3}, &(0x7f0000000180), &(0x7f0000000040)=r2}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) symlink(0x0, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000180)="2e00000011008b88040f80ec59acbc0413a1f8480f0000005e2900421803001825000a001400000002800000121f", 0x2e}], 0x1}, 0x0) r5 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r6, 0x0, 0x3}, 0x18) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = syz_io_uring_setup(0x499, &(0x7f0000000400)={0x0, 0xd146, 0x0, 0xc, 0x288}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r9, r10, &(0x7f00000002c0)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, r7, 0x0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x30}}) io_uring_enter(r8, 0x3516, 0x0, 0x4, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r12}, 0x0, &(0x7f00000008c0)=r11}, 0x20) 232.342615ms ago: executing program 0 (id=4294): r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000005c0), 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='kfree\x00', r2}, 0x9) write$selinux_load(r0, &(0x7f0000000000)={0xf97cff8c, 0x8}, 0x10) 187.346656ms ago: executing program 0 (id=4295): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000240), 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r0, 0x0) syz_genetlink_get_family_id$smc(&(0x7f00000000c0), r0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000e40)='./file0\x00', 0x804810, &(0x7f0000000000)={[{@grpquota}]}, 0x26, 0x75e, &(0x7f0000000280)="$eJzs3M1rHPUbAPBnJtmkL/n9NoLgy0GEFloonSTNpT01XrwVCgWvNSSTEDLJhuymdmPB1rNQm4uCIOrZo1eh1D/AmxQUvAuiNR7Ey8psXkpjNt02TVbazwcm+3xnZ+Z5nuzwzQ5kJoAX1pvljyRiKCIuR0R1c30aEQPt6EjEzY3t1h/cmCqXJFqtK78l5W6x3qpuHyvZfD0e7V3i1Yi4V4k48+G/89abq/OTRZEvb45HGgtLI/Xm6tm5hcnZfDZfHBu/MHp+fPz86Phje3ily15PvnPh6J3v315b++Gbxu03+s8mMdHuOzZ76/IwT2Tjd1KJiR3rFw8iWQ8lvS4AAICulN/z+yKiv/0ttRp97QgAAAB4nrQGWwAAAMBzL4leVwAAAAAcrK3/A9i6t/eg7oPt5Ne3ImJ4t/z97XuII45EJSKOrSeP3JmQbOwG+3LzVkTcndh5/n1VnmE393ns0R3jR++RHtjn0XkW7pbzz8Ru80+6Pf/ELvNP/9azE/ap8/z3MH9fh/nvcpc5vv38tUrH/LciXu/fLX+ynT/pkP/dLvPfXvvoTjvYpYrWlxGndv37kzySa4/nQ0zMzBV7Pn7g3t+n7+/V/7FO+ZO9+1/qsv/31/+Y7zSXlPlPn9j7898tf3lOfLxZRxoRdzZfy/HajhwnFn78bq/+pyNaT/P5f9Fl/z9/PXi9y00BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACgLY2IoUjSbDtO0yyLOB4RL8extKjVG2dmaiuL0+V7EcNRSWfminw0Iqob46Qcj7Xjh+NzO8bjEfHST0c3ks4VeTZVK6Z73TwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADbjkfEUCRpFhFpRPxZTdMsi+jvYt/BQ6gPAAAAeEaGe10AAAAAcOC6uP4fOIw6AAAAgINTXv/3PcV+yQHUAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADy3Ll+6VC6t9Qc3psrx9LXmynzt2tnpvD6fLaxMZVO15aVstlabLfJsqrbwuOMVtdrS2IVYuT7SyOuNkXpz9epCbWWxcXVuYXI2v5pXDqUrAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAntRQe0nSLCLSdpymWRbxv4gYjkoyM1fkoxHx/4i4X60MluOxXhcNAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAM1dvrs5PFkW+LBAIDi34ICL+A2XsEfR6ZgIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoBfqzdX5yaLIl+u9rgQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDeSn9JIqJcTlVPDu18dyD5q9p+jYj3PrvyyfXJRmN5rFz/+/b6xqeb68/1on4AAAB4IVx8ko23rtO3ruMBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC6VW+uzk8WRb68v+BiNFdbSYdtet0jAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwdP4JAAD//2T7x0Y=") openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b70300000000000085000000730000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffc0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000100)='sched_switch\x00', r1, 0x0, 0x2}, 0x18) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x5c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9, 0x1}, {0x4}, {0xe, 0xd}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x401}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x1]}}]}, @TCA_INGRESS_BLOCK={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x90}, 0x4000c00) 162.603467ms ago: executing program 1 (id=4296): bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180200000020702500000000002020207b1af8ff00000000bfa100000000000007010000dbffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x23, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000380)={0x9f, 0x2, '\x00', [@jumbo={0xc2, 0x4, 0x7}, @calipso={0x7, 0x8, {0x0, 0x0, 0x8, 0xf8}}]}, 0x18) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c) 104.387678ms ago: executing program 4 (id=4297): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001400000018000180140002006e657464657673696d3000000000000008001400070010000800130008000300080012"], 0x44}}, 0x0) 91.078738ms ago: executing program 3 (id=4298): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000000040)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000200), 0x4) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f00000005c0)={{0x1, 0x1, 0x18, r2, {r2}}, './file0\x00'}) bind$rds(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, 0x0, 0x0) getsockname$packet(r5, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}, 0x1, 0xfffc}, 0x4000800) sendmsg$TIPC_NL_NET_GET(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)=ANY=[], 0x24}}, 0x0) mq_notify(0xffffffffffffffff, &(0x7f0000000000)={0x110c230000, 0x3, 0x2}) timer_settime(r1, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) sendfile(r3, r3, &(0x7f0000000080)=0x1ff, 0x8) 19.637729ms ago: executing program 4 (id=4299): bpf$PROG_LOAD(0x5, 0x0, 0xfffffffffffffc9b) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2ca}, 0x48) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, 0x0, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000100000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x2f9, 0xffffca88, &(0x7f0000000040)="b90103600040f000009e0ff008001fffffe100004000632f77fb7f0200017f020001be3e7d2a182fff", 0x0, 0x104, 0x6000000000000000, 0x0, 0xfeb9, &(0x7f0000000400)="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"}, 0x28) (fail_nth: 2) 0s ago: executing program 1 (id=4300): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xc94284a3061bb7fe, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000ac0)={&(0x7f0000000b00)='kmem_cache_free\x00', r0, 0x0, 0x1034}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0xff, 0x7ffc1ffd}]}) setgid(0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000001040)=ANY=[], 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7ec9}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000400)='mm_migrate_pages\x00', 0xffffffffffffffff, 0x0, 0x5}, 0x18) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x4000, 0x2) kernel console output (not intermixed with test programs): 16601 comm="syz.1.3501" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2c7f94eec9 code=0x0 [ 232.023486][ T29] audit: type=1400 audit(1759155728.602:36203): avc: denied { bind } for pid=16604 comm="syz.0.3502" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 232.043182][ T29] audit: type=1400 audit(1759155728.602:36204): avc: denied { name_bind } for pid=16604 comm="syz.0.3502" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 232.087521][T16605] netlink: 'syz.0.3502': attribute type 1 has an invalid length. [ 232.114677][T16605] bond0: entered promiscuous mode [ 232.120187][T16605] 8021q: adding VLAN 0 to HW filter on device bond0 [ 232.136483][T16605] 8021q: adding VLAN 0 to HW filter on device bond0 [ 232.144050][T16605] bond0: (slave vxcan3): The slave device specified does not support setting the MAC address [ 232.154338][T16605] bond0: (slave vxcan3): Setting fail_over_mac to active for active-backup mode [ 232.179460][T16605] bond0: (slave vxcan3): making interface the new active one [ 232.186933][T16605] vxcan3: entered promiscuous mode [ 232.203299][T16605] bond0: (slave vxcan3): Enslaving as an active interface with an up link [ 232.281219][T16625] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3503'. [ 232.322720][T16629] netlink: 'syz.2.3504': attribute type 13 has an invalid length. [ 232.406757][T16640] loop0: detected capacity change from 0 to 512 [ 232.423753][T16640] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 232.437774][T16640] EXT4-fs (loop0): 1 truncate cleaned up [ 232.444082][T16640] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 232.511740][T13540] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 232.555839][T16652] loop0: detected capacity change from 0 to 512 [ 232.564908][T16652] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 232.586540][T16655] 9pnet_fd: Insufficient options for proto=fd [ 232.595480][T16652] EXT4-fs (loop0): 1 truncate cleaned up [ 232.602808][T16652] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 232.622545][T16655] hub 8-0:1.0: USB hub found [ 232.627306][T16655] hub 8-0:1.0: 8 ports detected [ 232.659467][T13540] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 232.818651][T16681] loop3: detected capacity change from 0 to 2048 [ 232.855260][T16681] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 232.855504][T16681] ext4 filesystem being mounted at /90/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 232.885466][T16672] netlink: 'syz.3.3511': attribute type 13 has an invalid length. [ 232.912803][T14681] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 233.011820][T16705] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3516'. [ 233.032020][T16709] loop1: detected capacity change from 0 to 1024 [ 233.032783][T16709] EXT4-fs: Ignoring removed bh option [ 233.033475][T16709] EXT4-fs (loop1): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 233.049275][T16709] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 233.285168][T14972] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 233.449985][T16747] loop1: detected capacity change from 0 to 1024 [ 233.450294][T16747] EXT4-fs: Ignoring removed i_version option [ 233.450410][T16747] EXT4-fs: Ignoring removed nobh option [ 233.475253][T16747] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 233.542784][T16752] netlink: 'syz.0.3522': attribute type 13 has an invalid length. [ 233.590829][T14972] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 233.644374][T16758] SELinux: failed to load policy [ 233.652574][T16754] loop0: detected capacity change from 0 to 2048 [ 233.687955][T16754] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 233.713616][T16754] ext4 filesystem being mounted at /144/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 233.742001][T16754] netlink: 'syz.0.3523': attribute type 13 has an invalid length. [ 233.754499][T16767] loop3: detected capacity change from 0 to 512 [ 233.761974][T16767] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 233.774580][T16767] EXT4-fs (loop3): 1 truncate cleaned up [ 233.781224][T16767] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 233.789960][T16770] loop1: detected capacity change from 0 to 1024 [ 233.794931][T13540] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 233.801090][T16770] EXT4-fs: Ignoring removed bh option [ 233.815145][T16770] EXT4-fs (loop1): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 233.840864][T16770] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 233.878483][T14681] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 233.915509][T16780] netlink: 14 bytes leftover after parsing attributes in process `syz.3.3530'. [ 233.958391][T14972] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 234.205810][T16795] SELinux: failed to load policy [ 234.235832][T16797] 9pnet_fd: Insufficient options for proto=fd [ 234.261161][T16797] hub 8-0:1.0: USB hub found [ 234.261210][T16797] hub 8-0:1.0: 8 ports detected [ 234.435118][T16803] loop1: detected capacity change from 0 to 2048 [ 234.468973][T16804] 9pnet_fd: Insufficient options for proto=fd [ 234.479481][T16808] loop3: detected capacity change from 0 to 512 [ 234.481549][T16803] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 234.500380][T16808] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 234.502988][T16808] EXT4-fs (loop3): 1 truncate cleaned up [ 234.510657][T16803] ext4 filesystem being mounted at /100/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 234.516846][T16808] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 234.553232][T16812] loop0: detected capacity change from 0 to 512 [ 234.556972][T16804] hub 8-0:1.0: USB hub found [ 234.560762][T16812] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 234.571226][T16804] hub 8-0:1.0: 8 ports detected [ 234.576438][T16800] netlink: 'syz.1.3538': attribute type 13 has an invalid length. [ 234.599437][T16812] EXT4-fs (loop0): 1 truncate cleaned up [ 234.599921][T16812] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 234.633253][T13540] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 234.682259][T16819] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.684663][T14681] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 234.694044][T14972] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 234.735487][T16820] bond1: entered promiscuous mode [ 234.735510][T16820] bond1: entered allmulticast mode [ 234.735673][T16820] 8021q: adding VLAN 0 to HW filter on device bond1 [ 234.761597][T16820] bond1 (unregistering): Released all slaves [ 234.787316][T16819] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.864456][T16819] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.891361][T16819] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.974904][ T5193] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.999031][ T5193] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.018460][ T5193] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.029629][ T5193] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.057603][T16856] SELinux: failed to load policy [ 235.085524][T16860] loop4: detected capacity change from 0 to 512 [ 235.099345][T16860] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 235.113159][T16860] EXT4-fs (loop4): 1 truncate cleaned up [ 235.119427][T16860] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 235.158259][T14158] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 235.324442][T16880] netlink: 376 bytes leftover after parsing attributes in process `syz.4.3549'. [ 235.680452][T16930] 9pnet_fd: Insufficient options for proto=fd [ 235.716293][T16942] loop1: detected capacity change from 0 to 512 [ 235.729748][T16942] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 235.731280][T16930] hub 8-0:1.0: USB hub found [ 235.752128][T16930] hub 8-0:1.0: 8 ports detected [ 235.754441][T16942] EXT4-fs (loop1): 1 truncate cleaned up [ 235.765157][T16947] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3556'. [ 235.766067][T16942] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 235.859908][T14972] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 236.134001][T16999] SELinux: failed to load policy [ 236.295145][T17010] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 236.301763][T17010] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 236.309384][T17010] vhci_hcd vhci_hcd.0: Device attached [ 236.327845][T17011] vhci_hcd: connection closed [ 236.328253][ T5193] vhci_hcd: stop threads [ 236.337415][ T5193] vhci_hcd: release socket [ 236.341852][ T5193] vhci_hcd: disconnect device [ 236.492510][ T29] kauditd_printk_skb: 988 callbacks suppressed [ 236.492527][ T29] audit: type=1326 audit(1759155733.072:37193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16969 comm="syz.1.3557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f2c7f945d67 code=0x7ffc0000 [ 236.525483][ T29] audit: type=1326 audit(1759155733.102:37194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16969 comm="syz.1.3557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f2c7f8eaf79 code=0x7ffc0000 [ 236.549207][ T29] audit: type=1326 audit(1759155733.102:37195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16969 comm="syz.1.3557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f2c7f945d67 code=0x7ffc0000 [ 236.572750][ T29] audit: type=1326 audit(1759155733.102:37196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16969 comm="syz.1.3557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f2c7f8eaf79 code=0x7ffc0000 [ 236.596422][ T29] audit: type=1326 audit(1759155733.102:37197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16969 comm="syz.1.3557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f2c7f94eec9 code=0x7ffc0000 [ 236.620276][ T29] audit: type=1326 audit(1759155733.152:37198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16969 comm="syz.1.3557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f2c7f945d67 code=0x7ffc0000 [ 236.643869][ T29] audit: type=1326 audit(1759155733.152:37199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16969 comm="syz.1.3557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f2c7f8eaf79 code=0x7ffc0000 [ 236.667487][ T29] audit: type=1326 audit(1759155733.152:37200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16969 comm="syz.1.3557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f2c7f94eec9 code=0x7ffc0000 [ 236.691236][ T29] audit: type=1326 audit(1759155733.202:37201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16969 comm="syz.1.3557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f2c7f945d67 code=0x7ffc0000 [ 236.715002][ T29] audit: type=1326 audit(1759155733.202:37202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16969 comm="syz.1.3557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f2c7f8eaf79 code=0x7ffc0000 [ 236.792253][T17021] 9pnet_fd: Insufficient options for proto=fd [ 236.800867][T17019] netlink: 64683 bytes leftover after parsing attributes in process `syz.3.3566'. [ 236.829898][T17021] hub 8-0:1.0: USB hub found [ 236.834650][T17021] hub 8-0:1.0: 8 ports detected [ 236.845180][T17017] loop2: detected capacity change from 0 to 2048 [ 236.866617][T17027] SELinux: failed to load policy [ 236.873331][T17017] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 236.886017][T17017] ext4 filesystem being mounted at /127/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 236.898627][T17017] netlink: 'syz.2.3567': attribute type 13 has an invalid length. [ 236.919818][T17032] SELinux: failed to load policy [ 236.942555][T17034] loop4: detected capacity change from 0 to 512 [ 236.952507][T17034] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 236.966149][T13387] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 236.989328][T17034] EXT4-fs (loop4): 1 truncate cleaned up [ 236.997294][T17034] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 237.217000][T14158] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 237.781421][T17103] 9pnet_fd: Insufficient options for proto=fd [ 237.811314][T17103] hub 8-0:1.0: USB hub found [ 237.811392][T17103] hub 8-0:1.0: 8 ports detected [ 237.907634][T17116] SELinux: failed to load policy [ 237.951593][T17036] delete_channel: no stack [ 237.977188][T17121] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3586'. [ 238.065413][T17135] 9pnet_fd: Insufficient options for proto=fd [ 238.111646][T17144] loop1: detected capacity change from 0 to 512 [ 238.118509][T17144] journal_path: Lookup failure for './file0/../file0' [ 238.125504][T17144] EXT4-fs: error: could not find journal device path [ 238.152283][T17149] loop0: detected capacity change from 0 to 1024 [ 238.169416][T17149] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 238.221666][T17149] SELinux: policydb string length 2030043144 does not match expected length 8 [ 238.231916][T17149] SELinux: failed to load policy [ 238.289944][T13540] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 238.320230][T17175] 9pnet_fd: Insufficient options for proto=fd [ 238.547997][T17209] loop0: detected capacity change from 0 to 1024 [ 238.557510][T17209] EXT4-fs: Ignoring removed bh option [ 238.563513][T17209] EXT4-fs (loop0): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 238.594791][T17209] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 238.694642][T13540] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 238.826642][T17239] 9pnet_fd: Insufficient options for proto=fd [ 238.901841][T17241] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 238.911526][T17241] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 239.147039][T17248] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3598'. [ 239.175358][T17250] loop4: detected capacity change from 0 to 512 [ 239.197456][T17250] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 239.209631][T17250] EXT4-fs (loop4): 1 truncate cleaned up [ 239.216168][T17250] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 239.470913][T17258] 9pnet_fd: Insufficient options for proto=fd [ 239.517589][T14158] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 239.550491][T17263] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3605'. [ 239.567084][T17264] loop4: detected capacity change from 0 to 512 [ 239.595732][T17264] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 239.613861][T17264] EXT4-fs (loop4): 1 truncate cleaned up [ 239.621576][T17264] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 239.639698][T17270] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3607'. [ 239.856937][T17279] netlink: 52 bytes leftover after parsing attributes in process `syz.4.3604'. [ 239.930380][T17279] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.990389][T17279] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.062339][T17279] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.130724][T17279] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.236162][ T5176] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.254657][ T5176] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.273469][ T5176] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.290372][ T5176] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.311452][T17275] loop3: detected capacity change from 0 to 2048 [ 240.423448][T17275] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 240.447280][T17288] netlink: 'syz.4.3611': attribute type 13 has an invalid length. [ 240.464864][T17275] ext4 filesystem being mounted at /105/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 240.503561][T17275] netlink: 'syz.3.3608': attribute type 13 has an invalid length. [ 240.632519][T17298] SELinux: failed to load policy [ 240.680515][T17301] 9pnet_fd: Insufficient options for proto=fd [ 240.875611][T17313] syzkaller0: entered promiscuous mode [ 240.881145][T17313] syzkaller0: entered allmulticast mode [ 240.947678][T17319] SELinux: failed to load policy [ 241.012249][T17317] loop2: detected capacity change from 0 to 2048 [ 241.030196][T17317] ext4 filesystem being mounted at /141/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 241.043484][T17317] netlink: 'syz.2.3623': attribute type 13 has an invalid length. [ 241.155857][T17331] SELinux: failed to load policy [ 241.191550][T17333] 9pnet_fd: Insufficient options for proto=fd [ 241.266675][T17336] loop2: detected capacity change from 0 to 512 [ 241.274125][T17336] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 241.286414][T17336] EXT4-fs (loop2): 1 truncate cleaned up [ 241.343245][T17347] FAULT_INJECTION: forcing a failure. [ 241.343245][T17347] name failslab, interval 1, probability 0, space 0, times 0 [ 241.356010][T17347] CPU: 0 UID: 0 PID: 17347 Comm: wÞ£ÿ Not tainted syzkaller #0 PREEMPT(voluntary) [ 241.356044][T17347] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 241.356061][T17347] Call Trace: [ 241.356112][T17347] [ 241.356122][T17347] __dump_stack+0x1d/0x30 [ 241.356150][T17347] dump_stack_lvl+0xe8/0x140 [ 241.356200][T17347] dump_stack+0x15/0x1b [ 241.356222][T17347] should_fail_ex+0x265/0x280 [ 241.356278][T17347] should_failslab+0x8c/0xb0 [ 241.356316][T17347] kmem_cache_alloc_noprof+0x50/0x310 [ 241.356403][T17347] ? getname_flags+0x80/0x3b0 [ 241.356443][T17347] getname_flags+0x80/0x3b0 [ 241.356488][T17347] __x64_sys_symlink+0x40/0x60 [ 241.356518][T17347] x64_sys_call+0x23cc/0x2ff0 [ 241.356595][T17347] do_syscall_64+0xd2/0x200 [ 241.356634][T17347] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 241.356665][T17347] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 241.356698][T17347] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 241.356750][T17347] RIP: 0033:0x7f2172a1eec9 [ 241.356774][T17347] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 241.356798][T17347] RSP: 002b:00007f2171487038 EFLAGS: 00000246 ORIG_RAX: 0000000000000058 [ 241.356822][T17347] RAX: ffffffffffffffda RBX: 00007f2172c75fa0 RCX: 00007f2172a1eec9 [ 241.356837][T17347] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 241.356929][T17347] RBP: 00007f2171487090 R08: 0000000000000000 R09: 0000000000000000 [ 241.356946][T17347] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 241.356962][T17347] R13: 00007f2172c76038 R14: 00007f2172c75fa0 R15: 00007ffc5b6fb248 [ 241.356987][T17347] [ 241.368596][T17350] SELinux: failed to load policy [ 241.502618][ T29] kauditd_printk_skb: 1880 callbacks suppressed [ 241.502653][ T29] audit: type=1326 audit(1759155738.082:39083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17302 comm="syz.3.3618" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7ff355d25d67 code=0x7ffc0000 [ 241.563217][ T29] audit: type=1326 audit(1759155738.082:39084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17302 comm="syz.3.3618" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff355ccaf79 code=0x7ffc0000 [ 241.588010][ T29] audit: type=1326 audit(1759155738.112:39085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17302 comm="syz.3.3618" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7ff355d25d67 code=0x7ffc0000 [ 241.611745][ T29] audit: type=1326 audit(1759155738.112:39086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17302 comm="syz.3.3618" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff355ccaf79 code=0x7ffc0000 [ 241.635380][ T29] audit: type=1326 audit(1759155738.112:39087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17302 comm="syz.3.3618" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7ff355d2eec9 code=0x7ffc0000 [ 241.668591][T17354] loop2: detected capacity change from 0 to 2048 [ 241.682824][ T29] audit: type=1326 audit(1759155738.252:39088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17302 comm="syz.3.3618" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7ff355d25d67 code=0x7ffc0000 [ 241.706548][ T29] audit: type=1326 audit(1759155738.252:39089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17302 comm="syz.3.3618" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff355ccaf79 code=0x7ffc0000 [ 241.730392][ T29] audit: type=1326 audit(1759155738.252:39090): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17302 comm="syz.3.3618" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7ff355d2eec9 code=0x7ffc0000 [ 241.735603][T17358] netlink: 'syz.3.3639': attribute type 13 has an invalid length. [ 241.753975][ T29] audit: type=1326 audit(1759155738.252:39091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17302 comm="syz.3.3618" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff355d2eec9 code=0x7ffc0000 [ 241.785316][T17359] loop1: detected capacity change from 0 to 512 [ 241.785782][ T29] audit: type=1326 audit(1759155738.252:39092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17302 comm="syz.3.3618" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff355d2eec9 code=0x7ffc0000 [ 241.794784][T17354] ext4 filesystem being mounted at /148/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 241.832925][T17352] netlink: 'syz.2.3637': attribute type 13 has an invalid length. [ 241.849436][T17359] ext4 filesystem being mounted at /113/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 241.876037][T17357] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 241.894719][T17357] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 241.918720][T17369] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 241.927526][T17369] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 242.348544][T17378] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3642'. [ 242.438922][T17382] netlink: 'syz.0.3646': attribute type 13 has an invalid length. [ 242.568590][T17386] SELinux: failed to load policy [ 242.629543][T17390] netlink: 'syz.0.3650': attribute type 13 has an invalid length. [ 242.683305][T17392] loop0: detected capacity change from 0 to 512 [ 242.708642][T17392] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 242.740791][T17392] EXT4-fs (loop0): 1 truncate cleaned up [ 242.811440][T17398] loop0: detected capacity change from 0 to 512 [ 242.818734][T17398] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 242.842667][T17401] loop3: detected capacity change from 0 to 1024 [ 242.850761][T17401] EXT4-fs: Ignoring removed bh option [ 242.856829][T17401] EXT4-fs (loop3): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 242.870541][T17398] EXT4-fs (loop0): 1 truncate cleaned up [ 242.934236][T17406] 9pnet_fd: Insufficient options for proto=fd [ 242.941071][T17406] hub 8-0:1.0: USB hub found [ 242.945828][T17406] hub 8-0:1.0: 8 ports detected [ 243.035700][T17408] netlink: 14 bytes leftover after parsing attributes in process `syz.0.3657'. [ 243.240302][T17414] SELinux: failed to load policy [ 243.298617][T17418] 9pnet_fd: Insufficient options for proto=fd [ 243.518808][T17433] loop3: detected capacity change from 0 to 512 [ 243.529179][T17433] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 243.544175][T17433] EXT4-fs (loop3): 1 truncate cleaned up [ 243.569238][T17436] 9pnet_fd: Insufficient options for proto=fd [ 243.636688][T17444] SELinux: failed to load policy [ 243.675308][T17450] netlink: 14 bytes leftover after parsing attributes in process `syz.0.3672'. [ 243.768281][T17448] loop3: detected capacity change from 0 to 2048 [ 243.779285][T17448] ext4 filesystem being mounted at /123/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 243.792836][T17448] netlink: 'syz.3.3671': attribute type 13 has an invalid length. [ 243.855534][T17456] 9pnet_fd: Insufficient options for proto=fd [ 243.907863][T17459] SELinux: failed to load policy [ 243.950311][T17465] 9pnet_fd: Insufficient options for proto=fd [ 244.050854][T17472] loop0: detected capacity change from 0 to 512 [ 244.051327][T17472] /dev/loop0: Can't open blockdev [ 244.435524][T17476] loop4: detected capacity change from 0 to 1024 [ 244.436401][T17476] EXT4-fs: Ignoring removed bh option [ 244.450492][T17476] EXT4-fs (loop4): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 244.582878][T17480] loop4: detected capacity change from 0 to 512 [ 244.583809][T17480] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 244.602292][T17480] EXT4-fs (loop4): 1 truncate cleaned up [ 244.805743][T17462] delete_channel: no stack [ 244.853933][T17494] netlink: 14 bytes leftover after parsing attributes in process `syz.3.3685'. [ 244.922379][T17489] loop4: detected capacity change from 0 to 2048 [ 244.959472][T17497] syzkaller0: entered promiscuous mode [ 244.965006][T17497] syzkaller0: entered allmulticast mode [ 244.977741][T17489] ext4 filesystem being mounted at /100/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 244.992368][T17489] netlink: 'syz.4.3683': attribute type 13 has an invalid length. [ 245.040569][T17501] 9pnet_fd: Insufficient options for proto=fd [ 245.075299][T17503] loop0: detected capacity change from 0 to 512 [ 245.107218][T17503] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 245.143859][T17508] 9pnet_fd: Insufficient options for proto=fd [ 245.156395][T17503] EXT4-fs (loop0): 1 truncate cleaned up [ 245.180376][T17508] hub 8-0:1.0: USB hub found [ 245.185215][T17508] hub 8-0:1.0: 8 ports detected [ 245.294375][T17521] netlink: 'syz.2.3693': attribute type 3 has an invalid length. [ 245.355337][T17531] loop3: detected capacity change from 0 to 512 [ 245.369677][T17529] 9pnet_fd: Insufficient options for proto=fd [ 245.388707][T17531] ext4 filesystem being mounted at /128/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 245.402788][T17529] hub 8-0:1.0: USB hub found [ 245.407505][T17529] hub 8-0:1.0: 8 ports detected [ 245.500313][T17539] SELinux: failed to load policy [ 245.557372][T17543] 9pnet_fd: Insufficient options for proto=fd [ 245.578066][T17547] syzkaller0: entered promiscuous mode [ 245.578086][T17547] syzkaller0: entered allmulticast mode [ 245.599562][T17543] hub 8-0:1.0: USB hub found [ 245.599670][T17543] hub 8-0:1.0: 8 ports detected [ 245.702617][T17551] SELinux: failed to load policy [ 245.917965][T17568] SELinux: failed to load policy [ 245.953877][T17572] loop3: detected capacity change from 0 to 512 [ 245.964283][T17572] ext4 filesystem being mounted at /134/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 246.043051][T17578] 9pnet_fd: Insufficient options for proto=fd [ 246.091427][T17580] 9pnet_fd: Insufficient options for proto=fd [ 246.123672][T17580] hub 8-0:1.0: USB hub found [ 246.123734][T17580] hub 8-0:1.0: 8 ports detected [ 246.137456][T17582] loop3: detected capacity change from 0 to 512 [ 246.145279][T17582] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 246.147789][T17582] EXT4-fs (loop3): 1 truncate cleaned up [ 246.210762][T17585] loop1: detected capacity change from 0 to 1024 [ 246.218745][T17585] EXT4-fs: Ignoring removed bh option [ 246.219162][T17585] EXT4-fs (loop1): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 246.285386][T17534] delete_channel: no stack [ 246.349866][T17597] SELinux: failed to load policy [ 246.506114][T17609] loop0: detected capacity change from 0 to 512 [ 246.513833][ T29] kauditd_printk_skb: 693 callbacks suppressed [ 246.513847][ T29] audit: type=1326 audit(1759155743.092:39786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17554 comm="syz.2.3703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f2172a15d67 code=0x7ffc0000 [ 246.513990][ T29] audit: type=1326 audit(1759155743.092:39787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17554 comm="syz.2.3703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f21729baf79 code=0x7ffc0000 [ 246.514014][ T29] audit: type=1326 audit(1759155743.092:39788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17554 comm="syz.2.3703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f2172a1eec9 code=0x7ffc0000 [ 246.544291][ T29] audit: type=1326 audit(1759155743.102:39789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17554 comm="syz.2.3703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f2172a15d67 code=0x7ffc0000 [ 246.544359][ T29] audit: type=1326 audit(1759155743.102:39790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17554 comm="syz.2.3703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f21729baf79 code=0x7ffc0000 [ 246.544388][ T29] audit: type=1326 audit(1759155743.102:39791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17554 comm="syz.2.3703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f2172a1eec9 code=0x7ffc0000 [ 246.544489][ T29] audit: type=1326 audit(1759155743.122:39792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17554 comm="syz.2.3703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f2172a15d67 code=0x7ffc0000 [ 246.544521][ T29] audit: type=1326 audit(1759155743.122:39793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17554 comm="syz.2.3703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f21729baf79 code=0x7ffc0000 [ 246.545524][ T29] audit: type=1326 audit(1759155743.122:39794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17554 comm="syz.2.3703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f2172a1eec9 code=0x7ffc0000 [ 246.569404][ T29] audit: type=1326 audit(1759155743.132:39795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17554 comm="syz.2.3703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f2172a15d67 code=0x7ffc0000 [ 246.587456][T17609] ext4 filesystem being mounted at /198/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 246.862810][T17615] 9pnet_fd: Insufficient options for proto=fd [ 246.930703][T17615] hub 8-0:1.0: USB hub found [ 246.930752][T17615] hub 8-0:1.0: 8 ports detected [ 247.178892][T17627] loop2: detected capacity change from 0 to 1024 [ 247.179562][T17627] EXT4-fs: Ignoring removed bh option [ 247.179709][T17629] netlink: 14 bytes leftover after parsing attributes in process `syz.0.3733'. [ 247.180949][T17627] EXT4-fs (loop2): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 247.238745][T17593] delete_channel: no stack [ 247.548669][T17647] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3739'. [ 247.584819][T17645] 9pnet_fd: Insufficient options for proto=fd [ 247.598584][T17649] SELinux: failed to load policy [ 247.620178][T17651] loop0: detected capacity change from 0 to 512 [ 247.641307][T17645] hub 8-0:1.0: USB hub found [ 247.646288][T17651] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 247.656304][T17645] hub 8-0:1.0: 8 ports detected [ 247.668263][T17651] EXT4-fs (loop0): 1 truncate cleaned up [ 248.070319][ T5157] failed while handling packet from 1:16385 [ 248.142132][T17717] SELinux: failed to load policy [ 248.228524][T17720] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3751'. [ 248.249199][T17723] 9pnet_fd: Insufficient options for proto=fd [ 248.251224][T17728] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3753'. [ 248.279496][T17723] hub 8-0:1.0: USB hub found [ 248.284327][T17723] hub 8-0:1.0: 8 ports detected [ 248.450180][T17744] syzkaller0: entered promiscuous mode [ 248.452639][T17753] loop0: detected capacity change from 0 to 512 [ 248.455709][T17744] syzkaller0: entered allmulticast mode [ 248.509415][T17753] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 248.550313][T17753] EXT4-fs (loop0): 1 truncate cleaned up [ 248.581263][T17761] netlink: 'syz.1.3760': attribute type 3 has an invalid length. [ 248.654647][T17773] loop1: detected capacity change from 0 to 512 [ 248.663181][T17773] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 248.679976][T17773] EXT4-fs (loop1): 1 truncate cleaned up [ 248.888697][T17796] SELinux: failed to load policy [ 248.940462][T17797] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3762'. [ 248.956498][T17797] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.030979][T17797] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.049654][T17798] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3765'. [ 249.196800][T17806] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3769'. [ 249.271842][T17797] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.309524][T17809] 9pnet_fd: Insufficient options for proto=fd [ 249.331472][T17797] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.375987][ T5193] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.388272][ T5193] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.400069][ T5193] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.413271][ T5193] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.480921][T17818] 9pnet_fd: Insufficient options for proto=fd [ 249.581642][T17832] SELinux: failed to load policy [ 249.612479][T17838] loop1: detected capacity change from 0 to 512 [ 249.624065][T17838] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 249.636659][T17838] EXT4-fs (loop1): 1 truncate cleaned up [ 249.677925][T17845] loop0: detected capacity change from 0 to 1024 [ 249.687534][T17845] EXT4-fs: Ignoring removed bh option [ 249.699318][T17845] EXT4-fs (loop0): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 249.784362][T17863] loop1: detected capacity change from 0 to 512 [ 249.804350][T17863] ext4 filesystem being mounted at /138/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 249.829195][T17863] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 249.838574][T17863] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 249.975002][T17881] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3778'. [ 250.014262][T17887] SELinux: failed to load policy [ 250.033145][T17884] 9pnet_fd: Insufficient options for proto=fd [ 250.062300][T17891] netlink: 14 bytes leftover after parsing attributes in process `syz.4.3781'. [ 250.084963][T17884] hub 8-0:1.0: USB hub found [ 250.089913][T17884] hub 8-0:1.0: 8 ports detected [ 250.191927][T17894] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.648364][T17894] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.699436][T17894] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.737417][T17917] SELinux: failed to load policy [ 250.748371][T17894] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.018400][T17953] loop0: detected capacity change from 0 to 512 [ 251.057095][T17953] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 251.099433][T17953] EXT4-fs (loop0): 1 truncate cleaned up [ 251.113842][T17953] EXT4-fs mount: 51 callbacks suppressed [ 251.113861][T17953] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 251.191740][T13540] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 251.239845][T17991] SELinux: failed to load policy [ 251.522775][ T29] kauditd_printk_skb: 663 callbacks suppressed [ 251.522793][ T29] audit: type=1326 audit(1759155748.102:40459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18001 comm="syz.0.3794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f3923bf5d67 code=0x7ffc0000 [ 251.552771][ T29] audit: type=1326 audit(1759155748.102:40460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18001 comm="syz.0.3794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f3923b9af79 code=0x7ffc0000 [ 251.576315][ T29] audit: type=1326 audit(1759155748.102:40461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18001 comm="syz.0.3794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f3923bfeec9 code=0x7ffc0000 [ 251.795196][ T29] audit: type=1326 audit(1759155748.182:40462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18001 comm="syz.0.3794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f3923bf5d67 code=0x7ffc0000 [ 251.795254][ T29] audit: type=1326 audit(1759155748.182:40463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18001 comm="syz.0.3794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f3923b9af79 code=0x7ffc0000 [ 251.795291][ T29] audit: type=1326 audit(1759155748.182:40464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18001 comm="syz.0.3794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f3923bfeec9 code=0x7ffc0000 [ 251.795335][ T29] audit: type=1326 audit(1759155748.342:40465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18001 comm="syz.0.3794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f3923bf5d67 code=0x7ffc0000 [ 251.795364][ T29] audit: type=1326 audit(1759155748.342:40466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18001 comm="syz.0.3794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f3923b9af79 code=0x7ffc0000 [ 251.795463][ T29] audit: type=1326 audit(1759155748.342:40467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18001 comm="syz.0.3794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f3923bfeec9 code=0x7ffc0000 [ 251.795493][ T29] audit: type=1326 audit(1759155748.362:40468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18061 comm="syz.3.3795" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff355d2eec9 code=0x7ffc0000 [ 252.082242][T17990] delete_channel: no stack [ 252.113714][T18066] 9pnet_fd: Insufficient options for proto=fd [ 252.150598][T18066] hub 8-0:1.0: USB hub found [ 252.155775][T18066] hub 8-0:1.0: 8 ports detected [ 252.270364][T18072] tmpfs: Bad value for 'mpol' [ 252.322945][T18077] loop2: detected capacity change from 0 to 512 [ 252.331111][T18077] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 252.344001][T18077] EXT4-fs (loop2): 1 truncate cleaned up [ 252.344138][T18075] hub 8-0:1.0: USB hub found [ 252.351555][T18077] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 252.354613][T18075] hub 8-0:1.0: 8 ports detected [ 252.385073][T13387] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 252.659895][T18097] SELinux: failed to load policy [ 252.707225][T18099] SELinux: failed to load policy [ 252.773863][T18106] tmpfs: Bad value for 'mpol' [ 253.000889][T18115] loop3: detected capacity change from 0 to 512 [ 253.009861][T18115] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 253.009973][T18115] ext4 filesystem being mounted at /149/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 253.012942][T18115] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 253.042552][T18115] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 253.490193][T18087] delete_channel: no stack [ 253.516537][T18121] hub 8-0:1.0: USB hub found [ 253.521538][T18121] hub 8-0:1.0: 8 ports detected [ 253.822982][T18133] SELinux: failed to load policy [ 253.891689][T18137] 9pnet_fd: Insufficient options for proto=fd [ 254.020349][T18144] loop0: detected capacity change from 0 to 512 [ 254.038951][T18144] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 254.052015][T18144] ext4 filesystem being mounted at /230/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 254.064251][T18144] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 254.074029][T18144] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 254.398986][T18150] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.449752][T18150] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.510154][T18150] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.560704][T18150] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.685850][ T5176] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.804506][T14972] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 254.818816][ T5176] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.835095][ T5176] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.843604][ T5176] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.852307][ T5176] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.861021][ T5176] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.880942][ T5176] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.902200][ T5176] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.912562][T18158] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3826'. [ 254.951838][T18161] loop1: detected capacity change from 0 to 1024 [ 254.959224][T18161] EXT4-fs: Ignoring removed bh option [ 254.972544][T18161] EXT4-fs (loop1): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 254.989463][T18161] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 255.109223][T14972] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 255.302787][T18202] hub 8-0:1.0: USB hub found [ 255.311181][T18202] hub 8-0:1.0: 8 ports detected [ 256.058093][T14681] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 256.802246][ T29] kauditd_printk_skb: 1191 callbacks suppressed [ 256.802265][ T29] audit: type=1326 audit(1759155753.382:41660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18424 comm="syz.3.3847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff355d2eec9 code=0x7ffc0000 [ 256.809170][T18425] loop3: detected capacity change from 0 to 1024 [ 256.832827][ T29] audit: type=1326 audit(1759155753.382:41661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18424 comm="syz.3.3847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7ff355d2eec9 code=0x7ffc0000 [ 256.851534][T18425] EXT4-fs: Ignoring removed bh option [ 256.862435][ T29] audit: type=1326 audit(1759155753.382:41662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18424 comm="syz.3.3847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7ff355d2ef03 code=0x7ffc0000 [ 256.869605][T18425] EXT4-fs (loop3): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 256.891307][ T29] audit: type=1326 audit(1759155753.382:41663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18424 comm="syz.3.3847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7ff355d2d97f code=0x7ffc0000 [ 256.891347][ T29] audit: type=1326 audit(1759155753.382:41664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18424 comm="syz.3.3847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7ff355d2ef57 code=0x7ffc0000 [ 256.891453][ T29] audit: type=1326 audit(1759155753.392:41665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18424 comm="syz.3.3847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff355d2d710 code=0x7ffc0000 [ 256.971706][ T29] audit: type=1326 audit(1759155753.392:41666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18424 comm="syz.3.3847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ff355d2eacb code=0x7ffc0000 [ 256.995481][ T29] audit: type=1326 audit(1759155753.422:41667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18424 comm="syz.3.3847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7ff355d2db2a code=0x7ffc0000 [ 256.997377][T18425] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 257.019132][ T29] audit: type=1326 audit(1759155753.422:41668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18424 comm="syz.3.3847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7ff355d2db2a code=0x7ffc0000 [ 257.054726][ T29] audit: type=1326 audit(1759155753.422:41669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18424 comm="syz.3.3847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7ff355d2d617 code=0x7ffc0000 [ 257.168882][T14681] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 257.189761][T13540] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 257.212928][T18455] SELinux: failed to load policy [ 257.822199][T18488] loop1: detected capacity change from 0 to 512 [ 257.823089][T18486] loop3: detected capacity change from 0 to 1024 [ 257.823934][T18486] EXT4-fs: Ignoring removed bh option [ 257.824645][T18486] EXT4-fs (loop3): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 257.861869][T18486] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 257.866524][T18488] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 257.927062][T18488] ext4 filesystem being mounted at /150/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 257.935080][T18488] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 257.957111][T18488] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 258.139910][T18497] SELinux: failed to load policy [ 258.147631][T14681] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 258.313228][T18500] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3862'. [ 258.372844][T18502] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3863'. [ 258.531091][T18507] SELinux: failed to load policy [ 258.608271][T18470] delete_channel: no stack [ 258.718514][T18524] SELinux: failed to load policy [ 258.745073][T18527] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3874'. [ 258.879794][T18535] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 258.890043][T18535] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 258.919320][T18533] syzkaller0: entered promiscuous mode [ 258.924907][T18533] syzkaller0: entered allmulticast mode [ 258.985954][T18537] SELinux: failed to load policy [ 259.107410][T18548] siw: device registration error -23 [ 259.425608][T18555] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3885'. [ 259.557593][T18557] SELinux: failed to load policy [ 259.979901][T18574] SELinux: failed to load policy [ 260.163269][T18582] loop2: detected capacity change from 0 to 2048 [ 260.181195][T18582] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 260.198544][T18582] ext4 filesystem being mounted at /196/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 260.213264][T18590] loop0: detected capacity change from 0 to 512 [ 260.220464][T18590] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 260.232848][T18590] EXT4-fs (loop0): 1 truncate cleaned up [ 260.239075][T18582] netlink: 'syz.2.3895': attribute type 13 has an invalid length. [ 260.240375][T18590] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 260.289473][T13540] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 260.302494][T13387] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 260.325184][T18594] loop0: detected capacity change from 0 to 512 [ 260.332403][T18594] /dev/loop0: Can't open blockdev [ 260.591908][T18614] 9pnet_fd: Insufficient options for proto=fd [ 260.632887][T18614] hub 8-0:1.0: USB hub found [ 260.642848][T18614] hub 8-0:1.0: 8 ports detected [ 260.727995][T18616] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3906'. [ 260.845328][T18619] syzkaller0: entered promiscuous mode [ 260.850969][T18619] syzkaller0: entered allmulticast mode [ 260.891775][T14972] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 260.946070][T18621] 9pnet_fd: Insufficient options for proto=fd [ 260.976185][T18623] loop2: detected capacity change from 0 to 512 [ 260.995235][T18623] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 260.995581][T18621] hub 8-0:1.0: USB hub found [ 261.025648][T18621] hub 8-0:1.0: 8 ports detected [ 261.026006][T18626] 9pnet_fd: Insufficient options for proto=fd [ 261.043897][T18626] hub 8-0:1.0: USB hub found [ 261.052368][T18623] EXT4-fs (loop2): 1 truncate cleaned up [ 261.059585][T18623] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 261.079169][T18626] hub 8-0:1.0: 8 ports detected [ 261.126540][T13387] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 261.159532][T18634] SELinux: failed to load policy [ 261.221910][T18639] 9pnet_fd: Insufficient options for proto=fd [ 261.262372][T18639] hub 8-0:1.0: USB hub found [ 261.267215][T18639] hub 8-0:1.0: 8 ports detected [ 261.402344][T18647] loop0: detected capacity change from 0 to 1024 [ 261.418541][T18647] EXT4-fs: Ignoring removed bh option [ 261.432179][T18647] EXT4-fs (loop0): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 261.450379][T18647] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 261.495310][T18657] hub 8-0:1.0: USB hub found [ 261.495370][T18657] hub 8-0:1.0: 8 ports detected [ 261.558061][T13540] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 261.599269][T18667] loop0: detected capacity change from 0 to 512 [ 261.606314][T18667] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 261.611298][T18669] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3926'. [ 261.621327][T18667] EXT4-fs (loop0): 1 truncate cleaned up [ 261.633012][T18664] hub 8-0:1.0: USB hub found [ 261.635128][T18667] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 261.638677][T18664] hub 8-0:1.0: 8 ports detected [ 261.703015][T13540] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 261.714152][T18672] SELinux: failed to load policy [ 261.736298][T18674] netlink: 14 bytes leftover after parsing attributes in process `syz.2.3929'. [ 261.763899][T18674] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 261.787642][T18674] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 261.799012][T18674] bond0 (unregistering): Released all slaves [ 262.083901][T18681] loop0: detected capacity change from 0 to 2048 [ 262.104494][T18681] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 262.104578][T18681] ext4 filesystem being mounted at /251/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 262.105836][T18681] netlink: 'syz.0.3928': attribute type 13 has an invalid length. [ 262.126305][T13540] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 262.135889][T18690] SELinux: failed to load policy [ 262.206104][ T29] kauditd_printk_skb: 694 callbacks suppressed [ 262.206123][ T29] audit: type=1326 audit(1759155758.782:42364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18693 comm="syz.2.3934" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2172a1eec9 code=0x7ffc0000 [ 262.206159][ T29] audit: type=1326 audit(1759155758.782:42365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18693 comm="syz.2.3934" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f2172a1eec9 code=0x7ffc0000 [ 262.206268][ T29] audit: type=1326 audit(1759155758.782:42366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18693 comm="syz.2.3934" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f2172a1ef03 code=0x7ffc0000 [ 262.212250][ T29] audit: type=1326 audit(1759155758.792:42367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18693 comm="syz.2.3934" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f2172a1d97f code=0x7ffc0000 [ 262.221918][ T29] audit: type=1326 audit(1759155758.802:42368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18693 comm="syz.2.3934" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f2172a1ef57 code=0x7ffc0000 [ 262.226132][ T29] audit: type=1326 audit(1759155758.802:42369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18693 comm="syz.2.3934" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f2172a1d710 code=0x7ffc0000 [ 262.226313][ T29] audit: type=1326 audit(1759155758.802:42370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18693 comm="syz.2.3934" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f2172a1eacb code=0x7ffc0000 [ 262.226312][T18694] loop2: detected capacity change from 0 to 1024 [ 262.226481][ T29] audit: type=1326 audit(1759155758.802:42371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18693 comm="syz.2.3934" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f2172a1db2a code=0x7ffc0000 [ 262.226518][ T29] audit: type=1326 audit(1759155758.802:42372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18693 comm="syz.2.3934" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f2172a1db2a code=0x7ffc0000 [ 262.226616][ T29] audit: type=1326 audit(1759155758.802:42373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18693 comm="syz.2.3934" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f2172a1d617 code=0x7ffc0000 [ 262.237053][T18694] EXT4-fs: Ignoring removed bh option [ 262.378990][T18698] netlink: 'syz.3.3936': attribute type 3 has an invalid length. [ 262.423028][T18694] EXT4-fs (loop2): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 262.529187][T18694] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 262.547437][T18706] SELinux: failed to load policy [ 262.572331][T18703] hub 8-0:1.0: USB hub found [ 262.579754][T18703] hub 8-0:1.0: 8 ports detected [ 262.587032][T18714] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3942'. [ 262.619898][T18711] 9pnet_fd: Insufficient options for proto=fd [ 262.659615][T13387] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 262.671222][T18712] 9pnet_fd: Insufficient options for proto=fd [ 262.738340][T18712] hub 8-0:1.0: USB hub found [ 262.747088][T18712] hub 8-0:1.0: 8 ports detected [ 262.815398][T18722] loop3: detected capacity change from 0 to 2048 [ 262.843504][T18722] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 262.843617][T18722] ext4 filesystem being mounted at /187/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 262.844848][T18722] netlink: 'syz.3.3945': attribute type 13 has an invalid length. [ 262.882875][T14681] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 262.885485][T18739] netlink: 'syz.1.3951': attribute type 3 has an invalid length. [ 263.011878][T18748] loop0: detected capacity change from 0 to 512 [ 263.044854][T18748] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 263.044985][T18748] ext4 filesystem being mounted at /258/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 263.048119][T18748] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 263.077370][T18748] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 263.409092][T18768] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 263.459632][T18768] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 263.510631][T18768] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 263.550799][T18768] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 263.708625][ T167] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.708893][ T167] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.708963][ T167] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.709094][ T167] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.772898][T18773] loop4: detected capacity change from 0 to 1024 [ 263.792447][T18719] delete_channel: no stack [ 263.824453][T18773] EXT4-fs: Ignoring removed bh option [ 263.826946][T18773] EXT4-fs (loop4): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 263.872690][T18779] 9pnet_fd: Insufficient options for proto=fd [ 263.890086][T18773] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 263.896109][T18741] delete_channel: no stack [ 264.009565][T18795] hub 8-0:1.0: USB hub found [ 264.014474][T18795] hub 8-0:1.0: 8 ports detected [ 264.022943][T18799] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3959'. [ 264.061608][T14158] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 264.299107][T18838] loop4: detected capacity change from 0 to 512 [ 264.310328][T18838] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 264.327264][T18838] EXT4-fs (loop4): 1 truncate cleaned up [ 264.333600][T18838] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 264.424171][T14158] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 264.451439][T18863] loop2: detected capacity change from 0 to 512 [ 264.479033][T18863] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.3975: bg 0: block 248: padding at end of block bitmap is not set [ 264.500398][T18863] EXT4-fs error (device loop2): ext4_acquire_dquot:6937: comm syz.2.3975: Failed to acquire dquot type 1 [ 264.513326][T18863] EXT4-fs (loop2): 1 truncate cleaned up [ 264.519562][T18863] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 264.536952][T18863] ext4 filesystem being mounted at /214/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 264.555518][T18863] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 264.604736][T18863] syz.2.3975 (18863) used greatest stack depth: 9200 bytes left [ 264.646417][T18888] loop2: detected capacity change from 0 to 512 [ 264.653869][T18888] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 264.668140][T18888] EXT4-fs (loop2): 1 truncate cleaned up [ 264.679440][T18888] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 264.778465][T13387] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 264.834944][T18908] syzkaller0: entered promiscuous mode [ 264.840535][T18908] syzkaller0: entered allmulticast mode [ 264.860161][T18916] loop2: detected capacity change from 0 to 1024 [ 264.875920][T18916] EXT4-fs: Ignoring removed bh option [ 264.888253][T18916] EXT4-fs (loop2): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 264.912387][T18916] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 265.023705][T18942] netlink: 'syz.4.3974': attribute type 3 has an invalid length. [ 265.048505][T13387] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 265.059863][T18944] loop4: detected capacity change from 0 to 512 [ 265.071164][T18946] netlink: 'syz.2.3976': attribute type 3 has an invalid length. [ 265.081455][T18944] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 265.094151][T18944] ext4 filesystem being mounted at /146/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 265.107896][T18944] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 265.116749][T18944] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 265.152325][T18950] loop2: detected capacity change from 0 to 512 [ 265.168717][T18950] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.3978: bg 0: block 248: padding at end of block bitmap is not set [ 265.184383][T18950] EXT4-fs error (device loop2): ext4_acquire_dquot:6937: comm syz.2.3978: Failed to acquire dquot type 1 [ 265.196434][T18950] EXT4-fs (loop2): 1 truncate cleaned up [ 265.203664][T18950] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 265.217082][T18950] ext4 filesystem being mounted at /219/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 265.238457][T18950] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 266.062443][T13540] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 266.113915][T18968] loop2: detected capacity change from 0 to 512 [ 266.137019][T18968] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 266.154856][T18968] EXT4-fs (loop2): 1 truncate cleaned up [ 266.161099][T18968] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 266.180487][T18974] loop1: detected capacity change from 0 to 512 [ 266.191941][T18971] 9pnet_fd: Insufficient options for proto=fd [ 266.217958][T18974] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 266.231194][T18974] ext4 filesystem being mounted at /160/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 266.244459][T18971] hub 8-0:1.0: USB hub found [ 266.249260][T18971] hub 8-0:1.0: 8 ports detected [ 266.264699][T18974] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 266.274162][T18974] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 266.419773][T18986] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3982'. [ 266.433398][T18986] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.246799][ T29] kauditd_printk_skb: 484 callbacks suppressed [ 267.246817][ T29] audit: type=1326 audit(1759155763.822:42854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18983 comm="syz.0.3987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3923bfeec9 code=0x7ffc0000 [ 267.276841][ T29] audit: type=1326 audit(1759155763.822:42855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18983 comm="syz.0.3987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f3923bfeec9 code=0x7ffc0000 [ 267.300564][ T29] audit: type=1326 audit(1759155763.822:42856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18983 comm="syz.0.3987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f3923bfef03 code=0x7ffc0000 [ 267.324049][ T29] audit: type=1326 audit(1759155763.822:42857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18983 comm="syz.0.3987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f3923bfd97f code=0x7ffc0000 [ 267.348413][T18985] loop0: detected capacity change from 0 to 1024 [ 267.355600][T18985] EXT4-fs: Ignoring removed bh option [ 267.361447][ T29] audit: type=1326 audit(1759155763.832:42858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18977 comm="syz.3.3986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7ff355d25d67 code=0x7ffc0000 [ 267.385044][ T29] audit: type=1326 audit(1759155763.832:42859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18977 comm="syz.3.3986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff355ccaf79 code=0x7ffc0000 [ 267.408622][ T29] audit: type=1326 audit(1759155763.832:42860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18977 comm="syz.3.3986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7ff355d2eec9 code=0x7ffc0000 [ 267.432144][ T29] audit: type=1326 audit(1759155763.832:42861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18983 comm="syz.0.3987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f3923bfef57 code=0x7ffc0000 [ 267.455677][ T29] audit: type=1326 audit(1759155763.932:42862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18983 comm="syz.0.3987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f3923bfd710 code=0x7ffc0000 [ 267.479272][ T29] audit: type=1326 audit(1759155763.932:42863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18983 comm="syz.0.3987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f3923bfeacb code=0x7ffc0000 [ 267.505081][T18986] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.510823][T18985] EXT4-fs (loop0): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 267.527347][T18984] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.539929][T18985] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 267.568374][T18986] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.608345][T18984] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.628570][T18986] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.640729][T13540] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 267.669614][T18984] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.737551][ T167] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 267.737846][ T167] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 267.738363][ T167] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 267.738582][ T167] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 267.768097][T13387] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 267.792513][T18984] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.844490][ T167] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 267.844891][ T167] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 267.845179][ T167] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 267.845401][ T167] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 267.927474][T19002] SELinux: failed to load policy [ 267.957952][T19005] netlink: 'syz.0.3993': attribute type 3 has an invalid length. [ 268.108401][T14158] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 268.163370][T19018] loop2: detected capacity change from 0 to 512 [ 268.166100][T19018] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 268.211889][T19020] syzkaller0: entered promiscuous mode [ 268.211911][T19020] syzkaller0: entered allmulticast mode [ 268.243200][T19018] EXT4-fs (loop2): 1 truncate cleaned up [ 268.243576][T19018] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 268.246673][T19023] 9pnet_fd: Insufficient options for proto=fd [ 268.284974][T19023] hub 8-0:1.0: USB hub found [ 268.285037][T19023] hub 8-0:1.0: 8 ports detected [ 268.330869][T19029] loop4: detected capacity change from 0 to 512 [ 268.366117][T13387] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 268.368473][T19032] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4001'. [ 268.376508][T19029] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 268.414418][T19034] 9pnet_fd: Insufficient options for proto=fd [ 268.417592][T19029] EXT4-fs (loop4): 1 truncate cleaned up [ 268.426828][T19029] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 268.447780][T19034] hub 8-0:1.0: USB hub found [ 268.447905][T19034] hub 8-0:1.0: 8 ports detected [ 268.452724][T18990] delete_channel: no stack [ 268.468806][T14158] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 268.488989][T19039] SELinux: failed to load policy [ 268.489131][T19040] netlink: 'syz.4.4003': attribute type 13 has an invalid length. [ 268.502041][T19040] netlink: 'syz.4.4003': attribute type 27 has an invalid length. [ 268.691496][T19046] loop2: detected capacity change from 0 to 2048 [ 268.716568][T19046] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 268.730514][T19046] ext4 filesystem being mounted at /224/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 268.744455][T19046] netlink: 'syz.2.4006': attribute type 13 has an invalid length. [ 268.773055][T13387] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 268.813236][T19056] SELinux: failed to load policy [ 268.840622][T19059] SELinux: failed to load policy [ 268.842479][T19060] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4010'. [ 268.874786][T19062] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 268.883726][T19062] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 269.186274][T14972] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 269.211774][T19065] loop1: detected capacity change from 0 to 512 [ 269.220650][T19065] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 269.232699][T19065] EXT4-fs (loop1): 1 truncate cleaned up [ 269.240082][T19065] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 269.275003][T19071] loop0: detected capacity change from 0 to 512 [ 269.282324][T19071] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 269.294407][T19071] EXT4-fs (loop0): 1 truncate cleaned up [ 269.300503][T19071] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 269.329015][T14972] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 269.349192][T19078] netlink: 'syz.1.4016': attribute type 13 has an invalid length. [ 269.357109][T19078] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4016'. [ 269.390976][T19081] loop0: detected capacity change from 0 to 512 [ 269.399418][T19081] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 269.415053][T19081] EXT4-fs (loop0): 1 truncate cleaned up [ 269.833583][T19109] netlink: 52 bytes leftover after parsing attributes in process `syz.0.4018'. [ 269.917743][T19111] loop4: detected capacity change from 0 to 512 [ 270.152481][T19111] ext4 filesystem being mounted at /154/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 270.178479][T19123] loop3: detected capacity change from 0 to 512 [ 270.193512][T19123] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 270.206587][T19111] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 270.216492][T19111] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 270.311165][T19123] EXT4-fs (loop3): 1 truncate cleaned up [ 270.364327][T19129] loop0: detected capacity change from 0 to 512 [ 270.378979][T19129] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 270.393489][T19132] loop3: detected capacity change from 0 to 512 [ 270.477271][T19132] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 270.791524][T19129] EXT4-fs (loop0): 1 truncate cleaned up [ 270.793798][T19132] EXT4-fs (loop3): 1 truncate cleaned up [ 270.850333][T19155] netlink: 14 bytes leftover after parsing attributes in process `syz.3.4031'. [ 271.180385][T19204] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4035'. [ 271.222513][T19212] SELinux: failed to load policy [ 271.271293][T19221] loop3: detected capacity change from 0 to 512 [ 271.289492][T19221] ext4 filesystem being mounted at /206/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 271.302769][T19221] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 271.311829][T19221] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 271.609726][T19258] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 271.620095][T19258] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.662493][T19258] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 271.672972][T19258] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.762958][T19258] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 271.773376][T19258] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.841771][T19258] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 271.852142][T19258] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.968850][ T167] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 271.977182][ T167] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.002416][ T167] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 272.010734][ T167] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.020297][ T167] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 272.028592][ T167] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.071410][ T167] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 272.079702][ T167] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.139702][T19277] hub 8-0:1.0: USB hub found [ 272.144552][T19277] hub 8-0:1.0: 8 ports detected [ 272.173150][T19283] SELinux: failed to load policy [ 272.203391][T19285] 9pnet_fd: Insufficient options for proto=fd [ 272.250045][T19285] hub 8-0:1.0: USB hub found [ 272.254853][T19285] hub 8-0:1.0: 8 ports detected [ 272.271001][T19291] SELinux: failed to load policy [ 272.294416][T19293] netlink: 14 bytes leftover after parsing attributes in process `syz.0.4047'. [ 272.327215][T19295] SELinux: failed to load policy [ 272.352180][T19297] loop1: detected capacity change from 0 to 512 [ 272.360291][T19297] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 272.372819][T19297] EXT4-fs (loop1): 1 truncate cleaned up [ 272.612606][T19307] netlink: 52 bytes leftover after parsing attributes in process `syz.1.4049'. [ 272.650603][T19307] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.689773][T19307] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.749767][T19307] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.809236][T19307] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.964831][ T29] kauditd_printk_skb: 185 callbacks suppressed [ 272.964868][ T29] audit: type=1400 audit(1759155769.542:43049): avc: denied { read } for pid=19310 comm="syz.2.4053" name="nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 272.994339][ T29] audit: type=1400 audit(1759155769.542:43050): avc: denied { open } for pid=19310 comm="syz.2.4053" path="/dev/nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 273.006372][T19311] SELinux: Context system_u:object_r:modules_conf_t:s0 is not valid (left unmapped). [ 273.028018][ T29] audit: type=1400 audit(1759155769.612:43051): avc: denied { relabelto } for pid=19310 comm="syz.2.4053" name="nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="system_u:object_r:modules_conf_t:s0" [ 273.055412][ T29] audit: type=1400 audit(1759155769.612:43052): avc: denied { associate } for pid=19310 comm="syz.2.4053" name="nvram" dev="devtmpfs" ino=98 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 srawcon="system_u:object_r:modules_conf_t:s0" [ 273.106073][ T29] audit: type=1400 audit(1759155769.642:43053): avc: denied { ioctl } for pid=19310 comm="syz.2.4053" path="/dev/nvram" dev="devtmpfs" ino=98 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="system_u:object_r:modules_conf_t:s0" [ 273.172876][ T167] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.196311][ T167] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.205576][ T167] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.214156][ T167] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.258737][ T29] audit: type=1326 audit(1759155769.822:43054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19319 comm="syz.0.4057" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3923bfeec9 code=0x7ffc0000 [ 273.282662][ T29] audit: type=1326 audit(1759155769.822:43055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19319 comm="syz.0.4057" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f3923bfeec9 code=0x7ffc0000 [ 273.306236][ T29] audit: type=1326 audit(1759155769.822:43056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19319 comm="syz.0.4057" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3923bfeec9 code=0x7ffc0000 [ 273.330024][ T29] audit: type=1326 audit(1759155769.822:43057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19321 comm="syz.0.4057" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f3923c31785 code=0x7ffc0000 [ 273.354156][ T29] audit: type=1326 audit(1759155769.842:43058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19319 comm="syz.0.4057" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f3923bfeec9 code=0x7ffc0000 [ 273.404205][T19328] SELinux: failed to load policy [ 273.451414][T19333] SELinux: failed to load policy [ 273.489098][T19326] loop4: detected capacity change from 0 to 2048 [ 273.531350][T19326] ext4 filesystem being mounted at /156/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 273.559644][T19326] netlink: 'syz.4.4059': attribute type 13 has an invalid length. [ 273.586489][T19350] loop2: detected capacity change from 0 to 512 [ 273.611917][T19350] ext4 filesystem being mounted at /234/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 273.635130][T19350] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 273.644379][T19350] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 273.652627][T19360] loop4: detected capacity change from 0 to 512 [ 273.708316][T19360] ext4 filesystem being mounted at /157/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 273.724576][T19360] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 273.734502][T19360] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 274.767213][T19381] loop0: detected capacity change from 0 to 512 [ 274.999187][T19381] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 275.034368][T19381] EXT4-fs (loop0): 1 truncate cleaned up [ 275.067624][T19386] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4067'. [ 275.126054][T19376] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 275.198883][T19376] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 275.288678][T19402] netlink: 52 bytes leftover after parsing attributes in process `syz.0.4066'. [ 275.418337][T19376] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 275.469525][T19376] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 275.664028][ T5176] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 275.673022][ T5176] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 275.681726][ T5176] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 275.691222][ T5176] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 275.933723][T19441] SELinux: failed to load policy [ 276.029962][T19450] hub 8-0:1.0: USB hub found [ 276.046611][T19450] hub 8-0:1.0: 8 ports detected [ 276.294213][T19493] loop3: detected capacity change from 0 to 1024 [ 276.301556][T19493] EXT4-fs: Ignoring removed bh option [ 276.307962][T19493] EXT4-fs (loop3): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 276.949667][T19568] loop1: detected capacity change from 0 to 512 [ 276.958244][T19568] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 276.966710][T19570] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4081'. [ 276.984604][T19568] EXT4-fs (loop1): 1 truncate cleaned up [ 277.054880][T19591] SELinux: failed to load policy [ 277.089730][T19595] loop1: detected capacity change from 0 to 512 [ 277.119555][T19595] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.4083: bg 0: block 248: padding at end of block bitmap is not set [ 277.135372][T19595] EXT4-fs error (device loop1): ext4_acquire_dquot:6937: comm syz.1.4083: Failed to acquire dquot type 1 [ 277.148889][T19595] EXT4-fs (loop1): 1 truncate cleaned up [ 277.155458][T19595] ext4 filesystem being mounted at /179/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 277.324593][T19630] 9pnet_fd: Insufficient options for proto=fd [ 277.403098][T19643] loop3: detected capacity change from 0 to 512 [ 277.410582][T19643] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 277.423363][T19643] EXT4-fs (loop3): 1 truncate cleaned up [ 277.509009][T19663] loop3: detected capacity change from 0 to 512 [ 277.516333][T19663] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 277.529189][T19663] EXT4-fs (loop3): 1 truncate cleaned up [ 278.130649][ T29] kauditd_printk_skb: 567 callbacks suppressed [ 278.130669][ T29] audit: type=1326 audit(1759155774.712:43624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19745 comm="syz.2.4095" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2172a1eec9 code=0x7ffc0000 [ 278.134725][T19743] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4094'. [ 278.136970][ T29] audit: type=1326 audit(1759155774.712:43625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19745 comm="syz.2.4095" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2172a1eec9 code=0x7ffc0000 [ 278.197832][ T29] audit: type=1326 audit(1759155774.772:43626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19745 comm="syz.2.4095" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f2172a1eec9 code=0x7ffc0000 [ 278.221494][ T29] audit: type=1326 audit(1759155774.772:43627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19748 comm="syz.2.4095" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f2172a51785 code=0x7ffc0000 [ 278.245174][ T29] audit: type=1326 audit(1759155774.772:43628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19745 comm="syz.2.4095" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2172a1eec9 code=0x7ffc0000 [ 278.268846][ T29] audit: type=1326 audit(1759155774.772:43629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19745 comm="syz.2.4095" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2172a1eec9 code=0x7ffc0000 [ 278.292627][ T29] audit: type=1326 audit(1759155774.782:43630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19745 comm="syz.2.4095" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f2172a1eec9 code=0x7ffc0000 [ 278.316190][ T29] audit: type=1326 audit(1759155774.782:43631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19745 comm="syz.2.4095" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2172a1eec9 code=0x7ffc0000 [ 278.340026][ T29] audit: type=1326 audit(1759155774.782:43632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19745 comm="syz.2.4095" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f2172a1eec9 code=0x7ffc0000 [ 278.363661][ T29] audit: type=1326 audit(1759155774.782:43633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19745 comm="syz.2.4095" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2172a1eec9 code=0x7ffc0000 [ 278.609005][T19786] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4101'. [ 278.648947][T19792] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4102'. [ 279.517134][T19858] SELinux: failed to load policy [ 279.543095][T19857] loop2: detected capacity change from 0 to 764 [ 279.590427][T19860] loop1: detected capacity change from 0 to 1024 [ 279.604051][T19865] 9pnet_fd: Insufficient options for proto=fd [ 279.612987][T19860] EXT4-fs: Ignoring removed bh option [ 279.614789][T19870] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4116'. [ 279.627200][T19860] EXT4-fs (loop1): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 279.661828][T19865] hub 8-0:1.0: USB hub found [ 279.666631][T19865] hub 8-0:1.0: 8 ports detected [ 279.732786][T19878] loop0: detected capacity change from 0 to 1024 [ 279.752328][T19878] EXT4-fs: Ignoring removed bh option [ 279.759216][T19878] EXT4-fs (loop0): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 279.809545][T19889] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4120'. [ 279.931353][T19907] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4122'. [ 279.955456][T19911] SELinux: failed to load policy [ 280.320263][T19961] hub 8-0:1.0: USB hub found [ 280.325193][T19961] hub 8-0:1.0: 8 ports detected [ 280.397479][T19977] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4127'. [ 280.647360][T20017] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4131'. [ 280.756292][T20032] loop4: detected capacity change from 0 to 1024 [ 280.767669][T20032] EXT4-fs: Ignoring removed bh option [ 280.777928][T20032] EXT4-fs (loop4): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 280.915721][T20050] loop1: detected capacity change from 0 to 512 [ 280.969915][T20050] ext4 filesystem being mounted at /192/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 280.990820][T20050] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 281.010881][T20050] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 281.122297][T20063] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4141'. [ 281.176094][T20066] loop4: detected capacity change from 0 to 512 [ 281.188517][T20066] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.4142: bg 0: block 248: padding at end of block bitmap is not set [ 281.204220][T20066] EXT4-fs error (device loop4): ext4_acquire_dquot:6937: comm syz.4.4142: Failed to acquire dquot type 1 [ 281.219681][T20066] EXT4-fs (loop4): 1 truncate cleaned up [ 281.229108][T20066] EXT4-fs mount: 40 callbacks suppressed [ 281.229128][T20066] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 281.249528][T20066] ext4 filesystem being mounted at /172/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 281.293102][T20066] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 281.814658][T20074] loop3: detected capacity change from 0 to 2048 [ 281.865787][T20074] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 281.898150][T20074] ext4 filesystem being mounted at /224/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 281.912826][T20074] netlink: 'syz.3.4144': attribute type 13 has an invalid length. [ 281.937546][T14681] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 281.987878][T20084] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4146'. [ 282.006511][T20087] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 282.015273][T20087] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 282.110487][T20095] FAULT_INJECTION: forcing a failure. [ 282.110487][T20095] name failslab, interval 1, probability 0, space 0, times 0 [ 282.123201][T20095] CPU: 1 UID: 0 PID: 20095 Comm: syz.4.4150 Not tainted syzkaller #0 PREEMPT(voluntary) [ 282.123235][T20095] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 282.123249][T20095] Call Trace: [ 282.123257][T20095] [ 282.123266][T20095] __dump_stack+0x1d/0x30 [ 282.123289][T20095] dump_stack_lvl+0xe8/0x140 [ 282.123343][T20095] dump_stack+0x15/0x1b [ 282.123385][T20095] should_fail_ex+0x265/0x280 [ 282.123419][T20095] should_failslab+0x8c/0xb0 [ 282.123452][T20095] kmem_cache_alloc_node_noprof+0x57/0x320 [ 282.123561][T20095] ? __alloc_skb+0x101/0x320 [ 282.123582][T20095] __alloc_skb+0x101/0x320 [ 282.123602][T20095] mroute_netlink_event+0x7b/0x110 [ 282.123650][T20095] ipmr_mfc_add+0x133b/0x1530 [ 282.123743][T20095] ip_mroute_setsockopt+0x739/0x960 [ 282.123782][T20095] do_ip_setsockopt+0xcea/0x2240 [ 282.123820][T20095] ip_setsockopt+0x58/0x110 [ 282.123839][T20095] raw_setsockopt+0xbd/0x150 [ 282.124008][T20095] sock_common_setsockopt+0x66/0x80 [ 282.124047][T20095] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 282.124092][T20095] __sys_setsockopt+0x184/0x200 [ 282.124184][T20095] __x64_sys_setsockopt+0x64/0x80 [ 282.124208][T20095] x64_sys_call+0x20ec/0x2ff0 [ 282.124287][T20095] do_syscall_64+0xd2/0x200 [ 282.124327][T20095] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 282.124361][T20095] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 282.124551][T20095] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 282.124581][T20095] RIP: 0033:0x7f2ebba5eec9 [ 282.124601][T20095] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 282.124625][T20095] RSP: 002b:00007f2eba4bf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 282.124646][T20095] RAX: ffffffffffffffda RBX: 00007f2ebbcb5fa0 RCX: 00007f2ebba5eec9 [ 282.124661][T20095] RDX: 00000000000000d2 RSI: 0000000000000000 RDI: 0000000000000003 [ 282.124682][T20095] RBP: 00007f2eba4bf090 R08: 000000000000003c R09: 0000000000000000 [ 282.124695][T20095] R10: 00002000000000c0 R11: 0000000000000246 R12: 0000000000000001 [ 282.124752][T20095] R13: 00007f2ebbcb6038 R14: 00007f2ebbcb5fa0 R15: 00007ffc296f35f8 [ 282.124779][T20095] [ 282.397704][T20102] IPv6: NLM_F_CREATE should be specified when creating new route [ 282.460802][T20091] loop3: detected capacity change from 0 to 512 [ 282.468206][T20091] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 282.495707][T20091] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 282.825999][T20110] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 282.843036][T20110] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 282.989689][T20117] loop3: detected capacity change from 0 to 2048 [ 283.037470][T20112] netlink: 'syz.3.4155': attribute type 13 has an invalid length. [ 283.059802][T20119] siw: device registration error -23 [ 283.532452][ T29] kauditd_printk_skb: 291 callbacks suppressed [ 283.532473][ T29] audit: type=1326 audit(1759155780.112:43923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20126 comm="syz.3.4159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff355d2eec9 code=0x7ffc0000 [ 283.562546][ T29] audit: type=1326 audit(1759155780.112:43924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20126 comm="syz.3.4159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff355d2eec9 code=0x7ffc0000 [ 283.564003][T20127] loop3: detected capacity change from 0 to 1024 [ 283.586333][ T29] audit: type=1326 audit(1759155780.132:43925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20126 comm="syz.3.4159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7ff355d2eec9 code=0x7ffc0000 [ 283.595292][T20127] EXT4-fs: Ignoring removed bh option [ 283.616333][ T29] audit: type=1326 audit(1759155780.132:43926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20126 comm="syz.3.4159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7ff355d2ef03 code=0x7ffc0000 [ 283.616375][ T29] audit: type=1326 audit(1759155780.132:43927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20126 comm="syz.3.4159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7ff355d2d97f code=0x7ffc0000 [ 283.616413][ T29] audit: type=1326 audit(1759155780.132:43928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20126 comm="syz.3.4159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7ff355d2ef57 code=0x7ffc0000 [ 283.625100][T20127] EXT4-fs (loop3): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 283.645735][ T29] audit: type=1326 audit(1759155780.142:43929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20126 comm="syz.3.4159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff355d2d710 code=0x7ffc0000 [ 283.726177][ T29] audit: type=1326 audit(1759155780.142:43930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20126 comm="syz.3.4159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ff355d2eacb code=0x7ffc0000 [ 283.729005][T20127] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 283.749775][ T29] audit: type=1326 audit(1759155780.172:43931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20126 comm="syz.3.4159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7ff355d2db2a code=0x7ffc0000 [ 283.785309][ T29] audit: type=1326 audit(1759155780.172:43932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20126 comm="syz.3.4159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7ff355d2db2a code=0x7ffc0000 [ 283.849758][T20133] hub 8-0:1.0: USB hub found [ 283.854570][T20133] hub 8-0:1.0: 8 ports detected [ 283.888217][T14681] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 283.920934][T20135] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 283.929513][T20135] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 283.970830][T14972] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 284.024252][T20143] __nla_validate_parse: 2 callbacks suppressed [ 284.024300][T20143] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4165'. [ 284.054731][T20145] netlink: 72 bytes leftover after parsing attributes in process `syz.1.4166'. [ 284.066410][T20145] netlink: 64 bytes leftover after parsing attributes in process `syz.1.4166'. [ 284.275438][T20159] loop3: detected capacity change from 0 to 1024 [ 284.283194][T20159] EXT4-fs: Ignoring removed bh option [ 284.290030][T20159] EXT4-fs (loop3): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 284.328603][T20159] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 284.359986][T20161] hub 8-0:1.0: USB hub found [ 284.364718][T20161] hub 8-0:1.0: 8 ports detected [ 284.412906][T14681] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 284.439079][T20165] loop3: detected capacity change from 0 to 512 [ 284.450814][T20165] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 284.463603][T20165] ext4 filesystem being mounted at /239/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 284.476604][T20165] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 284.485237][T20165] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 284.505328][T20171] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 284.524289][T20171] SELinux: failed to load policy [ 284.612234][T20176] 9pnet_fd: Insufficient options for proto=fd [ 284.637424][T20173] loop0: detected capacity change from 0 to 2048 [ 284.648846][T20173] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 284.652108][T20176] hub 8-0:1.0: USB hub found [ 284.661454][T20173] ext4 filesystem being mounted at /314/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 284.666794][T20176] hub 8-0:1.0: 8 ports detected [ 285.006461][T20173] netlink: 'syz.0.4177': attribute type 13 has an invalid length. [ 285.097140][T13540] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 285.173054][T20185] 9pnet_fd: Insufficient options for proto=fd [ 285.184981][T20187] netlink: 14 bytes leftover after parsing attributes in process `syz.1.4181'. [ 285.218503][T20185] hub 8-0:1.0: USB hub found [ 285.235678][T20185] hub 8-0:1.0: 8 ports detected [ 285.343150][T20191] loop2: detected capacity change from 0 to 512 [ 285.355520][T20191] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 285.368928][T20191] EXT4-fs (loop2): 1 truncate cleaned up [ 285.375137][T20191] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 285.392574][T20193] hub 8-0:1.0: USB hub found [ 285.399467][T20193] hub 8-0:1.0: 8 ports detected [ 285.463031][T13387] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 285.539765][T20207] hub 8-0:1.0: USB hub found [ 285.545629][T20207] hub 8-0:1.0: 8 ports detected [ 285.594871][T20211] loop1: detected capacity change from 0 to 1024 [ 285.603167][T20211] EXT4-fs: Ignoring removed bh option [ 285.609107][T20211] EXT4-fs (loop1): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 285.630356][T20211] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 285.699765][T20217] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4191'. [ 285.777965][T14972] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 285.894370][T20226] loop4: detected capacity change from 0 to 1024 [ 285.901734][T20226] EXT4-fs: Ignoring removed bh option [ 285.909347][T20226] EXT4-fs (loop4): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 285.930643][T20226] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 286.046322][T14158] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 286.078469][T20231] netlink: 14 bytes leftover after parsing attributes in process `syz.4.4195'. [ 286.122283][T20235] loop0: detected capacity change from 0 to 512 [ 286.130097][T20235] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 286.142637][T20235] EXT4-fs (loop0): 1 truncate cleaned up [ 286.148855][T20235] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 286.215943][T13540] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 286.340704][T20247] hub 8-0:1.0: USB hub found [ 286.345851][T20247] hub 8-0:1.0: 8 ports detected [ 286.436930][T20250] 9pnet_fd: Insufficient options for proto=fd [ 286.482160][T20250] hub 8-0:1.0: USB hub found [ 286.487009][T20250] hub 8-0:1.0: 8 ports detected [ 286.584416][T20256] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4204'. [ 286.615315][T20257] IPv6: NLM_F_CREATE should be specified when creating new route [ 286.681181][T20261] loop1: detected capacity change from 0 to 1024 [ 286.689079][T20252] loop2: detected capacity change from 0 to 512 [ 286.694034][T20261] EXT4-fs: Ignoring removed bh option [ 286.696194][T20252] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 286.701808][T20261] EXT4-fs (loop1): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 286.743721][T20261] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 286.813678][T20269] 9pnet_fd: Insufficient options for proto=fd [ 286.825957][T20263] loop4: detected capacity change from 0 to 2048 [ 286.848319][T20263] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 286.862298][T20263] ext4 filesystem being mounted at /183/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 286.879445][T20269] hub 8-0:1.0: USB hub found [ 286.884454][T20263] netlink: 'syz.4.4206': attribute type 13 has an invalid length. [ 286.885891][T20269] hub 8-0:1.0: 8 ports detected [ 286.899639][T14972] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 286.925211][T14158] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 286.934617][T20274] loop1: detected capacity change from 0 to 512 [ 286.941882][T20274] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 286.953508][T20274] EXT4-fs (loop1): 1 truncate cleaned up [ 286.967518][T20274] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 286.998350][T20279] 9pnet_fd: Insufficient options for proto=fd [ 287.020025][T20282] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4212'. [ 287.048293][T14972] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 287.468219][T20299] 9pnet_fd: Insufficient options for proto=fd [ 287.504718][T20303] loop2: detected capacity change from 0 to 1024 [ 287.514327][T20303] EXT4-fs: Ignoring removed bh option [ 287.520277][T20303] EXT4-fs (loop2): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 287.521149][T14681] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 287.543860][T20303] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 287.651480][T13387] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 287.682677][T20309] loop3: detected capacity change from 0 to 512 [ 287.689218][T20307] loop0: detected capacity change from 0 to 2048 [ 287.689711][T20309] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 287.709483][T20307] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 287.723608][T20307] ext4 filesystem being mounted at /325/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 287.741914][T20307] netlink: 'syz.0.4221': attribute type 13 has an invalid length. [ 287.764514][T20317] SELinux: failed to load policy [ 287.776506][T13540] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 287.787845][T20319] 9pnet_fd: Insufficient options for proto=fd [ 287.831593][T20323] loop0: detected capacity change from 0 to 512 [ 287.839090][T20323] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 287.859332][T20323] EXT4-fs (loop0): 1 truncate cleaned up [ 287.869015][T20323] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 287.895154][T20325] 9pnet_fd: Insufficient options for proto=fd [ 287.930651][T20325] hub 8-0:1.0: USB hub found [ 287.935442][T20325] hub 8-0:1.0: 8 ports detected [ 288.133795][T13540] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 288.150549][T20342] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4234'. [ 288.266558][T20356] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4238'. [ 288.280130][T20354] 9pnet_fd: Insufficient options for proto=fd [ 288.296912][T20358] SELinux: failed to load policy [ 288.317163][T20346] loop4: detected capacity change from 0 to 2048 [ 288.334347][T20346] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 288.347403][T20346] ext4 filesystem being mounted at /189/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 288.360091][T20346] netlink: 'syz.4.4235': attribute type 13 has an invalid length. [ 288.391769][T14158] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 288.423391][T20370] loop4: detected capacity change from 0 to 512 [ 288.439152][T20370] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 288.542438][ T29] kauditd_printk_skb: 1078 callbacks suppressed [ 288.542455][ T29] audit: type=1326 audit(1759155785.122:45011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20365 comm="syz.0.4241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f3923bf5d67 code=0x7ffc0000 [ 288.583138][ T29] audit: type=1326 audit(1759155785.142:45012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20368 comm="syz.0.4241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7f3923bfeec9 code=0x7ffc0000 [ 288.606777][ T29] audit: type=1326 audit(1759155785.162:45013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20365 comm="syz.0.4241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f3923b9af79 code=0x7ffc0000 [ 288.630638][ T29] audit: type=1326 audit(1759155785.162:45014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20365 comm="syz.0.4241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f3923bf5d67 code=0x7ffc0000 [ 288.645043][T20379] loop1: detected capacity change from 0 to 512 [ 288.654232][ T29] audit: type=1326 audit(1759155785.162:45015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20365 comm="syz.0.4241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f3923b9af79 code=0x7ffc0000 [ 288.662907][T20379] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 288.684075][ T29] audit: type=1326 audit(1759155785.162:45016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20365 comm="syz.0.4241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f3923bfeec9 code=0x7ffc0000 [ 288.704282][T20379] EXT4-fs (loop1): 1 truncate cleaned up [ 288.719693][ T29] audit: type=1326 audit(1759155785.272:45017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20365 comm="syz.0.4241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f3923bf5d67 code=0x7ffc0000 [ 288.723888][T20379] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 288.747151][ T29] audit: type=1326 audit(1759155785.272:45018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20365 comm="syz.0.4241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f3923b9af79 code=0x7ffc0000 [ 288.783170][ T29] audit: type=1326 audit(1759155785.272:45019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20365 comm="syz.0.4241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f3923bfeec9 code=0x7ffc0000 [ 288.806707][ T29] audit: type=1326 audit(1759155785.272:45020): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20365 comm="syz.0.4241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f3923bf5d67 code=0x7ffc0000 [ 288.871647][T14972] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 289.038174][T20396] SELinux: failed to load policy [ 289.075533][T20399] 9pnet_fd: Insufficient options for proto=fd [ 289.207896][T20407] loop3: detected capacity change from 0 to 512 [ 289.215253][T20407] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 289.261303][T20407] EXT4-fs (loop3): 1 truncate cleaned up [ 289.267577][T20407] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 289.313260][T14158] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 289.332833][T20413] loop1: detected capacity change from 0 to 512 [ 289.340977][T20413] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 289.362552][T20411] hub 8-0:1.0: USB hub found [ 289.388300][T20411] hub 8-0:1.0: 8 ports detected [ 289.394108][T20413] EXT4-fs (loop1): 1 truncate cleaned up [ 289.403033][T20413] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 289.429468][T20418] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4259'. [ 289.458910][T20421] loop4: detected capacity change from 0 to 512 [ 289.468580][T20421] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.4258: bg 0: block 248: padding at end of block bitmap is not set [ 289.485589][T20421] EXT4-fs error (device loop4): ext4_acquire_dquot:6937: comm syz.4.4258: Failed to acquire dquot type 1 [ 290.045969][T20421] EXT4-fs (loop4): 1 truncate cleaned up [ 290.052461][T20421] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 290.065291][T20421] ext4 filesystem being mounted at /191/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 290.077173][T20407] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 290.086952][T20407] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.145775][T20434] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4262'. [ 290.157137][T20407] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 290.167037][T20407] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.218808][T20407] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 290.228689][T20407] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.288436][T20407] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 290.298415][T20407] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.311132][T20421] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 290.320843][T14972] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 290.347893][T20441] SELinux: failed to load policy [ 290.375060][ T5176] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 290.383419][ T5176] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 290.396896][T20443] 9pnet_fd: Insufficient options for proto=fd [ 290.416063][ T5176] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 290.424508][ T5176] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 290.439134][ T5176] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 290.447453][ T5176] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 290.456072][ T5176] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 290.464406][ T5176] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 290.491520][T14681] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 290.494228][T20446] loop1: detected capacity change from 0 to 1024 [ 290.508781][T20446] EXT4-fs: Ignoring removed bh option [ 290.514805][T20446] EXT4-fs (loop1): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 290.520374][T20448] loop2: detected capacity change from 0 to 512 [ 290.544681][T20448] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 290.558145][T20448] EXT4-fs (loop2): 1 truncate cleaned up [ 290.564686][T20448] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 290.578560][T20446] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 290.766567][T14972] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 290.851168][T20461] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.939330][T20461] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.972164][T20460] 9pnet_fd: Insufficient options for proto=fd [ 290.990228][T20461] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 291.044179][T20460] hub 8-0:1.0: USB hub found [ 291.066364][T20460] hub 8-0:1.0: 8 ports detected [ 291.074252][T20461] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 291.172466][ T5193] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.192003][ T5193] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.203025][T20463] loop0: detected capacity change from 0 to 512 [ 291.228817][ T5193] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.230534][T20463] /dev/loop0: Can't open blockdev [ 291.242829][ T5193] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.262101][T20466] SELinux: failed to load policy [ 291.285633][T20468] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4273'. [ 291.428765][T13387] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 291.445364][T20478] netlink: 14 bytes leftover after parsing attributes in process `syz.3.4277'. [ 291.469148][T20480] SELinux: failed to load policy [ 291.483279][T20482] 9pnet_fd: Insufficient options for proto=fd [ 291.551918][T20486] loop2: detected capacity change from 0 to 512 [ 291.568840][T20486] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.4281: bg 0: block 248: padding at end of block bitmap is not set [ 291.599440][T20486] EXT4-fs error (device loop2): ext4_acquire_dquot:6937: comm syz.2.4281: Failed to acquire dquot type 1 [ 291.624571][T20486] EXT4-fs (loop2): 1 truncate cleaned up [ 291.631918][T20486] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 291.644921][T20486] ext4 filesystem being mounted at /272/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 291.658023][T20486] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 291.689622][T20492] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 291.698839][T20492] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 291.722376][T20494] SELinux: failed to load policy [ 291.946398][T20501] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 291.955051][T20501] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 291.969709][T20503] loop0: detected capacity change from 0 to 512 [ 291.976397][T20503] /dev/loop0: Can't open blockdev [ 292.132939][T20506] loop1: detected capacity change from 0 to 512 [ 292.139996][T20506] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 292.152429][T20506] EXT4-fs (loop1): 1 truncate cleaned up [ 292.158985][T20506] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 292.458360][T20517] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 292.558108][T20517] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 292.637876][T20517] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 292.703376][T20517] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 292.915065][ T5201] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 292.928544][T20521] loop4: detected capacity change from 0 to 512 [ 292.943099][T20519] 9pnet_fd: Insufficient options for proto=fd [ 292.950582][ T5201] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 292.967694][T20521] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 292.977871][ T5201] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 292.986323][ T5201] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 292.996497][T20523] netlink: 14 bytes leftover after parsing attributes in process `syz.2.4293'. [ 293.029210][T20521] EXT4-fs (loop4): 1 truncate cleaned up [ 293.035376][T20521] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 293.049425][T20525] SELinux: failed to load policy [ 293.093622][T14972] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 293.149505][T14158] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 293.185970][T20538] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4298'. [ 293.239776][T20542] FAULT_INJECTION: forcing a failure. [ 293.239776][T20542] name failslab, interval 1, probability 0, space 0, times 0 [ 293.252461][T20542] CPU: 0 UID: 0 PID: 20542 Comm: syz.4.4299 Not tainted syzkaller #0 PREEMPT(voluntary) [ 293.252564][T20542] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 293.252581][T20542] Call Trace: [ 293.252591][T20542] [ 293.252602][T20542] __dump_stack+0x1d/0x30 [ 293.252630][T20542] dump_stack_lvl+0xe8/0x140 [ 293.252723][T20542] dump_stack+0x15/0x1b [ 293.252740][T20542] should_fail_ex+0x265/0x280 [ 293.252823][T20542] should_failslab+0x8c/0xb0 [ 293.252936][T20542] __kmalloc_noprof+0xa5/0x3e0 [ 293.252976][T20542] ? bpf_test_init+0xa9/0x160 [ 293.253006][T20542] bpf_test_init+0xa9/0x160 [ 293.253028][T20542] bpf_prog_test_run_skb+0x144/0xbd0 [ 293.253146][T20542] ? __rcu_read_unlock+0x4f/0x70 [ 293.253176][T20542] ? __fget_files+0x184/0x1c0 [ 293.253206][T20542] ? __rcu_read_unlock+0x4f/0x70 [ 293.253265][T20542] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 293.253291][T20542] bpf_prog_test_run+0x22a/0x390 [ 293.253331][T20542] __sys_bpf+0x4b9/0x7b0 [ 293.253403][T20542] __x64_sys_bpf+0x41/0x50 [ 293.253439][T20542] x64_sys_call+0x2aea/0x2ff0 [ 293.253465][T20542] do_syscall_64+0xd2/0x200 [ 293.253577][T20542] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 293.253609][T20542] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 293.253640][T20542] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 293.253666][T20542] RIP: 0033:0x7f2ebba5eec9 [ 293.253723][T20542] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 293.253748][T20542] RSP: 002b:00007f2eba4bf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 293.253775][T20542] RAX: ffffffffffffffda RBX: 00007f2ebbcb5fa0 RCX: 00007f2ebba5eec9 [ 293.253792][T20542] RDX: 0000000000000028 RSI: 0000200000000080 RDI: 000000000000000a [ 293.253810][T20542] RBP: 00007f2eba4bf090 R08: 0000000000000000 R09: 0000000000000000 [ 293.253827][T20542] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 293.253926][T20542] R13: 00007f2ebbcb6038 R14: 00007f2ebbcb5fa0 R15: 00007ffc296f35f8 [ 293.253951][T20542] [ 293.460559][ C0] ================================================================== [ 293.468645][ C0] BUG: KCSAN: data-race in kick_pool / wq_worker_running [ 293.475687][ C0] [ 293.478034][ C0] read-write to 0xffff888237d29d64 of 4 bytes by task 36 on cpu 1: [ 293.485919][ C0] wq_worker_running+0x95/0x120 [ 293.490770][ C0] schedule_timeout+0xb7/0x170 [ 293.495544][ C0] msleep+0x50/0x90 [ 293.499351][ C0] nsim_fib_event_work+0x1ebc/0x21a0 [ 293.504641][ C0] process_scheduled_works+0x4ce/0x9d0 [ 293.510116][ C0] worker_thread+0x582/0x770 [ 293.514717][ C0] kthread+0x486/0x510 [ 293.518784][ C0] ret_from_fork+0x11f/0x1b0 [ 293.523375][ C0] ret_from_fork_asm+0x1a/0x30 [ 293.528252][ C0] [ 293.530571][ C0] read to 0xffff888237d29d64 of 4 bytes by interrupt on cpu 0: [ 293.538105][ C0] kick_pool+0x49/0x2d0 [ 293.542344][ C0] __queue_work+0x8cb/0xb50 [ 293.546846][ C0] queue_work_on+0xd1/0x160 [ 293.551363][ C0] wg_packet_send_staged_packets+0x83d/0xab0 [ 293.557446][ C0] wg_packet_send_keepalive+0xeb/0x100 [ 293.562915][ C0] wg_expired_send_persistent_keepalive+0x3c/0x50 [ 293.569353][ C0] call_timer_fn+0x3b/0x2c0 [ 293.573869][ C0] __run_timer_base+0x415/0x610 [ 293.578758][ C0] run_timer_softirq+0x31/0x70 [ 293.583545][ C0] handle_softirqs+0xb7/0x290 [ 293.588257][ C0] __irq_exit_rcu+0x3a/0xc0 [ 293.592777][ C0] sysvec_apic_timer_interrupt+0x74/0x80 [ 293.598424][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 293.604565][ C0] __cond_resched+0x0/0x90 [ 293.608998][ C0] __get_user_pages+0x433/0x1fa0 [ 293.613941][ C0] __mm_populate+0x243/0x3a0 [ 293.618534][ C0] vm_mmap_pgoff+0x232/0x2e0 [ 293.623133][ C0] ksys_mmap_pgoff+0x268/0x310 [ 293.627993][ C0] x64_sys_call+0x14a3/0x2ff0 [ 293.632670][ C0] do_syscall_64+0xd2/0x200 [ 293.637182][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 293.643140][ C0] [ 293.645495][ C0] value changed: 0x00000000 -> 0x00000001 [ 293.651209][ C0] [ 293.653536][ C0] Reported by Kernel Concurrency Sanitizer on: [ 293.659681][ C0] CPU: 0 UID: 0 PID: 20534 Comm: syz.0.4295 Not tainted syzkaller #0 PREEMPT(voluntary) [ 293.669494][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 293.679553][ C0] ================================================================== [ 293.717352][T20544] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 293.725794][T20544] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 293.748421][ T29] kauditd_printk_skb: 305 callbacks suppressed [ 293.748443][ T29] audit: type=1326 audit(1759155790.292:45322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20543 comm="syz.1.4300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c7f94eec9 code=0x7ffc0000 [ 293.755044][T20529] loop0: detected capacity change from 0 to 2048 [ 293.778321][ T29] audit: type=1326 audit(1759155790.292:45323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20543 comm="syz.1.4300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=106 compat=0 ip=0x7f2c7f94eec9 code=0x7ffc0000 [ 293.808337][ T29] audit: type=1326 audit(1759155790.292:45324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20543 comm="syz.1.4300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c7f94eec9 code=0x7ffc0000 [ 293.832125][ T29] audit: type=1326 audit(1759155790.292:45325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20543 comm="syz.1.4300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f2c7f94eec9 code=0x7ffc0000 [ 293.839645][T20529] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 293.855732][ T29] audit: type=1326 audit(1759155790.292:45326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20543 comm="syz.1.4300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c7f94eec9 code=0x7ffc0000 [ 293.855774][ T29] audit: type=1326 audit(1759155790.292:45327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20543 comm="syz.1.4300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f2c7f94d710 code=0x7ffc0000 [ 293.869402][T20529] ext4 filesystem being mounted at /336/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 293.891911][ T29] audit: type=1326 audit(1759155790.302:45328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20543 comm="syz.1.4300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f2c7f94eacb code=0x7ffc0000 [ 293.891952][ T29] audit: type=1326 audit(1759155790.302:45329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20543 comm="syz.1.4300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f2c7f94eacb code=0x7ffc0000 [ 293.965459][T20529] netlink: 'syz.0.4295': attribute type 13 has an invalid length. [ 293.973367][ T29] audit: type=1326 audit(1759155790.362:45330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20543 comm="syz.1.4300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c7f94eec9 code=0x7ffc0000 [ 294.004782][ T29] audit: type=1326 audit(1759155790.362:45331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20543 comm="syz.1.4300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c7f94eec9 code=0x7ffc0000 [ 294.031930][T13540] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.