last executing test programs: 12m54.286373651s ago: executing program 3 (id=790): r0 = socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB, @ANYBLOB], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) close(0xffffffffffffffff) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000001c0), 0x1, 0x4fa, &(0x7f00000005c0)="$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") ioctl$TIOCMIWAIT(0xffffffffffffffff, 0x545c, 0x0) lseek(0xffffffffffffffff, 0x2000, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="7a0a00ff00000000711053000000000095006e71d58f000000000000"], &(0x7f0000000480)='syzkaller\x00'}, 0x80) mount(0x0, &(0x7f0000000500)='./bus\x00', &(0x7f0000000540)='virtiofs\x00', 0x80c000, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x10000000, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe, 0x10}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x2}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x0) 12m51.79307312s ago: executing program 3 (id=797): r0 = socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB, @ANYBLOB, @ANYBLOB], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r5}, 0x10) close(0xffffffffffffffff) r6 = syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000001c0), 0x1, 0x4fa, &(0x7f00000005c0)="$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") ioctl$TIOCMIWAIT(0xffffffffffffffff, 0x545c, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000040)='net/softnet_stat\x00') lseek(r7, 0x2000, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000080)={0x0, r6, 0xf4ca, 0x7fffffff, 0xfffffffffffffffc, 0x7ff}) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x3c, &(0x7f0000000280)=0x7, 0x4) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r8}, 0x10) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x6}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x10000, 0x0, r9, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4000000, 0x3}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x13, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800"/12, @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="7a0a00ff00000000711053000000000095006e71d58f000000000000"], &(0x7f0000000480)='syzkaller\x00'}, 0x80) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x10000000, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe, 0x10}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x2}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x0) 12m47.454566305s ago: executing program 3 (id=803): r0 = openat(0xffffffffffffffff, &(0x7f00000001c0)='./bus\x00', 0x10040, 0x40) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$KVM_CAP_HYPERV_SYNIC2(r0, 0x4068aea3, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000009c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008eadd00b704000000000000850000000300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r5}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0x1, 0x120d, &(0x7f0000001280)="$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") 12m43.965231473s ago: executing program 3 (id=807): r0 = socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1600000000000000040000000500000000000000", @ANYBLOB], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000570000"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r4}, 0x10) close(0xffffffffffffffff) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000001c0), 0x1, 0x4fa, &(0x7f00000005c0)="$eJzs3c9vG1kdAPCvnThx0uwmu+wBEOyW3YWCqjqJuxut9gDLCSFUCdEjSG1I3CiKHUexU5rQQ3rmikQlTnDkD+DcE3cuCG5cygGJHxGoQeLg1YwnqZvaTdQkdhR/PtJo3ps39fe9pvNe/U3iF8DQuhoRuxExFhF3I2I6u57LjvisfST3Pdt7uLS/93ApF63W7X/l0vbkWnT8mcSV7DWLEfGj70X8NPdy3Mb2ztpitVrZzOqzzdrGbGN758ZqbXGlslJZL5cX5hfmPrn5cfnMxvpebSwrffXpH3e/9fOkW1PZlc5xnKX20AuHcRKjEfGD8wg2ACPZeMYG3RFeSz4i3o6I99PnfzpG0q8mAHCZtVrT0ZrurAMAl10+zYHl8qUsFzAV+Xyp1M7hvROT+Wq90bx+r761vtzOlc1EIX9vtVqZy3KFM1HIJfX5tPy8Xj5SvxkRb0XEL8cn0nppqV5dHuR/fABgiF05sv7/d7y9/gMAl1xx0B0AAPrO+g8Aw8f6DwDDx/oPAMOnvf5PDLobAEAfef8PAMPH+g8AQ+WHt24lR2s/+/zr5fvbW2v1+zeWK421Um1rqbRU39wordTrK+ln9tSOe71qvb4x/1FsPZj59kajOdvY3rlTq2+tN++kn+t9p1JI79rtw8gAgF7eeu/JX3LJivzpRHpEx14OhYH2DDhv+UF3ABiYkUF3ABgYu33B8DrFe3zpAbgkumzR+4Jit18QarVarfPrEnDOrn1J/h+GVUf+308Bw5CR/4fhJf8Pw6vVyp10z/846Y0AwMUmxw/0+P7/29n5d9k3B36yfPSOx+fZKwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALjYDvb/LWV7gU9FPl8qRbwRETNRyN1brVbmIuLNiPjzeGE8qc8PuM8AwGnl/57L9v+6Nv3h1AtN7145LI5FxM9+fftXDxabzc0/RYzl/j1+cL35OLte7n/vAYDjHazT6bnjjfyzvYdLB0c/+/OP70ZEsR1/f28s9g/jj8Zoei5GISIm/5PL6m25jtzFaew+iogvdht/LqbSHEh759Oj8ZPYb/Q1fv6F+Pm0rX1O/i6+cAZ9gWHzJJl/Puv2/OXjanru/vwX0xnq9LL5L3mppf10Dnwe/2D+G+kx/109aYyP/vD9dmni5bZHEV8ejTiIvd8x/xzEz/WI/+EJ4//1K+++36ut9ZuIa9E9fmes2WZtY7axvXNjtba4UlmprJfLC/MLc5/c/Lg8m+aoZ3uvBv/89PqbvdqS8U/2iF88ZvxfP+H4f/v/uz/+2ivif/ODbvHz8c4r4idr4jdOGH9x8vfFXm1J/OUe4z/u63/9hPGf/m3npW3DAYDBaWzvrC1Wq5VNBYWLX0j+yV6AbnQtfKdfscaie9MvPmg/00eaWq3XitVrxjiLrBtwERw+9BHxv0F3BgAAAAAAAAAAAAAA6Kofv7E06DECAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABweX0eAAD//19xzyM=") lseek(0xffffffffffffffff, 0x2000, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x10000000, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe, 0x10}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x2}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x0) 12m42.248408027s ago: executing program 3 (id=811): bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0500000004000000090000000800000000000000", @ANYRES32, @ANYBLOB='\x00'/18, @ANYRES32=0x0, @ANYRES32], 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000001c0)={0xffffffffffffffff, 0x0, 0x0}, 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_usb_connect(0x1, 0xfffffffffffffd22, 0x0, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xc) unshare(0x42000080) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000c40)) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) unshare(0x64000600) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r2, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) 12m38.345313884s ago: executing program 3 (id=818): r0 = socket$netlink(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) sched_setscheduler(0x0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r4}, 0x10) close(0xffffffffffffffff) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x3c, &(0x7f0000000280)=0x7, 0x4) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x10000000, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe, 0x10}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x2}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x0) 12m22.473388846s ago: executing program 32 (id=818): r0 = socket$netlink(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) sched_setscheduler(0x0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r4}, 0x10) close(0xffffffffffffffff) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x3c, &(0x7f0000000280)=0x7, 0x4) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x10000000, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe, 0x10}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x2}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x0) 16.066647777s ago: executing program 4 (id=2562): r0 = socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="160000000000000004000000050000000000", @ANYBLOB, @ANYBLOB], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r5}, 0x10) close(0xffffffffffffffff) r6 = syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000001c0), 0x1, 0x4fa, &(0x7f00000005c0)="$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") ioctl$TIOCMIWAIT(0xffffffffffffffff, 0x545c, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000040)='net/softnet_stat\x00') lseek(r7, 0x2000, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000080)={0x0, r6, 0xf4ca, 0x7fffffff, 0xfffffffffffffffc, 0x7ff}) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x3c, 0x0, 0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r8}, 0x10) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x6}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x10000, 0x0, r9, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4000000, 0x3}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x13, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800"/12], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="7a0a00ff00000000711053000000000095006e71d58f000000000000"], &(0x7f0000000480)='syzkaller\x00'}, 0x80) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x10000000, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe, 0x10}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x2}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x0) 12.630542684s ago: executing program 4 (id=2568): pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) pipe(&(0x7f0000019480)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000500)=[{&(0x7f00000000c0)="dc", 0x1}], 0x1, 0x3) close(r1) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)) ioctl$TUNSETDEBUG(r2, 0x400454c9, &(0x7f0000000140)=0x4) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @broadcast}) write$cgroup_devices(r2, &(0x7f0000000840)=ANY=[@ANYBLOB="1e0308004d6b71ef288563"], 0xffdd) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000300)=0x1, 0x4) connect$inet(r4, &(0x7f00000006c0)={0x2, 0x0, @empty}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000900)=0xffffffffffffffff, 0x4) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), r1) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)={0x14, r5, 0x4, 0x70bd2c, 0x25dfdbff}, 0x14}}, 0x4091) write$P9_RVERSION(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="1500000065ffff097b00000800395032303030"], 0x15) r6 = dup(r0) write$FUSE_BMAP(r6, &(0x7f0000000100)={0x18}, 0x18) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000002500)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x3, &(0x7f0000000580)=@framed={{0x18, 0x5}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r7}, 0x10) 8.321930588s ago: executing program 5 (id=2574): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000604000000002e"], 0x0, 0x37}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="12000000d4d50000040000000a10000000000000cd96ccfdc4c4fe72af968739bc675b742d2f986e878c5903e6e79b9e17b2fd7c95b0cb5a666ff80528a7a3b18b5e6202f231009fd14426fae1a6c4b5bffaddf5caff99e60dcc6eca51c9fd283132502f32eb5628c95f36739d1843517936a80b14a1efcf0288cd2dc0d9f436f76bb4283508261095fe25b12d30ef52ad25b151936ec832cb27b07a9a033075538028", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r3, @ANYBLOB="020000000100"/28], 0x50) connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008001500b7040000000000008500000058"], 0x0}, 0x94) r5 = socket$inet(0x2, 0x1, 0x0) listen(r5, 0x0) syz_clone(0xe50c1700, 0x0, 0x0, 0x0, 0x0, 0x0) 8.062432843s ago: executing program 2 (id=2575): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x181) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000200)=ANY=[@ANYBLOB="1500000065ffff"], 0x15) r2 = dup(r1) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r3}, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000001300)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r4}, 0x10) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',privport,access=', @ANYRESDEC]) 7.878991147s ago: executing program 2 (id=2577): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000604000000002e"], 0x0, 0x37}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="12000000d4d50000040000000a10000000000000cd96ccfdc4c4fe72af968739bc675b742d2f986e878c5903e6e79b9e17b2fd7c95b0cb5a666ff80528a7a3b18b5e6202f231009fd14426fae1a6c4b5bffaddf5caff99e60dcc6eca51c9fd283132502f32eb5628c95f36739d1843517936a80b14a1efcf0288cd2dc0d9f436f76bb4283508261095fe25b12d30ef52ad25b151936ec832cb27b07a9a033075538028", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r3, @ANYBLOB="020000000100"/28], 0x50) connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) getsockopt(0xffffffffffffffff, 0x111, 0x3, 0x0, &(0x7f0000000080)) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008001500b7040000000000008500000058"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = socket$inet(0x2, 0x1, 0x0) listen(r5, 0x0) 4.962641983s ago: executing program 0 (id=2578): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x181) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r3}, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000001300)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb702000000000000182300", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r4}, 0x10) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x9}}, 0x18) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',privport,access=', @ANYRESDEC]) 4.962300093s ago: executing program 1 (id=2579): syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_IPTUN_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0x3, r2}]}, 0x40}}, 0x0) 4.961997603s ago: executing program 4 (id=2580): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x181) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000200)=ANY=[@ANYBLOB="1500000065ffff097b00000800395032303030"], 0x15) r2 = dup(r1) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r3}, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000001300)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r3, @ANYBLOB], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r4}, 0x10) getresuid(0x0, &(0x7f00000000c0), &(0x7f00000004c0)=0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',privport,access=', @ANYRESDEC=r5]) 4.636994619s ago: executing program 5 (id=2581): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000604000000002e"], 0x0, 0x37}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="12000000d4d50000040000000a10000000000000cd96ccfdc4c4fe72af968739bc675b742d2f986e878c5903e6e79b9e17b2fd7c95b0cb5a666ff80528a7a3b18b5e6202f231009fd14426fae1a6c4b5bffaddf5caff99e60dcc6eca51c9fd283132502f32eb5628c95f36739d1843517936a80b14a1efcf0288cd2dc0d9f436f76bb4283508261095fe25b12d30ef52ad25b151936ec832cb27b07a9a033075538028", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r3, @ANYBLOB="020000000100"/28], 0x50) connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) getsockopt(0xffffffffffffffff, 0x111, 0x3, 0x0, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) listen(0xffffffffffffffff, 0x0) syz_clone(0xe50c1700, 0x0, 0x0, 0x0, 0x0, 0x0) 4.209096668s ago: executing program 1 (id=2582): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000000)=0xb2, 0x4) recvmmsg(r0, 0x0, 0x0, 0x12141, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x5) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) r4 = syz_clone(0x50020000, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r5}, 0x4) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000510700140000000000000001b7080000000000007b8af8ff00000000b7080000fcffffff7b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) r7 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r7, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x7fff, 0x6, 0x8000, 0x4, 0x0, 0x10000023}, 0x1c) r8 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$UHID_CREATE2(r8, &(0x7f0000000100)=ANY=[@ANYBLOB="0b00000073790101000000000000000000000000000af7f4f0c55de8ca0000000000000000000000000000000000000000f3c800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a310000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ff00000000000000000000000000000020000000000000030000000000000000000000004119202532aeecfcdbb73887feb3f14db126c935954a335f6469a793"], 0x138) write$UHID_DESTROY(r8, &(0x7f0000000340), 0x4) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 4.208584638s ago: executing program 0 (id=2583): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000604000000002e"], 0x0, 0x37}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="12000000d4d50000040000000a10000000000000cd96ccfdc4c4fe72af968739bc675b742d2f986e878c5903e6e79b9e17b2fd7c95b0cb5a666ff80528a7a3b18b5e6202f231009fd14426fae1a6c4b5bffaddf5caff99e60dcc6eca51c9fd283132502f32eb5628c95f36739d1843517936a80b14a1efcf0288cd2dc0d9f436f76bb4283508261095fe25b12d30ef52ad25b151936ec832cb27b07a9a033075538028", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r3, @ANYBLOB="020000000100"/28], 0x50) connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) getsockopt(0xffffffffffffffff, 0x111, 0x3, 0x0, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = socket$inet(0x2, 0x1, 0x0) listen(r4, 0x0) syz_clone(0xe50c1700, 0x0, 0x0, 0x0, 0x0, 0x0) 3.908033444s ago: executing program 2 (id=2584): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x181) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000200)=ANY=[@ANYBLOB="1500000065ffff097b00000800395032303030"], 0x15) r2 = dup(r1) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r3}, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000001300)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r4}, 0x10) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x9}}, 0x18) getresuid(&(0x7f0000000340), &(0x7f00000000c0), &(0x7f00000004c0)=0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',privport,access=', @ANYRESDEC=r5]) 3.60800248s ago: executing program 4 (id=2585): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r2 = dup(r1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000001100)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) socketpair(0x28, 0x3, 0x0, &(0x7f00000001c0)) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x8, 0x3, 0x498, 0x320, 0xa, 0x148, 0x368, 0x60, 0x400, 0x2a8, 0x2a8, 0x400, 0x2a8, 0x7fffffe, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'bridge0\x00', 'rose0\x00'}, 0x0, 0x2f8, 0x368, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'veth1_to_team\x00', {0x0, 0x0, 0x2, 0x0, 0x0, 0xffffffff, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x8601, 0x6, './file0\x00'}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f2f7b9f28413d9d8ad470ad2b60c45cb4ea6e7bf902bdc2ff8a9304d9f655c746adc0bdc773506378bc2d27efd6abb05175089830cc46186074d7de46d5af300"}}}, {{@ip={@empty, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth0_to_team\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@MARK={0x28}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x4f8) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000440)=ANY=[@ANYBLOB="b0"], 0xb0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000001396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400008a530000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) getxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)=@known='trusted.overlay.nlink\x00', 0x0, 0x0) 2.994925362s ago: executing program 5 (id=2586): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000604000000002e"], 0x0, 0x37}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="12000000d4d50000040000000a10000000000000cd96ccfdc4c4fe72af968739bc675b742d2f986e878c5903e6e79b9e17b2fd7c95b0cb5a666ff80528a7a3b18b5e6202f231009fd14426fae1a6c4b5bffaddf5caff99e60dcc6eca51c9fd283132502f32eb5628c95f36739d1843517936a80b14a1efcf0288cd2dc0d9f436f76bb4283508261095fe25b12d30ef52ad25b151936ec832cb27b07a9a033075538028", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r3, @ANYBLOB="020000000100"/28], 0x50) connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008001500b7040000000000008500000058"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = socket$inet(0x2, 0x1, 0x0) listen(r5, 0x0) syz_clone(0xe50c1700, 0x0, 0x0, 0x0, 0x0, 0x0) 2.943229533s ago: executing program 2 (id=2587): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x181) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000200)=ANY=[@ANYBLOB="1500000065ffff"], 0x15) r2 = dup(r1) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r3}, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000001300)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r4}, 0x10) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',privport,access=', @ANYRESDEC]) 2.474055502s ago: executing program 4 (id=2588): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000dc0)={&(0x7f0000000300)='neigh_update\x00', r1}, 0x10) r2 = socket$inet6(0x10, 0x3, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = openat(0xffffffffffffff9c, 0x0, 0x143042, 0xf0) pwritev2(r4, 0x0, 0x0, 0x5412, 0xfffffff7, 0x0) r5 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000001c0), 0x600200, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x1b, &(0x7f00000004c0)=ANY=[@ANYBLOB="9500000000000000183900000400000000000000000000001836000001000000000000000000000018320000030000000000000000000000950000000000000018480000fdffffff00000000000000000a611000fcffffff180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000030000008500000006000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000016060000850000a006000000"], &(0x7f0000000000)='GPL\x00', 0x57a8, 0x8, &(0x7f0000000040)=""/8, 0x41000, 0x7, '\x00', 0x0, 0x0, r4, 0x8, &(0x7f0000000080)={0x9, 0x2}, 0x8, 0x10, &(0x7f0000000180)={0x2, 0x5, 0x4, 0xe7}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000200)=[0xffffffffffffffff, r5], &(0x7f0000000280)=[{0x2, 0x5, 0xb, 0x8}, {0x4, 0x1, 0x3, 0x8}], 0x10, 0x80000001}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r3}, 0x10) sendto$inet6(r2, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) 2.469289092s ago: executing program 2 (id=2589): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000604000000002e"], 0x0, 0x37}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="12000000d4d50000040000000a10000000000000cd96ccfdc4c4fe72af968739bc675b742d2f986e878c5903e6e79b9e17b2fd7c95b0cb5a666ff80528a7a3b18b5e6202f231009fd14426fae1a6c4b5bffaddf5caff99e60dcc6eca51c9fd283132502f32eb5628c95f36739d1843517936a80b14a1efcf0288cd2dc0d9f436f76bb4283508261095fe25b12d30ef52ad25b151936ec832cb27b07a9a033075538028", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r3, @ANYBLOB="020000000100"/28], 0x50) connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) getsockopt(0xffffffffffffffff, 0x111, 0x3, 0x0, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = socket$inet(0x2, 0x1, 0x0) listen(r4, 0x0) syz_clone(0xe50c1700, 0x0, 0x0, 0x0, 0x0, 0x0) 2.247402246s ago: executing program 0 (id=2590): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000000)=0xb2, 0x4) recvmmsg(r0, 0x0, 0x0, 0x12141, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x5) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r4 = syz_clone(0x50020000, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r5}, 0x4) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000510700140000000000000001b7080000000000007b8af8ff00000000b7080000fcffffff7b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) r7 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r7, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x7fff, 0x6, 0x8000, 0x4, 0x0, 0x10000023}, 0x1c) r8 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c0000000014"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$UHID_CREATE2(r8, &(0x7f0000000100)=ANY=[@ANYBLOB="0b00000073790101000000000000000000000000000af7f4f0c55de8ca0000000000000000000000000000000000000000f3c800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a310000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ff00000000000000000000000000000020000000000000030000000000000000000000004119202532aeecfcdbb73887feb3f14db126c935954a335f6469a793"], 0x138) write$UHID_DESTROY(r8, &(0x7f0000000340), 0x4) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.06408008s ago: executing program 1 (id=2591): pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) pipe(&(0x7f0000019480)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000500)=[{&(0x7f00000000c0)="dc", 0x1}], 0x1, 0x3) close(r1) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)) ioctl$TUNSETDEBUG(r2, 0x400454c9, &(0x7f0000000140)=0x4) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @broadcast}) write$cgroup_devices(r2, &(0x7f0000000840)=ANY=[@ANYBLOB="1e0308004d6b71ef288563"], 0xffdd) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000300)=0x1, 0x4) connect$inet(r4, &(0x7f00000006c0)={0x2, 0x0, @empty}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000900)=0xffffffffffffffff, 0x4) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), r1) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)={0x14, r5, 0x4, 0x70bd2c, 0x25dfdbff}, 0x14}}, 0x4091) write$P9_RVERSION(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="1500000065ffff097b00000800395032303030"], 0x15) r6 = dup(r0) write$FUSE_BMAP(r6, &(0x7f0000000100)={0x18}, 0x18) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000002500)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x3, &(0x7f0000000580)=@framed={{0x18, 0x5}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r7}, 0x10) 1.816615425s ago: executing program 1 (id=2592): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000604000000002e"], 0x0, 0x37}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="12000000d4d50000040000000a10000000000000cd96ccfdc4c4fe72af968739bc675b742d2f986e878c5903e6e79b9e17b2fd7c95b0cb5a666ff80528a7a3b18b5e6202f231009fd14426fae1a6c4b5bffaddf5caff99e60dcc6eca51c9fd283132502f32eb5628c95f36739d1843517936a80b14a1efcf0288cd2dc0d9f436f76bb4283508261095fe25b12d30ef52ad25b151936ec832cb27b07a9a033075538028", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r3, @ANYBLOB="020000000100"/28], 0x50) connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) getsockopt(0xffffffffffffffff, 0x111, 0x3, 0x0, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008001500b7040000000000008500000058"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) listen(0xffffffffffffffff, 0x0) syz_clone(0xe50c1700, 0x0, 0x0, 0x0, 0x0, 0x0) 1.499909001s ago: executing program 5 (id=2593): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000604000000002e"], 0x0, 0x37}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="12000000d4d50000040000000a10000000000000cd96ccfdc4c4fe72af968739bc675b742d2f986e878c5903e6e79b9e17b2fd7c95b0cb5a666ff80528a7a3b18b5e6202f231009fd14426fae1a6c4b5bffaddf5caff99e60dcc6eca51c9fd283132502f32eb5628c95f36739d1843517936a80b14a1efcf0288cd2dc0d9f436f76bb4283508261095fe25b12d30ef52ad25b151936ec832cb27b07a9a033075538028", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r3, @ANYBLOB="020000000100"/28], 0x50) connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) getsockopt(0xffffffffffffffff, 0x111, 0x3, 0x0, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = socket$inet(0x2, 0x1, 0x0) listen(r4, 0x0) syz_clone(0xe50c1700, 0x0, 0x0, 0x0, 0x0, 0x0) 180.421477ms ago: executing program 0 (id=2594): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x181) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r3}, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000001300)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb702000000000000182300", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r4}, 0x10) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x9}}, 0x18) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',privport,access=', @ANYRESDEC]) 180.166956ms ago: executing program 2 (id=2595): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000604000000002e"], 0x0, 0x37}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="12000000d4d50000040000000a10000000000000cd96ccfdc4c4fe72af968739bc675b742d2f986e878c5903e6e79b9e17b2fd7c95b0cb5a666ff80528a7a3b18b5e6202f231009fd14426fae1a6c4b5bffaddf5caff99e60dcc6eca51c9fd283132502f32eb5628c95f36739d1843517936a80b14a1efcf0288cd2dc0d9f436f76bb4283508261095fe25b12d30ef52ad25b151936ec832cb27b07a9a033075538028", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r3, @ANYBLOB="020000000100"/28], 0x50) connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008001500b7040000000000008500000058"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = socket$inet(0x2, 0x1, 0x0) listen(r5, 0x0) 179.788056ms ago: executing program 4 (id=2596): prctl$PR_GET_NO_NEW_PRIVS(0x27) r0 = socket$igmp6(0xa, 0x3, 0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000000ddff00850000008600000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000080)='sys_enter\x00', r2}, 0x10) quotactl_fd$Q_QUOTAOFF(0xffffffffffffffff, 0xffffffff80000302, 0x0, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="78010000054c401900010000000000fbdbdf251f010900440012804000f880082633ac3675ce7202676e526d5673e5f37792dc3106c0d2f8858577dfa00f273423c811842bccebf5944e184ca001b8ebd2ab85248611b13cb205acfe3ed85970b339458ec3d936dc926f74dd858a7401d7f42350df1227173908c776c5a10441ba56596d92dd2568ce588732c8b1ea4fd7", @ANYRES32=r0, @ANYBLOB="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"], 0x178}, 0x1, 0x0, 0x0, 0x5}, 0x0) prctl$PR_GET_NO_NEW_PRIVS(0x27) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x490, 0x168, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3c0, 0xffffffff, 0xffffffff, 0x3c0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x148, 0x168, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x810001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @unspec=@NOTRACK={0x20}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x228, 0x258, 0x0, {}, [@common=@ipv6header={{0x28}, {0x20}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x4f0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x4, &(0x7f0000000080)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x6000}}) read$FUSE(r4, &(0x7f00000077c0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) sendmsg$nl_route(r3, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[], 0x18}, 0x1, 0x0, 0x0, 0x20000000}, 0xc0962c530de9189) write$FUSE_INIT(r4, &(0x7f0000004200)={0x50, 0x0, r5, {0x7, 0x1f, 0x0, 0xfe05a, 0x5000, 0x0, 0x0, 0xc}}, 0x50) syz_fuse_handle_req(r4, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x100000, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r7, 0x40806685, &(0x7f0000000440)={0x1, 0x3, 0x1000, 0x100000, 0x0, 0x100000, 0x0, 0x0}) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSW2(r8, 0x402c542c, &(0x7f0000000080)={0x6b19, 0x1, 0xffff, 0x400e0a, 0x7f, "203c5e0000ff765e000080fffffffffffffff2", 0x8, 0x5}) mkdirat(0xffffffffffffff9c, 0x0, 0x0) inotify_init() open(0x0, 0x14000, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prlimit64(r6, 0xa, &(0x7f0000000140)={0x800000000000008, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r9 = getpid() sched_setscheduler(r9, 0x2, &(0x7f0000000200)=0x6) 179.673307ms ago: executing program 5 (id=2597): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x181) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000200)=ANY=[@ANYBLOB="1500000065ffff097b00000800395032303030"], 0x15) r2 = dup(r1) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r3}, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000001300)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r4}, 0x10) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x9}}, 0x18) getresuid(&(0x7f0000000340), &(0x7f00000000c0), &(0x7f00000004c0)=0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',privport,access=', @ANYRESDEC=r5]) 172.507056ms ago: executing program 1 (id=2598): r0 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x40800, 0x24, 0xd}, 0xffffff49) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x2) lchown(&(0x7f0000000200)='./file0\x00', 0x0, 0xffffffffffffffff) r1 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) prctl$PR_SET_TSC(0x1a, 0x1) fsconfig$FSCONFIG_SET_BINARY(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) openat$cgroup_subtree(r2, &(0x7f0000000100), 0x2, 0x0) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(r2, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2c1a4db646657942}, 0xc, &(0x7f0000000180)={&(0x7f0000000240)={0x124, r3, 0x200, 0x70bd2c, 0x25dfdbfd, {}, [@TIPC_NLA_SOCK={0x30, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x76}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xfffffbff}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x5}]}, @TIPC_NLA_SOCK={0x74, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x54}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xe}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_LINK={0x60, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x26}]}]}, 0x124}, 0x1, 0x0, 0x0, 0x8040}, 0x4000800) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='io\x00') lseek(r4, 0x9, 0x0) 86.837298ms ago: executing program 5 (id=2599): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r2 = dup(r1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000001100)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) socketpair(0x28, 0x3, 0x0, &(0x7f00000001c0)) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x8, 0x3, 0x498, 0x320, 0xa, 0x148, 0x368, 0x60, 0x400, 0x2a8, 0x2a8, 0x400, 0x2a8, 0x7fffffe, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'bridge0\x00', 'rose0\x00'}, 0x0, 0x2f8, 0x368, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'veth1_to_team\x00', {0x0, 0x0, 0x2, 0x0, 0x0, 0xffffffff, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x8601, 0x6, './file0\x00'}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f2f7b9f28413d9d8ad470ad2b60c45cb4ea6e7bf902bdc2ff8a9304d9f655c746adc0bdc773506378bc2d27efd6abb05175089830cc46186074d7de46d5af300"}}}, {{@ip={@empty, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth0_to_team\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@MARK={0x28}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x4f8) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000440)=ANY=[@ANYBLOB="b0"], 0xb0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000001396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400008a530000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) getxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)=@known='trusted.overlay.nlink\x00', 0x0, 0x0) 86.323648ms ago: executing program 0 (id=2600): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x181) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000200)=ANY=[@ANYBLOB="1500000065ffff"], 0x15) r2 = dup(r1) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r3}, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000001300)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r4}, 0x10) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',privport,access=', @ANYRESDEC]) 49.221879ms ago: executing program 0 (id=2601): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file2\x00', 0x40, &(0x7f0000000100), 0x1, 0x58a, &(0x7f0000001b40)="$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") r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b0000000700000008000000a6ad6a1a05"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000ebff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) creat(&(0x7f0000000040)='./bus\x00', 0x0) 0s ago: executing program 1 (id=2602): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000604000000002e"], 0x0, 0x37}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="12000000d4d50000040000000a10000000000000cd96ccfdc4c4fe72af968739bc675b742d2f986e878c5903e6e79b9e17b2fd7c95b0cb5a666ff80528a7a3b18b5e6202f231009fd14426fae1a6c4b5bffaddf5caff99e60dcc6eca51c9fd283132502f32eb5628c95f36739d1843517936a80b14a1efcf0288cd2dc0d9f436f76bb4283508261095fe25b12d30ef52ad25b151936ec832cb27b07a9a033075538028", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r3, @ANYBLOB="020000000100"/28], 0x50) connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) getsockopt(0xffffffffffffffff, 0x111, 0x3, 0x0, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008001500b7040000000000008500000058"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$inet(0x2, 0x1, 0x0) kernel console output (not intermixed with test programs): ns for proto=fd [ 586.079522][ T30] kauditd_printk_skb: 21 callbacks suppressed [ 586.079547][ T30] audit: type=1326 audit(1756854319.297:524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6024 comm="syz.1.1285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1917b2cbe9 code=0x7ffc0000 [ 586.186965][ T30] audit: type=1326 audit(1756854319.357:525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6024 comm="syz.1.1285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f1917b2cbe9 code=0x7ffc0000 [ 586.224977][ T30] audit: type=1326 audit(1756854319.417:526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6024 comm="syz.1.1285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1917b2cbe9 code=0x7ffc0000 [ 586.307994][ T30] audit: type=1326 audit(1756854319.417:527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6024 comm="syz.1.1285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1917b2cbe9 code=0x7ffc0000 [ 586.858546][ T6079] loop5: detected capacity change from 0 to 512 [ 587.061993][ T6079] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 587.073405][ T6079] ext4 filesystem being mounted at /79/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 587.096935][ T6079] netlink: 'syz.5.1289': attribute type 16 has an invalid length. [ 587.660216][ T30] audit: type=1400 audit(1756854320.887:528): avc: denied { read write } for pid=6056 comm="syz.1.1287" name="raw-gadget" dev="devtmpfs" ino=254 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 587.760217][ T30] audit: type=1400 audit(1756854320.907:529): avc: denied { open } for pid=6056 comm="syz.1.1287" path="/dev/raw-gadget" dev="devtmpfs" ino=254 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 587.814629][ T30] audit: type=1400 audit(1756854320.907:530): avc: denied { ioctl } for pid=6056 comm="syz.1.1287" path="/dev/raw-gadget" dev="devtmpfs" ino=254 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 587.870395][ T6084] loop5: detected capacity change from 0 to 1024 [ 587.934401][ T6074] netlink: 124 bytes leftover after parsing attributes in process `syz.0.1288'. [ 587.950285][ T308] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 587.960610][ T6084] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869) [ 587.980240][ T6084] EXT4-fs error (device loop5): ext4_get_journal_inode:5149: inode #32: comm syz.5.1290: iget: special inode unallocated [ 588.003491][ T6084] EXT4-fs (loop5): no journal found [ 588.008723][ T6084] EXT4-fs (loop5): can't get journal size [ 588.055202][ T6084] EXT4-fs (loop5): filesystem is read-only [ 588.069831][ T6084] EXT4-fs (loop5): mounted filesystem without journal. Opts: errors=remount-ro,noload,noblock_validity,bsdgroups,resuid=0x0000000000000000,. Quota mode: none. [ 588.168516][ T6084] EXT4-fs error (device loop5): ext4_lookup:1850: inode #2: comm syz.5.1290: bad inode number: 12 [ 588.193087][ T30] audit: type=1400 audit(1756854321.417:531): avc: denied { bind } for pid=6086 comm="syz.0.1291" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 588.213186][ T308] usb 2-1: Using ep0 maxpacket: 16 [ 588.233453][ T30] audit: type=1400 audit(1756854321.447:532): avc: denied { setopt } for pid=6086 comm="syz.0.1291" laddr=::1 lport=7 faddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 588.261370][ T30] audit: type=1400 audit(1756854321.447:533): avc: denied { read } for pid=6086 comm="syz.0.1291" laddr=::1 lport=7 faddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 588.293070][ T6096] loop2: detected capacity change from 0 to 16 [ 588.293540][ T6094] overlayfs: failed to resolve './file1': -2 [ 588.311929][ T6096] erofs: Unknown parameter '18446744073709551615' [ 588.389817][ T308] usb 2-1: unable to get BOS descriptor or descriptor too short [ 588.552737][ T6107] SELinux: Context system_u:object_r:dhcpd_exec_t:s0 is not valid (left unmapped). [ 588.769843][ T308] usb 2-1: config 2 has an invalid interface number: 22 but max is 0 [ 588.778053][ T308] usb 2-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 588.829777][ T308] usb 2-1: config 2 has no interface number 0 [ 588.835971][ T308] usb 2-1: config 2 interface 22 has no altsetting 0 [ 589.139899][ T308] usb 2-1: New USB device found, idVendor=0451, idProduct=5416, bcdDevice= 1.00 [ 589.155156][ T308] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 589.171469][ T308] usb 2-1: Product: syz [ 589.209765][ T308] usb 2-1: Manufacturer: syz [ 589.214468][ T308] usb 2-1: SerialNumber: syz [ 589.474627][ T6119] loop2: detected capacity change from 0 to 8192 [ 589.548476][ T6120] cgroup: Unknown subsys name 'rdma' [ 590.457676][ T6125] loop5: detected capacity change from 0 to 256 [ 590.550771][ T6125] exFAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 590.576537][ T6125] exFAT-fs (loop5): Medium has reported failures. Some data may be lost. [ 590.640519][ T6125] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 590.790569][ T308] usb-storage 2-1:2.22: USB Mass Storage device detected [ 590.820440][ T308] usb-storage 2-1:2.22: Quirks match for vid 0451 pid 5416: 2 [ 590.855571][ T308] usb 2-1: USB disconnect, device number 2 [ 591.448529][ T6134] loop2: detected capacity change from 0 to 512 [ 591.540665][ T6134] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 591.551868][ T6134] ext4 filesystem being mounted at /260/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 591.564634][ T6134] netlink: 'syz.2.1304': attribute type 16 has an invalid length. [ 591.646449][ T6141] loop4: detected capacity change from 0 to 1024 [ 591.739045][ T6141] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option [ 591.754185][ T6146] FAULT_INJECTION: forcing a failure. [ 591.754185][ T6146] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 591.783820][ T6141] EXT4-fs (loop4): mounted filesystem without journal. Opts: minixdf,bsddf,barrier=0x0000000000000009,commit=0x0000000000000005,debug_want_extra_isize=0x0000000000000080,lazytime,nodelalloc,noblock_validity,nomblk_io_submit,,errors=continue. Quota mode: none. [ 591.784819][ T6146] CPU: 0 PID: 6146 Comm: syz.5.1306 Not tainted syzkaller #0 [ 591.815900][ T6146] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 591.825951][ T6146] Call Trace: [ 591.829224][ T6146] [ 591.832152][ T6146] __dump_stack+0x21/0x30 [ 591.836481][ T6146] dump_stack_lvl+0xee/0x150 [ 591.841067][ T6146] ? show_regs_print_info+0x20/0x20 [ 591.846263][ T6146] dump_stack+0x15/0x20 [ 591.850410][ T6146] should_fail+0x3c1/0x510 [ 591.854823][ T6146] should_fail_usercopy+0x1a/0x20 [ 591.859842][ T6146] _copy_from_user+0x20/0xd0 [ 591.864428][ T6146] __se_sys_memfd_create+0x131/0x3b0 [ 591.869706][ T6146] __x64_sys_memfd_create+0x5b/0x70 [ 591.874898][ T6146] x64_sys_call+0x473/0x9a0 [ 591.879394][ T6146] do_syscall_64+0x4c/0xa0 [ 591.883801][ T6146] ? clear_bhb_loop+0x50/0xa0 [ 591.888464][ T6146] ? clear_bhb_loop+0x50/0xa0 [ 591.893119][ T6146] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 591.898996][ T6146] RIP: 0033:0x7feece58ebe9 [ 591.903392][ T6146] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 591.922978][ T6146] RSP: 002b:00007feeccff6e18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 591.931372][ T6146] RAX: ffffffffffffffda RBX: 0000000000000502 RCX: 00007feece58ebe9 [ 591.939323][ T6146] RDX: 00007feeccff6ef0 RSI: 0000000000000000 RDI: 00007feece6127e8 [ 591.947274][ T6146] RBP: 0000200000000a00 R08: 00007feeccff6bb7 R09: 00007feeccff6e40 [ 591.955227][ T6146] R10: 000000000000000a R11: 0000000000000202 R12: 0000200000000180 [ 591.963178][ T6146] R13: 00007feeccff6ef0 R14: 00007feeccff6eb0 R15: 0000200000000400 [ 591.971135][ T6146] [ 592.032668][ T6149] device veth1_macvtap left promiscuous mode [ 592.038709][ T6149] device macsec0 entered promiscuous mode [ 592.289928][ T30] kauditd_printk_skb: 17 callbacks suppressed [ 592.289949][ T30] audit: type=1400 audit(1756854325.507:551): avc: denied { setopt } for pid=6145 comm="syz.5.1306" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 592.430785][ T30] audit: type=1400 audit(1756854325.507:552): avc: denied { connect } for pid=6145 comm="syz.5.1306" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 592.452267][ T30] audit: type=1400 audit(1756854325.537:553): avc: denied { write } for pid=6145 comm="syz.5.1306" path="socket:[33025]" dev="sockfs" ino=33025 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 592.489222][ T6153] loop2: detected capacity change from 0 to 512 [ 592.509311][ T6153] SELinux: security_context_str_to_sid(staff_u) failed for (dev ?, type ?) errno=-22 [ 593.043880][ T6153] EXT4-fs (loop2): Mount option "journal_ioprio=0x0000000000000004" incompatible with ext2 [ 593.568728][ T30] audit: type=1400 audit(1756854326.787:554): avc: denied { append } for pid=6165 comm="syz.0.1312" name="001" dev="devtmpfs" ino=178 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 593.958359][ T6175] 9pnet: Insufficient options for proto=fd [ 594.083514][ T6181] loop2: detected capacity change from 0 to 512 [ 594.253266][ T6181] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 594.265071][ T6181] ext4 filesystem being mounted at /262/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 594.330616][ T6181] netlink: 'syz.2.1316': attribute type 16 has an invalid length. [ 595.258678][ T6179] FAULT_INJECTION: forcing a failure. [ 595.258678][ T6179] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 595.272379][ T6179] CPU: 1 PID: 6179 Comm: syz.1.1317 Not tainted syzkaller #0 [ 595.279767][ T6179] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 595.289824][ T6179] Call Trace: [ 595.293101][ T6179] [ 595.296028][ T6179] __dump_stack+0x21/0x30 [ 595.300357][ T6179] dump_stack_lvl+0xee/0x150 [ 595.304942][ T6179] ? show_regs_print_info+0x20/0x20 [ 595.310139][ T6179] dump_stack+0x15/0x20 [ 595.314288][ T6179] should_fail+0x3c1/0x510 [ 595.318699][ T6179] should_fail_usercopy+0x1a/0x20 [ 595.323717][ T6179] _copy_from_user+0x20/0xd0 [ 595.328305][ T6179] copy_from_sockptr_offset+0x77/0x90 [ 595.333674][ T6179] do_ipt_set_ctl+0x899/0xce0 [ 595.338350][ T6179] ? ipt_unregister_table_exit+0x220/0x220 [ 595.344158][ T6179] ? __kasan_check_write+0x14/0x20 [ 595.349269][ T6179] ? mutex_unlock+0x89/0x220 [ 595.353869][ T6179] ? __mutex_lock_slowpath+0x10/0x10 [ 595.359148][ T6179] ? _raw_spin_lock_bh+0x8e/0xe0 [ 595.364079][ T6179] ? _raw_spin_lock_irq+0xe0/0xe0 [ 595.369130][ T6179] nf_setsockopt+0x272/0x2a0 [ 595.373719][ T6179] ip_setsockopt+0x25e6/0x3520 [ 595.378478][ T6179] ? ipv4_pktinfo_prepare+0x580/0x580 [ 595.383845][ T6179] ? 0xffffffffa000233c [ 595.387990][ T6179] ? is_bpf_text_address+0x177/0x190 [ 595.393283][ T6179] ? __kernel_text_address+0xa0/0x100 [ 595.398656][ T6179] ? unwind_get_return_address+0x4d/0x90 [ 595.404302][ T6179] ? stack_trace_save+0xe0/0xe0 [ 595.409155][ T6179] ? arch_stack_walk+0xee/0x140 [ 595.414008][ T6179] ? stack_trace_save+0x98/0xe0 [ 595.419035][ T6179] ? __stack_depot_save+0x34/0x480 [ 595.424143][ T6179] ? stack_trace_save+0x98/0xe0 [ 595.428991][ T6179] ? __kasan_slab_alloc+0xcf/0xf0 [ 595.434014][ T6179] ? __kasan_slab_alloc+0xbd/0xf0 [ 595.439037][ T6179] ? slab_post_alloc_hook+0x4f/0x2b0 [ 595.444319][ T6179] ? kmem_cache_alloc+0xf7/0x260 [ 595.449257][ T6179] ? security_inode_alloc+0x33/0x110 [ 595.454687][ T6179] ? inode_init_always+0x711/0x990 [ 595.459808][ T6179] ? new_inode_pseudo+0x91/0x210 [ 595.464753][ T6179] ? new_inode+0x28/0x1e0 [ 595.469116][ T6179] ? proc_pid_make_inode+0x27/0x1d0 [ 595.474325][ T6179] ? proc_pident_instantiate+0x69/0x2b0 [ 595.479874][ T6179] ? proc_pident_lookup+0x1c0/0x270 [ 595.485088][ T6179] ? proc_tid_base_lookup+0x2b/0x30 [ 595.485113][ T6179] ? path_openat+0xfcf/0x2f10 [ 595.485130][ T6179] ? do_sys_openat2+0x14c/0x7b0 [ 595.485147][ T6179] ? __x64_sys_openat+0x136/0x160 [ 595.485164][ T6179] ? x64_sys_call+0x219/0x9a0 [ 595.509506][ T6179] ? do_syscall_64+0x4c/0xa0 [ 595.514102][ T6179] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 595.520175][ T6179] ? memcpy+0x56/0x70 [ 595.524160][ T6179] ? avc_has_perm_noaudit+0x2f4/0x460 [ 595.529536][ T6179] udp_setsockopt+0x8a/0xa0 [ 595.534050][ T6179] ipv6_setsockopt+0x260/0x38a0 [ 595.538912][ T6179] ? avc_has_perm+0x158/0x240 [ 595.543596][ T6179] ? ipv6_update_options+0x410/0x410 [ 595.548891][ T6179] ? 0xffffffffa000233c [ 595.553037][ T6179] ? is_bpf_text_address+0x177/0x190 [ 595.558327][ T6179] ? __kernel_text_address+0xa0/0x100 [ 595.563698][ T6179] ? unwind_get_return_address+0x4d/0x90 [ 595.569334][ T6179] ? stack_trace_save+0xe0/0xe0 [ 595.574184][ T6179] ? arch_stack_walk+0xee/0x140 [ 595.579034][ T6179] ? stack_trace_save+0x98/0xe0 [ 595.583883][ T6179] ? __stack_depot_save+0x34/0x480 [ 595.589037][ T6179] ? memcpy+0x56/0x70 [ 595.593018][ T6179] ? avc_has_perm_noaudit+0x2f4/0x460 [ 595.598391][ T6179] ? __x64_sys_openat+0x136/0x160 [ 595.603419][ T6179] ? x64_sys_call+0x219/0x9a0 [ 595.608103][ T6179] ? avc_denied+0x1b0/0x1b0 [ 595.612612][ T6179] ? kstrtouint_from_user+0x1a0/0x200 [ 595.618118][ T6179] ? avc_has_perm+0x158/0x240 [ 595.622791][ T6179] ? __kasan_check_write+0x14/0x20 [ 595.627898][ T6179] ? avc_has_perm_noaudit+0x460/0x460 [ 595.633267][ T6179] ? proc_fail_nth_write+0x17a/0x1f0 [ 595.638553][ T6179] tcp_setsockopt+0x1f8/0x1d30 [ 595.643318][ T6179] ? tcp_set_window_clamp+0x1b0/0x1b0 [ 595.648686][ T6179] ? vfs_write+0xc17/0xf70 [ 595.653098][ T6179] ? __fget_files+0x2c4/0x320 [ 595.657773][ T6179] sock_common_setsockopt+0xa0/0xb0 [ 595.662983][ T6179] ? sock_common_recvmsg+0x1b0/0x1b0 [ 595.668270][ T6179] __sys_setsockopt+0x2f0/0x460 [ 595.673125][ T6179] ? __kasan_check_write+0x14/0x20 [ 595.678235][ T6179] ? __ia32_sys_recv+0xb0/0xb0 [ 595.683006][ T6179] ? ksys_write+0x1eb/0x240 [ 595.687518][ T6179] ? __ia32_sys_read+0x90/0x90 [ 595.692281][ T6179] __x64_sys_setsockopt+0xbf/0xd0 [ 595.697659][ T6179] x64_sys_call+0x982/0x9a0 [ 595.702158][ T6179] do_syscall_64+0x4c/0xa0 [ 595.706568][ T6179] ? clear_bhb_loop+0x50/0xa0 [ 595.711243][ T6179] ? clear_bhb_loop+0x50/0xa0 [ 595.715918][ T6179] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 595.721797][ T6179] RIP: 0033:0x7f1917b2cbe9 [ 595.726196][ T6179] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 595.745783][ T6179] RSP: 002b:00007f1916595038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 595.754198][ T6179] RAX: ffffffffffffffda RBX: 00007f1917d63fa0 RCX: 00007f1917b2cbe9 [ 595.762177][ T6179] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000007 [ 595.770132][ T6179] RBP: 00007f1916595090 R08: 0000000000000428 R09: 0000000000000000 [ 595.778098][ T6179] R10: 00002000000002c0 R11: 0000000000000246 R12: 0000000000000001 [ 595.786076][ T6179] R13: 00007f1917d64038 R14: 00007f1917d63fa0 R15: 00007ffff5cfd2c8 [ 595.794058][ T6179] [ 595.800341][ T6191] loop2: detected capacity change from 0 to 512 [ 595.898245][ T6191] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 595.909365][ T6191] ext4 filesystem being mounted at /263/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 595.972988][ T6197] loop4: detected capacity change from 0 to 512 [ 595.986967][ T6191] netlink: 'syz.2.1319': attribute type 16 has an invalid length. [ 596.247763][ T6197] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 596.259098][ T6197] ext4 filesystem being mounted at /272/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 596.350912][ T6197] netlink: 'syz.4.1320': attribute type 16 has an invalid length. [ 597.313365][ T30] audit: type=1400 audit(1756854330.537:555): avc: denied { ioctl } for pid=6204 comm="syz.5.1323" path="socket:[32468]" dev="sockfs" ino=32468 ioctlcmd=0x7201 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 597.534686][ T6207] loop2: detected capacity change from 0 to 16 [ 597.562560][ T6209] loop4: detected capacity change from 0 to 512 [ 597.636486][ T6207] erofs: Unknown parameter '18446744073709551615' [ 597.920074][ T30] audit: type=1326 audit(1756854331.107:556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6206 comm="syz.2.1322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e5318ebe9 code=0x7ffc0000 [ 597.966808][ T6209] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,nobarrier,noload,,errors=continue. Quota mode: writeback. [ 597.983967][ T30] audit: type=1326 audit(1756854331.117:557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6206 comm="syz.2.1322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e5318ebe9 code=0x7ffc0000 [ 597.988438][ T6209] ext4 filesystem being mounted at /273/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 598.035633][ T30] audit: type=1326 audit(1756854331.117:558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6206 comm="syz.2.1322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=203 compat=0 ip=0x7f9e5318ebe9 code=0x7ffc0000 [ 598.064426][ T6221] 9pnet: Insufficient options for proto=fd [ 598.081183][ T30] audit: type=1326 audit(1756854331.117:559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6206 comm="syz.2.1322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e5318ebe9 code=0x7ffc0000 [ 598.104963][ T30] audit: type=1326 audit(1756854331.117:560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6206 comm="syz.2.1322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e5318ebe9 code=0x7ffc0000 [ 598.130614][ T30] audit: type=1326 audit(1756854331.117:561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6206 comm="syz.2.1322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f9e5318ebe9 code=0x7ffc0000 [ 598.154398][ T30] audit: type=1326 audit(1756854331.117:562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6206 comm="syz.2.1322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e5318ebe9 code=0x7ffc0000 [ 598.178070][ T30] audit: type=1326 audit(1756854331.127:563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6206 comm="syz.2.1322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f9e5318ebe9 code=0x7ffc0000 [ 598.238405][ T30] audit: type=1326 audit(1756854331.297:564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6206 comm="syz.2.1322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e5318ebe9 code=0x7ffc0000 [ 598.330211][ T6209] EXT4-fs error (device loop4): ext4_lookup:1858: inode #12: comm syz.4.1324: iget: bad i_size value: 2533274857506816 [ 598.368619][ T6228] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 598.394430][ T6226] EXT4-fs error (device loop4): ext4_lookup:1858: inode #12: comm syz.4.1324: iget: bad i_size value: 2533274857506816 [ 598.525844][ T6232] ªªªªªª: renamed from vlan0 [ 598.927529][ T6241] loop2: detected capacity change from 0 to 512 [ 599.058596][ T6241] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 599.070242][ T6241] ext4 filesystem being mounted at /265/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 599.333602][ T6241] netlink: 'syz.2.1330': attribute type 16 has an invalid length. [ 600.023657][ T6250] loop2: detected capacity change from 0 to 1024 [ 600.933386][ T6253] loop0: detected capacity change from 0 to 512 [ 601.275866][ T6254] loop4: detected capacity change from 0 to 512 [ 601.479152][ T6253] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 601.490620][ T6253] ext4 filesystem being mounted at /271/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 601.621012][ T6251] netlink: 'syz.0.1335': attribute type 16 has an invalid length. [ 601.741073][ T6250] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 602.032422][ T6250] ext4 filesystem being mounted at /266/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 602.159781][ T1357] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 602.391615][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 602.391654][ T30] audit: type=1400 audit(1756854335.607:573): avc: denied { associate } for pid=6259 comm="syz.1.1337" name="file0" dev="tmpfs" ino=1485 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:dhcpd_exec_t:s0" [ 602.677544][ T6254] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 602.680418][ T30] audit: type=1326 audit(1756854335.897:574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6267 comm="syz.0.1336" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4850fcbbe9 code=0x0 [ 602.688670][ T6254] ext4 filesystem being mounted at /274/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 602.798167][ T6273] loop5: detected capacity change from 0 to 512 [ 604.067292][ T6252] netlink: 'syz.4.1332': attribute type 16 has an invalid length. [ 605.525203][ T6273] EXT4-fs warning (device loop5): ext4_multi_mount_protect:403: Unable to create kmmpd thread for loop5. [ 605.618107][ T6276] loop1: detected capacity change from 0 to 512 [ 605.698217][ T6280] loop4: detected capacity change from 0 to 16 [ 605.720541][ T6280] erofs: Unknown parameter '18446744073709551615' [ 605.737991][ T6276] EXT4-fs (loop1): Ignoring removed oldalloc option [ 605.758958][ T30] audit: type=1326 audit(1756854338.977:575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6279 comm="syz.4.1340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07b8340be9 code=0x7ffc0000 [ 605.766001][ T6276] EXT4-fs (loop1): 1 truncate cleaned up [ 606.002789][ T6276] EXT4-fs (loop1): mounted filesystem without journal. Opts: quota,bsdgroups,nouid32,errors=remount-ro,jqfmt=vfsv1,oldalloc,stripe=0x0000000000000005,. Quota mode: writeback. [ 606.026023][ T30] audit: type=1326 audit(1756854338.977:576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6279 comm="syz.4.1340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=203 compat=0 ip=0x7f07b8340be9 code=0x7ffc0000 [ 606.068915][ T30] audit: type=1326 audit(1756854338.977:577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6279 comm="syz.4.1340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07b8340be9 code=0x7ffc0000 [ 606.122257][ T30] audit: type=1326 audit(1756854338.977:578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6279 comm="syz.4.1340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f07b8340be9 code=0x7ffc0000 [ 606.146741][ T6297] netlink: 'syz.2.1344': attribute type 16 has an invalid length. [ 606.154913][ T30] audit: type=1326 audit(1756854338.977:579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6279 comm="syz.4.1340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07b8340be9 code=0x7ffc0000 [ 606.193833][ T30] audit: type=1326 audit(1756854338.977:580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6279 comm="syz.4.1340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f07b8340be9 code=0x7ffc0000 [ 606.238221][ T30] audit: type=1326 audit(1756854339.337:581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6279 comm="syz.4.1340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07b8340be9 code=0x7ffc0000 [ 606.313770][ T30] audit: type=1326 audit(1756854339.337:582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6279 comm="syz.4.1340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07b8340be9 code=0x7ffc0000 [ 606.783518][ T6310] loop0: detected capacity change from 0 to 256 [ 606.857314][ T6313] loop1: detected capacity change from 0 to 512 [ 606.911198][ T6310] exfat: Deprecated parameter 'utf8' [ 606.979350][ T6310] exfat: Unknown parameter 'fmak' [ 607.119601][ T6313] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 607.131036][ T6313] ext4 filesystem being mounted at /265/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 607.154218][ T6313] netlink: 'syz.1.1346': attribute type 16 has an invalid length. [ 607.168823][ T6313] device veth1_macvtap entered promiscuous mode [ 607.175289][ T6313] device macsec0 left promiscuous mode [ 607.473646][ T6310] loop0: detected capacity change from 0 to 512 [ 607.565404][ T6310] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 607.652637][ T6069] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 607.730913][ T6310] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 607.782795][ T6310] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #16: comm syz.0.1348: invalid indirect mapped block 4294967295 (level 0) [ 607.822199][ T6310] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #16: comm syz.0.1348: invalid indirect mapped block 4294967295 (level 1) [ 607.868710][ T6310] EXT4-fs (loop0): 1 orphan inode deleted [ 607.885217][ T6310] EXT4-fs (loop0): 1 truncate cleaned up [ 608.593423][ T6324] loop5: detected capacity change from 0 to 512 [ 609.060529][ T6325] loop1: detected capacity change from 0 to 512 [ 609.120887][ T6310] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 609.311191][ T6325] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 609.322764][ T6325] ext4 filesystem being mounted at /266/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 609.381473][ T6325] netlink: 'syz.1.1351': attribute type 16 has an invalid length. [ 609.555612][ T6324] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 609.567053][ T6324] ext4 filesystem being mounted at /96/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 609.637325][ T6322] netlink: 'syz.5.1350': attribute type 16 has an invalid length. [ 609.664465][ T6322] device veth0_vlan left promiscuous mode [ 609.841237][ T6322] device veth0_vlan entered promiscuous mode [ 610.048368][ T6069] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 610.150216][ T6069] IPv6: ADDRCONF(NETDEV_CHANGE): ªªªªªª: link becomes ready [ 610.161299][ T6331] loop1: detected capacity change from 0 to 1024 [ 610.177894][ T6069] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 610.193282][ T6335] loop5: detected capacity change from 0 to 256 [ 610.280839][ T6331] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 610.329853][ T6331] ext4 filesystem being mounted at /267/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 610.836689][ T6350] loop1: detected capacity change from 0 to 1024 [ 610.891922][ T6350] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option [ 611.089505][ T6350] EXT4-fs (loop1): mounted filesystem without journal. Opts: minixdf,bsddf,barrier=0x0000000000000009,commit=0x0000000000000005,debug_want_extra_isize=0x0000000000000080,lazytime,nodelalloc,noblock_validity,nomblk_io_submit,,errors=continue. Quota mode: none. [ 611.345860][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 611.345884][ T30] audit: type=1400 audit(1756854344.567:586): avc: denied { read } for pid=6352 comm="syz.5.1358" name="msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 611.481977][ T6358] netlink: 148 bytes leftover after parsing attributes in process `syz.5.1358'. [ 611.564011][ T6358] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1358'. [ 611.634239][ T30] audit: type=1400 audit(1756854344.567:587): avc: denied { open } for pid=6352 comm="syz.5.1358" path="/dev/cpu/0/msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 611.716119][ T30] audit: type=1400 audit(1756854344.707:588): avc: denied { write } for pid=6352 comm="syz.5.1358" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 611.853485][ T6367] loop5: detected capacity change from 0 to 512 [ 611.988832][ T6370] loop0: detected capacity change from 0 to 1024 [ 612.994580][ T6373] loop4: detected capacity change from 0 to 512 [ 613.020364][ T6370] EXT4-fs (loop0): Ignoring removed nomblk_io_submit option [ 613.982234][ T6370] EXT4-fs (loop0): mounted filesystem without journal. Opts: minixdf,bsddf,barrier=0x0000000000000009,commit=0x0000000000000005,debug_want_extra_isize=0x0000000000000080,lazytime,nodelalloc,noblock_validity,nomblk_io_submit,,errors=continue. Quota mode: none. [ 614.733414][ T6367] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 614.744816][ T6367] ext4 filesystem being mounted at /99/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 614.781970][ T6367] netlink: 'syz.5.1360': attribute type 16 has an invalid length. [ 614.854121][ T6373] EXT4-fs warning (device loop4): ext4_multi_mount_protect:403: Unable to create kmmpd thread for loop4. [ 614.990367][ T6382] loop1: detected capacity change from 0 to 512 [ 615.081501][ T6382] EXT4-fs (loop1): Ignoring removed oldalloc option [ 615.101336][ T6382] EXT4-fs (loop1): 1 truncate cleaned up [ 615.107015][ T6382] EXT4-fs (loop1): mounted filesystem without journal. Opts: quota,bsdgroups,nouid32,errors=remount-ro,jqfmt=vfsv1,oldalloc,stripe=0x0000000000000005,. Quota mode: writeback. [ 615.108214][ T6385] loop2: detected capacity change from 0 to 1024 [ 615.205208][ T6385] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 615.226124][ T6385] ext4 filesystem being mounted at /269/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 618.095081][ T6391] loop5: detected capacity change from 0 to 40427 [ 618.117571][ T6391] F2FS-fs (loop5): invalid crc value [ 618.184312][ T6418] loop2: detected capacity change from 0 to 512 [ 618.206925][ T6419] loop0: detected capacity change from 0 to 512 [ 618.237647][ T6391] F2FS-fs (loop5): Failed to initialize F2FS segment manager (-4) [ 618.502862][ T6419] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 618.514740][ T6419] ext4 filesystem being mounted at /283/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 618.854385][ T6419] netlink: 'syz.0.1374': attribute type 16 has an invalid length. [ 619.210497][ T6418] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 619.222010][ T6418] ext4 filesystem being mounted at /271/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 619.258322][ T6418] netlink: 'syz.2.1376': attribute type 16 has an invalid length. [ 619.346839][ T30] audit: type=1400 audit(1756854352.567:589): avc: denied { relabelfrom } for pid=6430 comm="syz.0.1377" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 619.390580][ T6431] device syzkaller0 entered promiscuous mode [ 619.396684][ T30] audit: type=1400 audit(1756854352.567:590): avc: denied { relabelto } for pid=6430 comm="syz.0.1377" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 619.400320][ T6432] syzkaller0: create flow: hash 1807585379 index 1 [ 619.423514][ T5749] syzkaller0: tun_net_xmit 48 [ 620.377247][ T6430] syzkaller0: delete flow: hash 1807585379 index 1 [ 621.299955][ T6449] loop1: detected capacity change from 0 to 1024 [ 621.366029][ T6453] loop2: detected capacity change from 0 to 1024 [ 621.646648][ T6457] loop0: detected capacity change from 0 to 512 [ 621.722076][ T6453] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option [ 621.758561][ T6449] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 621.826937][ T6457] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 621.838394][ T6457] ext4 filesystem being mounted at /285/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 621.895278][ T6457] netlink: 'syz.0.1383': attribute type 16 has an invalid length. [ 622.160748][ T6449] ext4 filesystem being mounted at /273/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 622.200196][ T6453] EXT4-fs (loop2): mounted filesystem without journal. Opts: minixdf,bsddf,barrier=0x0000000000000009,commit=0x0000000000000005,debug_want_extra_isize=0x0000000000000080,lazytime,nodelalloc,noblock_validity,nomblk_io_submit,,errors=continue. Quota mode: none. [ 622.413717][ T30] audit: type=1400 audit(1756854355.637:591): avc: denied { create } for pid=6466 comm="syz.5.1387" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 622.532750][ T30] audit: type=1400 audit(1756854355.727:592): avc: denied { ioctl } for pid=6466 comm="syz.5.1387" path="socket:[33612]" dev="sockfs" ino=33612 ioctlcmd=0x9411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 622.773038][ T6476] loop1: detected capacity change from 0 to 512 [ 622.868187][ T6476] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 622.879321][ T6476] ext4 filesystem being mounted at /274/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 622.891904][ T6476] netlink: 'syz.1.1389': attribute type 16 has an invalid length. [ 623.199469][ T6484] loop2: detected capacity change from 0 to 512 [ 625.280473][ T6484] EXT4-fs (loop2): Ignoring removed oldalloc option [ 625.296709][ T6484] EXT4-fs (loop2): 1 truncate cleaned up [ 625.309726][ T6484] EXT4-fs (loop2): mounted filesystem without journal. Opts: quota,bsdgroups,nouid32,errors=remount-ro,jqfmt=vfsv1,oldalloc,stripe=0x0000000000000005,. Quota mode: writeback. [ 625.677478][ T6500] device syzkaller0 entered promiscuous mode [ 625.704480][ T3769] syzkaller0: tun_net_xmit 48 [ 625.727914][ T6500] syzkaller0: create flow: hash 1807585379 index 1 [ 625.747837][ T6499] syzkaller0: delete flow: hash 1807585379 index 1 [ 625.828180][ T6506] loop2: detected capacity change from 0 to 512 [ 625.867677][ T30] audit: type=1400 audit(1756854359.087:593): avc: denied { create } for pid=6508 comm="syz.0.1398" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 625.906514][ T6509] FAULT_INJECTION: forcing a failure. [ 625.906514][ T6509] name failslab, interval 1, probability 0, space 0, times 0 [ 625.928172][ T6509] CPU: 0 PID: 6509 Comm: syz.0.1398 Not tainted syzkaller #0 [ 625.935605][ T6509] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 625.945675][ T6509] Call Trace: [ 625.948955][ T6509] [ 625.951891][ T6509] __dump_stack+0x21/0x30 [ 625.956234][ T6509] dump_stack_lvl+0xee/0x150 [ 625.960833][ T6509] ? show_regs_print_info+0x20/0x20 [ 625.966037][ T6509] ? do_syscall_64+0x4c/0xa0 [ 625.970632][ T6509] dump_stack+0x15/0x20 [ 625.974793][ T6509] should_fail+0x3c1/0x510 [ 625.979207][ T6509] __should_failslab+0xa4/0xe0 [ 625.983975][ T6509] should_failslab+0x9/0x20 [ 625.988611][ T6509] slab_pre_alloc_hook+0x3b/0xe0 [ 625.993559][ T6509] ? audit_log_start+0x3a4/0x8b0 [ 625.998504][ T6509] kmem_cache_alloc+0x44/0x260 [ 626.003294][ T6509] audit_log_start+0x3a4/0x8b0 [ 626.008045][ T6509] ? audit_serial+0x30/0x30 [ 626.012531][ T6509] ? call_rcu+0x5db/0xfe0 [ 626.016896][ T6509] ? __kasan_check_write+0x14/0x20 [ 626.022106][ T6509] ? rcu_gp_kthread_wake+0x90/0x90 [ 626.027220][ T6509] ? slow_avc_audit+0x220/0x220 [ 626.032054][ T6509] common_lsm_audit+0xd1/0x1600 [ 626.036902][ T6509] ? avc_audit_pre_callback+0x2a0/0x2a0 [ 626.042438][ T6509] ? ipv6_skb_to_auditdata+0xcd0/0xcd0 [ 626.047882][ T6509] ? avc_update_node+0x30b/0xe30 [ 626.052802][ T6509] ? avc_denied+0x132/0x1b0 [ 626.057317][ T6509] slow_avc_audit+0x1ac/0x220 [ 626.061986][ T6509] ? avc_get_hash_stats+0x180/0x180 [ 626.067211][ T6509] ? avc_has_perm_noaudit+0x2f4/0x460 [ 626.072569][ T6509] ? kstrtouint_from_user+0x1a0/0x200 [ 626.077945][ T6509] avc_has_perm+0x1e6/0x240 [ 626.082430][ T6509] ? avc_has_perm_noaudit+0x460/0x460 [ 626.087784][ T6509] ? proc_fail_nth_write+0x17a/0x1f0 [ 626.093052][ T6509] ? proc_fail_nth_read+0x210/0x210 [ 626.098232][ T6509] ? security_file_permission+0x79/0xa0 [ 626.103772][ T6509] selinux_socket_setsockopt+0x1ff/0x300 [ 626.109395][ T6509] ? selinux_socket_getsockopt+0x2e0/0x2e0 [ 626.115188][ T6509] ? vfs_write+0xc17/0xf70 [ 626.119875][ T6509] security_socket_setsockopt+0x72/0xa0 [ 626.125524][ T6509] __sys_setsockopt+0x189/0x460 [ 626.130457][ T6509] ? __kasan_check_read+0x11/0x20 [ 626.135466][ T6509] ? __fdget_pos+0x2d9/0x380 [ 626.140071][ T6509] ? __ia32_sys_recv+0xb0/0xb0 [ 626.144827][ T6509] ? ksys_write+0x1da/0x240 [ 626.149407][ T6509] ? __ia32_sys_read+0x90/0x90 [ 626.154150][ T6509] __x64_sys_setsockopt+0xbf/0xd0 [ 626.159159][ T6509] x64_sys_call+0x982/0x9a0 [ 626.163643][ T6509] do_syscall_64+0x4c/0xa0 [ 626.168124][ T6509] ? clear_bhb_loop+0x50/0xa0 [ 626.172783][ T6509] ? clear_bhb_loop+0x50/0xa0 [ 626.177448][ T6509] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 626.183334][ T6509] RIP: 0033:0x7f4850fcbbe9 [ 626.187781][ T6509] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 626.207379][ T6509] RSP: 002b:00007f484fa34038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 626.215789][ T6509] RAX: ffffffffffffffda RBX: 00007f4851202fa0 RCX: 00007f4850fcbbe9 [ 626.223846][ T6509] RDX: 0000000000000004 RSI: 000000000000011b RDI: 0000000000000003 [ 626.231837][ T6509] RBP: 00007f484fa34090 R08: 0000000000000020 R09: 0000000000000000 [ 626.239794][ T6509] R10: 0000200000000100 R11: 0000000000000246 R12: 0000000000000001 [ 626.247751][ T6509] R13: 00007f4851203038 R14: 00007f4851202fa0 R15: 00007ffc3c920ae8 [ 626.256000][ T6509] [ 626.299228][ T6506] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 626.310361][ T6506] ext4 filesystem being mounted at /278/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 626.321847][ T6506] netlink: 'syz.2.1397': attribute type 16 has an invalid length. [ 626.343895][ T6509] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 626.364319][ T6509] audit: out of memory in audit_log_start [ 626.395876][ T6518] loop5: detected capacity change from 0 to 1024 [ 626.408665][ T6519] loop4: detected capacity change from 0 to 1024 [ 626.452712][ T6519] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option [ 626.474175][ T6519] EXT4-fs (loop4): mounted filesystem without journal. Opts: minixdf,bsddf,barrier=0x0000000000000009,commit=0x0000000000000005,debug_want_extra_isize=0x0000000000000080,lazytime,nodelalloc,noblock_validity,nomblk_io_submit,,errors=continue. Quota mode: none. [ 626.533839][ T6518] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 626.546619][ T6518] ext4 filesystem being mounted at /106/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 626.689754][ T3769] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 626.805493][ T6528] futex_wake_op: syz.5.1404 tries to shift op by 32; fix this program [ 626.827340][ T6528] loop5: detected capacity change from 0 to 1024 [ 626.851653][ T6528] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 626.866968][ T6528] SELinux: Context @ is not valid (left unmapped). [ 626.874573][ T30] audit: type=1400 audit(1756854360.097:594): avc: denied { relabelto } for pid=6527 comm="syz.5.1404" name="cgroup.controllers" dev="loop5" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="@" [ 626.902311][ T6537] loop2: detected capacity change from 0 to 512 [ 626.927582][ T6538] loop1: detected capacity change from 0 to 512 [ 626.949806][ T3769] usb 1-1: Using ep0 maxpacket: 16 [ 626.976054][ T6537] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 626.987831][ T6537] ext4 filesystem being mounted at /279/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 627.008929][ T6537] netlink: 'syz.2.1403': attribute type 16 has an invalid length. [ 627.110379][ T6538] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 627.122753][ T6538] ext4 filesystem being mounted at /276/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 627.137318][ T6538] netlink: 'syz.1.1405': attribute type 16 has an invalid length. [ 627.180170][ T3769] usb 1-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 627.196793][ T3769] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 627.210573][ T3769] usb 1-1: config 0 descriptor?? [ 627.378940][ T6545] syz.5.1406[6545] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 627.379280][ T6545] syz.5.1406[6545] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 627.426202][ T30] audit: type=1400 audit(1756854360.647:595): avc: denied { connect } for pid=6543 comm="syz.5.1406" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 627.463644][ T30] audit: type=1400 audit(1756854360.657:596): avc: denied { write } for pid=6543 comm="syz.5.1406" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 627.500718][ T6545] capability: warning: `syz.5.1406' uses deprecated v2 capabilities in a way that may be insecure [ 628.370793][ T6550] loop4: detected capacity change from 0 to 512 [ 628.956749][ T6550] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 628.968840][ T6550] ext4 filesystem being mounted at /286/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 628.985860][ T6549] netlink: 'syz.4.1408': attribute type 16 has an invalid length. [ 629.269298][ T3769] lenovo 0003:17EF:6047.0002: hidraw0: USB HID v1.01 Device [HID 17ef:6047] on usb-dummy_hcd.0-1/input0 [ 629.443576][ T6563] device syzkaller0 entered promiscuous mode [ 629.450537][ T5689] syzkaller0: tun_net_xmit 48 [ 629.747447][ T6571] syzkaller0: create flow: hash 1807585379 index 1 [ 630.075944][ T6558] syzkaller0: delete flow: hash 1807585379 index 1 [ 630.434916][ T6582] loop1: detected capacity change from 0 to 512 [ 630.528856][ T6582] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 630.539990][ T6582] ext4 filesystem being mounted at /278/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 630.570108][ T6582] netlink: 'syz.1.1414': attribute type 16 has an invalid length. [ 630.800769][ T6595] loop2: detected capacity change from 0 to 512 [ 630.967143][ T6595] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 630.978712][ T6595] ext4 filesystem being mounted at /283/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 631.085009][ T6595] netlink: 'syz.2.1419': attribute type 16 has an invalid length. [ 631.839823][ T3769] lenovo 0003:17EF:6047.0002: Failed to switch middle button: -71 [ 631.867161][ T3769] lenovo 0003:17EF:6047.0002: Fn-lock setting failed: -71 [ 631.899814][ T3769] lenovo 0003:17EF:6047.0002: Sensitivity setting failed: -71 [ 632.713316][ T6611] loop4: detected capacity change from 0 to 512 [ 633.113471][ T6612] loop2: detected capacity change from 0 to 512 [ 633.125237][ T3769] usb 1-1: USB disconnect, device number 2 [ 633.149096][ T6613] netlink: 'syz.1.1420': attribute type 16 has an invalid length. [ 633.456493][ T6612] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 633.468016][ T6612] ext4 filesystem being mounted at /284/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 633.758802][ T6612] netlink: 'syz.2.1421': attribute type 16 has an invalid length. [ 633.950392][ T6611] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 633.961816][ T6611] ext4 filesystem being mounted at /290/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 634.033814][ T6608] netlink: 'syz.4.1422': attribute type 16 has an invalid length. [ 634.141852][ T6618] fido_id[6618]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 634.992232][ T6634] FAULT_INJECTION: forcing a failure. [ 634.992232][ T6634] name failslab, interval 1, probability 0, space 0, times 0 [ 635.184009][ T6634] CPU: 0 PID: 6634 Comm: syz.2.1426 Not tainted syzkaller #0 [ 635.191428][ T6634] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 635.201654][ T6634] Call Trace: [ 635.204932][ T6634] [ 635.207848][ T6634] __dump_stack+0x21/0x30 [ 635.212166][ T6634] dump_stack_lvl+0xee/0x150 [ 635.216740][ T6634] ? show_regs_print_info+0x20/0x20 [ 635.221922][ T6634] ? __kasan_check_read+0x11/0x20 [ 635.226937][ T6634] ? preempt_schedule_irq+0xbb/0x110 [ 635.232327][ T6634] ? __cond_resched+0xb0/0xb0 [ 635.236994][ T6634] dump_stack+0x15/0x20 [ 635.241165][ T6634] should_fail+0x3c1/0x510 [ 635.245564][ T6634] __should_failslab+0xa4/0xe0 [ 635.250310][ T6634] should_failslab+0x9/0x20 [ 635.254830][ T6634] slab_pre_alloc_hook+0x3b/0xe0 [ 635.259754][ T6634] ? security_inode_alloc+0x33/0x110 [ 635.265026][ T6634] kmem_cache_alloc+0x44/0x260 [ 635.269774][ T6634] security_inode_alloc+0x33/0x110 [ 635.274985][ T6634] inode_init_always+0x711/0x990 [ 635.279922][ T6634] new_inode_pseudo+0x91/0x210 [ 635.284687][ T6634] new_inode+0x28/0x1e0 [ 635.288833][ T6634] shmem_get_inode+0x34a/0x9e0 [ 635.293581][ T6634] __shmem_file_setup+0x113/0x2b0 [ 635.298591][ T6634] shmem_file_setup+0x2f/0x40 [ 635.303250][ T6634] __se_sys_memfd_create+0x1e6/0x3b0 [ 635.308522][ T6634] __x64_sys_memfd_create+0x5b/0x70 [ 635.313705][ T6634] x64_sys_call+0x473/0x9a0 [ 635.318190][ T6634] do_syscall_64+0x4c/0xa0 [ 635.322589][ T6634] ? clear_bhb_loop+0x50/0xa0 [ 635.327247][ T6634] ? clear_bhb_loop+0x50/0xa0 [ 635.331911][ T6634] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 635.337785][ T6634] RIP: 0033:0x7f9e5318ebe9 [ 635.342181][ T6634] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 635.361768][ T6634] RSP: 002b:00007f9e51bf6d68 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 635.370164][ T6634] RAX: ffffffffffffffda RBX: 00000000000040a0 RCX: 00007f9e5318ebe9 [ 635.378118][ T6634] RDX: 00007f9e51bf6dec RSI: 0000000000000000 RDI: 00007f9e532127e8 [ 635.386071][ T6634] RBP: 00002000000040c0 R08: 00007f9e51bf6b07 R09: 0000000000000000 [ 635.394025][ T6634] R10: 000000000000000a R11: 0000000000000202 R12: 0000000000000001 [ 635.401978][ T6634] R13: 00007f9e51bf6dec R14: 00007f9e51bf6df0 R15: 00007ffde618ae38 [ 635.409941][ T6634] [ 635.510398][ T6644] loop1: detected capacity change from 0 to 1024 [ 635.528635][ T6647] incfs: Options parsing error. -22 [ 635.534057][ T6647] incfs: mount failed -22 [ 636.299625][ T6644] EXT4-fs (loop1): couldn't mount as ext2 due to feature incompatibilities [ 636.359924][ T6644] tmpfs: Unknown parameter 'nùÿÿÿytime' [ 636.397321][ T6650] FAULT_INJECTION: forcing a failure. [ 636.397321][ T6650] name failslab, interval 1, probability 0, space 0, times 0 [ 636.410034][ T6650] CPU: 1 PID: 6650 Comm: syz.2.1432 Not tainted syzkaller #0 [ 636.417414][ T6650] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 636.427473][ T6650] Call Trace: [ 636.430750][ T6650] [ 636.433674][ T6650] __dump_stack+0x21/0x30 [ 636.438004][ T6650] dump_stack_lvl+0xee/0x150 [ 636.442587][ T6650] ? show_regs_print_info+0x20/0x20 [ 636.447788][ T6650] ? __local_bh_enable_ip+0x58/0x80 [ 636.452985][ T6650] ? _raw_spin_unlock_bh+0x51/0x60 [ 636.458090][ T6650] dump_stack+0x15/0x20 [ 636.462241][ T6650] should_fail+0x3c1/0x510 [ 636.466653][ T6650] __should_failslab+0xa4/0xe0 [ 636.471411][ T6650] should_failslab+0x9/0x20 [ 636.475917][ T6650] slab_pre_alloc_hook+0x3b/0xe0 [ 636.480856][ T6650] ? __alloc_skb+0xe0/0x740 [ 636.485355][ T6650] kmem_cache_alloc+0x44/0x260 [ 636.490116][ T6650] __alloc_skb+0xe0/0x740 [ 636.494444][ T6650] netlink_sendmsg+0x602/0xb70 [ 636.499207][ T6650] ? netlink_getsockopt+0x530/0x530 [ 636.504402][ T6650] ? __switch_to_asm+0x3a/0x60 [ 636.509163][ T6650] ? security_socket_sendmsg+0x82/0xa0 [ 636.514624][ T6650] ? netlink_getsockopt+0x530/0x530 [ 636.519818][ T6650] ____sys_sendmsg+0x5a2/0x8c0 [ 636.524582][ T6650] ? __sys_sendmsg_sock+0x40/0x40 [ 636.529620][ T6650] ? import_iovec+0x7c/0xb0 [ 636.534123][ T6650] ___sys_sendmsg+0x1f0/0x260 [ 636.538800][ T6650] ? __sys_sendmsg+0x250/0x250 [ 636.543568][ T6650] ? __fdget+0x1a1/0x230 [ 636.547813][ T6650] __x64_sys_sendmsg+0x1e2/0x2a0 [ 636.552744][ T6650] ? ___sys_sendmsg+0x260/0x260 [ 636.557592][ T6650] ? ksys_write+0x1eb/0x240 [ 636.562094][ T6650] ? __kasan_check_write+0x14/0x20 [ 636.567203][ T6650] ? switch_fpu_return+0x15d/0x2c0 [ 636.572317][ T6650] x64_sys_call+0x4b/0x9a0 [ 636.576728][ T6650] do_syscall_64+0x4c/0xa0 [ 636.581140][ T6650] ? clear_bhb_loop+0x50/0xa0 [ 636.585815][ T6650] ? clear_bhb_loop+0x50/0xa0 [ 636.590488][ T6650] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 636.596375][ T6650] RIP: 0033:0x7f9e5318ebe9 [ 636.600784][ T6650] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 636.620378][ T6650] RSP: 002b:00007f9e51bd6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 636.628779][ T6650] RAX: ffffffffffffffda RBX: 00007f9e533c6090 RCX: 00007f9e5318ebe9 [ 636.636735][ T6650] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000a [ 636.644686][ T6650] RBP: 00007f9e51bd6090 R08: 0000000000000000 R09: 0000000000000000 [ 636.652637][ T6650] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 636.660590][ T6650] R13: 00007f9e533c6128 R14: 00007f9e533c6090 R15: 00007ffde618ae38 [ 636.668552][ T6650] [ 636.885912][ T6660] loop2: detected capacity change from 0 to 512 [ 637.131774][ T6660] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 637.143138][ T6660] ext4 filesystem being mounted at /287/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 637.168985][ T6660] netlink: 'syz.2.1433': attribute type 16 has an invalid length. [ 639.178854][ T6683] loop4: detected capacity change from 0 to 512 [ 639.392262][ T6683] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 639.403674][ T6683] ext4 filesystem being mounted at /294/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 639.494742][ T6692] loop2: detected capacity change from 0 to 1024 [ 640.339073][ T6683] netlink: 'syz.4.1439': attribute type 16 has an invalid length. [ 640.461432][ T6692] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option [ 640.959547][ T6692] EXT4-fs (loop2): mounted filesystem without journal. Opts: minixdf,bsddf,barrier=0x0000000000000009,commit=0x0000000000000005,debug_want_extra_isize=0x0000000000000080,lazytime,nodelalloc,noblock_validity,nomblk_io_submit,,errors=continue. Quota mode: none. [ 641.049398][ T6702] loop0: detected capacity change from 0 to 512 [ 642.181224][ T6702] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 642.192488][ T6702] ext4 filesystem being mounted at /294/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 642.206355][ T6702] netlink: 'syz.0.1443': attribute type 16 has an invalid length. [ 642.414604][ T6713] loop1: detected capacity change from 0 to 512 [ 642.483555][ T6713] EXT4-fs (loop1): Ignoring removed oldalloc option [ 642.511134][ T6713] EXT4-fs (loop1): 1 truncate cleaned up [ 642.516893][ T6713] EXT4-fs (loop1): mounted filesystem without journal. Opts: quota,bsdgroups,nouid32,errors=remount-ro,jqfmt=vfsv1,oldalloc,stripe=0x0000000000000005,. Quota mode: writeback. [ 642.761725][ T6724] 9pnet: Insufficient options for proto=fd [ 643.512176][ T6742] 9pnet: Could not find request transport: fd0x0000000000000003 [ 644.722535][ T6760] loop1: detected capacity change from 0 to 512 [ 644.894803][ T6760] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 644.906240][ T6760] ext4 filesystem being mounted at /289/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 644.985861][ T6760] netlink: 'syz.1.1459': attribute type 16 has an invalid length. [ 645.176748][ T6757] loop0: detected capacity change from 0 to 512 [ 645.292964][ T6757] EXT4-fs (loop0): Ignoring removed oldalloc option [ 645.480928][ T6757] EXT4-fs (loop0): 1 truncate cleaned up [ 645.488871][ T6757] EXT4-fs (loop0): mounted filesystem without journal. Opts: quota,bsdgroups,nouid32,errors=remount-ro,jqfmt=vfsv1,oldalloc,stripe=0x0000000000000005,. Quota mode: writeback. [ 645.512338][ T30] audit: type=1400 audit(1756854378.737:597): avc: denied { write } for pid=6771 comm="syz.2.1463" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 645.585211][ T30] audit: type=1400 audit(1756854378.757:598): avc: denied { nlmsg_write } for pid=6771 comm="syz.2.1463" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 645.633712][ T6772] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1463'. [ 645.672181][ T30] audit: type=1400 audit(1756854378.877:599): avc: denied { mount } for pid=6771 comm="syz.2.1463" name="/" dev="configfs" ino=13741 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 645.709283][ T6778] device syzkaller0 entered promiscuous mode [ 645.717499][ T614] syzkaller0: tun_net_xmit 48 [ 645.724365][ T6778] syzkaller0: create flow: hash 1807585379 index 1 [ 645.734208][ T6777] syzkaller0: delete flow: hash 1807585379 index 1 [ 646.253006][ T6788] loop1: detected capacity change from 0 to 512 [ 646.871456][ T6788] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 646.886937][ T6788] ext4 filesystem being mounted at /290/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 647.815560][ T6806] 9pnet: Could not find request transport: fd0x0000000000000005 [ 648.403963][ T6814] loop0: detected capacity change from 0 to 512 [ 648.493677][ T6819] loop2: detected capacity change from 0 to 512 [ 648.511158][ T6814] EXT4-fs (loop0): couldn't mount as ext2 due to feature incompatibilities [ 648.663475][ T6819] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 648.674617][ T6819] ext4 filesystem being mounted at /295/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 648.690221][ T6819] netlink: 'syz.2.1475': attribute type 16 has an invalid length. [ 648.705100][ T6814] overlayfs: missing 'workdir' [ 649.084580][ T6834] device syzkaller0 entered promiscuous mode [ 649.094296][ T6836] syzkaller0: create flow: hash 1807585379 index 1 [ 649.104701][ T5689] syzkaller0: tun_net_xmit 48 [ 649.133332][ T6833] syzkaller0: delete flow: hash 1807585379 index 1 [ 649.363157][ T6845] loop5: detected capacity change from 0 to 512 [ 652.208077][ T6845] EXT4-fs warning (device loop5): ext4_multi_mount_protect:403: Unable to create kmmpd thread for loop5. [ 653.314281][ T6865] 9pnet: Could not find request transport: fd0x0000000000000003 [ 653.598818][ T6870] loop1: detected capacity change from 0 to 1024 [ 655.431391][ T6877] loop2: detected capacity change from 0 to 512 [ 655.593807][ T6877] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 655.605160][ T6877] ext4 filesystem being mounted at /297/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 655.631715][ T6877] netlink: 'syz.2.1490': attribute type 16 has an invalid length. [ 655.693033][ T6870] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 655.860760][ T6870] ext4 filesystem being mounted at /297/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 656.021888][ T6893] loop4: detected capacity change from 0 to 1024 [ 656.038274][ T6889] device syzkaller0 entered promiscuous mode [ 656.050611][ T6891] syzkaller0: create flow: hash 1807585379 index 1 [ 656.063999][ T6893] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option [ 656.089330][ T6888] netlink: 'syz.5.1491': attribute type 16 has an invalid length. [ 656.098336][ T6893] EXT4-fs (loop4): mounted filesystem without journal. Opts: minixdf,bsddf,barrier=0x0000000000000009,commit=0x0000000000000005,debug_want_extra_isize=0x0000000000000080,lazytime,nodelalloc,noblock_validity,nomblk_io_submit,,errors=continue. Quota mode: none. [ 656.171287][ T2272] syzkaller0: tun_net_xmit 48 [ 656.178146][ T6886] syzkaller0: delete flow: hash 1807585379 index 1 [ 656.205371][ T6897] incfs: Backing dir is not set, filesystem can't be mounted. [ 656.213868][ T6897] incfs: mount failed -2 [ 656.352615][ T6904] loop2: detected capacity change from 0 to 512 [ 656.462590][ T6904] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 656.473880][ T6904] ext4 filesystem being mounted at /298/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 657.187062][ T6909] 9p: Unknown uid 18446744073709551615 [ 657.298735][ T614] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x4 [ 657.314835][ T614] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x2 [ 657.334997][ T614] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x3 [ 657.352516][ T614] hid-generic 0000:3000000:0000.0003: hidraw0: HID v0.00 Device [sy] on syz0 [ 657.457383][ T6920] 9pnet: Insufficient options for proto=fd [ 657.527445][ T6918] fido_id[6918]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 658.147609][ T6923] loop2: detected capacity change from 0 to 512 [ 658.207223][ T6923] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 658.218454][ T6923] ext4 filesystem being mounted at /301/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 658.231210][ T6923] netlink: 'syz.2.1501': attribute type 16 has an invalid length. [ 658.384052][ T6929] loop5: detected capacity change from 0 to 512 [ 658.590266][ T6929] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 658.601753][ T6929] ext4 filesystem being mounted at /121/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 658.666473][ T6929] netlink: 'syz.5.1502': attribute type 16 has an invalid length. [ 659.805704][ T6935] loop0: detected capacity change from 0 to 512 [ 659.907828][ T6935] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 659.919697][ T6935] ext4 filesystem being mounted at /308/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 660.873448][ T6935] netlink: 'syz.0.1503': attribute type 16 has an invalid length. [ 661.412499][ T6949] loop1: detected capacity change from 0 to 512 [ 661.461326][ T6949] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 661.472761][ T6949] ext4 filesystem being mounted at /299/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 661.538743][ T6956] loop2: detected capacity change from 0 to 1024 [ 661.633616][ T6956] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option [ 661.847060][ T6956] EXT4-fs (loop2): mounted filesystem without journal. Opts: minixdf,bsddf,barrier=0x0000000000000009,commit=0x0000000000000005,debug_want_extra_isize=0x0000000000000080,lazytime,nodelalloc,noblock_validity,nomblk_io_submit,,errors=continue. Quota mode: none. [ 662.284999][ T6967] loop0: detected capacity change from 0 to 512 [ 662.471736][ T6967] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 662.483116][ T6967] ext4 filesystem being mounted at /311/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 662.505989][ T6967] netlink: 'syz.0.1511': attribute type 16 has an invalid length. [ 663.166110][ T6972] loop5: detected capacity change from 0 to 1024 [ 663.319491][ T6981] 9pnet: Insufficient options for proto=fd [ 664.094845][ T6972] EXT4-fs (loop5): Ignoring removed nomblk_io_submit option [ 664.122111][ T6972] EXT4-fs (loop5): mounted filesystem without journal. Opts: minixdf,bsddf,barrier=0x0000000000000009,commit=0x0000000000000005,debug_want_extra_isize=0x0000000000000080,lazytime,nodelalloc,noblock_validity,nomblk_io_submit,,errors=continue. Quota mode: none. [ 664.316488][ T6995] loop1: detected capacity change from 0 to 512 [ 664.541101][ T6995] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 664.552565][ T6995] ext4 filesystem being mounted at /301/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 664.585415][ T6995] netlink: 'syz.1.1516': attribute type 16 has an invalid length. [ 665.394958][ T7009] loop0: detected capacity change from 0 to 512 [ 665.583037][ T7009] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 665.594608][ T7009] ext4 filesystem being mounted at /314/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 665.845703][ T7009] netlink: 'syz.0.1521': attribute type 16 has an invalid length. [ 666.102054][ T7014] loop1: detected capacity change from 0 to 512 [ 666.538480][ T7014] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 666.550711][ T7014] ext4 filesystem being mounted at /304/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 666.693898][ T7023] loop0: detected capacity change from 0 to 512 [ 666.740149][ T7023] EXT4-fs (loop0): Ignoring removed oldalloc option [ 666.760988][ T7023] EXT4-fs (loop0): 1 truncate cleaned up [ 666.766651][ T7023] EXT4-fs (loop0): mounted filesystem without journal. Opts: quota,bsdgroups,nouid32,errors=remount-ro,jqfmt=vfsv1,oldalloc,stripe=0x0000000000000005,. Quota mode: writeback. [ 666.830689][ T7030] 9pnet: Insufficient options for proto=fd [ 668.057918][ T7038] device veth1_macvtap left promiscuous mode [ 668.063996][ T7038] device macsec0 entered promiscuous mode [ 668.266990][ T7040] 9p: Unknown uid 18446744073709551615 [ 668.474023][ T7052] loop5: detected capacity change from 0 to 1024 [ 668.592582][ T7052] EXT4-fs (loop5): Ignoring removed nomblk_io_submit option [ 668.841603][ T7059] syzkaller0: create flow: hash 1807585379 index 1 [ 669.030748][ T7057] device syzkaller0 entered promiscuous mode [ 669.094035][ T614] syzkaller0: tun_net_xmit 48 [ 669.268200][ T7050] syzkaller0: delete flow: hash 1807585379 index 1 [ 669.414324][ T7052] EXT4-fs (loop5): mounted filesystem without journal. Opts: minixdf,bsddf,barrier=0x0000000000000009,commit=0x0000000000000005,debug_want_extra_isize=0x0000000000000080,lazytime,nodelalloc,noblock_validity,nomblk_io_submit,,errors=continue. Quota mode: none. [ 669.478198][ T7066] loop1: detected capacity change from 0 to 512 [ 669.508667][ T7067] netlink: 'syz.4.1535': attribute type 16 has an invalid length. [ 669.613152][ T7066] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 669.624313][ T7066] ext4 filesystem being mounted at /308/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 670.311108][ T7077] loop0: detected capacity change from 0 to 512 [ 670.566332][ T7077] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 670.577920][ T7077] ext4 filesystem being mounted at /318/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 670.676793][ T7083] 9pnet: Insufficient options for proto=fd [ 671.462618][ T7077] netlink: 'syz.0.1538': attribute type 16 has an invalid length. [ 671.477569][ T7077] device veth1_macvtap entered promiscuous mode [ 671.484004][ T7077] device macsec0 left promiscuous mode [ 671.515080][ T6069] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 672.134995][ T7090] 9pnet: Insufficient options for proto=fd [ 673.182055][ T7112] loop1: detected capacity change from 0 to 512 [ 673.470387][ T7112] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 673.532620][ T7112] ext4 filesystem being mounted at /310/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 673.696819][ T7112] netlink: 'syz.1.1547': attribute type 16 has an invalid length. [ 674.852305][ T7130] loop4: detected capacity change from 0 to 1024 [ 674.883776][ T7131] loop2: detected capacity change from 0 to 512 [ 674.892510][ T7130] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option [ 674.994154][ T7130] EXT4-fs (loop4): mounted filesystem without journal. Opts: minixdf,bsddf,barrier=0x0000000000000009,commit=0x0000000000000005,debug_want_extra_isize=0x0000000000000080,lazytime,nodelalloc,noblock_validity,nomblk_io_submit,,errors=continue. Quota mode: none. [ 675.073612][ T7131] EXT4-fs (loop2): Ignoring removed oldalloc option [ 675.170714][ T7131] EXT4-fs (loop2): 1 truncate cleaned up [ 675.176427][ T7131] EXT4-fs (loop2): mounted filesystem without journal. Opts: quota,bsdgroups,nouid32,errors=remount-ro,jqfmt=vfsv1,oldalloc,stripe=0x0000000000000005,. Quota mode: writeback. [ 676.469769][ T7143] 9pnet: Insufficient options for proto=fd [ 676.945203][ T7147] 9pnet: Insufficient options for proto=fd [ 679.043765][ T7161] loop2: detected capacity change from 0 to 512 [ 680.254941][ T7161] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 680.266613][ T7161] ext4 filesystem being mounted at /312/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 680.869315][ T7178] device veth1_macvtap left promiscuous mode [ 680.875833][ T7178] device macsec0 entered promiscuous mode [ 681.076928][ T7185] loop2: detected capacity change from 0 to 512 [ 681.159864][ T7190] loop4: detected capacity change from 0 to 512 [ 681.184496][ T7185] EXT4-fs (loop2): Ignoring removed oldalloc option [ 681.294316][ T7190] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 681.305865][ T7190] ext4 filesystem being mounted at /313/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 681.436546][ T7190] netlink: 'syz.4.1566': attribute type 16 has an invalid length. [ 681.626973][ T7185] EXT4-fs (loop2): 1 truncate cleaned up [ 681.653473][ T7196] 9pnet: Insufficient options for proto=fd [ 681.729530][ T7185] EXT4-fs (loop2): mounted filesystem without journal. Opts: quota,bsdgroups,nouid32,errors=remount-ro,jqfmt=vfsv1,oldalloc,stripe=0x0000000000000005,. Quota mode: writeback. [ 682.197235][ T7203] 9pnet: Insufficient options for proto=fd [ 682.532069][ T7212] loop4: detected capacity change from 0 to 512 [ 682.652706][ T7213] loop2: detected capacity change from 0 to 1024 [ 682.678192][ T7214] loop5: detected capacity change from 0 to 512 [ 682.694879][ T7213] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option [ 682.965922][ T7214] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 682.977320][ T7214] ext4 filesystem being mounted at /134/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 683.046395][ T7214] netlink: 'syz.5.1572': attribute type 16 has an invalid length. [ 683.260473][ T7213] EXT4-fs (loop2): mounted filesystem without journal. Opts: minixdf,bsddf,barrier=0x0000000000000009,commit=0x0000000000000005,debug_want_extra_isize=0x0000000000000080,lazytime,nodelalloc,noblock_validity,nomblk_io_submit,,errors=continue. Quota mode: none. [ 683.313175][ T7212] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 683.324852][ T7212] ext4 filesystem being mounted at /315/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 683.396072][ T7212] netlink: 'syz.4.1571': attribute type 16 has an invalid length. [ 683.935388][ T7233] loop4: detected capacity change from 0 to 512 [ 685.022069][ T7233] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 685.033584][ T7233] ext4 filesystem being mounted at /316/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 685.143618][ T7231] netlink: 'syz.4.1575': attribute type 16 has an invalid length. [ 686.371985][ T7247] loop1: detected capacity change from 0 to 512 [ 687.692591][ T7247] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 687.704255][ T7247] ext4 filesystem being mounted at /312/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 687.808746][ T7263] loop2: detected capacity change from 0 to 512 [ 687.846371][ T7269] loop5: detected capacity change from 0 to 512 [ 687.879382][ T7263] EXT4-fs (loop2): Ignoring removed oldalloc option [ 688.096915][ T7269] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 688.108406][ T7269] ext4 filesystem being mounted at /138/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 688.121370][ T7269] netlink: 'syz.5.1585': attribute type 16 has an invalid length. [ 688.130930][ T7263] EXT4-fs (loop2): 1 truncate cleaned up [ 688.136660][ T7263] EXT4-fs (loop2): mounted filesystem without journal. Opts: quota,bsdgroups,nouid32,errors=remount-ro,jqfmt=vfsv1,oldalloc,stripe=0x0000000000000005,. Quota mode: writeback. [ 688.253403][ T698] hid-generic 0000:3000000:0000.0004: unknown main item tag 0x4 [ 688.277811][ T698] hid-generic 0000:3000000:0000.0004: unknown main item tag 0x2 [ 688.309253][ T698] hid-generic 0000:3000000:0000.0004: unknown main item tag 0x3 [ 688.333205][ T698] hid-generic 0000:3000000:0000.0004: hidraw0: HID v0.00 Device [sy] on syz0 [ 688.393713][ T7285] fido_id[7285]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 688.842337][ T7291] loop0: detected capacity change from 0 to 1024 [ 688.900567][ T7291] EXT4-fs (loop0): Ignoring removed nomblk_io_submit option [ 689.015906][ T7291] EXT4-fs (loop0): mounted filesystem without journal. Opts: minixdf,bsddf,barrier=0x0000000000000009,commit=0x0000000000000005,debug_want_extra_isize=0x0000000000000080,lazytime,nodelalloc,noblock_validity,nomblk_io_submit,,errors=continue. Quota mode: none. [ 690.726897][ T7313] loop1: detected capacity change from 0 to 512 [ 691.015658][ T7316] loop2: detected capacity change from 0 to 512 [ 691.089480][ T7317] loop4: detected capacity change from 0 to 512 [ 693.042600][ T7313] EXT4-fs (loop1): Ignoring removed oldalloc option [ 693.176698][ T7313] EXT4-fs (loop1): 1 truncate cleaned up [ 693.219504][ T7316] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 693.231040][ T7316] ext4 filesystem being mounted at /318/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 693.305516][ T7317] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 693.316988][ T7317] ext4 filesystem being mounted at /320/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 693.585108][ T7317] netlink: 'syz.4.1598': attribute type 16 has an invalid length. [ 693.691624][ T7313] EXT4-fs (loop1): mounted filesystem without journal. Opts: quota,bsdgroups,nouid32,errors=remount-ro,jqfmt=vfsv1,oldalloc,stripe=0x0000000000000005,. Quota mode: writeback. [ 693.893538][ T7335] loop2: detected capacity change from 0 to 512 [ 693.904883][ T5749] hid-generic 0000:3000000:0000.0005: unknown main item tag 0x4 [ 693.929712][ T5749] hid-generic 0000:3000000:0000.0005: unknown main item tag 0x2 [ 693.952254][ T5749] hid-generic 0000:3000000:0000.0005: unknown main item tag 0x3 [ 693.970879][ T5749] hid-generic 0000:3000000:0000.0005: hidraw0: HID v0.00 Device [sy] on syz0 [ 693.986818][ T7335] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 693.998135][ T7335] ext4 filesystem being mounted at /319/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 694.010895][ T7335] netlink: 'syz.2.1601': attribute type 16 has an invalid length. [ 694.088351][ T7341] fido_id[7341]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 695.131103][ T7359] loop1: detected capacity change from 0 to 1024 [ 695.171880][ T7359] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option [ 695.278891][ T7359] EXT4-fs (loop1): mounted filesystem without journal. Opts: minixdf,bsddf,barrier=0x0000000000000009,commit=0x0000000000000005,debug_want_extra_isize=0x0000000000000080,lazytime,nodelalloc,noblock_validity,nomblk_io_submit,,errors=continue. Quota mode: none. [ 696.371910][ T7367] device veth1_macvtap left promiscuous mode [ 696.377965][ T7367] device macsec0 entered promiscuous mode [ 698.213624][ T7372] loop2: detected capacity change from 0 to 512 [ 698.473592][ T7373] loop0: detected capacity change from 0 to 512 [ 699.747363][ T7373] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 699.758746][ T7373] ext4 filesystem being mounted at /337/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 699.790003][ T7372] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 699.801355][ T7372] ext4 filesystem being mounted at /323/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 699.972943][ T7370] netlink: 'syz.2.1613': attribute type 16 has an invalid length. [ 700.294585][ T7384] loop4: detected capacity change from 0 to 8192 [ 701.328668][ T7398] loop1: detected capacity change from 0 to 512 [ 701.338693][ T7399] loop0: detected capacity change from 0 to 512 [ 701.348985][ T1357] hid-generic 0000:3000000:0000.0006: unknown main item tag 0x4 [ 701.356960][ T1357] hid-generic 0000:3000000:0000.0006: unknown main item tag 0x2 [ 701.364846][ T1357] hid-generic 0000:3000000:0000.0006: unknown main item tag 0x3 [ 701.373206][ T1357] hid-generic 0000:3000000:0000.0006: hidraw0: HID v0.00 Device [sy] on syz0 [ 701.384558][ T7398] EXT4-fs (loop1): Ignoring removed oldalloc option [ 701.433379][ T7399] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 701.445819][ T7399] ext4 filesystem being mounted at /338/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 701.458502][ T7399] netlink: 'syz.0.1618': attribute type 16 has an invalid length. [ 701.473514][ T7399] device veth1_macvtap entered promiscuous mode [ 701.479905][ T7399] device macsec0 left promiscuous mode [ 701.486108][ T6046] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 701.506272][ T7398] EXT4-fs (loop1): 1 truncate cleaned up [ 701.515364][ T7398] EXT4-fs (loop1): mounted filesystem without journal. Opts: quota,bsdgroups,nouid32,errors=remount-ro,jqfmt=vfsv1,oldalloc,stripe=0x0000000000000005,. Quota mode: writeback. [ 702.736878][ T7422] loop0: detected capacity change from 0 to 1024 [ 702.811918][ T7422] EXT4-fs (loop0): Ignoring removed nomblk_io_submit option [ 702.989859][ T7427] loop4: detected capacity change from 0 to 512 [ 704.729926][ T7422] EXT4-fs (loop0): mounted filesystem without journal. Opts: minixdf,bsddf,barrier=0x0000000000000009,commit=0x0000000000000005,debug_want_extra_isize=0x0000000000000080,lazytime,nodelalloc,noblock_validity,nomblk_io_submit,,errors=continue. Quota mode: none. [ 704.824130][ T7427] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 704.844631][ T7427] ext4 filesystem being mounted at /327/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 707.307674][ T7448] loop5: detected capacity change from 0 to 512 [ 707.623682][ T7449] loop1: detected capacity change from 0 to 512 [ 707.703735][ T7455] loop4: detected capacity change from 0 to 512 [ 707.710285][ T7449] EXT4-fs (loop1): Ignoring removed oldalloc option [ 707.733847][ T7449] EXT4-fs (loop1): 1 truncate cleaned up [ 707.754630][ T7449] EXT4-fs (loop1): mounted filesystem without journal. Opts: quota,bsdgroups,nouid32,errors=remount-ro,jqfmt=vfsv1,oldalloc,stripe=0x0000000000000005,. Quota mode: writeback. [ 707.784035][ T7455] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 707.795339][ T7455] ext4 filesystem being mounted at /329/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 707.818372][ T7455] netlink: 'syz.4.1634': attribute type 16 has an invalid length. [ 707.832720][ T7455] device veth1_macvtap entered promiscuous mode [ 707.839064][ T7455] device macsec0 left promiscuous mode [ 707.846367][ T6046] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 707.929026][ T3819] hid-generic 0000:3000000:0000.0007: unknown main item tag 0x4 [ 707.941118][ T3819] hid-generic 0000:3000000:0000.0007: unknown main item tag 0x2 [ 707.958810][ T3819] hid-generic 0000:3000000:0000.0007: unknown main item tag 0x3 [ 707.968142][ T7448] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 707.985914][ T3819] hid-generic 0000:3000000:0000.0007: hidraw0: HID v0.00 Device [sy] on syz0 [ 707.985938][ T7448] ext4 filesystem being mounted at /144/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 708.016249][ T7448] netlink: 'syz.5.1628': attribute type 16 has an invalid length. [ 709.185552][ T7478] loop0: detected capacity change from 0 to 512 [ 709.415893][ T7478] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 709.427447][ T7478] ext4 filesystem being mounted at /341/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 709.694545][ T7478] netlink: 'syz.0.1638': attribute type 16 has an invalid length. [ 710.671178][ T7496] loop0: detected capacity change from 0 to 512 [ 711.002256][ T7496] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 711.013786][ T7496] ext4 filesystem being mounted at /342/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 711.824721][ T7494] netlink: 'syz.0.1644': attribute type 16 has an invalid length. [ 712.345040][ T7511] loop0: detected capacity change from 0 to 1024 [ 714.201801][ T7511] EXT4-fs (loop0): Ignoring removed nomblk_io_submit option [ 714.339334][ T698] hid-generic 0000:3000000:0000.0008: unknown main item tag 0x4 [ 714.828535][ T7517] device veth1_macvtap left promiscuous mode [ 714.834587][ T7517] device macsec0 entered promiscuous mode [ 714.859113][ T698] hid-generic 0000:3000000:0000.0008: unknown main item tag 0x2 [ 714.929628][ T7511] EXT4-fs (loop0): mounted filesystem without journal. Opts: minixdf,bsddf,barrier=0x0000000000000009,commit=0x0000000000000005,debug_want_extra_isize=0x0000000000000080,lazytime,nodelalloc,noblock_validity,nomblk_io_submit,,errors=continue. Quota mode: none. [ 715.003587][ T698] hid-generic 0000:3000000:0000.0008: unknown main item tag 0x3 [ 715.080478][ T698] hid-generic 0000:3000000:0000.0008: hidraw0: HID v0.00 Device [sy] on syz0 [ 715.136828][ T7524] loop1: detected capacity change from 0 to 512 [ 716.023923][ T7524] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 716.035165][ T7524] ext4 filesystem being mounted at /330/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 716.047886][ T7524] netlink: 'syz.1.1650': attribute type 16 has an invalid length. [ 716.163260][ T7534] fido_id[7534]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 716.798789][ T7551] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1655'. [ 716.856447][ T7551] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1655'. [ 717.183747][ T7551] loop0: detected capacity change from 0 to 32768 [ 717.198444][ T7549] loop4: detected capacity change from 0 to 512 [ 717.230737][ T30] audit: type=1400 audit(1756854449.937:600): avc: denied { bind } for pid=7542 comm="syz.0.1655" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 717.253519][ T7551] loop0: p1 p2 p3 < p5 p6 p7 > p4 < p8 p9 p10 p11 > [ 717.260497][ T7551] loop0: p1 size 33024 extends beyond EOD, truncated [ 717.280766][ T7551] loop0: p2 size 65536 extends beyond EOD, truncated [ 717.292644][ T7551] loop0: p5 start 4278193152 is beyond EOD, truncated [ 717.299445][ T7551] loop0: p6 size 218115617 extends beyond EOD, truncated [ 717.334841][ T7551] loop0: p7 start 68608 is beyond EOD, truncated [ 717.341230][ T7551] loop0: p8 size 33024 extends beyond EOD, truncated [ 717.351318][ T7551] loop0: p9 size 65536 extends beyond EOD, truncated [ 717.364468][ T7551] loop0: p10 start 4278193152 is beyond EOD, truncated [ 717.371373][ T7551] loop0: p11 size 218115617 extends beyond EOD, truncated [ 718.257741][ T7549] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 718.269222][ T7549] ext4 filesystem being mounted at /335/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 718.299754][ T7549] netlink: 'syz.4.1657': attribute type 16 has an invalid length. [ 718.313697][ T7549] device veth1_macvtap entered promiscuous mode [ 718.320368][ T7549] device macsec0 left promiscuous mode [ 718.553253][ T362] udevd[362]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 718.565265][ T490] udevd[490]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 718.914833][ T7567] loop2: detected capacity change from 0 to 512 [ 719.893731][ T627] udevd[627]: inotify_add_watch(7, /dev/loop0p8, 10) failed: No such file or directory [ 719.904513][ T490] udevd[490]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 719.915651][ T358] udevd[358]: inotify_add_watch(7, /dev/loop0p9, 10) failed: No such file or directory [ 719.926446][ T334] udevd[334]: inotify_add_watch(7, /dev/loop0p6, 10) failed: No such file or directory [ 719.937342][ T5877] udevd[5877]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 719.955019][ T6061] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 719.972681][ T30] audit: type=1400 audit(1756854449.977:601): avc: denied { setopt } for pid=7542 comm="syz.0.1655" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 720.002618][ T7570] udevd[7570]: inotify_add_watch(7, /dev/loop0p11, 10) failed: No such file or directory [ 720.063635][ T7567] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 720.074756][ T7567] ext4 filesystem being mounted at /333/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 720.251931][ T7565] netlink: 'syz.2.1661': attribute type 16 has an invalid length. [ 721.223821][ T7589] loop0: detected capacity change from 0 to 512 [ 721.552124][ T7589] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 721.563900][ T7589] ext4 filesystem being mounted at /346/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 722.495585][ T7608] loop0: detected capacity change from 0 to 1024 [ 725.167385][ T7609] loop1: detected capacity change from 0 to 512 [ 725.316224][ T7608] EXT4-fs (loop0): Ignoring removed nomblk_io_submit option [ 725.766328][ T7609] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 725.777983][ T7609] ext4 filesystem being mounted at /334/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 725.805797][ T7609] netlink: 'syz.1.1669': attribute type 16 has an invalid length. [ 726.353244][ T7619] loop2: detected capacity change from 0 to 8192 [ 726.381877][ T7608] EXT4-fs (loop0): mounted filesystem without journal. Opts: minixdf,bsddf,barrier=0x0000000000000009,commit=0x0000000000000005,debug_want_extra_isize=0x0000000000000080,lazytime,nodelalloc,noblock_validity,nomblk_io_submit,,errors=continue. Quota mode: none. [ 726.649186][ T7623] loop5: detected capacity change from 0 to 512 [ 727.097865][ T7623] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 727.109229][ T7623] ext4 filesystem being mounted at /148/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 727.225129][ T7623] netlink: 'syz.5.1673': attribute type 16 has an invalid length. [ 731.008608][ T7629] loop0: detected capacity change from 0 to 1024 [ 731.108048][ T7636] loop2: detected capacity change from 0 to 512 [ 731.131414][ T7629] EXT4-fs (loop0): Ignoring removed nomblk_io_submit option [ 731.997132][ T7629] EXT4-fs warning (device loop0): ext4_multi_mount_protect:403: Unable to create kmmpd thread for loop0. [ 732.011238][ T30] audit: type=1400 audit(1756854465.117:602): avc: denied { create } for pid=7625 comm="syz.0.1671" name="file2" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 732.297837][ T7636] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 732.309198][ T7636] ext4 filesystem being mounted at /336/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 732.536445][ T7647] loop5: detected capacity change from 0 to 512 [ 732.550500][ T7636] netlink: 'syz.2.1674': attribute type 16 has an invalid length. [ 732.795382][ T7645] loop1: detected capacity change from 0 to 1024 [ 732.811159][ T7647] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 732.822303][ T7647] ext4 filesystem being mounted at /150/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 732.836733][ T7647] Zero length message leads to an empty skb [ 732.905810][ T7645] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 732.936735][ T7645] ext4 filesystem being mounted at /335/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 733.040996][ T30] audit: type=1400 audit(1756854466.267:603): avc: denied { unlink } for pid=284 comm="syz-executor" name="file2" dev="tmpfs" ino=1965 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 733.068457][ T7655] loop2: detected capacity change from 0 to 512 [ 733.150581][ T7655] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 733.162240][ T7655] ext4 filesystem being mounted at /337/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 733.186579][ T7666] loop5: detected capacity change from 0 to 512 [ 733.240790][ T7666] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 733.252062][ T7666] ext4 filesystem being mounted at /151/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 733.267818][ T7666] netlink: 'syz.5.1680': attribute type 16 has an invalid length. [ 733.527447][ T7672] loop4: detected capacity change from 0 to 1024 [ 733.620460][ T7672] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option [ 733.718099][ T7672] EXT4-fs (loop4): mounted filesystem without journal. Opts: minixdf,bsddf,barrier=0x0000000000000009,commit=0x0000000000000005,debug_want_extra_isize=0x0000000000000080,lazytime,nodelalloc,noblock_validity,nomblk_io_submit,,errors=continue. Quota mode: none. [ 734.253642][ T7678] loop1: detected capacity change from 0 to 512 [ 735.512289][ T7678] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 735.523827][ T7678] ext4 filesystem being mounted at /337/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 735.551055][ T7678] netlink: 'syz.1.1683': attribute type 16 has an invalid length. [ 736.160482][ T7687] loop5: detected capacity change from 0 to 8192 [ 736.235382][ T7684] device syzkaller0 entered promiscuous mode [ 736.265169][ T5689] syzkaller0: tun_net_xmit 48 [ 736.272367][ T7688] syzkaller0: create flow: hash 1807585379 index 1 [ 737.618765][ T7681] syzkaller0: delete flow: hash 1807585379 index 1 [ 737.821602][ T7701] loop1: detected capacity change from 0 to 512 [ 737.978975][ T7706] loop4: detected capacity change from 0 to 512 [ 738.149609][ T7701] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 738.161072][ T7701] ext4 filesystem being mounted at /339/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 738.231482][ T7701] netlink: 'syz.1.1689': attribute type 16 has an invalid length. [ 738.429146][ T7706] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 738.440699][ T7706] ext4 filesystem being mounted at /339/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 738.495800][ T7706] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1688'. [ 738.878714][ T7707] loop5: detected capacity change from 0 to 512 [ 738.922369][ T7707] EXT4-fs (loop5): Ignoring removed oldalloc option [ 738.965916][ T7724] loop2: detected capacity change from 0 to 512 [ 739.008062][ T7725] loop0: detected capacity change from 0 to 512 [ 739.113829][ T7724] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 739.125275][ T7724] ext4 filesystem being mounted at /339/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 739.298066][ T7707] EXT4-fs (loop5): 1 truncate cleaned up [ 739.311022][ T7725] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 739.322599][ T7725] ext4 filesystem being mounted at /352/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 739.423468][ T7725] netlink: 'syz.0.1693': attribute type 16 has an invalid length. [ 739.566435][ T7707] EXT4-fs (loop5): mounted filesystem without journal. Opts: quota,bsdgroups,nouid32,errors=remount-ro,jqfmt=vfsv1,oldalloc,stripe=0x0000000000000005,. Quota mode: writeback. [ 739.789932][ T7728] loop4: detected capacity change from 0 to 512 [ 739.957283][ T7735] loop1: detected capacity change from 0 to 512 [ 740.046023][ T7728] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 740.170335][ T7728] ext4 filesystem being mounted at /340/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 740.396777][ T7749] loop5: detected capacity change from 0 to 16 [ 741.745427][ T7752] loop0: detected capacity change from 0 to 512 [ 741.755695][ T7735] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 741.767294][ T7735] ext4 filesystem being mounted at /341/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 741.963221][ T7734] netlink: 'syz.1.1696': attribute type 16 has an invalid length. [ 742.111916][ T7728] netlink: 'syz.4.1691': attribute type 16 has an invalid length. [ 742.305333][ T7752] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 742.316682][ T7752] ext4 filesystem being mounted at /353/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 742.922985][ T7749] erofs: Unknown parameter '18446744073709551615' [ 743.065181][ T30] audit: type=1326 audit(1756854476.287:604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7747 comm="syz.5.1699" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feece58ebe9 code=0x7ffc0000 [ 743.114938][ T7750] netlink: 'syz.0.1698': attribute type 16 has an invalid length. [ 743.307318][ T30] audit: type=1326 audit(1756854476.287:605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7747 comm="syz.5.1699" exe="/root/syz-executor" sig=0 arch=c000003e syscall=203 compat=0 ip=0x7feece58ebe9 code=0x7ffc0000 [ 743.350252][ T30] audit: type=1326 audit(1756854476.387:606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7747 comm="syz.5.1699" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feece58ebe9 code=0x7ffc0000 [ 743.399795][ T7764] device veth1_macvtap left promiscuous mode [ 743.405838][ T7764] device macsec0 entered promiscuous mode [ 743.414133][ T30] audit: type=1326 audit(1756854476.387:607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7747 comm="syz.5.1699" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feece58ebe9 code=0x7ffc0000 [ 743.445281][ T30] audit: type=1326 audit(1756854476.467:608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7747 comm="syz.5.1699" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7feece58ebe9 code=0x7ffc0000 [ 743.545992][ T7768] loop0: detected capacity change from 0 to 512 [ 743.665239][ T30] audit: type=1326 audit(1756854476.467:609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7747 comm="syz.5.1699" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feece58ebe9 code=0x7ffc0000 [ 743.806630][ T7768] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 743.817814][ T7768] ext4 filesystem being mounted at /354/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 744.302969][ T7765] netlink: 'syz.0.1702': attribute type 16 has an invalid length. [ 744.347827][ T7775] FAULT_INJECTION: forcing a failure. [ 744.347827][ T7775] name failslab, interval 1, probability 0, space 0, times 0 [ 744.378430][ T30] audit: type=1326 audit(1756854476.467:610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7747 comm="syz.5.1699" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feece58ebe9 code=0x7ffc0000 [ 744.382214][ T7775] CPU: 1 PID: 7775 Comm: syz.1.1704 Not tainted syzkaller #0 [ 744.402168][ T30] audit: type=1326 audit(1756854476.527:611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7747 comm="syz.5.1699" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7feece58ebe9 code=0x7ffc0000 [ 744.409091][ T7775] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 744.409103][ T7775] Call Trace: [ 744.409109][ T7775] [ 744.440509][ T30] audit: type=1326 audit(1756854476.527:612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7747 comm="syz.5.1699" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feece58ebe9 code=0x7ffc0000 [ 744.442321][ T7775] __dump_stack+0x21/0x30 [ 744.445600][ T30] audit: type=1326 audit(1756854476.527:613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7747 comm="syz.5.1699" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feece58ebe9 code=0x7ffc0000 [ 744.448504][ T7775] dump_stack_lvl+0xee/0x150 [ 744.503870][ T7775] ? show_regs_print_info+0x20/0x20 [ 744.509174][ T7775] dump_stack+0x15/0x20 [ 744.513495][ T7775] should_fail+0x3c1/0x510 [ 744.517918][ T7775] __should_failslab+0xa4/0xe0 [ 744.522684][ T7775] should_failslab+0x9/0x20 [ 744.527191][ T7775] slab_pre_alloc_hook+0x3b/0xe0 [ 744.532302][ T7775] ? alloc_vmap_area+0x17a/0x1990 [ 744.537328][ T7775] kmem_cache_alloc+0x44/0x260 [ 744.542203][ T7775] alloc_vmap_area+0x17a/0x1990 [ 744.547065][ T7775] ? vm_map_ram+0xa60/0xa60 [ 744.551569][ T7775] ? kmem_cache_alloc_trace+0x119/0x270 [ 744.557113][ T7775] __get_vm_area_node+0x14e/0x350 [ 744.562135][ T7775] __vmalloc_node_range+0xdf/0xaf0 [ 744.567242][ T7775] ? bpf_prog_alloc_no_stats+0x3e/0x2d0 [ 744.572832][ T7775] ? selinux_capset+0xf0/0xf0 [ 744.577537][ T7775] ? _kstrtoull+0x3c0/0x4d0 [ 744.582039][ T7775] ? bpf_prog_alloc_no_stats+0x3e/0x2d0 [ 744.587579][ T7775] __vmalloc+0x79/0x90 [ 744.591644][ T7775] ? bpf_prog_alloc_no_stats+0x3e/0x2d0 [ 744.597199][ T7775] bpf_prog_alloc_no_stats+0x3e/0x2d0 [ 744.602578][ T7775] bpf_prog_alloc+0x1f/0x1e0 [ 744.607171][ T7775] bpf_prog_load+0x7c3/0x1550 [ 744.611848][ T7775] ? __kasan_check_write+0x14/0x20 [ 744.616971][ T7775] ? map_freeze+0x360/0x360 [ 744.621475][ T7775] ? selinux_bpf+0xc7/0xf0 [ 744.625889][ T7775] ? security_bpf+0x82/0xa0 [ 744.630387][ T7775] __sys_bpf+0x4c3/0x730 [ 744.634627][ T7775] ? bpf_link_show_fdinfo+0x310/0x310 [ 744.640000][ T7775] ? debug_smp_processor_id+0x17/0x20 [ 744.645372][ T7775] __x64_sys_bpf+0x7c/0x90 [ 744.649786][ T7775] x64_sys_call+0x4b9/0x9a0 [ 744.654288][ T7775] do_syscall_64+0x4c/0xa0 [ 744.658743][ T7775] ? clear_bhb_loop+0x50/0xa0 [ 744.663418][ T7775] ? clear_bhb_loop+0x50/0xa0 [ 744.668091][ T7775] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 744.673983][ T7775] RIP: 0033:0x7f1917b2cbe9 [ 744.678391][ T7775] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 744.697994][ T7775] RSP: 002b:00007f1916595038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 744.706410][ T7775] RAX: ffffffffffffffda RBX: 00007f1917d63fa0 RCX: 00007f1917b2cbe9 [ 744.714384][ T7775] RDX: 0000000000000080 RSI: 0000200000000600 RDI: 0000000000000005 [ 744.722357][ T7775] RBP: 00007f1916595090 R08: 0000000000000000 R09: 0000000000000000 [ 744.730323][ T7775] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 744.738291][ T7775] R13: 00007f1917d64038 R14: 00007f1917d63fa0 R15: 00007ffff5cfd2c8 [ 744.746262][ T7775] [ 744.852121][ T7775] syz.1.1704: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=syz1,mems_allowed=0 [ 744.868539][ T7775] CPU: 0 PID: 7775 Comm: syz.1.1704 Not tainted syzkaller #0 [ 744.875923][ T7775] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 744.885977][ T7775] Call Trace: [ 744.889256][ T7775] [ 744.892177][ T7775] __dump_stack+0x21/0x30 [ 744.896497][ T7775] dump_stack_lvl+0xee/0x150 [ 744.901072][ T7775] ? show_regs_print_info+0x20/0x20 [ 744.906251][ T7775] ? pr_cont_kernfs_name+0xe3/0xf0 [ 744.911342][ T7775] dump_stack+0x15/0x20 [ 744.915480][ T7775] warn_alloc+0x1b0/0x1d0 [ 744.919791][ T7775] ? __kasan_slab_free+0x11/0x20 [ 744.924714][ T7775] ? slab_free_freelist_hook+0xc2/0x190 [ 744.930249][ T7775] ? zone_watermark_ok_safe+0x270/0x270 [ 744.935776][ T7775] ? kfree+0xc4/0x270 [ 744.939739][ T7775] ? __get_vm_area_node+0x163/0x350 [ 744.944920][ T7775] __vmalloc_node_range+0x152/0xaf0 [ 744.950189][ T7775] ? selinux_capset+0xf0/0xf0 [ 744.954856][ T7775] ? _kstrtoull+0x3c0/0x4d0 [ 744.959344][ T7775] ? bpf_prog_alloc_no_stats+0x3e/0x2d0 [ 744.964877][ T7775] __vmalloc+0x79/0x90 [ 744.968931][ T7775] ? bpf_prog_alloc_no_stats+0x3e/0x2d0 [ 744.974459][ T7775] bpf_prog_alloc_no_stats+0x3e/0x2d0 [ 744.979814][ T7775] bpf_prog_alloc+0x1f/0x1e0 [ 744.984386][ T7775] bpf_prog_load+0x7c3/0x1550 [ 744.989043][ T7775] ? __kasan_check_write+0x14/0x20 [ 744.994145][ T7775] ? map_freeze+0x360/0x360 [ 744.998631][ T7775] ? selinux_bpf+0xc7/0xf0 [ 745.003033][ T7775] ? security_bpf+0x82/0xa0 [ 745.007524][ T7775] __sys_bpf+0x4c3/0x730 [ 745.011747][ T7775] ? bpf_link_show_fdinfo+0x310/0x310 [ 745.017110][ T7775] ? debug_smp_processor_id+0x17/0x20 [ 745.022465][ T7775] __x64_sys_bpf+0x7c/0x90 [ 745.026861][ T7775] x64_sys_call+0x4b9/0x9a0 [ 745.031345][ T7775] do_syscall_64+0x4c/0xa0 [ 745.035744][ T7775] ? clear_bhb_loop+0x50/0xa0 [ 745.040405][ T7775] ? clear_bhb_loop+0x50/0xa0 [ 745.045074][ T7775] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 745.050950][ T7775] RIP: 0033:0x7f1917b2cbe9 [ 745.055347][ T7775] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 745.074960][ T7775] RSP: 002b:00007f1916595038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 745.083358][ T7775] RAX: ffffffffffffffda RBX: 00007f1917d63fa0 RCX: 00007f1917b2cbe9 [ 745.091310][ T7775] RDX: 0000000000000080 RSI: 0000200000000600 RDI: 0000000000000005 [ 745.099263][ T7775] RBP: 00007f1916595090 R08: 0000000000000000 R09: 0000000000000000 [ 745.107218][ T7775] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 745.115171][ T7775] R13: 00007f1917d64038 R14: 00007f1917d63fa0 R15: 00007ffff5cfd2c8 [ 745.123130][ T7775] [ 745.191664][ T7786] loop0: detected capacity change from 0 to 512 [ 745.203974][ T7785] device syzkaller0 entered promiscuous mode [ 745.205744][ T7775] Mem-Info: [ 745.220448][ T5689] syzkaller0: tun_net_xmit 48 [ 745.228922][ T7775] active_anon:50 inactive_anon:6885 isolated_anon:0 [ 745.228922][ T7775] active_file:5321 inactive_file:4182 isolated_file:0 [ 745.228922][ T7775] unevictable:0 dirty:213 writeback:0 [ 745.228922][ T7775] slab_reclaimable:7981 slab_unreclaimable:72422 [ 745.228922][ T7775] mapped:30103 shmem:272 pagetables:689 bounce:0 [ 745.228922][ T7775] kernel_misc_reclaimable:0 [ 745.228922][ T7775] free:1557509 free_pcp:17175 free_cma:0 [ 745.239994][ T7785] syzkaller0: create flow: hash 1807585379 index 1 [ 745.270853][ T7775] Node 0 active_anon:200kB inactive_anon:27540kB active_file:21284kB inactive_file:16728kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:120412kB dirty:852kB writeback:0kB shmem:1088kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:7340kB pagetables:2756kB all_unreclaimable? no [ 745.329747][ T7775] DMA32 free:2978772kB min:62612kB low:78264kB high:93916kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3145324kB managed:2982960kB mlocked:0kB bounce:0kB free_pcp:4188kB local_pcp:0kB free_cma:0kB [ 745.331346][ T7786] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 745.368316][ T7786] ext4 filesystem being mounted at /355/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 745.999866][ T7793] loop4: detected capacity change from 0 to 8192 [ 746.015826][ T7775] lowmem_reserve[]: 0 3941 3941 [ 746.509031][ T7784] syzkaller0: delete flow: hash 1807585379 index 1 [ 746.529795][ T7775] Normal free:3248588kB min:84840kB low:106048kB high:127256kB reserved_highatomic:0KB active_anon:348kB inactive_anon:44880kB active_file:21284kB inactive_file:16728kB unevictable:0kB writepending:860kB present:5242880kB managed:4036096kB mlocked:0kB bounce:0kB free_pcp:51216kB local_pcp:50884kB free_cma:0kB [ 746.617998][ T7775] lowmem_reserve[]: 0 0 0 [ 746.638114][ T7775] DMA32: 3*4kB (M) 1*8kB (M) 2*16kB (M) 3*32kB (M) 3*64kB (M) 3*128kB (M) 3*256kB (M) 3*512kB (M) 4*1024kB (UM) 3*2048kB (UM) 724*4096kB (M) = 2978772kB [ 746.650100][ T7795] device syzkaller0 entered promiscuous mode [ 746.661338][ T2272] syzkaller0: tun_net_xmit 48 [ 746.666170][ T7775] Normal: 1069*4kB (UE) 1425*8kB (UME) 990*16kB (UME) 315*32kB (UME) 201*64kB (UME) 71*128kB (UME) 20*256kB (UME) 7*512kB (UME) 3*1024kB (UE) 2*2048kB (ME) 772*4096kB (UM) = 3241532kB [ 746.685782][ T7795] syzkaller0: create flow: hash 1807585379 index 1 [ 746.692554][ T7775] 10742 total pagecache pages [ 746.697407][ T7775] 0 pages in swap cache [ 746.701659][ T7775] Swap cache stats: add 0, delete 0, find 0/0 [ 746.707728][ T7775] Free swap = 124996kB [ 746.713437][ T7775] Total swap = 124996kB [ 746.717684][ T7775] 2097051 pages RAM [ 746.728561][ T7794] syzkaller0: delete flow: hash 1807585379 index 1 [ 746.735438][ T7797] loop0: detected capacity change from 0 to 1024 [ 746.749592][ T7775] 0 pages HighMem/MovableOnly [ 746.761535][ T7775] 342287 pages reserved [ 746.766560][ T7775] 0 pages cma reserved [ 746.809320][ T7802] loop4: detected capacity change from 0 to 512 [ 746.826709][ T7797] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 746.847599][ T7797] ext4 filesystem being mounted at /356/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 747.843420][ T7810] loop5: detected capacity change from 0 to 8192 [ 747.877595][ T7802] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 747.888965][ T7802] ext4 filesystem being mounted at /342/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 747.901066][ T7802] netlink: 'syz.4.1712': attribute type 16 has an invalid length. [ 747.909069][ T7802] netlink: 'syz.4.1712': attribute type 27 has an invalid length. [ 748.113900][ T7816] loop1: detected capacity change from 0 to 1024 [ 750.888713][ T7818] loop2: detected capacity change from 0 to 16 [ 750.933501][ T7816] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option [ 750.938287][ T7818] erofs: Unknown parameter '18446744073709551615' [ 750.953324][ T7816] EXT4-fs (loop1): mounted filesystem without journal. Opts: minixdf,bsddf,barrier=0x0000000000000009,commit=0x0000000000000005,debug_want_extra_isize=0x0000000000000080,lazytime,nodelalloc,noblock_validity,nomblk_io_submit,,errors=continue. Quota mode: none. [ 751.100431][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 751.100445][ T30] audit: type=1326 audit(1756854484.327:615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7817 comm="syz.2.1717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e5318ebe9 code=0x7ffc0000 [ 751.227959][ T7835] loop5: detected capacity change from 0 to 1024 [ 751.236450][ T7835] EXT4-fs (loop5): Ignoring removed nomblk_io_submit option [ 751.575463][ T7835] EXT4-fs (loop5): mounted filesystem without journal. Opts: minixdf,bsddf,barrier=0x0000000000000009,commit=0x0000000000000005,debug_want_extra_isize=0x0000000000000080,lazytime,nodelalloc,noblock_validity,nomblk_io_submit,,errors=continue. Quota mode: none. [ 751.634071][ T30] audit: type=1326 audit(1756854484.327:616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7817 comm="syz.2.1717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e5318ebe9 code=0x7ffc0000 [ 751.678375][ T30] audit: type=1326 audit(1756854484.397:617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7817 comm="syz.2.1717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=203 compat=0 ip=0x7f9e5318ebe9 code=0x7ffc0000 [ 751.736905][ T30] audit: type=1326 audit(1756854484.407:618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7817 comm="syz.2.1717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e5318ebe9 code=0x7ffc0000 [ 751.890672][ T30] audit: type=1326 audit(1756854484.417:619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7817 comm="syz.2.1717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f9e5318ebe9 code=0x7ffc0000 [ 752.098004][ T30] audit: type=1326 audit(1756854484.537:620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7817 comm="syz.2.1717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e5318ebe9 code=0x7ffc0000 [ 752.670948][ T30] audit: type=1326 audit(1756854484.537:621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7817 comm="syz.2.1717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e5318ebe9 code=0x7ffc0000 [ 752.776359][ T30] audit: type=1326 audit(1756854484.577:622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7817 comm="syz.2.1717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7f9e5318ebe9 code=0x7ffc0000 [ 754.919698][ T7863] loop5: detected capacity change from 0 to 512 [ 754.996557][ T7863] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 755.008355][ T7863] ext4 filesystem being mounted at /161/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 755.023722][ T7863] netlink: 'syz.5.1726': attribute type 16 has an invalid length. [ 755.042907][ T7869] loop4: detected capacity change from 0 to 512 [ 755.110749][ T7869] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 755.121938][ T7869] ext4 filesystem being mounted at /344/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 755.133274][ T7869] netlink: 'syz.4.1728': attribute type 16 has an invalid length. [ 755.141245][ T7869] netlink: 'syz.4.1728': attribute type 27 has an invalid length. [ 755.313681][ T7873] loop0: detected capacity change from 0 to 1024 [ 755.350628][ T7873] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 755.383998][ T7873] ext4 filesystem being mounted at /360/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 755.579471][ T7879] loop0: detected capacity change from 0 to 8192 [ 756.935152][ T7898] loop0: detected capacity change from 0 to 1024 [ 757.043105][ T7898] EXT4-fs (loop0): Ignoring removed nomblk_io_submit option [ 757.341285][ T7898] EXT4-fs (loop0): mounted filesystem without journal. Opts: minixdf,bsddf,barrier=0x0000000000000009,commit=0x0000000000000005,debug_want_extra_isize=0x0000000000000080,lazytime,nodelalloc,noblock_validity,nomblk_io_submit,,errors=continue. Quota mode: none. [ 757.665309][ T7911] loop2: detected capacity change from 0 to 1024 [ 758.320871][ T7914] loop4: detected capacity change from 0 to 1024 [ 758.328475][ T7911] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 758.349402][ T7911] ext4 filesystem being mounted at /348/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 758.372645][ T7914] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 758.400324][ T7914] ext4 filesystem being mounted at /347/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 758.617741][ T7930] loop2: detected capacity change from 0 to 512 [ 758.820969][ T7930] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 758.832382][ T7930] ext4 filesystem being mounted at /349/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 758.883658][ T7930] netlink: 'syz.2.1742': attribute type 16 has an invalid length. [ 760.291279][ T7946] loop4: detected capacity change from 0 to 512 [ 760.575132][ T7946] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 760.586617][ T7946] ext4 filesystem being mounted at /349/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 760.613128][ T7946] netlink: 'syz.4.1747': attribute type 16 has an invalid length. [ 762.429326][ T7981] loop4: detected capacity change from 0 to 1024 [ 762.504993][ T7981] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 762.531411][ T7981] ext4 filesystem being mounted at /350/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 762.684590][ T7995] loop0: detected capacity change from 0 to 512 [ 762.760455][ T7995] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 762.771645][ T7995] ext4 filesystem being mounted at /365/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 762.784991][ T7995] netlink: 'syz.0.1759': attribute type 16 has an invalid length. [ 762.792906][ T7995] netlink: 'syz.0.1759': attribute type 27 has an invalid length. [ 763.138575][ T8002] loop4: detected capacity change from 0 to 512 [ 763.198262][ T8002] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 763.209388][ T8002] ext4 filesystem being mounted at /351/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 763.221817][ T8002] netlink: 'syz.4.1763': attribute type 16 has an invalid length. [ 763.621306][ T8008] loop0: detected capacity change from 0 to 512 [ 763.964637][ T8008] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 763.979005][ T8008] ext4 filesystem being mounted at /366/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 764.940743][ T8008] netlink: 'syz.0.1764': attribute type 16 has an invalid length. [ 766.150079][ T8032] loop0: detected capacity change from 0 to 1024 [ 766.228338][ T8032] EXT4-fs (loop0): Ignoring removed nomblk_io_submit option [ 766.638840][ T8032] EXT4-fs (loop0): mounted filesystem without journal. Opts: minixdf,bsddf,barrier=0x0000000000000009,commit=0x0000000000000005,debug_want_extra_isize=0x0000000000000080,lazytime,nodelalloc,noblock_validity,nomblk_io_submit,,errors=continue. Quota mode: none. [ 767.513142][ T8057] loop1: detected capacity change from 0 to 512 [ 767.566191][ T8058] loop4: detected capacity change from 0 to 1024 [ 767.615456][ T8058] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option [ 768.195943][ T8058] EXT4-fs (loop4): mounted filesystem without journal. Opts: minixdf,bsddf,barrier=0x0000000000000009,commit=0x0000000000000005,debug_want_extra_isize=0x0000000000000080,lazytime,nodelalloc,noblock_validity,nomblk_io_submit,,errors=continue. Quota mode: none. [ 768.386789][ T8057] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 768.399368][ T8057] ext4 filesystem being mounted at /354/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 768.445260][ T8057] netlink: 'syz.1.1777': attribute type 16 has an invalid length. [ 768.483768][ T8057] device veth1_macvtap entered promiscuous mode [ 768.490693][ T8057] device macsec0 left promiscuous mode [ 768.590162][ T308] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 769.007589][ T8068] 9pnet: Insufficient options for proto=fd [ 769.604861][ T308] usb 3-1: config index 0 descriptor too short (expected 45, got 36) [ 769.703321][ T308] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 769.952562][ T308] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 769.964820][ T308] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 770.520230][ T6060] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 770.579070][ T8079] device syzkaller0 entered promiscuous mode [ 770.604421][ T8083] syzkaller0: create flow: hash 1807585379 index 1 [ 770.621273][ T2272] syzkaller0: tun_net_xmit 48 [ 770.634805][ T308] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 770.645221][ T308] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 770.646650][ T8078] syzkaller0: delete flow: hash 1807585379 index 1 [ 770.654356][ T308] usb 3-1: config 0 descriptor?? [ 770.722820][ T8093] loop1: detected capacity change from 0 to 1024 [ 770.998152][ T8093] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option [ 771.095342][ T8093] EXT4-fs (loop1): mounted filesystem without journal. Opts: minixdf,bsddf,barrier=0x0000000000000009,commit=0x0000000000000005,debug_want_extra_isize=0x0000000000000080,lazytime,nodelalloc,noblock_validity,nomblk_io_submit,,errors=continue. Quota mode: none. [ 771.254913][ T308] usb 3-1: can't set config #0, error -71 [ 771.261643][ T308] usb 3-1: USB disconnect, device number 2 [ 771.740955][ T8106] loop2: detected capacity change from 0 to 512 [ 771.935956][ T8106] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 771.947344][ T8106] ext4 filesystem being mounted at /362/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 772.049319][ T8106] netlink: 'syz.2.1790': attribute type 16 has an invalid length. [ 773.370636][ T8135] loop4: detected capacity change from 0 to 1024 [ 773.451051][ T8135] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 773.469756][ T8135] ext4 filesystem being mounted at /358/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 774.091254][ T8151] loop4: detected capacity change from 0 to 1024 [ 774.166534][ T8152] loop5: detected capacity change from 0 to 512 [ 774.206363][ T8151] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option [ 775.609034][ T8152] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 775.621407][ T8152] ext4 filesystem being mounted at /178/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 777.205821][ T8151] EXT4-fs: failed to create workqueue [ 777.211274][ T8151] EXT4-fs (loop4): mount failed [ 777.309143][ T8152] netlink: 'syz.5.1802': attribute type 16 has an invalid length. [ 777.336688][ T8158] device syzkaller0 entered promiscuous mode [ 777.344511][ T613] syzkaller0: tun_net_xmit 48 [ 777.353646][ T8158] syzkaller0: create flow: hash 1807585379 index 1 [ 777.996900][ T8171] loop0: detected capacity change from 0 to 512 [ 778.096502][ T8157] syzkaller0: delete flow: hash 1807585379 index 1 [ 778.241199][ T8171] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 778.252796][ T8171] ext4 filesystem being mounted at /372/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 778.839723][ T8171] netlink: 'syz.0.1807': attribute type 16 has an invalid length. [ 778.878318][ T8182] loop2: detected capacity change from 0 to 1024 [ 778.926649][ T8182] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 778.937933][ T8182] ext4 filesystem being mounted at /367/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 780.231745][ T8209] loop1: detected capacity change from 0 to 1024 [ 780.301373][ T8208] loop4: detected capacity change from 0 to 512 [ 780.329294][ T8209] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option [ 781.732468][ T8209] EXT4-fs (loop1): mounted filesystem without journal. Opts: minixdf,bsddf,barrier=0x0000000000000009,commit=0x0000000000000005,debug_want_extra_isize=0x0000000000000080,lazytime,nodelalloc,noblock_validity,nomblk_io_submit,,errors=continue. Quota mode: none. [ 782.391733][ T8208] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 782.403114][ T8208] ext4 filesystem being mounted at /363/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 782.500263][ T8208] netlink: 'syz.4.1816': attribute type 16 has an invalid length. [ 783.798974][ T8232] loop0: detected capacity change from 0 to 512 [ 784.428468][ T8232] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 784.444903][ T8232] ext4 filesystem being mounted at /374/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 784.700322][ T8232] netlink: 'syz.0.1821': attribute type 16 has an invalid length. [ 784.929560][ T8240] loop5: detected capacity change from 0 to 1024 [ 785.151866][ T8240] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 785.163681][ T8240] ext4 filesystem being mounted at /182/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 786.385901][ T8260] loop5: detected capacity change from 0 to 1024 [ 786.431676][ T8260] EXT4-fs (loop5): Ignoring removed nomblk_io_submit option [ 786.613767][ T8260] EXT4-fs (loop5): mounted filesystem without journal. Opts: minixdf,bsddf,barrier=0x0000000000000009,commit=0x0000000000000005,debug_want_extra_isize=0x0000000000000080,lazytime,nodelalloc,noblock_validity,nomblk_io_submit,,errors=continue. Quota mode: none. [ 787.252278][ T8268] 9pnet: Insufficient options for proto=fd [ 787.376114][ T8269] loop2: detected capacity change from 0 to 16 [ 787.500098][ T8269] erofs: Unknown parameter '18446744073709551615' [ 787.624016][ T30] audit: type=1326 audit(1756854520.847:623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8267 comm="syz.2.1830" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e5318ebe9 code=0x7ffc0000 [ 787.710779][ T8273] device veth1_macvtap left promiscuous mode [ 787.716829][ T8273] device macsec0 entered promiscuous mode [ 787.911885][ T30] audit: type=1326 audit(1756854520.877:624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8267 comm="syz.2.1830" exe="/root/syz-executor" sig=0 arch=c000003e syscall=203 compat=0 ip=0x7f9e5318ebe9 code=0x7ffc0000 [ 787.960825][ T30] audit: type=1326 audit(1756854520.877:625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8267 comm="syz.2.1830" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e5318ebe9 code=0x7ffc0000 [ 788.015885][ T30] audit: type=1326 audit(1756854520.877:626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8267 comm="syz.2.1830" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e5318ebe9 code=0x7ffc0000 [ 788.042628][ T30] audit: type=1326 audit(1756854520.877:627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8267 comm="syz.2.1830" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f9e5318ebe9 code=0x7ffc0000 [ 788.066267][ T30] audit: type=1326 audit(1756854520.877:628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8267 comm="syz.2.1830" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e5318ebe9 code=0x7ffc0000 [ 788.209351][ T30] audit: type=1326 audit(1756854520.877:629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8267 comm="syz.2.1830" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e5318ebe9 code=0x7ffc0000 [ 788.280625][ T30] audit: type=1326 audit(1756854520.877:630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8267 comm="syz.2.1830" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f9e5318ebe9 code=0x7ffc0000 [ 788.306329][ T30] audit: type=1326 audit(1756854521.227:631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8267 comm="syz.2.1830" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e5318ebe9 code=0x7ffc0000 [ 788.330415][ T30] audit: type=1326 audit(1756854521.227:632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8267 comm="syz.2.1830" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e5318ebe9 code=0x7ffc0000 [ 789.582668][ T8300] loop4: detected capacity change from 0 to 512 [ 790.041502][ T8300] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 790.052801][ T8300] ext4 filesystem being mounted at /365/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 790.721903][ T8313] loop2: detected capacity change from 0 to 512 [ 790.734187][ T8299] netlink: 'syz.4.1838': attribute type 16 has an invalid length. [ 791.695973][ T8315] loop0: detected capacity change from 0 to 512 [ 791.885842][ T8313] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 791.897338][ T8313] ext4 filesystem being mounted at /373/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 792.170129][ T8315] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 792.181286][ T8315] ext4 filesystem being mounted at /381/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 792.230121][ T8312] netlink: 'syz.2.1839': attribute type 16 has an invalid length. [ 792.471589][ T8322] loop1: detected capacity change from 0 to 16 [ 792.600378][ T8322] erofs: Unknown parameter '18446744073709551615' [ 792.666375][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 792.666391][ T30] audit: type=1326 audit(1756854525.887:636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8321 comm="syz.1.1843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1917b2cbe9 code=0x7ffc0000 [ 792.790966][ T30] audit: type=1326 audit(1756854525.887:637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8321 comm="syz.1.1843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=203 compat=0 ip=0x7f1917b2cbe9 code=0x7ffc0000 [ 793.171934][ T30] audit: type=1326 audit(1756854525.887:638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8321 comm="syz.1.1843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1917b2cbe9 code=0x7ffc0000 [ 793.480940][ T30] audit: type=1326 audit(1756854525.887:639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8321 comm="syz.1.1843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f1917b2cbe9 code=0x7ffc0000 [ 793.871120][ T8337] loop5: detected capacity change from 0 to 512 [ 793.907932][ T30] audit: type=1326 audit(1756854525.887:640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8321 comm="syz.1.1843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1917b2cbe9 code=0x7ffc0000 [ 793.931936][ T30] audit: type=1326 audit(1756854525.887:641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8321 comm="syz.1.1843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f1917b2cbe9 code=0x7ffc0000 [ 793.976540][ T30] audit: type=1326 audit(1756854527.157:642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8321 comm="syz.1.1843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1917b2cbe9 code=0x7ffc0000 [ 794.041533][ T30] audit: type=1326 audit(1756854527.157:643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8321 comm="syz.1.1843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f1917b2cbe9 code=0x7ffc0000 [ 794.188402][ T30] audit: type=1326 audit(1756854527.157:644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8321 comm="syz.1.1843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1917b2cbe9 code=0x7ffc0000 [ 794.220850][ T8337] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 794.232375][ T8337] ext4 filesystem being mounted at /186/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 794.379136][ T30] audit: type=1326 audit(1756854527.157:645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8321 comm="syz.1.1843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f1917b2cbe9 code=0x7ffc0000 [ 794.384838][ T8347] loop2: detected capacity change from 0 to 512 [ 794.455938][ T8347] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 794.475159][ T8347] ext4 filesystem being mounted at /375/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 794.502259][ T8347] netlink: 'syz.2.1848': attribute type 16 has an invalid length. [ 794.525652][ T8361] loop5: detected capacity change from 0 to 512 [ 795.189424][ T8364] loop1: detected capacity change from 0 to 512 [ 795.298101][ T8361] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 795.309471][ T8361] ext4 filesystem being mounted at /187/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 795.345843][ T8361] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1850'. [ 795.385324][ T8364] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 795.396858][ T8364] ext4 filesystem being mounted at /369/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 795.427872][ T8364] netlink: 'syz.1.1852': attribute type 16 has an invalid length. [ 796.629336][ T8377] device veth1_macvtap left promiscuous mode [ 796.635392][ T8377] device macsec0 entered promiscuous mode [ 798.245947][ T8401] loop0: detected capacity change from 0 to 16 [ 798.541139][ T8401] erofs: Unknown parameter '18446744073709551615' [ 798.595993][ T30] audit: type=1326 audit(1756854531.817:646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8400 comm="syz.0.1862" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4850fcbbe9 code=0x7ffc0000 [ 798.623252][ T30] audit: type=1326 audit(1756854531.847:647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8400 comm="syz.0.1862" exe="/root/syz-executor" sig=0 arch=c000003e syscall=203 compat=0 ip=0x7f4850fcbbe9 code=0x7ffc0000 [ 798.648070][ T30] audit: type=1326 audit(1756854531.847:648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8400 comm="syz.0.1862" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4850fcbbe9 code=0x7ffc0000 [ 798.671535][ T30] audit: type=1326 audit(1756854531.847:649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8400 comm="syz.0.1862" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f4850fcbbe9 code=0x7ffc0000 [ 798.695020][ T30] audit: type=1326 audit(1756854531.847:650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8400 comm="syz.0.1862" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4850fcbbe9 code=0x7ffc0000 [ 798.718489][ T30] audit: type=1326 audit(1756854531.847:651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8400 comm="syz.0.1862" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f4850fcbbe9 code=0x7ffc0000 [ 798.741853][ T30] audit: type=1326 audit(1756854531.917:652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8400 comm="syz.0.1862" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4850fcbbe9 code=0x7ffc0000 [ 798.765424][ T30] audit: type=1326 audit(1756854531.917:653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8400 comm="syz.0.1862" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4850fcbbe9 code=0x7ffc0000 [ 798.788816][ T30] audit: type=1326 audit(1756854531.967:654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8400 comm="syz.0.1862" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f4850fcbbe9 code=0x7ffc0000 [ 798.988290][ T8410] 9pnet: Insufficient options for proto=fd [ 799.059871][ T30] audit: type=1326 audit(1756854531.967:655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8400 comm="syz.0.1862" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4850fcbbe9 code=0x7ffc0000 [ 799.232961][ T5689] hid-generic 0000:3000000:0000.0009: unknown main item tag 0x4 [ 799.273702][ T5689] hid-generic 0000:3000000:0000.0009: unknown main item tag 0x2 [ 799.289748][ T5689] hid-generic 0000:3000000:0000.0009: unknown main item tag 0x3 [ 799.304058][ T5689] hid-generic 0000:3000000:0000.0009: hidraw0: HID v0.00 Device [sy] on syz0 [ 799.316962][ T8419] loop4: detected capacity change from 0 to 512 [ 799.336414][ T614] hid-generic 0000:3000000:0000.000A: unknown main item tag 0x4 [ 799.340106][ T8420] fido_id[8420]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 799.347319][ T614] hid-generic 0000:3000000:0000.000A: unknown main item tag 0x2 [ 799.364178][ T8418] device syzkaller0 entered promiscuous mode [ 799.370271][ T614] hid-generic 0000:3000000:0000.000A: unknown main item tag 0x3 [ 799.381090][ T461] syzkaller0: tun_net_xmit 48 [ 799.386229][ T8418] syzkaller0: create flow: hash 1807585379 index 1 [ 799.421295][ T8419] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 799.433238][ T8419] ext4 filesystem being mounted at /371/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 800.019010][ T614] hid-generic 0000:3000000:0000.000A: hidraw0: HID v0.00 Device [sy] on syz0 [ 800.052060][ T8419] netlink: 'syz.4.1865': attribute type 16 has an invalid length. [ 800.061696][ T8417] syzkaller0: delete flow: hash 1807585379 index 1 [ 800.106017][ T8433] fido_id[8433]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 800.903294][ T8442] loop4: detected capacity change from 0 to 512 [ 801.372371][ T8443] loop2: detected capacity change from 0 to 512 [ 801.627653][ T8443] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 801.639208][ T8443] ext4 filesystem being mounted at /378/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 801.733173][ T8443] netlink: 'syz.2.1871': attribute type 16 has an invalid length. [ 801.819676][ T8442] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 801.831162][ T8442] ext4 filesystem being mounted at /372/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 802.033014][ T8441] netlink: 'syz.4.1870': attribute type 16 has an invalid length. [ 802.047913][ T8441] device veth1_macvtap entered promiscuous mode [ 802.054307][ T8441] device macsec0 left promiscuous mode [ 802.063437][ T6046] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 802.619279][ T8464] loop2: detected capacity change from 0 to 8192 [ 802.738351][ T8469] loop0: detected capacity change from 0 to 16 [ 802.816589][ T8469] erofs: Unknown parameter '18446744073709551615' [ 803.502558][ T8481] loop4: detected capacity change from 0 to 1024 [ 803.528073][ T8480] 9pnet: Insufficient options for proto=fd [ 805.971693][ T8481] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option [ 806.007893][ T8481] EXT4-fs (loop4): mounted filesystem without journal. Opts: minixdf,bsddf,barrier=0x0000000000000009,commit=0x0000000000000005,debug_want_extra_isize=0x0000000000000080,lazytime,nodelalloc,noblock_validity,nomblk_io_submit,,errors=continue. Quota mode: none. [ 806.728235][ T8496] loop1: detected capacity change from 0 to 512 [ 807.456687][ T8496] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 807.468064][ T8496] ext4 filesystem being mounted at /377/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 807.527141][ T8496] netlink: 'syz.1.1884': attribute type 16 has an invalid length. [ 808.295105][ T8503] loop5: detected capacity change from 0 to 512 [ 808.502864][ T8503] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 808.514215][ T8503] ext4 filesystem being mounted at /192/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 808.537805][ T8503] netlink: 'syz.5.1886': attribute type 16 has an invalid length. [ 809.136911][ T8522] loop1: detected capacity change from 0 to 512 [ 809.242713][ T8522] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 809.254156][ T8522] ext4 filesystem being mounted at /378/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 809.364453][ T8522] netlink: 'syz.1.1887': attribute type 16 has an invalid length. [ 810.410187][ T8537] 9pnet: Insufficient options for proto=fd [ 810.661406][ T8542] loop1: detected capacity change from 0 to 1024 [ 812.483760][ T8542] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option [ 812.613792][ T8542] EXT4-fs (loop1): mounted filesystem without journal. Opts: minixdf,bsddf,barrier=0x0000000000000009,commit=0x0000000000000005,debug_want_extra_isize=0x0000000000000080,lazytime,nodelalloc,noblock_validity,nomblk_io_submit,,errors=continue. Quota mode: none. [ 812.766305][ T8552] device veth1_macvtap left promiscuous mode [ 812.795605][ T8552] device macsec0 entered promiscuous mode [ 813.665838][ T8569] loop5: detected capacity change from 0 to 512 [ 813.728745][ T8569] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 813.740585][ T8569] ext4 filesystem being mounted at /196/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 813.753508][ T8569] netlink: 'syz.5.1902': attribute type 16 has an invalid length. [ 813.768093][ T8569] device veth1_macvtap entered promiscuous mode [ 813.774573][ T8569] device macsec0 left promiscuous mode [ 814.407414][ T8585] loop0: detected capacity change from 0 to 512 [ 814.494163][ T8585] EXT4-fs (loop0): Ignoring removed oldalloc option [ 814.530526][ T8585] EXT4-fs (loop0): 1 truncate cleaned up [ 814.536202][ T8585] EXT4-fs (loop0): mounted filesystem without journal. Opts: quota,bsdgroups,nouid32,errors=remount-ro,jqfmt=vfsv1,oldalloc,stripe=0x0000000000000005,. Quota mode: writeback. [ 814.580594][ T6047] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 814.826416][ T8591] loop0: detected capacity change from 0 to 1024 [ 814.902184][ T8591] EXT4-fs (loop0): Ignoring removed nomblk_io_submit option [ 815.022570][ T8591] EXT4-fs (loop0): mounted filesystem without journal. Opts: minixdf,bsddf,barrier=0x0000000000000009,commit=0x0000000000000005,debug_want_extra_isize=0x0000000000000080,lazytime,nodelalloc,noblock_validity,nomblk_io_submit,,errors=continue. Quota mode: none. [ 816.773660][ T8601] loop1: detected capacity change from 0 to 512 [ 816.811517][ T8601] EXT4-fs (loop1): Ignoring removed oldalloc option [ 816.835162][ T8601] EXT4-fs (loop1): 1 truncate cleaned up [ 816.846097][ T8601] EXT4-fs (loop1): mounted filesystem without journal. Opts: quota,bsdgroups,nouid32,errors=remount-ro,jqfmt=vfsv1,oldalloc,stripe=0x0000000000000005,. Quota mode: writeback. [ 817.310047][ T8615] loop4: detected capacity change from 0 to 1024 [ 817.523873][ T8615] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option [ 817.939734][ T8615] EXT4-fs (loop4): mounted filesystem without journal. Opts: minixdf,bsddf,barrier=0x0000000000000009,commit=0x0000000000000005,debug_want_extra_isize=0x0000000000000080,lazytime,nodelalloc,noblock_validity,nomblk_io_submit,,errors=continue. Quota mode: none. [ 818.567630][ T8637] loop0: detected capacity change from 0 to 512 [ 818.624876][ T8638] loop4: detected capacity change from 0 to 512 [ 818.632335][ T8620] device veth1_macvtap left promiscuous mode [ 818.638332][ T8620] device macsec0 entered promiscuous mode [ 818.645817][ T8637] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 818.657282][ T8637] ext4 filesystem being mounted at /398/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 818.674896][ T8638] EXT4-fs (loop4): Ignoring removed oldalloc option [ 818.712143][ T8638] EXT4-fs (loop4): 1 truncate cleaned up [ 818.730283][ T8638] EXT4-fs (loop4): mounted filesystem without journal. Opts: quota,bsdgroups,nouid32,errors=remount-ro,jqfmt=vfsv1,oldalloc,stripe=0x0000000000000005,. Quota mode: writeback. [ 818.991722][ T8645] loop4: detected capacity change from 0 to 512 [ 819.255235][ T8645] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 819.266866][ T8645] ext4 filesystem being mounted at /383/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 819.399455][ T8645] netlink: 'syz.4.1922': attribute type 16 has an invalid length. [ 819.486725][ T8649] loop1: detected capacity change from 0 to 16 [ 819.662982][ T8649] erofs: Unknown parameter '18446744073709551615' [ 819.835785][ T3799] hid-generic 0000:3000000:0000.000B: unknown main item tag 0x4 [ 819.848524][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 819.848539][ T30] audit: type=1326 audit(1756854553.067:666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8648 comm="syz.1.1923" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1917b2cbe9 code=0x7ffc0000 [ 819.908646][ T3799] hid-generic 0000:3000000:0000.000B: unknown main item tag 0x2 [ 819.917058][ T30] audit: type=1326 audit(1756854553.107:667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8648 comm="syz.1.1923" exe="/root/syz-executor" sig=0 arch=c000003e syscall=203 compat=0 ip=0x7f1917b2cbe9 code=0x7ffc0000 [ 819.926917][ T3799] hid-generic 0000:3000000:0000.000B: unknown main item tag 0x3 [ 819.940646][ T30] audit: type=1326 audit(1756854553.127:668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8648 comm="syz.1.1923" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1917b2cbe9 code=0x7ffc0000 [ 819.971983][ T30] audit: type=1326 audit(1756854553.127:669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8648 comm="syz.1.1923" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1917b2cbe9 code=0x7ffc0000 [ 819.995897][ T30] audit: type=1326 audit(1756854553.197:670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8648 comm="syz.1.1923" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f1917b2cbe9 code=0x7ffc0000 [ 819.997723][ T3799] hid-generic 0000:3000000:0000.000B: hidraw0: HID v0.00 Device [sy] on syz0 [ 820.045675][ T30] audit: type=1326 audit(1756854553.197:671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8648 comm="syz.1.1923" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1917b2cbe9 code=0x7ffc0000 [ 820.098339][ T5689] hid-generic 0000:3000000:0000.000C: unknown main item tag 0x4 [ 820.112785][ T5689] hid-generic 0000:3000000:0000.000C: unknown main item tag 0x2 [ 820.114685][ T30] audit: type=1326 audit(1756854553.197:672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8648 comm="syz.1.1923" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1917b2cbe9 code=0x7ffc0000 [ 820.239417][ T8668] loop0: detected capacity change from 0 to 512 [ 820.249825][ T30] audit: type=1326 audit(1756854553.217:673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8648 comm="syz.1.1923" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f1917b2cbe9 code=0x7ffc0000 [ 820.275494][ T30] audit: type=1326 audit(1756854553.217:674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8648 comm="syz.1.1923" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1917b2cbe9 code=0x7ffc0000 [ 820.326914][ T30] audit: type=1326 audit(1756854553.217:675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8648 comm="syz.1.1923" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1917b2cbe9 code=0x7ffc0000 [ 820.417983][ T8668] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 820.429703][ T8668] ext4 filesystem being mounted at /399/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 820.768137][ T8668] netlink: 'syz.0.1924': attribute type 16 has an invalid length. [ 820.810861][ T8668] device veth1_macvtap entered promiscuous mode [ 820.820646][ T8668] device macsec0 left promiscuous mode [ 821.078671][ T6064] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 821.189702][ T5689] hid-generic 0000:3000000:0000.000C: unknown main item tag 0x3 [ 821.279809][ T5689] hid-generic 0000:3000000:0000.000C: hidraw0: HID v0.00 Device [sy] on syz0 [ 821.532438][ T8690] loop0: detected capacity change from 0 to 1024 [ 822.434405][ T8689] loop2: detected capacity change from 0 to 512 [ 822.508329][ T8690] EXT4-fs (loop0): Ignoring removed nomblk_io_submit option [ 824.282193][ T8689] EXT4-fs: error -4 creating inode table initialization thread [ 824.291550][ T8689] EXT4-fs (loop2): mount failed [ 824.594760][ T8686] fido_id[8686]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 824.654367][ T8690] EXT4-fs: error -4 creating inode table initialization thread [ 824.662122][ T8690] EXT4-fs (loop0): mount failed [ 826.067728][ T8712] loop2: detected capacity change from 0 to 512 [ 826.074804][ T8708] device veth1_macvtap left promiscuous mode [ 826.080967][ T8708] device macsec0 entered promiscuous mode [ 826.318902][ T8712] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 826.330316][ T8712] ext4 filesystem being mounted at /391/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 826.389117][ T8712] netlink: 'syz.2.1936': attribute type 16 has an invalid length. [ 826.422413][ T8712] device veth1_macvtap entered promiscuous mode [ 826.429072][ T8712] device macsec0 left promiscuous mode [ 827.161311][ T6064] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 827.279793][ T8732] loop2: detected capacity change from 0 to 16 [ 827.330121][ T8732] erofs: Unknown parameter '18446744073709551615' [ 827.759911][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 827.759939][ T30] audit: type=1326 audit(1756854560.967:677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8729 comm="syz.2.1943" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e5318ebe9 code=0x7ffc0000 [ 827.839440][ T30] audit: type=1326 audit(1756854560.967:678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8729 comm="syz.2.1943" exe="/root/syz-executor" sig=0 arch=c000003e syscall=203 compat=0 ip=0x7f9e5318ebe9 code=0x7ffc0000 [ 827.868157][ T30] audit: type=1326 audit(1756854560.977:679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8729 comm="syz.2.1943" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e5318ebe9 code=0x7ffc0000 [ 827.919286][ T30] audit: type=1326 audit(1756854561.017:680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8729 comm="syz.2.1943" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f9e5318ebe9 code=0x7ffc0000 [ 827.959563][ T30] audit: type=1326 audit(1756854561.017:681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8729 comm="syz.2.1943" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e5318ebe9 code=0x7ffc0000 [ 827.983755][ T30] audit: type=1326 audit(1756854561.047:682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8729 comm="syz.2.1943" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f9e5318ebe9 code=0x7ffc0000 [ 828.007469][ T30] audit: type=1326 audit(1756854561.177:683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8729 comm="syz.2.1943" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e5318ebe9 code=0x7ffc0000 [ 828.030983][ T30] audit: type=1326 audit(1756854561.177:684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8729 comm="syz.2.1943" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e5318ebe9 code=0x7ffc0000 [ 828.054514][ T30] audit: type=1326 audit(1756854561.227:685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8729 comm="syz.2.1943" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f9e5318ebe9 code=0x7ffc0000 [ 828.199024][ T30] audit: type=1326 audit(1756854561.227:686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8729 comm="syz.2.1943" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e5318ebe9 code=0x7ffc0000 [ 828.831673][ T8754] loop2: detected capacity change from 0 to 1024 [ 828.862427][ T8754] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option [ 828.926197][ T8754] EXT4-fs (loop2): mounted filesystem without journal. Opts: minixdf,bsddf,barrier=0x0000000000000009,commit=0x0000000000000005,debug_want_extra_isize=0x0000000000000080,lazytime,nodelalloc,noblock_validity,nomblk_io_submit,,errors=continue. Quota mode: none. [ 829.671966][ T8768] loop4: detected capacity change from 0 to 512 [ 829.835741][ T8768] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 829.847198][ T8768] ext4 filesystem being mounted at /391/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 831.075613][ T8768] netlink: 'syz.4.1951': attribute type 16 has an invalid length. [ 831.673604][ T8785] device syzkaller0 entered promiscuous mode [ 831.694746][ T6] syzkaller0: tun_net_xmit 48 [ 831.703661][ T8785] syzkaller0: create flow: hash 1807585379 index 1 [ 831.705743][ T8781] loop4: detected capacity change from 0 to 512 [ 831.717744][ T8783] syzkaller0: delete flow: hash 1807585379 index 1 [ 831.760595][ T8781] EXT4-fs (loop4): Ignoring removed oldalloc option [ 831.807179][ T8781] EXT4-fs (loop4): 1 truncate cleaned up [ 831.866132][ T8781] EXT4-fs (loop4): mounted filesystem without journal. Opts: quota,bsdgroups,nouid32,errors=remount-ro,jqfmt=vfsv1,oldalloc,stripe=0x0000000000000005,. Quota mode: writeback. [ 832.060845][ T8794] loop5: detected capacity change from 0 to 1024 [ 832.130574][ T8794] EXT4-fs (loop5): Ignoring removed nomblk_io_submit option [ 832.240767][ T8794] EXT4-fs (loop5): mounted filesystem without journal. Opts: minixdf,bsddf,barrier=0x0000000000000009,commit=0x0000000000000005,debug_want_extra_isize=0x0000000000000080,lazytime,nodelalloc,noblock_validity,nomblk_io_submit,,errors=continue. Quota mode: none. [ 833.326687][ T8808] loop4: detected capacity change from 0 to 512 [ 834.316094][ T8808] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 834.327507][ T8808] ext4 filesystem being mounted at /393/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 834.410875][ T8808] netlink: 'syz.4.1962': attribute type 16 has an invalid length. [ 834.829355][ T8815] loop0: detected capacity change from 0 to 1024 [ 838.150445][ T8815] EXT4-fs (loop0): Ignoring removed nomblk_io_submit option [ 838.199445][ T8815] EXT4-fs (loop0): mounted filesystem without journal. Opts: minixdf,bsddf,barrier=0x0000000000000009,commit=0x0000000000000005,debug_want_extra_isize=0x0000000000000080,lazytime,nodelalloc,noblock_validity,nomblk_io_submit,,errors=continue. Quota mode: none. [ 838.860581][ T8834] loop5: detected capacity change from 0 to 1024 [ 838.910232][ T8834] EXT4-fs (loop5): Ignoring removed nomblk_io_submit option [ 839.007104][ T8834] EXT4-fs (loop5): mounted filesystem without journal. Opts: minixdf,bsddf,barrier=0x0000000000000009,commit=0x0000000000000005,debug_want_extra_isize=0x0000000000000080,lazytime,nodelalloc,noblock_validity,nomblk_io_submit,,errors=continue. Quota mode: none. [ 839.335572][ T8840] loop2: detected capacity change from 0 to 512 [ 839.433791][ T8845] loop1: detected capacity change from 0 to 512 [ 839.781357][ T8840] EXT4-fs (loop2): Ignoring removed oldalloc option [ 839.921104][ T8840] EXT4-fs (loop2): 1 truncate cleaned up [ 839.934303][ T8845] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 839.945893][ T8845] ext4 filesystem being mounted at /394/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 839.968998][ T8845] netlink: 'syz.1.1970': attribute type 16 has an invalid length. [ 840.095069][ T8840] EXT4-fs (loop2): mounted filesystem without journal. Opts: quota,bsdgroups,nouid32,errors=remount-ro,jqfmt=vfsv1,oldalloc,stripe=0x0000000000000005,. Quota mode: writeback. [ 840.447330][ T3399] hid-generic 0000:3000000:0000.000D: unknown main item tag 0x4 [ 840.456532][ T3399] hid-generic 0000:3000000:0000.000D: unknown main item tag 0x2 [ 840.464824][ T3399] hid-generic 0000:3000000:0000.000D: unknown main item tag 0x3 [ 840.474454][ T3399] hid-generic 0000:3000000:0000.000D: hidraw0: HID v0.00 Device [sy] on syz0 [ 840.486277][ T8851] fido_id[8851]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 840.553065][ T8859] device syzkaller0 entered promiscuous mode [ 841.062127][ T8866] loop4: detected capacity change from 0 to 512 [ 841.462092][ T8867] loop1: detected capacity change from 0 to 512 [ 842.752154][ T8859] syzkaller0: create flow: hash 1807585379 index 1 [ 842.761608][ T8858] syzkaller0: delete flow: hash 1807585379 index 1 [ 842.858490][ T8866] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 842.870230][ T8866] ext4 filesystem being mounted at /398/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 842.881096][ T8867] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 842.892152][ T8867] ext4 filesystem being mounted at /395/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 842.969524][ T8866] netlink: 'syz.4.1976': attribute type 16 has an invalid length. [ 842.987623][ T8864] netlink: 'syz.1.1975': attribute type 16 has an invalid length. [ 843.077696][ T8880] loop0: detected capacity change from 0 to 1024 [ 843.909002][ T8880] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 844.039945][ T8880] ext4 filesystem being mounted at /407/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 844.081948][ T8896] device syzkaller0 entered promiscuous mode [ 844.097289][ T8896] syzkaller0: create flow: hash 1807585379 index 1 [ 844.141783][ T5689] syzkaller0: tun_net_xmit 48 [ 844.172052][ T8895] syzkaller0: delete flow: hash 1807585379 index 1 [ 844.217790][ T8903] loop1: detected capacity change from 0 to 512 [ 844.266951][ T8903] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 844.278049][ T8903] ext4 filesystem being mounted at /397/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 844.345703][ T8903] netlink: 'syz.1.1984': attribute type 16 has an invalid length. [ 844.353880][ T8903] netlink: 'syz.1.1984': attribute type 27 has an invalid length. [ 844.487861][ T8913] loop0: detected capacity change from 0 to 512 [ 844.689174][ T8913] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 844.700646][ T8913] ext4 filesystem being mounted at /408/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 844.887780][ T8913] netlink: 'syz.0.1986': attribute type 16 has an invalid length. [ 845.358319][ T8921] device syzkaller0 entered promiscuous mode [ 845.365022][ T5689] syzkaller0: tun_net_xmit 48 [ 845.372662][ T8921] syzkaller0: create flow: hash 1807585379 index 1 [ 845.450731][ T8920] syzkaller0: delete flow: hash 1807585379 index 1 [ 845.567213][ T8928] loop0: detected capacity change from 0 to 512 [ 845.773425][ T8928] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 845.785207][ T8928] ext4 filesystem being mounted at /409/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 845.889405][ T8928] netlink: 'syz.0.1991': attribute type 16 has an invalid length. [ 847.791391][ T8939] loop2: detected capacity change from 0 to 512 [ 847.993810][ T8939] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 848.005000][ T8939] ext4 filesystem being mounted at /402/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 848.026743][ T8938] netlink: 'syz.2.1992': attribute type 16 has an invalid length. [ 848.462083][ T8949] loop5: detected capacity change from 0 to 1024 [ 848.488781][ T8949] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 848.530412][ T8949] ext4 filesystem being mounted at /213/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 848.861433][ T8963] loop2: detected capacity change from 0 to 1024 [ 848.900495][ T8963] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option [ 849.171605][ T8963] EXT4-fs (loop2): mounted filesystem without journal. Opts: minixdf,bsddf,barrier=0x0000000000000009,commit=0x0000000000000005,debug_want_extra_isize=0x0000000000000080,lazytime,nodelalloc,noblock_validity,nomblk_io_submit,,errors=continue. Quota mode: none. [ 849.745111][ T8976] loop5: detected capacity change from 0 to 512 [ 850.834722][ T8976] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 850.846339][ T8976] ext4 filesystem being mounted at /214/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 851.096187][ T8976] netlink: 'syz.5.1999': attribute type 16 has an invalid length. [ 851.128247][ T8976] device veth1_macvtap entered promiscuous mode [ 851.135195][ T8976] device macsec0 left promiscuous mode [ 851.570313][ T8990] loop0: detected capacity change from 0 to 512 [ 852.184122][ T6060] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 852.391627][ T8991] syzkaller0: create flow: hash 1807585379 index 1 [ 852.903292][ T8990] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 852.915506][ T8990] ext4 filesystem being mounted at /411/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 853.076895][ T9004] loop1: detected capacity change from 0 to 1024 [ 854.212809][ T9004] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option [ 854.278570][ T9004] EXT4-fs (loop1): mounted filesystem without journal. Opts: minixdf,bsddf,barrier=0x0000000000000009,commit=0x0000000000000005,debug_want_extra_isize=0x0000000000000080,lazytime,nodelalloc,noblock_validity,nomblk_io_submit,,errors=continue. Quota mode: none. [ 854.822383][ T9011] loop5: detected capacity change from 0 to 512 [ 854.902483][ T8986] device syzkaller0 entered promiscuous mode [ 854.915007][ T9011] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 854.926434][ T9011] ext4 filesystem being mounted at /215/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 855.838296][ T8990] netlink: 'syz.0.2002': attribute type 16 has an invalid length. [ 855.860153][ T9011] netlink: 'syz.5.2005': attribute type 16 has an invalid length. [ 855.880623][ T6] syzkaller0: tun_net_xmit 48 [ 855.891291][ T8986] syzkaller0: delete flow: hash 1807585379 index 1 [ 855.977435][ T9023] loop4: detected capacity change from 0 to 1024 [ 856.116802][ T9023] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 856.251981][ T9023] ext4 filesystem being mounted at /404/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 856.437710][ T9035] loop5: detected capacity change from 0 to 512 [ 856.491095][ T9035] EXT4-fs (loop5): Ignoring removed oldalloc option [ 856.520224][ T9035] EXT4-fs (loop5): 1 truncate cleaned up [ 856.536139][ T9035] EXT4-fs (loop5): mounted filesystem without journal. Opts: quota,bsdgroups,nouid32,errors=remount-ro,jqfmt=vfsv1,oldalloc,stripe=0x0000000000000005,. Quota mode: writeback. [ 856.632768][ T9042] loop4: detected capacity change from 0 to 512 [ 856.848455][ T9042] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 856.860055][ T9042] ext4 filesystem being mounted at /406/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 856.931741][ T9042] netlink: 'syz.4.2016': attribute type 16 has an invalid length. [ 858.262615][ T9052] loop5: detected capacity change from 0 to 512 [ 858.332403][ T9055] loop2: detected capacity change from 0 to 512 [ 858.772769][ T3799] hid-generic 0000:3000000:0000.000E: unknown main item tag 0x4 [ 858.839149][ T9052] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 858.854427][ T9052] ext4 filesystem being mounted at /219/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 859.250730][ T3799] hid-generic 0000:3000000:0000.000E: unknown main item tag 0x2 [ 859.258902][ T3799] hid-generic 0000:3000000:0000.000E: unknown main item tag 0x3 [ 859.281884][ T3799] hid-generic 0000:3000000:0000.000E: hidraw0: HID v0.00 Device [sy] on syz0 [ 859.436997][ T9055] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 859.449030][ T9055] ext4 filesystem being mounted at /406/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 859.926132][ T9052] netlink: 'syz.5.2017': attribute type 16 has an invalid length. [ 859.957771][ T9055] netlink: 'syz.2.2019': attribute type 16 has an invalid length. [ 860.081674][ T9067] fido_id[9067]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 860.954350][ T9082] device syzkaller0 entered promiscuous mode [ 861.130720][ T9082] syzkaller0: create flow: hash 1807585379 index 1 [ 861.149552][ T9087] loop1: detected capacity change from 0 to 512 [ 861.180360][ T3799] syzkaller0: tun_net_xmit 48 [ 861.186322][ T9088] device veth1_macvtap left promiscuous mode [ 861.192848][ T9088] device macsec0 entered promiscuous mode [ 861.199334][ T9087] EXT4-fs (loop1): Ignoring removed oldalloc option [ 861.211141][ T9084] device syzkaller0 entered promiscuous mode [ 861.212000][ T9087] EXT4-fs (loop1): 1 truncate cleaned up [ 861.224886][ T9081] syzkaller0: delete flow: hash 1807585379 index 1 [ 861.230068][ T9084] syzkaller0: create flow: hash 1807585379 index 1 [ 861.232026][ T9087] EXT4-fs (loop1): mounted filesystem without journal. Opts: quota,bsdgroups,nouid32,errors=remount-ro,jqfmt=vfsv1,oldalloc,stripe=0x0000000000000005,. Quota mode: writeback. [ 861.267322][ T2272] syzkaller0: tun_net_xmit 48 [ 861.273787][ T9083] syzkaller0: delete flow: hash 1807585379 index 1 [ 861.369836][ T3799] hid-generic 0000:3000000:0000.000F: unknown main item tag 0x4 [ 861.378152][ T3799] hid-generic 0000:3000000:0000.000F: unknown main item tag 0x2 [ 861.386725][ T3799] hid-generic 0000:3000000:0000.000F: unknown main item tag 0x3 [ 861.395779][ T3799] hid-generic 0000:3000000:0000.000F: hidraw0: HID v0.00 Device [sy] on syz0 [ 861.496358][ T9103] loop5: detected capacity change from 0 to 512 [ 861.572982][ T9103] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 861.585117][ T9103] ext4 filesystem being mounted at /222/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 861.613153][ T9103] netlink: 'syz.5.2032': attribute type 16 has an invalid length. [ 861.639733][ T9101] fido_id[9101]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 863.553740][ T9124] loop5: detected capacity change from 0 to 512 [ 863.985261][ T9124] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 863.998883][ T9124] ext4 filesystem being mounted at /223/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 864.019330][ T9124] netlink: 'syz.5.2035': attribute type 16 has an invalid length. [ 864.345221][ T9133] loop1: detected capacity change from 0 to 512 [ 864.413509][ T9136] device veth1_macvtap left promiscuous mode [ 864.445407][ T9136] device macsec0 entered promiscuous mode [ 864.468014][ T9133] EXT4-fs (loop1): Ignoring removed oldalloc option [ 864.540627][ T9133] EXT4-fs (loop1): 1 truncate cleaned up [ 864.547565][ T9133] EXT4-fs (loop1): mounted filesystem without journal. Opts: quota,bsdgroups,nouid32,errors=remount-ro,jqfmt=vfsv1,oldalloc,stripe=0x0000000000000005,. Quota mode: writeback. [ 864.589260][ T614] hid-generic 0000:3000000:0000.0010: unknown main item tag 0x4 [ 864.610662][ T614] hid-generic 0000:3000000:0000.0010: unknown main item tag 0x2 [ 864.642770][ T614] hid-generic 0000:3000000:0000.0010: unknown main item tag 0x3 [ 864.663804][ T614] hid-generic 0000:3000000:0000.0010: hidraw0: HID v0.00 Device [sy] on syz0 [ 864.767609][ T9143] fido_id[9143]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 864.811837][ T9145] device syzkaller0 entered promiscuous mode [ 864.818576][ T3799] syzkaller0: tun_net_xmit 48 [ 864.826729][ T9145] syzkaller0: create flow: hash 1807585379 index 1 [ 864.836258][ T9144] syzkaller0: delete flow: hash 1807585379 index 1 [ 866.091513][ T9155] device veth1_macvtap left promiscuous mode [ 866.098257][ T9155] device macsec0 entered promiscuous mode [ 866.298703][ T9156] loop4: detected capacity change from 0 to 512 [ 866.713612][ T9156] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 866.725363][ T9156] ext4 filesystem being mounted at /412/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 866.752573][ T9156] netlink: 'syz.4.2045': attribute type 16 has an invalid length. [ 866.770159][ T9162] loop1: detected capacity change from 0 to 512 [ 866.981709][ T9162] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 866.993293][ T9162] ext4 filesystem being mounted at /413/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 867.335563][ T9168] loop5: detected capacity change from 0 to 512 [ 867.468488][ T9168] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 867.479941][ T9168] ext4 filesystem being mounted at /226/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 867.606070][ T9168] netlink: 'syz.5.2047': attribute type 16 has an invalid length. [ 867.637087][ T9168] device veth1_macvtap entered promiscuous mode [ 867.643784][ T9168] device macsec0 left promiscuous mode [ 867.959725][ T6060] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 869.954873][ T9187] loop5: detected capacity change from 0 to 512 [ 870.593050][ T9187] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 870.604581][ T9187] ext4 filesystem being mounted at /227/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 870.626119][ T9187] netlink: 'syz.5.2052': attribute type 16 has an invalid length. [ 870.916429][ T9198] loop1: detected capacity change from 0 to 512 [ 871.043699][ T9198] EXT4-fs (loop1): Ignoring removed oldalloc option [ 871.268316][ T9198] EXT4-fs (loop1): 1 truncate cleaned up [ 871.279985][ T9198] EXT4-fs (loop1): mounted filesystem without journal. Opts: quota,bsdgroups,nouid32,errors=remount-ro,jqfmt=vfsv1,oldalloc,stripe=0x0000000000000005,. Quota mode: writeback. [ 871.498367][ T9214] loop1: detected capacity change from 0 to 512 [ 871.594271][ T9214] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 871.605897][ T9214] ext4 filesystem being mounted at /416/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 871.741700][ T9214] netlink: 'syz.1.2059': attribute type 16 has an invalid length. [ 871.866211][ T9220] loop2: detected capacity change from 0 to 512 [ 872.037462][ T9220] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 872.049005][ T9220] ext4 filesystem being mounted at /413/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 872.362602][ T9229] loop0: detected capacity change from 0 to 1024 [ 874.372313][ T9229] EXT4-fs (loop0): Ignoring removed nomblk_io_submit option [ 875.016139][ T9229] EXT4-fs (loop0): mounted filesystem without journal. Opts: minixdf,bsddf,barrier=0x0000000000000009,commit=0x0000000000000005,debug_want_extra_isize=0x0000000000000080,lazytime,nodelalloc,noblock_validity,nomblk_io_submit,,errors=continue. Quota mode: none. [ 875.112057][ T9239] loop5: detected capacity change from 0 to 512 [ 875.141603][ T698] hid-generic 0000:3000000:0000.0011: unknown main item tag 0x4 [ 875.149404][ T698] hid-generic 0000:3000000:0000.0011: unknown main item tag 0x2 [ 875.150489][ T9239] EXT4-fs (loop5): Ignoring removed oldalloc option [ 875.160691][ T698] hid-generic 0000:3000000:0000.0011: unknown main item tag 0x3 [ 875.485201][ T9249] loop4: detected capacity change from 0 to 512 [ 875.557494][ T9239] EXT4-fs (loop5): 1 truncate cleaned up [ 875.571093][ T9249] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 875.582588][ T9249] ext4 filesystem being mounted at /418/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 875.822207][ T9249] netlink: 'syz.4.2068': attribute type 16 has an invalid length. [ 876.246802][ T9239] EXT4-fs (loop5): mounted filesystem without journal. Opts: quota,bsdgroups,nouid32,errors=remount-ro,jqfmt=vfsv1,oldalloc,stripe=0x0000000000000005,. Quota mode: writeback. [ 876.726958][ T698] hid-generic 0000:3000000:0000.0011: hidraw0: HID v0.00 Device [sy] on syz0 [ 876.795446][ T9260] loop0: detected capacity change from 0 to 512 [ 876.862674][ T9260] EXT4-fs (loop0): Ignoring removed oldalloc option [ 877.653117][ T9270] device veth1_macvtap left promiscuous mode [ 877.659157][ T9270] device macsec0 entered promiscuous mode [ 878.197921][ T9264] fido_id[9264]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 878.235407][ T9260] EXT4-fs (loop0): 1 truncate cleaned up [ 878.247388][ T9277] loop5: detected capacity change from 0 to 1024 [ 878.259906][ T9260] EXT4-fs (loop0): mounted filesystem without journal. Opts: quota,bsdgroups,nouid32,errors=remount-ro,jqfmt=vfsv1,oldalloc,stripe=0x0000000000000005,. Quota mode: writeback. [ 878.339194][ T9277] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 878.357556][ T9277] ext4 filesystem being mounted at /232/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 878.423756][ T9286] loop4: detected capacity change from 0 to 512 [ 878.493191][ T9286] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 878.504381][ T9286] ext4 filesystem being mounted at /420/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 878.911098][ T5749] hid-generic 0000:3000000:0000.0012: unknown main item tag 0x4 [ 878.918827][ T5749] hid-generic 0000:3000000:0000.0012: unknown main item tag 0x2 [ 878.926555][ T5749] hid-generic 0000:3000000:0000.0012: unknown main item tag 0x3 [ 878.935026][ T5749] hid-generic 0000:3000000:0000.0012: hidraw0: HID v0.00 Device [sy] on syz0 [ 878.954821][ T5749] hid-generic 0000:3000000:0000.0013: unknown main item tag 0x4 [ 878.962638][ T5749] hid-generic 0000:3000000:0000.0013: unknown main item tag 0x2 [ 878.967260][ T9308] fido_id[9308]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 878.971023][ T5749] hid-generic 0000:3000000:0000.0013: unknown main item tag 0x3 [ 878.992548][ T5749] hid-generic 0000:3000000:0000.0013: hidraw0: HID v0.00 Device [sy] on syz0 [ 879.014157][ T9310] fido_id[9310]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 879.401844][ T9323] loop1: detected capacity change from 0 to 512 [ 879.420613][ T9327] loop0: detected capacity change from 0 to 1024 [ 879.427341][ T9323] EXT4-fs (loop1): Ignoring removed oldalloc option [ 879.435710][ T9323] EXT4-fs (loop1): 1 truncate cleaned up [ 879.441589][ T9323] EXT4-fs (loop1): mounted filesystem without journal. Opts: quota,bsdgroups,nouid32,errors=remount-ro,jqfmt=vfsv1,oldalloc,stripe=0x0000000000000005,. Quota mode: writeback. [ 879.467227][ T9327] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 879.478255][ T9327] ext4 filesystem being mounted at /425/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 879.665959][ T9336] loop0: detected capacity change from 0 to 512 [ 879.875223][ T9336] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 879.886644][ T9336] ext4 filesystem being mounted at /426/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 881.323381][ T9352] loop5: detected capacity change from 0 to 512 [ 881.387589][ T9352] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 881.398959][ T9352] ext4 filesystem being mounted at /236/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 881.914398][ T9359] loop1: detected capacity change from 0 to 512 [ 882.220623][ T9359] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 882.232156][ T9359] ext4 filesystem being mounted at /428/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 882.487628][ T9359] netlink: 'syz.1.2100': attribute type 16 has an invalid length. [ 882.520666][ T9359] device veth1_macvtap entered promiscuous mode [ 882.527336][ T9359] device macsec0 left promiscuous mode [ 882.674259][ T6060] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 882.697311][ T9365] loop4: detected capacity change from 0 to 512 [ 882.711449][ T9369] loop5: detected capacity change from 0 to 1024 [ 882.742043][ T9365] EXT4-fs (loop4): Ignoring removed oldalloc option [ 882.757537][ T9365] EXT4-fs (loop4): 1 truncate cleaned up [ 883.431929][ T9375] loop2: detected capacity change from 0 to 512 [ 883.682572][ T9365] EXT4-fs (loop4): mounted filesystem without journal. Opts: quota,bsdgroups,nouid32,errors=remount-ro,jqfmt=vfsv1,oldalloc,stripe=0x0000000000000005,. Quota mode: writeback. [ 883.883173][ T9369] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 883.911400][ T9375] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 883.922778][ T9375] ext4 filesystem being mounted at /420/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 883.975216][ T9375] netlink: 'syz.2.2105': attribute type 16 has an invalid length. [ 884.005884][ T9375] device veth1_macvtap entered promiscuous mode [ 884.012610][ T9375] device macsec0 left promiscuous mode [ 884.043777][ T9369] ext4 filesystem being mounted at /237/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 884.059525][ T6064] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 884.695241][ T9394] loop4: detected capacity change from 0 to 512 [ 884.874223][ T9394] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 884.885586][ T9394] ext4 filesystem being mounted at /424/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 885.701707][ T9391] netlink: 'syz.4.2108': attribute type 16 has an invalid length. [ 885.723867][ T9402] loop1: detected capacity change from 0 to 512 [ 886.021552][ T9402] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 886.033155][ T9402] ext4 filesystem being mounted at /430/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 886.190774][ T9400] device syzkaller0 entered promiscuous mode [ 886.198126][ T698] syzkaller0: tun_net_xmit 48 [ 886.257017][ T9404] syzkaller0: create flow: hash 1807585379 index 1 [ 886.749325][ T9402] netlink: 'syz.1.2114': attribute type 16 has an invalid length. [ 886.768881][ T9395] syzkaller0: delete flow: hash 1807585379 index 1 [ 886.969663][ T9418] 9pnet: Insufficient options for proto=fd [ 888.789315][ T9432] loop2: detected capacity change from 0 to 512 [ 889.151427][ T9429] loop5: detected capacity change from 0 to 512 [ 889.265265][ T9429] EXT4-fs (loop5): Ignoring removed oldalloc option [ 889.464026][ T9432] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 889.475403][ T9432] ext4 filesystem being mounted at /422/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 889.725699][ T4568] kworker/dying (4568) used greatest stack depth: 20160 bytes left [ 889.833686][ T9429] EXT4-fs (loop5): 1 truncate cleaned up [ 889.872046][ T9432] netlink: 'syz.2.2120': attribute type 16 has an invalid length. [ 890.159830][ T9429] EXT4-fs (loop5): mounted filesystem without journal. Opts: quota,bsdgroups,nouid32,errors=remount-ro,jqfmt=vfsv1,oldalloc,stripe=0x0000000000000005,. Quota mode: writeback. [ 890.756371][ T9455] loop0: detected capacity change from 0 to 512 [ 891.090132][ T9455] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 891.101862][ T9455] ext4 filesystem being mounted at /433/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 891.191312][ T9455] netlink: 'syz.0.2125': attribute type 16 has an invalid length. [ 891.224803][ T9455] device veth1_macvtap entered promiscuous mode [ 891.231581][ T9455] device macsec0 left promiscuous mode [ 891.267145][ T6061] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 891.444608][ T9465] 9pnet: Insufficient options for proto=fd [ 891.790747][ T9470] device syzkaller0 entered promiscuous mode [ 891.806050][ T9440] syzkaller0: tun_net_xmit 48 [ 891.820287][ T9471] syzkaller0: create flow: hash 1807585379 index 1 [ 891.839134][ T9469] syzkaller0: delete flow: hash 1807585379 index 1 [ 891.912849][ T9479] loop0: detected capacity change from 0 to 512 [ 893.064685][ T9483] loop5: detected capacity change from 0 to 512 [ 893.120176][ T9484] loop4: detected capacity change from 0 to 512 [ 894.450254][ T9479] EXT4-fs (loop0): Ignoring removed oldalloc option [ 897.257974][ T9484] EXT4-fs warning (device loop4): ext4_multi_mount_protect:403: Unable to create kmmpd thread for loop4. [ 897.362447][ T9483] EXT4-fs warning (device loop5): ext4_multi_mount_protect:403: Unable to create kmmpd thread for loop5. [ 897.382406][ T9479] EXT4-fs: failed to create workqueue [ 897.387945][ T9479] EXT4-fs (loop0): mount failed [ 897.609206][ T9511] loop1: detected capacity change from 0 to 1024 [ 898.500453][ T9514] loop2: detected capacity change from 0 to 512 [ 898.518230][ T9511] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option [ 901.669598][ T9511] EXT4-fs: error -4 creating inode table initialization thread [ 901.677342][ T9511] EXT4-fs (loop1): mount failed [ 902.426445][ T9522] loop5: detected capacity change from 0 to 512 [ 902.443622][ T9514] EXT4-fs: error -4 creating inode table initialization thread [ 902.451775][ T9514] EXT4-fs (loop2): mount failed [ 903.186574][ T9543] 9pnet: Insufficient options for proto=fd [ 905.241294][ T9556] loop2: detected capacity change from 0 to 512 [ 906.310672][ T9562] loop5: detected capacity change from 0 to 512 [ 907.070079][ T9556] EXT4-fs (loop2): Ignoring removed oldalloc option [ 907.165362][ T9562] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 907.176788][ T9562] ext4 filesystem being mounted at /246/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 907.197774][ T9562] netlink: 'syz.5.2151': attribute type 16 has an invalid length. [ 907.439111][ T9556] EXT4-fs (loop2): 1 truncate cleaned up [ 907.489632][ T9556] EXT4-fs (loop2): mounted filesystem without journal. Opts: quota,bsdgroups,nouid32,errors=remount-ro,jqfmt=vfsv1,oldalloc,stripe=0x0000000000000005,. Quota mode: writeback. [ 907.953439][ T9582] loop4: detected capacity change from 0 to 1024 [ 909.885323][ T9584] loop0: detected capacity change from 0 to 512 [ 910.197061][ T9582] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option [ 911.257284][ T9582] EXT4-fs warning (device loop4): ext4_multi_mount_protect:403: Unable to create kmmpd thread for loop4. [ 911.494514][ T9584] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 911.506223][ T9584] ext4 filesystem being mounted at /439/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 911.596823][ T9584] netlink: 'syz.0.2155': attribute type 16 has an invalid length. [ 912.100589][ T9440] hid-generic 0000:3000000:0000.0014: unknown main item tag 0x4 [ 912.127154][ T9440] hid-generic 0000:3000000:0000.0014: unknown main item tag 0x2 [ 912.156741][ T9440] hid-generic 0000:3000000:0000.0014: unknown main item tag 0x3 [ 912.340888][ T9440] hid-generic 0000:3000000:0000.0014: hidraw0: HID v0.00 Device [sy] on syz0 [ 912.409086][ T9607] fido_id[9607]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 912.678694][ T9612] device syzkaller0 entered promiscuous mode [ 912.691387][ T5749] syzkaller0: tun_net_xmit 48 [ 912.713990][ T9612] syzkaller0: create flow: hash 1807585379 index 1 [ 912.736906][ T9611] syzkaller0: delete flow: hash 1807585379 index 1 [ 912.979726][ T9621] loop5: detected capacity change from 0 to 512 [ 913.258124][ T9627] loop4: detected capacity change from 0 to 512 [ 913.286197][ T9621] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 913.297852][ T9621] ext4 filesystem being mounted at /250/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 913.537039][ T9621] netlink: 'syz.5.2166': attribute type 16 has an invalid length. [ 914.065264][ T9627] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 914.076523][ T9627] ext4 filesystem being mounted at /434/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 914.106986][ T9627] netlink: 'syz.4.2168': attribute type 16 has an invalid length. [ 914.815846][ T9644] loop2: detected capacity change from 0 to 512 [ 914.842970][ T9643] loop5: detected capacity change from 0 to 512 [ 915.058308][ T9644] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 915.070105][ T9644] ext4 filesystem being mounted at /433/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 915.161318][ T9644] netlink: 'syz.2.2172': attribute type 16 has an invalid length. [ 915.258240][ T9643] EXT4-fs (loop5): Ignoring removed oldalloc option [ 915.416133][ T9643] EXT4-fs (loop5): 1 truncate cleaned up [ 915.436925][ T9643] EXT4-fs (loop5): mounted filesystem without journal. Opts: quota,bsdgroups,nouid32,errors=remount-ro,jqfmt=vfsv1,oldalloc,stripe=0x0000000000000005,. Quota mode: writeback. [ 917.717492][ T9677] loop1: detected capacity change from 0 to 512 [ 921.298805][ T9677] EXT4-fs: error -4 creating inode table initialization thread [ 921.306957][ T9677] EXT4-fs (loop1): mount failed [ 922.442258][ T9705] loop5: detected capacity change from 0 to 512 [ 922.962668][ T9705] EXT4-fs (loop5): Ignoring removed oldalloc option [ 923.211544][ T9705] EXT4-fs (loop5): 1 truncate cleaned up [ 923.219323][ T9705] EXT4-fs (loop5): mounted filesystem without journal. Opts: quota,bsdgroups,nouid32,errors=remount-ro,jqfmt=vfsv1,oldalloc,stripe=0x0000000000000005,. Quota mode: writeback. [ 923.388708][ T9723] loop4: detected capacity change from 0 to 512 [ 923.842384][ T9723] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 923.854842][ T9723] ext4 filesystem being mounted at /440/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 924.507597][ T9723] netlink: 'syz.4.2191': attribute type 16 has an invalid length. [ 924.578766][ T9728] loop2: detected capacity change from 0 to 1024 [ 925.943483][ T9738] loop1: detected capacity change from 0 to 512 [ 925.952489][ T9737] loop0: detected capacity change from 0 to 512 [ 925.998524][ T9738] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 926.009986][ T9738] ext4 filesystem being mounted at /447/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 926.065009][ T9738] netlink: 'syz.1.2194': attribute type 16 has an invalid length. [ 926.178209][ T9737] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 926.199809][ T9737] ext4 filesystem being mounted at /446/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 926.840131][ T9728] EXT4-fs warning (device loop2): ext4_multi_mount_protect:403: Unable to create kmmpd thread for loop2. [ 927.852910][ T9756] loop4: detected capacity change from 0 to 512 [ 928.198331][ T9757] loop0: detected capacity change from 0 to 512 [ 928.547174][ T9756] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 928.558650][ T9756] ext4 filesystem being mounted at /441/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 929.509769][ T9757] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 929.520881][ T9757] ext4 filesystem being mounted at /447/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 929.569928][ T9754] netlink: 'syz.0.2198': attribute type 16 has an invalid length. [ 931.294119][ T7679] hid-generic 0000:3000000:0000.0015: unknown main item tag 0x4 [ 931.303483][ T7679] hid-generic 0000:3000000:0000.0015: unknown main item tag 0x2 [ 931.311684][ T7679] hid-generic 0000:3000000:0000.0015: unknown main item tag 0x3 [ 931.323654][ T7679] hid-generic 0000:3000000:0000.0015: hidraw0: HID v0.00 Device [sy] on syz0 [ 931.464036][ T9792] loop4: detected capacity change from 0 to 512 [ 935.133529][ T9792] EXT4-fs warning (device loop4): ext4_multi_mount_protect:403: Unable to create kmmpd thread for loop4. [ 935.237618][ T9799] loop5: detected capacity change from 0 to 1024 [ 936.424043][ T9805] loop2: detected capacity change from 0 to 512 [ 936.585555][ T9804] loop1: detected capacity change from 0 to 512 [ 936.835241][ T9801] fido_id[9801]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 936.905317][ T9805] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 936.916777][ T9805] ext4 filesystem being mounted at /441/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 937.165185][ T9799] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 937.184478][ T9799] ext4 filesystem being mounted at /257/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 937.185574][ T9804] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 937.206175][ T9804] ext4 filesystem being mounted at /451/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 937.832071][ T9803] netlink: 'syz.2.2209': attribute type 16 has an invalid length. [ 937.846749][ T9804] netlink: 'syz.1.2208': attribute type 16 has an invalid length. [ 939.710975][ T9856] loop0: detected capacity change from 0 to 1024 [ 940.407109][ T9856] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 940.576141][ T9856] ext4 filesystem being mounted at /454/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 942.040653][ T9870] loop1: detected capacity change from 0 to 512 [ 942.050429][ T9871] loop4: detected capacity change from 0 to 512 [ 942.248913][ T9870] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 942.260475][ T9870] ext4 filesystem being mounted at /454/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 942.285193][ T9870] netlink: 'syz.1.2226': attribute type 16 has an invalid length. [ 942.293102][ T9870] netlink: 'syz.1.2226': attribute type 27 has an invalid length. [ 945.424785][ T9881] loop2: detected capacity change from 0 to 1024 [ 945.442615][ T9871] EXT4-fs: failed to create workqueue [ 945.448061][ T9871] EXT4-fs (loop4): mount failed [ 945.462126][ T9881] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option [ 945.618319][ T9881] EXT4-fs (loop2): mounted filesystem without journal. Opts: minixdf,bsddf,barrier=0x0000000000000009,commit=0x0000000000000005,debug_want_extra_isize=0x0000000000000080,lazytime,nodelalloc,noblock_validity,nomblk_io_submit,,errors=continue. Quota mode: none. [ 945.930717][ T9891] loop5: detected capacity change from 0 to 512 [ 946.207138][ T9891] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 946.218563][ T9891] ext4 filesystem being mounted at /262/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 946.243518][ T9891] netlink: 'syz.5.2232': attribute type 16 has an invalid length. [ 946.719980][ T9901] device syzkaller0 entered promiscuous mode [ 948.133372][ T9921] loop1: detected capacity change from 0 to 512 [ 948.397982][ T9927] syzkaller0: create flow: hash 1807585379 index 1 [ 948.419818][ T9921] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 948.431264][ T9921] ext4 filesystem being mounted at /457/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 949.185401][ T9923] device syzkaller0 entered promiscuous mode [ 949.204662][ T9934] loop5: detected capacity change from 0 to 512 [ 949.238459][ T9921] netlink: 'syz.1.2240': attribute type 16 has an invalid length. [ 949.278611][ T3399] syzkaller0: tun_net_xmit 48 [ 949.477995][ T9934] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 949.489695][ T9934] ext4 filesystem being mounted at /264/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 949.509554][ T9934] netlink: 'syz.5.2243': attribute type 16 has an invalid length. [ 951.326642][ T9923] syzkaller0: delete flow: hash 1807585379 index 1 [ 952.571795][ T9959] loop5: detected capacity change from 0 to 512 [ 952.869241][ T9954] loop2: detected capacity change from 0 to 512 [ 953.179380][ T9954] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 953.190985][ T9954] ext4 filesystem being mounted at /447/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 954.163416][ T9954] netlink: 'syz.2.2249': attribute type 16 has an invalid length. [ 954.760591][ T9959] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 954.771719][ T9959] ext4 filesystem being mounted at /265/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 956.736472][ T9990] loop1: detected capacity change from 0 to 512 [ 957.740082][T10002] loop5: detected capacity change from 0 to 512 [ 957.755113][ T9990] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 957.766492][ T9990] ext4 filesystem being mounted at /461/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 958.063947][ T9988] netlink: 'syz.1.2256': attribute type 16 has an invalid length. [ 958.936460][T10003] syzkaller0: create flow: hash 1807585379 index 1 [ 960.636662][T10002] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 960.647801][T10002] ext4 filesystem being mounted at /266/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 960.737006][ T9996] device syzkaller0 entered promiscuous mode [ 960.800003][ T2194] syzkaller0: tun_net_xmit 48 [ 960.856688][T10026] loop5: detected capacity change from 0 to 1024 [ 960.866679][T10026] EXT4-fs (loop5): Ignoring removed nomblk_io_submit option [ 960.997530][ T9996] syzkaller0: delete flow: hash 1807585379 index 1 [ 961.030702][T10026] EXT4-fs (loop5): mounted filesystem without journal. Opts: minixdf,bsddf,barrier=0x0000000000000009,commit=0x0000000000000005,debug_want_extra_isize=0x0000000000000080,lazytime,nodelalloc,noblock_validity,nomblk_io_submit,,errors=continue. Quota mode: none. [ 962.291971][T10043] loop4: detected capacity change from 0 to 512 [ 963.958065][T10043] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 963.969505][T10043] ext4 filesystem being mounted at /459/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 963.992507][T10043] netlink: 'syz.4.2268': attribute type 16 has an invalid length. [ 964.306342][T10060] loop5: detected capacity change from 0 to 512 [ 964.338889][T10060] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 964.350642][T10060] ext4 filesystem being mounted at /268/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 965.272550][T10060] netlink: 'syz.5.2272': attribute type 16 has an invalid length. [ 965.795027][T10073] loop1: detected capacity change from 0 to 512 [ 966.042690][T10073] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 966.054443][T10073] ext4 filesystem being mounted at /463/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 966.659223][T10086] loop2: detected capacity change from 0 to 1024 [ 966.690881][T10086] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 966.709825][T10086] ext4 filesystem being mounted at /453/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 973.236604][T10121] 9pnet: Could not find request transport: fd0x0000000000000003 [ 973.775556][ T7679] hid-generic 0000:3000000:0000.0016: unknown main item tag 0x4 [ 973.789305][ T7679] hid-generic 0000:3000000:0000.0016: unknown main item tag 0x2 [ 973.797277][ T7679] hid-generic 0000:3000000:0000.0016: unknown main item tag 0x3 [ 973.808069][ T7679] hid-generic 0000:3000000:0000.0016: hidraw0: HID v0.00 Device [sy] on syz0 [ 976.469005][T10150] fido_id[10150]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 981.639403][T10181] 9pnet: Could not find request transport: fd0x0000000000000003 [ 985.694479][T10205] loop5: detected capacity change from 0 to 1024 [ 985.761360][T10205] EXT4-fs (loop5): Ignoring removed nomblk_io_submit option [ 986.513416][T10205] EXT4-fs (loop5): mounted filesystem without journal. Opts: minixdf,bsddf,barrier=0x0000000000000009,commit=0x0000000000000005,debug_want_extra_isize=0x0000000000000080,lazytime,nodelalloc,noblock_validity,nomblk_io_submit,,errors=continue. Quota mode: none. [ 986.584011][T10217] loop4: detected capacity change from 0 to 1024 [ 986.671441][T10217] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 986.704569][T10217] ext4 filesystem being mounted at /469/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 991.546969][T10281] loop0: detected capacity change from 0 to 512 [ 992.308879][T10281] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 992.320844][T10281] ext4 filesystem being mounted at /477/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 992.369007][T10281] netlink: 'syz.0.2333': attribute type 16 has an invalid length. [ 992.952182][ T7679] hid-generic 0000:3000000:0000.0017: unknown main item tag 0x4 [ 992.965709][ T7679] hid-generic 0000:3000000:0000.0017: unknown main item tag 0x2 [ 992.973776][ T7679] hid-generic 0000:3000000:0000.0017: unknown main item tag 0x3 [ 992.983539][ T7679] hid-generic 0000:3000000:0000.0017: hidraw0: HID v0.00 Device [sy] on syz0 [ 996.275245][T10301] fido_id[10301]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1000.172446][T10351] loop5: detected capacity change from 0 to 1024 [ 1000.194084][T10348] device syzkaller0 entered promiscuous mode [ 1000.357309][T10355] loop1: detected capacity change from 0 to 512 [ 1000.620258][T10355] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1000.631597][T10355] ext4 filesystem being mounted at /478/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1001.170124][T10351] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1001.184369][T10351] ext4 filesystem being mounted at /283/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 1001.402173][T10354] netlink: 'syz.1.2357': attribute type 16 has an invalid length. [ 1001.410161][T10354] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2357'. [ 1001.991513][ T461] hid-generic 0000:3000000:0000.0018: unknown main item tag 0x4 [ 1002.001010][ T461] hid-generic 0000:3000000:0000.0018: unknown main item tag 0x2 [ 1002.008892][ T461] hid-generic 0000:3000000:0000.0018: unknown main item tag 0x3 [ 1002.017312][ T461] hid-generic 0000:3000000:0000.0018: hidraw0: HID v0.00 Device [sy] on syz0 [ 1005.943852][T10400] 9pnet: Could not find request transport: fd0x0000000000000003 [ 1006.256802][ T3399] hid-generic 0000:3000000:0000.0019: unknown main item tag 0x4 [ 1006.272591][ T3399] hid-generic 0000:3000000:0000.0019: unknown main item tag 0x2 [ 1006.277112][T10390] fido_id[10390]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1006.286855][ T3399] hid-generic 0000:3000000:0000.0019: unknown main item tag 0x3 [ 1006.618402][T10408] device syzkaller0 entered promiscuous mode [ 1007.900967][ T3399] hid-generic 0000:3000000:0000.0019: hidraw0: HID v0.00 Device [sy] on syz0 [ 1008.199382][T10422] fido_id[10422]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1011.661037][T10456] loop4: detected capacity change from 0 to 1024 [ 1012.306474][T10456] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1012.326170][T10456] ext4 filesystem being mounted at /482/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 1015.731840][T10487] loop4: detected capacity change from 0 to 512 [ 1016.595325][ T26] hid-generic 0000:3000000:0000.001A: unknown main item tag 0x4 [ 1016.696909][ T26] hid-generic 0000:3000000:0000.001A: unknown main item tag 0x2 [ 1016.712422][T10487] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1016.723576][T10487] ext4 filesystem being mounted at /483/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1017.742491][T10486] netlink: 'syz.4.2389': attribute type 16 has an invalid length. [ 1017.859788][ T26] hid-generic 0000:3000000:0000.001A: unknown main item tag 0x3 [ 1018.016204][ T26] hid-generic 0000:3000000:0000.001A: hidraw0: HID v0.00 Device [sy] on syz0 [ 1019.066022][T10503] fido_id[10503]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1019.094676][T10514] loop5: detected capacity change from 0 to 1024 [ 1025.423682][T10514] EXT4-fs: error -4 creating inode table initialization thread [ 1025.436082][T10514] EXT4-fs (loop5): mount failed [ 1025.464377][T10534] 9p: Unknown uid 18446744073709551615 [ 1028.098938][T10573] 9p: Unknown uid 18446744073709551615 [ 1028.108100][T10572] loop1: detected capacity change from 0 to 1024 [ 1029.063663][T10584] loop5: detected capacity change from 0 to 512 [ 1029.303898][T10584] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1029.315337][T10584] ext4 filesystem being mounted at /294/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1029.348422][T10584] netlink: 'syz.5.2418': attribute type 16 has an invalid length. [ 1029.447215][T10572] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1029.719669][T10572] ext4 filesystem being mounted at /492/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 1031.670716][T10618] 9p: Unknown uid 18446744073709551615 [ 1032.524540][T10636] loop1: detected capacity change from 0 to 1024 [ 1032.665730][T10645] loop0: detected capacity change from 0 to 512 [ 1032.882909][T10645] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1032.894606][T10645] ext4 filesystem being mounted at /500/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1032.912874][T10645] netlink: 'syz.0.2436': attribute type 16 has an invalid length. [ 1032.980888][T10636] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1033.013541][T10636] ext4 filesystem being mounted at /495/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 1037.505935][T10679] loop4: detected capacity change from 0 to 1024 [ 1037.577893][T10679] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option [ 1040.968783][T10679] EXT4-fs warning (device loop4): ext4_multi_mount_protect:403: Unable to create kmmpd thread for loop4. [ 1041.312505][T10687] loop2: detected capacity change from 0 to 1024 [ 1041.338151][ T2194] hid-generic 0000:3000000:0000.001B: unknown main item tag 0x4 [ 1041.357607][ T2194] hid-generic 0000:3000000:0000.001B: unknown main item tag 0x2 [ 1041.368708][T10687] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option [ 1041.504426][T10687] EXT4-fs (loop2): mounted filesystem without journal. Opts: minixdf,bsddf,barrier=0x0000000000000009,commit=0x0000000000000005,debug_want_extra_isize=0x0000000000000080,lazytime,nodelalloc,noblock_validity,nomblk_io_submit,,errors=continue. Quota mode: none. [ 1041.585642][ T2194] hid-generic 0000:3000000:0000.001B: unknown main item tag 0x3 [ 1041.747728][ T2194] hid-generic 0000:3000000:0000.001B: hidraw0: HID v0.00 Device [sy] on syz0 [ 1042.373556][T10697] fido_id[10697]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1042.458208][T10701] device veth1_macvtap left promiscuous mode [ 1042.464270][T10701] device macsec0 entered promiscuous mode [ 1043.195054][T10711] device syzkaller0 entered promiscuous mode [ 1049.498922][T10761] device syzkaller0 entered promiscuous mode [ 1054.119726][T10812] device veth1_macvtap left promiscuous mode [ 1054.125904][T10812] device macsec0 entered promiscuous mode [ 1064.468825][T10870] device veth1_macvtap left promiscuous mode [ 1064.474867][T10870] device macsec0 entered promiscuous mode [ 1064.644445][T10880] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=19461 sclass=netlink_route_socket pid=10880 comm=syz.5.2495 [ 1068.224939][T10880] xt_hashlimit: max too large, truncated to 1048576 [ 1068.257107][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 1068.257124][ T30] audit: type=1400 audit(1756854801.477:688): avc: denied { read write } for pid=10875 comm="syz.5.2495" name="fuse" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 1068.333997][ T30] audit: type=1400 audit(1756854801.557:689): avc: denied { open } for pid=10875 comm="syz.5.2495" path="/dev/fuse" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 1077.007673][T10950] SELinux: security_context_str_to_sid(staff_u) failed for (dev ?, type ?) errno=-22 [ 1077.035298][T10947] device syzkaller0 entered promiscuous mode [ 1077.047058][T10950] SELinux: security_context_str_to_sid(staff_u) failed for (dev 9p, type 9p) errno=-22 [ 1077.060784][ T2535] hid-generic 0000:3000000:0000.001C: unknown main item tag 0x4 [ 1077.068700][ T2535] hid-generic 0000:3000000:0000.001C: unknown main item tag 0x2 [ 1077.077328][ T2535] hid-generic 0000:3000000:0000.001C: unknown main item tag 0x3 [ 1077.085685][ T2535] hid-generic 0000:3000000:0000.001C: hidraw0: HID v0.00 Device [sy] on syz0 [ 1077.122819][T10956] fido_id[10956]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1077.145208][ T3399] hid-generic 0000:3000000:0000.001D: unknown main item tag 0x4 [ 1077.160084][ T3399] hid-generic 0000:3000000:0000.001D: unknown main item tag 0x2 [ 1077.167943][ T3399] hid-generic 0000:3000000:0000.001D: unknown main item tag 0x3 [ 1077.179913][ T3399] hid-generic 0000:3000000:0000.001D: hidraw0: HID v0.00 Device [sy] on syz0 [ 1077.204722][T10960] fido_id[10960]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1079.163206][ T3399] hid-generic 0000:3000000:0000.001E: unknown main item tag 0x4 [ 1079.177335][ T3399] hid-generic 0000:3000000:0000.001E: unknown main item tag 0x2 [ 1079.185247][ T3399] hid-generic 0000:3000000:0000.001E: unknown main item tag 0x3 [ 1079.196108][ T3399] hid-generic 0000:3000000:0000.001E: hidraw0: HID v0.00 Device [sy] on syz0 [ 1082.915770][T10974] fido_id[10974]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1085.375148][T11006] device syzkaller0 entered promiscuous mode [ 1092.547015][T11051] device syzkaller0 entered promiscuous mode [ 1098.109961][ T30] audit: type=1400 audit(1756854831.337:690): avc: denied { read } for pid=11081 comm="poweroff" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 1103.522941][T11103] loop2: detected capacity change from 0 to 512 [ 1103.804842][T11103] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1103.816318][T11103] ext4 filesystem being mounted at /496/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1108.095824][T11137] loop4: detected capacity change from 0 to 512 [ 1108.374684][T11143] 9p: Unknown uid 18446744073709551615 [ 1108.396246][T11137] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1108.407754][T11137] ext4 filesystem being mounted at /525/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1109.120402][T11137] netlink: 'syz.4.2562': attribute type 16 has an invalid length. [ 1109.135885][T11137] device veth1_macvtap entered promiscuous mode [ 1109.142288][T11137] device macsec0 left promiscuous mode [ 1109.149720][ T6047] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1109.182642][T11156] 9p: Unknown uid 18446744073709551615 [ 1109.243090][T11160] loop5: detected capacity change from 0 to 1024 [ 1109.308789][T11162] loop2: detected capacity change from 0 to 512 [ 1112.104809][T11162] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1112.116247][T11162] ext4 filesystem being mounted at /499/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1112.385183][T11160] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1113.396681][T11160] ext4 filesystem being mounted at /316/file2 supports timestamps until 2038-01-19 (0x7fffffff) Stopping sshd: stopped /usr/sbin/sshd (pid 192) OK Stopping crond: stopped /usr/sbin/crond (pid 185) OK Stopping dhcpcd... stopped /sbin/dhcpcd (pid 139) Stopping network: [ 1113.639712][ T30] audit: type=1400 audit(1756854846.817:691): avc: denied { search } for pid=11196 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1113.673306][ T30] audit: type=1400 audit(1756854846.897:692): avc: denied { write } for pid=140 comm="dhcpcd" name="dhcpcd" dev="tmpfs" ino=482 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1113.700430][T11162] netlink: 'syz.2.2567': attribute type 16 has an invalid length. [ 1113.742836][ T30] audit: type=1400 audit(1756854846.897:693): avc: denied { remove_name } for pid=140 comm="dhcpcd" name="sock" dev="tmpfs" ino=484 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1113.765341][ T30] audit: type=1400 audit(1756854846.897:694): avc: denied { unlink } for pid=140 comm="dhcpcd" name="sock" dev="tmpfs" ino=484 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=sock_file permissive=1 [ 1113.787467][ T30] audit: type=1400 audit(1756854846.997:695): avc: denied { unlink } for pid=140 comm="dhcpcd" name="pid" dev="tmpfs" ino=483 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 OK [ 1113.893222][ T30] audit: type=1400 audit(1756854847.037:696): avc: denied { read write } for pid=11203 comm="ip" path="/dev/console" dev="rootfs" ino=31 scontext=system_u:system_r:ifconfig_t tcontext=system_u:object_r:root_t tclass=chr_file permissive=1 Stopping iptables: [ 1113.935338][ T30] audit: type=1400 audit(1756854847.157:697): avc: denied { execmem } for pid=11207 comm="syz.5.2574" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 1113.961157][ T30] audit: type=1400 audit(1756854847.187:698): avc: denied { read write } for pid=11213 comm="iptables" path="/dev/console" dev="rootfs" ino=31 scontext=system_u:system_r:iptables_t tcontext=system_u:object_r:root_t tclass=chr_file permissive=1 [ 1116.873423][ T30] audit: type=1400 audit(1756854850.097:699): avc: denied { search } for pid=11213 comm="iptables" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:iptables_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1117.239149][T11226] 9p: Unknown uid 18446744073709551615 OK [ 1118.163652][ T30] audit: type=1400 audit(1756854850.797:700): avc: denied { write } for pid=11213 comm="iptables" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:iptables_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1118.835248][ T30] audit: type=1400 audit(1756854850.797:701): avc: denied { add_name } for pid=11213 comm="iptables" name="xtables.lock" scontext=system_u:system_r:iptables_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 Stopping system message bus: [ 1119.159949][ T30] audit: type=1400 audit(1756854850.797:702): avc: denied { create } for pid=11213 comm="iptables" name="xtables.lock" scontext=system_u:system_r:iptables_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1119.198216][ T30] audit: type=1400 audit(1756854850.797:703): avc: denied { read open } for pid=11213 comm="iptables" path="/run/xtables.lock" dev="tmpfs" ino=24383 scontext=system_u:system_r:iptables_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 done [ 1119.816315][T11263] device syzkaller0 entered promiscuous mode [ 1119.840994][T11266] netlink: 96 bytes leftover after parsing attributes in process `syz.4.2588'. [ 1119.860075][T11138] syzkaller0: tun_net_xmit 48 [ 1119.879538][ T30] audit: type=1400 audit(1756854850.797:704): avc: denied { lock } for pid=11213 comm="iptables" path="/run/xtables.lock" dev="tmpfs" ino=24383 scontext=system_u:system_r:iptables_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1121.641650][T11290] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=19461 sclass=netlink_route_socket pid=11290 comm=syz.4.2596 [ 1121.655586][T11290] xt_hashlimit: max too large, truncated to 1048576 killall: can't kill pid 10845: No such process killall: can't kill pid 10850: No such process killall: can't kill pid 10856: No such process killall: can't kill pid 10857: No such process [ 1121.724554][ T30] audit: type=1400 audit(1756854854.947:705): avc: denied { module_request } for pid=11288 comm="syz.4.2596" kmod="ip6t_ipv6header" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 Stopping klogd: serialport: VM disconnected.