last executing test programs: 2.231261449s ago: executing program 4 (id=1726): rt_sigaction(0x19, 0x0, 0x0, 0x0, 0x0) 2.198127109s ago: executing program 4 (id=1728): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000057000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x34, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000200), 0x800) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r2, 0x4058534c, &(0x7f0000000180)={0x80, 0x2b, 0x3, 0x1000000}) 2.179141249s ago: executing program 4 (id=1730): openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0600000004000000ff0f0000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa2000000000000070200e2f7ffffffb703000000000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r1}, 0x18) socket$inet(0x2, 0x1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000780)={0x8, 0x248}, 0x0) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) add_key(&(0x7f0000000080)='dns_resolver\x00', 0x0, &(0x7f0000000040)='B', 0x1, 0xfffffffffffffffe) r3 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) write(r3, &(0x7f0000004200)='t', 0x1) sendfile(r3, r2, 0x0, 0x3ffff) sendfile(r3, r2, 0x0, 0x7ffff000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x20000000000000f4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x6c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, @void, @value}, 0x94) r4 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_IO(r4, 0x2285, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) write$sndseq(r5, &(0x7f0000000800)=[{0x20, 0x0, 0x0, 0x0, @time={0x10b, 0x3}, {}, {0x0, 0x3}, @connect={{0x0, 0x9}}}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @time=@tick=0x2}, {0x0, 0x0, 0x0, 0x0, @time={0x0, 0x7}, {0x0, 0xfc}, {}, @raw8={"b134b141793d8609365bda4d"}}], 0x54) 1.217903165s ago: executing program 0 (id=1760): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x20000000000000f4, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000021b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000280)='kfree\x00', r1}, 0x18) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000000000c02000000000000000000000d0000000000005f"], 0x0, 0x34, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) close_range(r3, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x1c, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 1.172866395s ago: executing program 4 (id=1762): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="160000000000000004000000fb00000000000000", @ANYRES32=0x1, @ANYBLOB], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_read_part_table(0x5c5, &(0x7f0000000b80)="$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") syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000100)='./bus\x00', 0x20081e, &(0x7f0000000040)={[{@nodelalloc}, {@grpid}, {@auto_da_alloc}]}, 0x1, 0x4f4, &(0x7f00000008c0)="$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") 1.123541195s ago: executing program 0 (id=1763): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, &(0x7f00000000c0)}) prctl$PR_SET_NAME(0xf, &(0x7f0000001dc0)='+}[@\x00#\xb8\xcd\xcb\xd6:)\x8f\xfa\xff|\x1e\x97\x8e7?3g/2\x1d\x01\x04\x00\x00\x00\x00\x00\x00\xd8/\xb4KUC\x90\xff\xb6\xf3Q\a>, \xe1\x11\n\xa7\xfe\x7fEH}\x01\x99+\xf5\xc7\x99\x83\xb6\xde8]\x89\xff\xe1\xb4B\xf6\xa6\x14Xz:\x86\xe0\x1b\xb4$\xff\x8e\x04O\xd9\x02w\\\xc9\xad\xe7\x9d\xf5t\x93\xab\xbf.n\x8d\x7f6OY\x10\x00\xec\xfbt\xec\xe70c\x8e:S\x98\xa1e\xf0T\x8b\xaa\xaf,G\xd0') r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d0000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r0}, 0x10) ptrace$setopts(0xc60a, 0x0, 0x0, 0x1) 1.123110075s ago: executing program 0 (id=1765): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x34, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00'}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000340)={[{@nogrpid}, {@resuid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@jqfmt_vfsv0}, {@nombcache}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") 1.071037425s ago: executing program 0 (id=1767): bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="00000000000000000000000000000001660500004126c96f5787b3dec3023406e4243cab13a0d89aa2428a6f3f60fafdaddb2fe4efeb075f7f161395c2fb3f52f2", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000080)) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed7f0000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) ioctl$PPPIOCSMAXCID(r1, 0x40047451, &(0x7f0000000100)=0xffff0000) ioctl$PPPIOCSMAXCID(r1, 0x40047451, &(0x7f0000002540)=0x1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000000100000024000180060005004e230000060001000200000008000300ac1414aa0800060001"], 0x38}, 0x1, 0x0, 0x0, 0x4000011}, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000580)={0x14, r5, 0x1, 0x70bd28, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x890) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f00000005c0)='kmem_cache_free\x00', r0, 0x0, 0x7}, 0x18) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r6, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000001940)={0x20, r7, 0x1, 0x0, 0x0, {0x21}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x20}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r8 = getpid() sched_setscheduler(r8, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r9, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r10, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r9, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000000000007b8af8ff3ed0000000000007020000f8ffffe3b703000008000000b7040000000000008500000070877ab666f2be5c7c820000009500"/81], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r12}, 0x10) 992.925515ms ago: executing program 4 (id=1771): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r0, 0x7, &(0x7f0000000000)={0x1, 0x0, 0x8, 0x1000000000000}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, r0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, &(0x7f0000000040)=0x10823, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffe}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kfree\x00', r2, 0x0, 0x8000000000000000}, 0x18) r4 = socket$can_raw(0x1d, 0x3, 0x1) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r5}, 0x4) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000b60000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r6}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) accept(0xffffffffffffffff, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000080)={'vcan0\x00'}) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000b80)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f00000002c0)='GPL\x00', 0xf, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b40)={&(0x7f0000000600)='kfree\x00', r7}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) fstat(r3, &(0x7f0000000380)) bpf$PROG_LOAD(0x5, 0x0, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r8, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000640)={0x3c, 0x0, 0x8, 0x801, 0x0, 0x0, {0x5}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x60}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}, @CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @tcp}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x3a}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x40) 969.893374ms ago: executing program 4 (id=1772): openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0600000004000000ff0f0000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa2000000000000070200e2f7ffffffb703000000000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r1}, 0x18) socket$inet(0x2, 0x1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000780)={0x8, 0x248}, 0x0) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) add_key(&(0x7f0000000080)='dns_resolver\x00', 0x0, &(0x7f0000000040)='B', 0x1, 0xfffffffffffffffe) r3 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) write(r3, &(0x7f0000004200)='t', 0x1) sendfile(r3, r2, 0x0, 0x3ffff) sendfile(r3, r2, 0x0, 0x7ffff000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x20000000000000f4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x6c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, @void, @value}, 0x94) r4 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_IO(r4, 0x2285, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) write$sndseq(r5, &(0x7f0000000800)=[{0x20, 0x0, 0x0, 0x0, @time={0x10b, 0x3}, {}, {0x0, 0x3}, @connect={{0x0, 0x9}}}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @time=@tick=0x2}, {0x0, 0x0, 0x0, 0x0, @time={0x0, 0x7}, {0x0, 0xfc}, {}, @raw8={"b134b141793d8609365bda4d"}}], 0x54) 454.789922ms ago: executing program 3 (id=1781): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r1}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f00000003c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (fail_nth: 1) 453.863432ms ago: executing program 1 (id=1782): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_TESTMODE(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000500)={&(0x7f0000000bc0)=ANY=[], 0x1b8}, 0x1, 0x0, 0x0, 0x4000011}, 0x20000000) r1 = socket(0x11, 0x800000003, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x600, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) memfd_secret(0x0) syz_open_dev$usbfs(0x0, 0x204, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r2}, &(0x7f0000000000), &(0x7f00000002c0)=r3}, 0x20) syz_genetlink_get_family_id$ethtool(0x0, r1) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'geneve1\x00'}) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x2}, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000001c0)='sched_switch\x00', r6}, 0x10) io_uring_enter(0xffffffffffffffff, 0x567, 0x0, 0x0, 0x0, 0x0) 396.039052ms ago: executing program 3 (id=1784): get_robust_list(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x82, 0x14) unshare(0xa000200) getsockopt$MRT(0xffffffffffffffff, 0x0, 0xcf, 0x0, 0x0) r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r2 = socket$inet6(0xa, 0x3, 0x9) openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0), 0x200202, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r2, 0x29, 0x6, &(0x7f0000000140)={0x7f, {{0x29, 0x0, 0x2000000, @mcast1, 0x200d41}}}, 0x88) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x14, 0x16, 0xa01, 0x0, 0x0, {0xa}}, 0x14}}, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x315, @tick=0x9, 0x0, {0x1}, 0x0, 0x1}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r1, 0xc0605345, &(0x7f0000000100)={0x10001, 0x0, {0xffffffffffffffff, 0x0, 0x3, 0x2, 0xffffffff}, 0x4}) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r1, 0xc08c5334, &(0x7f0000000500)) tkill(r0, 0x7) capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x7}) r4 = syz_open_dev$sg(&(0x7f0000000000), 0xf9ba, 0x80000) ioctl$SCSI_IOCTL_SEND_COMMAND(r4, 0x1, &(0x7f00000002c0)=ANY=[@ANYBLOB="000000000104000023"]) tkill(r0, 0x37) unshare(0x60400) r5 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r5, &(0x7f00000001c0)={0xa, 0x4e24, 0x8, @remote, 0x3}, 0x1c) r6 = syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0x150, 0x10100, 0x1}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000040)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r5, 0x0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[], 0x14a8}, 0x0, 0x0, 0x1}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00'}, 0x10) io_uring_enter(r6, 0x2ded, 0x4000, 0x0, 0x0, 0x0) 393.822162ms ago: executing program 2 (id=1785): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x7, &(0x7f0000000500)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1b, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) socket(0x11, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x44000) r2 = io_uring_setup(0x371f, &(0x7f0000000680)={0x0, 0x0, 0x100, 0x1, 0x32c}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000240), 0x208e24b) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@bloom_filter={0x1e, 0x80000004, 0x401, 0x3, 0x13001, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x3, 0x0, 0x2, @void, @value, @value=r3}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffe}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, @fallback=0xcc0984f9ead32b32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r5, 0x0, 0x4}, 0x18) io_uring_register$IORING_REGISTER_PBUF_RING(r2, 0x16, &(0x7f0000000740)={&(0x7f0000001000)={[{0x0}, {0x0}, {0x0}, {0x0}]}, 0x4}, 0x1) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000005c0)={'gre0\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) ioctl$TCSETS(r3, 0x5402, &(0x7f0000000080)={0x3, 0x80000001, 0x38, 0x0, 0x14, "18fa495eb7f77dc59f1743881125410463de75"}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc}}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) utimes(&(0x7f0000000240)='./file0\x00', 0x0) 384.923652ms ago: executing program 1 (id=1786): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000020000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000600459e850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kfree\x00', r0}, 0x18) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x14, 0x9, 0xa, 0x401, 0x0, 0x0, {0x3}}], {0x14, 0x10}}, 0x5c}}, 0x4) 377.240142ms ago: executing program 3 (id=1787): socket$inet(0x2, 0x1, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000004800)=@newtaction={0x894, 0x30, 0x12f, 0x0, 0x0, {}, [{0x880, 0x1, [@m_police={0x87c, 0x1, 0x0, 0x0, {{0xb}, {0x850, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0x0, 0x0, 0x9, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xe, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x80, 0xfffffffd, 0x7f2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa5, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x207fff]}, @TCA_POLICE_AVRATE={0x8}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x1, 0x0, 0x8, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0xfffffffd, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa369, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x6, 0x5, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe5f5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x7e2, 0x0, 0x0, 0xd5, 0xa, 0x96e4, 0x0, 0x0, 0xa, 0x0, 0x3, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x10001, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0x8, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x19, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x3, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb5f, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x7, 0xe2f0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa6, 0x80, 0x0, 0x2000000, 0x0, 0x0, 0xfffffffd, 0xfff, 0x0, 0x0, 0x0, 0x1ff]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x3, 0x4, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x1ff}, {0xd, 0x2, 0x0, 0x80, 0x0, 0x2}, 0x2}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x894}}, 0x890) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r3, &(0x7f00000002c0)="9c", 0x1, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback, 0xfff}, 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f0000000300)={0x0, 0x0, 0x10}, 0xc) sendmsg$inet6(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)='h', 0x1}], 0x1}, 0x0) 332.828052ms ago: executing program 1 (id=1788): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x34, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00'}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000340)={[{@nogrpid}, {@resuid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@jqfmt_vfsv0}, {@nombcache}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") 324.960281ms ago: executing program 3 (id=1789): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000040)={0x53, 0x0, 0x6, 0x0, @buffer={0x2, 0x40002, &(0x7f00000000c0)=""/81}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x0, 0x0, 0x0, 0x0}) 324.231881ms ago: executing program 2 (id=1790): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r1}, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="780100003c000701fcffffff00000003047c000004003680600101"], 0x178}, 0x1, 0x0, 0x0, 0x4c040}, 0xc000) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0) set_mempolicy_home_node(&(0x7f0000349000/0xa000)=nil, 0xa000, 0x0, 0x0) 293.651551ms ago: executing program 1 (id=1791): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r2, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d7"], 0x10b8}, 0x0) 293.178451ms ago: executing program 2 (id=1792): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000200180000000000000000000850000007b00000095"], &(0x7f0000000400)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x18000, 0xfffffffffffffffd, 0x1, 0x2fe, &(0x7f00000000c0)="$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") syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file2\x00', 0x200000, &(0x7f00000000c0)={[{@dioread_lock}, {@noblock_validity}, {@lazytime}, {@noblock_validity}]}, 0xfc, 0x564, &(0x7f00000008c0)="$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") r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000100)='kfree\x00', r1}, 0x18) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_ICV_LEN={0x5, 0x3, 0xf}]}}}]}, 0x3c}}, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000040b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000004c0), 0x288000, 0x0) fcntl$lock(r7, 0x26, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r6}, 0x10) sendmsg$IPVS_CMD_NEW_DAEMON(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000009000000440003800800010002000000140002007663616e300000000000000000000000080003000000000014000600ff"], 0x58}}, 0x0) 163.521541ms ago: executing program 1 (id=1793): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2a}}, 0x10) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) connect$inet(r2, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r2, &(0x7f0000008c80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000002540)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x14}, @multicast2}}}, @ip_retopts={{0x10}}], 0x30}}], 0x2, 0x840) 163.149981ms ago: executing program 3 (id=1794): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000200180000000000000000000850000007b00000095"], &(0x7f0000000400)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x18000, 0xfffffffffffffffd, 0x1, 0x2fe, &(0x7f00000000c0)="$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") syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file2\x00', 0x200000, &(0x7f00000000c0)={[{@dioread_lock}, {@noblock_validity}, {@lazytime}, {@noblock_validity}]}, 0xfc, 0x564, &(0x7f00000008c0)="$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") r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000100)='kfree\x00', r1}, 0x18) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_ICV_LEN={0x5, 0x3, 0xf}]}}}]}, 0x3c}}, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000040b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000004c0), 0x288000, 0x0) fcntl$lock(r7, 0x26, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r6}, 0x10) sendmsg$IPVS_CMD_NEW_DAEMON(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000009000000440003800800010002000000140002007663616e300000000000000000000000080003000000000014000600ff"], 0x58}}, 0x0) 117.464671ms ago: executing program 2 (id=1795): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000021007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) kexec_load(0x0, 0x1, &(0x7f0000000580)=[{0x0, 0x0, 0x3ff, 0x8}], 0x3e0000) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40010002, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000002000000ff0f00000700000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000010000001305569e0000000000"], 0x50) ioperm(0x0, 0x6, 0xd644) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000001c0)={@map, 0xffffffffffffffff, 0x2e, 0x2020, 0x4, @void, @void, @value}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x41, 0x0) ioctl$VT_RESIZEX(r6, 0x560a, &(0x7f00000001c0)={0x6, 0x4, 0x6a1, 0x200, 0x6, 0x8001}) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) ioctl$AUTOFS_IOC_READY(r6, 0x9360, 0x2) sendmsg$ETHTOOL_MSG_DEBUG_SET(r5, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000080)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e0000000000000000001800028014000380"], 0x44}}, 0x0) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000200)={0x2, &(0x7f0000000040)=[{0x28, 0x0, 0x0, 0xfff00002}, {0x16, 0x0, 0x0, 0x1}]}, 0x10) syz_emit_ethernet(0x7a, &(0x7f0000000280)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa00000000000000000000000000bb00000000000003000000000000000001242008060000000000000057000086dd080088be00000000100000000100000000000000080022eb00005a70d7d52e861f5dc0efab240000200000000200000000000000000000000800655800000000215be802ab47c82f5c99c0ac25a13e6902ac4e15d31a106c23608733407b1600687dd61c0695491df08ed0639c236c53c07fb440c99707f1c31ef0b53b7da98e1860c95f96fb4708cbc68610e2a5915604079cd83f8d46472ae4828d803a5ed09a8d0093aca45db354d8ae2e15"], 0x0) 76.68054ms ago: executing program 0 (id=1796): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_TESTMODE(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000500)={&(0x7f0000000bc0)=ANY=[], 0x1b8}, 0x1, 0x0, 0x0, 0x4000011}, 0x20000000) r1 = socket(0x11, 0x800000003, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x600, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) memfd_secret(0x0) syz_open_dev$usbfs(0x0, 0x204, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r2}, &(0x7f0000000000), &(0x7f00000002c0)=r3}, 0x20) syz_genetlink_get_family_id$ethtool(0x0, r1) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'geneve1\x00'}) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x2}, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000001c0)='sched_switch\x00', r6}, 0x10) io_uring_enter(0xffffffffffffffff, 0x567, 0x0, 0x0, 0x0, 0x0) 71.101681ms ago: executing program 2 (id=1797): mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000000, 0x10, 0xffffffffffffffff, 0xfdd49000) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="18000000000000000000000000000000186800000000000090737c73267beee600000000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000001800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_NODES(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={0x1c, r3, 0x1, 0x0, 0x0, {{}, {0x0, 0x6}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000fffffff7850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sys_enter\x00', r4}, 0x10) io_pgetevents(0x0, 0x3, 0x0, 0x0, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0xb) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) close(r5) perf_event_open$cgroup(&(0x7f0000000300)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf9eb, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x2}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x32514, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='kfree\x00', r6}, 0x18) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) r8 = syz_open_dev$sg(&(0x7f0000000240), 0x2, 0x43e3f82e098f1897) ioctl$SCSI_IOCTL_GET_PCI(r8, 0x5387, &(0x7f0000000280)) r9 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r9, 0xc004743e, 0x20001410) ioctl$TUNSETOFFLOAD(r9, 0x8008743f, 0xf0ff1f00000000) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r7, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x4e20, @local}]}, &(0x7f0000000100)=0x10) 25.18821ms ago: executing program 2 (id=1798): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000080000000b"], 0x50) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000014c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r0}, &(0x7f0000000000), &(0x7f00000005c0)=r1}, 0x20) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x12, 0x14, &(0x7f00000004c0)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, @void, @value}, 0xffffffffffffff6e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='f2fs_issue_reset_zone\x00', r2, 0x0, 0xfffffffffffffffc}, 0x18) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYINDEX(r4, &(0x7f0000000400)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="340000000f060108000000000000000007fc000206000b000300000006000b00000011c768000006000b00030000000500010047"], 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x400880c) (async) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000300)=@broute={'broute\x00', 0x20, 0x2, 0x230, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200004c0], 0x0, 0x0, 0x0}, 0x2a8) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r5, 0x107, 0xd, &(0x7f0000000040)=@req3={0x410000, 0x100000001, 0x210000, 0x1, 0xa}, 0x1c) (async) close(r5) (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r6}, 0x10) (async) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000500), 0x64, 0x541, &(0x7f0000001500)="$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") (async) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a8a0c54000000090a010400000000000000000000ff0008000a40000000000900010073797a30000000000900020073797a32000000000800054000000033080003400000001408000c400000000008"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) syz_genetlink_get_family_id$tipc(&(0x7f0000000440), r3) (async) sched_setscheduler(0x0, 0x5, &(0x7f000000d380)) (async) ioprio_set$pid(0x1, 0x0, 0x0) (async) r7 = open(&(0x7f0000000240)='./file0\x00', 0x88000, 0x0) (async) r8 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) recvmmsg(r8, &(0x7f0000004400)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000001d00)=[{0xfffffffffffffffd}], 0x1}}], 0x2, 0x0, 0x0) sendmsg$inet(r8, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x40) ftruncate(r7, 0x2007ffc) sendfile(r7, r7, 0x0, 0x800000009) (async) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r9}, 0x18) 24.910601ms ago: executing program 0 (id=1799): get_robust_list(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x82, 0x14) unshare(0xa000200) getsockopt$MRT(0xffffffffffffffff, 0x0, 0xcf, 0x0, 0x0) r0 = gettid() read(0xffffffffffffffff, &(0x7f0000000200)=""/209, 0xd1) r1 = socket$inet6(0xa, 0x3, 0x9) openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0), 0x200202, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x6, &(0x7f0000000140)={0x7f, {{0x29, 0x0, 0x2000000, @mcast1, 0x200d41}}}, 0x88) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x14, 0x16, 0xa01, 0x0, 0x0, {0xa}}, 0x14}}, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, &(0x7f0000000080)={0x315, @tick=0x9, 0x0, {0x1}, 0x0, 0x1}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(0xffffffffffffffff, 0xc0605345, &(0x7f0000000100)={0x10001, 0x0, {0xffffffffffffffff, 0x0, 0x3, 0x2, 0xffffffff}, 0x4}) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(0xffffffffffffffff, 0xc08c5334, &(0x7f0000000500)) tkill(r0, 0x7) capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x7}) r3 = syz_open_dev$sg(&(0x7f0000000000), 0xf9ba, 0x80000) ioctl$SCSI_IOCTL_SEND_COMMAND(r3, 0x1, &(0x7f00000002c0)=ANY=[@ANYBLOB="000000000104000023"]) tkill(r0, 0x37) unshare(0x60400) r4 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r4, &(0x7f00000001c0)={0xa, 0x4e24, 0x8, @remote, 0x3}, 0x1c) r5 = syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0x150, 0x10100, 0x1}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000040)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[], 0x14a8}, 0x0, 0x0, 0x1}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00'}, 0x10) io_uring_enter(r5, 0x2ded, 0x4000, 0x0, 0x0, 0x0) 24.42153ms ago: executing program 1 (id=1800): socket$inet(0x2, 0x1, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000004800)=@newtaction={0x894, 0x30, 0x12f, 0x0, 0x0, {}, [{0x880, 0x1, [@m_police={0x87c, 0x1, 0x0, 0x0, {{0xb}, {0x850, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0x0, 0x0, 0x9, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xe, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x80, 0xfffffffd, 0x7f2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa5, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x207fff]}, @TCA_POLICE_AVRATE={0x8}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x1, 0x0, 0x8, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0xfffffffd, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa369, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x6, 0x5, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe5f5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x7e2, 0x0, 0x0, 0xd5, 0xa, 0x96e4, 0x0, 0x0, 0xa, 0x0, 0x3, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x10001, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0x8, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x19, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x3, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb5f, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x7, 0xe2f0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa6, 0x80, 0x0, 0x2000000, 0x0, 0x0, 0xfffffffd, 0xfff, 0x0, 0x0, 0x0, 0x1ff]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x3, 0x4, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x1ff}, {0xd, 0x2, 0x0, 0x80, 0x0, 0x2}, 0x2}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x894}}, 0x890) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r3, &(0x7f00000002c0)="9c", 0x1, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback, 0xfff}, 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f0000000300)={0x0, 0x0, 0x10}, 0xc) sendmsg$inet6(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)='h', 0x1}], 0x1}, 0x0) 0s ago: executing program 3 (id=1801): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x34, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00'}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000340)={[{@nogrpid}, {@resuid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@jqfmt_vfsv0}, {@nombcache}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$eJzs289rHFUcAPDvzCat/WViqT+aVo1WMfgjadJae/CiKHhQEPRQjzFJS+y2kSaCLUGjSD1Kwbt4FPwLPOlF1JPgVe9SKJJLq6eV2Z1Jdje7aZJustX9fGCS92be8t53Z97ue/N2AuhZw9mfJGJ/RPweEQO1bGOB4dq/W8uLU38vL04lUam89VdSLXdzeXGqKFq8bl+R6YtIP0viSIt65y9fOT9ZLs9cyvNjCxfeH5u/fOW52QuT52bOzVycOH365InxF05NPN+ROLO4bg59NHf08GvvXHtj6sy1d3/+Ninib4qjQ4bXO/hkpdLh6rrrQF066etiQ9iUUq2bRn+1/w9EKVZP3kC8+mlXGwdsq0qlUnmg/eGlCvA/lkS3WwB0R/FFn81/i22Hhh53hRsv1SZAWdy38q12pC/SvEx/0/y2k4Yj4szSP19lW2zPfQgAgAbfZ+OfZ1uN/9Kovy90b76GMhgR90XEwYg4FRGHIuL+iGrZByPioU3W37xIsnb8k17fUmAblI3/XszXthrHf8XoLwZLee5ANf7+5OxseeZ4/p6MRP/uLD++Th0/vPLbF+2O1Y//si2rvxgL5u243re78TXTkwuTdxJzvRufRAz1tYo/WVkJSCLicEQMbbGO2ae/Odru2O3jX0cH1pkqX0c8VTv/S9EUfyFZf31y7J4ozxwfK66KtX759eqb7eq/o/g7IDv/e1te/yvxDyb167Xzm6/j6h+ft53TbPX635W83bDvw8mFhUvjEbuS12uNrt8/0VRuYrV8Fv/Isdb9/2CsvhNHIiK7iB+OiEci4tG87Y9FxOMRcWyd+H96+Yn3th7/9srin97U+V9N7IrmPa0TpfM/ftdQ6eBm4s/O/8lqaiTfs5HPv420a2tXMwAAAPz3pBGxP5J0dCWdpqOjtd/wH4q9aXlufuGZs3MfXJyuPSMwGP1pcadroO5+6Hg+rS/yE035E/l94y9Le6r50am58nS3g4cet69N/8/8Wep264Bt53kt6F36P/Qu/R96l/4PvatF/9/TjXYAO6/V9//HXWgHsPOa+r9lP+gh5v/Qu/R/6F36P/Sk+T1x+4fkJSTWJCK9K5ohsU2Jbn8yAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAdMa/AQAA//9QOObV") kernel console output (not intermixed with test programs): 61850][ T5805] Invalid option length (303) for dns_resolver key [ 77.533700][ T5815] sg_write: data in/out 231/42 bytes for SCSI command 0x0-- guessing data in; [ 77.533700][ T5815] program syz.3.784 not setting count and/or reply_len properly [ 77.577856][ T5814] loop2: detected capacity change from 0 to 128 [ 77.660545][ T5817] loop1: detected capacity change from 0 to 512 [ 77.692556][ T5810] SELinux: security_context_str_to_sid (Eá…) failed with errno=-22 [ 77.738956][ T29] kauditd_printk_skb: 634 callbacks suppressed [ 77.738995][ T29] audit: type=1326 audit(1734532537.874:4370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5816 comm="syz.1.788" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5807b35d29 code=0x7ffc0000 [ 77.770029][ T29] audit: type=1326 audit(1734532537.874:4371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5816 comm="syz.1.788" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5807b35d29 code=0x7ffc0000 [ 77.795213][ T29] audit: type=1326 audit(1734532537.874:4372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5816 comm="syz.1.788" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5807b35d29 code=0x7ffc0000 [ 77.820783][ T29] audit: type=1326 audit(1734532537.874:4373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5816 comm="syz.1.788" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5807b35d29 code=0x7ffc0000 [ 77.845996][ T29] audit: type=1326 audit(1734532537.874:4374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5816 comm="syz.1.788" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5807b35d29 code=0x7ffc0000 [ 77.869460][ T29] audit: type=1326 audit(1734532537.874:4375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5816 comm="syz.1.788" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f5807b35d29 code=0x7ffc0000 [ 77.892820][ T29] audit: type=1326 audit(1734532537.874:4376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5816 comm="syz.1.788" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5807b35d29 code=0x7ffc0000 [ 77.917300][ T29] audit: type=1326 audit(1734532537.874:4377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5816 comm="syz.1.788" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5807b35d29 code=0x7ffc0000 [ 77.943753][ T29] audit: type=1326 audit(1734532537.874:4378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5816 comm="syz.1.788" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f5807b35d29 code=0x7ffc0000 [ 77.969746][ T29] audit: type=1326 audit(1734532537.874:4379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5816 comm="syz.1.788" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5807b35d29 code=0x7ffc0000 [ 78.048374][ T5817] ext4 filesystem being mounted at /181/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 78.132981][ T5831] loop4: detected capacity change from 0 to 512 [ 78.159376][ T5831] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 78.174696][ T5833] loop2: detected capacity change from 0 to 512 [ 78.176995][ T5831] EXT4-fs (loop4): orphan cleanup on readonly fs [ 78.189947][ T5831] EXT4-fs warning (device loop4): ext4_enable_quotas:7156: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 78.208090][ T5831] EXT4-fs (loop4): Cannot turn on quotas: error -117 [ 78.215323][ T5831] EXT4-fs error (device loop4): ext4_orphan_get:1389: inode #16: comm syz.4.793: casefold flag without casefold feature [ 78.232733][ T5831] EXT4-fs error (device loop4): ext4_orphan_get:1394: comm syz.4.793: couldn't read orphan inode 16 (err -117) [ 78.256537][ T5833] ext4 filesystem being mounted at /134/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 78.339506][ T5853] No such timeout policy "syz0" [ 78.350636][ T5853] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 78.413938][ T5864] loop1: detected capacity change from 0 to 128 [ 78.430077][ T5864] SELinux: security_context_str_to_sid (Eá…) failed with errno=-22 [ 78.466324][ T5869] loop0: detected capacity change from 0 to 1024 [ 78.473125][ T5869] EXT4-fs: Ignoring removed orlov option [ 78.594625][ T5873] sg_write: data in/out 231/42 bytes for SCSI command 0x0-- guessing data in; [ 78.594625][ T5873] program syz.0.805 not setting count and/or reply_len properly [ 78.632714][ T5877] loop1: detected capacity change from 0 to 1024 [ 78.641869][ T5877] EXT4-fs: Ignoring removed orlov option [ 78.664057][ T5877] Invalid option length (303) for dns_resolver key [ 78.792293][ T5881] sg_write: data in/out 231/42 bytes for SCSI command 0x0-- guessing data in; [ 78.792293][ T5881] program syz.1.807 not setting count and/or reply_len properly [ 79.141269][ T5883] __nla_validate_parse: 16 callbacks suppressed [ 79.141284][ T5883] netlink: 148 bytes leftover after parsing attributes in process `syz.4.808'. [ 79.259168][ T5883] loop4: detected capacity change from 0 to 512 [ 79.354231][ T5883] ext4 filesystem being mounted at /164/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 79.397666][ T5896] netlink: 4 bytes leftover after parsing attributes in process `syz.2.813'. [ 79.433361][ T5894] netlink: 148 bytes leftover after parsing attributes in process `syz.0.811'. [ 79.446846][ T5894] netlink: 'syz.0.811': attribute type 20 has an invalid length. [ 79.456812][ T5894] netlink: 16 bytes leftover after parsing attributes in process `syz.0.811'. [ 79.500103][ T5894] loop0: detected capacity change from 0 to 512 [ 79.534982][ T5904] netlink: 48 bytes leftover after parsing attributes in process `syz.1.816'. [ 79.667965][ T5894] ext4 filesystem being mounted at /152/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 79.750800][ T5913] No such timeout policy "syz0" [ 79.757869][ T5913] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 79.772617][ T5915] loop0: detected capacity change from 0 to 512 [ 79.817934][ T5918] loop4: detected capacity change from 0 to 128 [ 79.839320][ T5918] SELinux: security_context_str_to_sid (Eá…) failed with errno=-22 [ 79.882201][ T5915] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 79.899429][ T5915] EXT4-fs (loop0): orphan cleanup on readonly fs [ 79.909805][ T5915] EXT4-fs warning (device loop0): ext4_enable_quotas:7156: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 79.949484][ T5915] EXT4-fs (loop0): Cannot turn on quotas: error -117 [ 79.971207][ T5915] EXT4-fs error (device loop0): ext4_orphan_get:1389: inode #16: comm syz.0.818: casefold flag without casefold feature [ 79.990172][ T5915] EXT4-fs error (device loop0): ext4_orphan_get:1394: comm syz.0.818: couldn't read orphan inode 16 (err -117) [ 80.062006][ T5932] loop4: detected capacity change from 0 to 1024 [ 80.072480][ T5932] EXT4-fs: Ignoring removed orlov option [ 80.090331][ T5932] sg_write: data in/out 231/42 bytes for SCSI command 0x0-- guessing data in; [ 80.090331][ T5932] program syz.4.824 not setting count and/or reply_len properly [ 80.149325][ T5936] netlink: 148 bytes leftover after parsing attributes in process `syz.1.825'. [ 80.168006][ T5936] loop1: detected capacity change from 0 to 512 [ 80.192337][ T5936] ext4 filesystem being mounted at /189/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 80.247019][ T5941] loop4: detected capacity change from 0 to 1024 [ 80.253634][ T5941] EXT4-fs: Ignoring removed orlov option [ 80.271304][ T5942] netlink: 4 bytes leftover after parsing attributes in process `syz.1.827'. [ 80.302581][ T5941] Invalid option length (303) for dns_resolver key [ 80.321586][ T5945] netlink: 148 bytes leftover after parsing attributes in process `syz.1.828'. [ 80.357168][ T5945] netlink: 'syz.1.828': attribute type 20 has an invalid length. [ 80.364938][ T5945] netlink: 16 bytes leftover after parsing attributes in process `syz.1.828'. [ 80.382327][ T5945] loop1: detected capacity change from 0 to 512 [ 80.489551][ T5948] sg_write: data in/out 231/42 bytes for SCSI command 0x0-- guessing data in; [ 80.489551][ T5948] program syz.4.826 not setting count and/or reply_len properly [ 80.533360][ T5945] ext4 filesystem being mounted at /191/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 81.122786][ T5962] No such timeout policy "syz0" [ 81.127125][ T5963] netlink: 48 bytes leftover after parsing attributes in process `syz.0.835'. [ 81.172859][ T5962] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 81.196092][ T5969] loop2: detected capacity change from 0 to 1024 [ 81.202892][ T5969] EXT4-fs: Ignoring removed orlov option [ 81.222905][ T5971] loop3: detected capacity change from 0 to 512 [ 81.232949][ T5969] sg_write: data in/out 231/42 bytes for SCSI command 0x0-- guessing data in; [ 81.232949][ T5969] program syz.2.837 not setting count and/or reply_len properly [ 81.269603][ T5974] loop4: detected capacity change from 0 to 128 [ 81.291646][ T5974] SELinux: security_context_str_to_sid (Eá…) failed with errno=-22 [ 81.319319][ T5971] ext4 filesystem being mounted at /172/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 81.333787][ T5976] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 81.345100][ T5976] vhci_hcd: invalid port number 23 [ 81.377870][ T5982] loop2: detected capacity change from 0 to 512 [ 81.395104][ T5982] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 81.408718][ T5982] EXT4-fs (loop2): orphan cleanup on readonly fs [ 81.433894][ T5988] loop1: detected capacity change from 0 to 512 [ 81.454646][ T5990] loop4: detected capacity change from 0 to 1024 [ 81.462710][ T5990] EXT4-fs: Ignoring removed orlov option [ 81.474312][ T5982] EXT4-fs warning (device loop2): ext4_enable_quotas:7156: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 81.498325][ T5990] Invalid option length (303) for dns_resolver key [ 81.512559][ T5982] EXT4-fs (loop2): Cannot turn on quotas: error -117 [ 81.523343][ T5982] EXT4-fs error (device loop2): ext4_orphan_get:1389: inode #16: comm syz.2.839: casefold flag without casefold feature [ 81.544105][ T5988] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.842: bg 0: block 288: padding at end of block bitmap is not set [ 81.569761][ T5982] EXT4-fs error (device loop2): ext4_orphan_get:1394: comm syz.2.839: couldn't read orphan inode 16 (err -117) [ 81.586865][ T5988] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 81.606193][ T5988] EXT4-fs error (device loop1): ext4_clear_blocks:876: inode #13: comm syz.1.842: attempt to clear invalid blocks 1024 len 1 [ 81.632866][ T5997] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 81.652806][ T5988] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.842: invalid indirect mapped block 1819239214 (level 0) [ 81.672546][ T5988] EXT4-fs (loop1): 1 truncate cleaned up [ 81.678149][ T5998] sg_write: data in/out 231/42 bytes for SCSI command 0x0-- guessing data in; [ 81.678149][ T5998] program syz.4.844 not setting count and/or reply_len properly [ 81.790607][ T6001] 9pnet_fd: Insufficient options for proto=fd [ 81.804486][ T6003] netlink: 'syz.3.845': attribute type 20 has an invalid length. [ 81.835530][ T6003] loop3: detected capacity change from 0 to 512 [ 81.890892][ T6003] ext4 filesystem being mounted at /174/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 82.114080][ T6022] loop3: detected capacity change from 0 to 512 [ 82.153078][ T6022] ext4 filesystem being mounted at /176/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 82.256770][ T6031] No such timeout policy "syz0" [ 82.275205][ T6020] program syz.1.851 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 82.300556][ T6031] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 82.340079][ T6034] loop3: detected capacity change from 0 to 1024 [ 82.350229][ T6034] EXT4-fs: Ignoring removed orlov option [ 82.363735][ T6036] loop2: detected capacity change from 0 to 128 [ 82.380914][ T6034] sg_write: data in/out 231/42 bytes for SCSI command 0x0-- guessing data in; [ 82.380914][ T6034] program syz.3.855 not setting count and/or reply_len properly [ 82.407081][ T6036] SELinux: security_context_str_to_sid (Eá…) failed with errno=-22 [ 82.468801][ T6044] loop3: detected capacity change from 0 to 512 [ 82.513362][ T6044] ext4 filesystem being mounted at /179/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 82.634448][ T6058] syzkaller0: entered allmulticast mode [ 82.661186][ T6057] loop3: detected capacity change from 0 to 512 [ 82.673949][ T6058] syzkaller0 (unregistering): left allmulticast mode [ 82.693447][ T6057] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 82.703770][ T6057] EXT4-fs (loop3): orphan cleanup on readonly fs [ 82.715259][ T6057] EXT4-fs warning (device loop3): ext4_enable_quotas:7156: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 82.753894][ T6057] EXT4-fs (loop3): Cannot turn on quotas: error -117 [ 82.761404][ T6057] EXT4-fs error (device loop3): ext4_orphan_get:1389: inode #16: comm syz.3.863: casefold flag without casefold feature [ 82.834585][ T6057] EXT4-fs error (device loop3): ext4_orphan_get:1394: comm syz.3.863: couldn't read orphan inode 16 (err -117) [ 82.947754][ T6065] loop4: detected capacity change from 0 to 1024 [ 82.954488][ T6065] EXT4-fs: Ignoring removed orlov option [ 82.971538][ T6065] Invalid option length (303) for dns_resolver key [ 82.979853][ T29] kauditd_printk_skb: 807 callbacks suppressed [ 82.979875][ T29] audit: type=1326 audit(1734532543.194:5183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6056 comm="syz.3.863" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c857e5d29 code=0x7ffc0000 [ 83.012475][ T29] audit: type=1326 audit(1734532543.214:5184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6056 comm="syz.3.863" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9c857e5d29 code=0x7ffc0000 [ 83.037076][ T29] audit: type=1326 audit(1734532543.214:5185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6056 comm="syz.3.863" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c857e5d29 code=0x7ffc0000 [ 83.060538][ T29] audit: type=1326 audit(1734532543.214:5186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6056 comm="syz.3.863" exe="/root/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7f9c857e5d29 code=0x7ffc0000 [ 83.064700][ T6067] sg_write: data in/out 231/42 bytes for SCSI command 0x0-- guessing data in; [ 83.064700][ T6067] program syz.4.866 not setting count and/or reply_len properly [ 83.085213][ T29] audit: type=1326 audit(1734532543.214:5187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6056 comm="syz.3.863" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c857e5d29 code=0x7ffc0000 [ 83.085245][ T29] audit: type=1326 audit(1734532543.214:5188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6056 comm="syz.3.863" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f9c857e5d29 code=0x7ffc0000 [ 83.085267][ T29] audit: type=1326 audit(1734532543.214:5189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6056 comm="syz.3.863" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c857e5d29 code=0x7ffc0000 [ 83.086614][ T29] audit: type=1326 audit(1734532543.214:5190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6056 comm="syz.3.863" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f9c857e5d29 code=0x7ffc0000 [ 83.086708][ T29] audit: type=1326 audit(1734532543.214:5191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6056 comm="syz.3.863" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c857e5d29 code=0x7ffc0000 [ 83.086731][ T29] audit: type=1326 audit(1734532543.214:5192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6056 comm="syz.3.863" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f9c857e5d29 code=0x7ffc0000 [ 83.381874][ T6070] loop1: detected capacity change from 0 to 512 [ 83.538743][ T6070] ext4 filesystem being mounted at /200/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 83.581073][ T6074] loop4: detected capacity change from 0 to 1024 [ 83.591470][ T6074] EXT4-fs: Ignoring removed orlov option [ 83.612336][ T6080] No such timeout policy "syz0" [ 83.622181][ T6080] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 83.649432][ T6074] sg_write: data in/out 231/42 bytes for SCSI command 0x0-- guessing data in; [ 83.649432][ T6074] program syz.4.869 not setting count and/or reply_len properly [ 83.689618][ T6086] loop3: detected capacity change from 0 to 128 [ 83.714697][ T6084] loop1: detected capacity change from 0 to 512 [ 83.735076][ T6086] SELinux: security_context_str_to_sid (Eá…) failed with errno=-22 [ 83.752542][ T6084] ext4 filesystem being mounted at /201/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 83.818077][ T6097] loop2: detected capacity change from 0 to 512 [ 83.843270][ T6097] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 83.862707][ T6097] EXT4-fs (loop2): orphan cleanup on readonly fs [ 83.879212][ T6097] EXT4-fs warning (device loop2): ext4_enable_quotas:7156: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 83.913331][ T6106] loop1: detected capacity change from 0 to 1024 [ 83.921276][ T6106] EXT4-fs: Ignoring removed orlov option [ 83.930100][ T6097] EXT4-fs (loop2): Cannot turn on quotas: error -117 [ 83.944811][ T6106] Invalid option length (303) for dns_resolver key [ 83.998283][ T6097] EXT4-fs error (device loop2): ext4_orphan_get:1389: inode #16: comm syz.2.878: casefold flag without casefold feature [ 84.014410][ T6097] EXT4-fs error (device loop2): ext4_orphan_get:1394: comm syz.2.878: couldn't read orphan inode 16 (err -117) [ 84.084042][ T6112] sg_write: data in/out 231/42 bytes for SCSI command 0x0-- guessing data in; [ 84.084042][ T6112] program syz.1.880 not setting count and/or reply_len properly [ 84.143445][ T6104] program syz.3.879 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 84.292632][ T6120] __nla_validate_parse: 15 callbacks suppressed [ 84.292674][ T6120] netlink: 148 bytes leftover after parsing attributes in process `syz.4.883'. [ 84.313882][ T6120] netlink: 16 bytes leftover after parsing attributes in process `syz.4.883'. [ 84.360727][ T6120] loop4: detected capacity change from 0 to 512 [ 84.381046][ T6120] ext4 filesystem being mounted at /184/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 84.453934][ T6124] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 84.491262][ T6128] loop4: detected capacity change from 0 to 1024 [ 84.501643][ T6128] EXT4-fs: Ignoring removed orlov option [ 84.517762][ T6128] sg_write: data in/out 231/42 bytes for SCSI command 0x0-- guessing data in; [ 84.517762][ T6128] program syz.4.886 not setting count and/or reply_len properly [ 84.568082][ T6132] netlink: 4 bytes leftover after parsing attributes in process `syz.0.888'. [ 84.597772][ T6133] netlink: 148 bytes leftover after parsing attributes in process `syz.4.887'. [ 84.622971][ T6133] netlink: 16 bytes leftover after parsing attributes in process `syz.4.887'. [ 84.648156][ T6133] loop4: detected capacity change from 0 to 512 [ 84.674957][ T6138] No such timeout policy "syz0" [ 84.692726][ T6138] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 84.696607][ T6133] ext4 filesystem being mounted at /187/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 84.763128][ T6145] loop2: detected capacity change from 0 to 128 [ 84.776966][ T6145] SELinux: security_context_str_to_sid (Eá…) failed with errno=-22 [ 84.843871][ T6152] netlink: 148 bytes leftover after parsing attributes in process `syz.4.896'. [ 84.864875][ T6152] netlink: 16 bytes leftover after parsing attributes in process `syz.4.896'. [ 84.881720][ T6152] loop4: detected capacity change from 0 to 512 [ 84.894491][ T6157] loop0: detected capacity change from 0 to 1024 [ 84.903569][ T6157] EXT4-fs: Ignoring removed orlov option [ 84.937881][ T6152] ext4 filesystem being mounted at /189/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 85.004201][ T6165] loop3: detected capacity change from 0 to 512 [ 85.005278][ T6157] sg_write: data in/out 231/42 bytes for SCSI command 0x0-- guessing data in; [ 85.005278][ T6157] program syz.0.898 not setting count and/or reply_len properly [ 85.033786][ T6165] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 85.048189][ T6165] EXT4-fs (loop3): orphan cleanup on readonly fs [ 85.059643][ T6165] EXT4-fs warning (device loop3): ext4_enable_quotas:7156: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 85.102775][ T6165] EXT4-fs (loop3): Cannot turn on quotas: error -117 [ 85.119081][ T6165] EXT4-fs error (device loop3): ext4_orphan_get:1389: inode #16: comm syz.3.900: casefold flag without casefold feature [ 85.134881][ T6165] EXT4-fs error (device loop3): ext4_orphan_get:1394: comm syz.3.900: couldn't read orphan inode 16 (err -117) [ 85.151854][ T6171] netlink: 4 bytes leftover after parsing attributes in process `syz.4.901'. [ 85.175448][ T6175] loop2: detected capacity change from 0 to 1024 [ 85.182041][ T6175] EXT4-fs: Ignoring removed orlov option [ 85.213146][ T6175] Invalid option length (303) for dns_resolver key [ 85.334196][ T6178] netlink: 148 bytes leftover after parsing attributes in process `syz.4.905'. [ 85.334627][ T6182] sg_write: data in/out 231/42 bytes for SCSI command 0x0-- guessing data in; [ 85.334627][ T6182] program syz.2.904 not setting count and/or reply_len properly [ 85.366909][ T6178] loop4: detected capacity change from 0 to 512 [ 85.425154][ T6178] ext4 filesystem being mounted at /191/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 85.598656][ T6195] program syz.0.906 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 85.720721][ T6198] No such timeout policy "syz0" [ 85.760421][ T6198] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 85.822474][ T6199] loop4: detected capacity change from 0 to 128 [ 85.842360][ T6199] SELinux: security_context_str_to_sid (Eá…) failed with errno=-22 [ 85.904135][ T6203] netlink: 148 bytes leftover after parsing attributes in process `syz.3.912'. [ 85.926050][ T6203] loop3: detected capacity change from 0 to 512 [ 85.958405][ T6203] ext4 filesystem being mounted at /187/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 86.004561][ T6207] loop4: detected capacity change from 0 to 1024 [ 86.014810][ T6207] EXT4-fs: Ignoring removed orlov option [ 86.121046][ T6217] loop3: detected capacity change from 0 to 512 [ 86.148304][ T6217] ext4 filesystem being mounted at /190/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 86.218343][ T6223] sg_write: data in/out 231/42 bytes for SCSI command 0x0-- guessing data in; [ 86.218343][ T6223] program syz.4.913 not setting count and/or reply_len properly [ 86.311504][ T6232] loop2: detected capacity change from 0 to 512 [ 86.319971][ T6233] No such timeout policy "syz0" [ 86.328028][ T6233] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 86.339025][ T6232] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 86.348887][ T6232] EXT4-fs (loop2): orphan cleanup on readonly fs [ 86.357930][ T6232] EXT4-fs warning (device loop2): ext4_enable_quotas:7156: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 86.374321][ T6232] EXT4-fs (loop2): Cannot turn on quotas: error -117 [ 86.383764][ T6232] EXT4-fs error (device loop2): ext4_orphan_get:1389: inode #16: comm syz.2.922: casefold flag without casefold feature [ 86.401059][ T6232] EXT4-fs error (device loop2): ext4_orphan_get:1394: comm syz.2.922: couldn't read orphan inode 16 (err -117) [ 86.468223][ T6239] loop3: detected capacity change from 0 to 128 [ 86.491294][ T6239] SELinux: security_context_str_to_sid (Eá…) failed with errno=-22 [ 86.531332][ T6242] loop0: detected capacity change from 0 to 1024 [ 86.539172][ T6242] EXT4-fs: Ignoring removed orlov option [ 86.553859][ T6242] Invalid option length (303) for dns_resolver key [ 86.710594][ T6247] sg_write: data in/out 231/42 bytes for SCSI command 0x0-- guessing data in; [ 86.710594][ T6247] program syz.0.925 not setting count and/or reply_len properly [ 86.739474][ T6245] loop3: detected capacity change from 0 to 512 [ 86.841459][ T6245] ext4 filesystem being mounted at /193/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 87.040968][ T6255] loop4: detected capacity change from 0 to 512 [ 87.116757][ T6255] ext4 filesystem being mounted at /198/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 87.412870][ T6276] netlink: 'syz.3.936': attribute type 1 has an invalid length. [ 87.450864][ T6277] program syz.2.931 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 87.490321][ T6280] No such timeout policy "syz0" [ 87.509327][ T6280] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 87.542250][ T6285] loop1: detected capacity change from 0 to 512 [ 87.563801][ T6288] loop0: detected capacity change from 0 to 512 [ 87.577186][ T6285] ext4 filesystem being mounted at /205/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 87.590549][ T6288] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 87.600399][ T6288] EXT4-fs (loop0): orphan cleanup on readonly fs [ 87.608420][ T6288] EXT4-fs warning (device loop0): ext4_enable_quotas:7156: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 87.610292][ T6296] loop4: detected capacity change from 0 to 128 [ 87.626743][ T6288] EXT4-fs (loop0): Cannot turn on quotas: error -117 [ 87.626917][ T6288] EXT4-fs error (device loop0): ext4_orphan_get:1389: inode #16: comm syz.0.941: casefold flag without casefold feature [ 87.636496][ T6288] EXT4-fs error (device loop0): ext4_orphan_get:1394: comm syz.0.941: couldn't read orphan inode 16 (err -117) [ 87.674604][ T6296] SELinux: security_context_str_to_sid (Eá…) failed with errno=-22 [ 87.675832][ T6295] loop3: detected capacity change from 0 to 512 [ 87.722068][ T6295] ext4 filesystem being mounted at /201/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 87.765272][ T6308] loop1: detected capacity change from 0 to 1024 [ 87.773223][ T6308] EXT4-fs: Ignoring removed orlov option [ 87.787732][ T6308] Invalid option length (303) for dns_resolver key [ 87.904513][ T6317] sg_write: data in/out 231/42 bytes for SCSI command 0x0-- guessing data in; [ 87.904513][ T6317] program syz.1.947 not setting count and/or reply_len properly [ 87.995623][ T6322] program syz.4.948 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 88.065265][ T29] kauditd_printk_skb: 999 callbacks suppressed [ 88.072829][ T29] audit: type=1326 audit(1734532548.284:6188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6323 comm="syz.2.951" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e15a05d29 code=0x7ffc0000 [ 88.116804][ T29] audit: type=1326 audit(1734532548.324:6189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6323 comm="syz.2.951" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9e15a05d29 code=0x7ffc0000 [ 88.141634][ T29] audit: type=1326 audit(1734532548.324:6190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6323 comm="syz.2.951" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e15a05d29 code=0x7ffc0000 [ 88.166230][ T29] audit: type=1326 audit(1734532548.324:6191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6323 comm="syz.2.951" exe="/root/syz-executor" sig=0 arch=c000003e syscall=235 compat=0 ip=0x7f9e15a05d29 code=0x7ffc0000 [ 88.190811][ T29] audit: type=1326 audit(1734532548.324:6192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6323 comm="syz.2.951" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e15a05d29 code=0x7ffc0000 [ 88.226170][ T6326] loop2: detected capacity change from 0 to 1024 [ 88.232762][ T6326] EXT4-fs: Ignoring removed orlov option [ 88.400829][ T6329] sg_write: data in/out 231/42 bytes for SCSI command 0x0-- guessing data in; [ 88.400829][ T6329] program syz.2.952 not setting count and/or reply_len properly [ 88.572046][ T29] audit: type=1326 audit(1734532548.794:6193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6332 comm="syz.0.954" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b5dec5d29 code=0x7ffc0000 [ 88.597124][ T29] audit: type=1326 audit(1734532548.794:6194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6332 comm="syz.0.954" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b5dec5d29 code=0x7ffc0000 [ 88.620658][ T29] audit: type=1326 audit(1734532548.794:6195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6332 comm="syz.0.954" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2b5dec5d29 code=0x7ffc0000 [ 88.646657][ T29] audit: type=1326 audit(1734532548.794:6196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6332 comm="syz.0.954" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b5dec5d29 code=0x7ffc0000 [ 88.671467][ T29] audit: type=1326 audit(1734532548.794:6197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6332 comm="syz.0.954" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b5dec5d29 code=0x7ffc0000 [ 88.723217][ T6333] loop0: detected capacity change from 0 to 512 [ 88.783369][ T6333] ext4 filesystem being mounted at /172/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 89.017377][ T6345] No such timeout policy "syz0" [ 89.023261][ T6345] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 89.091720][ T6352] loop1: detected capacity change from 0 to 128 [ 89.109451][ T6352] SELinux: security_context_str_to_sid (Eá…) failed with errno=-22 [ 89.189864][ T6357] loop2: detected capacity change from 0 to 1024 [ 89.198941][ T6357] EXT4-fs: Ignoring removed orlov option [ 90.539059][ T6377] loop4: detected capacity change from 0 to 1024 [ 90.579456][ T6377] EXT4-fs: Ignoring removed orlov option [ 90.619276][ T6377] Invalid option length (303) for dns_resolver key [ 90.748377][ T6380] sg_write: data in/out 231/42 bytes for SCSI command 0x0-- guessing data in; [ 90.748377][ T6380] program syz.4.969 not setting count and/or reply_len properly [ 90.885073][ T6384] loop2: detected capacity change from 0 to 512 [ 90.924758][ T6384] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 90.979194][ T6384] EXT4-fs (loop2): 1 truncate cleaned up [ 91.079400][ T6391] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=6391 comm=syz.2.972 [ 91.093273][ T6391] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=6391 comm=syz.2.972 [ 91.107910][ T6382] program syz.0.970 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 91.241566][ T6397] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 91.482967][ T6403] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 91.519715][ T6405] loop4: detected capacity change from 0 to 512 [ 91.528546][ T6405] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 91.539201][ T6405] EXT4-fs (loop4): orphan cleanup on readonly fs [ 91.545852][ T6405] EXT4-fs warning (device loop4): ext4_enable_quotas:7156: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 91.564332][ T6405] EXT4-fs (loop4): Cannot turn on quotas: error -117 [ 91.571615][ T6405] EXT4-fs error (device loop4): ext4_orphan_get:1389: inode #16: comm syz.4.976: casefold flag without casefold feature [ 91.586959][ T6405] EXT4-fs error (device loop4): ext4_orphan_get:1394: comm syz.4.976: couldn't read orphan inode 16 (err -117) [ 91.591761][ T6409] loop3: detected capacity change from 0 to 1024 [ 91.608168][ T6409] EXT4-fs: Ignoring removed orlov option [ 91.622821][ T6409] Invalid option length (303) for dns_resolver key [ 91.639801][ T6412] No such timeout policy "syz0" [ 91.649777][ T6412] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 91.694966][ T6416] __nla_validate_parse: 16 callbacks suppressed [ 91.695036][ T6416] netlink: 148 bytes leftover after parsing attributes in process `syz.0.979'. [ 91.723806][ T6417] loop1: detected capacity change from 0 to 128 [ 91.735086][ T6418] sg_write: data in/out 231/42 bytes for SCSI command 0x0-- guessing data in; [ 91.735086][ T6418] program syz.3.977 not setting count and/or reply_len properly [ 91.762160][ T6416] loop0: detected capacity change from 0 to 512 [ 91.782284][ T6417] SELinux: security_context_str_to_sid (Eá…) failed with errno=-22 [ 91.794660][ T6416] ext4 filesystem being mounted at /177/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 91.869855][ T6422] netlink: 148 bytes leftover after parsing attributes in process `syz.0.980'. [ 91.887888][ T6422] loop0: detected capacity change from 0 to 512 [ 91.911602][ T6422] ext4 filesystem being mounted at /178/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 92.274881][ T6435] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 92.445854][ T6441] loop2: detected capacity change from 0 to 1024 [ 92.483456][ T6441] EXT4-fs: Ignoring removed orlov option [ 92.556767][ T6441] Invalid option length (303) for dns_resolver key [ 92.687881][ T6447] sg_write: data in/out 231/42 bytes for SCSI command 0x0-- guessing data in; [ 92.687881][ T6447] program syz.2.986 not setting count and/or reply_len properly [ 93.034002][ T6449] netlink: 4 bytes leftover after parsing attributes in process `syz.0.989'. [ 93.192269][ T29] kauditd_printk_skb: 255 callbacks suppressed [ 93.192284][ T29] audit: type=1326 audit(1734532553.414:6452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6450 comm="syz.0.990" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b5dec5d29 code=0x7ffc0000 [ 93.233038][ T6451] netlink: 148 bytes leftover after parsing attributes in process `syz.0.990'. [ 93.349164][ T6451] loop0: detected capacity change from 0 to 512 [ 93.372815][ T29] audit: type=1326 audit(1734532553.454:6453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6450 comm="syz.0.990" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2b5dec5d29 code=0x7ffc0000 [ 93.400241][ T29] audit: type=1326 audit(1734532553.454:6454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6450 comm="syz.0.990" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b5dec5d29 code=0x7ffc0000 [ 93.428985][ T29] audit: type=1326 audit(1734532553.454:6455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6450 comm="syz.0.990" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f2b5dec5d29 code=0x7ffc0000 [ 93.458661][ T29] audit: type=1326 audit(1734532553.454:6456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6450 comm="syz.0.990" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b5dec5d29 code=0x7ffc0000 [ 93.488234][ T29] audit: type=1326 audit(1734532553.454:6457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6450 comm="syz.0.990" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f2b5dec5d29 code=0x7ffc0000 [ 93.518298][ T29] audit: type=1326 audit(1734532553.454:6458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6450 comm="syz.0.990" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b5dec5d29 code=0x7ffc0000 [ 93.549945][ T29] audit: type=1326 audit(1734532553.454:6459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6450 comm="syz.0.990" exe="/root/syz-executor" sig=0 arch=c000003e syscall=190 compat=0 ip=0x7f2b5dec5d29 code=0x7ffc0000 [ 93.579620][ T29] audit: type=1326 audit(1734532553.454:6460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6450 comm="syz.0.990" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b5dec5d29 code=0x7ffc0000 [ 93.608202][ T29] audit: type=1326 audit(1734532553.454:6461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6450 comm="syz.0.990" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f2b5dec5d29 code=0x7ffc0000 [ 93.841987][ T6457] No such timeout policy "syz0" [ 93.956743][ T6458] loop2: detected capacity change from 0 to 128 [ 93.977869][ T6451] ext4 filesystem being mounted at /181/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 93.999527][ T6457] SELinux: security_context_str_to_sid (Eá…) failed with errno=-22 [ 94.129340][ T6470] netlink: 148 bytes leftover after parsing attributes in process `syz.0.995'. [ 94.149346][ T6470] loop0: detected capacity change from 0 to 512 [ 94.182624][ T6470] ext4 filesystem being mounted at /183/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 94.278063][ T6462] program syz.1.992 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 94.299833][ T6482] loop0: detected capacity change from 0 to 512 [ 94.337200][ T6485] loop2: detected capacity change from 0 to 1024 [ 94.343970][ T6485] EXT4-fs: Ignoring removed orlov option [ 94.351883][ T6482] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 94.365021][ T6482] EXT4-fs (loop0): orphan cleanup on readonly fs [ 94.374822][ T6482] EXT4-fs warning (device loop0): ext4_enable_quotas:7156: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 94.394835][ T6485] Invalid option length (303) for dns_resolver key [ 94.405269][ T6482] EXT4-fs (loop0): Cannot turn on quotas: error -117 [ 94.419149][ T6482] EXT4-fs error (device loop0): ext4_orphan_get:1389: inode #16: comm syz.0.997: casefold flag without casefold feature [ 94.442263][ T6482] EXT4-fs error (device loop0): ext4_orphan_get:1394: comm syz.0.997: couldn't read orphan inode 16 (err -117) [ 94.445372][ T6488] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 94.558682][ T6491] sg_write: data in/out 231/42 bytes for SCSI command 0x0-- guessing data in; [ 94.558682][ T6491] program syz.2.999 not setting count and/or reply_len properly [ 95.504755][ T6499] netlink: 148 bytes leftover after parsing attributes in process `syz.3.1003'. [ 95.520600][ T6499] loop3: detected capacity change from 0 to 512 [ 95.654023][ T6499] EXT4-fs mount: 142 callbacks suppressed [ 95.654039][ T6499] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 95.675765][ T6499] ext4 filesystem being mounted at /209/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 95.701641][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.759269][ T6507] loop3: detected capacity change from 0 to 1024 [ 95.792654][ T6508] No such timeout policy "syz0" [ 95.801005][ T6507] EXT4-fs: Ignoring removed orlov option [ 95.830724][ T6507] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 95.850218][ T6509] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1001'. [ 96.013529][ T6507] Invalid option length (303) for dns_resolver key [ 96.030942][ T6516] loop2: detected capacity change from 0 to 128 [ 96.114426][ T6505] SELinux: security_context_str_to_sid (Eá…) failed with errno=-22 [ 96.157265][ T6520] sg_write: data in/out 231/42 bytes for SCSI command 0x0-- guessing data in; [ 96.157265][ T6520] program syz.3.1005 not setting count and/or reply_len properly [ 96.221184][ T6522] netlink: 148 bytes leftover after parsing attributes in process `syz.4.1008'. [ 96.284803][ T6522] loop4: detected capacity change from 0 to 512 [ 96.340607][ T6522] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 96.359006][ T6522] ext4 filesystem being mounted at /209/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 96.388882][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.489691][ T6530] loop2: detected capacity change from 0 to 512 [ 96.523501][ T6530] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 96.538014][ T6530] EXT4-fs (loop2): orphan cleanup on readonly fs [ 96.547553][ T6530] EXT4-fs warning (device loop2): ext4_enable_quotas:7156: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 96.584157][ T6530] EXT4-fs (loop2): Cannot turn on quotas: error -117 [ 96.614828][ T6530] EXT4-fs error (device loop2): ext4_orphan_get:1389: inode #16: comm syz.2.1011: casefold flag without casefold feature [ 96.632503][ T6530] EXT4-fs error (device loop2): ext4_orphan_get:1394: comm syz.2.1011: couldn't read orphan inode 16 (err -117) [ 96.650304][ T6530] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 96.670781][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.750457][ T6539] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 96.869138][ T6546] loop4: detected capacity change from 0 to 1024 [ 96.878237][ T6546] EXT4-fs: Ignoring removed orlov option [ 96.911297][ T6546] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 96.932789][ T6546] Invalid option length (303) for dns_resolver key [ 97.127860][ T6546] sg_write: data in/out 231/42 bytes for SCSI command 0x0-- guessing data in; [ 97.127860][ T6546] program syz.4.1014 not setting count and/or reply_len properly [ 97.294544][ T3295] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.620407][ T6554] netlink: 148 bytes leftover after parsing attributes in process `syz.2.1016'. [ 97.640510][ T6554] loop2: detected capacity change from 0 to 512 [ 97.700108][ T6562] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1018'. [ 97.733212][ T6564] No such timeout policy "syz0" [ 97.741229][ T6554] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 97.741353][ T6554] ext4 filesystem being mounted at /179/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 97.778494][ T6564] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 97.793846][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.847834][ T6570] loop1: detected capacity change from 0 to 128 [ 97.864834][ T6571] netlink: 148 bytes leftover after parsing attributes in process `syz.4.1021'. [ 97.891289][ T6571] loop4: detected capacity change from 0 to 512 [ 97.900493][ T3295] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.917378][ T6570] SELinux: security_context_str_to_sid (Eá…) failed with errno=-22 [ 97.982891][ T6578] loop0: detected capacity change from 0 to 1024 [ 98.009673][ T6571] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 98.011723][ T6578] EXT4-fs: Ignoring removed orlov option [ 98.024112][ T6571] ext4 filesystem being mounted at /212/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 98.068886][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.172702][ T6578] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 98.244010][ T6578] Invalid option length (303) for dns_resolver key [ 98.260631][ T6587] loop4: detected capacity change from 0 to 512 [ 98.337820][ T6587] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 98.364445][ T6587] EXT4-fs (loop4): orphan cleanup on readonly fs [ 98.429361][ T6587] __quota_error: 447 callbacks suppressed [ 98.429431][ T6587] Quota error (device loop4): v2_read_file_info: Block with free entry 1 out of range (1, 6). [ 98.458056][ T6587] EXT4-fs warning (device loop4): ext4_enable_quotas:7156: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 98.491676][ T6591] sg_write: data in/out 231/42 bytes for SCSI command 0x0-- guessing data in; [ 98.491676][ T6591] program syz.0.1024 not setting count and/or reply_len properly [ 98.515247][ T6587] EXT4-fs (loop4): Cannot turn on quotas: error -117 [ 98.524579][ T6587] EXT4-fs error (device loop4): ext4_orphan_get:1389: inode #16: comm syz.4.1026: casefold flag without casefold feature [ 98.540964][ T6587] EXT4-fs error (device loop4): ext4_orphan_get:1394: comm syz.4.1026: couldn't read orphan inode 16 (err -117) [ 98.623674][ T6587] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 98.697118][ T29] audit: type=1326 audit(1734532558.914:6907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6586 comm="syz.4.1026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8384d35d29 code=0x7ffc0000 [ 98.721891][ T29] audit: type=1326 audit(1734532558.914:6908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6586 comm="syz.4.1026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8384d35d29 code=0x7ffc0000 [ 98.747302][ T29] audit: type=1326 audit(1734532558.914:6909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6586 comm="syz.4.1026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8384d35d29 code=0x7ffc0000 [ 98.772012][ T29] audit: type=1326 audit(1734532558.914:6910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6586 comm="syz.4.1026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8384d35d29 code=0x7ffc0000 [ 98.796936][ T29] audit: type=1326 audit(1734532558.914:6911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6586 comm="syz.4.1026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7f8384d35d29 code=0x7ffc0000 [ 98.820927][ T29] audit: type=1326 audit(1734532558.914:6912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6586 comm="syz.4.1026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8384d35d29 code=0x7ffc0000 [ 98.844471][ T29] audit: type=1326 audit(1734532558.914:6913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6586 comm="syz.4.1026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f8384d35d29 code=0x7ffc0000 [ 98.869264][ T29] audit: type=1326 audit(1734532558.914:6914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6586 comm="syz.4.1026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8384d35d29 code=0x7ffc0000 [ 98.894036][ T29] audit: type=1326 audit(1734532558.914:6915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6586 comm="syz.4.1026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f8384d35d29 code=0x7ffc0000 [ 99.030276][ T6602] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 99.161549][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.222603][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.657963][ T6607] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1031'. [ 99.692849][ T6609] loop2: detected capacity change from 0 to 1024 [ 99.700731][ T6609] EXT4-fs: Ignoring removed orlov option [ 99.710580][ T6609] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 99.729138][ T6609] Invalid option length (303) for dns_resolver key [ 99.871047][ T6616] netlink: 148 bytes leftover after parsing attributes in process `syz.4.1034'. [ 99.888573][ T6618] sg_write: data in/out 231/42 bytes for SCSI command 0x0-- guessing data in; [ 99.888573][ T6618] program syz.2.1032 not setting count and/or reply_len properly [ 99.931812][ T6616] loop4: detected capacity change from 0 to 512 [ 99.972918][ T6616] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 100.104190][ T6616] ext4 filesystem being mounted at /215/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 100.158240][ T6623] No such timeout policy "syz0" [ 100.165307][ T6623] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 100.212756][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.232745][ T6624] loop1: detected capacity change from 0 to 128 [ 100.289048][ T6624] SELinux: security_context_str_to_sid (Eá…) failed with errno=-22 [ 100.309541][ T6626] netlink: 148 bytes leftover after parsing attributes in process `syz.4.1036'. [ 100.327064][ T6626] loop4: detected capacity change from 0 to 512 [ 100.374359][ T6626] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 100.399466][ T6626] ext4 filesystem being mounted at /216/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 100.519920][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.631631][ T3295] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.761633][ T6645] loop0: detected capacity change from 0 to 512 [ 100.779550][ T6646] loop1: detected capacity change from 0 to 1024 [ 100.797242][ T6646] EXT4-fs: Ignoring removed orlov option [ 100.803218][ T6645] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 100.824335][ T6645] EXT4-fs (loop0): orphan cleanup on readonly fs [ 100.835278][ T6646] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 100.876927][ T6646] Invalid option length (303) for dns_resolver key [ 100.887803][ T6645] EXT4-fs warning (device loop0): ext4_enable_quotas:7156: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 100.995391][ T6645] EXT4-fs (loop0): Cannot turn on quotas: error -117 [ 101.025185][ T6645] EXT4-fs error (device loop0): ext4_orphan_get:1389: inode #16: comm syz.0.1042: casefold flag without casefold feature [ 101.058400][ T6645] EXT4-fs error (device loop0): ext4_orphan_get:1394: comm syz.0.1042: couldn't read orphan inode 16 (err -117) [ 101.074634][ T6656] sg_write: data in/out 231/42 bytes for SCSI command 0x0-- guessing data in; [ 101.074634][ T6656] program syz.1.1043 not setting count and/or reply_len properly [ 101.239200][ T6645] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 101.401874][ T6661] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 101.549907][ T6665] netlink: 148 bytes leftover after parsing attributes in process `syz.4.1047'. [ 101.622152][ T6665] loop4: detected capacity change from 0 to 512 [ 101.664699][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.693963][ T6665] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 101.721977][ T3294] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.733726][ T6665] ext4 filesystem being mounted at /218/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 101.784914][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.080167][ T6670] No such timeout policy "syz0" [ 102.101835][ T6672] netlink: 148 bytes leftover after parsing attributes in process `syz.1.1049'. [ 102.120013][ T6674] loop4: detected capacity change from 0 to 1024 [ 102.126735][ T6674] EXT4-fs: Ignoring removed orlov option [ 102.135232][ T6674] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 102.152264][ T6674] Invalid option length (303) for dns_resolver key [ 102.161290][ T6670] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 102.249890][ T6672] loop1: detected capacity change from 0 to 512 [ 102.279810][ T6670] loop0: detected capacity change from 0 to 128 [ 102.418706][ T6672] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 102.437612][ T6670] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 102.447615][ T6670] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 102.457814][ T6670] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 102.466644][ T6670] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 102.518354][ T6672] ext4 filesystem being mounted at /231/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 102.612093][ T6670] vxlan0: entered promiscuous mode [ 102.621047][ T6670] vxlan0: entered allmulticast mode [ 102.632795][ T6678] SELinux: security_context_str_to_sid (Eá…) failed with errno=-22 [ 102.653679][ T6684] loop3: detected capacity change from 0 to 512 [ 102.678444][ T6670] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 102.689893][ T6670] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 102.701101][ T6670] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 102.712510][ T6670] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 102.728467][ T3294] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.772787][ T6684] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 102.778475][ T6685] loop2: detected capacity change from 0 to 1024 [ 102.793935][ T6684] ext4 filesystem being mounted at /214/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 102.827891][ T6685] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 102.922036][ T6695] loop1: detected capacity change from 0 to 1024 [ 102.928156][ T6696] loop0: detected capacity change from 0 to 1024 [ 102.930168][ T6695] EXT4-fs: Ignoring removed orlov option [ 102.943077][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.958906][ T6685] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1051'. [ 102.965744][ T6696] EXT4-fs: Ignoring removed orlov option [ 102.975141][ T6695] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 103.003842][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.003895][ T6696] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 103.051969][ T6695] Invalid option length (303) for dns_resolver key [ 103.179799][ T6705] sg_write: data in/out 231/42 bytes for SCSI command 0x0-- guessing data in; [ 103.179799][ T6705] program syz.1.1055 not setting count and/or reply_len properly [ 103.207504][ T6707] loop3: detected capacity change from 0 to 512 [ 103.234527][ T6707] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 103.326875][ T6707] EXT4-fs (loop3): orphan cleanup on readonly fs [ 103.390380][ T6707] EXT4-fs warning (device loop3): ext4_enable_quotas:7156: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 103.464952][ T6707] EXT4-fs (loop3): Cannot turn on quotas: error -117 [ 103.509663][ T6707] EXT4-fs error (device loop3): ext4_orphan_get:1389: inode #16: comm syz.3.1058: casefold flag without casefold feature [ 103.595229][ T6707] EXT4-fs error (device loop3): ext4_orphan_get:1394: comm syz.3.1058: couldn't read orphan inode 16 (err -117) [ 103.651508][ T6685] netlink: 'syz.2.1051': attribute type 6 has an invalid length. [ 103.673013][ T6707] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 103.688027][ T3295] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.735125][ T29] kauditd_printk_skb: 351 callbacks suppressed [ 103.735140][ T29] audit: type=1326 audit(1734532563.954:7265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6706 comm="syz.3.1058" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c857e5d29 code=0x7ffc0000 [ 103.772249][ T29] audit: type=1326 audit(1734532563.954:7266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6706 comm="syz.3.1058" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c857e5d29 code=0x7ffc0000 [ 103.799580][ T29] audit: type=1326 audit(1734532563.954:7267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6706 comm="syz.3.1058" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9c857e5d29 code=0x7ffc0000 [ 103.828036][ T29] audit: type=1326 audit(1734532563.954:7268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6706 comm="syz.3.1058" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c857e5d29 code=0x7ffc0000 [ 103.855209][ T29] audit: type=1326 audit(1734532563.954:7269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6706 comm="syz.3.1058" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c857e5d29 code=0x7ffc0000 [ 103.881569][ T29] audit: type=1326 audit(1734532563.954:7270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6706 comm="syz.3.1058" exe="/root/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7f9c857e5d29 code=0x7ffc0000 [ 103.908889][ T29] audit: type=1326 audit(1734532563.954:7271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6706 comm="syz.3.1058" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c857e5d29 code=0x7ffc0000 [ 103.938975][ T29] audit: type=1326 audit(1734532563.954:7272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6706 comm="syz.3.1058" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c857e5d29 code=0x7ffc0000 [ 103.972706][ T29] audit: type=1326 audit(1734532563.964:7273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6706 comm="syz.3.1058" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f9c857e5d29 code=0x7ffc0000 [ 103.999157][ T29] audit: type=1326 audit(1734532563.964:7274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6706 comm="syz.3.1058" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c857e5d29 code=0x7ffc0000 [ 104.088846][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.127978][ T6718] netlink: 148 bytes leftover after parsing attributes in process `syz.2.1061'. [ 104.138208][ T3294] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.158012][ T6718] loop2: detected capacity change from 0 to 512 [ 104.190383][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.204751][ T6720] loop0: detected capacity change from 0 to 1024 [ 104.213425][ T6720] EXT4-fs: Ignoring removed orlov option [ 104.251660][ T6720] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 104.318390][ T6718] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 104.345611][ T6720] Invalid option length (303) for dns_resolver key [ 104.358911][ T6718] ext4 filesystem being mounted at /189/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 104.503907][ T6732] sg_write: data in/out 231/42 bytes for SCSI command 0x0-- guessing data in; [ 104.503907][ T6732] program syz.0.1060 not setting count and/or reply_len properly [ 104.537098][ T3295] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.566956][ T6734] No such timeout policy "syz0" [ 104.584425][ T6734] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 104.638366][ T6736] netlink: 148 bytes leftover after parsing attributes in process `syz.2.1064'. [ 104.722802][ T6739] loop3: detected capacity change from 0 to 128 [ 104.743236][ T6736] loop2: detected capacity change from 0 to 512 [ 104.762074][ T6739] SELinux: security_context_str_to_sid (Eá…) failed with errno=-22 [ 104.839162][ T6736] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 104.956835][ T6736] ext4 filesystem being mounted at /190/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 105.093751][ T6745] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 105.127502][ T3295] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.140232][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.208100][ T6749] loop2: detected capacity change from 0 to 1024 [ 105.214682][ T6749] EXT4-fs: Ignoring removed orlov option [ 105.224963][ T6749] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 105.249908][ T6749] Invalid option length (303) for dns_resolver key [ 105.492515][ T6756] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1070'. [ 106.083190][ T3295] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.133504][ T6768] loop2: detected capacity change from 0 to 512 [ 106.180438][ T6772] netlink: 148 bytes leftover after parsing attributes in process `syz.3.1075'. [ 106.192052][ T6768] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 106.210240][ T6768] EXT4-fs (loop2): orphan cleanup on readonly fs [ 106.213364][ T6772] loop3: detected capacity change from 0 to 512 [ 106.242893][ T6776] No such timeout policy "syz0" [ 106.248596][ T6768] EXT4-fs warning (device loop2): ext4_enable_quotas:7156: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 106.252076][ T6768] EXT4-fs (loop2): Cannot turn on quotas: error -117 [ 106.279690][ T6768] EXT4-fs error (device loop2): ext4_orphan_get:1389: inode #16: comm syz.2.1073: casefold flag without casefold feature [ 106.302968][ T6779] netlink: 148 bytes leftover after parsing attributes in process `syz.0.1077'. [ 106.318332][ T6776] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 106.319505][ T6779] loop0: detected capacity change from 0 to 512 [ 106.336630][ T6772] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 106.340019][ T6768] EXT4-fs error (device loop2): ext4_orphan_get:1394: comm syz.2.1073: couldn't read orphan inode 16 (err -117) [ 106.351411][ T6772] ext4 filesystem being mounted at /222/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 106.385296][ T6768] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 106.406092][ T6783] loop1: detected capacity change from 0 to 128 [ 106.417710][ T6779] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 106.438995][ T6783] SELinux: security_context_str_to_sid (Eá…) failed with errno=-22 [ 106.440251][ T6779] ext4 filesystem being mounted at /201/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 106.474222][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.495062][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.553966][ T6787] netlink: 1276 bytes leftover after parsing attributes in process `syz.2.1073'. [ 106.616059][ T6794] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1082'. [ 106.673900][ T6798] loop0: detected capacity change from 0 to 512 [ 106.690786][ T6798] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 106.730550][ T6798] EXT4-fs (loop0): 1 truncate cleaned up [ 106.738826][ T6798] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 106.794736][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.893106][ T6812] netlink: 148 bytes leftover after parsing attributes in process `syz.1.1089'. [ 107.027500][ T3295] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.063302][ T6812] loop1: detected capacity change from 0 to 512 [ 107.108422][ T6812] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 107.121904][ T6812] ext4 filesystem being mounted at /241/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 107.169340][ T6825] No such timeout policy "syz0" [ 107.183089][ T6823] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1094'. [ 107.202011][ T6825] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 107.212411][ T6825] loop2: detected capacity change from 0 to 128 [ 107.228384][ T6825] SELinux: security_context_str_to_sid (Eá…) failed with errno=-22 [ 107.263411][ T3294] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.419495][ T6842] loop3: detected capacity change from 0 to 512 [ 107.432982][ T6844] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 107.482435][ T6848] loop1: detected capacity change from 0 to 1024 [ 107.490410][ T6848] EXT4-fs: Ignoring removed orlov option [ 107.499766][ T6842] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 107.511365][ T6842] EXT4-fs (loop3): orphan cleanup on readonly fs [ 107.520317][ T6842] EXT4-fs warning (device loop3): ext4_enable_quotas:7156: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 107.536640][ T6842] EXT4-fs (loop3): Cannot turn on quotas: error -117 [ 107.570805][ T6842] EXT4-fs error (device loop3): ext4_orphan_get:1389: inode #16: comm syz.3.1101: casefold flag without casefold feature [ 107.589892][ T6848] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 107.609649][ T6848] Invalid option length (303) for dns_resolver key [ 107.659128][ T6842] EXT4-fs error (device loop3): ext4_orphan_get:1394: comm syz.3.1101: couldn't read orphan inode 16 (err -117) [ 107.690911][ T6842] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 107.730492][ T6865] sg_write: data in/out 231/42 bytes for SCSI command 0x0-- guessing data in; [ 107.730492][ T6865] program syz.1.1104 not setting count and/or reply_len properly [ 107.860375][ T6868] loop4: detected capacity change from 0 to 512 [ 107.892052][ T6868] ext4 filesystem being mounted at /223/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 107.964228][ T6876] No such timeout policy "syz0" [ 107.971467][ T6876] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 108.033472][ T6880] loop4: detected capacity change from 0 to 128 [ 108.052501][ T6880] SELinux: security_context_str_to_sid (Eá…) failed with errno=-22 [ 108.102362][ T6884] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 108.180420][ T6887] loop4: detected capacity change from 0 to 1024 [ 108.190994][ T6887] EXT4-fs: Ignoring removed orlov option [ 108.220128][ T6887] Invalid option length (303) for dns_resolver key [ 108.242031][ T6893] __nla_validate_parse: 4 callbacks suppressed [ 108.242147][ T6893] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1118'. [ 108.251911][ T6895] netlink: 148 bytes leftover after parsing attributes in process `syz.2.1119'. [ 108.281471][ T6897] netlink: 148 bytes leftover after parsing attributes in process `syz.0.1120'. [ 108.286669][ T6895] loop2: detected capacity change from 0 to 512 [ 108.294672][ T6897] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1120'. [ 108.322177][ T6897] loop0: detected capacity change from 0 to 512 [ 108.371151][ T6895] ext4 filesystem being mounted at /203/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 108.428127][ T6904] sg_write: data in/out 231/42 bytes for SCSI command 0x0-- guessing data in; [ 108.428127][ T6904] program syz.4.1116 not setting count and/or reply_len properly [ 108.448138][ T6897] ext4 filesystem being mounted at /211/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 108.658681][ T6919] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 108.668384][ T6916] No such timeout policy "syz0" [ 108.671084][ T6916] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 108.733274][ T6926] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1130'. [ 108.751495][ T6928] loop1: detected capacity change from 0 to 128 [ 108.759090][ T29] kauditd_printk_skb: 609 callbacks suppressed [ 108.759104][ T29] audit: type=1326 audit(1734532568.974:7882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6924 comm="syz.3.1130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c857e5d29 code=0x7ffc0000 [ 108.782106][ T6930] loop3: detected capacity change from 0 to 512 [ 108.791414][ T29] audit: type=1326 audit(1734532568.974:7883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6924 comm="syz.3.1130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c857e5d29 code=0x7ffc0000 [ 108.823769][ T29] audit: type=1326 audit(1734532568.974:7884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6924 comm="syz.3.1130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9c857e5d29 code=0x7ffc0000 [ 108.848646][ T29] audit: type=1326 audit(1734532568.974:7885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6924 comm="syz.3.1130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c857e5d29 code=0x7ffc0000 [ 108.872080][ T29] audit: type=1326 audit(1734532568.974:7886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6924 comm="syz.3.1130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=235 compat=0 ip=0x7f9c857e5d29 code=0x7ffc0000 [ 108.896746][ T29] audit: type=1326 audit(1734532568.974:7887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6924 comm="syz.3.1130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c857e5d29 code=0x7ffc0000 [ 108.921492][ T29] audit: type=1326 audit(1734532568.974:7888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6924 comm="syz.3.1130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c857e5d29 code=0x7ffc0000 [ 108.956208][ T6927] program syz.2.1129 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 109.003114][ T6928] SELinux: security_context_str_to_sid (Eá…) failed with errno=-22 [ 109.043374][ T6930] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 109.053034][ T6930] EXT4-fs (loop3): orphan cleanup on readonly fs [ 109.065289][ T6930] Quota error (device loop3): v2_read_file_info: Block with free entry 1 out of range (1, 6). [ 109.077119][ T6930] EXT4-fs warning (device loop3): ext4_enable_quotas:7156: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 109.101385][ T6930] EXT4-fs (loop3): Cannot turn on quotas: error -117 [ 109.111609][ T6930] EXT4-fs error (device loop3): ext4_orphan_get:1389: inode #16: comm syz.3.1131: casefold flag without casefold feature [ 109.136445][ T6930] EXT4-fs error (device loop3): ext4_orphan_get:1394: comm syz.3.1131: couldn't read orphan inode 16 (err -117) [ 109.182552][ T29] audit: type=1326 audit(1734532569.404:7889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6939 comm="syz.1.1133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5807b35d29 code=0x7ffc0000 [ 109.207627][ T29] audit: type=1326 audit(1734532569.404:7890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6939 comm="syz.1.1133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5807b35d29 code=0x7ffc0000 [ 109.238159][ T6940] netlink: 148 bytes leftover after parsing attributes in process `syz.1.1133'. [ 109.359201][ T6940] loop1: detected capacity change from 0 to 512 [ 109.418932][ T6940] ext4 filesystem being mounted at /246/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 109.444428][ T6944] loop4: detected capacity change from 0 to 1024 [ 109.468826][ T6944] EXT4-fs: Ignoring removed orlov option [ 109.484427][ T6944] Invalid option length (303) for dns_resolver key [ 109.533520][ T6948] netlink: 148 bytes leftover after parsing attributes in process `syz.1.1135'. [ 109.560958][ T6950] netlink: 1276 bytes leftover after parsing attributes in process `syz.3.1131'. [ 109.597408][ T6951] sg_write: data in/out 231/42 bytes for SCSI command 0x0-- guessing data in; [ 109.597408][ T6951] program syz.4.1134 not setting count and/or reply_len properly [ 109.664064][ T6948] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1135'. [ 109.690958][ T6948] loop1: detected capacity change from 0 to 512 [ 109.770048][ T6948] ext4 filesystem being mounted at /247/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 109.998840][ T6964] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1139'. [ 110.230205][ T6974] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 110.397407][ T6981] loop4: detected capacity change from 0 to 512 [ 110.440450][ T6981] ext4 filesystem being mounted at /228/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 110.515956][ T6979] program syz.3.1146 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 110.561019][ T6994] loop4: detected capacity change from 0 to 512 [ 110.598306][ T6994] ext4 filesystem being mounted at /229/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 110.694075][ T7002] loop4: detected capacity change from 0 to 1024 [ 110.700779][ T7002] EXT4-fs: Ignoring removed orlov option [ 110.724451][ T7002] Invalid option length (303) for dns_resolver key [ 110.750294][ T7011] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 110.761417][ T7012] loop1: detected capacity change from 0 to 1024 [ 110.761646][ T7012] EXT4-fs: Ignoring removed orlov option [ 110.798439][ T7012] Invalid option length (303) for dns_resolver key [ 110.852848][ T7020] sg_write: data in/out 231/42 bytes for SCSI command 0x0-- guessing data in; [ 110.852848][ T7020] program syz.4.1153 not setting count and/or reply_len properly [ 110.907887][ T7024] loop2: detected capacity change from 0 to 512 [ 110.929932][ T7027] sg_write: data in/out 231/42 bytes for SCSI command 0x0-- guessing data in; [ 110.929932][ T7027] program syz.1.1156 not setting count and/or reply_len properly [ 111.004642][ T7033] loop0: detected capacity change from 0 to 512 [ 111.024820][ T7024] ext4 filesystem being mounted at /214/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 111.033583][ T7033] ext4 filesystem being mounted at /218/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 111.854421][ T7062] loop1: detected capacity change from 0 to 512 [ 111.892079][ T7064] loop0: detected capacity change from 0 to 512 [ 111.990415][ T7062] ext4 filesystem being mounted at /257/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 112.144495][ T7064] ext4 filesystem being mounted at /225/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 112.897851][ T7076] loop0: detected capacity change from 0 to 1024 [ 112.904492][ T7076] EXT4-fs: Ignoring removed orlov option [ 112.906403][ T7080] loop1: detected capacity change from 0 to 512 [ 112.928677][ T7076] Invalid option length (303) for dns_resolver key [ 112.939101][ T7080] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 113.067260][ T7093] sg_write: data in/out 231/42 bytes for SCSI command 0x0-- guessing data in; [ 113.067260][ T7093] program syz.0.1178 not setting count and/or reply_len properly [ 113.099812][ T7080] EXT4-fs (loop1): 1 truncate cleaned up [ 113.192274][ T7095] sg_write: data in/out 231/42 bytes for SCSI command 0x0-- guessing data in; [ 113.192274][ T7095] program syz.2.1183 not setting count and/or reply_len properly [ 113.229174][ T7092] loop4: detected capacity change from 0 to 1024 [ 113.335037][ T7092] EXT4-fs: Ignoring removed orlov option [ 113.534018][ T7092] Invalid option length (303) for dns_resolver key [ 113.563717][ T7104] __nla_validate_parse: 8 callbacks suppressed [ 113.563733][ T7104] netlink: 148 bytes leftover after parsing attributes in process `syz.3.1188'. [ 113.594177][ T7104] loop3: detected capacity change from 0 to 512 [ 113.678854][ T7107] sg_write: data in/out 231/42 bytes for SCSI command 0x0-- guessing data in; [ 113.678854][ T7107] program syz.4.1185 not setting count and/or reply_len properly [ 113.813739][ T7104] ext4 filesystem being mounted at /248/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 113.851236][ T29] kauditd_printk_skb: 610 callbacks suppressed [ 113.851250][ T29] audit: type=1326 audit(1734532574.074:8501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7103 comm="syz.3.1188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f9c857e4690 code=0x7ffc0000 [ 113.888472][ T29] audit: type=1326 audit(1734532574.074:8502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7103 comm="syz.3.1188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=80 compat=0 ip=0x7f9c857e4a77 code=0x7ffc0000 [ 113.917902][ T29] audit: type=1326 audit(1734532574.074:8503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7103 comm="syz.3.1188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f9c857e4690 code=0x7ffc0000 [ 113.945027][ T29] audit: type=1326 audit(1734532574.074:8504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7103 comm="syz.3.1188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c857e5d29 code=0x7ffc0000 [ 113.972052][ T29] audit: type=1326 audit(1734532574.074:8505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7103 comm="syz.3.1188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c857e5d29 code=0x7ffc0000 [ 114.102897][ T29] audit: type=1326 audit(1734532574.324:8506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7117 comm="syz.4.1192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8384d35d29 code=0x7ffc0000 [ 114.134835][ T7118] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 114.149486][ T29] audit: type=1326 audit(1734532574.354:8507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7117 comm="syz.4.1192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=38 compat=0 ip=0x7f8384d35d29 code=0x7ffc0000 [ 114.179159][ T29] audit: type=1326 audit(1734532574.354:8508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7117 comm="syz.4.1192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8384d35d29 code=0x7ffc0000 [ 114.208734][ T29] audit: type=1326 audit(1734532574.354:8509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7117 comm="syz.4.1192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f8384d37bbc code=0x7ffc0000 [ 114.238313][ T29] audit: type=1326 audit(1734532574.354:8510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7117 comm="syz.4.1192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f8384d37af4 code=0x7ffc0000 [ 114.256822][ T7131] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1197'. [ 114.268072][ T7114] program syz.3.1191 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 114.311137][ T7137] loop4: detected capacity change from 0 to 1024 [ 114.318955][ T7137] EXT4-fs: Ignoring removed orlov option [ 114.332124][ T7137] Invalid option length (303) for dns_resolver key [ 114.364468][ T7143] netlink: 148 bytes leftover after parsing attributes in process `syz.2.1201'. [ 114.384930][ T7143] loop2: detected capacity change from 0 to 512 [ 115.322206][ T7148] loop3: detected capacity change from 0 to 512 [ 115.333906][ T7148] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 115.579747][ T7143] ext4 filesystem being mounted at /222/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 115.593116][ T7148] EXT4-fs (loop3): 1 truncate cleaned up [ 115.607899][ T7153] sg_write: data in/out 231/42 bytes for SCSI command 0x0-- guessing data in; [ 115.607899][ T7153] program syz.1.1200 not setting count and/or reply_len properly [ 116.392021][ T7152] sg_write: data in/out 231/42 bytes for SCSI command 0x0-- guessing data in; [ 116.392021][ T7152] program syz.4.1199 not setting count and/or reply_len properly [ 117.434830][ T7157] loop2: detected capacity change from 0 to 1024 [ 117.454658][ T7159] loop4: detected capacity change from 0 to 1024 [ 117.462616][ T7159] EXT4-fs: Ignoring removed orlov option [ 117.509507][ T7157] EXT4-fs: Ignoring removed orlov option [ 117.528955][ T7163] loop1: detected capacity change from 0 to 1024 [ 117.544470][ T7168] loop0: detected capacity change from 0 to 1024 [ 117.557102][ T7157] Invalid option length (303) for dns_resolver key [ 117.563142][ T7163] EXT4-fs: Ignoring removed nomblk_io_submit option [ 117.570957][ T7168] EXT4-fs: Ignoring removed orlov option [ 117.581263][ T7163] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 117.597026][ T7163] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e854e09c, mo2=0003] [ 117.606560][ T7163] System zones: 0-1, 3-36 [ 117.611094][ T7163] EXT4-fs error (device loop1): ext4_ext_check_inode:524: inode #3: comm syz.1.1207: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 117.615715][ T7172] sg_write: data in/out 231/42 bytes for SCSI command 0x0-- guessing data in; [ 117.615715][ T7172] program syz.4.1206 not setting count and/or reply_len properly [ 117.660697][ T7168] Invalid option length (303) for dns_resolver key [ 117.690844][ T7163] EXT4-fs error (device loop1): ext4_quota_enable:7115: comm syz.1.1207: Bad quota inode: 3, type: 0 [ 117.710580][ T7180] sg_write: data in/out 231/42 bytes for SCSI command 0x0-- guessing data in; [ 117.710580][ T7180] program syz.2.1203 not setting count and/or reply_len properly [ 117.711650][ T7179] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1211'. [ 117.731092][ T7163] EXT4-fs warning (device loop1): ext4_enable_quotas:7156: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 117.759995][ T7163] EXT4-fs (loop1): mount failed [ 117.799663][ T7184] sg_write: data in/out 231/42 bytes for SCSI command 0x0-- guessing data in; [ 117.799663][ T7184] program syz.0.1208 not setting count and/or reply_len properly [ 117.904337][ T7183] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 117.993537][ T7192] netlink: 148 bytes leftover after parsing attributes in process `syz.3.1214'. [ 118.180535][ T7196] sg_write: data in/out 231/42 bytes for SCSI command 0x0-- guessing data in; [ 118.180535][ T7196] program syz.1.1216 not setting count and/or reply_len properly [ 118.364006][ T7192] loop3: detected capacity change from 0 to 512 [ 118.597237][ T7192] ext4 filesystem being mounted at /256/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 118.890761][ T29] kauditd_printk_skb: 147 callbacks suppressed [ 118.890837][ T29] audit: type=1326 audit(1734532579.114:8658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7204 comm="syz.2.1218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e15a05d29 code=0x7ffc0000 [ 118.940861][ T29] audit: type=1326 audit(1734532579.144:8659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7204 comm="syz.2.1218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=189 compat=0 ip=0x7f9e15a05d29 code=0x7ffc0000 [ 118.968052][ T29] audit: type=1326 audit(1734532579.144:8660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7204 comm="syz.2.1218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e15a05d29 code=0x7ffc0000 [ 118.972764][ T7211] loop4: detected capacity change from 0 to 512 [ 118.995030][ T29] audit: type=1326 audit(1734532579.144:8661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7204 comm="syz.2.1218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e15a05d29 code=0x7ffc0000 [ 119.033464][ T7211] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 119.052935][ T7216] serio: Serial port ptm0 [ 119.070330][ T7211] EXT4-fs (loop4): 1 truncate cleaned up [ 119.169124][ T29] audit: type=1326 audit(1734532579.394:8662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7233 comm="syz.3.1230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c857e5d29 code=0x7ffc0000 [ 119.197694][ T7234] netlink: 148 bytes leftover after parsing attributes in process `syz.3.1230'. [ 119.217357][ T7225] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 119.231784][ T29] audit: type=1326 audit(1734532579.414:8663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7233 comm="syz.3.1230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9c857e5d29 code=0x7ffc0000 [ 119.259225][ T29] audit: type=1326 audit(1734532579.414:8664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7233 comm="syz.3.1230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c857e5d29 code=0x7ffc0000 [ 119.281869][ T7227] program syz.2.1228 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 119.286334][ T29] audit: type=1326 audit(1734532579.414:8665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7233 comm="syz.3.1230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f9c857e5d29 code=0x7ffc0000 [ 119.293975][ T7234] loop3: detected capacity change from 0 to 512 [ 119.319070][ T29] audit: type=1326 audit(1734532579.414:8666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7233 comm="syz.3.1230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c857e5d29 code=0x7ffc0000 [ 119.348941][ T29] audit: type=1326 audit(1734532579.414:8667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7233 comm="syz.3.1230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f9c857e5d29 code=0x7ffc0000 [ 119.358870][ T7234] ext4 filesystem being mounted at /258/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 119.527855][ T7244] loop3: detected capacity change from 0 to 1024 [ 119.560131][ T7244] EXT4-fs: Ignoring removed nomblk_io_submit option [ 119.597803][ T7244] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 119.634113][ T7244] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e854e09c, mo2=0003] [ 119.667581][ T7244] System zones: 0-1, 3-36 [ 119.678106][ T7257] loop0: detected capacity change from 0 to 1024 [ 119.684826][ T7244] EXT4-fs error (device loop3): ext4_ext_check_inode:524: inode #3: comm syz.3.1231: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 119.705261][ T7257] EXT4-fs: Ignoring removed orlov option [ 119.739342][ T7244] EXT4-fs error (device loop3): ext4_quota_enable:7115: comm syz.3.1231: Bad quota inode: 3, type: 0 [ 119.762829][ T7244] EXT4-fs warning (device loop3): ext4_enable_quotas:7156: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 119.828587][ T7244] EXT4-fs (loop3): mount failed [ 119.838305][ T7260] sg_write: data in/out 231/42 bytes for SCSI command 0x0-- guessing data in; [ 119.838305][ T7260] program syz.0.1236 not setting count and/or reply_len properly [ 119.911336][ T7262] netlink: 'syz.3.1237': attribute type 1 has an invalid length. [ 120.146932][ T7265] bond1: entered promiscuous mode [ 120.152054][ T7265] bond1: entered allmulticast mode [ 120.174628][ T7268] No such timeout policy "syz0" [ 120.204552][ T7265] 8021q: adding VLAN 0 to HW filter on device bond1 [ 120.213427][ T7268] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 120.244162][ T7265] bond1 (unregistering): Released all slaves [ 120.297863][ T7271] loop3: detected capacity change from 0 to 128 [ 120.469467][ T7273] netlink: 148 bytes leftover after parsing attributes in process `syz.3.1241'. [ 120.497383][ T7277] loop1: detected capacity change from 0 to 512 [ 120.505238][ T7275] program syz.2.1240 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 120.523869][ T7273] loop3: detected capacity change from 0 to 512 [ 120.533833][ T7277] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 120.562693][ T7277] EXT4-fs (loop1): 1 truncate cleaned up [ 120.580500][ T7273] ext4 filesystem being mounted at /262/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 120.658186][ T7286] No such timeout policy "syz0" [ 120.672850][ T7286] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 120.708657][ T7292] netlink: 148 bytes leftover after parsing attributes in process `syz.0.1247'. [ 120.722265][ T7292] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1247'. [ 120.739251][ T7292] loop0: detected capacity change from 0 to 512 [ 120.749783][ T7294] loop1: detected capacity change from 0 to 128 [ 120.759942][ T7293] program syz.3.1248 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 120.771610][ T7292] ext4 filesystem being mounted at /238/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 120.789640][ T7294] SELinux: security_context_str_to_sid (Eá…) failed with errno=-22 [ 120.852611][ T7301] netlink: 'syz.0.1250': attribute type 1 has an invalid length. [ 120.890119][ T7303] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1251'. [ 120.984394][ T7312] loop1: detected capacity change from 0 to 512 [ 120.992665][ T7312] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 121.007330][ T7312] EXT4-fs (loop1): 1 truncate cleaned up [ 121.039169][ T7315] netlink: 148 bytes leftover after parsing attributes in process `syz.1.1256'. [ 121.055162][ T7315] loop1: detected capacity change from 0 to 512 [ 121.068093][ T7315] ext4 filesystem being mounted at /278/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 121.150440][ T7323] netlink: 148 bytes leftover after parsing attributes in process `syz.1.1259'. [ 121.156219][ T7325] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1260'. [ 121.164647][ T7323] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1259'. [ 121.184729][ T7323] loop1: detected capacity change from 0 to 512 [ 121.200583][ T7323] ext4 filesystem being mounted at /281/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 121.223360][ T7331] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1262'. [ 121.323689][ T7342] loop2: detected capacity change from 0 to 512 [ 121.348338][ T7342] ext4 filesystem being mounted at /232/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 121.404799][ T7333] program syz.1.1263 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 121.425918][ T7360] netlink: 'syz.4.1274': attribute type 20 has an invalid length. [ 121.439866][ T7360] loop4: detected capacity change from 0 to 512 [ 121.460288][ T7360] ext4 filesystem being mounted at /248/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 121.571497][ T7367] program syz.4.1276 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 121.591215][ T7380] FAULT_INJECTION: forcing a failure. [ 121.591215][ T7380] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 121.608102][ T7380] CPU: 1 UID: 0 PID: 7380 Comm: syz.2.1282 Not tainted 6.13.0-rc3-syzkaller-00044-gaef25be35d23 #0 [ 121.618848][ T7380] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 121.628950][ T7380] Call Trace: [ 121.632240][ T7380] [ 121.635162][ T7380] dump_stack_lvl+0xf2/0x150 [ 121.639765][ T7380] dump_stack+0x15/0x1a [ 121.644020][ T7380] should_fail_ex+0x223/0x230 [ 121.648763][ T7380] should_fail+0xb/0x10 [ 121.652930][ T7380] should_fail_usercopy+0x1a/0x20 [ 121.657955][ T7380] _copy_from_user+0x1e/0xb0 [ 121.662549][ T7380] kcm_setsockopt+0xe4/0x330 [ 121.667229][ T7380] ? __pfx_kcm_setsockopt+0x10/0x10 [ 121.672452][ T7380] __sys_setsockopt+0x187/0x200 [ 121.677421][ T7380] __x64_sys_setsockopt+0x66/0x80 [ 121.682436][ T7380] x64_sys_call+0x282e/0x2dc0 [ 121.687108][ T7380] do_syscall_64+0xc9/0x1c0 [ 121.691611][ T7380] ? clear_bhb_loop+0x55/0xb0 [ 121.696289][ T7380] ? clear_bhb_loop+0x55/0xb0 [ 121.701024][ T7380] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 121.707002][ T7380] RIP: 0033:0x7f9e15a05d29 [ 121.711401][ T7380] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 121.731019][ T7380] RSP: 002b:00007f9e14077038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 121.739423][ T7380] RAX: ffffffffffffffda RBX: 00007f9e15bf5fa0 RCX: 00007f9e15a05d29 [ 121.747441][ T7380] RDX: 0000000000000008 RSI: 0000000000000119 RDI: 0000000000000003 [ 121.755423][ T7380] RBP: 00007f9e14077090 R08: 0000000000000004 R09: 0000000000000000 [ 121.763479][ T7380] R10: 0000000020000000 R11: 0000000000000246 R12: 0000000000000001 [ 121.771510][ T7380] R13: 0000000000000000 R14: 00007f9e15bf5fa0 R15: 00007ffd2ca35178 [ 121.779496][ T7380] [ 121.833740][ T7390] netlink: 'syz.2.1286': attribute type 20 has an invalid length. [ 121.852053][ T7390] loop2: detected capacity change from 0 to 512 [ 121.881169][ T7390] ext4 filesystem being mounted at /239/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 121.989454][ T7401] program syz.3.1290 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 122.102034][ T7415] FAULT_INJECTION: forcing a failure. [ 122.102034][ T7415] name failslab, interval 1, probability 0, space 0, times 0 [ 122.117307][ T7415] CPU: 1 UID: 0 PID: 7415 Comm: syz.2.1296 Not tainted 6.13.0-rc3-syzkaller-00044-gaef25be35d23 #0 [ 122.128007][ T7415] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 122.138073][ T7415] Call Trace: [ 122.141354][ T7415] [ 122.144296][ T7415] dump_stack_lvl+0xf2/0x150 [ 122.148972][ T7415] dump_stack+0x15/0x1a [ 122.153169][ T7415] should_fail_ex+0x223/0x230 [ 122.157844][ T7415] ? __se_sys_mount+0xf7/0x2d0 [ 122.162686][ T7415] should_failslab+0x8f/0xb0 [ 122.167359][ T7415] __kmalloc_cache_noprof+0x4e/0x320 [ 122.172699][ T7415] ? memdup_user+0x9f/0xc0 [ 122.177205][ T7415] __se_sys_mount+0xf7/0x2d0 [ 122.181864][ T7415] ? fput+0x1c4/0x200 [ 122.185890][ T7415] ? ksys_write+0x176/0x1b0 [ 122.190472][ T7415] __x64_sys_mount+0x67/0x80 [ 122.195071][ T7415] x64_sys_call+0x2c84/0x2dc0 [ 122.199744][ T7415] do_syscall_64+0xc9/0x1c0 [ 122.204244][ T7415] ? clear_bhb_loop+0x55/0xb0 [ 122.208910][ T7415] ? clear_bhb_loop+0x55/0xb0 [ 122.213697][ T7415] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 122.219598][ T7415] RIP: 0033:0x7f9e15a05d29 [ 122.224012][ T7415] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 122.243653][ T7415] RSP: 002b:00007f9e14077038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 122.252073][ T7415] RAX: ffffffffffffffda RBX: 00007f9e15bf5fa0 RCX: 00007f9e15a05d29 [ 122.260146][ T7415] RDX: 0000000020000540 RSI: 0000000020000500 RDI: 00000000200004c0 [ 122.268110][ T7415] RBP: 00007f9e14077090 R08: 0000000020000580 R09: 0000000000000000 [ 122.276099][ T7415] R10: 0000000000200000 R11: 0000000000000246 R12: 0000000000000001 [ 122.284069][ T7415] R13: 0000000000000000 R14: 00007f9e15bf5fa0 R15: 00007ffd2ca35178 [ 122.292039][ T7415] [ 122.308739][ T7417] 9pnet_fd: Insufficient options for proto=fd [ 122.360591][ T7421] loop1: detected capacity change from 0 to 512 [ 122.380094][ T7426] netlink: 'syz.4.1301': attribute type 20 has an invalid length. [ 122.388699][ T7421] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 122.401700][ T7426] loop4: detected capacity change from 0 to 512 [ 122.409694][ T7421] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.1299: invalid indirect mapped block 2683928664 (level 1) [ 122.438033][ T7421] EXT4-fs (loop1): 1 truncate cleaned up [ 122.459674][ T7421] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:483: comm syz.1.1299: Invalid block bitmap block 3 in block_group 0 [ 122.478785][ T7426] ext4 filesystem being mounted at /251/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 122.502820][ T7421] pim6reg: entered allmulticast mode [ 122.517822][ T7421] pim6reg: left allmulticast mode [ 122.547936][ T7413] netlink: 'syz.0.1295': attribute type 15 has an invalid length. [ 122.613167][ T7439] loop4: detected capacity change from 0 to 512 [ 122.629042][ T7439] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 122.658550][ T7441] Timeout policy `syz0' can only be used by L3 protocol number 96 [ 122.668309][ T7439] EXT4-fs (loop4): 1 truncate cleaned up [ 122.694601][ T7444] No such timeout policy "syz0" [ 122.882367][ T7465] serio: Serial port ptm0 [ 122.921816][ T7474] No such timeout policy "syz0" [ 123.111090][ T7507] No such timeout policy "syz0" [ 123.144842][ T7511] serio: Serial port ptm0 [ 123.338868][ T7542] No such timeout policy "syz0" [ 123.416954][ T7548] Invalid option length (303) for dns_resolver key [ 123.426861][ T7552] serio: Serial port ptm0 [ 123.570904][ T7573] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1538 sclass=netlink_route_socket pid=7573 comm=syz.4.1362 [ 123.611281][ T7566] Invalid option length (303) for dns_resolver key [ 123.936916][ T7594] serio: Serial port ptm0 [ 123.994225][ T29] kauditd_printk_skb: 2052 callbacks suppressed [ 123.994240][ T29] audit: type=1400 audit(1734532584.136:10720): avc: denied { map_create } for pid=7593 comm="syz.3.1369" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 124.045413][ T29] audit: type=1400 audit(1734532584.145:10721): avc: denied { prog_load } for pid=7593 comm="syz.3.1369" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 124.068218][ T29] audit: type=1400 audit(1734532584.145:10722): avc: denied { prog_load } for pid=7593 comm="syz.3.1369" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 124.093626][ T29] audit: type=1400 audit(1734532584.145:10723): avc: denied { map_create } for pid=7593 comm="syz.3.1369" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 124.116654][ T29] audit: type=1400 audit(1734532584.145:10724): avc: denied { prog_load } for pid=7593 comm="syz.3.1369" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 124.139867][ T29] audit: type=1400 audit(1734532584.145:10725): avc: denied { create } for pid=7593 comm="syz.3.1369" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=0 [ 124.161824][ T29] audit: type=1400 audit(1734532584.183:10726): avc: denied { read write } for pid=3302 comm="syz-executor" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 124.201215][ T7600] audit: audit_backlog=65 > audit_backlog_limit=64 [ 124.203954][ T7601] audit: audit_backlog=65 > audit_backlog_limit=64 [ 124.207739][ T7600] audit: audit_lost=4 audit_rate_limit=0 audit_backlog_limit=64 [ 124.363442][ T7605] __nla_validate_parse: 9 callbacks suppressed [ 124.363457][ T7605] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1373'. [ 124.385975][ T7606] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1372'. [ 125.312488][ T7624] serio: Serial port ptm0 [ 125.912848][ T7673] No such timeout policy "syz0" [ 125.966589][ T7673] SELinux: security_context_str_to_sid (Eá…) failed with errno=-22 [ 125.997349][ T7676] Invalid option length (303) for dns_resolver key [ 126.258336][ T7695] mmap: syz.2.1408 (7695) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 126.292659][ T7695] FAULT_INJECTION: forcing a failure. [ 126.292659][ T7695] name failslab, interval 1, probability 0, space 0, times 0 [ 126.306592][ T7695] CPU: 0 UID: 0 PID: 7695 Comm: syz.2.1408 Not tainted 6.13.0-rc3-syzkaller-00044-gaef25be35d23 #0 [ 126.317285][ T7695] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 126.327354][ T7695] Call Trace: [ 126.330640][ T7695] [ 126.333568][ T7695] dump_stack_lvl+0xf2/0x150 [ 126.338196][ T7695] dump_stack+0x15/0x1a [ 126.342370][ T7695] should_fail_ex+0x223/0x230 [ 126.347097][ T7695] should_failslab+0x8f/0xb0 [ 126.351720][ T7695] kmem_cache_alloc_noprof+0x52/0x320 [ 126.357272][ T7695] ? vm_area_alloc+0x2c/0x130 [ 126.361965][ T7695] vm_area_alloc+0x2c/0x130 [ 126.366511][ T7695] __mmap_region+0x6b5/0x13f0 [ 126.371362][ T7695] mmap_region+0x18c/0x1e0 [ 126.375856][ T7695] do_mmap+0x718/0xb60 [ 126.379970][ T7695] __se_sys_remap_file_pages+0x617/0x770 [ 126.385613][ T7695] ? fput+0x1c4/0x200 [ 126.389600][ T7695] ? ksys_write+0x176/0x1b0 [ 126.394172][ T7695] __x64_sys_remap_file_pages+0x67/0x80 [ 126.399721][ T7695] x64_sys_call+0x10b2/0x2dc0 [ 126.404445][ T7695] do_syscall_64+0xc9/0x1c0 [ 126.408978][ T7695] ? clear_bhb_loop+0x55/0xb0 [ 126.413722][ T7695] ? clear_bhb_loop+0x55/0xb0 [ 126.418468][ T7695] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.424413][ T7695] RIP: 0033:0x7f9e15a05d29 [ 126.428843][ T7695] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 126.448509][ T7695] RSP: 002b:00007f9e14077038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d8 [ 126.456951][ T7695] RAX: ffffffffffffffda RBX: 00007f9e15bf5fa0 RCX: 00007f9e15a05d29 [ 126.464925][ T7695] RDX: 0000000000000000 RSI: 0000000000800000 RDI: 0000000020800000 [ 126.472921][ T7695] RBP: 00007f9e14077090 R08: 0000000000000000 R09: 0000000000000000 [ 126.480913][ T7695] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 126.488884][ T7695] R13: 0000000000000000 R14: 00007f9e15bf5fa0 R15: 00007ffd2ca35178 [ 126.496861][ T7695] [ 126.829883][ T7713] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1416'. [ 127.267463][ T7746] Invalid option length (303) for dns_resolver key [ 128.869145][ T7790] x_tables: ip6_tables: socket match: used from hooks OUTPUT, but only valid from PREROUTING/INPUT [ 129.019164][ T7795] No such timeout policy "syz0" [ 129.343259][ T29] kauditd_printk_skb: 1213 callbacks suppressed [ 129.343330][ T29] audit: type=1400 audit(1734532589.146:11935): avc: denied { map_create } for pid=7824 comm="syz.0.1458" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 129.397582][ T29] audit: type=1400 audit(1734532589.174:11936): avc: denied { prog_load } for pid=7824 comm="syz.0.1458" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 129.417737][ T7829] No such timeout policy "syz0" [ 129.428019][ T29] audit: type=1400 audit(1734532589.183:11937): avc: denied { map_create } for pid=7822 comm="syz.4.1457" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 129.450947][ T29] audit: type=1400 audit(1734532589.183:11938): avc: denied { prog_load } for pid=7822 comm="syz.4.1457" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 129.476374][ T29] audit: type=1400 audit(1734532589.183:11939): avc: denied { map_create } for pid=7820 comm="syz.2.1456" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 129.499231][ T29] audit: type=1400 audit(1734532589.183:11940): avc: denied { prog_load } for pid=7820 comm="syz.2.1456" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 129.521998][ T29] audit: type=1400 audit(1734532589.183:11941): avc: denied { prog_load } for pid=7820 comm="syz.2.1456" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 129.544784][ T29] audit: type=1400 audit(1734532589.192:11942): avc: denied { read write } for pid=3301 comm="syz-executor" name="loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 129.572945][ T29] audit: type=1400 audit(1734532589.202:11943): avc: denied { map_create } for pid=7828 comm="syz.0.1459" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 129.595804][ T29] audit: type=1400 audit(1734532589.202:11944): avc: denied { prog_load } for pid=7828 comm="syz.0.1459" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 130.088351][ T7857] No such timeout policy "syz0" [ 130.659842][ T7891] Invalid option length (303) for dns_resolver key [ 131.202248][ T7898] No such timeout policy "syz0" [ 131.811070][ T7939] No such timeout policy "syz0" [ 132.010329][ T7946] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1501'. [ 132.113099][ T7950] Invalid option length (303) for dns_resolver key [ 133.144469][ T7969] No such timeout policy "syz0" [ 133.203445][ T7976] Invalid option length (303) for dns_resolver key Dec 18 14:36:32 syzkaller daemon.err dhcpcd[3037]: ps_sendpsmmsg: Connection refused Dec 18 14:36:32 syzkaller daemon.err dhcpcd[3037]: ps_root_recvmsgcb: failed to send message to pid 5381: Connection refused [ 133.525529][ T8007] Timeout policy `syz0' can only be used by L3 protocol number 96 [ 133.613876][ T8013] FAULT_INJECTION: forcing a failure. [ 133.613876][ T8013] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 133.630763][ T8013] CPU: 1 UID: 0 PID: 8013 Comm: syz.2.1527 Not tainted 6.13.0-rc3-syzkaller-00044-gaef25be35d23 #0 [ 133.641493][ T8013] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 133.651557][ T8013] Call Trace: [ 133.654832][ T8013] [ 133.657763][ T8013] dump_stack_lvl+0xf2/0x150 [ 133.662382][ T8013] dump_stack+0x15/0x1a [ 133.666591][ T8013] should_fail_ex+0x223/0x230 [ 133.671269][ T8013] should_fail+0xb/0x10 [ 133.675433][ T8013] should_fail_usercopy+0x1a/0x20 [ 133.680550][ T8013] _copy_from_iter+0xd5/0xd00 [ 133.685233][ T8013] ? kmalloc_reserve+0x16e/0x190 [ 133.690294][ T8013] ? __build_skb_around+0x196/0x1f0 [ 133.695515][ T8013] ? __alloc_skb+0x21f/0x310 [ 133.700109][ T8013] ? __virt_addr_valid+0x1ed/0x250 [ 133.705247][ T8013] ? __check_object_size+0x364/0x520 [ 133.710533][ T8013] netlink_sendmsg+0x460/0x6e0 [ 133.715310][ T8013] ? __pfx_netlink_sendmsg+0x10/0x10 [ 133.720628][ T8013] __sock_sendmsg+0x140/0x180 [ 133.725415][ T8013] ____sys_sendmsg+0x312/0x410 [ 133.730188][ T8013] __sys_sendmsg+0x19d/0x230 [ 133.734906][ T8013] __x64_sys_sendmsg+0x46/0x50 [ 133.739679][ T8013] x64_sys_call+0x2734/0x2dc0 [ 133.744362][ T8013] do_syscall_64+0xc9/0x1c0 [ 133.748873][ T8013] ? clear_bhb_loop+0x55/0xb0 [ 133.753631][ T8013] ? clear_bhb_loop+0x55/0xb0 [ 133.758314][ T8013] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 133.764250][ T8013] RIP: 0033:0x7f9e15a05d29 [ 133.768798][ T8013] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 133.788550][ T8013] RSP: 002b:00007f9e14077038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 133.796973][ T8013] RAX: ffffffffffffffda RBX: 00007f9e15bf5fa0 RCX: 00007f9e15a05d29 [ 133.804944][ T8013] RDX: 0000000000000000 RSI: 0000000020000940 RDI: 0000000000000003 [ 133.812922][ T8013] RBP: 00007f9e14077090 R08: 0000000000000000 R09: 0000000000000000 [ 133.820894][ T8013] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 133.828996][ T8013] R13: 0000000000000000 R14: 00007f9e15bf5fa0 R15: 00007ffd2ca35178 [ 133.836988][ T8013] [ 134.209651][ T8040] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1535'. [ 134.324226][ T8054] serio: Serial port ptm1 Dec 18 14:36:33 syzkaller daemon.err dhcpcd[3037]: ps_sendpsmmsg: Connection refused Dec 18 14:36:33 syzkaller daemon.err dhcpcd[3037]: ps_root_recvmsgcb: failed to send message to pid 5418: Connection refused [ 134.541851][ T8063] serio: Serial port ptm1 [ 134.689054][ T29] kauditd_printk_skb: 1137 callbacks suppressed [ 134.689068][ T29] audit: type=1400 audit(1734532594.155:13080): avc: denied { read write } for pid=3305 comm="syz-executor" name="loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 134.726737][ T29] audit: type=1400 audit(1734532594.183:13081): avc: denied { prog_load } for pid=8071 comm="syz.2.1548" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 134.747369][ T29] audit: type=1400 audit(1734532594.211:13082): avc: denied { map_create } for pid=8074 comm="syz.0.1549" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 134.795837][ T29] audit: type=1400 audit(1734532594.211:13083): avc: denied { create } for pid=8073 comm="syz.1.1550" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=0 [ 134.816829][ T29] audit: type=1400 audit(1734532594.230:13084): avc: denied { prog_load } for pid=8074 comm="syz.0.1549" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 134.837304][ T29] audit: type=1326 audit(1734532594.230:13085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8074 comm="syz.0.1549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b5dec5d29 code=0x7ffc0000 [ 134.861985][ T29] audit: type=1326 audit(1734532594.230:13086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8074 comm="syz.0.1549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2b5dec5d29 code=0x7ffc0000 [ 134.886725][ T29] audit: type=1400 audit(1734532594.230:13087): avc: denied { map_create } for pid=8074 comm="syz.0.1549" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 134.907215][ T29] audit: type=1326 audit(1734532594.230:13088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8074 comm="syz.0.1549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b5dec5d29 code=0x7ffc0000 [ 134.932055][ T29] audit: type=1326 audit(1734532594.230:13089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8074 comm="syz.0.1549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f2b5dec5d29 code=0x7ffc0000 [ 135.114069][ T8101] veth0_to_team: entered promiscuous mode [ 135.119913][ T8101] veth0_to_team: entered allmulticast mode Dec 18 14:36:34 syzkaller daemon.err dhcpcd[3037]: ps_sendpsmmsg: Connection refused Dec 18 14:36:34 syzkaller daemon.err dhcpcd[3037]: ps_root_recvmsgcb: failed to send message to pid 5451: Connection refused [ 135.202730][ T8115] No such timeout policy "syz0" [ 135.217974][ T8115] SELinux: security_context_str_to_sid (Eá…) failed with errno=-22 [ 135.271120][ T8120] No such timeout policy "syz0" [ 135.303633][ T8120] SELinux: security_context_str_to_sid (Eá…) failed with errno=-22 [ 135.444587][ T8141] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1570'. [ 135.563612][ T8147] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1575'. [ 135.639592][ T8152] No such timeout policy "syz0" [ 135.675019][ T8152] SELinux: security_context_str_to_sid (Eá…) failed with errno=-22 Dec 18 14:36:35 syzkaller daemon.err dhcpcd[3037]: ps_sendpsmmsg: Connection refused Dec 18 14:36:35 syzkaller daemon.err dhcpcd[3037]: ps_root_recvmsgcb: failed to send message to pid 5529: Connection refused [ 136.508351][ T8193] No such timeout policy "syz0" [ 136.518182][ T8193] SELinux: security_context_str_to_sid (Eá…) failed with errno=-22 [ 136.621067][ T8200] FAULT_INJECTION: forcing a failure. [ 136.621067][ T8200] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 136.634312][ T8200] CPU: 0 UID: 0 PID: 8200 Comm: syz.2.1591 Not tainted 6.13.0-rc3-syzkaller-00044-gaef25be35d23 #0 [ 136.644999][ T8200] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 136.655171][ T8200] Call Trace: [ 136.658528][ T8200] [ 136.661520][ T8200] dump_stack_lvl+0xf2/0x150 [ 136.666149][ T8200] dump_stack+0x15/0x1a [ 136.670400][ T8200] should_fail_ex+0x223/0x230 [ 136.675271][ T8200] should_fail+0xb/0x10 [ 136.679467][ T8200] should_fail_usercopy+0x1a/0x20 [ 136.684491][ T8200] _copy_from_user+0x1e/0xb0 [ 136.689174][ T8200] user_termios_to_kernel_termios_1+0x22/0x30 [ 136.695360][ T8200] set_termios+0x126/0x4e0 [ 136.699805][ T8200] tty_mode_ioctl+0x391/0x5d0 [ 136.704526][ T8200] n_tty_ioctl_helper+0x8d/0x240 [ 136.709467][ T8200] n_tty_ioctl+0xfd/0x200 [ 136.713799][ T8200] ? __pfx_n_tty_ioctl+0x10/0x10 [ 136.718754][ T8200] tty_ioctl+0x87a/0xbe0 [ 136.723045][ T8200] ? __pfx_tty_ioctl+0x10/0x10 [ 136.727850][ T8200] __se_sys_ioctl+0xc9/0x140 [ 136.732478][ T8200] __x64_sys_ioctl+0x43/0x50 [ 136.737076][ T8200] x64_sys_call+0x1690/0x2dc0 [ 136.741833][ T8200] do_syscall_64+0xc9/0x1c0 [ 136.746333][ T8200] ? clear_bhb_loop+0x55/0xb0 [ 136.751057][ T8200] ? clear_bhb_loop+0x55/0xb0 [ 136.755729][ T8200] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 136.761648][ T8200] RIP: 0033:0x7f9e15a05d29 [ 136.766076][ T8200] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 136.785817][ T8200] RSP: 002b:00007f9e14077038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 136.794312][ T8200] RAX: ffffffffffffffda RBX: 00007f9e15bf5fa0 RCX: 00007f9e15a05d29 [ 136.802299][ T8200] RDX: 0000000020000000 RSI: 0000000000005404 RDI: 0000000000000005 [ 136.810334][ T8200] RBP: 00007f9e14077090 R08: 0000000000000000 R09: 0000000000000000 [ 136.818407][ T8200] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 136.826393][ T8200] R13: 0000000000000000 R14: 00007f9e15bf5fa0 R15: 00007ffd2ca35178 [ 136.834380][ T8200] [ 137.226187][ T8219] No such timeout policy "syz0" [ 137.249866][ T8221] Timeout policy `syz0' can only be used by L3 protocol number 96 [ 137.266736][ T8221] SELinux: security_context_str_to_sid (Eá…) failed with errno=-22 [ 137.269104][ T8219] SELinux: security_context_str_to_sid (Eá…) failed with errno=-22 [ 140.064296][ T29] kauditd_printk_skb: 1302 callbacks suppressed [ 140.064310][ T29] audit: type=1400 audit(1734532599.183:14390): avc: denied { map_create } for pid=8332 comm="syz.4.1641" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 140.160806][ T29] audit: type=1400 audit(1734532599.268:14391): avc: denied { prog_load } for pid=8332 comm="syz.4.1641" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 140.183545][ T29] audit: type=1400 audit(1734532599.268:14392): avc: denied { open } for pid=8332 comm="syz.4.1641" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0 [ 140.208892][ T29] audit: type=1400 audit(1734532599.268:14393): avc: denied { open } for pid=8332 comm="syz.4.1641" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0 [ 140.317034][ T29] audit: type=1400 audit(1734532599.417:14394): avc: denied { create } for pid=8339 comm="syz.3.1644" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=0 [ 140.368601][ T29] audit: type=1400 audit(1734532599.455:14395): avc: denied { read } for pid=8339 comm="syz.3.1644" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=0 [ 140.393493][ T29] audit: type=1400 audit(1734532599.455:14396): avc: denied { create } for pid=8339 comm="syz.3.1644" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=0 [ 140.414249][ T29] audit: type=1400 audit(1734532599.455:14397): avc: denied { create } for pid=8339 comm="syz.3.1644" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=0 [ 140.562171][ T29] audit: type=1400 audit(1734532599.595:14398): avc: denied { read write } for pid=3302 comm="syz-executor" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 140.587981][ T29] audit: type=1400 audit(1734532599.605:14399): avc: denied { create } for pid=8342 comm="syz.1.1645" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=0 [ 140.794799][ T8365] Invalid option length (303) for dns_resolver key [ 142.272820][ T8419] No such timeout policy "syz0" [ 142.286783][ T8419] SELinux: security_context_str_to_sid (Eá…) failed with errno=-22 [ 142.400634][ T8430] serio: Serial port ptm0 [ 142.645554][ T8444] serio: Serial port ptm0 [ 142.814440][ T8450] No such timeout policy "syz0" [ 142.862549][ T8450] SELinux: security_context_str_to_sid (Eá…) failed with errno=-22 [ 143.127958][ T8488] FAULT_INJECTION: forcing a failure. [ 143.127958][ T8488] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 143.144904][ T8488] CPU: 1 UID: 0 PID: 8488 Comm: syz.3.1706 Not tainted 6.13.0-rc3-syzkaller-00044-gaef25be35d23 #0 [ 143.155682][ T8488] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 143.165786][ T8488] Call Trace: [ 143.169152][ T8488] [ 143.172091][ T8488] dump_stack_lvl+0xf2/0x150 [ 143.176762][ T8488] dump_stack+0x15/0x1a [ 143.181013][ T8488] should_fail_ex+0x223/0x230 [ 143.185703][ T8488] should_fail+0xb/0x10 [ 143.189940][ T8488] should_fail_usercopy+0x1a/0x20 [ 143.195068][ T8488] _copy_to_user+0x20/0xa0 [ 143.199577][ T8488] simple_read_from_buffer+0xa0/0x110 [ 143.205039][ T8488] proc_fail_nth_read+0xf9/0x140 [ 143.210065][ T8488] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 143.215731][ T8488] vfs_read+0x1a2/0x700 [ 143.219887][ T8488] ? __rcu_read_unlock+0x4e/0x70 [ 143.224835][ T8488] ? __fget_files+0x17c/0x1c0 [ 143.229552][ T8488] ksys_read+0xe8/0x1b0 [ 143.233719][ T8488] __x64_sys_read+0x42/0x50 [ 143.238370][ T8488] x64_sys_call+0x2874/0x2dc0 [ 143.243052][ T8488] do_syscall_64+0xc9/0x1c0 [ 143.247562][ T8488] ? clear_bhb_loop+0x55/0xb0 [ 143.252298][ T8488] ? clear_bhb_loop+0x55/0xb0 [ 143.257036][ T8488] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 143.262948][ T8488] RIP: 0033:0x7f9c857e473c [ 143.267376][ T8488] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 143.277941][ T8502] serio: Serial port ptm0 [ 143.287060][ T8488] RSP: 002b:00007f9c83e57030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 143.287084][ T8488] RAX: ffffffffffffffda RBX: 00007f9c859d5fa0 RCX: 00007f9c857e473c [ 143.287095][ T8488] RDX: 000000000000000f RSI: 00007f9c83e570a0 RDI: 0000000000000004 [ 143.287141][ T8488] RBP: 00007f9c83e57090 R08: 0000000000000000 R09: 0000000000000000 [ 143.287154][ T8488] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 143.287165][ T8488] R13: 0000000000000000 R14: 00007f9c859d5fa0 R15: 00007ffde85a0aa8 [ 143.287183][ T8488] [ 143.376557][ T8508] serio: Serial port ptm1 [ 143.495714][ T8531] No such timeout policy "syz0" [ 143.519455][ T8531] SELinux: security_context_str_to_sid (Eá…) failed with errno=-22 [ 143.564144][ T8540] serio: Serial port ptm0 [ 143.630473][ T8547] No such timeout policy "syz0" [ 143.986134][ T8577] serio: Serial port ptm0 [ 144.363032][ T8604] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1754'. [ 144.826233][ T8641] serio: Serial port ptm0 [ 145.091685][ T8660] FAULT_INJECTION: forcing a failure. [ 145.091685][ T8660] name failslab, interval 1, probability 0, space 0, times 0 [ 145.105771][ T8660] CPU: 0 UID: 0 PID: 8660 Comm: syz.3.1781 Not tainted 6.13.0-rc3-syzkaller-00044-gaef25be35d23 #0 [ 145.116468][ T8660] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 145.126584][ T8660] Call Trace: [ 145.129937][ T8660] [ 145.132927][ T8660] dump_stack_lvl+0xf2/0x150 [ 145.137583][ T8660] dump_stack+0x15/0x1a [ 145.141750][ T8660] should_fail_ex+0x223/0x230 [ 145.146508][ T8660] should_failslab+0x8f/0xb0 [ 145.151168][ T8660] kmem_cache_alloc_noprof+0x52/0x320 [ 145.156546][ T8660] ? getname_flags+0x81/0x3b0 [ 145.161223][ T8660] getname_flags+0x81/0x3b0 [ 145.165811][ T8660] getname+0x17/0x20 [ 145.169804][ T8660] do_sys_openat2+0x67/0x120 [ 145.174409][ T8660] __x64_sys_openat+0xf3/0x120 [ 145.179190][ T8660] x64_sys_call+0x2b30/0x2dc0 [ 145.183909][ T8660] do_syscall_64+0xc9/0x1c0 [ 145.188418][ T8660] ? clear_bhb_loop+0x55/0xb0 [ 145.193107][ T8660] ? clear_bhb_loop+0x55/0xb0 [ 145.197986][ T8660] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 145.203907][ T8660] RIP: 0033:0x7f9c857e5d29 [ 145.208375][ T8660] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 145.228037][ T8660] RSP: 002b:00007f9c83e57038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 145.236525][ T8660] RAX: ffffffffffffffda RBX: 00007f9c859d5fa0 RCX: 00007f9c857e5d29 [ 145.244518][ T8660] RDX: 0000000000000002 RSI: 0000000020000080 RDI: ffffffffffffff9c [ 145.252541][ T8660] RBP: 00007f9c83e57090 R08: 0000000000000000 R09: 0000000000000000 [ 145.260583][ T8660] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 145.268555][ T8660] R13: 0000000000000000 R14: 00007f9c859d5fa0 R15: 00007ffde85a0aa8 [ 145.276558][ T8660] [ 145.412106][ T29] kauditd_printk_skb: 1312 callbacks suppressed [ 145.412120][ T29] audit: type=1400 audit(1734535164.188:15712): avc: denied { prog_load } for pid=8675 comm="syz.3.1789" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 145.459845][ T29] audit: type=1400 audit(1734535164.188:15713): avc: denied { read write } for pid=3294 comm="syz-executor" name="loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 145.485397][ T29] audit: type=1400 audit(1734535164.188:15714): avc: denied { map_create } for pid=8677 comm="syz.2.1790" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 145.505872][ T29] audit: type=1400 audit(1734535164.188:15715): avc: denied { prog_load } for pid=8677 comm="syz.2.1790" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 145.526322][ T29] audit: type=1400 audit(1734535164.188:15716): avc: denied { prog_load } for pid=8677 comm="syz.2.1790" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 145.546759][ T29] audit: type=1400 audit(1734535164.188:15717): avc: denied { read write } for pid=3295 comm="syz-executor" name="loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 145.572541][ T29] audit: type=1400 audit(1734535164.226:15718): avc: denied { prog_load } for pid=8675 comm="syz.3.1789" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 145.593004][ T29] audit: type=1400 audit(1734535164.226:15719): avc: denied { read } for pid=8675 comm="syz.3.1789" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=0 [ 145.618153][ T29] audit: type=1400 audit(1734535164.235:15720): avc: denied { map_create } for pid=8679 comm="syz.1.1791" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 145.638556][ T29] audit: type=1400 audit(1734535164.235:15721): avc: denied { prog_load } for pid=8679 comm="syz.1.1791" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 145.749687][ T8701] ================================================================== [ 145.757790][ T8701] BUG: KCSAN: data-race in mas_wr_store_entry / mtree_range_walk [ 145.765516][ T8701] [ 145.767847][ T8701] write to 0xffff888104158610 of 8 bytes by task 8698 on cpu 1: [ 145.775464][ T8701] mas_wr_store_entry+0x1490/0x2d10 [ 145.780661][ T8701] mas_store_prealloc+0x6bf/0x960 [ 145.785673][ T8701] commit_merge+0x441/0x740 [ 145.790169][ T8701] vma_expand+0x211/0x360 [ 145.794486][ T8701] vma_merge_new_range+0x2da/0x340 [ 145.799600][ T8701] __mmap_region+0x67c/0x13f0 [ 145.804287][ T8701] mmap_region+0x164/0x1e0 [ 145.808714][ T8701] do_mmap+0x718/0xb60 [ 145.812784][ T8701] vm_mmap_pgoff+0x133/0x290 [ 145.817458][ T8701] ksys_mmap_pgoff+0xd0/0x330 [ 145.822131][ T8701] x64_sys_call+0x1940/0x2dc0 [ 145.826798][ T8701] do_syscall_64+0xc9/0x1c0 [ 145.831294][ T8701] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 145.837186][ T8701] [ 145.839498][ T8701] read to 0xffff888104158610 of 8 bytes by task 8701 on cpu 0: [ 145.847031][ T8701] mtree_range_walk+0x1b4/0x460 [ 145.851870][ T8701] mas_walk+0x16e/0x320 [ 145.856045][ T8701] lock_vma_under_rcu+0x95/0x260 [ 145.860977][ T8701] exc_page_fault+0x150/0x650 [ 145.865651][ T8701] asm_exc_page_fault+0x26/0x30 [ 145.870499][ T8701] [ 145.872811][ T8701] value changed: 0x00007f9e14056fff -> 0xffffffff852da9d0 [ 145.879903][ T8701] [ 145.882210][ T8701] Reported by Kernel Concurrency Sanitizer on: [ 145.888343][ T8701] CPU: 0 UID: 0 PID: 8701 Comm: syz.2.1798 Not tainted 6.13.0-rc3-syzkaller-00044-gaef25be35d23 #0 [ 145.899009][ T8701] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 145.909051][ T8701] ================================================================== [ 145.928971][ T8703] serio: Serial port ptm0