last executing test programs: 2.710508911s ago: executing program 3 (id=2551): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000000)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x18) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x7, 0x0, 0x0, 0x0, 0x40008, 0x590, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x4c58, 0x1, 0x0, 0x0, 0x8, 0x4ac, 0xb, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x1) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00'}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000000002010400000069480000005b4feb2ad6f75eab06c18ef9741bcd33818d2d6fb48bbe1260749296fbe6285eb29a1b40c3a6698f83a91a71fd081e71fa1002cbaf687c5cf94aef3407ea02cadc6cfa89af5a08d461b6"], 0x14}}, 0x0) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000001240)='./bus\x00', 0x4010, &(0x7f0000000280)=ANY=[@ANYRES32, @ANYBLOB="2c62903a5156576085700e3f5b7bdb26506a2c942cf9ee6f4b71c51d874f6a75b0d3079d5c61f4734d5fdb3031763cbaa9316e7aa3549de75a023a9e4296c1868c21e1997af1b5f49c7fe161c5d4514b4faf4453f3537969c2b3628c6b58e8f36febb30ebc615d85a1e668561b4373d8d28a45e66a67fb46da4d3c6e3ee7006750d50621f6258409086c09c7b187c3789ad153b9823f3ba2a69d8a8373b69117cac0e01dd6814c513e3fe5f863cd08a6d91b1800920cc99437fe2e409e54cbb08227155fea1f79b425c6690aea1f836f60a2fbced4f2849f07acbdd02303c9f63d499853e40eeeb2480f64ca91"], 0x1, 0x11ff, &(0x7f0000001280)="$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") r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(r4, 0x0, 0x0) creat(&(0x7f0000000580)='./bus\x00', 0x0) ioctl$KDSKBLED(0xffffffffffffffff, 0x4b65, 0x5) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f00000004c0)='sched_switch\x00', r2}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) timer_create(0x2, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x13, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) sync() sync() socketpair(0x1d, 0x80000, 0x2, &(0x7f0000000300)={0x0, 0x0}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff) 2.462840481s ago: executing program 3 (id=2557): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1000}, 0x4000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) fallocate(r2, 0x1, 0x2, 0xf0a7) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x18) socketpair(0xf, 0x3, 0x2, &(0x7f00000001c0)) syslog(0x4, &(0x7f0000000400)=""/192, 0x64075da62934d5c2) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2000006, 0x31, 0xffffffffffffffff, 0xd0fb6000) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r4}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x6, 0xf, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000200000000000007001d6053ef777b213625959f5cbf", @ANYRES64=r4, @ANYBLOB="0000000000000000b702000014000000b703000000000000850000009e000000bf0900000000000055090100000000009500000000000000bf91000000000000b702000000000000"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c04, &(0x7f0000000340), 0x1, 0x779, &(0x7f0000001900)="$eJzs3c9rXNUeAPDvnSRNm/a95MGD9+oqIGigdGJqbBVcVFyIYKGga9thMg01k0zJTEoTAlpEcCOouBB007U/6s6tP7b6X7gQS9W0WHEhkTuZ206bmWmSJjPV+XzgZs65907O+c79cc7MPdwbQN8aT//kIg5HxLtJxGhjfhIRQ/XUYMTJjfVura0W0ymJ9fWXf0nq69xcWy1G03tSBxuZ/0fEN29FHMltLre6vDJXKJdLi438ZG3+wmR1eeXo+fnCbGm2tHB8anr62ImnThzfvVh/+37l0LX3Xnj885N/vPm/q+98m8TJONRY1hzHbhmP8cZnMpR+hHd5frcL67Gk1xVgR9JDc2DjKI/DMRoD9RQA8E/2ekSsAwB9JtH+A0CfyX4HuLm2Wsym3v4i0V3Xn4uI/RvxZ9c3N5YMNq7Z7a9fBx25mdx1ZSSJiLFdKH88Ij7+8tVP0yn26DokQCtvXI6Is2Pjm8//yaYxC9v1RIdl+xqv4/fMd/6D7vkq7f883ar/l7vd/4kW/Z/hFsfuTtz3+D+wC4V0kPb/nm0a23arKf6GsYFG7l/1Pt9Qcu58uZSe2/4dERMxNJzmpzqUMXHjzxvtljX3/359/7VP0vLT1ztr5H4aHL77PTOFWuFBYm52/XLEI4Ot4k9ub/+kTf/39BbLePGZtz9qtyyNP403mzbHH43RSXtj/UrEYy23/50RbUnH8YmT9d1hMtspWvjihw9H2pXfvP3TKS0/+y7QDen2H+kc/1jSPF6zuv0yvrsy+nW7ZfePv/X+vy95pZ7O+hGXCrXa4lTEvuSlzfOP3Xlvls/WT+OfeLT18d9p/0+/E57dYvyD137+bOfx7600/pltbf/tJ67emhtoV/7Wtv90PTXRmLOV899WK/ggnx0AAAAAAAAAAAAAAAAAAAAAAAAAbFUuIg5FksvfTudy+fzGM7z/GyO5cqVaO3KusrQwE/VnZY/FUC671eVo0/1Qpxr3w8/yx+7JPxkR/4mID4YPJNl9FGd6HDsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAZA62ef5/6sfhXtcOANgz+3tdAQCg67T/ANB/tP8A0H+0/wDQf7T/ANB/tP8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADssdOnTqXT+u9rq8U0P3NxeWmucvHoTKk6l59fKuaLlcUL+dlKZbZcyhcr8/f7f+VK5cJ0LCxdmqyVqrXJ6vLKmfnK0kLtzPn5wmzpTGmoK1EBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwPZUl1fmCuVyaVFiB4n1h6MavU8MNHanh6U+XU0kD0c1djnR6ayR687JCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOBv4K8AAAD//8yLIwE=") r5 = open(&(0x7f00000005c0)='./bus\x00', 0x167842, 0x19) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000001200)={0x0, 0xffffff1e, 0xffffffff, 0x4, 0x12, "001bf100eeff0000a2c2000100000000002000"}) r6 = syz_open_pts(0xffffffffffffffff, 0x101) r7 = dup3(r6, 0xffffffffffffffff, 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000080)='statm\x00') mount$9p_fd(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000100), 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r8, @ANYBLOB=',wfdno=', @ANYRESHEX=r7]) pwritev2(r5, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0xffffffe4}], 0x1, 0x1400, 0x0, 0x0) 2.294462135s ago: executing program 1 (id=2560): bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000980)={0x0, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="07c3da8c3a0f75b5bcba38574e258082fe678fe53144f43feab80e0641307736897e7f6d8d4b0040cd4d7436f8283334b56461467d1cc4b9a2a6fbb3645f661a4518361998f43ce81d58ffa120"], 0x0, 0x3, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd4}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r4 = socket$nl_rdma(0x10, 0x3, 0x14) unlinkat(0xffffffffffffffff, &(0x7f0000002140)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r6, &(0x7f0000000400)=[{&(0x7f0000000100)="92", 0x1}], 0x1) pipe(&(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r8, 0x0, r9, 0x0, 0xf3a, 0x0) write$cgroup_pid(r9, &(0x7f0000000000), 0xffffff98) splice(r5, 0x0, r9, 0x0, 0x80, 0x4) write(r7, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1800403, &(0x7f0000000c00)={[], [{@smackfsroot={'smackfsroot', 0x3d, ')'}}, {@uid_lt}, {@audit}, {@context={'context', 0x3d, 'staff_u'}}, {@subj_user={'subj_user', 0x3d, 'GPL\x00'}}]}, 0x2, 0x5ad, &(0x7f0000000180)="$eJzs3c1vVFUbAPDnzkwLpe9rKzEqLkyjIZAoLS1g8GMBe0LwY+fGSgtBho/QGi2aWBLcmBg3LkhcuRD/CyW6dWXiwoUbV4akGsNGY3TMnbkzDO1MOy0dbu39/ZLbOeeeOz3nQp85Z+49ZyaAwhpLf5Qi9kTE5SRipK2sElnhWOO4O7+/fzrdkqjVXv0tiSTb1zw+yR6Hsyf/PRLx/TdJ7C6vrHdu4er56Wp19kqWn5i/cHlibuHqgXMXps/Onp29OPXc1NEjh48cnTx4X+dXakufuP7WOyMfnXz9i8/+Sia//OlkEsfi1zONsvbz2CxjMRZ/1GofLN+f/rse3ezKclJu/Z3clSzfwZZVyWJkMCIei5Eot/1vjsSHL+faOKCvaklEDSioRPxDQTXHAc339r29Dy71eVQCPAhLx9OfAx3iv9K4NhijMRARe5c9r8MlvQ1J6/ju25PX0y36dB0O6Gzx2o4stTz+k3psjsbOem7XndI913nTEcCp7DHd/8oG6x9blhf/8OAsXouIxzuN/9eO/zfa4v/NDdYv/gEAAAAAAGDz3DoeEc92uv9Xyu7N7Yyn6vf/ksb9vx/urhA8tgn1r33/r3R7E6oBOlg6HvFSx/m/rTm+o+Us9//GbMDkzLnq7MGIeCgi9sfAjjQ/uUodBz7efaNbWfv8v3RL62/OBczacbuy497nzEzPT9/POQMNS9cinqh0n/+T9v9Je/+fSV8PLvdYx+69N091K1s7/oF+qX0esa9j/5+0jklW/3yOifp4YKI5Kljpyfc++apb/eIf8pP2/7tWj//RpP3zeubW9/sHI+LQQqXWrXyj4//B5LVy8/en3p2en78yGTGYnFi5f2p9bYbtqhkPzXhJ43//06tf/2uN/9vicCgiFnus89F/hn/uVqb/h/yk8T+zrv5//Ympm6Nfd6u/t/7/cL1P35/tcf0PVtdrgObdTgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4LypFxP8iKY230qXS+HjEcEQ8ErtK1Utz88+cufT2xZm0rP79/6XmN/2ONPJJ8/v/R9vyU8vyhyLi4Yj4tDxUz4+fvlSdyfvkAQAAAAAAAAAAAAAAAAAAYIsY7rL+P/VLOe/WAX1XyR7FOxRPJe8GALkR/1Bc4h+KS/xDcYl/KK4Nxr/bBbAN6P+hqAZ6O2xnv9sB5EH/DwAAAAAA28qtF5+/kUTE4gtD9S01mJW1bgwO5dU6oJ9KeTcAyI05vFBcpv5AcfU4+RfYxpJW6s9ap/Lus/+T/jQIAAAAAAAAAAAAAFhh355bP665/h/Ylqz/h+Ky/h+Ky/p/KC7v8YG1VvFb/w8AAAAAAAAAAAAA+ZtbuHp+ulqdvSIhsdUSAxGxBZqRQ2Iw//DM+YUJAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABo+TcAAP//Swsk/Q==") sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="b00022000314a86f273e5b53dbffdbdb25"], 0xb0}, 0x1, 0x0, 0x0, 0x48845}, 0x4000) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000840)='svcrdma_post_send\x00', r6, 0x0, 0x98}, 0x18) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000046c0)=@newqdisc={0x45c, 0x24, 0x4ee4e6a52ff56541, 0x8000000, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_PTAB={0x404, 0x3, [0x2, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x40000000, 0x1000, 0x2, 0x0, 0x0, 0x8000002, 0x0, 0x7e150a0b, 0x0, 0x5, 0x0, 0x0, 0x0, 0x4, 0x0, 0x100000, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x10000, 0x5d2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1007, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffff9844, 0x0, 0x40000000, 0x0, 0x3, 0x0, 0x1, 0x8, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2, 0x9, 0x0, 0x0, 0x7, 0xfbfffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x3, 0x0, 0x0, 0x4fd, 0x2000, 0x0, 0x0, 0x0, 0x3, 0x0, 0xfffffffe, 0x0, 0x7e98263b, 0x9, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd2d1, 0x0, 0x0, 0xb2e, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0xff, 0x1000, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x6, 0xc3f3, 0x1, 0x8, 0x800, 0x9, 0x800, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0xfffffffe, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0xfffffffd, 0x0, 0x0, 0xd819ac9, 0x801, 0x0, 0x0, 0x0, 0x4, 0x0, 0xffffffff, 0x4, 0x0, 0x80000001, 0x0, 0x10, 0x20, 0x4, 0x400000b2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x1000, 0x100, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x1, 0x4, 0xfffffffe, 0x800, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, 0x0, 0x0, 0x20000040, 0xffffffff, 0x6e715b80, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0xaaf0]}, @TCA_TBF_PARMS={0x28, 0x1, {{0x0, 0x3, 0x0, 0x0, 0x0, 0xc0000001}, {0x3, 0x0, 0xb, 0x0, 0x0, 0xffffffff}, 0x2, 0x10, 0x2000000}}]}}]}, 0x45c}, 0x1, 0x0, 0x0, 0x40}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00'}, 0x10) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x20010, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x0) 1.660554826s ago: executing program 2 (id=2570): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1000}, 0x4000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) fallocate(r2, 0x1, 0x2, 0xf0a7) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x18) socketpair(0xf, 0x3, 0x2, &(0x7f00000001c0)) syslog(0x4, &(0x7f0000000400)=""/192, 0x64075da62934d5c2) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2000006, 0x31, 0xffffffffffffffff, 0xd0fb6000) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r4}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x6, 0xf, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000200000000000007001d6053ef777b213625959f5cbf", @ANYRES64=r4, @ANYBLOB="0000000000000000b702000014000000b703000000000000850000009e000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000089000000b7000000000000009500"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c04, &(0x7f0000000340), 0x1, 0x779, &(0x7f0000001900)="$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") r5 = open(&(0x7f00000005c0)='./bus\x00', 0x167842, 0x19) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000001200)={0x0, 0xffffff1e, 0xffffffff, 0x4, 0x12, "001bf100eeff0000a2c2000100000000002000"}) r6 = syz_open_pts(0xffffffffffffffff, 0x101) r7 = dup3(r6, 0xffffffffffffffff, 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000080)='statm\x00') mount$9p_fd(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000100), 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r8, @ANYBLOB=',wfdno=', @ANYRESHEX=r7]) pwritev2(r5, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0xffffffe4}], 0x1, 0x1400, 0x0, 0x0) 1.387471688s ago: executing program 4 (id=2574): socket$packet(0x11, 0x2, 0x300) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x80, 0x1, 0x4, 0x8, 0x0, 0x7, 0xd18, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x0, 0x401}, 0x723, 0x10000, 0x0, 0x1, 0xa, 0x20005, 0xb, 0x0, 0x2, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xe817876daeedf2b) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000004850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='module_request\x00', r1}, 0x10) socketpair(0x0, 0x0, 0x0, &(0x7f00000006c0)) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x408e, &(0x7f0000000840)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@min_batch_time={'min_batch_time', 0x3d, 0xffd}}, {@nolazytime}, {@jqfmt_vfsold}, {@errors_remount}, {@minixdf}, {@errors_remount}]}, 0x3, 0x43a, &(0x7f0000000340)="$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") r2 = syz_io_uring_setup(0x66e, &(0x7f0000000240)={0x0, 0x0, 0x10100}, &(0x7f0000000380)=0x0, &(0x7f0000000200)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000000)=""/4, 0x4}], 0x27}) io_uring_enter(r2, 0x567, 0x0, 0x0, 0x0, 0x0) 1.386883628s ago: executing program 1 (id=2575): r0 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) ioctl$BTRFS_IOC_ADD_DEV(r0, 0x5000940a, &(0x7f0000000740)={{r0}, "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"}) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, 0x0, &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$F2FS_IOC_START_VOLATILE_WRITE(0xffffffffffffffff, 0xf503, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={0x0}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, 0x0}) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x80800) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) shmat(0x0, &(0x7f0000ffc000/0x3000)=nil, 0x4000) 1.376900499s ago: executing program 1 (id=2576): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bf"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000180)='sys_enter\x00', r0}, 0x10) io_uring_register$IORING_REGISTER_EVENTFD(0xffffffffffffffff, 0x4, &(0x7f0000000800), 0x1) 1.319212933s ago: executing program 1 (id=2577): bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480), 0x4) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) gettid() r1 = socket(0x40000000015, 0x5, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x10, 0xe, &(0x7f0000000b00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) getuid() sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000014c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x28}, 0x1, 0x0, 0x0, 0xc052}, 0x40c0800) r2 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) write$binfmt_aout(r2, &(0x7f00000000c0)=ANY=[], 0x20) r3 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000240)=ANY=[], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014fa0000b7030000000008008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000020000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) r6 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000240)='highspeed\x00', 0xa) setsockopt$inet_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet(r6, &(0x7f0000000280)={0x2, 0x0, @dev}, 0x10) close(r6) r7 = creat(&(0x7f00000000c0)='./file0\x00', 0xc9028ba210c11f8b) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000340)='kfree\x00', r9, 0x0, 0x4}, 0x18) ioctl$BLKTRACESETUP(r7, 0xc0481273, &(0x7f0000000000)={'\x00', 0xc, 0x2, 0x803fd, 0x1, 0x800}) recvmmsg(r1, &(0x7f0000003c40)=[{{0x0, 0x0, 0x0}, 0x80000000}], 0x1, 0x60010002, 0x0) 1.317974764s ago: executing program 3 (id=2578): bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480), 0x4) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) gettid() r1 = socket(0x40000000015, 0x5, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x10, 0xe, &(0x7f0000000b00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) getuid() sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000014c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x28}, 0x1, 0x0, 0x0, 0xc052}, 0x40c0800) r2 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) write$binfmt_aout(r2, &(0x7f00000000c0)=ANY=[], 0x20) r3 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000240)=ANY=[], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014fa0000b7030000000008008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000020000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) r6 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000240)='highspeed\x00', 0xa) setsockopt$inet_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet(r6, &(0x7f0000000280)={0x2, 0x0, @dev}, 0x10) close(r6) r7 = creat(&(0x7f00000000c0)='./file0\x00', 0xc9028ba210c11f8b) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000"], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000340)='kfree\x00', r9, 0x0, 0x4}, 0x18) ioctl$BLKTRACESETUP(r7, 0xc0481273, &(0x7f0000000000)={'\x00', 0xc, 0x2, 0x803fd, 0x1, 0x800}) recvmmsg(r1, &(0x7f0000003c40)=[{{0x0, 0x0, 0x0}, 0x80000000}], 0x1, 0x60010002, 0x0) 1.277058037s ago: executing program 4 (id=2579): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x2, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffa, 0x1, @perf_bp={0x0, 0x3}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000c80)={'ip6gre0\x00'}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 1.191063684s ago: executing program 4 (id=2580): bpf$MAP_CREATE(0x0, &(0x7f0000001780)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xd, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0000}]}) r0 = add_key$keyring(&(0x7f0000000080), &(0x7f0000000340)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000240)='asymmetric\x00', &(0x7f00000000c0)=@chain) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000010c0)=ANY=[], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1}, 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[], 0x0, 0x7ff}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8923, &(0x7f0000000000)={'vlan1\x00', @broadcast}) socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702507aa71ea6e6cfde87b1a3167a37c34e401f8ff00000000bfa10000000000f107010000f8ffffffb702000004000000b7030000000000008500"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xe, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='rpcgss_createauth\x00', r6, 0x0, 0x3}, 0x18) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) r9 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) pwritev2(r9, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x76200}], 0x1, 0x7c00, 0x0, 0x3) r10 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x143a82, 0x8) r11 = dup(r10) r12 = open(&(0x7f0000000100)='./bus\x00', 0x40542, 0x0) sendfile(r11, r12, 0x0, 0x8000fffffffe) sendmsg$ETHTOOL_MSG_PAUSE_GET(r7, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000200)=ANY=[@ANYRES16=r3, @ANYRES16=r8, @ANYBLOB="010026bd70000000000021040000180001801400020064756d6d7930"], 0x2c}, 0x1, 0x0, 0x0, 0x2008040}, 0x880) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x64, 0x5, 0x0, 0x0, 0x0, 0x8, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={&(0x7f00000001c0)}, 0x2, 0x2, 0x7, 0x1, 0x4000000000003, 0x8001, 0x0, 0x0, 0x0, 0x0, 0xbd}, 0x0, 0x4c, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) 755.512209ms ago: executing program 2 (id=2581): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000040)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_DELTABLE={0x20, 0x2, 0xa, 0x101, 0x0, 0x0, {0x24de9518afa4b62d, 0x0, 0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x28, 0x2, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x10) 724.716562ms ago: executing program 2 (id=2582): memfd_create(&(0x7f0000000a80)='\x00\xc76\xbe\x91\x8d\x182)!\x9a%\xd9\x19\x17\xb0\xed|\xb3\xc2\x017h\xe9kL\xa2\xd28\xd6\x06\a\x0e\xfc\xfe\x12\x8f&\x13\xae%@T\xa3\xb0>\\\xec\xa9\xf9Q@6A\x10\x8cn|\x00\x00\x00\x00\x00\x00\x00\x00\xeb0\xdd\xe8\x87\x05=\xfb\x8b$\xdcQ\xee\xc5\x1f\x8bQ\xf7fo\"i\xa1hk\x1d\xf5z\xc1\x7f\xa4\\]\xc4\xbe3\xf9\xa8\t?:\xd8\xda\x84\xeepI[\x1c\x00\x00\x00\x00\xf9v\x00\x00\x00\x00\x00T\xb6\xbe\x0f~\xc0\x92\xe9O{\xa8\x81(\x01\x14\xfc\x83\xf9\xfb\x05\x94Tr@Lq]\xf9\x15zj\x87\xc4\x8e\xe8/\xb9-&R\x8e\xb2\xb3bBx\x1e1\x18\x8f2\xf7]#\xed,\xc7\x03\x00\x00\x00\xa3\xee\xcb\xaf\xb3\xe3\'}\x18\xe8O\xa8#K\xb6\xe4R$\xaa\x00U\x92\xd2\x99\xb80x0, &(0x7f00000000c0)=0x4) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000480)={&(0x7f0000000200)="bcee7de743962a39c2459ce17f279bf2fd2f94b5e12eaeff2e1abb1c8e65cb8ac8236df7ccd714a09b0f235edcd7ef1be7a1ebfdfd9a258037d342d7c41f14573f532856da6fd0e1f7227346cd098f3e6fdadc1f191350f51437b90db07233db7aa6d03cdbb2c9427afc2bf5154ed3a1f09cc334703ff6c83f5107c3936a1e3fb456f021d94d33b2b0fa30a0cdf91c679238fdb60e65d1e4ff7f672733d2134854445f05", &(0x7f00000002c0)=""/111, &(0x7f0000000d40)="bcde3e366aaa87572a1f5f36ba7a33bf18175cb5c28aa53881d944d4135f43f5627c2fe3b236a92892cf7a341ef81bd1b58df6c48bd76e897bf861735e86343ff77cf5032c56de15bab06a7b02f1ee1246a558dc6b5db7d2917eb29056dc6d5ad289f54cdeed2036519184273ff07293a70eb2d3c2ff4cc5d25912591fdfaabb2c7ead56c2fba8554e", &(0x7f0000000440), 0xffffffff, r0}, 0x38) sendmsg$GTP_CMD_ECHOREQ(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x70, 0x0, 0x300, 0x70bd26, 0x25dfdbff, {}, [@GTPA_NET_NS_FD={0x8, 0x7, r1}, @GTPA_FAMILY={0x5, 0xd, 0x10}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_MS_ADDRESS={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x1b}}, @GTPA_LINK={0x8, 0x1, r4}, @GTPA_FAMILY={0x5, 0xd, 0xf}, @GTPA_PEER_ADDR6={0x14, 0xb, @remote}, @GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_O_TEI={0x8, 0x9, 0x3}]}, 0x70}, 0x1, 0x0, 0x0, 0x40}, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000003c0)='./file0\x00', 0x200c0d2, &(0x7f0000000400)={[{@usrjquota}]}, 0x21, 0x554, &(0x7f00000007c0)="$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") 603.214271ms ago: executing program 2 (id=2584): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000000)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x18) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x7, 0x0, 0x0, 0x0, 0x40008, 0x590, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x4c58, 0x1, 0x0, 0x0, 0x8, 0x4ac, 0xb, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x1) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00'}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000000002010400000069480000005b4feb2ad6f75eab06c18ef9741bcd33818d2d6fb48bbe1260749296fbe6285eb29a1b40c3a6698f83a91a71fd081e71fa1002cbaf687c5cf94aef3407ea02cadc6cfa89af5a08d461b6"], 0x14}}, 0x0) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000001240)='./bus\x00', 0x4010, &(0x7f0000000280)=ANY=[@ANYRES32, @ANYBLOB="2c62903a5156576085700e3f5b7bdb26506a2c942cf9ee6f4b71c51d874f6a75b0d3079d5c61f4734d5fdb3031763cbaa9316e7aa3549de75a023a9e4296c1868c21e1997af1b5f49c7fe161c5d4514b4faf4453f3537969c2b3628c6b58e8f36febb30ebc615d85a1e668561b4373d8d28a45e66a67fb46da4d3c6e3ee7006750d50621f6258409086c09c7b187c3789ad153b9823f3ba2a69d8a8373b69117cac0e01dd6814c513e3fe5f863cd08a6d91b1800920cc99437fe2e409e54cbb08227155fea1f79b425c6690aea1f836f60a2fbced4f2849f07acbdd02303c9f63d499853e40eeeb2480f64ca91"], 0x1, 0x11ff, &(0x7f0000001280)="$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") r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(r4, 0x0, 0x0) creat(&(0x7f0000000580)='./bus\x00', 0x0) ioctl$KDSKBLED(0xffffffffffffffff, 0x4b65, 0x5) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f00000004c0)='sched_switch\x00', r2}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) timer_create(0x2, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x13, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) sync() sync() socketpair(0x1d, 0x80000, 0x2, &(0x7f0000000300)={0x0, 0x0}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff) 439.468375ms ago: executing program 1 (id=2587): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bf"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000180)='sys_enter\x00', r0}, 0x10) io_uring_register$IORING_REGISTER_EVENTFD(0xffffffffffffffff, 0x4, &(0x7f0000000800), 0x1) 430.115126ms ago: executing program 3 (id=2588): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003140)=[{{0x0, 0x0, &(0x7f0000001b80)=[{&(0x7f0000000e40)="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", 0xbba}], 0x1}}], 0x1, 0x0) epoll_pwait(0xffffffffffffffff, &(0x7f00000003c0)=[{}], 0x1, 0xfffffffb, &(0x7f0000000400)={[0x5ae]}, 0x8) r2 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000a80), 0x2, 0x0) readv(r2, &(0x7f0000000bc0)=[{&(0x7f0000000ac0)=""/214, 0xd6}], 0x1) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x10004, &(0x7f00000000c0), 0x0, 0x4c0, &(0x7f0000000540)="$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") r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="010000000a000000070000000902000040000000", @ANYRES32, @ANYBLOB="0000000000000003000000000000000000000000f8d70e6564ee321a1c55d12f082b11da6d92", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r4 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000002c0)={0x0, 0x8, 0x18}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a80)={0x11, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x40f00, 0x39, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000300)=[r3, r0, r0, r3, r0, r0, r0, r0, r0, r4], &(0x7f0000000a00)=[{0x1, 0x1, 0xc, 0x3}, {0x3, 0x5, 0x9, 0xb}, {0x1, 0x5, 0xc, 0xc}, {0x0, 0x4, 0x7, 0x3}, {0x0, 0x5, 0xf, 0x7}], 0x10, 0x8001}, 0x94) close(0xffffffffffffffff) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x8000000004) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'hsr0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x3a, &(0x7f0000000580)={&(0x7f0000000680)=ANY=[@ANYBLOB="8c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000005000128009000100766c616e0000000040000280060001000000000004000480280003800c00010040000000060000000c0001000004000000000000d8fd010006000000090000000600050088a8000008000a00", @ANYRES32=r7, @ANYBLOB="08000500", @ANYRES32=r7], 0x8c}, 0x1, 0xba01, 0x0, 0x4004001}, 0x0) 363.878461ms ago: executing program 1 (id=2589): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1000}, 0x4000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x18) socketpair(0xf, 0x3, 0x2, &(0x7f00000001c0)) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r3}, 0x8) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c04, &(0x7f0000000340), 0x1, 0x779, &(0x7f0000001900)="$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") r4 = open(&(0x7f00000005c0)='./bus\x00', 0x167842, 0x19) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TCSETS(r5, 0x40045431, &(0x7f0000001200)={0x0, 0xffffff1e, 0xffffffff, 0x4, 0x12, "001bf100eeff0000a2c2000100000000002000"}) r6 = syz_open_pts(r5, 0x101) dup3(r6, r5, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='statm\x00') pwritev2(r4, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0xffffffe4}], 0x1, 0x1400, 0x0, 0x0) 363.556391ms ago: executing program 0 (id=2590): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000040)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_DELTABLE={0x20, 0x2, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x10) 363.012511ms ago: executing program 2 (id=2591): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000006c0), 0x48200, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x2) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xe) symlinkat(&(0x7f0000000000)='.\x00', 0xffffffffffffff9c, 0x0) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000001240)='./bus\x00', 0x14010, &(0x7f0000000d80)=ANY=[@ANYBLOB="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", @ANYRES16], 0x1, 0x1207, &(0x7f0000001280)="$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") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r1, &(0x7f00000001c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x0, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [@ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x815}, 0x40004) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000140), 0x1, 0x4fa, &(0x7f0000000ac0)="$eJzs3c9vG1kdAPCvnThx0uwmu+wBEOyW3YWCqjqJuxut9gDLCSFUCdEjSG1I3CiKHUexU5rQQ3rmikQlTnDkD+DcE3cuCG5cygGJHxGoQeLg1YwnqZvaTdQkdhR/PtJo3ps39fe9pvNe/U3iF8DQuhoRuxExFhF3I2I6u57LjvisfST3Pdt7uLS/93ApF63W7X/l0vbkWnT8mcSV7DWLEfGj70X8NPdy3Mb2ztpitVrZzOqzzdrGbGN758ZqbXGlslJZL5cX5hfmPrn5cfnMxvpebSwrffXpH3e/9fOkW1PZlc5xnKX20AuHcRKjEfGD8wg2ACPZeMYG3RFeSz4i3o6I99PnfzpG0q8mAHCZtVrT0ZrurAMAl10+zYHl8qUsFzAV+Xyp1M7hvROT+Wq90bx+r761vtzOlc1EIX9vtVqZy3KFM1HIJfX5tPy8Xj5SvxkRb0XEL8cn0nppqV5dHuR/fABgiF05sv7/d7y9/gMAl1xx0B0AAPrO+g8Aw8f6DwDDx/oPAMOnvf5PDLobAEAfef8PAMPH+g8AQ+WHt24lR2s/+/zr5fvbW2v1+zeWK421Um1rqbRU39wordTrK+ln9tSOe71qvb4x/1FsPZj59kajOdvY3rlTq2+tN++kn+t9p1JI79rtw8gAgF7eeu/JX3LJivzpRHpEx14OhYH2DDhv+UF3ABiYkUF3ABgYu33B8DrFe3zpAbgkumzR+4Jit18QarVarfPrEnDOrn1J/h+GVUf+308Bw5CR/4fhJf8Pw6vVyp10z/846Y0AwMUmxw/0+P7/29n5d9k3B36yfPSOx+fZKwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALjYDvb/LWV7gU9FPl8qRbwRETNRyN1brVbmIuLNiPjzeGE8qc8PuM8AwGnl/57L9v+6Nv3h1AtN7145LI5FxM9+fftXDxabzc0/RYzl/j1+cL35OLte7n/vAYDjHazT6bnjjfyzvYdLB0c/+/OP70ZEsR1/f28s9g/jj8Zoei5GISIm/5PL6m25jtzFaew+iogvdht/LqbSHEh759Oj8ZPYb/Q1fv6F+Pm0rX1O/i6+cAZ9gWHzJJl/Puv2/OXjanru/vwX0xnq9LL5L3mppf10Dnwe/2D+G+kx/109aYyP/vD9dmni5bZHEV8ejTiIvd8x/xzEz/WI/+EJ4//1K+++36ut9ZuIa9E9fmes2WZtY7axvXNjtba4UlmprJfLC/MLc5/c/Lg8m+aoZ3uvBv/89PqbvdqS8U/2iF88ZvxfP+H4f/v/uz/+2ivif/ODbvHz8c4r4idr4jdOGH9x8vfFXm1J/OUe4z/u63/9hPGf/m3npW3DAYDBaWzvrC1Wq5VNBYWLX0j+yV6AbnQtfKdfscaie9MvPmg/00eaWq3XitVrxjiLrBtwERw+9BHxv0F3BgAAAAAAAAAAAAAA6Kofv7E06DECAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABweX0eAAD//19xzyM=") r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='memory.swap.current\x00', 0x275a, 0x0) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r3, 0xc0185879, &(0x7f0000000680)={0x58f5, 0xfffe, 0x1, 0x5, 0x14, 0x0, 0x2401}) 349.816372ms ago: executing program 0 (id=2592): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRESDEC=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x16, 0xe, &(0x7f0000001480)=ANY=[@ANYBLOB="b702000000000000bfa30000000000000703000000feffff7a0af0fff8ffff1971a4f0ff00000000b7060000080000001e6400000000000045040400010000001704000001000a00b7040000000100006a0af2fe00000000850000001a000000b70000000000000095000000000000009e17f199a68b06d83298a8cdc21ce784909b849d5550ad857d0454d8877a6db61d69f2ffcaa10350e11cb97c8adf1bc9a0c4eeceb9971e43405d621ffbc9ce000000d8ca56b50d0c010d631f6dde53a9a53608c10556e5734eb84049761451ce540c772e2d9f8004e26f7fcc059c062234d55906000000000f0000fd9ac3d09e29a9d542ca9d85a5c9c88474895d679838def0a83a733dc6a39b63a5ed69d32394c53361d7e43c5cbd8000000000000080231c61ccd106cb937b450f859ce8122a79c3e40000b59b0fc46d6cec3c0802882add4e1179bd4a44f231b6d753a7be428ba953df4aece69311687f4122073a236c3a32efa04137d4524847d2638da3261c8162bb7c7824be6195a66d2e17e122040e1100000000928612a29fc691e4f1f7bd053abb885f39381f1759410b1059f05684261f332d606834669b49ec99320ca7712d7e79bd5bf5ed818ecc7640917f6a559a47db608fcf9f6c131b84e41c354c66838f72b9e12d36e996f316f0812ca83efb30c7f6c6d57c4a64590401eec22523dd712c680013e87f649a1ede7142ca9d5d8a8c9f9b440fe4331ad5532c74d9a31a5d737537f7a2caa30581253d14dd3e92af7dc836686365ae01bdec561c0402b67801267a8df97d2f85426a5963d4fa3e26cc05972c162f223f000000d999e80de00fcbcc02d0aed7bb8f7ba337d59c14f39dcd4aad4139ef6425a9367f1bd1467fc6b95a4df7669839771ce9ccd5788029901e5a79d8b9990ace8f74087f25ad50c4608800"/686], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340)}, 0x42) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x0, 0xe, 0x0, &(0x7f0000000080)="05804ab382844306d758e620b9dc", 0x0, 0x12c4, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="600000000206010100000000000000000000000005000100070000000900020073797a30000000001400078005001500f0ffffff080012400000000011000300686173683a69702c6d61726b000000000500050002000000050004"], 0x60}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x1c, 0x3, 0x6, 0x3, 0x0, 0x0, {0xa, 0x0, 0x3}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x20004000) munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000cc0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000380)="75c1cc54649640be1983f79c5bfe88cd6a6a000070ab59578db363168a2559f334d436138406b699de69cb13fd737428808940bcd0940dc930c81aaad8b665cd232c5831977dd63ce2c88d43b17760a6e0df533940a702485bb198e47be6f2b546c27ebfdb041df6bbc2d10b61eb755df569c9cb7c4951ddb54505f67244cd16e376fbbdebc994d22a474b7bc494cafcac137748c8ebff7807053222d67c3ee79861e8cf4ff092236fccfbe08dcb5d7c2ba08b25883740695452a401800e63c157d64d90e4108e5eb8e917c00e9e52df03723ce3", 0xd4}, {&(0x7f0000000f80)="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", 0x205}, {&(0x7f00000004c0)="ef28a240204d11", 0x7}], 0x3}, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x45, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r6}, 0x10) r7 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r7, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10) bind$tipc(r7, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x1}, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000001000010700020100000000000a0000000600010016"], 0x1c}}, 0x0) 344.458892ms ago: executing program 4 (id=2593): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) 241.786681ms ago: executing program 4 (id=2594): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000008da4b70800000400396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000100)='kfree\x00', r0, 0x0, 0x8000000000}, 0x18) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x80044944, 0x0) r1 = getpid() r2 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0x6, &(0x7f0000000bc0)=ANY=[@ANYBLOB="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", @ANYRES16=r2, @ANYRES16, @ANYBLOB="5dd40f7df0a5a32bb8cfc090384739bf8784a0b5b1ac602fb3a9780b097a8efb2b669bb8e07b29b3f12fb85ed8851566f2ff890dd5b3533ff5160b63ccf6dab135f33ddf4f90ccf4c5b2af533621b3ac93f91e6c986292ead8106c", @ANYRESOCT=r1], &(0x7f0000000200)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0xc, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000900)=@newtaction={0x8c, 0x30, 0xb, 0x5, 0x0, {}, [{0x78, 0x1, [@m_ct={0x74, 0x1, 0x0, 0x0, {{0x7}, {0x4c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x80000001, 0x0, 0x0, 0x0, 0x400}}, @TCA_CT_ACTION={0x6, 0x3, 0x19}, @TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @private=0xa010102}, @TCA_CT_NAT_IPV4_MAX={0x8, 0xa, @initdev={0xac, 0x1e, 0x1, 0x0}}, @TCA_CT_MARK={0x8, 0x5, 0x9}, @TCA_CT_NAT_PORT_MIN={0x6, 0xd, 0x4e27}, @TCA_CT_MARK_MASK={0x8, 0x6, 0x8000}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x8890}, 0x40) 241.338891ms ago: executing program 0 (id=2595): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x1f, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="4000000010000304fcff", @ANYRES32=0x0, @ANYBLOB], 0x40}, 0x1, 0x300000000000000, 0x0, 0x4004}, 0x0) 215.100393ms ago: executing program 4 (id=2596): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = socket$kcm(0x29, 0x2, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB="c6773cf6"], 0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) connect$netlink(r2, &(0x7f0000000280)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r3, @ANYBLOB], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x18) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c00000021000f0000f901000000000002"], 0x1c}}, 0x0) close(r1) r5 = socket$kcm(0x2b, 0x1, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r6 = open$dir(&(0x7f0000000100)='./file0\x00', 0x149800, 0x0) poll(&(0x7f00000000c0)=[{r6, 0x80}, {r6, 0x2000}], 0x2, 0x101) creat(&(0x7f0000000080)='./file0\x00', 0x8) close(r5) sendmsg$inet(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10, &(0x7f0000000400)=[{&(0x7f0000000800)="07974d66a92175e5e27486ecea73f158d397ae07ccf6af116fcbd824db17e7b8fb24534544ec6e01f0e6208ed0d403ed5d80f7a8c849552282ba2867a393ef85d9a3e8a341d59db5cf4f53bbffdc8d10cc2948a326dfa43768a663953e0a272d8ccc83f903918b283dd5f19cb0982ff97e1847b11acc13beb3cf23bede40e72328b3f096b3223b9d146ecfc2c0691f1723", 0x91}, {&(0x7f0000000a80)="8cb351c4a834f86627c703cd618c6269f06e72b247dc84103a9d9aed9fa1f599b2cce8e6b5a7b6428125dbf5d38014a2591970de1f2e2477593f91adec82b33de91ffd7c58879b1f94d4afe92dbf3fe5c3f8816270efc91f70dfbbe91c15dfa09f2df82f50726a87d004e7b0216306708b09f1113b275bc18c8f418558c0b100a0e15bfa46ee49f231d230733b1acb65a55ad6d7332cd8773ed8168f6b8ab28a9dcd20996e737fd66069010664954aa3a5053b4ff64412757a6b30b72e7a5b327214e54f0d0979bbf15b2e43b27414dc762ef28230c32907a3773151847306ed", 0xffffff7f}, {&(0x7f0000000500)="4debcaf035854e0aecbf2c46040877cbcf901dacbf6cb1430e2520f807df8f36268fcf86baf3a4cde571b21d46ca5b6d00e255bf1267a820962706e27e1699a5dadb08b17da194631d55431f6f1b05f9471ceba15b0221292154afab4cb04f155c644dbaecacb1bdcb46592400fc0fb9c798cb9b42f4ccdeef4670c8b66a7bf08d020cfa5a52179d6497e42795e89b0d4cb765ccf594293301a1e7f7a69fa69478fdbcf098fcd788db063de655714181143e3bae470931daadc1ebe788918d36e092dd57891bb582a2", 0x126}, {&(0x7f00000002c0)="2ee8d4fdf35aee52cbe8b85ffa4214d7d1f034a0a0c01b88d4", 0x19}], 0x4, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x158}, 0x40) setsockopt$sock_attach_bpf(r1, 0x1, 0xd, &(0x7f0000000080), 0x2cb) close(r5) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_ENABLE(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16, @ANYBLOB="01000000001963b25fe487e1e8005800018044000400200001000a000004000000020000000000004000000000000000000100000000200002000a00000000000000fe8000000000000000000000000000bb000000000d0001007564703a73797a2600000000"], 0x6c}}, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="5000000027000100000000000000000a01"], 0x50}}, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000040), 0x4) write$binfmt_misc(r0, &(0x7f0000000100), 0xfdef) 195.078514ms ago: executing program 0 (id=2597): bpf$MAP_CREATE(0x0, &(0x7f0000001780)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xd, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0000}]}) r0 = add_key$keyring(&(0x7f0000000080), &(0x7f0000000340)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000240)='asymmetric\x00', &(0x7f00000000c0)=@chain) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000010c0)=ANY=[], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1}, 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[], 0x0, 0x7ff}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8923, &(0x7f0000000000)={'vlan1\x00', @broadcast}) socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702507aa71ea6e6cfde87b1a3167a37c34e401f8ff00000000bfa10000000000f107010000f8ffffffb702000004000000b7030000000000008500"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xe, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='rpcgss_createauth\x00', r6, 0x0, 0x3}, 0x18) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) pwritev2(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x76200}], 0x1, 0x7c00, 0x0, 0x3) r9 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x143a82, 0x8) r10 = dup(r9) r11 = open(&(0x7f0000000100)='./bus\x00', 0x40542, 0x0) sendfile(r10, r11, 0x0, 0x8000fffffffe) sendmsg$ETHTOOL_MSG_PAUSE_GET(r7, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000200)=ANY=[@ANYRES16=r3, @ANYRES16=r8, @ANYBLOB="010026bd70000000000021040000180001801400020064756d6d7930"], 0x2c}, 0x1, 0x0, 0x0, 0x2008040}, 0x880) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x64, 0x5, 0x0, 0x0, 0x0, 0x8, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={&(0x7f00000001c0)}, 0x2, 0x2, 0x7, 0x1, 0x4000000000003, 0x8001, 0x0, 0x0, 0x0, 0x0, 0xbd}, 0x0, 0x4c, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) 118.202081ms ago: executing program 0 (id=2598): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) fallocate(r0, 0x1, 0x2, 0xf0a7) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1802000000"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x18) socketpair(0xf, 0x3, 0x2, &(0x7f00000001c0)) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2000006, 0x31, 0xffffffffffffffff, 0xd0fb6000) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r2}, 0x8) syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c04, &(0x7f0000000340), 0x1, 0x779, &(0x7f0000001900)="$eJzs3c9rXNUeAPDvnSRNm/a95MGD9+oqIGigdGJqbBVcVFyIYKGga9thMg01k0zJTEoTAlpEcCOouBB007U/6s6tP7b6X7gQS9W0WHEhkTuZ206bmWmSJjPV+XzgZs65907O+c79cc7MPdwbQN8aT//kIg5HxLtJxGhjfhIRQ/XUYMTJjfVura0W0ymJ9fWXf0nq69xcWy1G03tSBxuZ/0fEN29FHMltLre6vDJXKJdLi438ZG3+wmR1eeXo+fnCbGm2tHB8anr62ImnThzfvVh/+37l0LX3Xnj885N/vPm/q+98m8TJONRY1hzHbhmP8cZnMpR+hHd5frcL67Gk1xVgR9JDc2DjKI/DMRoD9RQA8E/2ekSsAwB9JtH+A0CfyX4HuLm2Wsym3v4i0V3Xn4uI/RvxZ9c3N5YMNq7Z7a9fBx25mdx1ZSSJiLFdKH88Ij7+8tVP0yn26DokQCtvXI6Is2Pjm8//yaYxC9v1RIdl+xqv4/fMd/6D7vkq7f883ar/l7vd/4kW/Z/hFsfuTtz3+D+wC4V0kPb/nm0a23arKf6GsYFG7l/1Pt9Qcu58uZSe2/4dERMxNJzmpzqUMXHjzxvtljX3/359/7VP0vLT1ztr5H4aHL77PTOFWuFBYm52/XLEI4Ot4k9ub/+kTf/39BbLePGZtz9qtyyNP403mzbHH43RSXtj/UrEYy23/50RbUnH8YmT9d1hMtspWvjihw9H2pXfvP3TKS0/+y7QDen2H+kc/1jSPF6zuv0yvrsy+nW7ZfePv/X+vy95pZ7O+hGXCrXa4lTEvuSlzfOP3Xlvls/WT+OfeLT18d9p/0+/E57dYvyD137+bOfx7600/pltbf/tJ67emhtoV/7Wtv90PTXRmLOV899WK/ggnx0AAAAAAAAAAAAAAAAAAAAAAAAAbFUuIg5FksvfTudy+fzGM7z/GyO5cqVaO3KusrQwE/VnZY/FUC671eVo0/1Qpxr3w8/yx+7JPxkR/4mID4YPJNl9FGd6HDsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAZA62ef5/6sfhXtcOANgz+3tdAQCg67T/ANB/tP8A0H+0/wDQf7T/ANB/tP8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADssdOnTqXT+u9rq8U0P3NxeWmucvHoTKk6l59fKuaLlcUL+dlKZbZcyhcr8/f7f+VK5cJ0LCxdmqyVqrXJ6vLKmfnK0kLtzPn5wmzpTGmoK1EBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwPZUl1fmCuVyaVFiB4n1h6MavU8MNHanh6U+XU0kD0c1djnR6ayR687JCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOBv4K8AAAD//8yLIwE=") r3 = open(&(0x7f00000005c0)='./bus\x00', 0x167842, 0x19) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) pwritev2(r3, 0x0, 0x0, 0x1400, 0x0, 0x0) 106.675342ms ago: executing program 3 (id=2599): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000660000000000"], 0x0, 0x7ff}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) creat(&(0x7f00000000c0)='./file0\x00', 0x9c) stat(&(0x7f0000001c40)='./file0\x00', &(0x7f0000001c80)) 45.033747ms ago: executing program 0 (id=2600): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000180)='sys_enter\x00', r0}, 0x10) io_uring_register$IORING_REGISTER_EVENTFD(0xffffffffffffffff, 0x4, &(0x7f0000000800), 0x1) 0s ago: executing program 3 (id=2601): r0 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) ioctl$BTRFS_IOC_ADD_DEV(r0, 0x5000940a, &(0x7f0000000740)={{r0}, "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"}) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, 0x0, &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$F2FS_IOC_START_VOLATILE_WRITE(0xffffffffffffffff, 0xf503, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={0x0}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, &(0x7f0000000080)}) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x80800) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) shmat(0x0, &(0x7f0000ffc000/0x3000)=nil, 0x4000) kernel console output (not intermixed with test programs): 94967295 subj=root:sysadm_r:sysadm_t pid=12352 comm="syz.3.1900" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fdbc4ebe9 code=0x7ffc0000 [ 199.438009][T12369] loop3: detected capacity change from 0 to 2048 [ 199.820935][T12374] loop2: detected capacity change from 0 to 2048 [ 199.841492][T12375] loop4: detected capacity change from 0 to 2048 [ 199.907047][T12379] FAULT_INJECTION: forcing a failure. [ 199.907047][T12379] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 199.920231][T12379] CPU: 0 UID: 0 PID: 12379 Comm: syz.3.1905 Tainted: G W 6.16.0-syzkaller-12245-g2988dfed8a5d #0 PREEMPT(voluntary) [ 199.920312][T12379] Tainted: [W]=WARN [ 199.920320][T12379] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 199.920338][T12379] Call Trace: [ 199.920343][T12379] [ 199.920349][T12379] __dump_stack+0x1d/0x30 [ 199.920368][T12379] dump_stack_lvl+0xe8/0x140 [ 199.920386][T12379] dump_stack+0x15/0x1b [ 199.920403][T12379] should_fail_ex+0x265/0x280 [ 199.920485][T12379] should_fail+0xb/0x20 [ 199.920505][T12379] should_fail_usercopy+0x1a/0x20 [ 199.920528][T12379] _copy_from_user+0x1c/0xb0 [ 199.920560][T12379] ___sys_sendmsg+0xc1/0x1d0 [ 199.920651][T12379] __sys_sendmmsg+0x178/0x300 [ 199.920684][T12379] __x64_sys_sendmmsg+0x57/0x70 [ 199.920709][T12379] x64_sys_call+0x1c4a/0x2ff0 [ 199.920732][T12379] do_syscall_64+0xd2/0x200 [ 199.920799][T12379] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 199.920826][T12379] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 199.920906][T12379] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 199.920928][T12379] RIP: 0033:0x7f6fdbc4ebe9 [ 199.920955][T12379] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 199.920975][T12379] RSP: 002b:00007f6fda6b7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 199.921001][T12379] RAX: ffffffffffffffda RBX: 00007f6fdbe75fa0 RCX: 00007f6fdbc4ebe9 [ 199.921016][T12379] RDX: 000000000800001d RSI: 0000200000007fc0 RDI: 0000000000000003 [ 199.921030][T12379] RBP: 00007f6fda6b7090 R08: 0000000000000000 R09: 0000000000000000 [ 199.921041][T12379] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 199.921053][T12379] R13: 00007f6fdbe76038 R14: 00007f6fdbe75fa0 R15: 00007ffd3a2ed848 [ 199.921074][T12379] [ 200.250461][ T6377] hid_parser_main: 54 callbacks suppressed [ 200.250479][ T6377] hid-generic 0000:0000:0000.001E: unknown main item tag 0x1 [ 200.263790][ T6377] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 200.271177][ T6377] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 200.278587][ T6377] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 200.286060][ T6377] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 200.296304][ T29] audit: type=1400 audit(1754802268.333:9453): avc: denied { read write } for pid=12384 comm="syz.3.1907" name="uhid" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 200.397302][ T6377] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 200.404758][ T6377] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 200.412162][ T6377] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 200.419593][ T6377] hid-generic 0000:0000:0000.001E: unknown main item tag 0x2 [ 200.426988][ T6377] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 200.468404][T12383] loop0: detected capacity change from 0 to 2048 [ 200.507641][ T6377] hid-generic 0000:0000:0000.001E: hidraw0: HID v0.00 Device [syz0] on syz1 [ 200.556076][T12387] fido_id[12387]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 200.611811][T12395] loop4: detected capacity change from 0 to 512 [ 200.644213][T12395] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 200.677233][T12395] EXT4-fs error (device loop4): ext4_quota_enable:7120: comm syz.4.1909: Bad quota inum: 29696, type: 1 [ 200.707218][T12398] loop2: detected capacity change from 0 to 8192 [ 200.714051][T12395] EXT4-fs warning (device loop4): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=29696). Please run e2fsck to fix. [ 200.730637][T12398] vfat: Unknown parameter 'ÿÿÿÿ' [ 200.779632][T12395] EXT4-fs (loop4): mount failed [ 200.804341][T12409] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.876634][T12409] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.964355][T12409] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.993646][T12415] loop2: detected capacity change from 0 to 8192 [ 201.014364][T12409] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.059759][ T56] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.085278][ T56] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.108522][T12412] loop4: detected capacity change from 0 to 2048 [ 201.113297][ T56] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.140628][ T56] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.159009][T12420] loop0: detected capacity change from 0 to 2048 [ 201.254801][T12431] loop4: detected capacity change from 0 to 512 [ 201.280638][T12431] EXT4-fs error (device loop4): ext4_orphan_get:1392: inode #15: comm syz.4.1919: iget: bad extended attribute block 1 [ 201.303249][T12431] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.1919: couldn't read orphan inode 15 (err -117) [ 201.607238][T12443] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1924'. [ 201.628100][ T3438] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.639177][ T3438] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.672870][ T56] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.682490][T12434] loop4: detected capacity change from 0 to 2048 [ 201.710170][ T56] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.803538][T12455] vhci_hcd: invalid port number 85 [ 201.808670][T12455] vhci_hcd: default hub control req: 0501 v0005 i0055 l4 [ 201.829792][T12458] loop1: detected capacity change from 0 to 1024 [ 201.878118][T12458] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 201.912745][T12458] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 201.937845][T12458] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 201.949324][T12461] ipvlan2: entered promiscuous mode [ 201.955873][T12461] bridge0: port 3(ipvlan2) entered blocking state [ 201.962413][T12461] bridge0: port 3(ipvlan2) entered disabled state [ 201.984508][T12461] ipvlan2: entered allmulticast mode [ 201.989837][T12461] bridge0: entered allmulticast mode [ 201.998626][T12458] EXT4-fs (loop1): orphan cleanup on readonly fs [ 202.033436][T12461] ipvlan2: left allmulticast mode [ 202.038520][T12461] bridge0: left allmulticast mode [ 202.046033][T12458] EXT4-fs error (device loop1): ext4_free_blocks:6696: comm syz.1.1930: Freeing blocks not in datazone - block = 0, count = 4096 [ 202.050877][T12465] loop3: detected capacity change from 0 to 2048 [ 202.067578][T12458] EXT4-fs (loop1): Remounting filesystem read-only [ 202.089106][T12458] EXT4-fs (loop1): 1 orphan inode deleted [ 202.173422][T12473] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1935'. [ 202.189935][T12470] loop2: detected capacity change from 0 to 2048 [ 202.218682][T12476] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1936'. [ 202.279319][T12480] FAULT_INJECTION: forcing a failure. [ 202.279319][T12480] name failslab, interval 1, probability 0, space 0, times 0 [ 202.291976][T12480] CPU: 1 UID: 0 PID: 12480 Comm: syz.0.1937 Tainted: G W 6.16.0-syzkaller-12245-g2988dfed8a5d #0 PREEMPT(voluntary) [ 202.292007][T12480] Tainted: [W]=WARN [ 202.292014][T12480] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 202.292027][T12480] Call Trace: [ 202.292034][T12480] [ 202.292113][T12480] __dump_stack+0x1d/0x30 [ 202.292136][T12480] dump_stack_lvl+0xe8/0x140 [ 202.292156][T12480] dump_stack+0x15/0x1b [ 202.292288][T12480] should_fail_ex+0x265/0x280 [ 202.292310][T12480] ? xfrm_policy_alloc+0x62/0x1b0 [ 202.292328][T12480] should_failslab+0x8c/0xb0 [ 202.292351][T12480] __kmalloc_cache_noprof+0x4c/0x320 [ 202.292440][T12480] xfrm_policy_alloc+0x62/0x1b0 [ 202.292510][T12480] pfkey_compile_policy+0x193/0x410 [ 202.292569][T12480] ? xfrm_compile_policy+0x106/0x240 [ 202.292604][T12480] ? __pfx_pfkey_compile_policy+0x10/0x10 [ 202.292628][T12480] xfrm_user_policy+0x294/0x540 [ 202.292697][T12480] do_ipv6_setsockopt+0x1266/0x2160 [ 202.292734][T12480] ? kstrtoull+0x111/0x140 [ 202.292751][T12480] ? __rcu_read_unlock+0x4f/0x70 [ 202.292805][T12480] ? avc_has_perm_noaudit+0x1b1/0x200 [ 202.292829][T12480] ? selinux_netlbl_socket_setsockopt+0x1f9/0x2d0 [ 202.292864][T12480] ipv6_setsockopt+0x59/0x130 [ 202.292951][T12480] rawv6_setsockopt+0x1d2/0x420 [ 202.292973][T12480] sock_common_setsockopt+0x69/0x80 [ 202.293001][T12480] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 202.293094][T12480] __sys_setsockopt+0x181/0x200 [ 202.293117][T12480] __x64_sys_setsockopt+0x64/0x80 [ 202.293138][T12480] x64_sys_call+0x20ec/0x2ff0 [ 202.293159][T12480] do_syscall_64+0xd2/0x200 [ 202.293252][T12480] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 202.293277][T12480] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 202.293377][T12480] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 202.293397][T12480] RIP: 0033:0x7fbdc066ebe9 [ 202.293410][T12480] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 202.293427][T12480] RSP: 002b:00007fbdbf0cf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 202.293447][T12480] RAX: ffffffffffffffda RBX: 00007fbdc0895fa0 RCX: 00007fbdc066ebe9 [ 202.293461][T12480] RDX: 0000000000000022 RSI: 0000000000000029 RDI: 0000000000000004 [ 202.293506][T12480] RBP: 00007fbdbf0cf090 R08: 000000000000005c R09: 0000000000000000 [ 202.293518][T12480] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 202.293534][T12480] R13: 00007fbdc0896038 R14: 00007fbdc0895fa0 R15: 00007ffe6305fab8 [ 202.293554][T12480] [ 202.544156][T12474] loop1: detected capacity change from 0 to 8192 [ 202.665040][T12485] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.695985][T12489] loop3: detected capacity change from 0 to 512 [ 202.714277][T12485] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.725271][T12489] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 202.770101][T12489] EXT4-fs error (device loop3): ext4_quota_enable:7120: comm syz.3.1941: Bad quota inum: 29696, type: 1 [ 202.792652][T12489] EXT4-fs warning (device loop3): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=29696). Please run e2fsck to fix. [ 202.809468][T12485] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.814931][T12489] EXT4-fs (loop3): mount failed [ 202.833716][T12494] vlan1: entered allmulticast mode [ 202.865512][T12485] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.937385][T12503] FAULT_INJECTION: forcing a failure. [ 202.937385][T12503] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 202.950175][ T56] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.950602][T12503] CPU: 0 UID: 0 PID: 12503 Comm: syz.3.1945 Tainted: G W 6.16.0-syzkaller-12245-g2988dfed8a5d #0 PREEMPT(voluntary) [ 202.950637][T12503] Tainted: [W]=WARN [ 202.950644][T12503] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 202.950688][T12503] Call Trace: [ 202.950694][T12503] [ 202.950701][T12503] __dump_stack+0x1d/0x30 [ 202.950724][T12503] dump_stack_lvl+0xe8/0x140 [ 202.950744][T12503] dump_stack+0x15/0x1b [ 202.950762][T12503] should_fail_ex+0x265/0x280 [ 202.950785][T12503] should_fail+0xb/0x20 [ 202.950804][T12503] should_fail_usercopy+0x1a/0x20 [ 202.950866][T12503] _copy_from_user+0x1c/0xb0 [ 202.950896][T12503] __sys_connect+0xd0/0x2b0 [ 202.950941][T12503] __x64_sys_connect+0x3f/0x50 [ 202.950974][T12503] x64_sys_call+0x2c08/0x2ff0 [ 202.951038][T12503] do_syscall_64+0xd2/0x200 [ 202.951066][T12503] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 202.951092][T12503] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 202.951188][T12503] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 202.951211][T12503] RIP: 0033:0x7f6fdbc4ebe9 [ 202.951227][T12503] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 202.951246][T12503] RSP: 002b:00007f6fda6b7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 202.951266][T12503] RAX: ffffffffffffffda RBX: 00007f6fdbe75fa0 RCX: 00007f6fdbc4ebe9 [ 202.951299][T12503] RDX: 0000000000000010 RSI: 00002000000002c0 RDI: 0000000000000006 [ 202.951313][T12503] RBP: 00007f6fda6b7090 R08: 0000000000000000 R09: 0000000000000000 [ 202.951326][T12503] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 202.951340][T12503] R13: 00007f6fdbe76038 R14: 00007f6fdbe75fa0 R15: 00007ffd3a2ed848 [ 202.951359][T12503] [ 203.136515][ T56] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.144859][ T56] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.156009][T12511] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1944'. [ 203.166976][ T56] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.194244][T12506] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 203.195749][T12500] loop0: detected capacity change from 0 to 512 [ 203.210707][T12506] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 203.255945][T12500] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 203.267377][T12506] netlink: 'syz.3.1946': attribute type 1 has an invalid length. [ 203.272871][T12500] SELinux: policydb magic number 0x7361656d does not match expected magic number 0xf97cff8c [ 203.292695][T12500] SELinux: failed to load policy [ 203.309168][T12506] loop3: detected capacity change from 0 to 512 [ 203.330173][T12506] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 203.363484][T12506] EXT4-fs (loop3): 1 truncate cleaned up [ 203.461428][T12547] FAULT_INJECTION: forcing a failure. [ 203.461428][T12547] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 203.474531][T12547] CPU: 0 UID: 0 PID: 12547 Comm: syz.0.1953 Tainted: G W 6.16.0-syzkaller-12245-g2988dfed8a5d #0 PREEMPT(voluntary) [ 203.474570][T12547] Tainted: [W]=WARN [ 203.474577][T12547] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 203.474591][T12547] Call Trace: [ 203.474598][T12547] [ 203.474605][T12547] __dump_stack+0x1d/0x30 [ 203.474696][T12547] dump_stack_lvl+0xe8/0x140 [ 203.474766][T12547] dump_stack+0x15/0x1b [ 203.474793][T12547] should_fail_ex+0x265/0x280 [ 203.474817][T12547] should_fail+0xb/0x20 [ 203.474836][T12547] should_fail_usercopy+0x1a/0x20 [ 203.474861][T12547] _copy_to_user+0x20/0xa0 [ 203.474972][T12547] simple_read_from_buffer+0xb5/0x130 [ 203.474997][T12547] proc_fail_nth_read+0x10e/0x150 [ 203.475028][T12547] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 203.475058][T12547] vfs_read+0x1a8/0x770 [ 203.475191][T12547] ? __fput+0x555/0x650 [ 203.475221][T12547] ? __rcu_read_unlock+0x4f/0x70 [ 203.475242][T12547] ? __fget_files+0x184/0x1c0 [ 203.475272][T12547] ksys_read+0xda/0x1a0 [ 203.475303][T12547] __x64_sys_read+0x40/0x50 [ 203.475328][T12547] x64_sys_call+0x27bc/0x2ff0 [ 203.475352][T12547] do_syscall_64+0xd2/0x200 [ 203.475381][T12547] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 203.475476][T12547] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 203.475552][T12547] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 203.475574][T12547] RIP: 0033:0x7fbdc066d5fc [ 203.475590][T12547] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 203.475610][T12547] RSP: 002b:00007fbdbf0cf030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 203.475667][T12547] RAX: ffffffffffffffda RBX: 00007fbdc0895fa0 RCX: 00007fbdc066d5fc [ 203.475681][T12547] RDX: 000000000000000f RSI: 00007fbdbf0cf0a0 RDI: 0000000000000007 [ 203.475695][T12547] RBP: 00007fbdbf0cf090 R08: 0000000000000000 R09: 0000000000000000 [ 203.475709][T12547] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 203.475723][T12547] R13: 00007fbdc0896038 R14: 00007fbdc0895fa0 R15: 00007ffe6305fab8 [ 203.475744][T12547] [ 203.509064][T12528] loop1: detected capacity change from 0 to 2048 [ 203.579360][T12553] loop0: detected capacity change from 0 to 512 [ 203.594699][T12553] EXT4-fs (loop0): blocks per group (71) and clusters per group (20800) inconsistent [ 203.746006][T12542] loop4: detected capacity change from 0 to 2048 [ 203.755760][T12553] netlink: 328 bytes leftover after parsing attributes in process `syz.0.1954'. [ 203.797405][T12564] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1955'. [ 204.026082][T12575] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=12575 comm=syz.2.1960 [ 204.028853][T12573] loop0: detected capacity change from 0 to 2048 [ 204.038646][T12575] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=12575 comm=syz.2.1960 [ 204.072869][T12577] netlink: 'syz.3.1959': attribute type 9 has an invalid length. [ 204.186890][ T29] kauditd_printk_skb: 138 callbacks suppressed [ 204.186906][ T29] audit: type=1326 audit(1754802272.274:9590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12583 comm="syz.2.1963" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb724a4ebe9 code=0x7ffc0000 [ 204.216689][ T29] audit: type=1326 audit(1754802272.274:9591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12583 comm="syz.2.1963" exe="/root/syz-executor" sig=0 arch=c000003e syscall=441 compat=0 ip=0x7fb724a4ebe9 code=0x7ffc0000 [ 204.240177][ T29] audit: type=1326 audit(1754802272.274:9592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12583 comm="syz.2.1963" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb724a4ebe9 code=0x7ffc0000 [ 204.268964][T12592] loop3: detected capacity change from 0 to 1024 [ 204.309388][T12592] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 204.320318][T12592] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 204.333389][T12594] lo speed is unknown, defaulting to 1000 [ 204.343453][T12598] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1965'. [ 204.371466][T12596] loop0: detected capacity change from 0 to 8192 [ 204.377896][T12592] JBD2: no valid journal superblock found [ 204.383658][T12592] EXT4-fs (loop3): Could not load journal inode [ 204.456297][T12602] loop0: detected capacity change from 0 to 128 [ 204.490579][T12602] ext4 filesystem being mounted at /376/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 204.504421][ T29] audit: type=1400 audit(1754802272.594:9593): avc: denied { create } for pid=12601 comm="syz.0.1967" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 204.540853][T12606] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1968'. [ 204.580718][T12608] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1969'. [ 204.620404][T12610] loop4: detected capacity change from 0 to 512 [ 204.627683][T12610] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 204.643786][T12610] EXT4-fs error (device loop4): ext4_quota_enable:7120: comm syz.4.1970: Bad quota inum: 29696, type: 1 [ 204.663324][T12610] EXT4-fs warning (device loop4): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=29696). Please run e2fsck to fix. [ 204.679359][T12600] loop2: detected capacity change from 0 to 2048 [ 204.684047][T12610] EXT4-fs (loop4): mount failed [ 204.736431][T12617] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 204.756616][ T29] audit: type=1400 audit(1754802272.844:9594): avc: denied { create } for pid=12616 comm="syz.4.1971" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 204.783177][T12617] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1971'. [ 204.811938][T12617] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 204.819482][ T29] audit: type=1400 audit(1754802272.904:9595): avc: denied { relabelfrom } for pid=12618 comm="syz.1.1972" name="" dev="pipefs" ino=27226 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 204.846615][T12619] veth1_to_team: entered promiscuous mode [ 204.853632][T12619] bond_slave_0: entered promiscuous mode [ 204.859889][T12619] bond_slave_0: left promiscuous mode [ 204.866355][T12619] veth1_to_team: left promiscuous mode [ 204.934146][ T29] audit: type=1400 audit(1754802273.024:9596): avc: denied { create } for pid=12601 comm="syz.0.1967" name="encrypted_dir" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 205.071237][ T29] audit: type=1326 audit(1754802273.154:9597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12625 comm="syz.3.1974" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fdbc4ebe9 code=0x7ffc0000 [ 205.170610][ T29] audit: type=1326 audit(1754802273.184:9598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12625 comm="syz.3.1974" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6fdbc4ebe9 code=0x7ffc0000 [ 205.194153][ T29] audit: type=1326 audit(1754802273.184:9599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12625 comm="syz.3.1974" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fdbc4ebe9 code=0x7ffc0000 [ 205.300199][T12623] loop4: detected capacity change from 0 to 2048 [ 205.593306][T12658] process 'syz.3.1983' launched './file0' with NULL argv: empty string added [ 205.627105][T12654] loop0: detected capacity change from 0 to 2048 [ 205.716972][T12650] loop2: detected capacity change from 0 to 2048 [ 205.737129][T12664] loop3: detected capacity change from 0 to 8192 [ 205.745379][T12664] /dev/loop3: Can't open blockdev [ 206.324597][T12678] loop0: detected capacity change from 0 to 2048 [ 206.356219][T12685] rdma_op ffff8881042e0d80 conn xmit_rdma 0000000000000000 [ 206.377032][T12678] 9pnet_fd: Insufficient options for proto=fd [ 206.573214][T12697] loop1: detected capacity change from 0 to 2048 [ 206.657745][T12699] loop2: detected capacity change from 0 to 8192 [ 206.674107][T12699] vfat: Unknown parameter 'ÿÿÿÿ' [ 206.833292][T12703] loop1: detected capacity change from 0 to 2048 [ 206.842848][T12705] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.904148][T12705] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.916230][T12711] __nla_validate_parse: 2 callbacks suppressed [ 206.916244][T12711] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2000'. [ 206.998445][T12715] loop1: detected capacity change from 0 to 512 [ 207.005372][T12715] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 207.005595][T12705] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.031495][T12717] loop0: detected capacity change from 0 to 1024 [ 207.041902][T12715] EXT4-fs error (device loop1): ext4_quota_enable:7120: comm syz.1.2002: Bad quota inum: 29696, type: 1 [ 207.061180][T12715] EXT4-fs warning (device loop1): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=29696). Please run e2fsck to fix. [ 207.063331][T12717] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 207.102833][T12715] EXT4-fs (loop1): mount failed [ 207.111001][T12717] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:483: comm syz.0.2003: Invalid block bitmap block 0 in block_group 0 [ 207.126339][T12717] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.2003: Failed to acquire dquot type 0 [ 207.137854][T12717] EXT4-fs error (device loop0): ext4_free_blocks:6696: comm syz.0.2003: Freeing blocks not in datazone - block = 0, count = 4096 [ 207.152347][T12717] EXT4-fs error (device loop0): ext4_read_inode_bitmap:139: comm syz.0.2003: Invalid inode bitmap blk 0 in block_group 0 [ 207.165826][T12705] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.182374][T12717] EXT4-fs error (device loop0) in ext4_free_inode:361: Corrupt filesystem [ 207.196008][ T31] EXT4-fs error (device loop0): ext4_release_dquot:6969: comm kworker/u8:1: Failed to release dquot type 0 [ 207.217945][T12722] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 207.241712][T12717] EXT4-fs (loop0): 1 orphan inode deleted [ 207.248424][T12713] loop2: detected capacity change from 0 to 2048 [ 207.262337][T12717] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.2003: Failed to acquire dquot type 0 [ 207.279337][T12722] unsupported nla_type 52263 [ 207.307053][T12724] loop3: detected capacity change from 0 to 8192 [ 207.314576][ T31] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.323213][T12724] vfat: Unknown parameter 'ÿÿÿÿ' [ 207.332873][ T3438] EXT4-fs error (device loop0): ext4_release_dquot:6969: comm kworker/u8:7: Failed to release dquot type 0 [ 207.344555][ T2649] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.379979][ T3438] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.388315][ T3438] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.411612][T12730] netlink: 1276 bytes leftover after parsing attributes in process `syz.1.2006'. [ 207.509104][T12735] loop4: detected capacity change from 0 to 512 [ 207.529428][T12735] ext4: Unknown parameter 'noacl' [ 207.570739][T12737] loop3: detected capacity change from 0 to 8192 [ 208.332280][T12753] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2014'. [ 208.383606][T12746] loop1: detected capacity change from 0 to 2048 [ 208.507598][T12759] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2016'. [ 208.617599][ T10] hid_parser_main: 22 callbacks suppressed [ 208.617619][ T10] hid-generic 0000:0000:0000.001F: unknown main item tag 0x1 [ 208.631097][ T10] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 208.638682][ T10] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 208.646202][ T10] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 208.653750][ T10] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 208.719142][ T10] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 208.726788][ T10] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 208.734368][ T10] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 208.741880][ T10] hid-generic 0000:0000:0000.001F: unknown main item tag 0x2 [ 208.749383][ T10] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 208.772310][T12755] IPv6: sit1: Disabled Multicast RS [ 208.788641][T12755] sit1: entered allmulticast mode [ 208.841305][ T10] hid-generic 0000:0000:0000.001F: hidraw0: HID v0.00 Device [syz0] on syz1 [ 208.884411][T12769] loop1: detected capacity change from 0 to 8192 [ 208.895638][T12770] fido_id[12770]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 208.911111][T12769] vfat: Unknown parameter 'ÿÿÿÿ' [ 209.085611][T12763] loop3: detected capacity change from 0 to 2048 [ 209.100218][T12779] loop1: detected capacity change from 0 to 2048 [ 209.172578][T12781] loop4: detected capacity change from 0 to 2048 [ 209.309298][T12789] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 209.334652][T12772] loop2: detected capacity change from 0 to 2048 [ 209.512672][ T29] kauditd_printk_skb: 311 callbacks suppressed [ 209.512688][ T29] audit: type=1326 audit(1754802277.595:9905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12794 comm="syz.3.2027" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fdbc4ebe9 code=0x7ffc0000 [ 209.542412][ T29] audit: type=1326 audit(1754802277.595:9906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12794 comm="syz.3.2027" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fdbc4ebe9 code=0x7ffc0000 [ 209.624713][ T29] audit: type=1326 audit(1754802277.655:9907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12794 comm="syz.3.2027" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f6fdbc4ebe9 code=0x7ffc0000 [ 209.648189][ T29] audit: type=1326 audit(1754802277.655:9908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12794 comm="syz.3.2027" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fdbc4ebe9 code=0x7ffc0000 [ 209.671810][ T29] audit: type=1326 audit(1754802277.655:9909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12794 comm="syz.3.2027" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fdbc4ebe9 code=0x7ffc0000 [ 209.695353][ T29] audit: type=1326 audit(1754802277.675:9910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12794 comm="syz.3.2027" exe="/root/syz-executor" sig=0 arch=c000003e syscall=30 compat=0 ip=0x7f6fdbc4ebe9 code=0x7ffc0000 [ 209.718773][ T29] audit: type=1326 audit(1754802277.675:9911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12794 comm="syz.3.2027" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fdbc4ebe9 code=0x7ffc0000 [ 209.742394][ T29] audit: type=1326 audit(1754802277.675:9912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12794 comm="syz.3.2027" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fdbc4ebe9 code=0x7ffc0000 [ 209.766199][ T29] audit: type=1400 audit(1754802277.695:9913): avc: denied { name_bind } for pid=12797 comm="syz.1.2028" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 209.839459][T12806] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2029'. [ 209.896093][ T29] audit: type=1326 audit(1754802277.945:9914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12807 comm="syz.1.2033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b92cdebe9 code=0x7ffc0000 [ 209.943654][T12801] loop3: detected capacity change from 0 to 512 [ 209.951242][T12801] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 209.963264][T12801] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 209.977098][T12801] EXT4-fs (loop3): 1 truncate cleaned up [ 209.999559][T12820] vhci_hcd: invalid port number 85 [ 210.004710][T12820] vhci_hcd: default hub control req: 0501 v0005 i0055 l4 [ 210.021206][T12812] loop0: detected capacity change from 0 to 8192 [ 210.152531][T12827] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 210.188578][T12831] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.223557][T12831] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.302980][T12831] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.305379][T12840] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2046'. [ 210.364583][T12831] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.430411][ T31] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.456633][ T31] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.481208][T12848] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 210.494694][ T31] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.510850][ T31] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.519432][T12851] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2050'. [ 210.549308][T12848] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 210.558099][T12835] loop1: detected capacity change from 0 to 2048 [ 210.580915][T12852] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2051'. [ 210.648362][T12845] loop4: detected capacity change from 0 to 2048 [ 210.847588][T12863] loop3: detected capacity change from 0 to 512 [ 210.883265][T12863] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 210.911596][T12863] EXT4-fs (loop3): orphan cleanup on readonly fs [ 210.926479][T12861] loop2: detected capacity change from 0 to 8192 [ 210.931087][T12863] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #16: comm syz.3.2056: corrupted inode contents [ 210.935187][T12861] vfat: Unknown parameter 'ÿÿÿÿ' [ 210.963644][T12863] EXT4-fs (loop3): Remounting filesystem read-only [ 210.979904][T12863] EXT4-fs (loop3): 1 truncate cleaned up [ 210.989241][ T2649] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 210.999890][ T2649] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 211.029087][ T2649] EXT4-fs (loop3): Quota write (off=8, len=24) cancelled because transaction is not started [ 211.100108][T12888] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2058'. [ 211.173042][T12900] vhci_hcd: invalid port number 85 [ 211.178190][T12900] vhci_hcd: default hub control req: 0501 v0005 i0055 l4 [ 211.193147][T12901] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.256677][T12911] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2065'. [ 211.297884][T12908] loop1: detected capacity change from 0 to 8192 [ 211.382291][T12901] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.442915][T12901] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.503071][T12901] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.883150][T12946] loop4: detected capacity change from 0 to 2048 [ 211.979101][T12964] loop0: detected capacity change from 0 to 2048 [ 212.056292][T12969] loop2: detected capacity change from 0 to 512 [ 212.087246][T12969] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 212.132814][T12969] EXT4-fs error (device loop2): ext4_quota_enable:7120: comm syz.2.2074: Bad quota inum: 29696, type: 1 [ 212.180009][T12969] EXT4-fs warning (device loop2): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=29696). Please run e2fsck to fix. [ 212.195719][T12969] EXT4-fs (loop2): mount failed [ 212.248049][ T10] hid-generic 0000:0000:0000.0020: hidraw0: HID v0.00 Device [syz0] on syz1 [ 212.310293][T12982] fido_id[12982]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 212.333223][T12977] loop0: detected capacity change from 0 to 8192 [ 212.613915][T13011] __nla_validate_parse: 3 callbacks suppressed [ 212.613931][T13011] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2083'. [ 212.684283][T13017] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 212.705456][T13017] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2084'. [ 212.717735][T13000] loop1: detected capacity change from 0 to 2048 [ 212.795292][T13025] loop4: detected capacity change from 0 to 512 [ 212.813989][T13025] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 212.875330][T13025] EXT4-fs error (device loop4): ext4_quota_enable:7120: comm syz.4.2085: Bad quota inum: 29696, type: 1 [ 212.892481][T13025] EXT4-fs warning (device loop4): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=29696). Please run e2fsck to fix. [ 212.952568][T13025] EXT4-fs (loop4): mount failed [ 212.997203][T13048] loop1: detected capacity change from 0 to 2048 [ 213.200283][ T10] hid-generic 0000:0000:0000.0021: hidraw0: HID v0.00 Device [syz0] on syz1 [ 213.261597][T13075] fido_id[13075]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 213.476440][T13087] loop1: detected capacity change from 0 to 2048 [ 213.525337][T13118] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 213.540321][T13118] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2096'. [ 213.552441][T13118] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 213.720050][T13135] loop0: detected capacity change from 0 to 8192 [ 214.086116][ T41] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.093701][ T6377] hid_parser_main: 86 callbacks suppressed [ 214.093719][ T6377] hid-generic 0000:0000:0000.0022: unknown main item tag 0x1 [ 214.107498][ T6377] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0 [ 214.115027][ T6377] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0 [ 214.122530][ T6377] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0 [ 214.130010][ T6377] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0 [ 214.136717][ T41] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.147914][ T6377] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0 [ 214.155464][ T6377] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0 [ 214.162865][ T6377] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0 [ 214.170240][ T6377] hid-generic 0000:0000:0000.0022: unknown main item tag 0x2 [ 214.177675][ T6377] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0 [ 214.191142][ T41] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.205277][ T6377] hid-generic 0000:0000:0000.0022: hidraw0: HID v0.00 Device [syz0] on syz1 [ 214.243268][T13180] loop4: detected capacity change from 0 to 2048 [ 214.249706][ T2649] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.261734][T13182] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2102'. [ 214.270613][T13182] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2102'. [ 214.284582][T13178] fido_id[13178]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 214.335291][T13192] loop3: detected capacity change from 0 to 1024 [ 214.349735][T13192] EXT4-fs: Ignoring removed bh option [ 214.445750][T13192] EXT4-fs (loop3): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 214.495513][T13192] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2107'. [ 214.504550][T13192] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2107'. [ 214.588424][ T29] kauditd_printk_skb: 357 callbacks suppressed [ 214.588438][ T29] audit: type=1326 audit(1754802282.666:10266): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13196 comm="syz.2.2108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7fb724a4ebe9 code=0x7ffc0000 [ 214.681669][T13213] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.737085][ T29] audit: type=1326 audit(1754802282.816:10267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13212 comm="syz.3.2114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fdbc4ebe9 code=0x7ffc0000 [ 214.760756][ T29] audit: type=1326 audit(1754802282.816:10268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13212 comm="syz.3.2114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f6fdbc4ebe9 code=0x7ffc0000 [ 214.784299][ T29] audit: type=1400 audit(1754802282.816:10269): avc: denied { create } for pid=13218 comm="syz.0.2118" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 214.804694][ T29] audit: type=1326 audit(1754802282.816:10270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13212 comm="syz.3.2114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fdbc4ebe9 code=0x7ffc0000 [ 214.828252][ T29] audit: type=1326 audit(1754802282.816:10271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13212 comm="syz.3.2114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f6fdbc4ebe9 code=0x7ffc0000 [ 214.851781][ T29] audit: type=1326 audit(1754802282.816:10272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13212 comm="syz.3.2114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fdbc4ebe9 code=0x7ffc0000 [ 214.875356][ T29] audit: type=1326 audit(1754802282.816:10273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13212 comm="syz.3.2114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7f6fdbc4ebe9 code=0x7ffc0000 [ 214.891798][T13219] loop0: detected capacity change from 0 to 1024 [ 214.898986][ T29] audit: type=1326 audit(1754802282.816:10274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13212 comm="syz.3.2114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fdbc4ebe9 code=0x7ffc0000 [ 214.928877][ T29] audit: type=1326 audit(1754802282.816:10275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13212 comm="syz.3.2114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=250 compat=0 ip=0x7f6fdbc4ebe9 code=0x7ffc0000 [ 214.953653][T13219] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 214.962984][T13213] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.976580][T13219] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 214.985630][T13219] mmap: syz.0.2118 (13219) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 215.012130][T13211] loop4: detected capacity change from 0 to 2048 [ 215.028515][T13205] loop1: detected capacity change from 0 to 2048 [ 215.029759][T13213] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.092150][T13213] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.496850][T13231] loop1: detected capacity change from 0 to 8192 [ 215.503604][T13231] vfat: Unknown parameter 'ÿÿÿÿ' [ 215.592492][T13239] loop0: detected capacity change from 0 to 2048 [ 215.705753][T13241] loop4: detected capacity change from 0 to 2048 [ 215.801474][T13252] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 215.816105][T13252] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2126'. [ 215.874368][T13262] vhci_hcd: invalid port number 85 [ 215.879511][T13262] vhci_hcd: default hub control req: 0501 v0005 i0055 l4 [ 216.076401][T13286] FAULT_INJECTION: forcing a failure. [ 216.076401][T13286] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 216.089645][T13286] CPU: 1 UID: 0 PID: 13286 Comm: syz.2.2131 Tainted: G W 6.16.0-syzkaller-12245-g2988dfed8a5d #0 PREEMPT(voluntary) [ 216.089680][T13286] Tainted: [W]=WARN [ 216.089688][T13286] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 216.089706][T13286] Call Trace: [ 216.089714][T13286] [ 216.089722][T13286] __dump_stack+0x1d/0x30 [ 216.089752][T13286] dump_stack_lvl+0xe8/0x140 [ 216.089773][T13286] dump_stack+0x15/0x1b [ 216.089791][T13286] should_fail_ex+0x265/0x280 [ 216.089813][T13286] should_fail_alloc_page+0xf2/0x100 [ 216.089910][T13286] __alloc_frozen_pages_noprof+0xff/0x360 [ 216.089956][T13286] alloc_pages_mpol+0xb3/0x250 [ 216.090023][T13286] vma_alloc_folio_noprof+0x1aa/0x300 [ 216.090059][T13286] handle_mm_fault+0xec2/0x2c20 [ 216.090128][T13286] ? __rcu_read_unlock+0x4f/0x70 [ 216.090161][T13286] do_user_addr_fault+0x3fe/0x1090 [ 216.090259][T13286] exc_page_fault+0x62/0xa0 [ 216.090280][T13286] asm_exc_page_fault+0x26/0x30 [ 216.090339][T13286] RIP: 0010:rep_stos_alternative+0x40/0x80 [ 216.090375][T13286] Code: c9 75 f6 e9 92 04 02 00 48 89 07 48 83 c7 08 83 e9 08 74 ef 83 f9 08 73 ef eb de 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 <48> 89 07 48 89 47 08 48 89 47 10 48 89 47 18 48 89 47 20 48 89 47 [ 216.090396][T13286] RSP: 0018:ffffc9001046bbf0 EFLAGS: 00050206 [ 216.090413][T13286] RAX: 0000000000000000 RBX: 00007ffffffff001 RCX: 0000000000000081 [ 216.090428][T13286] RDX: 0000000000000000 RSI: 0000200000001380 RDI: 0000200000001380 [ 216.090462][T13286] RBP: 0000200000001380 R08: 0001c9001046bd9f R09: 0000000000000000 [ 216.090474][T13286] R10: 0000000000000005 R11: 0000000000000000 R12: 0000000000000081 [ 216.090485][T13286] R13: ffffc9001046bd98 R14: 0000000000000000 R15: 0000200000001401 [ 216.090502][T13286] iov_iter_zero+0xfc/0xd60 [ 216.090550][T13286] ? _parse_integer_limit+0x170/0x190 [ 216.090577][T13286] read_iter_zero+0x5d/0x1e0 [ 216.090596][T13286] do_iter_readv_writev+0x49c/0x540 [ 216.090672][T13286] vfs_readv+0x1ea/0x690 [ 216.090750][T13286] __se_sys_preadv2+0xfc/0x1c0 [ 216.090778][T13286] __x64_sys_preadv2+0x67/0x80 [ 216.090804][T13286] x64_sys_call+0xe0d/0x2ff0 [ 216.090829][T13286] do_syscall_64+0xd2/0x200 [ 216.090857][T13286] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 216.090927][T13286] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 216.090966][T13286] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 216.090999][T13286] RIP: 0033:0x7fb724a4ebe9 [ 216.091036][T13286] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 216.091054][T13286] RSP: 002b:00007fb7234af038 EFLAGS: 00000246 ORIG_RAX: 0000000000000147 [ 216.091077][T13286] RAX: ffffffffffffffda RBX: 00007fb724c75fa0 RCX: 00007fb724a4ebe9 [ 216.091089][T13286] RDX: 0000000000000001 RSI: 0000200000000200 RDI: 0000000000000005 [ 216.091100][T13286] RBP: 00007fb7234af090 R08: 0000000000000004 R09: 0000000000000000 [ 216.091111][T13286] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 216.091123][T13286] R13: 00007fb724c76038 R14: 00007fb724c75fa0 R15: 00007ffd92997be8 [ 216.091143][T13286] [ 216.565956][T13300] loop4: detected capacity change from 0 to 8192 [ 216.599179][T13300] vfat: Unknown parameter 'ÿÿÿÿ' [ 216.624596][T13310] loop2: detected capacity change from 0 to 2048 [ 216.771944][T13310] EXT4-fs mount: 98 callbacks suppressed [ 216.771966][T13310] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 216.868616][T13325] loop4: detected capacity change from 0 to 512 [ 216.922354][T13325] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 216.936925][T13325] EXT4-fs (loop4): orphan cleanup on readonly fs [ 216.954244][T13325] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #16: comm syz.4.2141: corrupted inode contents [ 217.006615][T13325] EXT4-fs (loop4): Remounting filesystem read-only [ 217.020451][T13330] vhci_hcd: invalid port number 85 [ 217.025632][T13330] vhci_hcd: default hub control req: 0501 v0005 i0055 l4 [ 217.049855][T13325] EXT4-fs (loop4): 1 truncate cleaned up [ 217.055664][ T3438] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 217.066230][ T3438] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 217.094790][ T3438] EXT4-fs (loop4): Quota write (off=8, len=24) cancelled because transaction is not started [ 217.105770][T13325] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 217.134325][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 217.140213][ T3309] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 217.178663][T13337] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 217.182126][T13332] loop0: detected capacity change from 0 to 8192 [ 217.190598][T13337] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 217.206622][T13341] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 217.219176][T13341] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2145'. [ 217.229174][T13341] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 217.253432][T13337] netlink: 'syz.2.2146': attribute type 1 has an invalid length. [ 217.302004][T13337] loop2: detected capacity change from 0 to 512 [ 217.320807][T13337] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 217.342024][T13337] EXT4-fs (loop2): 1 truncate cleaned up [ 217.356778][T13337] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 217.365157][T13358] netlink: 88 bytes leftover after parsing attributes in process `syz.4.2150'. [ 217.683257][T13387] loop4: detected capacity change from 0 to 8192 [ 217.692943][T13387] vfat: Unknown parameter 'ÿÿÿÿ' [ 217.899559][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 218.013878][T13419] vhci_hcd: invalid port number 85 [ 218.019020][T13419] vhci_hcd: default hub control req: 0501 v0005 i0055 l4 [ 218.261520][T13433] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 218.304623][T13428] loop0: detected capacity change from 0 to 2048 [ 218.402641][T13428] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 218.467459][T13439] loop1: detected capacity change from 0 to 512 [ 218.500885][T13438] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2161'. [ 218.511482][T13439] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 218.519441][T13439] EXT4-fs (loop1): orphan cleanup on readonly fs [ 218.544287][T13439] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #16: comm syz.1.2160: corrupted inode contents [ 218.575781][T13439] EXT4-fs (loop1): Remounting filesystem read-only [ 218.582631][T13439] EXT4-fs (loop1): 1 truncate cleaned up [ 218.588348][ T31] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 218.598941][ T31] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 218.649639][ T31] EXT4-fs (loop1): Quota write (off=8, len=24) cancelled because transaction is not started [ 218.663646][T13439] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 218.684304][T13447] loop4: detected capacity change from 0 to 512 [ 218.695601][ T3307] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 218.713611][ T3302] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 218.731761][T13447] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a842c01c, mo2=0002] [ 218.743748][T13447] System zones: 0-2, 18-18, 34-35 [ 218.749333][T13449] vhci_hcd: invalid port number 85 [ 218.749404][T13447] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 218.754563][T13449] vhci_hcd: default hub control req: 0501 v0005 i0055 l4 [ 218.772448][ T3405] hid-generic 0000:0000:0000.0023: hidraw0: HID v0.00 Device [syz0] on syz1 [ 218.789585][ T5550] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.809671][T13447] ext4 filesystem being mounted at /422/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 218.821231][ T5550] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.829403][ T5550] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.854533][T13454] fido_id[13454]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 218.863006][ T5550] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.876390][T13456] loop1: detected capacity change from 0 to 512 [ 218.880580][T13447] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2164'. [ 218.891591][T13447] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2164'. [ 218.923310][T13456] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 218.924504][ T3405] hid-generic 0000:0000:0000.0024: hidraw0: HID v0.00 Device [syz0] on syz1 [ 218.982315][T13456] EXT4-fs error (device loop1): ext4_quota_enable:7120: comm syz.1.2167: Bad quota inum: 29696, type: 1 [ 219.005572][T13456] EXT4-fs warning (device loop1): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=29696). Please run e2fsck to fix. [ 219.005818][ T3309] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 219.022052][T13456] EXT4-fs (loop1): mount failed [ 219.160682][T13477] loop4: detected capacity change from 0 to 2048 [ 219.200929][T13477] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 219.297097][T13472] loop2: detected capacity change from 0 to 2048 [ 219.355674][T13472] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 219.571529][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 219.694855][ T29] kauditd_printk_skb: 213 callbacks suppressed [ 219.694950][ T29] audit: type=1326 audit(1754802287.777:10477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13469 comm="syz.0.2171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdc066ebe9 code=0x7ffc0000 [ 219.750158][ T29] audit: type=1326 audit(1754802287.777:10478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13469 comm="syz.0.2171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdc066ebe9 code=0x7ffc0000 [ 219.773783][ T29] audit: type=1326 audit(1754802287.777:10479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13469 comm="syz.0.2171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbdc066ebe9 code=0x7ffc0000 [ 219.797427][ T29] audit: type=1326 audit(1754802287.777:10480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13469 comm="syz.0.2171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdc066ebe9 code=0x7ffc0000 [ 219.821031][ T29] audit: type=1326 audit(1754802287.777:10481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13469 comm="syz.0.2171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdc066ebe9 code=0x7ffc0000 [ 219.844602][ T29] audit: type=1326 audit(1754802287.777:10482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13469 comm="syz.0.2171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbdc066ebe9 code=0x7ffc0000 [ 219.868250][ T29] audit: type=1326 audit(1754802287.777:10483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13469 comm="syz.0.2171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdc066ebe9 code=0x7ffc0000 [ 219.891822][ T29] audit: type=1326 audit(1754802287.777:10484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13469 comm="syz.0.2171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdc066ebe9 code=0x7ffc0000 [ 219.915434][ T29] audit: type=1326 audit(1754802287.777:10485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13469 comm="syz.0.2171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7fbdc066ebe9 code=0x7ffc0000 [ 219.938993][ T29] audit: type=1326 audit(1754802287.777:10486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13469 comm="syz.0.2171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdc066ebe9 code=0x7ffc0000 [ 219.991824][T13465] uprobe: syz.3.2170:13465 failed to unregister, leaking uprobe [ 220.067781][ T3309] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 220.098946][T13493] vhci_hcd: invalid port number 85 [ 220.104103][T13493] vhci_hcd: default hub control req: 0501 v0005 i0055 l4 [ 220.142694][T13491] loop2: detected capacity change from 0 to 8192 [ 220.260034][T13501] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2181'. [ 220.268914][T13501] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2181'. [ 220.426049][T13507] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2184'. [ 220.618704][T13516] loop3: detected capacity change from 0 to 512 [ 220.637787][T13489] loop0: detected capacity change from 0 to 2048 [ 220.664863][T13516] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 220.720484][T13516] ext4 filesystem being mounted at /487/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 220.751951][T13489] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 220.754532][T13510] loop1: detected capacity change from 0 to 2048 [ 220.840221][T13514] loop4: detected capacity change from 0 to 2048 [ 220.854987][ T3302] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 220.931353][T13510] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 220.956996][T13514] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 221.034835][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 221.052059][ T3307] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 221.063893][ T3309] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 221.109179][T13543] loop1: detected capacity change from 0 to 512 [ 221.110632][T13542] loop3: detected capacity change from 0 to 128 [ 221.116025][T13543] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 221.153206][T13524] loop0: detected capacity change from 0 to 2048 [ 221.166007][T13545] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2194'. [ 221.174968][T13545] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2194'. [ 221.193273][T13543] EXT4-fs (loop1): 1 truncate cleaned up [ 221.201003][T13542] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 221.228540][T13550] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2195'. [ 221.244812][T13542] ext4 filesystem being mounted at /488/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 221.255451][T13543] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 221.298916][T13524] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 221.307654][T13554] loop2: detected capacity change from 0 to 512 [ 221.360222][T13559] vhci_hcd: invalid port number 85 [ 221.365354][T13559] vhci_hcd: default hub control req: 0501 v0005 i0055 l4 [ 221.381759][ T3303] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 221.396612][T13554] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 221.409245][T13554] EXT4-fs (loop2): orphan cleanup on readonly fs [ 221.416972][T13554] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #16: comm syz.2.2197: corrupted inode contents [ 221.430377][T13554] EXT4-fs (loop2): Remounting filesystem read-only [ 221.436939][T13554] EXT4-fs (loop2): 1 truncate cleaned up [ 221.442866][ T31] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 221.453498][ T31] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 221.465484][ T31] EXT4-fs (loop2): Quota write (off=8, len=24) cancelled because transaction is not started [ 221.476358][T13554] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 221.571798][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 221.611574][T13564] loop3: detected capacity change from 0 to 512 [ 221.673758][T13568] loop2: detected capacity change from 0 to 8192 [ 221.680696][T13568] vfat: Unknown parameter 'ÿÿÿÿ' [ 221.684356][T13564] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 221.727114][T13564] EXT4-fs (loop3): orphan cleanup on readonly fs [ 221.739491][T13564] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #16: comm syz.3.2199: corrupted inode contents [ 221.779312][T13564] EXT4-fs (loop3): Remounting filesystem read-only [ 221.789959][T13564] EXT4-fs (loop3): 1 truncate cleaned up [ 221.796363][ T31] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 221.806950][ T31] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 221.808425][T13573] loop4: detected capacity change from 0 to 512 [ 221.820371][ T31] EXT4-fs (loop3): Quota write (off=8, len=24) cancelled because transaction is not started [ 221.834972][T13564] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 221.835122][ T3302] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 221.864592][T13573] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 221.879890][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 221.893118][T13573] ext4 filesystem being mounted at /433/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 221.957937][ T3307] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 222.139545][ T3309] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 222.187779][T13579] loop3: detected capacity change from 0 to 2048 [ 222.205794][T13594] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 222.214361][T13594] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 222.233576][T13599] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.279519][T13594] netlink: 'syz.2.2206': attribute type 1 has an invalid length. [ 222.304065][T13588] loop1: detected capacity change from 0 to 2048 [ 222.304281][T13579] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 222.325067][T13580] loop0: detected capacity change from 0 to 2048 [ 222.334863][T13599] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.344692][T13594] loop2: detected capacity change from 0 to 512 [ 222.369360][T13594] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 222.386375][T13588] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 222.400924][T13594] EXT4-fs (loop2): 1 truncate cleaned up [ 222.407953][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 222.408275][T13594] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 222.424032][T13580] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 222.446770][T13599] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.472591][ T3302] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 222.482599][T13599] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.486316][T13610] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2209'. [ 222.556074][ T41] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.587184][ T41] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.624310][ T41] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.635678][ T3384] hid_parser_main: 86 callbacks suppressed [ 222.635696][ T3384] hid-generic 0000:0000:0000.0025: unknown main item tag 0x1 [ 222.648932][ T3384] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0 [ 222.656320][ T3384] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0 [ 222.663721][ T3384] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0 [ 222.671116][ T3384] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0 [ 222.693872][ T41] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.702199][ T3384] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0 [ 222.709625][ T3384] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0 [ 222.717074][ T3384] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0 [ 222.724470][ T3384] hid-generic 0000:0000:0000.0025: unknown main item tag 0x2 [ 222.731879][ T3384] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0 [ 222.743974][ T3384] hid-generic 0000:0000:0000.0025: hidraw0: HID v0.00 Device [syz0] on syz1 [ 222.834884][T13635] fido_id[13635]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 222.910710][T13634] loop3: detected capacity change from 0 to 8192 [ 222.933237][T13634] vfat: Unknown parameter 'ÿÿÿÿ' [ 222.967451][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 223.021877][T13662] loop2: detected capacity change from 0 to 512 [ 223.045770][T13662] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 223.058640][ T3307] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 223.058712][T13662] ext4 filesystem being mounted at /422/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 223.110434][T13662] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 94 vs 96 free clusters [ 223.159412][T13662] EXT4-fs (loop2): Remounting filesystem read-only [ 223.206336][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 223.251554][T13684] loop2: detected capacity change from 0 to 512 [ 223.282466][T13684] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a842c01c, mo2=0002] [ 223.309434][T13684] System zones: 0-2, 18-18, 34-35 [ 223.325589][T13684] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 223.345535][T13669] loop1: detected capacity change from 0 to 2048 [ 223.358466][T13684] ext4 filesystem being mounted at /423/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 223.369722][T13677] loop3: detected capacity change from 0 to 2048 [ 223.391262][T13693] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.414911][T13669] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 223.451484][T13693] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.451633][T13677] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 223.476035][ T3307] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 223.510521][T13693] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.525335][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 223.540305][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 223.575297][T13704] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 223.591716][T13693] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.591978][T13704] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 223.623647][T13704] netlink: 'syz.2.2227': attribute type 1 has an invalid length. [ 223.634398][T13704] loop2: detected capacity change from 0 to 512 [ 223.647027][T13704] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 223.670106][T13704] EXT4-fs (loop2): 1 truncate cleaned up [ 223.675809][ T31] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.692528][T13704] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 223.708473][ T31] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.718600][ T31] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.732357][ T31] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.779322][T13656] uprobe: syz.4.2217:13656 failed to unregister, leaking uprobe [ 223.790990][T13702] loop1: detected capacity change from 0 to 2048 [ 223.823145][T13702] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 223.842933][T13702] 9pnet_fd: Insufficient options for proto=fd [ 224.161656][T13757] loop4: detected capacity change from 0 to 128 [ 224.172725][T13757] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 224.194108][T13757] ext4 filesystem being mounted at /442/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 224.221719][ T3309] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 224.262967][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 224.313269][T13771] loop2: detected capacity change from 0 to 512 [ 224.340786][T13771] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 224.355273][T13771] ext4 filesystem being mounted at /425/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 224.405760][T13706] uprobe: syz.3.2226:13706 failed to unregister, leaking uprobe [ 224.499882][T13789] __nla_validate_parse: 4 callbacks suppressed [ 224.499898][T13789] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2235'. [ 224.550594][ T3307] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 224.577088][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 224.615242][T13800] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.669906][T13800] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.724728][ T29] kauditd_printk_skb: 198 callbacks suppressed [ 224.724741][ T29] audit: type=1326 audit(1754802292.808:10671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13795 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb724a4ebe9 code=0x7ffc0000 [ 224.763517][ T29] audit: type=1326 audit(1754802292.838:10672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13795 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fb724a4ebe9 code=0x7ffc0000 [ 224.764429][T13815] loop0: detected capacity change from 0 to 2048 [ 224.786531][ T29] audit: type=1326 audit(1754802292.838:10673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13795 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb724a4ebe9 code=0x7ffc0000 [ 224.815918][ T29] audit: type=1326 audit(1754802292.838:10674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13795 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb724a4ebe9 code=0x7ffc0000 [ 224.844788][T13811] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 224.851104][ T29] audit: type=1326 audit(1754802292.928:10675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13795 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb724a4ebe9 code=0x7ffc0000 [ 224.875218][T13820] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 224.877116][ T29] audit: type=1326 audit(1754802292.958:10676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13795 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb724a4ebe9 code=0x7ffc0000 [ 224.905745][ T29] audit: type=1326 audit(1754802292.958:10677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13795 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb724a4ebe9 code=0x7ffc0000 [ 224.935675][ T29] audit: type=1326 audit(1754802293.018:10678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13795 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb724a4ebe9 code=0x7ffc0000 [ 224.958801][ T29] audit: type=1326 audit(1754802293.018:10679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13795 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb724a4ebe9 code=0x7ffc0000 [ 224.977061][T13815] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 224.981911][ T29] audit: type=1326 audit(1754802293.018:10680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13795 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb724a4ebe9 code=0x7ffc0000 [ 225.027358][T13800] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.038916][T13801] loop1: detected capacity change from 0 to 2048 [ 225.060607][T13800] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.122373][ T31] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.158214][T13801] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 225.181818][ T31] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.210338][ T31] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.229862][ T31] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.247436][T13841] loop2: detected capacity change from 0 to 512 [ 225.274535][ T3307] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 225.291912][T13843] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2246'. [ 225.322130][T13841] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 225.348562][T13841] ext4 filesystem being mounted at /427/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 225.696813][T13850] loop4: detected capacity change from 0 to 2048 [ 225.790283][T13892] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.817856][T13850] 9pnet_fd: Insufficient options for proto=fd [ 225.858975][T13892] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.900021][T13892] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.949824][T13892] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.962073][T13910] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2258'. [ 225.995156][T13915] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2259'. [ 226.004263][T13915] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2259'. [ 226.366208][T13948] loop3: detected capacity change from 0 to 2048 [ 226.414458][ T3384] hid-generic 0000:0000:0000.0026: hidraw0: HID v0.00 Device [syz0] on syz1 [ 226.456406][T13962] fido_id[13962]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 226.529804][T13967] loop4: detected capacity change from 0 to 512 [ 226.575513][T13971] loop2: detected capacity change from 0 to 2048 [ 226.585420][T13967] ext4 filesystem being mounted at /448/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 226.627799][T13969] loop1: detected capacity change from 0 to 8192 [ 226.744903][T13979] loop3: detected capacity change from 0 to 8192 [ 227.339798][T14013] loop2: detected capacity change from 0 to 8192 [ 227.392641][ T1599] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.437867][ T1599] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.453570][ T1599] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.485922][T14026] FAULT_INJECTION: forcing a failure. [ 227.485922][T14026] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 227.499113][T14026] CPU: 1 UID: 0 PID: 14026 Comm: syz.0.2277 Tainted: G W 6.16.0-syzkaller-12245-g2988dfed8a5d #0 PREEMPT(voluntary) [ 227.499156][T14026] Tainted: [W]=WARN [ 227.499164][T14026] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 227.499178][T14026] Call Trace: [ 227.499186][T14026] [ 227.499194][T14026] __dump_stack+0x1d/0x30 [ 227.499251][T14026] dump_stack_lvl+0xe8/0x140 [ 227.499274][T14026] dump_stack+0x15/0x1b [ 227.499293][T14026] should_fail_ex+0x265/0x280 [ 227.499316][T14026] should_fail+0xb/0x20 [ 227.499334][T14026] should_fail_usercopy+0x1a/0x20 [ 227.499379][T14026] _copy_from_user+0x1c/0xb0 [ 227.499446][T14026] __se_sys_io_uring_setup+0x11f/0x210 [ 227.499473][T14026] __x64_sys_io_uring_setup+0x31/0x40 [ 227.499493][T14026] x64_sys_call+0x2b21/0x2ff0 [ 227.499514][T14026] do_syscall_64+0xd2/0x200 [ 227.499543][T14026] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 227.499587][T14026] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 227.499615][T14026] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 227.499638][T14026] RIP: 0033:0x7fbdc066ebe9 [ 227.499655][T14026] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 227.499737][T14026] RSP: 002b:00007fbdbf0cefc8 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 227.499787][T14026] RAX: ffffffffffffffda RBX: 00007fbdc0895fa0 RCX: 00007fbdc066ebe9 [ 227.499802][T14026] RDX: 0000200000000080 RSI: 0000200000000100 RDI: 000000000000074d [ 227.499817][T14026] RBP: 0000200000000100 R08: 0000000000000000 R09: 0000200000000080 [ 227.499832][T14026] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000001 [ 227.499853][T14026] R13: 0000200000000300 R14: 000000000000074d R15: 0000200000000080 [ 227.499871][T14026] [ 227.502165][ T1599] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.721425][ T3384] hid_parser_main: 65 callbacks suppressed [ 227.721444][ T3384] hid-generic 0000:0000:0000.0027: unknown main item tag 0x0 [ 227.734689][ T3384] hid-generic 0000:0000:0000.0027: unknown main item tag 0x0 [ 227.742129][ T3384] hid-generic 0000:0000:0000.0027: unknown main item tag 0x0 [ 227.749547][ T3384] hid-generic 0000:0000:0000.0027: unknown main item tag 0x0 [ 227.756954][ T3384] hid-generic 0000:0000:0000.0027: unknown main item tag 0x0 [ 227.764516][ T3384] hid-generic 0000:0000:0000.0027: unknown main item tag 0x0 [ 227.771913][ T3384] hid-generic 0000:0000:0000.0027: unknown main item tag 0x0 [ 227.779356][ T3384] hid-generic 0000:0000:0000.0027: unknown main item tag 0x0 [ 227.786778][ T3384] hid-generic 0000:0000:0000.0027: unknown main item tag 0x0 [ 227.794246][ T3384] hid-generic 0000:0000:0000.0027: unknown main item tag 0x0 [ 227.806735][ T3384] hid-generic 0000:0000:0000.0027: hidraw0: HID v0.00 Device [syz0] on syz1 [ 227.832656][T14039] loop0: detected capacity change from 0 to 512 [ 227.870666][T14039] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 227.884262][T14039] EXT4-fs (loop0): orphan cleanup on readonly fs [ 227.925708][T14039] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #16: comm syz.0.2280: corrupted inode contents [ 227.937875][T14049] loop3: detected capacity change from 0 to 128 [ 227.948762][T14039] EXT4-fs (loop0): Remounting filesystem read-only [ 227.955499][T14044] loop1: detected capacity change from 0 to 8192 [ 227.965523][T14044] vfat: Unknown parameter 'ÿÿÿÿ' [ 227.980913][T14039] EXT4-fs (loop0): 1 truncate cleaned up [ 227.988559][T14049] ext4 filesystem being mounted at /514/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 227.998943][ T3438] EXT4-fs (loop0): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 228.009463][ T3438] EXT4-fs (loop0): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 228.020415][ T3438] EXT4-fs (loop0): Quota write (off=8, len=24) cancelled because transaction is not started [ 228.279953][T14066] loop3: detected capacity change from 0 to 8192 [ 228.699220][ T6377] hid-generic 0000:0000:0000.0028: hidraw0: HID v0.00 Device [syz0] on syz1 [ 228.776835][T14111] fido_id[14111]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 228.837881][T14114] loop4: detected capacity change from 0 to 512 [ 228.860359][T14119] loop1: detected capacity change from 0 to 8192 [ 228.874647][T14114] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 228.882780][T14114] EXT4-fs (loop4): orphan cleanup on readonly fs [ 229.038381][T14129] loop0: detected capacity change from 0 to 2048 [ 229.044973][T14119] vfat: Unknown parameter 'ÿÿÿÿ' [ 229.081013][T14114] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #16: comm syz.4.2296: corrupted inode contents [ 229.124588][T14114] EXT4-fs (loop4): Remounting filesystem read-only [ 229.135804][T14114] EXT4-fs (loop4): 1 truncate cleaned up [ 229.141613][ T3438] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 229.152178][ T3438] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 229.175287][T14135] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 229.200173][T14135] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 229.209592][ T3438] EXT4-fs (loop4): Quota write (off=8, len=24) cancelled because transaction is not started [ 229.230084][T14135] netlink: 'syz.3.2300': attribute type 1 has an invalid length. [ 229.242027][T14141] loop2: detected capacity change from 0 to 2048 [ 229.266607][T14135] loop3: detected capacity change from 0 to 512 [ 229.313877][T14135] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 229.355157][T14147] vhci_hcd: invalid port number 85 [ 229.360353][T14147] vhci_hcd: default hub control req: 0501 v0005 i0055 l4 [ 229.388985][T14135] EXT4-fs (loop3): 1 truncate cleaned up [ 229.401800][T14149] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 229.419524][T14149] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 229.493184][ T3384] hid-generic 0000:0000:0000.0029: hidraw0: HID v0.00 Device [syz0] on syz1 [ 229.560885][T14157] fido_id[14157]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 229.683343][T14165] loop2: detected capacity change from 0 to 8192 [ 229.723916][T14168] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2311'. [ 229.811774][T14173] loop1: detected capacity change from 0 to 8192 [ 229.823392][T14173] vfat: Unknown parameter 'ÿÿÿÿ' [ 230.125073][T14203] loop4: detected capacity change from 0 to 512 [ 230.159653][T14203] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 230.194200][T14203] EXT4-fs (loop4): orphan cleanup on readonly fs [ 230.203117][T14203] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #16: comm syz.4.2320: corrupted inode contents [ 230.219917][T14203] EXT4-fs (loop4): Remounting filesystem read-only [ 230.270492][T14203] EXT4-fs (loop4): 1 truncate cleaned up [ 230.278373][ T31] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 230.288912][ T31] __quota_error: 160 callbacks suppressed [ 230.288925][ T31] Quota error (device loop4): write_blk: dquota write failed [ 230.302028][ T31] Quota error (device loop4): remove_free_dqentry: Can't write block (5) with free entries [ 230.312011][ T31] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 230.322511][ T31] Quota error (device loop4): write_blk: dquota write failed [ 230.329907][ T31] Quota error (device loop4): free_dqentry: Can't move quota data block (5) to free list [ 230.355421][ T31] EXT4-fs (loop4): Quota write (off=8, len=24) cancelled because transaction is not started [ 230.365567][ T31] Quota error (device loop4): v2_write_file_info: Can't write info structure [ 230.375657][ T31] Quota error (device loop4): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 230.383443][T14218] loop3: detected capacity change from 0 to 2048 [ 230.564688][T14232] vhci_hcd: invalid port number 85 [ 230.569864][T14232] vhci_hcd: default hub control req: 0501 v0005 i0055 l4 [ 230.759485][ T29] audit: type=1326 audit(1754802298.849:10829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14249 comm="syz.1.2327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b92cdebe9 code=0x7ffc0000 [ 230.783284][ T29] audit: type=1326 audit(1754802298.849:10830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14249 comm="syz.1.2327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b92cdebe9 code=0x7ffc0000 [ 230.806979][ T29] audit: type=1326 audit(1754802298.849:10831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14249 comm="syz.1.2327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f7b92cdebe9 code=0x7ffc0000 [ 230.808556][T14251] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2326'. [ 230.830645][ T29] audit: type=1326 audit(1754802298.849:10832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14249 comm="syz.1.2327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b92cdebe9 code=0x7ffc0000 [ 230.883451][T14253] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 230.897861][T14253] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 230.936369][T14259] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 230.958455][T14259] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 230.968571][T14259] netlink: 'syz.2.2331': attribute type 1 has an invalid length. [ 230.980681][T14259] loop2: detected capacity change from 0 to 512 [ 230.996392][T14259] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 231.029370][T14259] EXT4-fs (loop2): 1 truncate cleaned up [ 231.069062][T14269] loop0: detected capacity change from 0 to 2048 [ 231.191165][T14266] loop3: detected capacity change from 0 to 2048 [ 231.244097][T14265] loop1: detected capacity change from 0 to 2048 [ 231.260511][T14220] uprobe: syz.4.2323:14220 failed to unregister, leaking uprobe [ 231.395397][T14282] loop4: detected capacity change from 0 to 512 [ 231.538141][T14282] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 231.689896][T14282] EXT4-fs (loop4): orphan cleanup on readonly fs [ 231.698572][T14282] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #16: comm syz.4.2338: corrupted inode contents [ 231.724306][T14282] EXT4-fs (loop4): Remounting filesystem read-only [ 231.741595][T14282] EXT4-fs (loop4): 1 truncate cleaned up [ 231.772586][ T5550] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 231.783156][ T5550] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 231.856075][ T5550] EXT4-fs (loop4): Quota write (off=8, len=24) cancelled because transaction is not started [ 231.952922][T14298] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2340'. [ 231.961935][T14298] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2340'. [ 232.083879][T14312] vhci_hcd: invalid port number 85 [ 232.089055][T14312] vhci_hcd: default hub control req: 0501 v0005 i0055 l4 [ 232.138977][T14290] loop2: detected capacity change from 0 to 2048 [ 232.275238][T14290] 9pnet_fd: Insufficient options for proto=fd [ 232.359269][T14328] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2345'. [ 232.369160][T14320] loop0: detected capacity change from 0 to 2048 [ 232.476460][T14331] loop4: detected capacity change from 0 to 512 [ 232.558305][T14331] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 232.616034][T14331] EXT4-fs error (device loop4): ext4_quota_enable:7120: comm syz.4.2346: Bad quota inum: 29696, type: 1 [ 232.648737][T14331] EXT4-fs warning (device loop4): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=29696). Please run e2fsck to fix. [ 232.654014][T14320] 9pnet_fd: Insufficient options for proto=fd [ 232.698740][T14331] EXT4-fs (loop4): mount failed [ 232.760533][T14346] netlink: 'syz.2.2351': attribute type 1 has an invalid length. [ 232.770820][T14347] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2352'. [ 232.779719][T14347] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2352'. [ 232.784861][T14349] loop4: detected capacity change from 0 to 512 [ 232.801504][T14346] 8021q: adding VLAN 0 to HW filter on device bond2 [ 232.821832][T14349] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 232.866511][T14349] EXT4-fs (loop4): orphan cleanup on readonly fs [ 232.888358][T14349] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #16: comm syz.4.2353: corrupted inode contents [ 232.918197][T14349] EXT4-fs (loop4): Remounting filesystem read-only [ 232.949282][T14349] EXT4-fs (loop4): 1 truncate cleaned up [ 232.958051][ T3438] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 232.968637][ T3438] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 233.008006][ T3438] EXT4-fs (loop4): Quota write (off=8, len=24) cancelled because transaction is not started [ 233.124530][T14366] loop4: detected capacity change from 0 to 8192 [ 233.245621][T14346] 8021q: adding VLAN 0 to HW filter on device bond2 [ 233.260850][T14346] bond2: (slave vti0): The slave device specified does not support setting the MAC address [ 233.275746][T14346] bond2: (slave vti0): Error -95 calling set_mac_address [ 233.376720][T14334] uprobe: syz.1.2348:14334 failed to unregister, leaking uprobe [ 233.476242][T14395] loop1: detected capacity change from 0 to 2048 [ 233.743461][ T2955] hid_parser_main: 110 callbacks suppressed [ 233.743478][ T2955] hid-generic 0000:0000:0000.002A: unknown main item tag 0x0 [ 233.756809][ T2955] hid-generic 0000:0000:0000.002A: unknown main item tag 0x0 [ 233.764257][ T2955] hid-generic 0000:0000:0000.002A: unknown main item tag 0x0 [ 233.771644][ T2955] hid-generic 0000:0000:0000.002A: unknown main item tag 0x0 [ 233.779039][ T2955] hid-generic 0000:0000:0000.002A: unknown main item tag 0x0 [ 233.786436][ T2955] hid-generic 0000:0000:0000.002A: unknown main item tag 0x0 [ 233.793842][ T2955] hid-generic 0000:0000:0000.002A: unknown main item tag 0x0 [ 233.801274][ T2955] hid-generic 0000:0000:0000.002A: unknown main item tag 0x0 [ 233.808688][ T2955] hid-generic 0000:0000:0000.002A: unknown main item tag 0x0 [ 233.816061][ T2955] hid-generic 0000:0000:0000.002A: unknown main item tag 0x0 [ 233.827288][ T2955] hid-generic 0000:0000:0000.002A: hidraw0: HID v0.00 Device [syz0] on syz1 [ 233.861091][T14424] fido_id[14424]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 233.909050][ T2955] hid-generic 0000:0000:0000.002B: hidraw0: HID v0.00 Device [syz0] on syz1 [ 233.952674][T14431] fido_id[14431]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 233.996913][T14430] loop0: detected capacity change from 0 to 8192 [ 234.008681][T14430] vfat: Unknown parameter 'ÿÿÿÿ' [ 234.015070][T14425] loop3: detected capacity change from 0 to 512 [ 234.040871][T14425] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 234.071231][T14425] EXT4-fs (loop3): orphan cleanup on readonly fs [ 234.089366][T14425] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #16: comm syz.3.2363: corrupted inode contents [ 234.112113][T14425] EXT4-fs (loop3): Remounting filesystem read-only [ 234.132203][T14425] EXT4-fs (loop3): 1 truncate cleaned up [ 234.139072][ T56] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 234.149654][ T56] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 234.176917][ T56] EXT4-fs (loop3): Quota write (off=8, len=24) cancelled because transaction is not started [ 234.215744][T14439] loop2: detected capacity change from 0 to 2048 [ 234.284669][T14449] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 234.311523][T14435] loop4: detected capacity change from 0 to 2048 [ 234.324834][T14451] loop3: detected capacity change from 0 to 2048 [ 234.399866][T14457] loop0: detected capacity change from 0 to 512 [ 234.411675][T14457] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 234.439213][ T2955] hid-generic 0000:0000:0000.002C: hidraw0: HID v0.00 Device [syz0] on syz1 [ 234.450325][T14457] EXT4-fs error (device loop0): ext4_quota_enable:7120: comm syz.0.2373: Bad quota inum: 29696, type: 1 [ 234.480462][T14462] fido_id[14462]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 234.492946][T14457] EXT4-fs warning (device loop0): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=29696). Please run e2fsck to fix. [ 234.544849][T14457] EXT4-fs (loop0): mount failed [ 234.620949][ T3405] hid-generic 0000:0000:0000.002D: hidraw0: HID v0.00 Device [syz0] on syz1 [ 234.637745][T14470] loop0: detected capacity change from 0 to 512 [ 234.666297][T14471] fido_id[14471]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 234.712083][T14466] loop3: detected capacity change from 0 to 512 [ 234.723883][T14470] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 234.781597][T14470] EXT4-fs (loop0): orphan cleanup on readonly fs [ 234.808043][T14466] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 234.816027][T14466] EXT4-fs (loop3): orphan cleanup on readonly fs [ 234.818344][T14470] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #16: comm syz.0.2378: corrupted inode contents [ 234.844523][T14466] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #16: comm syz.3.2377: corrupted inode contents [ 234.866951][T14470] EXT4-fs (loop0): Remounting filesystem read-only [ 234.873546][T14470] EXT4-fs (loop0): 1 truncate cleaned up [ 234.879465][ T41] EXT4-fs (loop0): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 234.890007][ T41] EXT4-fs (loop0): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 234.905519][T14476] loop1: detected capacity change from 0 to 2048 [ 234.910891][T14466] EXT4-fs (loop3): Remounting filesystem read-only [ 234.927997][ T41] EXT4-fs (loop0): Quota write (off=8, len=24) cancelled because transaction is not started [ 234.939155][T14466] EXT4-fs (loop3): 1 truncate cleaned up [ 234.944950][ T41] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 234.955483][ T41] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 234.966519][ T41] EXT4-fs (loop3): Quota write (off=8, len=24) cancelled because transaction is not started [ 235.034497][T14488] loop4: detected capacity change from 0 to 512 [ 235.060640][T14491] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2381'. [ 235.072494][T14488] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a842c01c, mo2=0002] [ 235.081038][T14488] System zones: 0-2, 18-18, 34-35 [ 235.094049][T14488] ext4 filesystem being mounted at /466/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 235.106492][T14488] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2383'. [ 235.115488][T14488] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2383'. [ 235.222058][T14503] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 235.234794][T14503] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 235.235783][T14490] loop3: detected capacity change from 0 to 2048 [ 235.258134][T14503] netlink: 'syz.4.2386': attribute type 1 has an invalid length. [ 235.333624][ T3405] hid-generic 0000:0000:0000.002E: hidraw0: HID v0.00 Device [syz0] on syz1 [ 235.372703][T14525] fido_id[14525]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 235.513505][T14546] loop0: detected capacity change from 0 to 512 [ 235.549452][T14546] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 235.561769][T14546] EXT4-fs (loop0): orphan cleanup on readonly fs [ 235.580069][T14546] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #16: comm syz.0.2393: corrupted inode contents [ 235.599113][T14546] EXT4-fs (loop0): Remounting filesystem read-only [ 235.606006][T14546] EXT4-fs (loop0): 1 truncate cleaned up [ 235.614225][ T41] EXT4-fs (loop0): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 235.624791][ T41] __quota_error: 71 callbacks suppressed [ 235.624804][ T41] Quota error (device loop0): write_blk: dquota write failed [ 235.637820][ T41] Quota error (device loop0): remove_free_dqentry: Can't write block (5) with free entries [ 235.647816][ T41] EXT4-fs (loop0): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 235.658392][ T41] Quota error (device loop0): write_blk: dquota write failed [ 235.665749][ T41] Quota error (device loop0): free_dqentry: Can't move quota data block (5) to free list [ 235.675668][ T29] audit: type=1326 audit(1754802303.720:10874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14559 comm="syz.2.2394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb724a4ebe9 code=0x7ffc0000 [ 235.699239][ T29] audit: type=1326 audit(1754802303.730:10875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14559 comm="syz.2.2394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=105 compat=0 ip=0x7fb724a4ebe9 code=0x7ffc0000 [ 235.722828][ T29] audit: type=1326 audit(1754802303.730:10876): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14559 comm="syz.2.2394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb724a4ebe9 code=0x7ffc0000 [ 235.746905][ T29] audit: type=1326 audit(1754802303.730:10877): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14559 comm="syz.2.2394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7fb724a4ebe9 code=0x7ffc0000 [ 235.770758][ T29] audit: type=1326 audit(1754802303.740:10878): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14559 comm="syz.2.2394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb724a4ebe9 code=0x7ffc0000 [ 235.794728][ T29] audit: type=1326 audit(1754802303.740:10879): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14559 comm="syz.2.2394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb724a4ebe9 code=0x7ffc0000 [ 235.826617][ T41] EXT4-fs (loop0): Quota write (off=8, len=24) cancelled because transaction is not started [ 235.868792][T14586] loop2: detected capacity change from 0 to 2048 [ 236.189887][T14608] loop2: detected capacity change from 0 to 512 [ 236.242832][T14601] loop1: detected capacity change from 0 to 2048 [ 236.276558][T14608] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 236.308395][T14608] EXT4-fs (loop2): orphan cleanup on readonly fs [ 236.316744][T14596] loop0: detected capacity change from 0 to 2048 [ 236.339314][T14608] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #16: comm syz.2.2404: corrupted inode contents [ 236.377697][T14606] loop4: detected capacity change from 0 to 2048 [ 236.413114][T14608] EXT4-fs (loop2): Remounting filesystem read-only [ 236.420101][T14621] loop3: detected capacity change from 0 to 512 [ 236.426643][T14608] EXT4-fs (loop2): 1 truncate cleaned up [ 236.434804][ T3438] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 236.445382][ T3438] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 236.462195][ T3438] EXT4-fs (loop2): Quota write (off=8, len=24) cancelled because transaction is not started [ 236.507688][T14621] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 236.575259][T14621] EXT4-fs error (device loop3): ext4_quota_enable:7120: comm syz.3.2407: Bad quota inum: 29696, type: 1 [ 236.663826][T14621] EXT4-fs warning (device loop3): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=29696). Please run e2fsck to fix. [ 236.682068][T14631] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 236.768442][T14621] EXT4-fs (loop3): mount failed [ 236.786219][T14631] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 236.818282][T14631] netlink: 'syz.0.2410': attribute type 1 has an invalid length. [ 236.935248][T14634] loop2: detected capacity change from 0 to 1024 [ 236.942057][T14634] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 237.003229][T14634] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 237.134243][T14662] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2418'. [ 237.196068][T14666] loop4: detected capacity change from 0 to 512 [ 237.211393][T14670] loop1: detected capacity change from 0 to 512 [ 237.219709][T14666] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 237.227982][T14666] EXT4-fs (loop4): orphan cleanup on readonly fs [ 237.235948][T14666] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #16: comm syz.4.2420: corrupted inode contents [ 237.257569][T14666] EXT4-fs (loop4): Remounting filesystem read-only [ 237.264573][T14666] EXT4-fs (loop4): 1 truncate cleaned up [ 237.266013][T14670] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a842c01c, mo2=0002] [ 237.271787][ T5550] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 237.278316][T14670] System zones: 0-2 [ 237.288804][ T5550] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 237.292605][T14670] , 18-18, 34-35 [ 237.307010][ T5550] EXT4-fs (loop4): Quota write (off=8, len=24) cancelled because transaction is not started [ 237.317711][T14670] ext4 filesystem being mounted at /481/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 237.343258][T14670] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2422'. [ 237.352321][T14670] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2422'. [ 237.398887][T14681] loop4: detected capacity change from 0 to 512 [ 237.452192][T14681] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 237.462819][T14681] EXT4-fs (loop4): orphan cleanup on readonly fs [ 237.475176][T14681] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #16: comm syz.4.2425: corrupted inode contents [ 237.488431][T14681] EXT4-fs (loop4): Remounting filesystem read-only [ 237.495064][T14681] EXT4-fs (loop4): 1 truncate cleaned up [ 237.495775][T14674] loop3: detected capacity change from 0 to 2048 [ 237.500841][ T5550] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 237.500866][ T5550] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 237.500888][ T5550] EXT4-fs (loop4): Quota write (off=8, len=24) cancelled because transaction is not started [ 237.532684][T14689] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2426'. [ 237.548602][T14688] loop0: detected capacity change from 0 to 1024 [ 237.557716][T14688] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 237.574563][T14679] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 237.658683][T14700] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2430'. [ 237.707725][T14706] loop2: detected capacity change from 0 to 512 [ 237.767897][T14706] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 237.787789][T14706] EXT4-fs (loop2): orphan cleanup on readonly fs [ 237.795762][T14706] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #16: comm syz.2.2433: corrupted inode contents [ 237.808465][T14708] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 237.831723][T14708] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 237.849750][T14708] netlink: 'syz.4.2434': attribute type 1 has an invalid length. [ 237.859803][T14706] EXT4-fs (loop2): Remounting filesystem read-only [ 237.866845][T14706] EXT4-fs (loop2): 1 truncate cleaned up [ 237.978720][T14717] loop1: detected capacity change from 0 to 2048 [ 238.012275][ T1599] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 238.022818][ T1599] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 238.033431][ T1599] EXT4-fs (loop2): Quota write (off=8, len=24) cancelled because transaction is not started [ 238.362791][T14733] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 238.521109][T14738] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2445'. [ 238.597088][T14729] loop0: detected capacity change from 0 to 2048 [ 238.670417][T14742] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2446'. [ 238.693891][T14735] loop4: detected capacity change from 0 to 2048 [ 238.827250][T14750] loop2: detected capacity change from 0 to 512 [ 238.858665][T14750] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 238.919418][T14750] EXT4-fs error (device loop2): ext4_quota_enable:7120: comm syz.2.2450: Bad quota inum: 29696, type: 1 [ 238.963051][T14750] EXT4-fs warning (device loop2): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=29696). Please run e2fsck to fix. [ 238.987618][T14750] EXT4-fs (loop2): mount failed [ 239.019904][T14766] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 239.034770][T14766] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 239.065420][T14766] netlink: 'syz.4.2454': attribute type 1 has an invalid length. [ 239.091851][T14766] loop4: detected capacity change from 0 to 512 [ 239.117740][T14766] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 239.134385][T14771] loop3: detected capacity change from 0 to 512 [ 239.141339][T14766] EXT4-fs (loop4): 1 truncate cleaned up [ 239.166906][T14771] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 239.175415][T14771] EXT4-fs (loop3): orphan cleanup on readonly fs [ 239.211287][T14771] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #16: comm syz.3.2457: corrupted inode contents [ 239.225614][T14771] EXT4-fs (loop3): Remounting filesystem read-only [ 239.232371][T14771] EXT4-fs (loop3): 1 truncate cleaned up [ 239.238175][ T1599] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 239.248763][ T1599] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 239.259419][ T1599] EXT4-fs (loop3): Quota write (off=8, len=24) cancelled because transaction is not started [ 239.292681][T14785] loop2: detected capacity change from 0 to 512 [ 239.327889][T14785] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a842c01c, mo2=0002] [ 239.337580][T14785] System zones: 0-2, 18-18, 34-35 [ 239.343651][T14793] netlink: 'syz.0.2463': attribute type 1 has an invalid length. [ 239.359895][T14785] ext4 filesystem being mounted at /468/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 239.389654][T14793] 8021q: adding VLAN 0 to HW filter on device bond1 [ 239.428812][T14793] 8021q: adding VLAN 0 to HW filter on device bond1 [ 239.436228][T14793] bond1: (slave vti0): The slave device specified does not support setting the MAC address [ 239.464373][T14793] bond1: (slave vti0): Error -95 calling set_mac_address [ 239.479349][T14801] loop3: detected capacity change from 0 to 8192 [ 239.497571][T14801] vfat: Unknown parameter 'ÿÿÿÿ' [ 239.535263][T14795] loop1: detected capacity change from 0 to 2048 [ 239.580467][T14805] loop0: detected capacity change from 0 to 2048 [ 239.758358][T14819] loop2: detected capacity change from 0 to 2048 [ 239.928287][T14836] loop0: detected capacity change from 0 to 512 [ 239.937791][T14836] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a842c01c, mo2=0002] [ 239.955913][T14836] System zones: 0-2, 18-18, 34-35 [ 239.962709][T14836] ext4 filesystem being mounted at /464/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 239.983371][T14825] loop1: detected capacity change from 0 to 1024 [ 240.003641][T14825] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 240.072648][T14825] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 240.091680][T14833] loop3: detected capacity change from 0 to 2048 [ 240.180837][T14848] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 240.195341][T14848] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 240.204290][T14848] netlink: 'syz.4.2481': attribute type 1 has an invalid length. [ 240.231766][T14858] __nla_validate_parse: 6 callbacks suppressed [ 240.231779][T14858] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2485'. [ 240.233382][T14848] loop4: detected capacity change from 0 to 512 [ 240.256015][T14848] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 240.290823][T14848] EXT4-fs (loop4): 1 truncate cleaned up [ 240.293998][T14862] loop3: detected capacity change from 0 to 2048 [ 240.502117][T14876] loop3: detected capacity change from 0 to 512 [ 240.509848][T14876] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 240.529578][T14876] EXT4-fs error (device loop3): ext4_quota_enable:7120: comm syz.3.2492: Bad quota inum: 29696, type: 1 [ 240.541025][T14876] EXT4-fs warning (device loop3): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=29696). Please run e2fsck to fix. [ 240.556516][T14876] EXT4-fs (loop3): mount failed [ 240.651795][T14884] vhci_hcd: invalid port number 85 [ 240.657035][T14884] vhci_hcd: default hub control req: 0501 v0005 i0055 l4 [ 240.736294][T14889] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2497'. [ 240.774318][T14880] loop3: detected capacity change from 0 to 2048 [ 240.867155][ T3405] hid_parser_main: 183 callbacks suppressed [ 240.867173][ T3405] hid-generic 0000:0000:0000.002F: unknown main item tag 0x0 [ 240.880575][ T3405] hid-generic 0000:0000:0000.002F: unknown main item tag 0x0 [ 240.888052][ T3405] hid-generic 0000:0000:0000.002F: unknown main item tag 0x0 [ 240.895611][ T3405] hid-generic 0000:0000:0000.002F: unknown main item tag 0x0 [ 240.903057][ T3405] hid-generic 0000:0000:0000.002F: unknown main item tag 0x0 [ 240.910568][ T3405] hid-generic 0000:0000:0000.002F: unknown main item tag 0x0 [ 240.917975][ T3405] hid-generic 0000:0000:0000.002F: unknown main item tag 0x0 [ 240.925365][ T3405] hid-generic 0000:0000:0000.002F: unknown main item tag 0x0 [ 240.932839][ T3405] hid-generic 0000:0000:0000.002F: unknown main item tag 0x0 [ 240.940233][ T3405] hid-generic 0000:0000:0000.002F: unknown main item tag 0x0 [ 240.948464][ T3405] hid-generic 0000:0000:0000.002F: hidraw0: HID v0.00 Device [syz0] on syz1 [ 240.975078][T14902] fido_id[14902]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 241.013702][ T2955] hid-generic 0000:0000:0000.0030: hidraw0: HID v0.00 Device [syz0] on syz1 [ 241.032893][T14903] loop2: detected capacity change from 0 to 512 [ 241.058465][T14906] fido_id[14906]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 241.079925][T14907] loop1: detected capacity change from 0 to 512 [ 241.087573][T14903] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 241.108164][T14903] EXT4-fs (loop2): orphan cleanup on readonly fs [ 241.117706][T14907] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 241.126322][T14903] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #16: comm syz.2.2502: corrupted inode contents [ 241.139878][T14907] EXT4-fs (loop1): orphan cleanup on readonly fs [ 241.147741][T14903] EXT4-fs (loop2): Remounting filesystem read-only [ 241.154521][T14903] EXT4-fs (loop2): 1 truncate cleaned up [ 241.162301][ T3438] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 241.172899][ T3438] __quota_error: 501 callbacks suppressed [ 241.172913][ T3438] Quota error (device loop2): write_blk: dquota write failed [ 241.186069][ T3438] Quota error (device loop2): remove_free_dqentry: Can't write block (5) with free entries [ 241.196051][ T3438] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 241.206608][ T3438] Quota error (device loop2): write_blk: dquota write failed [ 241.213971][ T3438] Quota error (device loop2): free_dqentry: Can't move quota data block (5) to free list [ 241.226539][ T3438] EXT4-fs (loop2): Quota write (off=8, len=24) cancelled because transaction is not started [ 241.227167][T14907] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #16: comm syz.1.2501: corrupted inode contents [ 241.236629][ T3438] Quota error (device loop2): v2_write_file_info: Can't write info structure [ 241.236744][ T3438] Quota error (device loop2): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 241.258784][T14907] EXT4-fs (loop1): Remounting filesystem read-only [ 241.295195][T14907] EXT4-fs (loop1): 1 truncate cleaned up [ 241.300996][ T3438] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 241.311527][ T3438] Quota error (device loop1): write_blk: dquota write failed [ 241.318952][ T3438] Quota error (device loop1): remove_free_dqentry: Can't write block (5) with free entries [ 241.328954][ T3438] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 241.339509][ T3438] Quota error (device loop1): write_blk: dquota write failed [ 241.346992][ T3438] Quota error (device loop1): free_dqentry: Can't move quota data block (5) to free list [ 241.357814][ T3438] EXT4-fs (loop1): Quota write (off=8, len=24) cancelled because transaction is not started [ 241.434301][T14927] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 241.448619][T14927] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 241.466216][T14927] loop1: detected capacity change from 0 to 512 [ 241.475675][T14927] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 241.507678][T14927] EXT4-fs (loop1): 1 truncate cleaned up [ 241.525071][T14941] loop4: detected capacity change from 0 to 2048 [ 241.718913][T14949] loop3: detected capacity change from 0 to 2048 [ 241.773433][T14951] loop4: detected capacity change from 0 to 512 [ 241.793321][T14954] loop0: detected capacity change from 0 to 8192 [ 241.819656][T14951] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 241.830139][T14951] EXT4-fs (loop4): orphan cleanup on readonly fs [ 241.858331][T14951] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #16: comm syz.4.2517: corrupted inode contents [ 241.920215][T14951] EXT4-fs (loop4): Remounting filesystem read-only [ 241.927696][T14951] EXT4-fs (loop4): 1 truncate cleaned up [ 241.933460][ T1599] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 241.943985][ T1599] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 241.956860][ T1599] EXT4-fs (loop4): Quota write (off=8, len=24) cancelled because transaction is not started [ 241.968893][T14967] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.008414][T14967] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.086441][T14967] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.116983][T14972] loop1: detected capacity change from 0 to 8192 [ 242.149109][T14967] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.215285][ T56] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 242.227830][ T56] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 242.238647][ T56] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 242.250568][ T56] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 242.400254][T14970] loop4: detected capacity change from 0 to 2048 [ 242.543136][T14976] loop3: detected capacity change from 0 to 2048 [ 242.594018][T14976] 9pnet_fd: Insufficient options for proto=fd [ 242.885833][T14987] loop2: detected capacity change from 0 to 2048 [ 242.903933][T14989] loop0: detected capacity change from 0 to 512 [ 243.095942][T14989] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 243.108712][T14989] EXT4-fs (loop0): orphan cleanup on readonly fs [ 243.147809][T14989] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #16: comm syz.0.2529: corrupted inode contents [ 243.159881][T14989] EXT4-fs (loop0): Remounting filesystem read-only [ 243.167782][T14989] EXT4-fs (loop0): 1 truncate cleaned up [ 243.175685][ T56] EXT4-fs (loop0): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 243.186229][ T56] EXT4-fs (loop0): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 243.199477][ T56] EXT4-fs (loop0): Quota write (off=8, len=24) cancelled because transaction is not started [ 243.288966][T15004] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.339451][T15004] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.376876][T15004] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.437294][T15004] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.451882][T15003] loop0: detected capacity change from 0 to 2048 [ 243.498965][ T3438] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.513484][ T3438] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.533458][ T3438] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.545939][ T3438] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.723823][T15051] loop0: detected capacity change from 0 to 2048 [ 244.014712][T15044] loop4: detected capacity change from 0 to 2048 [ 244.117312][T15100] loop1: detected capacity change from 0 to 1024 [ 244.124089][T15100] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 244.161347][T15079] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 244.266387][T15110] vhci_hcd: invalid port number 85 [ 244.271539][T15110] vhci_hcd: default hub control req: 0501 v0005 i0055 l4 [ 244.567420][T15119] loop3: detected capacity change from 0 to 8192 [ 244.574328][T15119] vfat: Unknown parameter 'ÿÿÿÿ' [ 244.619033][T15125] loop4: detected capacity change from 0 to 2048 [ 244.832754][T15145] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2558'. [ 244.959744][T15162] loop4: detected capacity change from 0 to 512 [ 244.982108][T15136] loop3: detected capacity change from 0 to 2048 [ 244.989747][T15162] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 244.999986][T15162] EXT4-fs (loop4): orphan cleanup on readonly fs [ 245.009570][T15162] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #16: comm syz.4.2562: corrupted inode contents [ 245.030643][T15162] EXT4-fs (loop4): Remounting filesystem read-only [ 245.040940][T15162] EXT4-fs (loop4): 1 truncate cleaned up [ 245.050692][T15136] 9pnet_fd: Insufficient options for proto=fd [ 245.054133][ T56] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 245.067530][ T56] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 245.083024][T15177] loop1: detected capacity change from 0 to 1024 [ 245.090153][T15177] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 245.104270][T15155] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 245.126973][ T56] EXT4-fs (loop4): Quota write (off=8, len=24) cancelled because transaction is not started [ 245.471143][T15216] loop0: detected capacity change from 0 to 512 [ 245.492013][T15216] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 245.523643][T15208] loop4: detected capacity change from 0 to 2048 [ 245.536757][T15216] EXT4-fs error (device loop0): ext4_quota_enable:7120: comm syz.0.2569: Bad quota inum: 29696, type: 1 [ 245.575909][T15216] EXT4-fs warning (device loop0): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=29696). Please run e2fsck to fix. [ 245.591761][T15216] EXT4-fs (loop0): mount failed [ 245.669359][T15227] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2571'. [ 245.825096][T15235] loop4: detected capacity change from 0 to 512 [ 245.841939][T15235] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 245.865617][T15241] loop0: detected capacity change from 0 to 1764 [ 245.877814][T15241] iso9660: Unknown parameter 'overriderockp%rm' [ 245.898550][T15235] EXT4-fs (loop4): 1 truncate cleaned up [ 245.971041][T15223] loop2: detected capacity change from 0 to 2048 [ 246.023286][T15223] 9pnet_fd: Insufficient options for proto=fd [ 246.496721][T15319] loop2: detected capacity change from 0 to 512 [ 246.508521][T15319] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 246.526620][T15319] EXT4-fs error (device loop2): ext4_quota_enable:7120: comm syz.2.2583: Bad quota inum: 29696, type: 1 [ 246.538045][T15319] EXT4-fs warning (device loop2): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=29696). Please run e2fsck to fix. [ 246.553412][T15319] EXT4-fs (loop2): mount failed [ 246.668251][T15334] loop2: detected capacity change from 0 to 8192 [ 246.678136][T15334] vfat: Unknown parameter 'ÿÿÿÿ' [ 246.779422][T15361] loop3: detected capacity change from 0 to 512 [ 246.815111][T15361] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a842c01c, mo2=0002] [ 246.823126][T15361] System zones: 0-2, 18-18, 34-35 [ 246.866447][T15361] EXT4-fs mount: 150 callbacks suppressed [ 246.866473][T15361] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 246.885040][T15361] ext4 filesystem being mounted at /588/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 246.922238][T15361] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2588'. [ 246.931271][T15361] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2588'. [ 246.961341][T15379] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2595'. [ 246.977241][T15371] loop2: detected capacity change from 0 to 8192 [ 247.041441][T15386] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2596'. [ 247.084087][T15388] loop0: detected capacity change from 0 to 2048 [ 247.091180][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 247.106513][T15388] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 247.149338][ T3302] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 247.218591][T15369] loop1: detected capacity change from 0 to 2048 [ 247.227722][ T2992] ================================================================== [ 247.235802][ T2992] BUG: KCSAN: data-race in set_nlink / set_nlink [ 247.242130][ T2992] [ 247.244444][ T2992] read to 0xffff8881070f69e8 of 4 bytes by task 3294 on cpu 0: [ 247.251975][ T2992] set_nlink+0x29/0xb0 [ 247.256044][ T2992] kernfs_iop_permission+0x1e2/0x220 [ 247.261326][ T2992] inode_permission+0x1c7/0x310 [ 247.266177][ T2992] link_path_walk+0x162/0x900 [ 247.270848][ T2992] path_openat+0x1de/0x2170 [ 247.275341][ T2992] do_filp_open+0x109/0x230 [ 247.279831][ T2992] do_sys_openat2+0xa6/0x110 [ 247.284464][ T2992] __x64_sys_openat+0xf2/0x120 [ 247.289245][ T2992] x64_sys_call+0x2e9c/0x2ff0 [ 247.293920][ T2992] do_syscall_64+0xd2/0x200 [ 247.298428][ T2992] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 247.304317][ T2992] [ 247.306624][ T2992] write to 0xffff8881070f69e8 of 4 bytes by task 2992 on cpu 1: [ 247.314243][ T2992] set_nlink+0x99/0xb0 [ 247.318341][ T2992] kernfs_iop_permission+0x1e2/0x220 [ 247.323627][ T2992] inode_permission+0x1c7/0x310 [ 247.328485][ T2992] link_path_walk+0x162/0x900 [ 247.333169][ T2992] path_lookupat+0x63/0x2a0 [ 247.337678][ T2992] filename_lookup+0x147/0x340 [ 247.342437][ T2992] vfs_statx+0x9d/0x390 [ 247.346590][ T2992] vfs_fstatat+0x115/0x170 [ 247.351006][ T2992] __se_sys_newfstatat+0x55/0x260 [ 247.356030][ T2992] __x64_sys_newfstatat+0x55/0x70 [ 247.361060][ T2992] x64_sys_call+0x135a/0x2ff0 [ 247.365729][ T2992] do_syscall_64+0xd2/0x200 [ 247.370237][ T2992] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 247.376125][ T2992] [ 247.378434][ T2992] value changed: 0x00000008 -> 0x00000009 [ 247.384312][ T2992] [ 247.386623][ T2992] Reported by Kernel Concurrency Sanitizer on: [ 247.392758][ T2992] CPU: 1 UID: 0 PID: 2992 Comm: udevd Tainted: G W 6.16.0-syzkaller-12245-g2988dfed8a5d #0 PREEMPT(voluntary) [ 247.405945][ T2992] Tainted: [W]=WARN [ 247.409734][ T2992] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 247.419780][ T2992] ================================================================== [ 247.474245][T15398] loop0: detected capacity change from 0 to 8192 [ 247.479569][T15369] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 247.544153][ T3307] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 249.184754][ T29] kauditd_printk_skb: 361 callbacks suppressed [ 249.184770][ T29] audit: type=1400 audit(1754802317.282:11690): avc: denied { egress } for pid=22 comm="ksoftirqd/1" saddr=fe80::1b daddr=ff02::2 netif=gretap0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=1 [ 249.214532][ T29] audit: type=1400 audit(1754802317.282:11691): avc: denied { sendto } for pid=22 comm="ksoftirqd/1" saddr=fe80::1b daddr=ff02::2 netif=gretap0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:node_t tclass=node permissive=1