last executing test programs: 3.99472671s ago: executing program 0 (id=496): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbea, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_clone(0x4021400, 0x0, 0x9000, 0x0, 0x0, 0x0) r1 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x11ff, &(0x7f0000001280)="$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") bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = openat$incfs(r1, &(0x7f00000001c0)='.log\x00', 0x31000, 0x24) bind$can_j1939(r2, &(0x7f0000000280)={0x1d, 0x0, 0x3, {0x1, 0x0, 0x2}, 0xfe}, 0x18) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair$tipc(0x1e, 0x4, 0x0, 0x0) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x0) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x775, &(0x7f0000001180)="$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") r5 = open(&(0x7f0000000300)='./file1\x00', 0x14927e, 0x0) fallocate(r5, 0x0, 0x0, 0x1001f0) fallocate(r5, 0x3, 0x0, 0x10000) r6 = syz_socket_connect_nvme_tcp() setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000080)=r3, 0x4) r7 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) write(r8, &(0x7f0000004200)='t', 0x1) sendfile(r8, r7, 0x0, 0x3ffff) sendfile(r8, r7, 0x0, 0x7ffff000) syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000200)='./file0\x00', 0x10814, &(0x7f0000000240)=ANY=[@ANYRES32=r7, @ANYRESHEX, @ANYBLOB="00006b746769643d0092", @ANYRESOCT=r4, @ANYRES16], 0x1, 0x1fe, &(0x7f0000000700)="$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") 3.00837756s ago: executing program 0 (id=512): r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f0000000080)={&(0x7f0000000380)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0) 2.12307924s ago: executing program 0 (id=517): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbea, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_clone(0x4021400, 0x0, 0x9000, 0x0, 0x0, 0x0) r1 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x11ff, &(0x7f0000001280)="$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") bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = openat$incfs(r1, &(0x7f00000001c0)='.log\x00', 0x31000, 0x24) bind$can_j1939(r2, &(0x7f0000000280)={0x1d, 0x0, 0x3, {0x1, 0x0, 0x2}, 0xfe}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair$tipc(0x1e, 0x4, 0x0, 0x0) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x0) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x775, &(0x7f0000001180)="$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") r4 = open(&(0x7f0000000300)='./file1\x00', 0x14927e, 0x0) fallocate(r4, 0x0, 0x0, 0x1001f0) fallocate(r4, 0x3, 0x0, 0x10000) syz_socket_connect_nvme_tcp() r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) write(r6, &(0x7f0000004200)='t', 0x1) sendfile(r6, r5, 0x0, 0x3ffff) sendfile(r6, r5, 0x0, 0x7ffff000) getresgid(0x0, 0x0, 0x0) syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000200)='./file0\x00', 0x10814, &(0x7f0000000240)=ANY=[@ANYRES32=r5, @ANYRESHEX, @ANYBLOB="00006b746769643d0092", @ANYRESOCT=r3, @ANYRES16], 0x1, 0x1fe, &(0x7f0000000700)="$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") 1.90667498s ago: executing program 2 (id=524): r0 = syz_io_uring_setup(0x3bc1, &(0x7f0000000780)={0x0, 0x942e, 0x10100, 0x0, 0x3ca}, &(0x7f0000000100)=0x0, &(0x7f0000000040)=0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r3}, 0x38) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r4}, 0x10) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x4007, @fd, 0x0, &(0x7f00000001c0)=[{0x0}, {0x0}], 0x2}) io_uring_enter(r0, 0x567, 0x72, 0x0, 0x0, 0x0) 1.82558361s ago: executing program 2 (id=526): bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x3) ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f0000000100)=0x80000000) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0xc, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7, @void, @value}, 0x94) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000000200)={0x7, 0x1, 0x207, 0x3, 0xfffffffe, 0x1, 0x7, 0x8000}, 0x20) sendto$inet6(r2, 0x0, 0x0, 0x40000, &(0x7f0000000280)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0) select(0x0, 0x0, 0x0, &(0x7f0000000080)={0x6}, &(0x7f00000000c0)={0x0, 0x2}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)={0x1c, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x20008040}, 0x4000010) r3 = syz_io_uring_setup(0x77e8, &(0x7f0000000080)={0x0, 0xfffffffd, 0x10100}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r6, &(0x7f0000000200)=ANY=[@ANYBLOB=','], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r6, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r3, 0x2d3e, 0x0, 0x0, 0x0, 0x0) unshare(0x2a060400) r7 = socket(0x28, 0x1, 0x0) getsockopt$nfc_llcp(r7, 0x28, 0x8, 0xfffffffffffffffe, 0x20000000) 1.51882712s ago: executing program 2 (id=530): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0x6, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000008c0)=@newtaction={0xa8, 0x30, 0x1, 0x0, 0x25dfdbfc, {}, [{0x94, 0x1, [@m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc}, {0xc}}}, @m_ife={0x64, 0x1, 0x0, 0x0, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x4}}}, @TCA_IFE_METALST={0x1c, 0x6, [@IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_TCINDEX={0x6, 0x5, @val=0x7fff}, @IFE_META_SKBMARK={0x8, 0x1, @val=0x1f4}]}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa8}, 0x1, 0x0, 0x0, 0x8010}, 0xc0) r2 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x1}, 0x8002, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000000)='\v-#-\\\x00') r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r0}, &(0x7f0000000800), &(0x7f0000000840)}, 0x20) setsockopt$inet6_IPV6_RTHDRDSTOPTS(0xffffffffffffffff, 0x29, 0x37, &(0x7f0000000080)={0x6, 0x0, '\x00', [@padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}]}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000900850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kfree\x00', r5}, 0x10) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil) syz_emit_ethernet(0x46, &(0x7f00000002c0)={@link_local, @local, @val={@void}, {@arp={0x806, @ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0x4, @broadcast, @mcast1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @loopback}}}}, 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x10, &(0x7f0000000640)={[{@prjquota}, {@delalloc}]}, 0xfe, 0x480, &(0x7f0000000180)="$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") 1.40469589s ago: executing program 1 (id=534): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000010c0)='/proc/bus/input/devices\x00', 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x80000, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000800"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000280)=[{0x200000000006, 0x0, 0xfd, 0x7ffc0002}]}) preadv(r0, &(0x7f0000000000)=[{&(0x7f0000000080)=""/4094, 0xffe}], 0x1, 0x33, 0x1) 1.27213824s ago: executing program 2 (id=537): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) socket$key(0xf, 0x3, 0x2) r0 = syz_io_uring_complete(0x0) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_SET(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)={0xc4, r1, 0x300, 0x70bd2c, 0x25dfdbfe, {}, [@DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0xe}, @DEVLINK_ATTR_RATE_NODE_NAME={0x74, 0xa8, @random="ef267c6398f8f82d415172111fc714fadccf99116887a2b993954c5068a58aa362258c42c20159a8e30550abe15b69b98f3743b3a4a1325a1f6458f646a06711122ea9f19324aea151a49ba23420b4c6b9aae379fd7eb21c15bfbf6eb087d7efa7cf05a8d174b2642fd2befd8e66e21d"}, @DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0xff}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0xc4}, 0x1, 0x0, 0x0, 0x881}, 0x80) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000001040)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in=@broadcast, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0xa}, {@in=@empty, 0x0, 0x32}, @in=@local, {0x0, 0x0, 0x0, 0x1}, {}, {}, 0x3, 0x3505, 0xa, 0x2, 0x0, 0x8}, [@algo_crypt={0x48, 0x2, {{'pcbc(fcrypt)\x00'}}}]}, 0x138}, 0x1, 0xe}, 0x0) 1.24703465s ago: executing program 1 (id=538): bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x3) ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f0000000100)=0x80000000) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0xc, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7, @void, @value}, 0x94) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000000200)={0x7, 0x1, 0x207, 0x3, 0xfffffffe, 0x1, 0x7, 0x8000}, 0x20) sendto$inet6(r2, &(0x7f0000847fff)='X', 0x1, 0x40000, &(0x7f0000000280)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0) select(0x0, 0x0, 0x0, &(0x7f0000000080)={0x6}, &(0x7f00000000c0)={0x0, 0x2}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x20008040}, 0x4000010) r3 = syz_io_uring_setup(0x77e8, &(0x7f0000000080)={0x0, 0xfffffffd, 0x10100}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r6, &(0x7f0000000200)=ANY=[@ANYBLOB=','], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r6, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r3, 0x2d3e, 0x0, 0x0, 0x0, 0x0) unshare(0x2a060400) r7 = socket(0x28, 0x1, 0x0) getsockopt$nfc_llcp(r7, 0x28, 0x8, 0xfffffffffffffffe, 0x20000000) 1.13554221s ago: executing program 1 (id=539): r0 = socket(0x840000000002, 0x3, 0xff) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1e000000000000000400000001"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x10) process_mrelease(0xffffffffffffffff, 0x0) sendmmsg$inet(r0, &(0x7f0000000240)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, 0x0, 0x0, &(0x7f00000027c0)=[@ip_retopts={{0x18, 0x0, 0x7, {[@cipso={0x86, 0x6, 0x3}]}}}], 0x18}}], 0x1, 0x8044) 1.0359104s ago: executing program 1 (id=540): bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f0000000100)=0x80000000) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000200)={0x7, 0x1, 0x207, 0x3, 0xfffffffe, 0x1, 0x7, 0x8000}, 0x20) sendto$inet6(r1, &(0x7f0000847fff)='X', 0x1, 0x40000, &(0x7f0000000280)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x18) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0) select(0x0, 0x0, 0x0, &(0x7f0000000080)={0x6}, &(0x7f00000000c0)={0x0, 0x2}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)={0x1c, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x20008040}, 0x4000010) r2 = syz_io_uring_setup(0x77e8, &(0x7f0000000080)={0x0, 0xfffffffd, 0x10100}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r5, &(0x7f0000000200)=ANY=[@ANYBLOB=','], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r5, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r2, 0x2d3e, 0x0, 0x0, 0x0, 0x0) unshare(0x2a060400) r6 = socket(0x28, 0x1, 0x0) getsockopt$nfc_llcp(r6, 0x28, 0x8, 0xfffffffffffffffe, 0x20000000) 1.035407921s ago: executing program 2 (id=541): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_io_uring_setup(0x831, &(0x7f0000000300)={0x0, 0x0, 0x10100, 0x0, 0x80000}, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r2, 0x16, &(0x7f0000000380)={&(0x7f0000001000)={[{0x0}, {0x0}, {0x0}, {0x0}]}, 0x4}, 0x1) syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x20, 0x2, r0, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0}}) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) recvmsg$kcm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000500)=""/4096, 0x1000}], 0x1}, 0x0) io_uring_enter(r2, 0x27e2, 0x0, 0x0, 0x0, 0x0) r6 = socket$inet6(0xa, 0xa, 0x0) bind$inet6(r6, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback, 0xfffffffc}, 0x1c) listen(r6, 0x6) r7 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r7, &(0x7f0000000040)={0xa, 0x4e20, 0x6, @empty}, 0x1c) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000680)=ANY=[@ANYBLOB="12010000000000421008020000000000000109022400011c000000090400000103000000092100000001220300090581030000000000"], 0x0) syz_emit_ethernet(0x1f, &(0x7f0000000140)=ANY=[@ANYBLOB="bbbbbbbb05000000000000000011aa000f7e625e000000cfb759d0d50b000c22c0c91d096aa9af89bb04c91c51562a63b5b8e3935491b431abc7b29ee4459918588212b693fb91605762d6eb8fb965b3b501ea61a73448757cd196b4684a6c3eb0a52360b9864cacf3"], 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000e412a9f21800200000000000001000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x80, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r8 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r8, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) setsockopt$SO_ATTACH_FILTER(r8, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x5}]}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x7, 0x2a, &(0x7f0000002000)=ANY=[@ANYBLOB="18000000ffffffff000000000001000018280000", @ANYRES32, @ANYRES64=r1, @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYRESHEX=0x0, @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a50000009500000000000000851000d6639a8f000b0000001800000000000100000000000900000095000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x60, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, @void, @value}, 0x94) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x4b) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8946, &(0x7f00000002c0)={'netdevsim0\x00', @random="443c7086e18e"}) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000300000004000000ff00000000000000", @ANYRES32=0x1, @ANYBLOB="b5061e0000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x3, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r9 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE_wg(r9, 0x1, 0x19, &(0x7f0000000080)='wg0\x00', 0x4) sendmmsg$inet(r9, &(0x7f0000001080)=[{{&(0x7f0000000680)={0x2, 0x4e20, @multicast2}, 0x10, 0x0}}, {{&(0x7f00000005c0)={0x2, 0x4e04, @empty}, 0x10, &(0x7f0000000bc0)=[{&(0x7f0000000b40)}, {0x0}], 0x2, &(0x7f0000002180)=ANY=[@ANYBLOB="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"], 0x28}}], 0x2, 0x4094) accept4(r6, 0x0, 0x0, 0x800) 1.02166504s ago: executing program 4 (id=542): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000010c0)='/proc/bus/input/devices\x00', 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x80000, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, &(0x7f0000000280)}) preadv(r0, &(0x7f0000000000)=[{&(0x7f0000000080)=""/4094, 0xffe}], 0x1, 0x33, 0x1) 941.26572ms ago: executing program 4 (id=543): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81e, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r2) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r2, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x4040054) 935.63778ms ago: executing program 0 (id=544): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r0}, 0x10) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x3, 0x3) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) getsockopt$WPAN_WANTACK(r1, 0x0, 0x0, &(0x7f00000003c0), &(0x7f0000000500)=0x4) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) r4 = socket$inet_smc(0x2b, 0x1, 0x0) bind$inet(r4, &(0x7f0000000140)={0x2, 0x4e22, @multicast2}, 0x10) execve(&(0x7f0000000040)='./file0\x00', &(0x7f0000000200)={[&(0x7f0000000080)='mm_page_free\x00', &(0x7f0000000180)='GPL\x00', &(0x7f00000001c0)='mm_page_free\x00']}, &(0x7f0000000380)={[&(0x7f0000000280)='^,)!-\x00', &(0x7f00000002c0)='\x00', &(0x7f0000000300)='.),$$@\x00', &(0x7f0000000340)='GPL\x00']}) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) 926.64793ms ago: executing program 1 (id=545): restart_syscall() syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x11ff, &(0x7f0000001280)="$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") syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc000, &(0x7f00000006c0), 0x2, 0x25a, &(0x7f0000000840)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) r1 = creat(&(0x7f0000000140)='./file0\x00', 0x14) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r2, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000004c0)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000040)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "560400", 0x14, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2, 0x0, 0x0, 0x4}}}}}}}, 0x0) write$UHID_INPUT(r1, &(0x7f0000000d40)={0x8, {"b0310ddfc99829bd6f7eb68aa093151f645182a1b6216ec35095b1d4a2c6fc2ab8df9e239e3165141a14bef6e6c06bc758d686e240847c7f70ba8fb52ec5ee347878260effa07688df85367629509b70469c7c6f30e2dfbe1cfab58d7bbb18f365c7f3553ba27a04a5ae849ebcac60cd814df13925b4eebc41ad5c587925f2b8e4b627ef69899dc4ffaf7239179f6fafc50f4e3ba6e93c68415e2d48305aac957d723379e3f3036baaebff03f5c931d3f8fddca952daf4d1aa30dce3a5cfd30ca244b2478dba79b707587619fb409a1ed3e3afd5ebff534c765c4a9944611bf02afa7720899c3dc48ec561c623ba0b6ee7dc1fd4c3c5925ec05553cbb9209608250db8c6423f81eaa06f4e355227e1037e8662a2a649689b062142754415c39f92e71aeccc3066e583844f95210704c9eeb0f942cd9d48c3efbf7d0751987e7e3ca0c8ff916f5266b7e496963a330b245f721f7adbcb55e33bc23b74e50c72c026fe5d3dae94c7a558a5198ee65cd75a528fb5f713b0573301460ad4830e72d6e56c13497763a9e141e2178c4c655d3054722f00fb3d145c63f401a9b286a4df43c0c1ffe755a0f887e0dbb61687655c5545050a1fda42bd4166f9c3431c5e5c25ee5e060610d890e5e1959dc5c642d6db925de6ac30c5de607d5b920e203baeeac1e0e1bed699c4d277291af483e30112cc47d71dfb44c73097c6994f8a533218fec11ef5f4d6d35d36ce36a9c5df1f43626ce0b8d218aba7b8ea550a86e74aa45e50e0b1c6b8d63dd82f9b928f66a6be6ab66f927580e202ec99d57ccb09d9b35c603167d9012c848b804bce12918a3c48dc917a000c23a45e48e2255c96bc556c52e9120589c461f24ddc08fa2bd611a9a0145f1c57183a097abb54e3878f39f0b3532978c47148c03cf095efd6caac6b4e53cdf3e3199bd19846523b99d5a87b812ea171c5f4e29a6a2bf94ef6ea7bc030f2e1c713bcf33d6e56712f7acb23489b41ad99dfe86cc505b570a3e9e0a9172884baf5cd1a3e413a0ec2b77f278c0281c66f49f5c48dd3b673317ecf00bd39fd86cbfa3eda23ffbf5a75a119607446452acb2066eeb22f9bbb62805e4b30f5a813f9eac681033a1973067cd18163f6a9fa9a328920031ed2e696a5a5ba2e53333ce004132f32877173fdad7f90a0358a3f0bcf3a0fa863b2bc8f883af0b6d23023f6fa38c182d7563a6c641bb797f40f1fd0fbebad92f3939a0a06601442b80ff9327ba08fe6a36791f1cb99bebe2c956d44c602da9c8a9f9bc359ad753f333381f0713bb431c6c78d89136d126b756bdfc220599afe3167d3795e5ff848c8f55cfaf65500b61d0e4f376c0e1de9d9fede86a86c6b610ccb55b24889cc5ad940aff204cde12e779a89c4e27ace4cbd619fe763d60efc55ce877320e8d49abb027c0384a659b88f7c69fad65e13c17f38e5db6bf3c6bbfeb5d5e1dbfd6ea67a5065050edea855acf3ded8c0dc843a8efbae24d17aab6398d7df3a4952ac14c1dc562a6011ea9d5fb1e107d153907c0e35f1127ac9e5a65ca266f7e1af925ce80da73b50976aa76efc0147e3bb52ef77f12618cdcd96f8500eff004c845e1904d5c8f1e8a693657d499d21f15104729398c0bfeb51dd67153ff92158725828749b28e3c5a804c7365f1c67cd3360d1a0649a5af19dc03fb212959f1a9daa5b4806e5e0ce43fef847148d2f0f1ab5659bb1086283bab6f203fa174a634320c68aed5dfaddc1a675dbc8203839d7c2bd0d2c6928b67615a16a682f789bad263a9a102e92ca7d71e0959c20c20cf5914f1beaa4eec87988f322ba76b8f0c1dad4f17219acef27e603295427045ca621b742bbfefee5f64b6e5a626382c1a1869b6212b5a3f1ebb9ed9da79a97ba70deaf95874c9f20249fbd54d3e25fd6d211c97a9500ec5155ece566b71807104124d8a212d9c8a23f499a422a5e82a52feb48978bea10df4fd1d012c4147cd2cde855c2fe70fa7b08a9b13763df42c7ac8058a6cf79c5d31a8465d8893ca7a0e8128db3b4a7f71dd4516779f2efa4a2bee93302c35b9493b3209795ed7ff9bad1359f6b67d6e0cb7bd6f28ce21e948f245d6d7494e4840212a05a5a95ece3e422024c5cf73223fcb85d3014778c79e5af17f6f18e1cda646aa8dc68f7f143e6ad189ca579d34fec657ba34868167f22053e5a4578e49a43c92fa60272f1e3c60eabb3d2cff8c2185b89f3ce7e076f8e2900faf7f2ad02cbc625c208e42746fc90ed43fc01fa197a00e80fbc251aba7f8f0b9ab1128ad14679dd2e3abdcdb8bdea9390025f716ce01710ea9b3c99f3047fe89e290718e7a64a94f68d20021f5f29697a4346b0bc8b8bb26aa8f1ff5dce7fe1a9321829d00b65a60863196ab19558298f8e98e2f38eb9c1e1083e801d563344fa9b5bf0f78e887bbf647b3ad260f5ad612429dc296229ab70a594edcb7d19eb39743359bf865fe1533c2a0310e59496f0063553cfd6e079b69a53b644553d4b76e884daf7cc017f939031df59ac4681b75a8ce90e7824a95beefe970ce1900960a28a5aa193ea5ec3b7d5972599d86ad90b4eda6855fabc33a019bd5527e7d435a130cad683bfd165bbeeb7414750e60d26601a6479e1688f2a385cc2f323cb87542b94c596ece07dabdde727b011df26855501534acf6dffe8b175be7a97be85031c0c6094c61a3a3fc241f59a25362b5a2705fddef1b9ef58f1a3c4c0e6c5cb8cf9eaa1a7457850114288bacead2e77307fb849f5aa23fadc45784184a721a3248f8433497b9f27982045915f7a0be60d74239236d823bee9c3fee0014b3d45ed0f3abb7834f9bd35ba10bf98666fad38e42dd4c82f1119b71c6ccbbd66ed3cbf80fa27ea5b45523fd7fb572c67cbfe2b8f7cf8cc1d68f9867fd681179679837bb5207cc198bc3f486df851de162f74c8796a251d69dceaa5d669274af645de6df0d3dd7af65416c88dfca1772934312cd354c78fe1efe5dd47689df05f46d89c433b7ecf22bed0871b7b43700bbf7101277b802b128f28e5c15c0a2cee6b249f6af0441d7a766f72da943ccc254b9155fbde24bc1db9e8b84732cf1e9a202d1d072ad1c403b4c2d37f379f55ae2ac2cd871364a1905434752bfc0849da48df8abb51ffc3d2d95db8a9fe362c1837240395fb644a59663a6331144a10481934ed265bc9ddcbceb1deebe35d0a6bc5818b9dcbc5462b9ea2af3518df3e7a0fa1c661b4393a6e38743221cd0223e6f57bd4a17389e0ab3c4d91c0f4528a706266591b870b8048ddcd75c0523676c5f89ead57df83a56c0962d43539766bc950a3a72139f184ffbd1815a9e64fbce0e74c13c1bfa9bef4adef6a7ed152dec2a01cb507ca21c80f747f17bca115e37116a1648551b3a2797daccf1f285dd3796b61fb5bc90e6a89d646fe7de7f6e297c877737ad2463fd9ad17892f2fbb24a05aecc11fd262e38d8375d770887a2005a8468e376ca3b32c93defa30422ac220357eee614daa50820dff125d53ad192801ce358b0e9bce30d2c10e2e6779ceeb9d3a400ff6902b6494a5fda427ae704674735cf3233abb97ba27a281afa443d036527a753e730bbf7bafe437efe78d6cf23f217eaba9e45d6914baaa6351aa45891a0a59d5bc0480d3d56ed75154cc965770db7caebee4a306c69073a15381b40ae5ade71357b79f2a3f1ce4f4d1dcda768987d5f60120961874348175a4b5aa1da7cc0ee8a9040346ecc665d5fdb9a9c1cbac3100973e3108fbffed3eb9ab5df591578501134c5eb8c51ac770067402ee33db6681e77747747b1c67a531ec2876356746574d3c94ef75a486d1a7e458d287bf15e76243d37360bd3f0d78d967de4489c9b63bc671fd1afa7673b236819137a669e178bcdfabf3c16e687f9c854da03926d02b1644a0449ca36b339e197cf2361f34b2aee54d4cec307446499074917b86c4e83d6f598ea7da2105526d9204da8dd9e0035ff4f1dbe14039c1d64c7cfb727d6e7bbdbb22beb9e18f69e1698caf06be1f166aba37078221629de6ca449636468c89b254e5b173d0abbf4735968279ad5a825541d97434c4334ceb7b3dea3c0f3170590a4a960284988aab25f2494098c9554151d7adbbb7606d1c101ae7343d80df1bff7dbc5123b57ea4fba3e93608a78056c08cfa533ddccfc4a69655145706e63460892403b66212d3748af727f01541e9835af475d8b06a8574878f8a36b071b8538a1d5e54f1eaef0842c9db7d59b4431ecc3a22d3472ca1e38d9270784c029226aa71a9644a1764fdc11a0c6c0f05c35c2a74cc5e8fd4f8053e1209811840315b25bd74aa944bf1d602c9e72a7814d04e54bfe904e32587ec816527372a63115f064e2e8e5a61c3a58208090d4c9e4e7fca502532af7b071caa9ca696e984aa10b8dc2e3091a911592738ba71022344daf7676118147bf699af0bc1ecb819fe052611641c529f3e2b9cbc96e5f48fd96ec4f5f9542ede14c5304c1efc9d492916c0afff0f84f6c58ceb9796f22124e5e28ff05da5a5698989a98afd8ec046aa95dd71ef2519b6464e2e6c4c15789cffa9950b99a76c0c2f7b4198e0d0f41988d649bfca72925a2b5021b98f2175e179b352785b18004ee08160c7cbefc9b76d083893ab28474a1bd5bff41457ef94760e421116da51738d9964077259a9a4f43900b0457343e7a680c554f96bc5ebb3921865caed83fb293660cc8023f0e911eb49ca329c3a65b7be93eb479ff40a0f042074b6ae2adfaf64dea8d83523913e921c6dbc59d0c8f7fa53c9d05944cfd2f7fde9507479211ea3d5adfda2ae727cd381d188666a820efa733de5a2f0170eefe007519dde29ecbb260f3a0461b14afc2c7dd689be1048a174370a3d130804601d42d061ad6ac1092322de227cd479cb9303c10864ec9f200c223758101688840a12362271043283386a7b7d86d2a64a3f97903232173222c48131a926356b608404772ae0af6a463855f7100191e0f76fa39c1197a54a836b96d0726f1f78f9038cd187f80cf0b12bd34c1a3e24f4003345c879ed25e817908bf7889b93274f2d7689f5ddc95c2e0f508aaadc7d3e3eaf77babcd873046c003c49d9d83307dd256c9e79c8dc494551036393a28730b976c9d901c58edc707fea14e83ae7ed6906e8cc4b2dc9ce360c5d4be899762af7b47293e4c06bf8206dbcd775b77fc0d0926ad66c8cf16e8f5f9b750f050177143e0f96abffa1ce6ec3301d86a3af31144c52b08604c52df23d1bcef4c2bd18bd3d4b73620bbec4e841de93e045c0ae7132f51bd5845a864f2bce0ff0710f1cae956f2e88c2b030cf3fcf4f6f0c60406b4038ecbf1047dc636ee27ecef3504b2b0f8314fb21a53c56ddcf481835e77370e8cd48417b212ff30e692591b81ab5566bf3b2ea3d3e5a1e1d77e9c4b63ecd890bcded35851da029b0705ceca22369710ef8e81c4f091a7de89f72008b563190b60b8fbb0ab9f56434cb2b1390453c4071d095e6c4e4b2083a655b5227189572cb8ca42a7452284177f144be8c2f20ee1a4c5c1033d449948a06c810d44d08425c7f5f17e0eaa258edede0c85ec86a0a9bc50711d244b0017aa63b6a1915069789f5bdc18bae05ac169b654117e2424d8208ab804efcc081bc0e7413c494b515a68dc0ed84296299963e814252c2933042bb5b85579254fa8c1171ff087ffefdb6e70c0cb1ae6b56de7ad3b121565c6de816c2abd059e8519a792091d6f8b1696de0e5c266e2af5f78bcf1c4ecaeb20774a9d6ac2e1a413b", 0x1000}}, 0x1006) fallocate(r0, 0x0, 0x0, 0x10fff9) recvmsg(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000240)=""/130, 0x82}, {&(0x7f00000000c0)}, {&(0x7f0000000180)=""/86, 0x56}, {&(0x7f0000002480)=""/4096, 0x1000}, {&(0x7f0000000300)=""/136, 0x88}], 0x5, &(0x7f0000000540)=""/192, 0xc0}, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0xc, r1, 0x0, 0x0, 0x0, 0x7e}) syz_io_uring_setup(0x4f4f, &(0x7f0000000440)={0x0, 0x4278, 0x400, 0x0, 0x0, 0x0, r0}, &(0x7f0000000000), &(0x7f00000002c0)) truncate(&(0x7f0000000140)='./file2\x00', 0x8800000) 876.01828ms ago: executing program 3 (id=546): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001880)={'bond_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=@newqdisc={0x9c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r1, {0x0, 0x6}, {0xffff, 0xffff}, {0xc}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x3, 0x1, 0x0, 0x2, 0x4}, 0xa4ca, 0x0, 0x0, 0x6, 0x0, 0x18, 0xb, 0xe, 0x3, 0x9, {0x10001, 0x7, 0x2, 0x7, 0x2, 0x7fffffff}}}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x6, 0x4, 0x7, 0x8, 0x0, 0x2}}, {0x4}}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0x48801}, 0x0) (fail_nth: 5) 875.38693ms ago: executing program 4 (id=547): open(&(0x7f0000000080)='./file0\x00', 0x1c1c41, 0x6) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES64=0x0], 0x20) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80800, 0x0) ioctl$TIOCMGET(r0, 0x5423, &(0x7f0000007000)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001a40)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000080000000c"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r2}, &(0x7f0000000300), &(0x7f0000000340)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r3}, 0x18) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="b9ff03076844268cb89e14f0080047e0ffff00124000633a77fbac141416e000000194029f034d2f87e589ca6aab845013f2325f1a3901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d75a058f6efa6d1f5f7ff4000000000000000000", 0x0, 0x6b, 0x60000000}, 0xf) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='kmem_cache_free\x00', r5, 0x0, 0x5}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x8, 0x0, 0x0, 0x7ffc1ffb}]}) rename(0x0, 0x0) dup(0xffffffffffffffff) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0xb, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r8}, 0x10) r9 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r9, 0x0, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x520, 0x340, 0x25, 0x148, 0x0, 0x60, 0x488, 0x2a8, 0x2a8, 0x488, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'geneve0\x00', {0x0, 0x0, 0x9, 0x0, 0x80ffffff, 0xffffffff, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x0, 0x6, './file0\x00'}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x6, 'syz0\x00'}}}, {{@ip={@empty, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth0_to_team\x00'}, 0x0, 0xe8, 0x148, 0x0, {}, [@common=@set={{0x40}}, @common=@unspec=@statistic={{0x38}}]}, @common=@SET={0x60}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x580) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r7}, 0x10) r10 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000300)={0x38, 0x1403, 0x1, 0x700, 0x0, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'sit0\x00'}}]}, 0x38}}, 0x0) 730.94061ms ago: executing program 3 (id=548): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000010c0)='/proc/bus/input/devices\x00', 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x80000, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000800"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000280)=[{0x200000000006, 0x0, 0xfd, 0x7ffc0002}]}) preadv(r0, &(0x7f0000000000)=[{&(0x7f0000000080)=""/4094, 0xffe}], 0x1, 0x33, 0x1) 704.720331ms ago: executing program 3 (id=549): bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x3) ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f0000000100)=0x80000000) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0xc, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7, @void, @value}, 0x94) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000000200)={0x7, 0x1, 0x207, 0x3, 0xfffffffe, 0x1, 0x7, 0x8000}, 0x20) sendto$inet6(r2, &(0x7f0000847fff)='X', 0x1, 0x40000, &(0x7f0000000280)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0) select(0x0, 0x0, 0x0, &(0x7f0000000080)={0x6}, &(0x7f00000000c0)={0x0, 0x2}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x20008040}, 0x4000010) r3 = syz_io_uring_setup(0x77e8, &(0x7f0000000080)={0x0, 0xfffffffd, 0x10100}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r6, &(0x7f0000000200)=ANY=[@ANYBLOB=','], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r6, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r3, 0x2d3e, 0x0, 0x0, 0x0, 0x0) unshare(0x2a060400) r7 = socket(0x28, 0x1, 0x0) getsockopt$nfc_llcp(r7, 0x28, 0x8, 0xfffffffffffffffe, 0x20000000) 605.146621ms ago: executing program 4 (id=550): move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000fb"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r1, &(0x7f0000000040)={0x23, 0x0, 0x0, 0x1}, 0x10) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x44000) r3 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000000), 0x4) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000100)=@ethtool_link_settings={0x2, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x20}}) 589.66164ms ago: executing program 3 (id=551): r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r0, 0x65, 0x2, &(0x7f0000000400)=0x2, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000280), 0x10000, &(0x7f0000000300)=ANY=[@ANYBLOB="04ffffffff000000643a3044304e2c00"]) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYRES8=r0, @ANYBLOB="d8c3830677c5f54639f1be8d2094d449445e345f0f792703fec1ca105a85c87b5f830d83179b1cab72dac9fc2e987a87f0e0c1840012c97adede12e42d1cc150db82f8b1a98529860a3f3c4f2921877ed05cce917ba1cc368b5d6b1a2e12f739787c8b5199ab9600bb35237160669d15d85cc240edf3320655d0a839649bd188fc42e78f944cb14c3f35acdb45e65a2af1120878713b59e4aa9ab1b4567981253f611036125e6d3f0b25110f07ad67849505baa9d60045c5f5b00197a3920fdb0533094a020f98bb185018202f9dbbbaad29", @ANYRES8=r0, @ANYRES8=0x0, @ANYRES16=r0, @ANYRES32=r0, @ANYRES8=0x0], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) madvise(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x16) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xb, 0x1c, 0x0, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x11, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000d84000)={0xa, 0x2, 0x0, @empty}, 0x1c) getsockopt$IP_SET_OP_GET_FNAME(r2, 0x1, 0x53, &(0x7f0000000080)={0x8, 0x7, 0x0, 'syz0\x00'}, &(0x7f00000000c0)=0x2c) shutdown(r2, 0x1) write$binfmt_register(0xffffffffffffffff, &(0x7f0000000040)={0x3a, 'syz2', 0x3a, 'E', 0x3a, 0x53, 0x3a, '\xd3-\'!!', 0x3a, '', 0x3a, './file/file0', 0x3a, [0x46, 0x43]}, 0x33) setsockopt$inet6_tcp_int(r2, 0x6, 0x2000000000000022, &(0x7f0000000040)=0x1, 0x4) r3 = shmget$private(0x0, 0x9000, 0x200, &(0x7f0000ff7000/0x9000)=nil) r4 = shmat(r3, &(0x7f0000ffc000/0x4000)=nil, 0x6000) mremap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000fff000/0x1000)=nil) shmdt(r4) sendto$inet6(r2, &(0x7f0000000200)="ae", 0x1, 0x20004002, &(0x7f0000b63fe4)={0xa, 0x2, 0x80000000}, 0x1c) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000004, 0x80010, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x6ecc, &(0x7f0000000080)={0x0, 0xb713, 0x20000, 0x3, 0xff}, &(0x7f0000000000), &(0x7f0000000100)=0x0) r7 = io_uring_setup(0x57a4, &(0x7f0000000440)={0x0, 0xbbf8, 0xc2, 0x2000, 0x2}) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r7, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r7, 0x16, 0x20000002, r8) syz_io_uring_submit(r5, r6, &(0x7f0000000140)=@IORING_OP_SPLICE={0x1e, 0x1, 0x0, @fd=r0, 0x100000000, {0x0, r0}, 0x4, 0xa, 0x0, {0x0, r8, r0}}) bind$can_raw(r0, &(0x7f0000000040), 0x10) close(r0) syz_genetlink_get_family_id$devlink(&(0x7f0000000180), r1) 574.22421ms ago: executing program 4 (id=552): move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000fb"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r1, &(0x7f0000000040)={0x23, 0x0, 0x0, 0x1}, 0x10) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x44000) r3 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000000), 0x4) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000100)=@ethtool_link_settings={0x2, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x20}}) (fail_nth: 1) 496.038241ms ago: executing program 3 (id=553): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000010c0)='/proc/bus/input/devices\x00', 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x80000, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, &(0x7f0000000280)}) preadv(r0, &(0x7f0000000000)=[{&(0x7f0000000080)=""/4094, 0xffe}], 0x1, 0x33, 0x1) 293.63823ms ago: executing program 4 (id=554): mkdir(&(0x7f0000000000)='./file0\x00', 0x50) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000940)={'wg2\x00', 0x0}) bpf$TOKEN_CREATE(0x24, &(0x7f0000000980)={0x0, r0}, 0x8) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000e80)={0x7, 0xb, &(0x7f0000000c00)=ANY=[@ANYBLOB="18000000000000000000000023ed0000180100002820702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18010000f1ffffff0000000000100000850000007b00000095", @ANYRES8], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x1, @rand_addr, 0x2069e}, 0x1c) sendto$inet6(r4, &(0x7f0000000e80)="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", 0x5c6, 0x6d91fb6102d8910c, 0x0, 0xfffffffffffffe38) sendto$inet6(r4, 0x0, 0x0, 0x0, 0x0, 0x0) recvfrom(r4, 0x0, 0x0, 0x100, 0x0, 0x0) perf_event_open(&(0x7f00000002c0)={0x5, 0x80, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x20004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket(0x10, 0x803, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), r5) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r3, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000001c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="320000729639e90716c5ccfe2f00", @ANYRES16=r9, @ANYBLOB="00032abd7000ff"], 0x14}, 0x1, 0x0, 0x0, 0xc040}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xe, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0xc00}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40041}, 0x0) remap_file_pages(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x10, 0x2, 0x100) sendmsg$nl_route_sched(r5, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0xf0, 0x5}, {}, {0x7}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_FLAGS={0x8, 0x3, 0x1}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0xc0c4}, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2f00000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000000000008500000006000000850000000700000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r10}, 0x10) select(0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x2710}) syz_clone(0x43100000, 0x0, 0x0, 0x0, 0x0, 0x0) 292.89852ms ago: executing program 3 (id=555): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbea, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_clone(0x4021400, 0x0, 0x9000, 0x0, 0x0, 0x0) r1 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x11ff, &(0x7f0000001280)="$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") bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = openat$incfs(r1, &(0x7f00000001c0)='.log\x00', 0x31000, 0x24) bind$can_j1939(r2, &(0x7f0000000280)={0x1d, 0x0, 0x3, {0x1, 0x0, 0x2}, 0xfe}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair$tipc(0x1e, 0x4, 0x0, 0x0) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x0) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x775, &(0x7f0000001180)="$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") r4 = open(&(0x7f0000000300)='./file1\x00', 0x14927e, 0x0) fallocate(r4, 0x0, 0x0, 0x1001f0) fallocate(r4, 0x3, 0x0, 0x10000) syz_socket_connect_nvme_tcp() r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) write(r6, &(0x7f0000004200)='t', 0x1) sendfile(r6, r5, 0x0, 0x3ffff) sendfile(r6, r5, 0x0, 0x7ffff000) getresgid(0x0, 0x0, 0x0) syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000200)='./file0\x00', 0x10814, &(0x7f0000000240)=ANY=[@ANYRES32=r5, @ANYRESHEX, @ANYBLOB="00006b746769643d0092", @ANYRESOCT=r3, @ANYRES16], 0x1, 0x1fe, &(0x7f0000000700)="$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") 240.240441ms ago: executing program 2 (id=556): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbea, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_clone(0x4021400, 0x0, 0x9000, 0x0, 0x0, 0x0) r1 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x11ff, &(0x7f0000001280)="$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") bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = openat$incfs(r1, &(0x7f00000001c0)='.log\x00', 0x31000, 0x24) bind$can_j1939(r2, &(0x7f0000000280)={0x1d, 0x0, 0x3, {0x1, 0x0, 0x2}, 0xfe}, 0x18) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair$tipc(0x1e, 0x4, 0x0, 0x0) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x0) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x775, &(0x7f0000001180)="$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") r5 = open(&(0x7f0000000300)='./file1\x00', 0x14927e, 0x0) fallocate(r5, 0x0, 0x0, 0x1001f0) fallocate(r5, 0x3, 0x0, 0x10000) r6 = syz_socket_connect_nvme_tcp() setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000080)=r3, 0x4) r7 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) write(r8, &(0x7f0000004200)='t', 0x1) sendfile(r8, r7, 0x0, 0x7ffff000) getresgid(0x0, 0x0, 0x0) syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000200)='./file0\x00', 0x10814, &(0x7f0000000240)=ANY=[@ANYRES32=r7, @ANYRESHEX, @ANYBLOB="00006b746769643d0092", @ANYRESOCT=r4, @ANYRES16], 0x1, 0x1fe, &(0x7f0000000700)="$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") 56.968811ms ago: executing program 0 (id=557): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81e, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r2) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x4040054) 282.69µs ago: executing program 1 (id=558): socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) ioctl$BLKPG(0xffffffffffffffff, 0x1269, &(0x7f0000000980)={0x2, 0x0, 0x98, &(0x7f0000000a00)={0x2, 0x1, 0x7}}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000e600"/28], 0xc) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000300)=@raw={'raw\x00', 0x4001, 0x8000000, 0x238, 0xf8, 0x720d, 0x148, 0xf8, 0x148, 0x1c8, 0x240, 0x240, 0x1c8, 0x240, 0x7fffffe, 0x0, {[{{@ip={@remote, @empty, 0x0, 0x0, 'wlan1\x00', 'ip6erspan0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @dev}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x298) sendto$inet(r1, 0x0, 0x0, 0x24000080, 0x0, 0x0) 0s ago: executing program 0 (id=559): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000010c0)='/proc/bus/input/devices\x00', 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x80000, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000800"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000280)=[{0x200000000006, 0x0, 0xfd, 0x7ffc0002}]}) preadv(r0, &(0x7f0000000000)=[{&(0x7f0000000080)=""/4094, 0xffe}], 0x1, 0x33, 0x1) kernel console output (not intermixed with test programs): 0 speed is unknown, defaulting to 1000 [ 39.856203][ T3466] RDS/IB: syz2: added [ 39.873564][ T3466] smc: adding ib device syz2 with port count 1 [ 39.883323][ T3466] smc: ib device syz2 port 1 has pnetid [ 39.892806][ T3367] sit0 speed is unknown, defaulting to 1000 [ 39.901047][ T3466] sit0 speed is unknown, defaulting to 1000 [ 39.949356][ T3466] sit0 speed is unknown, defaulting to 1000 [ 40.001812][ T3466] sit0 speed is unknown, defaulting to 1000 [ 40.058401][ T3466] sit0 speed is unknown, defaulting to 1000 [ 40.107732][ T3466] sit0 speed is unknown, defaulting to 1000 [ 40.258379][ T3466] syz.2.10 (3466) used greatest stack depth: 10776 bytes left [ 40.308669][ T3473] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11'. [ 40.375452][ T3479] xt_hashlimit: max too large, truncated to 1048576 [ 40.402452][ T3479] Cannot find set identified by id 0 to match [ 40.432676][ T3479] rdma_rxe: rxe_newlink: failed to add sit0 [ 40.623663][ T3478] loop4: detected capacity change from 0 to 8192 [ 40.652823][ T3478] ======================================================= [ 40.652823][ T3478] WARNING: The mand mount option has been deprecated and [ 40.652823][ T3478] and is ignored by this kernel. Remove the mand [ 40.652823][ T3478] option from the mount to silence this warning. [ 40.652823][ T3478] ======================================================= [ 40.822260][ T3484] loop0: detected capacity change from 0 to 8192 [ 41.657496][ T3492] loop4: detected capacity change from 0 to 8192 [ 41.748669][ T3495] xt_hashlimit: max too large, truncated to 1048576 [ 41.766123][ T3495] Cannot find set identified by id 0 to match [ 41.793374][ T3495] rdma_rxe: rxe_newlink: failed to add sit0 [ 42.100792][ T3501] xt_hashlimit: max too large, truncated to 1048576 [ 42.397884][ T3501] Cannot find set identified by id 0 to match [ 42.437188][ T3501] rdma_rxe: rxe_newlink: failed to add sit0 [ 42.562857][ T3503] xt_hashlimit: max too large, truncated to 1048576 [ 42.583453][ T3505] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 42.603418][ T3503] Cannot find set identified by id 0 to match [ 42.608306][ T3507] netlink: 132 bytes leftover after parsing attributes in process `syz.2.24'. [ 42.629477][ T3503] rdma_rxe: rxe_newlink: failed to add sit0 [ 42.638227][ T3510] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 42.656880][ T3505] syz.3.23 (3505) used greatest stack depth: 10280 bytes left [ 42.688955][ T3514] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 42.696937][ T3515] dccp_invalid_packet: P.Data Offset(0) too small [ 42.737870][ T3518] xt_hashlimit: max too large, truncated to 1048576 [ 42.758721][ T3518] Cannot find set identified by id 0 to match [ 42.783141][ T3518] rdma_rxe: rxe_newlink: failed to add sit0 [ 42.821831][ T3512] loop3: detected capacity change from 0 to 8192 [ 42.862186][ T3523] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 43.028243][ T3539] netlink: 132 bytes leftover after parsing attributes in process `syz.4.35'. [ 43.121975][ T3544] dccp_invalid_packet: P.Data Offset(0) too small [ 43.215802][ T3548] loop1: detected capacity change from 0 to 512 [ 43.234581][ T3548] EXT4-fs error (device loop1): ext4_orphan_get:1389: inode #15: comm syz.1.39: casefold flag without casefold feature [ 43.252856][ T3548] EXT4-fs error (device loop1): ext4_orphan_get:1394: comm syz.1.39: couldn't read orphan inode 15 (err -117) [ 43.267418][ T3548] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.284198][ T29] kauditd_printk_skb: 139 callbacks suppressed [ 43.284212][ T29] audit: type=1400 audit(1738089803.195:259): avc: denied { mount } for pid=3547 comm="syz.1.39" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 43.356979][ T29] audit: type=1400 audit(1738089803.275:260): avc: denied { unmount } for pid=3299 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 43.357295][ T3299] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.471288][ T29] audit: type=1326 audit(1738089803.385:261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3555 comm="syz.2.41" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f340454cda9 code=0x7ffc0000 [ 43.552669][ T29] audit: type=1326 audit(1738089803.425:262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3555 comm="syz.2.41" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f340454cda9 code=0x7ffc0000 [ 43.581257][ T29] audit: type=1326 audit(1738089803.425:263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3555 comm="syz.2.41" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f340454cda9 code=0x7ffc0000 [ 43.609759][ T29] audit: type=1326 audit(1738089803.425:264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3555 comm="syz.2.41" exe="/root/syz-executor" sig=0 arch=c000003e syscall=66 compat=0 ip=0x7f340454cda9 code=0x7ffc0000 [ 43.637151][ T29] audit: type=1326 audit(1738089803.425:265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3555 comm="syz.2.41" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f340454cda9 code=0x7ffc0000 [ 43.726420][ T29] audit: type=1326 audit(1738089803.625:266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3560 comm="syz.2.44" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f340454cda9 code=0x7ffc0000 [ 43.754301][ T29] audit: type=1326 audit(1738089803.625:267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3560 comm="syz.2.44" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f340454cda9 code=0x7ffc0000 [ 43.779364][ T29] audit: type=1326 audit(1738089803.625:268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3560 comm="syz.2.44" exe="/root/syz-executor" sig=0 arch=c000003e syscall=295 compat=0 ip=0x7f340454cda9 code=0x7ffc0000 [ 43.839429][ T3566] netlink: 132 bytes leftover after parsing attributes in process `syz.1.45'. [ 43.933017][ T3571] dccp_invalid_packet: P.Data Offset(0) too small [ 44.102216][ T3576] netlink: 8 bytes leftover after parsing attributes in process `syz.3.48'. [ 44.111227][ T3576] netlink: 16 bytes leftover after parsing attributes in process `syz.3.48'. [ 44.752413][ T3587] xt_hashlimit: max too large, truncated to 1048576 [ 44.761630][ T3587] Cannot find set identified by id 0 to match [ 44.770717][ T3587] rdma_rxe: rxe_newlink: failed to add sit0 [ 44.932224][ T3595] loop1: detected capacity change from 0 to 256 [ 44.995449][ T3595] msdos: Unknown parameter '' [ 45.032677][ T3601] loop4: detected capacity change from 0 to 256 [ 45.050887][ T3604] ebt_among: src integrity fail: 300 [ 45.085505][ T3601] msdos: Unknown parameter '' [ 45.092541][ T3605] loop3: detected capacity change from 0 to 256 [ 45.148544][ T3605] msdos: Unknown parameter '' [ 45.456302][ T3606] dccp_close: ABORT with 28 bytes unread [ 45.497570][ T3609] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 45.775163][ T3614] netlink: 132 bytes leftover after parsing attributes in process `syz.1.60'. [ 45.927086][ T3615] sit0 speed is unknown, defaulting to 1000 [ 46.097390][ T3614] dccp_invalid_packet: P.Data Offset(0) too small [ 46.403404][ T3621] loop4: detected capacity change from 0 to 8192 [ 46.600947][ T3633] loop2: detected capacity change from 0 to 128 [ 46.611203][ T3633] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 46.635224][ T3633] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 46.883304][ T3633] netlink: 20 bytes leftover after parsing attributes in process `syz.2.67'. [ 47.016913][ T3644] loop1: detected capacity change from 0 to 8192 [ 47.171617][ T3644] loop1: detected capacity change from 0 to 2048 [ 47.192998][ T3658] netlink: 132 bytes leftover after parsing attributes in process `syz.4.72'. [ 47.256693][ T3644] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 47.277461][ T3664] dccp_invalid_packet: P.Data Offset(0) too small [ 47.317433][ T3666] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 47.359872][ T3655] loop2: detected capacity change from 0 to 8192 [ 47.403402][ T3299] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.425694][ T3655] loop2: detected capacity change from 0 to 2048 [ 47.467860][ T3655] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 47.616764][ T3300] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.676731][ T3676] loop1: detected capacity change from 0 to 8192 [ 47.736138][ T3682] netlink: 20 bytes leftover after parsing attributes in process `syz.0.80'. [ 47.767271][ T3684] netlink: 12 bytes leftover after parsing attributes in process `syz.1.82'. [ 47.781190][ T3674] loop3: detected capacity change from 0 to 8192 [ 47.854746][ T3691] netlink: 12 bytes leftover after parsing attributes in process `syz.2.83'. [ 48.721673][ T3717] loop2: detected capacity change from 0 to 512 [ 48.743191][ T3712] loop3: detected capacity change from 0 to 8192 [ 48.772056][ T3717] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 48.782173][ T29] kauditd_printk_skb: 139 callbacks suppressed [ 48.782185][ T29] audit: type=1400 audit(1738089808.695:408): avc: denied { relabelto } for pid=3716 comm="syz.2.94" name="17" dev="tmpfs" ino=106 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 48.817640][ T29] audit: type=1400 audit(1738089808.695:409): avc: denied { associate } for pid=3716 comm="syz.2.94" name="17" dev="tmpfs" ino=106 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:fsadm_exec_t:s0" [ 48.938793][ T29] audit: type=1400 audit(1738089808.855:410): avc: denied { write } for pid=3300 comm="syz-executor" name="17" dev="tmpfs" ino=106 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 48.965869][ T29] audit: type=1400 audit(1738089808.855:411): avc: denied { remove_name } for pid=3300 comm="syz-executor" name="binderfs" dev="tmpfs" ino=110 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 48.996131][ T29] audit: type=1400 audit(1738089808.855:412): avc: denied { rmdir } for pid=3300 comm="syz-executor" name="17" dev="tmpfs" ino=106 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 49.052551][ T3723] loop1: detected capacity change from 0 to 256 [ 49.072230][ T3725] netlink: 20 bytes leftover after parsing attributes in process `syz.2.95'. [ 49.085273][ T3721] netlink: 12 bytes leftover after parsing attributes in process `syz.3.96'. [ 49.124803][ T29] audit: type=1326 audit(1738089809.035:413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3726 comm="syz.0.98" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efcfc77cda9 code=0x7ffc0000 [ 49.149831][ T29] audit: type=1326 audit(1738089809.035:414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3726 comm="syz.0.98" exe="/root/syz-executor" sig=0 arch=c000003e syscall=295 compat=0 ip=0x7efcfc77cda9 code=0x7ffc0000 [ 49.174035][ T29] audit: type=1326 audit(1738089809.035:415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3726 comm="syz.0.98" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efcfc77cda9 code=0x7ffc0000 [ 49.246547][ T3731] netlink: 132 bytes leftover after parsing attributes in process `syz.3.101'. [ 49.260380][ T3733] loop1: detected capacity change from 0 to 512 [ 49.307462][ T3733] EXT4-fs error (device loop1): ext4_orphan_get:1389: inode #15: comm syz.1.100: casefold flag without casefold feature [ 49.341228][ T3735] loop2: detected capacity change from 0 to 8192 [ 49.352613][ T3733] EXT4-fs error (device loop1): ext4_orphan_get:1394: comm syz.1.100: couldn't read orphan inode 15 (err -117) [ 49.373546][ T3741] dccp_invalid_packet: P.Data Offset(0) too small [ 49.391787][ T29] audit: type=1326 audit(1738089809.305:416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3730 comm="syz.3.101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47acc5cda9 code=0x7ffc0000 [ 49.417776][ T29] audit: type=1326 audit(1738089809.305:417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3730 comm="syz.3.101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f47acc5cda9 code=0x7ffc0000 [ 49.449183][ T3733] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.516071][ T3299] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.666778][ T3746] loop0: detected capacity change from 0 to 8192 [ 49.997490][ T3760] netlink: 4 bytes leftover after parsing attributes in process `syz.4.109'. [ 50.146911][ T3768] mmap: syz.3.111 (3768) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 50.394504][ T3770] sit0 speed is unknown, defaulting to 1000 [ 50.425078][ T3769] loop4: detected capacity change from 0 to 8192 [ 50.616111][ T3774] loop2: detected capacity change from 0 to 8192 [ 50.750064][ T3787] loop1: detected capacity change from 0 to 8192 [ 51.054596][ T3801] __nla_validate_parse: 1 callbacks suppressed [ 51.054616][ T3801] netlink: 12 bytes leftover after parsing attributes in process `syz.1.124'. [ 51.158276][ T3809] netlink: 4 bytes leftover after parsing attributes in process `syz.4.122'. [ 51.178385][ T3809] geneve1: entered promiscuous mode [ 51.185335][ T3809] geneve1: entered allmulticast mode [ 51.319977][ T3809] netlink: 'syz.4.122': attribute type 1 has an invalid length. [ 51.328776][ T3809] netlink: 16 bytes leftover after parsing attributes in process `syz.4.122'. [ 51.376390][ T3819] syz.0.126 uses obsolete (PF_INET,SOCK_PACKET) [ 51.565540][ T3826] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 51.679638][ T3832] netlink: 132 bytes leftover after parsing attributes in process `syz.0.132'. [ 51.756757][ T3838] dccp_invalid_packet: P.Data Offset(0) too small [ 51.799761][ T3835] sit0 speed is unknown, defaulting to 1000 [ 51.839087][ T3837] loop2: detected capacity change from 0 to 8192 [ 52.019976][ T3845] loop2: detected capacity change from 0 to 256 [ 52.058007][ T3844] loop4: detected capacity change from 0 to 1024 [ 52.077892][ T3845] msdos: Unknown parameter '' [ 52.105875][ T3844] EXT4-fs: Ignoring removed mblk_io_submit option [ 52.135087][ T3844] EXT4-fs (loop4): stripe (4) is not aligned with cluster size (16), stripe is disabled [ 52.195728][ T3844] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 52.315161][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.364154][ T3849] netlink: 'syz.4.136': attribute type 3 has an invalid length. [ 52.823052][ T3861] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 52.869740][ T3866] loop2: detected capacity change from 0 to 128 [ 52.909250][ T3866] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 52.928102][ T3871] netlink: 12 bytes leftover after parsing attributes in process `syz.3.147'. [ 52.962614][ T3866] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 53.051035][ T3869] loop1: detected capacity change from 0 to 8192 [ 53.070284][ T3874] xt_hashlimit: max too large, truncated to 1048576 [ 53.077995][ T3874] Cannot find set identified by id 0 to match [ 53.095847][ T3874] rdma_rxe: rxe_newlink: failed to add sit0 [ 53.160488][ T3881] netlink: 4 bytes leftover after parsing attributes in process `syz.2.150'. [ 53.194778][ T3878] netlink: 24 bytes leftover after parsing attributes in process `syz.2.150'. [ 53.279006][ T3883] sit0 speed is unknown, defaulting to 1000 [ 53.437245][ C1] vcan0: j1939_tp_rxtimer: 0xffff888149976600: rx timeout, send abort [ 53.446248][ C1] vcan0: j1939_tp_rxtimer: 0xffff888149976a00: rx timeout, send abort [ 53.455153][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888149976600: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 53.471035][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888149976a00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 53.568837][ T3898] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 53.645929][ T3905] FAULT_INJECTION: forcing a failure. [ 53.645929][ T3905] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 53.659704][ T3905] CPU: 1 UID: 0 PID: 3905 Comm: syz.2.158 Not tainted 6.13.0-syzkaller-09030-g6d61a53dd6f5 #0 [ 53.659765][ T3905] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 53.659780][ T3905] Call Trace: [ 53.659787][ T3905] [ 53.659796][ T3905] dump_stack_lvl+0xf2/0x150 [ 53.659825][ T3905] dump_stack+0x15/0x1a [ 53.659851][ T3905] should_fail_ex+0x24a/0x260 [ 53.659934][ T3905] should_fail+0xb/0x10 [ 53.659967][ T3905] should_fail_usercopy+0x1a/0x20 [ 53.660002][ T3905] _copy_from_user+0x1c/0xa0 [ 53.660024][ T3905] dev_ethtool+0x53/0x14c0 [ 53.660048][ T3905] ? strcmp+0x21/0x50 [ 53.660150][ T3905] ? __rcu_read_unlock+0x4e/0x70 [ 53.660172][ T3905] dev_ioctl+0x854/0xab0 [ 53.660430][ T3905] sock_do_ioctl+0x11c/0x260 [ 53.660464][ T3905] sock_ioctl+0x40f/0x600 [ 53.660500][ T3905] ? __pfx_sock_ioctl+0x10/0x10 [ 53.660529][ T3905] __se_sys_ioctl+0xc9/0x140 [ 53.660612][ T3905] __x64_sys_ioctl+0x43/0x50 [ 53.660638][ T3905] x64_sys_call+0x1690/0x2dc0 [ 53.660670][ T3905] do_syscall_64+0xc9/0x1c0 [ 53.660752][ T3905] ? clear_bhb_loop+0x55/0xb0 [ 53.660780][ T3905] ? clear_bhb_loop+0x55/0xb0 [ 53.660837][ T3905] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 53.660876][ T3905] RIP: 0033:0x7f340454cda9 [ 53.660904][ T3905] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 53.661000][ T3905] RSP: 002b:00007f3402bb1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 53.661018][ T3905] RAX: ffffffffffffffda RBX: 00007f3404765fa0 RCX: 00007f340454cda9 [ 53.661096][ T3905] RDX: 0000000020000340 RSI: 0000000000008946 RDI: 000000000000000a [ 53.661112][ T3905] RBP: 00007f3402bb1090 R08: 0000000000000000 R09: 0000000000000000 [ 53.661122][ T3905] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 53.661133][ T3905] R13: 0000000000000000 R14: 00007f3404765fa0 R15: 00007ffc50bc8628 [ 53.661154][ T3905] [ 53.878696][ T29] kauditd_printk_skb: 176 callbacks suppressed [ 53.878784][ T29] audit: type=1326 audit(1738089813.795:594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3903 comm="syz.4.159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f248e7bcda9 code=0x7ffc0000 [ 53.886146][ T3906] netlink: 12 bytes leftover after parsing attributes in process `syz.2.158'. [ 53.911344][ T29] audit: type=1326 audit(1738089813.795:595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3903 comm="syz.4.159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f248e7bcda9 code=0x7ffc0000 [ 53.911380][ T29] audit: type=1326 audit(1738089813.795:596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3903 comm="syz.4.159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f248e7bcda9 code=0x7ffc0000 [ 53.972772][ T29] audit: type=1326 audit(1738089813.795:597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3903 comm="syz.4.159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f248e7bcda9 code=0x7ffc0000 [ 54.000782][ T29] audit: type=1326 audit(1738089813.795:598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3903 comm="syz.4.159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f248e7bcda9 code=0x7ffc0000 [ 54.029348][ T29] audit: type=1326 audit(1738089813.795:599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3903 comm="syz.4.159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f248e7bcda9 code=0x7ffc0000 [ 54.055020][ T29] audit: type=1326 audit(1738089813.885:600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3903 comm="syz.4.159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f248e7bcda9 code=0x7ffc0000 [ 54.079187][ T29] audit: type=1326 audit(1738089813.885:601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3903 comm="syz.4.159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7f248e7bcda9 code=0x7ffc0000 [ 54.104267][ T29] audit: type=1326 audit(1738089813.885:602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3903 comm="syz.4.159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f248e7bcda9 code=0x7ffc0000 [ 54.127869][ T29] audit: type=1326 audit(1738089813.885:603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3903 comm="syz.4.159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f248e7bcda9 code=0x7ffc0000 [ 54.189081][ T3904] loop4: detected capacity change from 0 to 512 [ 54.196906][ T3904] ext4: Unknown parameter 'fsuuid' [ 54.278122][ T3914] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 54.287777][ T3914] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 54.334587][ T3913] xt_hashlimit: max too large, truncated to 1048576 [ 54.344690][ T3921] loop4: detected capacity change from 0 to 512 [ 54.378923][ T3925] loop1: detected capacity change from 0 to 128 [ 54.387257][ T3921] EXT4-fs: Ignoring removed i_version option [ 54.393782][ T3921] EXT4-fs: Ignoring removed mblk_io_submit option [ 54.402359][ T3925] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 54.404144][ T3913] Cannot find set identified by id 0 to match [ 54.426847][ T3923] loop2: detected capacity change from 0 to 128 [ 54.433705][ T3925] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 54.446916][ T3913] rdma_rxe: rxe_newlink: failed to add sit0 [ 54.455792][ T3923] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 54.482300][ T3921] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 54.488563][ T3923] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 54.496817][ T3921] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 54.529808][ T3929] loop0: detected capacity change from 0 to 128 [ 54.546913][ T3929] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 54.573291][ T3929] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 54.576328][ T3921] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2863: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 54.630542][ T3921] EXT4-fs (loop4): 1 truncate cleaned up [ 54.663701][ T3921] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 54.689094][ T3936] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 54.699173][ T3936] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 54.723160][ T3921] SELinux: Context system_u:object_r:lastlog_t:s0 is not valid (left unmapped). [ 54.723406][ T3944] netlink: 12 bytes leftover after parsing attributes in process `syz.3.174'. [ 54.745117][ T3948] netlink: 12 bytes leftover after parsing attributes in process `syz.1.171'. [ 54.763623][ T3921] EXT4-fs error (device loop4): ext4_search_dir:1505: inode #12: block 7: comm syz.4.166: bad entry in directory: inode out of bounds - offset=0, inode=16777215, rec_len=16, size=56 fake=0 [ 54.845686][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.893896][ T3959] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 54.966786][ T3951] loop3: detected capacity change from 0 to 8192 [ 54.986892][ T3964] FAULT_INJECTION: forcing a failure. [ 54.986892][ T3964] name failslab, interval 1, probability 0, space 0, times 1 [ 55.000107][ T3964] CPU: 0 UID: 0 PID: 3964 Comm: syz.4.184 Not tainted 6.13.0-syzkaller-09030-g6d61a53dd6f5 #0 [ 55.000142][ T3964] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 55.000157][ T3964] Call Trace: [ 55.000165][ T3964] [ 55.000197][ T3964] dump_stack_lvl+0xf2/0x150 [ 55.000231][ T3964] dump_stack+0x15/0x1a [ 55.000256][ T3964] should_fail_ex+0x24a/0x260 [ 55.000291][ T3964] should_failslab+0x8f/0xb0 [ 55.000381][ T3964] __kmalloc_node_noprof+0xad/0x410 [ 55.000516][ T3964] ? __kvmalloc_node_noprof+0x72/0x170 [ 55.000621][ T3964] __kvmalloc_node_noprof+0x72/0x170 [ 55.000796][ T3964] simple_xattr_set+0x6e/0x2a0 [ 55.000832][ T3964] ? should_fail_ex+0xd7/0x260 [ 55.000870][ T3964] ? strlen+0x19/0x30 [ 55.000943][ T3964] shmem_xattr_handler_set+0x129/0x220 [ 55.000971][ T3964] ? __pfx_shmem_xattr_handler_set+0x10/0x10 [ 55.000996][ T3964] __vfs_setxattr+0x2e5/0x310 [ 55.001082][ T3964] __vfs_setxattr_noperm+0xed/0x420 [ 55.001108][ T3964] __vfs_setxattr_locked+0x1af/0x1d0 [ 55.001142][ T3964] vfs_setxattr+0x140/0x290 [ 55.001176][ T3964] file_setxattr+0x139/0x1b0 [ 55.001209][ T3964] path_setxattrat+0x2c2/0x310 [ 55.001289][ T3964] __x64_sys_fsetxattr+0x6d/0x80 [ 55.001325][ T3964] x64_sys_call+0x29d2/0x2dc0 [ 55.001438][ T3964] do_syscall_64+0xc9/0x1c0 [ 55.001474][ T3964] ? clear_bhb_loop+0x55/0xb0 [ 55.001549][ T3964] ? clear_bhb_loop+0x55/0xb0 [ 55.001577][ T3964] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 55.001610][ T3964] RIP: 0033:0x7f248e7bcda9 [ 55.001630][ T3964] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 55.001652][ T3964] RSP: 002b:00007f248ce27038 EFLAGS: 00000246 ORIG_RAX: 00000000000000be [ 55.001674][ T3964] RAX: ffffffffffffffda RBX: 00007f248e9d5fa0 RCX: 00007f248e7bcda9 [ 55.001755][ T3964] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000009 [ 55.001770][ T3964] RBP: 00007f248ce27090 R08: 0000000000000000 R09: 0000000000000000 [ 55.001785][ T3964] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 55.001800][ T3964] R13: 0000000000000000 R14: 00007f248e9d5fa0 R15: 00007ffdbac52ee8 [ 55.001823][ T3964] [ 55.249379][ T3967] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 55.400178][ T3975] loop2: detected capacity change from 0 to 4096 [ 55.433875][ T3975] EXT4-fs: Ignoring removed nomblk_io_submit option [ 55.498161][ T3975] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 55.556409][ T3975] FAULT_INJECTION: forcing a failure. [ 55.556409][ T3975] name failslab, interval 1, probability 0, space 0, times 0 [ 55.569955][ T3975] CPU: 0 UID: 0 PID: 3975 Comm: syz.2.185 Not tainted 6.13.0-syzkaller-09030-g6d61a53dd6f5 #0 [ 55.569997][ T3975] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 55.570012][ T3975] Call Trace: [ 55.570020][ T3975] [ 55.570029][ T3975] dump_stack_lvl+0xf2/0x150 [ 55.570063][ T3975] dump_stack+0x15/0x1a [ 55.570085][ T3975] should_fail_ex+0x24a/0x260 [ 55.570118][ T3975] should_failslab+0x8f/0xb0 [ 55.570141][ T3975] kmem_cache_alloc_lru_noprof+0x57/0x320 [ 55.570181][ T3975] ? __d_alloc+0x3d/0x340 [ 55.570222][ T3975] __d_alloc+0x3d/0x340 [ 55.570311][ T3975] d_alloc_parallel+0x54/0xc80 [ 55.570335][ T3975] ? selinux_inode_permission+0x341/0x410 [ 55.570473][ T3975] ? lockref_get_not_dead+0x117/0x1b0 [ 55.570507][ T3975] ? down_read+0x171/0x4b0 [ 55.570542][ T3975] __lookup_slow+0x8d/0x250 [ 55.570586][ T3975] lookup_slow+0x3c/0x60 [ 55.570634][ T3975] walk_component+0x1f5/0x230 [ 55.570661][ T3975] ? path_lookupat+0xfd/0x2b0 [ 55.570700][ T3975] path_lookupat+0x10a/0x2b0 [ 55.570810][ T3975] filename_lookup+0x150/0x340 [ 55.570850][ T3975] user_path_at+0x3c/0x120 [ 55.570870][ T3975] __se_sys_utimes+0xc6/0x210 [ 55.570971][ T3975] __x64_sys_utimes+0x31/0x40 [ 55.571004][ T3975] x64_sys_call+0x286a/0x2dc0 [ 55.571037][ T3975] do_syscall_64+0xc9/0x1c0 [ 55.571138][ T3975] ? clear_bhb_loop+0x55/0xb0 [ 55.571170][ T3975] ? clear_bhb_loop+0x55/0xb0 [ 55.571240][ T3975] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 55.571368][ T3975] RIP: 0033:0x7f340454cda9 [ 55.571385][ T3975] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 55.571404][ T3975] RSP: 002b:00007f3402bb1038 EFLAGS: 00000246 ORIG_RAX: 00000000000000eb [ 55.571469][ T3975] RAX: ffffffffffffffda RBX: 00007f3404765fa0 RCX: 00007f340454cda9 [ 55.571483][ T3975] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000380 [ 55.571497][ T3975] RBP: 00007f3402bb1090 R08: 0000000000000000 R09: 0000000000000000 [ 55.571510][ T3975] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 55.571524][ T3975] R13: 0000000000000000 R14: 00007f3404765fa0 R15: 00007ffc50bc8628 [ 55.571546][ T3975] [ 55.838305][ T3300] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.003101][ T3998] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 56.103708][ T4003] xt_hashlimit: max too large, truncated to 1048576 [ 56.145812][ T4003] Cannot find set identified by id 0 to match [ 56.155401][ T4008] rdma_rxe: rxe_newlink: failed to add sit0 [ 56.340229][ T4020] FAULT_INJECTION: forcing a failure. [ 56.340229][ T4020] name failslab, interval 1, probability 0, space 0, times 0 [ 56.353511][ T4020] CPU: 1 UID: 0 PID: 4020 Comm: syz.1.202 Not tainted 6.13.0-syzkaller-09030-g6d61a53dd6f5 #0 [ 56.353538][ T4020] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 56.353549][ T4020] Call Trace: [ 56.353556][ T4020] [ 56.353564][ T4020] dump_stack_lvl+0xf2/0x150 [ 56.353595][ T4020] dump_stack+0x15/0x1a [ 56.353675][ T4020] should_fail_ex+0x24a/0x260 [ 56.353709][ T4020] should_failslab+0x8f/0xb0 [ 56.353732][ T4020] __kmalloc_cache_node_noprof+0x56/0x320 [ 56.353768][ T4020] ? __get_vm_area_node+0xfb/0x1c0 [ 56.353790][ T4020] ? memcg_list_lru_alloc+0xce/0x4e0 [ 56.353890][ T4020] __get_vm_area_node+0xfb/0x1c0 [ 56.353913][ T4020] __vmalloc_node_range_noprof+0x280/0xe70 [ 56.353937][ T4020] ? do_replace+0x19c/0x2d0 [ 56.354001][ T4020] ? avc_has_perm_noaudit+0x1cc/0x210 [ 56.354038][ T4020] ? avc_has_perm_noaudit+0x1cc/0x210 [ 56.354063][ T4020] ? do_replace+0x19c/0x2d0 [ 56.354088][ T4020] __vmalloc_noprof+0x5e/0x70 [ 56.354148][ T4020] ? do_replace+0x19c/0x2d0 [ 56.354278][ T4020] do_replace+0x19c/0x2d0 [ 56.354343][ T4020] do_ebt_set_ctl+0x1bd/0xb80 [ 56.354368][ T4020] ? __rcu_read_unlock+0x4e/0x70 [ 56.354388][ T4020] ? __pfx_ip4_datagram_release_cb+0x10/0x10 [ 56.354459][ T4020] ? ip4_datagram_release_cb+0x36c/0x3a0 [ 56.354495][ T4020] ? kstrtoull+0x110/0x140 [ 56.354531][ T4020] ? _raw_spin_unlock_bh+0x36/0x40 [ 56.354555][ T4020] ? release_sock+0x117/0x150 [ 56.354582][ T4020] ? sockopt_release_sock+0x42/0x50 [ 56.354690][ T4020] ? do_ip_setsockopt+0x1fcf/0x2340 [ 56.354722][ T4020] nf_setsockopt+0x195/0x1b0 [ 56.354801][ T4020] ip_setsockopt+0xea/0x100 [ 56.354836][ T4020] udp_setsockopt+0x95/0xb0 [ 56.354871][ T4020] sock_common_setsockopt+0x64/0x80 [ 56.354918][ T4020] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 56.354949][ T4020] __sys_setsockopt+0x187/0x200 [ 56.355016][ T4020] __x64_sys_setsockopt+0x66/0x80 [ 56.355047][ T4020] x64_sys_call+0x282e/0x2dc0 [ 56.355103][ T4020] do_syscall_64+0xc9/0x1c0 [ 56.355138][ T4020] ? clear_bhb_loop+0x55/0xb0 [ 56.355168][ T4020] ? clear_bhb_loop+0x55/0xb0 [ 56.355239][ T4020] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 56.355281][ T4020] RIP: 0033:0x7fef8647cda9 [ 56.355298][ T4020] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 56.355375][ T4020] RSP: 002b:00007fef84ae7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 56.355392][ T4020] RAX: ffffffffffffffda RBX: 00007fef86695fa0 RCX: 00007fef8647cda9 [ 56.355403][ T4020] RDX: 0000000000000080 RSI: 0000000000000000 RDI: 0000000000000004 [ 56.355413][ T4020] RBP: 00007fef84ae7090 R08: 0000000000000108 R09: 0000000000000000 [ 56.355426][ T4020] R10: 0000000020000000 R11: 0000000000000246 R12: 0000000000000001 [ 56.355440][ T4020] R13: 0000000000000000 R14: 00007fef86695fa0 R15: 00007ffe80013978 [ 56.355466][ T4020] [ 56.671168][ T4020] syz.1.202: vmalloc error: size 128, vm_struct allocation failed, mode:0x400cc0(GFP_KERNEL_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0 [ 56.687472][ T4020] CPU: 1 UID: 0 PID: 4020 Comm: syz.1.202 Not tainted 6.13.0-syzkaller-09030-g6d61a53dd6f5 #0 [ 56.687507][ T4020] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 56.687521][ T4020] Call Trace: [ 56.687527][ T4020] [ 56.687535][ T4020] dump_stack_lvl+0xf2/0x150 [ 56.687564][ T4020] dump_stack+0x15/0x1a [ 56.687587][ T4020] warn_alloc+0x145/0x1b0 [ 56.687679][ T4020] ? __get_vm_area_node+0xfb/0x1c0 [ 56.687699][ T4020] ? memcg_list_lru_alloc+0xce/0x4e0 [ 56.687735][ T4020] __vmalloc_node_range_noprof+0x2a5/0xe70 [ 56.687844][ T4020] ? avc_has_perm_noaudit+0x1cc/0x210 [ 56.687947][ T4020] ? avc_has_perm_noaudit+0x1cc/0x210 [ 56.687972][ T4020] ? do_replace+0x19c/0x2d0 [ 56.687996][ T4020] __vmalloc_noprof+0x5e/0x70 [ 56.688099][ T4020] ? do_replace+0x19c/0x2d0 [ 56.688149][ T4020] do_replace+0x19c/0x2d0 [ 56.688183][ T4020] do_ebt_set_ctl+0x1bd/0xb80 [ 56.688206][ T4020] ? __rcu_read_unlock+0x4e/0x70 [ 56.688226][ T4020] ? __pfx_ip4_datagram_release_cb+0x10/0x10 [ 56.688283][ T4020] ? ip4_datagram_release_cb+0x36c/0x3a0 [ 56.688317][ T4020] ? kstrtoull+0x110/0x140 [ 56.688405][ T4020] ? _raw_spin_unlock_bh+0x36/0x40 [ 56.688487][ T4020] ? release_sock+0x117/0x150 [ 56.688520][ T4020] ? sockopt_release_sock+0x42/0x50 [ 56.688555][ T4020] ? do_ip_setsockopt+0x1fcf/0x2340 [ 56.688582][ T4020] nf_setsockopt+0x195/0x1b0 [ 56.688669][ T4020] ip_setsockopt+0xea/0x100 [ 56.688704][ T4020] udp_setsockopt+0x95/0xb0 [ 56.688809][ T4020] sock_common_setsockopt+0x64/0x80 [ 56.688836][ T4020] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 56.688869][ T4020] __sys_setsockopt+0x187/0x200 [ 56.688914][ T4020] __x64_sys_setsockopt+0x66/0x80 [ 56.689010][ T4020] x64_sys_call+0x282e/0x2dc0 [ 56.689048][ T4020] do_syscall_64+0xc9/0x1c0 [ 56.689108][ T4020] ? clear_bhb_loop+0x55/0xb0 [ 56.689136][ T4020] ? clear_bhb_loop+0x55/0xb0 [ 56.689215][ T4020] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 56.689239][ T4020] RIP: 0033:0x7fef8647cda9 [ 56.689254][ T4020] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 56.689270][ T4020] RSP: 002b:00007fef84ae7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 56.689290][ T4020] RAX: ffffffffffffffda RBX: 00007fef86695fa0 RCX: 00007fef8647cda9 [ 56.689375][ T4020] RDX: 0000000000000080 RSI: 0000000000000000 RDI: 0000000000000004 [ 56.689405][ T4020] RBP: 00007fef84ae7090 R08: 0000000000000108 R09: 0000000000000000 [ 56.689418][ T4020] R10: 0000000020000000 R11: 0000000000000246 R12: 0000000000000001 [ 56.689432][ T4020] R13: 0000000000000000 R14: 00007fef86695fa0 R15: 00007ffe80013978 [ 56.689448][ T4020] [ 56.689469][ T4020] Mem-Info: [ 56.990047][ T4020] active_anon:8815 inactive_anon:0 isolated_anon:0 [ 56.990047][ T4020] active_file:17801 inactive_file:2045 isolated_file:0 [ 56.990047][ T4020] unevictable:0 dirty:103 writeback:1 [ 56.990047][ T4020] slab_reclaimable:2833 slab_unreclaimable:14539 [ 56.990047][ T4020] mapped:30890 shmem:732 pagetables:879 [ 56.990047][ T4020] sec_pagetables:0 bounce:0 [ 56.990047][ T4020] kernel_misc_reclaimable:0 [ 56.990047][ T4020] free:1836272 free_pcp:45277 free_cma:0 [ 57.046166][ T4020] Node 0 active_anon:35376kB inactive_anon:0kB active_file:71204kB inactive_file:8180kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:123676kB dirty:412kB writeback:4kB shmem:2928kB writeback_tmp:0kB kernel_stack:2912kB pagetables:3864kB sec_pagetables:0kB all_unreclaimable? no [ 57.078412][ T4020] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 57.108038][ T4020] lowmem_reserve[]: 0 2885 7863 0 [ 57.114136][ T4020] Node 0 DMA32 free:2950944kB boost:0kB min:4136kB low:7068kB high:10000kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2954476kB mlocked:0kB bounce:0kB free_pcp:3532kB local_pcp:0kB free_cma:0kB [ 57.147117][ T4020] lowmem_reserve[]: 0 0 4978 0 [ 57.152813][ T4020] Node 0 Normal free:4377160kB boost:0kB min:7184kB low:12280kB high:17376kB reserved_highatomic:0KB active_anon:37348kB inactive_anon:0kB active_file:71204kB inactive_file:8180kB unevictable:0kB writepending:416kB present:5242880kB managed:5098208kB mlocked:0kB bounce:0kB free_pcp:176432kB local_pcp:1636kB free_cma:0kB [ 57.186255][ T4020] lowmem_reserve[]: 0 0 0 0 [ 57.191054][ T4020] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 57.206072][ T4020] Node 0 DMA32: 4*4kB (M) 0*8kB 3*16kB (M) 5*32kB (M) 3*64kB (M) 3*128kB (M) 2*256kB (M) 3*512kB (M) 3*1024kB (M) 2*2048kB (M) 718*4096kB (M) = 2950944kB [ 57.224206][ T4020] Node 0 Normal: 245*4kB (UM) 113*8kB (UE) 64*16kB (UM) 435*32kB (UME) 262*64kB (UME) 114*128kB (UME) 34*256kB (UM) 94*512kB (UM) 80*1024kB (UM) 35*2048kB (UME) 1005*4096kB (UME) = 4375100kB [ 57.244040][ T4020] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 57.254198][ T4020] 21390 total pagecache pages [ 57.259272][ T4020] 0 pages in swap cache [ 57.263636][ T4020] Free swap = 124752kB [ 57.268391][ T4020] Total swap = 124996kB [ 57.273257][ T4020] 2097051 pages RAM [ 57.277887][ T4020] 0 pages HighMem/MovableOnly [ 57.282902][ T4020] 80040 pages reserved [ 57.338986][ T4029] loop4: detected capacity change from 0 to 512 [ 57.347464][ T4035] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 57.460850][ T4049] __nla_validate_parse: 3 callbacks suppressed [ 57.460870][ T4049] netlink: 132 bytes leftover after parsing attributes in process `syz.0.214'. [ 57.513973][ T4056] dccp_invalid_packet: P.Data Offset(0) too small [ 57.542146][ T4054] loop3: detected capacity change from 0 to 4096 [ 57.557433][ T4054] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 57.560971][ T4054] EXT4-fs error (device loop3): ext4_do_update_inode:5154: inode #15: comm syz.3.215: corrupted inode contents [ 57.561207][ T4054] EXT4-fs error (device loop3): ext4_dirty_inode:6042: inode #15: comm syz.3.215: mark_inode_dirty error [ 57.561406][ T4054] EXT4-fs error (device loop3): ext4_do_update_inode:5154: inode #15: comm syz.3.215: corrupted inode contents [ 57.561861][ T4054] EXT4-fs error (device loop3): __ext4_ext_dirty:207: inode #15: comm syz.3.215: mark_inode_dirty error [ 57.562143][ T4054] EXT4-fs error (device loop3): ext4_do_update_inode:5154: inode #15: comm syz.3.215: corrupted inode contents [ 57.562432][ T4054] EXT4-fs error (device loop3): __ext4_ext_dirty:207: inode #15: comm syz.3.215: mark_inode_dirty error [ 57.562694][ T4054] EXT4-fs error (device loop3): ext4_do_update_inode:5154: inode #15: comm syz.3.215: corrupted inode contents [ 57.562840][ T4054] EXT4-fs error (device loop3): ext4_truncate:4240: inode #15: comm syz.3.215: mark_inode_dirty error [ 57.563005][ T4054] EXT4-fs error (device loop3) in ext4_setattr:5569: Corrupt filesystem [ 57.563675][ T4054] EXT4-fs error (device loop3): ext4_do_update_inode:5154: inode #15: comm syz.3.215: corrupted inode contents [ 57.564125][ T4054] program syz.3.215 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 57.565584][ T4054] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 57.581691][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.634093][ T4059] bridge0: entered promiscuous mode [ 57.652107][ T4053] loop4: detected capacity change from 0 to 8192 [ 57.683313][ T4059] macvlan2: entered promiscuous mode [ 57.866792][ T4059] bridge0: port 3(macvlan2) entered blocking state [ 57.874191][ T4059] bridge0: port 3(macvlan2) entered disabled state [ 57.935623][ T4059] macvlan2: entered allmulticast mode [ 57.942680][ T4059] bridge0: entered allmulticast mode [ 57.955543][ T4059] macvlan2: left allmulticast mode [ 57.961974][ T4059] bridge0: left allmulticast mode [ 57.975785][ T4059] bridge0: left promiscuous mode [ 58.065954][ T4063] loop4: detected capacity change from 0 to 8192 [ 58.119030][ T4072] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 58.208062][ T4078] xt_hashlimit: max too large, truncated to 1048576 [ 58.217473][ T4078] Cannot find set identified by id 0 to match [ 58.234774][ T4067] loop1: detected capacity change from 0 to 8192 [ 58.261503][ T4074] loop3: detected capacity change from 0 to 8192 [ 58.294507][ T4078] syz2: rxe_newlink: already configured on sit0 [ 58.817603][ T4094] loop2: detected capacity change from 0 to 128 [ 58.824623][ T4094] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 58.837844][ T4094] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 59.109986][ T29] kauditd_printk_skb: 214 callbacks suppressed [ 59.110001][ T29] audit: type=1326 audit(1738089819.025:818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4101 comm="syz.1.232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef8647cda9 code=0x7ffc0000 [ 59.146542][ T29] audit: type=1326 audit(1738089819.035:819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4101 comm="syz.1.232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=295 compat=0 ip=0x7fef8647cda9 code=0x7ffc0000 [ 59.172822][ T29] audit: type=1326 audit(1738089819.035:820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4101 comm="syz.1.232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef8647cda9 code=0x7ffc0000 [ 59.197607][ T29] audit: type=1326 audit(1738089819.035:821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4101 comm="syz.1.232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef8647cda9 code=0x7ffc0000 [ 59.235670][ T29] audit: type=1326 audit(1738089819.115:822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4103 comm="syz.2.236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f340454cda9 code=0x7ffc0000 [ 59.260664][ T29] audit: type=1326 audit(1738089819.115:823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4103 comm="syz.2.236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f340454cda9 code=0x7ffc0000 [ 59.286087][ T29] audit: type=1326 audit(1738089819.115:824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4103 comm="syz.2.236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=295 compat=0 ip=0x7f340454cda9 code=0x7ffc0000 [ 59.311707][ T29] audit: type=1326 audit(1738089819.115:825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4103 comm="syz.2.236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f340454cda9 code=0x7ffc0000 [ 59.313257][ T4106] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 59.342642][ T29] audit: type=1400 audit(1738089819.185:826): avc: denied { read } for pid=4105 comm="syz.4.235" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 59.367293][ T29] audit: type=1400 audit(1738089819.185:827): avc: denied { open } for pid=4105 comm="syz.4.235" path="/dev/ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 59.393376][ T4110] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 59.401785][ T4106] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 59.447990][ T4115] xt_hashlimit: max too large, truncated to 1048576 [ 59.466784][ T4115] Cannot find set identified by id 0 to match [ 59.498559][ T4115] rdma_rxe: rxe_newlink: failed to add sit0 [ 59.501848][ T4121] netlink: 132 bytes leftover after parsing attributes in process `syz.3.242'. [ 59.536663][ T4119] 9pnet_fd: Insufficient options for proto=fd [ 59.562093][ T4125] dccp_invalid_packet: P.Data Offset(0) too small [ 59.602550][ T4128] netlink: 132 bytes leftover after parsing attributes in process `syz.1.244'. [ 59.620629][ T4130] netlink: 12 bytes leftover after parsing attributes in process `syz.2.245'. [ 59.652765][ T4132] loop2: detected capacity change from 0 to 128 [ 59.661097][ T4132] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 59.677849][ T4132] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 59.689367][ T4133] dccp_invalid_packet: P.Data Offset(0) too small [ 59.767118][ T4137] loop2: detected capacity change from 0 to 128 [ 59.777276][ T4137] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 59.796013][ T4137] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 59.878522][ T4141] loop0: detected capacity change from 0 to 128 [ 59.891913][ T4141] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 59.904786][ T4141] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 59.917657][ T4148] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 59.955004][ T4150] netlink: 28 bytes leftover after parsing attributes in process `syz.0.253'. [ 59.974756][ T4153] loop2: detected capacity change from 0 to 1764 [ 60.016400][ T4156] xt_hashlimit: max too large, truncated to 1048576 [ 60.024273][ T4156] Cannot find set identified by id 0 to match [ 60.033574][ T4156] syz2: rxe_newlink: already configured on sit0 [ 60.076751][ T4160] netlink: 12 bytes leftover after parsing attributes in process `syz.0.257'. [ 60.085559][ T4162] FAULT_INJECTION: forcing a failure. [ 60.085559][ T4162] name failslab, interval 1, probability 0, space 0, times 0 [ 60.100977][ T4162] CPU: 1 UID: 0 PID: 4162 Comm: syz.2.258 Not tainted 6.13.0-syzkaller-09030-g6d61a53dd6f5 #0 [ 60.101007][ T4162] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 60.101050][ T4162] Call Trace: [ 60.101057][ T4162] [ 60.101066][ T4162] dump_stack_lvl+0xf2/0x150 [ 60.101094][ T4162] dump_stack+0x15/0x1a [ 60.101115][ T4162] should_fail_ex+0x24a/0x260 [ 60.101148][ T4162] should_failslab+0x8f/0xb0 [ 60.101248][ T4162] kmem_cache_alloc_lru_noprof+0x57/0x320 [ 60.101354][ T4162] ? proc_alloc_inode+0x34/0x90 [ 60.101381][ T4162] ? __d_lookup_rcu+0x25b/0x2a0 [ 60.101401][ T4162] proc_alloc_inode+0x34/0x90 [ 60.101433][ T4162] ? __pfx_proc_alloc_inode+0x10/0x10 [ 60.101528][ T4162] alloc_inode+0x3c/0x160 [ 60.101555][ T4162] new_inode+0x1e/0x100 [ 60.101582][ T4162] proc_pid_make_inode+0x1d/0xd0 [ 60.101614][ T4162] proc_pident_instantiate+0x44/0x180 [ 60.101683][ T4162] proc_pident_lookup+0x112/0x190 [ 60.101719][ T4162] proc_tgid_base_lookup+0x2b/0x40 [ 60.101784][ T4162] __lookup_slow+0x184/0x250 [ 60.101819][ T4162] lookup_slow+0x3c/0x60 [ 60.101851][ T4162] link_path_walk+0x668/0x830 [ 60.101883][ T4162] path_openat+0x1af/0x1fb0 [ 60.101964][ T4162] ? _parse_integer_limit+0x167/0x180 [ 60.102004][ T4162] ? kstrtouint_from_user+0xb0/0xe0 [ 60.102037][ T4162] do_filp_open+0x107/0x230 [ 60.102060][ T4162] ? __pfx_kfree_link+0x10/0x10 [ 60.102088][ T4162] do_sys_openat2+0xab/0x120 [ 60.102134][ T4162] __x64_sys_openat+0xf3/0x120 [ 60.102166][ T4162] x64_sys_call+0x2b30/0x2dc0 [ 60.102191][ T4162] do_syscall_64+0xc9/0x1c0 [ 60.102221][ T4162] ? clear_bhb_loop+0x55/0xb0 [ 60.102279][ T4162] ? clear_bhb_loop+0x55/0xb0 [ 60.102314][ T4162] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 60.102341][ T4162] RIP: 0033:0x7f340454b710 [ 60.102355][ T4162] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 49 94 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 9c 94 02 00 8b 44 [ 60.102438][ T4162] RSP: 002b:00007f3402bb0f70 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 60.102456][ T4162] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f340454b710 [ 60.102468][ T4162] RDX: 0000000000000000 RSI: 00007f34045ce3b8 RDI: 00000000ffffff9c [ 60.102479][ T4162] RBP: 00007f34045ce3b8 R08: 0000000000000000 R09: 0000000000000000 [ 60.102490][ T4162] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 60.102501][ T4162] R13: 0000000000000000 R14: 00007f3404765fa0 R15: 00007ffc50bc8628 [ 60.102519][ T4162] [ 60.392592][ T4166] loop0: detected capacity change from 0 to 512 [ 60.405801][ T4166] EXT4-fs error (device loop0): ext4_orphan_get:1389: inode #15: comm syz.0.260: casefold flag without casefold feature [ 60.438671][ T4179] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 60.466999][ T4166] EXT4-fs error (device loop0): ext4_orphan_get:1394: comm syz.0.260: couldn't read orphan inode 15 (err -117) [ 60.494833][ T4181] loop3: detected capacity change from 0 to 128 [ 60.513879][ T4181] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 60.572640][ T4172] loop4: detected capacity change from 0 to 8192 [ 60.588087][ T4181] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 60.609546][ T4166] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 60.649246][ T4186] FAULT_INJECTION: forcing a failure. [ 60.649246][ T4186] name failslab, interval 1, probability 0, space 0, times 0 [ 60.662745][ T4186] CPU: 0 UID: 0 PID: 4186 Comm: syz.1.266 Not tainted 6.13.0-syzkaller-09030-g6d61a53dd6f5 #0 [ 60.662776][ T4186] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 60.662790][ T4186] Call Trace: [ 60.662797][ T4186] [ 60.662805][ T4186] dump_stack_lvl+0xf2/0x150 [ 60.662836][ T4186] dump_stack+0x15/0x1a [ 60.662855][ T4186] should_fail_ex+0x24a/0x260 [ 60.662913][ T4186] should_failslab+0x8f/0xb0 [ 60.662943][ T4186] __kmalloc_node_track_caller_noprof+0xa8/0x410 [ 60.663016][ T4186] ? kvasprintf_const+0x5d/0x100 [ 60.663050][ T4186] kvasprintf+0x8c/0x110 [ 60.663081][ T4186] kvasprintf_const+0x5d/0x100 [ 60.663113][ T4186] kobject_set_name_vargs+0x44/0xe0 [ 60.663198][ T4186] dev_set_name+0x84/0xb0 [ 60.663233][ T4186] ? nfc_allocate_device+0x110/0x2d0 [ 60.663274][ T4186] nfc_allocate_device+0x12e/0x2d0 [ 60.663343][ T4186] nci_allocate_device+0x136/0x200 [ 60.663384][ T4186] virtual_ncidev_open+0x53/0x140 [ 60.663411][ T4186] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 60.663439][ T4186] misc_open+0x1d5/0x200 [ 60.663498][ T4186] chrdev_open+0x2f9/0x370 [ 60.663528][ T4186] ? __pfx_chrdev_open+0x10/0x10 [ 60.663563][ T4186] do_dentry_open+0x621/0xa20 [ 60.663673][ T4186] vfs_open+0x38/0x1e0 [ 60.663709][ T4186] path_openat+0x1acf/0x1fb0 [ 60.663734][ T4186] ? _parse_integer_limit+0x167/0x180 [ 60.663778][ T4186] ? kstrtouint_from_user+0xb0/0xe0 [ 60.663864][ T4186] do_filp_open+0x107/0x230 [ 60.663891][ T4186] do_sys_openat2+0xab/0x120 [ 60.663925][ T4186] __x64_sys_openat+0xf3/0x120 [ 60.664027][ T4186] x64_sys_call+0x2b30/0x2dc0 [ 60.664059][ T4186] do_syscall_64+0xc9/0x1c0 [ 60.664095][ T4186] ? clear_bhb_loop+0x55/0xb0 [ 60.664122][ T4186] ? clear_bhb_loop+0x55/0xb0 [ 60.664203][ T4186] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 60.664235][ T4186] RIP: 0033:0x7fef8647cda9 [ 60.664294][ T4186] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 60.664311][ T4186] RSP: 002b:00007fef84ac6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 60.664328][ T4186] RAX: ffffffffffffffda RBX: 00007fef86696080 RCX: 00007fef8647cda9 [ 60.664339][ T4186] RDX: 0000000000000002 RSI: 0000000020000040 RDI: ffffffffffffff9c [ 60.664349][ T4186] RBP: 00007fef84ac6090 R08: 0000000000000000 R09: 0000000000000000 [ 60.664363][ T4186] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 60.664377][ T4186] R13: 0000000000000000 R14: 00007fef86696080 R15: 00007ffe80013978 [ 60.664398][ T4186] [ 60.964915][ T3298] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.197373][ T4190] netlink: 168 bytes leftover after parsing attributes in process `syz.2.270'. [ 61.277041][ T4207] loop4: detected capacity change from 0 to 512 [ 61.285317][ T4207] EXT4-fs: Ignoring removed i_version option [ 61.292280][ T4207] EXT4-fs: Ignoring removed mblk_io_submit option [ 61.310730][ T4207] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 61.466408][ T4207] EXT4-fs (loop4): 1 truncate cleaned up [ 61.473316][ T4207] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 61.813591][ T4229] loop3: detected capacity change from 0 to 128 [ 61.826471][ T4229] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 61.877570][ T4229] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 61.880019][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.919020][ T4234] netlink: 168 bytes leftover after parsing attributes in process `syz.0.281'. [ 61.964576][ T4233] loop2: detected capacity change from 0 to 512 [ 61.965614][ T4230] sit0 speed is unknown, defaulting to 1000 [ 61.992950][ T4233] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 62.011430][ T4242] batadv1: entered promiscuous mode [ 62.016205][ T4233] EXT4-fs (loop2): warning: maximal mount count reached, running e2fsck is recommended [ 62.029282][ T4242] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 62.046976][ T4247] loop3: detected capacity change from 0 to 512 [ 62.054633][ T4233] EXT4-fs error (device loop2): ext4_orphan_get:1389: comm syz.2.282: inode #15: comm syz.2.282: iget: illegal inode # [ 62.075515][ T4249] netlink: 16 bytes leftover after parsing attributes in process `syz.0.284'. [ 62.088624][ T4233] EXT4-fs error (device loop2): ext4_orphan_get:1394: comm syz.2.282: couldn't read orphan inode 15 (err -117) [ 62.107254][ T4247] EXT4-fs error (device loop3): ext4_orphan_get:1389: inode #15: comm syz.3.283: casefold flag without casefold feature [ 62.126579][ T4233] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 62.141142][ T4247] EXT4-fs error (device loop3): ext4_orphan_get:1394: comm syz.3.283: couldn't read orphan inode 15 (err -117) [ 62.148273][ T4233] FAULT_INJECTION: forcing a failure. [ 62.148273][ T4233] name failslab, interval 1, probability 0, space 0, times 0 [ 62.160170][ T4247] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 62.166233][ T4233] CPU: 0 UID: 0 PID: 4233 Comm: syz.2.282 Not tainted 6.13.0-syzkaller-09030-g6d61a53dd6f5 #0 [ 62.166315][ T4233] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 62.166332][ T4233] Call Trace: [ 62.166340][ T4233] [ 62.166351][ T4233] dump_stack_lvl+0xf2/0x150 [ 62.166389][ T4233] dump_stack+0x15/0x1a [ 62.166444][ T4233] should_fail_ex+0x24a/0x260 [ 62.166486][ T4233] should_failslab+0x8f/0xb0 [ 62.166559][ T4233] kmem_cache_alloc_noprof+0x52/0x320 [ 62.166602][ T4233] ? __es_insert_extent+0x563/0xed0 [ 62.166635][ T4233] __es_insert_extent+0x563/0xed0 [ 62.166671][ T4233] ext4_es_insert_extent+0x45a/0x1c60 [ 62.166734][ T4233] ext4_map_query_blocks+0x107/0x180 [ 62.166804][ T4233] ext4_map_blocks+0x23c/0xd20 [ 62.166882][ T4233] ? __rcu_read_unlock+0x4e/0x70 [ 62.166913][ T4233] ? security_compute_sid+0xda7/0xe10 [ 62.166942][ T4233] ext4_getblk+0x11f/0x530 [ 62.166972][ T4233] ext4_bread_batch+0x5b/0x360 [ 62.167002][ T4233] __ext4_find_entry+0xa71/0x1260 [ 62.167139][ T4233] ? may_create+0x2b2/0x300 [ 62.167169][ T4233] ext4_lookup+0xba/0x390 [ 62.167210][ T4233] ? __pfx_ext4_lookup+0x10/0x10 [ 62.167310][ T4233] path_openat+0xd40/0x1fb0 [ 62.167348][ T4233] do_filp_open+0x107/0x230 [ 62.167384][ T4233] do_sys_openat2+0xab/0x120 [ 62.167435][ T4233] __x64_sys_openat+0xf3/0x120 [ 62.167475][ T4233] x64_sys_call+0x2b30/0x2dc0 [ 62.167507][ T4233] do_syscall_64+0xc9/0x1c0 [ 62.167618][ T4233] ? clear_bhb_loop+0x55/0xb0 [ 62.167652][ T4233] ? clear_bhb_loop+0x55/0xb0 [ 62.167760][ T4233] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 62.167794][ T4233] RIP: 0033:0x7f340454cda9 [ 62.167815][ T4233] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 62.167836][ T4233] RSP: 002b:00007f3402bb1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 62.167859][ T4233] RAX: ffffffffffffffda RBX: 00007f3404765fa0 RCX: 00007f340454cda9 [ 62.167874][ T4233] RDX: 000000000000275a RSI: 0000000020000140 RDI: ffffffffffffff9c [ 62.167888][ T4233] RBP: 00007f3402bb1090 R08: 0000000000000000 R09: 0000000000000000 [ 62.167957][ T4233] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 62.168007][ T4233] R13: 0000000000000000 R14: 00007f3404765fa0 R15: 00007ffc50bc8628 [ 62.168029][ T4233] [ 62.231237][ T4233] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm syz.2.282: bg 0: block 19: invalid block bitmap [ 62.480211][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.504099][ T4257] loop4: detected capacity change from 0 to 8192 [ 62.533429][ T4261] Zero length message leads to an empty skb [ 62.593689][ T3300] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.863527][ T4292] loop1: detected capacity change from 0 to 128 [ 62.897001][ T4292] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 62.967364][ T4292] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 63.227364][ T4310] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 63.250292][ T4313] loop4: detected capacity change from 0 to 128 [ 63.265868][ T4308] sit0 speed is unknown, defaulting to 1000 [ 63.285771][ T4313] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 63.320994][ T4313] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 63.890483][ T4339] FAULT_INJECTION: forcing a failure. [ 63.890483][ T4339] name failslab, interval 1, probability 0, space 0, times 0 [ 63.907784][ T4339] CPU: 0 UID: 0 PID: 4339 Comm: syz.3.316 Not tainted 6.13.0-syzkaller-09030-g6d61a53dd6f5 #0 [ 63.907808][ T4339] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 63.907820][ T4339] Call Trace: [ 63.907828][ T4339] [ 63.907837][ T4339] dump_stack_lvl+0xf2/0x150 [ 63.907948][ T4339] dump_stack+0x15/0x1a [ 63.907996][ T4339] should_fail_ex+0x24a/0x260 [ 63.908037][ T4339] ? __pfx_ip6gre_tunnel_setup+0x10/0x10 [ 63.908081][ T4339] should_failslab+0x8f/0xb0 [ 63.908107][ T4339] __kmalloc_node_noprof+0xad/0x410 [ 63.908144][ T4339] ? __kvmalloc_node_noprof+0x72/0x170 [ 63.908210][ T4339] ? __pfx_ip6gre_tunnel_setup+0x10/0x10 [ 63.908250][ T4339] __kvmalloc_node_noprof+0x72/0x170 [ 63.908362][ T4339] alloc_netdev_mqs+0xa8/0xa20 [ 63.908397][ T4339] ? __pfx_ip6gre_tunnel_setup+0x10/0x10 [ 63.908507][ T4339] ip6gre_tunnel_locate+0x14e/0x480 [ 63.908559][ T4339] ? should_fail_ex+0xd7/0x260 [ 63.908599][ T4339] ? gre_flags_to_tnl_flags+0x1bf/0x1f0 [ 63.908632][ T4339] ip6gre_tunnel_siocdevprivate+0x583/0x6f0 [ 63.908670][ T4339] ? __pfx_ip6gre_tunnel_siocdevprivate+0x10/0x10 [ 63.909281][ T4339] dev_ifsioc+0x84e/0xa10 [ 63.909320][ T4339] dev_ioctl+0x8e9/0xab0 [ 63.909423][ T4339] sock_ioctl+0x57d/0x600 [ 63.909578][ T4339] ? __pfx_sock_ioctl+0x10/0x10 [ 63.909618][ T4339] __se_sys_ioctl+0xc9/0x140 [ 63.909643][ T4339] __x64_sys_ioctl+0x43/0x50 [ 63.909703][ T4339] x64_sys_call+0x1690/0x2dc0 [ 63.909733][ T4339] do_syscall_64+0xc9/0x1c0 [ 63.909772][ T4339] ? clear_bhb_loop+0x55/0xb0 [ 63.909802][ T4339] ? clear_bhb_loop+0x55/0xb0 [ 63.910916][ T4339] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 63.910951][ T4339] RIP: 0033:0x7f47acc5cda9 [ 63.910971][ T4339] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 63.910990][ T4339] RSP: 002b:00007f47ab2c7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 63.911013][ T4339] RAX: ffffffffffffffda RBX: 00007f47ace75fa0 RCX: 00007f47acc5cda9 [ 63.911028][ T4339] RDX: 0000000020000900 RSI: 00000000000089f1 RDI: 0000000000000006 [ 63.911041][ T4339] RBP: 00007f47ab2c7090 R08: 0000000000000000 R09: 0000000000000000 [ 63.911054][ T4339] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 63.911133][ T4339] R13: 0000000000000000 R14: 00007f47ace75fa0 R15: 00007ffd576c9068 [ 63.911151][ T4339] [ 64.019143][ T4347] loop2: detected capacity change from 0 to 128 [ 64.087261][ T4349] loop3: detected capacity change from 0 to 128 [ 64.096126][ T4347] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 64.099764][ T4349] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 64.103413][ T4347] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 64.139789][ T4349] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 64.215226][ T29] kauditd_printk_skb: 247 callbacks suppressed [ 64.215247][ T29] audit: type=1326 audit(1738089824.095:1075): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4343 comm="syz.2.318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=82 compat=0 ip=0x7f340454cda9 code=0x7ffc0000 [ 64.277970][ T29] audit: type=1326 audit(1738089824.105:1076): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4343 comm="syz.2.318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f340454cda9 code=0x7ffc0000 [ 64.304230][ T29] audit: type=1326 audit(1738089824.105:1077): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4343 comm="syz.2.318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f340454cda9 code=0x7ffc0000 [ 64.330288][ T29] audit: type=1400 audit(1738089824.155:1078): avc: denied { read } for pid=4352 comm="syz.0.322" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 64.330413][ T29] audit: type=1326 audit(1738089824.155:1079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4348 comm="syz.3.320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f47acc5b710 code=0x7ffc0000 [ 64.330508][ T29] audit: type=1326 audit(1738089824.155:1080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4348 comm="syz.3.320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=80 compat=0 ip=0x7f47acc5baf7 code=0x7ffc0000 [ 64.330532][ T29] audit: type=1326 audit(1738089824.155:1081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4348 comm="syz.3.320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f47acc5b710 code=0x7ffc0000 [ 64.330561][ T29] audit: type=1326 audit(1738089824.155:1082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4348 comm="syz.3.320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47acc5cda9 code=0x7ffc0000 [ 64.330589][ T29] audit: type=1326 audit(1738089824.155:1083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4348 comm="syz.3.320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47acc5cda9 code=0x7ffc0000 [ 64.330627][ T29] audit: type=1326 audit(1738089824.155:1084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4348 comm="syz.3.320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=82 compat=0 ip=0x7f47acc5cda9 code=0x7ffc0000 [ 64.348880][ T4358] netlink: 12 bytes leftover after parsing attributes in process `syz.3.324'. [ 64.454711][ C0] hrtimer: interrupt took 36873 ns [ 64.541208][ T4367] loop2: detected capacity change from 0 to 1024 [ 64.546667][ T4367] EXT4-fs: Ignoring removed nobh option [ 64.546905][ T4367] EXT4-fs: Ignoring removed bh option [ 64.688868][ T4367] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 64.762359][ T4375] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 64.896383][ T4378] loop1: detected capacity change from 0 to 512 [ 64.932127][ T4378] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 64.932260][ T4378] ext4 filesystem being mounted at /70/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 64.972238][ T3299] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.318172][ T4384] ALSA: seq fatal error: cannot create timer (-19) [ 65.374270][ T4390] FAULT_INJECTION: forcing a failure. [ 65.374270][ T4390] name failslab, interval 1, probability 0, space 0, times 0 [ 65.387465][ T4390] CPU: 0 UID: 0 PID: 4390 Comm: syz.1.330 Not tainted 6.13.0-syzkaller-09030-g6d61a53dd6f5 #0 [ 65.387491][ T4390] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 65.387503][ T4390] Call Trace: [ 65.387509][ T4390] [ 65.387516][ T4390] dump_stack_lvl+0xf2/0x150 [ 65.387544][ T4390] dump_stack+0x15/0x1a [ 65.387586][ T4390] should_fail_ex+0x24a/0x260 [ 65.387663][ T4390] should_failslab+0x8f/0xb0 [ 65.387776][ T4390] kmem_cache_alloc_noprof+0x52/0x320 [ 65.387810][ T4390] ? skb_clone+0x154/0x1f0 [ 65.387834][ T4390] skb_clone+0x154/0x1f0 [ 65.387925][ T4390] __netlink_deliver_tap+0x2bd/0x4f0 [ 65.387951][ T4390] netlink_unicast+0x64a/0x670 [ 65.387996][ T4390] netlink_sendmsg+0x5cc/0x6e0 [ 65.388042][ T4390] ? __pfx_netlink_sendmsg+0x10/0x10 [ 65.388063][ T4390] __sock_sendmsg+0x140/0x180 [ 65.388086][ T4390] ____sys_sendmsg+0x312/0x410 [ 65.388129][ T4390] __sys_sendmsg+0x19d/0x230 [ 65.388164][ T4390] __x64_sys_sendmsg+0x46/0x50 [ 65.388224][ T4390] x64_sys_call+0x2734/0x2dc0 [ 65.388261][ T4390] do_syscall_64+0xc9/0x1c0 [ 65.388363][ T4390] ? clear_bhb_loop+0x55/0xb0 [ 65.388430][ T4390] ? clear_bhb_loop+0x55/0xb0 [ 65.388528][ T4390] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 65.388561][ T4390] RIP: 0033:0x7fef8647cda9 [ 65.388577][ T4390] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 65.388593][ T4390] RSP: 002b:00007fef84ae7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 65.388617][ T4390] RAX: ffffffffffffffda RBX: 00007fef86695fa0 RCX: 00007fef8647cda9 [ 65.388628][ T4390] RDX: 0000000000000000 RSI: 0000000020000180 RDI: 0000000000000005 [ 65.388638][ T4390] RBP: 00007fef84ae7090 R08: 0000000000000000 R09: 0000000000000000 [ 65.388720][ T4390] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 65.388734][ T4390] R13: 0000000000000000 R14: 00007fef86695fa0 R15: 00007ffe80013978 [ 65.388751][ T4390] [ 65.690318][ T4390] wireguard0: entered promiscuous mode [ 65.696000][ T4390] wireguard0: entered allmulticast mode [ 65.712572][ T4397] loop3: detected capacity change from 0 to 128 [ 65.723900][ T4397] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 65.746185][ T4397] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 65.792097][ T4403] netlink: 12 bytes leftover after parsing attributes in process `syz.3.336'. [ 66.023315][ T3300] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.112201][ T4418] loop2: detected capacity change from 0 to 4096 [ 66.130915][ T4418] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 66.153256][ T4415] loop1: detected capacity change from 0 to 512 [ 66.197060][ T4415] EXT4-fs error (device loop1): ext4_orphan_get:1389: inode #15: comm syz.1.340: casefold flag without casefold feature [ 66.213147][ T4415] EXT4-fs error (device loop1): ext4_orphan_get:1394: comm syz.1.340: couldn't read orphan inode 15 (err -117) [ 66.229720][ T4415] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 66.322185][ T3299] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.370527][ T3300] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.423561][ T4445] netlink: 12 bytes leftover after parsing attributes in process `syz.3.347'. [ 66.523908][ T4446] SELinux: Context system_u:object_r:dhcpc_exec_t:s0 is not valid (left unmapped). [ 66.562139][ T4451] loop3: detected capacity change from 0 to 2048 [ 66.594730][ T4451] capability: warning: `syz.3.348' uses 32-bit capabilities (legacy support in use) [ 66.672003][ T4466] xt_hashlimit: max too large, truncated to 1048576 [ 66.681773][ T4466] Cannot find set identified by id 0 to match [ 66.699012][ T4466] rdma_rxe: rxe_newlink: failed to add sit0 [ 66.781317][ T4475] netlink: 4 bytes leftover after parsing attributes in process `syz.1.351'. [ 66.830632][ T4478] loop3: detected capacity change from 0 to 512 [ 66.842334][ T4478] EXT4-fs error (device loop3): ext4_orphan_get:1389: inode #15: comm syz.3.352: casefold flag without casefold feature [ 66.859082][ T4478] EXT4-fs error (device loop3): ext4_orphan_get:1394: comm syz.3.352: couldn't read orphan inode 15 (err -117) [ 66.872580][ T4478] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 66.922851][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.934258][ T4484] sit0 speed is unknown, defaulting to 1000 [ 67.179235][ T4494] FAULT_INJECTION: forcing a failure. [ 67.179235][ T4494] name failslab, interval 1, probability 0, space 0, times 0 [ 67.193025][ T4494] CPU: 1 UID: 0 PID: 4494 Comm: syz.3.357 Not tainted 6.13.0-syzkaller-09030-g6d61a53dd6f5 #0 [ 67.193071][ T4494] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 67.193086][ T4494] Call Trace: [ 67.193093][ T4494] [ 67.193155][ T4494] dump_stack_lvl+0xf2/0x150 [ 67.193256][ T4494] dump_stack+0x15/0x1a [ 67.193305][ T4494] should_fail_ex+0x24a/0x260 [ 67.193396][ T4494] ? legacy_init_fs_context+0x31/0x70 [ 67.193429][ T4494] should_failslab+0x8f/0xb0 [ 67.193457][ T4494] __kmalloc_cache_noprof+0x4e/0x320 [ 67.193568][ T4494] legacy_init_fs_context+0x31/0x70 [ 67.193594][ T4494] alloc_fs_context+0x3fb/0x4e0 [ 67.193661][ T4494] fs_context_for_mount+0x21/0x30 [ 67.193723][ T4494] do_new_mount+0xf3/0x690 [ 67.193829][ T4494] path_mount+0x49b/0xb30 [ 67.193915][ T4494] __se_sys_mount+0x27f/0x2d0 [ 67.193948][ T4494] ? __bpf_trace_sys_enter+0x10/0x30 [ 67.193975][ T4494] ? trace_sys_enter+0xcd/0x110 [ 67.194033][ T4494] __x64_sys_mount+0x67/0x80 [ 67.194060][ T4494] x64_sys_call+0x2c84/0x2dc0 [ 67.194093][ T4494] do_syscall_64+0xc9/0x1c0 [ 67.194127][ T4494] ? clear_bhb_loop+0x55/0xb0 [ 67.194190][ T4494] ? clear_bhb_loop+0x55/0xb0 [ 67.194216][ T4494] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 67.194250][ T4494] RIP: 0033:0x7f47acc5cda9 [ 67.194294][ T4494] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 67.194315][ T4494] RSP: 002b:00007f47ab2c7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 67.194338][ T4494] RAX: ffffffffffffffda RBX: 00007f47ace75fa0 RCX: 00007f47acc5cda9 [ 67.194352][ T4494] RDX: 00000000200000c0 RSI: 0000000020000080 RDI: 0000000000000000 [ 67.194363][ T4494] RBP: 00007f47ab2c7090 R08: 0000000000000000 R09: 0000000000000000 [ 67.194377][ T4494] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 67.194390][ T4494] R13: 0000000000000000 R14: 00007f47ace75fa0 R15: 00007ffd576c9068 [ 67.194412][ T4494] [ 67.515180][ T4497] sit0 speed is unknown, defaulting to 1000 [ 67.537740][ T4501] netlink: 12 bytes leftover after parsing attributes in process `syz.3.360'. [ 67.649148][ T4504] loop2: detected capacity change from 0 to 2048 [ 67.742913][ T4516] loop1: detected capacity change from 0 to 128 [ 67.754788][ T4513] loop2: detected capacity change from 0 to 512 [ 67.763377][ T4511] syz.0.364 (4511) used greatest stack depth: 10248 bytes left [ 67.775825][ T4513] EXT4-fs: Ignoring removed oldalloc option [ 67.786089][ T4516] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 67.816878][ T4516] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 67.833268][ T4523] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 67.842183][ T4513] EXT4-fs error (device loop2): ext4_xattr_inode_iget:436: comm syz.2.363: Parent and EA inode have the same ino 15 [ 67.857087][ T4523] netlink: 36 bytes leftover after parsing attributes in process `syz.0.368'. [ 67.896183][ T4513] EXT4-fs (loop2): Remounting filesystem read-only [ 67.902969][ T4513] EXT4-fs warning (device loop2): ext4_evict_inode:259: couldn't mark inode dirty (err -5) [ 67.913808][ T4513] EXT4-fs (loop2): 1 orphan inode deleted [ 67.920600][ T4513] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 67.933567][ T4513] SELinux: (dev loop2, type ext4) getxattr errno 5 [ 67.941965][ T4513] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.978262][ T4537] netlink: 12 bytes leftover after parsing attributes in process `syz.1.372'. [ 67.991696][ T4539] FAULT_INJECTION: forcing a failure. [ 67.991696][ T4539] name failslab, interval 1, probability 0, space 0, times 0 [ 68.004956][ T4539] CPU: 0 UID: 0 PID: 4539 Comm: syz.3.374 Not tainted 6.13.0-syzkaller-09030-g6d61a53dd6f5 #0 [ 68.004981][ T4539] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 68.005002][ T4539] Call Trace: [ 68.005009][ T4539] [ 68.005017][ T4539] dump_stack_lvl+0xf2/0x150 [ 68.005062][ T4539] dump_stack+0x15/0x1a [ 68.005085][ T4539] should_fail_ex+0x24a/0x260 [ 68.005121][ T4539] should_failslab+0x8f/0xb0 [ 68.005146][ T4539] __kmalloc_cache_node_noprof+0x56/0x320 [ 68.005335][ T4539] ? __get_vm_area_node+0xfb/0x1c0 [ 68.005371][ T4539] ? memcg_list_lru_alloc+0xce/0x4e0 [ 68.005452][ T4539] __get_vm_area_node+0xfb/0x1c0 [ 68.005480][ T4539] __vmalloc_node_range_noprof+0x280/0xe70 [ 68.005505][ T4539] ? do_replace+0x19c/0x2d0 [ 68.005597][ T4539] ? avc_has_perm_noaudit+0x1cc/0x210 [ 68.005629][ T4539] ? avc_has_perm_noaudit+0x1cc/0x210 [ 68.005743][ T4539] ? do_replace+0x19c/0x2d0 [ 68.005801][ T4539] __vmalloc_noprof+0x5e/0x70 [ 68.005822][ T4539] ? do_replace+0x19c/0x2d0 [ 68.005843][ T4539] do_replace+0x19c/0x2d0 [ 68.005947][ T4539] do_ebt_set_ctl+0x1bd/0xb80 [ 68.005969][ T4539] ? __rcu_read_unlock+0x4e/0x70 [ 68.005996][ T4539] ? __pfx_ip4_datagram_release_cb+0x10/0x10 [ 68.006034][ T4539] ? ip4_datagram_release_cb+0x36c/0x3a0 [ 68.006070][ T4539] ? kstrtoull+0x110/0x140 [ 68.006178][ T4539] ? _raw_spin_unlock_bh+0x36/0x40 [ 68.006199][ T4539] ? release_sock+0x117/0x150 [ 68.006233][ T4539] ? sockopt_release_sock+0x42/0x50 [ 68.006265][ T4539] ? do_ip_setsockopt+0x1fcf/0x2340 [ 68.006313][ T4539] nf_setsockopt+0x195/0x1b0 [ 68.006343][ T4539] ip_setsockopt+0xea/0x100 [ 68.006375][ T4539] udp_setsockopt+0x95/0xb0 [ 68.006453][ T4539] sock_common_setsockopt+0x64/0x80 [ 68.006478][ T4539] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 68.006506][ T4539] __sys_setsockopt+0x187/0x200 [ 68.006542][ T4539] __x64_sys_setsockopt+0x66/0x80 [ 68.006604][ T4539] x64_sys_call+0x282e/0x2dc0 [ 68.006658][ T4539] do_syscall_64+0xc9/0x1c0 [ 68.006694][ T4539] ? clear_bhb_loop+0x55/0xb0 [ 68.006728][ T4539] ? clear_bhb_loop+0x55/0xb0 [ 68.006835][ T4539] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 68.006868][ T4539] RIP: 0033:0x7f47acc5cda9 [ 68.006951][ T4539] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 68.006969][ T4539] RSP: 002b:00007f47ab2c7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 68.006986][ T4539] RAX: ffffffffffffffda RBX: 00007f47ace75fa0 RCX: 00007f47acc5cda9 [ 68.006997][ T4539] RDX: 0000000000000080 RSI: 0000000000000000 RDI: 0000000000000003 [ 68.007008][ T4539] RBP: 00007f47ab2c7090 R08: 0000000000000108 R09: 0000000000000000 [ 68.007018][ T4539] R10: 0000000020000000 R11: 0000000000000246 R12: 0000000000000001 [ 68.007029][ T4539] R13: 0000000000000000 R14: 00007f47ace75fa0 R15: 00007ffd576c9068 [ 68.007094][ T4539] [ 68.007103][ T4539] syz.3.374: vmalloc error: size 128, vm_struct allocation failed, mode:0x400cc0(GFP_KERNEL_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0 [ 68.313231][ T4539] CPU: 0 UID: 0 PID: 4539 Comm: syz.3.374 Not tainted 6.13.0-syzkaller-09030-g6d61a53dd6f5 #0 [ 68.313267][ T4539] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 68.313327][ T4539] Call Trace: [ 68.313335][ T4539] [ 68.313344][ T4539] dump_stack_lvl+0xf2/0x150 [ 68.313433][ T4539] dump_stack+0x15/0x1a [ 68.313457][ T4539] warn_alloc+0x145/0x1b0 [ 68.313479][ T4539] ? __get_vm_area_node+0xfb/0x1c0 [ 68.313585][ T4539] ? memcg_list_lru_alloc+0xce/0x4e0 [ 68.313626][ T4539] __vmalloc_node_range_noprof+0x2a5/0xe70 [ 68.313656][ T4539] ? avc_has_perm_noaudit+0x1cc/0x210 [ 68.313826][ T4539] ? avc_has_perm_noaudit+0x1cc/0x210 [ 68.313862][ T4539] ? do_replace+0x19c/0x2d0 [ 68.313890][ T4539] __vmalloc_noprof+0x5e/0x70 [ 68.313969][ T4539] ? do_replace+0x19c/0x2d0 [ 68.313994][ T4539] do_replace+0x19c/0x2d0 [ 68.314052][ T4539] do_ebt_set_ctl+0x1bd/0xb80 [ 68.314083][ T4539] ? __rcu_read_unlock+0x4e/0x70 [ 68.314106][ T4539] ? __pfx_ip4_datagram_release_cb+0x10/0x10 [ 68.314135][ T4539] ? ip4_datagram_release_cb+0x36c/0x3a0 [ 68.314171][ T4539] ? kstrtoull+0x110/0x140 [ 68.314221][ T4539] ? _raw_spin_unlock_bh+0x36/0x40 [ 68.314239][ T4539] ? release_sock+0x117/0x150 [ 68.314264][ T4539] ? sockopt_release_sock+0x42/0x50 [ 68.314365][ T4539] ? do_ip_setsockopt+0x1fcf/0x2340 [ 68.314401][ T4539] nf_setsockopt+0x195/0x1b0 [ 68.314431][ T4539] ip_setsockopt+0xea/0x100 [ 68.314521][ T4539] udp_setsockopt+0x95/0xb0 [ 68.314597][ T4539] sock_common_setsockopt+0x64/0x80 [ 68.314630][ T4539] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 68.314662][ T4539] __sys_setsockopt+0x187/0x200 [ 68.314734][ T4539] __x64_sys_setsockopt+0x66/0x80 [ 68.314769][ T4539] x64_sys_call+0x282e/0x2dc0 [ 68.314802][ T4539] do_syscall_64+0xc9/0x1c0 [ 68.314849][ T4539] ? clear_bhb_loop+0x55/0xb0 [ 68.314888][ T4539] ? clear_bhb_loop+0x55/0xb0 [ 68.314920][ T4539] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 68.315003][ T4539] RIP: 0033:0x7f47acc5cda9 [ 68.315021][ T4539] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 68.315042][ T4539] RSP: 002b:00007f47ab2c7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 68.315065][ T4539] RAX: ffffffffffffffda RBX: 00007f47ace75fa0 RCX: 00007f47acc5cda9 [ 68.315152][ T4539] RDX: 0000000000000080 RSI: 0000000000000000 RDI: 0000000000000003 [ 68.315162][ T4539] RBP: 00007f47ab2c7090 R08: 0000000000000108 R09: 0000000000000000 [ 68.315254][ T4539] R10: 0000000020000000 R11: 0000000000000246 R12: 0000000000000001 [ 68.315318][ T4539] R13: 0000000000000000 R14: 00007f47ace75fa0 R15: 00007ffd576c9068 [ 68.315334][ T4539] [ 68.595542][ T4539] Mem-Info: [ 68.599217][ T4539] active_anon:4504 inactive_anon:0 isolated_anon:0 [ 68.599217][ T4539] active_file:17889 inactive_file:2046 isolated_file:0 [ 68.599217][ T4539] unevictable:0 dirty:573 writeback:0 [ 68.599217][ T4539] slab_reclaimable:2829 slab_unreclaimable:15104 [ 68.599217][ T4539] mapped:28945 shmem:353 pagetables:846 [ 68.599217][ T4539] sec_pagetables:0 bounce:0 [ 68.599217][ T4539] kernel_misc_reclaimable:0 [ 68.599217][ T4539] free:1847959 free_pcp:22813 free_cma:0 [ 68.646290][ T4539] Node 0 active_anon:18016kB inactive_anon:0kB active_file:71556kB inactive_file:8184kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:115780kB dirty:2292kB writeback:0kB shmem:1412kB writeback_tmp:0kB kernel_stack:2864kB pagetables:3384kB sec_pagetables:0kB all_unreclaimable? no [ 68.675130][ T4539] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 68.702923][ T4539] lowmem_reserve[]: 0 2885 7863 0 [ 68.708319][ T4539] Node 0 DMA32 free:2950944kB boost:0kB min:4136kB low:7068kB high:10000kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2954476kB mlocked:0kB bounce:0kB free_pcp:3532kB local_pcp:3532kB free_cma:0kB [ 68.737406][ T4539] lowmem_reserve[]: 0 0 4978 0 [ 68.742225][ T4539] Node 0 Normal free:4425532kB boost:0kB min:7184kB low:12280kB high:17376kB reserved_highatomic:0KB active_anon:18016kB inactive_anon:0kB active_file:71556kB inactive_file:8184kB unevictable:0kB writepending:2292kB present:5242880kB managed:5098208kB mlocked:0kB bounce:0kB free_pcp:87748kB local_pcp:48364kB free_cma:0kB [ 68.773092][ T4539] lowmem_reserve[]: 0 0 0 0 [ 68.777899][ T4539] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 68.791058][ T4539] Node 0 DMA32: 4*4kB (M) 0*8kB 3*16kB (M) 5*32kB (M) 3*64kB (M) 3*128kB (M) 2*256kB (M) 3*512kB (M) 3*1024kB (M) 2*2048kB (M) 718*4096kB (M) = 2950944kB [ 68.808048][ T4539] Node 0 Normal: 882*4kB (UM) 923*8kB (UM) 460*16kB (UME) 352*32kB (UME) 244*64kB (UME) 168*128kB (UME) 81*256kB (UM) 129*512kB (UM) 109*1024kB (UM) 71*2048kB (UME) 994*4096kB (UME) = 4481888kB [ 68.828337][ T4539] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 68.838052][ T4539] 20280 total pagecache pages [ 68.843026][ T4539] 0 pages in swap cache [ 68.847239][ T4539] Free swap = 124756kB [ 68.851443][ T4539] Total swap = 124996kB [ 68.855627][ T4539] 2097051 pages RAM [ 68.859440][ T4539] 0 pages HighMem/MovableOnly [ 68.864119][ T4539] 80040 pages reserved [ 68.936027][ T4556] netlink: 4 bytes leftover after parsing attributes in process `syz.3.379'. [ 68.943019][ T4552] sit0 speed is unknown, defaulting to 1000 [ 69.090315][ T4566] IPv6: Can't replace route, no match found [ 69.105811][ T4564] batadv1: entered promiscuous mode [ 69.112424][ T4564] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 69.364564][ T4582] SELinux: Context : is not valid (left unmapped). [ 69.372807][ T29] kauditd_printk_skb: 199 callbacks suppressed [ 69.372823][ T29] audit: type=1400 audit(1738089829.295:1284): avc: denied { relabelto } for pid=4581 comm="syz.0.388" name="rdma.current" dev="tmpfs" ino=382 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon=":" [ 69.405707][ T29] audit: type=1400 audit(1738089829.295:1285): avc: denied { associate } for pid=4581 comm="syz.0.388" name="rdma.current" dev="tmpfs" ino=382 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon=":" [ 69.447935][ T29] audit: type=1400 audit(1738089829.355:1286): avc: denied { unlink } for pid=3298 comm="syz-executor" name="rdma.current" dev="tmpfs" ino=382 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon=":" [ 69.482070][ T29] audit: type=1326 audit(1738089829.395:1287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4583 comm="syz.0.389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efcfc77cda9 code=0x7ffc0000 [ 69.484963][ T4584] msdos: Unknown parameter '' [ 69.507022][ T29] audit: type=1326 audit(1738089829.395:1288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4583 comm="syz.0.389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efcfc77cda9 code=0x7ffc0000 [ 69.540018][ T29] audit: type=1326 audit(1738089829.395:1289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4583 comm="syz.0.389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=197 compat=0 ip=0x7efcfc77cda9 code=0x7ffc0000 [ 69.566630][ T29] audit: type=1326 audit(1738089829.395:1290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4583 comm="syz.0.389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efcfc77cda9 code=0x7ffc0000 [ 69.592476][ T29] audit: type=1326 audit(1738089829.395:1291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4583 comm="syz.0.389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efcfc77cda9 code=0x7ffc0000 [ 69.627345][ T29] audit: type=1326 audit(1738089829.395:1292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4583 comm="syz.0.389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7efcfc77cda9 code=0x7ffc0000 [ 69.631305][ T4586] loop2: detected capacity change from 0 to 512 [ 69.651668][ T29] audit: type=1326 audit(1738089829.395:1293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4583 comm="syz.0.389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efcfc77cda9 code=0x7ffc0000 [ 69.668313][ T4586] EXT4-fs: Ignoring removed i_version option [ 69.688052][ T4586] EXT4-fs: Ignoring removed mblk_io_submit option [ 69.701045][ T4586] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 69.715876][ T4586] EXT4-fs (loop2): 1 truncate cleaned up [ 69.721869][ T4586] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 69.754423][ T3300] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.906844][ T4601] netlink: 256 bytes leftover after parsing attributes in process `syz.2.395'. [ 69.916495][ T4601] netlink: 72 bytes leftover after parsing attributes in process `syz.2.395'. [ 70.176544][ T4605] loop3: detected capacity change from 0 to 128 [ 70.234496][ T4605] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 70.366458][ T4605] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 70.414638][ T4613] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 70.436725][ T4611] loop2: detected capacity change from 0 to 8192 [ 70.530654][ T4617] loop4: detected capacity change from 0 to 512 [ 70.569489][ T4617] EXT4-fs error (device loop4): ext4_orphan_get:1389: inode #15: comm syz.4.401: casefold flag without casefold feature [ 70.767475][ T4617] EXT4-fs error (device loop4): ext4_orphan_get:1394: comm syz.4.401: couldn't read orphan inode 15 (err -117) [ 70.784555][ T4617] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 70.805464][ T4627] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 70.851112][ T4630] xt_hashlimit: max too large, truncated to 1048576 [ 70.859316][ T4630] Cannot find set identified by id 0 to match [ 70.869922][ T4630] rdma_rxe: rxe_newlink: failed to add sit0 [ 70.911239][ T4631] batadv1: entered promiscuous mode [ 70.918700][ T4631] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 71.003447][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.223621][ T4635] netlink: 4 bytes leftover after parsing attributes in process `syz.0.408'. [ 71.272674][ T4635] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 71.280570][ T4635] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 71.288769][ T4635] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 71.296491][ T4635] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 71.320447][ T4641] loop4: detected capacity change from 0 to 512 [ 71.329325][ T4643] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 71.340705][ T4641] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.407: bg 0: block 248: padding at end of block bitmap is not set [ 71.357186][ T4641] EXT4-fs error (device loop4): ext4_acquire_dquot:6927: comm syz.4.407: Failed to acquire dquot type 1 [ 71.371700][ T4641] EXT4-fs (loop4): 1 truncate cleaned up [ 71.378648][ T4641] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 71.393602][ T4641] ext4 filesystem being mounted at /69/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 71.416333][ T4641] syz.4.407 (4641) used greatest stack depth: 9280 bytes left [ 71.426254][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.457413][ T4654] loop4: detected capacity change from 0 to 128 [ 71.467728][ T4654] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 71.486680][ T4654] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 71.562047][ T4662] netlink: 4 bytes leftover after parsing attributes in process `syz.1.418'. [ 71.570460][ T4660] vhci_hcd: default hub control req: 0401 v0018 i0007 l0 [ 71.636250][ T4667] loop1: detected capacity change from 0 to 128 [ 71.648549][ T4667] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 71.659272][ T4670] syz.4.417 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 71.669626][ T4667] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 71.682839][ T4664] loop2: detected capacity change from 0 to 8192 [ 71.749786][ T4674] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 71.813734][ T4679] loop1: detected capacity change from 0 to 1024 [ 71.832398][ T4679] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 71.853030][ T4679] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 71.861970][ T4679] EXT4-fs (loop1): stripe (157) is not aligned with cluster size (16), stripe is disabled [ 71.873193][ T4679] EXT4-fs (loop1): changing journal_checksum during remount not supported; ignoring [ 71.883648][ T4679] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 71.901087][ T4679] IPv6: Can't replace route, no match found [ 71.951293][ T3299] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.009407][ T4688] FAULT_INJECTION: forcing a failure. [ 72.009407][ T4688] name failslab, interval 1, probability 0, space 0, times 0 [ 72.023394][ T4688] CPU: 1 UID: 0 PID: 4688 Comm: syz.0.427 Not tainted 6.13.0-syzkaller-09030-g6d61a53dd6f5 #0 [ 72.023420][ T4688] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 72.023434][ T4688] Call Trace: [ 72.023478][ T4688] [ 72.023486][ T4688] dump_stack_lvl+0xf2/0x150 [ 72.023520][ T4688] dump_stack+0x15/0x1a [ 72.023547][ T4688] should_fail_ex+0x24a/0x260 [ 72.023583][ T4688] should_failslab+0x8f/0xb0 [ 72.023654][ T4688] __kmalloc_noprof+0xab/0x3f0 [ 72.023694][ T4688] ? copy_splice_read+0xb5/0x5b0 [ 72.023739][ T4688] copy_splice_read+0xb5/0x5b0 [ 72.023765][ T4688] ? __kmalloc_noprof+0x284/0x3f0 [ 72.023873][ T4688] ? alloc_pipe_info+0x1cb/0x360 [ 72.023900][ T4688] ? __pfx_shmem_file_splice_read+0x10/0x10 [ 72.023922][ T4688] splice_direct_to_actor+0x28b/0x670 [ 72.023950][ T4688] ? __pfx_direct_splice_actor+0x10/0x10 [ 72.023982][ T4688] do_splice_direct+0xd7/0x150 [ 72.024133][ T4688] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 72.024224][ T4688] do_sendfile+0x398/0x660 [ 72.024267][ T4688] __x64_sys_sendfile64+0x110/0x150 [ 72.024342][ T4688] x64_sys_call+0xfbd/0x2dc0 [ 72.024375][ T4688] do_syscall_64+0xc9/0x1c0 [ 72.024480][ T4688] ? clear_bhb_loop+0x55/0xb0 [ 72.024584][ T4688] ? clear_bhb_loop+0x55/0xb0 [ 72.024617][ T4688] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 72.024644][ T4688] RIP: 0033:0x7efcfc77cda9 [ 72.024660][ T4688] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 72.024710][ T4688] RSP: 002b:00007efcfadc6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 72.024733][ T4688] RAX: ffffffffffffffda RBX: 00007efcfc996080 RCX: 00007efcfc77cda9 [ 72.024748][ T4688] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000004 [ 72.024769][ T4688] RBP: 00007efcfadc6090 R08: 0000000000000000 R09: 0000000000000000 [ 72.024812][ T4688] R10: 0000000080000000 R11: 0000000000000246 R12: 0000000000000001 [ 72.024827][ T4688] R13: 0000000000000000 R14: 00007efcfc996080 R15: 00007ffc4c0c8208 [ 72.024847][ T4688] [ 72.306300][ T4691] vhci_hcd: default hub control req: 0000 v0000 i0000 l0 [ 72.454545][ T4702] xt_hashlimit: max too large, truncated to 1048576 [ 72.464387][ T4702] rdma_rxe: rxe_newlink: failed to add sit0 [ 72.504555][ T4707] loop2: detected capacity change from 0 to 128 [ 72.513612][ T4707] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 72.529502][ T4707] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 72.538444][ T4709] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 72.589825][ T4714] netlink: 12 bytes leftover after parsing attributes in process `syz.2.438'. [ 73.296687][ T4726] loop3: detected capacity change from 0 to 8192 [ 73.386611][ T4735] syz.3.442: attempt to access beyond end of device [ 73.386611][ T4735] loop3: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 73.413870][ T4731] loop4: detected capacity change from 0 to 2048 [ 73.425234][ T4735] FAT-fs (loop3): error, invalid access to FAT (entry 0x0000e1b1) [ 73.434181][ T4735] FAT-fs (loop3): Filesystem has been set read-only [ 73.442781][ T4735] FAT-fs (loop3): error, invalid access to FAT (entry 0x0000e1b1) [ 73.452566][ T4735] FAT-fs (loop3): error, invalid access to FAT (entry 0x0000e1b1) [ 73.483485][ T4731] Alternate GPT is invalid, using primary GPT. [ 73.492036][ T4731] loop4: p2 p3 p7 [ 73.575924][ T4742] 9pnet_fd: Insufficient options for proto=fd [ 73.578146][ T3931] udevd[3931]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 73.600694][ T3468] udevd[3468]: inotify_add_watch(7, /dev/loop4p7, 10) failed: No such file or directory [ 73.616610][ T3292] udevd[3292]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 73.637779][ T4744] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 73.649693][ T4746] netlink: 12 bytes leftover after parsing attributes in process `syz.0.449'. [ 73.659027][ T4739] loop2: detected capacity change from 0 to 8192 [ 73.673218][ T3468] udevd[3468]: inotify_add_watch(7, /dev/loop4p7, 10) failed: No such file or directory [ 73.675844][ T3292] udevd[3292]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 73.685807][ T3931] udevd[3931]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 73.726977][ T4748] loop4: detected capacity change from 0 to 512 [ 73.744333][ T4750] program syz.0.451 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 73.767776][ T4748] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.450: bg 0: block 248: padding at end of block bitmap is not set [ 73.784119][ T4748] EXT4-fs error (device loop4): ext4_acquire_dquot:6927: comm syz.4.450: Failed to acquire dquot type 1 [ 73.801420][ T4748] EXT4-fs (loop4): 1 truncate cleaned up [ 73.812499][ T4748] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.826351][ T4748] ext4 filesystem being mounted at /75/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 73.918975][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.075848][ T4765] netlink: 132 bytes leftover after parsing attributes in process `syz.1.455'. [ 74.141925][ T4769] dccp_invalid_packet: P.Data Offset(0) too small [ 74.328297][ T4772] loop3: detected capacity change from 0 to 8192 [ 74.355635][ T4775] loop4: detected capacity change from 0 to 8192 [ 74.557100][ T4784] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 74.638552][ T4789] netlink: 12 bytes leftover after parsing attributes in process `syz.2.461'. [ 74.717483][ T4791] loop2: detected capacity change from 0 to 512 [ 74.745078][ T4791] EXT4-fs error (device loop2): ext4_orphan_get:1389: inode #15: comm syz.2.462: casefold flag without casefold feature [ 74.760422][ T4791] EXT4-fs error (device loop2): ext4_orphan_get:1394: comm syz.2.462: couldn't read orphan inode 15 (err -117) [ 74.794585][ T4791] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.858300][ T3300] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.939746][ T4797] xt_hashlimit: max too large, truncated to 1048576 [ 74.949256][ T4797] Cannot find set identified by id 0 to match [ 74.964382][ T29] kauditd_printk_skb: 291 callbacks suppressed [ 74.964399][ T29] audit: type=1326 audit(1738089834.875:1581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4794 comm="syz.0.464" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efcfc77cda9 code=0x7ffc0000 [ 74.996524][ T4798] FAULT_INJECTION: forcing a failure. [ 74.996524][ T4798] name failslab, interval 1, probability 0, space 0, times 0 [ 75.001811][ T29] audit: type=1326 audit(1738089834.895:1582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4794 comm="syz.0.464" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7efcfc77cda9 code=0x7ffc0000 [ 75.009806][ T4798] CPU: 1 UID: 0 PID: 4798 Comm: syz.0.464 Not tainted 6.13.0-syzkaller-09030-g6d61a53dd6f5 #0 [ 75.009839][ T4798] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 75.009855][ T4798] Call Trace: [ 75.009873][ T4798] [ 75.009883][ T4798] dump_stack_lvl+0xf2/0x150 [ 75.009939][ T4798] dump_stack+0x15/0x1a [ 75.009966][ T4798] should_fail_ex+0x24a/0x260 [ 75.010066][ T4798] should_failslab+0x8f/0xb0 [ 75.010097][ T4798] __kmalloc_node_track_caller_noprof+0xa8/0x410 [ 75.010177][ T4798] ? sidtab_sid2str_get+0xb8/0x140 [ 75.010207][ T4798] kmemdup_noprof+0x2a/0x60 [ 75.010236][ T4798] sidtab_sid2str_get+0xb8/0x140 [ 75.010264][ T4798] security_sid_to_context_core+0x1eb/0x2f0 [ 75.010302][ T4798] security_sid_to_context+0x27/0x30 [ 75.010387][ T4798] selinux_lsmprop_to_secctx+0x68/0xf0 [ 75.010417][ T4798] security_lsmprop_to_secctx+0x40/0x80 [ 75.010454][ T4798] audit_log_task_context+0x76/0x180 [ 75.010510][ T4798] audit_log_task+0xf9/0x1c0 [ 75.010546][ T4798] audit_seccomp+0x68/0x130 [ 75.010581][ T4798] __seccomp_filter+0x6fa/0x1180 [ 75.010608][ T4798] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 75.010704][ T4798] ? vfs_write+0x644/0x920 [ 75.010730][ T4798] ? putname+0xcf/0xf0 [ 75.010791][ T4798] __secure_computing+0x9f/0x1c0 [ 75.010846][ T4798] syscall_trace_enter+0xd1/0x1f0 [ 75.010881][ T4798] ? fpregs_assert_state_consistent+0x83/0xa0 [ 75.010928][ T4798] do_syscall_64+0xaa/0x1c0 [ 75.011022][ T4798] ? clear_bhb_loop+0x55/0xb0 [ 75.011055][ T4798] ? clear_bhb_loop+0x55/0xb0 [ 75.011138][ T4798] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.011170][ T4798] RIP: 0033:0x7efcfc77cda9 [ 75.011190][ T4798] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 75.011212][ T4798] RSP: 002b:00007efcfadc6038 EFLAGS: 00000246 ORIG_RAX: 00000000000000c6 [ 75.011245][ T4798] RAX: ffffffffffffffda RBX: 00007efcfc996080 RCX: 00007efcfc77cda9 [ 75.011260][ T4798] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 00000000200000c0 [ 75.011275][ T4798] RBP: 00007efcfadc6090 R08: 0000000000000000 R09: 0000000000000000 [ 75.011290][ T4798] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 75.011305][ T4798] R13: 0000000000000000 R14: 00007efcfc996080 R15: 00007ffc4c0c8208 [ 75.011328][ T4798] [ 75.011340][ T4798] audit: error in audit_log_task_context [ 75.035818][ T29] audit: type=1326 audit(1738089834.895:1583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4794 comm="syz.0.464" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efcfc77cda9 code=0x7ffc0000 [ 75.295099][ T4797] syz2: rxe_newlink: already configured on sit0 [ 75.297687][ T29] audit: type=1326 audit(1738089834.895:1584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4794 comm="syz.0.464" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7efcfc77cda9 code=0x7ffc0000 [ 75.307970][ T4800] loop1: detected capacity change from 0 to 128 [ 75.328874][ T29] audit: type=1326 audit(1738089834.895:1585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4794 comm="syz.0.464" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efcfc77cda9 code=0x7ffc0000 [ 75.395849][ T29] audit: type=1326 audit(1738089834.895:1586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4794 comm="syz.0.464" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7efcfc77b710 code=0x7ffc0000 [ 75.422415][ T29] audit: type=1326 audit(1738089834.915:1587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4794 comm="syz.0.464" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7efcfc77b85f code=0x7ffc0000 [ 75.450696][ T29] audit: type=1326 audit(1738089834.915:1588): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=4794 comm="syz.0.464" exe="/root/syz-executor" sig=0 arch=c000003e syscall=198 compat=0 ip=0x7efcfc77cda9 code=0x7ffc0000 [ 75.474511][ T29] audit: type=1326 audit(1738089835.045:1589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4794 comm="syz.0.464" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7efcfc77b7bc code=0x7ffc0000 [ 75.485164][ T4800] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 75.620654][ T4800] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 75.842159][ T4817] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35 sclass=netlink_route_socket pid=4817 comm=syz.2.469 [ 75.857480][ T4817] netlink: 28 bytes leftover after parsing attributes in process `syz.2.469'. [ 75.961172][ T4808] loop4: detected capacity change from 0 to 8192 [ 76.004094][ T4827] loop3: detected capacity change from 0 to 1024 [ 76.015212][ T4827] EXT4-fs: Ignoring removed nobh option [ 76.025639][ T4821] loop2: detected capacity change from 0 to 8192 [ 76.033695][ T4827] EXT4-fs (loop3): can't mount with both data=journal and delalloc [ 76.210914][ T4838] xt_hashlimit: max too large, truncated to 1048576 [ 76.232789][ T4838] rdma_rxe: rxe_newlink: failed to add sit0 [ 76.368478][ T4845] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.376107][ T4845] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.415548][ T4845] bridge_slave_0: left allmulticast mode [ 76.422455][ T4845] bridge_slave_0: left promiscuous mode [ 76.429200][ T4845] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.453937][ T4845] bridge_slave_1: left allmulticast mode [ 76.460391][ T4845] bridge_slave_1: left promiscuous mode [ 76.466388][ T4845] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.483777][ T4845] bond0: (slave bond_slave_0): Releasing backup interface [ 76.498439][ T4845] bond0: (slave bond_slave_1): Releasing backup interface [ 76.526283][ T4845] team0: Port device team_slave_0 removed [ 76.546414][ T4845] team0: Port device team_slave_1 removed [ 76.659372][ T4845] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.668954][ T4845] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.679362][ T4845] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.689396][ T4845] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.936459][ T4859] FAULT_INJECTION: forcing a failure. [ 76.936459][ T4859] name failslab, interval 1, probability 0, space 0, times 0 [ 76.950693][ T4859] CPU: 1 UID: 0 PID: 4859 Comm: syz.4.484 Not tainted 6.13.0-syzkaller-09030-g6d61a53dd6f5 #0 [ 76.950722][ T4859] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 76.950733][ T4859] Call Trace: [ 76.950740][ T4859] [ 76.950749][ T4859] dump_stack_lvl+0xf2/0x150 [ 76.950799][ T4859] dump_stack+0x15/0x1a [ 76.950822][ T4859] should_fail_ex+0x24a/0x260 [ 76.950853][ T4859] should_failslab+0x8f/0xb0 [ 76.950876][ T4859] kmem_cache_alloc_noprof+0x52/0x320 [ 76.950916][ T4859] ? mas_alloc_nodes+0x1e3/0x490 [ 76.950956][ T4859] mas_alloc_nodes+0x1e3/0x490 [ 76.950996][ T4859] mas_preallocate+0x44a/0x650 [ 76.951035][ T4859] mmap_region+0x96d/0x1620 [ 76.951070][ T4859] ? __rcu_read_unlock+0x4e/0x70 [ 76.951090][ T4859] ? mntput_no_expire+0x70/0x3d0 [ 76.951129][ T4859] do_mmap+0x98a/0xc30 [ 76.951162][ T4859] vm_mmap_pgoff+0x16d/0x2d0 [ 76.951198][ T4859] ksys_mmap_pgoff+0xd0/0x330 [ 76.951226][ T4859] ? syscall_trace_enter+0x104/0x1f0 [ 76.951247][ T4859] ? fpregs_assert_state_consistent+0x83/0xa0 [ 76.951285][ T4859] x64_sys_call+0x1940/0x2dc0 [ 76.951316][ T4859] do_syscall_64+0xc9/0x1c0 [ 76.951343][ T4859] ? clear_bhb_loop+0x55/0xb0 [ 76.951377][ T4859] ? clear_bhb_loop+0x55/0xb0 [ 76.951410][ T4859] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 76.951442][ T4859] RIP: 0033:0x7f248e7bcda9 [ 76.951458][ T4859] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 76.951479][ T4859] RSP: 002b:00007f248ce27038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 76.951496][ T4859] RAX: ffffffffffffffda RBX: 00007f248e9d5fa0 RCX: 00007f248e7bcda9 [ 76.951510][ T4859] RDX: 0000000000000000 RSI: 0000000000fbe000 RDI: 0000000020000000 [ 76.951524][ T4859] RBP: 00007f248ce27090 R08: ffffffffffffffff R09: 0000000000000000 [ 76.951537][ T4859] R10: 0000000000000031 R11: 0000000000000246 R12: 0000000000000001 [ 76.951547][ T4859] R13: 0000000000000000 R14: 00007f248e9d5fa0 R15: 00007ffdbac52ee8 [ 76.951563][ T4859] [ 77.211766][ T4863] loop3: detected capacity change from 0 to 8192 [ 77.286958][ T4868] loop4: detected capacity change from 0 to 512 [ 77.315762][ T4868] EXT4-fs error (device loop4): ext4_orphan_get:1389: inode #15: comm syz.4.486: casefold flag without casefold feature [ 77.336896][ T4857] netlink: 12 bytes leftover after parsing attributes in process `syz.1.481'. [ 77.391330][ T4879] xt_hashlimit: max too large, truncated to 1048576 [ 77.399767][ T4879] Cannot find set identified by id 0 to match [ 77.407758][ T4879] syz2: rxe_newlink: already configured on sit0 [ 77.419672][ T4868] EXT4-fs error (device loop4): ext4_orphan_get:1394: comm syz.4.486: couldn't read orphan inode 15 (err -117) [ 77.437877][ T4881] program syz.2.490 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 77.479183][ T4868] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 77.516618][ T4883] loop1: detected capacity change from 0 to 128 [ 77.575623][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.599354][ T4883] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 77.638337][ T4883] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 77.854719][ T4899] FAULT_INJECTION: forcing a failure. [ 77.854719][ T4899] name failslab, interval 1, probability 0, space 0, times 0 [ 77.867829][ T4899] CPU: 0 UID: 0 PID: 4899 Comm: syz.2.494 Not tainted 6.13.0-syzkaller-09030-g6d61a53dd6f5 #0 [ 77.867857][ T4899] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 77.867925][ T4899] Call Trace: [ 77.867932][ T4899] [ 77.867941][ T4899] dump_stack_lvl+0xf2/0x150 [ 77.867972][ T4899] dump_stack+0x15/0x1a [ 77.868071][ T4899] should_fail_ex+0x24a/0x260 [ 77.868109][ T4899] should_failslab+0x8f/0xb0 [ 77.868137][ T4899] kmem_cache_alloc_node_noprof+0x59/0x320 [ 77.868178][ T4899] ? dup_task_struct+0x6c/0x710 [ 77.868219][ T4899] dup_task_struct+0x6c/0x710 [ 77.868281][ T4899] copy_process+0x3a9/0x1fb0 [ 77.868310][ T4899] ? percpu_counter_add_batch+0xc6/0x140 [ 77.868343][ T4899] ? _copy_from_user+0x89/0xa0 [ 77.868370][ T4899] kernel_clone+0x167/0x5e0 [ 77.868475][ T4899] __se_sys_clone3+0x1ba/0x200 [ 77.868579][ T4899] __x64_sys_clone3+0x31/0x40 [ 77.868613][ T4899] x64_sys_call+0x2d56/0x2dc0 [ 77.868642][ T4899] do_syscall_64+0xc9/0x1c0 [ 77.868749][ T4899] ? clear_bhb_loop+0x55/0xb0 [ 77.868781][ T4899] ? clear_bhb_loop+0x55/0xb0 [ 77.868812][ T4899] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 77.868842][ T4899] RIP: 0033:0x7f340454cda9 [ 77.868859][ T4899] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 77.868879][ T4899] RSP: 002b:00007f3402bb0f08 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 77.868921][ T4899] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007f340454cda9 [ 77.868935][ T4899] RDX: 00007f3402bb0f20 RSI: 0000000000000058 RDI: 00007f3402bb0f20 [ 77.868948][ T4899] RBP: 00007f3402bb1090 R08: 0000000000000000 R09: 0000000000000058 [ 77.868961][ T4899] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 77.868973][ T4899] R13: 0000000000000000 R14: 00007f3404765fa0 R15: 00007ffc50bc8628 [ 77.868993][ T4899] [ 78.104124][ T4900] loop1: detected capacity change from 0 to 512 [ 78.111564][ T4900] journal_path: Lookup failure for './file0/file0' [ 78.118725][ T4900] EXT4-fs: error: could not find journal device path [ 78.224161][ T4900] netlink: 4 bytes leftover after parsing attributes in process `syz.1.493'. [ 78.320545][ T4914] loop2: detected capacity change from 0 to 764 [ 78.341463][ T4914] Symlink component flag not implemented [ 78.357574][ T4914] Symlink component flag not implemented (129) [ 78.370066][ T4916] xt_hashlimit: max too large, truncated to 1048576 [ 78.378530][ T4914] rock: directory entry would overflow storage [ 78.384734][ T4914] rock: sig=0x4f50, size=4, remaining=3 [ 78.389359][ T4916] Cannot find set identified by id 0 to match [ 78.390581][ T4914] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 78.428171][ T4916] rdma_rxe: rxe_newlink: failed to add sit0 [ 78.494763][ T4922] loop2: detected capacity change from 0 to 128 [ 78.513824][ T4922] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 78.556269][ T4922] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 78.629707][ T4931] program syz.3.506 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 78.640136][ T4935] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35 sclass=netlink_route_socket pid=4935 comm=syz.4.503 [ 78.689372][ T4919] netlink: 28 bytes leftover after parsing attributes in process `syz.4.503'. [ 78.904325][ T4940] loop1: detected capacity change from 0 to 8192 [ 79.007292][ T4970] loop3: detected capacity change from 0 to 764 [ 79.051364][ T4970] Symlink component flag not implemented [ 79.073967][ T4970] Symlink component flag not implemented (129) [ 79.091656][ T4970] rock: directory entry would overflow storage [ 79.098300][ T4970] rock: sig=0x4f50, size=4, remaining=3 [ 79.103916][ T4970] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 79.287494][ T4984] loop2: detected capacity change from 0 to 512 [ 79.331697][ T4984] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 79.562806][ T3300] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.965256][ T29] kauditd_printk_skb: 267 callbacks suppressed [ 79.965270][ T29] audit: type=1326 audit(1738089839.885:1857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4999 comm="syz.1.521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef8647cda9 code=0x7ffc0000 [ 80.052271][ T29] audit: type=1400 audit(1738089839.965:1858): avc: denied { audit_write } for pid=5003 comm="syz.4.522" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 80.074282][ T29] audit: type=1107 audit(1738089839.965:1859): pid=5003 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 80.106322][ T5009] loop3: detected capacity change from 0 to 128 [ 80.133966][ T5009] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 80.164514][ T5016] loop1: detected capacity change from 0 to 128 [ 80.175443][ T5009] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 80.187875][ T29] audit: type=1326 audit(1738089840.015:1860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5005 comm="syz.3.525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47acc5cda9 code=0x7ffc0000 [ 80.195102][ T5016] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 80.213118][ T29] audit: type=1326 audit(1738089840.015:1861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5005 comm="syz.3.525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47acc5cda9 code=0x7ffc0000 [ 80.233981][ T5016] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 80.249620][ T29] audit: type=1326 audit(1738089840.015:1862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5005 comm="syz.3.525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f47acc5cda9 code=0x7ffc0000 [ 80.285294][ T29] audit: type=1326 audit(1738089840.015:1863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5005 comm="syz.3.525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47acc5cda9 code=0x7ffc0000 [ 80.309389][ T29] audit: type=1326 audit(1738089840.015:1864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5005 comm="syz.3.525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47acc5cda9 code=0x7ffc0000 [ 80.332796][ T29] audit: type=1326 audit(1738089840.015:1865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5005 comm="syz.3.525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f47acc5cda9 code=0x7ffc0000 [ 80.356328][ T29] audit: type=1326 audit(1738089840.015:1866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5005 comm="syz.3.525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47acc5cda9 code=0x7ffc0000 [ 80.482297][ T5021] loop2: detected capacity change from 0 to 512 [ 80.485839][ T5023] loop3: detected capacity change from 0 to 512 [ 80.520107][ T5021] EXT4-fs error (device loop2): ext4_orphan_get:1389: inode #15: comm syz.2.530: casefold flag without casefold feature [ 80.543035][ T5023] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 80.557909][ T5021] EXT4-fs error (device loop2): ext4_orphan_get:1394: comm syz.2.530: couldn't read orphan inode 15 (err -117) [ 80.572548][ T5023] ext4 filesystem being mounted at /109/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 80.617226][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.627446][ T5021] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 80.655301][ T3300] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.733908][ T5039] sit0 speed is unknown, defaulting to 1000 [ 80.920237][ T5055] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 80.938752][ T5055] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 81.016861][ T5063] FAULT_INJECTION: forcing a failure. [ 81.016861][ T5063] name failslab, interval 1, probability 0, space 0, times 0 [ 81.030894][ T5063] CPU: 0 UID: 0 PID: 5063 Comm: syz.3.546 Not tainted 6.13.0-syzkaller-09030-g6d61a53dd6f5 #0 [ 81.030985][ T5063] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 81.030999][ T5063] Call Trace: [ 81.031005][ T5063] [ 81.031013][ T5063] dump_stack_lvl+0xf2/0x150 [ 81.031045][ T5063] dump_stack+0x15/0x1a [ 81.031069][ T5063] should_fail_ex+0x24a/0x260 [ 81.031137][ T5063] should_failslab+0x8f/0xb0 [ 81.031165][ T5063] kmem_cache_alloc_noprof+0x52/0x320 [ 81.031201][ T5063] ? skb_clone+0x154/0x1f0 [ 81.031223][ T5063] skb_clone+0x154/0x1f0 [ 81.031244][ T5063] __netlink_deliver_tap+0x2bd/0x4f0 [ 81.031366][ T5063] netlink_unicast+0x64a/0x670 [ 81.031407][ T5063] netlink_sendmsg+0x5cc/0x6e0 [ 81.031436][ T5063] ? __pfx_netlink_sendmsg+0x10/0x10 [ 81.031533][ T5063] __sock_sendmsg+0x140/0x180 [ 81.031562][ T5063] ____sys_sendmsg+0x312/0x410 [ 81.031604][ T5063] __sys_sendmsg+0x19d/0x230 [ 81.031639][ T5063] __x64_sys_sendmsg+0x46/0x50 [ 81.031661][ T5063] x64_sys_call+0x2734/0x2dc0 [ 81.031729][ T5063] do_syscall_64+0xc9/0x1c0 [ 81.031762][ T5063] ? clear_bhb_loop+0x55/0xb0 [ 81.031855][ T5063] ? clear_bhb_loop+0x55/0xb0 [ 81.031885][ T5063] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 81.031914][ T5063] RIP: 0033:0x7f47acc5cda9 [ 81.031932][ T5063] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 81.031971][ T5063] RSP: 002b:00007f47ab2c7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 81.031993][ T5063] RAX: ffffffffffffffda RBX: 00007f47ace75fa0 RCX: 00007f47acc5cda9 [ 81.032007][ T5063] RDX: 0000000000000000 RSI: 00000000200004c0 RDI: 0000000000000003 [ 81.032021][ T5063] RBP: 00007f47ab2c7090 R08: 0000000000000000 R09: 0000000000000000 [ 81.032034][ T5063] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 81.032046][ T5063] R13: 0000000000000000 R14: 00007f47ace75fa0 R15: 00007ffd576c9068 [ 81.032067][ T5063] [ 81.068092][ T5064] loop1: detected capacity change from 0 to 8192 [ 81.138850][ T5066] xt_hashlimit: max too large, truncated to 1048576 [ 81.238027][ T5064] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 81.252973][ T5070] rdma_rxe: rxe_newlink: failed to add sit0 [ 81.275835][ T5066] Cannot find set identified by id 0 to match [ 81.337308][ T5075] syz.1.545: attempt to access beyond end of device [ 81.337308][ T5075] loop1: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 81.353287][ T5077] tmpfs: Unknown parameter 'ÿÿÿÿ' [ 81.374366][ T5079] FAULT_INJECTION: forcing a failure. [ 81.374366][ T5079] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 81.387560][ T5079] CPU: 1 UID: 0 PID: 5079 Comm: syz.4.552 Not tainted 6.13.0-syzkaller-09030-g6d61a53dd6f5 #0 [ 81.387596][ T5079] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 81.387611][ T5079] Call Trace: [ 81.387618][ T5079] [ 81.387626][ T5079] dump_stack_lvl+0xf2/0x150 [ 81.387708][ T5079] dump_stack+0x15/0x1a [ 81.387733][ T5079] should_fail_ex+0x24a/0x260 [ 81.387773][ T5079] should_fail+0xb/0x10 [ 81.387800][ T5079] should_fail_usercopy+0x1a/0x20 [ 81.387883][ T5079] _copy_from_user+0x1c/0xa0 [ 81.387907][ T5079] get_user_ifreq+0x8c/0x160 [ 81.387935][ T5075] FAT-fs (loop1): error, invalid access to FAT (entry 0x0000e1b1) [ 81.387934][ T5079] sock_do_ioctl+0xc6/0x260 [ 81.387997][ T5079] sock_ioctl+0x40f/0x600 [ 81.388027][ T5079] ? __pfx_sock_ioctl+0x10/0x10 [ 81.388057][ T5079] __se_sys_ioctl+0xc9/0x140 [ 81.388084][ T5079] __x64_sys_ioctl+0x43/0x50 [ 81.388109][ T5079] x64_sys_call+0x1690/0x2dc0 [ 81.388261][ T5079] do_syscall_64+0xc9/0x1c0 [ 81.388297][ T5079] ? clear_bhb_loop+0x55/0xb0 [ 81.388329][ T5079] ? clear_bhb_loop+0x55/0xb0 [ 81.388362][ T5079] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 81.388395][ T5079] RIP: 0033:0x7f248e7bcda9 [ 81.388452][ T5079] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 81.388474][ T5079] RSP: 002b:00007f248ce27038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 81.388520][ T5079] RAX: ffffffffffffffda RBX: 00007f248e9d5fa0 RCX: 00007f248e7bcda9 [ 81.388535][ T5079] RDX: 00000000200000c0 RSI: 0000000000008946 RDI: 0000000000000008 [ 81.388549][ T5079] RBP: 00007f248ce27090 R08: 0000000000000000 R09: 0000000000000000 [ 81.388571][ T5079] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 81.388586][ T5079] R13: 0000000000000000 R14: 00007f248e9d5fa0 R15: 00007ffdbac52ee8 [ 81.388608][ T5079] [ 81.583810][ T5075] FAT-fs (loop1): Filesystem has been set read-only [ 81.591459][ T5075] FAT-fs (loop1): error, invalid access to FAT (entry 0x0000e1b1) [ 81.600198][ T5075] FAT-fs (loop1): error, invalid access to FAT (entry 0x0000e1b1) [ 81.760639][ T5086] loop3: detected capacity change from 0 to 8192 [ 81.768365][ T5090] sit0 speed is unknown, defaulting to 1000 [ 81.927080][ T5089] loop2: detected capacity change from 0 to 8192 [ 81.968378][ T5086] ================================================================== [ 81.976741][ T5086] BUG: KCSAN: data-race in mark_buffer_dirty_inode / sync_mapping_buffers [ 81.985397][ T5086] [ 81.987955][ T5086] write to 0xffff88810652a1f8 of 8 bytes by task 5095 on cpu 0: [ 81.995733][ T5086] sync_mapping_buffers+0x159/0x7c0 [ 82.000997][ T5086] fat_file_fsync+0xa7/0x100 [ 82.005817][ T5086] vfs_fsync_range+0x116/0x130 [ 82.010689][ T5086] generic_file_write_iter+0x1c3/0x310 [ 82.016168][ T5086] iter_file_splice_write+0x5f1/0x980 [ 82.021742][ T5086] direct_splice_actor+0x160/0x2c0 [ 82.027150][ T5086] splice_direct_to_actor+0x302/0x670 [ 82.032724][ T5086] do_splice_direct+0xd7/0x150 [ 82.037607][ T5086] do_sendfile+0x398/0x660 [ 82.042411][ T5086] __x64_sys_sendfile64+0x110/0x150 [ 82.047910][ T5086] x64_sys_call+0xfbd/0x2dc0 [ 82.052712][ T5086] do_syscall_64+0xc9/0x1c0 [ 82.057358][ T5086] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 82.063291][ T5086] [ 82.065644][ T5086] read to 0xffff88810652a1f8 of 8 bytes by task 5086 on cpu 1: [ 82.073483][ T5086] mark_buffer_dirty_inode+0x96/0x1c0 [ 82.078870][ T5086] fat_mirror_bhs+0x241/0x330 [ 82.083743][ T5086] fat_ent_write+0xcc/0xe0 [ 82.088292][ T5086] fat_chain_add+0x15f/0x400 [ 82.093193][ T5086] fat_get_block+0x46b/0x5e0 [ 82.097813][ T5086] __block_write_begin_int+0x417/0xfa0 [ 82.103660][ T5086] cont_write_begin+0x546/0x860 [ 82.109079][ T5086] fat_write_begin+0x51/0xe0 [ 82.114273][ T5086] cont_write_begin+0x18b/0x860 [ 82.119589][ T5086] fat_write_begin+0x51/0xe0 [ 82.124834][ T5086] generic_cont_expand_simple+0xaa/0x150 [ 82.130511][ T5086] fat_cont_expand+0x3a/0x160 [ 82.135630][ T5086] fat_fallocate+0x17c/0x1d0 [ 82.140342][ T5086] vfs_fallocate+0x368/0x3b0 [ 82.145131][ T5086] __x64_sys_fallocate+0x78/0xc0 [ 82.150105][ T5086] x64_sys_call+0x43c/0x2dc0 [ 82.154822][ T5086] do_syscall_64+0xc9/0x1c0 [ 82.159446][ T5086] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 82.165381][ T5086] [ 82.167741][ T5086] value changed: 0xffff8881169a7208 -> 0x0000000000000000 [ 82.174939][ T5086] [ 82.177355][ T5086] Reported by Kernel Concurrency Sanitizer on: [ 82.183598][ T5086] CPU: 1 UID: 0 PID: 5086 Comm: syz.3.555 Not tainted 6.13.0-syzkaller-09030-g6d61a53dd6f5 #0 [ 82.194213][ T5086] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 82.204565][ T5086] ==================================================================